diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
index 31fd088d324..189428c47fe 100644
--- a/.github/CONTRIBUTING.md
+++ b/.github/CONTRIBUTING.md
@@ -56,17 +56,15 @@ CI enforces this for `src/preload/` and `src/shared/` — see `docs/preload-type
 
 ## Pull Requests
 
-Each pull request should:
+Each pull request should follow [`.github/pull_request_template.md`](./pull_request_template.md). In particular:
 
-- explain the user-visible change
-- stay focused on a single topic when possible
-- include screenshots or screen recordings for new UI or behavior changes
+- open with an ELI5 of the change (plain language paragraph; the PR title is the one-liner)
+- explain what changed and why, and stay focused on a single topic when possible
+- for any UI or interaction change, attach **before and after** screenshots (or short videos); if there is no visual change, say `No visual change` and why
 - include high-quality tests when behavior changes or bug fixes warrant them
 - include a brief code review summary from your AI coding agent that explicitly checks cross-platform compatibility, SSH/remote/local compatibility, supported agent and integration compatibility, performance risk, UI quality when applicable, and basic security risk
 - mention any platform-specific, remote/SSH-specific, agent-specific, integration-specific, or git-provider-specific behavior and testing notes
-- **Include your X (Twitter) handle!** We love giving shoutouts to our contributors when we merge features on [@orca_build](https://x.com/orca_build).
-
-If there is no visual change, say that explicitly in the PR description.
+- **Include your X (Twitter) handle** in the PR template Author section — we shout out contributors when we merge features on [@orca_build](https://x.com/orca_build).
 
 ## Release Process
 
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index b69e2dcc233..21f7fa08eb8 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -1,29 +1,52 @@
-## Summary
+## ELI5
 
-Describe the user-visible change.
+<!-- Simple high-level explanation -->
 
-## Screenshots
+## What Changed
 
-- Add screenshots or a screen recording for any new or changed UI behavior.
-- If there is no visual change, say `No visual change`.
+<!-- Describe the change clearly and keep scope tight. -->
+
+## Why
+
+<!-- What problem does this solve, and why is this approach right? -->
+
+## Linked Issue
+
+<!-- Link the issue this PR addresses, there should ALWAYS be one -->
+
+Fixes #
+
+## Visual Proof
+<!-- REQUIRED for UI / behavior changes. Please attach a BEFORE and AFTER that can easily tabbed/switched. Use videos for when appropriate over screenshots -->
+<!-- If there is truly no visual or interaction change, write exactly: `N/A` and briefly say why. -->
+<!-- For attachments NEVER add directly to the PR files (do not commit to files), use `gh image` extension or drag + drop (works for any attachment) -->
 
 ## Testing
 
-- [ ] `pnpm lint`
-- [ ] `pnpm typecheck`
-- [ ] `pnpm test`
-- [ ] `pnpm build`
-- [ ] Added or updated high-quality tests that would catch regressions, or explained why tests were not needed
+<!-- How did you verify this? Steps a reviewer can follow. Which platforms did you actually test (macOS / Linux / Windows / SSH)? -->
 
-## AI Review Report
+- [ ] I manually tested these changes locally
+- [ ] Automated tests added/updated, or explained why not below
 
-Summarize the code review you ran with your AI coding agent. Include the main risks it checked, what it flagged, and what you changed or verified as a result.
-Confirm that the review explicitly checked cross-platform compatibility for macOS, Linux, and Windows, including shortcuts, labels, paths, shell behavior, and any Electron-specific platform differences touched by this PR.
 
-## Security Audit
+## AI Disclosure
+<!-- DO NOT FILL IN IF YOU ARE STABLYAI TEAM MEMBER (INTERNAL CONTRIBUTOR), IGNORE SECTION: -->
+<!-- Which AI model if anyone was used, please state the details -->
 
-Provide a basic security audit summary from your AI coding agent. Call out any input handling, command execution, path handling, auth, secrets, dependency, or IPC risks that were reviewed, plus any follow-up needed.
+## Review
 
-## Notes
+Ensure no issues in: Security, Cross-platoform support (Linux, Windows, Mac), Remote SSH, Mobile, general backwards compatibility, performance
 
-Call out any platform-specific behavior, risks, or follow-up work.
+## Checklist
+
+- [ ] This PR is small and focused
+- [ ] I explained what changed and why (including ELI5)
+- [ ] Before/after screenshots or videos attached for UI changes, or `N/A` with reason
+- [ ] Self-reviewed for correctness, security, and performance
+- [ ] Cross-platform, SSH/remote, and path/shortcut impact considered (or N/A)
+- [ ] `pnpm lint`, `pnpm typecheck`, `pnpm test`, and `pnpm build` pass (or CI will cover; local preferred)
+
+## Author
+
+- X / Twitter: @your_handle
+  <!-- Optional but appreciated -->
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 5455d0b7fb8..9838baf4afd 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -126,7 +126,7 @@ jobs:
       # scripts still need the Linux toolchain even though this shard reuses
       # the prebuilt Electron output.
       - name: Install native build tools
-        run: sudo apt-get update && sudo apt-get install -y build-essential python3
+        run: sudo apt-get update && sudo apt-get install -y build-essential python3 zsh
 
       # Why: Electron on Linux needs an X display even when the app
       # suppresses mainWindow.show() via ORCA_E2E_HEADLESS. xvfb provides a
@@ -174,7 +174,7 @@ jobs:
       # ORCA_E2E_FORWARD_APP_LOGS keeps startup failures visible when Electron
       # launches but never creates a BrowserWindow.
       - name: Run E2E tests (${{ matrix.shard_name }})
-        run: xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e --shard=${{ matrix.shard }}
+        run: xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 ORCA_E2E_WEB_CLIENT=1 pnpm run test:e2e --shard=${{ matrix.shard }}
 
       # Why: Playwright retains traces/screenshots only on failure. Uploading
       # them as an artifact makes post-mortem debugging on CI possible without
@@ -202,7 +202,7 @@ jobs:
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Install native build and headless UI tools
-        run: sudo apt-get update && sudo apt-get install -y build-essential python3 xvfb
+        run: sudo apt-get update && sudo apt-get install -y build-essential python3 xvfb zsh
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
@@ -232,8 +232,15 @@ jobs:
         env:
           TEST_FILES_JSON: ${{ inputs.test_files }}
         run: |
-          mapfile -t TEST_FILES < <(jq -r '.[]' <<<"$TEST_FILES_JSON")
-          xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 \
+          mapfile -t TEST_FILES < <(jq -r '.[] | select(
+            . != "tests/e2e/ssh-startup-exec-readiness.spec.ts" and
+            . != "tests/e2e/paired-startup-exec-readiness.spec.ts"
+          )' <<<"$TEST_FILES_JSON")
+          if [ "${#TEST_FILES[@]}" -eq 0 ]; then
+            echo "Changed startup-readiness specs are owned by the dedicated live lane."
+            exit 0
+          fi
+          xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 ORCA_E2E_WEB_CLIENT=1 \
             pnpm run test:e2e "${TEST_FILES[@]}" --workers=1
 
       - name: Upload Playwright traces
@@ -248,10 +255,13 @@ jobs:
   ssh-docker-watcher-isolation:
     name: ssh docker watcher isolation
     needs: build
-    if: inputs.test_files == ''
+    if: >-
+      inputs.test_files == '' ||
+      contains(inputs.test_files, 'tests/e2e/ssh-startup-exec-readiness.spec.ts') ||
+      contains(inputs.test_files, 'tests/e2e/paired-startup-exec-readiness.spec.ts')
     runs-on: ubuntu-latest
-    # Why 35: the terminal parking + retention specs below add two more
-    # docker-rig tests capped at 240s each on top of the watcher isolation pair.
+    # Why 35: the parking, retention, startup-exec, and paired parity specs run
+    # serially on isolated Electron/SSH fixtures after watcher isolation.
     timeout-minutes: 35
 
     steps:
@@ -261,7 +271,7 @@ jobs:
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Install native build and headless UI tools
-        run: sudo apt-get update && sudo apt-get install -y build-essential openssh-client python3 xvfb
+        run: sudo apt-get update && sudo apt-get install -y build-essential openssh-client python3 xvfb zsh
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
@@ -295,10 +305,9 @@ jobs:
       - name: Run Docker SSH watcher isolation E2E
         run: xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:ssh-docker-watcher-isolation
 
-      # Why always(): these specs gate the C1 terminal parking/retention budget
-      # over a real SSH host and run in no other lane, so a watcher-isolation
-      # failure above must not silently skip them.
-      - name: Run Docker SSH terminal parking + retention E2E
+      # Why always(): this lane gates SSH parking/retention plus startup-exec
+      # readiness across live SSH, headed paired, and headless serve topologies.
+      - name: Run Docker SSH terminal parking + startup readiness E2E
         if: always()
         run: xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:ssh-docker-terminal-parking
 
diff --git a/.github/workflows/golden-e2e-experiment.yml b/.github/workflows/golden-e2e-experiment.yml
index 89c1c86096f..5a2562bf2ba 100644
--- a/.github/workflows/golden-e2e-experiment.yml
+++ b/.github/workflows/golden-e2e-experiment.yml
@@ -23,10 +23,9 @@ jobs:
             platform: linux
           - os: macos-15
             platform: mac
-          # Why: Windows golden E2E is temporarily disabled on CI while its
-          # flaky runner-only failures are investigated.
-          # - os: windows-latest
-          #   platform: windows
+          # Match the release gate: Windows runs the fresh-startup golden only.
+          - os: windows-2022
+            platform: windows
 
     steps:
       - name: Checkout
@@ -67,12 +66,22 @@ jobs:
         run: |
           xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e -- tests/e2e/golden-core-flows.spec.ts
           xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+          xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:posix-profile-index-golden
 
       - name: Run golden E2E tests on macOS
         if: runner.os == 'macOS'
         run: |
           env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e -- tests/e2e/golden-core-flows.spec.ts
           env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+          env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:posix-profile-index-golden
+
+      - name: Run golden E2E tests on Windows
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          $env:SKIP_BUILD = '1'
+          $env:ORCA_E2E_FORWARD_APP_LOGS = '1'
+          pnpm run test:e2e:windows-fresh-startup-golden
 
       - name: Upload Playwright traces
         if: failure()
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index d10463173dd..0c1789bf3ea 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -176,6 +176,12 @@ jobs:
   shell_contracts:
     name: shell contracts
     runs-on: ubuntu-latest
+    env:
+      # Why: the suites below gate their live fish tests on the binary, which is
+      # right on a developer machine and wrong here — this job is a required check
+      # and its fish lane is the only end-to-end guard for #9993, so a skip would
+      # report green with nothing exercised. Turns those skips into failures.
+      ORCA_REQUIRE_FISH: '1'
 
     steps:
       - name: Checkout
@@ -186,8 +192,46 @@ jobs:
       # Why fish: shell-ready.test.ts gates its live fish test on the binary being
       # present, so without this the fish barrier is only covered by config-shape
       # assertions and never actually exercised.
+      # Why release-4: DECSET 2031 arming lives in the fish 4.0 Rust tty_handoff, and
+      # fish-color-scheme-child-stdin.node-pty.test.ts (#9993) needs it. Noble ships
+      # 3.7, so the PPA is what makes that lane real.
       - name: Install zsh and fish
-        run: sudo apt-get update && sudo apt-get install -y zsh fish
+        run: |
+          # Why the update/PPA/fish steps are tolerant: a repo the runner image already
+          # ships can lack a Release file for this suite, and a failed add-apt-repository
+          # still leaves its list entry behind — either makes `apt-get update` exit
+          # non-zero and would red this required check over something unrelated to the
+          # PR. Every fish outcome is judged by the version gate below instead, so only
+          # the zsh install (which has no such gate) stays fatal here.
+          sudo apt-get update || true
+          # Why retry only here: adding the PPA is the network-flaky step, and the
+          # version gate below is fatal, so a transient Launchpad blip would
+          # otherwise red a required check on PRs unrelated to shells.
+          for attempt in 1 2 3; do
+            sudo add-apt-repository -y ppa:fish-shell/release-4 && break
+            echo "add-apt-repository attempt ${attempt} failed; retrying" >&2
+            sudo add-apt-repository -y -r ppa:fish-shell/release-4 || true
+            sleep 5
+          done
+          sudo apt-get update || true
+          # Why both shells on one line: pr-workflow-parallelism.test.mjs parses only the
+          # first install command in this step to prove the lane really installs them.
+          sudo apt-get install -y zsh fish
+
+      # Separate from the install so the failure names the contract, not an apt error.
+      # ORCA_REQUIRE_FISH re-checks this at test time; this step just fails in seconds
+      # instead of after a full dependency install.
+      - name: Require fish 4+
+        run: |
+          version="$(fish --version 2>/dev/null || true)"
+          major="${version##*version }"
+          major="${major%%.*}"
+          case "$major" in '' | *[!0-9]*) major=0 ;; esac
+          echo "${version:-<fish not installed>}"
+          if [ "$major" -lt 4 ]; then
+            echo "::error::shell contracts needs fish 4+ (DECSET 2031 arming, #9993) but got '${version:-none}'. Fix the ppa:fish-shell/release-4 install rather than letting the fish lane skip." >&2
+            exit 1
+          fi
 
       - uses: ./.github/actions/install-node-dependencies
         with:
@@ -195,12 +239,14 @@ jobs:
 
       - name: Test real shell contracts
         run: |
-          pnpm exec vitest run --config config/vitest.config.ts \
+          pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1 \
+            src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts \
             src/main/daemon/shell-ready.test.ts \
             src/main/daemon/node-pty-fd-leak.test.ts \
             src/main/providers/local-pty-shell-ready.test.ts \
             src/main/providers/__tests__/shell-ready-framework-example.test.ts \
             src/main/pty/omp-shell-wrapper.node-pty.test.ts \
+            src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts \
             src/shared/posix-command-path-lookup.test.ts
 
   test:
@@ -230,11 +276,13 @@ jobs:
       - name: Test shard
         run: |
           pnpm exec vitest run --config config/vitest.config.ts \
+            --exclude=src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts \
             --exclude=src/main/daemon/shell-ready.test.ts \
             --exclude=src/main/daemon/node-pty-fd-leak.test.ts \
             --exclude=src/main/providers/local-pty-shell-ready.test.ts \
             --exclude=src/main/providers/__tests__/shell-ready-framework-example.test.ts \
             --exclude=src/main/pty/omp-shell-wrapper.node-pty.test.ts \
+            --exclude=src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts \
             --exclude=src/shared/posix-command-path-lookup.test.ts \
             --exclude=tests/e2e/cross-version-wire/** \
             --shard=${{ matrix.shard }}/${{ matrix.shard_total }}
@@ -378,8 +426,12 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Test Windows PowerShell CLI boundary
-        run: pnpm exec vitest run --config config/vitest.config.ts src/main/cli/wsl-cli-powershell-boundary.test.ts
+      - name: Test Windows-specific boundaries
+        run: >-
+          pnpm exec vitest run --config config/vitest.config.ts
+          src/main/cli/wsl-cli-powershell-boundary.test.ts
+          src/main/orca-profiles/profile-index-store.test.ts
+          src/shared/secure-file-fsync-flags.test.ts
 
       - name: Build package inputs
         run: pnpm run build:release
diff --git a/.github/workflows/release-cut.yml b/.github/workflows/release-cut.yml
index 6dba5ac1ff6..370fbcc0a32 100644
--- a/.github/workflows/release-cut.yml
+++ b/.github/workflows/release-cut.yml
@@ -783,7 +783,7 @@ jobs:
           {
             echo "## Release E2E Signal"
             echo ""
-            echo "- Terminal rendering golden is release-blocking."
+            echo "- Platform golden E2E is release-blocking: terminal rendering and restrictive-umask profile writes on Linux/macOS, plus fresh startup on Windows."
             echo "- Full E2E runs separately after publication and cannot change the release result."
             echo "- Terminal rendering release evidence is diagnostic/non-blocking."
             echo ""
@@ -817,7 +817,7 @@ jobs:
   terminal-rendering-golden:
     needs: cut
     if: needs.cut.outputs.should_release == 'true'
-    name: terminal rendering golden ${{ matrix.platform }}
+    name: golden e2e ${{ matrix.platform }}
     runs-on: ${{ matrix.os }}
     timeout-minutes: 30
     env:
@@ -830,10 +830,10 @@ jobs:
             platform: linux
           - os: macos-15
             platform: mac
-          # Why: Windows terminal rendering golden is temporarily disabled on
-          # CI while its flaky runner-only failures are investigated.
-          # - os: windows-latest
-          #   platform: windows
+          # Windows terminal rendering remains flaky; keep its blocking signal
+          # scoped to the fresh-profile startup regression from #14130.
+          - os: windows-2022
+            platform: windows
 
     steps:
       - name: Checkout
@@ -866,22 +866,34 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Build Electron app for terminal rendering golden
+      - name: Build Electron app for platform golden
         run: npx electron-vite build --mode e2e
 
       - name: Run terminal rendering golden on Linux
         if: runner.os == 'Linux'
-        run: xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+        run: |
+          xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+          xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:posix-profile-index-golden
 
       - name: Run terminal rendering golden on macOS
         if: runner.os == 'macOS'
-        run: env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+        run: |
+          env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden
+          env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:posix-profile-index-golden
+
+      - name: Run fresh-startup golden on Windows
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          $env:SKIP_BUILD = '1'
+          $env:ORCA_E2E_FORWARD_APP_LOGS = '1'
+          pnpm run test:e2e:windows-fresh-startup-golden
 
       - name: Upload Playwright traces
         if: failure()
         uses: actions/upload-artifact@v7
         with:
-          name: terminal-rendering-golden-${{ matrix.platform }}-playwright-traces
+          name: golden-e2e-${{ matrix.platform }}-playwright-traces
           path: test-results/
           retention-days: 7
           if-no-files-found: ignore
diff --git a/.gitignore b/.gitignore
index 17bb18529af..8fb2d756f1c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,7 +102,9 @@ docs/**
 !docs/reference/linux-glibc-compatibility.md
 !docs/reference/relay-grace-time-reconfiguration.md
 !docs/reference/remote-wire-compatibility.md
+!docs/reference/renderer-agent-status-performance.md
 !docs/reference/windows-setup-shell.md
+!docs/reference/worktree-scan-fingerprint.md
 
 # Stably CLI (only docs/ are tracked)
 .stably/*
@@ -125,6 +127,10 @@ playwright-report/
 /.agents/skills/
 /skills-lock.json
 
+# Generated Clawpatch state includes machine-local paths and review records.
+/.clawpatch/
+/mobile/.clawpatch/
+
 # Agent hook runtime endpoints (machine-local secrets)
 /agent-hooks/
 validation-screenshots/
diff --git a/.oxlintrc.json b/.oxlintrc.json
index 0f679f17d52..97a2b68701a 100644
--- a/.oxlintrc.json
+++ b/.oxlintrc.json
@@ -56,6 +56,7 @@
     "react-hooks/rules-of-hooks": "error",
     "react-hooks/exhaustive-deps": "warn",
     "typescript/array-type": "error",
+    "typescript/consistent-generic-constructors": "error",
     "typescript/consistent-indexed-object-style": "error",
     "typescript/consistent-type-assertions": "error",
     "typescript/consistent-type-definitions": ["error", "type"],
@@ -68,12 +69,16 @@
     "typescript/prefer-function-type": "error",
     "typescript/prefer-includes": "error",
     "typescript/prefer-optional-chain": "error",
+    "typescript/prefer-ts-expect-error": "error",
     "typescript/switch-exhaustiveness-check": [
       "error",
       { "allowDefaultCaseForExhaustiveSwitch": false }
     ],
     "curly": "error",
     "no-unneeded-ternary": "error",
+    "no-else-return": "error",
+    "prefer-exponentiation-operator": "error",
+    "prefer-object-has-own": "error",
     "no-restricted-imports": [
       "error",
       {
@@ -90,11 +95,16 @@
     "no-useless-return": "error",
     "prefer-template": "error",
     "unicorn/consistent-empty-array-spread": "error",
+    "unicorn/consistent-existence-index-check": "error",
+    "unicorn/empty-brace-spaces": "error",
     "unicorn/error-message": "error",
     "unicorn/no-array-fill-with-reference-type": "warn",
     "unicorn/no-array-reverse": "error",
     "unicorn/no-instanceof-builtins": "error",
+    "unicorn/no-typeof-undefined": "error",
+    "unicorn/no-unnecessary-array-splice-count": "error",
     "unicorn/no-useless-promise-resolve-reject": "error",
+    "unicorn/no-zero-fractions": "error",
     "unicorn/prefer-array-find": "error",
     "unicorn/prefer-array-flat-map": "warn",
     "unicorn/prefer-array-index-of": "error",
diff --git a/config/electron-vite-target.config.ts b/config/electron-vite-target.config.ts
index 60651dd6590..490fa654f5b 100644
--- a/config/electron-vite-target.config.ts
+++ b/config/electron-vite-target.config.ts
@@ -8,7 +8,7 @@ const configByTarget = {
   renderer: { renderer: electronViteConfig.renderer }
 }
 
-if (!target || !Object.prototype.hasOwnProperty.call(configByTarget, target)) {
+if (!target || !Object.hasOwn(configByTarget, target)) {
   throw new Error(`Invalid ORCA_ELECTRON_VITE_TARGET: ${target ?? '<unset>'}`)
 }
 
diff --git a/config/max-lines-baseline.txt b/config/max-lines-baseline.txt
index 4554e6bba8b..0cad754a205 100644
--- a/config/max-lines-baseline.txt
+++ b/config/max-lines-baseline.txt
@@ -10,7 +10,6 @@ inline src/main/agent-hooks/server.test.ts
 inline src/main/agent-hooks/server.ts
 inline src/main/amp/hook-service.ts
 inline src/main/antigravity/hook-service.ts
-inline src/main/attribution/terminal-attribution.ts
 inline src/main/automations/external-manager.ts
 inline src/main/automations/hermes-cron-output.ts
 inline src/main/browser/agent-browser-bridge.test.ts
diff --git a/config/oxlint-code-quality-native-plugins.json b/config/oxlint-code-quality-native-plugins.json
index 5d9cd118e74..5f2fb031a51 100644
--- a/config/oxlint-code-quality-native-plugins.json
+++ b/config/oxlint-code-quality-native-plugins.json
@@ -16,6 +16,7 @@
     "import/namespace": "warn",
     "import/no-cycle": ["warn", { "maxDepth": 3 }],
     "import/no-duplicates": "warn",
+    "import/no-empty-named-blocks": "warn",
     "import/no-self-import": "warn"
   },
   "overrides": [
diff --git a/config/oxlint-code-quality-type-aware.json b/config/oxlint-code-quality-type-aware.json
index 4c0e01fa748..8ae3cbab60e 100644
--- a/config/oxlint-code-quality-type-aware.json
+++ b/config/oxlint-code-quality-type-aware.json
@@ -12,6 +12,7 @@
   },
   "rules": {
     "typescript/await-thenable": "warn",
+    "typescript/no-redundant-type-constituents": "warn",
     "typescript/restrict-plus-operands": "warn",
     "typescript/restrict-template-expressions": "warn",
     "typescript/switch-exhaustiveness-check": [
diff --git a/config/reliability-gates.jsonc b/config/reliability-gates.jsonc
index f5e5a39caeb..eab6a047bc6 100644
--- a/config/reliability-gates.jsonc
+++ b/config/reliability-gates.jsonc
@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-08-10",
+  "updatedAt": "2026-08-12",
   "policy": {
     "maturityLevels": ["experimental", "soak", "blocking", "accepted-gap", "deprecated"],
     "blockingPromotion": {
@@ -10,6 +10,176 @@
     }
   },
   "gates": [
+    {
+      "id": "terminal-session.shell-ready-exec-prompt-fallback",
+      "title": "Startup exec falls back to the identified shell's line editor",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "terminal-session-readiness",
+      "layer": "posix-pty-and-shell-startup",
+      "surfaces": ["queued terminal startup commands", "zsh, bash, and Fish startup output"],
+      "platforms": ["macos", "linux"],
+      "providers": ["local", "local-daemon", "ssh-daemon", "ssh-relay", "paired-runtime"],
+      "coveredPlatforms": ["macos", "linux"],
+      "coveredProviders": ["local", "local-daemon", "ssh-relay", "paired-runtime"],
+      "coverageNotes": "Real macOS node-pty integration covers zsh 5.9 .zshenv/.zprofile and bash 3.2 profile replacement shells, including exec -a names, same-shell and child-process silent reads, a blocking zle-line-init hook, non-shell readline replacements, and a non-shell image renamed zsh. A real Fish PTY proves marker stripping is byte-exact and does not render bracketed-paste control text. An Ubuntu 20.04 container confirms compatible zsh/bash termios. Deterministic owner contracts cover local, daemon, and SSH relay identity/readiness composition plus provider-owned delivery; explicit terminal-paste remains renderer-owned. Live isolated journeys cover a macOS headed desktop owner with paired web client, headless orca serve with paired web client, and a Docker Linux OpenSSH/Bash target with one readiness-time reconnect. Linux desktop, WSL/Windows, live zsh-over-SSH, and physical remote hosts remain gaps.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/issues/13767",
+        "https://linear.app/stably/issue/STA-4067",
+        "https://linear.app/stably/issue/STA-4068",
+        "https://github.com/stablyai/orca/pull/14161"
+      ],
+      "invariant": "Shell startup scanning preserves every non-Orca output byte in order across arbitrary PTY chunk boundaries. Before user startup files run, the wrapper publishes its shell PID. If a later exec discards the ready marker, proof-based recovery releases queued startup input only after the launched shell's actual executable image with that exact PID owns the PTY foreground, emits its post-hook line-editor enable sequence, and exposes zle/readline termios; startup reads, line-init hooks, child foreground processes, and non-shell readline replacements cannot trigger that proof. The existing bounded compatibility timeout may enqueue input without proof, but must not publish readiness, lose or duplicate that input across reconnect, or execute it before the replacement shell can accept it.",
+      "oracle": "Split Fish output immediately after the ready marker and after the following ESC introducer; local and daemon owners must emit the exact ESC [ ? 2004 h bytes and headless xterm must not render literal control text. Run the real generated wrappers under node-pty with disposable zsh, bash, and Fish startup files. Plain and exec -a replacement shells must receive one queued command at their first completed line editor without waiting for the 15-second timeout. The identical oracle must time out without the startup identity and prompt fallback. Same-shell reads, child-process reads, a blocking zle-line-init hook, sqlite3, and sqlite3 renamed zsh must not trigger prompt fallback. Relay owner coverage must use the same lossless scanner composition and release through the same prompt contract.",
+      "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready.test.ts src/main/providers/local-pty-provider.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1 src/main/daemon/shell-ready.test.ts src/main/shell-startup-output-scanner.test.ts",
+        "ORCA_E2E_SSH_DOCKER=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/ssh-startup-exec-readiness.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1",
+        "ORCA_E2E_WEB_CLIENT=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/paired-startup-exec-readiness.spec.ts --config tests/playwright.config.ts --project electron-headless --project electron-headful --workers=1"
+      ],
+      "testFiles": [
+        "src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts",
+        "src/main/line-editor-ready-output-scanner.test.ts",
+        "src/main/shell-startup-identity-scanner.test.ts",
+        "src/main/shell-startup-output-scanner.test.ts",
+        "src/main/shell-prompt-readiness-probe.test.ts",
+        "src/shared/pty-slave-line-discipline-echo.test.ts",
+        "src/shared/shell-process-readiness.test.ts",
+        "src/main/daemon/session.test.ts",
+        "src/main/daemon/shell-ready.test.ts",
+        "src/main/providers/local-pty-shell-ready.test.ts",
+        "src/main/providers/local-pty-provider.test.ts",
+        "src/relay/pty-shell-launch.test.ts",
+        "src/relay/pty-handler.test.ts",
+        "tests/e2e/ssh-startup-exec-readiness.spec.ts",
+        "tests/e2e/paired-startup-exec-readiness.spec.ts"
+      ],
+      "assertionRefs": [
+        {
+          "file": "src/main/shell-startup-output-scanner.test.ts",
+          "assertions": [
+            "Fish bracketed-paste output stays byte-exact across marker and ESC chunk splits",
+            "every byte after readiness is preserved across every chunk boundary, even when it resembles an identity marker",
+            "pre-ready identity and readiness markers strip across every chunk boundary without reordering prompt output",
+            "incomplete scanner prefixes drain in byte order"
+          ]
+        },
+        {
+          "file": "src/main/daemon/session.test.ts",
+          "assertions": [
+            "daemon output is byte-exact for both Fish chunk splits",
+            "headless xterm never renders literal bracketed-paste control text"
+          ]
+        },
+        {
+          "file": "src/main/providers/local-pty-provider.test.ts",
+          "assertions": ["local PTY output is byte-exact for both Fish chunk splits"]
+        },
+        {
+          "file": "src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts",
+          "assertions": [
+            "real zsh .zshenv/.zprofile and bash profile replacement shells receive queued input exactly once",
+            "same-shell raw silent reads retain queued input",
+            "child-process raw silent reads retain queued input while the identified shell is not foreground",
+            "a blocking zle-line-init read retains queued input until the hook completes",
+            "sqlite3 and a sqlite3 image renamed zsh cannot impersonate the launched shell executable path",
+            "zsh configurations without a line-editor enable sequence retain the existing timeout backstop"
+          ]
+        },
+        {
+          "file": "src/relay/pty-handler.test.ts",
+          "assertions": [
+            "the SSH relay owner strips startup identity and releases provider-delivered input through prompt readiness",
+            "renderer-owned SSH delivery receives the existing ready marker after authoritative relay prompt readiness",
+            "normal renderer-owned ready markers pass through unchanged and retain no readiness state"
+          ]
+        },
+        {
+          "file": "tests/e2e/ssh-startup-exec-readiness.spec.ts",
+          "assertions": [
+            "a Docker Linux OpenSSH/Bash replacement shell retains one compatibility-fallback input across reconnect without executing it before the blocked replacement can accept it",
+            "the owning terminal handle and raw PTY identity remain singular and stable",
+            "painted output, authoritative terminal output, and the first interactive input each appear exactly once"
+          ]
+        },
+        {
+          "file": "tests/e2e/paired-startup-exec-readiness.spec.ts",
+          "assertions": [
+            "a headed desktop owner and paired client recover startup exec on one stable owning PTY",
+            "an isolated headless orca serve owner provides the same exact-once output and input contract"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "manual",
+          "platform": "linux",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1 src/main/daemon/shell-ready.test.ts src/main/shell-startup-output-scanner.test.ts",
+          "result": "passed",
+          "durationSeconds": 7,
+          "summary": "A clean Debian 12 arm64 container with real Fish 3.6 and node-pty passed exact marker-stripped output plus headless-xterm rendering."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready.test.ts src/main/providers/local-pty-provider.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler.test.ts",
+          "result": "passed",
+          "durationSeconds": 6,
+          "summary": "473 tests passed with one local Fish skip, including every-boundary scanner composition, real exec, silent-read, line-init-hook, renamed-image, disabled-bracketed-paste, and relay-owner oracles."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "linux",
+          "command": "ORCA_E2E_SSH_DOCKER=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/ssh-startup-exec-readiness.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1",
+          "result": "passed",
+          "durationSeconds": 17,
+          "summary": "The live OpenSSH/Bash relay journey crossed the bounded compatibility fallback while rc-file exec was blocked, proved one queued command echo with no command execution, then passed a disconnect/reconnect with exact-once startup output/input and stable pane plus owner PTY identities."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/paired-startup-exec-readiness.spec.ts --config tests/playwright.config.ts --project electron-headless --project electron-headful --workers=1",
+          "result": "passed",
+          "durationSeconds": 14,
+          "summary": "The shared oracle passed a headed desktop owner plus paired web client and an isolated headless orca serve owner plus paired web client."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 120,
+        "scope": "focused local wrapper contracts plus isolated SSH and paired live journeys"
+      },
+      "flakeHistory": {
+        "status": "unknown",
+        "evidence": "Fresh deterministic and isolated live runs pass locally; CI and soak history have not started."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "Daemon oracle SHA-256 b13b08006a38b2adc2acb51ae9342909514e55ab4822fac4fbb76cd49b344cc6 was byte-identical across runs: affected baseline 09ec516ae5 failed 4 of 14, while pre-PR main bc2e30000b and this PR passed 14 of 14. The unchanged live SSH oracle failed on bc2e30000b and with the ownership change reverted because the ledger stayed pending after reconnect, then passed on this PR. Fish chunk oracle patch SHA-256 fd49a4d3d91bd5f0d10c1b1f44f4cfbd92cef9155a5505b415c8680184cdc765 was also byte-identical: scan target e4c278eb52, main 150cc6f50c, and candidate ae7f30318a with shared scanner integration disabled failed only the ESC-introducer split in local and daemon owners, while ae7f30318a passed all 163 cases plus headless-xterm rendering."
+      },
+      "performanceBudget": {
+        "required": true,
+        "evidence": "Two bounded linear scans partition identity ownership at the exact ready-marker boundary and retain only the existing bounded prefixes. The normal ready-marker path cancels before external probing. A missing marker triggers a debounced stty read only after a line-editor enable sequence, followed by narrow PID status and executable-image inspection only when termios matches. Slow ordinary startup output triggers zero probes; rejected protocol emissions are capped at four probes per startup. There is no per-command hook or steady-state polling."
+      },
+      "promotionCriteria": [
+        "Collect CI and soak history for the Docker SSH and paired live journeys.",
+        "Collect CI and soak history without unexplained flakes.",
+        "Keep same-shell, child-process, line-init-hook, and non-shell readline contracts green."
+      ],
+      "knownGaps": [
+        "The fallback requires a readable POSIX PTY slave; WSL through wsl.exe, ConPTY, and native Windows retain the existing timeout backstop.",
+        "The live SSH journey covers Docker Linux OpenSSH with Bash, not zsh, WSL, Windows SSH, a Linux desktop renderer, or a physical remote host.",
+        "An exec integration that forks a replacement shell instead of retaining the identified shell PID retains the existing timeout backstop.",
+        "A zsh configuration that disables bracketed-paste output emits no safe post-hook protocol signal and retains the existing timeout backstop.",
+        "The pre-existing timeout backstop can still deliver queued input to a non-shell replacement after it expires; this fallback prevents indefinite startup hangs and is unchanged by the prompt fallback.",
+        "The fallback restores safe startup-command delivery but cannot recreate OSC 133 hooks or overlay restores already discarded by exec.",
+        "Startup code running in the launched shell can deliberately spoof the public line-editor enable sequence after configuring matching termios; the existing timeout path already trusts a public OSC marker from the same startup code."
+      ],
+      "demotionRule": "Keep experimental or demote if prompt fallback enters a normal, child, or line-init read; a non-shell executable triggers prompt fallback; the identified shell PID is not foreground; delivery duplicates; ordinary startup output spawns probes; probe attempts exceed four; or the focused gate flakes without an identified harness defect."
+    },
     {
       "id": "editor.restored-sibling-owner-reparent",
       "title": "Restored sibling tabs migrate filesystem authority before becoming editable",
@@ -1361,6 +1531,442 @@
       ],
       "demotionRule": "Demote if a retired runtime transport can leave a renderer subscription without a close event, if a close is delivered more than once, if one failing teardown strands its sibling subscriptions, if payload frames from a retired transport reach the renderer, or if a revealed remote terminal can stay blank or reject input after a reconnect."
     },
+    {
+      "id": "browser-session.remote-terminal-link-ownership",
+      "title": "Paired terminal links open one browser on their owning runtime",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "browser-runtime",
+      "layer": "renderer-paired-runtime-routing",
+      "surfaces": [
+        "paired remote terminal HTTP links",
+        "terminal link action destinations",
+        "runtime-owned managed browser creation"
+      ],
+      "platforms": ["macos", "linux", "windows"],
+      "providers": ["remote-runtime", "ssh"],
+      "coveredPlatforms": ["macos"],
+      "coveredProviders": ["remote-runtime", "ssh"],
+      "coverageNotes": "A headed macOS desktop host and separate paired Electron client exercise a real mirrored terminal link, owner-asserted host browser creation, exact host/client page identity, rendered DOM, explicit browser-tab activation, client external-browser suppression, exact host/client close convergence, and continued original-PTY liveness. Unit contracts cover OSC, WebLinksAddon, click fallback, explicit System Browser routing, failed creation, incapable runtimes, and unchanged direct SSH behavior.",
+      "motivatingLinks": [
+        "https://stablygroup.slack.com/archives/C0AK2T3JEF4/p1786567689897109",
+        "https://github.com/stablyai/orca/issues/12418"
+      ],
+      "invariant": "Selecting Orca Browser for an HTTP link in a runtime-owned terminal creates exactly one browser page on that owning runtime and exactly one mirrored client browser workspace, with matching remote page identity and no client external-browser call. Explicit System Browser remains client-owned, direct SSH remains system-browser-only, and unknown or mismatched owners fail closed.",
+      "oracle": "Use the focused routing contracts as the byte-identical baseline/candidate oracle. Require runtime OSC, WebLinksAddon, click fallback, action-menu, and modifier paths to target the exact owner without client fallback, while direct SSH and generic remote document links stay external. Separately run one byte-identical headed paired Electron journey on the candidate and with only runtime browser registration disabled. Require one new host browser tab, one new client mirror with exact page identity, rendered fixture DOM, explicit browser-tab activation, zero client shell.openExternal calls, exact close convergence, unchanged terminal counts, and continued output on the original PTY.",
+      "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts src/renderer/src/lib/http-link-routing.test.ts src/renderer/src/lib/http-link-modifier-routing.test.ts src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+        "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-terminal-browser-link.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1"
+      ],
+      "testFiles": [
+        "src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts",
+        "src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts",
+        "src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts",
+        "src/renderer/src/lib/http-link-routing.test.ts",
+        "src/renderer/src/lib/http-link-modifier-routing.test.ts",
+        "src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+        "tests/e2e/paired-remote-terminal-browser-link.spec.ts"
+      ],
+      "assertionRefs": [
+        {
+          "file": "src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts",
+          "assertions": [
+            "OSC, WebLinksAddon, and click-fallback activations route through the exact runtime owner",
+            "direct SSH continues to use only the system browser"
+          ]
+        },
+        {
+          "file": "src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+          "assertions": [
+            "an asserted runtime cannot fall back to a client browser",
+            "mismatched and incapable runtime owners fail closed"
+          ]
+        },
+        {
+          "file": "tests/e2e/paired-remote-terminal-browser-link.spec.ts",
+          "assertions": [
+            "one terminal action produces one host page and one client mirror with exact identity",
+            "the host browser renders the fixture while client external navigation stays empty",
+            "an explicit browser-tab click reveals the exact mirror",
+            "closing the mirror returns host and client inventories to baseline",
+            "the original remote PTY accepts and renders fresh output after browser close"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+          "result": "failed",
+          "durationSeconds": 2.58,
+          "summary": "Latest main e4c278eb523 failed 6/25 owner-routing assertions: runtime terminal links called the viewing client's external browser and the managed-browser helper did not enforce an asserted runtime owner."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts src/renderer/src/lib/http-link-routing.test.ts src/renderer/src/lib/http-link-modifier-routing.test.ts src/renderer/src/lib/workspace-browser-tab-open.test.ts",
+          "result": "passed",
+          "durationSeconds": 1.83,
+          "summary": "Candidate passed 84/84 across six focused routing, modifier, availability, owner assertion, failure, SSH, and system-browser contract files."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-terminal-browser-link.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 32.9,
+          "summary": "Candidate created one host browser and one client mirror with matching page identity, rendered the fixture, activated on an explicit tab click, made zero client external-browser calls, converged both inventories after exact UI close, and delivered fresh output on the original remote PTY."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-terminal-browser-link.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "failed",
+          "durationSeconds": 60,
+          "summary": "The byte-identical final Electron oracle failed at its exact host/client identity barrier when the sole source delta replaced src/renderer/src/store/index.ts registration lines 110-113 with registerRuntimeHttpLinkBrowserOpener(null); no host-owned browser appeared within the deterministic 60-second bound."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 45,
+        "scope": "six focused renderer contract files plus one isolated headed paired-runtime journey"
+      },
+      "flakeHistory": {
+        "status": "unknown",
+        "evidence": "The focused contracts are deterministic and the headed paired-runtime journey passed locally after its PTY namespace oracle was corrected; longer CI and soak history is not yet available."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "The focused owner-routing oracle is red on latest main e4c278eb523 and green on the candidate. The byte-identical headed Electron oracle is green on the candidate and red when the sole source delta replaces the runtime browser opener registration with registerRuntimeHttpLinkBrowserOpener(null); candidate evidence proves exact host/client identity, rendered content, explicit activation, exact close convergence, original-PTY survival, and absence of client external navigation."
+      },
+      "performanceBudget": {
+        "required": true,
+        "evidence": "The production change adds no timer, polling, retry, subprocess, stream opcode, RPC method, or host publication. Each link hover or activation performs bounded in-memory owner and capability lookups; an Orca Browser action issues the same single browser creation and snapshot reconciliation already used by the tab bar."
+      },
+      "promotionCriteria": [
+        "Collect Linux and physical Windows paired-server evidence.",
+        "Collect a live headless-serve terminal-link journey.",
+        "Collect 100 consecutive focused CI passes or 14 days without an unexplained flake."
+      ],
+      "knownGaps": [
+        "Live paired-server validation currently covers macOS only.",
+        "A live headless-serve journey and multiple simultaneous viewers are not exercised by the Electron journey.",
+        "Direct SSH intentionally retains its existing system-browser-only semantics.",
+        "Terminal-link activation does not change the existing asynchronous host/client focus policy."
+      ],
+      "demotionRule": "Demote if one runtime terminal link creates a client-owned or duplicate browser, targets a runtime other than the pane owner, invokes the client external browser for Orca Browser, or removes the source terminal."
+    },
+    {
+      "id": "browser-session.remote-html-preview-ownership",
+      "title": "Paired HTML previews keep one host page and one stable client split",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "browser-runtime",
+      "layer": "renderer-paired-runtime-reconciliation",
+      "surfaces": [
+        "paired remote HTML file preview",
+        "background preview creation and explicit browser activation",
+        "client-only split placement",
+        "capability-unknown and mixed-version preview rejection cleanup",
+        "post-create reconciliation failure and compensating rollback",
+        "remote browser close convergence"
+      ],
+      "platforms": ["macos", "linux", "windows"],
+      "providers": ["remote-runtime"],
+      "coveredPlatforms": ["macos"],
+      "coveredProviders": ["remote-runtime"],
+      "coverageNotes": "A headed macOS desktop host and separate paired client exercise the Explorer eye-button path with a real remote file URL, host browser DOM, renderer split layout, background preview creation, explicit browser activation, browser close, forced capability rejection after caller preflight, and a forced post-create reconciliation timeout. The same fault oracles pass against a live headless server. Unit contracts cover absent, unknown, and mixed-version capabilities, visible rejection, empty-split cleanup, owning-runtime routing, exact client materialization, confirmed rollback, ambiguous cleanup, and teardown. Linux and Windows live journeys remain gaps.",
+      "motivatingLinks": [
+        "https://linear.app/stably/issue/STA-3872/unable-to-open-html-files-in-remote-server",
+        "https://linear.app/stably/issue/STA-4025/p1-browser-create-reports-success-when-tab-reconcile-fails-after-pr",
+        "https://linear.app/stably/issue/STA-4063/p1-paired-html-preview-rejects-outside-cleanup-after-pr-13909",
+        "https://github.com/stablyai/orca/pull/13876"
+      ],
+      "invariant": "Opening one HTML preview from a paired client succeeds only after exactly one browser page on the worktree-owning runtime materializes as exactly one client browser workspace and unified tab in the requested group. Capability rejection before host mutation must preserve the original error, issue no RPC, surface a failure toast, and remove only a caller-declared newly-created empty split. Post-create reconciliation failure requires exact rollback; ambiguous rollback rejects without local fallback. Preview focus and close preserve the source editor and terminal.",
+      "oracle": "Run one unchanged contract oracle for direct create and side-preview callers with absent status, unknown capabilities, and a mixed-version host. Require the original unsupported error or visible toast, zero RPCs, and no retained new split. Run it on the scan target, latest main, candidate, and candidate with the cleanup boundary disabled. In headed paired Electron, arm capability rejection after the caller preflight, invoke the visible HTML side-preview action, require the failure toast, and compare exact host/client browser, editor, terminal, and group inventories to baseline. Repeat against headless serve. Retain the separate exact-page reconciliation rollback oracle.",
+      "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-browser.test.ts src/main/runtime/rpc/methods/browser.test.ts src/renderer/src/lib/file-preview.test.ts src/renderer/src/runtime/web-session-browser-placement.test.ts src/renderer/src/runtime/web-runtime-session.test.ts src/renderer/src/runtime/web-session-tabs-sync.test.ts src/renderer/src/runtime/remote-server-parity.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/runtime/web-runtime-browser-materialization.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts src/renderer/src/lib/file-preview-capability-cleanup.test.ts",
+        "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+        "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --repeat-each=3",
+        "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+        "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+        "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
+        "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line"
+      ],
+      "testFiles": [
+        "src/main/runtime/orca-runtime-browser.test.ts",
+        "src/main/runtime/rpc/methods/browser.test.ts",
+        "src/renderer/src/lib/file-preview.test.ts",
+        "src/renderer/src/lib/file-preview-capability-cleanup.test.ts",
+        "src/renderer/src/runtime/web-session-browser-placement.test.ts",
+        "src/renderer/src/runtime/web-runtime-browser-materialization.test.ts",
+        "src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts",
+        "src/renderer/src/runtime/web-runtime-session.test.ts",
+        "src/renderer/src/runtime/web-session-tabs-sync.test.ts",
+        "src/renderer/src/runtime/remote-server-parity.test.ts",
+        "tests/e2e/paired-remote-html-browser-focus.spec.ts",
+        "tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts"
+      ],
+      "assertionRefs": [
+        {
+          "file": "src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts",
+          "assertions": [
+            "absent status, unknown capabilities, and mixed-version hosts preserve the unsupported rejection",
+            "direct creation removes the caller-declared new split without issuing an RPC"
+          ]
+        },
+        {
+          "file": "src/renderer/src/lib/file-preview-capability-cleanup.test.ts",
+          "assertions": [
+            "known unavailability reports visibly without creating a split",
+            "capability loss after caller preflight reports visibly without duplicating transaction cleanup"
+          ]
+        },
+        {
+          "file": "src/renderer/src/lib/file-preview.test.ts",
+          "assertions": [
+            "a failed side preview reports visibly without caller-owned split cleanup",
+            "overlapping side previews reuse the split without the first failure deleting it"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/web-runtime-browser-materialization.test.ts",
+          "assertions": [
+            "success requires the exact environment and remote page handle plus a unified browser tab",
+            "a requested client group must contain the materialized browser tab"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/web-runtime-session.test.ts",
+          "assertions": [
+            "a post-create timeout returns false only after exact host close and a confirming snapshot",
+            "unconfirmed cleanup rejects so callers cannot create a competing local fallback",
+            "the canonical placement and a newly-created empty split are released on rollback",
+            "one failed preview cannot remove a shared split still reserved after an environment ownership change",
+            "if every overlapping creation fails, the last reservation closes the caller-created empty split"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/web-session-browser-placement.test.ts",
+          "assertions": [
+            "pending page placements are bounded and reserve worktree groups across environment ownership changes",
+            "caller-created cleanup transfers to the last failed overlapping reservation",
+            "capacity rejects a new placement without evicting an active reservation or its cleanup ownership",
+            "worktree and environment teardown clear only their own placement state"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/web-session-tabs-sync.test.ts",
+          "assertions": [
+            "a host browser page stays in its exact client-owned preview group",
+            "a reserved empty split survives a pre-publication host snapshot",
+            "later client moves supersede initial preview placement"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/remote-server-parity.test.ts",
+          "assertions": [
+            "a caller-created browser gains focus when the exact predecessor tab is still visible"
+          ]
+        },
+        {
+          "file": "tests/e2e/paired-remote-html-browser-focus.spec.ts",
+          "assertions": [
+            "one HTML open produces one client workspace, one client unified tab, and one host page",
+            "the source editor and remote frame remain visible in separate groups",
+            "preview creation leaves the editor active, an explicit browser click is authoritative, and close preserves the editor and terminal"
+          ]
+        },
+        {
+          "file": "tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts",
+          "assertions": [
+            "the exact created page exists on the host while publication is held and no browser tab materializes on the client",
+            "a forced post-create reconciliation timeout closes the exact host page and removes only the reserved empty split",
+            "a forced capability rejection after caller preflight shows a toast and restores exact host and client inventories",
+            "headed and headless hosts preserve the unrelated editor and terminal without local fallback"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts src/renderer/src/lib/file-preview-capability-cleanup.test.ts",
+          "result": "failed",
+          "durationSeconds": 0.72,
+          "summary": "The unchanged STA-4063 oracle failed 5/5 on scan e4c278eb52 and latest main bc2e30000b: direct create never closed the new split, and side-preview rejection produced neither cleanup nor a toast. Pre-fix PR #14100 passed the two caller cases but still failed all three direct transaction cases."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts src/renderer/src/lib/file-preview-capability-cleanup.test.ts",
+          "result": "passed",
+          "durationSeconds": 0.7,
+          "summary": "Rebased candidate 14b5877a75 passed 5/5: absent, unknown, mixed-version, preflight-known, and post-preflight capability failures all reported failure and retained no new empty split."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 18.3,
+          "summary": "The full headed spec passed 2/2. A visible desktop host and separate paired Electron client proved both reconciliation rollback and capability rejection with a failure toast and exact host/client browser, group, editor, and terminal inventory restoration."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 9.1,
+          "summary": "The full isolated headless-serve journey passed 1/1, applying both reconciliation and capability faults to the same live host while preserving the visible-toast and exact inventory-restoration oracle."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/runtime/web-runtime-browser-materialization.test.ts",
+          "result": "passed",
+          "durationSeconds": 0.11,
+          "summary": "The exact environment, remote page, client workspace, unified browser tab, and requested group materialization contract passed 1/1 on the final rebased candidate."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 24.3,
+          "summary": "A visible desktop host and separate paired Electron client held one exact host page before client materialization, forced the post-create timeout, then proved exact host rollback, empty-split removal, failure UI, no local fallback, and surviving editor and terminal."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 18.5,
+          "summary": "The same exact-page hold, timeout, rollback, client cleanup, no-fallback, editor, and terminal oracle passed against isolated headless serve."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-browser.test.ts src/main/runtime/rpc/methods/browser.test.ts src/renderer/src/lib/file-preview.test.ts src/renderer/src/runtime/web-session-browser-placement.test.ts src/renderer/src/runtime/web-runtime-session.test.ts src/renderer/src/runtime/web-session-tabs-sync.test.ts src/renderer/src/runtime/remote-server-parity.test.ts",
+          "result": "passed",
+          "durationSeconds": 3.48,
+          "summary": "Seven focused host and renderer contract files passed 183/183 tests, covering owning-runtime routing, focused and unfocused creation, placement, reconciliation, failure cleanup, and teardown."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --repeat-each=3",
+          "result": "passed",
+          "durationSeconds": 16.1,
+          "summary": "The candidate passed exact host/client cardinality, split stability, rendered DOM, focus authority, close convergence, and surviving editor and terminal."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "failed",
+          "durationSeconds": 11.6,
+          "summary": "Latest-main a90a18d43da333e1cc327779a3f9912a78308848 failed the byte-identical 5806b23f oracle because the HTML preview collapsed into the source editor group instead of retaining its requested split."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 6.5,
+          "summary": "Rebased candidate b7de9c0961a4edf389a29079b2b4d5250184b57e passed the byte-identical 5806b23f oracle: one host page, one client workspace, requested split, rendered DOM, stable focus, and browser-only close."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "failed",
+          "durationSeconds": 10.9,
+          "summary": "Rebased candidate b7de9c0961a4edf389a29079b2b4d5250184b57e with only the side-preview owning-runtime routing seam disabled failed the byte-identical 5806b23f oracle with two client workspaces."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 7.6,
+          "summary": "Final candidate d5767481b982b736e7cc5b4653b2a32a61280638 on merge-base 36d45af062ec4022265aabac8fc6a9d36eecedf1 passed the byte-identical 5806b23f oracle after final review and rebase: one host page, one client workspace, requested split, rendered DOM, stable focus, and browser-only close."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "failed",
+          "durationSeconds": 11.8,
+          "summary": "Latest-main 346e59c879 failed the byte-identical 2ec1dcf1 oracle with two client HTML browser workspaces instead of one."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 8.4,
+          "summary": "Candidate d05217c40d passed the byte-identical 2ec1dcf1 oracle: one host page, one client workspace, stable split, rendered DOM, editor focus after creation, explicit-click browser focus, and browser-only close."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-remote-html-browser-focus.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "failed",
+          "durationSeconds": 12.3,
+          "summary": "Candidate d05217c40d with only the side-preview focusOnCreate:false call disabled failed the byte-identical 2ec1dcf1 oracle because preview creation activated the browser instead of preserving editor focus."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 90,
+        "scope": "focused host/renderer contracts plus normal and faulted headed/headless paired-runtime journeys"
+      },
+      "flakeHistory": {
+        "status": "unknown",
+        "evidence": "The candidate passed isolated local macOS Electron runs before and after the final rebase; longer CI and soak history is not yet available."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "The unchanged STA-4063 five-assertion oracle is red 5/5 on scan e4c278eb52 and latest main bc2e30000b, partially green 2/5 on pre-fix PR #14100, green 5/5 on candidate 14b5877a75, and red 3/5 when only the new transaction cleanup boundary is disabled on final candidate a9e6fb7716. The earlier STA-4025 transaction oracle remains red on the post-#13909 base and green on this candidate. The byte-identical 2ec1dcf1 Electron oracle remains red on latest main 346e59c879, green on candidate d05217c40d, and red with only side-preview focus disabled; historical 5806b23f evidence separately proves owning-runtime routing."
+      },
+      "performanceBudget": {
+        "required": true,
+        "evidence": "The transaction adds no timer, polling, retry, subprocess, RPC method, stream opcode, or host publication. Capability rejection performs zero RPCs and one bounded empty-group close. Successful creation adds one post-operation list; known-page failure adds one exact close and one confirming list. The E2E-only one-shot faults are build-gated, retain one promise/flag and a bounded page-id set, and reset after each run. Pending client placements remain capped at 128 and clear on adoption, failure, or teardown."
+      },
+      "promotionCriteria": [
+        "Collect Linux and physical Windows paired-server evidence.",
+        "Collect 100 consecutive focused CI passes or 14 days without an unexplained flake."
+      ],
+      "knownGaps": [
+        "Live paired-server validation currently covers macOS only.",
+        "Multiple simultaneous viewers are not exercised by the Electron journey.",
+        "Direct SSH remote file URLs remain intentionally unsupported and local file previews retain their existing path."
+      ],
+      "demotionRule": "Demote if one paired HTML action can create duplicate client or host browser identities, lose the requested split, steal editor focus before an explicit browser click, lose browser focus after that click, or remove unrelated editor or terminal state on close."
+    },
     {
       "id": "browser-stream.bounded-reconnect",
       "title": "Remote browser streams recover within a bounded retry budget",
@@ -2440,7 +3046,7 @@
           "platform": "macos",
           "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-transport.test.ts",
           "result": "passed",
-          "durationSeconds": 0.4,
+          "durationSeconds": 0.34,
           "summary": "1 test file passed, 58 tests passed; covers cwdFallback forwarding only for local fresh spawns and metadata handoff."
         },
         {
@@ -2686,6 +3292,130 @@
       ],
       "demotionRule": "Demote or quarantine if identity-mismatched completion can retire newer work, cleanup retains compact authority, or the focused gate flakes without a product or harness bug."
     },
+    {
+      "id": "agent-launch.discovery-authority",
+      "title": "Agent discovery and launch use the same workspace authority",
+      "maturity": "experimental",
+      "protection": "partial",
+      "owner": "agent-session",
+      "layer": "renderer-store-contract",
+      "surfaces": ["Quick Launch agent inventory", "agent launch", "Floating Workspace"],
+      "platforms": ["macos", "linux", "windows"],
+      "providers": ["local", "wsl", "ssh", "remote-runtime"],
+      "coveredPlatforms": ["macos", "windows"],
+      "coveredProviders": ["local", "wsl"],
+      "coverageNotes": "A deterministic Windows-mode renderer oracle keeps an active WSL project and explicit-local Floating Workspace mounted together with disjoint agent inventories, then independently asserts discovery and launch authority. A headed physical Windows 2 journey with real Ubuntu WSL2 independently verified the rendered inventory and native PowerShell launch; SSH and paired-runtime behavior retain their existing contract coverage.",
+      "motivatingLinks": [
+        "https://linear.app/stably/issue/STA-4027/p1-floating-workspace-agent-detection-still-uses-active-wsl-project",
+        "https://github.com/stablyai/orca/pull/13995"
+      ],
+      "invariant": "Every agent launch surface must advertise the provider set detected on its explicit execution authority and launch on that same authority; a local Floating Workspace must never inherit an unrelated active project's WSL, SSH, or paired-runtime context.",
+      "oracle": "Model an active WSL project and a native-Windows Floating Workspace with WSL-only Claude and host-only Codex. Keep both detection consumers mounted, require their advertised sets to stay disjoint through refresh, require the legacy active-project inventory to remain unchanged, then independently assert the Floating launch call and PTY transport select local IPC with no WSL project runtime.",
+      "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/hooks/useDetectedAgents.test.tsx src/renderer/src/hooks/useAgentDetectionTarget.test.ts src/renderer/src/store/slices/detected-agents.test.ts src/renderer/src/store/slices/local-detected-agent-state.test.ts src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts src/renderer/src/lib/local-preflight-context.test.ts src/renderer/src/lib/launch-agent-in-new-tab.test.ts --reporter=verbose",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-connection.test.ts --reporter=dot",
+        "Headed Electron/CDP STA-4027 journey on Orca environment windows 2 with a selected Ubuntu-24.04 WSL project and local Floating Workspace"
+      ],
+      "testFiles": [
+        "src/renderer/src/hooks/useDetectedAgents.test.tsx",
+        "src/renderer/src/hooks/useAgentDetectionTarget.test.ts",
+        "src/renderer/src/store/slices/detected-agents.test.ts",
+        "src/renderer/src/store/slices/local-detected-agent-state.test.ts",
+        "src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts",
+        "src/renderer/src/lib/local-preflight-context.test.ts",
+        "src/renderer/src/lib/launch-agent-in-new-tab.test.ts",
+        "src/renderer/src/components/terminal-pane/pty-connection.test.ts"
+      ],
+      "assertionRefs": [
+        {
+          "file": "src/renderer/src/hooks/useDetectedAgents.test.tsx",
+          "assertions": [
+            "the active WSL project advertises only its WSL agent while Floating advertises only the native-host agent",
+            "Floating refresh preserves both scoped inventories and does not overwrite the legacy active-project inventory"
+          ]
+        },
+        {
+          "file": "src/renderer/src/store/slices/local-detected-agent-state.test.ts",
+          "assertions": [
+            "same-context callers deduplicate without cached broadcast fanout",
+            "refresh supersedes stale detection and failed cold refresh remains retryable",
+            "project removal evicts settled and in-flight context state"
+          ]
+        },
+        {
+          "file": "src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts",
+          "assertions": [
+            "removing one project evicts its authority-scoped agent inventory without disturbing another project"
+          ]
+        },
+        {
+          "file": "src/renderer/src/lib/launch-agent-in-new-tab.test.ts",
+          "assertions": [
+            "the advertised Floating agent launches in a Floating tab with null runtime ownership and no paired-runtime create call"
+          ]
+        },
+        {
+          "file": "src/renderer/src/components/terminal-pane/pty-connection.test.ts",
+          "assertions": [
+            "the Floating agent's actual PTY selects local IPC, carries executionHostId local, and omits the active project's WSL runtime"
+          ]
+        }
+      ],
+      "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/hooks/useDetectedAgents.test.tsx src/renderer/src/hooks/useAgentDetectionTarget.test.ts src/renderer/src/store/slices/detected-agents.test.ts src/renderer/src/store/slices/local-detected-agent-state.test.ts src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts src/renderer/src/lib/local-preflight-context.test.ts src/renderer/src/lib/launch-agent-in-new-tab.test.ts --reporter=verbose",
+          "result": "passed",
+          "durationSeconds": 2,
+          "summary": "Seven focused files passed independent WSL/local inventory, refresh isolation, cache lifecycle, project eviction, and Floating launch-call assertions."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-connection.test.ts --reporter=dot",
+          "result": "passed",
+          "durationSeconds": 20,
+          "summary": "The full PTY connection suite passed the independent Floating native-host transport oracle."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "manual",
+          "platform": "windows",
+          "command": "Headed Electron/CDP STA-4027 journey on Orca environment windows 2 with a selected Ubuntu-24.04 WSL project and local Floating Workspace",
+          "result": "passed",
+          "durationSeconds": 22.3,
+          "summary": "Environment abfee683-80eb-4ac3-ada0-da5d1b6303a6, runtime b3bea13e-f6b7-41e7-b850-0a118f7eda38: Floating advertised native Claude/Codex without WSL-only Gemini and launched Claude through native PowerShell with local host ownership while the WSL project remained active."
+        }
+      ],
+      "runtimeBudget": {
+        "p95Seconds": 40,
+        "scope": "eight focused renderer authority, cache, eviction, and launch test files"
+      },
+      "flakeHistory": {
+        "status": "soaking",
+        "evidence": "The deterministic oracle uses mocked provider results and React effect barriers. Exact-head PR run 31644438349 passed the full Node 24/26 matrix; an earlier patch-identical run's transient shard failures passed on rerun, but long-term soak history is not yet available."
+      },
+      "redGreenEvidence": {
+        "status": "complete",
+        "evidence": "The byte-identical oracle fails on merged PR #13995 and the tested latest-main snapshot ebe5125476 because Floating receives the WSL-only Claude inventory while launch remains local. The candidate passes; disabling the scoped Floating target reproduces the mismatch."
+      },
+      "performanceBudget": {
+        "required": true,
+        "evidence": "Floating uses one stable host context key, retained tab bars do not rescan worktree indexes on store writes, concurrent probes deduplicate per context, and in-flight promise entries are deleted on settlement."
+      },
+      "promotionCriteria": [
+        "Collect 100 consecutive focused CI passes or 14 days of soak history.",
+        "Keep the physical Windows/WSL inventory and launch journey green when authority routing changes.",
+        "Keep disjoint provider inventories, refresh isolation, launch authority, and bounded in-flight state green."
+      ],
+      "knownGaps": [
+        "Live SSH and paired-runtime launch journeys are covered by existing authority contracts rather than this focused oracle."
+      ],
+      "demotionRule": "Demote if discovery and launch can resolve different authorities, a scoped Floating probe overwrites the active-project inventory, or local context selection adds recurring scans or retained in-flight entries."
+    },
     {
       "id": "agent-session.provider-ownership",
       "title": "Provider sessions are resumed once per workspace ownership claim",
@@ -3226,16 +3956,22 @@
       "providers": ["local", "remote-runtime", "ssh", "wsl"],
       "coveredPlatforms": ["macos"],
       "coveredProviders": ["local", "remote-runtime", "ssh", "wsl"],
-      "coverageNotes": "Platform-neutral deterministic tests separate the durable Active Server preference from per-client connection, selected-workspace, browser-session, Add Project, and execution-host routing. The composed regression models Local desktop -> connect/navigate Windows 2 -> reveal a local terminal -> restart. Multi-client browser host overrides, multi-server profile caches, generic settings IPC rejection, local and remote workspace ownership, Add Project owner capture and stale-result fencing, host-qualified group/folder/worktree identity, and restart reset of transient routing are covered. A visible macOS Orca desktop server plus a separate paired Electron client proves real Git, plain-folder, Clone, Create, nested import, runtime-switch, disconnect, reconnect, concurrently visible same-ID local/runtime repo/worktree/group/folder rows, reversed catalog order, reversed refresh completion, local-after-runtime catalog refresh routing, and first paired-terminal activation without local fallback; hidden-window parity also passed. Live Linux, Windows, WSL, and SSH Add Project journeys remain uncollected.",
-      "motivatingLinks": ["https://github.com/stablyai/orca/pull/9687"],
-      "invariant": "Only an explicit user change in Settings > Remote Orca Servers > Advanced > Active Server may mutate activeRuntimeEnvironmentId. Connecting, pairing, disconnecting, selecting or revealing a workspace or terminal, browser/mobile handoff, remote navigation, and reconnect must use transient or target-owner routing and must never rewrite the durable preference. Every Add Project scan, add, import, catalog refresh, and worktree refresh must stay on the host selected when that operation began, even if the durable preference changes or the repo catalog is not hydrated. Generic settings mutation cannot bypass the dedicated preference IPC.",
-      "oracle": "Start with Active Server=Local desktop, connect and navigate Windows 2, then reveal a local terminal and assert it succeeds while the persisted preference remains local before and after restart. Repeat with multiple clients and servers, browser host switches, remote-owned and local-owned workspaces, pairing/connect/disconnect, and generic settings writes. In a separate paired Electron client, select a non-default headed runtime and add a real Git repo, plain folder, clone, created project, and nested repos while switching the preference and disconnecting/reconnecting. Before Git Add, plain-folder Add, Clone, and Create completion, insert a same-ID local repo/worktree decoy; require final activation to remain on the captured runtime. Merge same-ID local/runtime repo, worktree, group, and folder rows, reverse same-host refresh completions, overlap refresh with reconnect, issue ordinary unqualified local refreshes, then create the first paired runtime terminal while the same-ID local/runtime worktrees remain visible. Require only the selected server inventory to change, exact runtime ownership in the client store, preserved host-qualified catalogs, authoritative direct-SSH pruning without runtime sibling loss, visible projects, and zero direct SSH fallback. Assert only the dedicated validated preference method changes activeRuntimeEnvironmentId and stale host-operation completions cannot overwrite the newly selected transient host.",
+      "coverageNotes": "Platform-neutral deterministic tests separate the durable Active Server preference from per-client connection, selected-workspace, browser-session, Add Project, and execution-host routing. The composed regression models Local desktop -> connect/navigate Windows 2 -> reveal a local terminal -> restart. Multi-client browser host overrides, multi-server profile caches, generic settings IPC rejection, local and remote workspace ownership, Add Project eligibility/owner capture/stale-result fencing, host-qualified group/folder/worktree identity, and restart reset of transient routing are covered. A visible macOS Orca desktop server plus separate paired Electron and web clients prove selected-runtime Add Project operations and disabled creation when the only listed host is blocked or unavailable; headless-server parity also passed. Live Linux, Windows, WSL, and SSH Add Project journeys remain uncollected.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/pull/9687",
+        "https://linear.app/stably/issue/STA-4024/p1-paired-web-add-project-enables-unavailable-host-fallback-after-pr"
+      ],
+      "invariant": "Only an explicit user change in Settings > Remote Orca Servers > Advanced > Active Server may mutate activeRuntimeEnvironmentId. Connecting, pairing, disconnecting, selecting or revealing a workspace or terminal, browser/mobile handoff, remote navigation, and reconnect must use transient or target-owner routing and must never rewrite the durable preference. Every Add Project selected host must satisfy canSelectAddRepoHost; paired web has no local filesystem fallback, so no valid host means Browse, Clone, and Create remain disabled. Every operation stays on the host selected when it began, even if preference or catalog state changes. Generic settings mutation cannot bypass the dedicated preference IPC.",
+      "oracle": "Start with Active Server=Local desktop, connect and navigate Windows 2, then reveal a local terminal and assert it succeeds while the persisted preference remains local before and after restart. Repeat transient routing and selected-runtime Add Project operations with exact-ID host decoys and completion reordering. Separately pair the real web client to an isolated headed host, then make its sole still-listed runtime compatibility-blocked and unavailable. Require a null authoritative selection, a disabled host option, and disabled Browse, Clone, and Create actions with no local fallback. Repeat against headless serve. Run the byte-identical selector/action contract on latest main, candidate, and candidate with the eligibility seam disabled.",
       "commands": [
         "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/settings.test.ts src/main/ipc/runtime-environments.test.ts src/renderer/src/store/slices/settings.test.ts src/renderer/src/store/slices/browser.test.ts src/renderer/src/components/settings/browser-session-host-selection.test.ts src/renderer/src/components/settings/RuntimeEnvironmentsPane.test.ts src/renderer/src/components/status-bar/SshStatusSegment.test.ts src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts src/renderer/src/hooks/useIpcEvents.test.ts src/renderer/src/web/web-preload-api.test.ts --maxWorkers=1",
         "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/sidebar/AddProjectFromFolderDialog.test.tsx src/renderer/src/components/sidebar/NonGitFolderDialog.test.tsx src/renderer/src/components/sidebar/AddRepoDialog.default-checkout.test.ts src/renderer/src/components/sidebar/AddRepoSteps.default-checkout.test.ts src/renderer/src/components/sidebar/project-added-default-checkout.test.ts src/renderer/src/components/sidebar/useAddRepoLocalFolderFlow.test.ts src/renderer/src/components/sidebar/useAddRepoNestedImportFlow.test.ts src/renderer/src/components/sidebar/useAddRepoServerPathFlow.test.ts src/renderer/src/components/sidebar/useAddRepoCloneFlow.test.ts src/renderer/src/components/sidebar/useCreateRepo.default-checkout.test.ts src/renderer/src/components/sidebar/worktree-list-host-filtering.test.ts src/renderer/src/lib/resolved-worktree-execution-host.test.ts src/renderer/src/lib/worktree-runtime-owner.test.ts src/renderer/src/store/selectors.test.ts src/renderer/src/store/slices/repos-all-hosts-folder-workspaces.test.ts src/renderer/src/store/slices/repos-project-groups.test.ts src/renderer/src/store/slices/repos-selected-owner-routing.test.ts src/renderer/src/store/slices/selected-host-active-workspace-identity.test.ts src/renderer/src/store/slices/worktrees.test.ts --maxWorkers=1",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx src/renderer/src/components/sidebar/useAddRepoServerPathFlow.test.ts src/renderer/src/runtime/runtime-server-directory-browser.test.ts src/renderer/src/store/slices/repos-paired-runtime-add.test.ts --maxWorkers=1",
         "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/sidebar/AddProjectFromFolderDialog.test.tsx src/renderer/src/components/sidebar/NonGitFolderDialog.test.tsx src/renderer/src/components/sidebar/AddRepoDialog.default-checkout.test.ts src/renderer/src/components/sidebar/AddRepoSteps.default-checkout.test.ts src/renderer/src/components/sidebar/project-added-default-checkout.test.ts src/renderer/src/components/sidebar/useAddRepoLocalFolderFlow.test.ts src/renderer/src/components/sidebar/useAddRepoNestedImportFlow.test.ts src/renderer/src/components/sidebar/useAddRepoServerPathFlow.test.ts src/renderer/src/components/sidebar/useAddRepoCloneFlow.test.ts src/renderer/src/components/sidebar/useCreateRepo.default-checkout.test.ts src/renderer/src/components/sidebar/worktree-list-host-filtering.test.ts src/renderer/src/lib/resolved-worktree-execution-host.test.ts src/renderer/src/lib/worktree-runtime-owner.test.ts src/renderer/src/store/selectors.test.ts src/renderer/src/store/slices/repos-all-hosts-folder-workspaces.test.ts src/renderer/src/store/slices/repos-project-groups.test.ts src/renderer/src/store/slices/repos-selected-owner-routing.test.ts src/renderer/src/store/slices/selected-host-active-workspace-identity.test.ts src/renderer/src/store/slices/worktrees.test.ts src/renderer/src/runtime/web-runtime-session.test.ts --maxWorkers=1",
         "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/pr11346-selected-runtime-add.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
-        "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/pr11346-selected-runtime-add.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line"
+        "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/pr11346-selected-runtime-add.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line",
+        "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-web-add-project-unavailable-host.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
+        "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-web-add-project-unavailable-host.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line"
       ],
       "testFiles": [
         "src/main/ipc/settings.test.ts",
@@ -3246,11 +3982,14 @@
         "src/renderer/src/components/settings/RuntimeEnvironmentsPane.test.ts",
         "src/renderer/src/components/status-bar/SshStatusSegment.test.ts",
         "src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts",
+        "src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts",
         "src/renderer/src/hooks/useIpcEvents.test.ts",
         "src/renderer/src/web/web-preload-api.test.ts",
         "src/renderer/src/components/sidebar/AddProjectFromFolderDialog.test.tsx",
         "src/renderer/src/components/sidebar/NonGitFolderDialog.test.tsx",
         "src/renderer/src/components/sidebar/AddRepoDialog.default-checkout.test.ts",
+        "src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx",
+        "src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx",
         "src/renderer/src/components/sidebar/AddRepoSteps.default-checkout.test.ts",
         "src/renderer/src/components/sidebar/project-added-default-checkout.test.ts",
         "src/renderer/src/components/sidebar/useAddRepoLocalFolderFlow.test.ts",
@@ -3262,15 +4001,46 @@
         "src/renderer/src/lib/resolved-worktree-execution-host.test.ts",
         "src/renderer/src/lib/worktree-runtime-owner.test.ts",
         "src/renderer/src/store/selectors.test.ts",
+        "src/renderer/src/store/slices/repos-paired-runtime-add.test.ts",
         "src/renderer/src/store/slices/repos-all-hosts-folder-workspaces.test.ts",
         "src/renderer/src/store/slices/repos-project-groups.test.ts",
         "src/renderer/src/store/slices/repos-selected-owner-routing.test.ts",
         "src/renderer/src/store/slices/selected-host-active-workspace-identity.test.ts",
         "src/renderer/src/store/slices/worktrees.test.ts",
         "src/renderer/src/runtime/web-runtime-session.test.ts",
-        "tests/e2e/pr11346-selected-runtime-add.spec.ts"
+        "tests/e2e/pr11346-selected-runtime-add.spec.ts",
+        "tests/e2e/paired-web-add-project-unavailable-host.spec.ts"
       ],
       "assertionRefs": [
+        {
+          "file": "src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts",
+          "assertions": [
+            "paired web hides the viewing computer as an Add Project filesystem authority and selects only an eligible paired runtime",
+            "a sole blocked or errored runtime remains listed but produces no selected Add Project host"
+          ]
+        },
+        {
+          "file": "src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts",
+          "assertions": [
+            "paired runtime browsing opens the host browser without invoking native pickFolders while desktop local and SSH routes remain intact"
+          ]
+        },
+        {
+          "file": "src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx",
+          "assertions": ["paired runtime browsing renders the in-app host filesystem browser"]
+        },
+        {
+          "file": "src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx",
+          "assertions": [
+            "host-scoped Add Project actions remain disabled until a paired runtime is selectable"
+          ]
+        },
+        {
+          "file": "src/renderer/src/store/slices/repos-paired-runtime-add.test.ts",
+          "assertions": [
+            "an explicitly selected paired runtime submits repo.add to that runtime without native repo or folder-picker calls"
+          ]
+        },
         {
           "file": "src/main/ipc/settings.test.ts",
           "assertions": [
@@ -3378,9 +4148,35 @@
             "keeps every expanded selected-runtime Add Project path in hidden-window desktop parity",
             "creates the first paired runtime terminal while same-ID local/runtime worktrees remain visible without clearing the selected runtime owner"
           ]
+        },
+        {
+          "file": "tests/e2e/paired-web-add-project-unavailable-host.spec.ts",
+          "assertions": [
+            "a version-blocked sole host stays visible and non-selectable while Browse, Clone, and Create are disabled",
+            "an unavailable sole host has the same disabled action contract without a local fallback",
+            "the rendered contract passes against headed desktop and headless serve hosts"
+          ]
         }
       ],
       "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-web-add-project-unavailable-host.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 12.3,
+          "summary": "A real paired web client against a visible desktop host kept the sole blocked and unavailable runtime listed but non-selectable, with Browse, Clone, and Create disabled and no local host fallback."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "SKIP_BUILD=1 ORCA_E2E_WEB_CLIENT=1 ORCA_E2E_FORCE_HEADFUL=1 pnpm exec playwright test tests/e2e/paired-web-add-project-unavailable-host.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1 --reporter=line",
+          "result": "passed",
+          "durationSeconds": 5.8,
+          "summary": "The same present-but-blocked and present-but-unavailable Add Project action oracle passed against isolated headless serve."
+        },
         {
           "date": "2026-07-22",
           "runner": "local",
@@ -3455,7 +4251,7 @@
       },
       "redGreenEvidence": {
         "status": "complete",
-        "evidence": "The byte-identical focused oracle (SHA-256 6de18c140a86801460e58f52287e27a58b97f1576f9f387fa82e1bd4eb378f7b) fails 2/3 on review baseline aa6f945001a5f78a07663c854fabb95c55d8b40b and on the r5-disabled parent e21f4ca58e: local-first lookup returns /local/repo and folder activation has no runtime host. It passes 3/3 on the candidate. Main later advanced to 94cf2f1422f30fc309cb47c5e864a831d516fa8b without changing any of the candidate's 68 files or the focused oracle production boundary; the rebased disabled parent f247d961cab15237bc7fcf0598fe76007f78ec7c has the same stable patch ID as e21f4ca58e. The final paired spec and fixture have SHA-256 bd6d9014d1bed2715397bcd2121d5d7e01792347b13ff14778ccf608bf98789c and d1d78a82f868e2f3152777550825c0ca2d4dc3cba5c6de548e066d2931751fc7. With the final runtime-session owner fix disabled, the focused session test fails 3/43 and the byte-identical hidden paired oracle deterministically creates the host terminal but reports null active client owner while same-ID local/runtime worktrees remain. The integrated candidate passes the same focused test and both headed/hidden paired oracles with exact runtime ownership, server inventory, local exclusion, preserved catalogs, visible rows, and zero direct SSH fallback. Earlier Active Server preference paths retain deterministic coverage but do not yet have a saved intentional-break artifact."
+        "evidence": "The Add Project selector file from fix-disabled overlay 17a612c819 and candidate 8abf0f5d20 is byte-identical (SHA-256 f34c3c69c8adba23811c3a3b6a0efb669f787666c5ada086df8a167e785eea20): its blocked and unavailable sole-host cases fail with the production fix disabled on latest main ebe5125476 after PR #13909 and pass on the candidate. The focused combined selector/transaction invocation was 3 failed with 69 skipped on the red overlay and 3 passed with 75 skipped on the candidate; the different totals come from supplemental browser-transaction cases, not this selector file. The originating/latest affected main 1136503c6a and its fix-disabled overlay were also red before the provider-gating rebase. The byte-identical focused oracle (SHA-256 6de18c140a86801460e58f52287e27a58b97f1576f9f387fa82e1bd4eb378f7b) fails 2/3 on review baseline aa6f945001a5f78a07663c854fabb95c55d8b40b and on the r5-disabled parent e21f4ca58e: local-first lookup returns /local/repo and folder activation has no runtime host. It passes 3/3 on the candidate. Main later advanced to 94cf2f1422f30fc309cb47c5e864a831d516fa8b without changing any of the candidate's 68 files or the focused oracle production boundary; the rebased disabled parent f247d961cab15237bc7fcf0598fe76007f78ec7c has the same stable patch ID as e21f4ca58e. The final paired spec and fixture have SHA-256 bd6d9014d1bed2715397bcd2121d5d7e01792347b13ff14778ccf608bf98789c and d1d78a82f868e2f3152777550825c0ca2d4dc3cba5c6de548e066d2931751fc7. With the final runtime-session owner fix disabled, the focused session test fails 3/43 and the byte-identical hidden paired oracle deterministically creates the host terminal but reports null active client owner while same-ID local/runtime worktrees remain. The integrated candidate passes the same focused test and both headed/hidden paired oracles with exact runtime ownership, server inventory, local exclusion, preserved catalogs, visible rows, and zero direct SSH fallback. Earlier Active Server preference paths retain deterministic coverage but do not yet have a saved intentional-break artifact."
       },
       "performanceBudget": {
         "required": true,
@@ -6701,7 +7497,7 @@
     },
     {
       "id": "terminal-input.ime-and-synthetic-forwarding",
-      "title": "IME, native text, and synthetic input commit exactly once and do not leak preedit bytes",
+      "title": "IME, native text, and synthetic input commit exactly once, do not leak preedit bytes, and pair every claimed press with one release",
       "maturity": "experimental",
       "protection": "partial",
       "owner": "terminal-input",
@@ -6718,18 +7514,19 @@
       "providers": ["local", "daemon", "ssh", "remote-runtime"],
       "coveredPlatforms": ["macos", "linux"],
       "coveredProviders": [],
-      "coverageNotes": "Local macOS and containerized Linux evidence, deterministic renderer-unit coverage for the Linux/Sogou candidate-key policy including the legacy orphaned-keyup fallback, and Electron/CDP live-PTY Sogou-style repros. Real Linux/Sogou OS IME automation, Windows ConPTY post-agent reset, and the CJK/Vietnamese/Arabic matrix remain registered gaps.",
+      "coverageNotes": "Local macOS and containerized Linux evidence, deterministic renderer-unit coverage for the Linux/Sogou candidate-key policy including the legacy orphaned-keyup fallback, Electron/CDP live-PTY Sogou-style repros, and a macOS renderer/main slice for Preview kitty commits: claimed press/release pairing in both keyup orderings, and snapshot flag provenance where a proven 0, a proven non-zero, and an absent field stay three distinct facts from daemon through the sequenced remote SnapshotStart frame. Real Linux/Sogou OS IME automation, Windows ConPTY post-agent reset, and the CJK/Vietnamese/Arabic matrix remain registered gaps.",
       "motivatingLinks": [
         "https://github.com/stablyai/orca/pull/6699",
         "https://github.com/stablyai/orca/pull/6682",
         "https://github.com/stablyai/orca/pull/6513",
         "https://github.com/stablyai/orca/pull/6999"
       ],
-      "invariant": "Composition, native text forwarding, synthetic input, paste, and platform keyboard bypass paths must not send preedit/control bytes before commit and must commit text exactly once to the intended PTY.",
-      "oracle": "The current renderer-unit slice asserts native text commits route to the intended PTY once, composition/preedit bookkeeping does not leak premature text, input-source classification handles synthetic/native paths, paste/runtime forwarding avoids duplicate terminal payloads for covered fixtures, and Linux/Sogou candidate Space/digit selectors do not leak keydown/keypress/keyup while ordinary and long-held letter-to-digit typing remains available. The Electron/CDP live-PTY repro verifies Sogou-style Space and digit selectors submit only the committed Chinese text, while the legacy orphaned-letter-keyup sequence sends no selector byte to the PTY. Real legacy IME commit preservation and the full CJK/Vietnamese/Arabic/JIS-yen matrix run in follow-up platform soak where automation is possible.",
+      "invariant": "Composition, native text forwarding, synthetic input, paste, and platform keyboard bypass paths must not send preedit/control bytes before commit and must commit text exactly once to the intended PTY. When the snapshot source proves kitty state, macOS Preview commits must use the application's effective flags after the sequenced snapshot and every proven replay/live transition, and a claimed press delivered under report_event_types must produce exactly one matching release regardless of whether keyup arrives before or after insertText and regardless of xterm's defensive internal reset.",
+      "oracle": "Exact outbound bytes from the REAL native-text forwarder behind installPreviewImeBridge after initial snapshot restore, replacement resync, live transitions, and both keydown->insertText->keyup and keydown->keyup->insertText orderings; a wiring-only mock is supporting evidence, not the oracle. The current renderer-unit slice asserts native text commits route to the intended PTY once, composition/preedit bookkeeping does not leak premature text, input-source classification handles synthetic/native paths, paste/runtime forwarding avoids duplicate terminal payloads for covered fixtures, and Linux/Sogou candidate Space/digit selectors do not leak keydown/keypress/keyup while ordinary and long-held letter-to-digit typing remains available. The Electron/CDP live-PTY repro verifies Sogou-style Space and digit selectors submit only the committed Chinese text, while the legacy orphaned-letter-keyup sequence sends no selector byte to the PTY. Real legacy IME commit preservation and the full CJK/Vietnamese/Arabic/JIS-yen matrix run in follow-up platform soak where automation is possible.",
       "commands": [
         "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.test.ts src/renderer/src/components/terminal-pane/terminal-ime-substituted-text-commit.test.ts src/renderer/src/components/terminal-pane/terminal-ime-macos-keybinding-dict-trace.test.ts src/renderer/src/components/terminal-pane/terminal-paste-runtime.test.ts src/renderer/src/components/terminal-pane/terminal-ime-composition-tracker.test.ts src/renderer/src/components/terminal-pane/terminal-ime-candidate-key-release-guard.test.ts src/renderer/src/components/terminal-pane/xterm-bypass-policy-non-mac.test.ts src/renderer/src/components/terminal-pane/xterm-bypass-policy.test.ts",
         "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx src/shared/terminal-kitty-keyboard-mode-tracker.test.ts src/main/ipc/terminal-preview.test.ts src/main/ipc/terminal-preview-output-stream.test.ts src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts src/main/daemon/daemon-pty-adapter.test.ts",
         "pnpm run test:e2e -- tests/e2e/chinese-ime-chat-input-repro.spec.ts"
       ],
       "testFiles": [
@@ -6742,6 +7539,14 @@
         "src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.test.ts",
         "src/renderer/src/components/terminal-pane/xterm-bypass-policy-non-mac.test.ts",
         "src/renderer/src/components/terminal-pane/xterm-bypass-policy.test.ts",
+        "src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts",
+        "src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts",
+        "src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx",
+        "src/shared/terminal-kitty-keyboard-mode-tracker.test.ts",
+        "src/main/ipc/terminal-preview.test.ts",
+        "src/main/ipc/terminal-preview-output-stream.test.ts",
+        "src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts",
+        "src/main/daemon/daemon-pty-adapter.test.ts",
         "tests/e2e/chinese-ime-chat-input-repro.spec.ts"
       ],
       "assertionRefs": [
@@ -6806,6 +7611,65 @@
             "macOS standalone Process key behavior and composition-owned key suppression stay intact"
           ]
         },
+        {
+          "file": "src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts",
+          "assertions": [
+            "the real forwarder behind the Preview bridge encodes the commit from the snapshot-proven flags before any live output",
+            "flags 0/1 commit raw text, flags 2 add one CSI-u release, flags 8 emit one CSI-u press, and flags 10 emit a CSI-u press followed by exactly one release",
+            "both keydown->insertText->keyup and keydown->keyup->insertText orderings produce the same bytes",
+            "the release is emitted by the forwarder while xterm's internal kitty flags stay 0",
+            "the mutable flags getter is read exactly once, at commit time, never on keydown or keyup",
+            "auto-repeat, two-key rollover, a swallowed commit, a retired claim, blur, and disposal each emit at most one release and never synthesize one"
+          ]
+        },
+        {
+          "file": "src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts",
+          "assertions": [
+            "a Preview opened on a snapshot carrying flags 8 adopts 8 before any live output",
+            "a replacement snapshot whose ANSI carries no kitty bytes keeps its proven flags, and a proven 0 clears an earlier 8",
+            "a missing field leaves the mirror unproven at the raw-text fallback and a later live negotiation still upgrades it",
+            "restored flags land on the screen the snapshot scan selected",
+            "a proven post-snapshot suffix advances the stack while redelivered bytes apply idempotently"
+          ]
+        },
+        {
+          "file": "src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx",
+          "assertions": [
+            "the Preview hands the forwarder the live kitty mirror seeded from the snapshot's proven flags"
+          ]
+        },
+        {
+          "file": "src/shared/terminal-kitty-keyboard-mode-tracker.test.ts",
+          "assertions": [
+            "a fresh PTY's known 0 is distinguishable from a snapshot's unproven 0 fallback",
+            "restoreSnapshotFlags proves only the active screen and rejects non-safe-integer values",
+            "provenance survives absolute sets, screen switches, RIS and DECSTR, but a pop past omitted push history returns to unknown rather than a manufactured 0"
+          ]
+        },
+        {
+          "file": "src/main/ipc/terminal-preview.test.ts",
+          "assertions": [
+            "terminalPreview:connect returns image, sequence, and kitty flags from the same capture, including after an overflow retry"
+          ]
+        },
+        {
+          "file": "src/main/ipc/terminal-preview-output-stream.test.ts",
+          "assertions": [
+            "fully covered chunks are dropped, a sliced or strictly newer sequenced suffix gets live mode semantics, and an unsliceable or metadata-less overlap gets replay semantics"
+          ]
+        },
+        {
+          "file": "src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts",
+          "assertions": [
+            "SnapshotStart decodes proven 0 and 8 with their seq into requested and host-pushed snapshot paths",
+            "negative, fractional, unsafe, and non-numeric values are treated as absent rather than clamped",
+            "an old host that omits the field stays usable and is never coerced to a proven 0"
+          ]
+        },
+        {
+          "file": "src/main/daemon/daemon-pty-adapter.test.ts",
+          "assertions": ["daemon provider snapshots publish proven kitty flags including a known 0"]
+        },
         {
           "file": "tests/e2e/chinese-ime-chat-input-repro.spec.ts",
           "assertions": [
@@ -6817,6 +7681,15 @@
         }
       ],
       "evidenceRuns": [
+        {
+          "date": "2026-08-11",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx src/shared/terminal-kitty-keyboard-mode-tracker.test.ts src/main/ipc/terminal-preview.test.ts src/main/ipc/terminal-preview-output-stream.test.ts src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts src/main/daemon/daemon-pty-adapter.test.ts",
+          "result": "passed",
+          "durationSeconds": 9.84,
+          "summary": "8 test file(s) passed, 288 tests, covering the Preview kitty slice: real forwarder bytes at snapshot-proven flags, press/release pairing across both keyup/insertText orderings, and flag provenance where a proven 0, a proven non-zero, and an absent field stay three distinct facts — asserted on the daemon snapshot and on a host-pushed remote snapshot that carries the flags with their sequence. The emitter-side rule that a remote SnapshotStart withholds flags without a seq has no direct assertion yet; the client-side gate is what these files pin."
+        },
         {
           "date": "2026-08-09",
           "runner": "local",
@@ -6882,7 +7755,7 @@
       },
       "redGreenEvidence": {
         "status": "partial",
-        "evidence": "Focused tests cover existing native-text, input-source, paste/runtime forwarding, Linux/Sogou candidate selector, post-composition guard contracts, and live-PTY Sogou-style candidate commits. Needs intentional-break proof for duplicate native text forwarding and composition preedit leakage, plus the broader language/platform matrix."
+        "evidence": "Focused tests cover existing native-text, input-source, paste/runtime forwarding, Linux/Sogou candidate selector, post-composition guard contracts, live-PTY Sogou-style candidate commits, and the Preview kitty slice (press/release pairing in both keyup orderings, and snapshot flag provenance separating a proven 0 from an absent field). Needs intentional-break proof for duplicate native text forwarding and composition preedit leakage, plus the broader language/platform matrix."
       },
       "performanceBudget": {
         "required": true,
@@ -6895,7 +7768,9 @@
       ],
       "knownGaps": [
         "Current commands include renderer-unit coverage and a CDP-driven Electron repro; real OS IME automation may need manual or soak evidence.",
-        "Backspace/Enter during composition, JIS yen, Arabic/RTL, paste edge cases, and Windows ConPTY post-agent key reset still need representative gate coverage."
+        "Backspace/Enter during composition, JIS yen, Arabic/RTL, paste edge cases, and Windows ConPTY post-agent key reset still need representative gate coverage.",
+        "An older remote host omits the optional SnapshotStart kitty field, so a new client falls back to raw commits until live negotiation is observed.",
+        "Snapshot authorities expose only the active screen's effective flags, not kitty's complete two-screen push stacks; a pop that crosses the restored boundary degrades to unknown rather than a proven value."
       ],
       "demotionRule": "Cannot promote if success is based only on DOM text without PTY byte/cell evidence."
     },
@@ -7238,14 +8113,16 @@
       "providers": ["local", "daemon", "ssh", "wsl", "remote-runtime"],
       "coveredPlatforms": ["macos"],
       "coveredProviders": ["local", "daemon"],
-      "coverageNotes": "Runtime and provider-contract tests on macOS cover exact-PTY authorization, local/daemon fresh confirmation, exact ConPTY membership, and unsupported-provider fail-closed behavior. Physical Windows, live Linux, SSH, WSL, and remote-runtime validation remain explicit gaps; providers without confirmation preserve conservative refusal on a shell conflict.",
+      "coverageNotes": "Runtime and provider-contract tests on macOS cover exact-PTY authorization, verified managed-Claude launch identity, local/daemon fresh confirmation, exact ConPTY membership, and unsupported-provider fail-closed behavior. Physical Windows, live Linux, SSH, WSL, and remote-runtime validation remain explicit gaps; providers without confirmation preserve conservative refusal when no verified launch identity exists.",
       "motivatingLinks": ["https://github.com/stablyai/orca/issues/8303"],
-      "invariant": "A guarded note send writes only to the exact PTY binding checked by the guard and only while permission/wait evidence allows input; fresh hook state conflicting with an ordinary shell foreground requires fresh provider confirmation of a recognized agent in that PTY.",
-      "oracle": "Fresh explicit state plus ordinary PowerShell plus confirmed recognized agent is sendable on the same PTY. Confirmed shell/non-agent, unavailable confirmation, PTY exit, handle rebind, or a callback PTY mismatch returns a refusal or not-writable result and writes zero bytes.",
+      "invariant": "A guarded note send writes only to the exact PTY binding checked by the guard and only while permission/wait evidence allows input; a generic busy title requires independent agent identity from the title, a verified managed launch bound to the current PTY incarnation, or the foreground process; fresh hook state conflicting with an ordinary shell foreground requires fresh provider confirmation of a recognized agent in that PTY.",
+      "oracle": "A quarter-circle Claude task title authorizes without a provider lookup only on the exact PTY incarnation carrying verified managed-Claude launch identity; the same title in a bare pane, with an unverified launch hint, or after PTY incarnation replacement is refused while current Claude activity remains a working signal. Fresh explicit state plus ordinary PowerShell plus confirmed recognized agent is sendable on the same PTY. Confirmed shell/non-agent, unavailable confirmation, PTY exit, handle rebind, or a callback PTY mismatch returns a refusal or not-writable result and writes zero bytes.",
       "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/quarter-circle-title-send-authorization.test.ts",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/terminal-send.test.ts src/main/ipc/pty.test.ts src/main/providers/agent-foreground-process.test.ts src/main/providers/local-pty-provider.test.ts src/main/providers/windows-conpty-process-membership.test.ts src/main/daemon/daemon-foreground-confirmation-protocol.test.ts src/main/daemon/pty-subprocess.test.ts src/renderer/src/lib/active-agent-note-send.test.ts src/renderer/src/components/browser-pane/BrowserAnnotationSendMenuContent.test.tsx"
       ],
       "testFiles": [
+        "src/main/runtime/quarter-circle-title-send-authorization.test.ts",
         "src/main/runtime/orca-runtime.test.ts",
         "src/main/runtime/rpc/terminal-send.test.ts",
         "src/main/ipc/pty.test.ts",
@@ -7258,6 +8135,14 @@
         "src/renderer/src/components/browser-pane/BrowserAnnotationSendMenuContent.test.tsx"
       ],
       "assertionRefs": [
+        {
+          "file": "src/main/runtime/quarter-circle-title-send-authorization.test.ts",
+          "assertions": [
+            "a verified managed-Claude launch authorizes a task-text quarter-circle title without foreground-process work",
+            "a bare pane, an unverified launch hint, and a replacement PTY incarnation remain refused",
+            "quarter circles remain working signals and braille authorization is unchanged"
+          ]
+        },
         {
           "file": "src/main/runtime/orca-runtime.test.ts",
           "assertions": [
@@ -7325,6 +8210,15 @@
         }
       ],
       "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/quarter-circle-title-send-authorization.test.ts",
+          "result": "passed",
+          "durationSeconds": 20.9,
+          "summary": "The focused file passed 9 tests, including current-incarnation managed-Claude authorization with zero foreground calls and fail-closed bare, unverified, and replacement-incarnation quarter-circle titles."
+        },
         {
           "date": "2026-07-11",
           "runner": "local",
@@ -7345,11 +8239,11 @@
       },
       "redGreenEvidence": {
         "status": "partial",
-        "evidence": "Removing strong confirmation fails the shell-conflict success oracle, while removing either exact-binding comparison fails zero-write rebind coverage; saved intentional-break and physical Windows evidence remain missing."
+        "evidence": "Before the verified-launch fallback, the managed-Claude unavailable-foreground case failed with isRunningAgent false; the focused file passed 7 tests after the fix. Removing the launch-incarnation comparison makes the replacement-incarnation refusal fail. Removing strong confirmation fails the shell-conflict success oracle, while removing either exact-binding comparison fails zero-write rebind coverage; physical Windows evidence remains missing."
       },
       "performanceBudget": {
         "required": true,
-        "evidence": "Confirmation is invoked at most once per status evaluation and only for fresh explicit hook state whose ordinary foreground result is a shell. Count tests prove permission/title blockers and ordinary recognized-agent evidence add zero confirmations; no polling, retry, session listing, provider fanout, or runtime-global cache is added, and existing provider snapshot dedup remains authoritative."
+        "evidence": "Confirmation is invoked at most once per status evaluation and only for fresh explicit hook state whose ordinary foreground result is a shell. Count tests prove verified managed-Claude launch identity, permission/title blockers, and ordinary recognized-agent evidence add zero provider calls; no polling, retry, session listing, provider fanout, or runtime-global cache is added, and existing provider snapshot dedup remains authoritative."
       },
       "promotionCriteria": [
         "Run the browser annotation existing-agent and repeat-send path in Electron on Windows ConPTY without a recognition refusal.",
@@ -7362,7 +8256,7 @@
         "SSH, WSL, legacy daemon, and remote-runtime providers without confirmation remain intentionally fail-closed on an ordinary-shell conflict; no live artifacts cover those degraded paths.",
         "No live Linux PTY, paired-web, mobile/relay, restore/replay, or multi-window artifact is attached; those surfaces receive no renderer, persistence, or protocol change."
       ],
-      "demotionRule": "Keep non-blocking or demote to protection none if provider confirmation becomes unconditional, exact-PTY mismatch can write bytes, unsupported providers fail open, or the focused gate flakes without an actionable product or harness defect."
+      "demotionRule": "Keep non-blocking or demote to protection none if a generic busy title authorizes without exact title, verified-launch, or foreground identity; provider confirmation becomes unconditional; exact-PTY mismatch can write bytes; unsupported providers fail open; or the focused gate flakes without an actionable product or harness defect."
     },
     {
       "id": "terminal-input.agent-prompt-injection",
@@ -7507,19 +8401,25 @@
       "providers": ["local", "daemon", "ssh", "wsl", "remote-runtime"],
       "coveredPlatforms": ["macos"],
       "coveredProviders": ["local", "daemon", "ssh"],
-      "coverageNotes": "A deterministic service-state-machine oracle now models a current-contract worker and coordinator whose renderer graph identities disappear across an app/runtime update. It exercises the production verifier with restored PTY and hydrated hook commitments, proves authenticated completion replay across a fresh runtime, explicit takeover, ordinary mail routing, remote-attachment process fencing, retained Task/Dispatch/terminal identity, and unchanged fixture marker bytes, and rejects foreign pane evidence. Other deterministic units cover authority-aware legacy formatting, exact legacy worker identity planning, local worker presentation, retained-output reads after adoption, reveal-failure warnings, stable-pane Run/Dispatch routing, creator pane/process/Run-generation fencing, indexed retained-Run lookup scaling, the SSH in-process CLI fallback, and federated non-reveal. Two isolated macOS Electron journeys launch fake Codex workers through the real RPC path and record append-only spawn/interruption ledgers. They assert immediate inactive presentation, one live agent PID, stable PTY/incarnation/tab/leaf/worktree/Task/Dispatch identity, and no interruption after workspace re-entry; the restart journey additionally removes renderer ownership, marks the Dispatch legacy, retains the daemon process across an app restart, and proves exact background adoption with readable ACK output and no resume replay. Distinct A/B artifacts plus live SSH, WSL, folder, remote-runtime, Linux, and Windows cutover journeys remain explicit gaps.",
-      "motivatingLinks": ["https://github.com/stablyai/orca/pull/11107#discussion_r3663321387"],
-      "invariant": "Starting a worker in the coordinator's current workspace must materialize one inactive terminal tab before worker-start returns, preserve coordinator focus, and remain exactly once after workspace re-entry. After an app update or restart, an exact live legacy worker must fence automatic provider resume, adopt its original PTY into its original background pane, retain readable output, and clear the resume record without spawning, writing, signalling, interrupting, replacing, or focusing the worker. A current-contract worker whose renderer graph identity is temporarily absent must retain its Dispatch capability and settle exactly once from exact hook-attested handle, pane, and process evidence; otherwise only an exact attested coordinator may take over. An exact existing target workspace must receive a discoverable tab without stealing coordinator focus; if renderer reveal fails, worker-start must expose that the live worker remains background-only. Run and Dispatch checks must resolve through the caller's stable pane identity when a terminal handle is reminted, while a live handle outranks mismatched pane metadata. A nested worker's creator edge requires the current creator pane, process incarnation, and owning Run generation; reminting and rebinding that pane to another Run must remove the stale edge. Explicit legacy terminal inspection remains handle-scoped, and remote or headless worker presentation remains background-only.",
+      "coverageNotes": "A deterministic service-state-machine oracle now models a current-contract worker and coordinator whose renderer graph identities disappear across an app/runtime update. It exercises the production verifier with restored PTY and hydrated hook commitments, proves authenticated completion replay across a fresh runtime, explicit takeover, ordinary mail routing, remote-attachment process fencing, retained Task/Dispatch/terminal identity, and unchanged fixture marker bytes, and rejects foreign pane evidence. Other deterministic units cover authority-aware legacy formatting, exact legacy worker identity planning, local worker presentation, retained-output reads after adoption, reveal-failure warnings, stable-pane Run/Dispatch routing, creator pane/process/Run-generation fencing, indexed retained-Run lookup scaling, the SSH in-process CLI fallback, exact legacy Task/Dispatch/report-receipt verification, JSON rejection envelopes, and capability-negotiated Run-home settlement with lost-ack replay. Three isolated macOS Electron journeys launch fake Codex workers through the real RPC path. The compiled-CLI journey spawns fresh out/cli processes for rejected and accepted worker_done plus worker-release, then independently verifies runtime and SQLite state. The presentation and restart journeys assert immediate inactive presentation, one live agent PID, stable PTY/incarnation/tab/leaf/worktree/Task/Dispatch identity, and no interruption after workspace re-entry; the restart journey additionally proves exact background adoption with readable ACK output and no resume replay. Distinct A/B artifacts plus live SSH, WSL, folder, remote-runtime, Linux, and Windows cutover journeys remain explicit gaps.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/pull/11107#discussion_r3663321387",
+        "https://github.com/stablyai/orca/issues/13858"
+      ],
+      "invariant": "Starting a worker in the coordinator's current workspace must materialize one inactive terminal tab before worker-start returns, preserve coordinator focus, and remain exactly once after workspace re-entry. After an app update or restart, an exact live legacy worker must fence automatic provider resume, adopt its original PTY into its original background pane, retain readable output, and clear the resume record without spawning, writing, signalling, interrupting, replacing, or focusing the worker. A current-contract worker whose renderer graph identity is temporarily absent must retain its Dispatch capability and settle exactly once from exact hook-attested handle, pane, and process evidence; otherwise only an exact attested coordinator may take over. A worker_done caller may report success only after the owning runtime returns an explicit lifecycle verdict or authoritative reads prove that the exact Task, Dispatch, and worker report receipt settled the expected outcome. A federated worker may accept only the Run-home runtime's settlement verdict. An exact existing target workspace must receive a discoverable tab without stealing coordinator focus; if renderer reveal fails, worker-start must expose that the live worker remains background-only. Run and Dispatch checks must resolve through the caller's stable pane identity when a terminal handle is reminted, while a live handle outranks mismatched pane metadata. A nested worker's creator edge requires the current creator pane, process incarnation, and owning Run generation; reminting and rebinding that pane to another Run must remove the stale edge. Explicit legacy terminal inspection remains handle-scoped, and remote or headless worker presentation remains background-only.",
       "oracle": "Drive Run create, Task create, and worker-start through production Electron runtimes with a deterministic Codex fixture. Require append-only ledgers with one still-live PID and no interruption, a visible inactive worker tab while the coordinator stays active, Run delivery through stable pane identity, and stable PTY/incarnation, tab, leaf, worktree, Task, and Dispatch across workspace re-entry. In a restart journey, retain the original daemon PTY and PID, remove renderer ownership, retain sleeping-session evidence, mark the Dispatch legacy, relaunch, and require exact inactive tab adoption, readable ACK output, cleared resume state, one spawn, and no resume argv or Conversation interrupted text after another workspace round trip. The service oracle removes renderer lookup identity from current-contract callers while retaining real restored-PTY and hook commitments, replays authenticated completion and takeover across fresh runtimes, and requires one Task, Dispatch, terminal authority, message, mutation, ordinary-mail delivery, remote process fencing, and unchanged fixture marker bytes while foreign pane evidence remains rejected. Unit tests separately remint a creator pane and process from Run A into Run B, require the nested Run A worker to fall back to its current coordinator, require indexed query plans, and bound 300 Task reads with 50,000 retained Runs. They also assert authority-specific legacy affordances, exact identity and owner matching, retained-output fallback, pane-stable routing, federated non-activation, and SSH fallback parity.",
       "commands": [
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/orchestration-runtime-update-settlement.test.ts --reporter=dot",
         "pnpm exec vitest run --config config/vitest.config.ts src/cli/handlers/orchestration.test.ts src/cli/handlers/orchestration-check-identity.test.ts src/cli/handlers/orchestration-worker-cli.test.ts src/main/runtime/rpc/methods/orchestration.test.ts src/main/ssh/ssh-remote-orca-cli.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/cli/handlers/orchestration-lifecycle-rejection.test.ts src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts src/cli/handlers/orchestration-migration.test.ts",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/rpc/methods/orchestration-federation.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts --reporter=dot",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration/orchestration-legacy-worker-terminal-recovery.test.ts",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration/orchestration-creator-authority-performance.test.ts",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts",
         "pnpm run test:e2e -- tests/e2e/orchestration-worker-terminal-visibility.spec.ts --workers=1",
-        "pnpm run test:e2e -- tests/e2e/orchestration-legacy-worker-restart-recovery.spec.ts --workers=1"
+        "pnpm run test:e2e -- tests/e2e/orchestration-legacy-worker-restart-recovery.spec.ts --workers=1",
+        "pnpm run build:cli && SKIP_BUILD=1 pnpm exec playwright test tests/e2e/orchestration-worker-settlement-release-cli.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1"
       ],
       "testFiles": [
         "src/main/runtime/rpc/orchestration-runtime-update-settlement.test.ts",
@@ -7528,13 +8428,18 @@
         "src/main/runtime/orchestration/orchestration-creator-authority-performance.test.ts",
         "src/main/runtime/orca-runtime.test.ts",
         "src/cli/handlers/orchestration.test.ts",
+        "src/cli/handlers/orchestration-lifecycle-rejection.test.ts",
+        "src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts",
+        "src/cli/handlers/orchestration-migration.test.ts",
         "src/cli/handlers/orchestration-check-identity.test.ts",
         "src/cli/handlers/orchestration-worker-cli.test.ts",
         "src/main/runtime/rpc/methods/orchestration.test.ts",
         "src/main/runtime/rpc/methods/orchestration-federation.test.ts",
+        "src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts",
         "src/main/ssh/ssh-remote-orca-cli.test.ts",
         "tests/e2e/orchestration-worker-terminal-visibility.spec.ts",
-        "tests/e2e/orchestration-legacy-worker-restart-recovery.spec.ts"
+        "tests/e2e/orchestration-legacy-worker-restart-recovery.spec.ts",
+        "tests/e2e/orchestration-worker-settlement-release-cli.spec.ts"
       ],
       "assertionRefs": [
         {
@@ -7577,6 +8482,27 @@
             "current formatting remains unchanged"
           ]
         },
+        {
+          "file": "src/cli/handlers/orchestration-lifecycle-rejection.test.ts",
+          "assertions": [
+            "an explicit current worker_done verdict completes without a compatibility read",
+            "a worker_done response without a lifecycle verdict checks the exact authoritative Dispatch and report receipt",
+            "legacy succeeded and failed reports require matching terminal Task and Dispatch state",
+            "stopped or stale Dispatches cannot impersonate report settlement",
+            "an idempotent retry accepts the first authoritative report from the same worker",
+            "a Run-home relay rejection reaches the CLI error boundary"
+          ]
+        },
+        {
+          "file": "src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts",
+          "assertions": ["a rejected lifecycle verdict is emitted as a JSON ok=false envelope"]
+        },
+        {
+          "file": "src/cli/handlers/orchestration-migration.test.ts",
+          "assertions": [
+            "first and replayed legacy worker_done settlements are accepted from their authoritative runtime verdict"
+          ]
+        },
         {
           "file": "src/cli/handlers/orchestration-check-identity.test.ts",
           "assertions": [
@@ -7600,6 +8526,20 @@
             "a live handle cannot be retargeted by mismatched pane metadata"
           ]
         },
+        {
+          "file": "src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts",
+          "assertions": [
+            "a remote worker_done waits for Run-home settlement even when an older CLI omits the wait hint",
+            "older negotiated federation protocols reject before queueing",
+            "a committed settlement is replayed after an acknowledgment is lost",
+            "an aborted settlement wait returns operation_unknown instead of accepted success",
+            "an already-aborted signal registers no settlement waiter",
+            "a Run-home terminal verdict settles the remote attachment and revokes its capability",
+            "a terminal verdict cannot settle an unrelated relay item",
+            "a terminal verdict cannot contradict the exact queued worker report outcome",
+            "a rejected report replays its exact verdict without mutating durable rejection mail twice"
+          ]
+        },
         {
           "file": "src/main/runtime/rpc/methods/orchestration-federation.test.ts",
           "assertions": ["federated worker placement explicitly sets activate=false"]
@@ -7630,9 +8570,27 @@
             "sleeping-session, resume-claim, and pending-startup state are cleared after adoption",
             "no second spawn, resume argv, input, signal, interruption, or duplicate tab occurs after workspace re-entry"
           ]
+        },
+        {
+          "file": "tests/e2e/orchestration-worker-settlement-release-cli.spec.ts",
+          "assertions": [
+            "a compiled CLI worker_done with the wrong identity exits nonzero with ok=false",
+            "the exact Task and Dispatch remain dispatched after rejection",
+            "the correct worker identity receives an explicit completed lifecycle verdict",
+            "an independent runtime read observes the Dispatch completed"
+          ]
         }
       ],
       "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm run build:cli && SKIP_BUILD=1 pnpm exec playwright test tests/e2e/orchestration-worker-settlement-release-cli.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 20,
+          "summary": "The combined candidate passed one real Electron and compiled-CLI journey: wrong worker identity exited nonzero with ok=false while Dispatch stayed dispatched, the exact worker received an explicit completed verdict, and runtime state independently reached completed."
+        },
         {
           "date": "2026-08-03",
           "runner": "local",
@@ -7678,6 +8636,24 @@
           "durationSeconds": 5.27,
           "summary": "Five focused files passed with 216 tests, covering visible inactive local worker creation, reveal-failure warnings, stable-pane mailbox routing, live-handle precedence, and SSH fallback parity."
         },
+        {
+          "date": "2026-08-11",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/cli/handlers/orchestration-lifecycle-rejection.test.ts src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts src/cli/handlers/orchestration-migration.test.ts",
+          "result": "passed",
+          "durationSeconds": 0.4,
+          "summary": "Three focused files passed 12 deterministic tests covering explicit current and Run-home verdicts, JSON failure output, exact report and terminal-state verification for stripped responses, stale/stopped rejection, idempotent retry, and first/replayed attested legacy settlements."
+        },
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts --reporter=dot",
+          "result": "passed",
+          "durationSeconds": 4.58,
+          "summary": "Nine deterministic tests passed for protocol negotiation, Run-home completion and rejection, already-aborted waits, authoritative remote-attachment settlement bound to the exact queued worker_done outcome, and exact verdict replay after lost acknowledgments without mutating durable rejection mail twice."
+        },
         {
           "date": "2026-07-28",
           "runner": "local",
@@ -7712,11 +8688,11 @@
       },
       "flakeHistory": {
         "status": "unknown",
-        "evidence": "The deterministic units and two isolated Electron journeys pass locally; CI and soak history are not yet available."
+        "evidence": "The deterministic units and three isolated Electron journeys pass locally; CI and soak history are not yet available."
       },
       "redGreenEvidence": {
-        "status": "partial",
-        "evidence": "The byte-identical 5f45c270f1 service oracle is red as the sole overlay 063340a8ba on origin/main@34291f07e9, green on candidate@2748b0b29b, red with current-authority propagation actually disabled in child 08a7db37bf, and green again after revert d2a4e2e024. The focused presentation and stale-handle tests failed against the earlier pre-fix implementation. The restart journey additionally failed first on empty retained output while the original PTY/PID remained live, then passed after the scoped recovered-worker snapshot fallback. The live incident and pre-fix Electron topology showed workspace re-entry replaying provider resume against a worker whose tab binding was missing. Distinct installed A/B and CI artifacts are still needed."
+        "status": "complete",
+        "evidence": "The byte-identical compiled-CLI Electron oracle failed on latest main 5ea7df1a5b because a wrong worker identity exited zero with ok=true while Dispatch stayed dispatched, passed on combined candidate d697666ce8 with a nonzero ok=false rejection and explicit completed verdict for the exact worker, and reproduced the main failure when the claimed production files were disabled at merge-base 64aec94cb2. The earlier byte-identical service oracle was also red on main, green on candidate, red with authority propagation disabled, and green after restore. Distinct installed A/B and CI artifacts are still needed."
       },
       "performanceBudget": {
         "required": true,
@@ -7877,24 +8853,42 @@
       "platforms": ["macos", "linux", "windows"],
       "providers": ["local", "daemon", "ssh", "wsl", "remote-runtime"],
       "coveredPlatforms": ["macos"],
-      "coveredProviders": ["local"],
-      "coverageNotes": "Deterministic service tests cover release-versus-reuse ordering, transactional retain and takeover cancellation, exact host/pane/process identity, conservative schema-v23 backfill, immutable transcript and bounded terminal archives, mutation restart, reset cleanup, replay idempotency, and 50-resource accounting. Live SSH, WSL, Windows, paired-runtime, and provider-close lost-ack journeys remain explicit gaps.",
-      "motivatingLinks": ["https://github.com/stablyai/orca/pull/12355", "STA-905"],
-      "invariant": "A settled Dispatch may close only its one coordinator-created terminal lease. Explicit reuse, real user input, retain, identity or host change, ambiguity, and another resource for the same exact host/pane/process must fence closure. Output preservation and the requested-to-releasing transition are atomic, archives remain readable without the provider file, retries resume idempotently, and orchestration reset removes archive and authority state.",
-      "oracle": "Record release intent for a settled owner, attempt exact reuse before close, and require worker-start to fail with terminal_release_in_progress while the terminal stays open; then release the original owner exactly once. Race retain and real user input against a controlled archive promise and require no committed archive or close. Change host or process identity and inject duplicate resource evidence to require retention. Freeze a structured transcript, delete its source file, and require archived worker-read to return the same bounded redacted messages. Restart a pending mutation, reset orchestration state, and create 50 resources while asserting replay convergence, zero orphan rows, two-query worker listing, and no unrelated close.",
+      "coveredProviders": ["local", "ssh"],
+      "coverageNotes": "Deterministic service tests cover release-versus-reuse ordering, transactional retain and takeover cancellation, exact host/pane/process identity, dead external/user-owned/transferred/stopped/abandoned reconciliation, conservative unknown provider and legacy metadata handling, immutable transcript and bounded terminal archives, mutation restart, reset cleanup, replay idempotency, and 50-resource accounting. A macOS Electron journey invokes the freshly compiled worker-release CLI after the worker process disappears, then independently checks released SQLite state and coordinator liveness. Injected inventories cover local and SSH provider routing; live SSH, WSL, Windows, paired-runtime, and provider-close lost-ack journeys remain explicit gaps.",
+      "motivatingLinks": [
+        "https://github.com/stablyai/orca/pull/12355",
+        "https://github.com/stablyai/orca/issues/13860",
+        "STA-905",
+        "STA-3932"
+      ],
+      "invariant": "A settled Dispatch may close only its one coordinator-created terminal lease. Explicit reuse, real user input, retain, identity or host change, ambiguity, and another resource for the same exact host/pane/process must fence closure. Once the authoritative owning provider positively excludes the resource's exact immutable process incarnation, even an external, user-owned, or transferred dead resource must converge to released without any process close. Unknown host scope, missing incarnation metadata, or unavailable inventory must remain retained. Output preservation and the requested-to-releasing transition are atomic, archives remain readable without the provider file, retries resume idempotently, and orchestration reset removes archive and authority state.",
+      "oracle": "Record release intent for a settled owner, attempt exact reuse before close, and require worker-start to fail with terminal_release_in_progress while the terminal stays open; then release the original owner exactly once. Race retain and real user input against a controlled archive promise and require no committed archive or close. For retained external, user-owned, transferred, stopped, and abandoned resources, run one fresh inventory against the exact local/WSL or SSH provider: an exact live incarnation and every unknown inventory shape stay retained, while positive absence atomically sets ownership_state and release_state to released with processAction none and zero closeTerminal calls. Change host or process identity and inject duplicate resource evidence to require retention. Freeze a structured transcript, delete its source file, and require archived worker-read to return the same bounded redacted messages. Restart a pending mutation, reset orchestration state, and create 50 resources while asserting replay convergence, zero orphan rows, two-query worker listing, and no unrelated close.",
       "commands": [
+        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts src/main/runtime/rpc/methods/orchestration-worker-release.test.ts src/main/runtime/rpc/methods/orchestration-worker-release-recovery.test.ts src/main/runtime/rpc/orchestration-mutation-ledger.test.ts src/main/runtime/orchestration/worker-transcript-read.test.ts src/renderer/src/lib/worker-terminal-takeover-report.test.ts --reporter=dot",
         "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/methods/orchestration-worker-release.test.ts src/main/runtime/rpc/methods/orchestration-worker-release-recovery.test.ts src/main/runtime/rpc/orchestration-mutation-ledger.test.ts src/main/runtime/orchestration/worker-transcript-read.test.ts src/renderer/src/lib/worker-terminal-takeover-report.test.ts --reporter=dot",
-        "pnpm exec vitest run --config config/vitest.config.ts tests/e2e/completed-worker-retirement-resume.unit.test.ts --reporter=verbose"
+        "pnpm exec vitest run --config config/vitest.config.ts tests/e2e/completed-worker-retirement-resume.unit.test.ts --reporter=verbose",
+        "pnpm run build:cli && SKIP_BUILD=1 pnpm exec playwright test tests/e2e/orchestration-worker-settlement-release-cli.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1"
       ],
       "testFiles": [
+        "src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts",
         "src/main/runtime/rpc/methods/orchestration-worker-release.test.ts",
         "src/main/runtime/rpc/methods/orchestration-worker-release-recovery.test.ts",
         "src/main/runtime/rpc/orchestration-mutation-ledger.test.ts",
         "src/main/runtime/orchestration/worker-transcript-read.test.ts",
         "src/renderer/src/lib/worker-terminal-takeover-report.test.ts",
-        "tests/e2e/completed-worker-retirement-resume.unit.test.ts"
+        "tests/e2e/completed-worker-retirement-resume.unit.test.ts",
+        "tests/e2e/orchestration-worker-settlement-release-cli.spec.ts"
       ],
       "assertionRefs": [
+        {
+          "file": "src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts",
+          "assertions": [
+            "classifies only an exact incarnation as live on its owning provider",
+            "keeps missing or malformed identity and unavailable inventory unknown",
+            "does not inspect an unproven host scope",
+            "uses the local provider inventory for local and WSL scopes"
+          ]
+        },
         {
           "file": "tests/e2e/completed-worker-retirement-resume.unit.test.ts",
           "assertions": [
@@ -7904,6 +8898,10 @@
         {
           "file": "src/main/runtime/rpc/methods/orchestration-worker-release.test.ts",
           "assertions": [
+            "reconciles a dead external terminal without closing a process",
+            "reconciles a dead user-taken-over terminal without closing a process",
+            "reconciles a dead stopped or abandoned worker without closing a process",
+            "reconciles dead transferred ownership after the current owner settles",
             "rejects exact reuse after release intent instead of closing the new worker",
             "lets an explicit retain cancel a release while output capture is pending",
             "retains when the terminal host scope changed instead of closing",
@@ -7923,9 +8921,36 @@
             "coalesces overlapping reconciliation passes and closes each resource once",
             "keeps live terminals bounded across 50 settled workers while controls survive"
           ]
+        },
+        {
+          "file": "tests/e2e/orchestration-worker-settlement-release-cli.spec.ts",
+          "assertions": [
+            "compiled worker-release reconciles a dead external retained resource to released",
+            "the CLI reports processAction none instead of closing a process",
+            "SQLite independently records released ownership and release state",
+            "the unrelated coordinator terminal remains live"
+          ]
         }
       ],
       "evidenceRuns": [
+        {
+          "date": "2026-08-12",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm run build:cli && SKIP_BUILD=1 pnpm exec playwright test tests/e2e/orchestration-worker-settlement-release-cli.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
+          "result": "passed",
+          "durationSeconds": 20,
+          "summary": "The combined candidate's compiled worker-release returned released with processAction none after positive process absence; an independent SQLite read showed both states released and the coordinator terminal remained live."
+        },
+        {
+          "date": "2026-08-11",
+          "runner": "local",
+          "platform": "macos",
+          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts src/main/runtime/rpc/methods/orchestration-worker-release.test.ts src/main/runtime/rpc/methods/orchestration-worker-release-recovery.test.ts src/main/runtime/rpc/orchestration-mutation-ledger.test.ts src/main/runtime/orchestration/worker-transcript-read.test.ts src/renderer/src/lib/worker-terminal-takeover-report.test.ts --reporter=dot",
+          "result": "passed",
+          "durationSeconds": 4.98,
+          "summary": "Six focused files passed 67 tests on the rebased candidate, covering dead external, user-owned, stopped, abandoned, and transferred reconciliation; exact local/WSL/SSH provider routing; malformed, missing, and unavailable inventory retention; zero process closes; existing lease, archive, recovery, mutation, and renderer-input contracts."
+        },
         {
           "date": "2026-08-03",
           "runner": "local",
@@ -7937,20 +8962,20 @@
         }
       ],
       "runtimeBudget": {
-        "p95Seconds": 8,
-        "scope": "deterministic runtime, SQLite, transcript, renderer-input, and mutation contracts"
+        "p95Seconds": 45,
+        "scope": "deterministic runtime, SQLite, transcript, renderer-input, mutation contracts, and one compiled-CLI Electron journey"
       },
       "flakeHistory": {
         "status": "unknown",
-        "evidence": "First local deterministic run only; focused CI and soak history are not yet available."
+        "evidence": "Repeated local deterministic runs pass; focused CI and soak history are not yet available."
       },
       "redGreenEvidence": {
         "status": "complete",
-        "evidence": "The byte-identical 56-test oracle produced 12 deterministic failures and 44 passes with production restored to exact PR head 4aa66b62e3, including ready reuse during release, unsafe migration, stale archives, mutable transcript output, host/identity close gaps, and mutation replay loss. Candidate 457bc4edd1 passed all 56; restoring the same five production files to 4aa66b62e3 reproduced the same red state."
+        "evidence": "The byte-identical compiled-CLI Electron oracle left the dead resource external/retained on latest main 5ea7df1a5b, passed on combined candidate d697666ce8 with released/released SQLite state and processAction none, and reproduced external/retained after disabling the claimed production files at merge-base 64aec94cb2. The earlier unchanged three-case dead external/user-owned/transferred service oracle likewise failed 3/3 on main, passed 3/3 on candidate, and failed 3/3 with production restored; every run asserted durable state and zero terminal close calls."
       },
       "performanceBudget": {
         "required": true,
-        "evidence": "Release performs constant-count indexed resource and identity queries plus one bounded archive capture. Worker-list uses two set queries rather than one resource lookup per worker. Reconciliation remains serial and adds no polling, timers, subprocesses, renderer subscriptions, or provider-wide listing."
+        "evidence": "Normal owned release performs constant-count indexed resource and identity queries plus one bounded archive capture. A retained release performs exactly one bounded inventory against its authoritative local/WSL or specific SSH provider, with no retry, polling, timer, subprocess, renderer subscription, or per-session follow-up fanout. Worker-list uses two set queries rather than one resource lookup per worker."
       },
       "promotionCriteria": [
         "Collect 100 consecutive focused CI passes or 14 days of soak history.",
@@ -7961,7 +8986,7 @@
       "knownGaps": [
         "Provider close has no durable cross-process operation receipt, so a crash after host mutation but before SQLite settlement remains release_pending until exact inventory returns.",
         "Federated release remains explicitly unsupported and retained.",
-        "Mobile/direct remote input takeover and live Linux, Windows, WSL, SSH, headed, and headless paired-runtime release are not exercised."
+        "Mobile/direct remote input takeover and live Linux, Windows, WSL, SSH, headed, and headless paired-runtime release are not exercised; the current fix changes provider inventory classification and SQLite state only, not ConPTY, filesystem, update, sleep, firewall, or window lifecycle semantics."
       ],
       "demotionRule": "Keep experimental or demote if release can overlap exact reuse, close a conflicting lease, lose immutable output, retain reset archives, fan out per worker, or any focused ordering test flakes without a product or harness defect."
     },
diff --git a/config/scripts/build-notification-status-macos.mjs b/config/scripts/build-notification-status-macos.mjs
index e8150e32b6f..41d4c84a4af 100644
--- a/config/scripts/build-notification-status-macos.mjs
+++ b/config/scripts/build-notification-status-macos.mjs
@@ -79,7 +79,7 @@ try {
 
 function readArg(name) {
   const index = args.indexOf(name)
-  return index >= 0 ? args[index + 1] : undefined
+  return index !== -1 ? args[index + 1] : undefined
 }
 
 function embeddedInfoPlist(identifier) {
diff --git a/config/scripts/build-windows-cli-launcher.mjs b/config/scripts/build-windows-cli-launcher.mjs
index 6f9b86bdb4b..27c17b3d15c 100644
--- a/config/scripts/build-windows-cli-launcher.mjs
+++ b/config/scripts/build-windows-cli-launcher.mjs
@@ -56,5 +56,5 @@ function findFrameworkCompiler(env) {
 
 function readArg(name) {
   const index = process.argv.indexOf(name)
-  return index >= 0 ? process.argv[index + 1] : undefined
+  return index !== -1 ? process.argv[index + 1] : undefined
 }
diff --git a/config/scripts/computer-use-modifier-safety.test.mjs b/config/scripts/computer-use-modifier-safety.test.mjs
index 725f17fdf4c..2a3234d3d9c 100644
--- a/config/scripts/computer-use-modifier-safety.test.mjs
+++ b/config/scripts/computer-use-modifier-safety.test.mjs
@@ -11,7 +11,7 @@ function source(path) {
 function sourceBetween(contents, startMarker, endMarker) {
   const start = contents.indexOf(startMarker)
   const end = contents.indexOf(endMarker, start + startMarker.length)
-  if (start < 0 || end < 0) {
+  if (start === -1 || end === -1) {
     throw new Error(`Missing source boundary: ${startMarker} → ${endMarker}`)
   }
   return contents.slice(start, end)
diff --git a/config/scripts/electron-vite-output-contract.test.ts b/config/scripts/electron-vite-output-contract.test.ts
index f59f4a80f88..818b380fc2f 100644
--- a/config/scripts/electron-vite-output-contract.test.ts
+++ b/config/scripts/electron-vite-output-contract.test.ts
@@ -196,7 +196,8 @@ describe('Electron Vite output contract', () => {
   })
 
   it('rejects prototype properties as build targets', () => {
-    expect(targetConfig).toContain('Object.prototype.hasOwnProperty.call(configByTarget, target)')
+    // Own-property check only: an inherited key like `constructor` must not select a build target.
+    expect(targetConfig).toContain('Object.hasOwn(configByTarget, target)')
   })
 
   it('gives the dev terminal daemon helper the TCC identity watched by Orca', () => {
diff --git a/config/scripts/ensure-native-runtime.mjs b/config/scripts/ensure-native-runtime.mjs
index 98b064cd30d..44261e968a9 100644
--- a/config/scripts/ensure-native-runtime.mjs
+++ b/config/scripts/ensure-native-runtime.mjs
@@ -45,7 +45,7 @@ function readRuntimeArg() {
   }
 
   const runtimeIndex = process.argv.indexOf('--runtime')
-  if (runtimeIndex >= 0) {
+  if (runtimeIndex !== -1) {
     return process.argv[runtimeIndex + 1]
   }
 
diff --git a/config/scripts/generate-skill-bundle-manifest.mjs b/config/scripts/generate-skill-bundle-manifest.mjs
index 899cb6436df..226ea74c4fb 100644
--- a/config/scripts/generate-skill-bundle-manifest.mjs
+++ b/config/scripts/generate-skill-bundle-manifest.mjs
@@ -227,7 +227,7 @@ function readGitBlobs(objectShas) {
   let offset = 0
   for (const requestedSha of uniqueShas) {
     const headerEnd = output.indexOf(10, offset)
-    if (headerEnd < 0) {
+    if (headerEnd === -1) {
       throw new Error(`Missing git cat-file header for ${requestedSha}`)
     }
     const header = output.subarray(offset, headerEnd).toString('utf8')
@@ -648,8 +648,8 @@ async function main() {
   const argv = process.argv.slice(2)
   const rebuildFromTags = argv.includes('--rebuild-from-tags')
   const releaseIndex = argv.indexOf('--release')
-  const releaseVersion = releaseIndex >= 0 ? argv[releaseIndex + 1] : null
-  if (releaseIndex >= 0 && !releaseVersion) {
+  const releaseVersion = releaseIndex !== -1 ? argv[releaseIndex + 1] : null
+  if (releaseIndex !== -1 && !releaseVersion) {
     throw new Error('--release requires a version argument, e.g. --release 1.4.160')
   }
 
diff --git a/config/scripts/idle-cpu-process-sampling.mjs b/config/scripts/idle-cpu-process-sampling.mjs
new file mode 100644
index 00000000000..81f9218e5ad
--- /dev/null
+++ b/config/scripts/idle-cpu-process-sampling.mjs
@@ -0,0 +1,323 @@
+import { execFileSync, spawnSync } from 'node:child_process'
+
+function parseCpuTimeSeconds(value) {
+  const trimmed = String(value || '').trim()
+  if (!trimmed) {
+    return null
+  }
+  const [dayOrTime, maybeTime] = trimmed.includes('-') ? trimmed.split('-', 2) : [null, trimmed]
+  const days = dayOrTime === null ? 0 : Number(dayOrTime)
+  const parts = maybeTime.split(':').map(Number)
+  if (!Number.isFinite(days) || parts.some((part) => !Number.isFinite(part))) {
+    return null
+  }
+  if (parts.length === 3) {
+    return days * 86400 + parts[0] * 3600 + parts[1] * 60 + parts[2]
+  }
+  if (parts.length === 2) {
+    return days * 86400 + parts[0] * 60 + parts[1]
+  }
+  if (parts.length === 1) {
+    return days * 86400 + parts[0]
+  }
+  return null
+}
+
+function parseUnixProcesses(stdout) {
+  const rows = []
+  for (const raw of stdout.split('\n')) {
+    const line = raw.trim()
+    if (!line) {
+      continue
+    }
+    const match = line.match(/^(\d+)\s+(\d+)\s+([\d.]+)\s+(\d+)\s+(\S+)\s+(.+)$/)
+    if (!match) {
+      continue
+    }
+    rows.push({
+      pid: Number(match[1]),
+      ppid: Number(match[2]),
+      percentCpu: Number(match[3]),
+      rssBytes: Number(match[4]) * 1024,
+      cpuTimeSeconds: parseCpuTimeSeconds(match[5]),
+      command: match[6]
+    })
+  }
+  return rows
+}
+
+function readUnixProcesses() {
+  const stdout = execFileSync('ps', ['-axo', 'pid=,ppid=,pcpu=,rss=,cputime=,command='], {
+    encoding: 'utf8',
+    env: { ...process.env, LC_ALL: 'C', LANG: 'C' },
+    maxBuffer: 20 * 1024 * 1024
+  })
+  return parseUnixProcesses(stdout)
+}
+
+function readWindowsProcesses() {
+  const script =
+    'Get-CimInstance Win32_Process | Select-Object ProcessId,ParentProcessId,WorkingSetSize,CommandLine | ConvertTo-Json -Compress'
+  const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', script], {
+    encoding: 'utf8',
+    maxBuffer: 20 * 1024 * 1024
+  })
+  if (result.status !== 0) {
+    throw new Error(result.stderr || 'PowerShell process enumeration failed')
+  }
+  const parsed = JSON.parse(result.stdout || '[]')
+  const entries = Array.isArray(parsed) ? parsed : [parsed]
+  return entries.map((entry) => ({
+    pid: Number(entry.ProcessId),
+    ppid: Number(entry.ParentProcessId),
+    percentCpu: 0,
+    cpuTimeSeconds: null,
+    rssBytes: Number(entry.WorkingSetSize) || 0,
+    command: String(entry.CommandLine || '')
+  }))
+}
+
+export function readProcessRows() {
+  return process.platform === 'win32' ? readWindowsProcesses() : readUnixProcesses()
+}
+
+export function descendantsOf(rows, rootPid) {
+  const children = new Map()
+  for (const row of rows) {
+    const list = children.get(row.ppid) ?? []
+    list.push(row)
+    children.set(row.ppid, list)
+  }
+  const result = []
+  const stack = [rootPid]
+  const seen = new Set()
+  while (stack.length > 0) {
+    const pid = stack.pop()
+    if (seen.has(pid)) {
+      continue
+    }
+    seen.add(pid)
+    const row = rows.find((candidate) => candidate.pid === pid)
+    if (row) {
+      result.push(row)
+    }
+    for (const child of children.get(pid) ?? []) {
+      stack.push(child.pid)
+    }
+  }
+  return result
+}
+
+export function classify(row, rootPid) {
+  const command = row.command.toLowerCase()
+  if (row.pid === rootPid) {
+    return 'main'
+  }
+  if (command.includes('daemon-entry')) {
+    return 'daemon'
+  }
+  if (command.includes('--type=gpu-process')) {
+    return 'gpu'
+  }
+  if (command.includes('--type=renderer')) {
+    return 'renderer'
+  }
+  if (command.includes('--type=utility')) {
+    return 'utility'
+  }
+  if (command.includes('--type=')) {
+    return 'electron-other'
+  }
+  if (command.includes('node') || command.includes('/pi') || command.endsWith(' pi')) {
+    return 'agent-or-node'
+  }
+  return 'other-descendant'
+}
+
+const DEFAULT_WORKLOAD_OVERRUN_LIMIT_MS = 120_000
+
+export async function sampleProcessTreeUntilWorkloadsComplete({
+  rootPid,
+  requestedDurationMs,
+  intervalMs,
+  workloadPromise,
+  maxWorkloadOverrunMs = DEFAULT_WORKLOAD_OVERRUN_LIMIT_MS,
+  readRows = readProcessRows,
+  now = Date.now,
+  wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
+}) {
+  const samplingStartedAt = now()
+  const requestedDeadline = samplingStartedAt + requestedDurationMs
+  const hardDeadline = requestedDeadline + maxWorkloadOverrunMs
+  let workloadSettled = false
+  let workloadResult
+  let workloadError
+  let workloadSettledAt = null
+  void workloadPromise.then(
+    (result) => {
+      workloadResult = result
+      workloadSettled = true
+      workloadSettledAt = now()
+    },
+    (error) => {
+      workloadError = error
+      workloadSettled = true
+      workloadSettledAt = now()
+    }
+  )
+  const samples = []
+  let previousSnapshot = null
+  const needsFinalWorkloadSample = () =>
+    workloadSettledAt !== null && (previousSnapshot?.at ?? -Infinity) < workloadSettledAt
+  while (
+    now() <= requestedDeadline ||
+    samples.length === 0 ||
+    !workloadSettled ||
+    needsFinalWorkloadSample()
+  ) {
+    const sampledAt = now()
+    if (workloadError) {
+      throw workloadError
+    }
+    if (
+      (!workloadSettled && sampledAt >= hardDeadline) ||
+      (workloadSettledAt !== null && workloadSettledAt > hardDeadline)
+    ) {
+      throw new Error(
+        `Benchmark workload exceeded the ${maxWorkloadOverrunMs}ms sampling overrun limit`
+      )
+    }
+    const processRows = descendantsOf(readRows(), rootPid)
+    const rawProcesses = processRows.map((row) => ({ ...row, kind: classify(row, rootPid) }))
+    if (previousSnapshot) {
+      const elapsedSeconds = Math.max(0.001, (sampledAt - previousSnapshot.at) / 1000)
+      const previousByPid = new Map(previousSnapshot.processes.map((proc) => [proc.pid, proc]))
+      const processes = rawProcesses.map((row) => {
+        const previous = previousByPid.get(row.pid)
+        const canComputeDelta =
+          typeof row.cpuTimeSeconds === 'number' && typeof previous?.cpuTimeSeconds === 'number'
+        const cpu = canComputeDelta
+          ? Math.max(0, ((row.cpuTimeSeconds - previous.cpuTimeSeconds) / elapsedSeconds) * 100)
+          : row.percentCpu
+        return { ...row, cpu }
+      })
+      samples.push({
+        at: sampledAt,
+        elapsedMs: sampledAt - previousSnapshot.at,
+        totalCpuPercent: processes.reduce((sum, proc) => sum + proc.cpu, 0),
+        totalRssBytes: processes.reduce((sum, proc) => sum + proc.rssBytes, 0),
+        processes
+      })
+    }
+    previousSnapshot = { at: sampledAt, processes: rawProcesses }
+    await wait(intervalMs)
+  }
+  if (workloadError) {
+    throw workloadError
+  }
+  const measuredDurationMs = Math.max(
+    0,
+    (previousSnapshot?.at ?? samplingStartedAt) - samplingStartedAt
+  )
+  return {
+    samples,
+    workloadResult,
+    samplingWindow: {
+      requestedDurationMs,
+      measuredDurationMs,
+      maxWorkloadOverrunMs,
+      extendedForWorkload: workloadSettledAt !== null && workloadSettledAt > requestedDeadline,
+      workloadSettledElapsedMs:
+        workloadSettledAt === null ? null : Math.max(0, workloadSettledAt - samplingStartedAt),
+      workloadSettledBeforeStop: workloadSettled
+    }
+  }
+}
+
+function mean(values) {
+  return values.length === 0 ? 0 : values.reduce((sum, value) => sum + value, 0) / values.length
+}
+
+function percentile(sorted, fraction) {
+  if (sorted.length === 0) {
+    return 0
+  }
+  const index = Math.min(sorted.length - 1, Math.ceil(sorted.length * fraction) - 1)
+  return sorted[index]
+}
+
+export function summarizeSamples(samples) {
+  const byKind = new Map()
+  for (const sample of samples) {
+    for (const proc of sample.processes) {
+      const bucket = byKind.get(proc.kind) ?? { cpuValues: [], rssValues: [], maxProcessCount: 0 }
+      bucket.cpuValues.push(proc.cpu)
+      bucket.rssValues.push(proc.rssBytes)
+      byKind.set(proc.kind, bucket)
+    }
+    const counts = new Map()
+    for (const proc of sample.processes) {
+      counts.set(proc.kind, (counts.get(proc.kind) ?? 0) + 1)
+    }
+    for (const [kind, count] of counts) {
+      byKind.get(kind).maxProcessCount = Math.max(byKind.get(kind).maxProcessCount, count)
+    }
+  }
+  const summary = {}
+  for (const [kind, values] of byKind) {
+    const cpuSorted = [...values.cpuValues].sort((a, b) => a - b)
+    const rssSumBySample = samples.map((sample) =>
+      sample.processes
+        .filter((proc) => proc.kind === kind)
+        .reduce((sum, proc) => sum + proc.rssBytes, 0)
+    )
+    summary[kind] = {
+      meanCpuPercent: mean(values.cpuValues),
+      p95CpuPercent: percentile(cpuSorted, 0.95),
+      maxCpuPercent: Math.max(0, ...values.cpuValues),
+      meanRssBytes: mean(rssSumBySample),
+      maxProcessCount: values.maxProcessCount
+    }
+  }
+  summary.total = {
+    meanCpuPercent: mean(samples.map((sample) => sample.totalCpuPercent)),
+    p95CpuPercent: percentile(
+      samples.map((sample) => sample.totalCpuPercent).sort((a, b) => a - b),
+      0.95
+    ),
+    meanRssBytes: mean(samples.map((sample) => sample.totalRssBytes))
+  }
+  return summary
+}
+
+export function summarizeProcessInventory(samples) {
+  const inventory = {}
+  for (const sample of samples) {
+    const counts = new Map()
+    for (const proc of sample.processes) {
+      counts.set(proc.kind, (counts.get(proc.kind) ?? 0) + 1)
+      const entry = inventory[proc.kind] ?? {
+        maxProcessCount: 0,
+        maxCpuPercent: 0,
+        commandSamples: []
+      }
+      entry.maxCpuPercent = Math.max(entry.maxCpuPercent, proc.cpu)
+      if (!entry.commandSamples.includes(proc.command) && entry.commandSamples.length < 6) {
+        entry.commandSamples.push(proc.command)
+      }
+      inventory[proc.kind] = entry
+    }
+    for (const [kind, count] of counts) {
+      inventory[kind].maxProcessCount = Math.max(inventory[kind].maxProcessCount, count)
+    }
+  }
+  return inventory
+}
+
+export function terminateProcesses(processes) {
+  for (const proc of processes) {
+    try {
+      process.kill(proc.pid)
+    } catch {}
+  }
+}
diff --git a/config/scripts/idle-cpu-process-sampling.test.mjs b/config/scripts/idle-cpu-process-sampling.test.mjs
new file mode 100644
index 00000000000..d452c6e3ce0
--- /dev/null
+++ b/config/scripts/idle-cpu-process-sampling.test.mjs
@@ -0,0 +1,65 @@
+import { describe, expect, it } from 'vitest'
+import { sampleProcessTreeUntilWorkloadsComplete } from './idle-cpu-process-sampling.mjs'
+
+function createClock(workloadCompletesAt) {
+  let currentMs = 0
+  let resolveWorkload
+  const workloadPromise = new Promise((resolve) => {
+    resolveWorkload = resolve
+  })
+  const wait = async (durationMs) => {
+    currentMs += durationMs
+    if (currentMs >= workloadCompletesAt) {
+      resolveWorkload('complete')
+    }
+    await Promise.resolve()
+  }
+  const readRows = () => [
+    {
+      pid: 10,
+      ppid: 0,
+      percentCpu: 0,
+      rssBytes: 1_024,
+      cpuTimeSeconds: currentMs / 2_000,
+      command: 'electron'
+    }
+  ]
+  return { now: () => currentMs, readRows, wait, workloadPromise }
+}
+
+describe('idle CPU process sampling window', () => {
+  it('extends through a slow workload and captures a final CPU delta', async () => {
+    const clock = createClock(40)
+    const result = await sampleProcessTreeUntilWorkloadsComplete({
+      rootPid: 10,
+      requestedDurationMs: 20,
+      intervalMs: 10,
+      maxWorkloadOverrunMs: 100,
+      ...clock
+    })
+
+    expect(result.workloadResult).toBe('complete')
+    expect(result.samples.map((sample) => sample.at)).toEqual([10, 20, 30, 40])
+    expect(result.samplingWindow).toEqual({
+      requestedDurationMs: 20,
+      measuredDurationMs: 40,
+      maxWorkloadOverrunMs: 100,
+      extendedForWorkload: true,
+      workloadSettledElapsedMs: 40,
+      workloadSettledBeforeStop: true
+    })
+  })
+
+  it('invalidates a run that reaches the workload overrun guard', async () => {
+    const clock = createClock(Infinity)
+    await expect(
+      sampleProcessTreeUntilWorkloadsComplete({
+        rootPid: 10,
+        requestedDurationMs: 20,
+        intervalMs: 10,
+        maxWorkloadOverrunMs: 20,
+        ...clock
+      })
+    ).rejects.toThrow('exceeded the 20ms sampling overrun limit')
+  })
+})
diff --git a/config/scripts/idle-cpu-renderer-scale-fixture.mjs b/config/scripts/idle-cpu-renderer-scale-fixture.mjs
new file mode 100644
index 00000000000..4759b768e27
--- /dev/null
+++ b/config/scripts/idle-cpu-renderer-scale-fixture.mjs
@@ -0,0 +1,202 @@
+export async function configureRendererScaleFixture(page, options, repoPath) {
+  return page.evaluate(
+    ({ agentsPerWorktree, lineageDepth, repoPath }) => {
+      const store = window.__store
+      if (!store) {
+        throw new Error('window.__store is not available')
+      }
+      const normalizePath = (value) =>
+        String(value ?? '')
+          .replaceAll('\\', '/')
+          .toLowerCase()
+      const primaryPath = normalizePath(repoPath)
+      const compare = (left, right) => (left < right ? -1 : left > right ? 1 : 0)
+      const state = store.getState()
+      const worktrees = Object.values(state.worktreesByRepo)
+        .flat()
+        .filter((worktree) => !worktree.isArchived)
+        .sort((left, right) => {
+          const primaryOrder =
+            Number(normalizePath(right.path) === primaryPath) -
+            Number(normalizePath(left.path) === primaryPath)
+          return (
+            primaryOrder ||
+            compare(normalizePath(left.path), normalizePath(right.path)) ||
+            compare(left.id, right.id)
+          )
+        })
+      const appliedLineageDepth = Math.min(lineageDepth, Math.max(0, worktrees.length - 1))
+      if (lineageDepth === 0 && agentsPerWorktree === 0) {
+        return {
+          applied: false,
+          requestedLineageDepth: lineageDepth,
+          appliedLineageDepth,
+          agentsPerWorktree,
+          seededAgentRows: 0
+        }
+      }
+
+      state.setActiveView('terminal')
+      state.setSidebarOpen(true)
+      state.setGroupBy('none')
+      state.setSortBy('recent')
+      state.setShowActiveOnly(false)
+      state.setShowSleepingWorkspaces(true)
+      state.setHideDefaultBranchWorkspace(false)
+      state.setFilterRepoIds([])
+
+      const lineageById = { ...store.getState().worktreeLineageById }
+      const lineageParentIds = new Set()
+      if (appliedLineageDepth > 0) {
+        for (const worktree of worktrees) {
+          delete lineageById[worktree.id]
+          if (!worktree.instanceId) {
+            throw new Error(`Worktree ${worktree.id} has no instanceId for lineage seeding`)
+          }
+        }
+        for (let index = 1; index < worktrees.length; index += 1) {
+          const child = worktrees[index]
+          const parent = worktrees[Math.min(index - 1, appliedLineageDepth - 1)]
+          lineageParentIds.add(parent.id)
+          lineageById[child.id] = {
+            worktreeId: child.id,
+            worktreeInstanceId: child.instanceId,
+            parentWorktreeId: parent.id,
+            parentWorktreeInstanceId: parent.instanceId,
+            origin: 'manual',
+            capture: { source: 'manual-action', confidence: 'explicit' },
+            createdAt: 1_700_000_000_000 + index
+          }
+        }
+      }
+      const collapsedGroups = new Set(store.getState().collapsedGroups)
+      for (const parentId of lineageParentIds) {
+        collapsedGroups.delete(`lineage:${parentId}`)
+      }
+      store.setState({ worktreeLineageById: lineageById, collapsedGroups })
+
+      let seededAgentRows = 0
+      if (agentsPerWorktree > 0) {
+        store.getState().setWorktreeCardMode('Default')
+        store.getState().setAgentActivityDisplayMode('full')
+        const fixtureNow = Date.now()
+        worktrees.forEach((worktree, worktreeIndex) => {
+          const next = store.getState()
+          const tab =
+            next.tabsByWorktree[worktree.id]?.[0] ??
+            next.createTab(worktree.id, undefined, undefined, {
+              activate: false,
+              id: `idle-cpu-tab-${worktreeIndex}`
+            })
+          for (let agentIndex = 0; agentIndex < agentsPerWorktree; agentIndex += 1) {
+            const agentType = agentIndex % 2 === 0 ? 'codex' : 'claude'
+            const leafSequence =
+              BigInt(worktreeIndex) * BigInt(agentsPerWorktree) + BigInt(agentIndex + 1)
+            const leafId = `00000000-0000-4000-8000-${leafSequence.toString(16).padStart(12, '0')}`
+            store.getState().setAgentStatus(
+              `${tab.id}:${leafId}`,
+              {
+                state: 'working',
+                prompt: `Idle CPU agent ${worktreeIndex + 1}.${agentIndex + 1}`,
+                agentType
+              },
+              agentType,
+              { updatedAt: fixtureNow, stateStartedAt: fixtureNow },
+              { tabId: tab.id, worktreeId: worktree.id }
+            )
+            seededAgentRows += 1
+          }
+        })
+      }
+      return {
+        applied: true,
+        requestedLineageDepth: lineageDepth,
+        appliedLineageDepth,
+        lineageEdges: appliedLineageDepth > 0 ? Math.max(0, worktrees.length - 1) : 0,
+        expandedLineageGroups: lineageParentIds.size,
+        agentsPerWorktree,
+        seededAgentRows,
+        orderedWorktreeIds: worktrees.map((worktree) => worktree.id)
+      }
+    },
+    { agentsPerWorktree: options.agentsPerWorktree, lineageDepth: options.lineageDepth, repoPath }
+  )
+}
+
+export async function collectRendererCensus(page, configuredLineageDepth) {
+  return page.evaluate((configuredDepth) => {
+    const state = window.__store?.getState()
+    if (!state) {
+      throw new Error('window.__store is not available')
+    }
+    const worktrees = Object.values(state.worktreesByRepo).flat()
+    const worktreeIds = new Set(worktrees.map((worktree) => worktree.id))
+    const lineageDepthById = new Map()
+    const getDepth = (worktreeId, trail = new Set()) => {
+      if (lineageDepthById.has(worktreeId)) {
+        return lineageDepthById.get(worktreeId)
+      }
+      const lineage = state.worktreeLineageById[worktreeId]
+      if (!lineage || !worktreeIds.has(lineage.parentWorktreeId) || trail.has(worktreeId)) {
+        return 0
+      }
+      const nextTrail = new Set(trail)
+      nextTrail.add(worktreeId)
+      const depth = 1 + getDepth(lineage.parentWorktreeId, nextTrail)
+      lineageDepthById.set(worktreeId, depth)
+      return depth
+    }
+    const logicalDepths = worktrees.map((worktree) => getDepth(worktree.id))
+    const lineageParentIds = new Set(
+      Object.values(state.worktreeLineageById)
+        .filter((lineage) => worktreeIds.has(lineage.worktreeId))
+        .map((lineage) => lineage.parentWorktreeId)
+    )
+    const sidebar = document.querySelector('[data-worktree-sidebar]')
+    const mountedWorktreeIds = [
+      ...new Set(
+        [...(sidebar?.querySelectorAll('[data-worktree-id]') ?? [])]
+          .map((element) => element.getAttribute('data-worktree-id'))
+          .filter(Boolean)
+      )
+    ]
+    const mountedAgentRows = [...(sidebar?.querySelectorAll('*') ?? [])].filter(
+      (element) =>
+        element.classList.contains('group/agent-row') ||
+        element.classList.contains('compact-agent-row')
+    ).length
+    let diagnosticCensus = null
+    try {
+      diagnosticCensus = window.__orcaTypingDiagnostic?.report().census ?? null
+    } catch {}
+    const collapsedLineageGroups = [...lineageParentIds].filter((parentId) =>
+      state.collapsedGroups.has(`lineage:${parentId}`)
+    ).length
+    return {
+      capturedAt: new Date().toISOString(),
+      worktrees: {
+        store: worktrees.length,
+        mountedCards: sidebar?.querySelectorAll('[data-worktree-card-surface]').length ?? 0,
+        mountedUnique: mountedWorktreeIds.length,
+        mountedIds: mountedWorktreeIds.slice(0, 100),
+        mountedIdsTruncated: Math.max(0, mountedWorktreeIds.length - 100)
+      },
+      agentRows: {
+        storeLive: Object.keys(state.agentStatusByPaneKey ?? {}).length,
+        storeRetained: Object.keys(state.retainedAgentsByPaneKey ?? {}).length,
+        mounted: mountedAgentRows,
+        diagnosticMounted: diagnosticCensus?.agentRows.mountedDom ?? null
+      },
+      storeListeners: diagnosticCensus?.storeListeners ?? null,
+      lineage: {
+        configuredDepth,
+        measuredMaxDepth: Math.max(0, ...logicalDepths),
+        edges: logicalDepths.filter((depth) => depth > 0).length,
+        groups: lineageParentIds.size,
+        expandedGroups: lineageParentIds.size - collapsedLineageGroups,
+        collapsedGroups: collapsedLineageGroups
+      },
+      diagnostic: diagnosticCensus
+    }
+  }, configuredLineageDepth)
+}
diff --git a/config/scripts/idle-cpu-renderer-timing-probe.mjs b/config/scripts/idle-cpu-renderer-timing-probe.mjs
new file mode 100644
index 00000000000..b010bcb3433
--- /dev/null
+++ b/config/scripts/idle-cpu-renderer-timing-probe.mjs
@@ -0,0 +1,191 @@
+const RENDERER_TIMER_INTERVAL_MS = 100
+
+export async function startRendererTimingProbe(page) {
+  await page.evaluate((timerIntervalMs) => {
+    const maxSamples = 5_000
+    const maxEntries = 80
+    let phaseStartedAt = performance.now()
+    let phaseStartedAtIso = new Date().toISOString()
+    let timerId = null
+    let driftCount = 0
+    let driftSamples = []
+    let longTaskEntries = []
+    let observer = null
+    let longTaskSupported = false
+
+    const round = (value) => Math.round(value * 100) / 100
+    const summarize = (values, totalCount = values.length) => {
+      const sorted = [...values].sort((left, right) => left - right)
+      const percentile = (fraction) =>
+        sorted.length === 0
+          ? null
+          : sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * fraction) - 1)]
+      return {
+        count: totalCount,
+        retainedCount: sorted.length,
+        mean:
+          sorted.length === 0
+            ? null
+            : round(sorted.reduce((sum, value) => sum + value, 0) / sorted.length),
+        p50: sorted.length === 0 ? null : round(percentile(0.5)),
+        p95: sorted.length === 0 ? null : round(percentile(0.95)),
+        max: sorted.length === 0 ? null : round(sorted.at(-1))
+      }
+    }
+    const recordLongTasks = (entries) => {
+      for (const entry of entries) {
+        longTaskEntries.push({
+          startTime: entry.startTime,
+          duration: entry.duration,
+          name: entry.name
+        })
+        if (longTaskEntries.length > maxSamples) {
+          longTaskEntries.shift()
+        }
+      }
+    }
+    try {
+      longTaskSupported = PerformanceObserver.supportedEntryTypes?.includes('longtask') === true
+      if (longTaskSupported) {
+        observer = new PerformanceObserver((list) => recordLongTasks(list.getEntries()))
+        observer.observe({ type: 'longtask', buffered: true })
+      }
+    } catch {
+      observer = null
+      longTaskSupported = false
+    }
+    const scheduleTimer = () => {
+      const expectedAt = performance.now() + timerIntervalMs
+      timerId = setTimeout(() => {
+        driftCount += 1
+        driftSamples.push(Math.max(0, performance.now() - expectedAt))
+        if (driftSamples.length > maxSamples) {
+          driftSamples.shift()
+        }
+        scheduleTimer()
+      }, timerIntervalMs)
+    }
+    const snapshot = (reset) => {
+      if (observer) {
+        recordLongTasks(observer.takeRecords())
+      }
+      const capturedAt = performance.now()
+      const phaseLongTasks = longTaskEntries.filter((entry) => entry.startTime >= phaseStartedAt)
+      const durations = phaseLongTasks.map((entry) => entry.duration)
+      const result = {
+        startedAt: phaseStartedAtIso,
+        capturedAt: new Date().toISOString(),
+        durationMs: round(capturedAt - phaseStartedAt),
+        timerIntervalMs,
+        timerDriftMs: summarize(driftSamples, driftCount),
+        longTasks: {
+          supported: longTaskSupported,
+          ...summarize(durations),
+          totalDurationMs: round(durations.reduce((sum, value) => sum + value, 0)),
+          entries: phaseLongTasks.slice(-maxEntries).map((entry) => ({
+            startMs: round(entry.startTime - phaseStartedAt),
+            durationMs: round(entry.duration),
+            name: entry.name
+          })),
+          entriesTruncated: Math.max(0, phaseLongTasks.length - maxEntries)
+        }
+      }
+      if (reset) {
+        phaseStartedAt = capturedAt
+        phaseStartedAtIso = new Date().toISOString()
+        driftCount = 0
+        driftSamples = []
+        longTaskEntries = []
+      }
+      return result
+    }
+    scheduleTimer()
+    window.__orcaIdleCpuTimingProbe = {
+      snapshot: () => snapshot(true),
+      stop: () => {
+        if (timerId !== null) {
+          clearTimeout(timerId)
+        }
+        const result = snapshot(false)
+        observer?.disconnect()
+        return result
+      }
+    }
+  }, RENDERER_TIMER_INTERVAL_MS)
+}
+
+export async function snapshotRendererTimingProbe(page) {
+  return page.evaluate(() => window.__orcaIdleCpuTimingProbe?.snapshot() ?? null)
+}
+
+export async function stopRendererTimingProbe(page) {
+  return page.evaluate(() => window.__orcaIdleCpuTimingProbe?.stop() ?? null)
+}
+
+export async function runZustandPublications(page, count, intervalMs) {
+  return page.evaluate(
+    ({ count, intervalMs }) =>
+      new Promise((resolve, reject) => {
+        const store = window.__store
+        if (!store) {
+          reject(new Error('window.__store is not available'))
+          return
+        }
+        const maxSamples = 5_000
+        const startedAt = performance.now()
+        const startedAtIso = new Date().toISOString()
+        const schedulingDriftMs = []
+        let completed = 0
+        const finish = () => {
+          const sorted = [...schedulingDriftMs].sort((left, right) => left - right)
+          const percentile = (fraction) =>
+            sorted.length === 0
+              ? null
+              : sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * fraction) - 1)]
+          const round = (value) => Math.round(value * 100) / 100
+          resolve({
+            requested: count,
+            completed,
+            intervalMs,
+            startedAt: startedAtIso,
+            completedAt: new Date().toISOString(),
+            durationMs: round(performance.now() - startedAt),
+            schedulingDriftMs: {
+              retainedCount: sorted.length,
+              p50: sorted.length === 0 ? null : round(percentile(0.5)),
+              p95: sorted.length === 0 ? null : round(percentile(0.95)),
+              max: sorted.length === 0 ? null : round(sorted.at(-1))
+            }
+          })
+        }
+        const publish = () => {
+          const publishedAt = performance.now()
+          const scheduledAt = startedAt + completed * intervalMs
+          schedulingDriftMs.push(Math.max(0, publishedAt - scheduledAt))
+          if (schedulingDriftMs.length > maxSamples) {
+            schedulingDriftMs.shift()
+          }
+          try {
+            // Why: an empty partial notifies every subscriber without changing domain state.
+            store.setState({})
+          } catch (error) {
+            reject(error)
+            return
+          }
+          completed += 1
+          if (completed >= count) {
+            finish()
+            return
+          }
+          const nextAt = startedAt + completed * intervalMs
+          setTimeout(publish, Math.max(0, nextAt - performance.now()))
+        }
+        if (count === 0) {
+          finish()
+        } else {
+          setTimeout(publish, 0)
+        }
+      }),
+    { count, intervalMs }
+  )
+}
diff --git a/config/scripts/install-electron-package-binary.mjs b/config/scripts/install-electron-package-binary.mjs
index f75d1eae30a..314cd31710f 100644
--- a/config/scripts/install-electron-package-binary.mjs
+++ b/config/scripts/install-electron-package-binary.mjs
@@ -28,6 +28,8 @@ const transientDownloadErrorCodes = new Set([
   'EAI_AGAIN',
   'ECONNREFUSED',
   'ECONNRESET',
+  // GitHub release CDN can refuse HTTP/2 streams under load; retry like socket resets.
+  'ERR_HTTP2_STREAM_ERROR',
   'ENETDOWN',
   'ENETRESET',
   'ENETUNREACH',
@@ -185,7 +187,9 @@ async function downloadElectronArtifactWithRetry(downloadOptions) {
 function getDownloadRetryDelays() {
   const configured = process.env.ORCA_ELECTRON_PACKAGE_RETRY_DELAYS_MS
   if (!configured) {
-    return [1_000, 3_000]
+    // Why: GitHub release CDN returns intermittent 503 / HTTP2 stream refusals
+    // under CI fan-out; a few short attempts still exhaust during outages.
+    return [1_000, 3_000, 5_000, 10_000]
   }
 
   const delays = configured.split(',').map(Number)
@@ -200,7 +204,7 @@ function isTransientDownloadError(error) {
     if (transientDownloadErrorCodes.has(candidate?.code)) {
       return true
     }
-    const statusCode = candidate?.statusCode ?? candidate?.response?.statusCode
+    const statusCode = getDownloadErrorStatusCode(candidate)
     if (
       statusCode === 408 ||
       statusCode === 425 ||
@@ -213,6 +217,13 @@ function isTransientDownloadError(error) {
   return false
 }
 
+function getDownloadErrorStatusCode(error) {
+  // @electron/get FetchDownloader uses Fetch Response.status; older got uses statusCode.
+  return (
+    error?.statusCode ?? error?.status ?? error?.response?.statusCode ?? error?.response?.status
+  )
+}
+
 function getErrorChain(error) {
   const errors = []
   let candidate = error
@@ -225,7 +236,7 @@ function getErrorChain(error) {
 
 function formatDownloadError(error) {
   for (const candidate of getErrorChain(error)) {
-    const statusCode = candidate?.statusCode ?? candidate?.response?.statusCode
+    const statusCode = getDownloadErrorStatusCode(candidate)
     if (statusCode) {
       return `HTTP ${statusCode}`
     }
diff --git a/config/scripts/install-electron-package-binary.test.mjs b/config/scripts/install-electron-package-binary.test.mjs
index 2c37f95cfbe..ad04336e8e7 100644
--- a/config/scripts/install-electron-package-binary.test.mjs
+++ b/config/scripts/install-electron-package-binary.test.mjs
@@ -118,6 +118,58 @@ describe('install-electron-package-binary', () => {
     }
   })
 
+  it('retries HTTP/2 stream refusal Electron download failures', () => {
+    const projectDir = mkTempProject()
+
+    try {
+      writeFakeElectronPackage(projectDir)
+      writeFakeElectronGet(projectDir, {
+        downloadFailures: 1,
+        downloadErrorCode: 'ERR_HTTP2_STREAM_ERROR'
+      })
+      writeFakeExtractor(projectDir, { createExecutable: true })
+
+      const result = runInstallScript(projectDir, {
+        ORCA_ELECTRON_PACKAGE_RETRY_DELAYS_MS: '0,0'
+      })
+
+      expect(result.status, result.stderr).toBe(0)
+      expect(
+        readFileSync(join(projectDir, 'electron-get.log'), 'utf8').trim().split('\n')
+      ).toHaveLength(2)
+      expect(result.stderr).toContain(
+        'Transient Electron download failure (ERR_HTTP2_STREAM_ERROR)'
+      )
+    } finally {
+      rmSync(projectDir, { recursive: true, force: true })
+    }
+  })
+
+  it('retries Electron download HTTP 503 failures from Fetch Response.status', () => {
+    const projectDir = mkTempProject()
+
+    try {
+      writeFakeElectronPackage(projectDir)
+      writeFakeElectronGet(projectDir, {
+        downloadFailures: 1,
+        downloadHttpStatus: 503
+      })
+      writeFakeExtractor(projectDir, { createExecutable: true })
+
+      const result = runInstallScript(projectDir, {
+        ORCA_ELECTRON_PACKAGE_RETRY_DELAYS_MS: '0,0'
+      })
+
+      expect(result.status, result.stderr).toBe(0)
+      expect(
+        readFileSync(join(projectDir, 'electron-get.log'), 'utf8').trim().split('\n')
+      ).toHaveLength(2)
+      expect(result.stderr).toContain('Transient Electron download failure (HTTP 503)')
+    } finally {
+      rmSync(projectDir, { recursive: true, force: true })
+    }
+  })
+
   it('fails after exhausting transient Electron download retries', () => {
     const projectDir = mkTempProject()
 
@@ -279,7 +331,12 @@ module.exports = path.join(__dirname, 'dist', fs.readFileSync(pathFile, 'utf8'))
 
 function writeFakeElectronGet(
   projectDir,
-  { downloadNeverSettles = false, downloadFailures = 0, downloadErrorCode = 'ECONNRESET' } = {}
+  {
+    downloadNeverSettles = false,
+    downloadFailures = 0,
+    downloadErrorCode = 'ECONNRESET',
+    downloadHttpStatus = null
+  } = {}
 ) {
   const getDir = join(projectDir, 'node_modules', 'electron', 'node_modules', '@electron', 'get')
   mkdirSync(getDir, { recursive: true })
@@ -299,6 +356,11 @@ exports.downloadArtifact = async function downloadArtifact(details) {
     return new Promise(() => {})
   }
   if (downloadAttempt <= ${JSON.stringify(downloadFailures)}) {
+    if (${JSON.stringify(downloadHttpStatus)} != null) {
+      const error = new Error('Response code ' + ${JSON.stringify(downloadHttpStatus)})
+      error.response = { status: ${JSON.stringify(downloadHttpStatus)} }
+      throw error
+    }
     const cause = Object.assign(new Error('download failed'), {
       code: ${JSON.stringify(downloadErrorCode)}
     })
diff --git a/config/scripts/legacy-worker-recovery-persistence-benchmark.mjs b/config/scripts/legacy-worker-recovery-persistence-benchmark.mjs
index 5f4160600cc..76555d4e78e 100644
--- a/config/scripts/legacy-worker-recovery-persistence-benchmark.mjs
+++ b/config/scripts/legacy-worker-recovery-persistence-benchmark.mjs
@@ -30,8 +30,8 @@ const recoveryEnd = runtimeSource.indexOf(
 )
 const recoverySource = runtimeSource.slice(recoveryStart, recoveryEnd)
 if (
-  recoveryStart < 0 ||
-  recoveryEnd < 0 ||
+  recoveryStart === -1 ||
+  recoveryEnd === -1 ||
   !recoverySource.includes('await this.flushWorkspaceSessionOrThrowAsync()') ||
   recoverySource.includes('flushOrThrow()')
 ) {
diff --git a/config/scripts/locale-ko-key-overrides.json b/config/scripts/locale-ko-key-overrides.json
index bd0c3c15aee..aacf053926e 100644
--- a/config/scripts/locale-ko-key-overrides.json
+++ b/config/scripts/locale-ko-key-overrides.json
@@ -2273,12 +2273,6 @@
   "auto.components.settings.GitPane.976afc6b3e": {
     "ko": "워크스페이스를 만들면 Orca가 원격 기준 브랜치를 새로고침하고, 일치하는 로컬 브랜치를 안전하게 fast-forward합니다. 예:"
   },
-  "auto.components.settings.GitPane.b5f534717a": {
-    "ko": "공동 작성"
-  },
-  "auto.components.settings.GitPane.b9b5771bb1": {
-    "ko": "표기"
-  },
   "auto.components.settings.GitPane.b9c011fbc2": {
     "ko": "속도 제한"
   },
@@ -2288,9 +2282,6 @@
   "auto.components.settings.GitPane.db3a127eb1": {
     "ko": "이렇게 하면 다음과 같은 명령이 유지됩니다"
   },
-  "auto.components.settings.GitPane.e02ea23a32": {
-    "ko": "Orca 표기"
-  },
   "auto.components.settings.GitPane.f35007e6e8": {
     "ko": "git-username"
   },
diff --git a/config/scripts/locale-ko-value-overrides.mjs b/config/scripts/locale-ko-value-overrides.mjs
index 5526d963b7a..bcc5b6e9e8e 100644
--- a/config/scripts/locale-ko-value-overrides.mjs
+++ b/config/scripts/locale-ko-value-overrides.mjs
@@ -44,7 +44,6 @@ export const KO_VALUE_OVERRIDES = {
   'Issue #{{value0}}': '이슈 #{{value0}}',
   'Linked issue #{{value0}}': '연결된 이슈 #{{value0}}',
   'Issue # or GitHub URL': '이슈 # 또는 GitHub URL',
-  'Add Orca attribution to commits, PRs, and issues.': '커밋, PR 및 이슈에 Orca 속성을 추가합니다.',
   'Paste an issue URL, or enter a number. Leave blank to remove the link.':
     '이슈 URL을 붙여넣거나 숫자를 입력하세요. 링크를 제거하려면 비워두세요.',
   'Connect Linear in Settings to search issues.': '이슈를 검색하려면 설정에서 Linear를 연결하세요.',
@@ -157,8 +156,7 @@ export const KO_VALUE_OVERRIDES = {
     '저장되지 않은 Git AI Author 변경사항이 있습니다. 떠나면 폐기됩니다.',
   'Discard unsaved Git AI Author changes?':
     '저장되지 않은 Git AI Author 변경사항을 삭제하시겠습니까?',
-  'Branch naming, base refs, attribution, and Git AI Author.':
-    '브랜치 이름 지정, 기본 참조, 속성 및 Git AI Author.',
+  'Branch naming, base refs, and Git AI Author.': '브랜치 이름 지정, 기본 참조 및 Git AI Author.',
   'Used by repositories that inherit global hosted-review defaults.':
     '전역 호스팅 PR 기본값을 상속하는 저장소에서 사용됩니다.',
   'Defaults used when the hosted-review composer opens.':
diff --git a/config/scripts/locale-search-keyword-overrides.mjs b/config/scripts/locale-search-keyword-overrides.mjs
index 2a9d6266f5d..352199c1f7e 100644
--- a/config/scripts/locale-search-keyword-overrides.mjs
+++ b/config/scripts/locale-search-keyword-overrides.mjs
@@ -164,7 +164,6 @@ export const SEARCH_KEYWORD_OVERRIDES = {
     gitlab: 'GitLab',
     gitea: 'Gitea',
     oauth: 'OAuth',
-    attribution: '归因',
     skill: '技能',
     skills: '技能',
     phone: '手机',
diff --git a/config/scripts/locale-translation-policy.es-pr.test.mjs b/config/scripts/locale-translation-policy.es-pr.test.mjs
index a3c046ce895..389f914c86b 100644
--- a/config/scripts/locale-translation-policy.es-pr.test.mjs
+++ b/config/scripts/locale-translation-policy.es-pr.test.mjs
@@ -25,10 +25,10 @@ describe('locale-translation-policy es PR glossary', () => {
   it('rewrites PR inside longer sentences', () => {
     expect(
       repairEs(
-        'Add Orca attribution to commits, PRs, and issues.',
-        'Agregue la atribución de Orca a commits, relaciones públicas y problemas.'
+        'Split a large change into smaller PRs',
+        'Dividir un cambio grande en relaciones públicas más pequeños'
       )
-    ).toBe('Agregue la atribución de Orca a commits, PR y problemas.')
+    ).toBe('Dividir un cambio grande en PR más pequeños')
     expect(
       repairEs(
         'Open the PR details to view current reviewers.',
diff --git a/config/scripts/locale-translation-policy.zh-round5.test.mjs b/config/scripts/locale-translation-policy.zh-round5.test.mjs
index 28901fba8d4..622b3c5c31c 100644
--- a/config/scripts/locale-translation-policy.zh-round5.test.mjs
+++ b/config/scripts/locale-translation-policy.zh-round5.test.mjs
@@ -44,22 +44,14 @@ describe('locale-translation-policy zh round 5', () => {
         locale: 'zh'
       })
     ).toBe('显示 Orca Mobile 按钮')
-    expect(
-      repairTranslatedValue({
-        key: 'auto.components.settings.GitPane.e02ea23a32',
-        enValue: 'Orca Attribution',
-        localeValue: 'Orca归属',
-        locale: 'zh'
-      })
-    ).toBe('Orca 归因')
     expect(
       repairTranslatedValue({
         key: 'auto.hooks.useSettingsNavigationMetadata.ab4b21b58e',
-        enValue: 'Branch naming, base refs, attribution, and Git AI Author.',
-        localeValue: '分支命名、基本引用、归属和 Git AI 作者。',
+        enValue: 'Branch naming, base refs, and Git AI Author.',
+        localeValue: '分支命名、基本引用和 Git AI 作者。',
         locale: 'zh'
       })
-    ).toBe('分支命名、基础引用、归因和 Git AI Author。')
+    ).toBe('分支命名、基础引用和 Git AI Author。')
     expect(
       repairTranslatedValue({
         key: 'auto.components.workspace.cleanup.WorkspaceCleanupDialog.1b18868569',
diff --git a/config/scripts/locale-zh-phrase-fixes-round5.mjs b/config/scripts/locale-zh-phrase-fixes-round5.mjs
index 1aa117395e8..23fcc6d32a5 100644
--- a/config/scripts/locale-zh-phrase-fixes-round5.mjs
+++ b/config/scripts/locale-zh-phrase-fixes-round5.mjs
@@ -3,7 +3,6 @@ export const ZH_PHRASE_FIXES_ROUND5 = [
   { pattern: /Orca集成开发环境/g, replacement: 'Orca IDE', whenEnIncludes: 'Orca IDE' },
   { pattern: /Orca第一/g, replacement: 'Orca 优先', whenEnIncludes: 'Orca first' },
   { pattern: /Orca移动/g, replacement: 'Orca Mobile', whenEnIncludes: 'Orca Mobile' },
-  { pattern: /Orca归属/g, replacement: 'Orca 归因', whenEnIncludes: 'Orca Attribution' },
   { pattern: /Orca标志/g, replacement: 'Orca 标志', whenEnIncludes: 'Orca logo' },
   { pattern: /喜欢Orca/g, replacement: '喜欢 Orca', whenEnIncludes: 'Enjoying Orca' },
   { pattern: /认识Orca/g, replacement: '了解 Orca', whenEnIncludes: 'Get to know Orca' },
diff --git a/config/scripts/locale-zh-value-overrides.mjs b/config/scripts/locale-zh-value-overrides.mjs
index 087091a3f3e..b53fb1d2248 100644
--- a/config/scripts/locale-zh-value-overrides.mjs
+++ b/config/scripts/locale-zh-value-overrides.mjs
@@ -144,7 +144,6 @@ export const ZH_VALUE_OVERRIDES = {
   'Expand Orca': '展开 Orca',
   'Support Orca': '支持 Orca',
   'Restarting Orca…': '正在重启 Orca…',
-  'Orca Attribution': 'Orca 归因',
   'Show Orca Mobile Button': '显示 Orca Mobile 按钮',
   'Codex Accounts': 'Codex 账户',
   'Codex Account': 'Codex 账户',
@@ -186,8 +185,7 @@ export const ZH_VALUE_OVERRIDES = {
   "Give agents direct access to Orca's browser so they can test pages, capture screenshots, and act on what they see.":
     '让代理直接访问 Orca 的浏览器，以便测试页面、捕获屏幕截图并根据所见内容执行操作。',
   'X finishes, send it the review task.”': 'X 完成后，把评审任务发给它。”',
-  'Branch naming, base refs, attribution, and Git AI Author.':
-    '分支命名、基础引用、归因和 Git AI Author。',
+  'Branch naming, base refs, and Git AI Author.': '分支命名、基础引用和 Git AI Author。',
   'You have unsaved Git AI Author changes. Leaving will discard them.':
     '您有未保存的 Git AI Author 更改。离开将丢弃它们。',
   'Discard unsaved Git AI Author changes?': '放弃未保存的 Git AI Author 更改？',
diff --git a/config/scripts/macos-computer-helper-owner-loss-benchmark.mjs b/config/scripts/macos-computer-helper-owner-loss-benchmark.mjs
index 8724cf8faf4..b6f1d9571a5 100644
--- a/config/scripts/macos-computer-helper-owner-loss-benchmark.mjs
+++ b/config/scripts/macos-computer-helper-owner-loss-benchmark.mjs
@@ -210,7 +210,7 @@ function connectInvalidPeer(socketPath) {
     const onData = (chunk) => {
       buffer += chunk
       const newline = buffer.indexOf('\n')
-      if (newline < 0) {
+      if (newline === -1) {
         return
       }
       let response
diff --git a/config/scripts/mjpeg-frame-parser-alloc-benchmark.mjs b/config/scripts/mjpeg-frame-parser-alloc-benchmark.mjs
index 86791745c10..5e350bb24f8 100644
--- a/config/scripts/mjpeg-frame-parser-alloc-benchmark.mjs
+++ b/config/scripts/mjpeg-frame-parser-alloc-benchmark.mjs
@@ -54,7 +54,7 @@ function extractOld(pending, chunk, maxPendingBytes = 2 * 1024 * 1024) {
   const frames = []
   while (cursor.length > 0) {
     const frameStart = cursor.indexOf(JPEG_START)
-    if (frameStart < 0) {
+    if (frameStart === -1) {
       const keepLastByte = cursor.at(-1) === 0xff
       return { frames, pending: keepLastByte ? Buffer.from([0xff]) : Buffer.alloc(0) }
     }
@@ -62,7 +62,7 @@ function extractOld(pending, chunk, maxPendingBytes = 2 * 1024 * 1024) {
       cursor = cursor.subarray(frameStart)
     }
     const frameEnd = cursor.indexOf(JPEG_END, JPEG_START.length)
-    if (frameEnd < 0) {
+    if (frameEnd === -1) {
       const tail = cursor.length <= maxPendingBytes ? cursor : cursor.subarray(-maxPendingBytes)
       return { frames, pending: trackedCopy(tail) }
     }
@@ -79,7 +79,7 @@ function extractNew(pending, chunk, maxPendingBytes = 2 * 1024 * 1024) {
   const frames = []
   while (cursor.length > 0) {
     const frameStart = cursor.indexOf(JPEG_START)
-    if (frameStart < 0) {
+    if (frameStart === -1) {
       const keepLastByte = cursor.at(-1) === 0xff
       return { frames, pending: keepLastByte ? Buffer.from([0xff]) : Buffer.alloc(0) }
     }
@@ -87,7 +87,7 @@ function extractNew(pending, chunk, maxPendingBytes = 2 * 1024 * 1024) {
       cursor = cursor.subarray(frameStart)
     }
     const frameEnd = cursor.indexOf(JPEG_END, JPEG_START.length)
-    if (frameEnd < 0) {
+    if (frameEnd === -1) {
       const tail = cursor.length <= maxPendingBytes ? cursor : cursor.subarray(-maxPendingBytes)
       return { frames, pending: trackedCopy(tail) }
     }
diff --git a/config/scripts/orchestration-skill-guidance.test.mjs b/config/scripts/orchestration-skill-guidance.test.mjs
index 080cb4fa785..b9a88ae12ad 100644
--- a/config/scripts/orchestration-skill-guidance.test.mjs
+++ b/config/scripts/orchestration-skill-guidance.test.mjs
@@ -281,7 +281,7 @@ describe('orchestration skill guidance', () => {
     expect(workerLoop).toContain('opaque provider model id with `--model`')
     expect(workerLoop).toContain('`--effort` requires `--model`')
     expect(workerLoop).toContain('neither option can combine with `--terminal`')
-    expect(workerLoop).toContain('--agent claude --model aws-bedrock-opus-5 --effort high --json')
+    expect(workerLoop).toContain('--agent claude --model opus --effort high --json')
     expect(workerLoop).toContain('`launch.requested` and `launch.effective`')
   })
 
diff --git a/config/scripts/package-electron-runtime-contract.test.mjs b/config/scripts/package-electron-runtime-contract.test.mjs
index 1b695086808..c6e96c88b2c 100644
--- a/config/scripts/package-electron-runtime-contract.test.mjs
+++ b/config/scripts/package-electron-runtime-contract.test.mjs
@@ -80,6 +80,7 @@ describe('Electron runtime package contract', () => {
       'build:linux',
       'test:e2e',
       'test:e2e:terminal-rendering-golden',
+      'test:e2e:posix-profile-index-golden',
       'test:e2e:terminal-rendering-release-evidence',
       'test:e2e:headful'
     ]
@@ -492,7 +493,7 @@ describe('Electron runtime package contract', () => {
     expect(uploadStep.with.path).toBe('${{ env.ORCA_E2E_TERMINAL_PERF_REPORT_PATH }}')
   })
 
-  it('keeps terminal rendering regressions in the manual golden E2E workflow', () => {
+  it('keeps platform golden regressions in the manual and release workflows', () => {
     const packageScripts = packageJson.scripts
     const goldenWorkflow = parse(
       readFileSync(join(projectDir, '.github/workflows/golden-e2e-experiment.yml'), 'utf8')
@@ -506,17 +507,19 @@ describe('Electron runtime package contract', () => {
       ['mac', 'macOS'],
       ['windows', 'Windows']
     ])
-    const goldenPlatforms = goldenWorkflow.jobs['golden-e2e'].strategy.matrix.include
-      .map(({ platform }) => platform)
-      .sort()
-    const goldenRunSteps = goldenPlatforms.map((platform) => {
-      const label = goldenPlatformLabels.get(platform)
+    const goldenMatrix = goldenWorkflow.jobs['golden-e2e'].strategy.matrix.include
+    const goldenPlatforms = goldenMatrix.map(({ platform }) => platform).sort()
+    const goldenRunSteps = new Map(
+      goldenPlatforms.map((platform) => {
+        const label = goldenPlatformLabels.get(platform)
 
-      expect(label, platform).toBeDefined()
+        expect(label, platform).toBeDefined()
 
-      return steps.find((step) => step.name === `Run golden E2E tests on ${label}`)
-    })
+        return [platform, steps.find((step) => step.name === `Run golden E2E tests on ${label}`)]
+      })
+    )
     const releaseGoldenJob = releaseWorkflow.jobs['terminal-rendering-golden']
+    const releaseGoldenMatrix = releaseGoldenJob.strategy.matrix.include
     const releaseEvidenceJob = releaseWorkflow.jobs['terminal-rendering-release-evidence']
     const releaseBuildNeeds = releaseWorkflow.jobs.build.needs
     const publishReleaseNeeds = releaseWorkflow.jobs['publish-release'].needs
@@ -535,15 +538,47 @@ describe('Electron runtime package contract', () => {
     expect(packageScripts['test:e2e:terminal-rendering-golden']).not.toContain(
       'terminal-long-table-scroll-restore.spec.ts'
     )
+    expect(packageScripts['test:e2e:windows-fresh-startup-golden']).toContain(
+      'golden-windows-fresh-startup.spec.ts'
+    )
+    expect(packageScripts['test:e2e:windows-fresh-startup-golden']).toContain(
+      '@windows-fresh-startup-golden'
+    )
+    expect(packageScripts['test:e2e:posix-profile-index-golden']).toContain(
+      'golden-posix-profile-index-fsync.spec.ts'
+    )
+    expect(packageScripts['test:e2e:posix-profile-index-golden']).toContain(
+      'golden-posix-fresh-startup.spec.ts'
+    )
+    expect(packageScripts['test:e2e:posix-profile-index-golden']).toContain(
+      '@posix-profile-index-golden'
+    )
     expect(packageScripts['test:e2e:terminal-rendering-release-evidence']).toContain(
       'terminal-opencode-emoji-table-rendering.spec.ts'
     )
     expect(packageScripts['test:e2e:terminal-rendering-release-evidence']).toContain(
       'terminal-long-table-scroll-restore.spec.ts'
     )
-    for (const runStep of goldenRunSteps) {
-      expect(runStep?.run).toContain('pnpm run test:e2e:terminal-rendering-golden')
-    }
+    expect(goldenMatrix).toEqual([
+      { os: 'ubuntu-latest', platform: 'linux' },
+      { os: 'macos-15', platform: 'mac' },
+      { os: 'windows-2022', platform: 'windows' }
+    ])
+    expect(goldenRunSteps.get('linux')?.run).toContain(
+      'pnpm run test:e2e:terminal-rendering-golden'
+    )
+    expect(goldenRunSteps.get('linux')?.run).toContain(
+      'pnpm run test:e2e:posix-profile-index-golden'
+    )
+    expect(goldenRunSteps.get('mac')?.run).toContain('pnpm run test:e2e:terminal-rendering-golden')
+    expect(goldenRunSteps.get('mac')?.run).toContain('pnpm run test:e2e:posix-profile-index-golden')
+    expect(goldenRunSteps.get('windows')).toMatchObject({
+      if: "runner.os == 'Windows'",
+      shell: 'pwsh'
+    })
+    expect(goldenRunSteps.get('windows').run).toContain(
+      'pnpm run test:e2e:windows-fresh-startup-golden'
+    )
     expect(goldenWorkflow.on.pull_request).toBeUndefined()
     expect(goldenWorkflow.on.workflow_dispatch).toBeDefined()
     expect(releaseBuildNeeds).not.toContain('terminal-rendering-golden')
@@ -552,12 +587,25 @@ describe('Electron runtime package contract', () => {
     expect(publishReleaseNeeds).toContain('build')
     expect(publishReleaseNeeds).not.toContain('terminal-rendering-release-evidence')
     expect(releaseGoldenJob['continue-on-error']).toBeUndefined()
-    expect(releaseGoldenJob.strategy.matrix.include.map(({ platform }) => platform).sort()).toEqual(
-      goldenPlatforms
+    expect(releaseGoldenMatrix).toEqual(goldenMatrix)
+    const releaseLinuxRunStep = releaseGoldenJob.steps.find(
+      (step) => step.name === 'Run terminal rendering golden on Linux'
     )
-    expect(releaseGoldenJob.steps.map((step) => step.run ?? '')).toContain(
-      'xvfb-run --auto-servernum env SKIP_BUILD=1 ORCA_E2E_FORWARD_APP_LOGS=1 pnpm run test:e2e:terminal-rendering-golden'
+    expect(releaseLinuxRunStep.run).toContain('pnpm run test:e2e:terminal-rendering-golden')
+    expect(releaseLinuxRunStep.run).toContain('pnpm run test:e2e:posix-profile-index-golden')
+    const releaseMacRunStep = releaseGoldenJob.steps.find(
+      (step) => step.name === 'Run terminal rendering golden on macOS'
     )
+    expect(releaseMacRunStep.run).toContain('pnpm run test:e2e:terminal-rendering-golden')
+    expect(releaseMacRunStep.run).toContain('pnpm run test:e2e:posix-profile-index-golden')
+    const releaseWindowsRunStep = releaseGoldenJob.steps.find(
+      (step) => step.name === 'Run fresh-startup golden on Windows'
+    )
+    expect(releaseWindowsRunStep).toMatchObject({
+      if: "runner.os == 'Windows'",
+      shell: 'pwsh'
+    })
+    expect(releaseWindowsRunStep.run).toContain('pnpm run test:e2e:windows-fresh-startup-golden')
     expect(releaseEvidenceJob['continue-on-error']).toBe(true)
     expect(
       releaseEvidenceJob.strategy.matrix.include.map(({ platform }) => platform).sort()
diff --git a/config/scripts/pr-e2e-gate-contract.test.mjs b/config/scripts/pr-e2e-gate-contract.test.mjs
index 860e70c892b..d44039a2ca8 100644
--- a/config/scripts/pr-e2e-gate-contract.test.mjs
+++ b/config/scripts/pr-e2e-gate-contract.test.mjs
@@ -6,6 +6,10 @@ import { parse } from 'yaml'
 const projectDir = resolve(import.meta.dirname, '../..')
 const prWorkflow = parse(readFileSync(join(projectDir, '.github/workflows/pr.yml'), 'utf8'))
 const e2eWorkflow = parse(readFileSync(join(projectDir, '.github/workflows/e2e.yml'), 'utf8'))
+const sshDockerRunner = readFileSync(
+  join(projectDir, 'config/scripts/run-ssh-docker-terminal-parking-e2e.mjs'),
+  'utf8'
+)
 
 const filterStep = prWorkflow.jobs['e2e-paths'].steps.find(
   (step) => step.name === 'Filter changed E2E specs'
@@ -64,14 +68,36 @@ describe('PR E2E gate contract', () => {
     expect(e2eWorkflow.jobs.e2e.if).toBe("inputs.test_files == ''")
     expect(e2eWorkflow.jobs['changed-e2e'].if).toBe("inputs.test_files != ''")
     expect(e2eWorkflow.jobs['changed-e2e'].strategy).toBeUndefined()
-    expect(e2eWorkflow.jobs['ssh-docker-watcher-isolation'].if).toBe("inputs.test_files == ''")
     const changedRun = e2eWorkflow.jobs['changed-e2e'].steps.find(
       (step) => step.name === 'Run changed E2E specs'
     )
     expect(changedRun.env.TEST_FILES_JSON).toBe('${{ inputs.test_files }}')
+    expect(changedRun.run).toContain('. != "tests/e2e/ssh-startup-exec-readiness.spec.ts"')
+    expect(changedRun.run).toContain('. != "tests/e2e/paired-startup-exec-readiness.spec.ts"')
+    expect(changedRun.run).toContain('if [ "${#TEST_FILES[@]}" -eq 0 ]')
     expect(changedRun.run).toContain('pnpm run test:e2e "${TEST_FILES[@]}" --workers=1')
   })
 
+  it('keeps startup-exec live parity in the isolated SSH lane', () => {
+    const sshLaneCondition = e2eWorkflow.jobs['ssh-docker-watcher-isolation'].if
+    expect(sshLaneCondition).toContain("inputs.test_files == ''")
+    expect(sshLaneCondition).toContain('tests/e2e/ssh-startup-exec-readiness.spec.ts')
+    expect(sshLaneCondition).toContain('tests/e2e/paired-startup-exec-readiness.spec.ts')
+    expect(sshDockerRunner).toContain('tests/e2e/ssh-startup-exec-readiness.spec.ts')
+    expect(sshDockerRunner).toContain('tests/e2e/paired-startup-exec-readiness.spec.ts')
+    expect(sshDockerRunner).toContain("'electron-headless'")
+    expect(sshDockerRunner).toContain("'electron-headful'")
+  })
+
+  it('installs zsh in every Linux lane that can run paired startup readiness', () => {
+    for (const jobName of ['e2e', 'changed-e2e', 'ssh-docker-watcher-isolation']) {
+      const installStep = e2eWorkflow.jobs[jobName].steps.find((step) =>
+        step.name.startsWith('Install native build')
+      )
+      expect(installStep.run, jobName).toMatch(/\bzsh\b/)
+    }
+  })
+
   it('keeps dedicated E2E workflows out of pull request CI', () => {
     const dedicatedWorkflows = [
       'golden-e2e-experiment.yml',
diff --git a/config/scripts/pr-workflow-parallelism.test.mjs b/config/scripts/pr-workflow-parallelism.test.mjs
index 5b3b66dea3f..165931dbeb1 100644
--- a/config/scripts/pr-workflow-parallelism.test.mjs
+++ b/config/scripts/pr-workflow-parallelism.test.mjs
@@ -8,6 +8,7 @@ const dependencyAction = parse(
 )
 const packageJson = JSON.parse(readFileSync('package.json', 'utf8'))
 const shellContractFiles = [
+  'src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts',
   'src/main/daemon/shell-ready.test.ts',
   'src/main/providers/local-pty-shell-ready.test.ts',
   'src/main/providers/__tests__/shell-ready-framework-example.test.ts',
@@ -75,6 +76,7 @@ describe('PR workflow parallelism', () => {
 
     expect(shellStep).toBeDefined()
     expect(shellInstall).toBeDefined()
+    expect(shellStep.run.split(/\s+/)).toContain('--maxWorkers=1')
     // Why the whole workflow, not just the general shards: any other lane installing
     // these shells would silently start running the real-shell tests twice.
     expect(jobsInstallingPackages).toEqual(['shell_contracts'])
diff --git a/config/scripts/relay-watcher-fault-harness.mjs b/config/scripts/relay-watcher-fault-harness.mjs
index b27a1f945d9..784abfc4850 100644
--- a/config/scripts/relay-watcher-fault-harness.mjs
+++ b/config/scripts/relay-watcher-fault-harness.mjs
@@ -94,7 +94,7 @@ function waitForStdoutSentinel(proc, protocol, stderr) {
         stdoutBuffer = Buffer.concat([stdoutBuffer, chunk])
         const sentinel = Buffer.from(protocol.RELAY_SENTINEL)
         const index = stdoutBuffer.indexOf(sentinel)
-        if (index < 0) {
+        if (index === -1) {
           return
         }
         settled = true
@@ -148,7 +148,7 @@ function createRelayClient(entryPath, args, env, protocol) {
     stdoutBuffer = Buffer.concat([stdoutBuffer, chunk])
     const sentinel = Buffer.from(protocol.RELAY_SENTINEL)
     const index = stdoutBuffer.indexOf(sentinel)
-    if (index < 0) {
+    if (index === -1) {
       return
     }
     ready = true
diff --git a/config/scripts/remote-shared-control-retirement-probe.ts b/config/scripts/remote-shared-control-retirement-probe.ts
index 63abd01e376..30edeb9802a 100644
--- a/config/scripts/remote-shared-control-retirement-probe.ts
+++ b/config/scripts/remote-shared-control-retirement-probe.ts
@@ -5,7 +5,8 @@ import {
   resolveEnvironment,
   resolveEnvironmentPairingOffer
 } from '../../src/shared/runtime-environment-store'
-import type { MemorySnapshot, RuntimeStatus } from '../../src/shared/types'
+import type { MemorySnapshot } from '../../src/shared/types'
+import type { RuntimeStatus } from '../../src/shared/runtime-types'
 
 async function main(): Promise<void> {
   const environmentName = process.env.ORCA_PROBE_ENVIRONMENT_NAME
diff --git a/config/scripts/run-idle-cpu-benchmark.mjs b/config/scripts/run-idle-cpu-benchmark.mjs
index 53cabd3380b..3892de8845d 100644
--- a/config/scripts/run-idle-cpu-benchmark.mjs
+++ b/config/scripts/run-idle-cpu-benchmark.mjs
@@ -1,15 +1,34 @@
 #!/usr/bin/env node
 import { _electron as electron } from '@stablyai/playwright-test'
-import { execFileSync, spawnSync } from 'node:child_process'
+import { execFileSync } from 'node:child_process'
 import { existsSync, mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'
+import {
+  descendantsOf,
+  readProcessRows,
+  sampleProcessTreeUntilWorkloadsComplete,
+  summarizeProcessInventory,
+  summarizeSamples,
+  terminateProcesses
+} from './idle-cpu-process-sampling.mjs'
+import {
+  collectRendererCensus,
+  configureRendererScaleFixture
+} from './idle-cpu-renderer-scale-fixture.mjs'
+import {
+  runZustandPublications,
+  snapshotRendererTimingProbe,
+  startRendererTimingProbe,
+  stopRendererTimingProbe
+} from './idle-cpu-renderer-timing-probe.mjs'
 import { installSyntheticVisibleSpinners } from './idle-cpu-synthetic-spinners.mjs'
 
 const DEFAULT_WARMUP_MS = 15_000
 const DEFAULT_SAMPLE_MS = 30_000
 const DEFAULT_INTERVAL_MS = 1_000
 const DEFAULT_WORKTREE_COUNT = 1
+const DEFAULT_ZUSTAND_PUBLICATION_INTERVAL_MS = 100
 const ONBOARDING_FINAL_STEP = 3
 const ONBOARDING_FLOW_VERSION = 2
 
@@ -19,6 +38,10 @@ function parseArgs(argv) {
     sampleMs: DEFAULT_SAMPLE_MS,
     intervalMs: DEFAULT_INTERVAL_MS,
     worktrees: DEFAULT_WORKTREE_COUNT,
+    lineageDepth: 0,
+    agentsPerWorktree: 0,
+    zustandPublications: 0,
+    zustandPublicationIntervalMs: DEFAULT_ZUSTAND_PUBLICATION_INTERVAL_MS,
     skipBuild: false,
     headful: false,
     output: null,
@@ -47,6 +70,14 @@ function parseArgs(argv) {
       options.intervalMs = Number(readValue())
     } else if (arg === '--worktrees') {
       options.worktrees = Number(readValue())
+    } else if (arg === '--lineage-depth') {
+      options.lineageDepth = Number(readValue())
+    } else if (arg === '--agents-per-worktree') {
+      options.agentsPerWorktree = Number(readValue())
+    } else if (arg === '--zustand-publications') {
+      options.zustandPublications = Number(readValue())
+    } else if (arg === '--zustand-publication-interval-ms') {
+      options.zustandPublicationIntervalMs = Number(readValue())
     } else if (arg === '--output') {
       options.output = readValue()
     } else if (arg === '--skip-build') {
@@ -73,6 +104,10 @@ function parseArgs(argv) {
     'sampleMs',
     'intervalMs',
     'worktrees',
+    'lineageDepth',
+    'agentsPerWorktree',
+    'zustandPublications',
+    'zustandPublicationIntervalMs',
     'syntheticVisibleSpinners',
     'syntheticSpinnerSteps'
   ]) {
@@ -82,16 +117,33 @@ function parseArgs(argv) {
   }
   options.worktrees = Math.max(1, Math.floor(options.worktrees))
   options.intervalMs = Math.max(250, Math.floor(options.intervalMs))
+  options.lineageDepth = Math.floor(options.lineageDepth)
+  options.agentsPerWorktree = Math.floor(options.agentsPerWorktree)
+  options.zustandPublications = Math.floor(options.zustandPublications)
+  options.zustandPublicationIntervalMs = Math.max(
+    1,
+    Math.floor(options.zustandPublicationIntervalMs)
+  )
   options.syntheticVisibleSpinners = Math.max(0, Math.floor(options.syntheticVisibleSpinners))
   options.syntheticSpinnerSteps = Math.max(1, Math.floor(options.syntheticSpinnerSteps))
   if (!['smooth', 'steps'].includes(options.syntheticSpinnerAnimation)) {
     throw new Error(`Invalid --synthetic-spinner-animation: ${options.syntheticSpinnerAnimation}`)
   }
+  if (options.lineageDepth > 0 && options.worktrees < 2) {
+    throw new Error('--lineage-depth requires at least two --worktrees')
+  }
+  const publicationSpanMs =
+    Math.max(0, options.zustandPublications - 1) * options.zustandPublicationIntervalMs
+  if (publicationSpanMs > options.sampleMs) {
+    throw new Error(
+      `Zustand publication span ${publicationSpanMs}ms exceeds --sample-ms ${options.sampleMs}`
+    )
+  }
   return options
 }
 function printUsage() {
   console.log(
-    `Usage: node config/scripts/run-idle-cpu-benchmark.mjs [options]\n\nOptions:\n  --warmup-ms <n>    Time to wait after app readiness before sampling (default ${DEFAULT_WARMUP_MS})\n  --sample-ms <n>    Sampling window duration (default ${DEFAULT_SAMPLE_MS})\n  --interval-ms <n>  Sampling cadence (default ${DEFAULT_INTERVAL_MS})\n  --worktrees <n>    Seed repo worktree count, including primary (default ${DEFAULT_WORKTREE_COUNT})\n  --headful          Show the Electron window while measuring\n  --skip-build       Reuse out/main/index.js instead of building first\n  --output <path>    Write JSON report to this path\n  --disable-renderer-animations  Inject measurement-only CSS that disables animations/transitions\n  --synthetic-visible-spinners <n>  Measurement-only: add visible working spinners\n  --synthetic-spinner-animation <smooth|steps>  Spinner animation style (default smooth)\n  --synthetic-spinner-steps <n>  Step count for --synthetic-spinner-animation steps (default 12)\n`
+    `Usage: node config/scripts/run-idle-cpu-benchmark.mjs [options]\n\nOptions:\n  --warmup-ms <n>    Time to wait after app readiness before sampling (default ${DEFAULT_WARMUP_MS})\n  --sample-ms <n>    Sampling window duration (default ${DEFAULT_SAMPLE_MS})\n  --interval-ms <n>  Sampling cadence (default ${DEFAULT_INTERVAL_MS})\n  --worktrees <n>    Seed repo worktree count, including primary (default ${DEFAULT_WORKTREE_COUNT})\n  --lineage-depth <n>  Nest all worktrees under one expanded lineage, up to this depth\n  --agents-per-worktree <n>  Seed this many visible inline agent rows per worktree\n  --zustand-publications <n>  Publish exactly this many store updates during sampling\n  --zustand-publication-interval-ms <n>  Publication cadence (default ${DEFAULT_ZUSTAND_PUBLICATION_INTERVAL_MS})\n  --headful          Show the Electron window while measuring\n  --skip-build       Reuse out/main/index.js instead of building first\n  --output <path>    Write JSON report to this path\n  --disable-renderer-animations  Inject measurement-only CSS that disables animations/transitions\n  --synthetic-visible-spinners <n>  Measurement-only: add visible working spinners\n  --synthetic-spinner-animation <smooth|steps>  Spinner animation style (default smooth)\n  --synthetic-spinner-steps <n>  Step count for --synthetic-spinner-animation steps (default 12)\n`
   )
 }
 function run(command, args, options = {}) {
@@ -188,140 +240,6 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms))
 }
 
-function parseCpuTimeSeconds(value) {
-  const trimmed = String(value || '').trim()
-  if (!trimmed) {
-    return null
-  }
-  const [dayOrTime, maybeTime] = trimmed.includes('-') ? trimmed.split('-', 2) : [null, trimmed]
-  const days = dayOrTime === null ? 0 : Number(dayOrTime)
-  const parts = maybeTime.split(':').map(Number)
-  if (!Number.isFinite(days) || parts.some((part) => !Number.isFinite(part))) {
-    return null
-  }
-  if (parts.length === 3) {
-    return days * 86400 + parts[0] * 3600 + parts[1] * 60 + parts[2]
-  }
-  if (parts.length === 2) {
-    return days * 86400 + parts[0] * 60 + parts[1]
-  }
-  if (parts.length === 1) {
-    return days * 86400 + parts[0]
-  }
-  return null
-}
-
-function parseUnixProcesses(stdout) {
-  const rows = []
-  for (const raw of stdout.split('\n')) {
-    const line = raw.trim()
-    if (!line) {
-      continue
-    }
-    const match = line.match(/^(\d+)\s+(\d+)\s+([\d.]+)\s+(\d+)\s+(\S+)\s+(.+)$/)
-    if (!match) {
-      continue
-    }
-    rows.push({
-      pid: Number(match[1]),
-      ppid: Number(match[2]),
-      percentCpu: Number(match[3]),
-      rssBytes: Number(match[4]) * 1024,
-      cpuTimeSeconds: parseCpuTimeSeconds(match[5]),
-      command: match[6]
-    })
-  }
-  return rows
-}
-
-function readUnixProcesses() {
-  const stdout = execFileSync('ps', ['-axo', 'pid=,ppid=,pcpu=,rss=,cputime=,command='], {
-    encoding: 'utf8',
-    env: { ...process.env, LC_ALL: 'C', LANG: 'C' },
-    maxBuffer: 20 * 1024 * 1024
-  })
-  return parseUnixProcesses(stdout)
-}
-
-function readWindowsProcesses() {
-  const script =
-    'Get-CimInstance Win32_Process | Select-Object ProcessId,ParentProcessId,WorkingSetSize,CommandLine | ConvertTo-Json -Compress'
-  const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', script], {
-    encoding: 'utf8',
-    maxBuffer: 20 * 1024 * 1024
-  })
-  if (result.status !== 0) {
-    throw new Error(result.stderr || 'PowerShell process enumeration failed')
-  }
-  const parsed = JSON.parse(result.stdout || '[]')
-  const entries = Array.isArray(parsed) ? parsed : [parsed]
-  return entries.map((entry) => ({
-    pid: Number(entry.ProcessId),
-    ppid: Number(entry.ParentProcessId),
-    percentCpu: 0,
-    cpuTimeSeconds: null,
-    rssBytes: Number(entry.WorkingSetSize) || 0,
-    command: String(entry.CommandLine || '')
-  }))
-}
-
-function readProcessRows() {
-  return process.platform === 'win32' ? readWindowsProcesses() : readUnixProcesses()
-}
-
-function descendantsOf(rows, rootPid) {
-  const children = new Map()
-  for (const row of rows) {
-    const list = children.get(row.ppid) ?? []
-    list.push(row)
-    children.set(row.ppid, list)
-  }
-  const result = []
-  const stack = [rootPid]
-  const seen = new Set()
-  while (stack.length > 0) {
-    const pid = stack.pop()
-    if (seen.has(pid)) {
-      continue
-    }
-    seen.add(pid)
-    const row = rows.find((candidate) => candidate.pid === pid)
-    if (row) {
-      result.push(row)
-    }
-    for (const child of children.get(pid) ?? []) {
-      stack.push(child.pid)
-    }
-  }
-  return result
-}
-
-function classify(row, rootPid) {
-  const command = row.command.toLowerCase()
-  if (row.pid === rootPid) {
-    return 'main'
-  }
-  if (command.includes('daemon-entry')) {
-    return 'daemon'
-  }
-  if (command.includes('--type=gpu-process')) {
-    return 'gpu'
-  }
-  if (command.includes('--type=renderer')) {
-    return 'renderer'
-  }
-  if (command.includes('--type=utility')) {
-    return 'utility'
-  }
-  if (command.includes('--type=')) {
-    return 'electron-other'
-  }
-  if (command.includes('node') || command.includes('/pi') || command.endsWith(' pi')) {
-    return 'agent-or-node'
-  }
-  return 'other-descendant'
-}
-
 async function collectRendererIdleState(page) {
   return page.evaluate(() => {
     const describeElement = (element) => {
@@ -364,93 +282,6 @@ async function collectRendererIdleState(page) {
   })
 }
 
-function summarizeSamples(samples) {
-  const byKind = new Map()
-  for (const sample of samples) {
-    for (const proc of sample.processes) {
-      const bucket = byKind.get(proc.kind) ?? { cpuValues: [], rssValues: [], maxProcessCount: 0 }
-      bucket.cpuValues.push(proc.cpu)
-      bucket.rssValues.push(proc.rssBytes)
-      byKind.set(proc.kind, bucket)
-    }
-    const counts = new Map()
-    for (const proc of sample.processes) {
-      counts.set(proc.kind, (counts.get(proc.kind) ?? 0) + 1)
-    }
-    for (const [kind, count] of counts) {
-      byKind.get(kind).maxProcessCount = Math.max(byKind.get(kind).maxProcessCount, count)
-    }
-  }
-  const summary = {}
-  for (const [kind, values] of byKind) {
-    const cpuSorted = [...values.cpuValues].sort((a, b) => a - b)
-    const rssSumBySample = samples.map((sample) =>
-      sample.processes
-        .filter((proc) => proc.kind === kind)
-        .reduce((sum, proc) => sum + proc.rssBytes, 0)
-    )
-    summary[kind] = {
-      meanCpuPercent: mean(values.cpuValues),
-      p95CpuPercent: percentile(cpuSorted, 0.95),
-      maxCpuPercent: Math.max(0, ...values.cpuValues),
-      meanRssBytes: mean(rssSumBySample),
-      maxProcessCount: values.maxProcessCount
-    }
-  }
-  summary.total = {
-    meanCpuPercent: mean(samples.map((sample) => sample.totalCpuPercent)),
-    p95CpuPercent: percentile(
-      samples.map((sample) => sample.totalCpuPercent).sort((a, b) => a - b),
-      0.95
-    ),
-    meanRssBytes: mean(samples.map((sample) => sample.totalRssBytes))
-  }
-  return summary
-}
-
-function summarizeProcessInventory(samples) {
-  const inventory = {}
-  for (const sample of samples) {
-    const counts = new Map()
-    for (const proc of sample.processes) {
-      counts.set(proc.kind, (counts.get(proc.kind) ?? 0) + 1)
-      const entry = inventory[proc.kind] ?? {
-        maxProcessCount: 0,
-        maxCpuPercent: 0,
-        commandSamples: []
-      }
-      entry.maxCpuPercent = Math.max(entry.maxCpuPercent, proc.cpu)
-      if (!entry.commandSamples.includes(proc.command) && entry.commandSamples.length < 6) {
-        entry.commandSamples.push(proc.command)
-      }
-      inventory[proc.kind] = entry
-    }
-    for (const [kind, count] of counts) {
-      inventory[kind].maxProcessCount = Math.max(inventory[kind].maxProcessCount, count)
-    }
-  }
-  return inventory
-}
-function mean(values) {
-  return values.length === 0 ? 0 : values.reduce((sum, value) => sum + value, 0) / values.length
-}
-
-function percentile(sorted, fraction) {
-  if (sorted.length === 0) {
-    return 0
-  }
-  const index = Math.min(sorted.length - 1, Math.ceil(sorted.length * fraction) - 1)
-  return sorted[index]
-}
-
-function terminateProcesses(processes) {
-  for (const proc of processes) {
-    try {
-      process.kill(proc.pid)
-    } catch {}
-  }
-}
-
 async function main() {
   const options = parseArgs(process.argv.slice(2))
   const root = path.resolve(import.meta.dirname, '..', '..')
@@ -491,6 +322,11 @@ async function main() {
     const page = await app.firstWindow({ timeout: 120_000 })
     await page.waitForLoadState('domcontentloaded')
     await page.waitForFunction(() => Boolean(window.__store), null, { timeout: 30_000 })
+    await page.waitForFunction(
+      () => window.__store?.getState().workspaceSessionReady === true,
+      null,
+      { timeout: 60_000 }
+    )
     const measurementCss = []
     if (options.disableRendererAnimations) {
       measurementCss.push(
@@ -506,63 +342,111 @@ async function main() {
       options.syntheticSpinnerAnimation,
       options.syntheticSpinnerSteps
     )
-    await page.evaluate(async (repoPath) => {
-      await window.api.repos.add({ path: repoPath })
+    const fixtureState = await page.evaluate(async (repoPath) => {
+      const added = await window.api.repos.add({ path: repoPath })
+      if ('error' in added) {
+        return { error: added.error }
+      }
       const store = window.__store
       await store?.getState().fetchRepos()
-      const repo = store?.getState().repos.find((candidate) => candidate.path === repoPath)
+      const repo = store?.getState().repos.find((candidate) => candidate.id === added.repo.id)
       if (repo) {
-        await store.getState().updateRepo(repo.id, { externalWorktreeVisibility: 'show' })
-        await store.getState().fetchWorktrees(repo.id)
+        const detected = await store
+          .getState()
+          .fetchWorktrees(repo.id, { requireAuthoritative: true })
+        const importedWorktreePaths = (
+          store.getState().detectedWorktreesByRepo[repo.id]?.worktrees ?? []
+        )
+          .filter((worktree) => !worktree.selectedCheckout)
+          .map((worktree) => worktree.path)
+        const updated = await store.getState().updateRepo(repo.id, {
+          externalWorktreeVisibility: 'show',
+          importedExternalWorktreePaths: importedWorktreePaths,
+          externalWorktreeInboxBaselinePaths: importedWorktreePaths
+        })
+        const refreshed = await store
+          .getState()
+          .fetchWorktrees(repo.id, { requireAuthoritative: true })
+        return {
+          detected,
+          updated,
+          refreshed,
+          detectedCount: store.getState().detectedWorktreesByRepo[repo.id]?.worktrees.length ?? 0,
+          importedCount: importedWorktreePaths.length,
+          visibleCount: store.getState().worktreesByRepo[repo.id]?.length ?? 0
+        }
       }
+      return { error: 'repo-not-found' }
     }, repoDir)
+    console.log(`[idle-cpu] fixture ${JSON.stringify(fixtureState)}`)
     await page.waitForFunction(
-      () => window.__store?.getState().workspaceSessionReady === true,
+      (expectedWorktrees) => {
+        const state = window.__store?.getState()
+        return (
+          state?.workspaceSessionReady === true &&
+          Object.values(state.worktreesByRepo).flat().length === expectedWorktrees
+        )
+      },
+      options.worktrees,
+      { timeout: 180_000 }
+    )
+    const scaleFixtureState = await configureRendererScaleFixture(page, options, repoDir)
+    if (scaleFixtureState.applied) {
+      console.log(`[idle-cpu] scale fixture ${JSON.stringify(scaleFixtureState)}`)
+    }
+    await page.waitForFunction(
+      (expectedAgentRows) => {
+        const state = window.__store?.getState()
+        return (
+          state !== undefined &&
+          Object.keys(state.agentStatusByPaneKey ?? {}).length >= expectedAgentRows
+        )
+      },
+      scaleFixtureState.seededAgentRows,
+      { timeout: 30_000 }
+    )
+    await page.waitForFunction(
+      () => Boolean(document.querySelector('[data-worktree-sidebar] [data-worktree-id]')),
       null,
-      { timeout: 60_000 }
+      { timeout: 30_000 }
     )
     console.log(
-      `[idle-cpu] root pid=${rootPid}; warmup=${options.warmupMs}ms sample=${options.sampleMs}ms interval=${options.intervalMs}ms worktrees=${options.worktrees}`
+      `[idle-cpu] root pid=${rootPid}; warmup=${options.warmupMs}ms sample=${options.sampleMs}ms interval=${options.intervalMs}ms worktrees=${options.worktrees} lineage-depth=${options.lineageDepth} agents/worktree=${options.agentsPerWorktree} publications=${options.zustandPublications}`
     )
+    await startRendererTimingProbe(page)
     await sleep(options.warmupMs)
     const rendererIdleState = await collectRendererIdleState(page)
-    const deadline = Date.now() + options.sampleMs
-    const samples = []
-    let previousSnapshot = null
-    while (Date.now() <= deadline || samples.length === 0) {
-      const sampledAt = Date.now()
-      const processRows = descendantsOf(readProcessRows(), rootPid)
-      const rawProcesses = processRows.map((row) => ({ ...row, kind: classify(row, rootPid) }))
-      if (previousSnapshot) {
-        const elapsedSeconds = Math.max(0.001, (sampledAt - previousSnapshot.at) / 1000)
-        const previousByPid = new Map(previousSnapshot.processes.map((proc) => [proc.pid, proc]))
-        const processes = rawProcesses.map((row) => {
-          const previous = previousByPid.get(row.pid)
-          const canComputeDelta =
-            typeof row.cpuTimeSeconds === 'number' && typeof previous?.cpuTimeSeconds === 'number'
-          const cpu = canComputeDelta
-            ? Math.max(0, ((row.cpuTimeSeconds - previous.cpuTimeSeconds) / elapsedSeconds) * 100)
-            : row.percentCpu
-          return { ...row, cpu }
-        })
-        samples.push({
-          at: sampledAt,
-          elapsedMs: sampledAt - previousSnapshot.at,
-          totalCpuPercent: processes.reduce((sum, proc) => sum + proc.cpu, 0),
-          totalRssBytes: processes.reduce((sum, proc) => sum + proc.rssBytes, 0),
-          processes
-        })
-      }
-      previousSnapshot = { at: sampledAt, processes: rawProcesses }
-      await sleep(options.intervalMs)
-    }
+    const rendererCensusBefore = await collectRendererCensus(page, options.lineageDepth)
+    const rendererTimingBefore = await snapshotRendererTimingProbe(page)
+    const publicationPromise = runZustandPublications(
+      page,
+      options.zustandPublications,
+      options.zustandPublicationIntervalMs
+    )
+    const sampled = await sampleProcessTreeUntilWorkloadsComplete({
+      rootPid,
+      requestedDurationMs: options.sampleMs,
+      intervalMs: options.intervalMs,
+      workloadPromise: publicationPromise
+    })
+    const samples = sampled.samples
+    const zustandPublications = sampled.workloadResult
+    const rendererTimingAfter = await stopRendererTimingProbe(page)
+    const rendererCensusAfter = await collectRendererCensus(page, options.lineageDepth)
     const report = {
       benchmark: 'orca-idle-cpu',
       createdAt: new Date().toISOString(),
       options,
       rootPid,
       platform: { platform: process.platform, arch: process.arch, cpus: os.cpus().length },
+      fixtureState,
+      scaleFixtureState,
       rendererIdleState,
+      rendererCensusBefore,
+      rendererCensusAfter,
+      rendererTiming: { before: rendererTimingBefore, after: rendererTimingAfter },
+      zustandPublications,
+      samplingWindow: sampled.samplingWindow,
       sampleCount: samples.length,
       summary: summarizeSamples(samples),
       processInventory: summarizeProcessInventory(samples),
@@ -578,7 +462,13 @@ async function main() {
         {
           summary: report.summary,
           processInventory: report.processInventory,
-          sampleCount: report.sampleCount
+          sampleCount: report.sampleCount,
+          scaleFixtureState: report.scaleFixtureState,
+          rendererCensusBefore: report.rendererCensusBefore,
+          rendererCensusAfter: report.rendererCensusAfter,
+          rendererTiming: report.rendererTiming,
+          zustandPublications: report.zustandPublications,
+          samplingWindow: report.samplingWindow
         },
         null,
         2
diff --git a/config/scripts/run-ssh-docker-terminal-parking-e2e.mjs b/config/scripts/run-ssh-docker-terminal-parking-e2e.mjs
index 8d4183b4515..b894ac15217 100644
--- a/config/scripts/run-ssh-docker-terminal-parking-e2e.mjs
+++ b/config/scripts/run-ssh-docker-terminal-parking-e2e.mjs
@@ -5,7 +5,8 @@ const extraArgs = rawExtraArgs[0] === '--' ? rawExtraArgs.slice(1) : rawExtraArg
 const pnpm = process.platform === 'win32' ? 'pnpm.cmd' : 'pnpm'
 const env = {
   ...process.env,
-  ORCA_E2E_SSH_DOCKER: '1'
+  ORCA_E2E_SSH_DOCKER: '1',
+  ORCA_E2E_WEB_CLIENT: '1'
 }
 
 // Why: Node's CVE-2024-27980 hardening rejects .cmd spawns without shell on Windows.
@@ -21,9 +22,8 @@ if (runtime.status !== 0) {
   process.exit(runtime.status ?? 1)
 }
 
-// Why both specs in one runner: they share the docker SSH rig and the same
-// ORCA_E2E_SSH_DOCKER gate — the SSH parking spec proves SSH panes park and
-// restore, the retention spec proves the C1 budget bounds what they retain.
+// Why one runner: these specs share the Docker SSH rig; startup-exec also joins
+// the paired desktop/headless parity proof under the same isolated CI lane.
 const result = spawnSync(
   pnpm,
   [
@@ -32,10 +32,14 @@ const result = spawnSync(
     'test',
     'tests/e2e/ssh-terminal-parking.spec.ts',
     'tests/e2e/terminal-retention-budget.spec.ts',
+    'tests/e2e/ssh-startup-exec-readiness.spec.ts',
+    'tests/e2e/paired-startup-exec-readiness.spec.ts',
     '--config',
     'tests/playwright.config.ts',
     '--project',
     'electron-headless',
+    '--project',
+    'electron-headful',
     '--workers=1',
     ...extraArgs
   ],
diff --git a/config/scripts/run-ssh-staged-upload-reliability.mjs b/config/scripts/run-ssh-staged-upload-reliability.mjs
index 4fadf6f3001..fb3d0040350 100644
--- a/config/scripts/run-ssh-staged-upload-reliability.mjs
+++ b/config/scripts/run-ssh-staged-upload-reliability.mjs
@@ -17,8 +17,8 @@ const defaultFiles = [
 const cliArguments = process.argv.slice(2)
 const powerShellFlag = cliArguments.indexOf('--powershell')
 const configuredPowerShell =
-  powerShellFlag >= 0 ? cliArguments[powerShellFlag + 1] : process.env.ORCA_POWERSHELL_EXECUTABLE
-if (powerShellFlag >= 0 && !configuredPowerShell) {
+  powerShellFlag !== -1 ? cliArguments[powerShellFlag + 1] : process.env.ORCA_POWERSHELL_EXECUTABLE
+if (powerShellFlag !== -1 && !configuredPowerShell) {
   console.error('--powershell requires an executable path')
   process.exit(2)
 }
diff --git a/config/scripts/terminal-e2e-helpers.mjs b/config/scripts/terminal-e2e-helpers.mjs
index 2f89f1a7f90..8b698416326 100644
--- a/config/scripts/terminal-e2e-helpers.mjs
+++ b/config/scripts/terminal-e2e-helpers.mjs
@@ -222,8 +222,8 @@ if (process.argv[1]?.endsWith('terminal-e2e-helpers.mjs')) {
   const args = process.argv.slice(2)
   const portIdx = args.indexOf('--port')
   const cmdIdx = args.indexOf('--command')
-  const port = portIdx >= 0 ? Number(args[portIdx + 1]) : 9444
-  const command = cmdIdx >= 0 ? args[cmdIdx + 1] : null
+  const port = portIdx !== -1 ? Number(args[portIdx + 1]) : 9444
+  const command = cmdIdx !== -1 ? args[cmdIdx + 1] : null
 
   const term = new OrcaTerminal(port)
   console.log('Connecting to Orca on CDP port', port, '...')
diff --git a/config/scripts/verify-agent-hook-stdin-lifecycle.mjs b/config/scripts/verify-agent-hook-stdin-lifecycle.mjs
index 079735c41ec..187b5aa3fc2 100644
--- a/config/scripts/verify-agent-hook-stdin-lifecycle.mjs
+++ b/config/scripts/verify-agent-hook-stdin-lifecycle.mjs
@@ -142,7 +142,7 @@ function readGeneratedScripts(home, minMtime) {
     const body = readFileSync(path, 'utf8')
     const captureIndex = body.indexOf('payload=$(cat)')
     const firstExitIndex = body.indexOf('exit 0')
-    if (captureIndex < 0 || firstExitIndex <= captureIndex) {
+    if (captureIndex === -1 || firstExitIndex <= captureIndex) {
       throw new Error([fileName, ' can exit before capturing stdin'].join(''))
     }
     return { body, fileName, path, source }
diff --git a/config/scripts/verify-computer-native.mjs b/config/scripts/verify-computer-native.mjs
index ba23a49cdd0..56efeb33521 100644
--- a/config/scripts/verify-computer-native.mjs
+++ b/config/scripts/verify-computer-native.mjs
@@ -489,11 +489,11 @@ function verifyNativeArgumentGuardrails() {
 
 function powerShellFunctionBody(source, name) {
   const start = source.indexOf(`function ${name}`)
-  if (start < 0) {
+  if (start === -1) {
     return null
   }
   const bodyStart = source.indexOf('{', start)
-  if (bodyStart < 0) {
+  if (bodyStart === -1) {
     return null
   }
   let depth = 0
@@ -513,11 +513,11 @@ function powerShellFunctionBody(source, name) {
 
 function swiftFunctionBody(source, name) {
   const start = source.indexOf(`func ${name}`)
-  if (start < 0) {
+  if (start === -1) {
     return null
   }
   const bodyStart = source.indexOf('{', start)
-  if (bodyStart < 0) {
+  if (bodyStart === -1) {
     return null
   }
   let depth = 0
diff --git a/config/scripts/wsl-git-shell-benchmark.mjs b/config/scripts/wsl-git-shell-benchmark.mjs
index 00ea47ded0a..d29aaea2824 100644
--- a/config/scripts/wsl-git-shell-benchmark.mjs
+++ b/config/scripts/wsl-git-shell-benchmark.mjs
@@ -175,7 +175,7 @@ async function main() {
         wslShellArgs(distro, ['/bin/sh', '-lc', escapeWslShCommandForWindows(script)])
       )
       const markerOffset = result.stdout.indexOf(outputMarker)
-      if (markerOffset < 0) {
+      if (markerOffset === -1) {
         throw new Error('Login shell did not emit the Git output marker')
       }
       result.stdout = result.stdout.subarray(markerOffset + Buffer.byteLength(outputMarker))
diff --git a/docs/assets/readme-downloads.svg b/docs/assets/readme-downloads.svg
index a3074230367..610bdb8b92e 100644
--- a/docs/assets/readme-downloads.svg
+++ b/docs/assets/readme-downloads.svg
@@ -1,5 +1,5 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="106" height="20" role="img" aria-label="downloads: 18m">
-  <title>downloads: 18m</title>
+<svg xmlns="http://www.w3.org/2000/svg" width="106" height="20" role="img" aria-label="downloads: 19m">
+  <title>downloads: 19m</title>
   <linearGradient id="s" x2="0" y2="100%">
     <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
     <stop offset="1" stop-opacity=".1"/>
@@ -15,7 +15,7 @@
   <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="11">
     <text x="37" y="15" fill="#010101" fill-opacity=".3">downloads</text>
     <text x="37" y="14">downloads</text>
-    <text x="90" y="15" fill="#010101" fill-opacity=".3">18m</text>
-    <text x="90" y="14">18m</text>
+    <text x="90" y="15" fill="#010101" fill-opacity=".3">19m</text>
+    <text x="90" y="14">19m</text>
   </g>
 </svg>
diff --git a/docs/readme/README.ko.md b/docs/readme/README.ko.md
index e247ace7d7c..d02a025cb5f 100644
--- a/docs/readme/README.ko.md
+++ b/docs/readme/README.ko.md
@@ -36,7 +36,7 @@
 
 휴대폰에서 에이전트를 모니터링하고 조종하세요 — 에이전트가 완료되면 알림을 받고 어디서든 후속 지시를 보낼 수 있습니다.
 
-[iOS App Store](https://apps.apple.com/us/app/orca-ide/id6766130217) · [Android APK](https://github.com/stablyai/orca/releases/download/mobile-android-v0.0.37/app-release.apk) · [문서 →](https://www.onorca.dev/docs/mobile)
+[iOS App Store](https://apps.apple.com/us/app/orca-ide/id6766130217) · [TestFlight](https://testflight.apple.com/join/YjeGMQBA) · [Android APK 0.0.42](https://github.com/stablyai/orca/releases/download/mobile-android-v0.0.42/app-release.apk) · [문서 →](https://www.onorca.dev/docs/mobile)
 
 </td>
 <td width="50%">
@@ -179,12 +179,14 @@ diff의 어느 줄에든 코멘트를 남기고 에이전트에게 바로 보내
   <a href="https://cursor.com/cli"><kbd><img src="https://www.google.com/s2/favicons?domain=cursor.com&sz=64" alt="Cursor logo" width="16" valign="middle" /> Cursor</kbd></a> &nbsp;
   <a href="https://docs.github.com/en/copilot/how-tos/set-up/install-copilot-cli"><kbd><img src="https://www.google.com/s2/favicons?domain=github.com&sz=64" alt="GitHub Copilot logo" width="16" valign="middle" /> GitHub Copilot</kbd></a> &nbsp;
   <a href="https://opencode.ai/docs/cli/"><kbd><img src="https://www.google.com/s2/favicons?domain=opencode.ai&sz=64" alt="OpenCode logo" width="16" valign="middle" /> OpenCode</kbd></a> &nbsp;
+  <a href="https://mimo.xiaomi.com/coder"><kbd><img src="https://www.google.com/s2/favicons?domain=mimo.xiaomi.com&sz=64" alt="MiMo Code logo" width="16" valign="middle" /> MiMo Code</kbd></a> &nbsp;
   <a href="https://ampcode.com/manual#install"><kbd><img src="https://www.google.com/s2/favicons?domain=ampcode.com&sz=64" alt="Amp logo" width="16" valign="middle" /> Amp</kbd></a> &nbsp;
   <a href="https://openclaude.gitlawb.com/"><kbd><img src="../../resources/openclaude-logo.png" alt="OpenClaude logo" width="16" valign="middle" /> OpenClaude</kbd></a> &nbsp;
   <a href="https://antigravity.google/docs/cli-overview"><kbd><img src="https://www.google.com/s2/favicons?domain=antigravity.google&sz=64" alt="Antigravity logo" width="16" valign="middle" /> Antigravity</kbd></a> &nbsp;
   <a href="https://pi.dev"><kbd><img src="https://pi.dev/favicon.svg" alt="Pi logo" width="16" valign="middle" /> Pi</kbd></a> &nbsp;
   <a href="https://omp.sh"><kbd><img src="https://omp.sh/favicon.svg" alt="oh-my-pi logo" width="16" valign="middle" /> oh-my-pi</kbd></a> &nbsp;
   <a href="https://hermes-agent.nousresearch.com/docs/"><kbd><img src="https://www.google.com/s2/favicons?domain=nousresearch.com&sz=64" alt="Hermes Agent logo" width="16" valign="middle" /> Hermes Agent</kbd></a> &nbsp;
+  <a href="https://devin.ai/cli"><kbd><img src="https://www.google.com/s2/favicons?domain=devin.ai&sz=64" alt="Devin logo" width="16" valign="middle" /> Devin</kbd></a> &nbsp;
   <a href="https://block.github.io/goose/docs/quickstart/"><kbd><img src="https://www.google.com/s2/favicons?domain=goose-docs.ai&sz=64" alt="Goose logo" width="16" valign="middle" /> Goose</kbd></a> &nbsp;
   <a href="https://docs.augmentcode.com/cli/overview"><kbd><img src="https://www.google.com/s2/favicons?domain=augmentcode.com&sz=64" alt="Auggie logo" width="16" valign="middle" /> Auggie</kbd></a> &nbsp;
   <a href="https://github.com/autohandai/code-cli"><kbd><img src="https://www.google.com/s2/favicons?domain=autohand.ai&sz=64" alt="Autohand Code logo" width="16" valign="middle" /> Autohand Code</kbd></a> &nbsp;
@@ -211,6 +213,7 @@ diff의 어느 줄에든 코멘트를 남기고 에이전트에게 바로 보내
 
 - **[onOrca.dev에서 다운로드](https://onorca.dev/download)**
 - 또는 빌드를 직접 받기: [macOS Apple Silicon](https://github.com/stablyai/orca/releases/latest/download/orca-macos-arm64.dmg) · [macOS Intel](https://github.com/stablyai/orca/releases/latest/download/orca-macos-x64.dmg) · [Windows (.exe)](https://github.com/stablyai/orca/releases/latest/download/orca-windows-setup.exe) · [Linux AppImage](https://github.com/stablyai/orca/releases/latest/download/orca-linux.AppImage) · [전체 빌드](https://github.com/stablyai/orca/releases/latest)
+- headless Linux 서버에서 `orca serve`를 실행하시나요? [Headless Linux 서버 가이드](../reference/headless-linux-server.md)를 확인하세요.
 
 _또는 패키지 매니저로 설치:_
 
@@ -226,8 +229,8 @@ yay -S stably-orca-bin
 
 데스크톱 앱과 페어링해 휴대폰에서 에이전트를 모니터링하고 조종하세요.
 
-- **iOS:** [App Store에서 다운로드](https://apps.apple.com/us/app/orca-ide/id6766130217)
-- **Android:** [APK 다운로드](https://github.com/stablyai/orca/releases/download/mobile-android-v0.0.37/app-release.apk)
+- **iOS:** [App Store에서 다운로드](https://apps.apple.com/us/app/orca-ide/id6766130217) 또는 [TestFlight 참여](https://testflight.apple.com/join/YjeGMQBA)
+- **Android:** [APK 0.0.42 다운로드](https://github.com/stablyai/orca/releases/download/mobile-android-v0.0.42/app-release.apk)
 
 ---
 
@@ -235,6 +238,10 @@ yay -S stably-orca-bin
 
 - **Discord:** **[Discord](https://discord.gg/fzjDKHxv8Q)** 커뮤니티에 참여하세요.
 - **Twitter / X:** 업데이트와 공지는 **[@orca_build](https://x.com/orca_build)** 를 팔로우하세요.
+- **WeChat:** QR 코드를 스캔해 Orca 커뮤니티 WeChat 그룹 7에 참여하세요.
+
+  <img src="../assets/wechat-qr-group7.jpg" alt="Orca 커뮤니티 WeChat 그룹 7 QR 코드" width="160" />
+
 - **피드백과 아이디어:** 우리는 빠르게 출시합니다. 필요한 기능이 있나요? [새 기능을 요청](https://github.com/stablyai/orca/issues)하세요.
 - **개인정보 보호:** Orca가 수집하는 익명 사용 데이터와 수집 거부 방법은 [개인정보 및 텔레메트리 문서](https://www.onorca.dev/docs/telemetry)를 참고하세요.
 - **응원하기:** 이 리포지토리에 [Star](https://github.com/stablyai/orca)를 눌러 매일 공개되는 릴리스 소식을 확인해 주세요.
@@ -249,6 +256,14 @@ yay -S stably-orca-bin
   <img src="https://contrib.rocks/image?repo=stablyai/orca" alt="Orca 기여자" />
 </a>
 
+<p align="center">
+  <img src="../assets/star-history.png" alt="stablyai/orca GitHub Star 히스토리 차트" width="880" />
+</p>
+
+## 서명된 빌드
+
+Windows 코드 서명은 [SignPath.io](https://signpath.io)가 후원·제공하며, 인증서는 [SignPath Foundation](https://signpath.org)에서 제공합니다.
+
 ## 라이선스
 
 Orca는 [MIT 라이선스](../../LICENSE)에 따라 자유롭게 사용할 수 있는 오픈 소스입니다.
diff --git a/docs/reference/renderer-agent-status-performance.md b/docs/reference/renderer-agent-status-performance.md
new file mode 100644
index 00000000000..8ed43d868ce
--- /dev/null
+++ b/docs/reference/renderer-agent-status-performance.md
@@ -0,0 +1,328 @@
+# Renderer agent-status performance
+
+## Status
+
+This design is adopted for the renderer's high-frequency agent-status path. It
+keeps the existing event semantics while bounding the amount of synchronous
+store fanout performed for one IPC burst.
+
+It lands in slices. This document and the `bench:idle-cpu` harness land first so
+the store changes can be reviewed against a baseline someone else measured. Until
+the store slice lands, the `setAgentStatuses` / `transactAgentStatuses` actions
+and the agent-status write workload described below are not yet on `main`; the
+harness measures scale, listener census, and raw publication fanout only.
+
+## Context
+
+Orca can display a large expanded worktree lineage inside one virtualized list
+row. Virtualizing the root row does not virtualize its descendants, so a
+100-worktree lineage can mount 100 `WorktreeCard` instances at once.
+
+Agent-status IPC events are bursty. The renderer already groups live events into
+a 33 ms window, but the original flush applied every queued event with a
+separate Zustand write. Zustand synchronously visits every listener for every
+publication. The resulting work therefore grew with both the number of status
+events and the number of mounted subscriptions:
+
+```text
+burst work ~= status events x store listeners x selector work
+```
+
+A production trace captured the renderer repeatedly entering
+`flushLiveAgentStatusBurst -> applyAgentStatus -> setAgentStatus -> setState`
+through `Set.forEach`. A deterministic 100-worktree fixture reproduces the
+structural multiplier; see "Baseline on `main`" below for the currently measured
+listener count and publication cost.
+
+The production app later recovered substantially when all configured remote
+hosts were removed. Host removal can stop relay/reconnect traffic, remove
+mounted remote worktrees, or both, depending on host type and removal options.
+That observation identifies remote presence as the production trigger but does
+not by itself distinguish traffic volume from mounted-listener fanout.
+
+A read-only reconnect audit ruled out systematic double status emission from a
+full PTY replay: replay bytes bypass OSC status parsing. Reconnect still causes
+a full terminal-buffer repaint for every attached remote pane, which is a
+separate source of renderer work and remains a follow-up investigation.
+
+## Goals
+
+- Keep a large expanded lineage responsive during dense agent-status traffic.
+- Preserve every ordered status transition, including repeated updates for one
+  pane inside the same burst.
+- Publish agent-status state once for a deferred live burst.
+- Preserve selector identity and child render isolation.
+- Make the regression reproducible without relying on a user's production data.
+
+## Non-goals
+
+- Changing the client/server status payload or remote protocol.
+- Deduplicating status events by pane.
+- Changing agent freshness, retention, history, title, completion, or provider
+  session behavior.
+- Changing remote reconnect, PTY replay, or terminal repaint behavior.
+- Redesigning lineage presentation or collapsing worktrees automatically.
+
+## Design
+
+### Bound mounted subscription fanout
+
+Sidebar components select cohesive state bundles with shallow equality instead
+of registering one listener per field. Derived arrays and maps retain their
+existing shallow identity behavior so unrelated store writes do not rerender a
+card. Full agent-list mode keeps its child-level subscription boundary; compact
+mode passes the already selected rows to avoid selecting the same inputs twice.
+
+The deterministic 100-worktree fixture pins the resulting listener budget:
+
+| Surface                        | Listener budget |
+| ------------------------------ | --------------: |
+| Worktree card state and caches |               2 |
+| Agent-row inputs               |               1 |
+| Worktree activity status       |               1 |
+| Closed context menu            |               1 |
+
+Unmount tests require the listener count to return to its prior baseline. In the
+bundled prototype, the fixture without seeded agents fell from 8,518 listeners
+to 1,218; with 100 visible agent rows the candidate mounted 1,618. Compare
+against the census in "Baseline on `main`", which the harness reports directly.
+
+### Share working-spinner phase without per-element animation queries
+
+Working rows keep the existing compositor-driven CSS animation and shared
+visual phase. Each mount derives one negative animation delay from the document
+timeline instead of querying `getAnimations()` and mutating the animation start
+time. This removes per-row Web Animations setup from dense status transitions
+without adding a JavaScript animation clock.
+
+### Fold a burst in event order
+
+The store exposes the single-update action and two batch forms:
+
+- `setAgentStatus(paneKey, payload, ...)` retains the positional single-update
+  API for the immediate live path.
+- `setAgentStatuses(updates)` applies a prebuilt ordered list, while
+  `transactAgentStatuses(operation)` lets IPC derive each update against the
+  exact staged state before the single commit.
+
+Both entry points reuse the same single-update state transition. The batch
+reducer passes each resulting state into the next update, so a sequence such as
+`working -> waiting -> done` retains the same history and timestamps as three
+sequential calls. Updates are never keyed or deduplicated before the fold.
+
+The live IPC queue is spliced before it is processed. This preserves the
+existing reentrancy guarantee: a synchronous subscriber can enqueue another
+event without causing the current queue to be drained recursively. The first
+event outside an active burst remains immediate; events accumulated within the
+33 ms window are applied as one ordered transaction. Startup snapshots and
+bounded pending-hydration retries use the same transaction path instead of
+publishing once per restored pane.
+
+Each transaction builds pane-routing ownership once with the same first-match
+semantics as the standalone resolver. Split-layout leaf membership is indexed
+once per layout root, so a large snapshot performs linear tab and leaf work
+instead of rescanning every mounted worktree for every pane.
+
+### Run effects after the transaction
+
+Generated-title work that requires committed state is deferred until after the
+transaction. Accepted updates also request freshness scheduling; the outer batch
+coalesces those requests and schedules the shared freshness timer once after its
+single commit. Generated-title requests are folded in event order and published
+together, including first-write and forced-replacement semantics. Resolved tab
+titles are projected while the transaction folds, then final title changes are
+published together. Completion-triggered review refreshes remain deferred
+microtasks.
+
+Bulk title application preserves event order and duplicate-tab behavior while
+indexing owners once, cloning each changed owner array once, and replacing each
+top-level map once. This keeps the post-commit title phase linear in mounted
+tabs plus changed titles.
+
+This separation is important: invoking store actions from inside a Zustand
+updater would re-enter the store, while running an effect before the commit
+would let it observe stale state.
+
+## Semantic invariants
+
+Sequential and batched application must agree on:
+
+- live and retained agent maps;
+- state history, `updatedAt`, and `stateStartedAt`;
+- agent identity, model, prompt, tools, assistant messages, and subagents;
+- orchestration and provider-session continuity;
+- sleeping-session and launch-config recovery records;
+- retired/closed-pane rejection and inherited-status suppression;
+- retention cleanup and live-map eviction;
+- `agentStatusEpoch` and `sortEpoch`;
+- automation completion observation across intermediate transitions;
+- generated-title inputs, freshness scheduling, and completion refreshes.
+
+Equivalence tests use fixed timestamps and include repeated same-pane
+transitions. A publication-count test subscribes to the real store and requires
+one notification for a non-empty batch and none for an empty batch.
+
+## Benchmark contract
+
+The benchmark launches an E2E-mode Electron build with the store exposed only
+for instrumentation. It creates 100 worktrees in one expanded lineage, verifies
+100 mounted cards, captures the store listener census, and then applies seeded
+ordered agent-status traffic through the real store action.
+
+The benchmark measures the synchronous store action, not the live IPC leading
+edge or post-commit notification path. A real-store snapshot test covers the
+end-to-end budget for 100 panes with auto-generated titles enabled: one status,
+one bulk generated-title, and one bulk resolved-title publication. Disabling
+generated titles removes that middle publication, independent of pane count.
+
+The artifact records only fixed diagnostic fields needed for comparison:
+
+- requested and completed batches and updates;
+- store action calls and observed publications;
+- elapsed time, throughput, and scheduling drift;
+- final-state verification;
+- renderer mean, p95, and maximum CPU;
+- renderer timer drift and long tasks;
+- mounted-card and listener counts.
+
+Raw process inventories, temporary paths, pane identifiers, and DOM text are
+diagnostic-only and must not be embedded in the shareable report.
+
+Run baseline and candidate on the same machine and OS with the same Electron
+build mode. CPU samples from macOS and Linux are comparable within that
+constraint; Windows process CPU collection currently cannot support this
+comparison.
+
+## Harness
+
+`pnpm run bench:idle-cpu` drives `config/scripts/run-idle-cpu-benchmark.mjs`,
+which composes four modules:
+
+| Module                                | Responsibility                                                                                    |
+| ------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| `idle-cpu-renderer-scale-fixture.mjs` | Seeds the lineage, agent rows, and sidebar view state; takes the mounted-card and listener census |
+| `idle-cpu-renderer-timing-probe.mjs`  | In-page timer drift and long-task probe; runs the no-op publication workload                      |
+| `idle-cpu-process-sampling.mjs`       | Classifies the Electron process tree and samples per-role CPU/RSS                                 |
+| `idle-cpu-synthetic-spinners.mjs`     | Measurement-only visible spinners                                                                 |
+
+The sampling window extends past `--sample-ms` until the workload settles, and
+fails the run rather than reporting a truncated window if the workload overruns
+the guard. That is why a 2,000-publication run reports a measured window longer
+than the requested one.
+
+`--zustand-publications` publishes an empty partial through the real store, so
+each publication costs exactly one full subscriber visit and nothing else. It
+isolates the `listeners x selector work` half of the burst-cost model from
+agent-status payload work, and it is store-API independent — it measures the
+same thing before and after the batching slice.
+
+The agent-status write workload (`--agent-status-batches`,
+`--agent-status-write-mode`) is not in this harness yet. It depends on
+`setAgentStatuses`, so it lands with the store slice.
+
+## Baseline on `main`
+
+Measured on `main` at `077f5a11cd4` (macOS, arm64, 16 CPUs), Electron built with
+`electron-vite --mode e2e`, headless, 100 worktrees at lineage depth 99 with 100
+seeded agent rows, 10 s warmup and a 30 s sampling window.
+
+Fixture scale is confirmed by the census rather than assumed: 100 store
+worktrees, 100 mounted cards, 100 mounted agent rows, and **9,279 store
+listeners**. That listener count is the multiplier the design targets.
+
+2,000 no-op store publications at a 1 ms cadence, three repetitions. The
+listener census was 9,279 in every run.
+
+| Measure                  |      Median | Runs                           |
+| ------------------------ | ----------: | ------------------------------ |
+| Wall time to complete    | 12,325.7 ms | 13,148.6 / 12,325.7 / 11,870.5 |
+| p50 scheduling drift     |  5,150.3 ms | 5,432.3 / 5,150.3 / 4,945.2    |
+| p95 scheduling drift     |  9,802.9 ms | 10,570.4 / 9,802.9 / 9,390.0   |
+| Renderer mean CPU        |      18.25% | 20.25 / 18.25 / 15.88          |
+| Renderer p95 CPU         |      32.59% | 40.07 / 32.59 / 31.28          |
+| Renderer timer drift p95 |      7.0 ms | 7.3 / 5.3 / 7.0                |
+
+2,000 publications requested over 2 s take about 12 s, so the renderer sustains
+roughly 160 publications per second at this scale. Each publication is
+individually short - the long-task observer recorded zero entries in all three
+runs - so the cost surfaces as scheduling drift and sustained CPU rather than as
+discrete long tasks. Compare drift and CPU here, not long-task counts.
+
+The idle control at the same scale with `--zustand-publications 0` reports 6.63%
+renderer mean CPU, 17.11% p95, and 1.6 ms p95 timer drift. Roughly 11.6 points
+of mean renderer CPU are therefore attributable to publication fanout rather than
+to the mounted fixture itself. 200 spinner animations run in both cases, so the
+control also bounds the animation cost out of the comparison.
+
+Reproduce with:
+
+```bash
+pnpm run bench:idle-cpu -- --worktrees 100 --lineage-depth 99 \
+  --agents-per-worktree 1 --warmup-ms 10000 --sample-ms 30000 \
+  --zustand-publications 2000 --zustand-publication-interval-ms 1 \
+  --output /tmp/idle-cpu-baseline.json
+```
+
+## Results
+
+Three repetitions used 100 mounted worktrees, lineage depth 99, 100 seeded
+agent rows, and verified final state. Medians from the regenerated evidence set
+are:
+
+| Single 2,000-update burst | Sequential |    Batched |
+| ------------------------- | ---------: | ---------: |
+| Status-state publications |      2,000 |          1 |
+| Store action time         | 3,692.0 ms |   188.7 ms |
+| Update throughput         |    541.7/s | 10,598.8/s |
+| Renderer mean CPU         |      36.2% |       2.9% |
+| Renderer p95 CPU          |     107.3% |       8.2% |
+| p95 long task             |   4,653 ms |     216 ms |
+
+The direct store transaction performs 99.95% fewer status-state publications,
+spends 94.9% less time in the store action, and processes updates 19.6 times
+faster. Renderer mean CPU falls 92.0%, renderer p95 CPU falls 92.4%, and the p95
+long task falls 95.4%.
+
+The 60-burst × 32-update case at 33 ms is a sustained saturation stress, not a
+real-time production SLO. Publications fall from 1,920 to 60 and median store
+action time falls from 2,791.9 ms to 323.3 ms. Median completion time falls from
+5,298.2 ms to 2,710.6 ms, p95 scheduling drift falls from 3,073.0 ms to 664.9
+ms, and long-task count falls from 57 to 1. Renderer p95 CPU remains saturated
+and noisy in this cadence, so it is not used as the discriminating measure.
+
+The 20-pane artificial OpenCode regression passes with 12.4 ms median key echo,
+25.2 ms worst key echo, 19.4 ms maximum timer drift, and zero dropped renderer
+backlogs.
+
+These figures come from the bundled prototype and are restated here as the
+target. They are re-measured with the harness when the store slice lands.
+
+## Acceptance criteria
+
+- The 100-worktree fixture stays at or below the pinned listener budgets.
+- A deferred transaction performs one status-state publication while preserving
+  ordered final state, including live-map eviction at the 500-row cap.
+- A 100-pane startup snapshot performs one status and one bulk resolved-title
+  publication with generated titles disabled; enabling generated titles adds at
+  most one ordered bulk publication while preserving final statuses and titles.
+- Sequential-versus-batch equivalence tests pass across same-pane transitions
+  and side-effect-bearing updates.
+- Renderer CPU tails and scheduling drift improve in repeated candidate runs.
+- The 20-pane artificial terminal test reports no dropped output backlog and no
+  material typing-latency regression.
+- Web typecheck, focused unit tests, lint, max-lines ratchet, and E2E build pass.
+
+## Compatibility
+
+This is renderer-local. It adds no RPC field, stream opcode, persisted data, Git
+command, or provider-specific contract. Native, WSL, SSH, relay, folder
+workspace, and git-worktree status events enter the same renderer action. Mixed
+client/server versions therefore need no capability negotiation.
+
+## Failure containment
+
+The first live event remains immediate. Startup replay and bounded pending
+retries fold synchronously without waiting for the 33 ms live-burst window, but
+publish their accepted updates together. Empty batches are no-ops. If an update
+is stale or targets retired authority, the reducer skips only that update and
+continues folding later events in order.
diff --git a/docs/reference/worktree-scan-fingerprint.md b/docs/reference/worktree-scan-fingerprint.md
new file mode 100644
index 00000000000..f82d453a82c
--- /dev/null
+++ b/docs/reference/worktree-scan-fingerprint.md
@@ -0,0 +1,274 @@
+# Steady-state worktree rescan: Git-admin fingerprint gate
+
+## Status
+
+Adopted for the main-process worktree resolution cache
+(`OrcaRuntimeService.listRepoWorktreesForResolution`). It keeps the existing
+30-second freshness contract for externally created, removed, moved, locked, and
+re-checked-out worktrees while removing the `git worktree list` subprocess that
+previously ran for every registered repository every 30 seconds.
+
+## Context
+
+A production trace (10 registered repositories, 3 h 27 min) recorded 4,272
+`git worktree` invocations and 8,663 total Git subprocesses. The invocations
+arrived in full-fleet sweeps roughly every 30.5 s — one sweep per repository per
+`WORKTREE_SCAN_CACHE_TTL_MS`.
+
+### What actually expires the cache
+
+The originating report assumed some specific terminal/status/orchestration
+request was invalidating the 30-second cache. That is not what happens, and the
+distinction changes the fix:
+
+- `resolvedWorktreeCache` (the whole-fleet snapshot) has a **1-second** TTL
+  (`RESOLVED_WORKTREE_CACHE_TTL_MS`). Any caller polling faster than 1 Hz
+  recomputes the snapshot.
+- `computeResolvedWorktrees` fans out over **every** registered repo
+  (`src/main/runtime/orca-runtime.ts`), calling
+  `listRepoWorktreesForResolution` per repo.
+- That per-repo call is backed by `worktreeScanCache` with a **30-second** TTL.
+  When it expires, the next poll shells out.
+
+So no request "expires" the 30-second cache. It expires on wall-clock time, and
+whichever poller arrives first afterwards pays a full-fleet `git worktree list`
+fan-out. The many high-frequency callers — `listTerminals` without a selector,
+`showTerminal`, `getWorktreePs`, `listManagedWorktrees`,
+`resolveWorktreeSelector`, orchestration authority refresh — only determine
+*who* pays, not *how often*. Steady-state subprocess volume is therefore
+`repos / 30 s`, independent of poll rate, which is exactly the observed
+~1 sweep / 30.5 s.
+
+The in-Orca mutation surface is already event-driven: create, remove, rename,
+folder-rename, sparse edits, repo add/update/remove, SSH reconnect, and
+mixed-version remote invalidation all call
+`invalidateWorktreeScanCacheForRepo` / `invalidateResolvedWorktreeCache`
+(≈40 call sites). The 30-second TTL exists for exactly one reason: discovering
+worktree changes made **outside** Orca (`git worktree add/remove/move/prune`,
+`git checkout` in another worktree, `rm -rf` of a worktree directory).
+
+That is a filesystem question, and the filesystem can answer it without a
+subprocess.
+
+## Goals
+
+- Remove the periodic all-repository `git worktree list` fan-out in steady
+  state.
+- Preserve the current ≈30 s discovery latency for externally created, removed,
+  moved, pruned, locked/unlocked, and re-checked-out worktrees.
+- Keep a bounded reconciliation so anything the cheap probe cannot observe still
+  converges.
+- Change nothing for SSH repos, WSL-routed repos, folder workspaces, bare repos,
+  or hosts where the probe cannot resolve Git's admin layout.
+- Fail open: any probe error must behave exactly like today (run the real scan).
+
+## Non-goals
+
+- Changing `RESOLVED_WORKTREE_CACHE_TTL_MS` or the whole-fleet snapshot shape.
+- Changing the renderer-facing `worktrees:list` / `worktrees:listAll` IPC scan
+  cache in `src/main/ipc/worktrees.ts` (separate 5 s cache, invalidated by
+  `registerWorktreeChangeInvalidator`, not a polling source in the trace).
+- Scoping `resolveWorktreeSelector` to a single repository. See
+  "Rejected alternatives".
+- Adding a filesystem watcher per repository.
+- Any wire/RPC/persisted-schema change.
+
+## Design
+
+Introduce a cheap, subprocess-free **Git worktree admin fingerprint** for a
+local repository, and consult it before re-running a scan whose TTL has expired.
+
+### Fingerprint inputs
+
+`readRepoWorktreeAdminFingerprint(repoPath)` in
+`src/main/runtime/repo-worktree-admin-fingerprint.ts` resolves the repo's Git
+common directory without a subprocess (read `.git`; if it is a `gitdir:` file,
+follow it and then its `commondir`; if `.git` is absent, treat `repoPath` as a
+bare gitdir), then records:
+
+| Input | External change it catches |
+| --- | --- |
+| sorted entry names of `<commonDir>/worktrees` | `worktree add`, `worktree remove`, `worktree prune` |
+| existence of `repoPath` | main checkout deleted |
+| `<commonDir>/packed-refs` mtime + size | a tip moved while its loose ref is packed away |
+| `<commonDir>/reftable` mtime + size | a tip moved under the reftable backend |
+| per checkout: `HEAD` contents | branch switch, detach (the detached oid is in HEAD itself) |
+| per checkout: contents of the ref HEAD names | a plain `git commit`, `reset`, or `fetch` that moves the tip |
+| per entry: `gitdir` contents | `worktree move`, `worktree repair` |
+| per entry: `locked` presence | `worktree lock` / `unlock` |
+| per entry: existence of the path named by `gitdir` | a worktree directory deleted with `rm -rf` (flips `prunable`) |
+
+"per checkout" covers the main worktree and each linked worktree. Reading the
+ref HEAD names is what makes an ordinary commit visible: committing rewrites
+`refs/heads/<branch>` and leaves `HEAD` untouched, but moves the oid
+`git worktree list --porcelain` prints. A symref target is only followed when it
+is a relative path under `refs/`, so a hand-edited `HEAD` cannot steer the probe
+outside the ref store.
+
+Every input is a `stat`, `readdir`, or small `readFile` on an already-hot inode,
+and the fingerprint depends on nothing but the repo path — no prior scan result
+is threaded in. Per-repo fan-out is capped at 8 concurrent linked-worktree
+probes, mirroring `SPARSE_CHECKOUT_DETECTION_CONCURRENCY`. A 10-repo fleet with
+10 worktrees each costs a few hundred filesystem calls per 30 s window versus 10
+process spawns; the spawns dominate by orders of magnitude, and process-table
+churn was the reported symptom.
+
+The fingerprint is a NUL-delimited string; any read failure yields `null`, which
+the caller treats as "cannot prove unchanged".
+
+### Cache decision
+
+`listRepoWorktreesForResolution` gains one branch on the expired-TTL path:
+
+```text
+cached entry exists, same generation + runtimeKey, TTL expired
+  └─ probe eligible? (no connectionId, no wslDistro, fingerprint recorded)
+       ├─ no  → real scan (today's behaviour)
+       └─ yes → read fingerprint now
+            ├─ null or different              → real scan
+            ├─ equal, last real scan < 5 min  → extend TTL, no subprocess
+            └─ equal, last real scan ≥ 5 min  → real scan (bounded reconcile)
+```
+
+`WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS` is 5 min, matching the existing
+`WORKTREE_SCAN_AGENT_SCRATCH_TTL_MS` precedent. A cached result whose scan
+failed (`ok: false`) is never extended, so a transient Git failure still retries
+on the 30 s TTL.
+
+### Git version compatibility
+
+Every path the probe reads is part of Git's on-disk layout well before the 2.25
+baseline in [`git-compatibility.md`](./git-compatibility.md): `.git` as a
+directory or `gitdir:` file, `commondir`, `worktrees/<name>/{HEAD,gitdir,locked}`,
+`packed-refs`, and loose `refs/`. `reftable` arrived in 2.45; on older Git it
+simply stats as missing, which is a stable value and therefore harmless. No new
+Git command is introduced — this change only skips one.
+
+Agent-scratch repos already carry a 5-minute scan TTL
+(`WORKTREE_SCAN_AGENT_SCRATCH_TTL_MS`), which equals the reconciliation
+interval, so the gate never fires for them and their behaviour is unchanged.
+
+### Ordering
+
+The fingerprint stored with a scan result is captured **before** the scan runs.
+A mutation landing while the scan is in flight therefore leaves the stored
+fingerprint stale-by-construction, so the next probe sees a difference and
+rescans. Capturing after the scan would let that mutation be masked forever.
+
+### Interaction with existing invalidation
+
+Untouched. `invalidateWorktreeScanCacheForRepo` deletes the entry (fingerprint
+included) and bumps the generation, so every event-driven path still forces a
+real scan on the next read. The fingerprint only ever *extends* an entry that
+the TTL alone would have refreshed.
+
+## Freshness budget
+
+| Change | Before | After |
+| --- | --- | --- |
+| Orca-initiated create/remove/rename/sparse/repo edit | immediate (event) | immediate (event) |
+| SSH reconnect / provider generation bump | immediate (event) | immediate (event) |
+| External `worktree add/remove/move/prune/lock` | ≤ 30 s | ≤ 30 s |
+| External `git checkout` / `commit` / `reset` in any worktree | ≤ 30 s | ≤ 30 s |
+| External `rm -rf <worktree>` | ≤ 30 s | ≤ 30 s |
+| External sparse-checkout pattern edit | ≤ 30 s | ≤ 5 min |
+| Packed/reftable tip moved within one mtime tick at an equal file size | ≤ 30 s | ≤ 5 min |
+| SSH / WSL repos, folder workspaces | unchanged | unchanged |
+
+The two regressions are bounded by the reconciliation interval and are both
+changes Orca does not make itself.
+
+### Main-thread cost
+
+Both the scan and the probe are asynchronous, so neither "runs on the main
+thread" in the naive sense — but they are not equally free there. Measured on
+macOS with a 1 ms interval sampling event-loop lag while each ran 30 times
+against a repo with 20 linked worktrees:
+
+| | wall per call | main-thread stall per call | worst single stall |
+| --- | --- | --- | --- |
+| `git worktree list` | 18.66 ms | 2.69 ms | 3.02 ms |
+| fingerprint probe | 1.66 ms | 0.01 ms | 0.04 ms |
+
+`fs/promises` dispatches to libuv's threadpool, so ~99 % of the probe's latency
+is off-thread. Spawning Git does not: `uv_spawn`, fd and pipe setup, and stdout
+collection and decoding are real synchronous main-process work. Ten repos
+refreshing together therefore cost ≈27 ms of event-loop stall per sweep before
+this change and ≈0.1 ms after — this reduces main-thread pressure rather than
+adding to it, which is why moving either side onto a worker thread would not
+help.
+
+### Residual risk
+
+A repo registered at a UNC path (`\\wsl$\...`) but executed by the local Windows
+Git runtime is still probed, because it is not WSL-routed from Orca's point of
+view. The probe is correct there and strictly cheaper than the subprocess it
+replaces, but its filesystem calls cross the 9p boundary like the existing
+sparse-checkout probes already do.
+
+## Measured effect
+
+`src/main/runtime/worktree-scan-admin-fingerprint-gate.test.ts` drives the
+reported steady state — 10 idle local repos, a caller polling at 1 Hz for 30
+simulated minutes — and counts `git worktree list` invocations:
+
+| | `git worktree list` per 30 min | per hour |
+| --- | --- | --- |
+| TTL only (before) | 600 | 1,200 |
+| fingerprint gate (after) | 60 | 120 |
+
+A 90 % reduction, with the remainder being the bounded reconciliation. Repos
+with genuine external activity keep rescanning at the 30 s cadence because the
+fingerprint flips.
+
+Extrapolating to the original trace's shape (10 repos, 3 h 27 min): 4,272
+`git worktree` invocations would become ≈427.
+
+## Rejected alternatives
+
+**Raise `WORKTREE_SCAN_CACHE_TTL_MS` to 5 min.** One line, same subprocess
+reduction, but it degrades *every* external-change latency to 5 min, including
+the common "I ran `git worktree add` in a terminal" case. The fingerprint buys
+the same reduction without that regression.
+
+**Per-repo `fs.watch` on `<commonDir>/worktrees`.** Lower latency, but adds
+persistent watcher handles per repo, inherits recursive-watch platform
+differences, and would need its own dormancy/rearm story. The existing watcher
+infrastructure is scoped to workspace files; extending it to Git admin dirs is a
+larger change with a worse risk profile for the same steady-state win.
+
+**Scope `resolveWorktreeSelector` to the owning repository.** The original brief
+asks for this. `listTerminals` already avoids the fan-out for explicit worktree
+ids via `buildResolvedWorktreeFromId` +
+`listKnownResolvedWorktreesForExplicitTarget`. Extending that to
+`resolveWorktreeSelector` means splitting the highest-fan-in method in the
+runtime (38 call sites) and rebuilding lineage projection for a repo subset —
+material regression risk. Once the fingerprint gate lands, the remaining
+fan-out cost for a targeted call is a batch of stats, not a subprocess, so the
+gain no longer justifies the risk. Tracked as follow-up, not in this change.
+
+## Test plan
+
+`src/main/runtime/repo-worktree-admin-fingerprint.test.ts` (real temp dirs, real
+`git` binary — a mocked filesystem would only restate the assumptions):
+
+- stable across repeated reads with no change
+- changes after `worktree add`, `worktree remove`, `worktree move`,
+  `worktree lock`, `checkout` in a linked worktree, `checkout` in the main
+  worktree, a commit in either, and `rm -rf` of a worktree directory
+- still tracks a tip whose loose ref has been packed away by `git pack-refs`
+- a linked worktree path and the main repo path produce the same fingerprint
+- a bare repo resolves through its own gitdir and still tracks `worktree add`
+- `null` for a non-Git directory and for a missing path
+
+`src/main/runtime/worktree-scan-admin-fingerprint-gate.test.ts`:
+
+- unchanged fingerprint suppresses the rescan past the 30 s TTL and re-arms it
+- changed fingerprint rescans at the 30 s TTL
+- the 5-minute reconciliation forces a rescan while the fingerprint is unchanged
+- `notifyBranchRenamed` (event invalidation) still forces an immediate rescan
+- a `null` fingerprint (probe failure) falls back to scanning
+- SSH repos never consult the probe
+- a failed scan is never extended
+- concurrent callers share one probe and one scan
+- the 1 Hz / 10-repo workload measurement above
diff --git a/mobile/app/h/[hostId]/files/preview/[worktreeId].tsx b/mobile/app/h/[hostId]/files/preview/[worktreeId].tsx
index 65412d51958..df60f8fc117 100644
--- a/mobile/app/h/[hostId]/files/preview/[worktreeId].tsx
+++ b/mobile/app/h/[hostId]/files/preview/[worktreeId].tsx
@@ -10,6 +10,11 @@ export default function MobileFilePreviewRoute() {
     source?: string | string[]
     absolutePath?: string | string[]
     grantId?: string | string[]
+    terminal?: string | string[]
+    pathText?: string | string[]
+    cwd?: string | string[]
+    nativeChatTab?: string | string[]
+    nativeChatSession?: string | string[]
     line?: string | string[]
     column?: string | string[]
     name?: string | string[]
diff --git a/mobile/app/h/[hostId]/session/[worktreeId].tsx b/mobile/app/h/[hostId]/session/[worktreeId].tsx
index cf0f1dd7edb..123a1212eb0 100644
--- a/mobile/app/h/[hostId]/session/[worktreeId].tsx
+++ b/mobile/app/h/[hostId]/session/[worktreeId].tsx
@@ -127,6 +127,15 @@ import type { TerminalLiveInputSender } from '../../../../src/terminal/terminal-
 import { isTerminalSendRpcAccepted } from '../../../../src/terminal/terminal-send-rpc-response'
 import { sendMobileTerminalQueryReply } from '../../../../src/terminal/mobile-terminal-query-reply'
 import { TERMINAL_QUERY_REPLY_INPUT_RUNTIME_CAPABILITY } from '../../../../../src/shared/protocol-version'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../../../src/shared/legacy-terminal-attribution-env'
+import {
+  assertMobileTerminalAttributionDisableSupported,
+  MOBILE_TERMINAL_CREATE_RPC_OPTIONS
+} from '../../../../src/session/mobile-terminal-attribution-compat'
 import { useTerminalLiveInputCommit } from '../../../../src/terminal/use-terminal-live-input-commit'
 import { resolveMobileTerminalInputGate } from '../../../../src/terminal/terminal-input-connection-gate'
 import {
@@ -917,6 +926,9 @@ export default function SessionScreen() {
   } | null>(null)
   const terminalUnsubsRef = useRef<Map<string, () => void>>(new Map())
   const subscribingHandlesRef = useRef<Set<string>>(new Set())
+  // Why: a lease-only subscribe never renders, so the reconciler needs to tell it apart
+  // from a stream that does — an uncovered handle holding one is a blank terminal.
+  const leaseOnlyHandlesRef = useRef<Set<string>>(new Set())
   const initializedHandlesRef = useRef<Set<string>>(new Set())
   const terminalDiagnosticsRef = useRef(new MobileTerminalDiagnostics())
   // Why: bounds the scrollback→resubscribe fit loop per handle (STA-3337).
@@ -1233,6 +1245,7 @@ export default function SessionScreen() {
       terminalUnsubsRef.current.get(handle)?.()
       terminalUnsubsRef.current.delete(handle)
       subscribingHandlesRef.current.delete(handle)
+      leaseOnlyHandlesRef.current.delete(handle)
       terminalDiagnosticsRef.current.terminalUnsubscribed(handle)
       subscribeSeqRef.current.set(handle, (subscribeSeqRef.current.get(handle) ?? 0) + 1)
       // Why: reset the high-water mark so a fresh subscription's first scrollback isn't dropped as stale.
@@ -1265,6 +1278,7 @@ export default function SessionScreen() {
     clearNativeChatInputLease()
     terminalUnsubsRef.current.clear()
     subscribingHandlesRef.current.clear()
+    leaseOnlyHandlesRef.current.clear()
     initializedHandlesRef.current.clear()
     terminalDiagnosticsRef.current.clearTerminalCache()
     viewportResubscribeBudgetRef.current.clear()
@@ -1331,6 +1345,11 @@ export default function SessionScreen() {
       }
 
       subscribingHandlesRef.current.add(handle)
+      if (covered) {
+        leaseOnlyHandlesRef.current.add(handle)
+      } else {
+        leaseOnlyHandlesRef.current.delete(handle)
+      }
       const seq = (subscribeSeqRef.current.get(handle) ?? 0) + 1
       subscribeSeqRef.current.set(handle, seq)
       diagnostics.streamArmed(handle, seq, viewportRef.current)
@@ -1519,6 +1538,7 @@ export default function SessionScreen() {
     streamRevision: coveredStreamRevision,
     subscriptionsRef: terminalUnsubsRef,
     subscribingRef: subscribingHandlesRef,
+    leaseOnlyRef: leaseOnlyHandlesRef,
     webReadyRef: webReadyHandlesRef,
     initializedRef: initializedHandlesRef,
     subscribe: subscribeToTerminal,
@@ -3085,6 +3105,10 @@ export default function SessionScreen() {
     hostId,
     worktreeId,
     worktreeName: routeWorktreeName,
+    nativeChatSessionId:
+      activeSessionTab?.type === 'terminal'
+        ? (activeSessionTab.agentStatus?.providerSession?.id ?? null)
+        : null,
     activeHandleRef,
     terminalCwdRef,
     openBrowser: (url) => void handleCreateBrowserRef.current?.(url),
@@ -3650,20 +3674,27 @@ export default function SessionScreen() {
       .slice(2, 10)}`
 
     try {
-      const response = await client.sendRequest('session.tabs.createTerminal', {
-        worktree: `id:${worktreeId}`,
-        afterTabId: activeSessionTabId ?? undefined,
-        clientMutationId,
-        ...(options?.startupCommand ? { command: options.startupCommand } : {}),
-        ...(options?.startupCommandDelivery
-          ? { startupCommandDelivery: options.startupCommandDelivery }
-          : {}),
-        ...(options?.agentPrompt ? { agentPrompt: options.agentPrompt } : {}),
-        ...(agent ? { agent } : {}),
-        activate: false,
-        select: true,
-        navigation: 'caller'
-      })
+      const authority = await assertMobileTerminalAttributionDisableSupported(client)
+      const response = await client.sendRequest(
+        'session.tabs.createTerminal',
+        {
+          worktree: `id:${worktreeId}`,
+          afterTabId: activeSessionTabId ?? undefined,
+          clientMutationId,
+          ...(options?.startupCommand ? { command: options.startupCommand } : {}),
+          ...(options?.startupCommandDelivery
+            ? { startupCommandDelivery: options.startupCommandDelivery }
+            : {}),
+          env: withLegacyTerminalAttributionDisabledEnv(undefined),
+          envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
+          ...(options?.agentPrompt ? { agentPrompt: options.agentPrompt } : {}),
+          ...(agent ? { agent } : {}),
+          activate: false,
+          select: true,
+          navigation: 'caller'
+        },
+        { ...MOBILE_TERMINAL_CREATE_RPC_OPTIONS, expectedRuntimeId: authority.runtimeId }
+      )
       if (response.ok) {
         const result = (response as RpcSuccess).result as TerminalCreateResult
         const created = result.tab
@@ -3763,10 +3794,17 @@ export default function SessionScreen() {
           showToast(message, 1800)
         }
       }
-    } catch {
-      const message = options?.errorToast ?? 'Failed to create terminal'
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : null
+      const message =
+        errorMessage === MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+          ? errorMessage
+          : (options?.errorToast ?? errorMessage ?? 'Failed to create terminal')
       setCreateError(message)
-      if (options?.errorToast) {
+      if (
+        options?.errorToast ||
+        errorMessage === MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+      ) {
         triggerError()
         showToast(message, 1800)
       }
diff --git a/mobile/fastlane/Fastfile b/mobile/fastlane/Fastfile
index 6e66a72bada..204c14672b6 100644
--- a/mobile/fastlane/Fastfile
+++ b/mobile/fastlane/Fastfile
@@ -253,6 +253,9 @@ platform :ios do
     upload_to_testflight(
       api_key: api_key,
       app_identifier: BUNDLE_ID,
+      # distribute_only means there is no local .ipa to sniff, so fastlane would
+      # otherwise fall through to an interactive platform prompt and crash in CI.
+      app_platform: "ios",
       app_version: version,
       build_number: build_number,
       distribute_only: true,
diff --git a/mobile/src/components/markdown-file-path-detection.ts b/mobile/src/components/markdown-file-path-detection.ts
index 5e320a3f10c..c51151b9ebf 100644
--- a/mobile/src/components/markdown-file-path-detection.ts
+++ b/mobile/src/components/markdown-file-path-detection.ts
@@ -3,6 +3,8 @@
 // viewer). We deliberately favor precision over recall: a missed path is a minor
 // annoyance, but a false positive on prose or a version number is a broken tap.
 
+import { parseFileLinkLocation } from '../../../src/shared/file-link-location'
+
 export type FilePathSegment =
   | { type: 'text'; value: string }
   | { type: 'file'; value: string; path: string }
@@ -101,8 +103,6 @@ function hasMidTokenAt(candidate: string): boolean {
   return /[^\\/]@/.test(candidate)
 }
 
-const LINE_SUFFIX_PATTERN = /^(.+?):([1-9]\d*)(?::([1-9]\d*))?$/
-
 /**
  * Split an agent-style `path:line(:col)` citation into its parts. Windows drive
  * colons are safe: only a trailing all-digit suffix is treated as a line ref.
@@ -112,14 +112,14 @@ export function splitFilePathLineSuffix(pathText: string): {
   line: number | null
   column: number | null
 } {
-  const match = LINE_SUFFIX_PATTERN.exec(pathText)
-  if (!match) {
+  const parsed = parseFileLinkLocation(pathText)
+  if (!parsed || (parsed.line === null && parsed.column === null)) {
     return { path: pathText, line: null, column: null }
   }
   return {
-    path: match[1]!,
-    line: Number.parseInt(match[2]!, 10),
-    column: match[3] ? Number.parseInt(match[3], 10) : null
+    path: parsed.pathText,
+    line: parsed.line,
+    column: parsed.column
   }
 }
 
diff --git a/mobile/src/components/mobile-markdown-preview-html.ts b/mobile/src/components/mobile-markdown-preview-html.ts
index 8b2d247f8f2..8bb5fca0934 100644
--- a/mobile/src/components/mobile-markdown-preview-html.ts
+++ b/mobile/src/components/mobile-markdown-preview-html.ts
@@ -97,7 +97,7 @@ function attrValue(tag: string, name: string): string {
     const valueStart = cursor
     if (quote) {
       const valueEnd = tag.indexOf(quote, cursor)
-      if (valueEnd < 0) {
+      if (valueEnd === -1) {
         return ''
       }
       cursor = valueEnd + 1
diff --git a/mobile/src/components/mobile-markdown-preview-tag-stripper.ts b/mobile/src/components/mobile-markdown-preview-tag-stripper.ts
index 90e3c3cc3cc..6eeca2aa612 100644
--- a/mobile/src/components/mobile-markdown-preview-tag-stripper.ts
+++ b/mobile/src/components/mobile-markdown-preview-tag-stripper.ts
@@ -191,7 +191,7 @@ function closingMarkupTagNames(value: string): Set<string> {
   let cursor = 0
   while (cursor < value.length) {
     const start = value.indexOf('<', cursor)
-    if (start < 0) {
+    if (start === -1) {
       return names
     }
     const end = findMobileMarkdownMarkupTagEnd(value, start + 1)
@@ -228,7 +228,7 @@ export function stripMobileMarkdownMarkupTags(value: string): string {
   const closingTagNames = closingMarkupTagNames(value)
   while (cursor < value.length) {
     const start = value.indexOf('<', cursor)
-    if (start < 0) {
+    if (start === -1) {
       return output + value.slice(cursor)
     }
     output += value.slice(cursor, start)
@@ -261,7 +261,7 @@ export function stripMobileMarkdownMarkupTags(value: string): string {
         !/[-:]/.test(name) &&
         !knownMarkupTagNames.has(lowerName) &&
         !closingTagNames.has(lowerName)
-      if (isNestedGeneric && nestedStart >= 0) {
+      if (isNestedGeneric && nestedStart !== -1) {
         output += value.slice(start, nestedStart)
         cursor = nestedStart
         continue
diff --git a/mobile/src/files/MobileFilePreviewScreen.test.ts b/mobile/src/files/MobileFilePreviewScreen.test.ts
index 1595454a12a..fa61f7351c6 100644
--- a/mobile/src/files/MobileFilePreviewScreen.test.ts
+++ b/mobile/src/files/MobileFilePreviewScreen.test.ts
@@ -39,6 +39,21 @@ describe('MobileFilePreviewScreen', () => {
     ).toBe(false)
   })
 
+  it('treats native-chat artifact grants as read-only', () => {
+    expect(
+      isEditableMobileTerminalArtifactPreview(
+        {
+          status: 'ready',
+          kind: 'text',
+          content: '<h1>Result</h1>',
+          truncated: false,
+          byteLength: 15
+        },
+        true
+      )
+    ).toBe(false)
+  })
+
   it('keeps dirty terminal artifact drafts protected while preview is waiting for reconnect', () => {
     const sourceKey = sourceKeyForPreview({
       source: 'terminalArtifact',
diff --git a/mobile/src/files/MobileFilePreviewScreen.tsx b/mobile/src/files/MobileFilePreviewScreen.tsx
index 0879e02ec7e..3f56890243a 100644
--- a/mobile/src/files/MobileFilePreviewScreen.tsx
+++ b/mobile/src/files/MobileFilePreviewScreen.tsx
@@ -181,7 +181,8 @@ export function MobileFilePreviewScreen({ route }: Props) {
   )
   const meta = previewParams ? `${worktreeLabel} - ${displayPath}` : 'Preview'
   const isEditableTerminalArtifact =
-    previewSource?.source === 'terminalArtifact' && isEditableMobileTerminalArtifactPreview(preview)
+    previewSource?.source === 'terminalArtifact' &&
+    isEditableMobileTerminalArtifactPreview(preview, previewSource.readOnly === true)
   const canSaveArtifact =
     isEditableTerminalArtifact &&
     draftSourceKeyRef.current === previewSourceKey &&
diff --git a/mobile/src/files/file-tree.ts b/mobile/src/files/file-tree.ts
index 71f26ca155b..8a3e795ac2d 100644
--- a/mobile/src/files/file-tree.ts
+++ b/mobile/src/files/file-tree.ts
@@ -132,7 +132,7 @@ export function getDirectoryCacheState(
 ): DirectoryState | undefined {
   // Why: repository paths are arbitrary object keys; inherited keys like
   // "constructor" must not masquerade as loaded directory state.
-  return Object.prototype.hasOwnProperty.call(cache, relativePath) ? cache[relativePath] : undefined
+  return Object.hasOwn(cache, relativePath) ? cache[relativePath] : undefined
 }
 
 export function joinRelativePath(parentPath: string, name: string): string {
diff --git a/mobile/src/files/mobile-file-preview-editability.ts b/mobile/src/files/mobile-file-preview-editability.ts
index ff0fa18d3cb..d8ed196e5cb 100644
--- a/mobile/src/files/mobile-file-preview-editability.ts
+++ b/mobile/src/files/mobile-file-preview-editability.ts
@@ -3,7 +3,13 @@ import type {
   MobileFilePreviewSource
 } from './mobile-file-preview-request'
 
-export function isEditableMobileTerminalArtifactPreview(preview: MobileFilePreviewResult): boolean {
+export function isEditableMobileTerminalArtifactPreview(
+  preview: MobileFilePreviewResult,
+  readOnly = false
+): boolean {
+  if (readOnly) {
+    return false
+  }
   return (
     (preview.status === 'ready' && preview.kind !== 'image' && !preview.truncated) ||
     preview.status === 'empty'
diff --git a/mobile/src/files/mobile-file-preview-request.test.ts b/mobile/src/files/mobile-file-preview-request.test.ts
index f7f77fabd19..fe15cad0b07 100644
--- a/mobile/src/files/mobile-file-preview-request.test.ts
+++ b/mobile/src/files/mobile-file-preview-request.test.ts
@@ -179,6 +179,47 @@ describe('mobile-file-preview-request', () => {
     })
   })
 
+  it('refreshes a native-chat artifact grant with the same transcript provenance', async () => {
+    const client = clientWithResponses([
+      fail('terminal_file_grant_expired'),
+      ok({
+        exists: true,
+        isDirectory: false,
+        openTarget: {
+          kind: 'absolute-file',
+          absolutePath: '/Users/ada/orca-plans/result.html',
+          grantId: 'grant-2',
+          readOnly: true
+        }
+      }),
+      ok({ content: '<h1>Result</h1>', truncated: false, byteLength: 15 })
+    ])
+
+    const onTerminalArtifactSourceRefreshed = vi.fn()
+    await loadMobileFilePreview(
+      client,
+      {
+        source: 'terminalArtifact',
+        worktreeId: 'wt-1',
+        absolutePath: '/Users/ada/orca-plans/result.html',
+        grantId: 'grant-1',
+        pathText: '~/orca-plans/result.html',
+        nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' }
+      },
+      undefined,
+      { onTerminalArtifactSourceRefreshed }
+    )
+
+    expect(client.sendRequest).toHaveBeenNthCalledWith(2, 'files.resolveTerminalPath', {
+      worktree: 'id:wt-1',
+      pathText: '~/orca-plans/result.html',
+      nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' }
+    })
+    expect(onTerminalArtifactSourceRefreshed).toHaveBeenCalledWith(
+      expect.objectContaining({ grantId: 'grant-2', readOnly: true })
+    )
+  })
+
   it.each([
     ['terminal_file_grant_expired'],
     ['terminal_file_grant_mismatch'],
@@ -242,6 +283,25 @@ describe('mobile-file-preview-request', () => {
     })
   })
 
+  it('does not send writes for read-only native-chat artifacts', async () => {
+    const client = clientWith(ok({ ok: true }))
+
+    await expect(
+      saveMobileTerminalArtifactPreview(
+        client,
+        {
+          source: 'terminalArtifact',
+          worktreeId: 'wt-1',
+          absolutePath: '/Users/ada/orca-plans/result.html',
+          grantId: 'grant-1',
+          readOnly: true
+        },
+        '<h1>Changed</h1>'
+      )
+    ).resolves.toMatchObject({ status: 'error' })
+    expect(client.sendRequest).not.toHaveBeenCalled()
+  })
+
   it('does not refresh and retry a failed terminal artifact save without a base content check', async () => {
     const client = clientWithResponses([fail('terminal_file_grant_mismatch')])
 
diff --git a/mobile/src/files/mobile-file-preview-request.ts b/mobile/src/files/mobile-file-preview-request.ts
index ff6cd755c50..63b61326654 100644
--- a/mobile/src/files/mobile-file-preview-request.ts
+++ b/mobile/src/files/mobile-file-preview-request.ts
@@ -116,6 +116,9 @@ export async function saveMobileTerminalArtifactPreview(
   content: string,
   options: TerminalArtifactSaveOptions = {}
 ): Promise<MobileFilePreviewResult | { status: 'saved' }> {
+  if (source.readOnly) {
+    return previewError('This file is read-only')
+  }
   let writeSource = source
   if (typeof options.baseContent === 'string') {
     const verified = await verifyTerminalArtifactBaseContent(
diff --git a/mobile/src/files/mobile-file-preview-route.test.ts b/mobile/src/files/mobile-file-preview-route.test.ts
index ac1888ed46f..784313464ee 100644
--- a/mobile/src/files/mobile-file-preview-route.test.ts
+++ b/mobile/src/files/mobile-file-preview-route.test.ts
@@ -65,6 +65,8 @@ describe('mobile-file-preview-route', () => {
       terminal: 'term-1',
       pathText: 'result.json',
       cwd: '/tmp/run',
+      nativeChatTab: 'tab-1',
+      nativeChatSession: 'session-1',
       line: '12',
       column: '3'
     })
@@ -80,6 +82,8 @@ describe('mobile-file-preview-route', () => {
         terminal: 'term-1',
         pathText: 'result.json',
         cwd: '/tmp/run',
+        nativeChatTab: 'tab-1',
+        nativeChatSession: 'session-1',
         line: '12',
         column: '3'
       }
diff --git a/mobile/src/files/mobile-file-preview-route.ts b/mobile/src/files/mobile-file-preview-route.ts
index 1b277de7faa..f0e7dfbbf49 100644
--- a/mobile/src/files/mobile-file-preview-route.ts
+++ b/mobile/src/files/mobile-file-preview-route.ts
@@ -10,6 +10,8 @@ export type MobileFilePreviewRouteParams = {
   terminal?: string
   pathText?: string
   cwd?: string
+  nativeChatTab?: string
+  nativeChatSession?: string
   line?: string
   column?: string
   name?: string
@@ -35,6 +37,8 @@ type RawPreviewRouteParams = {
   terminal?: MobileFilePreviewParamValue
   pathText?: MobileFilePreviewParamValue
   cwd?: MobileFilePreviewParamValue
+  nativeChatTab?: MobileFilePreviewParamValue
+  nativeChatSession?: MobileFilePreviewParamValue
   line?: MobileFilePreviewParamValue
   column?: MobileFilePreviewParamValue
   name?: MobileFilePreviewParamValue
@@ -76,6 +80,8 @@ export function normalizeMobileFilePreviewRouteParams(
         terminal: optionalSingleParam(params.terminal),
         pathText: optionalSingleParam(params.pathText),
         cwd: optionalSingleParam(params.cwd),
+        nativeChatTab: optionalSingleParam(params.nativeChatTab),
+        nativeChatSession: optionalSingleParam(params.nativeChatSession),
         line: optionalSingleParam(params.line),
         column: optionalSingleParam(params.column),
         name: optionalSingleParam(params.name),
diff --git a/mobile/src/files/mobile-file-preview-source.test.ts b/mobile/src/files/mobile-file-preview-source.test.ts
index b5fec782cfc..9c326fd0278 100644
--- a/mobile/src/files/mobile-file-preview-source.test.ts
+++ b/mobile/src/files/mobile-file-preview-source.test.ts
@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest'
-import { sourceKeyForPreview } from './mobile-file-preview-source'
+import { previewSourceFromRoute, sourceKeyForPreview } from './mobile-file-preview-source'
 
 describe('mobile-file-preview-source', () => {
   it('uses structured preview keys so colons in paths cannot collide', () => {
@@ -25,4 +25,21 @@ describe('mobile-file-preview-source', () => {
       sourceKeyForPreview({ source: 'worktree', worktreeId: 'wt:1', relativePath: 'a:b.ts' })
     ).toBe(JSON.stringify(['worktree', 'wt:1', 'a:b.ts']))
   })
+
+  it('makes native-chat artifact previews read-only', () => {
+    expect(
+      previewSourceFromRoute({
+        hostId: 'host-1',
+        worktreeId: 'wt-1',
+        source: 'terminalArtifact',
+        absolutePath: '/tmp/result.html',
+        grantId: 'grant-1',
+        nativeChatTab: 'tab-1',
+        nativeChatSession: 'session-1'
+      })
+    ).toMatchObject({
+      nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' },
+      readOnly: true
+    })
+  })
 })
diff --git a/mobile/src/files/mobile-file-preview-source.ts b/mobile/src/files/mobile-file-preview-source.ts
index b1b23757a6e..2c1f01631e6 100644
--- a/mobile/src/files/mobile-file-preview-source.ts
+++ b/mobile/src/files/mobile-file-preview-source.ts
@@ -15,7 +15,16 @@ export function previewSourceFromRoute(
       grantId: params.grantId,
       ...(params.terminal ? { terminalHandle: params.terminal } : {}),
       ...(params.pathText ? { pathText: params.pathText } : {}),
-      ...(params.cwd ? { cwd: params.cwd } : {})
+      ...(params.cwd ? { cwd: params.cwd } : {}),
+      ...(params.nativeChatTab && params.nativeChatSession
+        ? {
+            nativeChatContext: {
+              tabId: params.nativeChatTab,
+              sessionId: params.nativeChatSession
+            },
+            readOnly: true as const
+          }
+        : {})
     }
   }
   if (!params.relativePath) {
@@ -28,12 +37,12 @@ export function sourceKeyForPreview(source: MobileFilePreviewSource | null): str
   if (!source) {
     return null
   }
-  return source.source === 'terminalArtifact'
-    ? JSON.stringify([
-        'terminal',
-        source.worktreeId,
-        source.absolutePath,
-        source.terminalHandle ?? ''
-      ])
-    : JSON.stringify(['worktree', source.worktreeId, source.relativePath])
+  if (source.source !== 'terminalArtifact') {
+    return JSON.stringify(['worktree', source.worktreeId, source.relativePath])
+  }
+  const key = ['terminal', source.worktreeId, source.absolutePath, source.terminalHandle ?? '']
+  if (source.nativeChatContext) {
+    key.push(source.nativeChatContext.tabId, source.nativeChatContext.sessionId)
+  }
+  return JSON.stringify(key)
 }
diff --git a/mobile/src/files/mobile-terminal-artifact-grant-refresh.ts b/mobile/src/files/mobile-terminal-artifact-grant-refresh.ts
index a8864119be4..cbe5ffdebd8 100644
--- a/mobile/src/files/mobile-terminal-artifact-grant-refresh.ts
+++ b/mobile/src/files/mobile-terminal-artifact-grant-refresh.ts
@@ -1,3 +1,4 @@
+import type { RuntimeNativeChatFileContext } from '../../../src/shared/runtime-types'
 import type { RpcClient } from '../transport/rpc-client'
 import type { RpcFailure, RpcResponse, RpcSuccess } from '../transport/types'
 import { isTerminalArtifactGrantError } from './terminal-artifact-grant-error'
@@ -12,6 +13,8 @@ export type MobileTerminalArtifactPreviewSource = {
   terminalHandle?: string
   pathText?: string
   cwd?: string
+  nativeChatContext?: RuntimeNativeChatFileContext
+  readOnly?: true
 }
 
 export type TerminalArtifactRetryOptions = {
@@ -32,7 +35,8 @@ export async function refreshTerminalArtifactSourceAfterGrantFailure(
     worktree: `id:${source.worktreeId}`,
     pathText: source.pathText ?? source.absolutePath,
     ...(source.cwd ? { cwd: source.cwd } : {}),
-    ...(source.terminalHandle ? { terminal: source.terminalHandle } : {})
+    ...(source.terminalHandle ? { terminal: source.terminalHandle } : {}),
+    ...(source.nativeChatContext ? { nativeChatContext: source.nativeChatContext } : {})
   })
   if (!refreshed.ok) {
     return null
@@ -51,7 +55,9 @@ export async function refreshTerminalArtifactSourceAfterGrantFailure(
     grantId: result.openTarget.grantId,
     ...(source.terminalHandle ? { terminalHandle: source.terminalHandle } : {}),
     ...(source.pathText ? { pathText: source.pathText } : {}),
-    ...(source.cwd ? { cwd: source.cwd } : {})
+    ...(source.cwd ? { cwd: source.cwd } : {}),
+    ...(source.nativeChatContext ? { nativeChatContext: source.nativeChatContext } : {}),
+    ...(source.readOnly || result.openTarget.readOnly === true ? { readOnly: true as const } : {})
   }
 }
 
@@ -68,7 +74,7 @@ function isTerminalArtifactGrantFailure(
 function isTerminalArtifactResolution(result: unknown): result is {
   exists: true
   isDirectory: false
-  openTarget: { kind: 'absolute-file'; absolutePath: string; grantId: string }
+  openTarget: { kind: 'absolute-file'; absolutePath: string; grantId: string; readOnly?: true }
 } {
   if (!result || typeof result !== 'object') {
     return false
diff --git a/mobile/src/hooks/use-active-worktree-scroll.ts b/mobile/src/hooks/use-active-worktree-scroll.ts
index 7600f3ceafe..ff0441c85a8 100644
--- a/mobile/src/hooks/use-active-worktree-scroll.ts
+++ b/mobile/src/hooks/use-active-worktree-scroll.ts
@@ -37,7 +37,7 @@ export function useActiveWorktreeScroll<T extends WithId, S>(
     (worktreeId: string): boolean => {
       for (let sectionIndex = 0; sectionIndex < sections.length; sectionIndex++) {
         const itemIndex = sections[sectionIndex].data.findIndex((w) => w.worktreeId === worktreeId)
-        if (itemIndex >= 0) {
+        if (itemIndex !== -1) {
           sectionListRef.current?.scrollToLocation({
             sectionIndex,
             itemIndex,
diff --git a/mobile/src/session/ai-vault-resume-launch.test.ts b/mobile/src/session/ai-vault-resume-launch.test.ts
index 9efc0e50f1a..3e9af99191c 100644
--- a/mobile/src/session/ai-vault-resume-launch.test.ts
+++ b/mobile/src/session/ai-vault-resume-launch.test.ts
@@ -226,6 +226,13 @@ describe('resumeAiVaultSessionInTerminal', () => {
   it('creates a fresh terminal and sends the command with Enter', async () => {
     const sendRequest = vi
       .fn()
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
       .mockResolvedValueOnce({
         ok: true,
         result: { tab: { type: 'terminal', id: 'tab-1', terminal: 'pty-1', title: 'Terminal' } }
@@ -249,13 +256,20 @@ describe('resumeAiVaultSessionInTerminal', () => {
         navigation: 'caller'
       })
     ).resolves.toMatchObject({ id: 'tab-1', terminal: 'pty-1' })
+    expect(sendRequest).toHaveBeenNthCalledWith(1, 'status.get', undefined, {
+      timeoutMs: 30_000,
+      budgetSpansConnect: true
+    })
     expect(sendRequest).toHaveBeenNthCalledWith(
-      1,
+      2,
       'session.tabs.createTerminal',
       {
         worktree: 'id:worktree-1',
-        env: { ANTHROPIC_BASE_URL: 'http://localhost:3000' },
-        envToDelete: ['CODEX_HOME', 'ORCA_CODEX_HOME'],
+        env: {
+          ANTHROPIC_BASE_URL: 'http://localhost:3000',
+          ORCA_ATTRIBUTION_BYPASS: '1'
+        },
+        envToDelete: ['CODEX_HOME', 'ORCA_CODEX_HOME', 'ORCA_ENABLE_GIT_ATTRIBUTION'],
         launchConfig: {
           agentCommand: 'claude',
           agentArgs: '',
@@ -269,10 +283,14 @@ describe('resumeAiVaultSessionInTerminal', () => {
       },
       // Why: a socket drop mid-resume must reject within the request timeout
       // instead of parking on the reconnect waiter with the spinner pinned.
-      { timeoutMs: RESUME_RPC_TIMEOUT_MS }
+      {
+        timeoutMs: RESUME_RPC_TIMEOUT_MS,
+        budgetSpansConnect: true,
+        expectedRuntimeId: 'runtime'
+      }
     )
     expect(sendRequest).toHaveBeenNthCalledWith(
-      2,
+      3,
       'terminal.send',
       {
         terminal: 'pty-1',
@@ -284,17 +302,35 @@ describe('resumeAiVaultSessionInTerminal', () => {
   })
 
   it('throws when terminal creation fails', async () => {
-    const sendRequest = vi.fn().mockResolvedValueOnce({
-      ok: false,
-      error: { message: 'no terminal' }
-    })
+    const sendRequest = vi
+      .fn()
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
+      .mockResolvedValueOnce({
+        ok: false,
+        error: { message: 'no terminal' }
+      })
     await expect(
       resumeAiVaultSessionInTerminal({ sendRequest }, 'worktree-1', { command: 'command' })
     ).rejects.toThrow('no terminal')
   })
 
   it('throws when the created terminal response is malformed', async () => {
-    const sendRequest = vi.fn().mockResolvedValueOnce({ ok: true, result: { tab: { id: 'x' } } })
+    const sendRequest = vi
+      .fn()
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
+      .mockResolvedValueOnce({ ok: true, result: { tab: { id: 'x' } } })
     await expect(
       resumeAiVaultSessionInTerminal({ sendRequest }, 'worktree-1', { command: 'command' })
     ).rejects.toThrow('Created terminal response was invalid')
@@ -303,6 +339,13 @@ describe('resumeAiVaultSessionInTerminal', () => {
   it('throws when terminal send fails or is locked', async () => {
     const failedSend = vi
       .fn()
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
       .mockResolvedValueOnce({
         ok: true,
         result: { tab: { type: 'terminal', id: 'tab-1', terminal: 'pty-1' } }
@@ -316,6 +359,13 @@ describe('resumeAiVaultSessionInTerminal', () => {
 
     const lockedSend = vi
       .fn()
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
       .mockResolvedValueOnce({
         ok: true,
         result: { tab: { type: 'terminal', id: 'tab-1', terminal: 'pty-1' } }
@@ -327,6 +377,17 @@ describe('resumeAiVaultSessionInTerminal', () => {
       })
     ).rejects.toThrow('Terminal input is locked')
   })
+
+  it('refuses an old host before creating a resume terminal', async () => {
+    const sendRequest = vi
+      .fn()
+      .mockResolvedValueOnce({ ok: true, result: { appVersion: '1.4.89' } })
+
+    await expect(
+      resumeAiVaultSessionInTerminal({ sendRequest }, 'worktree-1', { command: 'command' })
+    ).rejects.toThrow('Update the host and try again')
+    expect(sendRequest).toHaveBeenCalledTimes(1)
+  })
 })
 
 describe('createMobileAiVaultResumeMutationRegistry', () => {
diff --git a/mobile/src/session/ai-vault-resume-launch.ts b/mobile/src/session/ai-vault-resume-launch.ts
index aa8c1bf98a6..6975b6f355d 100644
--- a/mobile/src/session/ai-vault-resume-launch.ts
+++ b/mobile/src/session/ai-vault-resume-launch.ts
@@ -16,6 +16,10 @@ import { normalizeAiVaultResumeFilePath } from '../../../src/shared/ai-vault-res
 import type { TuiAgent } from '../../../src/shared/types'
 import { parseWslUncPath } from '../../../src/shared/wsl-paths'
 import { resolveWindowsShellStartupFamily } from '../../../src/shared/windows-terminal-shell'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../src/shared/legacy-terminal-attribution-env'
 import type { RpcClient } from '../transport/rpc-client'
 import {
   readMobileReviewCreatedTerminal,
@@ -23,6 +27,7 @@ import {
   type MobileReviewTerminalTab
 } from './mobile-diff-review-rpc'
 import type { MobileAiVaultResumeTargetStatus } from '../agent-history/agent-history-resume-target'
+import { assertMobileTerminalAttributionDisableSupported } from './mobile-terminal-attribution-compat'
 
 const NODE_PLATFORMS = new Set<NodeJS.Platform>([
   'aix',
@@ -169,12 +174,13 @@ export async function resumeAiVaultSessionInTerminal(
   worktreeId: string,
   launch: MobileAiVaultResumeLaunch & { clientMutationId?: string }
 ): Promise<MobileReviewTerminalTab> {
+  const authority = await assertMobileTerminalAttributionDisableSupported(client)
   const created = await client.sendRequest(
     'session.tabs.createTerminal',
     {
       worktree: `id:${worktreeId}`,
-      ...(launch.env ? { env: launch.env } : {}),
-      ...(launch.envToDelete ? { envToDelete: launch.envToDelete } : {}),
+      env: withLegacyTerminalAttributionDisabledEnv(launch.env),
+      envToDelete: addLegacyTerminalAttributionDisableRequest(launch.envToDelete),
       ...(launch.launchConfig ? { launchConfig: launch.launchConfig } : {}),
       ...(launch.launchAgent ? { launchAgent: launch.launchAgent } : {}),
       ...(launch.clientMutationId ? { clientMutationId: launch.clientMutationId } : {}),
@@ -182,7 +188,11 @@ export async function resumeAiVaultSessionInTerminal(
       select: true,
       navigation: 'caller'
     },
-    { timeoutMs: RESUME_RPC_TIMEOUT_MS }
+    {
+      timeoutMs: RESUME_RPC_TIMEOUT_MS,
+      budgetSpansConnect: true,
+      expectedRuntimeId: authority.runtimeId
+    }
   )
   if (!created.ok) {
     throw new Error(created.error?.message || 'Failed to create terminal')
diff --git a/mobile/src/session/ai-vault-resume-preparation.test.ts b/mobile/src/session/ai-vault-resume-preparation.test.ts
index a0eed5515c6..3e64a06a0f8 100644
--- a/mobile/src/session/ai-vault-resume-preparation.test.ts
+++ b/mobile/src/session/ai-vault-resume-preparation.test.ts
@@ -53,6 +53,14 @@ describe('prepareMobileAiVaultSessionResume', () => {
     const sendRequest = vi
       .fn()
       .mockResolvedValueOnce({ ok: false, error })
+      .mockResolvedValueOnce({
+        ok: true,
+        result: {
+          runtimeId: 'runtime-1',
+          appVersion: '1.4.90',
+          capabilities: ['terminal.attribution-removed.v1']
+        }
+      })
       .mockResolvedValueOnce({
         ok: true,
         result: { tab: { type: 'terminal', id: 'tab-1', terminal: 'pty-1', title: 'Terminal' } }
@@ -64,9 +72,12 @@ describe('prepareMobileAiVaultSessionResume', () => {
     await resumeAiVaultSessionInTerminal({ sendRequest }, 'worktree-1', launch)
 
     expect(prepared).toBe(legacy)
-    expect(sendRequest.mock.calls[1]?.[1]).not.toHaveProperty('envToDelete')
+    expect(sendRequest.mock.calls[2]?.[1]).toMatchObject({
+      env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+      envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION']
+    })
     expect(sendRequest).toHaveBeenNthCalledWith(
-      3,
+      4,
       'terminal.send',
       {
         terminal: 'pty-1',
diff --git a/mobile/src/session/mobile-diff-review-screen-model.ts b/mobile/src/session/mobile-diff-review-screen-model.ts
index 3dcaed35716..f8f1ceedf99 100644
--- a/mobile/src/session/mobile-diff-review-screen-model.ts
+++ b/mobile/src/session/mobile-diff-review-screen-model.ts
@@ -100,7 +100,7 @@ export function nextReviewIndexAfterMarkReviewed({
   const wrappedIndex = filteredQueue.findIndex(
     (item) => item.key !== currentItemKey && !item.isReviewed
   )
-  const targetIndex = nextIndex >= 0 ? nextIndex : wrappedIndex >= 0 ? wrappedIndex : null
+  const targetIndex = nextIndex !== -1 ? nextIndex : wrappedIndex !== -1 ? wrappedIndex : null
   if (targetIndex === null) {
     return null
   }
diff --git a/mobile/src/session/mobile-file-tap-open.ts b/mobile/src/session/mobile-file-tap-open.ts
index 627d9a5ff39..13c306af649 100644
--- a/mobile/src/session/mobile-file-tap-open.ts
+++ b/mobile/src/session/mobile-file-tap-open.ts
@@ -1,5 +1,6 @@
 import type {
   RuntimeFileOpenResult,
+  RuntimeNativeChatFileContext,
   RuntimeTerminalPathResolution
 } from '../../../src/shared/runtime-types'
 import { filesystemPathToFileUri } from '../../../src/shared/file-uri-path'
@@ -22,6 +23,7 @@ export type OpenMobileFileTapOptions<T extends FileTapSessionTab> = {
   terminalHandle?: string | null
   pathText: string
   cwd?: string | null
+  nativeChatContext?: RuntimeNativeChatFileContext | null
   line: number | null
   column: number | null
   pushPreviewRoute: (href: ReturnType<typeof createMobileFilePreviewHref>) => void
@@ -80,7 +82,8 @@ async function openMobileFileTapAsync<T extends FileTapSessionTab>(
       ...(options.terminalHandle && options.terminalHandle.trim().length > 0
         ? { terminal: options.terminalHandle }
         : {}),
-      ...(options.cwd && options.cwd.trim().length > 0 ? { cwd: options.cwd } : {})
+      ...(options.cwd && options.cwd.trim().length > 0 ? { cwd: options.cwd } : {}),
+      ...(options.nativeChatContext ? { nativeChatContext: options.nativeChatContext } : {})
     },
     { timeoutMs: 10_000 }
   )
@@ -116,6 +119,12 @@ async function openMobileFileTapAsync<T extends FileTapSessionTab>(
         ...(options.terminalHandle && options.terminalHandle.trim().length > 0
           ? { terminal: options.terminalHandle }
           : {}),
+        ...(options.nativeChatContext
+          ? {
+              nativeChatTab: options.nativeChatContext.tabId,
+              nativeChatSession: options.nativeChatContext.sessionId
+            }
+          : {}),
         name: displayNameFromPath(resolved.openTarget.absolutePath),
         ...(options.line !== null ? { line: String(options.line) } : {}),
         ...(options.column !== null ? { column: String(options.column) } : {}),
diff --git a/mobile/src/session/mobile-native-chat-draft-reconcile.ts b/mobile/src/session/mobile-native-chat-draft-reconcile.ts
index 360fd22587b..a6f599b7458 100644
--- a/mobile/src/session/mobile-native-chat-draft-reconcile.ts
+++ b/mobile/src/session/mobile-native-chat-draft-reconcile.ts
@@ -87,7 +87,7 @@ export function mergeLandedImagePreviewEchoes(
   const entries = Object.entries(previous[sessionKey] ?? {})
   for (const preview of landed) {
     const existingIndex = entries.findIndex(([messageId]) => messageId === preview.messageId)
-    if (existingIndex >= 0) {
+    if (existingIndex !== -1) {
       entries.splice(existingIndex, 1)
     }
     entries.push([preview.messageId, preview.images])
diff --git a/mobile/src/session/mobile-native-chat-open-file.test.ts b/mobile/src/session/mobile-native-chat-open-file.test.ts
index d44530e5cd0..bef222721ac 100644
--- a/mobile/src/session/mobile-native-chat-open-file.test.ts
+++ b/mobile/src/session/mobile-native-chat-open-file.test.ts
@@ -65,6 +65,54 @@ describe('openMobileNativeChatFileTap', () => {
     )
   })
 
+  it('carries the native-chat session identity into resolution and grant refresh', async () => {
+    const sendRequest = vi.fn(async () =>
+      ok({
+        worktree: 'wt-1',
+        relativePath: null,
+        absolutePath: '/Users/ada/orca-plans/result.html',
+        exists: true,
+        isDirectory: false,
+        openTarget: {
+          kind: 'absolute-file',
+          provider: 'local',
+          absolutePath: '/Users/ada/orca-plans/result.html',
+          grantId: 'grant-1',
+          readOnly: true
+        }
+      })
+    )
+    const options = baseOptions({ sendRequest })
+
+    openMobileNativeChatFileTap({
+      ...options,
+      pathText: '~/orca-plans/result.html',
+      nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' }
+    })
+    await Promise.resolve()
+
+    expect(sendRequest).toHaveBeenCalledWith(
+      'files.resolveTerminalPath',
+      {
+        worktree: 'id:wt-1',
+        pathText: '~/orca-plans/result.html',
+        crossWorkspace: true,
+        nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' }
+      },
+      { timeoutMs: 10_000 }
+    )
+    expect(options.pushPreviewRoute).toHaveBeenCalledWith({
+      pathname: '/h/[hostId]/files/preview/[worktreeId]',
+      params: expect.objectContaining({
+        source: 'terminalArtifact',
+        absolutePath: '/Users/ada/orca-plans/result.html',
+        grantId: 'grant-1',
+        nativeChatTab: 'tab-1',
+        nativeChatSession: 'session-1'
+      })
+    })
+  })
+
   it('parses a :line:col citation and opens the mobile preview route', async () => {
     const sendRequest = vi.fn(async () => worktreeFileResolution('src/app.ts'))
     const options = baseOptions({ sendRequest })
diff --git a/mobile/src/session/mobile-native-chat-terminal-stream.test.ts b/mobile/src/session/mobile-native-chat-terminal-stream.test.ts
index df860efc6b1..99c4c47cbcd 100644
--- a/mobile/src/session/mobile-native-chat-terminal-stream.test.ts
+++ b/mobile/src/session/mobile-native-chat-terminal-stream.test.ts
@@ -12,6 +12,7 @@ const base = {
   activeTabType: 'terminal',
   streamActive: true,
   streamCovered: false,
+  streamIsLeaseOnly: false,
   webViewReady: true
 }
 
@@ -93,8 +94,40 @@ describe('mobile native-chat terminal stream lifecycle', () => {
     ).toBe('rearm')
   })
 
+  it('resumes an uncovered handle still holding a lease-only stream', () => {
+    // Leaving a chat tab for a terminal tab subscribes the incoming handle before the
+    // route learns chat is gone, so the terminal streams nothing but its input lease.
+    expect(resolveMobileNativeChatTerminalStreamAction({ ...base, streamIsLeaseOnly: true })).toBe(
+      'resume'
+    )
+    // Same wait the other resume paths take — never init a WebView that cannot receive it.
+    expect(
+      resolveMobileNativeChatTerminalStreamAction({
+        ...base,
+        streamIsLeaseOnly: true,
+        webViewReady: false
+      })
+    ).toBe('none')
+  })
+
+  it('leaves a lease-only stream alone while chat still covers it (#10681)', () => {
+    // Lease-only is the correct shape under chat; trading it for output here would
+    // drop the input floor the composer depends on.
+    expect(
+      resolveMobileNativeChatTerminalStreamAction({
+        ...base,
+        showNativeChat: true,
+        streamCovered: true,
+        streamIsLeaseOnly: true
+      })
+    ).toBe('none')
+  })
+
   it('does nothing for non-terminal tabs, missing handles, or settled states', () => {
-    expect(resolveMobileNativeChatTerminalStreamAction(base)).toBe('none')
+    // A full stream on an uncovered handle is the one genuinely settled shape.
+    expect(resolveMobileNativeChatTerminalStreamAction({ ...base, streamIsLeaseOnly: false })).toBe(
+      'none'
+    )
     expect(
       resolveMobileNativeChatTerminalStreamAction({
         ...base,
diff --git a/mobile/src/session/mobile-native-chat-terminal-stream.ts b/mobile/src/session/mobile-native-chat-terminal-stream.ts
index b9b58448113..9d2727f2c30 100644
--- a/mobile/src/session/mobile-native-chat-terminal-stream.ts
+++ b/mobile/src/session/mobile-native-chat-terminal-stream.ts
@@ -8,6 +8,10 @@ export function resolveMobileNativeChatTerminalStreamAction(args: {
   activeTabType: string | null
   streamActive: boolean
   streamCovered: boolean
+  /** The active stream was opened as an input lease, so the host sends `subscribed`
+   *  and nothing else — no scrollback, no data. Distinguishes a stream that renders
+   *  from one that only holds the input floor. */
+  streamIsLeaseOnly: boolean
   webViewReady: boolean
 }): MobileNativeChatTerminalStreamAction {
   if (!args.activeHandle || args.activeTabType !== 'terminal') {
@@ -22,7 +26,13 @@ export function resolveMobileNativeChatTerminalStreamAction(args: {
     // the composer locked forever — nothing else re-subscribes a covered handle.
     return args.streamActive ? 'none' : 'rearm'
   }
-  return (args.streamCovered || !args.streamActive) && args.webViewReady ? 'resume' : 'none'
+  // Why `streamIsLeaseOnly`: switching from a chat tab to a terminal tab subscribes the
+  // incoming handle before the route learns chat is gone, so it lands a lease-only stream
+  // on an uncovered handle. Without this input that is indistinguishable from a healthy
+  // stream and the terminal renders blank until restart.
+  return (args.streamCovered || args.streamIsLeaseOnly || !args.streamActive) && args.webViewReady
+    ? 'resume'
+    : 'none'
 }
 
 export function isTerminalCoveredByNativeChat(
diff --git a/mobile/src/session/mobile-terminal-attribution-compat.test.ts b/mobile/src/session/mobile-terminal-attribution-compat.test.ts
new file mode 100644
index 00000000000..9f0ebf873bd
--- /dev/null
+++ b/mobile/src/session/mobile-terminal-attribution-compat.test.ts
@@ -0,0 +1,81 @@
+import { describe, expect, it, vi } from 'vitest'
+import { MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE } from '../../../src/shared/legacy-terminal-attribution-env'
+import { assertMobileTerminalAttributionDisableSupported } from './mobile-terminal-attribution-compat'
+
+function status(result: unknown) {
+  return {
+    id: 'status',
+    ok: true as const,
+    result: { runtimeId: 'runtime', ...(result as object) },
+    _meta: { runtimeId: 'runtime' }
+  }
+}
+
+describe('mobile terminal attribution compatibility', () => {
+  it('refuses hosts before terminal creation environment forwarding', async () => {
+    const sendRequest = vi.fn().mockResolvedValue(
+      status({
+        capabilities: [
+          'runtime.status.compat.v1',
+          'runtime.environments.v1',
+          'mobile.tasks.v1',
+          'workspace-run-context.v1'
+        ]
+      })
+    )
+
+    await expect(assertMobileTerminalAttributionDisableSupported({ sendRequest })).rejects.toThrow(
+      MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+    )
+    expect(sendRequest).toHaveBeenCalledWith('status.get', undefined, {
+      timeoutMs: 30_000,
+      budgetSpansConnect: true
+    })
+  })
+
+  it('rejects historical hosts without explicit removal capability', async () => {
+    const sendRequest = vi.fn().mockResolvedValue(status({ appVersion: '1.4.90' }))
+
+    await expect(assertMobileTerminalAttributionDisableSupported({ sendRequest })).rejects.toThrow(
+      MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+    )
+  })
+
+  it('accepts capability-proven current development hosts', async () => {
+    const sendRequest = vi
+      .fn()
+      .mockResolvedValue(
+        status({ appVersion: '0.0.0-dev', capabilities: ['terminal.attribution-removed.v1'] })
+      )
+
+    await expect(assertMobileTerminalAttributionDisableSupported({ sendRequest })).resolves.toEqual(
+      { runtimeId: 'runtime' }
+    )
+  })
+
+  it('fails closed when host status cannot be verified', async () => {
+    const sendRequest = vi.fn().mockResolvedValue({
+      id: 'status',
+      ok: false,
+      error: { code: 'offline', message: 'Host is offline' },
+      _meta: { runtimeId: 'runtime' }
+    })
+
+    await expect(assertMobileTerminalAttributionDisableSupported({ sendRequest })).rejects.toThrow(
+      'Host is offline'
+    )
+  })
+
+  it('fails closed with an actionable error for malformed host status', async () => {
+    const sendRequest = vi.fn().mockResolvedValue(
+      status({
+        appVersion: 1.49,
+        capabilities: 'terminal.attribution-removed.v1'
+      })
+    )
+
+    await expect(assertMobileTerminalAttributionDisableSupported({ sendRequest })).rejects.toThrow(
+      'Update the host and try again'
+    )
+  })
+})
diff --git a/mobile/src/session/mobile-terminal-attribution-compat.ts b/mobile/src/session/mobile-terminal-attribution-compat.ts
new file mode 100644
index 00000000000..ceb2d3f694e
--- /dev/null
+++ b/mobile/src/session/mobile-terminal-attribution-compat.ts
@@ -0,0 +1,34 @@
+import {
+  hostSupportsSessionTabTerminalCreateAttributionDisable,
+  MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+} from '../../../src/shared/legacy-terminal-attribution-env'
+import type { RpcClient } from '../transport/rpc-client'
+
+export const MOBILE_TERMINAL_CREATE_RPC_TIMEOUT_MS = 30_000
+export const MOBILE_TERMINAL_CREATE_RPC_OPTIONS = {
+  timeoutMs: MOBILE_TERMINAL_CREATE_RPC_TIMEOUT_MS,
+  budgetSpansConnect: true
+} as const
+
+export type MobileTerminalAttributionAuthority = Readonly<{ runtimeId: string }>
+
+export async function assertMobileTerminalAttributionDisableSupported(
+  client: Pick<RpcClient, 'sendRequest'>
+): Promise<MobileTerminalAttributionAuthority> {
+  const response = await client.sendRequest(
+    'status.get',
+    undefined,
+    MOBILE_TERMINAL_CREATE_RPC_OPTIONS
+  )
+  if (!response.ok) {
+    throw new Error(response.error?.message || 'Unable to verify the workspace host version.')
+  }
+  if (!hostSupportsSessionTabTerminalCreateAttributionDisable(response.result)) {
+    throw new Error(MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE)
+  }
+  const runtimeId = Reflect.get(response.result as object, 'runtimeId')
+  if (typeof runtimeId !== 'string' || !runtimeId) {
+    throw new Error(MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE)
+  }
+  return Object.freeze({ runtimeId })
+}
diff --git a/mobile/src/session/pr-ai-triage-launch.test.ts b/mobile/src/session/pr-ai-triage-launch.test.ts
index c2273c9046e..fe9271f5e4d 100644
--- a/mobile/src/session/pr-ai-triage-launch.test.ts
+++ b/mobile/src/session/pr-ai-triage-launch.test.ts
@@ -12,6 +12,10 @@ function failure(message: string): RpcResponse {
 
 const createdTerminal = success({ tab: { type: 'terminal', id: 't1', terminal: 'term-1' } })
 const sendAccepted = success({ send: { accepted: true } })
+const safeHost = success({
+  runtimeId: 'r',
+  capabilities: ['terminal.attribution-removed.v1']
+})
 
 function clientReturning(...responses: RpcResponse[]) {
   const sendRequest = vi.fn(async () => responses[sendRequest.mock.calls.length - 1])
@@ -20,16 +24,27 @@ function clientReturning(...responses: RpcResponse[]) {
 
 describe('createTerminalAndSendPrompt', () => {
   it('creates a terminal then sends the prompt with enter', async () => {
-    const client = clientReturning(createdTerminal, sendAccepted)
+    const client = clientReturning(safeHost, createdTerminal, sendAccepted)
     await createTerminalAndSendPrompt(client, 'wt-1', 'do the thing')
 
-    expect(client.sendRequest).toHaveBeenNthCalledWith(1, 'session.tabs.createTerminal', {
-      worktree: 'id:wt-1',
-      activate: false,
-      select: true,
-      navigation: 'caller'
+    expect(client.sendRequest).toHaveBeenNthCalledWith(1, 'status.get', undefined, {
+      timeoutMs: 30_000,
+      budgetSpansConnect: true
     })
-    expect(client.sendRequest).toHaveBeenNthCalledWith(2, 'terminal.send', {
+    expect(client.sendRequest).toHaveBeenNthCalledWith(
+      2,
+      'session.tabs.createTerminal',
+      {
+        worktree: 'id:wt-1',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        activate: false,
+        select: true,
+        navigation: 'caller'
+      },
+      { timeoutMs: 30_000, budgetSpansConnect: true, expectedRuntimeId: 'r' }
+    )
+    expect(client.sendRequest).toHaveBeenNthCalledWith(3, 'terminal.send', {
       terminal: 'term-1',
       text: 'do the thing',
       enter: true
@@ -37,28 +52,41 @@ describe('createTerminalAndSendPrompt', () => {
   })
 
   it('throws and skips terminal.send when createTerminal fails', async () => {
-    const client = clientReturning(failure('boom'))
+    const client = clientReturning(safeHost, failure('boom'))
     await expect(createTerminalAndSendPrompt(client, 'wt-1', 'p')).rejects.toThrow('boom')
-    expect(client.sendRequest).toHaveBeenCalledTimes(1)
+    expect(client.sendRequest).toHaveBeenCalledTimes(2)
   })
 
   it('throws when the created-terminal response is malformed', async () => {
-    const client = clientReturning(success({ tab: { type: 'terminal' } }))
+    const client = clientReturning(safeHost, success({ tab: { type: 'terminal' } }))
     await expect(createTerminalAndSendPrompt(client, 'wt-1', 'p')).rejects.toThrow(
       'Created terminal response was invalid'
     )
-    expect(client.sendRequest).toHaveBeenCalledTimes(1)
+    expect(client.sendRequest).toHaveBeenCalledTimes(2)
   })
 
   it('throws when terminal.send returns a failure', async () => {
-    const client = clientReturning(createdTerminal, failure('send failed'))
+    const client = clientReturning(safeHost, createdTerminal, failure('send failed'))
     await expect(createTerminalAndSendPrompt(client, 'wt-1', 'p')).rejects.toThrow('send failed')
   })
 
   it('throws when terminal input is locked', async () => {
-    const client = clientReturning(createdTerminal, success({ send: { accepted: false } }))
+    const client = clientReturning(
+      safeHost,
+      createdTerminal,
+      success({ send: { accepted: false } })
+    )
     await expect(createTerminalAndSendPrompt(client, 'wt-1', 'p')).rejects.toThrow(
       'Terminal input is locked'
     )
   })
+
+  it('refuses an old host before terminal creation', async () => {
+    const client = clientReturning(success({ appVersion: '1.4.89' }))
+
+    await expect(createTerminalAndSendPrompt(client, 'wt-1', 'p')).rejects.toThrow(
+      'Update the host and try again'
+    )
+    expect(client.sendRequest).toHaveBeenCalledTimes(1)
+  })
 })
diff --git a/mobile/src/session/pr-ai-triage-launch.ts b/mobile/src/session/pr-ai-triage-launch.ts
index 6d6c0bbc8b2..1f764be1789 100644
--- a/mobile/src/session/pr-ai-triage-launch.ts
+++ b/mobile/src/session/pr-ai-triage-launch.ts
@@ -3,6 +3,14 @@ import {
   readMobileReviewCreatedTerminal,
   readMobileReviewTerminalSendAccepted
 } from './mobile-diff-review-rpc'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../src/shared/legacy-terminal-attribution-env'
+import {
+  assertMobileTerminalAttributionDisableSupported,
+  MOBILE_TERMINAL_CREATE_RPC_OPTIONS
+} from './mobile-terminal-attribution-compat'
 
 // Pure launch path for the PR triage actions ("Fix checks with AI" / "Resolve
 // conflicts with AI"). Reuses the same two RPCs the diff-review send flow uses —
@@ -15,12 +23,19 @@ export async function createTerminalAndSendPrompt(
   worktreeId: string,
   prompt: string
 ): Promise<void> {
-  const created = await client.sendRequest('session.tabs.createTerminal', {
-    worktree: `id:${worktreeId}`,
-    activate: false,
-    select: true,
-    navigation: 'caller'
-  })
+  const authority = await assertMobileTerminalAttributionDisableSupported(client)
+  const created = await client.sendRequest(
+    'session.tabs.createTerminal',
+    {
+      worktree: `id:${worktreeId}`,
+      env: withLegacyTerminalAttributionDisabledEnv(undefined),
+      envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
+      activate: false,
+      select: true,
+      navigation: 'caller'
+    },
+    { ...MOBILE_TERMINAL_CREATE_RPC_OPTIONS, expectedRuntimeId: authority.runtimeId }
+  )
   if (!created.ok) {
     throw new Error(created.error?.message || 'Failed to create terminal')
   }
diff --git a/mobile/src/session/use-mobile-diff-review-send-actions.test.ts b/mobile/src/session/use-mobile-diff-review-send-actions.test.ts
index 1d06190948c..9ae2749412b 100644
--- a/mobile/src/session/use-mobile-diff-review-send-actions.test.ts
+++ b/mobile/src/session/use-mobile-diff-review-send-actions.test.ts
@@ -163,6 +163,74 @@ describe('useMobileDiffReviewSendActions', () => {
     expect(setSendSheet).toHaveBeenCalledWith(null)
   })
 
+  it('creates an unattributed terminal before sending review notes', async () => {
+    const sendRequest = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'status',
+        ok: true,
+        result: {
+          runtimeId: 'runtime',
+          capabilities: ['terminal.attribution-removed.v1']
+        },
+        _meta: { runtimeId: 'runtime' }
+      })
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { tab: { type: 'terminal', id: 'tab-1', terminal: 'terminal-1' } },
+        _meta: { runtimeId: 'runtime' }
+      })
+      .mockResolvedValueOnce(sendResponse(true))
+    await mount({ sendRequest } as unknown as RpcClient)
+
+    await act(async () => {
+      await actions?.createTerminalAndSend([COMMENT])
+    })
+
+    expect(sendRequest).toHaveBeenNthCalledWith(1, 'status.get', undefined, {
+      timeoutMs: 30_000,
+      budgetSpansConnect: true
+    })
+    expect(sendRequest).toHaveBeenNthCalledWith(
+      2,
+      'session.tabs.createTerminal',
+      {
+        worktree: 'id:wt-1',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        activate: false,
+        select: true,
+        navigation: 'caller'
+      },
+      { timeoutMs: 30_000, budgetSpansConnect: true, expectedRuntimeId: 'runtime' }
+    )
+    expect(sendRequest).toHaveBeenNthCalledWith(
+      3,
+      'terminal.send',
+      expect.objectContaining({ terminal: 'terminal-1', enter: true })
+    )
+  })
+
+  it('refuses to create review terminals on hosts that strip the bypass', async () => {
+    const sendRequest = vi.fn().mockResolvedValue({
+      id: 'status',
+      ok: true,
+      result: { appVersion: '1.4.89' },
+      _meta: { runtimeId: 'runtime' }
+    })
+    await mount({ sendRequest } as unknown as RpcClient)
+
+    let error: unknown
+    await act(async () => {
+      error = await actions?.createTerminalAndSend([COMMENT]).catch((err) => err)
+    })
+
+    expect((error as Error).message).toContain('Update the host and try again')
+    expect(sendRequest).toHaveBeenCalledTimes(1)
+    expect(sendRequest).not.toHaveBeenCalledWith('terminal.send', expect.anything())
+  })
+
   it('only heals the terminal that was marked', async () => {
     const sendRequest = vi.fn().mockResolvedValue(sendResponse(true))
     await mount({ sendRequest } as unknown as RpcClient)
diff --git a/mobile/src/session/use-mobile-diff-review-send-actions.ts b/mobile/src/session/use-mobile-diff-review-send-actions.ts
index 0867a3884b3..266caaf6879 100644
--- a/mobile/src/session/use-mobile-diff-review-send-actions.ts
+++ b/mobile/src/session/use-mobile-diff-review-send-actions.ts
@@ -13,6 +13,14 @@ import {
 } from './mobile-diff-review-rpc'
 import { healMobileNativeChatStaleInput } from './mobile-native-chat-stale-input'
 import type { ReviewScreenState, SendSheetState } from './mobile-diff-review-screen-model'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../src/shared/legacy-terminal-attribution-env'
+import {
+  assertMobileTerminalAttributionDisableSupported,
+  MOBILE_TERMINAL_CREATE_RPC_OPTIONS
+} from './mobile-terminal-attribution-compat'
 
 type SendActionsInput = {
   client: RpcClient | null
@@ -104,12 +112,19 @@ export function useMobileDiffReviewSendActions(input: SendActionsInput) {
       if (!client || connState !== 'connected') {
         throw new Error('Waiting for desktop...')
       }
-      const response = await client.sendRequest('session.tabs.createTerminal', {
-        worktree: `id:${worktreeId}`,
-        activate: false,
-        select: true,
-        navigation: 'caller'
-      })
+      const authority = await assertMobileTerminalAttributionDisableSupported(client)
+      const response = await client.sendRequest(
+        'session.tabs.createTerminal',
+        {
+          worktree: `id:${worktreeId}`,
+          env: withLegacyTerminalAttributionDisabledEnv(undefined),
+          envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
+          activate: false,
+          select: true,
+          navigation: 'caller'
+        },
+        { ...MOBILE_TERMINAL_CREATE_RPC_OPTIONS, expectedRuntimeId: authority.runtimeId }
+      )
       if (!response.ok) {
         throw new Error(response.error?.message || 'Failed to create terminal')
       }
diff --git a/mobile/src/session/use-mobile-file-tap-handlers.test.ts b/mobile/src/session/use-mobile-file-tap-handlers.test.ts
index 0cfa617f269..21f07562459 100644
--- a/mobile/src/session/use-mobile-file-tap-handlers.test.ts
+++ b/mobile/src/session/use-mobile-file-tap-handlers.test.ts
@@ -34,12 +34,13 @@ describe('useMobileFileTapHandlers', () => {
       hostId: 'host-1',
       worktreeId: 'wt-1',
       worktreeName: 'Orca',
+      nativeChatSessionId: 'session-1',
       activeHandleRef: { current: 'terminal-1' as string | null },
       terminalCwdRef: { current: new Map([['terminal-1', '/repo/sub']]) },
       openBrowser: vi.fn(),
       fetchSessionTabs: vi.fn(async () => {}),
       getSessionTabs: () => [],
-      getActiveSessionTabId: () => null,
+      getActiveSessionTabId: () => 'terminal-tab',
       getActiveSessionTabType: () => 'terminal',
       switchSessionTab: vi.fn(),
       scheduleDelayedAction: vi.fn(),
@@ -131,7 +132,12 @@ describe('useMobileFileTapHandlers', () => {
 
     expect(sendRequest).toHaveBeenCalledWith(
       'files.resolveTerminalPath',
-      { worktree: 'id:wt-1', pathText: 'mobile/src/x.ts', crossWorkspace: true },
+      {
+        worktree: 'id:wt-1',
+        pathText: 'mobile/src/x.ts',
+        crossWorkspace: true,
+        nativeChatContext: { tabId: 'terminal-tab', sessionId: 'session-1' }
+      },
       { timeoutMs: 10_000 }
     )
     expect(options.reportChatTapFailure).toHaveBeenCalledWith("Couldn't open mobile/src/x.ts:12")
diff --git a/mobile/src/session/use-mobile-file-tap-handlers.ts b/mobile/src/session/use-mobile-file-tap-handlers.ts
index 276be5b566f..67995115f45 100644
--- a/mobile/src/session/use-mobile-file-tap-handlers.ts
+++ b/mobile/src/session/use-mobile-file-tap-handlers.ts
@@ -10,6 +10,7 @@ type MobileFileTapHandlerOptions<T extends FileTapSessionTab> = {
   hostId: string
   worktreeId: string
   worktreeName?: string
+  nativeChatSessionId: string | null
   activeHandleRef: MutableRefObject<string | null>
   terminalCwdRef: MutableRefObject<Map<string, string>>
   openBrowser: (url: string) => void
@@ -48,6 +49,7 @@ export function useMobileFileTapHandlers<T extends FileTapSessionTab>(
     getActiveSessionTabType,
     getSessionTabs,
     hostId,
+    nativeChatSessionId,
     openBrowser,
     scheduleDelayedAction,
     reportChatTapFailure,
@@ -71,6 +73,7 @@ export function useMobileFileTapHandlers<T extends FileTapSessionTab>(
       getActiveSessionTabType,
       getSessionTabs,
       hostId,
+      nativeChatSessionId,
       openBrowser,
       scheduleDelayedAction,
       reportChatTapFailure,
@@ -87,6 +90,7 @@ export function useMobileFileTapHandlers<T extends FileTapSessionTab>(
     getActiveSessionTabType,
     getSessionTabs,
     hostId,
+    nativeChatSessionId,
     openBrowser,
     router,
     scheduleDelayedAction,
@@ -144,12 +148,18 @@ export function useMobileFileTapHandlers<T extends FileTapSessionTab>(
       return
     }
     const activationSeq = ++activationSeqRef.current
+    const nativeChatSessionId = current.nativeChatSessionId
+    const nativeChatTabId = current.getActiveSessionTabId()
     openMobileNativeChatFileTap<T>({
       client: current.client,
       hostId: current.hostId,
       worktreeId: current.worktreeId,
       worktreeName: current.worktreeName,
       pathText,
+      nativeChatContext:
+        nativeChatSessionId && nativeChatTabId
+          ? { tabId: nativeChatTabId, sessionId: nativeChatSessionId }
+          : null,
       pushPreviewRoute: (href) => routerRef.current.push(href),
       openBrowser: current.openBrowser,
       triggerOpenFeedback: triggerSelection,
diff --git a/mobile/src/session/use-mobile-native-chat-terminal-stream.test.ts b/mobile/src/session/use-mobile-native-chat-terminal-stream.test.ts
index ce282fcd5b1..47b3d982095 100644
--- a/mobile/src/session/use-mobile-native-chat-terminal-stream.test.ts
+++ b/mobile/src/session/use-mobile-native-chat-terminal-stream.test.ts
@@ -8,10 +8,25 @@ describe('useMobileNativeChatTerminalStream', () => {
   let harnessRenderCount = 0
   const subscriptionsRef = { current: new Map<string, () => void>() }
   const subscribingRef = { current: new Set<string>() }
+  const leaseOnlyRef = { current: new Set<string>() }
   const webReadyRef = { current: new Set(['terminal-1']) }
   const initializedRef = { current: new Set(['terminal-1']) }
-  const subscribe = vi.fn((handle: string) => subscriptionsRef.current.set(handle, () => {}))
-  const unsubscribe = vi.fn((handle: string) => subscriptionsRef.current.delete(handle))
+  /** Mirrors the route's subscribe-time coverage guess, which is what decides whether
+   *  the host opens a lease-only stream or a streaming one. */
+  let subscribeOpensLeaseOnly = false
+  const registerSubscription = (handle: string): void => {
+    subscriptionsRef.current.set(handle, () => {})
+    if (subscribeOpensLeaseOnly) {
+      leaseOnlyRef.current.add(handle)
+    } else {
+      leaseOnlyRef.current.delete(handle)
+    }
+  }
+  const subscribe = vi.fn(registerSubscription)
+  const unsubscribe = vi.fn((handle: string) => {
+    subscriptionsRef.current.delete(handle)
+    leaseOnlyRef.current.delete(handle)
+  })
   const notifyWebReadyRef = { current: (_handle: string, _wasAlreadyReady: boolean): void => {} }
   const notifyListedHandlesRef = { current: (_liveHandles: ReadonlySet<string>): void => {} }
   const hasTabsRecoveryNeedRef = { current: (): boolean => false }
@@ -19,6 +34,8 @@ describe('useMobileNativeChatTerminalStream', () => {
   beforeEach(() => {
     subscriptionsRef.current = new Map([['terminal-1', () => {}]])
     subscribingRef.current = new Set()
+    leaseOnlyRef.current = new Set()
+    subscribeOpensLeaseOnly = false
     webReadyRef.current = new Set(['terminal-1'])
     initializedRef.current = new Set(['terminal-1'])
     harnessRenderCount = 0
@@ -51,6 +68,7 @@ describe('useMobileNativeChatTerminalStream', () => {
       streamRevision,
       subscriptionsRef,
       subscribingRef,
+      leaseOnlyRef,
       webReadyRef,
       initializedRef,
       subscribe,
@@ -107,6 +125,111 @@ describe('useMobileNativeChatTerminalStream', () => {
     expect(subscribe).toHaveBeenNthCalledWith(2, 'terminal-1')
   })
 
+  /** What switchTab does synchronously on the tap, before the route re-renders: the
+   *  coverage it reads still describes the chat tab being left, so the incoming
+   *  terminal gets a lease-only subscribe — the shape that renders nothing. */
+  function handOffToTerminalTwo(): void {
+    subscribeOpensLeaseOnly = true
+    subscribe('terminal-2')
+    subscribeOpensLeaseOnly = false
+    subscribe.mockClear()
+    unsubscribe.mockClear()
+  }
+
+  it('trades a lease-only stream for output when a chat tab hands off to a terminal tab', async () => {
+    webReadyRef.current.add('terminal-2')
+    initializedRef.current.add('terminal-2')
+    await act(async () => {
+      renderer = create(createElement(Harness, { showNativeChat: true }))
+    })
+    handOffToTerminalTwo()
+
+    await act(async () => {
+      renderer?.update(
+        createElement(Harness, { showNativeChat: false, activeHandle: 'terminal-2' })
+      )
+    })
+
+    expect(unsubscribe).toHaveBeenCalledWith('terminal-2')
+    expect(subscribe).toHaveBeenCalledWith('terminal-2')
+    expect(leaseOnlyRef.current.has('terminal-2')).toBe(false)
+    // The lease-only stream carried no scrollback, so xterm is empty — a stale
+    // initialized mark would drop the replacement snapshot and keep the tab blank.
+    expect(initializedRef.current.has('terminal-2')).toBe(false)
+  })
+
+  it('settles once a lease-only stream has been replaced by a full one', async () => {
+    webReadyRef.current.add('terminal-2')
+    await act(async () => {
+      renderer = create(createElement(Harness, { showNativeChat: true }))
+    })
+    handOffToTerminalTwo()
+    await act(async () => {
+      renderer?.update(
+        createElement(Harness, { showNativeChat: false, activeHandle: 'terminal-2' })
+      )
+    })
+    subscribe.mockClear()
+    unsubscribe.mockClear()
+
+    await act(async () => {
+      renderer?.update(
+        createElement(Harness, {
+          showNativeChat: false,
+          activeHandle: 'terminal-2',
+          streamRevision: 1
+        })
+      )
+    })
+
+    // A stream that renders is settled — resubscribing it again would be a loop.
+    expect(subscribe).not.toHaveBeenCalled()
+    expect(unsubscribe).not.toHaveBeenCalled()
+  })
+
+  it('repairs a lease-only stream once its WebView reports ready', async () => {
+    await act(async () => {
+      renderer = create(createElement(Harness, { showNativeChat: true }))
+    })
+    handOffToTerminalTwo()
+    await act(async () => {
+      renderer?.update(
+        createElement(Harness, { showNativeChat: false, activeHandle: 'terminal-2' })
+      )
+    })
+
+    // Cold WebView: the resume must wait, and the route's own web-ready path bails
+    // because the lease-only subscription already counts as live.
+    expect(subscribe).not.toHaveBeenCalled()
+
+    await act(async () => {
+      webReadyRef.current.add('terminal-2')
+      notifyWebReadyRef.current('terminal-2', false)
+    })
+
+    expect(unsubscribe).toHaveBeenCalledWith('terminal-2')
+    expect(subscribe).toHaveBeenCalledWith('terminal-2')
+  })
+
+  it('keeps a covered lease-only stream instead of trading it for output (#10681)', async () => {
+    subscribeOpensLeaseOnly = true
+    await act(async () => {
+      renderer = create(createElement(Harness, { showNativeChat: true }))
+    })
+    subscribe.mockClear()
+    unsubscribe.mockClear()
+
+    await act(async () => {
+      renderer?.update(createElement(Harness, { showNativeChat: true, streamRevision: 1 }))
+    })
+
+    // Lease-only is the correct shape under chat; swapping it for output would drop
+    // the input floor the composer holds.
+    expect(subscribe).not.toHaveBeenCalled()
+    expect(unsubscribe).not.toHaveBeenCalled()
+    expect(leaseOnlyRef.current.has('terminal-1')).toBe(true)
+  })
+
   it('re-subscribes a covered stream torn down under chat (#10681)', async () => {
     await act(async () => {
       renderer = create(createElement(Harness, { showNativeChat: true }))
@@ -174,9 +297,7 @@ describe('useMobileNativeChatTerminalStream', () => {
 
       expect(subscribe).toHaveBeenCalledTimes(5)
     } finally {
-      subscribe.mockImplementation((handle: string) =>
-        subscriptionsRef.current.set(handle, () => {})
-      )
+      subscribe.mockImplementation(registerSubscription)
     }
   })
 
diff --git a/mobile/src/session/use-mobile-native-chat-terminal-stream.ts b/mobile/src/session/use-mobile-native-chat-terminal-stream.ts
index 0f0a642a149..b5663b8dc8a 100644
--- a/mobile/src/session/use-mobile-native-chat-terminal-stream.ts
+++ b/mobile/src/session/use-mobile-native-chat-terminal-stream.ts
@@ -23,6 +23,8 @@ export function useMobileNativeChatTerminalStream(args: {
   streamRevision: number
   subscriptionsRef: MutableRefObject<Map<string, () => void>>
   subscribingRef: MutableRefObject<Set<string>>
+  /** Handles whose current subscribe went out as an input lease only. */
+  leaseOnlyRef: MutableRefObject<Set<string>>
   webReadyRef: MutableRefObject<Set<string>>
   initializedRef: MutableRefObject<Set<string>>
   subscribe: (handle: string) => void
@@ -55,13 +57,21 @@ export function useMobileNativeChatTerminalStream(args: {
       healthyStreamProofRef.current = null
     }
   }, [])
-  const notifyWebReady = useCallback((handle: string, wasAlreadyReady: boolean) => {
-    // Why: ordinary WebView startups must not rerender the large session route;
-    // only readiness that can release a native-chat lease needs reconciliation.
-    if (!wasAlreadyReady && coveredHandleRef.current === handle) {
-      setWebReadyRevision((revision) => revision + 1)
-    }
-  }, [])
+  const notifyWebReady = useCallback(
+    (handle: string, wasAlreadyReady: boolean) => {
+      // Why: ordinary WebView startups must not rerender the large session route;
+      // only readiness that can release a native-chat lease needs reconciliation.
+      // A lease-only stream counts: the route's own web-ready path bails on any live
+      // subscription, so nothing else would ever trade that lease for output.
+      if (
+        !wasAlreadyReady &&
+        (coveredHandleRef.current === handle || args.leaseOnlyRef.current.has(handle))
+      ) {
+        setWebReadyRevision((revision) => revision + 1)
+      }
+    },
+    [args.leaseOnlyRef]
+  )
   const notifyListedHandles = useCallback(
     (liveHandles: ReadonlySet<string>) => {
       // Why: the rearm budget bounds one teardown, not the handle's lifetime. A covered
@@ -106,7 +116,7 @@ export function useMobileNativeChatTerminalStream(args: {
       (rearmAttemptsRef.current.get(handle) ?? 0) >= MAX_REARM_ATTEMPTS
     )
   }, [])
-  useEffect(() => {
+  const reconcileStream = useCallback(() => {
     const handle = args.activeHandle
     if (coveredHandleRef.current && coveredHandleRef.current !== handle) {
       forgetRearmState(coveredHandleRef.current)
@@ -115,12 +125,15 @@ export function useMobileNativeChatTerminalStream(args: {
     const streamActive =
       handle != null &&
       (args.subscriptionsRef.current.has(handle) || args.subscribingRef.current.has(handle))
+    const streamIsLeaseOnly =
+      streamActive && handle != null && args.leaseOnlyRef.current.has(handle)
     const action = resolveMobileNativeChatTerminalStreamAction({
       showNativeChat: args.showNativeChat,
       activeHandle: handle,
       activeTabType: args.activeTabType,
       streamActive,
       streamCovered: coveredHandleRef.current === handle,
+      streamIsLeaseOnly,
       webViewReady: handle != null && args.webReadyRef.current.has(handle)
     })
     const streamHolding = action === 'none' && streamActive && coveredHandleRef.current === handle
@@ -181,7 +194,11 @@ export function useMobileNativeChatTerminalStream(args: {
       args.subscribe(handle)
       return
     }
-    if (coveredHandleRef.current === handle) {
+    if (coveredHandleRef.current === handle || streamIsLeaseOnly) {
+      // Why clear `initialized`: a lease-only stream delivered no scrollback, so xterm
+      // holds nothing — a stale mark would drop the replacement snapshot and the
+      // terminal would stay blank through the resubscribe.
+      args.initializedRef.current.delete(handle)
       args.unsubscribe(handle)
       coveredHandleRef.current = null
     }
@@ -190,6 +207,7 @@ export function useMobileNativeChatTerminalStream(args: {
     args.activeHandle,
     args.activeTabType,
     args.initializedRef,
+    args.leaseOnlyRef,
     args.leaseReady,
     args.showNativeChat,
     args.streamRevision,
@@ -203,6 +221,7 @@ export function useMobileNativeChatTerminalStream(args: {
     rearmBudgetRevision,
     webReadyRevision
   ])
+  useEffect(() => reconcileStream(), [reconcileStream])
   useEffect(() => cancelHealthyStreamProof, [cancelHealthyStreamProof])
   // Why memoized: the session route keeps this object in callback dep arrays, and a
   // fresh literal per render would rebuild them on every keystroke. All three members
diff --git a/mobile/src/source-control/mobile-create-pr-action.test.ts b/mobile/src/source-control/mobile-create-pr-action.test.ts
index c665b034f7f..ec399b45913 100644
--- a/mobile/src/source-control/mobile-create-pr-action.test.ts
+++ b/mobile/src/source-control/mobile-create-pr-action.test.ts
@@ -1,8 +1,7 @@
 import { describe, expect, it, vi } from 'vitest'
 import type {
   HostedReviewCreationBlockedReason,
-  HostedReviewCreationEligibility,
-  HostedReviewProvider
+  HostedReviewCreationEligibility
 } from '../../../src/shared/hosted-review'
 import {
   buildMobileCreatePrAction,
@@ -146,7 +145,7 @@ describe('buildMobileCreatePrAction', () => {
 
   it('keeps a disabled status row for providers without review creation', () => {
     const { descriptor } = action({
-      eligibility: eligibility({ provider: 'bitbucket' as HostedReviewProvider })
+      eligibility: eligibility({ provider: 'unsupported' })
     })
 
     expect(descriptor).toMatchObject({
@@ -211,7 +210,7 @@ describe('cold-mount layout stability (issue #8411)', () => {
       'unsupported provider',
       {
         kind: 'ready',
-        eligibility: eligibility({ provider: 'bitbucket' as HostedReviewProvider })
+        eligibility: eligibility({ provider: 'unsupported' })
       } satisfies MobileCreatePrEligibilityState
     ],
     ['eligibility error', { kind: 'error' } satisfies MobileCreatePrEligibilityState]
diff --git a/mobile/src/source-control/mobile-create-pr-action.ts b/mobile/src/source-control/mobile-create-pr-action.ts
index fe75cc60a58..3268a1796c3 100644
--- a/mobile/src/source-control/mobile-create-pr-action.ts
+++ b/mobile/src/source-control/mobile-create-pr-action.ts
@@ -72,7 +72,7 @@ export function buildMobileCreatePrAction({
   }
   // Why: mirror desktop's structural provider gate (supportsHostedReviewCreation)
   // instead of relying on the host always emitting a hidden blockedReason for
-  // non-creatable providers like bitbucket.
+  // non-creatable providers.
   if (!supportsHostedReviewCreation(eligibility.provider)) {
     return {
       visible: true,
diff --git a/mobile/src/terminal/terminal-path-tap.ts b/mobile/src/terminal/terminal-path-tap.ts
index ac2a8ea0ff3..8e7545a4cfb 100644
--- a/mobile/src/terminal/terminal-path-tap.ts
+++ b/mobile/src/terminal/terminal-path-tap.ts
@@ -3,11 +3,12 @@
 // one path span containing the tapped column — mobile opens a tapped path, it
 // does not render hover links over the whole line.
 
-export type TappedFilePath = {
-  pathText: string
-  line: number | null
-  column: number | null
-}
+import {
+  parseFileLinkLocation,
+  type ParsedFileLinkLocation
+} from '../../../src/shared/file-link-location'
+
+export type TappedFilePath = ParsedFileLinkLocation
 
 // Separator-anchored path tokens (absolute, relative, ~/, drive-letter, UNC) OR
 // a bare filename with an extension (README.md, index.ts), optionally suffixed
@@ -47,18 +48,13 @@ function trimBoundaryPunctuation(
 }
 
 export function parsePathWithOptionalLineColumn(value: string): TappedFilePath | null {
-  const match = /^(.*?)(?::(\d+))?(?::(\d+))?$/.exec(value)
-  if (!match) {
+  const parsed = parseFileLinkLocation(value)
+  if (!parsed) {
     return null
   }
-  const pathText = match[1]
+  const { pathText, line, column } = parsed
   // Reject a directory-only token (trailing separator) for either slash style.
-  if (!pathText || pathText.endsWith('/') || pathText.endsWith('\\')) {
-    return null
-  }
-  const line = match[2] ? Number.parseInt(match[2], 10) : null
-  const column = match[3] ? Number.parseInt(match[3], 10) : null
-  if ((line !== null && line < 1) || (column !== null && column < 1)) {
+  if (pathText.endsWith('/') || pathText.endsWith('\\')) {
     return null
   }
   return { pathText, line, column }
diff --git a/mobile/src/transport/host-store.ts b/mobile/src/transport/host-store.ts
index 99421ffd192..c32ac44ac77 100644
--- a/mobile/src/transport/host-store.ts
+++ b/mobile/src/transport/host-store.ts
@@ -182,7 +182,7 @@ async function persistHost(host: HostProfile, requireExisting: boolean): Promise
         }
       }
       let next: StoredHostProfile[]
-      if (index >= 0) {
+      if (index !== -1) {
         updatedExistingHost = true
         // Why: an authoritative save is the safe point to collapse pre-existing duplicate rows to the preserved host id.
         next = hosts
@@ -195,7 +195,7 @@ async function persistHost(host: HostProfile, requireExisting: boolean): Promise
         next = [...hosts.filter(({ id }) => !duplicateHostIds.has(id)), stored]
       }
       if (duplicateHostIds.size > 0) {
-        if (index < 0) {
+        if (index === -1) {
           // Why: process death between the early token write and metadata publication must leave cleanup discoverable.
           await recordHostCredentialCleanupIntent(stored.id)
           cleanupIntentRecordedBeforeMetadata = true
@@ -304,7 +304,7 @@ export async function updateHostNameAndEndpoint(
 ): Promise<void> {
   await mutateStoredHosts((hosts) => {
     const index = hosts.findIndex((host) => host.id === hostId)
-    if (index < 0) {
+    if (index === -1) {
       throw new Error('Host not found')
     }
     const next = hosts.slice()
@@ -321,7 +321,7 @@ export async function updateLastConnected(hostId: string): Promise<void> {
   try {
     await mutateStoredHosts((hosts) => {
       const index = hosts.findIndex((h) => h.id === hostId)
-      if (index < 0) {
+      if (index === -1) {
         return hosts
       }
       const next = hosts.slice()
diff --git a/mobile/src/transport/mobile-relay-host-overlay-store.ts b/mobile/src/transport/mobile-relay-host-overlay-store.ts
index 7f1519eb5c9..4960fbec3f0 100644
--- a/mobile/src/transport/mobile-relay-host-overlay-store.ts
+++ b/mobile/src/transport/mobile-relay-host-overlay-store.ts
@@ -80,7 +80,7 @@ export async function saveMobileRelayHostOverlay(overlay: MobileRelayHostOverlay
   const validated = MobileRelayHostOverlaySchema.parse(overlay)
   return mutateOverlays((overlays) => {
     const index = overlays.findIndex(({ hostId }) => hostId === validated.hostId)
-    if (index < 0) {
+    if (index === -1) {
       return [...overlays, validated]
     }
     const next = overlays.slice()
diff --git a/mobile/src/transport/rpc-client.ts b/mobile/src/transport/rpc-client.ts
index 9b0afe937f3..f316f8c2b76 100644
--- a/mobile/src/transport/rpc-client.ts
+++ b/mobile/src/transport/rpc-client.ts
@@ -54,6 +54,7 @@ type ConnectWaiter = {
 
 export type SendRequestOptions = {
   timeoutMs?: number
+  expectedRuntimeId?: string
   /** Spend `timeoutMs` across connect-wait AND the request instead of giving each
    *  phase its own. Interactive chat writes need it: they run as sequential loops
    *  under one shared budget, so a per-phase clock lets the composer sit `sending`
@@ -1013,7 +1014,15 @@ export function connect(
           }
         })
 
-        if (!sendEncrypted({ id, deviceToken, method, params })) {
+        if (
+          !sendEncrypted({
+            id,
+            deviceToken,
+            method,
+            params,
+            ...(options?.expectedRuntimeId ? { expectedRuntimeId: options.expectedRuntimeId } : {})
+          })
+        ) {
           pending.delete(id)
           clearTimeout(timeout)
           reject(new Error('Connection interrupted'))
diff --git a/mobile/src/transport/rpc-response-shape.ts b/mobile/src/transport/rpc-response-shape.ts
index 54903f5f3e1..61ecaf57362 100644
--- a/mobile/src/transport/rpc-response-shape.ts
+++ b/mobile/src/transport/rpc-response-shape.ts
@@ -13,7 +13,7 @@ export function isRpcResponse(value: unknown): value is RpcResponse {
     return false
   }
   if (response.ok === true) {
-    return Object.prototype.hasOwnProperty.call(response, 'result')
+    return Object.hasOwn(response, 'result')
   }
   return (
     response.ok === false &&
diff --git a/mobile/src/transport/types.ts b/mobile/src/transport/types.ts
index 9d96f0561ad..8fe2bdd78f9 100644
--- a/mobile/src/transport/types.ts
+++ b/mobile/src/transport/types.ts
@@ -18,6 +18,7 @@ export type RpcRequest = {
   deviceToken: string
   method: string
   params?: unknown
+  expectedRuntimeId?: string
 }
 
 export type RpcSuccess = {
diff --git a/package.json b/package.json
index 83cd7597e5f..1c2c1deb2df 100644
--- a/package.json
+++ b/package.json
@@ -87,6 +87,8 @@
     "test:e2e:multi-client-navigation": "node config/scripts/run-multi-client-navigation-e2e.mjs",
     "test:e2e:floating-mobile-emulator": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/floating-mobile-emulator-tab.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
     "test:e2e:terminal-rendering-golden": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/terminal-raw-emoji-table-scroll-restore.spec.ts tests/e2e/terminal-webgl-atlas-budget.spec.ts --grep @terminal-rendering-golden --config tests/playwright.config.ts --project electron-headless --workers=1",
+    "test:e2e:posix-profile-index-golden": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/golden-posix-fresh-startup.spec.ts tests/e2e/golden-posix-profile-index-fsync.spec.ts --grep @posix-profile-index-golden --config tests/playwright.config.ts --project electron-headless --workers=1",
+    "test:e2e:windows-fresh-startup-golden": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/golden-windows-fresh-startup.spec.ts --grep @windows-fresh-startup-golden --config tests/playwright.config.ts --project electron-headless --workers=1",
     "test:e2e:terminal-rendering-release-evidence": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/terminal-opencode-emoji-table-rendering.spec.ts tests/e2e/terminal-long-table-scroll-restore.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=2",
     "test:e2e:terminal-perf": "pnpm run ensure:electron-runtime && npx playwright test tests/e2e/terminal-typing-latency.spec.ts tests/e2e/terminal-foreground-redraw-freeze.spec.ts tests/e2e/terminal-output-scheduler.spec.ts tests/e2e/terminal-hidden-tui-visual-restore.spec.ts tests/e2e/artificial-opencode-terminal-load.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=2",
     "test:e2e:terminal-perf:scale": "pnpm run ensure:electron-runtime && node config/scripts/run-terminal-scale-perf-e2e.mjs",
@@ -217,7 +219,7 @@
     "mermaid": "^11.16.1",
     "monaco-editor": "^0.55.1",
     "oxfmt": "^0.52.0",
-    "oxlint": "^1.75.0",
+    "oxlint": "^1.77.0",
     "oxlint-plugin-react-doctor": "0.9.1",
     "oxlint-tsgolint": "7.0.2001",
     "pdfjs-dist": "^6.2.108",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1872f9860e8..57885d16e25 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -294,8 +294,8 @@ importers:
         specifier: ^0.52.0
         version: 0.52.0
       oxlint:
-        specifier: ^1.75.0
-        version: 1.75.0(oxlint-tsgolint@7.0.2001)
+        specifier: ^1.77.0
+        version: 1.77.0(oxlint-tsgolint@7.0.2001)
       oxlint-plugin-react-doctor:
         specifier: 0.9.1
         version: 0.9.1
@@ -1488,124 +1488,124 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@oxlint/binding-android-arm-eabi@1.75.0':
-    resolution: {integrity: sha512-lutovtFzJqlRaqpZrCqSSGaHZzl9nIxxpjLzhSRLunN6dCLylj0uzlCyQGaQDIys7rrv8kVXiFO+R4Zpn0bX7g==}
+  '@oxlint/binding-android-arm-eabi@1.77.0':
+    resolution: {integrity: sha512-E06sKWS6PiI6HRxS1wyQg22HvApt01hI7fV+T3wUk3OSbaaP4a3hYGY/MIQDmASqCiRjBdpRQYkgMkqH82cWmQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [android]
 
-  '@oxlint/binding-android-arm64@1.75.0':
-    resolution: {integrity: sha512-hXI0hDgHkw4w5nfru72aG7y+2iQJmC4waH/KV6H/hbgA6yAP5jYNx0P9yug15Hs0tWl/+mda3Jjn/2gmDT48tw==}
+  '@oxlint/binding-android-arm64@1.77.0':
+    resolution: {integrity: sha512-NvsKz0KZxTp9cYWPLf+FXaSZwB3oO3peAjtukpOMBgse2vhQSoIIVqeO1yR0lEo/UcdZIDL18uq+kL0LzQ0ytA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [android]
 
-  '@oxlint/binding-darwin-arm64@1.75.0':
-    resolution: {integrity: sha512-D91BWbK/dMYfCcrghspPIuKs2D9LF4Z/OabVSQjw1AO6PWxArD7teDA48bm0ySFqWDaPVqmQRl5GMWNglTXyrQ==}
+  '@oxlint/binding-darwin-arm64@1.77.0':
+    resolution: {integrity: sha512-bgjTn6nW4bQCFBvSvuHCpDD+sONvmpo4lGI4PxzMt1quBA+xYxhczk6RiCn3GZ9gY8uhaBbwhj9MdKGfu6T9DA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@oxlint/binding-darwin-x64@1.75.0':
-    resolution: {integrity: sha512-02mpwzf12BonZ6PT0TuQoomvEh2kVl2WGBIKWezCyToIS+rYkQZ6GXnARBAl9A4Ovm2V+Xe7M4KretyqmmcnJQ==}
+  '@oxlint/binding-darwin-x64@1.77.0':
+    resolution: {integrity: sha512-aotaIttH1R6j1Rwhx0M0htgeZyGtVQqYNTVEYMN/UcgHPquGA6kmk9OyuDc3a2GKUQBC+3C3GVQCcrRPMYqAFA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@oxlint/binding-freebsd-x64@1.75.0':
-    resolution: {integrity: sha512-qZJgLnDaBsiL5YESx2t/TZ8eXkL9fEkKoXEdzegROhlz9A0lgyGnZ0dAzJrh7LJAHQl2K9RdRueN2s/9N7+odg==}
+  '@oxlint/binding-freebsd-x64@1.77.0':
+    resolution: {integrity: sha512-nNx/wta7ksRAdYvq+l4AWjXkLxEXHALhENxjj2cYbQAIR4ybaA5L+hCbE63HOmft5czQ6ks+hb8vmEAnn7YGPg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [freebsd]
 
-  '@oxlint/binding-linux-arm-gnueabihf@1.75.0':
-    resolution: {integrity: sha512-7XlaWA5BJD3XpCfrEqjEe6Zseeb14S7QGa304XfwKignRaKQ+eIj775BQ7nIslggWickl4IsPUFqJ+/gAyNHVg==}
+  '@oxlint/binding-linux-arm-gnueabihf@1.77.0':
+    resolution: {integrity: sha512-tMLLjM7xXtzXisVCzkOTXNCy9bZVId2wteNwjohlFDR/jY6WagpEDA1c1wu4xRc20Hojaxj+V6DSR7gbKxijWA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxlint/binding-linux-arm-musleabihf@1.75.0':
-    resolution: {integrity: sha512-av6Tpv8yrcMMMOadOqENBhlsLRcGFXXwoQ0hzHhsmS9FJ4Wioy8we427GbcMe2XTxmL2e60T67H1Dyr3up+tAA==}
+  '@oxlint/binding-linux-arm-musleabihf@1.77.0':
+    resolution: {integrity: sha512-MiAFDFaqR0tmHTAyo0YDcZ5hyLREdYw/RQhc2R3cbT+8O3tB+zqPM2th9TTQ+Uo3jn/embS+DO+HyX9ztCPkOQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@oxlint/binding-linux-arm64-gnu@1.75.0':
-    resolution: {integrity: sha512-WcUhd8fHT5plrA14lANevl+hOl815mVI5t2hU21oFWrZKFXIVV/Sr4rWQV0NzSvzBupbMLNc5ErEA6Ehxh5jMg==}
+  '@oxlint/binding-linux-arm64-gnu@1.77.0':
+    resolution: {integrity: sha512-/xqQ3B16i1T4cyt/9Mn+4CpzhUXoBXp7kVpIwzOXNFLj5JmK1bIjsbSnX296Gg8A/o7oDtKWikFgBx0SLwztkw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-arm64-musl@1.75.0':
-    resolution: {integrity: sha512-UWzp5wRHFe/ESO3+eEaxXsTkYTGLYjnTsi/I5neEacXSItQ6WNleapfOAeA4x2b8nyhJ4uQxqvtv9pHv8kWJtQ==}
+  '@oxlint/binding-linux-arm64-musl@1.77.0':
+    resolution: {integrity: sha512-LSbwuRKiNCenPDcbARqAZ5RfBy7gmj7vOvfJRLeCDU3gFtSxWbhv/+VTlaUqzUhNj1gFLHB8h7ALnxa/Az6z6g==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-linux-ppc64-gnu@1.75.0':
-    resolution: {integrity: sha512-XEVRwGMLKCUKrvhLAz4F6AIh8MJrQVdSZtAmPpRZt9tGPsUnamPOcl3dS/ZQzJnar/Ymgc//+xho0L60Emzuxg==}
+  '@oxlint/binding-linux-ppc64-gnu@1.77.0':
+    resolution: {integrity: sha512-QWdcH31mXEUe5Nq1s0CfCpceaKjIo9uZtwDjAuL681g1axf+5x8xrg/eXWaw//4NCxYZ4V4e5Hu5tvdR+pTBlg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-riscv64-gnu@1.75.0':
-    resolution: {integrity: sha512-mAG4DUXqfLC8cTjMD2kt3jDmVzFREYtDyeLNdLdsCcBc4Zbl2EMuiFektGBilQwkNjYnMvCqJs55U+Hyb+b+jw==}
+  '@oxlint/binding-linux-riscv64-gnu@1.77.0':
+    resolution: {integrity: sha512-GnOfYgJxbcElOiPZaDFDl406ONddwvOWk2jvAAAEjwAl4GofNoHF+/HHUIBYa6bFCArlcGPi0XjC4cU1pkgF/Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-riscv64-musl@1.75.0':
-    resolution: {integrity: sha512-95hrAvriAlI+pekSomTFIn0+bawMDlDwTNVmdjsFusTHyL2JWh7TWvRNG/Lkim72uN8OiCcO9wcaC6omLP5E3w==}
+  '@oxlint/binding-linux-riscv64-musl@1.77.0':
+    resolution: {integrity: sha512-AyEMTUCf0xY+hHF+IxqXFQIX0yQOIR8ykpY0lJNOw9xYqOzUX8dyZfRvlG0RfXwuQn2eonf/8NrMmDSZJjdqsA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-linux-s390x-gnu@1.75.0':
-    resolution: {integrity: sha512-4b6f2+FrtruAESrCqIKcrarzfrSx+wk2QNcp+RT91/Prc+pMQMAfyZ1rG1c3tFQNl8Bc616tx40uNXyxNBRPbQ==}
+  '@oxlint/binding-linux-s390x-gnu@1.77.0':
+    resolution: {integrity: sha512-sPLzEcNvxd/oyVQ5oZo92CiHkFkpBeRop13E/P3TPY+hZfXHKCOWKI70TE2RYwMKFJDc20EMjH16L7NZICtKTw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-x64-gnu@1.75.0':
-    resolution: {integrity: sha512-nshAhrUvXFUWOvqQ2soIw7HFNWvpvEV4o0cYSqPtzLiPF5gKyYTDOOTJ6Rn8g8K/iGvPIrbDA4v8+5MvnjJrrg==}
+  '@oxlint/binding-linux-x64-gnu@1.77.0':
+    resolution: {integrity: sha512-1Oh2ssH2L7lwyvkdSqaMUfsGfwU2Wfvew+obBUYjRVqhpBcUpwnsPSEr1IzVi9XqkuY10geiLsNKecqaZC34Dw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@oxlint/binding-linux-x64-musl@1.75.0':
-    resolution: {integrity: sha512-e4jNxLKnxLC6sYBQRxrI2pgIIxnmMtF8U/VwNYcjTT/CLS+spH624cYVnj07bTKwaEWT37/e025isOs6j/0xqA==}
+  '@oxlint/binding-linux-x64-musl@1.77.0':
+    resolution: {integrity: sha512-0j/2wRgNGO+Qj/M1uu/p57h/hFTTWWcfie0ufkbabeus2s5+/QqkCflnMOwLLN5m2GsNeWp4xdl4cPa4n7QCOQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@oxlint/binding-openharmony-arm64@1.75.0':
-    resolution: {integrity: sha512-hZ2lH+1qLf/DiEP9UWuQTK2JWj/BgvMB4jhIV4SmNU1wfEiYYX4TynQyAZXx0j9X4qRYizAL042SKaV+8ynh4w==}
+  '@oxlint/binding-openharmony-arm64@1.77.0':
+    resolution: {integrity: sha512-BJ/j54qS0usEnyDkLYURMj2iiD9h5Cyy+ppzeMSXBGRXaGRNWnj1Mw14NqWMR5E/PzdgB30OOCCzLzbRoduafw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [openharmony]
 
-  '@oxlint/binding-win32-arm64-msvc@1.75.0':
-    resolution: {integrity: sha512-Ilj6PNzGDS3bCU0MSJH7Msh0NhH+T/mRp2shwg+q+GHeVlPwP5LEboW96aW+3kVKFk6zYZy1Xi5pZkqZh6X8KQ==}
+  '@oxlint/binding-win32-arm64-msvc@1.77.0':
+    resolution: {integrity: sha512-Yh8w+g2Lpx7StrvtYkoz9JJvXjB9wxgFChFNb85nrXm/wj/XTwGWS1hve9+900HL7llrntYB3YP+y32E3tRqzA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@oxlint/binding-win32-ia32-msvc@1.75.0':
-    resolution: {integrity: sha512-QVit2nOEOiPhkmsrksPSkoGCdnZRNkspt8fwoYyP09te1VEbnSj4LAxua4rc8FKTmWkySVe05j8iz9GXYfF1AQ==}
+  '@oxlint/binding-win32-ia32-msvc@1.77.0':
+    resolution: {integrity: sha512-zja5b7+6a7UsRFgAQSrnax5vrzliEyNPLCjfXONu/vTWswaIVZGFajJZptaeRvPE4LghtFdAzVFlexTm7MVTGA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ia32]
     os: [win32]
 
-  '@oxlint/binding-win32-x64-msvc@1.75.0':
-    resolution: {integrity: sha512-DSxnNkBUAYARPwJtR12Ig3deWr8w0H997xP6jy33i+e0SyYJw8FKuz4+cZtpmPEhQmvlPJE3X/2vNxDmLkd/rA==}
+  '@oxlint/binding-win32-x64-msvc@1.77.0':
+    resolution: {integrity: sha512-+teyvPDZ2RjUvo+SuCqS/UhaJl1QtdW5fWT5NJTV61V5MIuIS90Db9LixmtEGvXixyttiK62P96MSu3UlpviBw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -5541,8 +5541,8 @@ packages:
     resolution: {integrity: sha512-KjK/XLcXr1DSyonKhsuFqJRiuKqcyG9j3LJ8nkOsrLzGvodBPqzHOKauy10asLMDI0sUpvb+1sxlzff3udZvfg==}
     hasBin: true
 
-  oxlint@1.75.0:
-    resolution: {integrity: sha512-m9WzjRcRYA/uqIZDa9tclrieoPJ/ln1QYTKdFx6NUOs8uY5DiHlIwRQoCrHT6OM6O3ww3l2skY5gO7G7ZphE7g==}
+  oxlint@1.77.0:
+    resolution: {integrity: sha512-qnGh8XJHaQ0dprrDXNQZgS0FgjI6v+V3+X8DwmaV++5Aamy6jGKfDdQ1TUvhUxtmKFAbEf4/WeO5QZX+5WSngg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
@@ -7809,61 +7809,61 @@ snapshots:
   '@oxlint-tsgolint/win32-x64@7.0.2001':
     optional: true
 
-  '@oxlint/binding-android-arm-eabi@1.75.0':
+  '@oxlint/binding-android-arm-eabi@1.77.0':
     optional: true
 
-  '@oxlint/binding-android-arm64@1.75.0':
+  '@oxlint/binding-android-arm64@1.77.0':
     optional: true
 
-  '@oxlint/binding-darwin-arm64@1.75.0':
+  '@oxlint/binding-darwin-arm64@1.77.0':
     optional: true
 
-  '@oxlint/binding-darwin-x64@1.75.0':
+  '@oxlint/binding-darwin-x64@1.77.0':
     optional: true
 
-  '@oxlint/binding-freebsd-x64@1.75.0':
+  '@oxlint/binding-freebsd-x64@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-arm-gnueabihf@1.75.0':
+  '@oxlint/binding-linux-arm-gnueabihf@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-arm-musleabihf@1.75.0':
+  '@oxlint/binding-linux-arm-musleabihf@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-arm64-gnu@1.75.0':
+  '@oxlint/binding-linux-arm64-gnu@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-arm64-musl@1.75.0':
+  '@oxlint/binding-linux-arm64-musl@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-ppc64-gnu@1.75.0':
+  '@oxlint/binding-linux-ppc64-gnu@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-riscv64-gnu@1.75.0':
+  '@oxlint/binding-linux-riscv64-gnu@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-riscv64-musl@1.75.0':
+  '@oxlint/binding-linux-riscv64-musl@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-s390x-gnu@1.75.0':
+  '@oxlint/binding-linux-s390x-gnu@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-x64-gnu@1.75.0':
+  '@oxlint/binding-linux-x64-gnu@1.77.0':
     optional: true
 
-  '@oxlint/binding-linux-x64-musl@1.75.0':
+  '@oxlint/binding-linux-x64-musl@1.77.0':
     optional: true
 
-  '@oxlint/binding-openharmony-arm64@1.75.0':
+  '@oxlint/binding-openharmony-arm64@1.77.0':
     optional: true
 
-  '@oxlint/binding-win32-arm64-msvc@1.75.0':
+  '@oxlint/binding-win32-arm64-msvc@1.77.0':
     optional: true
 
-  '@oxlint/binding-win32-ia32-msvc@1.75.0':
+  '@oxlint/binding-win32-ia32-msvc@1.77.0':
     optional: true
 
-  '@oxlint/binding-win32-x64-msvc@1.75.0':
+  '@oxlint/binding-win32-x64-msvc@1.77.0':
     optional: true
 
   '@parcel/watcher-android-arm64@2.5.6':
@@ -12174,27 +12174,27 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 7.0.2001
       '@oxlint-tsgolint/win32-x64': 7.0.2001
 
-  oxlint@1.75.0(oxlint-tsgolint@7.0.2001):
+  oxlint@1.77.0(oxlint-tsgolint@7.0.2001):
     optionalDependencies:
-      '@oxlint/binding-android-arm-eabi': 1.75.0
-      '@oxlint/binding-android-arm64': 1.75.0
-      '@oxlint/binding-darwin-arm64': 1.75.0
-      '@oxlint/binding-darwin-x64': 1.75.0
-      '@oxlint/binding-freebsd-x64': 1.75.0
-      '@oxlint/binding-linux-arm-gnueabihf': 1.75.0
-      '@oxlint/binding-linux-arm-musleabihf': 1.75.0
-      '@oxlint/binding-linux-arm64-gnu': 1.75.0
-      '@oxlint/binding-linux-arm64-musl': 1.75.0
-      '@oxlint/binding-linux-ppc64-gnu': 1.75.0
-      '@oxlint/binding-linux-riscv64-gnu': 1.75.0
-      '@oxlint/binding-linux-riscv64-musl': 1.75.0
-      '@oxlint/binding-linux-s390x-gnu': 1.75.0
-      '@oxlint/binding-linux-x64-gnu': 1.75.0
-      '@oxlint/binding-linux-x64-musl': 1.75.0
-      '@oxlint/binding-openharmony-arm64': 1.75.0
-      '@oxlint/binding-win32-arm64-msvc': 1.75.0
-      '@oxlint/binding-win32-ia32-msvc': 1.75.0
-      '@oxlint/binding-win32-x64-msvc': 1.75.0
+      '@oxlint/binding-android-arm-eabi': 1.77.0
+      '@oxlint/binding-android-arm64': 1.77.0
+      '@oxlint/binding-darwin-arm64': 1.77.0
+      '@oxlint/binding-darwin-x64': 1.77.0
+      '@oxlint/binding-freebsd-x64': 1.77.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.77.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.77.0
+      '@oxlint/binding-linux-arm64-gnu': 1.77.0
+      '@oxlint/binding-linux-arm64-musl': 1.77.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.77.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.77.0
+      '@oxlint/binding-linux-riscv64-musl': 1.77.0
+      '@oxlint/binding-linux-s390x-gnu': 1.77.0
+      '@oxlint/binding-linux-x64-gnu': 1.77.0
+      '@oxlint/binding-linux-x64-musl': 1.77.0
+      '@oxlint/binding-openharmony-arm64': 1.77.0
+      '@oxlint/binding-win32-arm64-msvc': 1.77.0
+      '@oxlint/binding-win32-ia32-msvc': 1.77.0
+      '@oxlint/binding-win32-x64-msvc': 1.77.0
       oxlint-tsgolint: 7.0.2001
 
   p-cancelable@2.1.1: {}
diff --git a/skill-guides/orchestration.md b/skill-guides/orchestration.md
index bc7b1cbbe3e..20b70a15b63 100644
--- a/skill-guides/orchestration.md
+++ b/skill-guides/orchestration.md
@@ -195,7 +195,7 @@ orca orchestration worker-start --task <task_b> --worktree current --agent claud
 For a per-invocation Claude, Codex, or Cursor launch, pass an opaque provider model id with `--model`; add `--effort` only when that agent/model supports the level. These options apply only to fresh agent terminals, override general agent default arguments, and are reported under `launch.requested` and `launch.effective` in the receipt:
 
 ```bash
-orca orchestration worker-start --task <task_id> --worktree current --agent claude --model aws-bedrock-opus-5 --effort high --json
+orca orchestration worker-start --task <task_id> --worktree current --agent claude --model opus --effort high --json
 ```
 
 `--effort` requires `--model`, and neither option can combine with `--terminal`. A connected worker server must advertise launch-preference support before Orca forwards either option.
diff --git a/src/cli/bundled-skill-guides.ts b/src/cli/bundled-skill-guides.ts
index 487c9152b89..e0a65fc876f 100644
--- a/src/cli/bundled-skill-guides.ts
+++ b/src/cli/bundled-skill-guides.ts
@@ -30,7 +30,7 @@ const ORCA_LINEAR_MARKDOWN = "---\nname: orca-linear\ndescription: >-\n  Use Orc
 const ORCA_PER_WORKSPACE_ENV_MARKDOWN = "---\nname: orca-per-workspace-env\ndescription: >-\n  Set up, review, debug, or validate Orca per-workspace environment recipes —\n  on-demand, disposable runtimes (cloud sandboxes, VMs, or local) created fresh\n  for each workspace. Covers first-time setup (provider prerequisites, the\n  reusable base snapshot, the coding-agent auth snapshot, credentials, and\n  state), not just the per-workspace lifecycle scripts. Use to stand up\n  per-workspace environments, fix an `environmentRecipes` entry in `orca.yaml`, scaffold\n  provider lifecycle scripts, or resolve an `orca vm recipe doctor` failure.\n---\n\n# Per-Workspace Environments\n\nHelp a user stand up and maintain a repo-owned per-workspace environment recipe end to end. Each\nworkspace gets its own on-demand, disposable runtime (a cloud sandbox, a VM, or a local one),\ncreated fresh and torn down after.\n\nOrca is a **thin wrapper**: you guide, detect, and scaffold; you never own the user's cloud account,\nbilling, images, or credentials.\n\n- **You DO:** sequence the setup, detect what's detectable (provider CLI present/logged-in? recipe\n  present? `doctor` passing?), scaffold provider-templated scripts the user fills in, drive the slow\n  snapshot/auth phases with the user, and always show the next action.\n- **You DO NOT:** create accounts, choose plans/regions, invent org/project/scope ids, store or print\n  secrets, or run anything that spends money without an explicit user OK.\n\nFirst-time setup has **four phases before the per-workspace recipe runs** — easy to miss, so walk\nthem in order:\n\n1. **Prerequisites** — cloud account, provider CLI, scope/project, plan limits, git token (§2).\n2. **Base snapshot** — reusable image: tools + repo + headless build, snapshotted once (§3).\n3. **Agent-auth snapshot** — boot the base, run interactive device-auth, re-snapshot (§4).\n4. **State** — thread snapshot id / scope / project / port between phases via a state file (§6).\n\nThen the **per-workspace contract** (create/suspend/resume/destroy) runs fast (§8).\n\n**The one branch that shapes everything — connection mode:** **Orca-server** (`create` runs `orca serve`\nin the env and emits a `pairingCode`; §7c/§7f) vs **SSH** (`create` runs no server and emits a\n`connection.type:\"ssh\"` block Orca dials into; §7g/§7h). Settle this first — it changes the `create`\noutput shape and half the templates.\n\n**Quick-start (happy path):** interview the user (connection mode Orca-server vs SSH, provider, agent CLI,\ngit auth — §1.2) + read the provider's CLI docs → scaffold `scripts/orca-vm/` from §7 → run the\nbase-snapshot script, then the auth script (you invoke these by hand; not via `orca.yaml`) → wire\n`environmentRecipes` in `orca.yaml` → `orca vm recipe doctor <id> --json` (free) → then the `--provision`\nself-test loop (§9) until it passes.\n\n---\n\n## 1. Setup workflow\n\nDrive these with the user. **[CHECKPOINT]** steps need explicit confirmation — they spend money, take\na long time, or need the user at the keyboard. Never create an Orca workspace or commit unless asked.\n\n1. **Inspect the repo** for an existing `environmentRecipes` entry, `scripts/orca-vm/`, a state file, or setup\n   notes. If a working recipe exists, jump to Doctor (§9) instead of rebuilding.\n2. **Interview the user up front** — gather these choices and confirm them back before scaffolding\n   anything. Don't pick for them (§11); don't guess.\n   - **Connection mode:** how Orca attaches to the environment — an **Orca server** (the VM runs\n     `orca serve` and Orca pairs over its pairing URL; worked example §7f) or **SSH** (Orca connects to\n     the host over SSH; §7g). This decides the recipe's connection shape, so settle it first.\n   - **Provider:** Vercel Sandbox, Fly, Modal, an existing SSH host, … For non-obvious providers, also\n     ask scope/project/region and plan limits (§2). Then **read that provider's CLI/SDK docs** (or\n     `<cli> --help`) before scaffolding — you need its exact create/exec/snapshot/remove verbs.\n     If a provider advertises `ssh`, verify whether it exposes a real dialable SSH target\n     (host/port/user/key or proxy command) or only a provider-mediated interactive shell; Orca SSH mode\n     needs the former.\n   - **Coding-agent CLI + account:** which agent runs in the VM (`codex`, `claude`, …) and that the user\n     has an account for it — it gets logged in during the Phase-3 auth snapshot (§4).\n   - **Git auth:** the token source for cloning a private repo (`GH_TOKEN`/`GITHUB_TOKEN` or `gh auth\n     token`; §5).\n3. **Check prerequisites (§2)** — detect the provider CLI + auth and confirm the items above are in\n   place before any paid step.\n4. **Scaffold scripts + state file** from §7 (worked Vercel example: §7f; SSH host: §7g; Docker SSH:\n   §7h; Windows: §7i), filling in the provider's real commands. Make them executable.\n5. **[CHECKPOINT] Build the base snapshot (§3)** — paid, slow.\n6. **[CHECKPOINT] Authenticate the agent (§4)** — interactive; the user follows a URL/code. **You cannot\n   drive this step** — you run commands non-interactively, so there's no TTY for `docker exec -it` /\n   `ssh -t` to prompt against. The **user** runs the Phase-3 login in their own terminal (or via the\n   Claude Code harness bang-prefix — `! <cmd>`, with the required space after `!`); you scaffold and drive\n   the non-interactive phases around it. After kicking it off, **ask the user to report back once the login\n   finishes** — you can't observe it completing, and you need that confirmation before resuming the\n   non-interactive steps (base/auth commit, doctor, provision).\n7. **Wire the recipe** so `orca.yaml` points create/suspend/resume/destroy at the scripts (§8). The\n   workspace composer reads `environmentRecipes` from the project's primary checkout of `orca.yaml`, **not** from\n   a feature branch or worktree. So a recipe added only on a branch won't appear as a \"Run on\" option\n   until that `orca.yaml` change is committed and merged to the project's primary branch. Tell the user\n   this up front: `doctor`/`--provision` validate the scripts from the working copy on any branch, but\n   creating a workspace from the recipe in the picker needs it on primary.\n8. **Dry-run doctor** — `orca vm recipe doctor <recipe-id> --repo-path <repo> --json` (free, static; §9).\n   Fix every failure before going live.\n9. **[CHECKPOINT] Live self-test** — get the user's OK once, then run\n   `orca vm recipe doctor <recipe-id> --provision --json` as a loop: it runs create → validates →\n   destroys, and on failure returns a full transcript. Read it, fix the scripts, and re-run yourself until\n   it passes (§9). Spends cloud money; the one approval covers the loop.\n10. **[CHECKPOINT] Optional workspace test** — only if asked: create a workspace via the picker, then\n    verify sleep/wake/delete.\n\n---\n\n## 2. Phase 1 — Prerequisites\n\nThe user's responsibility; verify what's verifiable, ask for the rest, invent nothing. State which\nitems you verified vs. which the user asserted.\n\n- **Connection mode** (Orca server vs SSH) confirmed with the user — see §1 step 2; it shapes the recipe.\n- **Cloud account + plan** that allows sandboxes/VMs. Ask.\n- **Provider CLI installed + authenticated** — detect (`command -v <cli>`), check auth (e.g.\n  `vercel whoami`). If missing, point at the provider's docs; don't log them in.\n- **Scope / project / region** the sandboxes live under. Ask; flows into every script via state.\n- **Plan / timeout / RAM caps.** Record them — e.g. Vercel Hobby caps sandbox timeout at **45m**,\n  which limits both the base build and per-workspace runtime (see §10).\n- **Git token for private repos** (`GH_TOKEN`/`GITHUB_TOKEN`, or the provider's git auth; can fall back\n  to `gh auth token`). See §5.\n- **Coding-agent CLI choice** (`codex`, `claude`…) and that the user has an account — it gets\n  authenticated into the VM in Phase 3.\n\n---\n\n## 3. Phase 2 — Base snapshot (the reusable image)\n\nBuild **once**, snapshot, and every workspace boots from it in seconds instead of rebuilding.\nProvisioning + building takes a while (often ~20–30 min), so it runs behind a checkpoint. The script\nshape is §7a; key points:\n\n- Build the **headless Electron main only** (not the renderer) so it fits in plan RAM.\n- Use the VM image's package manager (`apt`/`dnf`/`apk`, per the base distro — not the provider brand).\n- Clone with the git token via `GIT_ASKPASS` (§5).\n- **Trap errors and remove the half-built sandbox** so a crash doesn't leave a paid resource running.\n- Snapshot the stopped sandbox, parse the snapshot id, and write it + scope/project/port/repo to state.\n\n---\n\n## 4. Phase 3 — Agent-auth snapshot (interactive)\n\nThe base snapshot has the agent CLI installed but **not logged in**, and per-workspace VMs are\nephemeral — so authenticate once and bake it into a second snapshot layer. Script shape is §7b:\n\n1. Boot a sandbox from the base `snapshotId` (from state).\n2. Run the agent's login **interactively** (`--interactive --tty`); the user completes the URL/code in\n   their browser. On a **headless VM this must be the device-auth flow** (e.g. `codex login --device-auth`),\n   **not** plain `codex login`: the default OAuth login starts a loopback callback server on a container\n   port the host browser can't reach, so it hangs. Device-auth instead prints a URL + code the user opens\n   on the **host**.\n3. Verify login; **refuse to snapshot an unauthenticated VM.** Prefer the status command's **exit code**\n   (most agent CLIs exit non-zero when unauthenticated). If you grep instead, agent status often goes to\n   **stderr** (e.g. `codex login status` prints \"Logged in using ChatGPT\" there), so **fold stderr first**\n   (`... 2>&1 | grep …`) and match the agent's **exact success line** — never `grep -qi 'logged in'`, which\n   also matches \"**not** logged in\" and would commit an unauthenticated image.\n4. Re-snapshot, parse the new id, and overwrite `snapshotId` in state to the authenticated image\n   (recording `authSourceSnapshotId`). Remove the auth sandbox.\n\n**You can't drive step 2 yourself** (you run commands non-interactively — no TTY). The **user** runs it in\ntheir own terminal, or via the Claude Code harness bang-prefix (`! <cmd>`, with the required space after\n`!`). You scaffold/boot the sandbox and run steps 3–4, but **you cannot observe the interactive login\nfinishing** — so **ask the user to tell you when it's done** before you verify and re-snapshot.\n\nIf the agent's credentials are short-lived, warn that the snapshot may need periodic re-auth (§10).\n\nFor disposable runtimes, do **not** treat a host agent config directory (for example `~/.codex`) as the\nauth snapshot by bind-mounting or copying it wholesale. Agent homes often contain sqlite state, hook\napproval state, caches, logs, and host-specific env/config. Instead, authenticate/configure the agent\ninside the disposable runtime and snapshot/commit that runtime layer.\n\n---\n\n## 5. Credentials\n\n- **Never** commit secrets or put them in `userData`, recipe JSON, comments, docs, or the state file.\n- **Git token:** read from env (`GH_TOKEN`/`GITHUB_TOKEN`), falling back to `gh auth token`. Pass to the\n  VM only via the provider's ephemeral `--env`. Inside the VM, use a `GIT_ASKPASS` helper with\n  `x-access-token` (not the token in the clone URL) and `GIT_TERMINAL_PROMPT=0` so a missing token fails\n  fast instead of hanging. When you write the helper from inside `bash -lc` under `set -u`, escape the\n  positional arg and the token (`\\$1`, `\\$GH_TOKEN`) so they land **literally** and resolve at git-runtime\n  — an unescaped `$1` aborts with \"unbound variable\", and a literal `$GH_TOKEN` keeps the real token out of\n  the written file. `rm -f` the helper after the clone/fetch.\n- **Provider auth:** rely on the provider CLI's logged-in session, not checked-in keys.\n- **Agent auth:** lives in the authenticated snapshot (Phase 3) — never a file you write or commit.\n- State holds only **non-secret** wiring (snapshot ids, scope, project, port, repo url/ref).\n\n---\n\n## 6. State file\n\nA repo-local JSON file (e.g. `scripts/orca-vm/<provider>-state.json`) threads non-secret values between\nphases. Each script resolves values as **env var → state → built-in fallback**, and merges its outputs\nback. Phase 2 writes the base `snapshotId`; Phase 3 overwrites it with the authenticated snapshot;\nper-workspace `create` boots from `snapshotId`.\n\n```json\n{\n  \"baseName\": \"orca-base\",\n  \"snapshotId\": \"snap_authenticated_image_id\",\n  \"authSourceSnapshotId\": \"snap_base_image_id\",\n  \"scope\": \"<provider-scope>\",\n  \"project\": \"<provider-project>\",\n  \"port\": 7331,\n  \"repoUrl\": \"https://host/org/repo.git\",\n  \"repoRef\": \"main\",\n  \"projectRoot\": \"/abs/path/on/remote/repo\"\n}\n```\n\n---\n\n## 7. Script templates (provider-agnostic shapes)\n\nScaffold under `scripts/orca-vm/`. These are **shapes** — fill in the provider's real commands. All\nreserve stdout for the final JSON and log progress to stderr. Include a shared `json_value <key>` /\n`env_value <NAME>` reader (env → state → fallback) in each.\n\n**Where each script runs:**\n\n- **Local-side** (`create`/`suspend`/`resume`/`destroy` + the base-snapshot/auth scripts the user\n  invokes) runs **on the user's desktop**, so it must run on their OS. macOS/Linux: `#!/usr/bin/env\n  bash`, `set -euo pipefail`, quoted paths. **Windows:** a bare `.sh` won't run — scaffold `.ps1`/`.cmd`\n  or require WSL/Git-Bash and point `orca.yaml` at the right launcher.\n- **Remote-side** (commands you `exec` *inside* the Linux VM) always runs in the VM's Linux shell, so\n  bash is fine there regardless of the user's OS.\n\n### 7a. Base-snapshot (`<provider>-base-snapshot.sh`) — Phase 2\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n# resolve base_name/repo_url/repo_ref/project_root/port/scope/project/timeout (env→state→fallback)\n# resolve gh token: GH_TOKEN | GITHUB_TOKEN | `gh auth token`\n# 1. provision a sandbox (timeout/vcpus/published port/snapshot retention); trap: remove on error\n# 2. remote exec (long timeout): install pkgs + gh + corepack/pnpm + agent CLI;\n#    clone with GIT_ASKPASS(token); write headless main-only build config;\n#    dev setup; pnpm install; build CLI; build headless electron main; smoke-check tools\n# 3. snapshot stopped sandbox; parse snapshot id (fail if unparseable)\n# 4. merge { baseName, snapshotId, projectRoot, repoUrl, repoRef, port, scope, project } into state\n# print only the state JSON to stdout\n```\n\nWorked Vercel commands for this phase are in §7f. You run this script by hand (not via `orca.yaml`),\nafter exporting the first-run inputs the state file doesn't have yet — e.g. provider scope/project, the\nrepo URL/ref, and a git token (`GH_TOKEN`); later runs read them back from state.\n\n### 7b. Auth (`<provider>-base-auth.sh`) — Phase 3\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n# read source snapshot from state.snapshotId (fail if absent); auth_name=\"${base_name}-auth\"\n# 1. boot sandbox from source snapshot; trap: remove on error\n# 2. INTERACTIVE/TTY remote exec: agent login — user completes URL/code. Headless VM: MUST use the\n#    device-auth flow (e.g. `codex login --device-auth`) — plain OAuth login binds a loopback callback\n#    port the host can't reach and hangs. User runs this themselves (you have no interactive TTY); ask\n#    them to report back when it's done before continuing.\n# 3. verify login, then refuse to snapshot if not logged in. Prefer the status command's EXIT CODE (most\n#    agent CLIs exit non-zero when unauthenticated) over string-matching. If you must grep, fold stderr\n#    first (`status 2>&1 | grep …` — many agents print the success line there) and match the agent's exact\n#    success line; never `grep -qi 'logged in'`, which also matches \"not logged in\". Codex example: §7f.\n# 4. snapshot; parse new id\n# 5. merge { snapshotId:<new>, authSourceSnapshotId:<source> } into state; remove auth sandbox\n# print only the state JSON to stdout\n```\n\n### 7c. Create (`<provider>-create.sh`) — per workspace\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n# read authenticated snapshotId/scope/project/port/repo*/project_root (env→state→fallback)\n# fail clearly if snapshotId is missing (point back to Phases 2–3)\n# name = orca-${ORCA_VM_RECIPE_ID}-${ORCA_VM_INSTANCE_ID} (sanitized, length-capped)\n# 1. boot sandbox from snapshotId with a published port; capture the public URL → pairing address\n#    (an externally reachable wss:// URL); trap: remove sandbox on error\n# 2. remote exec: ensure repo at desired commit; rebuild only if commit changed (cache marker)\n# 3. remote exec: start orca serve in the background and read the recipe JSON it writes (see below)\n# 4. print serve's JSON to stdout, optionally enriched with userData:\n#    { schemaVersion:1, pairingCode, projectRoot, userData:{ provider, resourceId:name, snapshotId } }\n```\n\n**The exact `orca serve` invocation and its output (verified — do not improvise the flags).** Inside the\nVM, run:\n\n```bash\norca serve \\\n  --port \"$PORT\" \\\n  --project-root \"$ABS_REPO_PATH_ON_REMOTE\" \\\n  --pairing-address \"$EXTERNAL_WSS_URL\" \\\n  --recipe-json\n```\n\n**Binary name:** in a VM built from source (the Phase-2 flow), run it as `pnpm exec orca-dev serve …`\nfrom the repo root — `orca-dev` is the in-repo entrypoint and is what the §7f example uses. Plain\n`orca serve …` is the same command when the built CLI is installed on the VM's PATH. The flags/output\nare identical either way.\n\nThere is **no `--host` flag**. `--project-root` must be an absolute directory on the remote. With\n`--recipe-json` the server **stays running** and prints exactly this single object to **stdout**, then\nkeeps serving:\n\n```json\n{ \"schemaVersion\": 1, \"pairingCode\": \"<orca pairing URL>\", \"projectRoot\": \"<the --project-root you passed>\" }\n```\n\n`pairingCode` is the pairing URL, already pointing at whatever you passed as `--pairing-address` — so set\n`--pairing-address` to the externally reachable address and **pass `pairingCode` through unchanged; never\nhand-rewrite it**. Because serve runs in the foreground and doesn't exit, redirect its stdout to a file\nand poll until that file parses as JSON (and bail if the process dies — dump its stderr log). Your\n`create` script then prints that JSON (optionally merging `userData`). Concrete pattern: §7f.\n\n### 7d. Suspend / resume / destroy — per workspace\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\npayload=\"$(cat)\"                       # Orca passes lifecycle JSON on stdin\nresource_id=\"$(node -e 'const d=JSON.parse(process.argv[1]); process.stdout.write(d.recipeResult?.userData?.resourceId ?? \"\")' \"$payload\")\"\n[ -n \"$resource_id\" ] || { echo \"No resource id in lifecycle payload\" >&2; exit 1; }\n# suspend: provider suspend \"$resource_id\"\n# resume:  provider resume \"$resource_id\"; then RE-EMIT fresh recipe JSON (pairing may change)\n# destroy: provider remove \"$resource_id\"   (or set destroy: none in orca.yaml)\n```\n\n### 7e. State file — scaffold with scope/project/repo filled in and snapshot ids empty (§6).\n\n### 7f. Worked example — Vercel Sandbox (all three phases)\n\nA real, working shape (the Vercel surface is a CLI: `vercel sandbox create|exec|snapshot|remove`). Adapt\nnames; verify flags against `vercel sandbox --help` for the user's CLI version before relying on them.\nThese ground §7a (base snapshot) and §7b (auth), which are otherwise generic skeletons.\n\n**Phase 2 — base snapshot (§7a):** provision → install tools + clone + headless build → snapshot.\n\n```bash\n# provision a fresh build sandbox (retain a couple of snapshots); trap-remove on error\nvercel sandbox create --name \"$base\" --runtime node24 --timeout 30m --vcpus 4 --publish-port \"$port\" \\\n  --snapshot-expiration 30d --keep-last-snapshots 2 \"${vercel_args[@]}\" >&2\n# remote build (long timeout): install pkgs+gh+pnpm+agent CLI, clone with GIT_ASKPASS (write the helper\n# with LITERAL \\$1/\\$GH_TOKEN so they resolve at git-runtime, not write-time — see §5/§7f create — then\n# `rm -f /tmp/askpass.sh`), write the headless main-only build config (drop the renderer), dev setup,\n# build CLI + headless main, smoke-check\nvercel sandbox exec \"$base\" \"${vercel_args[@]}\" --timeout 25m --env \"GH_TOKEN=$gh_token\" … -- bash -lc '…build…' >&2\n# snapshot the STOPPED sandbox and parse the id from CLI output (fail if unparseable)\nout=\"$(vercel sandbox snapshot \"$base\" --stop --expiration 30d \"${vercel_args[@]}\" 2>&1)\"; printf '%s\\n' \"$out\" >&2\nsnapshot_id=\"$(printf '%s\\n' \"$out\" | sed -nE 's/.*(snap_[A-Za-z0-9]+).*/\\1/p' | tail -1)\"\n# merge { baseName, snapshotId, scope, project, port, repoUrl, repoRef, projectRoot } into state; print state JSON\n```\n\n**Phase 3 — agent-auth snapshot (§7b):** boot the base, log the agent in interactively, re-snapshot.\n(`codex` below is an example — substitute the user's chosen agent's login/status verbs, e.g. `claude`.)\n\n```bash\nvercel sandbox create --name \"$auth\" --snapshot \"$snapshot_id\" --timeout 30m --publish-port \"$port\" \"${vercel_args[@]}\" >&2\n# INTERACTIVE — the USER runs this in their own terminal (you have no interactive TTY) and completes the\n# URL/code on the HOST. --device-auth is MANDATORY on a headless VM: plain `codex login` binds a loopback\n# callback port the host browser can't reach and hangs. Ask the user to report back when login finishes.\nvercel sandbox exec --interactive --tty \"$auth\" \"${vercel_args[@]}\" -- bash -lc 'codex login --device-auth'\n# refuse to snapshot an unauthenticated VM — fold stderr, match codex's exact success line (§4)\nvercel sandbox exec \"$auth\" \"${vercel_args[@]}\" --timeout 30s -- bash -lc 'codex login status 2>&1' | grep -Eqi 'Logged in using ChatGPT|Logged in via device' \\\n  || { echo \"agent not logged in; not snapshotting\" >&2; exit 1; }\nout=\"$(vercel sandbox snapshot \"$auth\" --stop --expiration 30d \"${vercel_args[@]}\" 2>&1)\"; printf '%s\\n' \"$out\" >&2\nnew_id=\"$(printf '%s\\n' \"$out\" | sed -nE 's/.*(snap_[A-Za-z0-9]+).*/\\1/p' | tail -1)\"\n# overwrite state.snapshotId = new_id, record authSourceSnapshotId = snapshot_id; remove the auth sandbox\n```\n\n**Per-workspace `create`** (the fast path):\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n# resolve from env→state→fallback: snapshot_id, scope, project, port, repo_url, repo_ref, project_root\nvercel_args=(); [ -n \"$scope\" ] && vercel_args+=(--scope \"$scope\"); [ -n \"$project\" ] && vercel_args+=(--project \"$project\")\n[ -n \"$snapshot_id\" ] || { echo \"snapshotId missing — run Phases 2–3 first\" >&2; exit 1; }\ngh_token=\"${GH_TOKEN:-${GITHUB_TOKEN:-$(command -v gh >/dev/null 2>&1 && gh auth token 2>/dev/null || true)}}\"\nname=\"orca-${ORCA_VM_RECIPE_ID:-vercel-sandbox}-${ORCA_VM_INSTANCE_ID:-$(date +%s)}\"  # sanitize+cap to 63 chars\n\n# Arm cleanup BEFORE create so a failing create can't leak a half-built paid sandbox.\ncleanup_on_error() { [ \"$?\" -ne 0 ] && vercel sandbox remove \"$name\" \"${vercel_args[@]}\" >/dev/null 2>&1 || true; }\ntrap cleanup_on_error EXIT\n\n# 1. boot from the authenticated snapshot, publish the serve port\ncreate_output=\"$(vercel sandbox create --name \"$name\" --snapshot \"$snapshot_id\" \\\n  --timeout 30m --publish-port \"$port\" \"${vercel_args[@]}\" 2>&1)\"; printf '%s\\n' \"$create_output\" >&2\n# Vercel prints the published https URL; derive the external wss:// pairing address from it\npublic_url=\"$(printf '%s\\n' \"$create_output\" | sed -nE 's#.*(https://[^[:space:]]+\\.vercel\\.run).*#\\1#p' | head -1)\"\n[ -n \"$public_url\" ] || { echo \"no published URL in create output\" >&2; exit 1; }\npairing_ws=\"${public_url/https:\\/\\//wss://}\"\n\n# 2. (remote) ensure the repo is at the right commit; rebuild only if the commit changed (cache marker)\nvercel sandbox exec \"$name\" \"${vercel_args[@]}\" --timeout 20m \\\n  --env \"GH_TOKEN=$gh_token\" --env \"ORCA_PROJECT_ROOT=$project_root\" \\\n  --env \"ORCA_REPO_URL=$repo_url\" --env \"ORCA_REPO_REF=$repo_ref\" \\\n  -- bash -lc 'set -euo pipefail; cd \"$ORCA_PROJECT_ROOT\"; \\\n    # Re-establish git auth for the private-repo fetch (why + full rationale: §5); else it hangs on a prompt.\n    # Load-bearing escaping: \\$1 and \\$GH_TOKEN must land LITERALLY and resolve at git-runtime. Test after\n    # any edit here — reformatting the nested printf/node quoting silently breaks the fetch or leaks the token.\n    if [ -n \"${GH_TOKEN:-}\" ]; then \\\n      printf \"%s\\n\" \"#!/usr/bin/env bash\" \"case \\\"\\$1\\\" in *Username*) echo x-access-token;; *Password*) echo \\\"\\$GH_TOKEN\\\";; esac\" > /tmp/askpass.sh; \\\n      chmod 700 /tmp/askpass.sh; export GIT_ASKPASS=/tmp/askpass.sh GIT_TERMINAL_PROMPT=0; fi; \\\n    git fetch origin \"$ORCA_REPO_REF\"; \\\n    git checkout -B \"$ORCA_REPO_REF\" FETCH_HEAD; \\\n    rm -f /tmp/askpass.sh; \\\n    c=\"$(git rev-parse HEAD)\"; [ -f .orca-built ] && [ \"$(cat .orca-built)\" = \"$c\" ] || { \\\n      pnpm install --prefer-offline && pnpm run build:cli && \\\n      node config/scripts/run-electron-vite-build.mjs --config config/electron-vite.vm-serve.config.ts && \\\n      printf \"%s\" \"$c\" > .orca-built; }' >&2\n\n# 3. (remote) start orca serve in the background, writing recipe JSON to a file; poll until it parses\nrecipe_json=\"$(vercel sandbox exec \"$name\" \"${vercel_args[@]}\" --timeout 60s \\\n  --env \"ORCA_PORT=$port\" --env \"ORCA_PROJECT_ROOT=$project_root\" --env \"ORCA_PAIRING_ADDRESS=$pairing_ws\" \\\n  -- bash -lc 'set -euo pipefail; cd \"$ORCA_PROJECT_ROOT\"; rm -f /tmp/orca-recipe.json /tmp/orca-serve.log; \\\n    nohup pnpm exec orca-dev serve --port \"$ORCA_PORT\" --project-root \"$ORCA_PROJECT_ROOT\" \\\n      --pairing-address \"$ORCA_PAIRING_ADDRESS\" --recipe-json >/tmp/orca-recipe.json 2>/tmp/orca-serve.log </dev/null & \\\n    pid=$!; for _ in $(seq 1 80); do \\\n      node -e \"JSON.parse(require(\\\"node:fs\\\").readFileSync(\\\"/tmp/orca-recipe.json\\\",\\\"utf8\\\"))\" >/dev/null 2>&1 && { cat /tmp/orca-recipe.json; exit 0; }; \\\n      kill -0 \"$pid\" 2>/dev/null || { cat /tmp/orca-serve.log >&2; exit 1; }; sleep 0.25; \\\n    done; cat /tmp/orca-serve.log >&2; echo \"serve recipe JSON timed out\" >&2; exit 1')\"\n\n# 4. print serve's JSON enriched with userData (single object on stdout)\nnode -e 'const p=JSON.parse(process.argv[1]); console.log(JSON.stringify({...p, schemaVersion:1,\n  userData:{...p.userData, provider:\"vercel-sandbox\", resourceId:process.argv[2], snapshotId:process.argv[3]}}))' \\\n  \"$recipe_json\" \"$name\" \"$snapshot_id\"\ntrap - EXIT\n```\n\n`suspend`/`resume`/`destroy` use `vercel sandbox stop|...|remove \"$resource_id\"` reading\n`userData.resourceId` from stdin (§7d). This is the **Orca-server** connection mode (the recipe emits a\npairing URL). If the user chose **SSH** in the §1 interview, use §7g instead.\n\n### 7g. Worked example — existing SSH host (SSH connection mode)\n\nSSH mode is **fundamentally different from §7c/§7f**, not a relabeling of them:\n\n- **`create` does NOT run `orca serve` and does NOT emit a `pairingCode`.** Orca itself connects to the\n  host over its SSH relay, brings up the git + filesystem providers, and imports the repo. The script's\n  only job is to make the host ready and **print SSH connection details** Orca will dial.\n- The result uses a `connection` block with `type: \"ssh\"` and a `target`, **not** the flat\n  `pairingCode`/`projectRoot` shape. Exact shape (Orca rejects anything else):\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"connection\": {\n    \"type\": \"ssh\",\n    \"projectRoot\": \"/abs/path/to/repo/on/host\",\n    \"target\": {\n      \"label\": \"my-box\",\n      \"host\": \"192.0.2.10\",\n      \"port\": 22,\n      \"username\": \"ubuntu\",\n      \"identityFile\": \"~/.ssh/id_ed25519\",\n      \"jumpHost\": \"bastion.example.com\",\n      \"proxyCommand\": \"cloudflared access ssh --hostname %h\",\n      \"relayGracePeriodSeconds\": 0,\n      \"portForwards\": []\n    }\n  }\n}\n```\n\n`label`, `host`, `port`, `username` are required; the rest are optional — omit any you don't need.\n\n**Networking → which `target` fields to set** (how *your desktop* reaches the box — there is no\n`orca serve` URL in SSH mode):\n\n- Public IP / DNS, or a Tailscale/VPN address → `host`; SSH port → `port` (usually 22).\n- Key auth → `identityFile` (add `identitiesOnly: true` if the agent has many keys).\n- Through a bastion → `jumpHost` (a `user@host` ProxyJump) **or** a full `proxyCommand` (e.g. an access\n  proxy). Use one, not both.\n- A service port the workspace needs → add entries to `portForwards`.\n- `relayGracePeriodSeconds` (optional): how long Orca keeps the SSH relay alive after the workspace\n  detaches before tearing it down; `0` = tear down immediately. Leave it off unless the user wants a\n  reconnect grace window.\n\n**Toolchain & agent auth on a persistent (no-snapshot) host — do this ONCE, by hand, before wiring the\nrecipe** (there's no base image to bake; the host *is* the base). Run the §7f Phase-2 install steps and\nthe §7f Phase-3 `<agent> login --device-auth` **directly over SSH on the host** (interactive, e.g.\n`ssh -t user@host '<agent> login --device-auth'`). After that the host stays ready across workspaces.\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n# resolve from env→state→fallback (default unset optionals to \"\"): ssh_username, host,\n#   ssh_port (default 22), identity_file, jump_host, proxy_command, project_root, repo_url, repo_ref\n: \"${identity_file:=}\"; : \"${jump_host:=}\"; : \"${proxy_command:=}\"   # avoid set -u aborts on optionals\ngh_token=\"${GH_TOKEN:-${GITHUB_TOKEN:-$(command -v gh >/dev/null 2>&1 && gh auth token 2>/dev/null || true)}}\"\nssh_target=\"${ssh_username}@${host}\"\nssh_opts=(-p \"$ssh_port\"); [ -n \"$identity_file\" ] && ssh_opts+=(-i \"$identity_file\")\n# Why: a fresh host's key isn't in known_hosts; a StrictHostKeyChecking prompt would HANG a\n# non-interactive create. Pre-add the key (or set the option) so it can't block.\nssh-keyscan -p \"$ssh_port\" \"$host\" >> \"$HOME/.ssh/known_hosts\" 2>/dev/null || true\n\n# 1. ensure the repo is present and at the right commit on the host (NO orca serve here)\nssh \"${ssh_opts[@]}\" \"$ssh_target\" \\\n  \"GH_TOKEN='$gh_token' GIT_TERMINAL_PROMPT=0 bash -lc '\n     set -euo pipefail\n     [ -d \\\"$project_root/.git\\\" ] || git clone \\\"$repo_url\\\" \\\"$project_root\\\"\n     cd \\\"$project_root\\\" && git fetch origin \\\"$repo_ref\\\" && git checkout -B \\\"$repo_ref\\\" FETCH_HEAD\n   '\" >&2\n\n# 2. print the SSH connection block (NO pairingCode, NO orca serve). host/port/username tell Orca's\n#    relay how to dial in; identityFile/jumpHost/proxyCommand/portForwards are emitted when set.\nnode -e 'const [host,port,user,idf,jh,pc,root]=process.argv.slice(1);\n  const target={ label:\"per-workspace-host\", host, port:Number(port), username:user };\n  if(idf) target.identityFile=idf; if(jh) target.jumpHost=jh; if(pc) target.proxyCommand=pc;\n  // add target.portForwards=[...] here if the workspace needs forwarded service ports\n  console.log(JSON.stringify({ schemaVersion:1, connection:{ type:\"ssh\", projectRoot:root, target } }))' \\\n  \"$host\" \"$ssh_port\" \"$ssh_username\" \"$identity_file\" \"$jump_host\" \"$proxy_command\" \"$project_root\"\n```\n\n`suspend`/`resume`/`destroy`: on a persistent host there's usually nothing to tear down — set\n`destroy: none` and omit suspend/resume. (Orca still disconnects/reconnects its own SSH relay on\nsleep/wake/delete — that's separate from these scripts.)\n\nIf the SSH host is instead an **ephemeral/snapshot-capable VM** (your hypervisor, or a cloud VM with\nimage support), keep the §7f Phase-2/3 base-image model for provisioning, but still emit the\n`connection.type:\"ssh\"` block above instead of starting `orca serve`.\n\n### 7h. Worked example — local Docker SSH (SSH connection mode)\n\nLocal Docker can model an ephemeral SSH VM without cloud cost: build a base image with `sshd`, tools,\nrepo prerequisites, and the agent CLI; run an **interactive auth container** once; then `docker commit`\nthat container as the authenticated image used by per-workspace `create`.\n\nKey points:\n\n- Publish container SSH to a random localhost port (`-p 127.0.0.1::22`) and emit\n  `connection.type:\"ssh\"` with `host:\"127.0.0.1\"`, that port, `username`, `identityFile`, and\n  `identitiesOnly:true`.\n- Generate a repo-local SSH key if needed, but gitignore the private/public key files.\n- **Bake SSH host keys into the base image** (`ssh-keygen -A` at **build** time; at runtime only generate\n  if absent). Ephemeral containers all present the **same** host key, so `known_hosts` on `127.0.0.1`\n  doesn't churn as the published port rotates across workspaces (otherwise every container's freshly\n  generated key collides on `localhost` and trips host-key-changed warnings).\n- The auth image is the Docker equivalent of Phase 3: the **user** runs the agent login **inside** the\n  container (you can't drive it — you have no interactive TTY), configures proxy env/config, approves\n  hooks, and you commit once they report it's done. On a headless container use the **device-auth** flow\n  (§4). Verify login before committing — exit code, or fold stderr and match the exact success line (§4).\n- Do not bind-mount or copy the host's full agent home into the image. Let each container have writable\n  agent state; only the committed auth image should carry reusable authenticated state.\n- If committing from an interactive shell, force the runtime entrypoint back to `sshd`:\n  `docker commit --change='ENTRYPOINT [\"/usr/local/bin/orca-docker-ssh-entrypoint\"]' …`.\n- `destroy` should read `recipeResult.userData.resourceId` and run `docker rm -f \"$resource_id\"`.\n\nValidation before wiring/live use:\n\n```bash\ndocker image inspect \"$auth_image\" --format '{{json .Config.Entrypoint}}'\ndocker run -d --name \"$name\" -p 127.0.0.1::22 -e \"ORCA_SSH_PUBLIC_KEY=$pubkey\" \"$auth_image\"\ndocker ps -a --filter \"name=$name\"\ndocker logs \"$name\"\nssh -i \"$key\" -p \"$port\" -o IdentitiesOnly=yes user@127.0.0.1 'codex --version'\n```\n\nIf the container exits immediately, inspect logs before the cleanup trap removes it; a committed\ninteractive image with `ENTRYPOINT [\"bash\"]` is a common cause.\n\nAlso confirm the **host key is stable** across containers: the SSH `ssh -i … 127.0.0.1` dial should not\ntrigger a host-key-changed warning when a second container reuses the port. If it does, the host keys\nweren't baked into the base image (see the `ssh-keygen -A` point above).\n\n### 7i. Windows local-side scripts\n\nThe local-side scripts run on the user's desktop. On **Windows**, a bare `.sh` won't execute. Either\nrequire WSL/Git-Bash (and point `orca.yaml` at e.g. `bash ./scripts/orca-vm/<name>.sh` via a `.cmd`\nlauncher), or scaffold PowerShell equivalents. Minimal PowerShell shape:\n\n```powershell\n#requires -Version 5\n$ErrorActionPreference = 'Stop'\n# resolve env→state→fallback; run the provider CLI / ssh the same way;\n# capture provider output; build the result object for the chosen mode and write ONE line of JSON to stdout.\n# Orca-server mode: @{ schemaVersion=1; pairingCode=$pairingCode; projectRoot=$projectRoot; userData=@{...} }\n# SSH mode:        @{ schemaVersion=1; connection=@{ type=\"ssh\"; projectRoot=$projectRoot;\n#                     target=@{ label=$label; host=$host; port=$port; username=$user } } }  (see §7g/§7h)\n($result | ConvertTo-Json -Compress -Depth 6)\n# progress/errors → Write-Error / the error stream, never stdout.\n```\n\nThe remote-side commands you run *inside* the Linux VM stay bash regardless of the desktop OS.\n\n---\n\n## 8. Per-workspace recipe contract (the fast path)\n\nOnce the authenticated snapshot exists, this runs on every workspace create. Define recipes in\n`orca.yaml`:\n\n```yaml\nenvironmentRecipes:\n  - id: cloud-sandbox\n    name: Cloud Sandbox\n    create: ./scripts/orca-vm/cloud-sandbox-create.sh\n    suspend: ./scripts/orca-vm/cloud-sandbox-suspend.sh\n    resume: ./scripts/orca-vm/cloud-sandbox-resume.sh\n    destroy: ./scripts/orca-vm/cloud-sandbox-destroy.sh\n```\n\n`create` runs **locally from the repo root** and prints **one** JSON object to stdout. Its shape depends\non the connection mode chosen in §1:\n\n**Orca-server mode** — boot the env, start `orca serve` in it, and print serve's result:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"pairingCode\": \"orca-pairing-code-or-url\",\n  \"projectRoot\": \"/absolute/path/to/repo/on/remote\",\n  \"userData\": { \"provider\": \"example\", \"resourceId\": \"provider-resource-id\" }\n}\n```\n\nHere `pairingCode` (from `orca serve --recipe-json`) and `projectRoot` are required; `schemaVersion` (`1`)\nand `userData` are optional.\n\n**SSH mode** — do **not** run `orca serve`; print the `connection.type:\"ssh\"` block instead (full shape +\nworked script in §7g). `pairingCode` is **not** used in SSH mode.\n\nLifecycle hooks (all run locally):\n\n- `create`: required. Prints recipe result JSON.\n- `suspend`: optional. Sleep; reads lifecycle payload on stdin.\n- `resume`: optional. Wake; reads payload on stdin and **prints fresh recipe JSON** (pairing may change).\n- `destroy`: optional unless `destroy: none`. Delete/cleanup; reads payload on stdin.\n\nStart Orca remotely with `orca serve --port \"$PORT\" --project-root \"$ABS_ROOT\" --pairing-address\n\"$EXTERNAL_WSS_URL\" --recipe-json` (exact flags + output in §7c). Set `--pairing-address` to the\nexternally reachable address so the emitted `pairingCode` is reachable; tunneling/port mapping is the\nscript's job.\n\nBackward compatibility: `command`→`create`, `cleanup`→`destroy`, `cleanup: none`→`destroy: none`.\nPrefer the lifecycle names.\n\n---\n\n## 9. Doctor and validation\n\nValidate in two stages — the cheap dry run first, then the live self-test.\n\n### Dry run (free, non-destructive) — always do this first\n\n`orca vm recipe doctor <recipe-id> --repo-path <repo> --json` validates **static wiring only** — it does\n**not** boot anything. It checks: local-host execution (v1), repo path, recipe id exists,\ncreate/destroy/suspend/resume command paths resolve, suspend/resume are paired, and each script is\nexecutable (POSIX exec bit; skipped on Windows). Fix every failure here before spending any cloud money.\n\n### Live self-test (`--provision`) — diagnose and iterate yourself\n\n`orca vm recipe doctor <recipe-id> --repo-path <repo> --provision --json` actually runs the recipe end\nto end: it executes `create`, validates the returned recipe JSON, then runs `destroy` to **tear the\nenvironment back down** (so the test leaves nothing running, as long as `destroy` works). It spends real\ncloud money, so get the user's OK **once** before starting — that one approval covers the whole loop\nbelow; do not re-ask before each run.\n\nOn failure, the JSON result includes a `provisionTranscript` with the **complete** captured output of\neach stage so you can self-diagnose without asking the user to relay logs:\n\n```json\n{\n  \"ok\": false,\n  \"checks\": [ { \"id\": \"recipe.provision\", \"status\": \"fail\", \"message\": \"…\" } ],\n  \"provisionTranscript\": {\n    \"provision\": { \"exitCode\": 0, \"signal\": null, \"stdout\": \"…\", \"stderr\": \"…\", \"parseError\": \"…\" },\n    \"destroy\":   { \"exitCode\": 0, \"signal\": null, \"stdout\": \"…\", \"stderr\": \"…\" }\n  }\n}\n```\n\n**Run it as a loop:** read `provisionTranscript.provision.stderr` / `.stdout` / `.parseError` (and\n`destroy.*`), fix the script, and re-run `--provision` until `ok` is `true` — iterating on your own\nrather than waiting for the user to paste errors. Common reads: a non-empty `stderr` with `exitCode 0`\nplus a `parseError` means `create` ran but printed something other than the single recipe-result JSON on\nstdout (often a stray `echo` — route it to stderr, see §10); a non-zero `exitCode` is a provider/script\nfailure described in `stderr`. Each stream is redacted and capped (head+tail) — large logs keep both the\nsetup context and the failure.\n\nThe self-test cannot see provider-side truth beyond what the scripts print, so still confirm: state has a\npopulated **authenticated** `snapshotId` (Phases 2–3 done), and `destroy` is implemented/tested (or\nexplicitly `none` — in which case the self-test won't tear down, so clean up manually).\n\nFor SSH recipes, also smoke-test the exact emitted target before declaring success: dial the host/port\nwith the identity/proxy settings, run `pwd`, verify the repo path, check the agent binary, and confirm\n`destroy` removes the provider resource/container. For Docker, inspect the auth image entrypoint and do a\nstartup-only `docker run` before the full clone/install path.\n\n---\n\n## 10. Failure modes\n\n- **Build exceeds plan timeout (e.g. Hobby 45m).** Use enough vCPUs and a timeout covering the build;\n  else split work or use a higher plan. The cap also limits per-workspace runtime — surface it.\n- **Build exceeds plan RAM.** Build the **headless main only** (drop the renderer) — the biggest fitter.\n- **Private-repo clone hangs/fails.** Wrong/missing token. Use `GIT_ASKPASS` + `GIT_TERMINAL_PROMPT=0`\n  so it fails fast instead of prompting.\n- **`GIT_ASKPASS` helper aborts the clone with \"`$1: unbound variable`\".** The `printf`/heredoc that writes\n  the helper inside `bash -lc` under `set -u` expanded `$1`/`$GH_TOKEN` at **write** time. Escape them\n  (`\\$1`, `\\$GH_TOKEN`) so they land literally and resolve at git-runtime; this also keeps the real token\n  out of the file. `rm -f` the helper afterward (§5, §7f).\n- **Agent verified as \"not logged in\" despite a good login.** `codex login status` (and similar) print\n  \"Logged in …\" to **stderr**; an stdout-only `grep` misses it. Prefer the status **exit code**; if you\n  grep, fold stderr first (`status 2>&1 | grep …`) and match the exact success line — not `grep -qi\n  'logged in'`, which also matches \"not logged in\".\n- **Headless agent login hangs.** Plain OAuth `login` starts a loopback callback server on a VM/container\n  port the host browser can't reach. Use the **device-auth** flow (`login --device-auth`) — it prints a\n  URL + code the user opens on the host.\n- **`known_hosts` host-key churn on local Docker.** Each ephemeral container regenerating its SSH host key\n  collides on `127.0.0.1` as the published port rotates. Bake host keys into the base image at build time\n  (`ssh-keygen -A`; runtime generates only if absent) so all containers share one stable key (§7h).\n- **Snapshot expired/evicted.** If `create` hits an unknown snapshot id, rerun Phases 2–3 and update\n  `snapshotId`.\n- **Agent auth didn't persist.** Confirm `snapshotId` points at the **authenticated** snapshot; re-run\n  Phase 3. Warn that short-lived tokens may need periodic re-auth.\n- **Agent auth copied from the host breaks.** Do not bind-mount/copy a full host agent home; sqlite\n  files can be unwritable or host-specific, hooks may need approval again, and config may reference\n  local-only env vars. Authenticate inside the runtime and snapshot/commit that layer.\n- **Docker auth image exits immediately.** Inspect `docker image inspect … .Config.Entrypoint` and\n  `docker logs`. If the image was committed from an interactive shell, reset the entrypoint to the SSH\n  entrypoint during `docker commit`.\n- **Leaked paid resource.** Every long script must trap errors and remove the sandbox it created.\n- **`create` emits non-JSON on stdout.** A stray `echo` corrupts the result — stdout is for the final\n  JSON only; everything else to stderr. The `--provision` self-test surfaces this as `exitCode 0` + a\n  `parseError` with the offending stdout in `provisionTranscript` (§9).\n\n---\n\n## 11. Boundaries\n\n- Don't create accounts, choose plans/regions, or invent scope/project/org/image/billing ids.\n- Don't invent or store credentials; no secrets in `userData`, state, comments, docs, or commits.\n- Don't run paid/long phases (base snapshot, auth, live test) without an explicit OK.\n- Don't hide provider errors behind generic messages — preserve actionable stderr.\n- Don't make Orca own provider lifecycle beyond invoking the configured scripts.\n- Don't commit or create an Orca workspace unless asked.\n"
 
 // oxfmt-ignore
-const ORCHESTRATION_MARKDOWN = "---\nname: orchestration\ndescription: >-\n  Use Orca orchestration for structured multi-agent coordination: threaded\n  messages, blocking ask/reply flows, task dispatch, worker_done/escalation\n  waits, task DAGs, decision gates, coordinator loops, or decomposing work\n  across agents. Use `orca-cli` instead for full ownership handoffs, including\n  requests phrased as \"hand off\", \"handoff\", \"handover\", \"give this to another\n  agent\", or \"another worktree\" when the user did not explicitly ask to\n  supervise, monitor, wait for results, or coordinate a DAG. Use `orca-cli` for\n  ordinary terminal control, lightweight terminal prompts, shell commands, Orca\n  worktree management, reading or waiting on terminals, and automation of the\n  browser embedded inside Orca. Use Computer Use for browser windows, webviews,\n  Orca app UI, or desktop UI outside Orca's embedded browser.\n---\n\n# Orca Inter-Agent Orchestration\n\nOrchestration is Orca's structured coordination layer for agent messages, task ownership, dispatch state, and worker completion tracking.\n\nUse this skill when coordination state matters. For lightweight terminal prompts or basic worktree/terminal/built-in-browser control, use `orca-cli`.\n\n## Tool Boundary\n\nIf a task says to use Orca orchestration, the coordinator must create or bind a Run, create the Task with `orca orchestration task-create`, then attach the worker with either the preferred `orca orchestration worker-start` composition or the low-level `orca orchestration dispatch --inject` path.\n\nDo not substitute non-Orca subagent tools, generic agent-spawn APIs, or chat-only parallel worker features. Those may create useful workers, but they do not create Orca task/dispatch provenance, injected lifecycle preambles, `worker_done` authority, or decision gates.\n\nBefore claiming a worker was orchestrated, verify the task/dispatch exists:\n\n```bash\norca orchestration task-list --json\norca orchestration dispatch-show --task <task_id> --json\n```\n\nIf the work was accidentally run outside Orca orchestration, say so plainly. To repair provenance, rerun or revalidate the needed work through a fresh Orca terminal plus injected dispatch; do not retroactively describe the external worker as orchestrated.\n\n## When To Use\n\n- Send/reply/ask between agent terminals with persistent messages.\n- Dispatch structured tasks to workers and wait for `worker_done` or `escalation`.\n- Track task DAGs with dependencies.\n- Run coordinator loops or decision gates.\n\nDo not use orchestration merely because the user says \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", or asks for another worktree/agent/model/effort. Those are full ownership transfers unless the user explicitly asks to supervise, monitor, wait for worker completion/results, coordinate a DAG, use decision gates, or keep a blocking ask/reply loop.\n\n## Preconditions\n\n- `orca status --json` should show a running runtime.\n- `orca` must be on PATH (`orca-ide` on Linux).\n- The orchestration experimental feature must be enabled in Settings > Experimental.\n- `orca orchestration` commands are RPC calls to the running Orca runtime.\n\n## Contract Migration\n\nOrca adopts a live pre-update orchestration assignment into an ordinary Run. Adoption preserves the existing agent process, PTY/session, terminal handle, tab/leaf/pane, worktree or folder workspace, Task, and Dispatch; it never restarts or replaces the worker. The retired scheduler is not revived, and a newly created attempt uses the current grammar.\n\nTreat the authority label on injected or formatted messages as definitive:\n\n- `[LEGACY COMPATIBILITY]` is live and attested. Run only the exact supported command printed with the message, using the same CLI executable and arguments that the original prompt supplied.\n- `[LEGACY RECOVERY REPLAY — MAY HAVE BEEN SEEN]` is one bounded, at-least-once cutover replay. Process it idempotently and acknowledge it only through the exact displayed guidance.\n- `[LEGACY READ-ONLY]` is inspection-only. It has no reply, acknowledgment, or lifecycle action.\n- An unlabeled current message uses the current guide and current grammar.\n\nAn explicitly selected current Run, attested current Run binding, current Dispatch, or federated attachment takes precedence over legacy fallback. A retained adoption record alone never turns a current command into a legacy call.\n\nDatabase provenance, an old-looking terminal, or a legacy Run ID does not prove mutation authority. If the runtime cannot prove liveness, principal ownership, capability, or the exact legacy contract, it degrades to read-only inspection and must not fall back to local execution. Exact recovery may restore the already-live PTY once in its original inactive background tab. It must not spawn, write, signal, stop, switch, focus, split, or inject a terminal. Loss of lifecycle authority does not invalidate the existing assignment, process, or filesystem work.\n\nCompatibility retries have narrow guarantees. A pending ask, a reply, a final Dispatch settlement, and a consuming check have durable recovery identities. A-era heartbeat and escalation calls remain at-least-once across a manual A-to-B retry because identical later signals may be intentional. If an A-era ask may already have been answered, run the exact non-consuming recovery check printed by the runtime first; after its answer is printed and acknowledged, a new invocation with the same question creates a new question. Never guess among multiple identical question threads.\n\nWhen a compatibility or recovery command returns structured next-step arguments, run those exact arguments with the same CLI executable. The arguments intentionally omit the executable name so the guidance works with `orca`, `orca-ide`, `orca-dev`, or another configured Orca CLI command. Do not translate the command from memory, broaden its recipient, or retry it as a current mutation unless the returned guidance explicitly says to.\n\nOn packaged Windows, a legacy ask uses a two-step commit/resume protocol. The initial command durably commits the question, prints its exact `ask --resume <message_id>` command, and exits with launcher status `75`; it does not wait for the answer. Run that exact resume command after the launcher or update boundary. Resume is idempotent and read-oriented: it waits for the already-committed question and does not create another one. For a WSL process that received compatibility proof at launch, use the printed executable `orca-ide` WSL resume command so the same distro and packaged launcher authority are preserved; do not substitute a PATH-resolved local CLI. Older WSL processes that never received the hidden launch token remain lifecycle read-only after the update, even while their terminal and filesystem work continue.\n\nLegacy inspection remains available without consuming mail:\n\n```bash\norca orchestration run-list --json\n# run_legacy_local is an empty audit tombstone after adoption.\norca orchestration run-show --id run_legacy_local --json\n# In run-list, find the ordinary Run whose objective is:\n# \"Recovered orchestration work from a contract update\"\norca orchestration run-show --id <adopted_run_id> --json\norca orchestration task-list --run <adopted_run_id> --json\norca orchestration inbox --full --json\norca orchestration check --terminal <legacy_handle> --peek --format --json\norca terminal read --terminal <legacy_handle> --json\norca terminal wait --terminal <legacy_handle> --for tui-idle --timeout-ms 60000 --json\n```\n\nIf the original coordinator is unavailable or cannot prove its retained authority, a current coordinator may explicitly take over the adopted Run from its own live agent terminal:\n\n```bash\norca orchestration run-use --id <adopted_run_id> --takeover-legacy --json\norca orchestration check --run <adopted_run_id> --json\n```\n\nTakeover fences only the old coordinator, binds the current one, and moves pending worker mail into current Run Delivery. It is bound to the authenticated invoking terminal; `--from` cannot name another coordinator. Live legacy workers keep their original Tasks, Dispatches, processes, filesystems, and old prompt commands; their later questions, escalations, and completion reports route to the current coordinator. Do not use takeover while the original coordinator is still actively coordinating, because its later lifecycle mutations are rejected.\n\nDo not launch a replacement editor merely because the desktop app or runtime was updated. If adoption cannot prove continuing authority, keep the original worker as the only editor until it reaches a stable handoff point, then use a new current Dispatch in a conflict-free placement for any remaining work.\n\n## Ownership\n\nNew orchestration messages and tasks belong to one explicitly bound Run. A Run is only a durable namespace and coordinator inbox; it never schedules or places workers. Lifecycle authority comes from the active Dispatch, and terminal handles remain routing metadata rather than durable identity. Send `worker_done` and `heartbeat` from the worker's own terminal; Orca routes them to that Dispatch's Run.\n\nClassify inherited context before sending lifecycle messages:\n\n- Coordinated subtask: a live coordinator owns the DAG and waits on this dispatch. Follow the preamble exactly, including `worker_done`, heartbeat/status, `ask`, and `escalation`.\n- Full handoff means ownership transfer, not supervised dispatch. The original actor is not monitoring a DAG, so do not create lifecycle obligations unless the user explicitly asks you to supervise.\n- Classify requests containing \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", \"give this to another worktree\", \"another agent\", or \"another worktree\" as full handoffs by default, even when the user names a custom model or reasoning effort.\n- Use supervised orchestration only when the user explicitly asks you to \"supervise\", \"monitor\", \"wait\", \"track completion\", \"wait for worker_done\", return results, coordinate a DAG, use a decision gate, or manage ask/reply flow.\n- Do not use `orca orchestration dispatch --inject` for full handoffs. It injects a coordinator preamble that tells the worker to send `worker_done`, heartbeat, and `ask` messages, then end its turn under the original terminal's dispatch lifecycle.\n- Do not run `orca orchestration task-create`, `orca orchestration dispatch --inject`, or `orca orchestration check --wait` for full handoffs. Do not peek at terminal output after prompt delivery to monitor progress.\n- A review-only `worker_done` reports findings; it does not authorize coordinator file edits. After a review-only completion, synthesize findings, ask a decision gate if ownership is unclear, and dispatch or hand off fixes unless the user explicitly asked the coordinator to own fixes.\n- If the user's plan names a next owner agent (for example, \"then use opencode to create a PR\"), post-review corrections and PR prep belong to that named owner. The coordinator routes, synthesizes, asks decision gates when needed, and supervises; the named owner edits files and creates the PR.\n\nIf unclear, inspect orchestration state before sending lifecycle messages:\n\n```bash\norca orchestration task-list --json\norca terminal list --json\n# If inherited context includes a task id:\norca orchestration dispatch-show --task <task_id> --json\n```\n\n## Messaging\n\n```bash\norca orchestration send --subject <text> [--to <run:id|dispatch:id|legacy_handle>] [--from <handle>] [--body <text>] [--type <type>] [--priority <level>] [--thread-id <id>] [--payload <json>] [--json]\norca orchestration check [--terminal <handle>] [--ack <delivery_id>] [--peek|--all] [--types <type,...>] [--format] [--wait] [--timeout-ms <n>] [--json]\norca orchestration reply --id <msg_id> --body <text> [--from <handle>] [--json]\norca orchestration ask (--question <text>|--resume <msg_id>) [--options <csv>] [--timeout-ms <n>] [--from <handle>] [--json]\norca orchestration inbox [--limit <n>] [--json]\n```\n\nRules:\n\n- Omit `--from` unless impersonating another terminal; Orca auto-resolves it from the current terminal.\n- A coordinator `check` returns the bound Run's oldest FIFO Delivery (up to 50 messages) and replays that exact batch until `--ack <delivery_id>`. Process every message before acknowledging; `check --ack <id> --wait` acknowledges, checks, and waits in one operation.\n- Use `--peek` and `--all` only for read-only history/debugging. Type filters decide when a waiter wakes; the returned actionable Delivery is still the oldest full batch.\n- Use `dispatch:<id>` for coordinator guidance to one supervised worker. Orca routes that stable address locally or through the connected-server relay; do not substitute a remote terminal handle.\n- Terminal handles remain appropriate for low-level pre-Dispatch messaging. Prefer `agentTerminalHandle` from the create response, fall back to `startupTerminal.handle` for older runtimes, then re-resolve with `orca terminal list --worktree ... --json` if missing or stale. Continue with the replacement handle only; never dual-send to old and new handles.\n- `terminal list --json` omits `visualLayouts` because handle recovery does not need topology. Add `--include-visual-layouts` only for explicit tab and pane inspection.\n- `orca orchestration check --peek --format --json` returns locally formatted unread mail without consuming it; it never writes to terminal input or remotely wakes another terminal. Use `orchestration dispatch --inject` to deliver a tracked task, or `terminal send` when an existing agent needs a free-form prompt.\n- While supervising workers manually, use `check --wait --types worker_done,escalation,question --timeout-ms <n>` instead of sleep/poll loops. Process the whole Delivery, reply to `question` messages with `orca orchestration reply --id <msg_id> --body <answer> --json`, then acknowledge and keep waiting.\n- Treat a `check --wait` timeout or `{count:0}` as a checkpoint, not a worker failure. Long coding tasks routinely run 15-60 minutes; keep using rolling waits unless you receive `worker_done`/`escalation`, the terminal exits or disappears, or the user explicitly asks you to stop.\n- Heartbeats and visible terminal activity mean the worker is alive, not done. Do not stop, close, kill, or restart a worker just because it has not produced a completion message yet.\n- Use `ask` when a worker needs a blocking answer from the coordinator; it defaults to the active Dispatch's Run. Timeout or disconnect leaves the question pending, so resume by its original message ID instead of asking again.\n- `check --wait` returns one bounded Delivery, not every future completion. Process every message, acknowledge it, then keep waiting until every expected Dispatch settles.\n- Group addresses include `@all`, `@idle`, `@claude`, `@codex`, `@opencode`, `@gemini`, `@droid`, `@grok`, `@cursor`, and `@worktree:<id>`.\n- Message types include `status`, `dispatch`, `worker_done`, `merge_ready`, `escalation`, `handoff`, `question`, `decision_gate` (legacy/gates), and `heartbeat`.\n- Use group addresses only for messages that are genuinely useful to many terminals, such as `status` broadcasts or intentional fan-out questions. Do not send dispatch lifecycle messages to groups.\n- `worker_done` belongs to the active Dispatch and defaults to its Run mailbox; never target a group.\n- A valid `worker_done` for the active `taskId` + `dispatchId` marks the task and dispatch completed automatically. Do not follow it with `task-update --status completed`; reserve manual updates for explicit recovery or overrides.\n- `heartbeat` is also Dispatch-scoped. Include both IDs and omit `--to` so Orca uses the owning Run; use `status` for broad progress updates.\n\n## Tasks And Dispatch\n\nA Run is the namespace/inbox, a Task is the work item, and a Dispatch assigns one Task attempt to a terminal. Create or bind a Run once before the common loop.\n\n```bash\norca orchestration run-create --objective <text> --json\norca orchestration task-create --spec <text> [--deps <json_array>] [--parent <task_id>] [--json]\norca orchestration task-list [--status <status>] [--ready] [--brief] [--json]\norca orchestration task-update --id <task_id> --status <status> [--result <json>] [--json]\norca orchestration dispatch --task <task_id> --to <handle> [--from <handle>] [--inject] [--json]\norca orchestration dispatch-show --task <task_id> [--json]\n```\n\nTask statuses: `pending`, `ready`, `dispatched`, `completed`, `failed`, `blocked`.\n\nDispatch rules:\n\n- `--inject` sends the task spec plus preamble into a recognized agent CLI so it can report `worker_done`.\n- If the target is a bare shell, omit `--inject`, dispatch for tracking if needed, then send the prompt manually with `orca terminal send --terminal <handle> --text <prompt> --enter --json`.\n- After 3 consecutive failures on one task, the dispatch context circuit-breaks and the task is marked failed.\n- Use `task-list --brief --json` for coordinator sweeps; it collapses whitespace and caps each echoed spec at 160 characters (`spec_truncated` marks shortened rows). Omit `--brief` when the full spec is required, or when an older CLI rejects it as an unknown flag.\n\n## Preferred Supervised Worker Loop\n\nUse `worker-start` for the normal supervised path. It composes the existing worktree, terminal, readiness, and dispatch primitives while returning exact created/reused effects. Agents still choose placement and concurrency; Orca does not schedule workers or infer conflicts.\n\nCreate the Run and every independent Task first, then start all independent workers before waiting:\n\n```bash\norca orchestration run-create --objective \"<objective>\" --json\norca orchestration task-create --spec \"<worker A task>\" --json\norca orchestration task-create --spec \"<worker B task>\" --json\norca orchestration worker-start --task <task_a> --worktree current --agent codex --json\norca orchestration worker-start --task <task_b> --worktree current --agent claude --json\n```\n\n`current` and exact existing worktrees create a fresh agent terminal and do not rerun setup. Reuse an existing agent only with `--terminal <handle>`.\n\nFor a per-invocation Claude, Codex, or Cursor launch, pass an opaque provider model id with `--model`; add `--effort` only when that agent/model supports the level. These options apply only to fresh agent terminals, override general agent default arguments, and are reported under `launch.requested` and `launch.effective` in the receipt:\n\n```bash\norca orchestration worker-start --task <task_id> --worktree current --agent claude --model aws-bedrock-opus-5 --effort high --json\n```\n\n`--effort` requires `--model`, and neither option can combine with `--terminal`. A connected worker server must advertise launch-preference support before Orca forwards either option.\n\nFor a new worktree, setup runs by default and agent-first creation reuses the returned startup agent terminal:\n\n```bash\norca orchestration worker-start --task <task_id> --worktree new-child --name <name> --agent codex --setup run --json\n# Independent/top-level:\norca orchestration worker-start --task <task_id> --worktree new-top-level --name <name> --agent codex --setup run --json\n```\n\nSetup normally starts alongside the agent. Only a repository explicitly configured with `wait-for-setup` delays agent launch until setup succeeds. Use `--setup skip` or `--setup inherit` only for a concrete reason.\n\nRead the returned receipt before continuing: `ready` plus setup `running` is normal for start-immediately, while wait-for-setup returns setup `succeeded` before accepting task input. A failed or unknown start exits nonzero; inspect its `stage`, `effects`, and `residualResources` instead of guessing or automatically retrying. A wait-for-setup timeout can honestly leave setup `running`, which is not proof of failure.\n\nTo run the worker on another connected Orca server, add `--on <saved-environment>`. The Run and Tasks remain authoritative on the current server; later commands route by Dispatch ID, so never repeat `--on`:\n\n```bash\n# Mac Run home -> Windows worker (the reverse is identical from a Windows Run home)\norca orchestration worker-start --task <task_id> --on windows --worktree new-top-level --repo <exact_remote_repo_selector> --name <name> --agent codex --setup run --json\norca orchestration worker-show --dispatch <dispatch_id> --json\norca orchestration worker-read --dispatch <dispatch_id> --limit 50 --json\norca orchestration send --to dispatch:<dispatch_id> --subject \"Follow-up\" --body \"<attempt-specific guidance>\" --json\n```\n\nRemote `current` and `new-child` are intentionally invalid because those words are ambiguous across servers. Use an exact discovered remote worktree selector or `new-top-level` with an explicit remote repo selector.\n\nThe follow-up is structured inbox mail, not prompt injection. The worker's next\n`orchestration check` receives it even when the Dispatch is on another connected Orca server.\n\n`worker-read` defaults to `--source auto`: Orca returns the exact hook-reported Codex, Claude, OpenClaude, or Grok transcript when it can prove the worker session, otherwise it returns bounded terminal output with `source: \"terminal\"` and a typed `fallbackReason`. Continue with the returned top-level `cursor`; it stays pinned to that exact source. If Orca reports `source_changed`, start a fresh read without the old cursor. Never supply or guess a provider session ID or transcript path.\n\nWait until every expected Dispatch settles, not for a fixed number of batches:\n\n```bash\norca orchestration check --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n# Process every message. For each accepted worker_done that is not immediately reused:\norca orchestration worker-release --dispatch <dispatch_id> --json\n# Acknowledge only after every message and required release decision is handled:\norca orchestration check --ack <delivery_id> --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n```\n\nAfter processing each accepted `worker_done`, choose the terminal's next owner before you acknowledge the Delivery or wait again. If the same exact agent has an immediate follow-up Task, read the `worker.agent_terminal_handle` field of `worker-show --dispatch <dispatch_id> --json`, then run `orca orchestration worker-start --task <next_task_id> --terminal <handle> --json` so Orca transfers cleanup ownership to the new Dispatch. Otherwise run `orca orchestration worker-release --dispatch <dispatch_id> --json`.\n\nRun `worker-release` after both succeeded and failed `worker_done` reports unless the user explicitly asked to keep that worker live. Release is post-completion cleanup, not cancellation: Orca first preserves inspectable output, then closes only the exact agent terminal owned by that settled Dispatch. Reused or pre-existing terminals, setup terminals, coordinators, active workers, user-taken-over terminals, and identities Orca cannot prove are retained. If the user explicitly asks to keep the live terminal for debugging, record that exception with `orca orchestration worker-retain --dispatch <dispatch_id> --json` instead of silently skipping cleanup. When the user is finished, the same Dispatch can be passed to `worker-release`, which clears the requested retention and releases the terminal.\n\nDo not release a worker because of a timeout, TUI idle state, heartbeat, status, question, escalation, or rejected/stale `worker_done`. If release returns `release_pending` or `release_unknown`, do not substitute `terminal close`; follow the exact recovery action in the receipt. A replayed Delivery may repeat `worker-release` safely.\n\nWorkers report exactly once using the IDs and capability injected by Orca; they do not supply Run/server/terminal identity:\n\n```bash\norca orchestration send --type worker_done --subject \"<status>\" --body \"<what changed, findings, and what remains>\" --task-id <task_id> --dispatch-id <dispatch_id> --outcome succeeded --files-modified \"path/a,path/b\" --json\n# On failure, use --outcome failed; never encode failure only in prose.\n```\n\nA worker question defaults to its owning Run. Timeout leaves it pending:\n\n```bash\norca orchestration ask --question \"<question>\" --options \"yes,no\" --timeout-ms 600000 --json\norca orchestration ask --resume <message_id> --timeout-ms 600000 --json\n# Coordinator:\norca orchestration reply --id <message_id> --body \"<answer>\" --json\n```\n\nRecovery is conditional, never a fixed destructive sequence:\n\n- `worker-show --dispatch <id>` says `ready`: keep waiting or read bounded output.\n- It proves `failed` or `stopped`: start a replacement with `worker-start --task <task> --retry-of <id>` plus an explicit `--on`/`--worktree` and `--agent`/`--terminal` choice. Retry does not silently inherit placement.\n- It remains `outcome_unknown`: either `worker-stop --dispatch <id>` and inspect again, or explicitly `worker-abandon --dispatch <id>` while accepting that resources may still be live. Abandon performs no remote, process, or filesystem action.\n- `worker-stop` closes only the exact supervised agent terminal. It never deletes the worktree, setup terminal, configured tabs, or unrelated processes.\n\nLow-level `worktree create`, `terminal create`, and `dispatch --inject` remain valid recipes for custom argv or topology that `worker-start` does not express.\n\n## Gates And Legacy Inspection\n\n```bash\norca orchestration gate-create --task <task_id> --question <text> [--options <json_array>] [--json]\norca orchestration gate-resolve --id <gate_id> --resolution <text> [--json]\norca orchestration gate-list [--task <task_id>] [--status <status>] [--json]\n```\n\nUse `ask` for worker-to-coordinator questions; it creates a `question` message that the coordinator answers with `reply`. Use `gate-create` only for coordinator-managed task DAG decisions, not for answering a worker's `ask`.\n\n`coordinator-start`, `coordinator-stop`, `run`, and `run-stop` are retired scheduler commands. They perform no effects and return the current-skill recovery action. They are not aliases for lightweight Run creation or binding.\n\nRecovery only: `orca orchestration reset --tasks|--messages|--all --json` clears the selected local orchestration database state. Do not run it during active coordination unless explicitly abandoning that state.\n\n## Full Handoffs\n\nFor full ownership transfer, use non-lifecycle terminal/worktree commands and then stop monitoring unless the user asks for supervision.\n\nTreat these as full handoff requests by default: \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", \"give this to another worktree\", \"send this to another agent\", \"another agent\", \"another worktree\", or \"launch another agent to own this.\" Custom model or reasoning effort words such as `gpt-5.5`, `high`, or `xhigh` do not make the handoff supervised.\n\nSupervised orchestration remains available only when the user explicitly asks for supervision or coordination: \"supervise\", \"monitor\", \"wait for worker_done\", \"wait for results\", \"track completion\", \"DAG\", \"decision gate\", \"ask/reply\", or \"coordinate workers.\"\n\nDo not run `orca orchestration task-create`, `orca orchestration dispatch --inject`, or `orca orchestration check --wait` for full handoffs. `task-create` is also forbidden because it records coordinator-owned tracking state; if a task row is needed, the user asked for supervised orchestration. Do not create a `taskId`/`dispatchId`, inject a lifecycle preamble, wait for completion, or read the worker terminal after prompt delivery except to avoid losing the initial prompt.\n\nNew top-level worktree handoff:\n\n```bash\norca worktree create --name <task-name> --no-parent --agent codex --prompt \"<task brief>\" --setup run --json\n```\n\nBefore creating a new worktree from an active feature branch, decide and state whether the desired Orca lineage is child or top-level. Use child worktree lineage only when the new work is conceptually stacked under or dependent on the active worktree. For independent repo-wide fixes, standalone feature work, or unrelated follow-up tasks, create a top-level worktree with `--no-parent`.\n\nExisting terminal handoff:\n\n```bash\norca terminal send --terminal <handle> --text \"<task brief>\" --enter --json\n```\n\nCustom Codex model/effort handoff:\n\n`orca worktree create --agent codex --prompt ...` launches the known Codex agent but does not accept Codex-specific `--model` or `-c model_reasoning_effort=...` arguments. When the user asks for a specific Codex model or effort, create the independent worktree first, launch Codex with the requested command in that worktree, wait only for TUI readiness if prompt delivery would otherwise race startup, send the prompt, and stop.\n\nThe two-step custom-argv path cannot enforce a repository's explicit `wait-for-setup` startup policy because the later `terminal create` is not the startup owned by `worktree create`. Use it only when the repository starts agents immediately. If the repository requires `wait-for-setup`, use an agent-first configured launcher that can preserve sequencing, or stop and ask rather than silently bypassing the policy.\n\nNote: when no repo default-terminal configuration supplies a primary terminal, bare create opens a fallback shell before `terminal create` adds the agent. Configured default tabs are materialized instead and may run real commands. Prefer `--agent` whenever custom argv is not required. With the two-step path, target only the agent handle; close a prior terminal only after `terminal list` or `terminal show` confirms it is an unused shell.\n\nUse the exact full `<repo-id>::<path>` worktree id returned by `orca worktree create --json`; a bare repo id cannot target the new worktree.\n\n```bash\norca worktree create --name <task-name> --no-parent --setup run --json\norca terminal create --worktree id:<newFullWorktreeId> --title <task-name> --command 'codex --model gpt-5.5 -c model_reasoning_effort=\"xhigh\"' --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca terminal send --terminal <handle> --text \"<task brief>\" --enter --json\n```\n\nWait only for `tui-idle` when needed to avoid losing the prompt. Do not monitor task completion.\n\n`--no-parent` only controls Orca lineage; it does not choose the Git base. If the work should start from the repo default base, omit `--base-branch` so Orca uses that default, or explicitly pass the repo default base (`origin/main`, `origin/master`, or the `orca repo show --repo <selector> --json` value); never base it on the current feature branch unless the user explicitly asks for stacked work or \"branch from current\". Put current-branch context in the prompt instead.\n\n## Worker Terminals\n\nChoose the worker location before creating a terminal. `Fresh worker` means a fresh agent session, not a new git worktree. For parallel work, create one fresh agent terminal per worker in the same required worktree, falling back to the active worktree when none is named. If the task says current worktree only, depends on uncommitted files/artifacts, or must validate/PR the current branch, keep every worker in the active worktree:\n\n```bash\norca terminal create --worktree active --title <task-name> --command \"codex\" --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\n```\n\nReuse an idle agent in the required worktree only if the prompt allows reuse; otherwise create a fresh terminal there. Create a new worktree only when the user explicitly requests one or a concrete checkout or filesystem conflict makes sharing unsafe or impossible; if the user did not request it, state that conflict before running `worktree create`. Independent tasks, parallel execution, convenience, or a preference for separate checkouts are not isolation requirements.\n\nWhen a new worktree is allowed, use child lineage for isolated work that is stacked under or dependent on the active worktree, and use `--no-parent` when it is not stacked. Decide the Git base separately: `--no-parent` makes the worktree top-level in Orca, while omitted `--base-branch` uses the repo default base.\n\nFor every new worktree, pass `--setup run` so any configured repository setup hook runs. This does not mean waiting for setup before agent launch: preserve the repository's startup policy, whose default starts setup and the agent side by side. Use `--setup skip` or `--setup inherit` only when there is a concrete task-specific reason, and state that reason before creating the worktree. This rule does not rerun setup for current or existing worktrees.\n\n```bash\norca worktree create --name <task-name> --agent codex --setup run --json\n# or: --agent claude | omp | pi | grok | ...\n# Read <handle> from agentTerminalHandle, falling back to startupTerminal.handle.\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\n```\n\nFor new-worktree workers, read the id and `agentTerminalHandle` from `worktree create`, falling back to `startupTerminal.handle` for older runtimes. Use that as the sole worker handle when present; otherwise use `terminal list` to resolve the agent handle. Omit `--repo` only inside an Orca-managed worktree; otherwise pass `--repo <selector>`.\n\n**For an allowed new worktree, use agent-first:** `--agent` reveals the new worktree and launches the selected agent **in its first terminal**, without adding a separate fallback shell for that worker. Pass `--setup run`; repo setup and default-terminal settings may add intentional tabs or splits. Do **not** run bare `worktree create` and then `terminal create --command <agent>` for the same worker when agent-first create is available: without configured default tabs, that two-step path leaves a fallback shell + agent pair. Only use it when custom agent argv is required (for example Codex model/effort flags) or when an older CLI rejects `--agent`; if you must, message only the agent handle. Configured default tabs are intentional surfaces, so close a prior terminal only after `terminal list` or `terminal show` confirms it is an unused shell. Do not run `worktree create` when the task must stay in the current worktree.\n\nUse `orca worktree create --prompt ...` or `orca terminal send ...` for full handoffs or untracked/lightweight prompts. Those paths do not attach `taskId`/`dispatchId`; the worker should not send lifecycle messages unless the prompt supplies a live orchestration preamble.\n\nSidebar lineage and orchestration lifecycle are related but not identical. A same-worktree worker may appear as a peer under that worktree in the sidebar while remaining a child dispatch in orchestration state; only an actual child worktree creates visible parent/child worktree lineage.\n\nOther terminal commands coordinators often need:\n\n```bash\norca terminal list [--worktree <selector>] [--include-visual-layouts] [--json]\norca terminal create [--worktree <selector>] [--title <text>] [--command <cmd>] [--json]\norca terminal split --terminal <handle> [--direction horizontal|vertical] [--command <cmd>] [--json]\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms <n> --json\norca terminal read --terminal <handle> --json\norca terminal send --terminal <handle> --text <text> --enter --json\n```\n\nIf an older CLI rejects `worktree create --agent`, create the worktree normally, then run `orca terminal create --worktree <selector> --command \"codex\" --json` or `--command \"claude\"`.\n\nWait for `tui-idle` before dispatching. Always pass `--timeout-ms`; real coding tasks can take 15-60 minutes. During supervision, use rolling `check --wait` windows. If a window returns no matching message, inspect `task-list`, `terminal read`, or `terminal wait --for tui-idle` as a liveness checkpoint; if the terminal is still working or producing activity, keep waiting instead of retrying the task.\n\n## Agent Guidance\n\n- Workers with a valid live preamble must send `worker_done` exactly once from their own terminal with an explicit `--outcome succeeded` or `--outcome failed`:\n  `orca orchestration send --type worker_done --subject \"<short status>\" --body \"<3-sentence summary: what you did, what you found, what's left>\" --task-id <task_id> --dispatch-id <dispatch_id> --outcome succeeded --files-modified \"path/a\" --report-path \"<optional>\" --json`\n- A failed outcome is still a terminal report, but Orca records both the Dispatch and Task as failed. Never encode failure only in the subject/body.\n- After sending `worker_done`, end your turn and idle at the agent prompt. The coordinator may reuse or release this terminal after it processes your report; do not start more work, poll, or attempt to close the terminal yourself. If it reuses you, it re-engages you with a fresh preamble + TASK block delivered as new terminal input.\n- For long tasks, send heartbeat/status only when the preamble asks for it, including both IDs:\n  `orca orchestration send --type heartbeat --subject \"alive\" --payload '{\"taskId\":\"<task_id>\",\"dispatchId\":\"<dispatch_id>\",\"phase\":\"implementing\"}' --json`\n- If blocked before completion, use `ask`; use `escalation` only when ownership is valid and the coordinator must intervene.\n- Treat preambles inherited through terminal history or full handoffs as stale unless the current prompt explicitly keeps that coordinator in the loop.\n- Coordinators must account for every settled worker terminal before waiting again or ending the turn: immediately reuse the exact worker for a new Dispatch, explicitly retain it at the user's request with `worker-retain`, or run `worker-release`. Do not leave a completed worker live merely to inspect output; released workers remain readable through `worker-read`.\n- Coordinators should use `task-list --ready` as external memory, dispatch parallel waves, and avoid dependency chains deeper than 3-4 steps.\n\n## Example\n\n```bash\norca terminal create --worktree active --title login-css-worker --command \"claude\" --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration task-create --spec \"Fix the login button CSS\" --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\norca orchestration check --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n```\n\n## Next Action\n\nCoordinator: confirm `orca status --json`, create or bind a Run, inspect `task-list`/`dispatch-show` if inheriting state, then use the explicit supervised loop (`task-create` -> `worker-start` -> `check --wait`). Use low-level terminal creation plus `dispatch --inject` only when the composed start does not express the needed topology. After every accepted `worker_done`, either transfer the exact terminal to an immediate follow-up Dispatch or run `worker-release` before the next wait.\n\nWorker: if the current prompt contains a live dispatch preamble, do the task, use `ask` for blocking questions, and send `worker_done` once with the required payload. If the preamble is stale or absent, do not send lifecycle messages; inspect state or treat the prompt as an ordinary handoff.\n"
+const ORCHESTRATION_MARKDOWN = "---\nname: orchestration\ndescription: >-\n  Use Orca orchestration for structured multi-agent coordination: threaded\n  messages, blocking ask/reply flows, task dispatch, worker_done/escalation\n  waits, task DAGs, decision gates, coordinator loops, or decomposing work\n  across agents. Use `orca-cli` instead for full ownership handoffs, including\n  requests phrased as \"hand off\", \"handoff\", \"handover\", \"give this to another\n  agent\", or \"another worktree\" when the user did not explicitly ask to\n  supervise, monitor, wait for results, or coordinate a DAG. Use `orca-cli` for\n  ordinary terminal control, lightweight terminal prompts, shell commands, Orca\n  worktree management, reading or waiting on terminals, and automation of the\n  browser embedded inside Orca. Use Computer Use for browser windows, webviews,\n  Orca app UI, or desktop UI outside Orca's embedded browser.\n---\n\n# Orca Inter-Agent Orchestration\n\nOrchestration is Orca's structured coordination layer for agent messages, task ownership, dispatch state, and worker completion tracking.\n\nUse this skill when coordination state matters. For lightweight terminal prompts or basic worktree/terminal/built-in-browser control, use `orca-cli`.\n\n## Tool Boundary\n\nIf a task says to use Orca orchestration, the coordinator must create or bind a Run, create the Task with `orca orchestration task-create`, then attach the worker with either the preferred `orca orchestration worker-start` composition or the low-level `orca orchestration dispatch --inject` path.\n\nDo not substitute non-Orca subagent tools, generic agent-spawn APIs, or chat-only parallel worker features. Those may create useful workers, but they do not create Orca task/dispatch provenance, injected lifecycle preambles, `worker_done` authority, or decision gates.\n\nBefore claiming a worker was orchestrated, verify the task/dispatch exists:\n\n```bash\norca orchestration task-list --json\norca orchestration dispatch-show --task <task_id> --json\n```\n\nIf the work was accidentally run outside Orca orchestration, say so plainly. To repair provenance, rerun or revalidate the needed work through a fresh Orca terminal plus injected dispatch; do not retroactively describe the external worker as orchestrated.\n\n## When To Use\n\n- Send/reply/ask between agent terminals with persistent messages.\n- Dispatch structured tasks to workers and wait for `worker_done` or `escalation`.\n- Track task DAGs with dependencies.\n- Run coordinator loops or decision gates.\n\nDo not use orchestration merely because the user says \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", or asks for another worktree/agent/model/effort. Those are full ownership transfers unless the user explicitly asks to supervise, monitor, wait for worker completion/results, coordinate a DAG, use decision gates, or keep a blocking ask/reply loop.\n\n## Preconditions\n\n- `orca status --json` should show a running runtime.\n- `orca` must be on PATH (`orca-ide` on Linux).\n- The orchestration experimental feature must be enabled in Settings > Experimental.\n- `orca orchestration` commands are RPC calls to the running Orca runtime.\n\n## Contract Migration\n\nOrca adopts a live pre-update orchestration assignment into an ordinary Run. Adoption preserves the existing agent process, PTY/session, terminal handle, tab/leaf/pane, worktree or folder workspace, Task, and Dispatch; it never restarts or replaces the worker. The retired scheduler is not revived, and a newly created attempt uses the current grammar.\n\nTreat the authority label on injected or formatted messages as definitive:\n\n- `[LEGACY COMPATIBILITY]` is live and attested. Run only the exact supported command printed with the message, using the same CLI executable and arguments that the original prompt supplied.\n- `[LEGACY RECOVERY REPLAY — MAY HAVE BEEN SEEN]` is one bounded, at-least-once cutover replay. Process it idempotently and acknowledge it only through the exact displayed guidance.\n- `[LEGACY READ-ONLY]` is inspection-only. It has no reply, acknowledgment, or lifecycle action.\n- An unlabeled current message uses the current guide and current grammar.\n\nAn explicitly selected current Run, attested current Run binding, current Dispatch, or federated attachment takes precedence over legacy fallback. A retained adoption record alone never turns a current command into a legacy call.\n\nDatabase provenance, an old-looking terminal, or a legacy Run ID does not prove mutation authority. If the runtime cannot prove liveness, principal ownership, capability, or the exact legacy contract, it degrades to read-only inspection and must not fall back to local execution. Exact recovery may restore the already-live PTY once in its original inactive background tab. It must not spawn, write, signal, stop, switch, focus, split, or inject a terminal. Loss of lifecycle authority does not invalidate the existing assignment, process, or filesystem work.\n\nCompatibility retries have narrow guarantees. A pending ask, a reply, a final Dispatch settlement, and a consuming check have durable recovery identities. A-era heartbeat and escalation calls remain at-least-once across a manual A-to-B retry because identical later signals may be intentional. If an A-era ask may already have been answered, run the exact non-consuming recovery check printed by the runtime first; after its answer is printed and acknowledged, a new invocation with the same question creates a new question. Never guess among multiple identical question threads.\n\nWhen a compatibility or recovery command returns structured next-step arguments, run those exact arguments with the same CLI executable. The arguments intentionally omit the executable name so the guidance works with `orca`, `orca-ide`, `orca-dev`, or another configured Orca CLI command. Do not translate the command from memory, broaden its recipient, or retry it as a current mutation unless the returned guidance explicitly says to.\n\nOn packaged Windows, a legacy ask uses a two-step commit/resume protocol. The initial command durably commits the question, prints its exact `ask --resume <message_id>` command, and exits with launcher status `75`; it does not wait for the answer. Run that exact resume command after the launcher or update boundary. Resume is idempotent and read-oriented: it waits for the already-committed question and does not create another one. For a WSL process that received compatibility proof at launch, use the printed executable `orca-ide` WSL resume command so the same distro and packaged launcher authority are preserved; do not substitute a PATH-resolved local CLI. Older WSL processes that never received the hidden launch token remain lifecycle read-only after the update, even while their terminal and filesystem work continue.\n\nLegacy inspection remains available without consuming mail:\n\n```bash\norca orchestration run-list --json\n# run_legacy_local is an empty audit tombstone after adoption.\norca orchestration run-show --id run_legacy_local --json\n# In run-list, find the ordinary Run whose objective is:\n# \"Recovered orchestration work from a contract update\"\norca orchestration run-show --id <adopted_run_id> --json\norca orchestration task-list --run <adopted_run_id> --json\norca orchestration inbox --full --json\norca orchestration check --terminal <legacy_handle> --peek --format --json\norca terminal read --terminal <legacy_handle> --json\norca terminal wait --terminal <legacy_handle> --for tui-idle --timeout-ms 60000 --json\n```\n\nIf the original coordinator is unavailable or cannot prove its retained authority, a current coordinator may explicitly take over the adopted Run from its own live agent terminal:\n\n```bash\norca orchestration run-use --id <adopted_run_id> --takeover-legacy --json\norca orchestration check --run <adopted_run_id> --json\n```\n\nTakeover fences only the old coordinator, binds the current one, and moves pending worker mail into current Run Delivery. It is bound to the authenticated invoking terminal; `--from` cannot name another coordinator. Live legacy workers keep their original Tasks, Dispatches, processes, filesystems, and old prompt commands; their later questions, escalations, and completion reports route to the current coordinator. Do not use takeover while the original coordinator is still actively coordinating, because its later lifecycle mutations are rejected.\n\nDo not launch a replacement editor merely because the desktop app or runtime was updated. If adoption cannot prove continuing authority, keep the original worker as the only editor until it reaches a stable handoff point, then use a new current Dispatch in a conflict-free placement for any remaining work.\n\n## Ownership\n\nNew orchestration messages and tasks belong to one explicitly bound Run. A Run is only a durable namespace and coordinator inbox; it never schedules or places workers. Lifecycle authority comes from the active Dispatch, and terminal handles remain routing metadata rather than durable identity. Send `worker_done` and `heartbeat` from the worker's own terminal; Orca routes them to that Dispatch's Run.\n\nClassify inherited context before sending lifecycle messages:\n\n- Coordinated subtask: a live coordinator owns the DAG and waits on this dispatch. Follow the preamble exactly, including `worker_done`, heartbeat/status, `ask`, and `escalation`.\n- Full handoff means ownership transfer, not supervised dispatch. The original actor is not monitoring a DAG, so do not create lifecycle obligations unless the user explicitly asks you to supervise.\n- Classify requests containing \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", \"give this to another worktree\", \"another agent\", or \"another worktree\" as full handoffs by default, even when the user names a custom model or reasoning effort.\n- Use supervised orchestration only when the user explicitly asks you to \"supervise\", \"monitor\", \"wait\", \"track completion\", \"wait for worker_done\", return results, coordinate a DAG, use a decision gate, or manage ask/reply flow.\n- Do not use `orca orchestration dispatch --inject` for full handoffs. It injects a coordinator preamble that tells the worker to send `worker_done`, heartbeat, and `ask` messages, then end its turn under the original terminal's dispatch lifecycle.\n- Do not run `orca orchestration task-create`, `orca orchestration dispatch --inject`, or `orca orchestration check --wait` for full handoffs. Do not peek at terminal output after prompt delivery to monitor progress.\n- A review-only `worker_done` reports findings; it does not authorize coordinator file edits. After a review-only completion, synthesize findings, ask a decision gate if ownership is unclear, and dispatch or hand off fixes unless the user explicitly asked the coordinator to own fixes.\n- If the user's plan names a next owner agent (for example, \"then use opencode to create a PR\"), post-review corrections and PR prep belong to that named owner. The coordinator routes, synthesizes, asks decision gates when needed, and supervises; the named owner edits files and creates the PR.\n\nIf unclear, inspect orchestration state before sending lifecycle messages:\n\n```bash\norca orchestration task-list --json\norca terminal list --json\n# If inherited context includes a task id:\norca orchestration dispatch-show --task <task_id> --json\n```\n\n## Messaging\n\n```bash\norca orchestration send --subject <text> [--to <run:id|dispatch:id|legacy_handle>] [--from <handle>] [--body <text>] [--type <type>] [--priority <level>] [--thread-id <id>] [--payload <json>] [--json]\norca orchestration check [--terminal <handle>] [--ack <delivery_id>] [--peek|--all] [--types <type,...>] [--format] [--wait] [--timeout-ms <n>] [--json]\norca orchestration reply --id <msg_id> --body <text> [--from <handle>] [--json]\norca orchestration ask (--question <text>|--resume <msg_id>) [--options <csv>] [--timeout-ms <n>] [--from <handle>] [--json]\norca orchestration inbox [--limit <n>] [--json]\n```\n\nRules:\n\n- Omit `--from` unless impersonating another terminal; Orca auto-resolves it from the current terminal.\n- A coordinator `check` returns the bound Run's oldest FIFO Delivery (up to 50 messages) and replays that exact batch until `--ack <delivery_id>`. Process every message before acknowledging; `check --ack <id> --wait` acknowledges, checks, and waits in one operation.\n- Use `--peek` and `--all` only for read-only history/debugging. Type filters decide when a waiter wakes; the returned actionable Delivery is still the oldest full batch.\n- Use `dispatch:<id>` for coordinator guidance to one supervised worker. Orca routes that stable address locally or through the connected-server relay; do not substitute a remote terminal handle.\n- Terminal handles remain appropriate for low-level pre-Dispatch messaging. Prefer `agentTerminalHandle` from the create response, fall back to `startupTerminal.handle` for older runtimes, then re-resolve with `orca terminal list --worktree ... --json` if missing or stale. Continue with the replacement handle only; never dual-send to old and new handles.\n- `terminal list --json` omits `visualLayouts` because handle recovery does not need topology. Add `--include-visual-layouts` only for explicit tab and pane inspection.\n- `orca orchestration check --peek --format --json` returns locally formatted unread mail without consuming it; it never writes to terminal input or remotely wakes another terminal. Use `orchestration dispatch --inject` to deliver a tracked task, or `terminal send` when an existing agent needs a free-form prompt.\n- While supervising workers manually, use `check --wait --types worker_done,escalation,question --timeout-ms <n>` instead of sleep/poll loops. Process the whole Delivery, reply to `question` messages with `orca orchestration reply --id <msg_id> --body <answer> --json`, then acknowledge and keep waiting.\n- Treat a `check --wait` timeout or `{count:0}` as a checkpoint, not a worker failure. Long coding tasks routinely run 15-60 minutes; keep using rolling waits unless you receive `worker_done`/`escalation`, the terminal exits or disappears, or the user explicitly asks you to stop.\n- Heartbeats and visible terminal activity mean the worker is alive, not done. Do not stop, close, kill, or restart a worker just because it has not produced a completion message yet.\n- Use `ask` when a worker needs a blocking answer from the coordinator; it defaults to the active Dispatch's Run. Timeout or disconnect leaves the question pending, so resume by its original message ID instead of asking again.\n- `check --wait` returns one bounded Delivery, not every future completion. Process every message, acknowledge it, then keep waiting until every expected Dispatch settles.\n- Group addresses include `@all`, `@idle`, `@claude`, `@codex`, `@opencode`, `@gemini`, `@droid`, `@grok`, `@cursor`, and `@worktree:<id>`.\n- Message types include `status`, `dispatch`, `worker_done`, `merge_ready`, `escalation`, `handoff`, `question`, `decision_gate` (legacy/gates), and `heartbeat`.\n- Use group addresses only for messages that are genuinely useful to many terminals, such as `status` broadcasts or intentional fan-out questions. Do not send dispatch lifecycle messages to groups.\n- `worker_done` belongs to the active Dispatch and defaults to its Run mailbox; never target a group.\n- A valid `worker_done` for the active `taskId` + `dispatchId` marks the task and dispatch completed automatically. Do not follow it with `task-update --status completed`; reserve manual updates for explicit recovery or overrides.\n- `heartbeat` is also Dispatch-scoped. Include both IDs and omit `--to` so Orca uses the owning Run; use `status` for broad progress updates.\n\n## Tasks And Dispatch\n\nA Run is the namespace/inbox, a Task is the work item, and a Dispatch assigns one Task attempt to a terminal. Create or bind a Run once before the common loop.\n\n```bash\norca orchestration run-create --objective <text> --json\norca orchestration task-create --spec <text> [--deps <json_array>] [--parent <task_id>] [--json]\norca orchestration task-list [--status <status>] [--ready] [--brief] [--json]\norca orchestration task-update --id <task_id> --status <status> [--result <json>] [--json]\norca orchestration dispatch --task <task_id> --to <handle> [--from <handle>] [--inject] [--json]\norca orchestration dispatch-show --task <task_id> [--json]\n```\n\nTask statuses: `pending`, `ready`, `dispatched`, `completed`, `failed`, `blocked`.\n\nDispatch rules:\n\n- `--inject` sends the task spec plus preamble into a recognized agent CLI so it can report `worker_done`.\n- If the target is a bare shell, omit `--inject`, dispatch for tracking if needed, then send the prompt manually with `orca terminal send --terminal <handle> --text <prompt> --enter --json`.\n- After 3 consecutive failures on one task, the dispatch context circuit-breaks and the task is marked failed.\n- Use `task-list --brief --json` for coordinator sweeps; it collapses whitespace and caps each echoed spec at 160 characters (`spec_truncated` marks shortened rows). Omit `--brief` when the full spec is required, or when an older CLI rejects it as an unknown flag.\n\n## Preferred Supervised Worker Loop\n\nUse `worker-start` for the normal supervised path. It composes the existing worktree, terminal, readiness, and dispatch primitives while returning exact created/reused effects. Agents still choose placement and concurrency; Orca does not schedule workers or infer conflicts.\n\nCreate the Run and every independent Task first, then start all independent workers before waiting:\n\n```bash\norca orchestration run-create --objective \"<objective>\" --json\norca orchestration task-create --spec \"<worker A task>\" --json\norca orchestration task-create --spec \"<worker B task>\" --json\norca orchestration worker-start --task <task_a> --worktree current --agent codex --json\norca orchestration worker-start --task <task_b> --worktree current --agent claude --json\n```\n\n`current` and exact existing worktrees create a fresh agent terminal and do not rerun setup. Reuse an existing agent only with `--terminal <handle>`.\n\nFor a per-invocation Claude, Codex, or Cursor launch, pass an opaque provider model id with `--model`; add `--effort` only when that agent/model supports the level. These options apply only to fresh agent terminals, override general agent default arguments, and are reported under `launch.requested` and `launch.effective` in the receipt:\n\n```bash\norca orchestration worker-start --task <task_id> --worktree current --agent claude --model opus --effort high --json\n```\n\n`--effort` requires `--model`, and neither option can combine with `--terminal`. A connected worker server must advertise launch-preference support before Orca forwards either option.\n\nFor a new worktree, setup runs by default and agent-first creation reuses the returned startup agent terminal:\n\n```bash\norca orchestration worker-start --task <task_id> --worktree new-child --name <name> --agent codex --setup run --json\n# Independent/top-level:\norca orchestration worker-start --task <task_id> --worktree new-top-level --name <name> --agent codex --setup run --json\n```\n\nSetup normally starts alongside the agent. Only a repository explicitly configured with `wait-for-setup` delays agent launch until setup succeeds. Use `--setup skip` or `--setup inherit` only for a concrete reason.\n\nRead the returned receipt before continuing: `ready` plus setup `running` is normal for start-immediately, while wait-for-setup returns setup `succeeded` before accepting task input. A failed or unknown start exits nonzero; inspect its `stage`, `effects`, and `residualResources` instead of guessing or automatically retrying. A wait-for-setup timeout can honestly leave setup `running`, which is not proof of failure.\n\nTo run the worker on another connected Orca server, add `--on <saved-environment>`. The Run and Tasks remain authoritative on the current server; later commands route by Dispatch ID, so never repeat `--on`:\n\n```bash\n# Mac Run home -> Windows worker (the reverse is identical from a Windows Run home)\norca orchestration worker-start --task <task_id> --on windows --worktree new-top-level --repo <exact_remote_repo_selector> --name <name> --agent codex --setup run --json\norca orchestration worker-show --dispatch <dispatch_id> --json\norca orchestration worker-read --dispatch <dispatch_id> --limit 50 --json\norca orchestration send --to dispatch:<dispatch_id> --subject \"Follow-up\" --body \"<attempt-specific guidance>\" --json\n```\n\nRemote `current` and `new-child` are intentionally invalid because those words are ambiguous across servers. Use an exact discovered remote worktree selector or `new-top-level` with an explicit remote repo selector.\n\nThe follow-up is structured inbox mail, not prompt injection. The worker's next\n`orchestration check` receives it even when the Dispatch is on another connected Orca server.\n\n`worker-read` defaults to `--source auto`: Orca returns the exact hook-reported Codex, Claude, OpenClaude, or Grok transcript when it can prove the worker session, otherwise it returns bounded terminal output with `source: \"terminal\"` and a typed `fallbackReason`. Continue with the returned top-level `cursor`; it stays pinned to that exact source. If Orca reports `source_changed`, start a fresh read without the old cursor. Never supply or guess a provider session ID or transcript path.\n\nWait until every expected Dispatch settles, not for a fixed number of batches:\n\n```bash\norca orchestration check --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n# Process every message. For each accepted worker_done that is not immediately reused:\norca orchestration worker-release --dispatch <dispatch_id> --json\n# Acknowledge only after every message and required release decision is handled:\norca orchestration check --ack <delivery_id> --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n```\n\nAfter processing each accepted `worker_done`, choose the terminal's next owner before you acknowledge the Delivery or wait again. If the same exact agent has an immediate follow-up Task, read the `worker.agent_terminal_handle` field of `worker-show --dispatch <dispatch_id> --json`, then run `orca orchestration worker-start --task <next_task_id> --terminal <handle> --json` so Orca transfers cleanup ownership to the new Dispatch. Otherwise run `orca orchestration worker-release --dispatch <dispatch_id> --json`.\n\nRun `worker-release` after both succeeded and failed `worker_done` reports unless the user explicitly asked to keep that worker live. Release is post-completion cleanup, not cancellation: Orca first preserves inspectable output, then closes only the exact agent terminal owned by that settled Dispatch. Reused or pre-existing terminals, setup terminals, coordinators, active workers, user-taken-over terminals, and identities Orca cannot prove are retained. If the user explicitly asks to keep the live terminal for debugging, record that exception with `orca orchestration worker-retain --dispatch <dispatch_id> --json` instead of silently skipping cleanup. When the user is finished, the same Dispatch can be passed to `worker-release`, which clears the requested retention and releases the terminal.\n\nDo not release a worker because of a timeout, TUI idle state, heartbeat, status, question, escalation, or rejected/stale `worker_done`. If release returns `release_pending` or `release_unknown`, do not substitute `terminal close`; follow the exact recovery action in the receipt. A replayed Delivery may repeat `worker-release` safely.\n\nWorkers report exactly once using the IDs and capability injected by Orca; they do not supply Run/server/terminal identity:\n\n```bash\norca orchestration send --type worker_done --subject \"<status>\" --body \"<what changed, findings, and what remains>\" --task-id <task_id> --dispatch-id <dispatch_id> --outcome succeeded --files-modified \"path/a,path/b\" --json\n# On failure, use --outcome failed; never encode failure only in prose.\n```\n\nA worker question defaults to its owning Run. Timeout leaves it pending:\n\n```bash\norca orchestration ask --question \"<question>\" --options \"yes,no\" --timeout-ms 600000 --json\norca orchestration ask --resume <message_id> --timeout-ms 600000 --json\n# Coordinator:\norca orchestration reply --id <message_id> --body \"<answer>\" --json\n```\n\nRecovery is conditional, never a fixed destructive sequence:\n\n- `worker-show --dispatch <id>` says `ready`: keep waiting or read bounded output.\n- It proves `failed` or `stopped`: start a replacement with `worker-start --task <task> --retry-of <id>` plus an explicit `--on`/`--worktree` and `--agent`/`--terminal` choice. Retry does not silently inherit placement.\n- It remains `outcome_unknown`: either `worker-stop --dispatch <id>` and inspect again, or explicitly `worker-abandon --dispatch <id>` while accepting that resources may still be live. Abandon performs no remote, process, or filesystem action.\n- `worker-stop` closes only the exact supervised agent terminal. It never deletes the worktree, setup terminal, configured tabs, or unrelated processes.\n\nLow-level `worktree create`, `terminal create`, and `dispatch --inject` remain valid recipes for custom argv or topology that `worker-start` does not express.\n\n## Gates And Legacy Inspection\n\n```bash\norca orchestration gate-create --task <task_id> --question <text> [--options <json_array>] [--json]\norca orchestration gate-resolve --id <gate_id> --resolution <text> [--json]\norca orchestration gate-list [--task <task_id>] [--status <status>] [--json]\n```\n\nUse `ask` for worker-to-coordinator questions; it creates a `question` message that the coordinator answers with `reply`. Use `gate-create` only for coordinator-managed task DAG decisions, not for answering a worker's `ask`.\n\n`coordinator-start`, `coordinator-stop`, `run`, and `run-stop` are retired scheduler commands. They perform no effects and return the current-skill recovery action. They are not aliases for lightweight Run creation or binding.\n\nRecovery only: `orca orchestration reset --tasks|--messages|--all --json` clears the selected local orchestration database state. Do not run it during active coordination unless explicitly abandoning that state.\n\n## Full Handoffs\n\nFor full ownership transfer, use non-lifecycle terminal/worktree commands and then stop monitoring unless the user asks for supervision.\n\nTreat these as full handoff requests by default: \"hand off\", \"handoff\", \"handover\", \"give this to another agent\", \"give this to another worktree\", \"send this to another agent\", \"another agent\", \"another worktree\", or \"launch another agent to own this.\" Custom model or reasoning effort words such as `gpt-5.5`, `high`, or `xhigh` do not make the handoff supervised.\n\nSupervised orchestration remains available only when the user explicitly asks for supervision or coordination: \"supervise\", \"monitor\", \"wait for worker_done\", \"wait for results\", \"track completion\", \"DAG\", \"decision gate\", \"ask/reply\", or \"coordinate workers.\"\n\nDo not run `orca orchestration task-create`, `orca orchestration dispatch --inject`, or `orca orchestration check --wait` for full handoffs. `task-create` is also forbidden because it records coordinator-owned tracking state; if a task row is needed, the user asked for supervised orchestration. Do not create a `taskId`/`dispatchId`, inject a lifecycle preamble, wait for completion, or read the worker terminal after prompt delivery except to avoid losing the initial prompt.\n\nNew top-level worktree handoff:\n\n```bash\norca worktree create --name <task-name> --no-parent --agent codex --prompt \"<task brief>\" --setup run --json\n```\n\nBefore creating a new worktree from an active feature branch, decide and state whether the desired Orca lineage is child or top-level. Use child worktree lineage only when the new work is conceptually stacked under or dependent on the active worktree. For independent repo-wide fixes, standalone feature work, or unrelated follow-up tasks, create a top-level worktree with `--no-parent`.\n\nExisting terminal handoff:\n\n```bash\norca terminal send --terminal <handle> --text \"<task brief>\" --enter --json\n```\n\nCustom Codex model/effort handoff:\n\n`orca worktree create --agent codex --prompt ...` launches the known Codex agent but does not accept Codex-specific `--model` or `-c model_reasoning_effort=...` arguments. When the user asks for a specific Codex model or effort, create the independent worktree first, launch Codex with the requested command in that worktree, wait only for TUI readiness if prompt delivery would otherwise race startup, send the prompt, and stop.\n\nThe two-step custom-argv path cannot enforce a repository's explicit `wait-for-setup` startup policy because the later `terminal create` is not the startup owned by `worktree create`. Use it only when the repository starts agents immediately. If the repository requires `wait-for-setup`, use an agent-first configured launcher that can preserve sequencing, or stop and ask rather than silently bypassing the policy.\n\nNote: when no repo default-terminal configuration supplies a primary terminal, bare create opens a fallback shell before `terminal create` adds the agent. Configured default tabs are materialized instead and may run real commands. Prefer `--agent` whenever custom argv is not required. With the two-step path, target only the agent handle; close a prior terminal only after `terminal list` or `terminal show` confirms it is an unused shell.\n\nUse the exact full `<repo-id>::<path>` worktree id returned by `orca worktree create --json`; a bare repo id cannot target the new worktree.\n\n```bash\norca worktree create --name <task-name> --no-parent --setup run --json\norca terminal create --worktree id:<newFullWorktreeId> --title <task-name> --command 'codex --model gpt-5.5 -c model_reasoning_effort=\"xhigh\"' --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca terminal send --terminal <handle> --text \"<task brief>\" --enter --json\n```\n\nWait only for `tui-idle` when needed to avoid losing the prompt. Do not monitor task completion.\n\n`--no-parent` only controls Orca lineage; it does not choose the Git base. If the work should start from the repo default base, omit `--base-branch` so Orca uses that default, or explicitly pass the repo default base (`origin/main`, `origin/master`, or the `orca repo show --repo <selector> --json` value); never base it on the current feature branch unless the user explicitly asks for stacked work or \"branch from current\". Put current-branch context in the prompt instead.\n\n## Worker Terminals\n\nChoose the worker location before creating a terminal. `Fresh worker` means a fresh agent session, not a new git worktree. For parallel work, create one fresh agent terminal per worker in the same required worktree, falling back to the active worktree when none is named. If the task says current worktree only, depends on uncommitted files/artifacts, or must validate/PR the current branch, keep every worker in the active worktree:\n\n```bash\norca terminal create --worktree active --title <task-name> --command \"codex\" --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\n```\n\nReuse an idle agent in the required worktree only if the prompt allows reuse; otherwise create a fresh terminal there. Create a new worktree only when the user explicitly requests one or a concrete checkout or filesystem conflict makes sharing unsafe or impossible; if the user did not request it, state that conflict before running `worktree create`. Independent tasks, parallel execution, convenience, or a preference for separate checkouts are not isolation requirements.\n\nWhen a new worktree is allowed, use child lineage for isolated work that is stacked under or dependent on the active worktree, and use `--no-parent` when it is not stacked. Decide the Git base separately: `--no-parent` makes the worktree top-level in Orca, while omitted `--base-branch` uses the repo default base.\n\nFor every new worktree, pass `--setup run` so any configured repository setup hook runs. This does not mean waiting for setup before agent launch: preserve the repository's startup policy, whose default starts setup and the agent side by side. Use `--setup skip` or `--setup inherit` only when there is a concrete task-specific reason, and state that reason before creating the worktree. This rule does not rerun setup for current or existing worktrees.\n\n```bash\norca worktree create --name <task-name> --agent codex --setup run --json\n# or: --agent claude | omp | pi | grok | ...\n# Read <handle> from agentTerminalHandle, falling back to startupTerminal.handle.\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\n```\n\nFor new-worktree workers, read the id and `agentTerminalHandle` from `worktree create`, falling back to `startupTerminal.handle` for older runtimes. Use that as the sole worker handle when present; otherwise use `terminal list` to resolve the agent handle. Omit `--repo` only inside an Orca-managed worktree; otherwise pass `--repo <selector>`.\n\n**For an allowed new worktree, use agent-first:** `--agent` reveals the new worktree and launches the selected agent **in its first terminal**, without adding a separate fallback shell for that worker. Pass `--setup run`; repo setup and default-terminal settings may add intentional tabs or splits. Do **not** run bare `worktree create` and then `terminal create --command <agent>` for the same worker when agent-first create is available: without configured default tabs, that two-step path leaves a fallback shell + agent pair. Only use it when custom agent argv is required (for example Codex model/effort flags) or when an older CLI rejects `--agent`; if you must, message only the agent handle. Configured default tabs are intentional surfaces, so close a prior terminal only after `terminal list` or `terminal show` confirms it is an unused shell. Do not run `worktree create` when the task must stay in the current worktree.\n\nUse `orca worktree create --prompt ...` or `orca terminal send ...` for full handoffs or untracked/lightweight prompts. Those paths do not attach `taskId`/`dispatchId`; the worker should not send lifecycle messages unless the prompt supplies a live orchestration preamble.\n\nSidebar lineage and orchestration lifecycle are related but not identical. A same-worktree worker may appear as a peer under that worktree in the sidebar while remaining a child dispatch in orchestration state; only an actual child worktree creates visible parent/child worktree lineage.\n\nOther terminal commands coordinators often need:\n\n```bash\norca terminal list [--worktree <selector>] [--include-visual-layouts] [--json]\norca terminal create [--worktree <selector>] [--title <text>] [--command <cmd>] [--json]\norca terminal split --terminal <handle> [--direction horizontal|vertical] [--command <cmd>] [--json]\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms <n> --json\norca terminal read --terminal <handle> --json\norca terminal send --terminal <handle> --text <text> --enter --json\n```\n\nIf an older CLI rejects `worktree create --agent`, create the worktree normally, then run `orca terminal create --worktree <selector> --command \"codex\" --json` or `--command \"claude\"`.\n\nWait for `tui-idle` before dispatching. Always pass `--timeout-ms`; real coding tasks can take 15-60 minutes. During supervision, use rolling `check --wait` windows. If a window returns no matching message, inspect `task-list`, `terminal read`, or `terminal wait --for tui-idle` as a liveness checkpoint; if the terminal is still working or producing activity, keep waiting instead of retrying the task.\n\n## Agent Guidance\n\n- Workers with a valid live preamble must send `worker_done` exactly once from their own terminal with an explicit `--outcome succeeded` or `--outcome failed`:\n  `orca orchestration send --type worker_done --subject \"<short status>\" --body \"<3-sentence summary: what you did, what you found, what's left>\" --task-id <task_id> --dispatch-id <dispatch_id> --outcome succeeded --files-modified \"path/a\" --report-path \"<optional>\" --json`\n- A failed outcome is still a terminal report, but Orca records both the Dispatch and Task as failed. Never encode failure only in the subject/body.\n- After sending `worker_done`, end your turn and idle at the agent prompt. The coordinator may reuse or release this terminal after it processes your report; do not start more work, poll, or attempt to close the terminal yourself. If it reuses you, it re-engages you with a fresh preamble + TASK block delivered as new terminal input.\n- For long tasks, send heartbeat/status only when the preamble asks for it, including both IDs:\n  `orca orchestration send --type heartbeat --subject \"alive\" --payload '{\"taskId\":\"<task_id>\",\"dispatchId\":\"<dispatch_id>\",\"phase\":\"implementing\"}' --json`\n- If blocked before completion, use `ask`; use `escalation` only when ownership is valid and the coordinator must intervene.\n- Treat preambles inherited through terminal history or full handoffs as stale unless the current prompt explicitly keeps that coordinator in the loop.\n- Coordinators must account for every settled worker terminal before waiting again or ending the turn: immediately reuse the exact worker for a new Dispatch, explicitly retain it at the user's request with `worker-retain`, or run `worker-release`. Do not leave a completed worker live merely to inspect output; released workers remain readable through `worker-read`.\n- Coordinators should use `task-list --ready` as external memory, dispatch parallel waves, and avoid dependency chains deeper than 3-4 steps.\n\n## Example\n\n```bash\norca terminal create --worktree active --title login-css-worker --command \"claude\" --json\norca terminal wait --terminal <handle> --for tui-idle --timeout-ms 60000 --json\norca orchestration task-create --spec \"Fix the login button CSS\" --json\norca orchestration dispatch --task <task_id> --to <handle> --inject --json\norca orchestration check --wait --types worker_done,escalation,question --timeout-ms 900000 --json\n```\n\n## Next Action\n\nCoordinator: confirm `orca status --json`, create or bind a Run, inspect `task-list`/`dispatch-show` if inheriting state, then use the explicit supervised loop (`task-create` -> `worker-start` -> `check --wait`). Use low-level terminal creation plus `dispatch --inject` only when the composed start does not express the needed topology. After every accepted `worker_done`, either transfer the exact terminal to an immediate follow-up Dispatch or run `worker-release` before the next wait.\n\nWorker: if the current prompt contains a live dispatch preamble, do the task, use `ask` for blocking questions, and send `worker_done` once with the required payload. If the preamble is stale or absent, do not send lifecycle messages; inspect state or treat the prompt as an ordinary handoff.\n"
 
 // Why: no current guide has bundled reference documents, so --full is byte-identical for now.
 // oxfmt-ignore
diff --git a/src/cli/handlers/emulator.test.ts b/src/cli/handlers/emulator.test.ts
index 07bdd51e2f5..ff0dc5f141a 100644
--- a/src/cli/handlers/emulator.test.ts
+++ b/src/cli/handlers/emulator.test.ts
@@ -1,5 +1,5 @@
 import path from 'node:path'
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
 const { callMock, remoteMock } = vi.hoisted(() => ({
   callMock: vi.fn(),
@@ -29,6 +29,9 @@ import { main } from '../index'
 import { okFixture, queueFixtures } from '../test-fixtures'
 
 describe('orca emulator CLI handlers', () => {
+  const originalWorkspaceId = process.env.ORCA_WORKSPACE_ID
+  const originalWorktreeId = process.env.ORCA_WORKTREE_ID
+
   beforeEach(() => {
     vi.restoreAllMocks()
     callMock.mockReset()
@@ -38,6 +41,19 @@ describe('orca emulator CLI handlers', () => {
     process.exitCode = undefined
   })
 
+  afterEach(() => {
+    if (originalWorkspaceId === undefined) {
+      delete process.env.ORCA_WORKSPACE_ID
+    } else {
+      process.env.ORCA_WORKSPACE_ID = originalWorkspaceId
+    }
+    if (originalWorktreeId === undefined) {
+      delete process.env.ORCA_WORKTREE_ID
+    } else {
+      process.env.ORCA_WORKTREE_ID = originalWorktreeId
+    }
+  })
+
   it('resolves relative APK paths before calling the runtime', async () => {
     queueFixtures(callMock, okFixture('req_install', { ok: true }))
 
@@ -73,6 +89,46 @@ describe('orca emulator CLI handlers', () => {
     )
   })
 
+  it('uses the folder workspace exported by the current Orca terminal', async () => {
+    process.env.ORCA_WORKSPACE_ID = 'folder:folder-1'
+    delete process.env.ORCA_WORKTREE_ID
+    callMock.mockResolvedValue(
+      okFixture('req_attach', {
+        attached: true,
+        info: { deviceUdid: 'device-1', streamUrl: 'scrcpy://device-1' }
+      })
+    )
+
+    await main(['emulator', 'attach', 'device-1'], '/folder/project')
+
+    expect(callMock).toHaveBeenCalledOnce()
+    expect(callMock).toHaveBeenCalledWith(
+      'emulator.attach',
+      { device: 'device-1', worktree: 'folder:folder-1', focus: false },
+      { timeoutMs: 180_000 }
+    )
+  })
+
+  it('uses the current git worktree exported by the Orca terminal', async () => {
+    process.env.ORCA_WORKSPACE_ID = 'folder:stale-parent'
+    process.env.ORCA_WORKTREE_ID = 'repo-1::/repo/project '
+    callMock.mockResolvedValue(
+      okFixture('req_attach', {
+        attached: true,
+        info: { deviceUdid: 'device-1', streamUrl: 'scrcpy://device-1' }
+      })
+    )
+
+    await main(['emulator', 'attach', 'device-1'], '/repo/project')
+
+    expect(callMock).toHaveBeenCalledOnce()
+    expect(callMock).toHaveBeenCalledWith(
+      'emulator.attach',
+      { device: 'device-1', worktree: 'repo-1::/repo/project ', focus: false },
+      { timeoutMs: 180_000 }
+    )
+  })
+
   it('rejects relative APK paths for remote runtimes', async () => {
     remoteMock.mockReturnValue(true)
 
diff --git a/src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts b/src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts
new file mode 100644
index 00000000000..a7b1766437e
--- /dev/null
+++ b/src/cli/handlers/orchestration-lifecycle-json-rejection.test.ts
@@ -0,0 +1,51 @@
+import { afterEach, expect, it, vi } from 'vitest'
+import { reportCliError } from '../format'
+import { ORCHESTRATION_HANDLERS } from './orchestration'
+
+afterEach(() => {
+  vi.restoreAllMocks()
+})
+
+it('prints a rejected lifecycle verdict as a JSON failure envelope', async () => {
+  const log = vi.spyOn(console, 'log').mockImplementation(() => {})
+  const client = {
+    call: vi.fn().mockResolvedValue({
+      result: {
+        message: { id: 'msg_rejected' },
+        lifecycle: {
+          action: 'rejected',
+          code: 'sender_not_assignee',
+          reason: 'dispatch ctx_1 expected the assigned pane'
+        }
+      }
+    })
+  }
+  let rejection: unknown
+  try {
+    await ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_foreign'],
+        ['to', 'term_coord'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['outcome', 'succeeded']
+      ]),
+      client,
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  } catch (error) {
+    rejection = error
+  }
+
+  expect(rejection).toBeDefined()
+  reportCliError(rejection, true, { commandPath: ['orchestration', 'send'] })
+
+  expect(JSON.parse(String(log.mock.calls[0]?.[0]))).toMatchObject({
+    ok: false,
+    error: {
+      code: 'sender_not_assignee',
+      message: 'dispatch ctx_1 expected the assigned pane'
+    }
+  })
+})
diff --git a/src/cli/handlers/orchestration-lifecycle-rejection.test.ts b/src/cli/handlers/orchestration-lifecycle-rejection.test.ts
index c55eed4391d..369edf9c4f6 100644
--- a/src/cli/handlers/orchestration-lifecycle-rejection.test.ts
+++ b/src/cli/handlers/orchestration-lifecycle-rejection.test.ts
@@ -10,9 +10,11 @@ import { ORCHESTRATION_HANDLERS } from './orchestration'
 
 afterEach(() => {
   process.exitCode = originalExitCode
+  vi.clearAllMocks()
+  callMock.mockReset()
 })
 
-it('prints a lifecycle rejection and exits unsuccessfully', async () => {
+it('raises a lifecycle rejection for the CLI error boundary', async () => {
   const response = {
     result: {
       message: { id: 'msg_rejected' },
@@ -25,22 +27,328 @@ it('prints a lifecycle rejection and exits unsuccessfully', async () => {
   }
   callMock.mockResolvedValueOnce(response)
 
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_foreign'],
+        ['to', 'term_coord'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['outcome', 'succeeded']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: false
+    } as never)
+  ).rejects.toMatchObject({
+    code: 'sender_not_assignee',
+    message: 'dispatch ctx_1 expected the assigned pane'
+  })
+  expect(printResult).not.toHaveBeenCalled()
+})
+
+it('raises a Run-home relay rejection for the CLI error boundary', async () => {
+  callMock.mockResolvedValueOnce({
+    result: {
+      relay: {
+        messageId: 'relay_rejected',
+        sequence: 1,
+        dispatchId: 'ctx_1',
+        destination: 'run_home',
+        accepted: true
+      },
+      lifecycle: {
+        action: 'rejected',
+        code: 'task_dispatch_mismatch',
+        reason: 'wrong task',
+        authority: 'run_home'
+      }
+    }
+  })
+
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_worker'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['task-id', 'task_wrong'],
+        ['dispatch-id', 'ctx_1'],
+        ['outcome', 'succeeded']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  ).rejects.toMatchObject({ code: 'task_dispatch_mismatch', message: 'wrong task' })
+  expect(printResult).not.toHaveBeenCalled()
+})
+
+it('accepts an explicit current settlement without a compatibility read', async () => {
+  callMock.mockResolvedValueOnce({
+    result: { message: { id: 'msg_done' }, lifecycle: { action: 'completed' } }
+  })
+
   await ORCHESTRATION_HANDLERS['orchestration send']({
     flags: new Map([
-      ['from', 'term_foreign'],
-      ['to', 'term_coord'],
+      ['from', 'term_worker'],
       ['subject', 'done'],
       ['type', 'worker_done'],
+      ['task-id', 'task_1'],
+      ['dispatch-id', 'ctx_1'],
       ['outcome', 'succeeded']
     ]),
     client: { call: callMock },
     cwd: '/tmp/repo',
-    json: false
+    json: true
   } as never)
 
-  expect(process.exitCode).toBe(1)
-  const formatter = vi.mocked(printResult).mock.calls[0]?.[2]
-  expect(formatter?.(response.result)).toBe(
-    'Rejected msg_rejected: dispatch ctx_1 expected the assigned pane'
-  )
+  expect(callMock).toHaveBeenCalledOnce()
+})
+
+it('fails closed when an older runtime leaves worker_done dispatched without a verdict', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_unconfirmed', run_id: 'run_1' } }
+    })
+    .mockResolvedValueOnce({
+      result: { dispatch: { id: 'ctx_1', status: 'dispatched' } }
+    })
+    .mockResolvedValueOnce({ result: { tasks: [] } })
+
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_foreign'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['task-id', 'task_1'],
+        ['dispatch-id', 'ctx_1'],
+        ['outcome', 'succeeded']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  ).rejects.toMatchObject({ code: 'operation_unknown' })
+
+  expect(callMock).toHaveBeenNthCalledWith(2, 'orchestration.dispatchShow', { task: 'task_1' })
+  expect(callMock).toHaveBeenNthCalledWith(3, 'orchestration.taskList', {
+    status: 'completed',
+    run: 'run_1'
+  })
+})
+
+it('normalizes compatibility-read failures to operation_unknown', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_unconfirmed', run_id: 'run_1' } }
+    })
+    .mockRejectedValueOnce(new Error('runtime disconnected'))
+    .mockResolvedValueOnce({ result: { tasks: [] } })
+
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_worker'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['task-id', 'task_1'],
+        ['dispatch-id', 'ctx_1'],
+        ['outcome', 'succeeded']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  ).rejects.toMatchObject({ code: 'operation_unknown' })
+})
+
+it('accepts a legacy response only after the authoritative dispatch is terminal', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_legacy_completed', run_id: 'run_1' } }
+    })
+    .mockResolvedValueOnce({
+      result: { dispatch: { id: 'ctx_1', status: 'completed' } }
+    })
+    .mockResolvedValueOnce({
+      result: {
+        tasks: [
+          {
+            id: 'task_1',
+            status: 'completed',
+            result: JSON.stringify({
+              provenance: 'worker_report',
+              messageId: 'msg_legacy_completed',
+              outcome: 'succeeded'
+            })
+          }
+        ]
+      }
+    })
+
+  await ORCHESTRATION_HANDLERS['orchestration send']({
+    flags: new Map([
+      ['from', 'term_worker'],
+      ['subject', 'done'],
+      ['type', 'worker_done'],
+      ['task-id', 'task_1'],
+      ['dispatch-id', 'ctx_1'],
+      ['outcome', 'succeeded']
+    ]),
+    client: { call: callMock },
+    cwd: '/tmp/repo',
+    json: true
+  } as never)
+
+  expect(callMock).toHaveBeenCalledTimes(3)
+  expect(callMock).toHaveBeenNthCalledWith(2, 'orchestration.dispatchShow', { task: 'task_1' })
+})
+
+it('accepts a legacy failed report only after the authoritative dispatch failed', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_legacy_failed', run_id: 'run_1' } }
+    })
+    .mockResolvedValueOnce({ result: { dispatch: { id: 'ctx_1', status: 'failed' } } })
+    .mockResolvedValueOnce({
+      result: {
+        tasks: [
+          {
+            id: 'task_1',
+            status: 'failed',
+            result: JSON.stringify({
+              provenance: 'worker_report',
+              messageId: 'msg_legacy_failed',
+              outcome: 'failed'
+            })
+          }
+        ]
+      }
+    })
+
+  await ORCHESTRATION_HANDLERS['orchestration send']({
+    flags: new Map([
+      ['from', 'term_worker'],
+      ['subject', 'failed'],
+      ['type', 'worker_done'],
+      ['task-id', 'task_1'],
+      ['dispatch-id', 'ctx_1'],
+      ['outcome', 'failed']
+    ]),
+    client: { call: callMock },
+    cwd: '/tmp/repo',
+    json: true
+  } as never)
+
+  expect(callMock).toHaveBeenCalledTimes(3)
+})
+
+it('accepts an idempotent retry whose first report already settled', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: {
+        message: { id: 'msg_retry', run_id: 'run_1', from_handle: 'term_worker' }
+      }
+    })
+    .mockResolvedValueOnce({ result: { dispatch: { id: 'ctx_1', status: 'completed' } } })
+    .mockResolvedValueOnce({
+      result: {
+        tasks: [
+          {
+            id: 'task_1',
+            status: 'completed',
+            result: JSON.stringify({
+              provenance: 'worker_report',
+              messageId: 'msg_first',
+              reportedBy: 'term_worker',
+              outcome: 'succeeded'
+            })
+          }
+        ]
+      }
+    })
+
+  await ORCHESTRATION_HANDLERS['orchestration send']({
+    flags: new Map([
+      ['from', 'term_worker'],
+      ['subject', 'done'],
+      ['type', 'worker_done'],
+      ['task-id', 'task_1'],
+      ['dispatch-id', 'ctx_1'],
+      ['outcome', 'succeeded']
+    ]),
+    client: { call: callMock },
+    cwd: '/tmp/repo',
+    json: true
+  } as never)
+
+  expect(callMock).toHaveBeenCalledTimes(3)
+})
+
+it('rejects an unrelated failed Dispatch that left its Task blocked', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_after_stop', run_id: 'run_1' } }
+    })
+    .mockResolvedValueOnce({ result: { dispatch: { id: 'ctx_1', status: 'failed' } } })
+    .mockResolvedValueOnce({ result: { tasks: [] } })
+
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_worker'],
+        ['subject', 'failed'],
+        ['type', 'worker_done'],
+        ['task-id', 'task_1'],
+        ['dispatch-id', 'ctx_1'],
+        ['outcome', 'failed']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  ).rejects.toMatchObject({ code: 'operation_unknown' })
+})
+
+it('rejects a terminal Dispatch with the wrong identity', async () => {
+  callMock
+    .mockResolvedValueOnce({
+      result: { message: { id: 'msg_stale', run_id: 'run_1' } }
+    })
+    .mockResolvedValueOnce({
+      result: { dispatch: { id: 'ctx_replacement', status: 'completed' } }
+    })
+    .mockResolvedValueOnce({
+      result: {
+        tasks: [
+          {
+            id: 'task_1',
+            status: 'completed',
+            result: JSON.stringify({
+              provenance: 'worker_report',
+              messageId: 'msg_stale',
+              outcome: 'succeeded'
+            })
+          }
+        ]
+      }
+    })
+
+  await expect(
+    ORCHESTRATION_HANDLERS['orchestration send']({
+      flags: new Map([
+        ['from', 'term_worker'],
+        ['subject', 'done'],
+        ['type', 'worker_done'],
+        ['task-id', 'task_1'],
+        ['dispatch-id', 'ctx_1'],
+        ['outcome', 'succeeded']
+      ]),
+      client: { call: callMock },
+      cwd: '/tmp/repo',
+      json: true
+    } as never)
+  ).rejects.toMatchObject({ code: 'operation_unknown' })
 })
diff --git a/src/cli/handlers/orchestration-migration.test.ts b/src/cli/handlers/orchestration-migration.test.ts
index a1a117b90b3..863720eaab1 100644
--- a/src/cli/handlers/orchestration-migration.test.ts
+++ b/src/cli/handlers/orchestration-migration.test.ts
@@ -12,33 +12,43 @@ afterEach(() => {
 })
 
 describe('orchestration CLI migration recovery', () => {
-  it('forwards legacy worker_done without inventing a completion outcome', async () => {
-    process.env.ORCA_PANE_KEY = 'tab-worker:leaf-worker'
-    const call = vi.fn().mockResolvedValue({ result: { message: { id: 'msg_done' } } })
+  it.each([false, true])(
+    'accepts an attested legacy worker_done settlement (replayed: %s)',
+    async (replayed) => {
+      process.env.ORCA_PANE_KEY = 'tab-worker:leaf-worker'
+      const call = vi.fn().mockResolvedValue({
+        result: {
+          message: { id: 'msg_done' },
+          lifecycle: { action: 'settled', outcome: 'succeeded', duplicate: replayed }
+        }
+      })
 
-    await ORCHESTRATION_HANDLERS['orchestration send']({
-      flags: new Map<string, string | boolean>([
-        ['from', 'term_worker'],
-        ['subject', 'Done'],
-        ['type', 'worker_done']
-      ]),
-      client: { call },
-      cwd: '/tmp/repo',
-      json: true
-    } as never)
+      await ORCHESTRATION_HANDLERS['orchestration send']({
+        flags: new Map<string, string | boolean>([
+          ['from', 'term_worker'],
+          ['subject', 'Done'],
+          ['type', 'worker_done']
+        ]),
+        client: { call },
+        cwd: '/tmp/repo',
+        json: true
+      } as never)
 
-    expect(call).toHaveBeenCalledWith('orchestration.send', {
-      from: 'term_worker',
-      to: undefined,
-      run: undefined,
-      subject: 'Done',
-      body: undefined,
-      type: 'worker_done',
-      priority: undefined,
-      threadId: undefined,
-      payload: undefined,
-      senderPaneKey: 'tab-worker:leaf-worker',
-      devMode: false
-    })
-  })
+      expect(call).toHaveBeenCalledWith('orchestration.send', {
+        from: 'term_worker',
+        to: undefined,
+        run: undefined,
+        subject: 'Done',
+        body: undefined,
+        type: 'worker_done',
+        priority: undefined,
+        threadId: undefined,
+        payload: undefined,
+        senderPaneKey: 'tab-worker:leaf-worker',
+        waitForLifecycleSettlement: true,
+        devMode: false
+      })
+      expect(call).toHaveBeenCalledOnce()
+    }
+  )
 })
diff --git a/src/cli/handlers/orchestration-worker-settlement.ts b/src/cli/handlers/orchestration-worker-settlement.ts
new file mode 100644
index 00000000000..8b9425391ee
--- /dev/null
+++ b/src/cli/handlers/orchestration-worker-settlement.ts
@@ -0,0 +1,147 @@
+import type { RuntimeClient } from '../runtime-client'
+import { RuntimeClientError } from '../runtime-client'
+
+export async function requireWorkerDoneSettlement(
+  client: RuntimeClient,
+  type: string | undefined,
+  payload: string | undefined,
+  result: unknown
+): Promise<void> {
+  if (type !== 'worker_done' || hasLifecycleVerdict(result)) {
+    return
+  }
+  const target = parseWorkerDoneTarget(payload)
+  const receipt = parseWorkerDoneReceipt(result)
+  if (target && receipt) {
+    const [dispatchVerification, taskVerification] = await Promise.all([
+      client.call<{ dispatch: { id: string; status: string } | null }>(
+        'orchestration.dispatchShow',
+        { task: target.taskId }
+      ),
+      client.call<{
+        tasks: { id: string; status: string; result: string | null }[]
+      }>('orchestration.taskList', { status: target.expectedStatus, run: receipt.runId })
+    ]).catch(() => {
+      throw workerDoneSettlementUnknown()
+    })
+    const task = taskVerification.result.tasks.find((candidate) => candidate.id === target.taskId)
+    if (
+      dispatchVerification.result.dispatch?.id === target.dispatchId &&
+      dispatchVerification.result.dispatch.status === target.expectedStatus &&
+      task?.status === target.expectedStatus &&
+      isExactWorkerReport(task.result, receipt, target.outcome)
+    ) {
+      return
+    }
+  }
+  throw workerDoneSettlementUnknown()
+}
+
+function workerDoneSettlementUnknown(): RuntimeClientError {
+  return new RuntimeClientError(
+    'operation_unknown',
+    'The runtime accepted worker_done but did not confirm that the exact report settled its Task and Dispatch. Retry from the assigned worker after verifying its active Dispatch.'
+  )
+}
+
+function parseWorkerDoneReceipt(
+  result: unknown
+): { messageId: string; runId: string; fromHandle?: string } | undefined {
+  if (!result || typeof result !== 'object' || !('message' in result)) {
+    return undefined
+  }
+  const message = (result as { message?: unknown }).message
+  if (!message || typeof message !== 'object') {
+    return undefined
+  }
+  const {
+    id,
+    run_id: runId,
+    from_handle: fromHandle
+  } = message as {
+    id?: unknown
+    run_id?: unknown
+    from_handle?: unknown
+  }
+  return typeof id === 'string' && typeof runId === 'string'
+    ? {
+        messageId: id,
+        runId,
+        ...(typeof fromHandle === 'string' ? { fromHandle } : {})
+      }
+    : undefined
+}
+
+function isExactWorkerReport(
+  result: string | null | undefined,
+  receipt: { messageId: string; fromHandle?: string },
+  outcome: 'succeeded' | 'failed'
+): boolean {
+  if (!result) {
+    return false
+  }
+  try {
+    const parsed = JSON.parse(result) as Record<string, unknown>
+    return (
+      parsed.provenance === 'worker_report' &&
+      parsed.outcome === outcome &&
+      (parsed.messageId === receipt.messageId ||
+        (receipt.fromHandle !== undefined && parsed.reportedBy === receipt.fromHandle))
+    )
+  } catch {
+    return false
+  }
+}
+
+function hasLifecycleVerdict(result: unknown): boolean {
+  if (!result || typeof result !== 'object' || !('lifecycle' in result)) {
+    return false
+  }
+  const lifecycle = (result as { lifecycle?: unknown }).lifecycle
+  if (!lifecycle || typeof lifecycle !== 'object') {
+    return false
+  }
+  const action = (lifecycle as { action?: unknown }).action
+  if ('relay' in result) {
+    return (
+      (lifecycle as { authority?: unknown }).authority === 'run_home' &&
+      (action === 'completed' || action === 'failed' || action === 'rejected')
+    )
+  }
+  if (action === 'settled') {
+    const outcome = (lifecycle as { outcome?: unknown }).outcome
+    return outcome === 'succeeded' || outcome === 'failed'
+  }
+  return action === 'completed' || action === 'failed' || action === 'rejected'
+}
+
+function parseWorkerDoneTarget(payload: string | undefined):
+  | {
+      taskId: string
+      dispatchId: string
+      outcome: 'succeeded' | 'failed'
+      expectedStatus: 'completed' | 'failed'
+    }
+  | undefined {
+  if (!payload) {
+    return undefined
+  }
+  try {
+    const parsed = JSON.parse(payload) as Record<string, unknown>
+    if (
+      typeof parsed.taskId !== 'string' ||
+      typeof parsed.dispatchId !== 'string' ||
+      (parsed.outcome !== 'succeeded' && parsed.outcome !== 'failed')
+    ) {
+      return undefined
+    }
+    return {
+      taskId: parsed.taskId,
+      dispatchId: parsed.dispatchId,
+      outcome: parsed.outcome,
+      expectedStatus: parsed.outcome === 'succeeded' ? 'completed' : 'failed'
+    }
+  } catch {
+    return undefined
+  }
+}
diff --git a/src/cli/handlers/orchestration.test.ts b/src/cli/handlers/orchestration.test.ts
index ef7299efb43..c43f7b45b62 100644
--- a/src/cli/handlers/orchestration.test.ts
+++ b/src/cli/handlers/orchestration.test.ts
@@ -50,7 +50,7 @@ afterEach(() => {
 
 describe('orchestration send structured payload flags', () => {
   beforeEach(() => {
-    callMock.mockReset().mockResolvedValue({ result: { message: { id: 'msg_1' } } })
+    callMock.mockReset().mockResolvedValue({ result: { lifecycle: { action: 'completed' } } })
     getTerminalHandleMock.mockReset()
     delete process.env.ORCA_TERMINAL_HANDLE
     delete process.env.ORCA_PANE_KEY
@@ -94,6 +94,7 @@ describe('orchestration send structured payload flags', () => {
         filesModified: ['src/a.ts', 'src/b.ts'],
         reportPath: 'reports/done.md'
       }),
+      waitForLifecycleSettlement: true,
       devMode: false
     })
   })
@@ -207,6 +208,7 @@ describe('orchestration send structured payload flags', () => {
       priority: undefined,
       threadId: undefined,
       payload: JSON.stringify({ outcome: 'succeeded' }),
+      waitForLifecycleSettlement: true,
       devMode: false
     })
   })
@@ -233,6 +235,7 @@ describe('orchestration send structured payload flags', () => {
       priority: undefined,
       threadId: undefined,
       payload: JSON.stringify({ outcome: 'succeeded' }),
+      waitForLifecycleSettlement: true,
       devMode: false
     })
   })
diff --git a/src/cli/handlers/orchestration.ts b/src/cli/handlers/orchestration.ts
index 5be6e62394d..771b8367b88 100644
--- a/src/cli/handlers/orchestration.ts
+++ b/src/cli/handlers/orchestration.ts
@@ -8,6 +8,7 @@ import {
   getRequiredStringFlag
 } from '../flags'
 import { RuntimeClientError } from '../runtime-client'
+import { requireWorkerDoneSettlement } from './orchestration-worker-settlement'
 import { getTerminalHandle } from '../selectors'
 import {
   clampOrchestrationAskTimeoutMs,
@@ -90,14 +91,13 @@ const WORKER_TERMINAL_LIST_STATES = [
   'released'
 ] as const
 
-type LifecycleSendRejection = {
-  action: 'rejected'
-  code: string
-  reason: string
-}
+type LifecycleSendResult =
+  | { action: 'completed' | 'failed'; authority?: 'run_home' }
+  | { action: 'settled'; outcome: 'succeeded' | 'failed'; duplicate?: boolean }
+  | { action: 'rejected'; code: string; reason: string }
 
 type OrchestrationSendResult =
-  | { message: { id: string }; lifecycle?: LifecycleSendRejection }
+  | { message: { id: string; run_id?: string }; lifecycle?: LifecycleSendResult }
   | { messages: { id: string }[]; recipients: number }
   | {
       relay: {
@@ -107,7 +107,7 @@ type OrchestrationSendResult =
         destination?: 'run_home' | 'worker'
         accepted: true
       }
-      lifecycle?: { action: 'completed' | 'failed' }
+      lifecycle?: LifecycleSendResult
     }
 
 function resolveCompatibilityCliCommand(): 'orca' | 'orca-ide' | 'orca-dev' {
@@ -579,6 +579,7 @@ export const ORCHESTRATION_HANDLERS: Record<string, CommandHandler> = {
       payload: getOptionalStructuredMessagePayload(flags),
       // Why: pane key is the remint-stable sender identity the runtime verifies lifecycle ownership against; older runtimes strip it.
       senderPaneKey: process.env.ORCA_PANE_KEY || undefined,
+      waitForLifecycleSettlement: type === 'worker_done' ? true : undefined,
       devMode: isDevCliInvocation()
     }
     const dispatchCapability = getOptionalStringFlag(flags, 'dispatch-capability')
@@ -589,15 +590,12 @@ export const ORCHESTRATION_HANDLERS: Record<string, CommandHandler> = {
       sendParams,
       dispatchCapability ? { orchestrationCapability: dispatchCapability } : undefined
     )
-    if ('message' in result.result && result.result.lifecycle?.action === 'rejected') {
-      // Why: a rejected lifecycle signal isn't completion; non-zero exit stops workers from treating it as such.
-      process.exitCode = 1
+    await requireWorkerDoneSettlement(client, type, sendParams.payload, result.result)
+    if ('lifecycle' in result.result && result.result.lifecycle?.action === 'rejected') {
+      throw new RuntimeClientError(result.result.lifecycle.code, result.result.lifecycle.reason)
     }
     printResult(result, json, (r) => {
       if ('message' in r) {
-        if (r.lifecycle?.action === 'rejected') {
-          return `Rejected ${r.message.id}: ${r.lifecycle.reason}`
-        }
         return `Sent ${r.message.id}`
       }
       if ('relay' in r) {
diff --git a/src/cli/handlers/terminal.test.ts b/src/cli/handlers/terminal.test.ts
index 7dadf41c2d3..8c5ff460c77 100644
--- a/src/cli/handlers/terminal.test.ts
+++ b/src/cli/handlers/terminal.test.ts
@@ -61,3 +61,67 @@ describe('terminal close CLI', () => {
     expect(help).toContain('durable persistence')
   })
 })
+
+describe('terminal split CLI', () => {
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
+  it('sends the old-host attribution bypass through the legacy-compatible env field', async () => {
+    const call = vi.fn(async (method: string) =>
+      method === 'status.get'
+        ? {
+            result: {
+              runtimeId: 'runtime-1',
+              capabilities: ['terminal.attribution-removed.v1']
+            }
+          }
+        : { result: { split: { handle: 'term-2', parentHandle: 'term-1' } } }
+    )
+    vi.spyOn(console, 'log').mockImplementation(() => {})
+
+    await TERMINAL_HANDLERS['terminal split']({
+      flags: new Map([
+        ['terminal', 'term-1'],
+        ['direction', 'horizontal']
+      ]),
+      client: { call } as unknown as RuntimeClient,
+      cwd: '/tmp/worktree',
+      json: true
+    })
+
+    expect(call).toHaveBeenNthCalledWith(1, 'status.get')
+    expect(call).toHaveBeenNthCalledWith(
+      2,
+      'terminal.split',
+      {
+        terminal: 'term-1',
+        direction: 'horizontal',
+        command: undefined,
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION']
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
+  })
+
+  it('refuses legacy hosts because renderer-owned splits discard environment fields', async () => {
+    const call = vi.fn().mockResolvedValue({
+      result: { appVersion: '1.4.181', capabilities: ['mobile.tasks.v1'] }
+    })
+
+    await expect(
+      TERMINAL_HANDLERS['terminal split']({
+        flags: new Map([['terminal', 'term-1']]),
+        client: { call } as unknown as RuntimeClient,
+        cwd: '/tmp/worktree',
+        json: true
+      })
+    ).rejects.toMatchObject({
+      code: 'runtime_update_required',
+      message: expect.stringContaining('Update the host and try again')
+    })
+    expect(call).toHaveBeenCalledTimes(1)
+    expect(call).not.toHaveBeenCalledWith('terminal.split', expect.anything())
+  })
+})
diff --git a/src/cli/handlers/terminal.ts b/src/cli/handlers/terminal.ts
index 551ab8d95c1..677cdc81034 100644
--- a/src/cli/handlers/terminal.ts
+++ b/src/cli/handlers/terminal.ts
@@ -8,7 +8,8 @@ import type {
   RuntimeTerminalSend,
   RuntimeTerminalShow,
   RuntimeTerminalSplit,
-  RuntimeTerminalWait
+  RuntimeTerminalWait,
+  RuntimeStatus
 } from '../../shared/runtime-types'
 import type { CommandHandler } from '../dispatch'
 import { shouldUseRendererBackedInteractiveTerminal } from '../codex-command-classification'
@@ -37,6 +38,14 @@ import {
   getRequiredWorktreeSelector,
   getTerminalHandle
 } from '../selectors'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  hostSupportsTerminalCreateAttributionDisable,
+  hostSupportsTerminalSplitAttributionDisable,
+  TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE,
+  TERMINAL_SPLIT_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../shared/legacy-terminal-attribution-env'
 
 // Why: terminal wait legitimately needs to outlive the CLI's default RPC
 // timeout. Even without an explicit server timeout, the client must allow
@@ -137,17 +146,30 @@ export const TERMINAL_HANDLERS: Record<string, CommandHandler> = {
     const useRendererBackedInteractiveTerminal =
       !client.isRemote && shouldUseRendererBackedInteractiveTerminal(command)
     const focus = flags.get('focus') === true
-    const result = await client.call<{ terminal: RuntimeTerminalCreate }>('terminal.create', {
-      worktree: await getBrowserWorktreeSelector(flags, cwd, client),
-      command,
-      title: getOptionalStringFlag(flags, 'title'),
-      // Why: interactive local agent TUIs need the renderer-backed terminal
-      // path for browser-side features, but CLI creates must stay backgrounded
-      // unless the caller explicitly asks for focus.
-      focus,
-      ...(focus ? { presentation: 'focused' } : {}),
-      ...(useRendererBackedInteractiveTerminal ? { rendererBacked: true, activate: focus } : {})
-    })
+    const status = await client.call<RuntimeStatus>('status.get')
+    if (!hostSupportsTerminalCreateAttributionDisable(status.result)) {
+      throw new RuntimeClientError(
+        'runtime_update_required',
+        TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+      )
+    }
+    const result = await client.call<{ terminal: RuntimeTerminalCreate }>(
+      'terminal.create',
+      {
+        worktree: await getBrowserWorktreeSelector(flags, cwd, client),
+        command,
+        env: withLegacyTerminalAttributionDisabledEnv(undefined),
+        envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
+        title: getOptionalStringFlag(flags, 'title'),
+        // Why: interactive local agent TUIs need the renderer-backed terminal
+        // path for browser-side features, but CLI creates must stay backgrounded
+        // unless the caller explicitly asks for focus.
+        focus,
+        ...(focus ? { presentation: 'focused' } : {}),
+        ...(useRendererBackedInteractiveTerminal ? { rendererBacked: true, activate: focus } : {})
+      },
+      { expectedRuntimeId: status.result.runtimeId }
+    )
     printResult(result, json, formatTerminalCreate)
   },
   // `focus` resolves to this canonical path via CommandSpec.aliases before dispatch.
@@ -168,11 +190,24 @@ export const TERMINAL_HANDLERS: Record<string, CommandHandler> = {
     ) {
       throw new RuntimeClientError('invalid_argument', '--direction must be horizontal or vertical')
     }
-    const result = await client.call<{ split: RuntimeTerminalSplit }>('terminal.split', {
-      terminal: await getTerminalHandle(flags, cwd, client),
-      direction: directionFlag,
-      command: getOptionalStringFlag(flags, 'command')
-    })
+    const status = await client.call<RuntimeStatus>('status.get')
+    if (!hostSupportsTerminalSplitAttributionDisable(status.result)) {
+      throw new RuntimeClientError(
+        'runtime_update_required',
+        TERMINAL_SPLIT_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE
+      )
+    }
+    const result = await client.call<{ split: RuntimeTerminalSplit }>(
+      'terminal.split',
+      {
+        terminal: await getTerminalHandle(flags, cwd, client),
+        direction: directionFlag,
+        command: getOptionalStringFlag(flags, 'command'),
+        env: withLegacyTerminalAttributionDisabledEnv(undefined),
+        envToDelete: addLegacyTerminalAttributionDisableRequest(undefined)
+      },
+      { expectedRuntimeId: status.result.runtimeId }
+    )
     printResult(result, json, formatTerminalSplit)
   }
 }
diff --git a/src/cli/index.test.ts b/src/cli/index.test.ts
index 4867aebc29b..2f86ee9583f 100644
--- a/src/cli/index.test.ts
+++ b/src/cli/index.test.ts
@@ -3112,6 +3112,10 @@ describe('orca cli worktree awareness', () => {
   it('passes explicit focus through terminal.create', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3136,13 +3140,19 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: undefined,
-      title: 'RUNNER',
-      focus: true,
-      presentation: 'focused'
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: undefined,
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'RUNNER',
+        focus: true,
+        presentation: 'focused'
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('prints terminal.read fallback screen lines in json mode', async () => {
@@ -3184,6 +3194,10 @@ describe('orca cli worktree awareness', () => {
   it('keeps interactive Codex startup commands backgrounded unless focus is explicit', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3209,19 +3223,29 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex',
-      title: 'Codex',
-      focus: false,
-      rendererBacked: true,
-      activate: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex',
+        focus: false,
+        rendererBacked: true,
+        activate: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('keeps explicit focus semantics when forcing Codex through the renderer path', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3248,20 +3272,30 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex',
-      title: 'Codex',
-      focus: true,
-      presentation: 'focused',
-      rendererBacked: true,
-      activate: true
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex',
+        focus: true,
+        presentation: 'focused',
+        rendererBacked: true,
+        activate: true
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('does not force the visible terminal path for explicit Codex exec commands', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3287,17 +3321,27 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex exec summarize',
-      title: 'Codex exec',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex exec summarize',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex exec',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('does not force the visible terminal path for Codex exec commands after global options', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3323,17 +3367,27 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex -m gpt-5 --sandbox workspace-write exec summarize',
-      title: 'Codex exec',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex -m gpt-5 --sandbox workspace-write exec summarize',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex exec',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('does not force the visible terminal path for Codex review commands after long options', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3359,17 +3413,27 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex --model=gpt-5 --sandbox=workspace-write review',
-      title: 'Codex review',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex --model=gpt-5 --sandbox=workspace-write review',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex review',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('does not force the visible terminal path for Codex help commands', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3395,17 +3459,27 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex --help',
-      title: 'Codex help',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex --help',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex help',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('keeps Codex prompts after global options backgrounded unless focus is explicit', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3431,19 +3505,29 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'codex -m gpt-5 "fix the flaky test"',
-      title: 'Codex prompt',
-      focus: false,
-      rendererBacked: true,
-      activate: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'codex -m gpt-5 "fix the flaky test"',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex prompt',
+        focus: false,
+        rendererBacked: true,
+        activate: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('keeps interactive Claude startup commands backgrounded unless focus is explicit', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3469,19 +3553,29 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'claude',
-      title: 'Claude',
-      focus: false,
-      rendererBacked: true,
-      activate: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'claude',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Claude',
+        focus: false,
+        rendererBacked: true,
+        activate: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('keeps Claude print commands on the background terminal path', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3507,12 +3601,18 @@ describe('orca cli worktree awareness', () => {
       '/tmp/repo'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'path:/tmp/repo/feature',
-      command: 'claude -p "summarize"',
-      title: 'Claude print',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'path:/tmp/repo/feature',
+        command: 'claude -p "summarize"',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Claude print',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('uses the resolved enclosing worktree for other worktree consumers', async () => {
@@ -3819,6 +3919,10 @@ describe('orca cli worktree awareness', () => {
   it('sends explicit remote terminal create worktree selectors unchanged', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3842,12 +3946,18 @@ describe('orca cli worktree awareness', () => {
       '/tmp/client/repo/src'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'id:repo-1::/srv/orca/feature',
-      command: undefined,
-      title: undefined,
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'id:repo-1::/srv/orca/feature',
+        command: undefined,
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: undefined,
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('collects and formats memory diagnostics', async () => {
@@ -3955,6 +4065,10 @@ describe('orca cli worktree awareness', () => {
   it('does not force remote Codex terminal creates through a local renderer path', async () => {
     queueFixtures(
       callMock,
+      okFixture('req_status', {
+        runtimeId: 'runtime-1',
+        capabilities: ['terminal.attribution-removed.v1']
+      }),
       okFixture('req_terminal_create', {
         terminal: {
           handle: 'term_1',
@@ -3982,12 +4096,18 @@ describe('orca cli worktree awareness', () => {
       '/tmp/client/repo/src'
     )
 
-    expect(callMock).toHaveBeenCalledWith('terminal.create', {
-      worktree: 'id:repo-1::/srv/orca/feature',
-      command: 'codex',
-      title: 'Codex',
-      focus: false
-    })
+    expect(callMock).toHaveBeenCalledWith(
+      'terminal.create',
+      {
+        worktree: 'id:repo-1::/srv/orca/feature',
+        command: 'codex',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+        title: 'Codex',
+        focus: false
+      },
+      { expectedRuntimeId: 'runtime-1' }
+    )
   })
 
   it('does not resolve implicit remote browser targets from client cwd', async () => {
diff --git a/src/cli/runtime/client.ts b/src/cli/runtime/client.ts
index 3a8951de554..b6c49ff7c22 100644
--- a/src/cli/runtime/client.ts
+++ b/src/cli/runtime/client.ts
@@ -87,6 +87,7 @@ export class RuntimeClient {
         }
       : {}
     const envelope = {
+      expectedRuntimeId: options?.expectedRuntimeId,
       orchestrationCapability: options?.orchestrationCapability,
       orchestrationContractVersion: method.startsWith('orchestration.')
         ? ORCHESTRATION_CONTRACT_VERSION
diff --git a/src/cli/runtime/transport.test.ts b/src/cli/runtime/transport.test.ts
index 8de35f619e5..7858d6cd131 100644
--- a/src/cli/runtime/transport.test.ts
+++ b/src/cli/runtime/transport.test.ts
@@ -50,6 +50,48 @@ describe('runtime transport timeout validation', () => {
 // Why: these tests create Unix domain socket servers in temp directories.
 // Windows does not support Unix domain sockets in the same way.
 describe.skipIf(process.platform === 'win32')('runtime transport', () => {
+  it('forwards the expected runtime fence in local requests', async () => {
+    const userDataPath = mkdtempSync(join(tmpdir(), 'orca-runtime-transport-'))
+    const endpoint = join(userDataPath, 'runtime.sock')
+    let receivedRequest: Record<string, unknown> | null = null
+    const server = createServer((socket) => {
+      sockets.add(socket)
+      socket.once('close', () => sockets.delete(socket))
+      socket.once('data', (data) => {
+        receivedRequest = JSON.parse(String(data).trim()) as Record<string, unknown>
+        socket.write(
+          `${JSON.stringify({
+            id: receivedRequest.id,
+            ok: true,
+            result: { terminal: { handle: 'terminal-1' } },
+            _meta: { runtimeId: 'runtime-1' }
+          })}\n`
+        )
+      })
+    })
+    servers.add(server)
+    await new Promise<void>((resolve) => server.listen(endpoint, resolve))
+
+    await sendRequest(
+      {
+        runtimeId: 'runtime-1',
+        pid: 123,
+        transports: [{ kind: 'unix', endpoint }],
+        authToken: 'token',
+        startedAt: 1
+      },
+      'terminal.create',
+      { worktree: 'id:worktree-1' },
+      1_000,
+      { expectedRuntimeId: 'runtime-1' }
+    )
+
+    expect(receivedRequest).toMatchObject({
+      method: 'terminal.create',
+      expectedRuntimeId: 'runtime-1'
+    })
+  })
+
   it('refreshes the per-call timeout when the runtime sends keepalive frames', async () => {
     const userDataPath = mkdtempSync(join(tmpdir(), 'orca-runtime-transport-'))
     const endpoint = join(userDataPath, 'runtime.sock')
diff --git a/src/cli/runtime/transport.ts b/src/cli/runtime/transport.ts
index 091ca9da0e0..998052dc4b6 100644
--- a/src/cli/runtime/transport.ts
+++ b/src/cli/runtime/transport.ts
@@ -186,6 +186,7 @@ export async function sendRequest<TResult>(
           authToken: metadata.authToken,
           method,
           params,
+          expectedRuntimeId: envelope?.expectedRuntimeId,
           orchestrationCapability: envelope?.orchestrationCapability,
           orchestrationContractVersion: envelope?.orchestrationContractVersion,
           orchestrationRequestId: envelope?.orchestrationRequestId,
diff --git a/src/cli/selectors.ts b/src/cli/selectors.ts
index 3729b8598a7..aef583ad0ac 100644
--- a/src/cli/selectors.ts
+++ b/src/cli/selectors.ts
@@ -237,6 +237,14 @@ export async function getEmulatorWorktreeSelector(
   if (client.isRemote) {
     return undefined
   }
+  const terminalWorktreeId = process.env.ORCA_WORKTREE_ID
+  if (terminalWorktreeId?.trim()) {
+    return terminalWorktreeId
+  }
+  const folderWorkspaceId = process.env.ORCA_WORKSPACE_ID?.trim()
+  if (folderWorkspaceId?.startsWith('folder:')) {
+    return folderWorkspaceId
+  }
   try {
     return await resolveCurrentWorktreeSelector(cwd, client)
   } catch {
diff --git a/src/main/agent-hooks/hook-stdin-contract.ts b/src/main/agent-hooks/hook-stdin-contract.ts
index a85997d87de..fb7b3d85487 100644
--- a/src/main/agent-hooks/hook-stdin-contract.ts
+++ b/src/main/agent-hooks/hook-stdin-contract.ts
@@ -29,9 +29,12 @@ export const WINDOWS_HOOK_STDIN_READER = '"%SystemRoot%\\System32\\more.com"'
 export const WINDOWS_HOOK_STDIN_DRAIN_COMMAND = `${WINDOWS_HOOK_STDIN_READER} >nul 2>nul`
 
 // Why (#11549): missing Orca context means the hook ran outside an Orca pane, where the caller
-// may abandon stdin rather than close it — more.com then drains forever and strands a visible
-// cmd.exe per hook event. Batch can exit instead because it streams to curl rather than
-// capturing, so unlike the POSIX/PowerShell hooks it loses no payload by giving up stdin.
+// may abandon stdin rather than close it — a read-to-EOF then blocks forever and strands a
+// visible window per hook event. The Windows rule: a hook must check the Orca env before it
+// owns stdin, and exit without reading when the env is missing — the payload is discarded on
+// that path anyway. This applies to .cmd, the copilot .ps1, and the Git Bash kimi .sh alike.
+// POSIX hooks keep capture-first: their callers close stdin, and exiting mid-write there
+// surfaces as EPIPE the agent can see (#8110).
 export function buildWindowsHookEnvironmentGuardLines(): string[] {
   return [
     'if "%ORCA_AGENT_HOOK_PORT%"=="" exit /b 0',
diff --git a/src/main/agent-hooks/installer-utils-remote.ts b/src/main/agent-hooks/installer-utils-remote.ts
index aa7e47d258a..b4518220e90 100644
--- a/src/main/agent-hooks/installer-utils-remote.ts
+++ b/src/main/agent-hooks/installer-utils-remote.ts
@@ -8,8 +8,6 @@
 // We deliberately keep the JSON merge logic in the existing
 // `installer-utils.ts` and only swap fs primitives — the JSON shape and
 // managed-command matching must stay identical to the local install.
-//
-// See docs/design/agent-status-over-ssh.md §8 (commit #8).
 
 import { randomUUID } from 'node:crypto'
 import type { SFTPWrapper, FileEntryWithStats } from 'ssh2'
@@ -83,9 +81,9 @@ export async function writeHooksJsonRemote(
   }
 }
 
-/** Write the managed hook script to the remote and chmod 0o755. POSIX-only —
- *  the relay deliberately does not support Windows-remote in v1 (see design
- *  doc §3 + §6). */
+/** Write the managed hook script to the remote and chmod 0o755. POSIX-only:
+ *  the payload is a shell script and every path here is POSIX-joined, so a
+ *  Windows SSH target would need a separate installer, not a tweak to this one. */
 export async function writeManagedScriptRemote(
   sftp: SFTPWrapper,
   remotePath: string,
diff --git a/src/main/agent-hooks/managed-hook-local-filesystem.test.ts b/src/main/agent-hooks/managed-hook-local-filesystem.test.ts
index f6dcf14471a..3213ee0210e 100644
--- a/src/main/agent-hooks/managed-hook-local-filesystem.test.ts
+++ b/src/main/agent-hooks/managed-hook-local-filesystem.test.ts
@@ -2,7 +2,10 @@ import { mkdtemp, mkdir, readFile, readdir, rm, stat, writeFile } from 'node:fs/
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { afterEach, describe, expect, it } from 'vitest'
-import { installRemoteManagedAgentHooks } from './remote-managed-hook-installers'
+import {
+  installRemoteManagedAgentHooks,
+  REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+} from './remote-managed-hook-installers'
 import { createManagedHookLocalFilesystem } from './managed-hook-local-filesystem'
 
 const tempHomes: string[] = []
@@ -34,7 +37,10 @@ describe('managed-hook local filesystem', () => {
   it('supports cold and warm aggregate installs without SFTP or temp-file residue', async () => {
     const home = await createTempHome()
     const filesystem = createManagedHookLocalFilesystem()
-    const options = { grokHomeDir: join(home, '.grok') }
+    const options = {
+      grokHomeDir: join(home, '.grok'),
+      agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+    }
 
     const cold = await installRemoteManagedAgentHooks(filesystem, home, options)
     const warm = await installRemoteManagedAgentHooks(filesystem, home, options)
@@ -61,7 +67,8 @@ describe('managed-hook local filesystem', () => {
     await writeFile(claudeConfig, '{"hooks": }', 'utf8')
 
     const results = await installRemoteManagedAgentHooks(createManagedHookLocalFilesystem(), home, {
-      grokHomeDir: join(home, '.grok')
+      grokHomeDir: join(home, '.grok'),
+      agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
     })
 
     expect(results).toHaveLength(14)
diff --git a/src/main/agent-hooks/managed-hook-owner-identity.ts b/src/main/agent-hooks/managed-hook-owner-identity.ts
index 7f60956e6e4..51f299595cd 100644
--- a/src/main/agent-hooks/managed-hook-owner-identity.ts
+++ b/src/main/agent-hooks/managed-hook-owner-identity.ts
@@ -32,7 +32,7 @@ function hasCode(error: unknown, code: string): boolean {
 
 export function parseLinuxStartTicks(statLine: string): string | null {
   const commandEnd = statLine.lastIndexOf(')')
-  if (commandEnd < 0) {
+  if (commandEnd === -1) {
     return null
   }
   // Field 22 is index 19 after removing pid and the parenthesized command.
diff --git a/src/main/agent-hooks/managed-hook-runtime.test.ts b/src/main/agent-hooks/managed-hook-runtime.test.ts
index 456a741df87..e4c23e13959 100644
--- a/src/main/agent-hooks/managed-hook-runtime.test.ts
+++ b/src/main/agent-hooks/managed-hook-runtime.test.ts
@@ -1,22 +1,160 @@
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import { resolveRelayGrokHome } from './managed-hook-runtime'
+import { chmod, mkdtemp, readdir, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeChildProcess from 'node:child_process'
 
-afterEach(() => {
+// Why: the probe spawns a real login shell, and `resolveRelayGrokHome` swallows every
+// spawn failure into its fallback. Left unmocked this asserts the runner's scheduling
+// latency, not the parser: on a loaded sharded CI box the 8s timeout expires and the
+// first case silently flips to the fallback path.
+vi.mock('node:child_process', async (importOriginal) => {
+  const actual = await importOriginal<typeof NodeChildProcess>()
+  return { ...actual, execFile: vi.fn() }
+})
+
+const { execFile } = await import('node:child_process')
+const execFileMock = vi.mocked(execFile)
+const { execFile: actualExecFile } =
+  await vi.importActual<typeof NodeChildProcess>('node:child_process')
+const { installManagedHooks, resolveRelayGrokHome } = await import('./managed-hook-runtime')
+
+type ExecFileCallback = (error: Error | null, result?: { stdout: string; stderr: string }) => void
+
+function stubProbeOutput(stdout: string): void {
+  execFileMock.mockImplementation(((...args: unknown[]) => {
+    ;(args.at(-1) as ExecFileCallback)(null, { stdout, stderr: '' })
+    return undefined
+  }) as unknown as typeof execFile)
+}
+
+function stubProbeFailure(error: Error): void {
+  execFileMock.mockImplementation(((...args: unknown[]) => {
+    ;(args.at(-1) as ExecFileCallback)(error)
+    return undefined
+  }) as unknown as typeof execFile)
+}
+
+beforeEach(() => {
+  execFileMock.mockReset()
+  // Why: `installManagedHooks` proves a skipped probe through the login-shell run log, so the
+  // probe must really spawn unless a case above stubs it. The mock loses `promisify.custom`,
+  // so the real `(error, stdout, stderr)` callback is reshaped into the `{ stdout, stderr }`
+  // that `promisify(execFile)` resolves in production.
+  execFileMock.mockImplementation(((...args: unknown[]) => {
+    const callback = args.at(-1) as ExecFileCallback
+    return (actualExecFile as (...callArgs: unknown[]) => unknown)(
+      ...args.slice(0, -1),
+      (error: Error | null, stdout: string, stderr: string) => callback(error, { stdout, stderr })
+    )
+  }) as unknown as typeof execFile)
+})
+
+const tempHomes: string[] = []
+const tempRoot = process.platform === 'win32' ? tmpdir() : '/tmp'
+const SHELL_NAME = 'login-shell'
+const SHELL_RUNS_NAME = 'login-shell-runs'
+
+async function createTempHome(): Promise<string> {
+  const home = await mkdtemp(join(tempRoot, 'orca-managed-hook-runtime-'))
+  tempHomes.push(home)
+  return home
+}
+
+/** Login shell that records each invocation, so a skipped GROK_HOME probe is observable. */
+async function stubLoginShell(home: string): Promise<void> {
+  const shell = join(home, SHELL_NAME)
+  await writeFile(
+    shell,
+    `#!/bin/sh\necho ran >> "${join(home, SHELL_RUNS_NAME)}"\nexit 0\n`,
+    'utf8'
+  )
+  await chmod(shell, 0o755)
+  vi.stubEnv('HOME', home)
+  vi.stubEnv('SHELL', shell)
+}
+
+afterEach(async () => {
   vi.unstubAllEnvs()
+  await Promise.all(tempHomes.splice(0).map((home) => rm(home, { recursive: true, force: true })))
 })
 
 describe.runIf(process.platform !== 'win32')('resolveRelayGrokHome', () => {
   it('uses the login-shell GROK_HOME and normalizes trailing separators', async () => {
     vi.stubEnv('SHELL', '/bin/sh')
-    vi.stubEnv('GROK_HOME', '/srv/grok///')
+    stubProbeOutput('/srv/grok///\n')
 
     await expect(resolveRelayGrokHome('/home/orca')).resolves.toBe('/srv/grok')
+
+    const [shell, args] = execFileMock.mock.calls[0] ?? []
+    expect(shell).toBe('/bin/sh')
+    // `sh`/`dash` reject `-lc`, so the mode choice is part of the contract under test.
+    expect(args?.[0]).toBe('-c')
+  })
+
+  it('passes -lc to a login shell that supports it', async () => {
+    vi.stubEnv('SHELL', '/bin/zsh')
+    stubProbeOutput('/srv/grok\n')
+
+    await expect(resolveRelayGrokHome('/home/orca')).resolves.toBe('/srv/grok')
+
+    const [shell, args] = execFileMock.mock.calls[0] ?? []
+    expect(shell).toBe('/bin/zsh')
+    expect(args?.[0]).toBe('-lc')
   })
 
   it('falls back when the login-shell GROK_HOME is not an absolute POSIX path', async () => {
     vi.stubEnv('SHELL', '/bin/sh')
-    vi.stubEnv('GROK_HOME', '../relative')
+    stubProbeOutput('../relative\n')
+
+    await expect(resolveRelayGrokHome('/home/orca')).resolves.toBe('/home/orca/.grok')
+  })
+
+  // Why: this is the branch that made the old test flaky — pin it so a probe failure is
+  // an asserted fallback rather than an invisible substitution for a real answer.
+  it('falls back when the probe fails or times out', async () => {
+    vi.stubEnv('SHELL', '/bin/sh')
+    stubProbeFailure(Object.assign(new Error('spawn timed out'), { killed: true }))
 
     await expect(resolveRelayGrokHome('/home/orca')).resolves.toBe('/home/orca/.grok')
   })
 })
+
+describe.runIf(process.platform !== 'win32')('installManagedHooks', () => {
+  it.each([
+    ['omitted', undefined],
+    ['empty', { agents: [] }]
+  ])(
+    'writes nothing and runs no probe when the allowlist is %s (issue #11641)',
+    async (_label, options) => {
+      const home = await createTempHome()
+      await stubLoginShell(home)
+
+      await expect(installManagedHooks(options)).resolves.toEqual({ installers: 0, errors: 0 })
+
+      // Why: no agent config home, no ~/.orca install lock, and no GROK_HOME login-shell probe.
+      expect(await readdir(home)).toEqual([SHELL_NAME])
+    }
+  )
+
+  it('still rejects an aborted request rather than resolving an empty summary', async () => {
+    const controller = new AbortController()
+    controller.abort()
+
+    await expect(
+      installManagedHooks({ signal: controller.signal, agents: [] })
+    ).rejects.toMatchObject({ name: 'AbortError' })
+  })
+
+  it('installs only the allowlisted agent, under the install lock', async () => {
+    const home = await createTempHome()
+    await stubLoginShell(home)
+
+    await expect(installManagedHooks({ agents: ['claude'] })).resolves.toEqual({
+      installers: 1,
+      errors: 0
+    })
+
+    expect((await readdir(home)).sort()).toEqual(['.claude', '.orca', SHELL_NAME, SHELL_RUNS_NAME])
+  })
+})
diff --git a/src/main/agent-hooks/managed-hook-runtime.ts b/src/main/agent-hooks/managed-hook-runtime.ts
index bdd7195b50d..e995467ee7d 100644
--- a/src/main/agent-hooks/managed-hook-runtime.ts
+++ b/src/main/agent-hooks/managed-hook-runtime.ts
@@ -79,6 +79,11 @@ export async function installManagedHooks(options?: {
   agents?: readonly AgentHookTarget[]
 }): Promise<ManagedHookInstallSummary> {
   options?.signal?.throwIfAborted()
+  // Why: empty/omitted allowlist fails closed before any home/host probes.
+  const agents = options?.agents ?? []
+  if (agents.length === 0) {
+    return { installers: 0, errors: 0 }
+  }
   const home = homedir()
   const grokHomeDir = await resolveRelayGrokHome(home, options?.signal)
   options?.signal?.throwIfAborted()
@@ -96,7 +101,7 @@ export async function installManagedHooks(options?: {
         {
           grokHomeDir,
           signal: options?.signal,
-          agents: options?.agents
+          agents
         }
       )
       return {
diff --git a/src/main/agent-hooks/managed-hook-stdin-lifecycle.test.ts b/src/main/agent-hooks/managed-hook-stdin-lifecycle.test.ts
index 7c27c2fadee..f805e6c25f1 100644
--- a/src/main/agent-hooks/managed-hook-stdin-lifecycle.test.ts
+++ b/src/main/agent-hooks/managed-hook-stdin-lifecycle.test.ts
@@ -293,13 +293,17 @@ describe('Windows managed hook stdin structure', () => {
         claude.indexOf('if not "%DEVIN_PROJECT_DIR%"=="" goto :orca_agent_hook_drain_stdin')
       )
 
+      // Why (#11549 class): every Windows-local hook now guards before owning stdin —
+      // the caller may abandon the pipe, and the payload is discarded on this path anyway.
       const copilot = readFileSync(join(hooksDir, 'copilot-hook.ps1'), 'utf8')
-      expect(copilot.indexOf('[Console]::In.ReadToEnd()')).toBeLessThan(
-        copilot.indexOf('if (-not $env:ORCA_AGENT_HOOK_PORT')
+      expect(copilot.indexOf('if (-not $env:ORCA_AGENT_HOOK_PORT')).toBeGreaterThan(-1)
+      expect(copilot.indexOf('if (-not $env:ORCA_AGENT_HOOK_PORT')).toBeLessThan(
+        copilot.indexOf('[Console]::In.ReadToEnd()')
       )
       const kimi = readFileSync(join(hooksDir, 'kimi-hook.sh'), 'utf8')
-      expect(kimi.indexOf(`payload=$(${POSIX_HOOK_STDIN_READER})`)).toBeLessThan(
-        kimi.indexOf('exit 0')
+      expect(kimi.indexOf('if [ -z "$ORCA_AGENT_HOOK_PORT" ]')).toBeGreaterThan(-1)
+      expect(kimi.indexOf('if [ -z "$ORCA_AGENT_HOOK_PORT" ]')).toBeLessThan(
+        kimi.indexOf(`payload=$(${POSIX_HOOK_STDIN_READER})`)
       )
     } finally {
       homedirMock.mockImplementation(() => process.env.HOME ?? tmpdir())
@@ -318,7 +322,7 @@ describe('Windows managed hook stdin structure', () => {
   })
 
   it.skipIf(process.platform !== 'win32')(
-    'exits 0 for every local script and missing-script launcher, and only .cmd drops stdin',
+    'exits 0 for every local script and missing-script launcher, dropping stdin only without Orca env',
     async () => {
       const home = mkdtempSync(join(tmpdir(), 'orca-hook-stdin-windows-live-'))
       homedirMock.mockReturnValue(home)
@@ -356,16 +360,13 @@ describe('Windows managed hook stdin structure', () => {
               : [scriptPath]
           const result = await runHookProcess(executable, args, hookEnvironment())
           expect(result.exitCode, `${fileName} exit code`).toBe(0)
-          if (fileName.endsWith('.cmd')) {
-            // Why (#11549): these guards exit rather than own stdin, so the writer breaks —
-            // EPIPE, or ECONNRESET when Windows tears the pipe down first. hookEnvironment()
-            // strips every ORCA_* var, so the relaxation only ever covers the missing-env
-            // path — a happy-path case added to this loop must not reuse it.
-            for (const error of result.stdinErrors) {
-              expect(['EPIPE', 'ECONNRESET'], `${fileName} stdin error`).toContain(error.code)
-            }
-          } else {
-            expect(result.stdinErrors, `${fileName} stdin errors`).toHaveLength(0)
+          // Why (#11549 class): every Windows-local hook exits before owning stdin when the
+          // Orca env is missing, so the writer may break — EPIPE, or ECONNRESET when Windows
+          // tears the pipe down first. hookEnvironment() strips every ORCA_* var, so this
+          // relaxation only ever covers the missing-env path — a happy-path case added to
+          // this loop must not reuse it.
+          for (const error of result.stdinErrors) {
+            expect(['EPIPE', 'ECONNRESET'], `${fileName} stdin error`).toContain(error.code)
           }
         }
 
diff --git a/src/main/agent-hooks/remote-hook-service-installers.test.ts b/src/main/agent-hooks/remote-hook-service-installers.test.ts
index 2b2cfcdcf38..9ba01bc81c6 100644
--- a/src/main/agent-hooks/remote-hook-service-installers.test.ts
+++ b/src/main/agent-hooks/remote-hook-service-installers.test.ts
@@ -707,7 +707,9 @@ describe('remote hook service installers', () => {
 
   it('installs Droid and Copilot when running the aggregate remote installer (issue #7253)', async () => {
     const { sftp } = createFakeSftp()
-    const results = await installRemoteManagedAgentHooks(sftp, '/home/dev')
+    const results = await installRemoteManagedAgentHooks(sftp, '/home/dev', {
+      agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+    })
     const byAgent = new Map(results.map((r) => [r.agent, r.state]))
     expect(byAgent.get('droid')).toBe('installed')
     expect(byAgent.get('copilot')).toBe('installed')
@@ -727,6 +729,19 @@ describe('remote hook service installers', () => {
     }
   })
 
+  it('fails closed when the agent allowlist is omitted or empty (issue #11641)', async () => {
+    const { sftp, fs } = createFakeSftp()
+
+    await expect(installRemoteManagedAgentHooks(sftp, '/home/dev')).resolves.toEqual([])
+    await expect(
+      installRemoteManagedAgentHooks(sftp, '/home/dev', { agents: [] })
+    ).resolves.toEqual([])
+
+    // Why: fake SFTP seeds '/' only; no agent config homes or files may appear.
+    expect([...fs.files.keys()]).toEqual([])
+    expect([...fs.dirs]).toEqual(['/'])
+  })
+
   it('stops before the next installer when its relay request is cancelled', async () => {
     const controller = new AbortController()
     const claudeInstall = vi
@@ -746,7 +761,10 @@ describe('remote hook service installers', () => {
       const { sftp } = createFakeSftp()
 
       await expect(
-        installRemoteManagedAgentHooks(sftp, '/home/dev', { signal: controller.signal })
+        installRemoteManagedAgentHooks(sftp, '/home/dev', {
+          signal: controller.signal,
+          agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+        })
       ).rejects.toMatchObject({ name: 'AbortError' })
       expect(claudeInstall).toHaveBeenCalledTimes(1)
       expect(openClaudeInstall).not.toHaveBeenCalled()
diff --git a/src/main/agent-hooks/remote-managed-hook-installers.ts b/src/main/agent-hooks/remote-managed-hook-installers.ts
index 0fdf0c47da4..6471ec5cfb4 100644
--- a/src/main/agent-hooks/remote-managed-hook-installers.ts
+++ b/src/main/agent-hooks/remote-managed-hook-installers.ts
@@ -26,7 +26,8 @@ export type RemoteManagedHookInstallOptions = {
   /** Stops before starting the next installer when the owning relay request
    *  is cancelled. Individual filesystem mutations remain atomic. */
   signal?: AbortSignal
-  /** Positively detected and enabled agents allowed to mutate config. */
+  /** Positively detected and enabled agents allowed to mutate config.
+   *  Required for any install: omit/empty fails closed (no config mutation). */
   agents?: readonly AgentHookTarget[]
 }
 
@@ -81,10 +82,15 @@ export async function installRemoteManagedAgentHooks(
   remoteHome: string,
   options?: RemoteManagedHookInstallOptions
 ): Promise<AgentHookInstallStatus[]> {
+  // Why: omit/empty allowlist must never mean "install every agent" — that
+  // recreates config homes for CLIs the user never installed (issue #11641).
+  const allowedAgents = new Set(options?.agents ?? [])
+  if (allowedAgents.size === 0) {
+    return []
+  }
   const results: AgentHookInstallStatus[] = []
-  const allowedAgents = options?.agents ? new Set(options.agents) : null
   for (const [agent, install] of REMOTE_MANAGED_HOOK_INSTALLERS) {
-    if (allowedAgents && !allowedAgents.has(agent)) {
+    if (!allowedAgents.has(agent)) {
       continue
     }
     // Why: relay requests can disappear during reconnect; do not start more
diff --git a/src/main/agent-hooks/server.ts b/src/main/agent-hooks/server.ts
index e5ef70e1395..4dc64d523de 100644
--- a/src/main/agent-hooks/server.ts
+++ b/src/main/agent-hooks/server.ts
@@ -1,5 +1,5 @@
 /* eslint-disable max-lines -- Why: this file owns the loopback HTTP adapter, the on-disk last-status persistence layer (hydrate, sanitize, TTL, atomic write, drop), and the relay ingest path in one place so the cache lifecycle (set → schedule → drain) lives next to the surfaces that mutate it. Splitting would force mutual `private` accessor scaffolding for a single class. */
-// Why: this main-process adapter keeps listener internals in shared/ (`src/shared/agent-hook-listener.ts`) so the relay can host the same pipeline without Electron. See docs/design/agent-status-over-ssh.md §5.
+// Why: this main-process adapter keeps listener internals in shared/ (`src/shared/agent-hook-listener.ts`) so the relay can host the same pipeline without Electron; parsing that drifts back into this file stops applying to SSH panes.
 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'
 import { createHash, randomBytes, randomUUID } from 'node:crypto'
 import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'node:fs'
diff --git a/src/main/agent-hooks/wsl-hook-relay-manager.test.ts b/src/main/agent-hooks/wsl-hook-relay-manager.test.ts
index cb538595c19..e6a3a727fb4 100644
--- a/src/main/agent-hooks/wsl-hook-relay-manager.test.ts
+++ b/src/main/agent-hooks/wsl-hook-relay-manager.test.ts
@@ -11,7 +11,10 @@ import { RelayDispatcher } from '../../relay/dispatcher'
 import { registerWslHookFsHandlers } from '../../relay/wsl-hook-fs-bridge'
 import { SshChannelMultiplexer, type MultiplexerTransport } from '../ssh/ssh-channel-multiplexer'
 import { createWslHookSftpAdapter } from './wsl-hook-fs-adapter'
-import { installRemoteManagedAgentHooks } from './remote-managed-hook-installers'
+import {
+  installRemoteManagedAgentHooks,
+  REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+} from './remote-managed-hook-installers'
 import { WslHookRelayManager } from './wsl-hook-relay-manager'
 import { FAILURE_COOLDOWN_BASE_MS, type WslHookRelayManagerDeps } from './wsl-hook-relay-deps'
 import {
@@ -122,7 +125,9 @@ describe.skipIf(process.platform === 'win32')(
 
     it('runs the unchanged remote managed hook installers against a WSL guest home', async () => {
       const adapter = createWslHookSftpAdapter(harness.mux)
-      const results = await installRemoteManagedAgentHooks(adapter, home)
+      const results = await installRemoteManagedAgentHooks(adapter, home, {
+        agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
+      })
 
       expect(results.length).toBeGreaterThan(0)
       expect(results.every((r) => r.state !== 'error')).toBe(true)
@@ -233,13 +238,6 @@ describe('WslHookRelayManager', () => {
     return { manager: new WslHookRelayManager(deps), deps }
   }
 
-  it('exposes the stable guest endpoint instance key with a port fallback', () => {
-    expect(createManager({}).manager.getInstanceKey()).toBe('testinstance')
-    expect(createManager({ instanceKey: () => 'unsafe/key' }).manager.getInstanceKey()).toBe(
-      'port43117'
-    )
-  })
-
   it('starts one relay per distro, installs hooks, exposes the guest endpoint path, and forwards envelopes', async () => {
     const { manager, deps } = createManager({})
     manager.ensureForDistro('Ubuntu')
diff --git a/src/main/agent-hooks/wsl-hook-relay-manager.ts b/src/main/agent-hooks/wsl-hook-relay-manager.ts
index 828e2fa888a..74d163ca42f 100644
--- a/src/main/agent-hooks/wsl-hook-relay-manager.ts
+++ b/src/main/agent-hooks/wsl-hook-relay-manager.ts
@@ -109,15 +109,6 @@ export class WslHookRelayManager {
     return this.stateFor(distro)?.opencodeOverlayDir ?? null
   }
 
-  getInstanceKey(): string | null {
-    const stableKey = sanitizeWslHookInstanceKey(this.deps.instanceKey() ?? undefined)
-    if (stableKey) {
-      return stableKey
-    }
-    const port = Number(this.deps.hookCoordsEnv().ORCA_AGENT_HOOK_PORT ?? '')
-    return Number.isInteger(port) && port > 0 ? `port${port}` : null
-  }
-
   /** Kills every live relay. Non-permanent (hooks switched off mid-session) leaves the
    *  manager reusable, so re-enabling hooks can start relays again without an app restart. */
   disposeAll({ permanent = true }: { permanent?: boolean } = {}): void {
@@ -181,7 +172,8 @@ export class WslHookRelayManager {
     }
     // Why: restart-stable instance identity keeps the guest endpoint file at
     // ONE path across restarts so daemon-surviving agents re-coordinate.
-    const instanceKey = this.getInstanceKey() ?? `port${port}`
+    const instanceKey =
+      sanitizeWslHookInstanceKey(this.deps.instanceKey() ?? undefined) ?? `port${port}`
     if (existing) {
       this.recovery.clearTimers(existing)
     }
diff --git a/src/main/ai-vault/remote-session-file-stat.ts b/src/main/ai-vault/remote-session-file-stat.ts
index aa5809a776d..57e6d2c8ed6 100644
--- a/src/main/ai-vault/remote-session-file-stat.ts
+++ b/src/main/ai-vault/remote-session-file-stat.ts
@@ -2,7 +2,7 @@ import type { AiVaultAgent, AiVaultScanIssue } from '../../shared/ai-vault-types
 import type { ExecutionHostId } from '../../shared/execution-host'
 import type { FileStat } from '../providers/types'
 import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
-import { recordRemoteSessionScanIssue } from './remote-session-scan-issues'
+import { recordSessionScanIssue } from './session-scan-issues'
 import type { RemoteSessionFilesystemProvider } from './remote-session-scanner-types'
 import type { FileWithMtime } from './session-scanner-types'
 import { errorMessage } from './session-scanner-values'
@@ -32,7 +32,7 @@ export async function statRemoteSessionFile(
   } catch (error) {
     throwIfAiVaultScanCancelled(options?.signal)
     if (!options?.missingIsExpected || !isMissingRemoteSessionPathError(error)) {
-      recordRemoteSessionScanIssue(issues, {
+      recordSessionScanIssue(issues, {
         executionHostId,
         agent,
         path,
diff --git a/src/main/ai-vault/remote-session-scan-issues.ts b/src/main/ai-vault/remote-session-scan-issues.ts
deleted file mode 100644
index aee229f443c..00000000000
--- a/src/main/ai-vault/remote-session-scan-issues.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
-
-const REMOTE_SCAN_ISSUE_LIMIT = 500
-
-export function recordRemoteSessionScanIssue(
-  issues: AiVaultScanIssue[],
-  issue: AiVaultScanIssue
-): void {
-  if (issues.length < REMOTE_SCAN_ISSUE_LIMIT - 1) {
-    issues.push(issue)
-    return
-  }
-  if (issues.length === REMOTE_SCAN_ISSUE_LIMIT - 1) {
-    // Kinded: this row is a scan notice, not a skipped transcript — the panel
-    // counts unkinded issues as skipped transcript files.
-    issues.push({
-      executionHostId: issue.executionHostId,
-      agent: issue.agent,
-      kind: 'notice',
-      path: 'Agent Session History scan',
-      message: 'Additional scan issues were omitted.'
-    })
-  }
-}
diff --git a/src/main/ai-vault/remote-session-scanner-discovery.ts b/src/main/ai-vault/remote-session-scanner-discovery.ts
index 91f21eab720..329bdb2e584 100644
--- a/src/main/ai-vault/remote-session-scanner-discovery.ts
+++ b/src/main/ai-vault/remote-session-scanner-discovery.ts
@@ -7,7 +7,7 @@ import type { FileWithMtime } from './session-scanner-types'
 import { errorMessage } from './session-scanner-values'
 import { mapRemoteScanBatches } from './remote-session-scan-batching'
 import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
-import { recordRemoteSessionScanIssue } from './remote-session-scan-issues'
+import { recordSessionScanIssue } from './session-scan-issues'
 import type {
   RemoteScannerContext,
   RemoteSessionCandidate,
@@ -124,7 +124,7 @@ function recordRemoteDirectoryIssue(
   err: unknown
 ): void {
   if (!isMissingRemoteSessionPathError(err)) {
-    recordRemoteSessionScanIssue(issues, {
+    recordSessionScanIssue(issues, {
       executionHostId,
       agent: source.agent,
       kind: 'host',
diff --git a/src/main/ai-vault/remote-session-scanner.ts b/src/main/ai-vault/remote-session-scanner.ts
index 2523cd22a43..568b42c27cd 100644
--- a/src/main/ai-vault/remote-session-scanner.ts
+++ b/src/main/ai-vault/remote-session-scanner.ts
@@ -24,7 +24,7 @@ import { createAntigravityWorkspaceResolver } from './session-scanner-antigravit
 import { errorMessage } from './session-scanner-values'
 import { mapRemoteScanBatches } from './remote-session-scan-batching'
 import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
-import { recordRemoteSessionScanIssue } from './remote-session-scan-issues'
+import { recordSessionScanIssue } from './session-scan-issues'
 import { limitRemoteScanFilesystemConcurrency } from './remote-session-scan-concurrency'
 import { aiVaultScanLimit } from '../../shared/ai-vault-session-depth'
 
@@ -205,7 +205,7 @@ async function scanRemoteInScopeSessions(args: {
   }
 
   if (index < candidates.length && sessions.length < args.limit) {
-    recordRemoteSessionScanIssue(args.issues, {
+    recordSessionScanIssue(args.issues, {
       executionHostId: args.context.executionHostId,
       agent: 'codex',
       kind: 'scope',
@@ -241,7 +241,7 @@ async function parseRemoteSessionCandidate(
     return session
   } catch (err) {
     throwIfAiVaultScanCancelled(context.signal)
-    recordRemoteSessionScanIssue(issues, {
+    recordSessionScanIssue(issues, {
       executionHostId: context.executionHostId,
       agent: candidate.source.agent,
       path: candidate.file.path,
diff --git a/src/main/ai-vault/session-first-user-prompt-read.ts b/src/main/ai-vault/session-first-user-prompt-read.ts
index f250846a20e..ac5a35f2a53 100644
--- a/src/main/ai-vault/session-first-user-prompt-read.ts
+++ b/src/main/ai-vault/session-first-user-prompt-read.ts
@@ -1,10 +1,10 @@
-import { stat } from 'node:fs/promises'
 import type {
   AiVaultAgent,
   AiVaultFirstUserPromptResult,
   AiVaultSession
 } from '../../shared/ai-vault-types'
 import { LOCAL_EXECUTION_HOST_ID, type ExecutionHostId } from '../../shared/execution-host'
+import { wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
 import { parseAgentSessionFile } from './session-scanner-agent-parser'
 import { withFullFirstUserPromptCapture } from './session-scanner-first-user-prompt-capture'
 import { parseOpenCodeSqliteSession } from './session-scanner-opencode-sqlite'
@@ -118,7 +118,9 @@ async function fileWithMtimeForPath(
   }
 
   try {
-    const info = await stat(filePath)
+    // 'scan' matches the parser this feeds, so the two halves of one re-parse
+    // share a lane instead of the stat jumping the live-transcript queue.
+    const info = await wslGatedStat(filePath, 'scan')
     return {
       path: filePath,
       mtimeMs: info.mtimeMs,
diff --git a/src/main/ai-vault/session-scan-issues.ts b/src/main/ai-vault/session-scan-issues.ts
new file mode 100644
index 00000000000..b3e21f9c5a8
--- /dev/null
+++ b/src/main/ai-vault/session-scan-issues.ts
@@ -0,0 +1,27 @@
+import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
+
+// Why: a stalled WSL distro or an unreachable remote host fails one probe per
+// discovered path, so an uncapped list ships one row per transcript file in the
+// tree over IPC. Local and remote scans share the bound — the failure shape is
+// the same and both feed the same panel.
+const SCAN_ISSUE_LIMIT = 500
+
+/** Append a scan issue, collapsing everything past the cap into one notice. */
+export function recordSessionScanIssue(issues: AiVaultScanIssue[], issue: AiVaultScanIssue): void {
+  if (issues.length < SCAN_ISSUE_LIMIT - 1) {
+    issues.push(issue)
+    return
+  }
+  if (issues.length === SCAN_ISSUE_LIMIT - 1) {
+    // Kinded: this row is a scan notice, not a skipped transcript — the panel
+    // counts unkinded issues as skipped transcript files. Spread first so a
+    // remote issue keeps its executionHostId and a local one never gains an
+    // explicit `undefined` (which would outrank the scanner's own stamping).
+    issues.push({
+      ...issue,
+      kind: 'notice',
+      path: 'Agent Session History scan',
+      message: 'Additional scan issues were omitted.'
+    })
+  }
+}
diff --git a/src/main/ai-vault/session-scanner-antigravity-history.ts b/src/main/ai-vault/session-scanner-antigravity-history.ts
index 989ac7b4179..ccfb506b7f7 100644
--- a/src/main/ai-vault/session-scanner-antigravity-history.ts
+++ b/src/main/ai-vault/session-scanner-antigravity-history.ts
@@ -1,8 +1,28 @@
 import type { AiVaultSession } from '../../shared/ai-vault-types'
+import { wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { normalizeTitleText, parseJsonObject, timestampMs } from './session-scanner-values'
 
 const HISTORY_MATCH_WINDOW_MS = 2_000
 
+/**
+ * The local-scan `readHistory`; remote scans inject their own transport. A
+ * missing or unreadable history file is genuinely "no enrichment", but a gate
+ * refusal must propagate so the caller records a scan issue — degrading it to
+ * null lists the session with a missing cwd and no retry signal, and the
+ * resolver's memo relies on the rejection to evict rather than pin a stall.
+ */
+export async function readLocalAntigravityHistory(path: string): Promise<string | null> {
+  try {
+    return await wslGatedReadFile(path, 'utf-8', 'scan')
+  } catch (error) {
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
+    return null
+  }
+}
+
 type AntigravityHistoryEntry = {
   timestampMs: number
   workspace: string
@@ -26,8 +46,19 @@ export function createAntigravityWorkspaceResolver(
       }
       let index = indexes.get(historyPath)
       if (!index) {
-        index = readHistory(historyPath).then(indexAntigravityHistory)
-        indexes.set(historyPath, index)
+        // Why: a read failure is transient (a stalled WSL distro refuses here),
+        // so it must not be memoized — every later session under this history
+        // file would inherit the rejection for the process lifetime.
+        const pending: Promise<AntigravityHistoryIndex> = readHistory(historyPath)
+          .then(indexAntigravityHistory)
+          .catch((error: unknown) => {
+            if (indexes.get(historyPath) === pending) {
+              indexes.delete(historyPath)
+            }
+            throw error
+          })
+        index = pending
+        indexes.set(historyPath, pending)
       }
       const workspace = findAntigravityWorkspace(session, await index)
       return workspace ? { ...session, cwd: workspace } : session
diff --git a/src/main/ai-vault/session-scanner-antigravity-parser.ts b/src/main/ai-vault/session-scanner-antigravity-parser.ts
index 818167fbd0c..1896138749c 100644
--- a/src/main/ai-vault/session-scanner-antigravity-parser.ts
+++ b/src/main/ai-vault/session-scanner-antigravity-parser.ts
@@ -1,5 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
@@ -26,11 +26,16 @@ export async function parseAntigravitySessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
-    crlfDelay: Infinity
-  })
-  return parseAntigravitySessionLines({ file, lines, platform })
+  const input = openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan')
+  const lines = createInterface({ input, crlfDelay: Infinity })
+  try {
+    return await parseAntigravitySessionLines({ file, lines, platform })
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-parse throw cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
+  }
 }
 
 export async function parseAntigravitySessionContent(
diff --git a/src/main/ai-vault/session-scanner-claude-subagents.ts b/src/main/ai-vault/session-scanner-claude-subagents.ts
index 5c269d91cf3..a2dc5745948 100644
--- a/src/main/ai-vault/session-scanner-claude-subagents.ts
+++ b/src/main/ai-vault/session-scanner-claude-subagents.ts
@@ -1,5 +1,3 @@
-import { createReadStream } from 'node:fs'
-import { readdir, readFile, stat } from 'node:fs/promises'
 import { basename, extname, join } from 'node:path'
 import { createInterface } from 'node:readline'
 import type {
@@ -8,6 +6,14 @@ import type {
   AiVaultSubagentListResult,
   AiVaultSubagentRunStatus
 } from '../../shared/ai-vault-types'
+import {
+  openTranscriptReadStream,
+  wslGatedReaddir,
+  wslGatedReadFile,
+  wslGatedStat
+} from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
+import { recordSessionScanIssue } from './session-scan-issues'
 import { sessionIdFromFileName, sessionSortTime } from './session-scanner-accumulator'
 import { parseClaudeSessionFile } from './session-scanner-primary-parsers'
 import {
@@ -29,6 +35,10 @@ const SUBAGENT_RUNNING_RECENCY_MS = 5 * 60_000
 // Match the main scanner's deliberate parse batching (SESSION_PARSE_CONCURRENCY):
 // opening every subagent read stream at once stalls over SSH/WSL UNC paths.
 const SUBAGENT_PARSE_CONCURRENCY = 8
+// 'scan', not 'exact', even though a user expands this on demand: it is bulk
+// directory work feeding the same parsers as the main scan, and the exact lane
+// stays reserved for live transcript probes.
+const SUBAGENT_FS_PRIORITY = 'scan'
 
 const TASK_NOTIFICATION_MARKER = '<task-notification>'
 const TOOL_USE_RESULT_MARKER = '"toolUseResult"'
@@ -71,8 +81,13 @@ export async function listClaudeSubagentSessions(args: {
 
   let entries
   try {
-    entries = await readdir(subagentsDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(subagentsDir, SUBAGENT_FS_PRIORITY)
+  } catch (err) {
+    // A gate refusal is a stalled distro, not a session without subagents —
+    // report it so the panel offers a retry instead of showing an empty list.
+    if (err instanceof WslTranscriptFsError) {
+      recordSessionScanIssue(issues, { agent: 'claude', path: subagentsDir, message: err.message })
+    }
     return { sessions: [], issues }
   }
 
@@ -130,7 +145,7 @@ async function parseSubagentTranscript(args: {
   issues: AiVaultScanIssue[]
 }): Promise<AiVaultSession | null> {
   try {
-    const fileStat = await stat(args.filePath)
+    const fileStat = await wslGatedStat(args.filePath, SUBAGENT_FS_PRIORITY)
     const session = await parseClaudeSessionFile(
       {
         path: args.filePath,
@@ -161,7 +176,11 @@ async function parseSubagentTranscript(args: {
       }
     }
   } catch (err) {
-    args.issues.push({ agent: 'claude', path: args.filePath, message: errorMessage(err) })
+    recordSessionScanIssue(args.issues, {
+      agent: 'claude',
+      path: args.filePath,
+      message: errorMessage(err)
+    })
     return null
   }
 }
@@ -187,11 +206,13 @@ function resolveSubagentStatus(args: {
 // 'async_launched', notification 'running') are superseded by terminal ones.
 async function collectSubagentTaskStatuses(parentFilePath: string): Promise<Map<string, string>> {
   const statuses = new Map<string, string>()
+  const input = openTranscriptReadStream(
+    parentFilePath,
+    { encoding: 'utf-8' },
+    SUBAGENT_FS_PRIORITY
+  )
+  const lines = createInterface({ input, crlfDelay: Infinity })
   try {
-    const lines = createInterface({
-      input: createReadStream(parentFilePath, { encoding: 'utf-8' }),
-      crlfDelay: Infinity
-    })
     for await (const line of lines) {
       const hasNotification = line.includes(TASK_NOTIFICATION_MARKER)
       const hasTaskResult =
@@ -232,6 +253,11 @@ async function collectSubagentTaskStatuses(parentFilePath: string): Promise<Map<
     }
   } catch {
     // A missing/unreadable parent transcript degrades to recency-only status.
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-read failure cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
   }
   return statuses
 }
@@ -269,7 +295,8 @@ function taskNotificationBlockText(block: unknown): string {
 async function readSubagentMeta(transcriptPath: string): Promise<ClaudeSubagentMeta> {
   const metaPath = `${transcriptPath.slice(0, -extname(transcriptPath).length)}.meta.json`
   try {
-    const record = asRecord(JSON.parse(await readFile(metaPath, 'utf-8')) as unknown)
+    const raw = await wslGatedReadFile(metaPath, 'utf-8', SUBAGENT_FS_PRIORITY)
+    const record = asRecord(JSON.parse(raw) as unknown)
     return {
       description: normalizeTitleText(extractString(record?.description) ?? ''),
       agentType: extractString(record?.agentType)
diff --git a/src/main/ai-vault/session-scanner-codex-parser.ts b/src/main/ai-vault/session-scanner-codex-parser.ts
index 0f73fa54126..6887b7ed5d8 100644
--- a/src/main/ai-vault/session-scanner-codex-parser.ts
+++ b/src/main/ai-vault/session-scanner-codex-parser.ts
@@ -1,4 +1,4 @@
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import { readCodexSessionIndexTitle } from './session-scanner-codex-title-index'
@@ -42,7 +42,7 @@ export async function parseCodexSessionFile(
   executionHostId?: ExecutionHostId
 ): Promise<AiVaultSession | null> {
   const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
+    input: openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan'),
     crlfDelay: Infinity
   })
 
diff --git a/src/main/ai-vault/session-scanner-codex-title-index.ts b/src/main/ai-vault/session-scanner-codex-title-index.ts
index 8ef2d5645cb..635a215562a 100644
--- a/src/main/ai-vault/session-scanner-codex-title-index.ts
+++ b/src/main/ai-vault/session-scanner-codex-title-index.ts
@@ -1,7 +1,7 @@
-import { createReadStream } from 'node:fs'
-import { stat } from 'node:fs/promises'
 import { basename, dirname, join } from 'node:path'
 import { createInterface } from 'node:readline'
+import { openTranscriptReadStream, wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { extractString, normalizeTitleText, parseJsonObject } from './session-scanner-values'
 
 // Codex names threads lazily in <CODEX_HOME>/session_index.jsonl; transcripts
@@ -77,7 +77,7 @@ async function readCodexSessionIndexTitles(codexHome: string): Promise<Map<strin
   const indexPath = join(codexHome, CODEX_SESSION_INDEX_FILE)
   let signature: string
   try {
-    const indexStat = await stat(indexPath)
+    const indexStat = await wslGatedStat(indexPath, 'scan')
     signature = `${indexStat.size}:${indexStat.mtimeMs}`
   } catch {
     return new Map()
@@ -88,10 +88,14 @@ async function readCodexSessionIndexTitles(codexHome: string): Promise<Map<strin
     return cachedTitles
   }
 
-  const pending = readCodexSessionIndexTitlesFromDisk(indexPath).then((titles) => ({
-    signature,
-    titles
-  }))
+  const pending = readCodexSessionIndexTitlesFromDisk(indexPath).then(({ titles, refused }) => {
+    // Why: a gate refusal is a stalled distro, not a title-less index — caching
+    // it would pin "no titles" until the index's size or mtime changes.
+    if (refused && codexSessionIndexTitleCache.get(codexHome) === pending) {
+      codexSessionIndexTitleCache.delete(codexHome)
+    }
+    return { signature, titles }
+  })
   storeCodexSessionIndexTitleCacheEntry(codexHome, pending)
   return (await pending).titles
 }
@@ -133,11 +137,11 @@ function storeCodexSessionIndexTitleCacheEntry(
 
 async function readCodexSessionIndexTitlesFromDisk(
   indexPath: string
-): Promise<Map<string, string>> {
+): Promise<{ titles: Map<string, string>; refused: boolean }> {
   const titleBySessionId = new Map<string, string>()
   try {
     const lines = createInterface({
-      input: createReadStream(indexPath, { encoding: 'utf-8' }),
+      input: openTranscriptReadStream(indexPath, { encoding: 'utf-8' }, 'scan'),
       crlfDelay: Infinity
     })
     for await (const line of lines) {
@@ -151,8 +155,9 @@ async function readCodexSessionIndexTitlesFromDisk(
         titleBySessionId.set(sessionId, title)
       }
     }
-  } catch {
+  } catch (error) {
     // Codex creates the index opportunistically; older homes may only have raw transcripts.
+    return { titles: titleBySessionId, refused: error instanceof WslTranscriptFsError }
   }
-  return titleBySessionId
+  return { titles: titleBySessionId, refused: false }
 }
diff --git a/src/main/ai-vault/session-scanner-copilot-parser.ts b/src/main/ai-vault/session-scanner-copilot-parser.ts
index 4d0140fc3df..7e5450393e0 100644
--- a/src/main/ai-vault/session-scanner-copilot-parser.ts
+++ b/src/main/ai-vault/session-scanner-copilot-parser.ts
@@ -1,5 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
@@ -35,7 +35,7 @@ export async function parseCopilotSessionFile(
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
   const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
+    input: openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan'),
     crlfDelay: Infinity
   })
   return parseCopilotSessionLines({ file, lines, platform })
diff --git a/src/main/ai-vault/session-scanner-core-parser-wsl-stall.test.ts b/src/main/ai-vault/session-scanner-core-parser-wsl-stall.test.ts
new file mode 100644
index 00000000000..44fe71c80b2
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-core-parser-wsl-stall.test.ts
@@ -0,0 +1,267 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type * as NodePathModule from 'node:path'
+import type { SessionFileCandidate } from './session-scanner-types'
+
+const mocks = vi.hoisted(() => ({
+  open: vi.fn(),
+  readFile: vi.fn(),
+  readdir: vi.fn(),
+  stat: vi.fn()
+}))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  open: mocks.open,
+  readFile: mocks.readFile,
+  readdir: mocks.readdir,
+  stat: mocks.stat
+}))
+
+// Derived sibling paths must retain Windows separators in this cross-platform test.
+vi.mock('node:path', async (importOriginal) => {
+  const actual = await importOriginal<typeof NodePathModule>()
+  return { ...actual.win32, default: actual.win32 }
+})
+
+import {
+  parseAgentSessionFileCached,
+  resetSessionParseCacheForTests
+} from './session-scanner-parse-cache'
+import {
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from '../native-chat/wsl-transcript-fs-gate'
+
+function uncPath(distro: string, ...segments: string[]): string {
+  return `\\\\wsl.localhost\\${distro}\\home\\ada\\${segments.join('\\')}`
+}
+
+const KIMI_HOME = ['.kimi-code', 'sessions', 'wd_app_9f2', 'session_abc']
+const GROK_DIR = ['.grok', 'sessions', 'ses-1']
+const OPENCODE_ROOT = ['.local', 'share', 'opencode', 'storage']
+
+const KIMI_STATE = JSON.stringify({
+  title: 'Kimi session',
+  createdAt: '2026-06-01T10:00:00.000Z',
+  updatedAt: '2026-06-01T10:05:00.000Z',
+  agents: { main: { type: 'main', parentAgentId: null } }
+})
+
+const KIMI_WIRE = `${JSON.stringify({
+  type: 'context.append_message',
+  message: { role: 'user', origin: { kind: 'user' }, content: 'ship it' }
+})}\n`
+
+const GROK_SESSION = JSON.stringify({
+  info: { id: 'ses-1', cwd: '/repo/app' },
+  generated_title: 'Grok session',
+  created_at: '2026-06-01T10:00:00.000Z'
+})
+
+const GROK_HISTORY = `${JSON.stringify({
+  type: 'user',
+  content: '<user_query>ship it</user_query>'
+})}\n`
+
+const OPENCODE_SESSION = JSON.stringify({
+  id: 'ses-1',
+  title: 'OpenCode session',
+  directory: '/repo/app',
+  time: { created: 1780000000000 }
+})
+
+const OPENCODE_MESSAGE = JSON.stringify({
+  role: 'user',
+  content: [{ type: 'text', text: 'ship it' }],
+  time: { created: 1780000000000 }
+})
+
+type ReadResult = { bytesRead: number; buffer: Buffer }
+
+let releaseStall: (() => void) | undefined
+
+function stalls<T>(): Promise<T> {
+  return new Promise<T>((resolve) => {
+    releaseStall = () => resolve({ bytesRead: 0, buffer: Buffer.alloc(0) } as T)
+  })
+}
+
+function stallingHandle() {
+  return { read: vi.fn(stalls<ReadResult>), close: vi.fn(async () => {}) }
+}
+
+function servingHandle(body: string) {
+  const bytes = Buffer.from(body)
+  return {
+    read: vi.fn(async (buffer: Buffer, offset: number, length: number, position: number) => {
+      const slice = bytes.subarray(position, Math.min(position + length, bytes.length))
+      slice.copy(buffer, offset)
+      return { bytesRead: slice.length, buffer }
+    }),
+    close: vi.fn(async () => {})
+  }
+}
+
+function missing(): Error {
+  return Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+}
+
+function dirent(name: string) {
+  return { name, isFile: () => true }
+}
+
+function candidate(agent: SessionFileCandidate['agent'], path: string): SessionFileCandidate {
+  return {
+    agent,
+    file: {
+      path,
+      mtimeMs: 1,
+      modifiedAt: '2026-06-01T10:05:00.000Z',
+      sizeBytes: 128
+    },
+    codexHome: null
+  }
+}
+
+async function expectRefusal(target: SessionFileCandidate): Promise<void> {
+  const refusal = expect(parseAgentSessionFileCached(target, 'linux')).rejects.toBeInstanceOf(
+    WslTranscriptFsError
+  )
+  await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+  await refusal
+}
+
+async function releaseAndSettle(): Promise<void> {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+}
+
+beforeEach(() => {
+  resetSessionParseCacheForTests()
+  mocks.open.mockReset()
+  mocks.readFile.mockReset()
+  mocks.readdir.mockReset()
+  mocks.stat.mockReset()
+  releaseStall = undefined
+  mocks.stat.mockRejectedValue(missing())
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  await releaseAndSettle()
+  vi.useRealTimers()
+})
+
+describe('Kimi session parse against a stalled WSL transcript', () => {
+  it('refuses a stalled state.json read instead of reporting no session', async () => {
+    const state = uncPath('KimiState', ...KIMI_HOME, 'state.json')
+    mocks.readFile.mockImplementation(stalls<string>)
+
+    await expectRefusal(candidate('kimi', state))
+  })
+
+  it('refuses a stalled wire read, then caches the full session once it recovers', async () => {
+    const state = uncPath('KimiWire', ...KIMI_HOME, 'state.json')
+    mocks.readFile.mockResolvedValue(KIMI_STATE)
+    mocks.open.mockResolvedValue(stallingHandle())
+
+    await expectRefusal(candidate('kimi', state))
+    await releaseAndSettle()
+
+    mocks.open.mockResolvedValue(servingHandle(KIMI_WIRE))
+    const recovered = await parseAgentSessionFileCached(candidate('kimi', state), 'linux')
+
+    expect(recovered?.messageCount).toBe(1)
+  })
+
+  // Pins the narrowness of the parser's `instanceof WslTranscriptFsError`
+  // rethrow: widening it to every error turns this into a hard scan issue.
+  it('still returns a metadata-only session when the wire file is simply missing', async () => {
+    const state = uncPath('KimiMissing', ...KIMI_HOME, 'state.json')
+    mocks.readFile.mockResolvedValue(KIMI_STATE)
+    mocks.open.mockRejectedValue(missing())
+
+    const session = await parseAgentSessionFileCached(candidate('kimi', state), 'linux')
+
+    expect(session).toMatchObject({ agent: 'kimi', title: 'Kimi session', messageCount: 0 })
+  })
+})
+
+describe('Grok session parse against a stalled WSL transcript', () => {
+  it('refuses a stalled chat_history read instead of reporting a summary-only session', async () => {
+    const file = uncPath('GrokHistory', ...GROK_DIR, 'session.json')
+    mocks.readFile.mockResolvedValue(GROK_SESSION)
+    mocks.open.mockResolvedValue(stallingHandle())
+
+    await expectRefusal(candidate('grok', file))
+    await releaseAndSettle()
+
+    mocks.open.mockResolvedValue(servingHandle(GROK_HISTORY))
+    const recovered = await parseAgentSessionFileCached(candidate('grok', file), 'linux')
+
+    expect(recovered?.previewMessages).toEqual([
+      expect.objectContaining({ role: 'user', text: 'ship it' })
+    ])
+  })
+
+  it('still returns the summary-only session when chat_history is missing', async () => {
+    const file = uncPath('GrokMissing', ...GROK_DIR, 'session.json')
+    mocks.readFile.mockResolvedValue(GROK_SESSION)
+    mocks.open.mockRejectedValue(missing())
+
+    const session = await parseAgentSessionFileCached(candidate('grok', file), 'linux')
+
+    expect(session).toMatchObject({
+      agent: 'grok',
+      title: 'Grok session',
+      previewMessages: []
+    })
+  })
+})
+
+describe('OpenCode session parse against a stalled WSL transcript', () => {
+  function sessionPath(distro: string): string {
+    return uncPath(distro, ...OPENCODE_ROOT, 'session', 'prj', 'ses-1.json')
+  }
+
+  it('refuses a stalled message-directory listing instead of an empty transcript', async () => {
+    mocks.readFile.mockResolvedValue(OPENCODE_SESSION)
+    mocks.readdir.mockImplementation(stalls<unknown[]>)
+
+    await expectRefusal(candidate('opencode', sessionPath('OpenCodeDir')))
+  })
+
+  it('refuses a stalled per-message read instead of a partial transcript', async () => {
+    const file = sessionPath('OpenCodeMessage')
+    mocks.readdir.mockResolvedValue([dirent('msg-1.json')])
+    mocks.readFile.mockImplementation((path: string) =>
+      path === file ? Promise.resolve(OPENCODE_SESSION) : stalls<string>()
+    )
+
+    await expectRefusal(candidate('opencode', file))
+    await releaseAndSettle()
+
+    mocks.readFile.mockImplementation((path: string) =>
+      Promise.resolve(path === file ? OPENCODE_SESSION : OPENCODE_MESSAGE)
+    )
+    const recovered = await parseAgentSessionFileCached(candidate('opencode', file), 'linux')
+
+    expect(recovered?.messageCount).toBe(1)
+  })
+
+  // Same guard as Kimi's: a live process mid-write must stay a parseable
+  // session, not a refusal.
+  it('still returns the session when a live process left a half-written message', async () => {
+    const file = sessionPath('OpenCodeHalfWritten')
+    mocks.readdir.mockResolvedValue([dirent('msg-1.json')])
+    mocks.readFile.mockImplementation((path: string) =>
+      Promise.resolve(path === file ? OPENCODE_SESSION : '{"role":"user",')
+    )
+
+    const session = await parseAgentSessionFileCached(candidate('opencode', file), 'linux')
+
+    expect(session).toMatchObject({ agent: 'opencode', title: 'OpenCode session', messageCount: 0 })
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-cursor-parser.ts b/src/main/ai-vault/session-scanner-cursor-parser.ts
index b18402584e5..0f44aa923fa 100644
--- a/src/main/ai-vault/session-scanner-cursor-parser.ts
+++ b/src/main/ai-vault/session-scanner-cursor-parser.ts
@@ -1,5 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
@@ -33,7 +33,7 @@ export async function parseCursorSessionFile(
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
   const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
+    input: openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan'),
     crlfDelay: Infinity
   })
   return parseCursorSessionLines({ file, lines, platform })
diff --git a/src/main/ai-vault/session-scanner-devin-parser.ts b/src/main/ai-vault/session-scanner-devin-parser.ts
index 4ad6fa45f78..a43603bca47 100644
--- a/src/main/ai-vault/session-scanner-devin-parser.ts
+++ b/src/main/ai-vault/session-scanner-devin-parser.ts
@@ -1,4 +1,4 @@
-import { readFile } from 'node:fs/promises'
+import { wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
 import type { FileWithMtime } from './session-scanner-types'
@@ -27,7 +27,11 @@ export async function parseDevinSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  return parseDevinSessionContent(file, await readFile(file.path, 'utf-8'), platform)
+  return parseDevinSessionContent(
+    file,
+    await wslGatedReadFile(file.path, 'utf-8', 'scan'),
+    platform
+  )
 }
 
 export function parseDevinSessionContent(
diff --git a/src/main/ai-vault/session-scanner-discovery-wsl-gate.test.ts b/src/main/ai-vault/session-scanner-discovery-wsl-gate.test.ts
new file mode 100644
index 00000000000..962a2e20fa9
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-discovery-wsl-gate.test.ts
@@ -0,0 +1,137 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Dirent } from 'node:fs'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
+
+const fsMocks = vi.hoisted(() => ({ readdir: vi.fn(), stat: vi.fn() }))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  readdir: fsMocks.readdir,
+  stat: fsMocks.stat
+}))
+
+import {
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from '../native-chat/wsl-transcript-fs-gate'
+import { discoverFiles, walkSessionFiles } from './session-scanner-discovery'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+
+function dirent(name: string): Dirent {
+  return { name, isDirectory: () => false, isFile: () => true } as Dirent
+}
+
+let releaseStall: (() => void) | undefined
+
+function stalls<T>(): Promise<T> {
+  return new Promise<T>((resolve) => {
+    releaseStall = () => resolve(undefined as T)
+  })
+}
+
+beforeEach(() => {
+  fsMocks.readdir.mockReset()
+  fsMocks.stat.mockReset()
+  fsMocks.readdir.mockResolvedValue([])
+  releaseStall = undefined
+})
+
+// A stalled task holds its gate permit until the call settles; releasing it
+// keeps the next case from fast-failing on an already-exhausted gate.
+afterEach(async () => {
+  if (!vi.isFakeTimers()) {
+    return
+  }
+  releaseStall?.()
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+})
+
+describe('walkSessionFiles WSL gate refusals', () => {
+  it('rethrows gate refusals instead of reporting an empty tree', async () => {
+    const refusal = new WslTranscriptFsError('timeout', 'slow share')
+    await expect(
+      walkSessionFiles('\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex\\sessions', 'codex', [], {
+        extensions: new Set(['.jsonl']),
+        readDirectory: async () => {
+          throw refusal
+        }
+      })
+    ).rejects.toBe(refusal)
+  })
+
+  it('still treats ordinary readdir failures as an empty tree', async () => {
+    await expect(
+      walkSessionFiles('/missing/root', 'codex', [], {
+        extensions: new Set(['.jsonl']),
+        readDirectory: async () => {
+          throw Object.assign(new Error('no such directory'), { code: 'ENOENT' })
+        }
+      })
+    ).resolves.toEqual([])
+  })
+})
+
+describe('discoverFiles containment for a stalled WSL root', () => {
+  const UNC_ROOT = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex\\sessions'
+
+  it('contains a stalled readdir to one root so a Promise.all fan-out still resolves', async () => {
+    vi.useFakeTimers()
+    {
+      fsMocks.readdir.mockImplementation((dir: string) =>
+        dir === UNC_ROOT ? stalls<Dirent[]>() : Promise.resolve([])
+      )
+      const issues: AiVaultScanIssue[] = []
+      const discovery = discoverFiles({
+        rootDir: UNC_ROOT,
+        limit: 10,
+        agent: 'codex',
+        issues,
+        extensions: ['.jsonl']
+      })
+      const healthy = discoverFiles({
+        rootDir: '/home/ada/.codex/sessions',
+        limit: 10,
+        agent: 'codex',
+        issues: [],
+        extensions: ['.jsonl']
+      })
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+
+      await expect(Promise.all([discovery, healthy])).resolves.toEqual([
+        { agent: 'codex', rootDir: UNC_ROOT, files: [] },
+        { agent: 'codex', rootDir: '/home/ada/.codex/sessions', files: [] }
+      ])
+      expect(issues).toEqual([{ agent: 'codex', path: UNC_ROOT, message: SLOW_MESSAGE }])
+    }
+  })
+
+  it('reports every stalled file without spending one deadline per file', async () => {
+    vi.useFakeTimers()
+    {
+      const names = ['a', 'b', 'c', 'd', 'e'].map((name) => dirent(`${name}.jsonl`))
+      fsMocks.readdir.mockResolvedValue(names)
+      fsMocks.stat.mockImplementation(stalls)
+      const issues: AiVaultScanIssue[] = []
+      const discovery = discoverFiles({
+        rootDir: UNC_ROOT,
+        limit: 10,
+        agent: 'codex',
+        issues,
+        extensions: ['.jsonl']
+      })
+
+      // Two deadlines total, not five: once the first stalled stat is marked
+      // stuck, every later file fast-fails on the route instead of queueing.
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS * 2 + 2)
+
+      await expect(discovery).resolves.toEqual({ agent: 'codex', rootDir: UNC_ROOT, files: [] })
+      expect(issues).toHaveLength(names.length)
+      expect(issues.every((issue) => issue.path.startsWith(UNC_ROOT))).toBe(true)
+    }
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-discovery.ts b/src/main/ai-vault/session-scanner-discovery.ts
index 031f94f3619..9ec569bc547 100644
--- a/src/main/ai-vault/session-scanner-discovery.ts
+++ b/src/main/ai-vault/session-scanner-discovery.ts
@@ -1,7 +1,9 @@
 import type { Dirent } from 'node:fs'
-import { readdir, stat } from 'node:fs/promises'
 import { extname, join } from 'node:path'
 import type { AiVaultAgent, AiVaultScanIssue } from '../../shared/ai-vault-types'
+import { wslGatedReaddir, wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
+import { recordSessionScanIssue } from './session-scan-issues'
 import type { FileWithMtime, SessionFileDiscovery } from './session-scanner-types'
 import { errorMessage } from './session-scanner-values'
 
@@ -14,15 +16,31 @@ export async function discoverFiles(args: {
   filePredicate?: (path: string) => boolean
   directoryPredicate?: (name: string, depth: number) => boolean
 }): Promise<SessionFileDiscovery> {
-  const paths = await walkSessionFiles(args.rootDir, args.agent, args.issues, {
-    extensions: new Set(args.extensions),
-    filePredicate: args.filePredicate,
-    directoryPredicate: args.directoryPredicate
-  })
+  let paths: string[]
+  try {
+    paths = await walkSessionFiles(args.rootDir, args.agent, args.issues, {
+      extensions: new Set(args.extensions),
+      filePredicate: args.filePredicate,
+      directoryPredicate: args.directoryPredicate
+    })
+  } catch (err) {
+    // Why: discoverAiVaultSessionSources fans out with Promise.all, so one
+    // stalled distro would otherwise reject the whole vault scan — including
+    // every healthy local agent. Contain it to this root.
+    if (!(err instanceof WslTranscriptFsError)) {
+      throw err
+    }
+    recordSessionScanIssue(args.issues, {
+      agent: args.agent,
+      path: args.rootDir,
+      message: err.message
+    })
+    return { agent: args.agent, rootDir: args.rootDir, files: [] }
+  }
   const files: FileWithMtime[] = []
   for (const path of paths) {
     try {
-      const fileStat = await stat(path)
+      const fileStat = await wslGatedStat(path, 'scan')
       files.push({
         path,
         mtimeMs: fileStat.mtimeMs,
@@ -33,7 +51,11 @@ export async function discoverFiles(args: {
         nlink: fileStat.nlink
       })
     } catch (err) {
-      args.issues.push({ agent: args.agent, path, message: errorMessage(err) })
+      recordSessionScanIssue(args.issues, {
+        agent: args.agent,
+        path,
+        message: errorMessage(err)
+      })
     }
   }
   return {
@@ -63,9 +85,14 @@ export async function walkSessionFiles(
   try {
     entries = options.readDirectory
       ? await options.readDirectory(dirPath)
-      : await readdir(dirPath, { withFileTypes: true })
-  } catch {
+      : await wslGatedReaddir(dirPath, 'scan', options.signal)
+  } catch (error) {
     options.signal?.throwIfAborted()
+    // Why: a gate refusal means the scan could not run, not that the tree is
+    // empty — swallowing it would misreport a stalled distro as "no transcript".
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
     return []
   }
 
diff --git a/src/main/ai-vault/session-scanner-droid-parser.ts b/src/main/ai-vault/session-scanner-droid-parser.ts
index 557920e7f40..c896b47a3e8 100644
--- a/src/main/ai-vault/session-scanner-droid-parser.ts
+++ b/src/main/ai-vault/session-scanner-droid-parser.ts
@@ -1,5 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
@@ -34,11 +34,16 @@ export async function parseDroidSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
-    crlfDelay: Infinity
-  })
-  return parseDroidSessionLines({ file, lines, platform })
+  const input = openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan')
+  const lines = createInterface({ input, crlfDelay: Infinity })
+  try {
+    return await parseDroidSessionLines({ file, lines, platform })
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-parse throw cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
+  }
 }
 
 export async function parseDroidSessionContent(
diff --git a/src/main/ai-vault/session-scanner-fs-import-guard.test.ts b/src/main/ai-vault/session-scanner-fs-import-guard.test.ts
new file mode 100644
index 00000000000..472ca932eac
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-fs-import-guard.test.ts
@@ -0,0 +1,81 @@
+import { readFile, readdir } from 'node:fs/promises'
+import { join } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+const AI_VAULT_DIR = join(import.meta.dirname, '.')
+const NATIVE_CHAT_DIR = join(import.meta.dirname, '..', 'native-chat')
+
+// Transcript I/O in these modules must go through the WSL admission gate, so a
+// stalled 9P mount cannot hang a scan or a Native Chat load (STA-4049).
+const NATIVE_CHAT_MODULES = [
+  'transcript-read-cache.ts',
+  'transcript-reader.ts',
+  'transcript-tail-reader.ts',
+  'transcript-file-version.ts',
+  'transcript-incremental-reader.ts',
+  'transcript-watch-engine.ts'
+]
+
+// Adding to this list must be a reviewed act: each entry names why the file
+// touches a path that can never be a WSL UNC transcript.
+const ALLOWLIST = new Set([
+  // `existsSync` on bundled module paths inside the app dir.
+  'session-scanner-service-entry-path.ts',
+  'session-scanner-service-spawn.ts',
+  'session-scanner-worker-spawn.ts',
+  'session-scanner-opencode-sqlite-worker-spawn.ts',
+  // On-demand IPC readers, gated in the STA-4049 follow-up.
+  'session-scanner-claude-subagents.ts',
+  'session-scanner-omp-subagent-listing.ts',
+  // Test-only fixture builder.
+  'session-scanner-test-fixtures.ts'
+])
+
+const FS_IMPORT = /import\s+([\s\S]*?)\s+from\s+['"]node:fs(?:\/promises)?['"]/g
+
+function valueImportsOfNodeFs(source: string): string[] {
+  return [...source.matchAll(FS_IMPORT)]
+    .map((match) => match[1]!.trim())
+    .filter((clause) => !clause.startsWith('type'))
+}
+
+async function guardedFiles(): Promise<{ name: string; path: string }[]> {
+  const aiVault = (await readdir(AI_VAULT_DIR))
+    .filter((name) => name.startsWith('session-scanner') || name === 'session-title-file-reader.ts')
+    .filter((name) => name.endsWith('.ts') && !name.endsWith('.test.ts'))
+    .filter((name) => !ALLOWLIST.has(name))
+    .map((name) => ({ name, path: join(AI_VAULT_DIR, name) }))
+  return [
+    ...aiVault,
+    ...NATIVE_CHAT_MODULES.map((name) => ({ name, path: join(NATIVE_CHAT_DIR, name) }))
+  ]
+}
+
+describe('WSL transcript gate import guard', () => {
+  it('leaves no raw node:fs value import in a gated transcript module', async () => {
+    const files = await guardedFiles()
+    const offenders: string[] = []
+    for (const file of files) {
+      for (const clause of valueImportsOfNodeFs(await readFile(file.path, 'utf-8'))) {
+        offenders.push(`${file.name}: import ${clause} from 'node:fs…'`)
+      }
+    }
+    expect(offenders).toEqual([])
+  })
+
+  it('actually covers the modules it claims to', async () => {
+    const names = (await guardedFiles()).map((file) => file.name)
+    expect(names).toEqual(expect.arrayContaining(NATIVE_CHAT_MODULES))
+    // The V12–V17 sites the previous `*parser*` wording silently skipped.
+    expect(names).toEqual(
+      expect.arrayContaining([
+        'session-title-file-reader.ts',
+        'session-scanner.ts',
+        'session-scanner-values.ts',
+        'session-scanner-codex-title-index.ts',
+        'session-scanner-kimi-paths.ts',
+        'session-scanner-opencode-sources.ts'
+      ])
+    )
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-gemini-parsers.ts b/src/main/ai-vault/session-scanner-gemini-parsers.ts
index c3cda8856bb..d8d8a485d8f 100644
--- a/src/main/ai-vault/session-scanner-gemini-parsers.ts
+++ b/src/main/ai-vault/session-scanner-gemini-parsers.ts
@@ -1,6 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
-import { readFile } from 'node:fs/promises'
+import { openTranscriptReadStream, wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type {
@@ -34,7 +33,11 @@ export async function parseGeminiSessionFile(
     return parseGeminiJsonlSessionFile(file, platform)
   }
 
-  return parseGeminiJsonSessionContent(file, await readFile(file.path, 'utf-8'), platform)
+  return parseGeminiJsonSessionContent(
+    file,
+    await wslGatedReadFile(file.path, 'utf-8', 'scan'),
+    platform
+  )
 }
 
 export async function parseGeminiSessionContent(
@@ -83,7 +86,7 @@ export async function parseGeminiJsonlSessionFile(
   platform: NodeJS.Platform
 ): Promise<AiVaultSession | null> {
   const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
+    input: openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan'),
     crlfDelay: Infinity
   })
   return parseGeminiJsonlSessionLines({ file, lines, platform })
diff --git a/src/main/ai-vault/session-scanner-graph-parsers.ts b/src/main/ai-vault/session-scanner-graph-parsers.ts
index 250ebaf9ac9..d99893acaa2 100644
--- a/src/main/ai-vault/session-scanner-graph-parsers.ts
+++ b/src/main/ai-vault/session-scanner-graph-parsers.ts
@@ -1,6 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
-import { readFile } from 'node:fs/promises'
+import { openTranscriptReadStream, wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
 import { basename, dirname, join } from 'node:path'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
@@ -41,7 +40,9 @@ export async function parseRovoSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const metadata = asRecord(JSON.parse(await readFile(file.path, 'utf-8')) as unknown)
+  const metadata = asRecord(
+    JSON.parse(await wslGatedReadFile(file.path, 'utf-8', 'scan')) as unknown
+  )
   if (!metadata) {
     return null
   }
@@ -175,11 +176,16 @@ export async function parseMessageGraphSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
-    crlfDelay: Infinity
-  })
-  return parseMessageGraphSessionLines({ agent, file, lines, platform })
+  const input = openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan')
+  const lines = createInterface({ input, crlfDelay: Infinity })
+  try {
+    return await parseMessageGraphSessionLines({ agent, file, lines, platform })
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-parse throw cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
+  }
 }
 
 export async function parseMessageGraphSessionContent(
diff --git a/src/main/ai-vault/session-scanner-grok-parser.ts b/src/main/ai-vault/session-scanner-grok-parser.ts
index 46ed29e8f1f..94e41e4b052 100644
--- a/src/main/ai-vault/session-scanner-grok-parser.ts
+++ b/src/main/ai-vault/session-scanner-grok-parser.ts
@@ -1,5 +1,5 @@
-import { createReadStream } from 'node:fs'
-import { readFile } from 'node:fs/promises'
+import { openTranscriptReadStream, wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { dirname, join } from 'node:path'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
@@ -36,7 +36,7 @@ export async function parseGrokSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const record = asRecord(JSON.parse(await readFile(file.path, 'utf-8')) as unknown)
+  const record = asRecord(JSON.parse(await wslGatedReadFile(file.path, 'utf-8', 'scan')) as unknown)
   if (!record) {
     return null
   }
@@ -62,12 +62,13 @@ async function consumeGrokChatHistory(
   accumulator: SessionAccumulator,
   sessionDir: string
 ): Promise<void> {
+  const input = openTranscriptReadStream(
+    join(sessionDir, 'chat_history.jsonl'),
+    { encoding: 'utf-8' },
+    'scan'
+  )
+  const lines = createInterface({ input, crlfDelay: Infinity })
   try {
-    const lines = createInterface({
-      input: createReadStream(join(sessionDir, 'chat_history.jsonl'), { encoding: 'utf-8' }),
-      crlfDelay: Infinity
-    })
-
     for await (const line of lines) {
       const record = parseJsonObject(line)
       if (!record) {
@@ -111,8 +112,18 @@ async function consumeGrokChatHistory(
         seedFirstUserPrompt: false
       })
     }
-  } catch {
-    // Summary-only sessions still provide enough metadata for the Vault list.
+  } catch (error) {
+    // Summary-only sessions still provide enough metadata for the Vault list. A
+    // gate refusal is a different thing — the history exists but is unreachable,
+    // so a message-less session must not be cached under the summary's mtime.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-read failure cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
   }
 }
 
diff --git a/src/main/ai-vault/session-scanner-hermes-parser.ts b/src/main/ai-vault/session-scanner-hermes-parser.ts
index be844cc6627..017fd9c8fdc 100644
--- a/src/main/ai-vault/session-scanner-hermes-parser.ts
+++ b/src/main/ai-vault/session-scanner-hermes-parser.ts
@@ -1,4 +1,4 @@
-import { readFile } from 'node:fs/promises'
+import { wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { ExecutionHostId } from '../../shared/execution-host'
 import type { FileWithMtime } from './session-scanner-types'
@@ -26,7 +26,11 @@ export async function parseHermesSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  return parseHermesSessionContent(file, await readFile(file.path, 'utf-8'), platform)
+  return parseHermesSessionContent(
+    file,
+    await wslGatedReadFile(file.path, 'utf-8', 'scan'),
+    platform
+  )
 }
 
 export async function parseHermesSessionContent(
diff --git a/src/main/ai-vault/session-scanner-index-cache-wsl-stall.test.ts b/src/main/ai-vault/session-scanner-index-cache-wsl-stall.test.ts
new file mode 100644
index 00000000000..1a5da65f1a9
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-index-cache-wsl-stall.test.ts
@@ -0,0 +1,136 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const CODEX_HOME = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex'
+const CODEX_SESSION_FILE = `${CODEX_HOME}\\sessions\\2026\\01\\01\\rollout-1.jsonl`
+const SESSION_ID = 'aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee'
+const KIMI_INDEX = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.kimi\\session_index.jsonl'
+
+const mocks = vi.hoisted(() => ({ stat: vi.fn(), open: vi.fn(), readFile: vi.fn() }))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat,
+  open: mocks.open,
+  readFile: mocks.readFile
+}))
+
+import {
+  readCodexSessionIndexTitle,
+  resetCodexSessionIndexTitleCacheForTests,
+  _hasCodexSessionIndexTitleCacheEntryForTest
+} from './session-scanner-codex-title-index'
+import {
+  clearKimiSessionIndexCache,
+  hasKimiSessionIndexCacheEntryForTests,
+  readKimiWorkDirBySessionId
+} from './session-scanner-kimi-paths'
+import { readJsonObjectIfExists } from './session-scanner-values'
+import {
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from '../native-chat/wsl-transcript-fs-gate'
+
+// Identity must not change between the refused and the recovered read, or the
+// cache would miss for that reason instead of because the entry was evicted.
+const INDEX_STATS = { size: 128, mtimeMs: 7, ctimeMs: 7 }
+
+let releaseStall: (() => void) | undefined
+
+function stalls(): Promise<never> {
+  return new Promise<never>((resolve) => {
+    releaseStall = () => resolve(undefined as never)
+  })
+}
+
+function servingHandle(body: string) {
+  const bytes = Buffer.from(body)
+  return {
+    read: vi.fn(async (buffer: Buffer, offset: number, length: number, position: number) => {
+      const slice = bytes.subarray(position, Math.min(position + length, bytes.length))
+      slice.copy(buffer, offset)
+      return { bytesRead: slice.length, buffer }
+    }),
+    close: vi.fn(async () => {})
+  }
+}
+
+async function releaseAndSettle(): Promise<void> {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+}
+
+beforeEach(() => {
+  resetCodexSessionIndexTitleCacheForTests()
+  clearKimiSessionIndexCache()
+  mocks.stat.mockReset()
+  mocks.open.mockReset()
+  mocks.readFile.mockReset()
+  mocks.stat.mockResolvedValue(INDEX_STATS)
+  releaseStall = undefined
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  await releaseAndSettle()
+  vi.useRealTimers()
+})
+
+describe('memoized WSL session indexes under a stalled mount', () => {
+  it('evicts the Codex title index instead of pinning "no titles"', async () => {
+    mocks.open.mockResolvedValue({ read: vi.fn(stalls), close: vi.fn(async () => {}) })
+    const refused = readCodexSessionIndexTitle(CODEX_SESSION_FILE, CODEX_HOME, SESSION_ID)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+
+    expect(await refused).toBeNull()
+    expect(_hasCodexSessionIndexTitleCacheEntryForTest(CODEX_HOME)).toBe(false)
+
+    await releaseAndSettle()
+    mocks.open.mockResolvedValue(
+      servingHandle(`${JSON.stringify({ id: SESSION_ID, thread_name: 'Ship the gate' })}\n`)
+    )
+
+    // Same size/mtime as the refused read: only the eviction can produce a hit.
+    expect(await readCodexSessionIndexTitle(CODEX_SESSION_FILE, CODEX_HOME, SESSION_ID)).toBe(
+      'Ship the gate'
+    )
+  })
+
+  it('evicts the Kimi work-dir index instead of pinning "no cwd"', async () => {
+    mocks.open.mockResolvedValue({ read: vi.fn(stalls), close: vi.fn(async () => {}) })
+    const refused = readKimiWorkDirBySessionId(KIMI_INDEX)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+
+    expect(await refused).toEqual(new Map())
+    expect(hasKimiSessionIndexCacheEntryForTests(KIMI_INDEX)).toBe(false)
+
+    await releaseAndSettle()
+    mocks.open.mockResolvedValue(
+      servingHandle(`${JSON.stringify({ sessionId: SESSION_ID, workDir: '/repo/app' })}\n`)
+    )
+
+    expect(await readKimiWorkDirBySessionId(KIMI_INDEX)).toEqual(
+      new Map([[SESSION_ID, '/repo/app']])
+    )
+  })
+
+  it('surfaces a refused optional JSON enrichment instead of caching it as absent', async () => {
+    mocks.readFile.mockImplementation(stalls)
+    const pending = readJsonObjectIfExists(`${CODEX_HOME}\\history.json`).catch(
+      (error: unknown) => error
+    )
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+
+    // A throw, not `null`: `parseSessionCandidate` turns it into a scan issue,
+    // where `null` would cache an un-enriched session that never re-reads.
+    expect(await pending).toBeInstanceOf(WslTranscriptFsError)
+  })
+
+  it('still degrades a missing optional JSON file to null', async () => {
+    mocks.readFile.mockRejectedValue(
+      Object.assign(new Error('ENOENT'), { code: 'ENOENT' as const })
+    )
+    await expect(readJsonObjectIfExists(`${CODEX_HOME}\\missing.json`)).resolves.toBeNull()
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-kimi-parser.ts b/src/main/ai-vault/session-scanner-kimi-parser.ts
index 61341098e0d..ba6deaa8fb8 100644
--- a/src/main/ai-vault/session-scanner-kimi-parser.ts
+++ b/src/main/ai-vault/session-scanner-kimi-parser.ts
@@ -1,5 +1,5 @@
-import { createReadStream } from 'node:fs'
-import { readFile } from 'node:fs/promises'
+import { openTranscriptReadStream, wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import {
@@ -36,8 +36,16 @@ export async function parseKimiSessionFile(
 ): Promise<AiVaultSession | null> {
   let stateRecord: Record<string, unknown> | null
   try {
-    stateRecord = asRecord(JSON.parse(await readFile(file.path, 'utf-8')) as unknown)
-  } catch {
+    stateRecord = asRecord(
+      JSON.parse(await wslGatedReadFile(file.path, 'utf-8', 'scan')) as unknown
+    )
+  } catch (error) {
+    // Why: a missing/half-written state file is genuinely "no session", but a
+    // gate refusal is not — returning null would let the parse cache store that
+    // degraded answer under the file's unchanged mtime and never retry.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
     return null
   }
   if (!stateRecord) {
@@ -83,11 +91,9 @@ async function consumeKimiWireTranscript(
     }
   }
 
+  const input = openTranscriptReadStream(wirePath, { encoding: 'utf-8' }, 'scan')
+  const lines = createInterface({ input, crlfDelay: Infinity })
   try {
-    const lines = createInterface({
-      input: createReadStream(wirePath, { encoding: 'utf-8' }),
-      crlfDelay: Infinity
-    })
     for await (const line of lines) {
       const record = parseJsonObject(line)
       if (!record) {
@@ -111,9 +117,18 @@ async function consumeKimiWireTranscript(
           break
       }
     }
-  } catch {
+  } catch (error) {
     // No transcript yet (session created but never ran a turn) — metadata-only
-    // sessions still belong in the panel.
+    // sessions still belong in the panel. A gate refusal instead means the wire
+    // bytes exist but are unreachable; a partial session must not be cached.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
+  } finally {
+    // readline.close() leaves the underlying stream open; destroy it so a
+    // mid-read failure cannot leak the gated transcript handle.
+    lines.close()
+    input.destroy()
   }
   flushAssistant()
 }
diff --git a/src/main/ai-vault/session-scanner-kimi-paths.ts b/src/main/ai-vault/session-scanner-kimi-paths.ts
index 7ed457f6c07..590e4aee814 100644
--- a/src/main/ai-vault/session-scanner-kimi-paths.ts
+++ b/src/main/ai-vault/session-scanner-kimi-paths.ts
@@ -1,8 +1,8 @@
-import { stat } from 'node:fs/promises'
-import { createReadStream } from 'node:fs'
 import { homedir } from 'node:os'
 import { basename, dirname, join } from 'node:path'
 import { createInterface } from 'node:readline'
+import { openTranscriptReadStream, wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { asRecord, extractString } from './session-scanner-values'
 import {
   KimiSessionIndexCache,
@@ -78,9 +78,9 @@ export function hasKimiSessionIndexCacheEntryForTests(indexPath: string): boolea
 
 export async function readKimiWorkDirBySessionId(indexPath: string): Promise<Map<string, string>> {
   const generation = workDirCacheByIndexPath.beginRead()
-  let identity: Awaited<ReturnType<typeof stat>>
+  let identity: Awaited<ReturnType<typeof wslGatedStat>>
   try {
-    identity = await stat(indexPath)
+    identity = await wslGatedStat(indexPath, 'scan')
   } catch {
     // Missing index (e.g. user deleted it): sessions still list, just without cwd.
     workDirCacheByIndexPath.delete(indexPath, generation)
@@ -95,18 +95,30 @@ export async function readKimiWorkDirBySessionId(indexPath: string): Promise<Map
       sizeBytes: identity.size
     },
     generation,
-    () => parseKimiSessionIndex(indexPath)
+    () =>
+      parseKimiSessionIndex(indexPath).then(({ map, refused }) => {
+        // Why: a gate refusal is a stalled distro, not a cwd-less index — evict
+        // so the partial map is not served until the index's identity changes.
+        // Inside the loader, not at the call site: only the caller that missed
+        // runs this, so a concurrent hit would otherwise serve and keep it.
+        if (refused) {
+          workDirCacheByIndexPath.delete(indexPath, generation)
+        }
+        return map
+      })
   )
 }
 
-async function parseKimiSessionIndex(indexPath: string): Promise<Map<string, string>> {
+async function parseKimiSessionIndex(
+  indexPath: string
+): Promise<{ map: Map<string, string>; refused: boolean }> {
   const map = new Map<string, string>()
   // Why: never reject. This promise is memoized and shared by every session
   // under one Kimi home; a mid-read failure (file deleted after stat, EACCES)
   // must degrade to whatever was parsed so the other sessions still list.
   try {
     const lines = createInterface({
-      input: createReadStream(indexPath, { encoding: 'utf-8' }),
+      input: openTranscriptReadStream(indexPath, { encoding: 'utf-8' }, 'scan'),
       crlfDelay: Infinity
     })
     for await (const line of lines) {
@@ -126,8 +138,9 @@ async function parseKimiSessionIndex(indexPath: string): Promise<Map<string, str
         map.set(sessionId, workDir)
       }
     }
-  } catch {
+  } catch (error) {
     // Return the partial map gathered before the read error.
+    return { map, refused: error instanceof WslTranscriptFsError }
   }
-  return map
+  return { map, refused: false }
 }
diff --git a/src/main/ai-vault/session-scanner-omp-subagent-listing.ts b/src/main/ai-vault/session-scanner-omp-subagent-listing.ts
index 0efcdbdc92c..3ecfade1813 100644
--- a/src/main/ai-vault/session-scanner-omp-subagent-listing.ts
+++ b/src/main/ai-vault/session-scanner-omp-subagent-listing.ts
@@ -1,10 +1,12 @@
-import { readdir, stat } from 'node:fs/promises'
 import { basename, extname, join } from 'node:path'
 import type {
   AiVaultScanIssue,
   AiVaultSession,
   AiVaultSubagentListResult
 } from '../../shared/ai-vault-types'
+import { wslGatedReaddir, wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
+import { recordSessionScanIssue } from './session-scan-issues'
 import { sessionIdFromFileName, sessionSortTime } from './session-scanner-accumulator'
 import { parseMessageGraphSessionFile } from './session-scanner-graph-parsers'
 import {
@@ -16,6 +18,8 @@ import { errorMessage } from './session-scanner-values'
 // Match the Claude subagent lister's deliberate parse batching: opening every
 // read stream at once stalls over WSL UNC paths.
 const OMP_SUBAGENT_PARSE_CONCURRENCY = 8
+// Bulk directory work, so 'scan' — same reasoning as the Claude lister.
+const OMP_SUBAGENT_FS_PRIORITY = 'scan'
 
 /**
  * List the task-subagent transcripts of one OMP session, on demand. The main
@@ -35,8 +39,13 @@ export async function listOmpSubagentSessions(args: {
 
   let entries
   try {
-    entries = await readdir(artifactDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(artifactDir, OMP_SUBAGENT_FS_PRIORITY)
+  } catch (err) {
+    // A gate refusal is a stalled distro, not a session without subagents —
+    // report it so the panel offers a retry instead of showing an empty list.
+    if (err instanceof WslTranscriptFsError) {
+      recordSessionScanIssue(issues, { agent: 'omp', path: artifactDir, message: err.message })
+    }
     return { sessions: [], issues }
   }
 
@@ -79,7 +88,7 @@ async function parseOmpSubagentTranscript(args: {
 }): Promise<AiVaultSession | null> {
   const filePath = join(args.artifactDir, args.name)
   try {
-    const fileStat = await stat(filePath)
+    const fileStat = await wslGatedStat(filePath, OMP_SUBAGENT_FS_PRIORITY)
     // The shared OMP parser decorates every parse with an artifact-dir count, so
     // a child row carries its own grandchild count. It is accurate but has no
     // renderer — subagent rows don't expand — and this lister is local-only, so
@@ -107,7 +116,11 @@ async function parseOmpSubagentTranscript(args: {
       }
     }
   } catch (err) {
-    args.issues.push({ agent: 'omp', path: filePath, message: errorMessage(err) })
+    recordSessionScanIssue(args.issues, {
+      agent: 'omp',
+      path: filePath,
+      message: errorMessage(err)
+    })
     return null
   }
 }
diff --git a/src/main/ai-vault/session-scanner-omp-subagent-transcripts.ts b/src/main/ai-vault/session-scanner-omp-subagent-transcripts.ts
index 9136e8c0d34..57cadebeee0 100644
--- a/src/main/ai-vault/session-scanner-omp-subagent-transcripts.ts
+++ b/src/main/ai-vault/session-scanner-omp-subagent-transcripts.ts
@@ -1,4 +1,4 @@
-import { readdir } from 'node:fs/promises'
+import { wslGatedReaddir } from '../native-chat/wsl-transcript-fs-access'
 import { basename, dirname, extname, join } from 'node:path'
 import { LOCAL_EXECUTION_HOST_ID } from '../../shared/execution-host'
 import type { SubagentTranscriptPartition } from './session-scanner-subagent-transcripts'
@@ -51,7 +51,7 @@ export function isOmpSubagentTranscriptFileName(name: string, isFile: boolean):
 export async function countOmpSubagentTranscripts(transcriptFilePath: string): Promise<number> {
   let entries
   try {
-    entries = await readdir(ompArtifactDirFor(transcriptFilePath), { withFileTypes: true })
+    entries = await wslGatedReaddir(ompArtifactDirFor(transcriptFilePath), 'scan')
   } catch {
     return 0
   }
diff --git a/src/main/ai-vault/session-scanner-opencode-parser.ts b/src/main/ai-vault/session-scanner-opencode-parser.ts
index 4231f7d9de4..30223e70866 100644
--- a/src/main/ai-vault/session-scanner-opencode-parser.ts
+++ b/src/main/ai-vault/session-scanner-opencode-parser.ts
@@ -1,4 +1,5 @@
-import { readFile, readdir } from 'node:fs/promises'
+import { wslGatedReaddir, wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { join } from 'node:path'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import type { FileWithMtime, SessionAccumulator } from './session-scanner-types'
@@ -26,7 +27,7 @@ export async function parseOpenCodeSessionFile(
   file: FileWithMtime,
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
-  const record = asRecord(JSON.parse(await readFile(file.path, 'utf-8')) as unknown)
+  const record = asRecord(JSON.parse(await wslGatedReadFile(file.path, 'utf-8', 'scan')) as unknown)
   if (!record) {
     return null
   }
@@ -47,8 +48,13 @@ export async function parseOpenCodeSessionFile(
 async function readOpenCodeMessagesInOrder(messageDir: string): Promise<Record<string, unknown>[]> {
   let entries
   try {
-    entries = await readdir(messageDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(messageDir, 'scan')
+  } catch (error) {
+    // A session with no message dir yet is empty; a gate refusal is not — an
+    // empty transcript would otherwise be cached under the session's mtime.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
     return []
   }
   const messages: { name: string; createdMs: number; message: Record<string, unknown> }[] = []
@@ -59,11 +65,15 @@ async function readOpenCodeMessagesInOrder(messageDir: string): Promise<Record<s
     let message: Record<string, unknown> | null = null
     try {
       message = asRecord(
-        JSON.parse(await readFile(join(messageDir, entry.name), 'utf-8')) as unknown
+        JSON.parse(await wslGatedReadFile(join(messageDir, entry.name), 'utf-8', 'scan')) as unknown
       )
-    } catch {
+    } catch (error) {
       // A live OpenCode process can leave a half-written file; skip it rather
-      // than discard the whole session.
+      // than discard the whole session. A refused read is not a bad file — the
+      // partial transcript it would produce must not become the cached answer.
+      if (error instanceof WslTranscriptFsError) {
+        throw error
+      }
       continue
     }
     if (!message) {
diff --git a/src/main/ai-vault/session-scanner-opencode-sources-wsl-stall.test.ts b/src/main/ai-vault/session-scanner-opencode-sources-wsl-stall.test.ts
new file mode 100644
index 00000000000..297f4b78b06
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-opencode-sources-wsl-stall.test.ts
@@ -0,0 +1,106 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Dirent } from 'node:fs'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
+
+const WSL_HOME = '\\\\wsl.localhost\\Ubuntu\\home\\ada'
+const WSL_DATA_DIR = `${WSL_HOME}/.local/share/opencode`
+
+const mocks = vi.hoisted(() => ({ readdir: vi.fn(), stat: vi.fn() }))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  readdir: mocks.readdir,
+  stat: mocks.stat
+}))
+
+// The SQLite leg spawns a real worker thread, which fake timers cannot drive.
+vi.mock('./session-scanner-opencode-sqlite-worker-spawn', () => ({
+  listOpenCodeSqliteSessionsViaWorker: async () => []
+}))
+
+import { opencodeDiscoveries } from './session-scanner-opencode-sources'
+import { WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS } from '../native-chat/wsl-transcript-fs-gate'
+
+let releaseStall: (() => void) | undefined
+
+function restoreEnv(key: string, value: string | undefined): void {
+  if (value === undefined) {
+    delete process.env[key]
+  } else {
+    process.env[key] = value
+  }
+}
+
+function stalls(): Promise<never> {
+  return new Promise<never>((resolve) => {
+    releaseStall = () => resolve(undefined as never)
+  })
+}
+
+beforeEach(() => {
+  mocks.readdir.mockReset()
+  mocks.stat.mockReset()
+  releaseStall = undefined
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+})
+
+describe('OpenCode source discovery with a stalled WSL data directory', () => {
+  it('reports the stalled home as an issue and still resolves every discovery', async () => {
+    mocks.readdir.mockImplementation((dir: string) =>
+      dir === WSL_DATA_DIR ? stalls() : Promise.resolve([] as Dirent[])
+    )
+    const issues: AiVaultScanIssue[] = []
+    const discoveries = Promise.all(
+      opencodeDiscoveries(
+        { opencodeStorageDir: '/home/ada/.local/share/opencode/storage' },
+        [WSL_HOME],
+        10,
+        issues
+      )
+    )
+    // Two deadlines: the data-dir probe, then the storage scan that queued
+    // behind it before the route was flagged stuck.
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS * 2 + 2)
+
+    // Zero databases for that home is the degraded answer; without the issue it
+    // would be indistinguishable from "OpenCode was never installed there".
+    const resolved = await discoveries
+    expect(resolved).toHaveLength(2)
+    expect(resolved.every((discovery) => discovery.files.length === 0)).toBe(true)
+    expect(issues.some((issue) => issue.path === WSL_DATA_DIR)).toBe(true)
+    expect(issues.every((issue) => issue.agent === 'opencode')).toBe(true)
+  })
+
+  it('reports a refused primary data directory instead of scanning clean', async () => {
+    const previousXdg = process.env.XDG_DATA_HOME
+    const previousDb = process.env.OPENCODE_DB
+    process.env.XDG_DATA_HOME = WSL_HOME
+    delete process.env.OPENCODE_DB
+    try {
+      mocks.readdir.mockImplementation(stalls)
+      const issues: AiVaultScanIssue[] = []
+      const discoveries = Promise.all(opencodeDiscoveries({}, [], 10, issues))
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS * 2 + 2)
+
+      // The primary source is the one per-root containment cannot reach, so a
+      // silent [] here reads as "no OpenCode sessions" on a clean scan.
+      await expect(discoveries).resolves.toHaveLength(1)
+      expect(
+        issues.some(
+          (issue) => issue.agent === 'opencode' && issue.path === `${WSL_HOME}/opencode`
+        )
+      ).toBe(true)
+    } finally {
+      restoreEnv('XDG_DATA_HOME', previousXdg)
+      restoreEnv('OPENCODE_DB', previousDb)
+    }
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-opencode-sources.ts b/src/main/ai-vault/session-scanner-opencode-sources.ts
index 6d84965f8c0..365e6334512 100644
--- a/src/main/ai-vault/session-scanner-opencode-sources.ts
+++ b/src/main/ai-vault/session-scanner-opencode-sources.ts
@@ -1,8 +1,10 @@
-import { readdir } from 'node:fs/promises'
 import { dirname, join } from 'node:path'
 import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
+import { wslGatedReaddir } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { resolveOpenCodeStorageDirectory } from '../opencode/opencode-data-directory'
 import { listOpenCodeDatabases } from '../opencode-usage/scanner'
+import { recordSessionScanIssue } from './session-scan-issues'
 import { discoverOpenCodeSessions } from './session-scanner-opencode-sqlite-discovery'
 import type { AiVaultScanOptions, SessionFileDiscovery } from './session-scanner-types'
 
@@ -16,7 +18,7 @@ export function opencodeDiscoveries(
   return storageDirs.map(async (storageDir, index) =>
     discoverOpenCodeSessions({
       storageDir,
-      dbPaths: await opencodeDbPathsForSource(options, wslHomeDirs, storageDir, index),
+      dbPaths: await opencodeDbPathsForSource(options, wslHomeDirs, storageDir, index, issues),
       limitPerAgent: limit,
       issues
     })
@@ -37,32 +39,47 @@ async function opencodeDbPathsForSource(
   options: AiVaultScanOptions,
   wslHomeDirs: readonly string[],
   storageDir: string,
-  sourceIndex: number
+  sourceIndex: number,
+  issues: AiVaultScanIssue[]
 ): Promise<readonly string[]> {
   if (options.opencodeDbPaths) {
     return sourceIndex === 0 ? options.opencodeDbPaths : []
   }
   // Why: custom OpenCode storage roots still keep SQLite DBs in the parent data dir.
   if (sourceIndex === 0 && options.opencodeStorageDir) {
-    return listOpenCodeDatabasesInDirectory(dirname(storageDir))
+    return listOpenCodeDatabasesInDirectory(dirname(storageDir), issues)
   }
   if (sourceIndex === 0) {
-    return listOpenCodeDatabases()
+    return listOpenCodeDatabases((path, error) => {
+      recordSessionScanIssue(issues, { agent: 'opencode', path, message: error.message })
+    })
   }
   const wslHomeDir = wslHomeDirs[sourceIndex - 1]
   return wslHomeDir
-    ? listOpenCodeDatabasesInDirectory(join(wslHomeDir, '.local', 'share', 'opencode'))
+    ? listOpenCodeDatabasesInDirectory(join(wslHomeDir, '.local', 'share', 'opencode'), issues)
     : []
 }
 
-async function listOpenCodeDatabasesInDirectory(dataDir: string): Promise<string[]> {
+async function listOpenCodeDatabasesInDirectory(
+  dataDir: string,
+  issues: AiVaultScanIssue[]
+): Promise<string[]> {
   try {
-    const entries = await readdir(dataDir, { withFileTypes: true })
+    const entries = await wslGatedReaddir(dataDir, 'scan')
     return entries
       .filter((entry) => entry.isFile() && /^opencode(?:-[A-Za-z0-9_.-]+)?\.db$/.test(entry.name))
       .map((entry) => join(dataDir, entry.name))
       .sort()
-  } catch {
+  } catch (error) {
+    // A stalled WSL data dir still degrades to "no databases", but the gap has
+    // to be reportable — an empty list otherwise reads as "OpenCode not used".
+    if (error instanceof WslTranscriptFsError) {
+      recordSessionScanIssue(issues, {
+        agent: 'opencode',
+        path: dataDir,
+        message: error.message
+      })
+    }
     return []
   }
 }
diff --git a/src/main/ai-vault/session-scanner-parse-cache.ts b/src/main/ai-vault/session-scanner-parse-cache.ts
index 727d70ac319..563055ffa39 100644
--- a/src/main/ai-vault/session-scanner-parse-cache.ts
+++ b/src/main/ai-vault/session-scanner-parse-cache.ts
@@ -1,5 +1,7 @@
-import { createReadStream } from 'node:fs'
-import { open } from 'node:fs/promises'
+import {
+  openTranscriptReadStream,
+  readTranscriptSlice
+} from '../native-chat/wsl-transcript-fs-access'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import { createAntigravitySessionResumeState } from './session-scanner-antigravity-parser'
 import { parseAgentSessionFile } from './session-scanner-agent-parser'
@@ -305,13 +307,8 @@ async function parseResumableCandidate(args: {
 // agent transcripts are append-only so that trade is accepted (worst case is
 // a stale vault row until the file is next truncated or the app restarts).
 async function endsWithNewlineAt(path: string, offset: number): Promise<boolean> {
-  const handle = await open(path, 'r')
-  try {
-    const { bytesRead, buffer } = await handle.read(Buffer.alloc(1), 0, 1, offset - 1)
-    return bytesRead === 1 && buffer[0] === NEWLINE_BYTE
-  } finally {
-    await handle.close()
-  }
+  const slice = await readTranscriptSlice(path, offset - 1, 1, 'scan')
+  return slice.length === 1 && slice[0] === NEWLINE_BYTE
 }
 
 type JsonlReadResult = {
@@ -336,7 +333,7 @@ async function consumeCompleteJsonlLines(args: {
   let remainderParts: Buffer[] = []
   let remainderLength = 0
 
-  const stream = createReadStream(args.path, { start: args.start })
+  const stream = openTranscriptReadStream(args.path, { start: args.start }, 'scan')
   for await (const chunk of stream as AsyncIterable<Buffer>) {
     bytesRead += chunk.length
     // Why check the chunk alone: the pieces held over are all mid-line, so none
diff --git a/src/main/ai-vault/session-scanner-parse-wsl-stall.test.ts b/src/main/ai-vault/session-scanner-parse-wsl-stall.test.ts
new file mode 100644
index 00000000000..9eea5176c66
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-parse-wsl-stall.test.ts
@@ -0,0 +1,154 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type { SessionFileCandidate } from './session-scanner-types'
+
+const STALLED_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\a.jsonl'
+const SIBLING_PATH = '\\\\wsl.localhost\\Debian\\home\\ada\\.claude\\projects\\p\\b.jsonl'
+
+const mocks = vi.hoisted(() => ({ open: vi.fn(), readdir: vi.fn() }))
+
+// readdir too: every claude parse counts sibling subagent transcripts, and an
+// unmocked one would reach the host UNC path and stall under fake timers.
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  open: mocks.open,
+  readdir: mocks.readdir
+}))
+
+import {
+  parseAgentSessionFileCached,
+  resetSessionParseCacheForTests
+} from './session-scanner-parse-cache'
+import {
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from '../native-chat/wsl-transcript-fs-gate'
+
+type ReadResult = { bytesRead: number; buffer: Buffer }
+
+// A stalled task keeps the gate's single scan slot until the call settles, so
+// every case releases its stall before the next one runs.
+let releaseStall: (() => void) | undefined
+
+function stalls(): Promise<ReadResult> {
+  return new Promise<ReadResult>((resolve) => {
+    releaseStall = () => resolve({ bytesRead: 0, buffer: Buffer.alloc(0) })
+  })
+}
+
+function servingHandle(body: Buffer) {
+  return {
+    read: vi.fn(async (buffer: Buffer, offset: number, length: number, position: number) => {
+      const slice = body.subarray(position, Math.min(position + length, body.length))
+      slice.copy(buffer, offset)
+      return { bytesRead: slice.length, buffer }
+    }),
+    close: vi.fn(async () => {})
+  }
+}
+
+function record(index: number, text: string): string {
+  return JSON.stringify({
+    type: 'user',
+    sessionId: 'aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee',
+    timestamp: new Date(1740000000000 + index * 60_000).toISOString(),
+    cwd: '/repo/app',
+    gitBranch: 'main',
+    message: { role: 'user', content: text }
+  })
+}
+
+function body(count: number): Buffer {
+  return Buffer.from(
+    Array.from({ length: count }, (_, index) => `${record(index, `line ${index}`)}\n`).join('')
+  )
+}
+
+function candidate(path: string, bytes: Buffer, mtimeMs: number): SessionFileCandidate {
+  return {
+    agent: 'claude',
+    file: {
+      path,
+      mtimeMs,
+      modifiedAt: new Date(mtimeMs).toISOString(),
+      sizeBytes: bytes.length
+    },
+    codexHome: null
+  }
+}
+
+async function releaseAndSettle(): Promise<void> {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+}
+
+beforeEach(() => {
+  resetSessionParseCacheForTests()
+  mocks.open.mockReset()
+  mocks.readdir.mockReset()
+  mocks.readdir.mockResolvedValue([])
+  releaseStall = undefined
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  await releaseAndSettle()
+  vi.useRealTimers()
+})
+
+describe('AI Vault session parse with a stalled WSL transcript body read', () => {
+  it('refuses the stalled candidate and still parses a sibling on a healthy distro', async () => {
+    mocks.open.mockResolvedValue({ read: vi.fn(stalls), close: vi.fn(async () => {}) })
+    // Rejecting (not resolving null) is what lets `parseSessionCandidate`
+    // report it as an issue instead of silently dropping the session. The
+    // assertion is attached before the clock moves so the rejection is never
+    // momentarily unhandled.
+    const refusal = expect(
+      parseAgentSessionFileCached(candidate(STALLED_PATH, body(2), 1), 'linux')
+    ).rejects.toBeInstanceOf(WslTranscriptFsError)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+    await refusal
+
+    await releaseAndSettle()
+    const siblingBytes = body(2)
+    mocks.open.mockResolvedValue(servingHandle(siblingBytes))
+
+    const sibling = await parseAgentSessionFileCached(
+      candidate(SIBLING_PATH, siblingBytes, 1),
+      'linux'
+    )
+    expect(sibling?.messageCount).toBe(2)
+  })
+
+  it('caches no resume point when the newline probe is refused mid-append', async () => {
+    const first = body(2)
+    mocks.open.mockResolvedValue(servingHandle(first))
+    const seeded = await parseAgentSessionFileCached(candidate(STALLED_PATH, first, 1), 'linux')
+    expect(seeded?.messageCount).toBe(2)
+
+    const grown = body(3)
+    const serving = servingHandle(grown)
+    mocks.open.mockResolvedValue({
+      // Only the 1-byte resume probe stalls; the body read stays healthy.
+      read: vi.fn((buffer: Buffer, offset: number, length: number, position: number) =>
+        length === 1 ? stalls() : serving.read(buffer, offset, length, position)
+      ),
+      close: vi.fn(async () => {})
+    })
+    const refused = expect(
+      parseAgentSessionFileCached(candidate(STALLED_PATH, grown, 2), 'linux')
+    ).rejects.toBeInstanceOf(WslTranscriptFsError)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+    await refused
+
+    await releaseAndSettle()
+    mocks.open.mockResolvedValue(servingHandle(grown))
+    const recovered = await parseAgentSessionFileCached(candidate(STALLED_PATH, grown, 2), 'linux')
+
+    resetSessionParseCacheForTests()
+    const cold = await parseAgentSessionFileCached(candidate(STALLED_PATH, grown, 2), 'linux')
+    expect(recovered).toEqual(cold)
+    expect(recovered?.messageCount).toBe(3)
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-parser-stream-cleanup.test.ts b/src/main/ai-vault/session-scanner-parser-stream-cleanup.test.ts
new file mode 100644
index 00000000000..7470b3430d2
--- /dev/null
+++ b/src/main/ai-vault/session-scanner-parser-stream-cleanup.test.ts
@@ -0,0 +1,127 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { Readable } from 'node:stream'
+import type * as NodeReadlineModule from 'node:readline'
+import type * as WslFsAccessModule from '../native-chat/wsl-transcript-fs-access'
+import type { FileWithMtime } from './session-scanner-types'
+
+// readline.close() leaves its input open, so a parser that stops consuming
+// mid-file (a throw, a break) strands the gated transcript handle until the
+// gate's deadline and delays every later scan. These pin the finally blocks.
+const mocks = vi.hoisted(() => ({
+  openStream: vi.fn(),
+  readFile: vi.fn(),
+  stat: vi.fn(),
+  createInterface: vi.fn()
+}))
+
+vi.mock('../native-chat/wsl-transcript-fs-access', async (importOriginal) => ({
+  ...(await importOriginal<typeof WslFsAccessModule>()),
+  openTranscriptReadStream: mocks.openStream,
+  wslGatedReadFile: mocks.readFile,
+  wslGatedStat: mocks.stat
+}))
+
+vi.mock('node:readline', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeReadlineModule>()),
+  createInterface: mocks.createInterface
+}))
+
+import { parseAntigravitySessionFile } from './session-scanner-antigravity-parser'
+import { parseDroidSessionFile } from './session-scanner-droid-parser'
+import { parseMessageGraphSessionFile } from './session-scanner-graph-parsers'
+import { parseGrokSessionFile } from './session-scanner-grok-parser'
+import { parseKimiSessionFile } from './session-scanner-kimi-parser'
+import { clearKimiSessionIndexCache } from './session-scanner-kimi-paths'
+
+const PARSE_FAILURE = 'parser failed mid-transcript'
+
+const opened: { path: string; stream: Readable }[] = []
+const interfaces: { close: ReturnType<typeof vi.fn> }[] = []
+
+function file(path: string): FileWithMtime {
+  return { path, mtimeMs: 1, modifiedAt: '2026-06-01T10:05:00.000Z', sizeBytes: 128 }
+}
+
+function lastOpened(): { path: string; stream: Readable } {
+  const entry = opened.at(-1)
+  if (!entry) {
+    throw new Error('no transcript stream was opened')
+  }
+  return entry
+}
+
+function expectStreamTornDown(): void {
+  expect(lastOpened().stream.destroyed).toBe(true)
+  expect(interfaces.at(-1)?.close).toHaveBeenCalled()
+}
+
+beforeEach(() => {
+  opened.length = 0
+  interfaces.length = 0
+  clearKimiSessionIndexCache()
+  mocks.openStream.mockReset()
+  mocks.readFile.mockReset()
+  mocks.stat.mockReset()
+  mocks.createInterface.mockReset()
+
+  mocks.openStream.mockImplementation((path: string) => {
+    const stream = new Readable({
+      read() {
+        this.push(null)
+      }
+    })
+    opened.push({ path, stream })
+    return stream
+  })
+  // One line, then a consumer-side throw: the parser must still tear the
+  // stream down on its way out.
+  mocks.createInterface.mockImplementation(() => {
+    const lines = {
+      close: vi.fn(),
+      [Symbol.asyncIterator]: async function* () {
+        yield '{}'
+        throw new Error(PARSE_FAILURE)
+      }
+    }
+    interfaces.push(lines)
+    return lines
+  })
+})
+
+describe('session parsers that stop consuming a gated transcript early', () => {
+  it.each([
+    ['antigravity', () => parseAntigravitySessionFile(file('/w/conversation.jsonl'), 'linux')],
+    ['droid', () => parseDroidSessionFile(file('/w/session.jsonl'), 'linux')],
+    ['message graph', () => parseMessageGraphSessionFile('pi', file('/w/session.jsonl'), 'linux')]
+  ])('destroys the stream when the %s parse throws', async (_agent, parse) => {
+    await expect(parse()).rejects.toThrow(PARSE_FAILURE)
+
+    expectStreamTornDown()
+  })
+
+  it('destroys the chat_history stream when the Grok parse swallows the failure', async () => {
+    mocks.readFile.mockResolvedValue(JSON.stringify({ info: { id: 'ses-1' } }))
+
+    // Grok degrades to a summary-only session on a non-gate failure, so the
+    // teardown has no rejection to ride out on.
+    await expect(
+      parseGrokSessionFile(file('/w/.grok/sessions/ses-1/session.json'))
+    ).resolves.toBeTruthy()
+
+    expect(lastOpened().path).toContain('chat_history.jsonl')
+    expectStreamTornDown()
+  })
+
+  it('destroys the wire stream when the Kimi parse swallows the failure', async () => {
+    mocks.readFile.mockResolvedValue(JSON.stringify({ title: 'Kimi session' }))
+    // No session_index.jsonl, so only the wire transcript opens a stream.
+    mocks.stat.mockRejectedValue(Object.assign(new Error('ENOENT'), { code: 'ENOENT' }))
+
+    await expect(
+      parseKimiSessionFile(file('/w/.kimi-code/sessions/wd_app/session_abc/state.json'))
+    ).resolves.toBeTruthy()
+
+    expect(lastOpened().path).toContain('wire.jsonl')
+    expectStreamTornDown()
+  })
+})
diff --git a/src/main/ai-vault/session-scanner-primary-parsers.ts b/src/main/ai-vault/session-scanner-primary-parsers.ts
index 92db2241320..f554268c7e5 100644
--- a/src/main/ai-vault/session-scanner-primary-parsers.ts
+++ b/src/main/ai-vault/session-scanner-primary-parsers.ts
@@ -1,5 +1,5 @@
 import { remoteSessionContentLines } from './remote-session-content-lines'
-import { createReadStream } from 'node:fs'
+import { openTranscriptReadStream } from '../native-chat/wsl-transcript-fs-access'
 import { createInterface } from 'node:readline'
 import type { AiVaultSession } from '../../shared/ai-vault-types'
 import { LOCAL_EXECUTION_HOST_ID, type ExecutionHostId } from '../../shared/execution-host'
@@ -210,7 +210,7 @@ export async function parseClaudeSessionFile(
   platform: NodeJS.Platform = process.platform
 ): Promise<AiVaultSession | null> {
   const lines = createInterface({
-    input: createReadStream(file.path, { encoding: 'utf-8' }),
+    input: openTranscriptReadStream(file.path, { encoding: 'utf-8' }, 'scan'),
     crlfDelay: Infinity
   })
   return parseClaudeSessionLines({ file, lines, platform })
diff --git a/src/main/ai-vault/session-scanner-scope-discovery.ts b/src/main/ai-vault/session-scanner-scope-discovery.ts
index b0a4792ffd6..e787aef628e 100644
--- a/src/main/ai-vault/session-scanner-scope-discovery.ts
+++ b/src/main/ai-vault/session-scanner-scope-discovery.ts
@@ -1,13 +1,18 @@
-import { createReadStream } from 'node:fs'
-import { readdir, stat } from 'node:fs/promises'
 import { createInterface } from 'node:readline'
 import { extname, join } from 'node:path'
+import {
+  openTranscriptReadStream,
+  wslGatedReaddir,
+  wslGatedStat
+} from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import {
   isPathInsideOrEqual,
   normalizeRuntimePathSeparators
 } from '../../shared/cross-platform-path'
 import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
 import { parseWslUncPath } from '../../shared/wsl-paths'
+import { recordSessionScanIssue } from './session-scan-issues'
 import type { FileWithMtime } from './session-scanner-types'
 import { errorMessage, extractString, parseJsonObject } from './session-scanner-values'
 
@@ -26,7 +31,18 @@ export function resetProjectDirCwdCacheForTests(): void {
   projectDirCwdCache.clear()
 }
 
-async function cachedProjectDirCwd(projectDir: string): Promise<string | null> {
+// A gate refusal is a stalled WSL root, not an empty one: keep the existing
+// degrade-to-empty containment but make the gap visible in the scan issues.
+function recordRefusal(issues: AiVaultScanIssue[], path: string, error: unknown): void {
+  if (error instanceof WslTranscriptFsError) {
+    recordSessionScanIssue(issues, { agent: 'claude', path, message: error.message })
+  }
+}
+
+async function cachedProjectDirCwd(
+  projectDir: string,
+  issues: AiVaultScanIssue[]
+): Promise<string | null> {
   const cached = projectDirCwdCache.get(projectDir)
   if (cached !== undefined) {
     // Refresh recency so hot in-scope dirs outlive one-off ones at the cap.
@@ -34,7 +50,7 @@ async function cachedProjectDirCwd(projectDir: string): Promise<string | null> {
     projectDirCwdCache.set(projectDir, cached)
     return cached
   }
-  const cwd = await readProjectDirCwd(projectDir)
+  const cwd = await readProjectDirCwd(projectDir, issues)
   if (cwd) {
     if (projectDirCwdCache.size >= PROJECT_DIR_CWD_CACHE_MAX) {
       const oldest = projectDirCwdCache.keys().next()
@@ -70,8 +86,8 @@ export async function discoverInScopeClaudeFiles(args: {
   const scopeProjectPrefixes = claudeProjectScopePrefixes(args.scopePaths)
   const collected = new Map<string, FileWithMtime>()
   for (const rootDir of args.rootDirs) {
-    for (const projectDir of await listProjectDirs(rootDir, scopeProjectPrefixes)) {
-      const cwd = await cachedProjectDirCwd(projectDir)
+    for (const projectDir of await listProjectDirs(rootDir, scopeProjectPrefixes, args.issues)) {
+      const cwd = await cachedProjectDirCwd(projectDir, args.issues)
       if (!cwd || !args.scopePaths.some((scopePath) => isCwdInsideScopePath(scopePath, cwd))) {
         continue
       }
@@ -148,12 +164,14 @@ function isCwdInsideScopePath(scopePath: string, cwd: string): boolean {
 
 async function listProjectDirs(
   rootDir: string,
-  scopeProjectPrefixes: ReadonlySet<string>
+  scopeProjectPrefixes: ReadonlySet<string>,
+  issues: AiVaultScanIssue[]
 ): Promise<string[]> {
   let entries
   try {
-    entries = await readdir(rootDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(rootDir, 'scan')
+  } catch (err) {
+    recordRefusal(issues, rootDir, err)
     return []
   }
   return entries
@@ -163,10 +181,13 @@ async function listProjectDirs(
     .map((entry) => join(rootDir, entry.name))
 }
 
-async function readProjectDirCwd(projectDir: string): Promise<string | null> {
-  const files = await newestClaudeFilesInDir(projectDir)
+async function readProjectDirCwd(
+  projectDir: string,
+  issues: AiVaultScanIssue[]
+): Promise<string | null> {
+  const files = await newestClaudeFilesInDir(projectDir, issues)
   for (const file of files.slice(0, REPRESENTATIVE_FILE_LIMIT)) {
-    const cwd = await readFirstCwd(file)
+    const cwd = await readFirstCwd(file, issues)
     if (cwd) {
       return cwd
     }
@@ -174,11 +195,15 @@ async function readProjectDirCwd(projectDir: string): Promise<string | null> {
   return null
 }
 
-async function newestClaudeFilesInDir(projectDir: string): Promise<string[]> {
+async function newestClaudeFilesInDir(
+  projectDir: string,
+  issues: AiVaultScanIssue[]
+): Promise<string[]> {
   let entries
   try {
-    entries = await readdir(projectDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(projectDir, 'scan')
+  } catch (err) {
+    recordRefusal(issues, projectDir, err)
     return []
   }
   const newest: { path: string; mtimeMs: number }[] = []
@@ -190,18 +215,19 @@ async function newestClaudeFilesInDir(projectDir: string): Promise<string[]> {
     try {
       addBoundedPath(newest, REPRESENTATIVE_FILE_LIMIT, {
         path,
-        mtimeMs: (await stat(path)).mtimeMs
+        mtimeMs: (await wslGatedStat(path, 'scan')).mtimeMs
       })
-    } catch {
+    } catch (err) {
       // Best effort: unreadable candidates are ignored here and reported during
       // full collection if the project directory proves in-scope.
+      recordRefusal(issues, path, err)
     }
   }
   return newest.sort((left, right) => right.mtimeMs - left.mtimeMs).map((value) => value.path)
 }
 
-async function readFirstCwd(filePath: string): Promise<string | null> {
-  const input = createReadStream(filePath, { encoding: 'utf-8' })
+async function readFirstCwd(filePath: string, issues: AiVaultScanIssue[]): Promise<string | null> {
+  const input = openTranscriptReadStream(filePath, { encoding: 'utf-8' }, 'scan')
   const lines = createInterface({ input, crlfDelay: Infinity })
   let read = 0
   try {
@@ -214,7 +240,8 @@ async function readFirstCwd(filePath: string): Promise<string | null> {
         return cwd
       }
     }
-  } catch {
+  } catch (err) {
+    recordRefusal(issues, filePath, err)
     return null
   } finally {
     // readline.close() leaves the underlying stream open; destroy it so the early
@@ -234,8 +261,9 @@ async function collectClaudeFiles(args: {
 }): Promise<void> {
   let entries
   try {
-    entries = await readdir(args.projectDir, { withFileTypes: true })
-  } catch {
+    entries = await wslGatedReaddir(args.projectDir, 'scan')
+  } catch (err) {
+    recordRefusal(args.issues, args.projectDir, err)
     return
   }
   for (const entry of entries) {
@@ -247,7 +275,7 @@ async function collectClaudeFiles(args: {
       continue
     }
     try {
-      const fileStat = await stat(path)
+      const fileStat = await wslGatedStat(path, 'scan')
       addBoundedFile(args.collected, args.limit, {
         path,
         mtimeMs: fileStat.mtimeMs,
@@ -255,7 +283,7 @@ async function collectClaudeFiles(args: {
         sizeBytes: fileStat.size
       })
     } catch (err) {
-      args.issues.push({ agent: 'claude', path, message: errorMessage(err) })
+      recordSessionScanIssue(args.issues, { agent: 'claude', path, message: errorMessage(err) })
     }
   }
 }
diff --git a/src/main/ai-vault/session-scanner-service-client.ts b/src/main/ai-vault/session-scanner-service-client.ts
index cfcee4c2240..4f46dc643c5 100644
--- a/src/main/ai-vault/session-scanner-service-client.ts
+++ b/src/main/ai-vault/session-scanner-service-client.ts
@@ -130,7 +130,7 @@ export class AiVaultScannerServiceClient {
         continue
       }
       const index = this.queue.findIndex((call) => call.lane === lane)
-      if (index < 0) {
+      if (index === -1) {
         continue
       }
       const call = this.queue.splice(index, 1)[0]!
@@ -257,7 +257,7 @@ export class AiVaultScannerServiceClient {
     call.cancelled = true
     call.reject(createAiVaultScanCancelledError())
     const queuedIndex = this.queue.indexOf(call)
-    if (queuedIndex >= 0) {
+    if (queuedIndex !== -1) {
       this.queue.splice(queuedIndex, 1)
       clearAiVaultServiceCall(call)
       this.pump()
diff --git a/src/main/ai-vault/session-scanner-subagent-transcripts.ts b/src/main/ai-vault/session-scanner-subagent-transcripts.ts
index d7df4aeedac..8d477f450af 100644
--- a/src/main/ai-vault/session-scanner-subagent-transcripts.ts
+++ b/src/main/ai-vault/session-scanner-subagent-transcripts.ts
@@ -1,4 +1,4 @@
-import { readdir } from 'node:fs/promises'
+import { wslGatedReaddir } from '../native-chat/wsl-transcript-fs-access'
 import { basename, dirname, extname, join } from 'node:path'
 
 // Exported so discovery can prune these subtrees using the same literal that
@@ -38,7 +38,7 @@ export function subagentTranscriptsDirFor(transcriptFilePath: string): string {
 export async function countSubagentTranscripts(transcriptFilePath: string): Promise<number> {
   let entries
   try {
-    entries = await readdir(subagentTranscriptsDirFor(transcriptFilePath), { withFileTypes: true })
+    entries = await wslGatedReaddir(subagentTranscriptsDirFor(transcriptFilePath), 'scan')
   } catch {
     return 0
   }
diff --git a/src/main/ai-vault/session-scanner-values.ts b/src/main/ai-vault/session-scanner-values.ts
index b058876fda3..f7d62611adb 100644
--- a/src/main/ai-vault/session-scanner-values.ts
+++ b/src/main/ai-vault/session-scanner-values.ts
@@ -1,6 +1,7 @@
 import { homedir } from 'node:os'
 import { basename, dirname, isAbsolute, join } from 'node:path'
-import { readFile } from 'node:fs/promises'
+import { wslGatedReadFile } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { asRecord } from './session-scanner-record-value'
 
 export { asRecord }
@@ -76,8 +77,15 @@ export async function readJsonObjectIfExists(
   filePath: string
 ): Promise<Record<string, unknown> | null> {
   try {
-    return asRecord(JSON.parse(await readFile(filePath, 'utf-8')) as unknown)
-  } catch {
+    return asRecord(JSON.parse(await wslGatedReadFile(filePath, 'utf-8', 'scan')) as unknown)
+  } catch (error) {
+    // A missing or malformed file is genuinely "no enrichment", but a gate
+    // refusal must reach `parseSessionCandidate` as an issue — degrading it to
+    // null caches the un-enriched session under an unchanged mtime, and the
+    // non-resumable agents that use this never re-read it.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
     return null
   }
 }
diff --git a/src/main/ai-vault/session-scanner-worker-client.ts b/src/main/ai-vault/session-scanner-worker-client.ts
index 6b780c5086d..70e75c4f982 100644
--- a/src/main/ai-vault/session-scanner-worker-client.ts
+++ b/src/main/ai-vault/session-scanner-worker-client.ts
@@ -176,7 +176,7 @@ export class AiVaultScannerWorkerClient {
       return
     }
     const index = this.queue.indexOf(call)
-    if (index >= 0) {
+    if (index !== -1) {
       this.queue.splice(index, 1)
       this.clearCall(call)
     }
diff --git a/src/main/ai-vault/session-scanner.ts b/src/main/ai-vault/session-scanner.ts
index 3a98b7018ac..b4ef6f06ce7 100644
--- a/src/main/ai-vault/session-scanner.ts
+++ b/src/main/ai-vault/session-scanner.ts
@@ -1,4 +1,3 @@
-import { readFile } from 'node:fs/promises'
 import type {
   AiVaultListResult,
   AiVaultScanIssue,
@@ -14,6 +13,7 @@ import {
 } from './codex-session-root-dedup'
 import {
   createAntigravityWorkspaceResolver,
+  readLocalAntigravityHistory,
   type AntigravityWorkspaceResolver
 } from './session-scanner-antigravity-history'
 import { antigravityHistoryPathForBrainDir } from './session-scanner-antigravity-paths'
@@ -27,6 +27,7 @@ import {
   parseAgentSessionFileCached,
   type SessionParseStats
 } from './session-scanner-parse-cache'
+import { recordSessionScanIssue } from './session-scan-issues'
 import { discoverInScopeClaudeFiles } from './session-scanner-scope-discovery'
 import {
   DEFAULT_CODEX_HOME_DIR,
@@ -71,7 +72,9 @@ export async function scanAiVaultSessions(
     const executionHostId = options.executionHostId ?? LOCAL_EXECUTION_HOST_ID
     const issues: AiVaultScanIssue[] = []
     const parseStats = createSessionParseStats()
-    const antigravityWorkspaceResolver = createAntigravityWorkspaceResolver(readOptionalTextFile)
+    const antigravityWorkspaceResolver = createAntigravityWorkspaceResolver(
+      readLocalAntigravityHistory
+    )
     // Why: persisted entries must be seeded before any candidate is parsed, or
     // the cold scan gains nothing from the cache file (#9210).
     throwIfAiVaultScanCancelled(options.signal)
@@ -255,7 +258,7 @@ async function parseSessionCandidates(args: {
 
     for (const result of results) {
       if (result.issue) {
-        args.issues.push(result.issue)
+        recordSessionScanIssue(args.issues, result.issue)
       }
       if (result.session) {
         sessions.push(result.session)
@@ -305,14 +308,6 @@ async function parseSessionCandidate(
   }
 }
 
-async function readOptionalTextFile(path: string): Promise<string | null> {
-  try {
-    return await readFile(path, 'utf-8')
-  } catch {
-    return null
-  }
-}
-
 function withSessionExecutionHost(
   session: AiVaultSession,
   executionHostId: ExecutionHostId
diff --git a/src/main/ai-vault/session-title-file-reader-wsl-stall.test.ts b/src/main/ai-vault/session-title-file-reader-wsl-stall.test.ts
new file mode 100644
index 00000000000..337c2064d8a
--- /dev/null
+++ b/src/main/ai-vault/session-title-file-reader-wsl-stall.test.ts
@@ -0,0 +1,83 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\stalled.jsonl'
+const STALLED_SESSION_ID = 'aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee'
+const LOCAL_SESSION_ID = 'bbbbbbbb-cccc-4ddd-8eee-ffffffffffff'
+
+const mocks = vi.hoisted(() => ({ lstat: vi.fn() }))
+
+vi.mock('node:fs/promises', async (importOriginal) => {
+  const original = await importOriginal<typeof NodeFsPromisesModule>()
+  return {
+    ...original,
+    // Only the WSL request is faked; the local sibling reads a real temp file.
+    lstat: (path: string, ...rest: unknown[]) =>
+      path.startsWith('\\\\')
+        ? mocks.lstat(path)
+        : (original.lstat as (...args: unknown[]) => unknown)(path, ...rest)
+  }
+})
+
+import { mkdtemp, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { readAiVaultSessionTitlesFromFiles } from './session-title-file-reader'
+import { resetSessionParseCacheForTests } from './session-scanner-parse-cache'
+import { WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS } from '../native-chat/wsl-transcript-fs-gate'
+
+let releaseStall: (() => void) | undefined
+let tempRoot: string | undefined
+
+function stalls(): Promise<never> {
+  return new Promise<never>((resolve) => {
+    releaseStall = () => resolve(undefined as never)
+  })
+}
+
+function userRecord(sessionId: string, text: string): string {
+  return JSON.stringify({
+    type: 'user',
+    sessionId,
+    timestamp: new Date(1740000000000).toISOString(),
+    cwd: '/repo/app',
+    gitBranch: 'main',
+    message: { role: 'user', content: text }
+  })
+}
+
+beforeEach(async () => {
+  resetSessionParseCacheForTests()
+  mocks.lstat.mockReset()
+  releaseStall = undefined
+  tempRoot = await mkdtemp(join(tmpdir(), 'orca-title-stall-'))
+})
+
+afterEach(async () => {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+  if (tempRoot) {
+    await rm(tempRoot, { recursive: true, force: true })
+    tempRoot = undefined
+  }
+})
+
+describe('AI Vault session titles with a stalled WSL transcript lstat', () => {
+  it('drops only the stalled request and still returns the rest of the batch', async () => {
+    const localPath = join(tempRoot!, `${LOCAL_SESSION_ID}.jsonl`)
+    await writeFile(localPath, `${userRecord(LOCAL_SESSION_ID, 'hello world')}\n`)
+    mocks.lstat.mockImplementation(stalls)
+    vi.useFakeTimers()
+
+    const pending = readAiVaultSessionTitlesFromFiles([
+      { agent: 'claude', sessionId: STALLED_SESSION_ID, transcriptPath: UNC_PATH },
+      { agent: 'claude', sessionId: LOCAL_SESSION_ID, transcriptPath: localPath }
+    ])
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS + 1)
+
+    const { titles } = await pending
+    expect(titles).toEqual([{ agent: 'claude', sessionId: LOCAL_SESSION_ID, title: 'hello world' }])
+  })
+})
diff --git a/src/main/ai-vault/session-title-file-reader.ts b/src/main/ai-vault/session-title-file-reader.ts
index 799d2b95da9..15228d132bb 100644
--- a/src/main/ai-vault/session-title-file-reader.ts
+++ b/src/main/ai-vault/session-title-file-reader.ts
@@ -1,4 +1,4 @@
-import { lstat } from 'node:fs/promises'
+import { wslGatedLstat } from '../native-chat/wsl-transcript-fs-access'
 import {
   AI_VAULT_SESSION_TITLE_REQUEST_MAX_COUNT,
   type AiVaultSessionTitle,
@@ -27,7 +27,7 @@ async function readOneTitle(
     return cache?.get(request) ?? null
   }
   try {
-    const stats = await lstat(transcriptPath)
+    const stats = await wslGatedLstat(transcriptPath, 'scan', signal)
     if (!stats.isFile() || signal?.aborted) {
       return null
     }
diff --git a/src/main/ai-vault/session-title-request-paths.ts b/src/main/ai-vault/session-title-request-paths.ts
index 86e78ebc397..5e25e512d92 100644
--- a/src/main/ai-vault/session-title-request-paths.ts
+++ b/src/main/ai-vault/session-title-request-paths.ts
@@ -1,5 +1,6 @@
 import type { AiVaultSessionTitleRequest } from '../../shared/ai-vault-session-title'
 import { toHostReadableTranscriptPath } from '../native-chat/host-readable-transcript-path'
+import { wslTranscriptFsRefusal } from '../native-chat/wsl-transcript-fs-gate'
 
 export function resolveHostReadableAiVaultTitleRequests(
   requests: AiVaultSessionTitleRequest[],
@@ -10,7 +11,15 @@ export function resolveHostReadableAiVaultTitleRequests(
       if (!request.transcriptPath || signal?.aborted) {
         return request
       }
-      const transcriptPath = await toHostReadableTranscriptPath(request.transcriptPath)
+      let transcriptPath: string | null
+      try {
+        transcriptPath = await toHostReadableTranscriptPath(request.transcriptPath)
+      } catch (error) {
+        // Why: one stalled distro's path must not fail the whole titles batch;
+        // degrade to the id-only shape like any unreadable path.
+        void wslTranscriptFsRefusal(error) // rethrows anything that is not a gate refusal
+        transcriptPath = null
+      }
       return transcriptPath && !signal?.aborted
         ? { ...request, transcriptPath }
         : { agent: request.agent, sessionId: request.sessionId }
diff --git a/src/main/attribution/terminal-attribution-path-env-casing.test.ts b/src/main/attribution/terminal-attribution-path-env-casing.test.ts
deleted file mode 100644
index 95ff6fdc2e3..00000000000
--- a/src/main/attribution/terminal-attribution-path-env-casing.test.ts
+++ /dev/null
@@ -1,169 +0,0 @@
-import { mkdtempSync, rmSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { afterEach, describe, expect, it } from 'vitest'
-import { applyTerminalAttributionEnv } from './terminal-attribution'
-
-describe('applyTerminalAttributionEnv PATH key casing', () => {
-  let tmpRoot: string | null = null
-
-  afterEach(() => {
-    if (tmpRoot) {
-      rmSync(tmpRoot, { force: true, recursive: true })
-      tmpRoot = null
-    }
-  })
-
-  function makeTmpRoot(): string {
-    tmpRoot = mkdtempSync(join(tmpdir(), 'orca-attribution-path-casing-'))
-    return tmpRoot
-  }
-
-  // Why: a Windows child that inherits both spellings crashes the packaged orca.exe launcher
-  // with "Item has already been added. Key in dictionary: 'PATH'" (stablyai/orca#12046).
-  function pathEnvKeys(env: Record<string, string>): string[] {
-    return Object.keys(env).filter((key) => /^path$/i.test(key))
-  }
-
-  it('writes back the inherited Windows `Path` spelling instead of adding `PATH`', () => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const baseEnv: Record<string, string> = {
-      Path: 'C:\\Windows\\system32;C:\\Program Files\\Git\\cmd',
-      SystemRoot: 'C:\\Windows'
-    }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      platform: 'win32',
-      shellFamily: 'native-windows',
-      userDataPath
-    })
-
-    const win32Dir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-    const pathEntries = baseEnv.Path.split(';')
-
-    expect(pathEnvKeys(baseEnv)).toEqual(['Path'])
-    expect(pathEntries[0]).toBe(win32Dir)
-    expect(pathEntries).toContain('C:\\Program Files\\Git\\cmd')
-  })
-
-  // Why: Win32 resolves a duplicated variable by taking the first match in the block, so the
-  // shim must land on the first-listed spelling and the shadowed one must keep its value —
-  // dropping it would promote it the moment anything downstream removes the live key.
-  it.each([
-    { first: 'PATH', second: 'Path' },
-    { first: 'Path', second: 'PATH' }
-  ])(
-    'prepends the shim onto the first-listed `$first` and leaves `$second` untouched',
-    ({ first, second }) => {
-      const root = makeTmpRoot()
-      const userDataPath = join(root, 'user-data')
-      const baseEnv: Record<string, string> = {
-        [first]: 'C:\\tools\\bin;C:\\Windows\\system32',
-        [second]: 'C:\\Windows\\system32'
-      }
-
-      applyTerminalAttributionEnv(baseEnv, {
-        enabled: true,
-        platform: 'win32',
-        shellFamily: 'native-windows',
-        userDataPath
-      })
-
-      const win32Dir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-      expect(baseEnv[first].split(';')).toEqual([
-        win32Dir,
-        'C:\\tools\\bin',
-        'C:\\Windows\\system32'
-      ])
-      expect(baseEnv[second]).toBe('C:\\Windows\\system32')
-    }
-  )
-
-  it('keeps a shadowed duplicate when the live spelling strips down to nothing', () => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const shimDir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-    const baseEnv: Record<string, string> = { Path: shimDir, PATH: 'C:\\Windows\\system32' }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: false,
-      platform: 'win32',
-      shellFamily: 'native-windows',
-      userDataPath
-    })
-
-    expect(pathEnvKeys(baseEnv)).toEqual(['PATH'])
-    expect(baseEnv.PATH).toBe('C:\\Windows\\system32')
-  })
-
-  it('strips shim entries from the inherited `Path` when attribution is disabled', () => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const shimDir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-    const baseEnv: Record<string, string> = { Path: `${shimDir};C:\\Windows\\system32` }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: false,
-      platform: 'win32',
-      shellFamily: 'native-windows',
-      userDataPath
-    })
-
-    expect(pathEnvKeys(baseEnv)).toEqual(['Path'])
-    expect(baseEnv.Path).toBe('C:\\Windows\\system32')
-  })
-
-  // Why: the daemon receives a sparse env patch with no path key and re-merges its own block
-  // underneath it, so guessing the spelling here hands the child both.
-  it.each([
-    { hostKey: 'PATH', otherKey: 'Path' },
-    { hostKey: 'Path', otherKey: 'PATH' }
-  ])('adopts a host block spelt `$hostKey` on a path-less env', ({ hostKey, otherKey }) => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const inherited = { PATH: process.env.PATH, Path: process.env.Path }
-    delete process.env.PATH
-    delete process.env.Path
-    process.env[hostKey] = 'C:\\Windows\\system32'
-
-    try {
-      const baseEnv: Record<string, string> = { SystemRoot: 'C:\\Windows' }
-
-      applyTerminalAttributionEnv(baseEnv, {
-        enabled: true,
-        platform: 'win32',
-        shellFamily: 'native-windows',
-        userDataPath
-      })
-
-      expect(pathEnvKeys(baseEnv)).toEqual([hostKey])
-      expect(baseEnv[otherKey]).toBeUndefined()
-    } finally {
-      delete process.env[hostKey]
-      for (const [key, value] of Object.entries(inherited)) {
-        if (value !== undefined) {
-          process.env[key] = value
-        }
-      }
-    }
-  })
-
-  it('leaves a case-sensitive POSIX `Path` variable alone', () => {
-    const root = makeTmpRoot()
-    const baseEnv: Record<string, string> = {
-      PATH: '/usr/bin:/bin',
-      Path: '/decoy'
-    }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      platform: 'linux',
-      userDataPath: join(root, 'user-data')
-    })
-
-    expect(baseEnv.Path).toBe('/decoy')
-    expect(baseEnv.PATH.split(':')).toContain('/usr/bin')
-  })
-})
diff --git a/src/main/attribution/terminal-attribution-win32-dash-argument.test.ts b/src/main/attribution/terminal-attribution-win32-dash-argument.test.ts
deleted file mode 100644
index 810322a53c9..00000000000
--- a/src/main/attribution/terminal-attribution-win32-dash-argument.test.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-import { spawnSync } from 'node:child_process'
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { afterEach, describe, expect, it } from 'vitest'
-import { applyTerminalAttributionEnv } from './terminal-attribution'
-
-// Why (#12046 follow-up): `powershell.exe -File <script> ... -` fails argument
-// binding with PSArgumentException before the script runs, so any command
-// carrying a bare `-` must never be dispatched to the PowerShell wrapper.
-describe('win32 attribution wrappers with a bare `-` argument', () => {
-  let tmpRoot: string | null = null
-
-  afterEach(() => {
-    if (tmpRoot) {
-      rmSync(tmpRoot, { force: true, recursive: true })
-      tmpRoot = null
-    }
-  })
-
-  function shimDir(): string {
-    tmpRoot = mkdtempSync(join(tmpdir(), 'orca-attribution-dash-'))
-    const userDataPath = join(tmpRoot, 'user-data')
-    const baseEnv: Record<string, string> = {
-      Path: 'C:\\Windows\\system32',
-      SystemRoot: 'C:\\Windows'
-    }
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      platform: 'win32',
-      shellFamily: 'native-windows',
-      userDataPath
-    })
-    return join(userDataPath, 'orca-terminal-attribution', 'win32')
-  }
-
-  it('guards the git PowerShell dispatch behind a bare-dash check', () => {
-    const wrapper = readFileSync(join(shimDir(), 'git.cmd'), 'utf8')
-    const guardAt = wrapper.indexOf('call :orca_has_bare_dash %*')
-    const dispatchAt = wrapper.indexOf('powershell.exe')
-
-    expect(guardAt).toBeGreaterThan(-1)
-    expect(guardAt).toBeLessThan(dispatchAt)
-    expect(wrapper).toContain('if not errorlevel 1 goto run')
-    expect(wrapper).toContain(':orca_has_bare_dash')
-    expect(wrapper).toContain('if "%~1"=="-" exit /b 0')
-  })
-
-  it('guards the gh PowerShell dispatch behind a bare-dash check', () => {
-    const wrapper = readFileSync(join(shimDir(), 'gh.cmd'), 'utf8')
-    const guardAt = wrapper.indexOf('call :orca_has_bare_dash %*')
-    const dispatchAt = wrapper.indexOf('powershell.exe')
-
-    expect(guardAt).toBeGreaterThan(-1)
-    expect(guardAt).toBeLessThan(dispatchAt)
-    expect(wrapper).toContain(':orca_has_bare_dash')
-  })
-
-  const itWindows = process.platform === 'win32' ? it : it.skip
-
-  // Why: the guard exists for a runtime failure, so the real regression is a
-  // real `git commit -F -` through the generated wrapper on a real Windows host.
-  itWindows('commits a message piped through `git commit -F -`', () => {
-    const dir = shimDir()
-    const gitCmd = join(dir, 'git.cmd')
-    const repo = mkdtempSync(join(tmpdir(), 'orca-attribution-dash-repo-'))
-    try {
-      const git = (...args: string[]): void => {
-        spawnSync('git', args, { cwd: repo, encoding: 'utf8' })
-      }
-      git('init', '-q', '-b', 'main')
-      git('config', 'user.email', 'test@example.com')
-      git('config', 'user.name', 'Test')
-      writeFileSync(join(repo, 'a.txt'), 'hello\n')
-      git('add', '.')
-
-      const env = {
-        ...process.env,
-        ORCA_ENABLE_GIT_ATTRIBUTION: '1',
-        ORCA_REAL_GIT: spawnSync('where', ['git.exe'], { encoding: 'utf8' }).stdout.split(
-          /\r?\n/
-        )[0]
-      }
-      const result = spawnSync('cmd.exe', ['/d', '/c', gitCmd, 'commit', '-F', '-'], {
-        cwd: repo,
-        env,
-        input: 'piped subject\n',
-        encoding: 'utf8'
-      })
-
-      expect(result.stderr).not.toContain('PSArgumentException')
-      expect(result.status).toBe(0)
-      expect(
-        spawnSync('git', ['log', '-1', '--format=%B'], { cwd: repo, encoding: 'utf8' }).stdout
-      ).toContain('piped subject')
-    } finally {
-      rmSync(repo, { force: true, recursive: true })
-    }
-  })
-})
diff --git a/src/main/attribution/terminal-attribution.test.ts b/src/main/attribution/terminal-attribution.test.ts
deleted file mode 100644
index 86096168f0c..00000000000
--- a/src/main/attribution/terminal-attribution.test.ts
+++ /dev/null
@@ -1,824 +0,0 @@
-import { execFileSync } from 'node:child_process'
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  mkdtempSync,
-  readFileSync,
-  rmSync,
-  writeFileSync
-} from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { afterEach, describe, expect, it } from 'vitest'
-import { applyTerminalAttributionEnv, resolveAttributionShellFamily } from './terminal-attribution'
-
-describe('applyTerminalAttributionEnv', () => {
-  let tmpRoot: string | null = null
-  // Why: these subprocess fixtures create extensionless Bash fake commands;
-  // native Windows command resolution is covered by wrapper/PATH assertions below.
-  const posixSubprocessIt = process.platform === 'win32' ? it.skip : it
-
-  afterEach(() => {
-    if (tmpRoot) {
-      rmSync(tmpRoot, { force: true, recursive: true })
-      tmpRoot = null
-    }
-  })
-
-  function makeTmpRoot(): string {
-    tmpRoot = mkdtempSync(join(tmpdir(), 'orca-attribution-'))
-    return tmpRoot
-  }
-
-  function stripInheritedAttributionPath(pathValue: string): string {
-    const pathDelimiter = process.platform === 'win32' ? ';' : ':'
-    return pathValue
-      .split(pathDelimiter)
-      .filter((entry) => !entry.includes('orca-terminal-attribution'))
-      .join(pathDelimiter)
-  }
-
-  function cleanAttributionEnv(env?: Record<string, string>): Record<string, string> {
-    const base = { ...process.env }
-    delete base.ORCA_ENABLE_GIT_ATTRIBUTION
-    delete base.ORCA_GIT_COMMIT_TRAILER
-    delete base.ORCA_GH_PR_FOOTER
-    delete base.ORCA_GH_ISSUE_FOOTER
-    delete base.ORCA_ATTRIBUTION_SHIM_DIR
-    delete base.ORCA_REAL_GIT
-    delete base.ORCA_REAL_GH
-    base.PATH = stripInheritedAttributionPath(base.PATH ?? '')
-    const next = { ...base, ...env }
-    return next as Record<string, string>
-  }
-
-  function runGit(repo: string, args: string[], env?: Record<string, string>): string {
-    return execFileSync('git', args, {
-      cwd: repo,
-      encoding: 'utf8',
-      env: cleanAttributionEnv(env)
-    })
-  }
-
-  it('classifies Windows native and POSIX shell families for attribution shims', () => {
-    expect(resolveAttributionShellFamily({ platform: 'win32', shellPath: 'powershell.exe' })).toBe(
-      'native-windows'
-    )
-    expect(resolveAttributionShellFamily({ platform: 'win32', shellPath: 'cmd.exe' })).toBe(
-      'native-windows'
-    )
-    expect(
-      resolveAttributionShellFamily({
-        platform: 'win32',
-        shellPath: 'C:\\Program Files\\Git\\bin\\bash.exe'
-      })
-    ).toBe('posix')
-    expect(resolveAttributionShellFamily({ platform: 'win32', shellPath: 'wsl.exe' })).toBe('posix')
-    expect(resolveAttributionShellFamily({ platform: 'win32', isWsl: true })).toBe('posix')
-    expect(resolveAttributionShellFamily({ platform: 'darwin', shellPath: '/bin/zsh' })).toBe(
-      undefined
-    )
-  })
-
-  posixSubprocessIt('does not amend HEAD when git commit --dry-run exits successfully', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    runGit(repo, ['add', 'README.md'])
-    runGit(repo, ['commit', '-m', 'initial'])
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-    const beforeHead = runGit(repo, ['rev-parse', 'HEAD']).trim()
-    writeFileSync(join(repo, 'second.txt'), 'second\n')
-    runGit(repo, ['add', 'second.txt'])
-
-    // Why: dry-run reports what would be committed but must not rewrite the
-    // existing HEAD just because the real git command returns success.
-    runGit(repo, ['commit', '--dry-run', '-m', 'second'], attributionEnv)
-
-    expect(runGit(repo, ['rev-parse', 'HEAD']).trim()).toBe(beforeHead)
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).not.toContain('Co-authored-by: Orca')
-
-    runGit(repo, ['commit', '-m', 'second'], attributionEnv)
-    expect(runGit(repo, ['rev-parse', 'HEAD']).trim()).not.toBe(beforeHead)
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-  })
-
-  posixSubprocessIt('still adds the trailer when git commit uses --no-verify shorthand', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    runGit(repo, ['add', 'README.md'])
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    runGit(repo, ['commit', '-n', '-m', 'initial'], attributionEnv)
-
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-  })
-
-  posixSubprocessIt('adds the trailer when git commit uses combined -am shorthand', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    runGit(repo, ['add', 'README.md'])
-    runGit(repo, ['commit', '-m', 'initial'])
-    writeFileSync(join(repo, 'README.md'), 'changed\n')
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    runGit(repo, ['commit', '-am', 'combined message'], attributionEnv)
-
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-  })
-
-  posixSubprocessIt('adds the trailer when git commit follows global git config args', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    runGit(repo, ['add', 'README.md'])
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    runGit(repo, ['-c', 'core.quotePath=false', 'commit', '-m', 'initial'], attributionEnv)
-
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-  })
-
-  posixSubprocessIt('adds the trailer to commit message files before git runs', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    const messagePath = join(root, 'message.txt')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    writeFileSync(messagePath, 'initial from file\n')
-    runGit(repo, ['add', 'README.md'])
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    runGit(repo, ['commit', '-F', messagePath], attributionEnv)
-
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-    expect(readFileSync(messagePath, 'utf8')).toBe('initial from file\n')
-  })
-
-  posixSubprocessIt(
-    'passes missing commit message files through without adding fallback message args',
-    () => {
-      const root = makeTmpRoot()
-      const binDir = join(root, 'bin')
-      const argsPath = join(root, 'commit-args')
-      mkdirSync(binDir)
-      writeFileSync(
-        join(binDir, 'git'),
-        `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1" == "commit" ]]; then
-  printf '%s\\n' "$@" >"${argsPath}"
-  exit 9
-fi
-exit 1
-`,
-        'utf8'
-      )
-      chmodSync(join(binDir, 'git'), 0o755)
-
-      const attributionEnv = {
-        PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-      }
-      applyTerminalAttributionEnv(attributionEnv, {
-        enabled: true,
-        userDataPath: join(root, 'user-data')
-      })
-
-      expect(() =>
-        execFileSync('git', ['commit', '-F', join(root, 'missing-message.txt')], {
-          encoding: 'utf8',
-          env: cleanAttributionEnv(attributionEnv)
-        })
-      ).toThrow()
-
-      expect(readFileSync(argsPath, 'utf8')).not.toContain('Co-authored-by: Orca')
-    }
-  )
-
-  posixSubprocessIt(
-    'passes reuse and fixup commit message modes through without attribution',
-    () => {
-      const root = makeTmpRoot()
-      const binDir = join(root, 'bin')
-      const argsPath = join(root, 'commit-args')
-      const messagePath = join(root, 'message.txt')
-      mkdirSync(binDir)
-      writeFileSync(messagePath, 'from file\n')
-      writeFileSync(
-        join(binDir, 'git'),
-        `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1" == "commit" ]]; then
-  printf '%s\\n' "$@" >>"${argsPath}"
-  exit 0
-fi
-exit 1
-`,
-        'utf8'
-      )
-      chmodSync(join(binDir, 'git'), 0o755)
-
-      const attributionEnv = {
-        PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-      }
-      applyTerminalAttributionEnv(attributionEnv, {
-        enabled: true,
-        userDataPath: join(root, 'user-data')
-      })
-
-      execFileSync('git', ['commit', '-C', 'HEAD'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-      execFileSync('git', ['commit', '--fixup', 'HEAD'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-      execFileSync('git', ['commit', '-F', messagePath, '--fixup', 'HEAD'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-
-      expect(readFileSync(argsPath, 'utf8')).not.toContain('Co-authored-by: Orca')
-    }
-  )
-
-  posixSubprocessIt('adds the trailer before commit-msg hooks validate the commit', () => {
-    const root = makeTmpRoot()
-    const repo = join(root, 'repo')
-    mkdirSync(repo)
-    runGit(repo, ['init'])
-    runGit(repo, ['config', 'user.name', 'Orca Test'])
-    runGit(repo, ['config', 'user.email', 'orca-test@example.com'])
-    const hookPath = join(repo, '.git', 'hooks', 'commit-msg')
-    const hookCounterPath = join(repo, 'hook-count')
-    writeFileSync(
-      hookPath,
-      `#!/usr/bin/env bash
-set -euo pipefail
-count=0
-if [[ -f "${hookCounterPath}" ]]; then
-  count="$(cat "${hookCounterPath}")"
-fi
-printf '%s\\n' "$((count + 1))" >"${hookCounterPath}"
-grep -Fq 'Co-authored-by: Orca <help@stably.ai>' "$1"
-`,
-      'utf8'
-    )
-    chmodSync(hookPath, 0o755)
-    writeFileSync(join(repo, 'README.md'), 'initial\n')
-    runGit(repo, ['add', 'README.md'])
-
-    const attributionEnv = { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    runGit(repo, ['commit', '-m', 'initial'], attributionEnv)
-
-    expect(readFileSync(hookCounterPath, 'utf8').trim()).toBe('1')
-    expect(runGit(repo, ['log', '-1', '--format=%B'])).toContain(
-      'Co-authored-by: Orca <help@stably.ai>'
-    )
-  })
-
-  posixSubprocessIt('adds git attribution to the original commit command without amending', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const commitPath = join(root, 'commit-called')
-    const amendPath = join(root, 'amend-called')
-    const argsPath = join(root, 'commit-args')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'git'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2 $3" == "config --bool commit.gpgsign" ]]; then
-  printf '%s\\n' 'true'
-  exit 0
-fi
-if [[ "$1" == "commit" ]]; then
-  if [[ "\${2:-}" == "--amend" ]]; then
-    touch "${amendPath}"
-  else
-    printf '%s\\n' "$@" >"${argsPath}"
-    touch "${commitPath}"
-  fi
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'git'), 0o755)
-
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    execFileSync('git', ['commit', '-m', 'signed commit'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(existsSync(commitPath)).toBe(true)
-    expect(existsSync(amendPath)).toBe(false)
-    expect(readFileSync(argsPath, 'utf8')).toContain('Co-authored-by: Orca <help@stably.ai>')
-  })
-
-  posixSubprocessIt('passes editor-based commits through without attribution', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const argsPath = join(root, 'commit-args')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'git'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1" == "commit" ]]; then
-  printf '%s\\n' "$@" >"${argsPath}"
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'git'), 0o755)
-
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    execFileSync('git', ['commit'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(readFileSync(argsPath, 'utf8')).toBe('commit\n')
-  })
-
-  posixSubprocessIt('preserves interactive gh pr create without guessing which PR to edit', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const markerPath = join(root, 'gh-edit-called')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'gh'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2" == "pr create" ]]; then
-  printf '%s\\n' 'interactive create complete'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "pr view --json url" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/pull/123'
-  exit 0
-fi
-if [[ "$1 $2" == "api repos/stablyai/orca/pulls/123" && "\${3:-}" == "--jq" ]]; then
-  printf '%s\\n' 'Existing body'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/pulls/123" ]]; then
-  touch "${markerPath}"
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'gh'), 0o755)
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    const output = execFileSync('gh', ['pr', 'create'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(output).toBe('interactive create complete\n')
-    expect(existsSync(markerPath)).toBe(false)
-  })
-
-  posixSubprocessIt('adds gh attribution for noninteractive create output URLs', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const prMarkerPath = join(root, 'pr-edit-called')
-    const issueMarkerPath = join(root, 'issue-edit-called')
-    const patchArgsPath = join(root, 'patch-args')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'gh'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2" == "pr create" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/pull/123'
-  exit 0
-fi
-if [[ "$1 $2" == "issue create" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/issues/456'
-  exit 0
-fi
-if [[ "$1 $2" == "api repos/stablyai/orca/pulls/123" && "\${3:-}" == "--jq" ]]; then
-  printf '%s\\n' 'PR body'
-  exit 0
-fi
-if [[ "$1 $2" == "api repos/stablyai/orca/issues/456" && "\${3:-}" == "--jq" ]]; then
-  printf '%s\\n' 'Issue body'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/pulls/123" ]]; then
-  printf '%s\\n' "$@" >"${patchArgsPath}"
-  touch "${prMarkerPath}"
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/issues/456" ]]; then
-  touch "${issueMarkerPath}"
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'gh'), 0o755)
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    expect(
-      execFileSync('gh', ['pr', 'create', '--fill'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-    ).toBe('https://github.com/stablyai/orca/pull/123\n')
-    expect(
-      execFileSync('gh', ['issue', 'create', '--title', 'Issue', '--body', 'Body'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-    ).toBe('https://github.com/stablyai/orca/issues/456\n')
-
-    expect(existsSync(prMarkerPath)).toBe(true)
-    expect(existsSync(issueMarkerPath)).toBe(true)
-    expect(readFileSync(patchArgsPath, 'utf8')).toContain('body=@')
-    expect(readFileSync(patchArgsPath, 'utf8')).not.toContain('PR body')
-  })
-
-  posixSubprocessIt('passes gh create help through without editing existing PRs or issues', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const markerPath = join(root, 'gh-edit-called')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'gh'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2 $3" == "pr create --help" ]]; then
-  printf '%s\\n' 'pr help'
-  exit 0
-fi
-if [[ "$1 $2 $3" == "issue create --help" ]]; then
-  printf '%s\\n' 'issue help'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "pr view --json url" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/pull/123'
-  exit 0
-fi
-if [[ "$1 $2" == "issue list" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/issues/456'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/pulls/123" ]]; then
-  touch "${markerPath}"
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/issues/456" ]]; then
-  touch "${markerPath}"
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'gh'), 0o755)
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    const output = execFileSync('gh', ['pr', 'create', '--help'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(output).toBe('pr help\n')
-    const issueOutput = execFileSync('gh', ['issue', 'create', '--help'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(issueOutput).toBe('issue help\n')
-    expect(existsSync(markerPath)).toBe(false)
-  })
-
-  posixSubprocessIt(
-    'preserves interactive gh issue create without guessing which issue to edit',
-    () => {
-      const root = makeTmpRoot()
-      const binDir = join(root, 'bin')
-      const markerPath = join(root, 'gh-edit-called')
-      mkdirSync(binDir)
-      writeFileSync(
-        join(binDir, 'gh'),
-        `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2" == "issue create" ]]; then
-  printf '%s\\n' 'interactive issue create complete'
-  exit 0
-fi
-if [[ "$1 $2" == "issue list" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/issues/456'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/issues/456" ]]; then
-  touch "${markerPath}"
-  exit 0
-fi
-exit 1
-`,
-        'utf8'
-      )
-      chmodSync(join(binDir, 'gh'), 0o755)
-      const attributionEnv = {
-        PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-      }
-      applyTerminalAttributionEnv(attributionEnv, {
-        enabled: true,
-        userDataPath: join(root, 'user-data')
-      })
-
-      const output = execFileSync('gh', ['issue', 'create'], {
-        encoding: 'utf8',
-        env: cleanAttributionEnv(attributionEnv)
-      })
-
-      expect(output).toBe('interactive issue create complete\n')
-      expect(existsSync(markerPath)).toBe(false)
-    }
-  )
-
-  posixSubprocessIt('skips gh attribution edits when viewing the created item fails', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    const markerPath = join(root, 'gh-edit-called')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'gh'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2" == "pr create" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/pull/123'
-  exit 0
-fi
-if [[ "$1 $2" == "api repos/stablyai/orca/pulls/123" && "\${3:-}" == "--jq" ]]; then
-  exit 7
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/pulls/123" ]]; then
-  touch "${markerPath}"
-  exit 0
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'gh'), 0o755)
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    const output = execFileSync('gh', ['pr', 'create', '--fill'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(output).toBe('https://github.com/stablyai/orca/pull/123\n')
-    expect(existsSync(markerPath)).toBe(false)
-  })
-
-  posixSubprocessIt('keeps gh create successful when the attribution edit fails', () => {
-    const root = makeTmpRoot()
-    const binDir = join(root, 'bin')
-    mkdirSync(binDir)
-    writeFileSync(
-      join(binDir, 'gh'),
-      `#!/usr/bin/env bash
-set -euo pipefail
-if [[ "$1 $2" == "pr create" ]]; then
-  printf '%s\\n' 'https://github.com/stablyai/orca/pull/123'
-  exit 0
-fi
-if [[ "$1 $2" == "api repos/stablyai/orca/pulls/123" && "\${3:-}" == "--jq" ]]; then
-  printf '%s\\n' 'Existing body'
-  exit 0
-fi
-if [[ "$1 $2 $3 $4" == "api -X PATCH repos/stablyai/orca/pulls/123" ]]; then
-  exit 9
-fi
-exit 1
-`,
-      'utf8'
-    )
-    chmodSync(join(binDir, 'gh'), 0o755)
-    const attributionEnv = {
-      PATH: `${binDir}:${stripInheritedAttributionPath(process.env.PATH ?? '')}`
-    }
-    applyTerminalAttributionEnv(attributionEnv, {
-      enabled: true,
-      userDataPath: join(root, 'user-data')
-    })
-
-    const output = execFileSync('gh', ['pr', 'create', '--fill'], {
-      encoding: 'utf8',
-      env: cleanAttributionEnv(attributionEnv)
-    })
-
-    expect(output).toBe('https://github.com/stablyai/orca/pull/123\n')
-  })
-
-  it('fails open when shim files cannot be written', () => {
-    const root = makeTmpRoot()
-    const blockedUserDataPath = join(root, 'not-a-directory')
-    writeFileSync(blockedUserDataPath, 'blocked\n')
-    const baseEnv: Record<string, string> = { PATH: '/usr/bin' }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      userDataPath: blockedUserDataPath
-    })
-
-    expect(baseEnv.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
-    expect(baseEnv.PATH).toBe('/usr/bin')
-  })
-
-  it('does not duplicate shim directories when applied to an already-injected env', () => {
-    const root = makeTmpRoot()
-    const baseEnv: Record<string, string> = {
-      PATH: stripInheritedAttributionPath(process.env.PATH ?? '')
-    }
-    const options = { enabled: true, userDataPath: join(root, 'user-data') }
-    const pathDelimiter = process.platform === 'win32' ? ';' : ':'
-
-    applyTerminalAttributionEnv(baseEnv, options)
-    applyTerminalAttributionEnv(baseEnv, options)
-
-    const shimEntries = baseEnv.PATH.split(pathDelimiter).filter((entry) =>
-      entry.includes('orca-terminal-attribution')
-    )
-    expect(new Set(shimEntries).size).toBe(shimEntries.length)
-  })
-
-  it('puts only Windows shims on PATH for native Windows shells', () => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const baseEnv: Record<string, string> = { PATH: 'C:\\Git\\cmd;C:\\Windows\\System32' }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      platform: 'win32',
-      shellFamily: 'native-windows',
-      userDataPath
-    })
-
-    const posixDir = join(userDataPath, 'orca-terminal-attribution', 'posix')
-    const win32Dir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-    const pathEntries = baseEnv.PATH.split(';')
-
-    expect(pathEntries[0]).toBe(win32Dir)
-    expect(pathEntries).not.toContain(posixDir)
-    expect(baseEnv.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
-    expect(existsSync(join(win32Dir, 'git.cmd'))).toBe(true)
-  })
-
-  it('keeps POSIX shims first for Windows Git Bash and WSL shells', () => {
-    const root = makeTmpRoot()
-    const userDataPath = join(root, 'user-data')
-    const baseEnv: Record<string, string> = { PATH: 'C:\\Program Files\\Git\\cmd;C:\\Windows' }
-
-    applyTerminalAttributionEnv(baseEnv, {
-      enabled: true,
-      platform: 'win32',
-      shellFamily: 'posix',
-      userDataPath
-    })
-
-    const posixDir = join(userDataPath, 'orca-terminal-attribution', 'posix')
-    const win32Dir = join(userDataPath, 'orca-terminal-attribution', 'win32')
-    const pathEntries = baseEnv.PATH.split(';')
-
-    expect(pathEntries[0]).toBe(posixDir)
-    expect(pathEntries).not.toContain(win32Dir)
-    expect(baseEnv.ORCA_ATTRIBUTION_SHIM_DIR).toBe(posixDir)
-    expect(existsSync(join(posixDir, 'git'))).toBe(true)
-  })
-
-  it('writes PowerShell wrappers without raw-template backslash escapes', () => {
-    const root = makeTmpRoot()
-    applyTerminalAttributionEnv(
-      { PATH: stripInheritedAttributionPath(process.env.PATH ?? '') },
-      { enabled: true, userDataPath: join(root, 'user-data') }
-    )
-
-    const shimDir = join(root, 'user-data', 'orca-terminal-attribution', 'win32')
-    const gitWrapper = readFileSync(join(shimDir, 'git-wrapper.ps1'), 'utf8')
-    const ghWrapper = readFileSync(join(shimDir, 'gh-wrapper.ps1'), 'utf8')
-
-    expect(gitWrapper).toContain('Test-ExplicitCommitMessage')
-    expect(gitWrapper).toContain('"`r`n`r`n"')
-    expect(ghWrapper).toContain('$body.TrimEnd("`r", "`n")')
-    expect(ghWrapper).toContain('"`r`n`r`n"')
-    expect(gitWrapper).not.toContain('"\\`r"')
-    expect(ghWrapper).not.toContain('"\\`r"')
-  })
-})
diff --git a/src/main/attribution/terminal-attribution.ts b/src/main/attribution/terminal-attribution.ts
deleted file mode 100644
index cfeef746dbf..00000000000
--- a/src/main/attribution/terminal-attribution.ts
+++ /dev/null
@@ -1,1058 +0,0 @@
-/* eslint-disable max-lines -- Why: this module owns the generated git/gh wrapper
-scripts for both POSIX shells and Windows shells. Keeping the scripts adjacent
-to the env injection code makes the attribution behavior auditable as one unit
-instead of scattering generated shell fragments across files. */
-import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
-import { join, win32 as pathWin32 } from 'node:path'
-import { ORCA_GIT_COMMIT_TRAILER } from '../../shared/orca-attribution'
-import { resolvePathEnvKey } from '../pty/windows-environment-path'
-
-const ATTRIBUTION_ROOT_DIR = 'orca-terminal-attribution'
-const ATTRIBUTION_SHIM_VERSION = '7'
-const ORCA_PRODUCT_URL = 'https://github.com/stablyai/orca'
-const ORCA_GH_FOOTER = `Made with [Orca](${ORCA_PRODUCT_URL}) 🐋`
-const SHELL_DOLLAR = '$'
-const POWERSHELL_TICK = '`'
-const ATTRIBUTION_ENV_KEYS = [
-  'ORCA_ENABLE_GIT_ATTRIBUTION',
-  'ORCA_GIT_COMMIT_TRAILER',
-  'ORCA_GH_PR_FOOTER',
-  'ORCA_GH_ISSUE_FOOTER',
-  'ORCA_ATTRIBUTION_SHIM_DIR',
-  'ORCA_REAL_GIT',
-  'ORCA_REAL_GH'
-] as const
-
-const writtenRoots = new Set<string>()
-
-type AttributionShimPaths = {
-  posixDir: string
-  win32Dir: string
-}
-
-export type AttributionShellFamily = 'native-windows' | 'posix'
-
-export function resolveAttributionShellFamily(options: {
-  platform?: NodeJS.Platform
-  shellPath?: string
-  isWsl?: boolean
-}): AttributionShellFamily | undefined {
-  const platform = options.platform ?? process.platform
-  if (platform !== 'win32') {
-    return undefined
-  }
-  const shellName = options.shellPath?.replaceAll('\\', '/').split('/').pop()?.toLowerCase()
-  if (options.isWsl || shellName === 'wsl.exe' || shellName === 'wsl') {
-    return 'posix'
-  }
-  if (shellName === 'bash.exe' || shellName === 'sh.exe' || shellName === 'zsh.exe') {
-    return 'posix'
-  }
-  return 'native-windows'
-}
-
-export function applyTerminalAttributionEnv(
-  baseEnv: Record<string, string>,
-  options: {
-    enabled: boolean
-    userDataPath: string
-    platform?: NodeJS.Platform
-    shellFamily?: AttributionShellFamily
-  }
-): void {
-  const platform = options.platform ?? process.platform
-  if (!options.enabled) {
-    clearTerminalAttributionEnv(baseEnv, platform)
-    return
-  }
-
-  let shimPaths: AttributionShimPaths
-  try {
-    shimPaths = ensureAttributionShims(options.userDataPath)
-  } catch {
-    return
-  }
-
-  const pathDelimiter = platform === 'win32' ? ';' : ':'
-  const pathKey = resolvePathEnvKey(baseEnv, platform)
-  const basePath = baseEnv[pathKey] ?? process.env[pathKey] ?? ''
-  // Why: resolve real Windows commands before prepending shims so cmd wrappers
-  // cannot recursively point ORCA_REAL_* at themselves.
-  const resolvedGit = platform === 'win32' ? resolveWindowsExecutable('git', basePath) : null
-  const resolvedGh = platform === 'win32' ? resolveWindowsExecutable('gh', basePath) : null
-  const { posixDir, win32Dir } = shimPaths
-  const shellFamily = options.shellFamily ?? (platform === 'win32' ? 'native-windows' : 'posix')
-  // Why: Windows native shells can try to open extensionless POSIX shims before
-  // PATHEXT reaches git.cmd, which surfaces an "Open With" dialog.
-  const prependDirs =
-    platform === 'win32' && shellFamily === 'native-windows' ? [win32Dir] : [posixDir]
-  const prependDirKeys = new Set(
-    prependDirs.map((dir) => (platform === 'win32' ? dir.toLowerCase() : dir))
-  )
-  const cleanedBasePath = stripAttributionPathEntries(basePath, pathDelimiter)
-    .split(pathDelimiter)
-    .filter((entry) => {
-      if (!entry) {
-        return false
-      }
-      const key = platform === 'win32' ? entry.toLowerCase() : entry
-      return !prependDirKeys.has(key)
-    })
-    .join(pathDelimiter)
-
-  // Why: these wrappers should affect only Orca-managed PTYs. Prepending the
-  // shim directory here keeps the attribution behavior scoped to Orca's live
-  // terminal environment instead of mutating global git/gh config or the
-  // user's external shell PATH.
-  baseEnv[pathKey] = [...prependDirs, cleanedBasePath].filter(Boolean).join(pathDelimiter)
-  baseEnv.ORCA_ENABLE_GIT_ATTRIBUTION = '1'
-  baseEnv.ORCA_GIT_COMMIT_TRAILER = ORCA_GIT_COMMIT_TRAILER
-  baseEnv.ORCA_GH_PR_FOOTER = ORCA_GH_FOOTER
-  baseEnv.ORCA_GH_ISSUE_FOOTER = ORCA_GH_FOOTER
-  if (shellFamily === 'posix') {
-    baseEnv.ORCA_ATTRIBUTION_SHIM_DIR = posixDir
-  } else {
-    delete baseEnv.ORCA_ATTRIBUTION_SHIM_DIR
-  }
-
-  if (platform === 'win32') {
-    if (resolvedGit) {
-      baseEnv.ORCA_REAL_GIT = resolvedGit
-    }
-    if (resolvedGh) {
-      baseEnv.ORCA_REAL_GH = resolvedGh
-    }
-  }
-}
-
-function clearTerminalAttributionEnv(
-  baseEnv: Record<string, string>,
-  platform: NodeJS.Platform
-): void {
-  for (const key of ATTRIBUTION_ENV_KEYS) {
-    delete baseEnv[key]
-  }
-  const pathDelimiter = platform === 'win32' ? ';' : ':'
-  const pathKey = resolvePathEnvKey(baseEnv, platform)
-  const cleanedPath = stripAttributionPathEntries(baseEnv[pathKey] ?? '', pathDelimiter)
-  if (cleanedPath) {
-    baseEnv[pathKey] = cleanedPath
-  } else {
-    delete baseEnv[pathKey]
-  }
-}
-
-function stripAttributionPathEntries(pathValue: string, pathDelimiter: string): string {
-  return pathValue
-    .split(pathDelimiter)
-    .filter((entry) => {
-      const normalized = entry.replace(/\\/g, '/').toLowerCase()
-      return !normalized.includes('/orca-terminal-attribution/')
-    })
-    .join(pathDelimiter)
-}
-
-function ensureAttributionShims(userDataPath: string): AttributionShimPaths {
-  const rootDir = join(userDataPath, ATTRIBUTION_ROOT_DIR)
-  const posixDir = join(rootDir, 'posix')
-  const win32Dir = join(rootDir, 'win32')
-  const versionFile = join(rootDir, 'VERSION')
-
-  if (writtenRoots.has(rootDir)) {
-    return { posixDir, win32Dir }
-  }
-
-  if (readShimVersion(versionFile) === ATTRIBUTION_SHIM_VERSION) {
-    writtenRoots.add(rootDir)
-    return { posixDir, win32Dir }
-  }
-
-  mkdirSync(posixDir, { recursive: true })
-  mkdirSync(win32Dir, { recursive: true })
-
-  writeExecutable(join(posixDir, 'git'), POSIX_GIT_WRAPPER)
-  writeExecutable(join(posixDir, 'gh'), POSIX_GH_WRAPPER)
-
-  writeExecutable(join(win32Dir, 'git.cmd'), WIN32_GIT_CMD_WRAPPER)
-  writeExecutable(join(win32Dir, 'gh.cmd'), WIN32_GH_CMD_WRAPPER)
-  writeExecutable(join(win32Dir, 'git-wrapper.ps1'), WIN32_GIT_PS_WRAPPER)
-  writeExecutable(join(win32Dir, 'gh-wrapper.ps1'), WIN32_GH_PS_WRAPPER)
-  writeFileSync(versionFile, `${ATTRIBUTION_SHIM_VERSION}\n`, 'utf8')
-
-  writtenRoots.add(rootDir)
-
-  return { posixDir, win32Dir }
-}
-
-function readShimVersion(versionFile: string): string | null {
-  try {
-    return readFileSync(versionFile, 'utf8').trim()
-  } catch {
-    return null
-  }
-}
-
-function writeExecutable(filePath: string, contents: string): void {
-  writeFileSync(filePath, contents, 'utf8')
-  chmodSync(filePath, 0o755)
-}
-
-function resolveWindowsExecutable(command: string, pathValue: string): string | null {
-  const pathExt = (process.env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD')
-    .split(';')
-    .map((ext) => ext.toLowerCase())
-  const searchDirs = pathValue.split(';').filter(Boolean)
-
-  for (const dir of searchDirs) {
-    for (const ext of pathExt) {
-      const candidate = pathWin32.join(dir, `${command}${ext}`)
-      if (existsSync(candidate)) {
-        return candidate
-      }
-    }
-    const bareCandidate = pathWin32.join(dir, command)
-    if (existsSync(bareCandidate)) {
-      return bareCandidate
-    }
-  }
-
-  return null
-}
-
-const POSIX_COMMON = String.raw`#!/usr/bin/env bash
-set -euo pipefail
-
-clean_path() {
-  local current_path="${SHELL_DOLLAR}{PATH:-}"
-  local script_dir
-  script_dir="$(cd -- "$(dirname "${SHELL_DOLLAR}{BASH_SOURCE[0]}")" && pwd)"
-  local cleaned=()
-  local entry
-  IFS=':' read -r -a entries <<<"$current_path"
-  for entry in "${SHELL_DOLLAR}{entries[@]}"; do
-    case "$entry" in
-      "$script_dir"|*/orca-terminal-attribution/posix|*/orca-terminal-attribution/win32|*\\orca-terminal-attribution\\posix|*\\orca-terminal-attribution\\win32)
-        ;;
-      *)
-        cleaned+=("$entry")
-        ;;
-    esac
-  done
-  (IFS=':'; printf '%s' "${SHELL_DOLLAR}{cleaned[*]:-}")
-}
-`
-
-const POSIX_GIT_WRAPPER = `${POSIX_COMMON}
-real_path="$(clean_path)"
-real_git="$(PATH="$real_path" command -v git || true)"
-if [[ -z "$real_git" ]]; then
-  echo "Orca attribution wrapper could not locate git on PATH." >&2
-  exit 127
-fi
-
-is_commit_command() {
-  while [[ $# -gt 0 ]]; do
-    case "$1" in
-      -c|--config|-C|--git-dir|--work-tree|--namespace)
-        shift 2
-        ;;
-      --config=*|--git-dir=*|--work-tree=*|--namespace=*)
-        shift
-        ;;
-      commit)
-        return 0
-        ;;
-      -*)
-        shift
-        ;;
-      *)
-        return 1
-        ;;
-    esac
-  done
-  return 1
-}
-
-if [[ "\${ORCA_ENABLE_GIT_ATTRIBUTION:-0}" != "1" || "\${ORCA_ATTRIBUTION_BYPASS:-0}" == "1" ]] || ! is_commit_command "$@"; then
-  PATH="$real_path" exec "$real_git" "$@"
-fi
-
-for arg in "$@"; do
-  case "$arg" in
-    --dry-run)
-      PATH="$real_path" exec "$real_git" "$@"
-      ;;
-  esac
-done
-
-trailer="\${ORCA_GIT_COMMIT_TRAILER:-Co-authored-by: Orca <help@stably.ai>}"
-
-has_explicit_commit_message() {
-  local arg
-  while [[ $# -gt 0 ]]; do
-    arg="$1"
-    case "$arg" in
-      -m|--message|-F|--file)
-        return 0
-        ;;
-      --message=*|--file=*|-[!-]*m|-m?*|-F?*)
-        return 0
-        ;;
-    esac
-    shift
-  done
-  return 1
-}
-
-has_unsupported_commit_message_source() {
-  local arg next_arg
-  local saw_commit=0
-  while [[ $# -gt 0 ]]; do
-    arg="$1"
-    if [[ $saw_commit -eq 0 ]]; then
-      case "$arg" in
-        -c|--config|-C|--git-dir|--work-tree|--namespace)
-          shift 2
-          continue
-          ;;
-        --config=*|--git-dir=*|--work-tree=*|--namespace=*)
-          shift
-          continue
-          ;;
-        commit)
-          saw_commit=1
-          shift
-          continue
-          ;;
-      esac
-    fi
-    case "$arg" in
-      -C|--reuse-message|-c|--reedit-message|--fixup|--squash)
-        return 0
-        ;;
-      -F|--file)
-        shift
-        next_arg="${SHELL_DOLLAR}{1:-}"
-        [[ -z "$next_arg" || ! -f "$next_arg" ]] && return 0
-        ;;
-      --file=*)
-        next_arg="${SHELL_DOLLAR}{arg#--file=}"
-        [[ ! -f "$next_arg" ]] && return 0
-        ;;
-      -F?*)
-        next_arg="${SHELL_DOLLAR}{arg:2}"
-        [[ ! -f "$next_arg" ]] && return 0
-        ;;
-    esac
-    shift
-  done
-  return 1
-}
-
-message_already_has_trailer() {
-  local arg next_arg
-  while [[ $# -gt 0 ]]; do
-    arg="$1"
-    case "$arg" in
-      -m|--message)
-        shift
-        next_arg="${SHELL_DOLLAR}{1:-}"
-        grep -Fqi "$trailer" <<<"$next_arg" && return 0
-        ;;
-      --message=*)
-        grep -Fqi "$trailer" <<<"${SHELL_DOLLAR}{arg#--message=}" && return 0
-        ;;
-      -m?*)
-        grep -Fqi "$trailer" <<<"${SHELL_DOLLAR}{arg:2}" && return 0
-        ;;
-      -[!-]*m)
-        shift
-        next_arg="${SHELL_DOLLAR}{1:-}"
-        grep -Fqi "$trailer" <<<"$next_arg" && return 0
-        ;;
-      -F|--file)
-        shift
-        next_arg="${SHELL_DOLLAR}{1:-}"
-        [[ -n "$next_arg" && -f "$next_arg" ]] && grep -Fqi "$trailer" "$next_arg" && return 0
-        ;;
-      --file=*)
-        next_arg="${SHELL_DOLLAR}{arg#--file=}"
-        [[ -f "$next_arg" ]] && grep -Fqi "$trailer" "$next_arg" && return 0
-        ;;
-      -F?*)
-        next_arg="${SHELL_DOLLAR}{arg:2}"
-        [[ -f "$next_arg" ]] && grep -Fqi "$trailer" "$next_arg" && return 0
-        ;;
-    esac
-    shift
-  done
-  return 1
-}
-
-if ! has_explicit_commit_message "$@" || has_unsupported_commit_message_source "$@" || message_already_has_trailer "$@"; then
-  PATH="$real_path" exec "$real_git" "$@"
-fi
-
-tmp_file=""
-cleanup_commit_message() {
-  if [[ -n "$tmp_file" ]]; then
-    rm -f "$tmp_file"
-  fi
-}
-trap cleanup_commit_message EXIT
-
-attributed_args=()
-replaced_file_message=0
-while [[ $# -gt 0 ]]; do
-  arg="$1"
-  case "$arg" in
-    -F|--file)
-      if [[ $replaced_file_message -eq 0 ]]; then
-        shift
-        source_file="${SHELL_DOLLAR}{1:-}"
-        tmp_file="$(mktemp)"
-        if [[ -n "$source_file" && -f "$source_file" ]]; then
-          printf '%s\n\n%s\n' "$(cat "$source_file")" "$trailer" >"$tmp_file"
-          attributed_args+=("$arg" "$tmp_file")
-          replaced_file_message=1
-        else
-          attributed_args+=("$arg" "$source_file")
-        fi
-      else
-        attributed_args+=("$arg")
-      fi
-      ;;
-    --file=*)
-      if [[ $replaced_file_message -eq 0 ]]; then
-        source_file="${SHELL_DOLLAR}{arg#--file=}"
-        tmp_file="$(mktemp)"
-        if [[ -f "$source_file" ]]; then
-          printf '%s\n\n%s\n' "$(cat "$source_file")" "$trailer" >"$tmp_file"
-          attributed_args+=("--file=$tmp_file")
-          replaced_file_message=1
-        else
-          attributed_args+=("$arg")
-        fi
-      else
-        attributed_args+=("$arg")
-      fi
-      ;;
-    -F?*)
-      if [[ $replaced_file_message -eq 0 ]]; then
-        source_file="${SHELL_DOLLAR}{arg:2}"
-        tmp_file="$(mktemp)"
-        if [[ -f "$source_file" ]]; then
-          printf '%s\n\n%s\n' "$(cat "$source_file")" "$trailer" >"$tmp_file"
-          attributed_args+=("-F$tmp_file")
-          replaced_file_message=1
-        else
-          attributed_args+=("$arg")
-        fi
-      else
-        attributed_args+=("$arg")
-      fi
-      ;;
-    *)
-      attributed_args+=("$arg")
-      ;;
-  esac
-  shift
-done
-
-if [[ $replaced_file_message -eq 0 ]]; then
-  attributed_args+=("-m" "$trailer")
-fi
-
-# Why: commit-msg hooks and commit signing must see the final message. Only
-# commands that already provide a noninteractive message get attribution; editor
-# based commits pass through unchanged instead of being amended after success.
-ORCA_ATTRIBUTION_BYPASS=1 PATH="$real_path" exec "$real_git" "${SHELL_DOLLAR}{attributed_args[@]}"
-`
-
-const POSIX_GH_WRAPPER = `${POSIX_COMMON}
-real_path="$(clean_path)"
-real_gh="$(PATH="$real_path" command -v gh || true)"
-if [[ -z "$real_gh" ]]; then
-  echo "Orca attribution wrapper could not locate gh on PATH." >&2
-  exit 127
-fi
-
-append_footer() {
-  local kind="$1"
-  local url_pattern="$2"
-  local footer="$3"
-  local stdout_capture="$4"
-  local stderr_capture="$5"
-  local url=""
-
-  url="$(printf '%s\n%s\n' "$stdout_capture" "$stderr_capture" | grep -Eo "$url_pattern" | tail -n 1 || true)"
-  append_footer_url "$kind" "$footer" "$url"
-}
-
-append_footer_url() {
-  local kind="$1"
-  local footer="$2"
-  local url="$3"
-
-  if [[ -z "$url" ]]; then
-    return 0
-  fi
-
-  local api_path
-  api_path="$(github_api_path "$kind" "$url" || true)"
-  if [[ -z "$api_path" ]]; then
-    return 0
-  fi
-
-  local body
-  if ! body="$(PATH="$real_path" "$real_gh" api "$api_path" --jq '.body // ""' 2>/dev/null)"; then
-    return 0
-  fi
-  if grep -Fqi "$footer" <<<"$body"; then
-    return 0
-  fi
-
-  local tmp_file
-  tmp_file="$(mktemp)"
-  if [[ -n "$body" ]]; then
-    printf '%s\n\n%s\n' "$body" "$footer" >"$tmp_file"
-  else
-    printf '%s\n' "$footer" >"$tmp_file"
-  fi
-  # Why: gh exposes create output as a URL, but does not provide a transactional
-  # body append. Use REST instead of gh pr/issue edit because those commands can
-  # hit unrelated GraphQL fields, while the URL maps directly to one REST item.
-  PATH="$real_path" "$real_gh" api -X PATCH "$api_path" -F "body=@$tmp_file" >/dev/null || true
-  rm -f "$tmp_file"
-}
-
-github_api_path() {
-  local kind="$1"
-  local url="$2"
-  if [[ "$kind" == "pr" && "$url" =~ ^https://github[.]com/([^/]+)/([^/]+)/pull/([0-9]+) ]]; then
-    printf 'repos/%s/%s/pulls/%s' "${SHELL_DOLLAR}{BASH_REMATCH[1]}" "${SHELL_DOLLAR}{BASH_REMATCH[2]}" "${SHELL_DOLLAR}{BASH_REMATCH[3]}"
-    return 0
-  fi
-  if [[ "$kind" == "issue" && "$url" =~ ^https://github[.]com/([^/]+)/([^/]+)/issues/([0-9]+) ]]; then
-    printf 'repos/%s/%s/issues/%s' "${SHELL_DOLLAR}{BASH_REMATCH[1]}" "${SHELL_DOLLAR}{BASH_REMATCH[2]}" "${SHELL_DOLLAR}{BASH_REMATCH[3]}"
-    return 0
-  fi
-  return 1
-}
-
-has_noninteractive_create_args() {
-  local arg
-  for arg in "$@"; do
-    case "$arg" in
-      --title|-t|--title=*|--body|-b|--body=*|--body-file|-F|--body-file=*|--fill|--fill-first|--fill-verbose|--template|-T|--template=*|--recover|--recover=*|--web)
-        return 0
-        ;;
-    esac
-  done
-  return 1
-}
-
-has_passthrough_create_args() {
-  local arg
-  for arg in "$@"; do
-    case "$arg" in
-      --help|-h|--version)
-        return 0
-        ;;
-    esac
-  done
-  return 1
-}
-
-if [[ "\${ORCA_ENABLE_GIT_ATTRIBUTION:-0}" != "1" || "\${ORCA_ATTRIBUTION_BYPASS:-0}" == "1" ]]; then
-  PATH="$real_path" exec "$real_gh" "$@"
-fi
-
-if [[ "\${1:-}" == "pr" && "\${2:-}" == "create" ]]; then
-  footer="\${ORCA_GH_PR_FOOTER:-Made with [Orca](https://github.com/stablyai/orca) 🐋}"
-  if has_passthrough_create_args "$@"; then
-    PATH="$real_path" exec "$real_gh" "$@"
-  fi
-  if ! has_noninteractive_create_args "$@"; then
-    # Why: gh switches off interactive prompts when stdout/stderr are redirected,
-    # and post-create "pr view" can select the wrong PR in fork/multi-PR cases.
-    # Preserve interactive UX and skip attribution rather than guessing.
-    PATH="$real_path" exec "$real_gh" "$@"
-  fi
-  stdout_file="$(mktemp)"
-  stderr_file="$(mktemp)"
-  cleanup_capture() {
-    rm -f "$stdout_file" "$stderr_file"
-  }
-  trap cleanup_capture EXIT
-  if PATH="$real_path" "$real_gh" "$@" >"$stdout_file" 2>"$stderr_file"; then
-    status=0
-  else
-    status=$?
-  fi
-  stdout_capture="$(cat "$stdout_file")"
-  stderr_capture="$(cat "$stderr_file")"
-  cat "$stderr_file" >&2
-  cat "$stdout_file"
-  if [[ $status -eq 0 ]]; then
-    append_footer "pr" 'https://github.com/[^[:space:]]+/pull/[0-9]+' "$footer" "$stdout_capture" "$stderr_capture"
-  fi
-  cleanup_capture
-  trap - EXIT
-  exit $status
-fi
-
-if [[ "\${1:-}" == "issue" && "\${2:-}" == "create" ]]; then
-  footer="\${ORCA_GH_ISSUE_FOOTER:-Made with [Orca](https://github.com/stablyai/orca) 🐋}"
-  if has_passthrough_create_args "$@"; then
-    PATH="$real_path" exec "$real_gh" "$@"
-  fi
-  if ! has_noninteractive_create_args "$@"; then
-    # Why: gh issue create also requires a live TTY for prompts, but gh has no
-    # current-issue lookup equivalent to "pr view". Do not guess with issue list:
-    # that can edit an unrelated issue if the command printed no URL.
-    PATH="$real_path" exec "$real_gh" "$@"
-  fi
-  stdout_file="$(mktemp)"
-  stderr_file="$(mktemp)"
-  cleanup_capture() {
-    rm -f "$stdout_file" "$stderr_file"
-  }
-  trap cleanup_capture EXIT
-  if PATH="$real_path" "$real_gh" "$@" >"$stdout_file" 2>"$stderr_file"; then
-    status=0
-  else
-    status=$?
-  fi
-  stdout_capture="$(cat "$stdout_file")"
-  stderr_capture="$(cat "$stderr_file")"
-  cat "$stderr_file" >&2
-  cat "$stdout_file"
-  if [[ $status -eq 0 ]]; then
-    append_footer "issue" 'https://github.com/[^[:space:]]+/issues/[0-9]+' "$footer" "$stdout_capture" "$stderr_capture"
-  fi
-  cleanup_capture
-  trap - EXIT
-  exit $status
-fi
-
-PATH="$real_path" exec "$real_gh" "$@"
-`
-
-const WIN32_GIT_CMD_WRAPPER = String.raw`@echo off
-setlocal
-if not "%ORCA_ENABLE_GIT_ATTRIBUTION%"=="1" goto run
-if "%ORCA_ATTRIBUTION_BYPASS%"=="1" goto run
-call :orca_is_git_commit %*
-if errorlevel 1 goto run
-call :orca_has_bare_dash %*
-if not errorlevel 1 goto run
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0git-wrapper.ps1" %*
-exit /b %ERRORLEVEL%
-:run
-if defined ORCA_REAL_GIT (
-  "%ORCA_REAL_GIT%" %*
-) else (
-  echo Orca attribution wrapper could not locate git on PATH. 1>&2
-  exit /b 127
-)
-exit /b %ERRORLEVEL%
-
-:orca_is_git_commit
-if "%~1"=="" exit /b 1
-if /I "%~1"=="commit" exit /b 0
-set "orca_git_arg=%~1"
-if /I "%orca_git_arg%"=="-c" goto skip_two
-if /I "%orca_git_arg%"=="--config" goto skip_two
-if /I "%orca_git_arg%"=="-C" goto skip_two
-if /I "%orca_git_arg%"=="--git-dir" goto skip_two
-if /I "%orca_git_arg%"=="--work-tree" goto skip_two
-if /I "%orca_git_arg%"=="--namespace" goto skip_two
-if /I "%orca_git_arg:~0,9%"=="--config=" goto skip_one
-if /I "%orca_git_arg:~0,10%"=="--git-dir=" goto skip_one
-if /I "%orca_git_arg:~0,12%"=="--work-tree=" goto skip_one
-if /I "%orca_git_arg:~0,12%"=="--namespace=" goto skip_one
-if "%orca_git_arg:~0,1%"=="-" goto skip_one
-exit /b 1
-:skip_two
-shift
-shift
-goto orca_is_git_commit
-:skip_one
-shift
-goto orca_is_git_commit
-
-rem Why: powershell.exe -File rejects a bare "-" while binding arguments, so the
-rem script never runs. Pass those straight to git, which is what the PS wrapper
-rem does with a stdin message anyway.
-:orca_has_bare_dash
-if "%~1"=="" exit /b 1
-if "%~1"=="-" exit /b 0
-shift
-goto orca_has_bare_dash
-`
-
-const WIN32_GH_CMD_WRAPPER = String.raw`@echo off
-setlocal
-if not "%ORCA_ENABLE_GIT_ATTRIBUTION%"=="1" goto run
-if "%ORCA_ATTRIBUTION_BYPASS%"=="1" goto run
-if /I "%~1"=="pr" if /I "%~2"=="create" goto wrap
-if /I "%~1"=="issue" if /I "%~2"=="create" goto wrap
-goto run
-:wrap
-call :orca_has_bare_dash %*
-if not errorlevel 1 goto run
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0gh-wrapper.ps1" %*
-exit /b %ERRORLEVEL%
-:run
-if defined ORCA_REAL_GH (
-  "%ORCA_REAL_GH%" %*
-) else (
-  echo Orca attribution wrapper could not locate gh on PATH. 1>&2
-  exit /b 127
-)
-exit /b %ERRORLEVEL%
-
-rem Why: powershell.exe -File rejects a bare "-" while binding arguments, so the
-rem script never runs. Creating without the footer beats not creating at all.
-:orca_has_bare_dash
-if "%~1"=="" exit /b 1
-if "%~1"=="-" exit /b 0
-shift
-goto orca_has_bare_dash
-`
-
-const WIN32_GIT_PS_WRAPPER = String.raw`$ErrorActionPreference = 'Stop'
-$realGit = if ($env:ORCA_REAL_GIT) { $env:ORCA_REAL_GIT } else { 'git' }
-$trailer = if ($env:ORCA_GIT_COMMIT_TRAILER) { $env:ORCA_GIT_COMMIT_TRAILER } else { 'Co-authored-by: Orca <help@stably.ai>' }
-
-if ($args -contains '--dry-run') {
-  & $realGit @args
-  exit $LASTEXITCODE
-}
-
-function Test-GitCommitCommand {
-  param([string[]]$CommandArgs)
-  for ($i = 0; $i -lt $CommandArgs.Count; $i++) {
-    $arg = $CommandArgs[$i]
-    if ($arg -eq '-c' -or $arg -eq '--config' -or $arg -eq '-C' -or $arg -eq '--git-dir' -or $arg -eq '--work-tree' -or $arg -eq '--namespace') {
-      $i++
-      continue
-    }
-    if ($arg.StartsWith('--config=') -or $arg.StartsWith('--git-dir=') -or $arg.StartsWith('--work-tree=') -or $arg.StartsWith('--namespace=')) {
-      continue
-    }
-    if ($arg -eq 'commit') {
-      return $true
-    }
-    if ($arg.StartsWith('-')) {
-      continue
-    }
-    return $false
-  }
-  return $false
-}
-
-function Test-ExplicitCommitMessage {
-  param([string[]]$CommandArgs)
-  foreach ($arg in $CommandArgs) {
-    if ($arg -eq '-m' -or $arg -eq '--message' -or $arg -eq '-F' -or $arg -eq '--file' -or $arg.StartsWith('--message=') -or $arg.StartsWith('--file=') -or ($arg.StartsWith('-m') -and $arg.Length -gt 2) -or ($arg.StartsWith('-F') -and $arg.Length -gt 2) -or ($arg.StartsWith('-') -and -not $arg.StartsWith('--') -and $arg.EndsWith('m'))) {
-      return $true
-    }
-  }
-  return $false
-}
-
-function Test-UnsupportedCommitMessageSource {
-  param([string[]]$CommandArgs)
-  $sawCommit = $false
-  for ($i = 0; $i -lt $CommandArgs.Count; $i++) {
-    $arg = $CommandArgs[$i]
-    if (-not $sawCommit) {
-      if ($arg -eq '-c' -or $arg -eq '--config' -or $arg -eq '-C' -or $arg -eq '--git-dir' -or $arg -eq '--work-tree' -or $arg -eq '--namespace') {
-        $i++
-        continue
-      }
-      if ($arg.StartsWith('--config=') -or $arg.StartsWith('--git-dir=') -or $arg.StartsWith('--work-tree=') -or $arg.StartsWith('--namespace=')) {
-        continue
-      }
-      if ($arg -eq 'commit') {
-        $sawCommit = $true
-        continue
-      }
-    }
-    if ($arg -eq '-C' -or $arg -eq '--reuse-message' -or $arg -eq '-c' -or $arg -eq '--reedit-message' -or $arg -eq '--fixup' -or $arg -eq '--squash') {
-      return $true
-    }
-    if ($arg -eq '-F' -or $arg -eq '--file') {
-      $i++
-      if ($i -ge $CommandArgs.Count -or -not (Test-Path -LiteralPath $CommandArgs[$i])) {
-        return $true
-      }
-      continue
-    }
-    if ($arg.StartsWith('--file=')) {
-      if (-not (Test-Path -LiteralPath $arg.Substring('--file='.Length))) {
-        return $true
-      }
-      continue
-    }
-    if ($arg.StartsWith('-F') -and $arg.Length -gt 2) {
-      if (-not (Test-Path -LiteralPath $arg.Substring(2))) {
-        return $true
-      }
-      continue
-    }
-  }
-  return $false
-}
-
-function Test-CommitMessageHasTrailer {
-  param([string[]]$CommandArgs)
-  for ($i = 0; $i -lt $CommandArgs.Count; $i++) {
-    $arg = $CommandArgs[$i]
-    if ($arg -eq '-m' -or $arg -eq '--message') {
-      $i++
-      if ($i -lt $CommandArgs.Count -and $CommandArgs[$i] -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg.StartsWith('--message=')) {
-      if ($arg.Substring('--message='.Length) -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg.StartsWith('-m') -and $arg.Length -gt 2) {
-      if ($arg.Substring(2) -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg.StartsWith('-') -and -not $arg.StartsWith('--') -and $arg.EndsWith('m')) {
-      $i++
-      if ($i -lt $CommandArgs.Count -and $CommandArgs[$i] -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg -eq '-F' -or $arg -eq '--file') {
-      $i++
-      if ($i -lt $CommandArgs.Count -and (Test-Path -LiteralPath $CommandArgs[$i]) -and (Get-Content -LiteralPath $CommandArgs[$i] -Raw) -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg.StartsWith('--file=')) {
-      $path = $arg.Substring('--file='.Length)
-      if ((Test-Path -LiteralPath $path) -and (Get-Content -LiteralPath $path -Raw) -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    } elseif ($arg.StartsWith('-F') -and $arg.Length -gt 2) {
-      $path = $arg.Substring(2)
-      if ((Test-Path -LiteralPath $path) -and (Get-Content -LiteralPath $path -Raw) -match [Regex]::Escape($trailer)) {
-        return $true
-      }
-    }
-  }
-  return $false
-}
-
-if (-not (Test-GitCommitCommand $args) -or -not (Test-ExplicitCommitMessage $args) -or (Test-UnsupportedCommitMessageSource $args) -or (Test-CommitMessageHasTrailer $args)) {
-  & $realGit @args
-  exit $LASTEXITCODE
-}
-
-$tmpFile = $null
-$attributedArgs = New-Object System.Collections.Generic.List[string]
-$replacedFileMessage = $false
-for ($i = 0; $i -lt $args.Count; $i++) {
-  $arg = $args[$i]
-  if (($arg -eq '-F' -or $arg -eq '--file') -and -not $replacedFileMessage) {
-    $i++
-    $sourceFile = if ($i -lt $args.Count) { $args[$i] } else { '' }
-    if ($sourceFile -and (Test-Path -LiteralPath $sourceFile)) {
-      $tmpFile = [System.IO.Path]::GetTempFileName()
-      Set-Content -LiteralPath $tmpFile -Value ((Get-Content -LiteralPath $sourceFile -Raw).TrimEnd("${POWERSHELL_TICK}r", "${POWERSHELL_TICK}n") + "${POWERSHELL_TICK}r${POWERSHELL_TICK}n${POWERSHELL_TICK}r${POWERSHELL_TICK}n" + $trailer) -NoNewline
-      $attributedArgs.Add($arg)
-      $attributedArgs.Add($tmpFile)
-      $replacedFileMessage = $true
-    } else {
-      $attributedArgs.Add($arg)
-      $attributedArgs.Add($sourceFile)
-    }
-  } elseif ($arg.StartsWith('--file=') -and -not $replacedFileMessage) {
-    $sourceFile = $arg.Substring('--file='.Length)
-    if (Test-Path -LiteralPath $sourceFile) {
-      $tmpFile = [System.IO.Path]::GetTempFileName()
-      Set-Content -LiteralPath $tmpFile -Value ((Get-Content -LiteralPath $sourceFile -Raw).TrimEnd("${POWERSHELL_TICK}r", "${POWERSHELL_TICK}n") + "${POWERSHELL_TICK}r${POWERSHELL_TICK}n${POWERSHELL_TICK}r${POWERSHELL_TICK}n" + $trailer) -NoNewline
-      $attributedArgs.Add("--file=$tmpFile")
-      $replacedFileMessage = $true
-    } else {
-      $attributedArgs.Add($arg)
-    }
-  } elseif ($arg.StartsWith('-F') -and $arg.Length -gt 2 -and -not $replacedFileMessage) {
-    $sourceFile = $arg.Substring(2)
-    if (Test-Path -LiteralPath $sourceFile) {
-      $tmpFile = [System.IO.Path]::GetTempFileName()
-      Set-Content -LiteralPath $tmpFile -Value ((Get-Content -LiteralPath $sourceFile -Raw).TrimEnd("${POWERSHELL_TICK}r", "${POWERSHELL_TICK}n") + "${POWERSHELL_TICK}r${POWERSHELL_TICK}n${POWERSHELL_TICK}r${POWERSHELL_TICK}n" + $trailer) -NoNewline
-      $attributedArgs.Add("-F$tmpFile")
-      $replacedFileMessage = $true
-    } else {
-      $attributedArgs.Add($arg)
-    }
-  } else {
-    $attributedArgs.Add($arg)
-  }
-}
-
-if (-not $replacedFileMessage) {
-  $attributedArgs.Add('-m')
-  $attributedArgs.Add($trailer)
-}
-
-# Why: commit-msg hooks and signing should validate the final message. Editor
-# commits pass through unchanged rather than being amended after success.
-$env:ORCA_ATTRIBUTION_BYPASS = '1'
-try {
-  $attributedArgArray = $attributedArgs.ToArray()
-  & $realGit @attributedArgArray
-  exit $LASTEXITCODE
-} finally {
-  if ($tmpFile) {
-    Remove-Item -LiteralPath $tmpFile -Force -ErrorAction SilentlyContinue
-  }
-}
-`
-
-const WIN32_GH_PS_WRAPPER = String.raw`$ErrorActionPreference = 'Stop'
-$realGh = if ($env:ORCA_REAL_GH) { $env:ORCA_REAL_GH } else { 'gh' }
-
-function Test-NonInteractiveCreateArgs {
-  param([string[]]$CommandArgs)
-  foreach ($arg in $CommandArgs) {
-    if ($arg -match '^(--title|-t|--body|-b|--body-file|-F|--fill|--fill-first|--fill-verbose|--template|-T|--recover|--web)(=|$)') {
-      return $true
-    }
-  }
-  return $false
-}
-
-function Test-PassthroughCreateArgs {
-  param([string[]]$CommandArgs)
-  foreach ($arg in $CommandArgs) {
-    if ($arg -eq '--help' -or $arg -eq '-h' -or $arg -eq '--version') {
-      return $true
-    }
-  }
-  return $false
-}
-
-function Get-GitHubApiPath {
-  param([string]$Kind, [string]$CreatedUrl)
-  if ($Kind -eq 'pr' -and $CreatedUrl -match '^https://github\.com/([^/]+)/([^/]+)/pull/([0-9]+)') {
-    return "repos/$($Matches[1])/$($Matches[2])/pulls/$($Matches[3])"
-  }
-  if ($Kind -eq 'issue' -and $CreatedUrl -match '^https://github\.com/([^/]+)/([^/]+)/issues/([0-9]+)') {
-    return "repos/$($Matches[1])/$($Matches[2])/issues/$($Matches[3])"
-  }
-  return $null
-}
-
-function Test-CreateCommand {
-  param([string[]]$CommandArgs, [string]$Kind)
-  return $CommandArgs.Count -ge 2 -and $CommandArgs[0].ToLowerInvariant() -eq $Kind -and $CommandArgs[1].ToLowerInvariant() -eq 'create'
-}
-
-$isPrCreate = Test-CreateCommand $args 'pr'
-$isIssueCreate = Test-CreateCommand $args 'issue'
-if (($isPrCreate -or $isIssueCreate) -and (Test-PassthroughCreateArgs $args)) {
-  & $realGh @args
-  exit $LASTEXITCODE
-}
-
-if (($isPrCreate -or $isIssueCreate) -and -not (Test-NonInteractiveCreateArgs $args)) {
-  & $realGh @args
-  $status = $LASTEXITCODE
-  if ($status -ne 0) {
-    exit $status
-  }
-  exit 0
-}
-
-$stdoutFile = [System.IO.Path]::GetTempFileName()
-$stderrFile = [System.IO.Path]::GetTempFileName()
-& $realGh @args > $stdoutFile 2> $stderrFile
-$status = $LASTEXITCODE
-$stdoutCapture = if (Test-Path -LiteralPath $stdoutFile) { Get-Content -LiteralPath $stdoutFile -Raw } else { '' }
-$stderrCapture = if (Test-Path -LiteralPath $stderrFile) { Get-Content -LiteralPath $stderrFile -Raw } else { '' }
-if ($stderrCapture) {
-  [Console]::Error.Write($stderrCapture)
-}
-if ($status -ne 0) {
-  if ($stdoutCapture) {
-    [Console]::Out.Write($stdoutCapture)
-  }
-  Remove-Item -LiteralPath $stdoutFile, $stderrFile -Force -ErrorAction SilentlyContinue
-  exit $status
-}
-if ($stdoutCapture) {
-  [Console]::Out.Write($stdoutCapture)
-}
-
-if ($isPrCreate) {
-  $createdUrl = ([regex]::Matches(($stdoutCapture + [Environment]::NewLine + $stderrCapture), 'https://github.com/\S+/pull/\d+') | Select-Object -Last 1).Value
-  if ($createdUrl) {
-    $apiPath = Get-GitHubApiPath 'pr' $createdUrl
-    $body = if ($apiPath) { (& $realGh api $apiPath --jq '.body // ""' 2>$null) | Out-String } else { $null }
-    if ($LASTEXITCODE -ne 0) {
-      $body = $null
-    }
-    $footer = if ($env:ORCA_GH_PR_FOOTER) { $env:ORCA_GH_PR_FOOTER } else { 'Made with [Orca](https://github.com/stablyai/orca) 🐋' }
-    if ($null -ne $body -and $body -notmatch [Regex]::Escape($footer)) {
-      $tmpFile = [System.IO.Path]::GetTempFileName()
-      try {
-        $trimmed = $body.TrimEnd("${POWERSHELL_TICK}r", "${POWERSHELL_TICK}n")
-        if ([string]::IsNullOrWhiteSpace($trimmed)) {
-          Set-Content -LiteralPath $tmpFile -Value $footer -NoNewline
-        } else {
-          Set-Content -LiteralPath $tmpFile -Value ($trimmed + "${POWERSHELL_TICK}r${POWERSHELL_TICK}n${POWERSHELL_TICK}r${POWERSHELL_TICK}n" + $footer) -NoNewline
-        }
-        # Why: gh has no transactional body append for newly-created PRs. This
-        # immediate REST patch keeps attribution scoped to the URL gh returned.
-        try {
-          & $realGh api -X PATCH $apiPath -F "body=@$tmpFile" | Out-Null
-        } catch {
-        }
-      } finally {
-        Remove-Item -LiteralPath $tmpFile -Force -ErrorAction SilentlyContinue
-      }
-    }
-  }
-}
-
-if ($isIssueCreate) {
-  $createdUrl = ([regex]::Matches(($stdoutCapture + [Environment]::NewLine + $stderrCapture), 'https://github.com/\S+/issues/\d+') | Select-Object -Last 1).Value
-  if ($createdUrl) {
-    $apiPath = Get-GitHubApiPath 'issue' $createdUrl
-    $body = if ($apiPath) { (& $realGh api $apiPath --jq '.body // ""' 2>$null) | Out-String } else { $null }
-    if ($LASTEXITCODE -ne 0) {
-      $body = $null
-    }
-    $footer = if ($env:ORCA_GH_ISSUE_FOOTER) { $env:ORCA_GH_ISSUE_FOOTER } else { 'Made with [Orca](https://github.com/stablyai/orca) 🐋' }
-    if ($null -ne $body -and $body -notmatch [Regex]::Escape($footer)) {
-      $tmpFile = [System.IO.Path]::GetTempFileName()
-      try {
-        $trimmed = $body.TrimEnd("${POWERSHELL_TICK}r", "${POWERSHELL_TICK}n")
-        if ([string]::IsNullOrWhiteSpace($trimmed)) {
-          Set-Content -LiteralPath $tmpFile -Value $footer -NoNewline
-        } else {
-          Set-Content -LiteralPath $tmpFile -Value ($trimmed + "${POWERSHELL_TICK}r${POWERSHELL_TICK}n${POWERSHELL_TICK}r${POWERSHELL_TICK}n" + $footer) -NoNewline
-        }
-        # Why: gh has no transactional body append for newly-created issues.
-        # This immediate REST patch keeps attribution scoped to the URL gh returned.
-        try {
-          & $realGh api -X PATCH $apiPath -F "body=@$tmpFile" | Out-Null
-        } catch {
-        }
-      } finally {
-        Remove-Item -LiteralPath $tmpFile -Force -ErrorAction SilentlyContinue
-      }
-    }
-  }
-}
-
-Remove-Item -LiteralPath $stdoutFile, $stderrFile -Force -ErrorAction SilentlyContinue
-exit 0
-`
diff --git a/src/main/automations/hermes-cron-output.ts b/src/main/automations/hermes-cron-output.ts
index db1e054f7e8..581b7f998d1 100644
--- a/src/main/automations/hermes-cron-output.ts
+++ b/src/main/automations/hermes-cron-output.ts
@@ -470,7 +470,7 @@ function findMatchingSessionRunIndex(
     (sessionRun, index) =>
       !usedSessionRunIndexes.has(index) && getRunKey(sessionRun) === outputRunKey
   )
-  if (exactMatchIndex >= 0) {
+  if (exactMatchIndex !== -1) {
     return exactMatchIndex
   }
 
@@ -798,7 +798,7 @@ function readHermesSessionDbRunRefs(jobId: string): HermesSessionRunRef[] {
   }
 }
 
-function readHermesSessionDbRunById(jobId: string, runId: string): unknown | null {
+function readHermesSessionDbRunById(jobId: string, runId: string): unknown {
   if (!existsSync(HERMES_STATE_DB)) {
     return null
   }
diff --git a/src/main/bitbucket/client.test.ts b/src/main/bitbucket/client.test.ts
index 3b844725353..c3fc53de289 100644
--- a/src/main/bitbucket/client.test.ts
+++ b/src/main/bitbucket/client.test.ts
@@ -223,6 +223,28 @@ describe('Bitbucket client', () => {
     ])
   })
 
+  it('does not report an unreachable host as an auth failure (STA-3944)', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn(async () => {
+        throw new Error('network down')
+      })
+    )
+    await expect(getBitbucketAuthStatus()).resolves.toMatchObject({
+      configured: true,
+      authenticated: true
+    })
+
+    vi.stubGlobal(
+      'fetch',
+      vi.fn(async () => new Response(null, { status: 401 }))
+    )
+    await expect(getBitbucketAuthStatus()).resolves.toMatchObject({
+      configured: true,
+      authenticated: false
+    })
+  })
+
   it('fetches a branch pull request and commit build status', async () => {
     const fetchMock = vi.fn(async (url: string, _init?: RequestInit) => {
       if (url.includes('/statuses/build')) {
diff --git a/src/main/bitbucket/client.ts b/src/main/bitbucket/client.ts
index 34e4fe2a4fe..deb856a66d1 100644
--- a/src/main/bitbucket/client.ts
+++ b/src/main/bitbucket/client.ts
@@ -15,7 +15,7 @@ import {
 } from '../source-control/hosted-review-git-options'
 import { cancelUnreadResponseBody } from '../lib/unread-response-body'
 import { authHeaders, getEnvAuthConfig, hasAuth } from './bitbucket-auth-config'
-import { accountNameFromUser, fetchBitbucketUser } from './user-request'
+import { accountNameFromUser, fetchBitbucketUserResult } from './user-request'
 import {
   getStoredBitbucketCredentialError,
   getStoredBitbucketMetadata,
@@ -154,11 +154,14 @@ async function normalizePullRequest(
 export async function getBitbucketAuthStatus(): Promise<BitbucketAuthStatus> {
   const env = getEnvAuthConfig()
   if (hasAuth(env)) {
-    const user = await fetchBitbucketUser(env)
+    const result = await fetchBitbucketUserResult(env)
     return {
       configured: true,
-      authenticated: user !== null,
-      account: accountNameFromUser(user)
+      // Why (STA-3944): only a rejection means the credential is bad. An
+      // unreachable host must not render as "Auth failed" and send the user
+      // off to regenerate a token that still works.
+      authenticated: result.ok || result.reason === 'unreachable',
+      account: result.ok ? accountNameFromUser(result.user) : null
     }
   }
   const metadata = getStoredBitbucketMetadata()
@@ -170,11 +173,11 @@ export async function getBitbucketAuthStatus(): Promise<BitbucketAuthStatus> {
     if (!cached) {
       return { configured: true, authenticated: true, account: metadata.account }
     }
-    const user = await fetchBitbucketUser(storedAuthConfig(metadata, cached))
+    const result = await fetchBitbucketUserResult(storedAuthConfig(metadata, cached))
     return {
       configured: true,
-      authenticated: user !== null,
-      account: accountNameFromUser(user) ?? metadata.account
+      authenticated: result.ok || result.reason === 'unreachable',
+      account: (result.ok ? accountNameFromUser(result.user) : null) ?? metadata.account
     }
   }
   return { configured: false, authenticated: false, account: null }
diff --git a/src/main/bitbucket/credential-connection.test.ts b/src/main/bitbucket/credential-connection.test.ts
index 25c51e81f87..0026e6901cb 100644
--- a/src/main/bitbucket/credential-connection.test.ts
+++ b/src/main/bitbucket/credential-connection.test.ts
@@ -95,6 +95,30 @@ describe('Bitbucket credential connection', () => {
     expect(conn.getBitbucketConnectionStatus().source).toBe('none')
   })
 
+  it('separates a rejected credential from an unreachable host (STA-3944)', async () => {
+    const conn = await loadModule()
+
+    globalThis.fetch = vi.fn(
+      async () => new Response(null, { status: 401 })
+    ) as unknown as typeof fetch
+    const rejected = await conn.connectBitbucket({ authMode: 'token', accessToken: 'bad' })
+    expect(!rejected.ok && rejected.error).toMatch(/rejected these credentials/i)
+
+    // Why: a timeout or 5xx says nothing about the token; calling it invalid
+    // sends the user off to regenerate a credential that still works.
+    for (const failure of [
+      async () => {
+        throw new Error('network down')
+      },
+      async () => new Response(null, { status: 503 })
+    ]) {
+      globalThis.fetch = vi.fn(failure) as unknown as typeof fetch
+      const unreachable = await conn.connectBitbucket({ authMode: 'token', accessToken: 'good' })
+      expect(!unreachable.ok && unreachable.error).toMatch(/could not reach bitbucket/i)
+    }
+    expect(conn.getBitbucketConnectionStatus().source).toBe('none')
+  })
+
   it('rejects an incomplete basic-auth credential before making a request', async () => {
     const conn = await loadModule()
     const fetchSpy = vi.fn()
diff --git a/src/main/bitbucket/credential-connection.ts b/src/main/bitbucket/credential-connection.ts
index 821af4a4d2f..c36980e8e79 100644
--- a/src/main/bitbucket/credential-connection.ts
+++ b/src/main/bitbucket/credential-connection.ts
@@ -5,7 +5,7 @@ import {
   hasAuth,
   type BitbucketAuthConfig
 } from './bitbucket-auth-config'
-import { accountNameFromUser, fetchBitbucketUser } from './user-request'
+import { accountNameFromUser, fetchBitbucketUserResult } from './user-request'
 import {
   clearStoredBitbucketCredential,
   getStoredBitbucketMetadata,
@@ -51,14 +51,19 @@ export async function connectBitbucket(
           : 'Enter both an email and an API token.'
     }
   }
-  const user = await fetchBitbucketUser(config, VERIFY_TIMEOUT_MS)
-  if (!user) {
+  const result = await fetchBitbucketUserResult(config, VERIFY_TIMEOUT_MS)
+  if (!result.ok) {
     return {
       ok: false,
-      error: 'Could not authenticate with Bitbucket. Check the credentials and try again.'
+      // Why (STA-3944): telling someone their token is invalid when the network
+      // is down sends them to regenerate a credential that was fine.
+      error:
+        result.reason === 'rejected'
+          ? 'Bitbucket rejected these credentials. Check the email and token, then try again.'
+          : 'Could not reach Bitbucket. Check your connection or the API base URL, then try again.'
     }
   }
-  const account = accountNameFromUser(user)
+  const account = accountNameFromUser(result.user)
   saveBitbucketCredential({
     authMode: input.authMode,
     email: config.email,
diff --git a/src/main/bitbucket/credential-store.test.ts b/src/main/bitbucket/credential-store.test.ts
index 6c6a6754b12..4edd11b0444 100644
--- a/src/main/bitbucket/credential-store.test.ts
+++ b/src/main/bitbucket/credential-store.test.ts
@@ -8,8 +8,17 @@ import { beforeEach, describe, expect, it, vi } from 'vitest'
 let tempHome = ''
 const decryptStringMock = vi.fn((value: Buffer) => value.toString('utf-8'))
 
-async function loadStore(options: { unlinkError?: NodeJS.ErrnoException } = {}) {
+async function loadStore(
+  options: {
+    unlinkError?: NodeJS.ErrnoException
+    writeError?: Error
+    shortWrites?: boolean
+  } = {}
+) {
   vi.resetModules()
+  // Why: doMock registrations outlive resetModules, so an injected failure from
+  // one case would leak into every later one in this file.
+  vi.doUnmock('node:fs')
   vi.doMock('electron', () => ({
     safeStorage: {
       isEncryptionAvailable: () => true,
@@ -21,6 +30,30 @@ async function loadStore(options: { unlinkError?: NodeJS.ErrnoException } = {})
     const actual = await vi.importActual<typeof Os>('node:os')
     return { ...actual, homedir: () => tempHome }
   })
+  if (options.shortWrites) {
+    vi.doMock('node:fs', async () => {
+      const actual = await vi.importActual<typeof Fs>('node:fs')
+      return {
+        ...actual,
+        // Why: write(2) may return a short count; publishing without looping
+        // would rename a truncated credential into place.
+        writeSync: (fd: number, data: Buffer, offset = 0, length = data.length) =>
+          actual.writeSync(fd, data, offset, Math.min(1, length))
+      }
+    })
+  }
+  if (options.writeError) {
+    const error = options.writeError
+    vi.doMock('node:fs', async () => {
+      const actual = await vi.importActual<typeof Fs>('node:fs')
+      return {
+        ...actual,
+        writeSync: () => {
+          throw error
+        }
+      }
+    })
+  }
   if (options.unlinkError) {
     // Why mocked: chmod-based failure injection is not portable — Windows has no
     // POSIX modes and a root/elevated runner can unlink through a 0500 directory.
@@ -61,9 +94,13 @@ describe('Bitbucket credential store', () => {
       email: 'ada@example.com',
       account: 'ada'
     })
-    expect(store.loadStoredBitbucketSecret()).toEqual({
+    expect(store.loadStoredBitbucketSecret()).toMatchObject({
       accessToken: null,
-      apiToken: 'secret-token'
+      apiToken: 'secret-token',
+      // Why (STA-3941): auth fields live in the envelope so a torn write cannot
+      // pair a new secret with a stale email.
+      authMode: 'basic',
+      email: 'ada@example.com'
     })
   })
 
@@ -131,9 +168,10 @@ describe('Bitbucket credential store', () => {
     expect(decryptStringMock).not.toHaveBeenCalled()
 
     // Forcing the load decrypts exactly once, then caches.
-    expect(store.loadStoredBitbucketSecret({ force: true })).toEqual({
+    expect(store.loadStoredBitbucketSecret({ force: true })).toMatchObject({
       accessToken: 'access-secret',
-      apiToken: null
+      apiToken: null,
+      authMode: 'token'
     })
     expect(decryptStringMock).toHaveBeenCalledTimes(1)
     expect(store.loadStoredBitbucketSecret()).not.toBeNull()
@@ -163,12 +201,123 @@ describe('Bitbucket credential store', () => {
     store._resetBitbucketCredentialCache()
 
     expect(store.getStoredBitbucketMetadata()).toMatchObject({ email: null, account: null })
-    expect(store.loadStoredBitbucketSecret({ force: true })).toEqual({
+    expect(store.loadStoredBitbucketSecret({ force: true })).toMatchObject({
       accessToken: null,
       apiToken: null
     })
   })
 
+  it('keeps the previous credential intact when the secret write fails (STA-3941)', async () => {
+    const store = await loadStore()
+    store.saveBitbucketCredential({
+      authMode: 'basic',
+      email: 'ada@example.com',
+      baseUrl: null,
+      account: 'ada',
+      accessToken: null,
+      apiToken: 'first-token'
+    })
+    const { readFileSync } = await import('node:fs')
+    const before = readFileSync(join(tempHome, '.orca', 'bitbucket-credential.enc'))
+
+    // Why: a direct write truncates in place, so a failure mid-write used to
+    // destroy the only working credential. The temp+rename path cannot.
+    const failing = await loadStore({ writeError: new Error('disk full') })
+    expect(() =>
+      failing.saveBitbucketCredential({
+        authMode: 'basic',
+        email: 'grace@example.com',
+        baseUrl: null,
+        account: 'grace',
+        accessToken: null,
+        apiToken: 'second-token'
+      })
+    ).toThrow(/disk full/)
+
+    expect(readFileSync(join(tempHome, '.orca', 'bitbucket-credential.enc'))).toEqual(before)
+    expect(existsSync(join(tempHome, '.orca', 'bitbucket-credential.enc.tmp'))).toBe(false)
+  })
+
+  it('authenticates from the envelope when metadata is stale (STA-3941)', async () => {
+    const store = await loadStore()
+    store.saveBitbucketCredential({
+      authMode: 'basic',
+      email: 'grace@example.com',
+      baseUrl: null,
+      account: 'grace',
+      accessToken: null,
+      apiToken: 'second-token'
+    })
+
+    // Simulate an interrupt between publishing the secret and the metadata:
+    // metadata still describes the previous connection.
+    const { writeFileSync } = await import('node:fs')
+    writeFileSync(
+      join(tempHome, '.orca', 'bitbucket-credential.json'),
+      JSON.stringify({
+        version: 1,
+        authMode: 'basic',
+        email: 'ada@example.com',
+        baseUrl: null,
+        account: 'ada',
+        updatedAt: ''
+      })
+    )
+    store._resetBitbucketCredentialCache()
+
+    const { resolveBitbucketAuthConfig } = await import('./resolve-auth')
+    // Auth follows the envelope, so the pair stays usable; only the displayed
+    // account is stale until the next status refresh.
+    expect(resolveBitbucketAuthConfig()).toMatchObject({
+      email: 'grace@example.com',
+      apiToken: 'second-token'
+    })
+  })
+
+  it('still authenticates a credential saved before the envelope carried auth fields', async () => {
+    const store = await loadStore()
+    store.saveBitbucketCredential({
+      authMode: 'basic',
+      email: 'ada@example.com',
+      baseUrl: null,
+      account: 'ada',
+      accessToken: null,
+      apiToken: 'legacy-token'
+    })
+    const { writeFileSync } = await import('node:fs')
+    // Legacy envelopes held only the two tokens.
+    writeFileSync(
+      join(tempHome, '.orca', 'bitbucket-credential.enc'),
+      JSON.stringify({ accessToken: null, apiToken: 'legacy-token' })
+    )
+    store._resetBitbucketCredentialCache()
+
+    const { resolveBitbucketAuthConfig } = await import('./resolve-auth')
+    expect(resolveBitbucketAuthConfig()).toMatchObject({
+      email: 'ada@example.com',
+      apiToken: 'legacy-token'
+    })
+  })
+
+  it('writes the whole credential even when the filesystem short-writes (STA-3941)', async () => {
+    const store = await loadStore({ shortWrites: true })
+    store.saveBitbucketCredential({
+      authMode: 'basic',
+      email: 'ada@example.com',
+      baseUrl: null,
+      account: 'ada',
+      accessToken: null,
+      apiToken: 'a-token-long-enough-to-need-several-writes'
+    })
+    store._resetBitbucketCredentialCache()
+
+    expect(store.loadStoredBitbucketSecret({ force: true })).toMatchObject({
+      apiToken: 'a-token-long-enough-to-need-several-writes',
+      email: 'ada@example.com'
+    })
+    expect(store.getStoredBitbucketMetadata()?.account).toBe('ada')
+  })
+
   it('clears both files and in-memory state on disconnect', async () => {
     const store = await loadStore()
     store.saveBitbucketCredential({
diff --git a/src/main/bitbucket/credential-store.ts b/src/main/bitbucket/credential-store.ts
index 17b3bb56d2c..4bf4544ae7c 100644
--- a/src/main/bitbucket/credential-store.ts
+++ b/src/main/bitbucket/credential-store.ts
@@ -1,11 +1,11 @@
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'
+import { existsSync, mkdirSync, readFileSync, unlinkSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { join } from 'node:path'
 import {
   CredentialDecryptionError,
   credentialFileHasContent,
   readStoredCredentialToken,
-  restrictCredentialFileToOwner,
+  writeCredentialFileAtomic,
   writeEncryptedCredential
 } from '../integration-credential-file'
 import type { BitbucketAuthMode } from '../../shared/bitbucket-credentials'
@@ -22,9 +22,16 @@ export type BitbucketStoredMetadata = {
   updatedAt: string
 }
 
+// Why (STA-3941): the envelope carries everything auth needs, so a torn write
+// between the two files can only leave stale display metadata — never a new
+// secret paired with an old email that cannot authenticate. Fields are optional
+// because credentials saved before this change hold only the two tokens.
 export type BitbucketStoredSecret = {
   accessToken: string | null
   apiToken: string | null
+  authMode?: BitbucketAuthMode
+  email?: string | null
+  baseUrl?: string | null
 }
 
 export type BitbucketCredentialSaveInput = {
@@ -131,7 +138,12 @@ export function loadStoredBitbucketSecret(
     const parsed = JSON.parse(token) as Partial<BitbucketStoredSecret>
     cachedSecret = {
       accessToken: asOptionalString(parsed.accessToken),
-      apiToken: asOptionalString(parsed.apiToken)
+      apiToken: asOptionalString(parsed.apiToken),
+      ...(parsed.authMode === 'token' || parsed.authMode === 'basic'
+        ? { authMode: parsed.authMode }
+        : {}),
+      email: asOptionalString(parsed.email),
+      baseUrl: asOptionalString(parsed.baseUrl)
     }
     credentialError = null
     return cachedSecret
@@ -148,7 +160,10 @@ export function saveBitbucketCredential(input: BitbucketCredentialSaveInput): vo
   ensureOrcaDir()
   const secret: BitbucketStoredSecret = {
     accessToken: input.accessToken,
-    apiToken: input.apiToken
+    apiToken: input.apiToken,
+    authMode: input.authMode,
+    email: input.email,
+    baseUrl: input.baseUrl
   }
   writeEncryptedCredential('Bitbucket', getSecretPath(), JSON.stringify(secret))
   const metadata: BitbucketStoredMetadata = {
@@ -159,11 +174,10 @@ export function saveBitbucketCredential(input: BitbucketCredentialSaveInput): vo
     account: input.account,
     updatedAt: new Date().toISOString()
   }
-  writeFileSync(getMetadataPath(), JSON.stringify(metadata, null, 2), {
-    encoding: 'utf-8',
-    mode: 0o600
-  })
-  restrictCredentialFileToOwner(getMetadataPath())
+  writeCredentialFileAtomic(
+    getMetadataPath(),
+    Buffer.from(JSON.stringify(metadata, null, 2), 'utf-8')
+  )
   cachedMetadata = metadata
   metadataLoadedFromDisk = true
   cachedSecret = secret
diff --git a/src/main/bitbucket/pull-request-creation.ts b/src/main/bitbucket/pull-request-creation.ts
index 86a44f49b4e..3d5e11f8392 100644
--- a/src/main/bitbucket/pull-request-creation.ts
+++ b/src/main/bitbucket/pull-request-creation.ts
@@ -8,8 +8,9 @@ import {
   requestHostedReviewJson
 } from '../source-control/hosted-review-api-request'
 import { readHostedPullRequestTemplate } from '../source-control/pull-request-template'
-import { authHeaders, hasAuth } from './bitbucket-auth-config'
+import { authHeaders, getEnvAuthConfig, hasAuth } from './bitbucket-auth-config'
 import { resolveBitbucketAuthConfig } from './resolve-auth'
+import { hasStoredBitbucketCredential } from './credential-store'
 import { getBitbucketPullRequestForBranch } from './client'
 import { mapBitbucketPullRequest, type RawBitbucketPullRequest } from './pull-request-mappers'
 import { getBitbucketRepoRef, type BitbucketRepoRef } from './repository-ref'
@@ -18,8 +19,12 @@ import { getHostedReviewLocalGitOptions } from '../source-control/hosted-review-
 
 const CREATE_REQUEST_TIMEOUT_MS = 60_000
 
+// Why: eligibility is evaluated proactively for the sidebar, so this must not
+// decrypt — forcing the secret open here would pop an OS keychain prompt just
+// from opening a worktree. Presence is enough; the create call itself still
+// fails closed if the credential turns out to be unusable.
 export function isBitbucketReviewCreationAuthenticated(): boolean {
-  return hasAuth(resolveBitbucketAuthConfig())
+  return hasAuth(getEnvAuthConfig()) || hasStoredBitbucketCredential()
 }
 
 function encodedRepoPath(repo: BitbucketRepoRef): string {
diff --git a/src/main/bitbucket/resolve-auth.ts b/src/main/bitbucket/resolve-auth.ts
index 8e5835ab57e..4a90f22780e 100644
--- a/src/main/bitbucket/resolve-auth.ts
+++ b/src/main/bitbucket/resolve-auth.ts
@@ -12,17 +12,26 @@ import {
   type BitbucketStoredSecret
 } from './credential-store'
 
+/**
+ * Why (STA-3941): the encrypted envelope is authoritative for auth. Plaintext
+ * metadata is only consulted for credentials written before the envelope
+ * carried these fields, so a torn write between the two files degrades to stale
+ * display data rather than a secret paired with the wrong email.
+ */
 export function storedAuthConfig(
-  metadata: BitbucketStoredMetadata,
+  metadata: BitbucketStoredMetadata | null,
   secret: BitbucketStoredSecret
 ): BitbucketAuthConfig {
+  const authMode = secret.authMode ?? metadata?.authMode ?? null
+  const email = secret.authMode ? (secret.email ?? null) : (metadata?.email ?? null)
+  const baseUrl = secret.authMode ? (secret.baseUrl ?? null) : (metadata?.baseUrl ?? null)
   return {
     // Why: an explicit ORCA_BITBUCKET_API_BASE_URL still wins even when the
     // credential itself is stored — env precedence is per-setting, not all-or-nothing.
-    baseUrl: envValue('ORCA_BITBUCKET_API_BASE_URL') ?? metadata.baseUrl ?? DEFAULT_API_BASE_URL,
-    accessToken: metadata.authMode === 'token' ? secret.accessToken : null,
-    email: metadata.authMode === 'basic' ? metadata.email : null,
-    apiToken: metadata.authMode === 'basic' ? secret.apiToken : null
+    baseUrl: envValue('ORCA_BITBUCKET_API_BASE_URL') ?? baseUrl ?? DEFAULT_API_BASE_URL,
+    accessToken: authMode === 'token' ? secret.accessToken : null,
+    email: authMode === 'basic' ? email : null,
+    apiToken: authMode === 'basic' ? secret.apiToken : null
   }
 }
 
@@ -34,13 +43,9 @@ export function resolveBitbucketAuthConfig(): BitbucketAuthConfig {
   if (hasAuth(env)) {
     return env
   }
-  const metadata = getStoredBitbucketMetadata()
-  if (!metadata) {
-    return env
-  }
   try {
     const secret = loadStoredBitbucketSecret({ force: true })
-    return secret ? storedAuthConfig(metadata, secret) : env
+    return secret ? storedAuthConfig(getStoredBitbucketMetadata(), secret) : env
   } catch {
     // Decryption denied or unavailable: fall through as unauthenticated.
     return env
diff --git a/src/main/bitbucket/user-request.ts b/src/main/bitbucket/user-request.ts
index 6f83703d58e..bc9d344e5ca 100644
--- a/src/main/bitbucket/user-request.ts
+++ b/src/main/bitbucket/user-request.ts
@@ -9,31 +9,57 @@ export type RawBitbucketUser = {
   account_id?: string | null
 }
 
+/**
+ * Why (STA-3944): a timeout, DNS failure, 5xx, or unparseable body says nothing
+ * about the credential. Collapsing those to the same miss as a 401 told users
+ * their token was invalid when the network was simply unreachable.
+ */
+export type BitbucketUserResult =
+  | { ok: true; user: RawBitbucketUser }
+  | { ok: false; reason: 'rejected' | 'unreachable' }
+
 export function accountNameFromUser(user: RawBitbucketUser | null): string | null {
   return user?.username ?? user?.display_name ?? user?.account_id ?? null
 }
 
 // Shared by live env-var status checks and by connect-time verification, so a
 // credential is proven against `/user` before it is ever persisted.
-export async function fetchBitbucketUser(
+export async function fetchBitbucketUserResult(
   config: BitbucketAuthConfig,
   timeoutMs: number = USER_REQUEST_TIMEOUT_MS
-): Promise<RawBitbucketUser | null> {
+): Promise<BitbucketUserResult> {
+  let response: Response
   try {
     const base = config.baseUrl.replace(/\/+$/, '')
-    const response = await fetch(`${base}/user`, {
+    response = await fetch(`${base}/user`, {
       headers: {
         Accept: 'application/json',
         ...authHeaders(config)
       },
       signal: AbortSignal.timeout(timeoutMs)
     })
-    if (!response.ok) {
-      await cancelUnreadResponseBody(response)
-      return null
-    }
-    return (await response.json()) as RawBitbucketUser
   } catch {
-    return null
+    return { ok: false, reason: 'unreachable' }
+  }
+  if (!response.ok) {
+    await cancelUnreadResponseBody(response)
+    // Only the credential-bearing statuses are the credential's fault; 5xx and
+    // the rest are the server or the path in between.
+    const rejected = response.status === 401 || response.status === 403
+    return { ok: false, reason: rejected ? 'rejected' : 'unreachable' }
+  }
+  try {
+    return { ok: true, user: (await response.json()) as RawBitbucketUser }
+  } catch {
+    return { ok: false, reason: 'unreachable' }
   }
 }
+
+/** Convenience for callers that only need the account, not the failure reason. */
+export async function fetchBitbucketUser(
+  config: BitbucketAuthConfig,
+  timeoutMs: number = USER_REQUEST_TIMEOUT_MS
+): Promise<RawBitbucketUser | null> {
+  const result = await fetchBitbucketUserResult(config, timeoutMs)
+  return result.ok ? result.user : null
+}
diff --git a/src/main/browser/agent-browser-bridge.test.ts b/src/main/browser/agent-browser-bridge.test.ts
index b9f5a9bd92d..125949f3a50 100644
--- a/src/main/browser/agent-browser-bridge.test.ts
+++ b/src/main/browser/agent-browser-bridge.test.ts
@@ -74,8 +74,8 @@ type ExecFileCallback = (error: unknown, stdout?: string, stderr?: string) => vo
 }
 
 function mockBrowserManager(
-  tabs: Map<string, number> = new Map([['tab-1', 100]]),
-  worktrees: Map<string, string> = new Map(),
+  tabs = new Map<string, number>([['tab-1', 100]]),
+  worktrees = new Map<string, string>(),
   overrides: Partial<BrowserManager> = {}
 ): BrowserManager {
   return {
diff --git a/src/main/browser/browser-cookie-import-google-exclusion.test.ts b/src/main/browser/browser-cookie-import-google-exclusion.test.ts
new file mode 100644
index 00000000000..431ca758f2f
--- /dev/null
+++ b/src/main/browser/browser-cookie-import-google-exclusion.test.ts
@@ -0,0 +1,324 @@
+/**
+ * STA-3811: an import must never write and never remove a google.com-family cookie, on any
+ * path. Removing 'google.com' from NON_TRANSPLANTABLE_DOMAINS flips every test here red.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const {
+  appGetPathMock,
+  clearPendingCookieImportMock,
+  execFileSyncMock,
+  sessionFromPartitionMock,
+  setPendingCookieImportMock
+} = vi.hoisted(() => ({
+  appGetPathMock: vi.fn(),
+  clearPendingCookieImportMock: vi.fn(),
+  execFileSyncMock: vi.fn(),
+  sessionFromPartitionMock: vi.fn(),
+  setPendingCookieImportMock: vi.fn()
+}))
+
+vi.mock('./browser-session-registry', () => ({
+  browserSessionRegistry: {
+    setPendingCookieImport: setPendingCookieImportMock,
+    clearPendingCookieImport: clearPendingCookieImportMock
+  }
+}))
+vi.mock('node:child_process', () => ({ execFileSync: execFileSyncMock }))
+vi.mock('electron', () => ({
+  app: { getPath: appGetPathMock },
+  dialog: { showOpenDialog: vi.fn() },
+  session: { fromPartition: sessionFromPartitionMock }
+}))
+
+import { importCookiesFromBrowser, importCookiesFromFile } from './browser-cookie-import'
+import { createChromiumCookieTestDatabase } from './browser-cookie-import-test-database'
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { DatabaseSync } from 'node:sqlite'
+
+function existingCookie(domain: string, name: string) {
+  return { domain, name, path: '/', secure: true, sameSite: 'unspecified', value: 'live' }
+}
+
+const INCOMING = [
+  { domain: '.google.com', name: 'SAPISID', value: 'transplanted', secure: true },
+  { domain: 'accounts.google.com', name: '__Secure-1PSID', value: 'transplanted', secure: true },
+  { domain: '.youtube.com', name: 'LOGIN_INFO', value: 'transplanted', secure: true },
+  { domain: '.linear.app', name: 'session', value: 'new', secure: true }
+]
+
+describe('file import excludes the Google cookie family', () => {
+  let cookiesGetMock: ReturnType<typeof vi.fn>
+  let cookiesRemoveMock: ReturnType<typeof vi.fn>
+  let cookiesSetMock: ReturnType<typeof vi.fn>
+  let tmpDir: string
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    tmpDir = mkdtempSync(join(tmpdir(), 'orca-google-exclusion-file-'))
+    cookiesGetMock = vi.fn().mockResolvedValue([])
+    cookiesRemoveMock = vi.fn().mockResolvedValue(undefined)
+    cookiesSetMock = vi.fn().mockResolvedValue(undefined)
+    sessionFromPartitionMock.mockReturnValue({
+      cookies: { get: cookiesGetMock, remove: cookiesRemoveMock, set: cookiesSetMock }
+    })
+  })
+
+  afterEach(() => {
+    rmSync(tmpDir, { recursive: true, force: true })
+  })
+
+  function writeCookies(cookies: unknown[]): string {
+    const filePath = join(tmpDir, 'cookies.json')
+    writeFileSync(filePath, JSON.stringify(cookies))
+    return filePath
+  }
+
+  it('writes no Google cookie and removes none, whatever is already in the jar', async () => {
+    cookiesGetMock.mockResolvedValue([
+      existingCookie('.google.com', 'SID'),
+      existingCookie('accounts.google.com', '__Secure-1PSID'),
+      existingCookie('.linear.app', 'old-linear')
+    ])
+
+    const result = await importCookiesFromFile(writeCookies(INCOMING), 'persist:test')
+
+    expect(result.ok && result.summary).toMatchObject({
+      totalCookies: 4,
+      importedCookies: 2,
+      skippedCookies: 2,
+      googleCookiesSkipped: 2,
+      domains: ['linear.app', 'youtube.com']
+    })
+    expect(cookiesRemoveMock.mock.calls).toEqual([['https://linear.app/', 'old-linear']])
+    expect(cookiesSetMock.mock.calls.map(([details]) => details.domain)).toEqual([
+      '.youtube.com',
+      '.linear.app'
+    ])
+  })
+
+  it('leaves Google cookies from an older import in place too', async () => {
+    cookiesGetMock.mockResolvedValue([existingCookie('.google.com', 'SAPISID')])
+
+    const result = await importCookiesFromFile(
+      writeCookies([{ domain: '.google.com', name: 'SAPISID', value: 'newer', secure: true }]),
+      'persist:test'
+    )
+
+    expect(result.ok && result.summary).toMatchObject({
+      totalCookies: 1,
+      importedCookies: 0,
+      skippedCookies: 1,
+      googleCookiesSkipped: 1,
+      domains: []
+    })
+    expect(cookiesRemoveMock).not.toHaveBeenCalled()
+    expect(cookiesSetMock).not.toHaveBeenCalled()
+  })
+})
+
+describe('native Chromium import excludes the Google cookie family', () => {
+  let clearDataMock: ReturnType<typeof vi.fn>
+  let cookiesGetMock: ReturnType<typeof vi.fn>
+  let cookiesRemoveMock: ReturnType<typeof vi.fn>
+  let cookiesSetMock: ReturnType<typeof vi.fn>
+  let tmpDir: string
+  let platformSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    tmpDir = mkdtempSync(join(tmpdir(), 'orca-google-exclusion-native-'))
+    appGetPathMock.mockReturnValue(join(tmpDir, 'userData'))
+    execFileSyncMock.mockImplementation(() => {
+      throw new Error('OS browser version lookup unavailable')
+    })
+    clearDataMock = vi.fn().mockResolvedValue(undefined)
+    cookiesGetMock = vi.fn().mockResolvedValue([])
+    cookiesRemoveMock = vi.fn().mockResolvedValue(undefined)
+    cookiesSetMock = vi.fn().mockResolvedValue(undefined)
+    sessionFromPartitionMock.mockReturnValue({
+      cookies: {
+        flushStore: vi.fn().mockResolvedValue(undefined),
+        get: cookiesGetMock,
+        remove: cookiesRemoveMock,
+        set: cookiesSetMock
+      },
+      clearData: clearDataMock
+    })
+    platformSpy = vi.spyOn(process, 'platform', 'get').mockReturnValue('darwin')
+  })
+
+  afterEach(() => {
+    platformSpy.mockRestore()
+    rmSync(tmpDir, { recursive: true, force: true })
+  })
+
+  function seedSource(rows: { domain: string; name: string; value: string }[]): string {
+    const sourceCookiesPath = join(tmpDir, 'Chrome', 'Default', 'Network', 'Cookies')
+    createChromiumCookieTestDatabase(sourceCookiesPath, rows).close()
+    return sourceCookiesPath
+  }
+
+  function seedTarget(rows: { domain: string; name: string; value: string }[]): void {
+    const targetCookiesPath = join(tmpDir, 'userData', 'Partitions', 'test', 'Network', 'Cookies')
+    createChromiumCookieTestDatabase(targetCookiesPath, rows).close()
+  }
+
+  it('bulk clears while excluding live Google cookies before importing', async () => {
+    const sourceCookiesPath = seedSource([
+      { domain: '.google.com', name: 'SID', value: 'transplanted-sid' },
+      { domain: '.example.com', name: 'session', value: 'new' }
+    ])
+    seedTarget([{ domain: '.google.com', name: 'SID', value: 'live-sid' }])
+    cookiesGetMock.mockResolvedValue([
+      existingCookie('.google.com', 'SID'),
+      existingCookie('.example.com', 'stale')
+    ])
+
+    const result = await importCookiesFromBrowser(chromeBrowser(sourceCookiesPath), 'persist:test')
+
+    expect(result.ok && result.summary).toMatchObject({
+      totalCookies: 2,
+      importedCookies: 1,
+      skippedCookies: 1,
+      googleCookiesSkipped: 1,
+      domains: ['example.com']
+    })
+    expect(clearDataMock.mock.calls).toEqual([
+      [{ dataTypes: ['cookies'], excludeOrigins: ['https://google.com'] }]
+    ])
+    expect(cookiesRemoveMock).not.toHaveBeenCalled()
+    expect(cookiesSetMock.mock.calls.map(([details]) => details.domain)).toEqual(['.example.com'])
+  })
+
+  it('reports an excluded Google row even when its encrypted value is invalid', async () => {
+    const sourceCookiesPath = join(tmpDir, 'Chrome', 'Default', 'Network', 'Cookies')
+    createChromiumCookieTestDatabase(sourceCookiesPath, [
+      {
+        domain: '.google.com',
+        name: 'SID',
+        value: '',
+        encryptedValue: Buffer.from('v10-invalid')
+      },
+      { domain: '.example.com', name: 'session', value: 'new' }
+    ]).close()
+    seedTarget([])
+
+    const result = await importCookiesFromBrowser(chromeBrowser(sourceCookiesPath), 'persist:test')
+
+    expect(result.ok && result.summary).toMatchObject({
+      totalCookies: 2,
+      importedCookies: 1,
+      skippedCookies: 1,
+      googleCookiesSkipped: 1
+    })
+    expect(execFileSyncMock).not.toHaveBeenCalled()
+    expect(cookiesSetMock.mock.calls.map(([details]) => details.name)).toEqual(['session'])
+  })
+
+  it('does not request an encryption key for excluded Google rows', async () => {
+    const sourceCookiesPath = join(tmpDir, 'Chrome', 'Default', 'Network', 'Cookies')
+    createChromiumCookieTestDatabase(sourceCookiesPath, [
+      {
+        domain: '.google.com',
+        name: 'SID',
+        value: '',
+        encryptedValue: Buffer.from('v10-invalid')
+      }
+    ]).close()
+    seedTarget([])
+
+    const result = await importCookiesFromBrowser(chromeBrowser(sourceCookiesPath), 'persist:test')
+
+    expect(result.ok && result.summary).toEqual({
+      totalCookies: 1,
+      importedCookies: 0,
+      skippedCookies: 1,
+      googleCookiesSkipped: 1,
+      domains: []
+    })
+    expect(execFileSyncMock).not.toHaveBeenCalled()
+    expect(clearDataMock).not.toHaveBeenCalled()
+    expect(cookiesSetMock).not.toHaveBeenCalled()
+  })
+
+  it('keeps the live Google rows in the staged restart-fallback database', async () => {
+    const sourceCookiesPath = seedSource([
+      { domain: '.google.com', name: 'SID', value: 'transplanted-sid' },
+      { domain: '.example.com', name: 'session', value: 'new' }
+    ])
+    seedTarget([
+      { domain: '.google.com', name: 'SID', value: 'live-sid' },
+      { domain: '.example.com', name: 'stale', value: 'stale' }
+    ])
+    // Why: a rejected set() forces the staged DB to be kept for cold-restart replay.
+    cookiesSetMock.mockRejectedValue(new Error('cookie rejected'))
+
+    const result = await importCookiesFromBrowser(chromeBrowser(sourceCookiesPath), 'persist:test')
+
+    expect(result.ok).toBe(true)
+    expect(setPendingCookieImportMock).toHaveBeenCalledTimes(1)
+    const [partition, stagedPath] = setPendingCookieImportMock.mock.calls[0]
+    expect(partition).toBe('persist:test')
+    expect(readStagedRows(stagedPath)).toEqual([
+      { host_key: '.example.com', name: 'session', value: 'new' },
+      { host_key: '.google.com', name: 'SID', value: 'live-sid' }
+    ])
+  })
+
+  // Why (STA-4061): reconstruction drops partition keys, so a rejected removal must not rebuild
+  // anything — not the excluded Google rows, and not the non-Google rows that were already gone.
+  it('fails the import without reconstructing any cookie when selective removal rejects', async () => {
+    const sourceCookiesPath = seedSource([
+      { domain: '.example.com', name: 'session', value: 'new' }
+    ])
+    seedTarget([{ domain: '.example.com', name: 'stale', value: 'stale' }])
+    cookiesGetMock.mockResolvedValue([
+      existingCookie('.google.com', 'SID'),
+      existingCookie('.example.com', 'removed-first'),
+      existingCookie('.other.test', 'stale')
+    ])
+    cookiesRemoveMock.mockImplementation(async (_url: string, name: string) => {
+      if (name === 'stale') {
+        throw new Error('cookie store unavailable')
+      }
+    })
+    clearDataMock.mockRejectedValue(new Error('storage busy'))
+
+    const result = await importCookiesFromBrowser(chromeBrowser(sourceCookiesPath), 'persist:test')
+
+    expect(result).toMatchObject({ ok: false })
+    expect(result.ok || result.reason).toContain('Could not clear existing cookies')
+    expect(clearDataMock).toHaveBeenCalledOnce()
+    expect(cookiesRemoveMock.mock.calls.map(([, name]) => name)).toEqual(['removed-first', 'stale'])
+    expect(cookiesSetMock).not.toHaveBeenCalled()
+    expect(setPendingCookieImportMock).not.toHaveBeenCalled()
+  })
+})
+
+// Why: freshly imported rows store the decrypted value as a BLOB; read both forms as text.
+function readStagedRows(stagedPath: string): { host_key: string; name: string; value: string }[] {
+  const stagedDb = new DatabaseSync(stagedPath, { readOnly: true })
+  const rows = stagedDb
+    .prepare('SELECT host_key, name, value FROM cookies ORDER BY host_key, name')
+    .all() as { host_key: string; name: string; value: string | Uint8Array }[]
+  stagedDb.close()
+  return rows.map((row) => ({
+    ...row,
+    value: typeof row.value === 'string' ? row.value : Buffer.from(row.value).toString('latin1')
+  }))
+}
+
+function chromeBrowser(cookiesPath: string) {
+  return {
+    family: 'chrome' as const,
+    label: 'Google Chrome',
+    cookiesPath,
+    keychainService: 'Chrome Safe Storage',
+    keychainAccount: 'Chrome',
+    profiles: [{ name: 'Default', directory: 'Default' }],
+    selectedProfile: 'Default'
+  }
+}
diff --git a/src/main/browser/browser-cookie-import-partition-rollback.electron.test.ts b/src/main/browser/browser-cookie-import-partition-rollback.electron.test.ts
new file mode 100644
index 00000000000..bbd0d9a8a25
--- /dev/null
+++ b/src/main/browser/browser-cookie-import-partition-rollback.electron.test.ts
@@ -0,0 +1,197 @@
+import { spawnSync } from 'node:child_process'
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterAll, describe, expect, it } from 'vitest'
+import { build as buildVite } from 'vite'
+
+const electronBinary = createRequire(import.meta.url)('electron') as string
+const fixtureRoots: string[] = []
+
+afterAll(() => {
+  for (const root of fixtureRoots) {
+    rmSync(root, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 })
+  }
+})
+
+type CdpCookie = { name: string; value: string; partitionKey?: Record<string, unknown> }
+
+type FixtureResult = {
+  beforePartitionKey: Record<string, unknown> | undefined
+  clearError: string | null
+  bulkClearCalls: number
+  remainingChips: CdpCookie[]
+  remainingPlain: CdpCookie[]
+  remainingExcluded: CdpCookie[]
+}
+
+const EXPECTED_PARTITION_KEY = {
+  topLevelSite: 'https://top.example',
+  hasCrossSiteAncestor: true
+}
+
+function buildFixtureMain(policyPath: string, resultPath: string): string {
+  return `
+const { app, BrowserWindow, session } = require('electron')
+const { writeFileSync } = require('node:fs')
+const { removeTransplantableCookies } = require(${JSON.stringify(policyPath)})
+const resultPath = ${JSON.stringify(resultPath)}
+let currentStep = 'starting'
+const mark = (step) => {
+  currentStep = step
+  writeFileSync(resultPath, JSON.stringify({ step }))
+}
+
+async function run() {
+  const timeout = setTimeout(() => {
+    writeFileSync(resultPath, JSON.stringify({ step: 'timed out after ' + currentStep }))
+    app.exit(1)
+  }, 20000)
+  await app.whenReady()
+  mark('ready')
+  const partition = 'persist:partition-rollback-cookie-test'
+  const targetSession = session.fromPartition(partition)
+  const window = new BrowserWindow({ show: false, webPreferences: { partition } })
+  mark('window created')
+  await window.loadURL('data:text/html,<title>cookie rollback fixture</title>')
+  mark('window loaded')
+  const debug = window.webContents.debugger
+  debug.attach('1.3')
+  mark('debugger attached')
+  await debug.sendCommand('Network.enable')
+  mark('network enabled')
+
+  // Only CDP can create a partitioned cookie; Electron's cookies API has no partitionKey.
+  await debug.sendCommand('Network.setCookie', {
+    url: 'https://app.acme-chips.test/',
+    name: 'chips-auth',
+    value: 'keep-me',
+    secure: true,
+    sameSite: 'None',
+    partitionKey: ${JSON.stringify(EXPECTED_PARTITION_KEY)}
+  })
+  const beforeChips = (await debug.sendCommand('Network.getAllCookies')).cookies
+    .find((cookie) => cookie.name === 'chips-auth')
+  if (!beforeChips || !beforeChips.partitionKey) throw new Error('CHIPS fixture cookie was not stored partitioned')
+  mark('partitioned cookie set')
+
+  await targetSession.cookies.set({ url: 'https://plain.example/', name: 'plain', value: 'stale', secure: true })
+  await targetSession.cookies.set({ url: 'https://victim.example/', name: 'victim', value: 'stale', secure: true })
+  // Why: keep a live excluded cookie in the partial-failure fixture so the fallback proves it
+  // preserves that cookie while deleting the removable ones it can reach.
+  await targetSession.cookies.set({ url: 'https://accounts.google.com/', name: 'SID', value: 'live', secure: true })
+  mark('removable cookies set')
+
+  const store = {
+    get: (filter) => targetSession.cookies.get(filter),
+    set: (details) => targetSession.cookies.set(details),
+    // Why: one rejecting removal is what drove the old rollback; the rest still succeed.
+    remove: async (url, name) => {
+      if (name === 'victim') throw new Error('forced victim removal failure')
+      return targetSession.cookies.remove(url, name)
+    }
+  }
+
+  // Why: the bulk clear is the ordinary path now, so rejecting it is what routes this fixture onto
+  // the per-cookie fallback where a partial failure — and the old rollback — could happen at all.
+  let bulkClearCalls = 0
+  const clearSession = {
+    cookies: store,
+    clearData: async () => {
+      bulkClearCalls++
+      throw new Error('forced bulk clear failure')
+    }
+  }
+
+  let clearError = null
+  try {
+    await removeTransplantableCookies(clearSession)
+  } catch (error) {
+    clearError = String(error?.message || error)
+  }
+  mark('clear finished')
+
+  const afterCookies = (await debug.sendCommand('Network.getAllCookies')).cookies
+  const project = (name) => afterCookies
+    .filter((cookie) => cookie.name === name)
+    .map((cookie) => ({ name: cookie.name, value: cookie.value, partitionKey: cookie.partitionKey }))
+  clearTimeout(timeout)
+  writeFileSync(resultPath, JSON.stringify({
+    beforePartitionKey: beforeChips.partitionKey,
+    clearError,
+    bulkClearCalls,
+    remainingChips: project('chips-auth'),
+    remainingPlain: project('plain'),
+    remainingExcluded: project('SID')
+  }))
+  debug.detach()
+  window.destroy()
+  app.exit(0)
+}
+
+run().catch((error) => {
+  writeFileSync(resultPath, JSON.stringify({ step: currentStep, error: String(error?.stack || error) }))
+  app.exit(1)
+})
+`
+}
+
+async function runFixture(): Promise<FixtureResult> {
+  const root = mkdtempSync(join(tmpdir(), 'orca-partition-rollback-'))
+  fixtureRoots.push(root)
+  const policyPath = join(root, 'browser-cookie-import-policy.cjs')
+  const resultPath = join(root, 'result.json')
+  const fixturePath = join(root, 'main.cjs')
+  await buildVite({
+    configFile: false,
+    logLevel: 'silent',
+    build: {
+      emptyOutDir: false,
+      lib: {
+        entry: join(process.cwd(), 'src/main/browser/browser-cookie-import-policy.ts'),
+        formats: ['cjs'],
+        fileName: () => 'browser-cookie-import-policy.cjs'
+      },
+      outDir: root,
+      target: 'node20',
+      rollupOptions: { external: ['electron', /^node:/] }
+    }
+  })
+  writeFileSync(fixturePath, buildFixtureMain(policyPath, resultPath))
+  const { ELECTRON_RUN_AS_NODE: _electronRunAsNode, ...env } = process.env
+  const electronArgs = [fixturePath, `--user-data-dir=${join(root, 'profile')}`]
+  const executable = process.platform === 'linux' ? 'xvfb-run' : electronBinary
+  const args =
+    process.platform === 'linux'
+      ? ['--auto-servernum', electronBinary, ...electronArgs, '--no-sandbox']
+      : electronArgs
+  const run = spawnSync(executable, args, {
+    encoding: 'utf8',
+    env,
+    timeout: 60_000
+  })
+  const fixtureResult = existsSync(resultPath) ? readFileSync(resultPath, 'utf8') : 'no result'
+  expect(run.error).toBeUndefined()
+  expect(run.status, `${fixtureResult}\n${run.stdout}\n${run.stderr}`).toBe(0)
+  return JSON.parse(fixtureResult) as FixtureResult
+}
+
+describe('non-Google partitioned cookie under a failed Electron cookie clear', () => {
+  it('never resurrects a removed partitioned cookie', async () => {
+    const result = await runFixture()
+
+    expect(result.beforePartitionKey).toEqual(EXPECTED_PARTITION_KEY)
+    // Why (STA-4065): the fallback is only reachable once the bulk clear has been tried and failed;
+    // if it ever succeeded here the partial-failure assertions below would be vacuous.
+    expect(result.bulkClearCalls).toBe(1)
+    expect(result.remainingExcluded.map(({ name }) => name)).toEqual(['SID'])
+    expect(result.clearError).toContain('Could not clear existing cookies')
+    // STA-4061: rollback rebuilt this cookie through cookies.set, which drops partitionKey.
+    expect(
+      result.remainingChips,
+      `chips-auth survived: ${JSON.stringify(result.remainingChips)}`
+    ).toEqual([])
+    expect(result.remainingPlain).toEqual([])
+  }, 90_000)
+})
diff --git a/src/main/browser/browser-cookie-import-partition.electron.test.ts b/src/main/browser/browser-cookie-import-partition.electron.test.ts
new file mode 100644
index 00000000000..e844341e12f
--- /dev/null
+++ b/src/main/browser/browser-cookie-import-partition.electron.test.ts
@@ -0,0 +1,213 @@
+import { spawnSync } from 'node:child_process'
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterAll, describe, expect, it } from 'vitest'
+import { build as buildVite } from 'vite'
+import { createChromiumCookieTestDatabase } from './browser-cookie-import-test-database'
+
+const electronBinary = createRequire(import.meta.url)('electron') as string
+const fixtureRoots: string[] = []
+
+afterAll(() => {
+  for (const root of fixtureRoots) {
+    rmSync(root, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 })
+  }
+})
+
+type FixtureResult = {
+  before: Record<string, unknown>
+  after: Record<string, unknown>
+  electronCookieKeys: string[]
+  importResult: Record<string, unknown>
+  remainingNames: string[]
+}
+
+function buildFixtureMain(
+  importPath: string,
+  resultPath: string,
+  sourceCookiesPath: string
+): string {
+  return `
+const { app, BrowserWindow, session } = require('electron')
+const { writeFileSync } = require('node:fs')
+const { importCookiesFromBrowser } = require(${JSON.stringify(importPath)})
+const resultPath = ${JSON.stringify(resultPath)}
+let currentStep = 'starting'
+const mark = (step) => {
+  currentStep = step
+  writeFileSync(resultPath, JSON.stringify({ step }))
+}
+
+async function run() {
+  const timeout = setTimeout(() => {
+    writeFileSync(resultPath, JSON.stringify({ step: 'timed out after ' + currentStep }))
+    app.exit(1)
+  }, 15000)
+  await app.whenReady()
+  mark('ready')
+  const partition = 'persist:partition-cookie-test'
+  const targetSession = session.fromPartition(partition)
+  const window = new BrowserWindow({ show: false, webPreferences: { partition } })
+  mark('window created')
+  await window.loadURL('data:text/html,<title>cookie fixture</title>')
+  mark('window loaded')
+  const debug = window.webContents.debugger
+  debug.attach('1.3')
+  mark('debugger attached')
+  await debug.sendCommand('Network.enable')
+  mark('network enabled')
+  await debug.sendCommand('Network.setCookie', {
+    url: 'https://accounts.google.com/',
+    name: 'partitioned-google',
+    value: 'live-value',
+    secure: true,
+    httpOnly: true,
+    sameSite: 'None',
+    partitionKey: { topLevelSite: 'https://example.com', hasCrossSiteAncestor: true }
+  })
+  mark('partitioned cookie set')
+  await targetSession.cookies.set({
+    url: 'https://stale.example/',
+    name: 'stale',
+    value: 'remove-me',
+    secure: true
+  })
+  // Why: the excluded origin is HTTPS, so prove registrable-domain matching also keeps HTTP.
+  await targetSession.cookies.set({
+    url: 'http://mail.google.com/',
+    name: 'http-google',
+    value: 'live-http-value',
+    secure: false
+  })
+  await targetSession.cookies.set({
+    url: 'https://google.com/',
+    domain: '.google.com',
+    name: 'domain-google',
+    value: 'live-domain-value',
+    secure: true
+  })
+  mark('ordinary cookie set')
+
+  const beforeCookies = (await debug.sendCommand('Network.getAllCookies')).cookies
+  const before = beforeCookies.find((cookie) => cookie.name === 'partitioned-google')
+  const electronCookie = (await targetSession.cookies.get({ name: 'partitioned-google' }))[0]
+  if (!before || !electronCookie) throw new Error('Partitioned fixture cookie was not created')
+  mark('cookies read')
+
+  const importResult = await importCookiesFromBrowser({
+    family: 'chrome',
+    label: 'Chromium fixture',
+    cookiesPath: ${JSON.stringify(sourceCookiesPath)},
+    profiles: [{ name: 'Default', directory: 'Default' }],
+    selectedProfile: 'Default'
+  }, partition)
+  if (!importResult.ok) throw new Error('Native import failed: ' + importResult.reason)
+  mark('native import complete')
+
+  const afterCookies = (await debug.sendCommand('Network.getAllCookies')).cookies
+  const after = afterCookies.find((cookie) => cookie.name === 'partitioned-google')
+  if (!after) throw new Error('Partitioned Google cookie was removed')
+  clearTimeout(timeout)
+  writeFileSync(resultPath, JSON.stringify({
+    before,
+    after,
+    electronCookieKeys: Object.keys(electronCookie).sort(),
+    importResult,
+    remainingNames: afterCookies.map((cookie) => cookie.name).sort()
+  }))
+  debug.detach()
+  window.destroy()
+  app.exit(0)
+}
+
+run().catch((error) => {
+  writeFileSync(resultPath, JSON.stringify({ step: currentStep, error: String(error?.stack || error) }))
+  app.exit(1)
+})
+`
+}
+
+async function runFixture(): Promise<FixtureResult> {
+  const root = mkdtempSync(join(tmpdir(), 'orca-partition-cookie-'))
+  fixtureRoots.push(root)
+  const importPath = join(root, 'browser-cookie-import.cjs')
+  const registryStubPath = join(root, 'browser-session-registry.cjs')
+  const resultPath = join(root, 'result.json')
+  const sourceCookiesPath = join(root, 'source', 'Network', 'Cookies')
+  const fixturePath = join(root, 'main.cjs')
+  createChromiumCookieTestDatabase(sourceCookiesPath, [
+    { domain: '.example.com', name: 'imported', value: 'new-value' }
+  ]).close()
+  writeFileSync(
+    registryStubPath,
+    'exports.browserSessionRegistry = { clearPendingCookieImport() {}, setPendingCookieImport() {} }\n'
+  )
+  await buildVite({
+    configFile: false,
+    logLevel: 'silent',
+    plugins: [
+      {
+        name: 'stub-browser-session-registry',
+        resolveId(source, importer) {
+          return source === './browser-session-registry' &&
+            importer?.endsWith('browser-cookie-import.ts')
+            ? registryStubPath
+            : null
+        }
+      }
+    ],
+    build: {
+      emptyOutDir: false,
+      lib: {
+        entry: join(process.cwd(), 'src/main/browser/browser-cookie-import.ts'),
+        formats: ['cjs'],
+        fileName: () => 'browser-cookie-import.cjs'
+      },
+      outDir: root,
+      target: 'node20',
+      rollupOptions: { external: ['electron', /^node:/] }
+    }
+  })
+  writeFileSync(fixturePath, buildFixtureMain(importPath, resultPath, sourceCookiesPath))
+  const { ELECTRON_RUN_AS_NODE: _electronRunAsNode, ...env } = process.env
+  const electronArgs = [fixturePath, `--user-data-dir=${join(root, 'profile')}`]
+  const executable = process.platform === 'linux' ? 'xvfb-run' : electronBinary
+  const args =
+    process.platform === 'linux'
+      ? ['--auto-servernum', electronBinary, ...electronArgs, '--no-sandbox']
+      : electronArgs
+  const run = spawnSync(executable, args, {
+    encoding: 'utf8',
+    env,
+    timeout: 60_000
+  })
+  const fixtureResult = existsSync(resultPath) ? readFileSync(resultPath, 'utf8') : 'no result'
+  expect(run.error).toBeUndefined()
+  expect(run.status, `${fixtureResult}\n${run.stdout}\n${run.stderr}`).toBe(0)
+  return JSON.parse(fixtureResult) as FixtureResult
+}
+
+describe('native Chromium excluded partition cookie under Electron', () => {
+  it('survives selective clearing unchanged without a lossy Electron reconstruction', async () => {
+    const result = await runFixture()
+
+    expect(result.before.partitionKey).toEqual({
+      topLevelSite: 'https://example.com',
+      hasCrossSiteAncestor: true
+    })
+    expect(result.electronCookieKeys).not.toContain('partitionKey')
+    expect(result.after).toEqual(result.before)
+    expect(result.importResult).toMatchObject({
+      ok: true,
+      summary: { importedCookies: 1, domains: ['example.com'] }
+    })
+    expect(result.remainingNames).toEqual([
+      'domain-google',
+      'http-google',
+      'imported',
+      'partitioned-google'
+    ])
+  }, 90_000)
+})
diff --git a/src/main/browser/browser-cookie-import-policy.test.ts b/src/main/browser/browser-cookie-import-policy.test.ts
index 31ca329bf8f..51a1a6107d5 100644
--- a/src/main/browser/browser-cookie-import-policy.test.ts
+++ b/src/main/browser/browser-cookie-import-policy.test.ts
@@ -1,8 +1,12 @@
-import { describe, expect, it, vi } from 'vitest'
+import { describe, expect, it, vi, type Mock } from 'vitest'
+import { DatabaseSync } from 'node:sqlite'
 import type { Cookie } from 'electron'
 import {
   isGoogleSourceBoundCookie,
+  isNonTransplantableCookieDomain,
+  NON_TRANSPLANTABLE_HOST_KEY_SQL,
   normalizeCookieDomain,
+  removeTransplantableCookies,
   replaceCookiesForImportedDomains
 } from './browser-cookie-import-policy'
 
@@ -147,3 +151,286 @@ describe('replaceCookiesForImportedDomains', () => {
     })
   })
 })
+
+describe('isNonTransplantableCookieDomain', () => {
+  it('covers the whole google.com registrable family', () => {
+    expect(isNonTransplantableCookieDomain('google.com')).toBe(true)
+    expect(isNonTransplantableCookieDomain('.google.com')).toBe(true)
+    expect(isNonTransplantableCookieDomain('accounts.google.com')).toBe(true)
+    expect(isNonTransplantableCookieDomain('MAIL.Google.Com')).toBe(true)
+  })
+
+  it('does not match lookalikes or unrelated sites', () => {
+    expect(isNonTransplantableCookieDomain('withgoogle.com')).toBe(false)
+    expect(isNonTransplantableCookieDomain('google.com.evil.example')).toBe(false)
+    expect(isNonTransplantableCookieDomain('notgoogle.com')).toBe(false)
+    expect(isNonTransplantableCookieDomain('linear.app')).toBe(false)
+    expect(isNonTransplantableCookieDomain('')).toBe(false)
+  })
+
+  // Why: youtube.com re-issues its cookies from a transplanted session, so excluding it would
+  // drop imports users asked for. Locking it in keeps a future "just add it too" edit honest.
+  it('deliberately leaves youtube.com transplantable', () => {
+    expect(isNonTransplantableCookieDomain('.youtube.com')).toBe(false)
+    expect(isNonTransplantableCookieDomain('accounts.youtube.com')).toBe(false)
+  })
+})
+
+describe('NON_TRANSPLANTABLE_HOST_KEY_SQL', () => {
+  it('selects the google.com family and nothing that merely looks like it', () => {
+    const db = new DatabaseSync(':memory:')
+    db.exec('CREATE TABLE cookies (host_key TEXT)')
+    for (const hostKey of [
+      'google.com',
+      '.google.com',
+      'accounts.google.com',
+      'withgoogle.com',
+      'google.com.evil.example',
+      '.youtube.com',
+      '.linear.app'
+    ]) {
+      db.prepare('INSERT INTO cookies (host_key) VALUES (?)').run(hostKey)
+    }
+
+    const matched = db
+      .prepare(
+        `SELECT host_key FROM cookies WHERE ${NON_TRANSPLANTABLE_HOST_KEY_SQL} ORDER BY host_key`
+      )
+      .all() as { host_key: string }[]
+    db.close()
+
+    expect(matched.map((row) => row.host_key)).toEqual([
+      '.google.com',
+      'accounts.google.com',
+      'google.com'
+    ])
+  })
+})
+
+type CookieClearMocks = {
+  get: Mock
+  remove: Mock
+  set: Mock
+  clearData: Mock
+}
+
+describe('removeTransplantableCookies', () => {
+  const rejectingBulkClear = () => vi.fn().mockRejectedValue(new Error('storage busy'))
+
+  function clearSession(cookies: Cookie[], overrides: Partial<CookieClearMocks> = {}) {
+    const store = {
+      get: vi.fn().mockResolvedValue(cookies),
+      remove: vi.fn().mockResolvedValue(undefined),
+      set: vi.fn().mockResolvedValue(undefined),
+      ...overrides
+    }
+    const clearData = overrides.clearData ?? vi.fn().mockResolvedValue(undefined)
+    return {
+      session: { cookies: store, clearData },
+      get: store.get,
+      remove: store.remove,
+      set: store.set,
+      clearData
+    }
+  }
+
+  // Why (STA-4065): the bulk call is the ordinary path even when the jar holds cookies to keep —
+  // excludeOrigins preserves the whole google.com family, verified against real Electron.
+  it('clears a jar holding Google cookies in one call that excludes them', async () => {
+    const { session, remove, set, clearData } = clearSession([
+      cookie('.google.com', 'SID'),
+      cookie('accounts.google.com', 'ACCOUNT'),
+      cookie('.example.com', 'session'),
+      cookie('other.test', 'tracker', '/scoped')
+    ])
+
+    await removeTransplantableCookies(session)
+
+    expect(clearData.mock.calls).toEqual([
+      [{ dataTypes: ['cookies'], excludeOrigins: ['https://google.com'] }]
+    ])
+    expect(remove).not.toHaveBeenCalled()
+    expect(set).not.toHaveBeenCalled()
+  })
+
+  it('bulk clears in one call when the jar holds nothing to preserve', async () => {
+    const { session, remove, set, clearData } = clearSession([
+      cookie('.example.com', 'session'),
+      cookie('other.test', 'tracker', '/scoped'),
+      cookie('notgoogle.com', 'lookalike')
+    ])
+
+    await removeTransplantableCookies(session)
+
+    expect(clearData.mock.calls).toEqual([
+      [{ dataTypes: ['cookies'], excludeOrigins: ['https://google.com'] }]
+    ])
+    expect(remove).not.toHaveBeenCalled()
+    expect(set).not.toHaveBeenCalled()
+  })
+
+  it('touches nothing when the jar is already empty', async () => {
+    const { session, remove, clearData } = clearSession([])
+
+    await removeTransplantableCookies(session)
+
+    expect(clearData).not.toHaveBeenCalled()
+    expect(remove).not.toHaveBeenCalled()
+  })
+
+  it('bulk clears cookies the per-cookie path could never address', async () => {
+    const { session, clearData } = clearSession([
+      { ...cookie('.example.com', 'session'), domain: '' }
+    ])
+
+    await removeTransplantableCookies(session)
+
+    expect(clearData).toHaveBeenCalledOnce()
+  })
+
+  it('falls back to per-cookie removal when the bulk clear rejects', async () => {
+    const { session, remove, clearData } = clearSession(
+      [cookie('.example.com', 'session'), cookie('other.test', 'tracker')],
+      { clearData: rejectingBulkClear() }
+    )
+
+    await removeTransplantableCookies(session)
+
+    expect(clearData).toHaveBeenCalledOnce()
+    expect(remove.mock.calls).toEqual([
+      ['https://example.com/', 'session'],
+      ['https://other.test/', 'tracker']
+    ])
+  })
+
+  it('re-reads the jar after a rejected bulk clear', async () => {
+    const beforeAttempt = [cookie('.removed.test', 'gone-before-fallback')]
+    const afterAttempt = [
+      cookie('.google.com', 'SID'),
+      cookie('.survivor.test', 'survived'),
+      cookie('.arrived.test', 'arrived-during-clear')
+    ]
+    const get = vi.fn().mockResolvedValueOnce(beforeAttempt).mockResolvedValueOnce(afterAttempt)
+    const { session, remove } = clearSession(beforeAttempt, {
+      get,
+      clearData: rejectingBulkClear()
+    })
+
+    await removeTransplantableCookies(session)
+
+    expect(get).toHaveBeenCalledTimes(2)
+    expect(remove.mock.calls).toEqual([
+      ['https://survivor.test/', 'survived'],
+      ['https://arrived.test/', 'arrived-during-clear']
+    ])
+  })
+
+  // Why: the fallback carries the same exclusion as the bulk call, so a rejected clearData must
+  // not become the path that finally deletes a live Google session.
+  it('still preserves Google cookies on the per-cookie fallback', async () => {
+    const { session, remove, set } = clearSession(
+      [
+        cookie('.google.com', 'SID'),
+        cookie('accounts.google.com', 'ACCOUNT'),
+        cookie('.example.com', 'session')
+      ],
+      { clearData: rejectingBulkClear() }
+    )
+
+    await removeTransplantableCookies(session)
+
+    expect(remove.mock.calls).toEqual([['https://example.com/', 'session']])
+    expect(set).not.toHaveBeenCalled()
+  })
+
+  // Why (STA-4061): reconstructing a removed cookie loses its partition key, and the snapshot
+  // cannot say which cookies had one, so a failed clear must stay failed.
+  it('never reconstructs removed cookies when another removal fails', async () => {
+    const { session, remove, set } = clearSession(
+      [
+        cookie('.google.com', 'SID'),
+        cookie('.example.com', 'first', '/one'),
+        cookie('.example.com', 'second', '/two'),
+        cookie('.example.com', 'third', '/three')
+      ],
+      {
+        clearData: rejectingBulkClear(),
+        remove: vi.fn().mockImplementation(async (_url: string, name: string) => {
+          if (name === 'second') {
+            throw new Error('store unavailable')
+          }
+        })
+      }
+    )
+
+    await expect(removeTransplantableCookies(session)).rejects.toThrow(
+      'the session was left partially cleared'
+    )
+    expect(remove).toHaveBeenCalledTimes(3)
+    expect(set).not.toHaveBeenCalled()
+  })
+
+  it('bounds parallel removals so large cookie jars do not clear serially or fan out', async () => {
+    let releaseRemovals: (() => void) | undefined
+    const removalsReleased = new Promise<void>((resolve) => {
+      releaseRemovals = resolve
+    })
+    let active = 0
+    let maxActive = 0
+    const { session, remove, set } = clearSession(
+      [
+        cookie('.google.com', 'SID'),
+        ...Array.from({ length: 12 }, (_, index) => cookie('.example.com', `${index}`))
+      ],
+      {
+        clearData: rejectingBulkClear(),
+        remove: vi.fn().mockImplementation(async () => {
+          active++
+          maxActive = Math.max(maxActive, active)
+          await removalsReleased
+          active--
+        })
+      }
+    )
+
+    const clearing = removeTransplantableCookies(session)
+    await vi.waitFor(() => expect(remove).toHaveBeenCalledTimes(8))
+    expect(maxActive).toBe(8)
+    releaseRemovals?.()
+    await clearing
+
+    expect(remove).toHaveBeenCalledTimes(12)
+    expect(set).not.toHaveBeenCalled()
+  })
+
+  it('serializes cookies that share Electron removal coordinates', async () => {
+    let releaseFirst: (() => void) | undefined
+    const firstReleased = new Promise<void>((resolve) => {
+      releaseFirst = resolve
+    })
+    const { session, remove } = clearSession(
+      [
+        cookie('.google.com', 'SID'),
+        cookie('.example.com', 'session'),
+        { ...cookie('example.com', 'session'), hostOnly: true }
+      ],
+      {
+        clearData: rejectingBulkClear(),
+        remove: vi
+          .fn()
+          .mockImplementationOnce(() => firstReleased)
+          .mockResolvedValueOnce(undefined)
+      }
+    )
+
+    const clearing = removeTransplantableCookies(session)
+    await vi.waitFor(() => expect(remove).toHaveBeenCalledOnce())
+    releaseFirst?.()
+    await clearing
+
+    expect(remove.mock.calls).toEqual([
+      ['https://example.com/', 'session'],
+      ['https://example.com/', 'session']
+    ])
+  })
+})
diff --git a/src/main/browser/browser-cookie-import-policy.ts b/src/main/browser/browser-cookie-import-policy.ts
index 216542f08ea..6f81407f4a9 100644
--- a/src/main/browser/browser-cookie-import-policy.ts
+++ b/src/main/browser/browser-cookie-import-policy.ts
@@ -1,5 +1,6 @@
-import type { Cookie, Cookies } from 'electron'
+import type { Cookie, Cookies, Session } from 'electron'
 import { parse as parseDomain } from 'psl'
+import { mapSettledWithConcurrency } from '../../shared/map-with-concurrency'
 
 const GOOGLE_SOURCE_BOUND_COOKIE_NAMES = new Set([
   'SIDCC',
@@ -53,6 +54,41 @@ export function normalizeCookieImportDomain(domain: string): string | null {
   return normalized
 }
 
+// Why (STA-3811): registrable families whose sessions are device-bound server-side, so a
+// transplanted cookie is rejected (or flagged and expired within ~1h) no matter how faithfully
+// it is copied. Signing in directly inside Orca is the only path that produces a working
+// session, so an import must never write these cookies and never remove them either — the
+// live session is always more valuable than anything an import could put in its place.
+// Entries must be canonical lowercase ASCII (punycode) registrable domains, never subdomains or
+// public suffixes, because clearData derives one excluded origin and matches at that boundary.
+// Adding a site is one entry here.
+// youtube.com is deliberately NOT listed: YouTube accepts a transplanted session and re-issues
+// its cookies via the accounts.youtube.com relay, so excluding it would silently drop imports
+// users actually asked for.
+const NON_TRANSPLANTABLE_DOMAINS = ['google.com'] as const
+const NON_TRANSPLANTABLE_CLEAR_EXCLUDED_ORIGINS = NON_TRANSPLANTABLE_DOMAINS.map(
+  (root) => `https://${root}`
+)
+const COOKIE_CLEAR_CONCURRENCY = 8
+
+export function isNonTransplantableCookieDomain(domain: string): boolean {
+  const normalized = normalizeCookieDomain(domain)
+  if (!normalized) {
+    return false
+  }
+  return NON_TRANSPLANTABLE_DOMAINS.some(
+    (root) => normalized === root || normalized.endsWith(`.${root}`)
+  )
+}
+
+// Why: Chromium stores host_key lowercase as 'google.com', '.google.com' or 'sub.google.com';
+// the LIKE pattern covers the leading-dot row and cannot match lookalikes ('withgoogle.com').
+export const NON_TRANSPLANTABLE_HOST_KEY_SQL = NON_TRANSPLANTABLE_DOMAINS.map(
+  (root) => `host_key = '${root}' OR host_key LIKE '%.${root}'`
+).join(' OR ')
+
+// Why: subsumed by the domain exclusion above for google.com — kept because it is the general
+// rule for rotation-only cookies and applies to any family added without a full exclusion.
 export function isGoogleSourceBoundCookie(name: string, domain: string): boolean {
   if (!GOOGLE_SOURCE_BOUND_COOKIE_NAMES.has(name)) {
     return false
@@ -165,6 +201,83 @@ export async function restoreImportedDomainCookies(
   }
 }
 
+// Why (STA-4061): 'set' stays out so the lossy partition-dropping reconstruction cannot return.
+export type CookieClearSession = {
+  cookies: Pick<Cookies, 'get' | 'remove'>
+  clearData: Session['clearData']
+}
+
+// Why: Electron cannot round-trip partition identity, so excluded cookies must never be removed.
+// Why (STA-4061): the same gap forbids rolling a partial clear back. cookies.get() omits
+// partitionKey and cookies.set() silently drops it, so every reconstruction is a coin flip that
+// can downgrade a partitioned (CHIPS) cookie into an unpartitioned one — and nothing in the
+// snapshot says which cookies are at risk. A partially cleared jar is a retryable import failure;
+// a downgraded cookie is unrecoverable auth-state corruption that survives restart.
+// Why (STA-4065): the exclusion is module state rather than a parameter so the predicate and the
+// origins the bulk clear preserves cannot drift apart — a caller-supplied predicate that disagreed
+// with NON_TRANSPLANTABLE_DOMAINS would silently delete a cookie the bulk call is meant to keep.
+export async function removeTransplantableCookies(
+  targetSession: CookieClearSession
+): Promise<void> {
+  const store = targetSession.cookies
+  const initialCookies = await store.get({})
+  if (initialCookies.length === 0) {
+    return
+  }
+
+  // Why (STA-4065): measured on Electron 43, excludeOrigins preserves the whole registrable
+  // family — host, leading-dot, subdomain, and partitioned Google cookies — so one call replaces a
+  // remove() per cookie even when the jar holds cookies to keep. That is the ordinary case here:
+  // this import exists for Google, so a Google cookie is usually present.
+  try {
+    await targetSession.clearData({
+      dataTypes: ['cookies'],
+      excludeOrigins: NON_TRANSPLANTABLE_CLEAR_EXCLUDED_ORIGINS
+    })
+    return
+  } catch {
+    // Why: a rejected bulk clear can still have changed the jar, so the fallback must act on the
+    // survivors rather than stale removal coordinates from before the attempt.
+  }
+
+  const existingCookies = await store.get({})
+  const removableGroups = new Map<string, { cookie: Cookie; url: string }[]>()
+  for (const cookie of existingCookies) {
+    if (isNonTransplantableCookieDomain(cookie.domain ?? '')) {
+      continue
+    }
+    const domain = cookie.domain ? normalizeCookieDomain(cookie.domain) : null
+    const url = domain ? cookieRemovalUrl(cookie, domain) : null
+    if (!url) {
+      continue
+    }
+    const key = JSON.stringify([url, cookie.name])
+    const group = removableGroups.get(key) ?? []
+    group.push({ cookie, url })
+    removableGroups.set(key, group)
+  }
+
+  const results = await mapSettledWithConcurrency(
+    [...removableGroups.values()],
+    COOKIE_CLEAR_CONCURRENCY,
+    async (group) => {
+      // Why: identical removal coordinates must stay ordered instead of racing.
+      for (const { cookie, url } of group) {
+        await store.remove(url, cookie.name)
+      }
+    }
+  )
+  const failures = results.flatMap((result) =>
+    result.status === 'rejected' ? [result.reason] : []
+  )
+  if (failures.length > 0) {
+    throw new AggregateError(
+      failures,
+      'Could not clear existing cookies; the session was left partially cleared'
+    )
+  }
+}
+
 export async function replaceCookiesForImportedDomains(
   store: Pick<Cookies, 'get' | 'remove' | 'set'>,
   importedDomains: readonly string[]
diff --git a/src/main/browser/browser-cookie-import-replacement.test.ts b/src/main/browser/browser-cookie-import-replacement.test.ts
index 74c2ec432f1..db70922ccb5 100644
--- a/src/main/browser/browser-cookie-import-replacement.test.ts
+++ b/src/main/browser/browser-cookie-import-replacement.test.ts
@@ -59,10 +59,11 @@ describe('validated cookie replacement', () => {
     return filePath
   }
 
-  it('filters Google source-bound cookies before replacing imported domain scopes', async () => {
+  it('keeps Google out of the replace scope so its cookies are never removed', async () => {
     cookiesGetMock.mockResolvedValue([
       cookie('.google.com', 'old-google'),
       cookie('.accounts.google.com', 'old-accounts', '/signin'),
+      cookie('.example.com', 'old-example'),
       cookie('.unrelated.com', 'keep'),
       cookie('.google.com.evil.example', 'keep-suffix-confusion')
     ])
@@ -76,15 +77,13 @@ describe('validated cookie replacement', () => {
 
     expect(result.ok && result.summary).toMatchObject({
       totalCookies: 3,
-      importedCookies: 2,
-      skippedCookies: 1,
-      domains: ['example.com', 'google.com']
+      importedCookies: 1,
+      skippedCookies: 2,
+      googleCookiesSkipped: 2,
+      domains: ['example.com']
     })
-    expect(cookiesRemoveMock.mock.calls).toEqual([
-      ['https://google.com/', 'old-google'],
-      ['https://accounts.google.com/signin', 'old-accounts']
-    ])
-    expect(cookiesSetMock.mock.calls.map(([details]) => details.name)).toEqual(['SAPISID', 'SIDCC'])
+    expect(cookiesRemoveMock.mock.calls).toEqual([['https://example.com/', 'old-example']])
+    expect(cookiesSetMock.mock.calls.map(([details]) => details.name)).toEqual(['SIDCC'])
     expect(Math.max(...cookiesRemoveMock.mock.invocationCallOrder)).toBeLessThan(
       Math.min(...cookiesSetMock.mock.invocationCallOrder)
     )
@@ -101,6 +100,7 @@ describe('validated cookie replacement', () => {
       totalCookies: 1,
       importedCookies: 0,
       skippedCookies: 1,
+      googleCookiesSkipped: 1,
       domains: []
     })
     expect(cookiesGetMock).not.toHaveBeenCalled()
@@ -168,7 +168,7 @@ describe('validated cookie replacement', () => {
 })
 
 describe('native Chromium integrity-cookie accounting', () => {
-  let clearStorageDataMock: ReturnType<typeof vi.fn>
+  let clearDataMock: ReturnType<typeof vi.fn>
   let cookiesSetMock: ReturnType<typeof vi.fn>
   let tmpDir: string
 
@@ -180,15 +180,16 @@ describe('native Chromium integrity-cookie accounting', () => {
     })
     clearPendingCookieImportMock.mockClear()
     setPendingCookieImportMock.mockClear()
-    clearStorageDataMock = vi.fn().mockResolvedValue(undefined)
+    clearDataMock = vi.fn().mockResolvedValue(undefined)
     cookiesSetMock = vi.fn().mockResolvedValue(undefined)
     sessionFromPartitionMock.mockReset().mockReturnValue({
       cookies: {
         flushStore: vi.fn().mockResolvedValue(undefined),
+        get: vi.fn().mockResolvedValue([]),
         remove: vi.fn().mockResolvedValue(undefined),
         set: cookiesSetMock
       },
-      clearStorageData: clearStorageDataMock
+      clearData: clearDataMock
     })
   })
 
@@ -196,7 +197,7 @@ describe('native Chromium integrity-cookie accounting', () => {
     rmSync(tmpDir, { recursive: true, force: true })
   })
 
-  it('includes domain-scoped integrity cookies in skippedCookies', async () => {
+  it('counts every excluded Google cookie in skippedCookies', async () => {
     const sourceCookiesPath = join(tmpDir, 'Chrome', 'Default', 'Network', 'Cookies')
     const targetCookiesPath = join(tmpDir, 'userData', 'Partitions', 'test', 'Network', 'Cookies')
     createChromiumCookieTestDatabase(sourceCookiesPath, [
@@ -214,11 +215,12 @@ describe('native Chromium integrity-cookie accounting', () => {
       )
       expect(result.ok && result.summary).toMatchObject({
         totalCookies: 3,
-        importedCookies: 2,
-        skippedCookies: 1,
-        domains: ['example.com', 'google.com']
+        importedCookies: 1,
+        skippedCookies: 2,
+        googleCookiesSkipped: 2,
+        domains: ['example.com']
       })
-      expect(cookiesSetMock.mock.calls.map(([details]) => details.name)).toEqual(['SAPISID', 'AEC'])
+      expect(cookiesSetMock.mock.calls.map(([details]) => details.name)).toEqual(['AEC'])
     } finally {
       platformSpy.mockRestore()
     }
@@ -247,9 +249,10 @@ describe('native Chromium integrity-cookie accounting', () => {
         totalCookies: 3,
         importedCookies: 0,
         skippedCookies: 3,
+        googleCookiesSkipped: 2,
         domains: []
       })
-      expect(clearStorageDataMock).not.toHaveBeenCalled()
+      expect(clearDataMock).not.toHaveBeenCalled()
       expect(cookiesSetMock).not.toHaveBeenCalled()
       expect(setPendingCookieImportMock).not.toHaveBeenCalled()
       expect(clearPendingCookieImportMock).not.toHaveBeenCalled()
diff --git a/src/main/browser/browser-cookie-import.test.ts b/src/main/browser/browser-cookie-import.test.ts
index aefdd27fbf5..90514321d54 100644
--- a/src/main/browser/browser-cookie-import.test.ts
+++ b/src/main/browser/browser-cookie-import.test.ts
@@ -423,7 +423,7 @@ describe('importCookiesFromBrowser Chromium', () => {
   let cookiesSetMock: ReturnType<typeof vi.fn>
   let cookiesRemoveMock: ReturnType<typeof vi.fn>
   let cookiesFlushStoreMock: ReturnType<typeof vi.fn>
-  let clearStorageDataMock: ReturnType<typeof vi.fn>
+  let clearDataMock: ReturnType<typeof vi.fn>
   let setUserAgentMock: ReturnType<typeof vi.fn>
 
   beforeEach(() => {
@@ -431,7 +431,7 @@ describe('importCookiesFromBrowser Chromium', () => {
     cookiesSetMock = vi.fn().mockResolvedValue(undefined)
     cookiesRemoveMock = vi.fn().mockResolvedValue(undefined)
     cookiesFlushStoreMock = vi.fn().mockResolvedValue(undefined)
-    clearStorageDataMock = vi.fn().mockResolvedValue(undefined)
+    clearDataMock = vi.fn().mockResolvedValue(undefined)
     setUserAgentMock = vi.fn()
     appGetPathMock.mockReset()
     appGetPathMock.mockReturnValue(join(tmpDir, 'userData'))
@@ -445,11 +445,12 @@ describe('importCookiesFromBrowser Chromium', () => {
     sessionFromPartitionMock.mockReset()
     sessionFromPartitionMock.mockReturnValue({
       cookies: {
+        get: vi.fn().mockResolvedValue([]),
         set: cookiesSetMock,
         remove: cookiesRemoveMock,
         flushStore: cookiesFlushStoreMock
       },
-      clearStorageData: clearStorageDataMock,
+      clearData: clearDataMock,
       setUserAgent: setUserAgentMock
     })
   })
@@ -510,7 +511,7 @@ describe('importCookiesFromBrowser Chromium', () => {
         ['', '-wal', '-shm'].map((suffix) => readFileSync(sourceCookiesPath + suffix))
       ).toEqual(sourceFilesBefore)
       expect(cookiesRemoveMock).not.toHaveBeenCalled()
-      expect(clearStorageDataMock).toHaveBeenCalledWith({ storages: ['cookies'] })
+      expect(clearDataMock).not.toHaveBeenCalled()
       // Why: STA-3514 — imports must never impersonate the source browser; the
       // session keeps the engine UA the registry set at startup.
       expect(setUserAgentMock).not.toHaveBeenCalled()
diff --git a/src/main/browser/browser-cookie-import.ts b/src/main/browser/browser-cookie-import.ts
index 66a3afdb3cf..3c3a701f953 100644
--- a/src/main/browser/browser-cookie-import.ts
+++ b/src/main/browser/browser-cookie-import.ts
@@ -76,8 +76,11 @@ import type {
 import { browserSessionRegistry } from './browser-session-registry'
 import {
   isGoogleSourceBoundCookie,
+  isNonTransplantableCookieDomain,
+  NON_TRANSPLANTABLE_HOST_KEY_SQL,
   normalizeCookieDomain,
   normalizeCookieImportDomain,
+  removeTransplantableCookies,
   replaceCookiesForImportedDomains,
   restoreImportedDomainCookies,
   type CookieImportMode
@@ -571,13 +574,20 @@ async function importValidatedCookies(
     }
     return valid
   })
-  const importableCookies = validDomainCookies.filter(
+  const sourceBoundFiltered = validDomainCookies.filter(
     (cookie) => !isGoogleSourceBoundCookie(cookie.name, cookie.domain)
   )
-  const integritySkipped = validDomainCookies.length - importableCookies.length
+  // Why: dropping these before the replace scope is computed is what keeps the existing
+  // Google session intact — replaceCookiesForImportedDomains only clears domains we import.
+  const importableCookies = sourceBoundFiltered.filter(
+    (cookie) => !isNonTransplantableCookieDomain(cookie.domain)
+  )
+  const integritySkipped = validDomainCookies.length - sourceBoundFiltered.length
+  const nonTransplantableSkipped = sourceBoundFiltered.length - importableCookies.length
+  const googleCookiesSkipped = integritySkipped + nonTransplantableSkipped
   const invalidDomainSkipped = cookies.length - validDomainCookies.length
   diag(
-    `importValidatedCookies: ${cookies.length} validated, ${invalidDomainSkipped} unsafe-domain skipped, ${integritySkipped} source-bound skipped of ${totalInput} total, partition="${targetPartition}"`
+    `importValidatedCookies: ${cookies.length} validated, ${invalidDomainSkipped} unsafe-domain skipped, ${integritySkipped} source-bound skipped, ${nonTransplantableSkipped} non-transplantable skipped of ${totalInput} total, partition="${targetPartition}"`
   )
   const targetSession = session.fromPartition(targetPartition)
   let importedCount = 0
@@ -684,6 +694,7 @@ async function importValidatedCookies(
     totalCookies: totalInput,
     importedCookies: importedCount,
     skippedCookies: skipped,
+    ...(googleCookiesSkipped > 0 ? { googleCookiesSkipped } : {}),
     domains: [...domainSet].sort()
   }
 
@@ -902,7 +913,7 @@ export function buildChromiumCookieInsertParams(
       return decryptedValue
     }
 
-    const sourceHasColumn = Object.prototype.hasOwnProperty.call(sourceRow, column.name)
+    const sourceHasColumn = Object.hasOwn(sourceRow, column.name)
     const sourceValue = sourceHasColumn ? normalizeSqliteCookieValue(sourceRow[column.name]) : null
     if (sourceValue !== null) {
       return sourceValue
@@ -1548,7 +1559,10 @@ export async function importCookiesFromBrowser(
         const targetCols: string[] = targetColumnInfo.map((r) => r.name)
         colList = targetCols.join(', ')
         placeholders = targetCols.map(() => '?').join(', ')
-        stagingDb.exec('DELETE FROM cookies')
+        // Why: the staged DB replaces the whole live DB at cold start, so it is a clear step
+        // like any other — keep the live non-transplantable rows in it rather than replaying
+        // a wipe the in-memory path was not allowed to perform.
+        stagingDb.exec(`DELETE FROM cookies WHERE NOT (${NON_TRANSPLANTABLE_HOST_KEY_SQL})`)
       } catch (err) {
         diag(`  staging database unusable, restart fallback disabled: ${String(err)}`)
         stagingAvailable = false
@@ -1578,7 +1592,12 @@ export async function importCookiesFromBrowser(
 
     const needsSourceKey = sourceRows.some((sourceRow) => {
       const encRaw = sourceRow.encrypted_value
-      return encRaw instanceof Uint8Array && encRaw.length > 0
+      if (!(encRaw instanceof Uint8Array) || encRaw.length === 0) {
+        return false
+      }
+      const domain = sourceRow.host_key as string
+      const name = sourceRow.name as string
+      return !(isGoogleSourceBoundCookie(name, domain) || isNonTransplantableCookieDomain(domain))
     })
     const sourceKey = needsSourceKey
       ? getEncryptionKey(browser.keychainService!, browser.keychainAccount!, browser)
@@ -1596,6 +1615,7 @@ export async function importCookiesFromBrowser(
     let imported = 0
     let skipped = 0
     let integritySkipped = 0
+    let nonTransplantableSkipped = 0
     let memoryLoaded = 0
     let memoryFailed = 0
     const domainSet = new Set<string>()
@@ -1640,6 +1660,20 @@ export async function importCookiesFromBrowser(
     }
 
     for (const sourceRow of sourceRows) {
+      const domain = sourceRow.host_key as string
+      const name = sourceRow.name as string
+
+      if (isGoogleSourceBoundCookie(name, domain)) {
+        integritySkipped++
+        continue
+      }
+
+      // Why: transplanting these replaces a working sign-in with a session the site rejects.
+      if (isNonTransplantableCookieDomain(domain)) {
+        nonTransplantableSkipped++
+        continue
+      }
+
       const encRaw = sourceRow.encrypted_value
       // Why: node:sqlite returns BLOBs as Uint8Array; treat any other type as missing, not an empty buffer that would silently blank the cookie value.
       const encBuf = encRaw instanceof Uint8Array ? Buffer.from(encRaw) : null
@@ -1661,14 +1695,6 @@ export async function importCookiesFromBrowser(
         decryptedValue = Buffer.alloc(0)
       }
 
-      const domain = sourceRow.host_key as string
-      const name = sourceRow.name as string
-
-      if (isGoogleSourceBoundCookie(name, domain)) {
-        integritySkipped++
-        continue
-      }
-
       let validDomain = sourceDomainValidity.get(domain)
       if (validDomain === undefined) {
         validDomain = normalizeCookieImportDomain(domain) !== null
@@ -1718,7 +1744,10 @@ export async function importCookiesFromBrowser(
       // the optional staging DB is unavailable.
       imported++
     }
-    diag(`  skipped ${integritySkipped} Google integrity cookies (SIDCC/STRP/AEC)`)
+    diag(
+      `  skipped ${integritySkipped} Google integrity cookies (SIDCC/STRP/AEC) and ${nonTransplantableSkipped} non-transplantable-domain cookies`
+    )
+    const googleCookiesSkipped = integritySkipped + nonTransplantableSkipped
 
     if (decryptedCookies.length === 0) {
       closeStagingDb()
@@ -1729,7 +1758,8 @@ export async function importCookiesFromBrowser(
         summary: {
           totalCookies: sourceRows.length,
           importedCookies: 0,
-          skippedCookies: skipped + integritySkipped,
+          skippedCookies: skipped + integritySkipped + nonTransplantableSkipped,
+          ...(googleCookiesSkipped > 0 ? { googleCookiesSkipped } : {}),
           domains: []
         }
       }
@@ -1747,8 +1777,10 @@ export async function importCookiesFromBrowser(
       diag(`  staging skipped: ${imported} cookies will load in-memory only`)
     }
 
-    // Why: clear stale cookies first; mixing them with the imported set makes sites like Google reject the session.
-    await targetSession.clearStorageData({ storages: ['cookies'] })
+    // Why: clear stale cookies first; mixing them with the imported set makes sites reject the
+    // session. Non-transplantable families are exempt — nothing was imported for them, and their
+    // live session is the only one that works.
+    await removeTransplantableCookies(targetSession)
     diag(
       `  cleared existing session cookies before loading ${decryptedCookies.length} imported cookies`
     )
@@ -1816,7 +1848,8 @@ export async function importCookiesFromBrowser(
     const summary: BrowserCookieImportSummary = {
       totalCookies: sourceRows.length,
       importedCookies: imported,
-      skippedCookies: skipped + integritySkipped,
+      skippedCookies: skipped + integritySkipped + nonTransplantableSkipped,
+      ...(googleCookiesSkipped > 0 ? { googleCookiesSkipped } : {}),
       domains: [...domainSet].sort(),
       ...(warning ? { warning } : {})
     }
diff --git a/src/main/browser/browser-download-destination.test.ts b/src/main/browser/browser-download-destination.test.ts
index 5db849c80e9..d3719bf1e4a 100644
--- a/src/main/browser/browser-download-destination.test.ts
+++ b/src/main/browser/browser-download-destination.test.ts
@@ -86,6 +86,40 @@ describe('BrowserDownloadDestinationReservations', () => {
     expect(macReservations.reserve('report.csv').filename).toBe('report (1).csv')
   })
 
+  it('rewrites Windows reserved device basenames', () => {
+    const reservations = new BrowserDownloadDestinationReservations({
+      downloadsPath,
+      pathExists: vi.fn(() => false),
+      platform: 'win32'
+    })
+
+    expect(reservations.reserve('CON').filename).toBe('_CON')
+    expect(reservations.reserve('con.txt').filename).toBe('_con.txt')
+    expect(reservations.reserve('NUL.tar.gz').filename).toBe('_NUL.tar.gz')
+    expect(reservations.reserve('AUX.json').filename).toBe('_AUX.json')
+    expect(reservations.reserve('PRN').filename).toBe('_PRN')
+    expect(reservations.reserve('CLOCK$.csv').filename).toBe('_CLOCK$.csv')
+    expect(reservations.reserve('CONIN$.txt').filename).toBe('_CONIN$.txt')
+    expect(reservations.reserve('CONOUT$.log').filename).toBe('_CONOUT$.log')
+    expect(reservations.reserve('COM1.log').filename).toBe('_COM1.log')
+    expect(reservations.reserve('COM¹.log').filename).toBe('_COM¹.log')
+    expect(reservations.reserve('LPT9.csv').filename).toBe('_LPT9.csv')
+    expect(reservations.reserve('LPT³.csv').filename).toBe('_LPT³.csv')
+    expect(reservations.reserve('COM10.log').filename).toBe('COM10.log')
+    expect(reservations.reserve('LPT0.csv').filename).toBe('LPT0.csv')
+    expect(reservations.reserve('CONSOLE.txt').filename).toBe('CONSOLE.txt')
+  })
+
+  it('preserves Windows device-like names on other platforms', () => {
+    const reservations = new BrowserDownloadDestinationReservations({
+      downloadsPath,
+      pathExists: vi.fn(() => false),
+      platform: 'linux'
+    })
+
+    expect(reservations.reserve('CON.txt').filename).toBe('CON.txt')
+  })
+
   it('fails after bounded collision attempts', () => {
     const reservations = new BrowserDownloadDestinationReservations({
       downloadsPath,
diff --git a/src/main/browser/browser-download-destination.ts b/src/main/browser/browser-download-destination.ts
index 1aa875f76ad..53e541c4a0d 100644
--- a/src/main/browser/browser-download-destination.ts
+++ b/src/main/browser/browser-download-destination.ts
@@ -5,6 +5,8 @@ import { app } from 'electron'
 
 const MAX_BROWSER_DOWNLOAD_COLLISION_ATTEMPTS = 1_000
 const WINDOWS_RESERVED_FILENAME_CHARS = new Set(['<', '>', ':', '"', '|', '?', '*'])
+const WINDOWS_RESERVED_FILENAME =
+  /^(?:con|prn|aux|nul|clock\$|conin\$|conout\$|com[1-9¹²³]|lpt[1-9¹²³])(?:\.|$)/iu
 
 export type BrowserDownloadDestination = {
   filename: string
@@ -18,7 +20,7 @@ type BrowserDownloadDestinationOptions = {
   platform?: NodeJS.Platform
 }
 
-function normalizeFilename(filename: string): string {
+function normalizeFilename(filename: string, platform: NodeJS.Platform): string {
   // Normalize separators first so basename strips paths from any platform.
   const normalizedSeparators = filename.replace(/\\/g, '/')
   const rawBasename = path.posix.basename(normalizedSeparators).trim()
@@ -32,7 +34,12 @@ function normalizeFilename(filename: string): string {
     .join('')
     .replace(/[. ]+$/g, '')
     .trim()
-  return safeName || 'download'
+  if (!safeName) {
+    return 'download'
+  }
+  return platform === 'win32' && WINDOWS_RESERVED_FILENAME.test(safeName)
+    ? `_${safeName}`
+    : safeName
 }
 
 function buildCollisionCandidate(filename: string, suffix: number): string {
@@ -65,7 +72,7 @@ export class BrowserDownloadDestinationReservations {
   }
 
   reserve(filename: string): BrowserDownloadDestination {
-    const safeFilename = normalizeFilename(filename)
+    const safeFilename = normalizeFilename(filename, this.platform)
     const downloadsPath = this.downloadsPath()
 
     for (let attempt = 0; attempt < MAX_BROWSER_DOWNLOAD_COLLISION_ATTEMPTS; attempt += 1) {
diff --git a/src/main/browser/browser-google-auth-ua.ts b/src/main/browser/browser-google-auth-ua.ts
index 4392e6351c2..16ed14eb80f 100644
--- a/src/main/browser/browser-google-auth-ua.ts
+++ b/src/main/browser/browser-google-auth-ua.ts
@@ -49,3 +49,11 @@ export function setUserAgentHeader(headers: Record<string, string>, value: strin
   const existing = Object.keys(headers).find((key) => key.toLowerCase() === 'user-agent')
   headers[existing ?? 'User-Agent'] = value
 }
+
+// Why: the outgoing header carries the WebContents UA override, so reading it
+// (case-insensitively) tells us whether a request originated from the Firefox
+// auth document even when its destination host isn't an auth host.
+export function currentUserAgent(headers: Record<string, string>): string | undefined {
+  const existing = Object.keys(headers).find((key) => key.toLowerCase() === 'user-agent')
+  return existing ? headers[existing] : undefined
+}
diff --git a/src/main/browser/browser-session-registry.persistence.test.ts b/src/main/browser/browser-session-registry.persistence.test.ts
index f5f9bb7a7b2..f27a861a45c 100644
--- a/src/main/browser/browser-session-registry.persistence.test.ts
+++ b/src/main/browser/browser-session-registry.persistence.test.ts
@@ -24,7 +24,7 @@ function seedMeta(fsState: FsState, meta: unknown): void {
 
 function installModuleMocks(
   fsState: FsState,
-  copyFailures: Set<string> = new Set()
+  copyFailures = new Set<string>()
 ): {
   sessionFromPartitionMock: ReturnType<typeof vi.fn>
   setupClientHintsOverrideMock: ReturnType<typeof vi.fn>
diff --git a/src/main/browser/browser-session-registry.test.ts b/src/main/browser/browser-session-registry.test.ts
index 44e1b6b8e92..9f32e4f379d 100644
--- a/src/main/browser/browser-session-registry.test.ts
+++ b/src/main/browser/browser-session-registry.test.ts
@@ -28,6 +28,7 @@ vi.mock('./browser-manager', () => ({
 }))
 
 import { browserSessionRegistry } from './browser-session-registry'
+import { googleAuthUserAgent } from './browser-google-auth-ua'
 import { setupClientHintsOverride } from './browser-session-ua'
 import { ORCA_BROWSER_PARTITION } from '../../shared/constants'
 import {
@@ -440,6 +441,81 @@ describe('BrowserSessionRegistry', () => {
       expect(modified['sec-ch-ua-platform']).toBeUndefined()
     })
 
+    it('strips client hints on a cross-host request that carries the Firefox auth UA', () => {
+      const onBeforeSendHeaders = vi.fn()
+      const mockSess = { webRequest: { onBeforeSendHeaders } } as never
+      setupClientHintsOverride(
+        mockSess,
+        'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.6890.3 Safari/537.36'
+      )
+
+      const callback = vi.fn()
+      const listener = onBeforeSendHeaders.mock.calls[0][1]
+      // Subresource/XHR to a non-auth Google host while the auth document is on
+      // screen: the WebContents Firefox UA leaks onto the request header.
+      listener(
+        {
+          url: 'https://play.google.com/log',
+          requestHeaders: {
+            'User-Agent': googleAuthUserAgent(),
+            'sec-ch-ua': 'old',
+            'sec-ch-ua-full-version-list': 'old',
+            'sec-ch-ua-platform': '"macOS"',
+            'sec-ch-ua-mobile': '?0'
+          }
+        },
+        callback
+      )
+      const modified = callback.mock.calls[0][0].requestHeaders
+      // UA stays Firefox and every client hint is dropped — one consistent identity.
+      expect(modified['User-Agent']).toBe(googleAuthUserAgent())
+      expect(modified['sec-ch-ua']).toBeUndefined()
+      expect(modified['sec-ch-ua-full-version-list']).toBeUndefined()
+      expect(modified['sec-ch-ua-platform']).toBeUndefined()
+      expect(modified['sec-ch-ua-mobile']).toBeUndefined()
+    })
+
+    it('keeps the clean Chrome identity on cross-host requests that carry the Chrome UA', () => {
+      const onBeforeSendHeaders = vi.fn()
+      const mockSess = { webRequest: { onBeforeSendHeaders } } as never
+      const chromeUa =
+        'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.6890.3 Safari/537.36'
+      setupClientHintsOverride(mockSess, chromeUa)
+
+      const callback = vi.fn()
+      const listener = onBeforeSendHeaders.mock.calls[0][1]
+      // Regression guard: non-Google sites (Cloudflare) must keep Chrome hints.
+      listener(
+        {
+          url: 'https://example.com/api',
+          requestHeaders: { 'User-Agent': chromeUa, 'sec-ch-ua': 'old' }
+        },
+        callback
+      )
+      expect(callback.mock.calls[0][0].requestHeaders['sec-ch-ua']).toContain('Google Chrome')
+    })
+
+    it('does not strip hints for the Firefox UA when googleAuthOverride is disabled', () => {
+      const onBeforeSendHeaders = vi.fn()
+      const mockSess = { webRequest: { onBeforeSendHeaders } } as never
+      const chromeUa =
+        'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.6890.3 Safari/537.36'
+      setupClientHintsOverride(mockSess, chromeUa, { googleAuthOverride: false })
+
+      const callback = vi.fn()
+      const listener = onBeforeSendHeaders.mock.calls[0][1]
+      listener(
+        {
+          url: 'https://play.google.com/log',
+          requestHeaders: { 'User-Agent': googleAuthUserAgent(), 'sec-ch-ua': 'old' }
+        },
+        callback
+      )
+      // Imported-native profiles never install the Firefox switch, so the strip
+      // branch stays inert and hints are aligned to Chrome instead.
+      expect(callback.mock.calls[0][0].requestHeaders['sec-ch-ua']).toContain('Google Chrome')
+    })
+
     it('keeps Chrome client hints on Google app subdomains (not auth hosts)', () => {
       const onBeforeSendHeaders = vi.fn()
       const mockSess = { webRequest: { onBeforeSendHeaders } } as never
diff --git a/src/main/browser/browser-session-ua.ts b/src/main/browser/browser-session-ua.ts
index 092b79995d8..96c55cf5ac9 100644
--- a/src/main/browser/browser-session-ua.ts
+++ b/src/main/browser/browser-session-ua.ts
@@ -1,6 +1,7 @@
 import type { Session } from 'electron'
 
 import {
+  currentUserAgent,
   googleAuthUserAgent,
   isGoogleAuthUrl,
   setUserAgentHeader,
@@ -48,6 +49,18 @@ export function setupClientHintsOverride(
       callback({ requestHeaders: headers })
       return
     }
+    if (options.googleAuthOverride !== false && currentUserAgent(headers) === firefoxUa) {
+      // Why: while the auth document is on screen the WebContents UA is Firefox,
+      // so its cross-host subresource/XHR requests (gstatic, play.google.com, the
+      // sign-in challenge endpoints) reach here carrying the Firefox UA yet still
+      // bearing Chromium client hints. Rewriting those to Chrome pairs a Firefox
+      // UA with Chrome hints — a sharper cross-host identity tell than either
+      // alone, which can stall Google's password-submit challenge. Real Firefox
+      // sends no client hints, so strip them to keep one identity for the flow.
+      stripClientHints(headers)
+      callback({ requestHeaders: headers })
+      return
+    }
     if (chromeHints) {
       for (const key of Object.keys(headers)) {
         const lower = key.toLowerCase()
diff --git a/src/main/browser/browser-webauthn-access.ts b/src/main/browser/browser-webauthn-access.ts
index 4f04065e36c..60da5b1e297 100644
--- a/src/main/browser/browser-webauthn-access.ts
+++ b/src/main/browser/browser-webauthn-access.ts
@@ -15,7 +15,7 @@ function isSecureBrowserOrigin(rawOrigin: string | undefined): boolean {
   }
 }
 
-function isFidoHidDevice(device: Electron.HIDDevice | unknown): device is Electron.HIDDevice {
+function isFidoHidDevice(device: unknown): device is Electron.HIDDevice {
   if (!device || typeof device !== 'object') {
     return false
   }
diff --git a/src/main/browser/cdp-bridge-integration.test.ts b/src/main/browser/cdp-bridge-integration.test.ts
index b3b1fae9401..b3b836d07b0 100644
--- a/src/main/browser/cdp-bridge-integration.test.ts
+++ b/src/main/browser/cdp-bridge-integration.test.ts
@@ -212,7 +212,7 @@ function createMockGuest(
       removeListener: vi.fn((event: string, handler: (...args: unknown[]) => void) => {
         const handlers = debuggerListeners.get(event) ?? []
         const idx = handlers.indexOf(handler)
-        if (idx >= 0) {
+        if (idx !== -1) {
           handlers.splice(idx, 1)
         }
       }),
diff --git a/src/main/cli/wsl-cli-installer.ts b/src/main/cli/wsl-cli-installer.ts
index f6a1684e19c..3dee00a871b 100644
--- a/src/main/cli/wsl-cli-installer.ts
+++ b/src/main/cli/wsl-cli-installer.ts
@@ -379,7 +379,7 @@ export class WslCliInstaller {
   private async readCommandFile(
     distro: string,
     commandPath: string
-  ): Promise<string | 'not_file' | null> {
+  ): Promise<(string & {}) | 'not_file' | null> {
     const output = await this.run(
       distro,
       [
diff --git a/src/main/cli/wsl-cli-registration-registry.ts b/src/main/cli/wsl-cli-registration-registry.ts
index d1a84a42f52..99d3faff5d4 100644
--- a/src/main/cli/wsl-cli-registration-registry.ts
+++ b/src/main/cli/wsl-cli-registration-registry.ts
@@ -138,7 +138,7 @@ async function readState(userDataPath: string): Promise<WslCliRegistrationRegist
 function upsertDistro(distros: string[], distro: string): string[] {
   const key = normalizeWslDistroKey(distro)
   const existingIndex = distros.findIndex((entry) => normalizeWslDistroKey(entry) === key)
-  if (existingIndex < 0) {
+  if (existingIndex === -1) {
     return [...distros, distro.trim()]
   }
   return distros.map((entry, index) => (index === existingIndex ? distro.trim() : entry))
diff --git a/src/main/codex-accounts/runtime-home-service.test.ts b/src/main/codex-accounts/runtime-home-service.test.ts
index 966d901f994..09f9337ebb0 100644
--- a/src/main/codex-accounts/runtime-home-service.test.ts
+++ b/src/main/codex-accounts/runtime-home-service.test.ts
@@ -167,7 +167,6 @@ function createSettings(overrides: TestSettingsOverrides = {}): GlobalSettings {
     compactWorktreeCards: false,
     terminalWindowsShell: 'powershell.exe',
     terminalWindowsPowerShellImplementation: 'powershell.exe',
-    enableGitHubAttribution: true,
     ...overrides,
     diffWordWrap: overrides.diffWordWrap ?? false,
     localWindowsRuntimeDefault: overrides.localWindowsRuntimeDefault ?? { kind: 'windows-host' },
diff --git a/src/main/codex-accounts/service.test.ts b/src/main/codex-accounts/service.test.ts
index ec80a01c3be..87974d3e411 100644
--- a/src/main/codex-accounts/service.test.ts
+++ b/src/main/codex-accounts/service.test.ts
@@ -159,7 +159,6 @@ function createSettings(overrides: Partial<GlobalSettings> = {}): GlobalSettings
     compactWorktreeCards: false,
     terminalWindowsShell: 'powershell.exe',
     terminalWindowsPowerShellImplementation: 'powershell.exe',
-    enableGitHubAttribution: true,
     ...overrides,
     diffWordWrap: overrides.diffWordWrap ?? false,
     localWindowsRuntimeDefault: overrides.localWindowsRuntimeDefault ?? { kind: 'windows-host' },
diff --git a/src/main/codex-accounts/service.ts b/src/main/codex-accounts/service.ts
index b55c9b50315..eef834af323 100644
--- a/src/main/codex-accounts/service.ts
+++ b/src/main/codex-accounts/service.ts
@@ -1311,7 +1311,7 @@ export class CodexAccountService {
 
     const managedRootMarker = '/.local/share/orca/codex-accounts/'
     const markerIndex = wslInfo.linuxPath.indexOf(managedRootMarker)
-    if (markerIndex < 0) {
+    if (markerIndex === -1) {
       return null
     }
     const wslHome = wslInfo.linuxPath.slice(0, markerIndex)
diff --git a/src/main/codex/codex-pane-account-registry.ts b/src/main/codex/codex-pane-account-registry.ts
index 595f1d3e767..39853471683 100644
--- a/src/main/codex/codex-pane-account-registry.ts
+++ b/src/main/codex/codex-pane-account-registry.ts
@@ -111,6 +111,7 @@ function isShellStartupHomeOverride(value: unknown): value is CodexShellStartupH
     typeof context.home === 'string' &&
     context.home.length > 0 &&
     (context.shell === undefined || typeof context.shell === 'string') &&
+    (context.configHome === undefined || typeof context.configHome === 'string') &&
     typeof context.codexHome === 'string' &&
     context.codexHome.length > 0
   )
@@ -207,6 +208,7 @@ function shellStartupHomeOverridesEqual(
   return (
     left?.home === right?.home &&
     left?.shell === right?.shell &&
+    left?.configHome === right?.configHome &&
     left?.codexHome === right?.codexHome
   )
 }
diff --git a/src/main/codex/codex-real-home-path.test.ts b/src/main/codex/codex-real-home-path.test.ts
index 7dc961c7a18..25d4f2b5bba 100644
--- a/src/main/codex/codex-real-home-path.test.ts
+++ b/src/main/codex/codex-real-home-path.test.ts
@@ -1,4 +1,4 @@
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join, sep } from 'node:path'
 import { afterEach, describe, expect, it } from 'vitest'
@@ -11,9 +11,15 @@ import {
 import { __resetShellStartupEnvCache } from '../pty/shell-startup-env'
 
 const temporaryHomes: string[] = []
+const savedConfigHome = process.env.XDG_CONFIG_HOME
 
 afterEach(() => {
   __resetShellStartupEnvCache()
+  if (savedConfigHome === undefined) {
+    delete process.env.XDG_CONFIG_HOME
+  } else {
+    process.env.XDG_CONFIG_HOME = savedConfigHome
+  }
   for (const path of temporaryHomes.splice(0)) {
     rmSync(path, { recursive: true, force: true })
   }
@@ -56,6 +62,9 @@ describe('hasCustomCodexHomeOverride', () => {
       temporaryHomes.push(paneHome)
       writeFileSync(join(paneHome, '.zshrc'), 'export CODEX_HOME="$HOME/custom-codex-home"\n')
 
+      // Why cleared: the context records XDG_CONFIG_HOME, so a developer machine
+      // that sets one would otherwise change the recorded shape.
+      delete process.env.XDG_CONFIG_HOME
       expect(hasCustomCodexHomeOverrideForLaunch({ HOME: paneHome, SHELL: '/bin/zsh' })).toBe(true)
       const override = getCustomCodexHomeOverrideForLaunch({
         HOME: paneHome,
@@ -75,4 +84,50 @@ describe('hasCustomCodexHomeOverride', () => {
       ).toBe(true)
     }
   )
+
+  // Why: a fish user who exports XDG_CONFIG_HOME from config.fish never passes it to
+  // a Dock-launched Orca, so the launch env is the only place it appears. Reading the
+  // main process env instead scans ~/.config and misses the override entirely.
+  it.skipIf(process.platform === 'win32')(
+    'resolves a fish override under the launch env XDG_CONFIG_HOME, not the process one',
+    () => {
+      const paneHome = mkdtempSync(join(tmpdir(), 'orca-codex-fish-home-'))
+      temporaryHomes.push(paneHome)
+      const configHome = join(paneHome, 'xdg')
+      mkdirSync(join(configHome, 'fish'), { recursive: true })
+      writeFileSync(
+        join(configHome, 'fish', 'config.fish'),
+        'set -gx CODEX_HOME "$HOME/custom-codex-home"\n'
+      )
+      // The decoy fish reads only if XDG_CONFIG_HOME is ignored.
+      mkdirSync(join(paneHome, '.config', 'fish'), { recursive: true })
+      writeFileSync(
+        join(paneHome, '.config', 'fish', 'config.fish'),
+        'set -gx CODEX_HOME /wrong-default-config-home\n'
+      )
+      delete process.env.XDG_CONFIG_HOME
+
+      const launchEnv = {
+        HOME: paneHome,
+        SHELL: '/opt/homebrew/bin/fish',
+        XDG_CONFIG_HOME: configHome
+      }
+      const override = getCustomCodexHomeOverrideForLaunch(launchEnv)
+
+      expect(override).toEqual({
+        source: 'shell-startup',
+        context: {
+          home: paneHome,
+          shell: '/opt/homebrew/bin/fish',
+          configHome,
+          codexHome: join(paneHome, 'custom-codex-home')
+        }
+      })
+      // And the recorded configHome is what a later re-check resolves against.
+      expect(
+        override?.source === 'shell-startup' &&
+          shellStartupCodexHomeOverrideMatches(override.context)
+      ).toBe(true)
+    }
+  )
 })
diff --git a/src/main/codex/codex-real-home-path.ts b/src/main/codex/codex-real-home-path.ts
index 700359d4f37..60c644032f8 100644
--- a/src/main/codex/codex-real-home-path.ts
+++ b/src/main/codex/codex-real-home-path.ts
@@ -5,6 +5,8 @@ import { readShellStartupEnvVar } from '../pty/shell-startup-env'
 export type CodexShellStartupHomeOverride = {
   home: string
   shell?: string
+  /** Why recorded: fish reads config under it, so re-reads must use the same root. */
+  configHome?: string
   codexHome: string
 }
 
@@ -54,7 +56,10 @@ export function getCustomCodexHomeOverrideForLaunch(
   }
   const home = launchEnv ? getLaunchEnvValue(launchEnv, 'HOME') : process.env.HOME
   const shell = launchEnv ? getLaunchEnvValue(launchEnv, 'SHELL') : process.env.SHELL
-  const shellCodexHome = readShellStartupEnvVar('CODEX_HOME', home, shell)
+  const configHome = launchEnv
+    ? getLaunchEnvValue(launchEnv, 'XDG_CONFIG_HOME')
+    : process.env.XDG_CONFIG_HOME
+  const shellCodexHome = readShellStartupEnvVar('CODEX_HOME', home, shell, configHome)
   if (!home || !shellCodexHome || !hasCustomCodexHomeOverride({ CODEX_HOME: shellCodexHome })) {
     return null
   }
@@ -63,6 +68,7 @@ export function getCustomCodexHomeOverrideForLaunch(
     context: {
       home,
       ...(shell ? { shell } : {}),
+      ...(configHome ? { configHome } : {}),
       codexHome: shellCodexHome
     }
   }
@@ -85,7 +91,8 @@ export function shellStartupCodexHomeOverrideMatches(
   const currentCodexHome = readShellStartupEnvVar(
     'CODEX_HOME',
     currentContext.home,
-    currentContext.shell
+    currentContext.shell,
+    currentContext.configHome
   )
   return Boolean(
     currentCodexHome &&
@@ -101,15 +108,16 @@ export function shellStartupCodexHomeOverrideContextsEqual(
   return (
     normalizePathForComparison(left.home) === normalizePathForComparison(right.home) &&
     left.shell === right.shell &&
+    left.configHome === right.configHome &&
     normalizePathForComparison(left.codexHome) === normalizePathForComparison(right.codexHome)
   )
 }
 
 function getLaunchEnvValue(
   launchEnv: NodeJS.ProcessEnv,
-  key: 'CODEX_HOME' | 'ORCA_CODEX_HOME' | 'HOME' | 'SHELL'
+  key: 'CODEX_HOME' | 'ORCA_CODEX_HOME' | 'HOME' | 'SHELL' | 'XDG_CONFIG_HOME'
 ): string | undefined {
-  return Object.prototype.hasOwnProperty.call(launchEnv, key) ? launchEnv[key] : process.env[key]
+  return Object.hasOwn(launchEnv, key) ? launchEnv[key] : process.env[key]
 }
 
 function normalizePathForComparison(value: string): string {
diff --git a/src/main/codex/codex-session-resume-home.test.ts b/src/main/codex/codex-session-resume-home.test.ts
index 75d91d7ab34..2f0aa5429c6 100644
--- a/src/main/codex/codex-session-resume-home.test.ts
+++ b/src/main/codex/codex-session-resume-home.test.ts
@@ -140,7 +140,7 @@ describe('resolveTrustedCodexSessionResumeHome', () => {
         trustedCodexHomes: [homePath],
         ...withoutHomeRanking,
         fileIsRegular: () => true,
-        listSessionFiles: async function* (): AsyncIterable<string> {
+        async *listSessionFiles(): AsyncIterable<string> {
           yield extendedEntry
         }
       })
@@ -153,7 +153,7 @@ describe('resolveTrustedCodexSessionResumeHome', () => {
         trustedCodexHomes: [homePath],
         ...withoutHomeRanking,
         fileIsRegular: () => true,
-        listSessionFiles: async function* (): AsyncIterable<string> {
+        async *listSessionFiles(): AsyncIterable<string> {
           yield `\\\\.\\C:\\Users\\Example\\.codex\\sessions\\2026\\07\\20\\rollout-${sessionId}.jsonl`
         }
       })
diff --git a/src/main/computer/macos-native-provider-transport.ts b/src/main/computer/macos-native-provider-transport.ts
index 54c4cf773aa..1048ce5a94c 100644
--- a/src/main/computer/macos-native-provider-transport.ts
+++ b/src/main/computer/macos-native-provider-transport.ts
@@ -52,7 +52,7 @@ export function consumeNativeProviderLines(
   let remaining = buffer
   while (true) {
     const newline = remaining.indexOf('\n')
-    if (newline < 0) {
+    if (newline === -1) {
       return remaining
     }
     const line = remaining.slice(0, newline)
diff --git a/src/main/copilot/hook-service.ts b/src/main/copilot/hook-service.ts
index 332731fe352..425efe4f00d 100644
--- a/src/main/copilot/hook-service.ts
+++ b/src/main/copilot/hook-service.ts
@@ -118,7 +118,6 @@ function getManagedScript(target: 'local' | 'posix' = 'local'): string {
   if (target === 'local' && process.platform === 'win32') {
     return [
       "Write-Output '{}'",
-      '$inputData = [Console]::In.ReadToEnd()',
       // Why: endpoint.cmd is cmd syntax, not PowerShell. Parse its `set KEY=...`
       // lines so surviving PTYs can refresh to the current Orca server.
       'if ($env:ORCA_AGENT_HOOK_ENDPOINT -and (Test-Path -LiteralPath $env:ORCA_AGENT_HOOK_ENDPOINT)) {',
@@ -130,7 +129,11 @@ function getManagedScript(target: 'local' | 'posix' = 'local'): string {
       '    }',
       '  } catch {}',
       '}',
+      // Why (#11549 class): missing Orca context means a user-wide hook fired outside an
+      // Orca pane. ReadToEnd blocks forever if that caller abandons the pipe, so the guard
+      // must run before the hook owns stdin; the payload would be discarded anyway.
       'if (-not $env:ORCA_AGENT_HOOK_PORT -or -not $env:ORCA_AGENT_HOOK_TOKEN -or -not $env:ORCA_PANE_KEY) { exit 0 }',
+      '$inputData = [Console]::In.ReadToEnd()',
       'if ([string]::IsNullOrWhiteSpace($inputData)) { exit 0 }',
       'try {',
       '  $payload = $inputData | ConvertFrom-Json',
diff --git a/src/main/cursor/hook-service.ts b/src/main/cursor/hook-service.ts
index 63ff9b36a71..ab9d07b25eb 100644
--- a/src/main/cursor/hook-service.ts
+++ b/src/main/cursor/hook-service.ts
@@ -216,7 +216,7 @@ export class CursorHookService {
     return this.getStatus()
   }
 
-  // Installs managed Cursor hooks on an SSH remote (POSIX-only). See docs/design/agent-status-over-ssh.md §8.
+  // Installs managed Cursor hooks on an SSH remote (POSIX-only); the managed script/JSON shape must match local install() or remote panes report a different status.
   async installRemote(sftp: SFTPWrapper, remoteHome: string): Promise<AgentHookInstallStatus> {
     const remoteConfigPath = `${remoteHome.replace(/\/$/, '')}/.cursor/hooks.json`
     const remoteScriptPath = `${remoteHome.replace(/\/$/, '')}/.orca/agent-hooks/cursor-hook.sh`
diff --git a/src/main/daemon/client.test.ts b/src/main/daemon/client.test.ts
index 47b77cfb78e..266cd0fe255 100644
--- a/src/main/daemon/client.test.ts
+++ b/src/main/daemon/client.test.ts
@@ -335,6 +335,30 @@ describe('DaemonClient', () => {
       client = new DaemonClient({ socketPath, tokenPath })
       await expect(client.ensureConnected()).rejects.toThrow()
     })
+
+    it('fails a retired endpoint at the connect, not at the token read', async () => {
+      rmSync(tokenPath)
+      client = new DaemonClient({ socketPath, tokenPath })
+
+      const error = (await client
+        .ensureConnected()
+        .catch((err: unknown) => err)) as NodeJS.ErrnoException
+
+      expect(error.syscall).toBe('connect')
+      expect(['ENOENT', 'ECONNREFUSED']).toContain(error.code)
+    })
+
+    it('still attempts the handshake when the token is gone but a daemon is listening', async () => {
+      const hellos: HelloMessage[] = []
+      await startMockDaemon({ onHello: (msg) => hellos.push(msg) })
+      rmSync(tokenPath)
+
+      client = new DaemonClient({ socketPath, tokenPath })
+      await client.ensureConnected()
+
+      expect(hellos.length).toBeGreaterThan(0)
+      expect(hellos[0]?.token).toBe('')
+    })
   })
 
   describe('RPC', () => {
diff --git a/src/main/daemon/client.ts b/src/main/daemon/client.ts
index d137ee84ea5..147277c8450 100644
--- a/src/main/daemon/client.ts
+++ b/src/main/daemon/client.ts
@@ -114,12 +114,24 @@ export class DaemonClient {
     }
   }
 
+  // Why: a missing token must not preempt the connect that proves whether the endpoint is gone.
+  private readToken(): string {
+    try {
+      return readFileSync(this.tokenPath, 'utf-8').trim()
+    } catch (error) {
+      if ((error as NodeJS.ErrnoException | null)?.code === 'ENOENT') {
+        return ''
+      }
+      throw error
+    }
+  }
+
   private async doConnect(
     timeoutMs: number,
     attemptGeneration: number,
     sharedBudget: boolean
   ): Promise<void> {
-    const token = readFileSync(this.tokenPath, 'utf-8').trim()
+    const token = this.readToken()
     const deadlineMs = Date.now() + timeoutMs
     const remainingMs = (): number =>
       sharedBudget ? Math.max(1, deadlineMs - Date.now()) : timeoutMs
diff --git a/src/main/daemon/daemon-incarnation-evidence.ts b/src/main/daemon/daemon-incarnation-evidence.ts
index 01d9ffc97c5..f5c88935998 100644
--- a/src/main/daemon/daemon-incarnation-evidence.ts
+++ b/src/main/daemon/daemon-incarnation-evidence.ts
@@ -237,7 +237,7 @@ async function probeWindowsProcess(
 
 export function parseLinuxProcessState(statLine: string): string | null {
   const commandEnd = statLine.lastIndexOf(')')
-  if (commandEnd < 0) {
+  if (commandEnd === -1) {
     return null
   }
   return (
diff --git a/src/main/daemon/daemon-pty-adapter.test.ts b/src/main/daemon/daemon-pty-adapter.test.ts
index cbc58a44274..1e41e9de9ee 100644
--- a/src/main/daemon/daemon-pty-adapter.test.ts
+++ b/src/main/daemon/daemon-pty-adapter.test.ts
@@ -595,6 +595,42 @@ describe('DaemonPtyAdapter (IPtyProvider)', () => {
       }
     })
 
+    it('respawns after a retired daemon regardless of how the connection ended', async () => {
+      // Why this shape: the daemon retires when its last authenticated client drops, and that drop
+      // is often our own disconnect() — which observes no socket close. Once the token read stops
+      // preempting the connect, the retired endpoint fails as a connect and isDaemonGoneError
+      // classifies it, so recovery no longer depends on having witnessed the drop.
+      let respawnServer: DaemonServer | undefined
+      const respawn = vi.fn(async () => {
+        respawnServer = new DaemonServer({
+          socketPath,
+          tokenPath,
+          spawnSubprocess: () => createMockSubprocess()
+        })
+        await respawnServer.start()
+      })
+      const healingAdapter = new DaemonPtyAdapter({ socketPath, tokenPath, respawn })
+      const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+      try {
+        const { id } = await healingAdapter.spawn({ cols: 80, rows: 24 })
+        const client = (healingAdapter as unknown as { client: DaemonClient }).client
+
+        client.disconnect()
+        await server.shutdown()
+        expect(existsSync(tokenPath)).toBe(false)
+        expect(client.hasObservedAuthenticatedDisconnect()).toBe(false)
+
+        await expect(
+          healingAdapter.spawn({ sessionId: id, cols: 80, rows: 24 })
+        ).resolves.toMatchObject({ id })
+        expect(respawn).toHaveBeenCalledTimes(1)
+      } finally {
+        warn.mockRestore()
+        healingAdapter.dispose()
+        await respawnServer?.shutdown()
+      }
+    })
+
     it('does not spawn a daemon per keystroke after respawn fails', async () => {
       const respawn = vi.fn(async () => {
         throw new Error('daemon unavailable')
@@ -1322,6 +1358,48 @@ describe('DaemonPtyAdapter (IPtyProvider)', () => {
       })
     })
 
+    // A proven `0` and an absent field are different facts. Dropping
+    // the zero left consumers unable to tell "the app negotiated nothing" from
+    // "this source could not say", which is what makes Preview guess wrong.
+    it('publishes proven kitty flags including a known zero', async () => {
+      const { id } = await adapter.spawn({ cols: 80, rows: 24 })
+      lastSubprocess._simulateData('plain output\r\n')
+
+      await expect(adapter.getBufferSnapshot(id)).resolves.toMatchObject({
+        kittyKeyboardFlags: 0
+      })
+
+      lastSubprocess._simulateData('\x1b[>8u')
+      await expect(adapter.getBufferSnapshot(id)).resolves.toMatchObject({
+        kittyKeyboardFlags: 8
+      })
+    })
+
+    // The other half of that contract: a daemon that cannot say must leave the
+    // key absent, so consumers keep the state unknown instead of reading a `0`.
+    it('omits kitty flags when the daemon snapshot has none', async () => {
+      const { id } = await adapter.spawn({ cols: 80, rows: 24 })
+      lastSubprocess._simulateData('plain output\r\n')
+      const realRequest = DaemonClient.prototype.request
+      const legacyClient = vi
+        .spyOn(DaemonClient.prototype, 'request')
+        .mockImplementation(async function (this: DaemonClient, type, payload, timeoutMs) {
+          const result = await realRequest.call(this, type, payload, timeoutMs)
+          if (type !== 'getSnapshot') {
+            return result
+          }
+          const { snapshot } = result as { snapshot: { modes: Record<string, unknown> } }
+          const { kittyKeyboardFlags: _omitted, ...modes } = snapshot.modes
+          return { snapshot: { ...snapshot, modes } }
+        })
+
+      const snapshot = await adapter.getBufferSnapshot(id)
+      legacyClient.mockRestore()
+
+      expect(snapshot).not.toBeNull()
+      expect(snapshot).not.toHaveProperty('kittyKeyboardFlags')
+    })
+
     it('exposes live state separately from the visible frame', async () => {
       const { id } = await adapter.spawn({ cols: 80, rows: 24 })
       lastSubprocess._simulateData('\x1b[?1049h\x1b[?1004h\x1b[?25lframe')
diff --git a/src/main/daemon/daemon-pty-adapter.ts b/src/main/daemon/daemon-pty-adapter.ts
index 94d66c639a7..b2ccf55f6d7 100644
--- a/src/main/daemon/daemon-pty-adapter.ts
+++ b/src/main/daemon/daemon-pty-adapter.ts
@@ -59,6 +59,7 @@ import type {
   PtySpawnResult
 } from '../providers/types'
 import type { PtyProcessInspection } from '../providers/pty-process-inspection'
+import { parseTerminalKittyKeyboardFlags } from '../../shared/terminal-kitty-keyboard-flags'
 import { isShellProcess } from '../../shared/agent-detection'
 import { resolveWslSessionContext } from './wsl-session-context'
 import { normalizeWslColdRestoreCwd } from './wsl-cold-restore-cwd'
@@ -835,7 +836,11 @@ export class DaemonPtyAdapter implements IPtyProvider {
     const snapshotFrame = result.snapshot.snapshotAnsi
     const snapshotPayload = snapshotPrefix + snapshotFrame
     // Why kitty flags ride beside the payload, not inside it: the snapshot reaches renderer xterms where POST_REPLAY_REATTACH_RESET's kitty reset must win (terminal-query-authority.md §kitty).
-    const kittyKeyboardFlags = result.snapshot.modes.kittyKeyboardFlags
+    // Why known `0` is no longer dropped: the pane tracker must be able to tell
+    // "the app negotiated nothing" from "this reattach proved nothing".
+    const kittyKeyboardFlags = parseTerminalKittyKeyboardFlags(
+      result.snapshot.modes.kittyKeyboardFlags
+    )
     return {
       id: sessionId,
       ...incarnationResult(),
@@ -855,7 +860,7 @@ export class DaemonPtyAdapter implements IPtyProvider {
           }
         : {}),
       ...(providerSequence ? { providerSequence } : {}),
-      ...(typeof kittyKeyboardFlags === 'number' && kittyKeyboardFlags > 0
+      ...(kittyKeyboardFlags !== undefined
         ? { snapshotKittyKeyboardFlags: kittyKeyboardFlags }
         : {}),
       isReattach: true,
@@ -1221,6 +1226,7 @@ export class DaemonPtyAdapter implements IPtyProvider {
       if (!snapshot || typeof snapshot.outputSequence !== 'number') {
         return null
       }
+      const kittyKeyboardFlags = parseTerminalKittyKeyboardFlags(snapshot.modes.kittyKeyboardFlags)
       return {
         data: snapshot.rehydrateSequences + snapshot.snapshotAnsi,
         frameRestoreAnsi: snapshot.frameRestoreAnsi,
@@ -1233,6 +1239,9 @@ export class DaemonPtyAdapter implements IPtyProvider {
         source: 'headless',
         oscLinks: snapshot.oscLinks,
         alternateScreen: snapshot.modes.alternateScreen,
+        // Why known `0` is carried too: it proves the app negotiated nothing at
+        // this boundary, which is a different fact from a source that cannot say.
+        ...(kittyKeyboardFlags !== undefined ? { kittyKeyboardFlags } : {}),
         ...(snapshot.pendingEscapeTailAnsi
           ? { pendingEscapeTailAnsi: snapshot.pendingEscapeTailAnsi }
           : {})
@@ -1464,8 +1473,7 @@ export class DaemonPtyAdapter implements IPtyProvider {
       )
       return processes
     } catch (error) {
-      const missingAuthenticatedToken =
-        isMissingTokenFileError(error) && this.client.hasObservedAuthenticatedDisconnect()
+      const missingAuthenticatedToken = this.isRetiredEndpointTokenMissing()
       const missingNamedPipe = isMissingWindowsNamedPipeError(error)
       this.observeAuditFailure(
         missingAuthenticatedToken
@@ -1949,7 +1957,7 @@ export class DaemonPtyAdapter implements IPtyProvider {
     }
   }
 
-  // Why final=true not teardown: clean disconnect needs the full-depth snapshot as the restore source, but the
+  // Why final=true not teardown: clean disconnect needs the full daemon-window snapshot as the restore source, but the
   // detached daemon's PTYs keep running for warm reattach, so shell-ready scanner state must stay intact.
   private async checkpointAllSessions(): Promise<void> {
     const completed = await this.checkpointSessions(this.activeSessionIds, { final: true })
@@ -2111,14 +2119,16 @@ export class DaemonPtyAdapter implements IPtyProvider {
     return 'unavailable'
   }
 
-  // Why: on daemon-death errors, respawn a fresh daemon and retry once rather than leaving terminals broken until app restart.
+  // Why: the token read no longer throws, so audit its absence directly after an authenticated drop.
+  private isRetiredEndpointTokenMissing(): boolean {
+    return this.client.hasObservedAuthenticatedDisconnect() && !existsSync(this.tokenPath)
+  }
+
   private async withDaemonRetry<T>(fn: () => Promise<T>): Promise<T> {
     try {
       return await fn()
     } catch (err) {
-      // Why: the token is removed only after an authenticated drop; an initial missing token may still hide a live daemon.
-      const missingRetiredEndpointToken =
-        isMissingTokenFileError(err) && this.client.hasObservedAuthenticatedDisconnect()
+      const missingRetiredEndpointToken = this.isRetiredEndpointTokenMissing()
       if (missingRetiredEndpointToken) {
         this.observeAuditFailure(
           'token_missing_after_authenticated_disconnect',
@@ -2126,11 +2136,7 @@ export class DaemonPtyAdapter implements IPtyProvider {
           ['token_file']
         )
       }
-      if (
-        this.respawnAdoptionClosed ||
-        !this.respawnFn ||
-        (!isDaemonGoneError(err) && !missingRetiredEndpointToken)
-      ) {
+      if (this.respawnAdoptionClosed || !this.respawnFn || !isDaemonGoneError(err)) {
         throw err
       }
       if (!this.respawnPromise) {
@@ -2524,14 +2530,6 @@ export function isDaemonGoneError(err: unknown): boolean {
   )
 }
 
-function isMissingTokenFileError(err: unknown): boolean {
-  if (!(err instanceof Error)) {
-    return false
-  }
-  const errno = err as NodeJS.ErrnoException
-  return errno.code === 'ENOENT' && errno.syscall === 'open'
-}
-
 function isMissingWindowsNamedPipeError(err: unknown): boolean {
   if (process.platform !== 'win32' || !(err instanceof Error)) {
     return false
diff --git a/src/main/daemon/daemon-pty-router-history-handoff.test.ts b/src/main/daemon/daemon-pty-router-history-handoff.test.ts
index 07c2a5033d5..3ac04ebeac4 100644
--- a/src/main/daemon/daemon-pty-router-history-handoff.test.ts
+++ b/src/main/daemon/daemon-pty-router-history-handoff.test.ts
@@ -7,6 +7,7 @@ import { DaemonPtyRouter } from './daemon-pty-router'
 import { DaemonServer } from './daemon-server'
 import { getDaemonSocketPath } from './daemon-spawner'
 import { TERMINAL_HISTORY_INLINE_SEED_CODE_UNITS } from './terminal-history-seed-chunks'
+import { DAEMON_SESSION_SCROLLBACK_ROWS } from './daemon-session-scrollback-window'
 import type { DaemonFileLog } from './daemon-file-log'
 import type { SubprocessHandle } from './session'
 
@@ -93,14 +94,21 @@ describe('DaemonPtyRouter history handoff', () => {
     }
     await Promise.all([legacyServer?.shutdown(), currentServer?.shutdown()])
     rmSync(testDir, { recursive: true, force: true })
+    vi.unstubAllEnvs()
     vi.restoreAllMocks()
   })
 
   it('moves a slept v29 session to v30 with its full large history', async () => {
     const sessionId = 'large-legacy-session'
     const marker = 'V29-HISTORY-HANDOFF-MARKER'
+    // Why: this fixture plays an OLD daemon binary, whose sessions retained ~5000 rows. New code
+    // applies the flat window at session create, which would shrink the history below the chunked
+    // seed threshold and silently skip the transfer path this test exists to cover.
+    vi.stubEnv('ORCA_DAEMON_SESSION_SCROLLBACK_ROWS', '5000')
     await legacyAdapter.spawn({ sessionId, cols: 400, rows: 24 })
     legacySubprocess.emitData(`${'x'.repeat(TERMINAL_HISTORY_INLINE_SEED_CODE_UNITS + 1)}${marker}`)
+    // Keep only the played legacy session deep; the receiving daemon must use today's flat window.
+    vi.stubEnv('ORCA_DAEMON_SESSION_SCROLLBACK_ROWS', String(DAEMON_SESSION_SCROLLBACK_ROWS))
     router = new DaemonPtyRouter({ current: currentAdapter, legacy: [legacyAdapter] })
     await router.discoverLegacySessions()
     const client = (
diff --git a/src/main/daemon/daemon-self-retirement-respawn.test.ts b/src/main/daemon/daemon-self-retirement-respawn.test.ts
index a5df5453fe6..c588b5a6918 100644
--- a/src/main/daemon/daemon-self-retirement-respawn.test.ts
+++ b/src/main/daemon/daemon-self-retirement-respawn.test.ts
@@ -213,17 +213,52 @@ describe('daemon self-retirement respawn', () => {
     expect(respawn).not.toHaveBeenCalled()
   })
 
-  it('does not treat an initial missing token as respawn authority', async () => {
+  it('does not respawn a listening daemon whose token is absent', async () => {
+    await startServer()
+    rmSync(tokenPath)
     const respawn = vi.fn(async () => {})
     const adapter = new DaemonPtyAdapter({ socketPath, tokenPath, respawn })
 
-    await expect(adapter.spawn({ sessionId: 'missing', cols: 80, rows: 24 })).rejects.toMatchObject(
-      {
-        code: 'ENOENT'
-      }
-    )
+    await expect(
+      adapter.spawn({ sessionId: 'startup-window', cols: 80, rows: 24 })
+    ).rejects.toThrow(/Invalid token/i)
 
     expect(respawn).not.toHaveBeenCalled()
     adapter.dispose()
   })
+
+  it('does not let stale disconnect evidence authorize respawning a listening daemon', async () => {
+    const original = await startServer()
+    const respawn = vi.fn(async () => {})
+    const adapter = new DaemonPtyAdapter({ socketPath, tokenPath, respawn })
+    await adapter.listProcesses()
+    const client = (
+      adapter as unknown as {
+        client: { hasObservedAuthenticatedDisconnect(): boolean }
+      }
+    ).client
+
+    await original.shutdown()
+    await waitFor(() => client.hasObservedAuthenticatedDisconnect())
+    await startServer()
+    rmSync(tokenPath)
+
+    await expect(
+      adapter.spawn({ sessionId: 'replacement-startup-window', cols: 80, rows: 24 })
+    ).rejects.toThrow(/Invalid token/i)
+
+    expect(respawn).not.toHaveBeenCalled()
+    adapter.dispose()
+  })
+
+  it('respawns when nothing is accepting on the endpoint', async () => {
+    const respawn = vi.fn(async () => {})
+    const adapter = new DaemonPtyAdapter({ socketPath, tokenPath, respawn })
+
+    // Fails after the respawn attempt because the mock respawn starts no replacement.
+    await expect(adapter.spawn({ sessionId: 'missing', cols: 80, rows: 24 })).rejects.toThrow()
+
+    expect(respawn).toHaveBeenCalledTimes(1)
+    adapter.dispose()
+  })
 })
diff --git a/src/main/daemon/daemon-server-attachment-lifecycle.test.ts b/src/main/daemon/daemon-server-attachment-lifecycle.test.ts
new file mode 100644
index 00000000000..fdc445ad59e
--- /dev/null
+++ b/src/main/daemon/daemon-server-attachment-lifecycle.test.ts
@@ -0,0 +1,135 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Socket } from 'node:net'
+import { mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { DaemonClient } from './client'
+import { DaemonServer } from './daemon-server'
+import { getDaemonSocketPath } from './daemon-spawner'
+import type { SubprocessHandle } from './session'
+import type { CreateOrAttachOptions, CreateOrAttachResult } from './terminal-host'
+
+function createMockSubprocess(): SubprocessHandle {
+  let onExit: ((code: number) => void) | undefined
+  return {
+    pid: 55_555,
+    getForegroundProcess: () => null,
+    write: vi.fn(),
+    resize: vi.fn(),
+    kill: vi.fn(() => onExit?.(0)),
+    forceKill: vi.fn(() => onExit?.(137)),
+    signal: vi.fn(),
+    onData: vi.fn(),
+    onExit(callback) {
+      onExit = callback
+    },
+    dispose: vi.fn()
+  }
+}
+
+type DaemonAttachmentPrivate = {
+  host: {
+    detach: (sessionId: string, token: symbol) => void
+    detachClients: (attachments: readonly { sessionId: string; token: symbol }[]) => void
+    createOrAttach: (options: CreateOrAttachOptions) => Promise<CreateOrAttachResult>
+    sessions: Map<string, { hasAttachedClients: boolean }>
+  }
+  clients: Map<string, { streamSocket: Socket | null }>
+  streamClientIdBySessionId: Map<string, string>
+  attachTokenBySessionId: Map<string, symbol>
+}
+
+describe('DaemonServer attachment lifecycle', () => {
+  let directory: string
+  let server: DaemonServer
+  let client: DaemonClient
+
+  beforeEach(async () => {
+    directory = mkdtempSync(join(tmpdir(), 'daemon-attachment-lifecycle-'))
+    const socketPath = getDaemonSocketPath(directory)
+    const tokenPath = join(directory, 'daemon.token')
+    server = new DaemonServer({
+      socketPath,
+      tokenPath,
+      spawnSubprocess: createMockSubprocess
+    })
+    await server.start()
+    client = new DaemonClient({ socketPath, tokenPath })
+    await client.ensureConnected()
+  })
+
+  afterEach(async () => {
+    client.disconnect()
+    await server.shutdown()
+    rmSync(directory, { recursive: true, force: true })
+  })
+
+  async function createSession(sessionId: string): Promise<void> {
+    await client.request('createOrAttach', { sessionId, cols: 80, rows: 24 })
+  }
+
+  it('parks attached sessions when their stream transport closes', async () => {
+    await createSession('transport-owned-session')
+    const daemon = server as unknown as DaemonAttachmentPrivate
+    const detachClients = vi.spyOn(daemon.host, 'detachClients')
+    const streamSocket = [...daemon.clients.values()][0]?.streamSocket
+
+    streamSocket?.destroy()
+
+    await vi.waitFor(() => expect(detachClients).toHaveBeenCalledOnce())
+    expect(detachClients.mock.calls[0]?.[0]).toEqual([
+      { sessionId: 'transport-owned-session', token: expect.any(Symbol) }
+    ])
+    expect(daemon.host.sessions.get('transport-owned-session')?.hasAttachedClients).toBe(false)
+    expect(daemon.streamClientIdBySessionId.has('transport-owned-session')).toBe(false)
+    expect(daemon.attachTokenBySessionId.has('transport-owned-session')).toBe(false)
+  })
+
+  it('parks only the requesting client attachment on explicit detach', async () => {
+    await createSession('explicitly-detached-session')
+    const daemon = server as unknown as DaemonAttachmentPrivate
+    const detach = vi.spyOn(daemon.host, 'detach')
+
+    await client.request('detach', { sessionId: 'explicitly-detached-session' })
+
+    expect(detach).toHaveBeenCalledWith('explicitly-detached-session', expect.any(Symbol))
+    expect(daemon.host.sessions.get('explicitly-detached-session')?.hasAttachedClients).toBe(false)
+    expect(daemon.streamClientIdBySessionId.has('explicitly-detached-session')).toBe(false)
+    expect(daemon.attachTokenBySessionId.has('explicitly-detached-session')).toBe(false)
+  })
+
+  it('parks an attachment completed after its transport already closed', async () => {
+    const daemon = server as unknown as DaemonAttachmentPrivate
+    const originalCreateOrAttach = daemon.host.createOrAttach.bind(daemon.host)
+    let attachmentCreated!: () => void
+    let finishRequest!: () => void
+    const created = new Promise<void>((resolve) => {
+      attachmentCreated = resolve
+    })
+    const gate = new Promise<void>((resolve) => {
+      finishRequest = resolve
+    })
+    vi.spyOn(daemon.host, 'createOrAttach').mockImplementation(async (options) => {
+      const result = await originalCreateOrAttach(options)
+      attachmentCreated()
+      await gate
+      return result
+    })
+    const request = client
+      .request('createOrAttach', { sessionId: 'close-race-session', cols: 80, rows: 24 })
+      .catch(() => undefined)
+    await created
+
+    client.disconnect()
+    await vi.waitFor(() => expect(daemon.clients.size).toBe(0))
+    expect(daemon.host.sessions.get('close-race-session')?.hasAttachedClients).toBe(true)
+    finishRequest()
+
+    await request
+    await vi.waitFor(() =>
+      expect(daemon.host.sessions.get('close-race-session')?.hasAttachedClients).toBe(false)
+    )
+    expect(daemon.streamClientIdBySessionId.has('close-race-session')).toBe(false)
+    expect(daemon.attachTokenBySessionId.has('close-race-session')).toBe(false)
+  })
+})
diff --git a/src/main/daemon/daemon-server.ts b/src/main/daemon/daemon-server.ts
index 51d9d0913a2..090be538b98 100644
--- a/src/main/daemon/daemon-server.ts
+++ b/src/main/daemon/daemon-server.ts
@@ -145,7 +145,7 @@ export class DaemonServer {
   private transportSockets = new Set<Socket>()
   private createOrAttachInFlight = 0
   private idleShutdownState: 'running' | 'idle-shutdown-pending' | 'shutting-down' = 'running'
-  private initialAdoptionTimer: unknown | null = null
+  private initialAdoptionTimer: unknown = null
   private initialAdoptionDeadlineMs: number | null = null
   private retirementRequested = false
   private shutdownPromise: Promise<void> | null = null
@@ -184,6 +184,7 @@ export class DaemonServer {
     }
   })
   private streamClientIdBySessionId = new Map<string, string>()
+  private attachTokenBySessionId = new Map<string, symbol>()
   private lastInputAtBySessionId = new Map<string, number>()
   private pendingPtySpawnPreparations = new Map<string, Set<PendingPtySpawnPreparation>>()
   private historySeedTransfers = new TerminalHistorySeedTransferRegistry()
@@ -227,7 +228,17 @@ export class DaemonServer {
     this.onAuthenticatedClientPair = opts.onAuthenticatedClientPair ?? (() => {})
     this.host = new TerminalHost({
       spawnSubprocess: opts.spawnSubprocess,
-      ...(opts.onPtySessionExit ? { onSessionReaped: opts.onPtySessionExit } : {})
+      // Why host-level and not the attach callback: a session whose client transport already dropped
+      // has no attachment left to fire exit bookkeeping, and the daemon must still notice it can idle.
+      onSessionReaped: (sessionId) => {
+        this.streamClientIdBySessionId.delete(sessionId)
+        this.attachTokenBySessionId.delete(sessionId)
+        this.lastInputAtBySessionId.delete(sessionId)
+        this.transientFactRelay.onSessionExit(sessionId)
+        this.streamDataBatcher.refreshSessionDroppability(sessionId)
+        opts.onPtySessionExit?.(sessionId)
+        this.reevaluateIdleShutdown()
+      }
     })
     this.ptySpawnHealthCheck = opts.ptySpawnHealthCheck ?? checkPtySpawnHealth
     this.preparePtySpawn = opts.preparePtySpawn ?? (() => Promise.resolve())
@@ -774,6 +785,7 @@ export class DaemonServer {
       this.historySeedTransfers.clearOwner(clientId)
       const wasFullyAuthenticated = client.authenticatedPairEstablished
       this.streamDataBatcher.clear(clientId)
+      this.detachClientSessions(clientId)
       client.streamSocket?.destroy()
       this.clients.delete(clientId)
       this.recordFullyAuthenticatedDisconnect(wasFullyAuthenticated)
@@ -811,6 +823,7 @@ export class DaemonServer {
       // Why: a preflight that outlives its output channel would create an unattached daemon PTY.
       this.cancelPendingPtySpawnPreparationsForClient(client.clientId)
       this.streamDataBatcher.clear(client.clientId)
+      this.detachClientSessions(client.clientId)
       client.streamSocket = null
     }
 
@@ -936,6 +949,36 @@ export class DaemonServer {
     }
   }
 
+  private detachClientSessions(clientId: string): void {
+    const attachments: { sessionId: string; token: symbol }[] = []
+    for (const [sessionId, attachedClientId] of this.streamClientIdBySessionId) {
+      if (attachedClientId !== clientId) {
+        continue
+      }
+      const token = this.attachTokenBySessionId.get(sessionId)
+      if (token) {
+        attachments.push({ sessionId, token })
+      }
+      this.streamClientIdBySessionId.delete(sessionId)
+      this.attachTokenBySessionId.delete(sessionId)
+    }
+    if (attachments.length > 0) {
+      this.host.detachClients(attachments)
+    }
+  }
+
+  private detachSessionForClient(sessionId: string, clientId: string): void {
+    if (this.streamClientIdBySessionId.get(sessionId) !== clientId) {
+      return
+    }
+    const token = this.attachTokenBySessionId.get(sessionId)
+    if (token) {
+      this.host.detach(sessionId, token)
+    }
+    this.streamClientIdBySessionId.delete(sessionId)
+    this.attachTokenBySessionId.delete(sessionId)
+  }
+
   private async routeRequest(clientId: string, request: DaemonRequest): Promise<unknown> {
     const client = this.clients.get(clientId)
 
@@ -1071,6 +1114,7 @@ export class DaemonServer {
                 this.transientFactRelay.onSessionExit(routedSessionId)
                 this.streamDataBatcher.refreshSessionDroppability(routedSessionId)
                 this.streamClientIdBySessionId.delete(routedSessionId)
+                this.attachTokenBySessionId.delete(routedSessionId)
                 this.lastInputAtBySessionId.delete(routedSessionId)
                 this.reevaluateIdleShutdown()
               }
@@ -1081,7 +1125,16 @@ export class DaemonServer {
           this.reevaluateIdleShutdown()
         }
         routedSessionId = result.agentSessionEnsure?.owner.ptyId ?? p.sessionId
+        if (
+          this.clients.get(clientId) !== client ||
+          !client.authenticatedPairEstablished ||
+          client.streamSocket === null
+        ) {
+          this.host.detach(routedSessionId, result.attachToken)
+          throw new TerminalAttachCanceledError(routedSessionId)
+        }
         this.streamClientIdBySessionId.set(routedSessionId, clientId)
+        this.attachTokenBySessionId.set(routedSessionId, result.attachToken)
         this.streamDataBatcher.refreshSessionDroppability(routedSessionId)
         // Why an attach-time marker: background resync can precede this attach, so scan suppression must start at the new stream's head.
         if (this.transientFactRelay.isBackgrounded(routedSessionId)) {
@@ -1228,7 +1281,7 @@ export class DaemonServer {
         return {}
 
       case 'detach':
-        // Note: detach token handling simplified — full impl would track tokens per client
+        this.detachSessionForClient(request.payload.sessionId, clientId)
         this.log.log('session-detached', {
           sessionId: request.payload.sessionId
         })
diff --git a/src/main/daemon/daemon-session-scrollback-window.test.ts b/src/main/daemon/daemon-session-scrollback-window.test.ts
new file mode 100644
index 00000000000..14f86857081
--- /dev/null
+++ b/src/main/daemon/daemon-session-scrollback-window.test.ts
@@ -0,0 +1,94 @@
+/**
+ * OOM regression: a daemon owning 100+ terminals retained ~5000 rows of grid per session with no
+ * bound, grew to ~1.9 GB, and was killed under system memory pressure — losing every session it
+ * owned. Sessions now retain a flat window; deep scrolling on an open terminal is the renderer's
+ * live buffer, and the window is what a rebuild (reload/remount/restart/remote attach) restores.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TerminalHost } from './terminal-host'
+import type { SubprocessHandle } from './session'
+import {
+  DAEMON_SESSION_SCROLLBACK_ROWS,
+  resolveDaemonSessionScrollbackRows
+} from './daemon-session-scrollback-window'
+
+describe('resolveDaemonSessionScrollbackRows', () => {
+  it('defaults to the flat window', () => {
+    expect(resolveDaemonSessionScrollbackRows({} as NodeJS.ProcessEnv)).toBe(
+      DAEMON_SESSION_SCROLLBACK_ROWS
+    )
+  })
+
+  it('accepts the inclusive override bounds and rejects everything outside them', () => {
+    for (const raw of ['100', '2500', '5000']) {
+      const env = { ORCA_DAEMON_SESSION_SCROLLBACK_ROWS: raw } as NodeJS.ProcessEnv
+      expect(resolveDaemonSessionScrollbackRows(env)).toBe(Number(raw))
+    }
+    // Why bounded: 0 loses the visible screen's context; huge values silently reintroduce the
+    // unbounded retention this window exists to prevent.
+    for (const raw of ['0', '50', '99', '5001', '50000', '-1', '3.5', 'nonsense', '']) {
+      const env = { ORCA_DAEMON_SESSION_SCROLLBACK_ROWS: raw } as NodeJS.ProcessEnv
+      expect(resolveDaemonSessionScrollbackRows(env)).toBe(DAEMON_SESSION_SCROLLBACK_ROWS)
+    }
+  })
+})
+
+describe('daemon session scrollback window', () => {
+  let host: TerminalHost
+  let dataCb: ((data: string) => void) | null
+
+  function createMockSubprocess(): SubprocessHandle {
+    let onExitCb: ((code: number) => void) | null = null
+    return {
+      pid: 4242,
+      getForegroundProcess: vi.fn(() => null),
+      write: vi.fn(),
+      resize: vi.fn(),
+      kill: vi.fn(() => {
+        setTimeout(() => onExitCb?.(0), 1)
+      }),
+      forceKill: vi.fn(() => onExitCb?.(137)),
+      signal: vi.fn(),
+      onData(cb) {
+        dataCb = cb
+      },
+      onExit(cb) {
+        onExitCb = cb
+      },
+      dispose: vi.fn()
+    } as SubprocessHandle
+  }
+
+  beforeEach(() => {
+    dataCb = null
+    host = new TerminalHost({ spawnSubprocess: () => createMockSubprocess() })
+  })
+
+  afterEach(async () => {
+    await host.dispose()
+  })
+
+  it('caps retained rows at the window while keeping the newest content', async () => {
+    await host.createOrAttach({
+      sessionId: 'windowed',
+      cols: 80,
+      rows: 24,
+      streamClient: { onData: vi.fn(), onExit: vi.fn() }
+    })
+    const total = DAEMON_SESSION_SCROLLBACK_ROWS + 500
+    for (let i = 1; i <= total; i += 1) {
+      dataCb?.(`LINE_${String(i).padStart(5, '0')}\r\n`)
+    }
+    await vi.waitFor(() => {
+      const snapshot = host.getSnapshot('windowed')
+      expect(snapshot?.snapshotAnsi ?? snapshot?.scrollbackAnsi).toBeTruthy()
+      const text = `${snapshot?.scrollbackAnsi ?? ''}${snapshot?.snapshotAnsi ?? ''}`
+      // Newest line always present; the oldest has scrolled past the window.
+      expect(text).toContain(`LINE_${String(total).padStart(5, '0')}`)
+      expect(text).not.toContain('LINE_00001')
+      const retainedMatches = text.match(/LINE_\d{5}/g) ?? []
+      expect(retainedMatches.length).toBeLessThanOrEqual(DAEMON_SESSION_SCROLLBACK_ROWS + 24)
+      expect(retainedMatches.length).toBeGreaterThan(DAEMON_SESSION_SCROLLBACK_ROWS - 50)
+    })
+  })
+})
diff --git a/src/main/daemon/daemon-session-scrollback-window.ts b/src/main/daemon/daemon-session-scrollback-window.ts
new file mode 100644
index 00000000000..68ecf6eeb4b
--- /dev/null
+++ b/src/main/daemon/daemon-session-scrollback-window.ts
@@ -0,0 +1,24 @@
+const DAEMON_SESSION_SCROLLBACK_ENV_VAR = 'ORCA_DAEMON_SESSION_SCROLLBACK_ROWS'
+
+// Why a flat window and not full renderer depth: retained grid is the daemon's dominant heap term and
+// session count is unbounded — a host owning 100+ terminals at full depth retained ~1 GB of grid and
+// was OOM-killed, taking every session it owned with it. A terminal the user has open scrolls its full
+// live renderer buffer; the daemon window is only what a REBUILD (reload, remount, restart, remote
+// attach) restores, and 1000 rows is the generous end of what terminal products restore there.
+export const DAEMON_SESSION_SCROLLBACK_ROWS = 1000
+// Why: keep any override within sane terminal bounds — 0 would lose the visible screen's context and
+// huge values silently reintroduce the unbounded-retention failure this window exists to prevent.
+const MIN_OVERRIDE_ROWS = 100
+const MAX_OVERRIDE_ROWS = 5000
+
+export function resolveDaemonSessionScrollbackRows(env: NodeJS.ProcessEnv = process.env): number {
+  const raw = env[DAEMON_SESSION_SCROLLBACK_ENV_VAR]?.trim()
+  if (!raw || !/^\d+$/.test(raw)) {
+    return DAEMON_SESSION_SCROLLBACK_ROWS
+  }
+  const parsed = Number(raw)
+  if (!Number.isSafeInteger(parsed) || parsed < MIN_OVERRIDE_ROWS || parsed > MAX_OVERRIDE_ROWS) {
+    return DAEMON_SESSION_SCROLLBACK_ROWS
+  }
+  return parsed
+}
diff --git a/src/main/daemon/daemon-transport-attachment-release.test.ts b/src/main/daemon/daemon-transport-attachment-release.test.ts
new file mode 100644
index 00000000000..ca6a544dc95
--- /dev/null
+++ b/src/main/daemon/daemon-transport-attachment-release.test.ts
@@ -0,0 +1,93 @@
+/**
+ * Attachment-leak regression: an attachment that outlives its transport leaves the session looking
+ * viewed forever — producer pause/resume and any attachment-gated behavior then act on a client that
+ * no longer exists. A dropped client transport must release exactly that client's attachments, and
+ * protocol detach must really detach (it was previously logging-only).
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { DaemonPtyAdapter } from './daemon-pty-adapter'
+import { DaemonServer } from './daemon-server'
+import { getDaemonSocketPath } from './daemon-spawner'
+import type { Session, SubprocessHandle } from './session'
+
+function fixtureSubprocess(): SubprocessHandle {
+  let onExitCb: ((code: number) => void) | null = null
+  return {
+    pid: 1234,
+    getForegroundProcess: () => null,
+    write: () => {},
+    resize: () => {},
+    kill: () => {
+      setTimeout(() => onExitCb?.(0), 1)
+    },
+    forceKill: () => onExitCb?.(137),
+    signal: () => {},
+    onData: () => {},
+    onExit: (cb) => {
+      onExitCb = cb
+    },
+    dispose: () => {}
+  } as SubprocessHandle
+}
+
+describe('transport-drop attachment release', () => {
+  let dir: string
+  let socketPath: string
+  let tokenPath: string
+  let server: DaemonServer | null
+  let adapter: DaemonPtyAdapter | null
+
+  beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), 'daemon-attachment-release-'))
+    socketPath = getDaemonSocketPath(dir)
+    tokenPath = join(dir, 'daemon.token')
+    server = null
+    adapter = null
+  })
+
+  afterEach(async () => {
+    await adapter?.disconnectOnly().catch(() => {})
+    await server?.shutdown().catch(() => {})
+    rmSync(dir, { recursive: true, force: true })
+  })
+
+  function sessionOf(started: DaemonServer, sessionId: string): Session | undefined {
+    const host = (started as unknown as { host: { sessions: Map<string, Session> } }).host
+    return host.sessions.get(sessionId)
+  }
+
+  it('releases a dropped client transport instead of leaving a phantom attachment', async () => {
+    const started = new DaemonServer({
+      socketPath,
+      tokenPath,
+      spawnSubprocess: () => fixtureSubprocess()
+    })
+    await started.start()
+    server = started
+
+    adapter = new DaemonPtyAdapter({
+      socketPath,
+      tokenPath,
+      profileScope: dir,
+      historyPath: join(dir, 'history')
+    })
+    await adapter.spawn({ sessionId: 'viewed-then-dropped', cols: 80, rows: 24 })
+
+    const session = sessionOf(started, 'viewed-then-dropped')
+    expect(session).toBeDefined()
+    expect(session!.hasAttachedClients).toBe(true)
+
+    // Drop the transport without any protocol detach — the crash/abrupt-exit case.
+    const client = (adapter as unknown as { client: { disconnect(): void } }).client
+    client.disconnect()
+
+    await vi.waitFor(() => {
+      expect(session!.hasAttachedClients).toBe(false)
+    })
+    // The session itself must survive the disconnect — only the attachment is released.
+    expect(session!.isAlive).toBe(true)
+  })
+})
diff --git a/src/main/daemon/headless-emulator-modes.ts b/src/main/daemon/headless-emulator-modes.ts
new file mode 100644
index 00000000000..bf65d527a3c
--- /dev/null
+++ b/src/main/daemon/headless-emulator-modes.ts
@@ -0,0 +1,32 @@
+import type { Terminal } from '@xterm/headless'
+import type { TerminalMouseModeMirror } from './terminal-mouse-mode-mirror'
+import type { TerminalModes } from './types'
+
+type TerminalWithKittyKeyboard = Terminal & {
+  // Why: kitty keyboard flags aren't on the public IModes; read the core service the CSI u handlers mutate.
+  _core?: { coreService?: { kittyKeyboard?: { flags?: number } } }
+}
+
+export function readKittyKeyboardFlags(terminal: Terminal): number {
+  const flags = (terminal as TerminalWithKittyKeyboard)._core?.coreService?.kittyKeyboard?.flags
+  return typeof flags === 'number' ? flags : 0
+}
+
+/** Mode state a snapshot must carry so a restored pane behaves like the live one. */
+export function readTerminalModes(
+  terminal: Terminal,
+  mouseModes: TerminalMouseModeMirror
+): TerminalModes {
+  const buffer = terminal.buffer.active
+  const mouseTrackingMode = mouseModes.mouseTrackingMode
+  return {
+    bracketedPaste: terminal.modes.bracketedPasteMode,
+    mouseTracking: mouseTrackingMode !== 'none',
+    mouseTrackingMode,
+    sgrMouseMode: mouseModes.sgrMouseMode,
+    sgrMousePixelsMode: mouseModes.sgrMousePixelsMode,
+    applicationCursor: buffer.type === 'normal' ? terminal.modes.applicationCursorKeysMode : false,
+    alternateScreen: buffer.type === 'alternate',
+    kittyKeyboardFlags: readKittyKeyboardFlags(terminal)
+  }
+}
diff --git a/src/main/daemon/headless-emulator.ts b/src/main/daemon/headless-emulator.ts
index 12be643d637..e26ce0d3094 100644
--- a/src/main/daemon/headless-emulator.ts
+++ b/src/main/daemon/headless-emulator.ts
@@ -10,6 +10,7 @@ import {
 import { advancePartialEscapeTail } from '../../shared/terminal-partial-escape-tail'
 import type { TerminalViewAttributes } from '../../shared/terminal-view-attributes'
 import { collectHeadlessOscLinkRanges } from './headless-osc-link-ranges'
+import { readTerminalModes } from './headless-emulator-modes'
 import { buildRehydrateSequences } from './terminal-mode-rehydrate-sequences'
 import { TerminalMouseModeMirror } from './terminal-mouse-mode-mirror'
 import { TerminalOscCwdTitleScanner } from './terminal-osc-cwd-title-scanner'
@@ -338,24 +339,6 @@ export class HeadlessEmulator {
   }
 
   private getModes(): TerminalModes {
-    const buffer = this.terminal.buffer.active
-    const mouseTrackingMode = this.mouseModes.mouseTrackingMode
-    return {
-      bracketedPaste: this.terminal.modes.bracketedPasteMode,
-      mouseTracking: mouseTrackingMode !== 'none',
-      mouseTrackingMode,
-      sgrMouseMode: this.mouseModes.sgrMouseMode,
-      sgrMousePixelsMode: this.mouseModes.sgrMousePixelsMode,
-      applicationCursor:
-        buffer.type === 'normal' ? this.terminal.modes.applicationCursorKeysMode : false,
-      alternateScreen: buffer.type === 'alternate',
-      kittyKeyboardFlags: this.getKittyKeyboardFlags()
-    }
-  }
-
-  private getKittyKeyboardFlags(): number {
-    const flags = (this.terminal as TerminalWithSynchronousWrite)._core?.coreService?.kittyKeyboard
-      ?.flags
-    return typeof flags === 'number' ? flags : 0
+    return readTerminalModes(this.terminal, this.mouseModes)
   }
 }
diff --git a/src/main/daemon/macos-login-session-death-watch.ts b/src/main/daemon/macos-login-session-death-watch.ts
index 1f529ff3e00..e2df486e38f 100644
--- a/src/main/daemon/macos-login-session-death-watch.ts
+++ b/src/main/daemon/macos-login-session-death-watch.ts
@@ -66,9 +66,9 @@ export class MacosLoginSessionDeathWatch {
   private probeInFlight = false
   private stopped = false
   private retired = false
-  private scheduledProbeTimer: unknown | null = null
+  private scheduledProbeTimer: unknown = null
   private scheduledProbeAtMs: number | null = null
-  private ptyExitDebounceTimer: unknown | null = null
+  private ptyExitDebounceTimer: unknown = null
   private pendingProbeTrigger: string | null = null
   private probeAbortController: AbortController | null = null
 
diff --git a/src/main/daemon/pty-subprocess.test.ts b/src/main/daemon/pty-subprocess.test.ts
index 5322bd6294b..81d77da5720 100644
--- a/src/main/daemon/pty-subprocess.test.ts
+++ b/src/main/daemon/pty-subprocess.test.ts
@@ -78,9 +78,12 @@ vi.mock('../providers/windows-conpty-process-membership', () => ({
 import { createPtySubprocess, checkPtySpawnHealth } from './pty-subprocess'
 import { PREVIOUS_DAEMON_PROTOCOL_VERSIONS, PROTOCOL_VERSION } from './types'
 import { TERMINAL_GIT_CREDENTIAL_GUARD_POLICY_ENV } from '../../shared/terminal-git-credential-guard'
+import {
+  LEGACY_TERMINAL_SHIM_ENV_KEYS,
+  stripLegacyTerminalShimEnv
+} from '../pty/legacy-terminal-shim-dir'
 
 const ORCA_SHELL_WRAPPER_ENV = [
-  'ORCA_ATTRIBUTION_SHIM_DIR',
   'ORCA_OPENCODE_CONFIG_DIR',
   'ORCA_MIMOCODE_HOME',
   'ORCA_PI_CODING_AGENT_DIR',
@@ -1276,6 +1279,35 @@ describe('createPtySubprocess', () => {
     expect(env.ELECTRON_RUN_AS_NODE).toBeUndefined()
   })
 
+  it('does not inherit legacy attribution state from a pre-upgrade daemon', () => {
+    const proc = mockPtyProcess()
+    spawnMock.mockReturnValue(proc)
+    const saved = Object.fromEntries(
+      [...LEGACY_TERMINAL_SHIM_ENV_KEYS, 'PATH'].map((key) => [key, process.env[key]])
+    )
+    process.env.ORCA_ENABLE_GIT_ATTRIBUTION = '1'
+    process.env.ORCA_ATTRIBUTION_SHIM_DIR = '/tmp/orca-terminal-attribution/posix'
+    process.env.PATH = `/tmp/orca-terminal-attribution/posix${delimiter}/usr/bin`
+
+    try {
+      createPtySubprocess({ sessionId: 'test', cols: 80, rows: 24 })
+    } finally {
+      for (const [key, value] of Object.entries(saved)) {
+        if (value === undefined) {
+          delete process.env[key]
+        } else {
+          process.env[key] = value
+        }
+      }
+    }
+
+    const env = spawnMock.mock.calls.at(-1)?.[2].env
+    expect(env.PATH).toBe('/usr/bin')
+    for (const key of LEGACY_TERMINAL_SHIM_ENV_KEYS) {
+      expect(env[key]).toBeUndefined()
+    }
+  })
+
   it('does not inherit NODE_ENV from the daemon process env', () => {
     // Why: a dev-mode Orca forks the daemon with NODE_ENV=development; leaking
     // Orca's build mode into user shells breaks `next build` and Vitest.
@@ -1296,7 +1328,9 @@ describe('createPtySubprocess', () => {
 
     const env = spawnMock.mock.calls.at(-1)?.[2].env
     expect(env.NODE_ENV).toBeUndefined()
-    expect(env.PATH).toBe(process.env.PATH)
+    const expectedEnv = { PATH: process.env.PATH ?? '' }
+    stripLegacyTerminalShimEnv(expectedEnv, process.platform)
+    expect(env.PATH).toBe(expectedEnv.PATH)
   })
 
   it('keeps an explicitly requested NODE_ENV for daemon PTY shells', () => {
@@ -1760,7 +1794,7 @@ describe('createPtySubprocess', () => {
     expect(spawnEnv.MY_VAR).toBe('test-value')
   })
 
-  it('uses shell wrapper when attribution shims must survive shell startup', () => {
+  it('uses shell wrapper when managed env must survive shell startup', () => {
     const proc = mockPtyProcess()
     spawnMock.mockReturnValue(proc)
     const platform = Object.getOwnPropertyDescriptor(process, 'platform')
@@ -1773,7 +1807,7 @@ describe('createPtySubprocess', () => {
         rows: 24,
         env: {
           SHELL: '/bin/zsh',
-          ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/orca-terminal-attribution/posix'
+          ORCA_OPENCODE_CONFIG_DIR: '/tmp/orca-opencode-config'
         }
       })
     } finally {
@@ -2165,7 +2199,7 @@ describe('createPtySubprocess', () => {
         PATH: '/tmp/orca-agent-teams-bin:/usr/bin',
         ORCA_AGENT_TEAMS_TEAM_ID: 'team-test'
       },
-      envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+      envToDelete: ['TERM_PROGRAM']
     })
 
     const lastCall = spawnMock.mock.calls.at(-1)!
@@ -2173,7 +2207,6 @@ describe('createPtySubprocess', () => {
     expect(lastCall[2].env.TERM).toBe('screen-256color')
     expect(lastCall[2].env.PATH.split(':')[0]).toBe('/tmp/orca-agent-teams-bin')
     expect(lastCall[2].env.TERM_PROGRAM).toBeUndefined()
-    expect(lastCall[2].env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
   })
 
   it('collapses its own env merge onto the requested Windows `Path` spelling', () => {
@@ -2209,6 +2242,8 @@ describe('createPtySubprocess', () => {
     const proc = mockPtyProcess()
     spawnMock.mockReturnValue(proc)
     const platform = Object.getOwnPropertyDescriptor(process, 'platform')
+    const expectedEnv = { PATH: process.env.PATH ?? '' }
+    stripLegacyTerminalShimEnv(expectedEnv, 'win32')
 
     Object.defineProperty(process, 'platform', { value: 'win32' })
     try {
@@ -2220,7 +2255,7 @@ describe('createPtySubprocess', () => {
     }
 
     const env = spawnMock.mock.calls.at(-1)![2].env
-    expect(env.PATH).toBe(process.env.PATH)
+    expect(env.PATH).toBe(expectedEnv.PATH)
   })
 
   it('preserves a duplicated path block supplied by main', () => {
diff --git a/src/main/daemon/pty-subprocess.ts b/src/main/daemon/pty-subprocess.ts
index 7566b81f6fe..a6eade9f621 100644
--- a/src/main/daemon/pty-subprocess.ts
+++ b/src/main/daemon/pty-subprocess.ts
@@ -6,7 +6,7 @@ import { delimiter, win32 as pathWin32 } from 'node:path'
 import type { SubprocessHandle } from './session'
 import { DaemonProtocolError } from './types'
 import {
-  getAttributionShellLaunchConfig,
+  getMarkerlessShellLaunchConfig,
   getShellReadyLaunchConfig,
   resolvePtyShellPath
 } from './shell-ready'
@@ -35,6 +35,7 @@ import { isHostCodexHomeForWsl, isWslCodexHomeForHost } from '../pty/codex-home-
 import { removeInheritedNoColor } from '../pty/terminal-color-env'
 import { removeAppImageRuntimeEnv } from '../pty/appimage-terminal-env'
 import { stripInheritedBuildModeEnv } from '../pty/build-mode-env'
+import { stripLegacyTerminalShimEnv } from '../pty/legacy-terminal-shim-dir'
 import { resolvePathEnvKey } from '../pty/windows-environment-path'
 import { parseWslPath } from '../wsl'
 import { addWslEnvKeys } from '../wsl-env'
@@ -629,6 +630,8 @@ export function createPtySubprocess(opts: PtySubprocessOptions): SubprocessHandl
     // Why: `supports-hyperlinks` gates OSC 8 on a TERM_PROGRAM allowlist excluding Orca; force it since xterm.js parses OSC 8 for clickable links.
     FORCE_HYPERLINK: '1'
   } as Record<string, string>
+  // Why: an older client may not ask a newly upgraded daemon to delete inherited shim state.
+  stripLegacyTerminalShimEnv(env, process.platform)
   composeGuardedDaemonGitConfigEnv(env, opts.env, opts.launchAgent)
   deleteRequestedDaemonEnvKeys(env, opts.envToDelete)
   if (opts.env?.TERM) {
@@ -800,18 +803,17 @@ export function createPtySubprocess(opts: PtySubprocessOptions): SubprocessHandl
       // Why: payload-bearing Codex startup text can be dropped by rc-file noise; plain Codex stays markerless for the startup-speed path.
       shellLaunch = shouldWaitForShellReady
         ? getShellReadyLaunchConfig(shellPath)
-        : getAttributionShellLaunchConfig(shellPath)
+        : getMarkerlessShellLaunchConfig(shellPath)
     } else if (opts.command) {
       shellLaunch = getShellReadyLaunchConfig(shellPath)
     } else {
       shellLaunch =
-        env.ORCA_ATTRIBUTION_SHIM_DIR ||
         env.ORCA_OPENCODE_CONFIG_DIR ||
         env.ORCA_MIMOCODE_HOME ||
         env.ORCA_OMP_STATUS_EXTENSION ||
         env.ORCA_CODEX_HOME ||
         env.ORCA_AGENT_TEAMS_SHIM_DIR
-          ? getAttributionShellLaunchConfig(shellPath)
+          ? getMarkerlessShellLaunchConfig(shellPath)
           : null
     }
     if (shellLaunch) {
@@ -835,6 +837,8 @@ export function createPtySubprocess(opts: PtySubprocessOptions): SubprocessHandl
     ? requestedEnv[resolvePathEnvKey(requestedEnv, process.platform)]
     : undefined
   promoteAgentTeamsShimPath(env, requestedPath)
+  // Why: raw requested PATH promotion runs after the inherited-env scrub.
+  stripLegacyTerminalShimEnv(env, process.platform)
 
   // Why: asar packaging can strip +x from node-pty's spawn-helper; the daemon is a separate forked process from the main-process fix.
   ensureNodePtySpawnHelperExecutable()
@@ -1062,6 +1066,8 @@ export function createPtySubprocess(opts: PtySubprocessOptions): SubprocessHandl
   return {
     pid: proc.pid,
     shellPath,
+    shellCwd: spawnCwd,
+    shellPathEnv: env.PATH,
     ...(slavePath ? { slavePath } : {}),
     ...(startupCommandDeliveredInShellArgs ? { startupCommandDeliveredInShellArgs: true } : {}),
     getForegroundProcess: () => {
diff --git a/src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts b/src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts
new file mode 100644
index 00000000000..74907d84406
--- /dev/null
+++ b/src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts
@@ -0,0 +1,419 @@
+import { spawnSync } from 'node:child_process'
+import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { describe, expect, it, vi } from 'vitest'
+import { createPtySubprocess } from './pty-subprocess'
+import { Session } from './session'
+
+const describePosix = process.platform === 'win32' ? describe.skip : describe
+const hasZsh = process.platform !== 'win32' && spawnSync('/bin/zsh', ['--version']).status === 0
+const hasBash = process.platform !== 'win32' && spawnSync('/bin/bash', ['--version']).status === 0
+const COMMAND_OUTPUT = 'ORCA_STARTUP_COMMAND_RAN'
+const READ_STARTED_FILE = '.orca-read-started'
+
+type ShellFixture = {
+  name: string
+  shellPath: string
+  startupFile: string
+  replacement: string
+  command: string
+  instrumentationOutput: string
+  secretRead: string
+  childRead: string
+}
+
+const FIXTURES: ShellFixture[] = [
+  {
+    name: 'zsh profile',
+    shellPath: '/bin/zsh',
+    startupFile: '.zprofile',
+    replacement: 'exec -a kiro-cli-term /bin/zsh -o noglobalrcs -l -i',
+    command: `printf 'ORCA_STARTUP_%s:PF=%s\\n' COMMAND_RAN "\${(j:,:)precmd_functions}"\r`,
+    instrumentationOutput: `${COMMAND_OUTPUT}:PF=`,
+    secretRead: `: > "$HOME/${READ_STARTED_FILE}"; read -sk 1\n`,
+    childRead: `/bin/zsh -fc ': > "$HOME/${READ_STARTED_FILE}"; read -sk 1'\n`
+  },
+  {
+    name: 'zsh environment',
+    shellPath: '/bin/zsh',
+    startupFile: '.zshenv',
+    replacement: 'exec /bin/zsh -o noglobalrcs -l -i',
+    command: `printf 'ORCA_STARTUP_%s:PF=%s\\n' COMMAND_RAN "\${(j:,:)precmd_functions}"\r`,
+    instrumentationOutput: `${COMMAND_OUTPUT}:PF=`,
+    secretRead: `: > "$HOME/${READ_STARTED_FILE}"; read -sk 1\n`,
+    childRead: `/bin/zsh -fc ': > "$HOME/${READ_STARTED_FILE}"; read -sk 1'\n`
+  },
+  {
+    name: 'bash profile',
+    shellPath: '/bin/bash',
+    startupFile: '.bash_profile',
+    replacement: 'exec -a figterm-test /bin/bash --noprofile --norc -l -i',
+    command: `printf 'ORCA_STARTUP_%s:PC=%s\\n' COMMAND_RAN "$PROMPT_COMMAND"\r`,
+    instrumentationOutput: `${COMMAND_OUTPUT}:PC=`,
+    secretRead: `: > "$HOME/${READ_STARTED_FILE}"; read -s -n 1\n`,
+    childRead: `/bin/bash --noprofile --norc -c ': > "$HOME/${READ_STARTED_FILE}"; read -s -n 1'\n`
+  }
+]
+
+function count(text: string, needle: string): number {
+  return text.split(needle).length - 1
+}
+
+function waitForOutput(
+  subscribe: (settle: () => void) => void,
+  isDone: () => boolean,
+  timeoutMs = 5_000
+): Promise<void> {
+  if (isDone()) {
+    return Promise.resolve()
+  }
+  return new Promise<void>((resolve, reject) => {
+    const deadline = setTimeout(
+      () => reject(new Error('Timed out waiting for PTY output')),
+      timeoutMs
+    )
+    const settle = (): void => {
+      if (!isDone()) {
+        return
+      }
+      clearTimeout(deadline)
+      resolve()
+    }
+    subscribe(settle)
+    settle()
+  })
+}
+
+function waitForCondition(isDone: () => boolean, timeoutMs = 5_000): Promise<void> {
+  return new Promise<void>((resolve, reject) => {
+    const interval = setInterval(() => {
+      if (!isDone()) {
+        return
+      }
+      clearInterval(interval)
+      clearTimeout(deadline)
+      resolve()
+    }, 10)
+    const deadline = setTimeout(() => {
+      clearInterval(interval)
+      reject(new Error('Timed out waiting for fixture state'))
+    }, timeoutMs)
+  })
+}
+
+function runCleanupActions(...actions: (() => void)[]): void {
+  for (const action of actions) {
+    try {
+      action()
+    } catch {}
+  }
+}
+
+type RunningFixture = {
+  session: Session
+  subprocess: ReturnType<typeof createPtySubprocess>
+  output: () => string
+  readStarted: () => boolean
+  subscribe: (settle: () => void) => void
+  cleanup: () => Promise<void>
+}
+
+function startFixture(
+  fixture: ShellFixture,
+  startupContent: string,
+  extraFiles: Record<string, string> = {}
+): RunningFixture {
+  const tempHome = mkdtempSync(join(tmpdir(), 'orca-shell-ready-exec-'))
+  const previousHome = process.env.HOME
+  const previousZdotdir = process.env.ZDOTDIR
+  const previousOrigZdotdir = process.env.ORCA_ORIG_ZDOTDIR
+  let subprocess: ReturnType<typeof createPtySubprocess> | undefined
+  let session: Session | undefined
+  let consoleWarnSpy: { mockRestore: () => void } | undefined
+  try {
+    writeFileSync(join(tempHome, fixture.startupFile), startupContent)
+    for (const [fileName, content] of Object.entries(extraFiles)) {
+      writeFileSync(join(tempHome, fileName), content)
+    }
+    process.env.HOME = tempHome
+    delete process.env.ZDOTDIR
+    delete process.env.ORCA_ORIG_ZDOTDIR
+    consoleWarnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+
+    subprocess = createPtySubprocess({
+      sessionId: `repro-13767-${fixture.startupFile}`,
+      cols: 80,
+      rows: 24,
+      cwd: tempHome,
+      command: fixture.command,
+      shellOverride: fixture.shellPath,
+      env: {
+        HOME: tempHome,
+        PATH: process.env.PATH ?? '/usr/bin:/bin',
+        SHELL: fixture.shellPath,
+        TERM: 'xterm-256color'
+      },
+      envToDelete: ['ORCA_EXEC_REPRO_DONE', 'ORCA_ORIG_ZDOTDIR', 'ZDOTDIR']
+    })
+    session = new Session({
+      sessionId: `repro-13767-${fixture.startupFile}`,
+      cols: 80,
+      rows: 24,
+      subprocess,
+      shellReadySupported: true
+    })
+    let output = ''
+    let onOutput = (): void => {}
+    session.attachClient({
+      onData: (data) => {
+        output += data
+        onOutput()
+      },
+      onExit: () => {}
+    })
+    session.write(fixture.command)
+    const runningSubprocess = subprocess
+    const runningSession = session
+    const activeConsoleWarnSpy = consoleWarnSpy
+
+    return {
+      session: runningSession,
+      subprocess: runningSubprocess,
+      output: () => output,
+      readStarted: () => existsSync(join(tempHome, READ_STARTED_FILE)),
+      subscribe: (settle) => {
+        onOutput = settle
+      },
+      cleanup: async () => {
+        if (runningSession.isAlive) {
+          try {
+            await runningSession.forceKillAndWaitForExit(3_000)
+          } catch {
+            runCleanupActions(() => runningSubprocess.forceKill())
+          }
+        }
+        runCleanupActions(
+          () => runningSession.dispose(),
+          () => activeConsoleWarnSpy.mockRestore(),
+          () => restoreEnvironment(previousHome, previousZdotdir, previousOrigZdotdir),
+          () => rmSync(tempHome, { recursive: true, force: true })
+        )
+      }
+    }
+  } catch (error) {
+    runCleanupActions(
+      () => subprocess?.forceKill(),
+      () => session?.dispose(),
+      () => !session && subprocess?.dispose(),
+      () => consoleWarnSpy?.mockRestore(),
+      () => restoreEnvironment(previousHome, previousZdotdir, previousOrigZdotdir),
+      () => rmSync(tempHome, { recursive: true, force: true })
+    )
+    throw error
+  }
+}
+
+function restoreEnvironment(
+  home: string | undefined,
+  zdotdir: string | undefined,
+  originalZdotdir: string | undefined
+): void {
+  setEnvironmentValue('HOME', home)
+  setEnvironmentValue('ZDOTDIR', zdotdir)
+  setEnvironmentValue('ORCA_ORIG_ZDOTDIR', originalZdotdir)
+}
+
+function setEnvironmentValue(key: string, value: string | undefined): void {
+  if (value === undefined) {
+    delete process.env[key]
+  } else {
+    process.env[key] = value
+  }
+}
+
+async function runExecOracle(fixture: ShellFixture): Promise<void> {
+  const running = startFixture(
+    fixture,
+    `if [[ -z "\${ORCA_EXEC_REPRO_DONE:-}" ]]; then
+  export ORCA_EXEC_REPRO_DONE=1
+  ${fixture.replacement}
+fi
+`
+  )
+  try {
+    await waitForOutput(running.subscribe, () => running.output().includes(COMMAND_OUTPUT))
+    expect(running.session.shellState).toBe('ready')
+    expect(count(running.output(), COMMAND_OUTPUT)).toBe(1)
+    expect(running.output()).toContain(fixture.instrumentationOutput)
+    expect(running.output()).not.toContain('orca-shell-start')
+  } finally {
+    await running.cleanup()
+  }
+}
+
+async function runReadOracle(fixture: ShellFixture, child: boolean): Promise<void> {
+  const running = startFixture(fixture, child ? fixture.childRead : fixture.secretRead)
+  try {
+    await waitForCondition(running.readStarted)
+    await new Promise((resolve) => setTimeout(resolve, 300))
+    expect(running.session.shellState).toBe('pending')
+    expect(running.output()).not.toContain(COMMAND_OUTPUT)
+
+    running.subprocess.write('x\r')
+    await waitForOutput(running.subscribe, () => running.output().includes(COMMAND_OUTPUT))
+    expect(count(running.output(), COMMAND_OUTPUT)).toBe(1)
+    expect(running.output()).not.toContain('orca-shell-start')
+  } finally {
+    await running.cleanup()
+  }
+}
+
+describePosix('#13767 shell-ready marker loss across exec', () => {
+  it('continues setup cleanup after force-kill failure', () => {
+    const dispose = vi.fn()
+    const restore = vi.fn()
+    runCleanupActions(
+      () => {
+        throw new Error('force kill failed')
+      },
+      dispose,
+      restore
+    )
+    expect(dispose).toHaveBeenCalledOnce()
+    expect(restore).toHaveBeenCalledOnce()
+  })
+
+  for (const fixture of FIXTURES) {
+    const runnable = fixture.shellPath.endsWith('zsh') ? hasZsh : hasBash
+    const testCase = runnable ? it : it.skip
+    testCase(
+      `releases at the real ${fixture.name} prompt after exec`,
+      () => runExecOracle(fixture),
+      10_000
+    )
+    testCase(
+      `keeps queued input out of a real ${fixture.name} silent read`,
+      () => runReadOracle(fixture, false),
+      10_000
+    )
+    testCase(
+      `keeps queued input out of a child read during ${fixture.name} startup`,
+      () => runReadOracle(fixture, true),
+      10_000
+    )
+  }
+
+  const zshFixture = FIXTURES[0] as ShellFixture
+  const zshTest = hasZsh ? it : it.skip
+  zshTest(
+    'keeps queued input out of a zle-line-init read after exec',
+    async () => {
+      const running = startFixture(
+        zshFixture,
+        `if [[ -z "\${ORCA_EXEC_REPRO_DONE:-}" ]]; then
+  export ORCA_EXEC_REPRO_DONE=1
+  exec env ZDOTDIR="$HOME" /bin/zsh -o noglobalrcs -l -i
+fi
+`,
+        {
+          '.zshrc': `zle-line-init() {
+  print -n 'HOOK_SECRET> '
+  read -sk 1
+  print -r -- HOOK_DONE
+}
+zle -N zle-line-init
+`
+        }
+      )
+      try {
+        try {
+          await waitForOutput(running.subscribe, () => running.output().includes('HOOK_SECRET> '))
+        } catch (error) {
+          throw new Error(`ZLE hook startup output: ${JSON.stringify(running.output())}`, {
+            cause: error
+          })
+        }
+        await new Promise((resolve) => setTimeout(resolve, 300))
+        expect(running.session.shellState).toBe('pending')
+        expect(running.output()).not.toContain(COMMAND_OUTPUT)
+
+        running.subprocess.write('x')
+        try {
+          await waitForOutput(running.subscribe, () => running.output().includes(COMMAND_OUTPUT))
+        } catch (error) {
+          throw new Error(`ZLE hook output: ${JSON.stringify(running.output())}`, { cause: error })
+        }
+        expect(running.output()).toContain('HOOK_DONE')
+        expect(count(running.output(), COMMAND_OUTPUT)).toBe(1)
+      } finally {
+        await running.cleanup()
+      }
+    },
+    10_000
+  )
+
+  const sqliteTest = hasZsh && existsSync('/usr/bin/sqlite3') ? it : it.skip
+  sqliteTest(
+    'does not treat an exec-replaced readline program as the shell prompt',
+    async () => {
+      const running = startFixture(zshFixture, 'exec /usr/bin/sqlite3\n')
+      try {
+        await waitForOutput(running.subscribe, () => running.output().includes('sqlite> '))
+        await new Promise((resolve) => setTimeout(resolve, 300))
+        expect(running.session.shellState).toBe('pending')
+        expect(running.output()).not.toContain(COMMAND_OUTPUT)
+      } finally {
+        await running.cleanup()
+      }
+    },
+    10_000
+  )
+
+  sqliteTest(
+    'does not trust a non-shell executable renamed to the shell basename',
+    async () => {
+      const running = startFixture(
+        zshFixture,
+        'ln -s /usr/bin/sqlite3 "$HOME/zsh" && exec "$HOME/zsh"\n'
+      )
+      try {
+        await waitForOutput(running.subscribe, () => running.output().includes('sqlite> '))
+        await new Promise((resolve) => setTimeout(resolve, 300))
+        expect(running.session.shellState).toBe('pending')
+        expect(running.output()).not.toContain(COMMAND_OUTPUT)
+      } finally {
+        await running.cleanup()
+      }
+    },
+    10_000
+  )
+
+  zshTest(
+    'retains the timeout backstop when zsh disables bracketed paste',
+    async () => {
+      const running = startFixture(
+        zshFixture,
+        `if [[ -z "\${ORCA_EXEC_REPRO_DONE:-}" ]]; then
+  export ORCA_EXEC_REPRO_DONE=1
+  exec env ZDOTDIR="$HOME" /bin/zsh -o noglobalrcs -l -i
+fi
+`,
+        {
+          '.zshrc': "zmodload zsh/zle\nunset zle_bracketed_paste\nPS1='NO_BRACKET_PROMPT> '\n"
+        }
+      )
+      try {
+        await waitForOutput(running.subscribe, () =>
+          running.output().includes('NO_BRACKET_PROMPT> ')
+        )
+        await new Promise((resolve) => setTimeout(resolve, 300))
+        expect(running.session.shellState).toBe('pending')
+        expect(running.output()).not.toContain(COMMAND_OUTPUT)
+      } finally {
+        await running.cleanup()
+      }
+    },
+    10_000
+  )
+})
diff --git a/src/main/daemon/session.test.ts b/src/main/daemon/session.test.ts
index bc90bf5d97f..5769858f2cf 100644
--- a/src/main/daemon/session.test.ts
+++ b/src/main/daemon/session.test.ts
@@ -1,5 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { SESSION_FORCE_KILL_RETRY_MS, Session } from './session'
+import { HeadlessEmulator } from './headless-emulator'
 import type { SessionState, ShellReadyState } from './types'
 import type { TuiAgent } from '../../shared/types'
 
@@ -430,6 +431,29 @@ describe('Session', () => {
       expect(session.getSnapshot()?.snapshotAnsi).not.toContain('orca-shell-ready')
     })
 
+    it.each([
+      ['after the ready marker', ['\x1b]777;orca-shell-ready\x07', '\x1b[?2004hfish> ']],
+      ['after the ESC introducer', ['\x1b]777;orca-shell-ready\x07\x1b', '[?2004hfish> ']]
+    ])('preserves Fish bracketed-paste output split %s', (_boundary, chunks) => {
+      createSession({ shellReadySupported: true })
+      const received: string[] = []
+      session.attachClient({
+        onData: (data) => received.push(data),
+        onExit: () => {}
+      })
+
+      for (const chunk of chunks) {
+        subprocess.simulateData(chunk)
+      }
+
+      const output = received.join('')
+      expect(output).toBe('\x1b[?2004hfish> ')
+      const rendered = new HeadlessEmulator({ cols: 80, rows: 24 })
+      expect(rendered.writeSync(output)).toBe(true)
+      expect(rendered.getVisibleLines().join('\n')).not.toContain('[?2004h')
+      rendered.dispose()
+    })
+
     it('publishes an absolute output sequence with live snapshots', () => {
       createSession()
       subprocess.simulateData('first')
diff --git a/src/main/daemon/session.ts b/src/main/daemon/session.ts
index f24a6a7fcc9..3771b3194b5 100644
--- a/src/main/daemon/session.ts
+++ b/src/main/daemon/session.ts
@@ -8,11 +8,15 @@ import {
 import { isValidPtySize, normalizePtySize } from './daemon-pty-size'
 import { PostReadyFlushGate } from './post-ready-flush-gate'
 import {
-  createShellReadyScanState,
-  drainShellReadyHeldBytes,
-  scanForShellReady,
-  type ShellReadyScanState
-} from '../shell-ready-marker-scanner'
+  createShellStartupOutputScanState,
+  drainShellStartupOutputScanState,
+  scanShellStartupOutput,
+  type ShellStartupOutputScanState
+} from '../shell-startup-output-scanner'
+import {
+  createShellPromptReadinessProbe,
+  type ShellPromptReadinessProbe
+} from '../shell-prompt-readiness-probe'
 import { isPowerShellProcess } from '../../shared/shell-process-detection'
 import { killWithDescendantSweep } from '../pty-descendant-termination'
 import type { TuiAgent } from '../../shared/types'
@@ -60,6 +64,8 @@ export type SubprocessHandle = {
   /** Shell the subprocess actually spawned, after fallbacks. The host reconciles the caller's shell-ready
    *  assumption against it so a fallback shell without a ready marker never gates startup commands. */
   shellPath?: string
+  shellCwd?: string
+  shellPathEnv?: string
   /** Slave device path, so startup replies can read the line discipline's ECHO bit before
    *  writing. Absent on handles with no POSIX slave to read (ConPTY, tests). */
   slavePath?: string
@@ -124,7 +130,9 @@ export class Session {
   private preReadyStdinQueue: string[] = []
   private releaseStartupDeviceAttributesResponder: (() => void) | null = null
   private startupDeviceAttributesQueryFilter: StartupDeviceAttributesQueryFilter | null = null
-  private shellReadyScanState: ShellReadyScanState | null = null
+  private shellStartupOutputScanState: ShellStartupOutputScanState | null = null
+  private shellStartupPid: number | null = null
+  private shellPromptReadinessProbe: ShellPromptReadinessProbe | null = null
   private shellReadyTimer: ReturnType<typeof setTimeout> | null = null
   private killTimer: ReturnType<typeof setTimeout> | null = null
   private postReadyFlushGate: PostReadyFlushGate
@@ -169,7 +177,7 @@ export class Session {
 
     if (opts.shellReadySupported) {
       this._shellState = 'pending'
-      this.shellReadyScanState = createShellReadyScanState()
+      this.shellStartupOutputScanState = createShellStartupOutputScanState()
       // Why: `write` queues everything until the ready marker, including the renderer's DA1
       // reply — and a shell that withholds its first prompt until DA1 is answered (fish) then
       // never emits the marker that would release it. Answer from the daemon, past the queue.
@@ -195,6 +203,16 @@ export class Session {
       onEmission: (emission) => this.emitSubprocessOutput(emission),
       ...(echoProbe ? { echoProbe } : {})
     })
+    if (this._shellState === 'pending') {
+      this.shellPromptReadinessProbe = createShellPromptReadinessProbe({
+        slavePath: this.subprocess.slavePath,
+        shellPath: this.subprocess.shellPath,
+        shellCwd: this.subprocess.shellCwd,
+        shellPathEnv: this.subprocess.shellPathEnv,
+        getShellPid: () => this.shellStartupPid,
+        onPromptReady: () => this.onShellPromptReady()
+      })
+    }
     this.subprocess.onData((data) => this.handleSubprocessData(data))
     this.subprocess.onExit((code) => this.handleSubprocessExit(code))
   }
@@ -219,6 +237,11 @@ export class Session {
     return this._state !== 'exited'
   }
 
+  /** A viewing client is attached; a dropped transport must clear this or pause/resume semantics leak. */
+  get hasAttachedClients(): boolean {
+    return this.attachedClients.length > 0
+  }
+
   get isTerminating(): boolean {
     return this._isTerminating
   }
@@ -603,7 +626,9 @@ export class Session {
       clearTimeout(this.shellReadyTimer)
       this.shellReadyTimer = null
     }
-    this.shellReadyScanState = null
+    this.shellPromptReadinessProbe?.dispose()
+    this.shellPromptReadinessProbe = null
+    this.shellStartupOutputScanState = null
     this.preReadyStdinQueue = []
     this.postReadyFlushGate.clear()
     this.disposeSubprocessHandle()
@@ -649,10 +674,13 @@ export class Session {
     }
 
     let releaseStartupDeviceAttributes = false
-    if (this._shellState === 'pending' && this.shellReadyScanState) {
-      const scanned = scanForShellReady(this.shellReadyScanState, data)
+    if (this._shellState === 'pending' && this.shellStartupOutputScanState) {
+      const scanned = scanShellStartupOutput(this.shellStartupOutputScanState, data)
       data = scanned.output
-      if (scanned.matched) {
+      if (scanned.shellPid) {
+        this.shellStartupPid = scanned.shellPid
+      }
+      if (scanned.ready) {
         this.transitionToReady(scanned.postMarkerBytesObserved)
         releaseStartupDeviceAttributes = true
       }
@@ -661,6 +689,9 @@ export class Session {
     }
 
     this.startupIngress.accept(data)
+    if (this._shellState === 'pending' && data.length > 0) {
+      this.shellPromptReadinessProbe?.notifyOutput(data)
+    }
     if (releaseStartupDeviceAttributes) {
       this.releaseStartupDeviceAttributes()
     }
@@ -696,6 +727,8 @@ export class Session {
     }
 
     this.releaseStartupDeviceAttributes()
+    this.shellPromptReadinessProbe?.dispose()
+    this.shellPromptReadinessProbe = null
     this.releaseHeldShellReadyBytes()
     this.startupIngress.drainAndClose()
     this._exitCode = code
@@ -727,11 +760,11 @@ export class Session {
   }
 
   private releaseHeldShellReadyBytes(): string {
-    if (!this.shellReadyScanState) {
+    if (!this.shellStartupOutputScanState) {
       return ''
     }
-    const heldBytes = drainShellReadyHeldBytes(this.shellReadyScanState)
-    this.shellReadyScanState = null
+    const heldBytes = drainShellStartupOutputScanState(this.shellStartupOutputScanState)
+    this.shellStartupOutputScanState = null
     // Why: scanning strips marker bytes before fan-out; if readiness never completes, release any held prefix before timeout/exit discards it.
     this.startupIngress.accept(heldBytes)
     return heldBytes
@@ -758,7 +791,9 @@ export class Session {
 
   private transitionToReady(postMarkerBytesObserved = false): void {
     this._shellState = 'ready'
-    this.shellReadyScanState = null
+    this.shellStartupOutputScanState = null
+    this.shellPromptReadinessProbe?.dispose()
+    this.shellPromptReadinessProbe = null
     if (this.shellReadyTimer) {
       clearTimeout(this.shellReadyTimer)
       this.shellReadyTimer = null
@@ -775,11 +810,25 @@ export class Session {
       return
     }
     this._shellState = 'timed_out'
+    this.shellPromptReadinessProbe?.dispose()
+    this.shellPromptReadinessProbe = null
     this.releaseStartupDeviceAttributes()
     this.releaseHeldShellReadyBytes()
     this.flushPreReadyQueue()
   }
 
+  private onShellPromptReady(): void {
+    if (this._shellState !== 'pending') {
+      return
+    }
+    console.warn(
+      `[Session] ${this.sessionId}: shell-ready wrapper was replaced before its marker; releasing at the identified shell prompt. OSC 133 integration may be unavailable.`
+    )
+    this.releaseHeldShellReadyBytes()
+    this.transitionToReady(true)
+    this.releaseStartupDeviceAttributes()
+  }
+
   private flushPreReadyQueue(): void {
     const queued = this.preReadyStdinQueue
     this.preReadyStdinQueue = []
diff --git a/src/main/daemon/shell-ready.test.ts b/src/main/daemon/shell-ready.test.ts
index 9610f2600d1..2d931e7206e 100644
--- a/src/main/daemon/shell-ready.test.ts
+++ b/src/main/daemon/shell-ready.test.ts
@@ -5,6 +5,13 @@ import { join } from 'node:path'
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
 import type * as ShellReadyModule from './shell-ready'
 import { getZshShellReadyMarkerRegistrationBlock } from '../shell-templates'
+import { fishRequirementViolation, resolveFishBinary } from '../../shared/fish-binary-requirement'
+import {
+  createShellStartupOutputScanState,
+  drainShellStartupOutputScanState,
+  scanShellStartupOutput
+} from '../shell-startup-output-scanner'
+import { HeadlessEmulator } from './headless-emulator'
 
 async function importFreshShellReady(): Promise<typeof ShellReadyModule> {
   vi.resetModules()
@@ -16,8 +23,8 @@ const hasBash = process.platform !== 'win32' && spawnSync('bash', ['--version'])
 const itWithBash = hasBash ? it : it.skip
 const hasZsh = process.platform !== 'win32' && spawnSync('zsh', ['--version']).status === 0
 const itWithZsh = hasZsh ? it : it.skip
-const hasFish = process.platform !== 'win32' && spawnSync('fish', ['--version']).status === 0
-const itWithFish = hasFish ? it : it.skip
+const FISH = resolveFishBinary()
+const itWithFish = FISH.available ? it : it.skip
 
 const SHELL_READY_MARKER_OUTPUT = '\x1b]777;orca-shell-ready\x07'
 
@@ -166,6 +173,11 @@ function expectFinalZdotdirRestoreContext(content: string) {
 }
 
 describePosix('daemon shell-ready launch config', () => {
+  // Always runs, so the CI lane cannot report green with every live fish test skipped.
+  it('has the fish the live tests need when CI requires one', () => {
+    expect(fishRequirementViolation(FISH)).toBeNull()
+  })
+
   let previousUserDataPath: string | undefined
   let previousOrcaOrigZdotdir: string | undefined
   let userDataPath: string
@@ -252,10 +264,10 @@ describePosix('daemon shell-ready launch config', () => {
     expect(init).toContain('functions -e __orca_shell_ready_marker')
   })
 
-  it('keeps attribution-only fish spawns unwrapped', async () => {
-    const { getAttributionShellLaunchConfig } = await importFreshShellReady()
+  it('keeps markerless fish spawns unwrapped', async () => {
+    const { getMarkerlessShellLaunchConfig } = await importFreshShellReady()
 
-    const config = getAttributionShellLaunchConfig('/opt/homebrew/bin/fish')
+    const config = getMarkerlessShellLaunchConfig('/opt/homebrew/bin/fish')
 
     expect(config).toEqual({ args: null, env: {}, supportsReadyMarker: false })
   })
@@ -290,6 +302,8 @@ describePosix('daemon shell-ready launch config', () => {
           }
         })
         let output = ''
+        let scannedOutput = ''
+        const startupScanState = createShellStartupOutputScanState()
         let commandWritten = false
         let erasureProbeWritten = false
         let queryCarry = ''
@@ -315,6 +329,7 @@ describePosix('daemon shell-ready launch config', () => {
         }, 50)
         proc.onData((chunk) => {
           output += chunk
+          scannedOutput += scanShellStartupOutput(startupScanState, chunk).output
           // Why: fish stalls its first prompt 10s waiting on these and re-queries
           // each prompt, so answer every occurrence — an unanswered query makes
           // fish swallow the post-marker command as its reply.
@@ -344,9 +359,15 @@ describePosix('daemon shell-ready launch config', () => {
         clearTimeout(deadline)
         clearInterval(sentinelPoll)
         proc.kill()
+        scannedOutput += drainShellStartupOutputScanState(startupScanState)
 
         expect(output).toContain(SHELL_READY_MARKER_OUTPUT)
         expect(output.split(SHELL_READY_MARKER_OUTPUT)).toHaveLength(2)
+        expect(scannedOutput).toBe(output.replace(SHELL_READY_MARKER_OUTPUT, ''))
+        const rendered = new HeadlessEmulator({ cols: 80, rows: 24 })
+        expect(rendered.writeSync(scannedOutput)).toBe(true)
+        expect(rendered.getVisibleLines().join('\n')).not.toContain('[?2004h')
+        rendered.dispose()
         expect(existsSync(sentinel)).toBe(true)
         // Why: asserts the erase directly rather than inferring it from the marker
         // count, which only holds once enough prompts have been drawn to expose it.
@@ -456,6 +477,7 @@ describePosix('daemon shell-ready launch config', () => {
     const zshrc = readFileSync(join(userDataPath, 'shell-ready', 'zsh', '.zshrc'), 'utf8')
     const zlogin = readFileSync(join(userDataPath, 'shell-ready', 'zsh', '.zlogin'), 'utf8')
     expect(zshenv).toContain('_orca_user_zdotdir="${_orca_spawn_orig_zdotdir:-$HOME}"')
+    expect(zshenv).toContain('printf "\\033]777;orca-shell-start:%s\\007" "$$"')
     expect(zshenv).toContain('*/shell-ready/zsh) _orca_user_zdotdir="$HOME" ;;')
     expect(zshenv).toContain('""|*/shell-ready/zsh) export ORCA_ORIG_ZDOTDIR="$HOME" ;;')
     expectZdotdirSourceContext(zprofile, '.zprofile')
@@ -604,8 +626,6 @@ describePosix('daemon shell-ready launch config', () => {
       '[[ -n "${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="${ORCA_CODEX_HOME}"'
     const agentTeamsPathRestoreLine = '[[ -n "${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0'
     const ompWrapperLine = 'command omp --extension "${ORCA_OMP_STATUS_EXTENSION}" "$@"'
-    const primeWrapperLine =
-      'command prime-agent --extension "${ORCA_PRIME_AGENT_STATUS_EXTENSION}" "$@"'
     expect(zshrc).toContain(restoreLine)
     expect(zlogin).toContain(restoreLine)
     expect(bashRc).toContain(restoreLine)
@@ -627,9 +647,12 @@ describePosix('daemon shell-ready launch config', () => {
     expect(zshrc).toContain(ompWrapperLine)
     expect(zlogin).toContain(ompWrapperLine)
     expect(bashRc).toContain(ompWrapperLine)
-    expect(zshrc).toContain(primeWrapperLine)
-    expect(zlogin).toContain(primeWrapperLine)
-    expect(bashRc).toContain(primeWrapperLine)
+    for (const wrapperFile of [zshrc, zlogin, bashRc]) {
+      expect(wrapperFile).not.toContain('prime-agent()')
+      expect(wrapperFile).not.toContain('__orca_prime_agent')
+      expect(wrapperFile).not.toContain('ORCA_PRIME_AGENT_STATUS_EXTENSION')
+      expect(wrapperFile).not.toContain('command prime-agent --extension')
+    }
   })
 
   // Why: regression guard for issue #2422 — bash wrapper must emit OSC 133 C/D so SSH sessions clear stale 'working' agent rows.
@@ -643,6 +666,7 @@ describePosix('daemon shell-ready launch config', () => {
     const bashRc = readFileSync(join(userDataPath, 'shell-ready', 'bash', 'rcfile'), 'utf8')
 
     expect(bashRc).toContain('printf "\\033]133;D;%s\\007"')
+    expect(bashRc).toContain('printf "\\033]777;orca-shell-start:%s\\007" "$$"')
     expect(bashRc).toContain('printf "\\033]133;C\\007"')
     // precmd is prepended (captures $? first), epilogue appended last, so a framework needing last position stays between them.
     expect(bashRc).toContain(
diff --git a/src/main/daemon/shell-ready.ts b/src/main/daemon/shell-ready.ts
index 27bcf6f48cb..189ff1c54b7 100644
--- a/src/main/daemon/shell-ready.ts
+++ b/src/main/daemon/shell-ready.ts
@@ -11,12 +11,12 @@ import {
   isPowerShellExecutableName
 } from '../powershell-osc133-bootstrap'
 import { getPosixOmpShellWrapper } from '../pty/omp-shell-wrapper'
-import { getPosixPrimeAgentShellWrapper } from '../pty/prime-agent-shell-wrapper'
 import {
   getFishShellReadyInitCommand,
   getZshEnvTemplate,
   getZshFinalZdotdirRestoreBlock,
   getZshShellReadyMarkerRegistrationBlock,
+  SHELL_STARTUP_IDENTITY_MARKER_BLOCK,
   getZshStartupFileSourceBlock
 } from '../shell-templates'
 
@@ -89,6 +89,7 @@ function shellReadyWrappersExist(): boolean {
 
 export function getDaemonBashShellReadyRcfileContent(): string {
   return `# Orca daemon bash shell-ready wrapper
+${SHELL_STARTUP_IDENTITY_MARKER_BLOCK}
 [[ -f /etc/profile ]] && source /etc/profile
 if [[ -f "$HOME/.bash_profile" ]]; then
   source "$HOME/.bash_profile"
@@ -102,14 +103,6 @@ fi
 # treat each embedded newline as Enter and mangle the prompt into PS2
 # continuation. Modern readline defaults this on; force it for the rest.
 [[ $- == *i* ]] && bind 'set enable-bracketed-paste on' 2>/dev/null
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-__orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -123,7 +116,6 @@ __orca_restore_agent_teams_path
 [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
 [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
 ${getPosixOmpShellWrapper()}
-${getPosixPrimeAgentShellWrapper()}
 # Why: Codex must keep using Orca's runtime CODEX_HOME after profile scripts.
 [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 # Why: emit OSC 133 C/D so terminal-command-lifecycle can drop stale agent
@@ -224,14 +216,6 @@ ${getZshStartupFileSourceBlock({
   interactiveOnly: true,
   skipWhenHomeIsCurrentZdotdir: true
 })}
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-[[ ! -o login ]] && __orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -245,7 +229,6 @@ if [[ ! -o login ]]; then
   [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
   [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
   ${getPosixOmpShellWrapper()}
-  ${getPosixPrimeAgentShellWrapper()}
   [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 fi
 __orca_osc133_precmd() {
@@ -289,14 +272,6 @@ ${getZshStartupFileSourceBlock({ fileName: '.zprofile' })}
   const zshRc = getDaemonZshShellReadyRcfileContent()
   const zshLogin = `# Orca daemon zsh shell-ready wrapper
 ${getZshStartupFileSourceBlock({ fileName: '.zlogin', interactiveOnly: true })}
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-__orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -309,7 +284,6 @@ __orca_restore_agent_teams_path
 [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
 [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
 ${getPosixOmpShellWrapper()}
-${getPosixPrimeAgentShellWrapper()}
 [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 ${getZshShellReadyMarkerRegistrationBlock(SHELL_READY_MARKER)}
 ${getZshFinalZdotdirRestoreBlock()}
@@ -388,7 +362,8 @@ function getWrappedShellLaunchConfig(
         ORCA_ORIG_ZDOTDIR: resolveOriginalZdotdir(),
         ORCA_ZSHENV_SOURCE_DIR: resolveOriginalZshenvSourceDir(),
         ZDOTDIR: join(root, 'zsh'),
-        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0'
+        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0',
+        ORCA_SHELL_STARTUP_IDENTITY: options.emitReadyMarker ? '1' : '0'
       },
       supportsReadyMarker: options.emitReadyMarker
     }
@@ -400,7 +375,8 @@ function getWrappedShellLaunchConfig(
     return {
       args: ['--rcfile', join(root, 'bash', 'rcfile')],
       env: {
-        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0'
+        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0',
+        ORCA_SHELL_STARTUP_IDENTITY: options.emitReadyMarker ? '1' : '0'
       },
       supportsReadyMarker: options.emitReadyMarker
     }
@@ -419,7 +395,7 @@ function getWrappedShellLaunchConfig(
     }
   }
 
-  // Why: mirrors local-pty-shell-ready.ts; attribution-only fish stays unwrapped.
+  // Why: mirrors local-pty-shell-ready.ts; markerless fish stays unwrapped.
   if (shellName === 'fish' && options.emitReadyMarker) {
     return {
       args: ['-l', '-C', getFishShellReadyInitCommand(SHELL_READY_MARKER)],
@@ -439,6 +415,6 @@ export function getShellReadyLaunchConfig(shellPath: string): ShellLaunchConfig
   return getWrappedShellLaunchConfig(shellPath, { emitReadyMarker: true })
 }
 
-export function getAttributionShellLaunchConfig(shellPath: string): ShellLaunchConfig {
+export function getMarkerlessShellLaunchConfig(shellPath: string): ShellLaunchConfig {
   return getWrappedShellLaunchConfig(shellPath, { emitReadyMarker: false })
 }
diff --git a/src/main/daemon/terminal-host-session-create.ts b/src/main/daemon/terminal-host-session-create.ts
index dcc88fada05..5ce264809e4 100644
--- a/src/main/daemon/terminal-host-session-create.ts
+++ b/src/main/daemon/terminal-host-session-create.ts
@@ -9,6 +9,7 @@ import type { CreateOrAttachResult } from './terminal-host-create-contract'
 import type { TerminalHostOptions } from './terminal-host-options'
 import type { TerminalHostTombstones } from './terminal-host-tombstones'
 import type { TerminalSessionTeardown } from './terminal-session-teardown'
+import { resolveDaemonSessionScrollbackRows } from './daemon-session-scrollback-window'
 import { SessionNotFoundError } from './types'
 import { resolveWslSessionContext } from './wsl-session-context'
 
@@ -107,6 +108,7 @@ export async function createOrAttachTerminalSession(
       wslDistro
     }),
     shellReadySupported,
+    scrollback: resolveDaemonSessionScrollbackRows(),
     historySeedChunks: opts.historySeedChunks,
     ...(opts.startupIngress ? { startupIngress: opts.startupIngress } : {}),
     wslDistro,
diff --git a/src/main/daemon/terminal-host-session-reaping-leak.test.ts b/src/main/daemon/terminal-host-session-reaping-leak.test.ts
index 4a0a0d36446..501711607ee 100644
--- a/src/main/daemon/terminal-host-session-reaping-leak.test.ts
+++ b/src/main/daemon/terminal-host-session-reaping-leak.test.ts
@@ -3,8 +3,8 @@
  *
  * SessionIds are minted fresh per pane and never reused, so a `TerminalHost`
  * that never removes exited sessions from its `sessions` map leaks one dead
- * `Session` — each pinning a `@xterm/headless` emulator with ~5000 rows of
- * scrollback — per terminal for the lifetime of the long-lived daemon process.
+ * `Session` and its `@xterm/headless` scrollback grid per terminal for the
+ * lifetime of the long-lived daemon process.
  *
  * The fix wires a Session `onExit` hook to `TerminalHost.reapSession`, which
  * disposes the emulator and drops the entry from the map. These tests assert the
diff --git a/src/main/daemon/terminal-host.ts b/src/main/daemon/terminal-host.ts
index ae348a3854e..7f206be48c5 100644
--- a/src/main/daemon/terminal-host.ts
+++ b/src/main/daemon/terminal-host.ts
@@ -57,7 +57,7 @@ export class TerminalHost {
         if (options.agentSessionGeneration && this.sessions.get(options.sessionId)?.isAlive) {
           throw new Error('agent_session_claim_unavailable')
         }
-        return await createOrAttachTerminalSession(options, {
+        const result = await createOrAttachTerminalSession(options, {
           sessions: this.sessions,
           sessionTeardown: this.sessionTeardown,
           killedTombstones: this.killedTombstones,
@@ -72,6 +72,7 @@ export class TerminalHost {
             this.reapSession(sessionId)
           }
         })
+        return result
       }
     })
   }
@@ -114,7 +115,7 @@ export class TerminalHost {
     return Promise.resolve(killed)
   }
 
-  // Why: dispose a dead session's emulator so exited terminals don't pin ~5000 rows of scrollback for the daemon's life.
+  // Why: dispose a dead session's emulator so exited terminals don't pin their scrollback window for the daemon's life.
   private reapSession(sessionId: string): void {
     const session = this.sessions.get(sessionId)
     if (!session || session.isAlive) {
@@ -130,8 +131,13 @@ export class TerminalHost {
   }
 
   detach(sessionId: string, token: symbol): void {
-    const session = this.sessions.get(sessionId)
-    session?.detachClient(token)
+    this.detachClients([{ sessionId, token }])
+  }
+
+  detachClients(attachments: readonly { sessionId: string; token: symbol }[]): void {
+    for (const { sessionId, token } of attachments) {
+      this.sessions.get(sessionId)?.detachClient(token)
+    }
   }
 
   async getCwd(sessionId: string): Promise<string | null> {
diff --git a/src/main/daemon/terminal-session-teardown.ts b/src/main/daemon/terminal-session-teardown.ts
index 1ba58393721..352927a5dfd 100644
--- a/src/main/daemon/terminal-session-teardown.ts
+++ b/src/main/daemon/terminal-session-teardown.ts
@@ -39,9 +39,8 @@ export class TerminalSessionTeardown {
     }
     if (immediate) {
       return this.forceKillPlainShellSession(sessionId, session)
-    } else {
-      session.kill()
     }
+    session.kill()
   }
 
   /**
diff --git a/src/main/daemon/terminal-view-attribute-responder.ts b/src/main/daemon/terminal-view-attribute-responder.ts
index ddd04bf11dc..decca3d3f99 100644
--- a/src/main/daemon/terminal-view-attribute-responder.ts
+++ b/src/main/daemon/terminal-view-attribute-responder.ts
@@ -57,7 +57,7 @@ function isValidColorIndex(value: number): boolean {
 function relativeLuminance([r, g, b]: TerminalViewRgb): number {
   const linear = (channel: number): number => {
     const c = channel / 255
-    return c <= 0.03928 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4)
+    return c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4
   }
   return linear(r) * 0.2126 + linear(g) * 0.7152 + linear(b) * 0.0722
 }
diff --git a/src/main/daemon/xterm-env-polyfill.ts b/src/main/daemon/xterm-env-polyfill.ts
index 9ab12627299..27605b8fa9a 100644
--- a/src/main/daemon/xterm-env-polyfill.ts
+++ b/src/main/daemon/xterm-env-polyfill.ts
@@ -1,6 +1,6 @@
 // @xterm/headless checks for `window` to detect browser vs node environment.
 // In ELECTRON_RUN_AS_NODE mode, `window` is undefined. This polyfill must be
 // imported before any @xterm/headless import.
-if (typeof globalThis.window === 'undefined') {
+if (globalThis.window === undefined) {
   ;(globalThis as Record<string, unknown>).window = globalThis
 }
diff --git a/src/main/emulator/android/adb-devices.ts b/src/main/emulator/android/adb-devices.ts
index 692bbb4d0fb..7264a825310 100644
--- a/src/main/emulator/android/adb-devices.ts
+++ b/src/main/emulator/android/adb-devices.ts
@@ -8,7 +8,7 @@ export type AndroidAdbDeviceState =
   | 'bootloader'
   | 'recovery'
   | 'no permissions'
-  | string
+  | (string & {})
 
 export type AndroidAdbDevice = {
   serial: string
diff --git a/src/main/emulator/emulator-bridge.test.ts b/src/main/emulator/emulator-bridge.test.ts
index 33b4f9d2421..a880c0f15a3 100644
--- a/src/main/emulator/emulator-bridge.test.ts
+++ b/src/main/emulator/emulator-bridge.test.ts
@@ -216,6 +216,95 @@ describe('EmulatorBridge helper ownership', () => {
     expect(bridge.getActiveForWorktree('wt-1')).toBeNull()
   })
 
+  it('does not clean up a failed attach while another start claim can register the device', async () => {
+    const waitForEndpointReady = vi.fn(async () => true)
+    execServeSimCommandMock.mockResolvedValue({
+      device: 'device-1',
+      streamUrl: 'http://127.0.0.1:3102/stream.mjpeg',
+      wsUrl: 'ws://127.0.0.1:3102'
+    })
+    const bridge = new EmulatorBridge({ waitForEndpointReady })
+
+    const failedLease = await bridge.acquireHelperForDevice('device-1')
+    const survivingLease = await bridge.acquireHelperForDevice('device-1')
+
+    await failedLease.release({ cleanupIfUnused: true })
+    bridge.registerActiveEmulator('wt-surviving', survivingLease.info, { managed: true })
+    await survivingLease.release()
+
+    expect(killServeSimHelperProcessesForDeviceMock).not.toHaveBeenCalled()
+    expect(shutdownSimulatorDeviceMock).not.toHaveBeenCalled()
+    expect(bridge.getActiveForWorktree('wt-surviving')).toMatchObject({
+      deviceUdid: 'device-1'
+    })
+  })
+
+  it('cleans up a failed attach when no start claim or registered workspace remains', async () => {
+    const waitForEndpointReady = vi.fn(async () => true)
+    execServeSimCommandMock.mockResolvedValue({
+      device: 'device-1',
+      streamUrl: 'http://127.0.0.1:3102/stream.mjpeg',
+      wsUrl: 'ws://127.0.0.1:3102'
+    })
+    const bridge = new EmulatorBridge({ waitForEndpointReady })
+
+    const lease = await bridge.acquireHelperForDevice('device-1')
+    await lease.release({ cleanupIfUnused: true })
+
+    expect(killServeSimHelperProcessesForDeviceMock).toHaveBeenCalledWith('device-1', {
+      helperPid: undefined,
+      includeOrphaned: true
+    })
+    expect(shutdownSimulatorDeviceMock).toHaveBeenCalledWith('device-1')
+  })
+
+  it('keeps a shared device alive when one registered workspace detaches', async () => {
+    const bridge = new EmulatorBridge()
+    bridge.registerActiveEmulator('wt-1', session('device-1'), { managed: true })
+    bridge.registerActiveEmulator('wt-2', session('device-1'), { managed: true })
+
+    await bridge.stopActiveManagedForWorktree('wt-1', { shutdownDevice: true })
+
+    expect(killServeSimHelperProcessesForDeviceMock).not.toHaveBeenCalled()
+    expect(shutdownSimulatorDeviceMock).not.toHaveBeenCalled()
+    expect(bridge.getActiveForWorktree('wt-1')).toBeNull()
+    expect(bridge.getActiveForWorktree('wt-2')).toMatchObject({ deviceUdid: 'device-1' })
+  })
+
+  it('keeps a device alive when its last registered workspace closes during another attach', async () => {
+    let finishStart:
+      | ((info: Awaited<ReturnType<typeof execServeSimCommandMock>>) => void)
+      | undefined
+    execServeSimCommandMock.mockImplementation(
+      () =>
+        new Promise((resolve) => {
+          finishStart = resolve
+        })
+    )
+    const bridge = new EmulatorBridge({ waitForEndpointReady: vi.fn(async () => true) })
+    bridge.registerActiveEmulator('wt-closing', session('device-1'), { managed: true })
+
+    const leasePromise = bridge.acquireHelperForDevice('device-1')
+    await vi.waitFor(() => expect(execServeSimCommandMock).toHaveBeenCalledOnce())
+    const shutdown = bridge.shutdownActiveManagedForWorktree('wt-closing')
+    await Promise.resolve()
+
+    expect(killServeSimHelperProcessesForDeviceMock).not.toHaveBeenCalled()
+    finishStart?.({
+      device: 'device-1',
+      streamUrl: 'http://127.0.0.1:3102/stream.mjpeg',
+      wsUrl: 'ws://127.0.0.1:3102'
+    })
+    const lease = await leasePromise
+    bridge.registerActiveEmulator('wt-attaching', lease.info, { managed: true })
+    await lease.release()
+    await shutdown
+
+    expect(killServeSimHelperProcessesForDeviceMock).not.toHaveBeenCalled()
+    expect(shutdownSimulatorDeviceMock).not.toHaveBeenCalled()
+    expect(bridge.getActiveForWorktree('wt-attaching')).toMatchObject({ deviceUdid: 'device-1' })
+  })
+
   it('reuses the active helper for the same requested device', async () => {
     const waitForEndpointReady = vi.fn(async () => true)
     const bridge = new EmulatorBridge({ waitForEndpointReady })
@@ -267,7 +356,7 @@ describe('EmulatorBridge helper ownership', () => {
     })
     const bridge = new EmulatorBridge({ waitForEndpointReady })
 
-    const info = await bridge.startHelperForDevice('device-1')
+    const { info } = await bridge.acquireHelperForDevice('device-1')
 
     expect(info.deviceUdid).toBe('device-1')
     expect(waitForEndpointReady).toHaveBeenCalledTimes(2)
@@ -309,7 +398,7 @@ describe('EmulatorBridge helper ownership', () => {
     })
     const bridge = new EmulatorBridge({ waitForEndpointReady })
 
-    await expect(bridge.startHelperForDevice('device-1')).rejects.toMatchObject({
+    await expect(bridge.acquireHelperForDevice('device-1')).rejects.toMatchObject({
       code: 'emulator_helper_failed'
     })
 
@@ -334,7 +423,7 @@ describe('EmulatorBridge helper ownership', () => {
     })
     const bridge = new EmulatorBridge({ waitForEndpointReady })
 
-    await expect(bridge.startHelperForDevice('device-1')).rejects.toMatchObject({
+    await expect(bridge.acquireHelperForDevice('device-1')).rejects.toMatchObject({
       code: 'emulator_helper_failed'
     })
 
@@ -368,7 +457,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     bridge.registerActiveEmulator('wt-1', session('device-1'), { managed: true })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -401,7 +491,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     bridge.registerActiveEmulator('wt-1', session('device-1'), { managed: true })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -435,7 +526,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     bridge.registerActiveEmulator('wt-other', session('device-1'), { managed: true })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -465,7 +557,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     bridge.registerActiveEmulator('wt-1', session('device-active'), { managed: true })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -499,7 +592,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     )
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -530,7 +624,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     )
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -551,7 +646,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     bridge.registerActiveEmulator('wt-1', session('device-1'), { managed: true })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -575,7 +671,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     const bridge = new EmulatorBridge()
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: false,
@@ -599,7 +696,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     const bridge = new EmulatorBridge({ waitForEndpointReady })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
@@ -641,7 +739,8 @@ describe('RuntimeEmulatorCommands attach lifecycle', () => {
     const bridge = new EmulatorBridge({ waitForEndpointReady })
     const commands = new RuntimeEmulatorCommands({
       getEmulatorBridge: () => bridge,
-      resolveWorktreeSelector: vi.fn(async () => ({ id: 'wt-1' })),
+      resolveEmulatorWorkspaceId: vi.fn(async () => 'wt-1'),
+      resolveEmulatorCleanupWorkspaceId: vi.fn(async () => 'wt-1'),
       getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } }) as never,
       getSettings: () => ({
         mobileEmulatorEnabled: true,
diff --git a/src/main/emulator/emulator-bridge.ts b/src/main/emulator/emulator-bridge.ts
index 84ecbb7025e..b201b34963a 100644
--- a/src/main/emulator/emulator-bridge.ts
+++ b/src/main/emulator/emulator-bridge.ts
@@ -5,6 +5,11 @@ import type { SimulatorDevice } from './simctl-simulator-devices'
 import type { EmulatorBridgeOptions } from './emulator-bridge-types'
 import type { EmulatorGesturePoint } from './emulator-gesture-sender'
 import { EmulatorSessionRegistry } from './emulator-session-registry'
+import {
+  EmulatorStartLeaseRegistry,
+  type EmulatorStartLease
+} from './emulator-start-lease-registry'
+import { listAvailableEmulatorDevices } from './emulator-device-inventory'
 import { deriveAxUrlFromStreamUrl } from './serve-sim-detached-session'
 import { IosEmulatorBackend } from './backends/ios-emulator-backend'
 import { AndroidEmulatorBackend } from './backends/android-emulator-backend'
@@ -22,6 +27,7 @@ import type {
 // backend a command targets (by the session's recorded backend, else by device).
 export class EmulatorBridge {
   private readonly sessionRegistry = new EmulatorSessionRegistry()
+  private readonly startLeases = new EmulatorStartLeaseRegistry()
   private readonly backends: EmulatorBackend[]
   private readonly iosBackend: IosEmulatorBackend
   private readonly androidBackend: AndroidEmulatorBackend
@@ -41,19 +47,7 @@ export class EmulatorBridge {
   // Aggregated device list across host-supported backends (iOS simulators +
   // Android devices/AVDs), for the unified `orca emulator list`.
   async listAllDevices(): Promise<EmulatorDevice[]> {
-    const perBackend = await Promise.all(
-      this.backends.map(async (backend) => {
-        if (!backend.isSupportedOnHost()) {
-          return []
-        }
-        try {
-          return await backend.listDevices()
-        } catch {
-          return []
-        }
-      })
-    )
-    return perBackend.flat()
+    return listAvailableEmulatorDevices(this.backends)
   }
 
   // iOS-specific passthroughs kept for back-compat with the runtime + availability code.
@@ -85,14 +79,10 @@ export class EmulatorBridge {
     return this.sessionRegistry.getActiveForWorktree(worktreeId)
   }
 
-  getActiveBackendKind(worktreeId: string): EmulatorBackendKind | null {
-    return this.backendForActiveWorktree(worktreeId)?.kind ?? null
-  }
-
   // On a device switch, keep slow-to-boot Android emulators running for instant
   // switch-back; shut down other backends' devices so they are not leaked.
   async stopActiveForSwitch(worktreeId: string): Promise<string | null> {
-    const keepAlive = this.getActiveBackendKind(worktreeId) === 'android'
+    const keepAlive = this.backendForActiveWorktree(worktreeId)?.kind === 'android'
     return this.stopActiveForWorktreeInternal(worktreeId, { shutdownDevice: !keepAlive })
   }
 
@@ -146,18 +136,26 @@ export class EmulatorBridge {
     if (!session || (options.managedOnly && !session.managed)) {
       return null
     }
+    if (this.sessionRegistry.hasActiveWorktreeForSession(key)) {
+      return session.deviceUdid
+    }
     const backend = this.backendForKind(session.backend)
     if (!backend) {
       return null
     }
-    await backend.stopHelperForDevice(session.deviceUdid, {
-      helperPid: session.pid,
-      includeOrphaned: !options.managedOnly
-    })
-    if (options.shutdownDevice) {
-      await backend.shutdownDevice(session.deviceUdid).catch(() => {})
+    const sessionInfo = this.sessionRegistry.toSessionInfo(session)
+    await this.startLeases.cleanupWhenIdle(
+      backend,
+      sessionInfo,
+      (info) => this.sessionRegistry.hasActiveWorktreeForSession(info.deviceUdid),
+      {
+        includeOrphaned: !options.managedOnly,
+        shutdownDevice: options.shutdownDevice
+      }
+    )
+    if (!this.sessionRegistry.hasActiveWorktreeForSession(key)) {
+      this.sessionRegistry.clearSessionAndWorktrees(key)
     }
-    this.sessionRegistry.clearSessionAndWorktrees(key)
     return session.deviceUdid
   }
 
@@ -243,9 +241,11 @@ export class EmulatorBridge {
     return run(backend, device)
   }
 
-  async startHelperForDevice(device: string): Promise<EmulatorSessionInfo> {
+  async acquireHelperForDevice(device: string): Promise<EmulatorStartLease> {
     const backend = await this.backendForDevice(device)
-    return backend.startSession(device)
+    return this.startLeases.acquire(backend, device, (info) =>
+      this.sessionRegistry.hasActiveWorktreeForSession(info.deviceUdid)
+    )
   }
 
   async kill(device?: string, worktreeId?: string): Promise<string> {
diff --git a/src/main/emulator/emulator-device-inventory.ts b/src/main/emulator/emulator-device-inventory.ts
new file mode 100644
index 00000000000..35649b947f3
--- /dev/null
+++ b/src/main/emulator/emulator-device-inventory.ts
@@ -0,0 +1,19 @@
+import type { EmulatorBackend, EmulatorDevice } from './backends/emulator-backend'
+
+export async function listAvailableEmulatorDevices(
+  backends: EmulatorBackend[]
+): Promise<EmulatorDevice[]> {
+  const perBackend = await Promise.all(
+    backends.map(async (backend) => {
+      if (!backend.isSupportedOnHost()) {
+        return []
+      }
+      try {
+        return await backend.listDevices()
+      } catch {
+        return []
+      }
+    })
+  )
+  return perBackend.flat()
+}
diff --git a/src/main/emulator/emulator-session-registry.ts b/src/main/emulator/emulator-session-registry.ts
index b55578930e4..917b14a9e39 100644
--- a/src/main/emulator/emulator-session-registry.ts
+++ b/src/main/emulator/emulator-session-registry.ts
@@ -51,6 +51,14 @@ export class EmulatorSessionRegistry {
     return this.sessions.get(key)
   }
 
+  toSessionInfo(session: EmulatorSessionState): EmulatorSessionInfo {
+    return toSessionInfo(session)
+  }
+
+  hasActiveWorktreeForSession(key: string): boolean {
+    return [...this.activeByWorktree.values()].some((activeKey) => activeKey === key)
+  }
+
   listSessions(): EmulatorSessionState[] {
     return [...this.sessions.values()]
   }
diff --git a/src/main/emulator/emulator-start-lease-registry.test.ts b/src/main/emulator/emulator-start-lease-registry.test.ts
new file mode 100644
index 00000000000..f0b0e927569
--- /dev/null
+++ b/src/main/emulator/emulator-start-lease-registry.test.ts
@@ -0,0 +1,111 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { EmulatorBackend } from './backends/emulator-backend'
+import { EmulatorStartLeaseRegistry } from './emulator-start-lease-registry'
+import type { EmulatorSessionInfo } from './emulator-types'
+
+function makeBackend(): {
+  backend: EmulatorBackend
+  resolveDeviceId: ReturnType<typeof vi.fn>
+  startSession: ReturnType<typeof vi.fn>
+  stopHelperForDevice: ReturnType<typeof vi.fn>
+  shutdownDevice: ReturnType<typeof vi.fn>
+} {
+  const resolveDeviceId = vi.fn(async () => {
+    throw new Error('shutdown AVD cannot resolve before boot')
+  })
+  const startSession = vi.fn(
+    async (): Promise<EmulatorSessionInfo> => ({
+      deviceUdid: 'emulator-5554',
+      streamUrl: 'scrcpy://emulator-5554',
+      wsUrl: '',
+      streamCodec: 'h264',
+      backend: 'android'
+    })
+  )
+  const stopHelperForDevice = vi.fn(async () => {})
+  const shutdownDevice = vi.fn(async () => {})
+  const backend: EmulatorBackend = {
+    kind: 'android',
+    streamCodec: 'h264',
+    capabilities: {
+      install: false,
+      launch: false,
+      permissions: false,
+      accessibilityTree: false,
+      logcat: false
+    },
+    isSupportedOnHost: () => true,
+    checkAvailability: vi.fn(),
+    listDevices: vi.fn(async () => []),
+    ownsDevice: vi.fn(async () => true),
+    resolveDeviceId,
+    startSession,
+    stopHelperForDevice,
+    shutdownDevice,
+    isSessionReusable: vi.fn(async () => true),
+    tap: vi.fn(async () => {}),
+    gesture: vi.fn(async () => {}),
+    type: vi.fn(async () => {}),
+    button: vi.fn(async () => {}),
+    rotate: vi.fn(async () => {}),
+    exec: vi.fn(async () => undefined)
+  }
+  return { backend, resolveDeviceId, startSession, stopHelperForDevice, shutdownDevice }
+}
+
+describe('EmulatorStartLeaseRegistry', () => {
+  it('lets the backend boot a shutdown device before a canonical id exists', async () => {
+    const { backend, resolveDeviceId, startSession } = makeBackend()
+    const registry = new EmulatorStartLeaseRegistry()
+
+    const lease = await registry.acquire(backend, 'Pixel_Tablet', () => false)
+    await lease.release()
+
+    expect(resolveDeviceId).not.toHaveBeenCalled()
+    expect(startSession).toHaveBeenCalledWith('Pixel_Tablet')
+    expect(lease.info.deviceUdid).toBe('emulator-5554')
+  })
+
+  it('waits for pending cleanup before starting a new lease', async () => {
+    const { backend, startSession, stopHelperForDevice, shutdownDevice } = makeBackend()
+    let finishCleanup: (() => void) | undefined
+    stopHelperForDevice.mockImplementation(
+      () =>
+        new Promise<void>((resolve) => {
+          finishCleanup = resolve
+        })
+    )
+    const registry = new EmulatorStartLeaseRegistry()
+    const first = await registry.acquire(backend, 'Pixel_Tablet', () => false)
+
+    const cleanup = first.release({ cleanupIfUnused: true })
+    await vi.waitFor(() => expect(stopHelperForDevice).toHaveBeenCalledOnce())
+    const second = registry.acquire(backend, 'Pixel_Tablet', () => false)
+    await Promise.resolve()
+    expect(startSession).toHaveBeenCalledOnce()
+
+    finishCleanup?.()
+    await cleanup
+    const secondLease = await second
+
+    expect(shutdownDevice).toHaveBeenCalledOnce()
+    expect(startSession).toHaveBeenCalledTimes(2)
+    await secondLease.release()
+  })
+
+  it('claims synchronously before an earlier lease can start cleanup', async () => {
+    const { backend, stopHelperForDevice, shutdownDevice } = makeBackend()
+    const registry = new EmulatorStartLeaseRegistry()
+    const first = await registry.acquire(backend, 'Pixel_Tablet', () => false)
+
+    const second = registry.acquire(backend, 'Pixel_Tablet', () => false)
+    await first.release({ cleanupIfUnused: true })
+
+    expect(stopHelperForDevice).not.toHaveBeenCalled()
+    const secondLease = await second
+    await secondLease.release()
+
+    expect(stopHelperForDevice).toHaveBeenCalledOnce()
+    expect(shutdownDevice).toHaveBeenCalledOnce()
+  })
+})
diff --git a/src/main/emulator/emulator-start-lease-registry.ts b/src/main/emulator/emulator-start-lease-registry.ts
new file mode 100644
index 00000000000..94b1e6ce992
--- /dev/null
+++ b/src/main/emulator/emulator-start-lease-registry.ts
@@ -0,0 +1,127 @@
+import type { EmulatorBackend } from './backends/emulator-backend'
+import type { EmulatorSessionInfo } from './emulator-types'
+
+export type EmulatorStartLease = {
+  info: EmulatorSessionInfo
+  release(options?: { cleanupIfUnused?: boolean }): Promise<void>
+}
+
+type PendingCleanup = {
+  info: EmulatorSessionInfo
+  isRegistered: (info: EmulatorSessionInfo) => boolean
+  includeOrphaned: boolean
+  shutdownDevice: boolean
+}
+
+export class EmulatorStartLeaseRegistry {
+  private readonly claimsByBackend = new Map<EmulatorBackend, number>()
+  private readonly cleanupByBackend = new Map<EmulatorBackend, Promise<void>>()
+  private readonly pendingCleanupByBackend = new Map<EmulatorBackend, Map<string, PendingCleanup>>()
+
+  async acquire(
+    backend: EmulatorBackend,
+    device: string,
+    isRegistered: (info: EmulatorSessionInfo) => boolean
+  ): Promise<EmulatorStartLease> {
+    this.claimsByBackend.set(backend, (this.claimsByBackend.get(backend) ?? 0) + 1)
+    try {
+      await this.cleanupByBackend.get(backend)
+      const info = await backend.startSession(device)
+      let released = false
+      return {
+        info,
+        release: async (options = {}) => {
+          if (released) {
+            return
+          }
+          released = true
+          if (options.cleanupIfUnused) {
+            this.addPendingCleanup(backend, info, isRegistered, {
+              includeOrphaned: true,
+              shutdownDevice: true
+            })
+          }
+          await this.release(backend)
+        }
+      }
+    } catch (error) {
+      await this.release(backend)
+      throw error
+    }
+  }
+
+  async cleanupWhenIdle(
+    backend: EmulatorBackend,
+    info: EmulatorSessionInfo,
+    isRegistered: (info: EmulatorSessionInfo) => boolean,
+    options: { includeOrphaned?: boolean; shutdownDevice?: boolean } = {}
+  ): Promise<void> {
+    this.addPendingCleanup(backend, info, isRegistered, options)
+    await this.drainCleanup(backend)
+  }
+
+  private async release(backend: EmulatorBackend): Promise<void> {
+    const remaining = this.decrement(backend)
+    if (remaining > 0) {
+      return
+    }
+    await this.drainCleanup(backend)
+  }
+
+  private async drainCleanup(backend: EmulatorBackend): Promise<void> {
+    await this.cleanupByBackend.get(backend)
+    if ((this.claimsByBackend.get(backend) ?? 0) > 0) {
+      return
+    }
+    const pending = this.pendingCleanupByBackend.get(backend)
+    this.pendingCleanupByBackend.delete(backend)
+    if (!pending) {
+      return
+    }
+    const cleanup = Promise.allSettled(
+      [...pending.values()].map(async ({ info, isRegistered, includeOrphaned, shutdownDevice }) => {
+        if (isRegistered(info)) {
+          return
+        }
+        await backend.stopHelperForDevice(info.deviceUdid, {
+          helperPid: info.helperPid,
+          includeOrphaned
+        })
+        if (shutdownDevice) {
+          await backend.shutdownDevice(info.deviceUdid)
+        }
+      })
+    )
+      .then(() => undefined)
+      .finally(() => this.cleanupByBackend.delete(backend))
+    this.cleanupByBackend.set(backend, cleanup)
+    await cleanup
+  }
+
+  private addPendingCleanup(
+    backend: EmulatorBackend,
+    info: EmulatorSessionInfo,
+    isRegistered: (info: EmulatorSessionInfo) => boolean,
+    options: { includeOrphaned?: boolean; shutdownDevice?: boolean }
+  ): void {
+    const pending = this.pendingCleanupByBackend.get(backend) ?? new Map()
+    const existing = pending.get(info.deviceUdid)
+    pending.set(info.deviceUdid, {
+      info,
+      isRegistered,
+      includeOrphaned: options.includeOrphaned === true || existing?.includeOrphaned === true,
+      shutdownDevice: options.shutdownDevice === true || existing?.shutdownDevice === true
+    })
+    this.pendingCleanupByBackend.set(backend, pending)
+  }
+
+  private decrement(backend: EmulatorBackend): number {
+    const next = Math.max(0, (this.claimsByBackend.get(backend) ?? 1) - 1)
+    if (next === 0) {
+      this.claimsByBackend.delete(backend)
+    } else {
+      this.claimsByBackend.set(backend, next)
+    }
+    return next
+  }
+}
diff --git a/src/main/emulator/mjpeg-frame-parser.ts b/src/main/emulator/mjpeg-frame-parser.ts
index 841bc6a8c91..90733e2c1fe 100644
--- a/src/main/emulator/mjpeg-frame-parser.ts
+++ b/src/main/emulator/mjpeg-frame-parser.ts
@@ -32,7 +32,7 @@ export function extractJpegFrames(
 
   while (cursor.length > 0) {
     const frameStart = cursor.indexOf(JPEG_START)
-    if (frameStart < 0) {
+    if (frameStart === -1) {
       const keepLastByte = cursor.at(-1) === 0xff
       return { frames, pending: keepLastByte ? Buffer.from([0xff]) : Buffer.alloc(0) }
     }
@@ -41,7 +41,7 @@ export function extractJpegFrames(
     }
 
     const frameEnd = cursor.indexOf(JPEG_END, JPEG_START.length)
-    if (frameEnd < 0) {
+    if (frameEnd === -1) {
       return { frames, pending: trimPendingBuffer(cursor, maxPendingBytes) }
     }
 
diff --git a/src/main/folder-workspace-diff-comments.ts b/src/main/folder-workspace-diff-comments.ts
new file mode 100644
index 00000000000..1a7435e8930
--- /dev/null
+++ b/src/main/folder-workspace-diff-comments.ts
@@ -0,0 +1,37 @@
+import type { DiffComment, FolderWorkspace } from '../shared/types'
+
+// Why shape-only: this replaces folder-workspaces.ts's verbatim `Array.isArray(raw.diffComments)` read.
+// Filtering members would make the fix itself a new deletion path for user-authored prose.
+export function normalizeFolderWorkspaceDiffComments(
+  value: unknown
+): Record<string, DiffComment[]> | undefined {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+    return undefined
+  }
+  const normalized: Record<string, DiffComment[]> = {}
+  let kept = false
+  for (const [id, comments] of Object.entries(value)) {
+    if (!Array.isArray(comments)) {
+      continue
+    }
+    normalized[id] = comments as DiffComment[]
+    kept = true
+  }
+  return kept ? normalized : undefined
+}
+
+// Why derive on every write: the map self-GCs, so delete paths need no pruning code.
+export function collectFolderWorkspaceDiffComments(
+  workspaces: readonly FolderWorkspace[] | undefined
+): Record<string, DiffComment[]> | undefined {
+  const collected: Record<string, DiffComment[]> = {}
+  let kept = false
+  for (const workspace of workspaces ?? []) {
+    const comments = workspace.diffComments
+    if (Array.isArray(comments) && comments.length > 0) {
+      collected[workspace.id] = comments
+      kept = true
+    }
+  }
+  return kept ? collected : undefined
+}
diff --git a/src/main/gemini/hook-service.ts b/src/main/gemini/hook-service.ts
index 4e44dba7bb6..72ee056bd5f 100644
--- a/src/main/gemini/hook-service.ts
+++ b/src/main/gemini/hook-service.ts
@@ -200,7 +200,7 @@ export class GeminiHookService {
     return this.getStatus()
   }
 
-  // POSIX-only remote install mirroring ClaudeHookService.installRemote. See docs/design/agent-status-over-ssh.md §8.
+  // POSIX-only remote install mirroring ClaudeHookService.installRemote; the managed script/JSON shape must match local install() or remote panes report a different status.
   async installRemote(sftp: SFTPWrapper, remoteHome: string): Promise<AgentHookInstallStatus> {
     const remoteConfigPath = `${remoteHome.replace(/\/$/, '')}/.gemini/settings.json`
     const remoteScriptPath = `${remoteHome.replace(/\/$/, '')}/.orca/agent-hooks/gemini-hook.sh`
diff --git a/src/main/git/repo.ts b/src/main/git/repo.ts
index e609d90a981..26291ec5d39 100644
--- a/src/main/git/repo.ts
+++ b/src/main/git/repo.ts
@@ -932,7 +932,7 @@ export function parseAndFilterSearchRefDetails(
       .filter((line) => line.length > 0)
       .map((line) => {
         const nul = line.indexOf('\0')
-        if (nul < 0) {
+        if (nul === -1) {
           // Why: no NUL means an unexpected %(refname) format; drop it rather than hand callers an unusable "short" ref.
           return null
         }
diff --git a/src/main/git/wsl-git-read-environment.ts b/src/main/git/wsl-git-read-environment.ts
index f67d696a37b..7df86a44a94 100644
--- a/src/main/git/wsl-git-read-environment.ts
+++ b/src/main/git/wsl-git-read-environment.ts
@@ -26,7 +26,7 @@ function parseProbe(stdout: string): WslGitReadEnvironment | null {
   const gitPath = fields[markerIndex + 2] ?? ''
   const home = fields[markerIndex + 3] ?? ''
   if (
-    markerIndex < 0 ||
+    markerIndex === -1 ||
     !path.includes('/') ||
     path.length > 32_768 ||
     !gitPath.startsWith('/') ||
diff --git a/src/main/github/client-pr-local-runtime.test.ts b/src/main/github/client-pr-local-runtime.test.ts
index 0e7d4013d2e..543d6f239f2 100644
--- a/src/main/github/client-pr-local-runtime.test.ts
+++ b/src/main/github/client-pr-local-runtime.test.ts
@@ -234,6 +234,15 @@ describe('GitHub PR local runtime routing', () => {
           stdout: JSON.stringify({ id: 13, node_id: 'PRRC_inline_13', user: null, body: 'Inline' })
         }
       }
+      if (args.length === 2 && endpoint === 'repos/acme/orca/pulls/7') {
+        return {
+          stdout: JSON.stringify({
+            number: 7,
+            head: { ref: 'feature', sha: 'head-oid' },
+            base: { ref: 'main', sha: 'base-oid' }
+          })
+        }
+      }
       return { stdout: '', stderr: '' }
     })
 
@@ -467,6 +476,15 @@ describe('GitHub PR local runtime routing', () => {
       if (endpoint.endsWith('/check-runs/88/annotations?per_page=20')) {
         return { stdout: '[]' }
       }
+      if (args.length === 2 && endpoint === 'repos/team/orca/pulls/7') {
+        return {
+          stdout: JSON.stringify({
+            number: 7,
+            head: { ref: 'feature', sha: 'head-sha' },
+            base: { ref: 'main', sha: 'base-sha' }
+          })
+        }
+      }
       if (query) {
         return { stdout: JSON.stringify({ data: { repository: {} } }) }
       }
diff --git a/src/main/github/client.test.ts b/src/main/github/client.test.ts
index b462b77a9cd..d139c345b59 100644
--- a/src/main/github/client.test.ts
+++ b/src/main/github/client.test.ts
@@ -1,6 +1,7 @@
 /* oxlint-disable max-lines -- Why: GitHub client fixtures cover local and SSH repo identity paths in one suite so mocked CLI behavior stays consistent. */
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import type * as GithubApiRepositoryModule from './github-api-repository'
+import type * as GitHubEnterpriseRepositoryModule from './github-enterprise-repository'
 
 type RateLimitGuardResult =
   | { blocked: false }
@@ -103,6 +104,11 @@ vi.mock('./local-git-config-signature', () => ({
   readLocalGitConfigSignature: readLocalGitConfigSignatureMock
 }))
 
+vi.mock('./github-enterprise-repository', async (importOriginal) => ({
+  ...(await importOriginal<typeof GitHubEnterpriseRepositoryModule>()),
+  isGitHubHostAuthenticated: vi.fn().mockResolvedValue(true)
+}))
+
 vi.mock('./rate-limit', () => ({
   getRateLimit: getRateLimitMock,
   rateLimitGuard: rateLimitGuardMock,
@@ -4143,6 +4149,8 @@ describe('GitHub GraphQL rate-limit guard', () => {
     __resetPRConflictSummaryCachesForTests()
   })
 
+  afterEach(() => vi.restoreAllMocks())
+
   it('skips PR review-thread GraphQL fetch while preserving REST comments', async () => {
     rateLimitGuardMock.mockImplementation(((bucket: string) =>
       bucket === 'graphql'
@@ -4479,20 +4487,38 @@ describe('GitHub GraphQL rate-limit guard', () => {
     expect(mergeQueueMetadataCall?.[0]).toEqual(expect.arrayContaining(['-f', 'branch=main']))
   })
 
-  it('uses async merge only for GitHub-registered stacks', async () => {
+  const validStackHeadSha = 'a'.repeat(40)
+  const validStackBaseSha = 'b'.repeat(40)
+  const validSha256HeadSha = 'c'.repeat(64)
+
+  it.each([
+    {
+      objectFormat: 'SHA-1 with a base SHA',
+      headSha: validStackHeadSha,
+      baseSha: validStackBaseSha
+    },
+    {
+      objectFormat: 'SHA-256 without a base SHA',
+      headSha: validSha256HeadSha,
+      baseSha: undefined
+    }
+  ])('uses async merge only for GitHub-registered stacks using $objectFormat', async (scenario) => {
     ghExecFileAsyncMock
       .mockResolvedValueOnce({
         stdout: JSON.stringify({
           number: 202,
           title: 'Stack API',
           state: 'open',
-          head: { ref: 'stack/api', sha: 'api-sha' },
+          head: { ref: 'stack/api', sha: scenario.headSha },
           base: { ref: 'stack/models', sha: 'models-sha' },
           stack: {
             number: 51,
             position: 2,
             size: 2,
-            base: { ref: 'main', sha: 'main-sha' }
+            base: {
+              ref: 'main',
+              ...(scenario.baseSha ? { sha: scenario.baseSha } : {})
+            }
           }
         })
       })
@@ -4519,7 +4545,7 @@ describe('GitHub GraphQL rate-limit guard', () => {
         'PUT',
         'repos/stablyai/orca/pulls/202/merge-async',
         'merge_action=merge_queue',
-        'sha=api-sha'
+        `sha=${scenario.headSha}`
       ])
     )
     expect(mergeCall?.[0]).not.toContain('merge_method=squash')
@@ -4536,13 +4562,13 @@ describe('GitHub GraphQL rate-limit guard', () => {
         stdout: JSON.stringify({
           number: 202,
           state: 'open',
-          head: { ref: 'stack/api', sha: 'api-sha' },
+          head: { ref: 'stack/api', sha: validStackHeadSha },
           base: { ref: 'stack/models', sha: 'models-sha' },
           stack: {
             number: 51,
             position: 2,
             size: 2,
-            base: { ref: 'main', sha: 'main-sha' }
+            base: { ref: 'main', sha: validStackBaseSha }
           }
         })
       })
@@ -4563,6 +4589,403 @@ describe('GitHub GraphQL rate-limit guard', () => {
     ).toBe(false)
   })
 
+  const stackMetadataUnavailableError =
+    'Could not verify GitHub pull request stack metadata. Refresh and try again.'
+
+  it.each([
+    {
+      failure: 'local transport failure',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: new Error('stack metadata unavailable'),
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'stack metadata unavailable',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'GitHub Enterprise transport failure',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: new Error('enterprise stack metadata unavailable'),
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'enterprise stack metadata unavailable',
+      expectedOptions: { cwd: '/repo-root', host: 'github.enterprise.test' }
+    },
+    {
+      failure: 'unparsable probe response over SSH',
+      repoPath: '/remote/repo-root',
+      connectionId: 'ssh-1',
+      probeResponse: { stdout: '' },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'invalid JSON response',
+      expectedOptions: { host: 'github.com' }
+    },
+    {
+      failure: 'valid JSON with a non-object payload',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: { stdout: 'null' },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'invalid response shape',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'valid JSON with an array payload',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: { stdout: '[]' },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'invalid response shape',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'present primitive stack metadata',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: true
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'malformed stack response',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 2,
+            size: '2',
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'incoherent stack position',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 3,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'non-positive stack number',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 0,
+            position: 1,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'fractional stack size',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 1,
+            size: 1.5,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'unsafe stack number',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: Number.MAX_SAFE_INTEGER + 1,
+            position: 1,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'blank stack base ref',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: '  ', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'invalid stack base SHA',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: 'main', sha: 123 }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'invalid string stack base SHA',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { sha: validStackHeadSha },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: 'main', sha: 'not-a-git-object-id' }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'malformed stack',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'registered stack response without a head SHA',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { ref: 'stack/api' },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'missing head SHA',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'registered stack response with an invalid head SHA',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { ref: 'stack/api', sha: {} },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'missing head SHA',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    },
+    {
+      failure: 'registered stack response with an invalid string head SHA',
+      repoPath: '/repo-root',
+      connectionId: undefined,
+      probeResponse: {
+        stdout: JSON.stringify({
+          number: 202,
+          head: { ref: 'stack/api', sha: 'not-a-git-object-id' },
+          stack: {
+            number: 51,
+            position: 2,
+            size: 2,
+            base: { ref: 'main', sha: validStackBaseSha }
+          }
+        })
+      },
+      expectedError: stackMetadataUnavailableError,
+      expectedDiagnostic: 'missing head SHA',
+      expectedOptions: { cwd: '/repo-root', host: 'github.com' }
+    }
+  ])('fails closed on $failure', async (scenario) => {
+    const consoleWarnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined)
+    if (scenario.probeResponse instanceof Error) {
+      ghExecFileAsyncMock.mockRejectedValueOnce(scenario.probeResponse)
+    } else {
+      ghExecFileAsyncMock.mockResolvedValueOnce(scenario.probeResponse)
+    }
+    // Why: disabling the guard must expose the legacy merge fallthrough, not fail on an unstubbed call.
+    ghExecFileAsyncMock
+      .mockResolvedValueOnce({
+        stdout: JSON.stringify({
+          number: 202,
+          title: 'Stack API',
+          state: 'OPEN',
+          url: 'https://github.com/stablyai/orca/pull/202',
+          statusCheckRollup: [],
+          updatedAt: '2026-08-10T00:00:00Z',
+          isDraft: false,
+          mergeable: 'MERGEABLE',
+          baseRefName: 'stack/models',
+          headRefName: 'stack/api',
+          headRefOid: 'api-sha'
+        })
+      })
+      .mockResolvedValueOnce({ stdout: '', stderr: '' })
+
+    const result = await mergePR(scenario.repoPath, 202, 'squash', scenario.connectionId, {
+      owner: 'stablyai',
+      repo: 'orca',
+      host: scenario.expectedOptions.host
+    })
+
+    expect.soft(result).toEqual({ ok: false, error: scenario.expectedError })
+    expect
+      .soft(ghExecFileAsyncMock.mock.calls.map(([args]) => args))
+      .toEqual([['api', 'repos/stablyai/orca/pulls/202']])
+    expect.soft(ghExecFileAsyncMock.mock.calls[0]?.[1]).toEqual(scenario.expectedOptions)
+    expect
+      .soft(
+        ghExecFileAsyncMock.mock.calls.some(([args]) =>
+          args.includes('repos/stablyai/orca/pulls/202/merge-async')
+        )
+      )
+      .toBe(false)
+    expect
+      .soft(
+        ghExecFileAsyncMock.mock.calls.some(([args]) => args[0] === 'pr' && args[1] === 'merge')
+      )
+      .toBe(false)
+    expect.soft(acquireMock).toHaveBeenCalledTimes(1)
+    expect.soft(releaseMock).toHaveBeenCalledTimes(1)
+    expect
+      .soft(consoleWarnSpy)
+      .toHaveBeenCalledWith(
+        'mergePR stack metadata probe failed for stablyai/orca#202:',
+        scenario.expectedDiagnostic
+      )
+    expect.soft(consoleWarnSpy).toHaveBeenCalledTimes(1)
+  })
+
+  it.each([
+    { stackShape: 'omits stack', stackField: {} },
+    { stackShape: 'sets stack to null', stackField: { stack: null } }
+  ])('keeps legacy merge when an ordinary GitHub response $stackShape', async (scenario) => {
+    ghExecFileAsyncMock
+      .mockResolvedValueOnce({
+        stdout: JSON.stringify({
+          number: 13866,
+          title: 'Fail closed on unavailable stack metadata',
+          state: 'open',
+          head: {
+            ref: 'sta-3924-stack-merge-fail-closed',
+            sha: validStackHeadSha
+          },
+          base: { ref: 'main', sha: validStackBaseSha },
+          ...scenario.stackField
+        })
+      })
+      .mockResolvedValueOnce({
+        stdout: JSON.stringify({
+          number: 13866,
+          title: 'Fail closed on unavailable stack metadata',
+          state: 'OPEN',
+          url: 'https://github.com/stablyai/orca/pull/13866',
+          statusCheckRollup: [],
+          updatedAt: '2026-08-11T00:00:00Z',
+          isDraft: false,
+          mergeable: 'MERGEABLE',
+          baseRefName: 'main',
+          baseRefOid: validStackBaseSha,
+          headRefName: 'sta-3924-stack-merge-fail-closed',
+          headRefOid: validStackHeadSha
+        })
+      })
+      .mockResolvedValueOnce({ stdout: '', stderr: '' })
+
+    await expect(
+      mergePR('/repo-root', 13866, 'squash', undefined, {
+        owner: 'stablyai',
+        repo: 'orca',
+        host: 'github.com'
+      })
+    ).resolves.toEqual({ ok: true })
+
+    expect(ghExecFileAsyncMock).toHaveBeenNthCalledWith(
+      3,
+      ['pr', 'merge', '13866', '--squash', '--repo', 'stablyai/orca'],
+      expect.objectContaining({ env: expect.objectContaining({ GH_PROMPT_DISABLED: '1' }) })
+    )
+    expect(acquireMock).toHaveBeenCalledTimes(1)
+    expect(releaseMock).toHaveBeenCalledTimes(1)
+  })
+
   it('keeps legacy merge for unregistered dependent PR chains', async () => {
     ghExecFileAsyncMock
       .mockResolvedValueOnce({
diff --git a/src/main/github/client.ts b/src/main/github/client.ts
index f95bfe7fdd8..068d3ccc419 100644
--- a/src/main/github/client.ts
+++ b/src/main/github/client.ts
@@ -193,6 +193,8 @@ const repositoryMergeMetadataCache = new Map<
 >()
 const PR_STACK_SUMMARY_CACHE_TTL_MS = 60_000
 const PR_STACK_SUMMARY_CACHE_MAX_ENTRIES = 512
+const STACK_METADATA_UNAVAILABLE_ERROR =
+  'Could not verify GitHub pull request stack metadata. Refresh and try again.'
 const prStackSummaryCache = new Map<
   string,
   { value: GitHubPRStack | undefined; expiresAt: number }
@@ -2947,16 +2949,69 @@ async function lookupPRByBranchName(args: {
   }
 }
 
+function isPositiveSafeInteger(value: unknown): value is number {
+  return typeof value === 'number' && Number.isSafeInteger(value) && value > 0
+}
+
+function isGitObjectId(value: unknown): value is string {
+  return typeof value === 'string' && /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i.test(value)
+}
+
+function isUsableRestStackMetadata(value: unknown): boolean {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    return false
+  }
+  const stack = value as {
+    number?: unknown
+    position?: unknown
+    size?: unknown
+    base?: unknown
+  }
+  if (!stack.base || typeof stack.base !== 'object' || Array.isArray(stack.base)) {
+    return false
+  }
+  const base = stack.base as { ref?: unknown; sha?: unknown }
+  return (
+    isPositiveSafeInteger(stack.number) &&
+    isPositiveSafeInteger(stack.position) &&
+    isPositiveSafeInteger(stack.size) &&
+    stack.position <= stack.size &&
+    typeof base.ref === 'string' &&
+    base.ref.trim().length > 0 &&
+    (base.sha === undefined || isGitObjectId(base.sha))
+  )
+}
+
 async function getRestPRByNumber(
   ownerRepo: GitHubApiRepository,
   number: number,
-  ghOptions: ReturnType<typeof ghRepoExecOptions>
-): Promise<PullRequestLookupData | null> {
+  ghOptions: ReturnType<typeof ghRepoExecOptions>,
+  options: { requireUsableStackMetadata?: boolean } = {}
+): Promise<PullRequestLookupData> {
   const { stdout } = await ghExecFileAsync(
     ['api', `repos/${ownerRepo.owner}/${ownerRepo.repo}/pulls/${number}`],
     { ...ghOptions, ...githubHostExecOptions(ownerRepo) }
   )
-  return mapRestPullRequest(JSON.parse(stdout) as RestPullRequest)
+  const parsed = JSON.parse(stdout) as unknown
+  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+    throw new Error('invalid response shape')
+  }
+  const restData = parsed as RestPullRequest
+  const mapped = mapRestPullRequest(restData)
+  if (
+    options.requireUsableStackMetadata &&
+    restData.stack !== undefined &&
+    restData.stack !== null
+  ) {
+    // Why: GitHub omits stack for ordinary PRs; only unusable non-null metadata is unsafe.
+    if (!isUsableRestStackMetadata(restData.stack) || !mapped.stack) {
+      throw new Error('malformed stack')
+    }
+    if (!isGitObjectId(restData.head?.sha)) {
+      throw new Error('missing head SHA')
+    }
+  }
+  return mapped
 }
 
 function prunePRStackSummaryCache(now = Date.now()): void {
@@ -2991,7 +3046,7 @@ async function getCachedGitHubPRStackSummary(
   if (existing) {
     return existing
   }
-  const request = getRestPRByNumber(ownerRepo, number, ghOptions).then((pr) => pr?.stack)
+  const request = getRestPRByNumber(ownerRepo, number, ghOptions).then((pr) => pr.stack)
   prStackSummaryInFlight.set(key, request)
   try {
     const value = await request
@@ -5015,19 +5070,28 @@ export async function mergePR(
   await acquire()
   let concurrencySlotHeld = true
   try {
-    let stackSummary: GitHubPRStack | undefined
-    let stackHeadSha: string | undefined
+    let restData: PullRequestLookupData
     try {
-      const restData = await getRestPRByNumber(ownerRepo, prNumber, ghOptions)
-      stackSummary = restData?.stack
-      stackHeadSha = restData?.headRefOid
-    } catch {
-      // GitHub remains authoritative when stack metadata cannot be read.
+      restData = await getRestPRByNumber(ownerRepo, prNumber, ghOptions, {
+        requireUsableStackMetadata: true
+      })
+    } catch (err) {
+      const diagnostic =
+        err instanceof SyntaxError
+          ? 'invalid JSON response'
+          : err instanceof Error
+            ? err.message
+            : String(err)
+      console.warn(
+        `mergePR stack metadata probe failed for ${ownerRepo.owner}/${ownerRepo.repo}#${String(prNumber)}:`,
+        diagnostic
+      )
+      return { ok: false, error: STACK_METADATA_UNAVAILABLE_ERROR }
     }
-    if (stackSummary) {
+    if (restData.stack) {
       const mergeMetadata = await detectRepositoryMergeMetadata(
         ownerRepo,
-        stackSummary.baseRefName,
+        restData.stack.baseRefName,
         ghOptions,
         githubPRStackExecutionScope(connectionId, localGitOptions)
       )
@@ -5038,7 +5102,7 @@ export async function mergePR(
         prNumber,
         method,
         mergeAction: mergeMetadata.mergeQueueRequired === true ? 'merge_queue' : 'direct_merge',
-        headSha: stackHeadSha,
+        headSha: restData.headRefOid,
         ghOptions
       })
     }
@@ -5185,7 +5249,7 @@ async function enablePRAutoMerge(
   if (ownerRepo) {
     try {
       const restData = await getRestPRByNumber(ownerRepo, prNumber, ghOptions)
-      if (restData?.stack) {
+      if (restData.stack) {
         return {
           ok: false,
           error: 'GitHub does not support auto-merge for stacked pull requests.'
diff --git a/src/main/github/stacked-pr-creation.ts b/src/main/github/stacked-pr-creation.ts
index 357f78bcbc6..e34752df6d9 100644
--- a/src/main/github/stacked-pr-creation.ts
+++ b/src/main/github/stacked-pr-creation.ts
@@ -209,7 +209,7 @@ function registeredStackNumber(
   )
   // Why: a miss is -1, and -1 + 1 reads the first entry — which reports "already
   // registered" whenever the current PR heads a stack the parent has left.
-  if (parentPosition < 0) {
+  if (parentPosition === -1) {
     return null
   }
   return parentStack.pull_requests[parentPosition + 1]?.number === currentReview.number
diff --git a/src/main/index.ts b/src/main/index.ts
index 3f076c2e908..b4e0e1b5ae4 100644
--- a/src/main/index.ts
+++ b/src/main/index.ts
@@ -119,6 +119,7 @@ import {
   configureElectronNetworkCompatibility,
   configureDevUserDataPath,
   configureOrcaUserDataPathEnv,
+  disableUnsupportedChromiumFeatures,
   enableMainProcessGpuFeatures,
   installDevParentDisconnectQuit,
   installDevParentSignalQuit,
@@ -184,6 +185,7 @@ import {
   logStartupMilestone
 } from './startup/startup-diagnostics'
 import { ensureWindowsUserDataAclGrant } from './startup/windows-user-data-acl'
+import { neutralizeLegacyTerminalShimDir } from './pty/legacy-terminal-shim-dir'
 import { shouldQuitWhenAllWindowsClosed } from './startup/window-all-closed-quit-policy'
 import {
   createServeDesktopActivationGate,
@@ -846,6 +848,7 @@ if (hasSingleInstanceLock) {
     platform: process.platform,
     ...getMainProcessLifecycleIdentity()
   })
+  disableUnsupportedChromiumFeatures()
   configureElectronNetworkCompatibility()
   enableRendererHeapHeadroom()
   maybeApplyGpuFallbackForThisLaunch()
@@ -2168,6 +2171,8 @@ void app.whenReady().then(async () => {
 
   const activeOrcaProfile = ensureActiveOrcaProfile()
   store = new Store({ dataFile: activeOrcaProfile.dataFile })
+  // Why: must precede PTY handler registration and run in headless serve too, which returns before openMainWindow.
+  neutralizeLegacyTerminalShimDir(app.getPath('userData'))
   const windowsShellPathHydration = createWindowsShellPathHydration()
   configureWindowsHostGitEnvironmentReadiness(
     process.platform === 'win32' ? windowsShellPathHydration.whenReady : null
diff --git a/src/main/integration-credential-file.ts b/src/main/integration-credential-file.ts
index c65dcc1fa7a..96823a77a65 100644
--- a/src/main/integration-credential-file.ts
+++ b/src/main/integration-credential-file.ts
@@ -1,4 +1,13 @@
-import { chmodSync, statSync, writeFileSync } from 'node:fs'
+import {
+  chmodSync,
+  closeSync,
+  fsyncSync,
+  openSync,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeSync
+} from 'node:fs'
 import { safeStorage } from 'electron'
 import {
   credentialDecryptionMessage,
@@ -23,15 +32,54 @@ export function writeEncryptedCredential(
   value: string
 ): void {
   if (safeStorage.isEncryptionAvailable()) {
-    writeFileSync(path, safeStorage.encryptString(value), { mode: 0o600 })
-    restrictCredentialFileToOwner(path)
+    writeCredentialFileAtomic(path, safeStorage.encryptString(value))
     return
   }
   console.warn(
     `[${service.toLowerCase()}] safeStorage encryption unavailable — storing credential in plaintext`
   )
-  writeFileSync(path, value, { encoding: 'utf-8', mode: 0o600 })
-  restrictCredentialFileToOwner(path)
+  writeCredentialFileAtomic(path, Buffer.from(value, 'utf-8'))
+}
+
+// Why (STA-3941): a direct write can truncate the previous credential if it
+// fails or the app dies mid-write, leaving nothing to authenticate with. Write
+// a sibling temp file, fsync it, then rename — readers only ever observe the
+// old bytes or the complete new ones.
+export function writeCredentialFileAtomic(path: string, data: Buffer): void {
+  const tempPath = `${path}.tmp`
+  let handle: number | null = null
+  try {
+    handle = openSync(tempPath, 'w', 0o600)
+    // Why: write(2) is allowed to return a short count, so a single writeSync
+    // could publish a truncated credential — the very corruption this avoids.
+    let written = 0
+    while (written < data.length) {
+      const bytes = writeSync(handle, data, written, data.length - written)
+      if (bytes <= 0) {
+        throw new Error(`Credential write stalled at ${written}/${data.length} bytes`)
+      }
+      written += bytes
+    }
+    fsyncSync(handle)
+    closeSync(handle)
+    handle = null
+    renameSync(tempPath, path)
+    restrictCredentialFileToOwner(path)
+  } catch (error) {
+    if (handle !== null) {
+      try {
+        closeSync(handle)
+      } catch {
+        // Already closed or invalid; the unlink below is what matters.
+      }
+    }
+    try {
+      unlinkSync(tempPath)
+    } catch {
+      // Nothing to clean up.
+    }
+    throw error
+  }
 }
 
 // Why: writeFileSync's `mode` only applies when it creates the file, so
diff --git a/src/main/ipc/dashboard-payload-validation.test.ts b/src/main/ipc/dashboard-payload-validation.test.ts
index 958fff9e8a3..83970cfa4ca 100644
--- a/src/main/ipc/dashboard-payload-validation.test.ts
+++ b/src/main/ipc/dashboard-payload-validation.test.ts
@@ -45,6 +45,7 @@ const SNAPSHOT = {
       worktreeName: 'Dashboard',
       hostKind: 'ssh',
       executionHostId: 'ssh:build-box',
+      hostLabel: 'Build box',
       workspaceKind: 'worktree',
       workspaceStatusId: 'in-review',
       workspaceStatusLabel: 'In review',
@@ -68,6 +69,7 @@ const SNAPSHOT = {
       parentWorktreeId: 'parent-worktree-1',
       hostKind: 'ssh',
       executionHostId: 'ssh:build-box',
+      hostLabel: 'Build box',
       workspaceKind: 'worktree',
       workspaceStatusId: 'in-review',
       workspaceStatusLabel: 'In review',
@@ -143,6 +145,12 @@ describe('dashboard payload validation', () => {
         cards: [{ ...SNAPSHOT.cards[0], executionHostId: `ssh:${'x'.repeat(4_097)}` }]
       })
     ).toBe(false)
+    expect(
+      isDashboardSnapshot({
+        ...SNAPSHOT,
+        cards: [{ ...SNAPSHOT.cards[0], hostLabel: 'x'.repeat(1_025) }]
+      })
+    ).toBe(false)
     expect(
       isDashboardSnapshot({
         ...SNAPSHOT,
@@ -236,6 +244,12 @@ describe('dashboard payload validation', () => {
         workspaces: [{ ...SNAPSHOT.workspaces[0], worktreeName: 'x'.repeat(1_025) }]
       })
     ).toBe(false)
+    expect(
+      isDashboardSnapshot({
+        ...SNAPSHOT,
+        workspaces: [{ ...SNAPSHOT.workspaces[0], hostLabel: 'x'.repeat(1_025) }]
+      })
+    ).toBe(false)
   })
 
   it('validates bounded launch choices and spawn requests', () => {
diff --git a/src/main/ipc/dashboard-payload-validation.ts b/src/main/ipc/dashboard-payload-validation.ts
index f819392dae1..6186e638fd1 100644
--- a/src/main/ipc/dashboard-payload-validation.ts
+++ b/src/main/ipc/dashboard-payload-validation.ts
@@ -272,6 +272,7 @@ function isDashboardCard(value: unknown): boolean {
     (card.executionHostId === undefined ||
       (isBoundedString(card.executionHostId, MAX_ID_LENGTH) &&
         normalizeExecutionHostId(card.executionHostId) !== null)) &&
+    isOptionalBoundedString(card.hostLabel, MAX_LABEL_LENGTH) &&
     (card.workspaceKind === undefined ||
       (typeof card.workspaceKind === 'string' &&
         DASHBOARD_WORKSPACE_KINDS.has(card.workspaceKind))) &&
diff --git a/src/main/ipc/dashboard-workspace-payload-validation.ts b/src/main/ipc/dashboard-workspace-payload-validation.ts
index 88e16d9af45..f64cf63d42a 100644
--- a/src/main/ipc/dashboard-workspace-payload-validation.ts
+++ b/src/main/ipc/dashboard-workspace-payload-validation.ts
@@ -50,6 +50,7 @@ export function isDashboardWorkspace(value: unknown): value is DashboardWorkspac
     HOST_KINDS.has(workspace.hostKind) &&
     isString(workspace.executionHostId, MAX_ID_LENGTH) &&
     normalizeExecutionHostId(workspace.executionHostId) !== null &&
+    isOptionalString(workspace.hostLabel, DASHBOARD_MAX_LABEL_LENGTH) &&
     typeof workspace.workspaceKind === 'string' &&
     WORKSPACE_KINDS.has(workspace.workspaceKind) &&
     isOptionalString(workspace.workspaceStatusId, MAX_ID_LENGTH) &&
diff --git a/src/main/ipc/ephemeral-vm.test.ts b/src/main/ipc/ephemeral-vm.test.ts
index 8df189a4abb..bbccfb41e93 100644
--- a/src/main/ipc/ephemeral-vm.test.ts
+++ b/src/main/ipc/ephemeral-vm.test.ts
@@ -6,7 +6,7 @@ import { encodePairingOffer, PAIRING_OFFER_VERSION } from '../../shared/pairing'
 import { listEnvironments } from '../../shared/runtime-environment-store'
 import { upsertEphemeralVmRuntime } from '../../shared/ephemeral-vm-runtime-store'
 
-const handlers = new Map<string, (_event: unknown, args: never) => Promise<unknown> | unknown>()
+const handlers = new Map<string, (_event: unknown, args: never) => unknown>()
 const {
   handleMock,
   removeHandlerMock,
diff --git a/src/main/ipc/filesystem-import.test.ts b/src/main/ipc/filesystem-import.test.ts
index fcd004dcd06..bb143987c96 100644
--- a/src/main/ipc/filesystem-import.test.ts
+++ b/src/main/ipc/filesystem-import.test.ts
@@ -645,7 +645,7 @@ describe('fs:importExternalPaths', () => {
     )
     const mib = 1024 * 1024
     const regularSize = 25 * mib
-    const overflowSize = 1 * mib
+    const overflowSize = Number(mib)
     const readFileMock = vi.fn().mockResolvedValue(Buffer.from('chunk'))
 
     lstatMock.mockImplementation(async (p: string) => {
@@ -683,7 +683,7 @@ describe('fs:importExternalPaths', () => {
     )
     openMock.mockImplementation(async (p: string) => {
       const fileIndex = filePaths.indexOf(p)
-      if (fileIndex >= 0 && fileIndex < filePaths.length - 1) {
+      if (fileIndex !== -1 && fileIndex < filePaths.length - 1) {
         return {
           stat: vi.fn().mockResolvedValue({
             size: regularSize,
diff --git a/src/main/ipc/filesystem-search-rg-timeout.test.ts b/src/main/ipc/filesystem-search-rg-timeout.test.ts
index 9e0a259d2d3..6c677c73d6d 100644
--- a/src/main/ipc/filesystem-search-rg-timeout.test.ts
+++ b/src/main/ipc/filesystem-search-rg-timeout.test.ts
@@ -20,7 +20,7 @@ const {
   toWindowsWslPathMock: vi.fn((value: string) => value)
 }))
 
-const handlers = new Map<string, (event: unknown, args: unknown) => Promise<unknown> | unknown>()
+const handlers = new Map<string, (event: unknown, args: unknown) => unknown>()
 
 vi.mock('electron', () => ({
   ipcMain: {
diff --git a/src/main/ipc/filesystem-watcher-dormant-rearm.test.ts b/src/main/ipc/filesystem-watcher-dormant-rearm.test.ts
index f557ebca379..7d27d4ca780 100644
--- a/src/main/ipc/filesystem-watcher-dormant-rearm.test.ts
+++ b/src/main/ipc/filesystem-watcher-dormant-rearm.test.ts
@@ -22,7 +22,7 @@ vi.mock('../providers/ssh-filesystem-dispatch', () => ({
 
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 const WORKTREE_PATH = '/home/me/repo'
 const ARGS = { worktreePath: WORKTREE_PATH, connectionId: 'conn-1' }
diff --git a/src/main/ipc/filesystem-watcher-large-batch.test.ts b/src/main/ipc/filesystem-watcher-large-batch.test.ts
index 80d45c90e43..e605cd6167c 100644
--- a/src/main/ipc/filesystem-watcher-large-batch.test.ts
+++ b/src/main/ipc/filesystem-watcher-large-batch.test.ts
@@ -38,7 +38,7 @@ import {
   WATCH_BATCH_TRAILING_MS
 } from '../../shared/filesystem-watch-batch-window'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('local filesystem watcher large batches', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts b/src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts
index 0e15ad43fc7..eb161c1ba30 100644
--- a/src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts
+++ b/src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts
@@ -47,7 +47,7 @@ import { subscribe as subscribeParcelWatcher } from '@parcel/watcher'
 import { subscribeViaWatcherProcess } from './parcel-watcher-process'
 import { WatcherProcessFailure } from './parcel-watcher-process-failure'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('local filesystem watcher unsubscribe cleanup', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher-native-capacity.test.ts b/src/main/ipc/filesystem-watcher-native-capacity.test.ts
index 41db2d35e52..670b7eb2af3 100644
--- a/src/main/ipc/filesystem-watcher-native-capacity.test.ts
+++ b/src/main/ipc/filesystem-watcher-native-capacity.test.ts
@@ -28,7 +28,7 @@ import {
   WatcherChildCapacityError
 } from './parcel-watcher-child-registry'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 function fillWatcherChildCapacity(): (() => void)[] {
   return Array.from({ length: MAX_PHYSICAL_WATCHER_CHILDREN }, () => {
diff --git a/src/main/ipc/filesystem-watcher-real.test.ts b/src/main/ipc/filesystem-watcher-real.test.ts
index 34f2bcc91e1..a813be69e28 100644
--- a/src/main/ipc/filesystem-watcher-real.test.ts
+++ b/src/main/ipc/filesystem-watcher-real.test.ts
@@ -26,7 +26,7 @@ vi.mock('electron', () => ({
 
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 type FsChangedCall = { worktreePath: string; events: { kind: string; absolutePath: string }[] }
 
diff --git a/src/main/ipc/filesystem-watcher-remote-batch.test.ts b/src/main/ipc/filesystem-watcher-remote-batch.test.ts
index 6d964c2b2d4..8666a40c906 100644
--- a/src/main/ipc/filesystem-watcher-remote-batch.test.ts
+++ b/src/main/ipc/filesystem-watcher-remote-batch.test.ts
@@ -23,7 +23,7 @@ vi.mock('../providers/ssh-filesystem-dispatch', () => ({
 
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 type WatchCallback = (events: FsChangeEvent[]) => void
 
 const WORKTREE_PATH = '/home/me/repo'
diff --git a/src/main/ipc/filesystem-watcher-remote-cancellation.test.ts b/src/main/ipc/filesystem-watcher-remote-cancellation.test.ts
index 6a67f3a8fb7..60e25db9040 100644
--- a/src/main/ipc/filesystem-watcher-remote-cancellation.test.ts
+++ b/src/main/ipc/filesystem-watcher-remote-cancellation.test.ts
@@ -19,7 +19,7 @@ vi.mock('../providers/ssh-filesystem-dispatch', () => ({
 
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('remote filesystem watcher cancellation', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher-remote-rearm.test.ts b/src/main/ipc/filesystem-watcher-remote-rearm.test.ts
index 869c8bebf45..0eecfbd82e9 100644
--- a/src/main/ipc/filesystem-watcher-remote-rearm.test.ts
+++ b/src/main/ipc/filesystem-watcher-remote-rearm.test.ts
@@ -29,7 +29,7 @@ vi.mock('../providers/ssh-filesystem-dispatch', () => ({
 
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('remote filesystem watcher re-arm', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher-removal-deadline.test.ts b/src/main/ipc/filesystem-watcher-removal-deadline.test.ts
index 52a48e9a06d..9eabdb8964e 100644
--- a/src/main/ipc/filesystem-watcher-removal-deadline.test.ts
+++ b/src/main/ipc/filesystem-watcher-removal-deadline.test.ts
@@ -52,7 +52,7 @@ import { stat } from 'node:fs/promises'
 import { subscribe as subscribeParcelWatcher } from '@parcel/watcher'
 import { subscribeViaWatcherProcess } from './parcel-watcher-process'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('local filesystem watcher removal deadline', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher-terminal-resync.test.ts b/src/main/ipc/filesystem-watcher-terminal-resync.test.ts
index 8a08c5f07d5..31e87d7a4c9 100644
--- a/src/main/ipc/filesystem-watcher-terminal-resync.test.ts
+++ b/src/main/ipc/filesystem-watcher-terminal-resync.test.ts
@@ -28,7 +28,7 @@ import {
   restoreRemoteWatcherAfterFailedRemoval
 } from './filesystem-watcher'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 type TerminalErrorHandler = (error: Error) => void
 
 const WORKTREE_PATH = '/home/me/repo'
diff --git a/src/main/ipc/filesystem-watcher-unwatchable-roots.test.ts b/src/main/ipc/filesystem-watcher-unwatchable-roots.test.ts
index d629d74dc02..3473caa8a73 100644
--- a/src/main/ipc/filesystem-watcher-unwatchable-roots.test.ts
+++ b/src/main/ipc/filesystem-watcher-unwatchable-roots.test.ts
@@ -30,7 +30,7 @@ vi.mock('../providers/ssh-filesystem-dispatch', () => ({
 import { closeAllWatchers, registerFilesystemWatcherHandlers } from './filesystem-watcher'
 import { stat } from 'node:fs/promises'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 describe('filesystem watcher unwatchable root cache', () => {
   const handlers: HandlerMap = {}
diff --git a/src/main/ipc/filesystem-watcher.test.ts b/src/main/ipc/filesystem-watcher.test.ts
index 1e9e3cf509a..6fff613e0d9 100644
--- a/src/main/ipc/filesystem-watcher.test.ts
+++ b/src/main/ipc/filesystem-watcher.test.ts
@@ -60,7 +60,7 @@ import {
 import { acquireWatcherRemovalGate } from './watcher-removal-gate'
 import { WATCH_BATCH_TRAILING_MS } from '../../shared/filesystem-watch-batch-window'
 
-type HandlerMap = Record<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>
+type HandlerMap = Record<string, (_event: unknown, args: unknown) => unknown>
 
 /** Remote fs:changed rides the shared debounce window, so drain it before asserting sends. */
 const emitRemote = async (onEvents: (e: unknown[]) => void, events: unknown[]) => {
diff --git a/src/main/ipc/filesystem.test.ts b/src/main/ipc/filesystem.test.ts
index 2c66ab9ad09..f96667751d2 100644
--- a/src/main/ipc/filesystem.test.ts
+++ b/src/main/ipc/filesystem.test.ts
@@ -3,7 +3,7 @@ import path from 'node:path'
 import { EventEmitter } from 'node:events'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 
-const handlers = new Map<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>()
+const handlers = new Map<string, (_event: unknown, args: unknown) => unknown>()
 const {
   handleMock,
   showSaveDialogMock,
diff --git a/src/main/ipc/notebook.test.ts b/src/main/ipc/notebook.test.ts
index d68668038bd..cdffcb8b913 100644
--- a/src/main/ipc/notebook.test.ts
+++ b/src/main/ipc/notebook.test.ts
@@ -2,7 +2,7 @@ import { EventEmitter } from 'node:events'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import type { ChildProcessWithoutNullStreams } from 'node:child_process'
 
-const handlers = new Map<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>()
+const handlers = new Map<string, (_event: unknown, args: unknown) => unknown>()
 const { spawnMock, handleMock, resolveAuthorizedPathMock } = vi.hoisted(() => ({
   spawnMock: vi.fn(),
   handleMock: vi.fn((channel: string, handler: (event: unknown, args: unknown) => unknown) => {
diff --git a/src/main/ipc/pty-hidden-delivery-gate.ts b/src/main/ipc/pty-hidden-delivery-gate.ts
index b1f089e385e..43fa8567b88 100644
--- a/src/main/ipc/pty-hidden-delivery-gate.ts
+++ b/src/main/ipc/pty-hidden-delivery-gate.ts
@@ -18,8 +18,7 @@ export type HiddenPtyDeliveryGateSettings = Pick<
 
 const hiddenRendererPtys = new Set<string>()
 // Why: sidecar consumers (paste-draft pacing, background agent launches,
-// automation observers, and the kill-switch-off parked 2031 responder) need
-// live bytes even while no visible view exists. Any
+// automation observers) need live bytes even while no visible view exists. Any
 // registered interest suppresses the gate for that PTY.
 const deliveryInterestRendererPtys = new Set<string>()
 // Why: reveal must restore from the model only when bytes were actually
diff --git a/src/main/ipc/pty.test.ts b/src/main/ipc/pty.test.ts
index cb8908e5c8f..d44ad8ef651 100644
--- a/src/main/ipc/pty.test.ts
+++ b/src/main/ipc/pty.test.ts
@@ -26,14 +26,6 @@ const expectedOmpStatusExtension = posix.join(
   'omp-managed-status-extension',
   'orca-agent-status.ts'
 )
-function expectedAttributionShimDir(): string {
-  return join(
-    '/tmp/orca-user-data',
-    'orca-terminal-attribution',
-    process.platform === 'win32' ? 'win32' : 'posix'
-  )
-}
-
 const {
   handleMock,
   onMock,
@@ -56,7 +48,6 @@ const {
   clearAgentHookPaneStateMock,
   registerPaneKeyAliasMock,
   piBuildPtyEnvMock,
-  piBuildStatusOnlyPtyEnvMock,
   piClearPtyMock,
   isPwshAvailableMock,
   wslUncDirectoryExistsAsyncMock,
@@ -96,7 +87,6 @@ const {
   clearAgentHookPaneStateMock: vi.fn(),
   registerPaneKeyAliasMock: vi.fn(),
   piBuildPtyEnvMock: vi.fn(),
-  piBuildStatusOnlyPtyEnvMock: vi.fn(),
   piClearPtyMock: vi.fn(),
   trackMock: vi.fn(),
   classifyErrorMock: vi.fn(),
@@ -182,7 +172,6 @@ vi.mock('../agent-hooks/server', () => ({
 vi.mock('../pi/titlebar-extension-service', () => ({
   piTitlebarExtensionService: {
     buildPtyEnv: piBuildPtyEnvMock,
-    buildStatusOnlyPtyEnv: piBuildStatusOnlyPtyEnvMock,
     clearPty: piClearPtyMock
   }
 }))
@@ -238,6 +227,7 @@ import { makePaneKey } from '../../shared/stable-pane-id'
 import { SETUP_AGENT_SEQUENCE_STARTUP_COMMAND_ENV } from '../../shared/setup-agent-sequencing'
 import {
   registerPtyHandlers,
+  buildPtyHostEnv,
   registerSshPtyProvider,
   clearPtyOwnershipForConnection,
   clearProviderPtyState,
@@ -257,6 +247,9 @@ import {
   restorePtyIncarnation,
   type PrepareCodexSessionResume
 } from './pty'
+import { __resetPersistedWindowsPathCacheForTests } from '../pty/windows-environment-path'
+import { LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS } from '../pty/legacy-terminal-shim-dir'
+import { __setWindowsPathRegistryLoaderForTests } from '../pty/windows-path-registry-reader'
 import { resetMacosLoginShellPreflightForTests } from '../providers/macos-tcc-login-shell'
 import {
   _resetHiddenRendererPtyDeliveryGateForTest,
@@ -398,7 +391,6 @@ describe('registerPtyHandlers', () => {
     clearAgentHookPaneStateMock.mockReset()
     registerPaneKeyAliasMock.mockReset()
     piBuildPtyEnvMock.mockReset()
-    piBuildStatusOnlyPtyEnvMock.mockReset()
     piClearPtyMock.mockReset()
     isPwshAvailableMock.mockReset()
     wslUncDirectoryExistsAsyncMock.mockReset()
@@ -501,10 +493,6 @@ describe('registerPtyHandlers', () => {
         }
       }
     )
-    piBuildStatusOnlyPtyEnvMock.mockReturnValue({
-      ORCA_PRIME_AGENT_STATUS_EXTENSION:
-        'C:\\Users\\test\\AppData\\Roaming\\Orca\\prime-agent-managed-status-extension\\orca-agent-status.ts'
-    })
     isPwshAvailableMock.mockReturnValue(false)
     spawnMock.mockReturnValue({
       onData: vi.fn(() => makeDisposable()),
@@ -1878,7 +1866,6 @@ describe('registerPtyHandlers', () => {
       launchContext?: { workspacePath?: string; launchAgent?: TuiAgent }
     ) => string | null,
     getSettings?: () => {
-      enableGitHubAttribution?: boolean
       agentStatusHooksEnabled?: boolean
       httpProxyUrl?: string
       httpProxyBypassRules?: string
@@ -1952,6 +1939,64 @@ describe('registerPtyHandlers', () => {
   }
 
   describe('spawn environment', () => {
+    it('refreshes the outer Windows PATH for a WSL spawn without forwarding it', async () => {
+      const originalPlatform = process.platform
+      Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+      __setWindowsPathRegistryLoaderForTests(() => ({
+        HK: { LM: 1, CU: 2 },
+        getRegistryKey: (root) => ({
+          Path: {
+            type: 1,
+            value:
+              root === 1
+                ? 'C:\\Windows\\System32'
+                : 'C:\\Python314;C:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps'
+          }
+        })
+      }))
+      __resetPersistedWindowsPathCacheForTests()
+
+      try {
+        const provider = new LocalPtyProvider({
+          buildSpawnEnv: (id, baseEnv, context) =>
+            buildPtyHostEnv(id, baseEnv, {
+              isPackaged: true,
+              userDataPath: '/tmp/orca-user-data',
+              selectedCodexHomePath: null,
+              agentStatusHooksEnabled: false,
+              isWsl: context?.isWsl,
+              wslDistro: context?.wslDistro
+            })
+        })
+        await provider.spawn({
+          cols: 80,
+          rows: 24,
+          cwd: '\\\\wsl.localhost\\Ubuntu\\home\\me\\repo',
+          shellOverride: 'wsl.exe',
+          terminalWindowsWslDistro: 'Ubuntu',
+          env: {
+            PATH: 'C:\\Orca\\bin;C:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps',
+            WSLENV: 'ORCA_TERMINAL_HANDLE/u'
+          }
+        })
+        const [file, , options] = spawnMock.mock.calls.at(-1)!
+
+        expect(file).toBe('wsl.exe')
+        expect(options.env.PATH).toBe(
+          'C:\\Orca\\bin;C:\\Windows\\System32;C:\\Python314;C:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps'
+        )
+        const forwardedKeys = options.env.WSLENV.split(':').map((entry) =>
+          entry.split('/')[0]!.toLowerCase()
+        )
+        expect(options.env.WSLENV).toContain('ORCA_TERMINAL_HANDLE/u')
+        expect(forwardedKeys).not.toContain('path')
+      } finally {
+        __resetPersistedWindowsPathCacheForTests()
+        __setWindowsPathRegistryLoaderForTests()
+        Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+      }
+    })
+
     it('publishes a lifecycle signal after a successful renderer spawn', async () => {
       await spawnAndGetEnv()
 
@@ -3081,59 +3126,6 @@ describe('registerPtyHandlers', () => {
       expect(env.ORCA_CLAUDE_AGENT_STATUS_SETTINGS).toBeUndefined()
     })
 
-    it('prepends local git/gh attribution shims when attribution is enabled', async () => {
-      const env = await spawnAndGetEnv(undefined, undefined, undefined, () => ({
-        enableGitHubAttribution: true
-      }))
-
-      expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBe('1')
-      expect(env.ORCA_GIT_COMMIT_TRAILER).toBe('Co-authored-by: Orca <help@stably.ai>')
-      expect(env.ORCA_GH_PR_FOOTER).toBe('Made with [Orca](https://github.com/stablyai/orca) 🐋')
-      expect(env.ORCA_GH_ISSUE_FOOTER).toBe('Made with [Orca](https://github.com/stablyai/orca) 🐋')
-      expect(env.PATH).toContain(expectedAttributionShimDir())
-    })
-
-    it('skips git/gh attribution shims when attribution is disabled', async () => {
-      const env = await spawnAndGetEnv(undefined, undefined, undefined, () => ({
-        enableGitHubAttribution: false
-      }))
-
-      expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
-      expect(env.ORCA_GIT_COMMIT_TRAILER).toBeUndefined()
-      expect(env.ORCA_GH_PR_FOOTER).toBeUndefined()
-      expect(env.ORCA_GH_ISSUE_FOOTER).toBeUndefined()
-      expect(env.PATH ?? '').not.toContain(expectedAttributionShimDir())
-    })
-
-    it('prepends git/gh attribution shims for daemon-backed local PTYs', async () => {
-      const daemonSpawn = vi.fn(async (options) => ({ id: 'daemon-pty', pid: 123, ...options }))
-      setLocalPtyProvider({
-        spawn: daemonSpawn,
-        write: vi.fn(),
-        resize: vi.fn(),
-        kill: vi.fn(),
-        shutdown: vi.fn(),
-        onData: vi.fn(() => vi.fn()),
-        onExit: vi.fn(() => vi.fn()),
-        listProcesses: vi.fn(async () => []),
-        getForegroundProcess: vi.fn(async () => null)
-      } as never)
-      handlers.clear()
-      registerPtyHandlers(mainWindow as never, undefined, undefined, (() => ({
-        enableGitHubAttribution: true
-      })) as never)
-
-      await handlers.get('pty:spawn')!(null, {
-        cols: 80,
-        rows: 24,
-        env: {}
-      })
-
-      const env = daemonSpawn.mock.calls.at(-1)![0].env
-      expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBe('1')
-      expect(env.PATH).toContain(expectedAttributionShimDir())
-    })
-
     it('overrides ambient CODEX_HOME with the Orca-managed home for system default', async () => {
       const env = await spawnAndGetEnv(
         undefined,
@@ -3435,7 +3427,6 @@ describe('registerPtyHandlers', () => {
           launchContext?: { workspacePath?: string; launchAgent?: TuiAgent }
         ) => string | null,
         getSettings?: () => {
-          enableGitHubAttribution?: boolean
           httpProxyUrl?: string
           httpProxyBypassRules?: string
         },
@@ -3497,7 +3488,6 @@ describe('registerPtyHandlers', () => {
           launchContext?: { workspacePath?: string; launchAgent?: TuiAgent }
         ) => string | null,
         getSettings?: () => {
-          enableGitHubAttribution?: boolean
           httpProxyUrl?: string
           httpProxyBypassRules?: string
         },
@@ -4225,10 +4215,13 @@ describe('registerPtyHandlers', () => {
         })
       })
 
-      it('bridges a host-managed Prime status extension into WSL without redirecting Prime home', async () => {
+      it('does not install or inject a Prime extension for an explicit WSL launch', async () => {
         await withWin32Platform(async () => {
           const env = await daemonSpawnAndGetEnv(
-            { PRIME_AGENT_CODING_AGENT_DIR: 'C:\\Users\\test\\.prime\\agent' },
+            {
+              PRIME_AGENT_CODING_AGENT_DIR: 'C:\\Users\\test\\.prime\\agent',
+              ORCA_PRIME_AGENT_STATUS_EXTENSION: 'C:\\stale\\orca-agent-status.ts'
+            },
             undefined,
             undefined,
             undefined,
@@ -4236,26 +4229,23 @@ describe('registerPtyHandlers', () => {
           )
 
           expect(piBuildPtyEnvMock).not.toHaveBeenCalled()
-          expect(piBuildStatusOnlyPtyEnvMock).toHaveBeenCalledWith('prime-agent')
           expect(env.ORCA_PRIME_AGENT_SOURCE_AGENT_DIR).toBeUndefined()
-          expect(env.ORCA_PRIME_AGENT_STATUS_EXTENSION).toBe(
-            'C:\\Users\\test\\AppData\\Roaming\\Orca\\prime-agent-managed-status-extension\\orca-agent-status.ts'
-          )
-          expect(env.ORCA_WSL_HOOK_INSTANCE).toBe('port5678')
+          expect(env.ORCA_PRIME_AGENT_STATUS_EXTENSION).toBeUndefined()
+          expect(env.ORCA_WSL_HOOK_INSTANCE).toBeUndefined()
           expect(env.PRIME_AGENT_CODING_AGENT_DIR).toBe('C:\\Users\\test\\.prime\\agent')
         })
       })
 
-      it('prepares the Prime bridge for a typed launch in a bare WSL shell', async () => {
+      it('does not prepare a Prime extension for a typed launch in a bare WSL shell', async () => {
         await withWin32Platform(async () => {
           const env = await daemonSpawnAndGetEnv({}, undefined, undefined, undefined, {
             shellOverride: 'wsl.exe'
           })
 
-          expect(piBuildStatusOnlyPtyEnvMock).toHaveBeenCalledWith('prime-agent')
-          expect(env.ORCA_PRIME_AGENT_STATUS_EXTENSION).toContain(
-            'prime-agent-managed-status-extension'
+          expect(piBuildPtyEnvMock.mock.calls.some(([, , kind]) => kind === 'prime-agent')).toBe(
+            false
           )
+          expect(env.ORCA_PRIME_AGENT_STATUS_EXTENSION).toBeUndefined()
           expect(env.PRIME_AGENT_CODING_AGENT_DIR).toBeUndefined()
         })
       })
@@ -4410,6 +4400,16 @@ describe('registerPtyHandlers', () => {
         expect(spawnOptions.env.ORCA_AGENT_HOOK_TOKEN).toBe('agent-token')
       })
 
+      it('asks surviving pre-upgrade daemons to delete legacy attribution env', async () => {
+        const spawnOptions = await daemonSpawnAndGetOptions({})
+
+        expect(spawnOptions.envToDelete).toEqual(
+          expect.arrayContaining([...LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS])
+        )
+        expect(spawnOptions.envToDelete).not.toContain('ORCA_REAL_GIT')
+        expect(spawnOptions.envToDelete).not.toContain('ORCA_REAL_GH')
+      })
+
       it('deletes stale Claude scoped settings env from runtime-created daemon PTYs', async () => {
         type RuntimeSpawnController = {
           spawn(args: {
@@ -4447,6 +4447,38 @@ describe('registerPtyHandlers', () => {
         expect(spawnOptions.env.ORCA_AGENT_HOOK_TOKEN).toBe('agent-token')
       })
 
+      it('asks surviving pre-upgrade daemons to delete legacy attribution env for runtime PTYs', async () => {
+        type RuntimeSpawnController = {
+          spawn(args: {
+            cols: number
+            rows: number
+            worktreeId?: string
+            env?: Record<string, string>
+          }): Promise<{ id: string }>
+        }
+        const daemonSpawn = setupDaemonAdapter()
+        const runtime = {
+          setPtyController: vi.fn(),
+          registerPty: vi.fn(),
+          noteTerminalSpawnCommand: vi.fn(),
+          onPtySpawned: vi.fn(),
+          onPtyExit: vi.fn(),
+          onPtyData: vi.fn()
+        }
+        handlers.clear()
+        registerPtyHandlers(mainWindow as never, runtime as never)
+        const controller = runtime.setPtyController.mock.calls[0]?.[0] as RuntimeSpawnController
+
+        await controller.spawn({ cols: 80, rows: 24, worktreeId: 'wt-runtime', env: {} })
+
+        const spawnOptions = daemonSpawn.mock.calls.at(-1)?.[0] as DaemonSpawnCall
+        expect(spawnOptions.envToDelete).toEqual(
+          expect.arrayContaining([...LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS])
+        )
+        expect(spawnOptions.envToDelete).not.toContain('ORCA_REAL_GIT')
+        expect(spawnOptions.envToDelete).not.toContain('ORCA_REAL_GH')
+      })
+
       it('strips inherited Claude child-session stamps from runtime-created PTYs', async () => {
         // Why: the runtime controller is the `orca` CLI / automation spawn path and
         // assembles envToDelete separately from the renderer's pty:spawn handler;
@@ -4822,33 +4854,38 @@ describe('registerPtyHandlers', () => {
           onPtyData: vi.fn()
         }
         handlers.clear()
-        registerPtyHandlers(mainWindow as never, runtime as never, undefined, (() => ({
-          enableGitHubAttribution: true
-        })) as never)
+        registerPtyHandlers(mainWindow as never, runtime as never)
         const controller = runtime.setPtyController.mock.calls[0]?.[0] as RuntimeSpawnController
 
-        await controller.spawn({
-          cols: 80,
-          rows: 24,
-          worktreeId: 'wt-runtime',
-          command: 'claude',
-          env: {
-            PATH: `/tmp/orca-agent-teams-bin${delimiter}/usr/bin`,
-            ORCA_AGENT_TEAMS_TEAM_ID: 'team-test',
-            TERM_PROGRAM: 'Orca',
-            ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/stale-attribution'
-          },
-          envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
-        })
+        // Why: dev mode makes buildPtyHostEnv prepend its own CLI shim on every platform, so
+        // the promotion below has something to beat instead of passing trivially.
+        const { app } = await import('electron')
+        const mockedApp = app as unknown as { isPackaged: boolean }
+        const prevPackaged = mockedApp.isPackaged
+        mockedApp.isPackaged = false
+        try {
+          await controller.spawn({
+            cols: 80,
+            rows: 24,
+            worktreeId: 'wt-runtime',
+            command: 'claude',
+            env: {
+              PATH: `/tmp/orca-agent-teams-bin${delimiter}/usr/bin`,
+              ORCA_AGENT_TEAMS_TEAM_ID: 'team-test',
+              TERM_PROGRAM: 'Orca'
+            },
+            envToDelete: ['TERM_PROGRAM']
+          })
+        } finally {
+          mockedApp.isPackaged = prevPackaged
+        }
 
         const spawnOptions = daemonSpawn.mock.calls.at(-1)?.[0] as DaemonSpawnCall
-        expect(spawnOptions.env.PATH.split(delimiter)[0]).toBe('/tmp/orca-agent-teams-bin')
-        expect(spawnOptions.env.PATH).toContain(expectedAttributionShimDir())
+        const spawnedPath = spawnOptions.env.PATH.split(delimiter)
+        expect(spawnedPath[0]).toBe('/tmp/orca-agent-teams-bin')
+        expect(spawnedPath.some((entry) => entry.includes(join('cli', 'bin')))).toBe(true)
         expect(spawnOptions.env.TERM_PROGRAM).toBeUndefined()
-        expect(spawnOptions.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
-        expect(spawnOptions.envToDelete).toEqual(
-          expect.arrayContaining(['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR'])
-        )
+        expect(spawnOptions.envToDelete).toEqual(expect.arrayContaining(['TERM_PROGRAM']))
       })
 
       it('strips inherited agent-hook endpoint env from development daemon PTYs', async () => {
@@ -4868,38 +4905,38 @@ describe('registerPtyHandlers', () => {
         }
       })
 
-      it('prepends attribution shims on the daemon path', async () => {
-        const env = await daemonSpawnAndGetEnv({}, undefined, () => ({
-          enableGitHubAttribution: true
-        }))
-        expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBe('1')
-        expect(env.PATH).toContain(expectedAttributionShimDir())
-      })
-
       it('keeps the Agent Teams tmux shim ahead of host PATH shims on daemon pty:spawn', async () => {
-        const spawnOptions = await daemonSpawnAndGetOptions(
-          {
-            PATH: `/tmp/orca-agent-teams-bin${delimiter}/usr/bin`,
-            ORCA_AGENT_TEAMS_TEAM_ID: 'team-test',
-            TERM_PROGRAM: 'Orca',
-            ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/stale-attribution'
-          },
-          undefined,
-          () => ({ enableGitHubAttribution: true }),
-          undefined,
-          {
-            command: 'claude',
-            envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
-          }
-        )
+        // Why: dev mode makes buildPtyHostEnv prepend its own CLI shim on every platform, so
+        // the promotion below has something to beat instead of passing trivially.
+        const { app } = await import('electron')
+        const mockedApp = app as unknown as { isPackaged: boolean }
+        const prevPackaged = mockedApp.isPackaged
+        mockedApp.isPackaged = false
+        let spawnOptions: Awaited<ReturnType<typeof daemonSpawnAndGetOptions>>
+        try {
+          spawnOptions = await daemonSpawnAndGetOptions(
+            {
+              PATH: `/tmp/orca-agent-teams-bin${delimiter}/usr/bin`,
+              ORCA_AGENT_TEAMS_TEAM_ID: 'team-test',
+              TERM_PROGRAM: 'Orca'
+            },
+            undefined,
+            undefined,
+            undefined,
+            {
+              command: 'claude',
+              envToDelete: ['TERM_PROGRAM']
+            }
+          )
+        } finally {
+          mockedApp.isPackaged = prevPackaged
+        }
 
-        expect(spawnOptions.env.PATH.split(delimiter)[0]).toBe('/tmp/orca-agent-teams-bin')
-        expect(spawnOptions.env.PATH).toContain(expectedAttributionShimDir())
+        const spawnedPath = spawnOptions.env.PATH.split(delimiter)
+        expect(spawnedPath[0]).toBe('/tmp/orca-agent-teams-bin')
+        expect(spawnedPath.some((entry) => entry.includes(join('cli', 'bin')))).toBe(true)
         expect(spawnOptions.env.TERM_PROGRAM).toBeUndefined()
-        expect(spawnOptions.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
-        expect(spawnOptions.envToDelete).toEqual(
-          expect.arrayContaining(['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR'])
-        )
+        expect(spawnOptions.envToDelete).toEqual(expect.arrayContaining(['TERM_PROGRAM']))
       })
 
       it('injects dev-mode ORCA_USER_DATA_PATH + dev CLI PATH on the daemon path', async () => {
@@ -4935,6 +4972,24 @@ describe('registerPtyHandlers', () => {
         }
       })
 
+      it('drops a legacy shim PATH entry inherited from the host process on the daemon path', async () => {
+        // Why: the daemon path passes a sparse env, so the prepends re-read PATH from
+        // process.env — the scrub must outlive that fallback (pre-upgrade host or parent pane).
+        const { app } = await import('electron')
+        const mockedApp = app as unknown as { isPackaged: boolean }
+        const prev = mockedApp.isPackaged
+        mockedApp.isPackaged = false
+        try {
+          const env = await daemonSpawnAndGetEnv({}, undefined, undefined, {
+            PATH: `/tmp/orca-user-data/orca-terminal-attribution/posix${delimiter}/system/bin`
+          })
+          expect(env.PATH).not.toContain('orca-terminal-attribution')
+          expect(env.PATH).toContain('/system/bin')
+        } finally {
+          mockedApp.isPackaged = prev
+        }
+      })
+
       it('defers indexed Git prompt guards from the daemon wire environment', async () => {
         const env = await daemonSpawnAndGetEnv(
           {
@@ -5114,14 +5169,6 @@ describe('registerPtyHandlers', () => {
         expect(env.ORCA_PI_SOURCE_AGENT_DIR).toBe('/ambient/pi/agent')
       })
 
-      it('skips attribution shims on the daemon path when the setting is disabled', async () => {
-        const env = await daemonSpawnAndGetEnv({ PATH: '/usr/bin' }, undefined, () => ({
-          enableGitHubAttribution: false
-        }))
-        expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
-        expect(env.PATH ?? '').not.toContain(expectedAttributionShimDir())
-      })
-
       it('does not mutate the caller-provided args.env on the daemon path', async () => {
         // Why: the handler clones baseEnv so IPC-provided env stays pristine; a regression would leak Orca host env back into the renderer's reused copy.
         const daemonSpawn = setupDaemonAdapter()
@@ -5299,7 +5346,6 @@ describe('registerPtyHandlers', () => {
         // Why: host-local vars must be absent over SSH (they point at the local host/disk) — shipping them is useless or a credential leak.
         expect(env.ORCA_AGENT_HOOK_PORT).toBeUndefined()
         expect(env.ORCA_AGENT_HOOK_TOKEN).toBeUndefined()
-        expect(env.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
         expect(env.OPENCODE_CONFIG_DIR).toBeUndefined()
         expect(env.ORCA_OPENCODE_CONFIG_DIR).toBeUndefined()
         expect(env.ORCA_OPENCODE_SOURCE_CONFIG_DIR).toBeUndefined()
@@ -6250,7 +6296,7 @@ describe('registerPtyHandlers', () => {
         expect(runtime.onPtyExit).toHaveBeenCalledWith('remote-pty', -1, undefined)
       })
 
-      it('preserves an SSH lease when runtime controller kill shutdown fails transiently', async () => {
+      it('retires a rejected SSH PTY after generic kill shutdown fails transiently', async () => {
         const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
         const store = {
           markSshRemotePtyLease: vi.fn()
@@ -6293,22 +6339,30 @@ describe('registerPtyHandlers', () => {
         )
         const controller = runtime.setPtyController.mock.calls[0]?.[0] as {
           kill: (ptyId: string) => boolean
+          retireRejectedPty: (ptyId: string) => void
         }
 
         try {
           expect(controller.kill('remote-pty')).toBe(true)
           await new Promise((resolve) => setImmediate(resolve))
+          expect(store.markSshRemotePtyLease).not.toHaveBeenCalledWith(
+            'ssh-1',
+            'remote-pty',
+            'terminated'
+          )
+          controller.retireRejectedPty('remote-pty')
         } finally {
           warnSpy.mockRestore()
           deletePtyOwnership('remote-pty')
         }
 
-        expect(store.markSshRemotePtyLease).not.toHaveBeenCalledWith(
+        expect(store.markSshRemotePtyLease).toHaveBeenCalledWith(
           'ssh-1',
           'remote-pty',
           'terminated'
         )
         expect(runtime.onPtyExit).toHaveBeenCalledWith('remote-pty', -1, undefined)
+        expect(runtime.onPtyExit).toHaveBeenCalledWith('remote-pty', 0, undefined)
       })
 
       it('strips ORCA_PANE_KEY/TAB_ID/WORKTREE_ID from SSH spawn env when remote agent hooks are disabled', async () => {
@@ -8133,8 +8187,7 @@ describe('registerPtyHandlers', () => {
         TMUX: '/tmp/orca-claude-agent-teams/team-stale,0,1',
         ORCA_AGENT_TEAMS_TEAM_ID: 'team-stale',
         ORCA_AGENT_TEAMS_TOKEN: 'stale-token',
-        TERM_PROGRAM: 'Orca',
-        ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/stale-attribution'
+        TERM_PROGRAM: 'Orca'
       },
       launchConfig: {
         agentCommand: 'claude --teammate-mode auto',
@@ -8167,7 +8220,6 @@ describe('registerPtyHandlers', () => {
     })
     expect(spawnOptions.env.PATH.split(delimiter)[0]).toBe('/tmp/fresh-agent-teams')
     expect(spawnOptions.env.TERM_PROGRAM).toBeUndefined()
-    expect(spawnOptions.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
     expect(result.launchConfig?.agentEnv).toMatchObject({
       CLAUDE_PROFILE: 'captured',
       CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: '1',
@@ -8596,6 +8648,86 @@ describe('registerPtyHandlers', () => {
     })
   })
 
+  it('shuts down a split PTY when its expected source binding was retired', async () => {
+    type RuntimeSpawnController = {
+      spawn(args: {
+        cols: number
+        rows: number
+        worktreeId: string
+        tabId: string
+        leafId: string
+        persistHostSessionBinding: boolean
+        expectedSourceBinding: {
+          worktreeId: string
+          tabId: string
+          leafId: string
+          ptyId: string
+        }
+      }): Promise<{ id: string }>
+    }
+    const proc = {
+      onData: vi.fn(),
+      onExit: vi.fn(),
+      write: vi.fn(),
+      resize: vi.fn(),
+      kill: vi.fn(),
+      process: 'zsh',
+      pid: 12345
+    }
+    spawnMock.mockReturnValue(proc)
+    const store = { persistPtyBinding: vi.fn(() => false) }
+    let controller: RuntimeSpawnController | null = null
+    const runtime = {
+      setPtyController: vi.fn((value) => {
+        controller = value
+      }),
+      preAllocateHandleForPty: vi.fn(() => 'term_expected'),
+      registerPreAllocatedHandleForPty: vi.fn(),
+      registerPty: vi.fn(),
+      noteTerminalSpawnCommand: vi.fn(),
+      onPtySpawned: vi.fn(),
+      onPtyExit: vi.fn(),
+      onPtyData: vi.fn()
+    }
+    const error = vi.spyOn(console, 'error').mockImplementation(() => {})
+    registerPtyHandlers(
+      mainWindow as never,
+      runtime as never,
+      undefined,
+      undefined,
+      undefined,
+      store as never
+    )
+    const leafId = '22222222-2222-4222-8222-222222222222'
+    const expectedSourceBinding = {
+      worktreeId: 'wt-1',
+      tabId: 'tab-headless',
+      leafId: '11111111-1111-4111-8111-111111111111',
+      ptyId: 'pty-source'
+    }
+
+    try {
+      await expect(
+        (controller as unknown as RuntimeSpawnController).spawn({
+          cols: 80,
+          rows: 24,
+          worktreeId: 'wt-1',
+          tabId: 'tab-headless',
+          leafId,
+          persistHostSessionBinding: true,
+          expectedSourceBinding
+        })
+      ).rejects.toThrow('terminal_split_source_not_found')
+    } finally {
+      error.mockRestore()
+    }
+
+    expect(store.persistPtyBinding).toHaveBeenCalledWith(
+      expect.objectContaining({ expectedSourceBinding })
+    )
+    expect(proc.kill).toHaveBeenCalledOnce()
+  })
+
   it('reports lower-owner commit before rejecting an early-exited runtime incarnation', async () => {
     const persistPtyBinding = vi.fn()
     const onPtySpawnCommitted = vi.fn()
@@ -17608,6 +17740,87 @@ describe('registerPtyHandlers', () => {
     )
   })
 
+  it('pairs the daemon kitty flags with the reconciled boundary when no bytes crossed mid-spawn', async () => {
+    setLocalPtyProvider({
+      spawn: vi.fn(async () => ({
+        id: 'pty-restored',
+        isReattach: true,
+        providerSequence: { value: 900, generation: 'continued' as const },
+        snapshotKittyKeyboardFlags: 8
+      })),
+      write: vi.fn(),
+      resize: vi.fn(),
+      kill: vi.fn(),
+      shutdown: vi.fn(),
+      onData: vi.fn(() => vi.fn()),
+      onExit: vi.fn(() => vi.fn()),
+      listProcesses: vi.fn(async () => []),
+      getForegroundProcess: vi.fn(async () => null)
+    } as never)
+    const runtime = {
+      setPtyController: vi.fn(),
+      noteTerminalSpawnCommand: vi.fn(),
+      getPtyOutputSequence: vi.fn().mockReturnValue(7),
+      synchronizePtyOutputSequenceFromProvider: vi.fn().mockReturnValue(920),
+      onPtySpawned: vi.fn(),
+      onPtyData: vi.fn(),
+      onPtyExit: vi.fn(),
+      createPreAllocatedTerminalHandle: vi.fn(() => null),
+      preAllocateHandleForPty: vi.fn()
+    }
+    registerPtyHandlers(mainWindow as never, runtime as never)
+
+    const reply = (await handlers.get('pty:spawn')!(null, { cols: 80, rows: 24 })) as {
+      snapshotSeq?: number
+      snapshotKittyKeyboardFlags?: number
+    }
+
+    expect(reply.snapshotKittyKeyboardFlags).toBe(8)
+    expect(reply.snapshotSeq).toBe(920)
+  })
+
+  it('drops the daemon kitty flags claim when bytes crossed the data socket mid-spawn', async () => {
+    setLocalPtyProvider({
+      spawn: vi.fn(async () => ({
+        id: 'pty-restored',
+        isReattach: true,
+        providerSequence: { value: 900, generation: 'continued' as const },
+        snapshotKittyKeyboardFlags: 8
+      })),
+      write: vi.fn(),
+      resize: vi.fn(),
+      kill: vi.fn(),
+      shutdown: vi.fn(),
+      onData: vi.fn(() => vi.fn()),
+      onExit: vi.fn(() => vi.fn()),
+      listProcesses: vi.fn(async () => []),
+      getForegroundProcess: vi.fn(async () => null)
+    } as never)
+    const runtime = {
+      setPtyController: vi.fn(),
+      noteTerminalSpawnCommand: vi.fn(),
+      // 7 at spawn start, 20 at reconcile: bytes arrived during the spawn RPC.
+      getPtyOutputSequence: vi.fn().mockReturnValueOnce(7).mockReturnValue(20),
+      synchronizePtyOutputSequenceFromProvider: vi.fn().mockReturnValue(920),
+      onPtySpawned: vi.fn(),
+      onPtyData: vi.fn(),
+      onPtyExit: vi.fn(),
+      createPreAllocatedTerminalHandle: vi.fn(() => null),
+      preAllocateHandleForPty: vi.fn()
+    }
+    registerPtyHandlers(mainWindow as never, runtime as never)
+
+    const reply = (await handlers.get('pty:spawn')!(null, { cols: 80, rows: 24 })) as {
+      snapshotSeq?: number
+      snapshotKittyKeyboardFlags?: number
+    }
+
+    // The reconciled boundary covers bytes the daemon's flags were proven
+    // BEFORE — publishing both would erase a negotiation the pane scanned live.
+    expect(reply.snapshotKittyKeyboardFlags).toBeUndefined()
+    expect(reply.snapshotSeq).toBeUndefined()
+  })
+
   it('records the launch Codex account for a fresh spawn but not for a reattach', async () => {
     const spawn = vi
       .fn()
diff --git a/src/main/ipc/pty.ts b/src/main/ipc/pty.ts
index e0c5fad3442..c2877303561 100644
--- a/src/main/ipc/pty.ts
+++ b/src/main/ipc/pty.ts
@@ -13,7 +13,7 @@ import {
 } from 'electron'
 export { getBashShellReadyRcfileContent } from '../providers/local-pty-shell-ready'
 import type { OrcaRuntimeService } from '../runtime/orca-runtime'
-import type { Store } from '../persistence'
+import type { PtyBindingSourceExpectation, Store } from '../persistence'
 import { retireTerminalSurfaceFromPersistence } from '../runtime/mobile-session-terminal-persistence-retirement'
 import type { GlobalSettings, TuiAgent } from '../../shared/types'
 import { toSshExecutionHostId } from '../../shared/execution-host'
@@ -110,11 +110,12 @@ import {
   markClaudePtyExited,
   markClaudePtySpawned
 } from '../claude-accounts/live-pty-gate'
-import {
-  applyTerminalAttributionEnv,
-  resolveAttributionShellFamily
-} from '../attribution/terminal-attribution'
 import { ensureLinuxTerminalOrcaCliShimDir } from '../cli/linux-terminal-orca-cli-shim'
+import {
+  isLegacyTerminalShimPathEntry,
+  LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS,
+  stripLegacyTerminalShimEnv
+} from '../pty/legacy-terminal-shim-dir'
 import { registerPty, unregisterPty } from '../memory/pty-registry'
 import { advertisedUrlWatcher } from '../ports/advertised-url-watcher'
 import { track } from '../telemetry/client'
@@ -132,7 +133,7 @@ import {
 import { isRemoteAgentHooksEnabled } from '../../shared/agent-hook-relay'
 import { createTerminalSessionStateSaveFailureMessage } from '../../shared/terminal-session-state-save-failure'
 import { RendererTerminalSerializerReadiness } from './renderer-terminal-serializer-readiness'
-import { readShellStartupEnvVar } from '../pty/shell-startup-env'
+import { readSessionShellStartupEnvVar } from '../pty/shell-startup-env'
 import {
   isTerminalLeafId,
   makePaneKey,
@@ -140,6 +141,7 @@ import {
   parsePaneKey
 } from '../../shared/stable-pane-id'
 import { isValidTerminalTabId } from '../../shared/terminal-tab-id'
+import { parseTerminalKittyKeyboardFlags } from '../../shared/terminal-kitty-keyboard-flags'
 import {
   resolveTerminalStartupCwdForWorkspace,
   type TerminalStartupCwdMissingDirFallback
@@ -1122,14 +1124,12 @@ export type BuildPtyHostEnvOptions = {
    *  and strip only an inherited Orca-owned override so nested Orca panes do not
    *  leak the parent's managed home. A user-set CODEX_HOME is preserved. */
   stripInheritedOrcaCodexHome?: boolean
-  githubAttributionEnabled: boolean
   /** Launch command the renderer chose (e.g. 'pi', 'omp', 'claude'); resolves the per-agent
    *  extension target for Pi/OMP. Undefined for bare shells → defaults to Pi. NEVER infer from
    *  disk presence (cross-agent shadowing when both dirs exist). */
   launchCommand?: string
   /** Trusted agent identity for wrapped commands that cannot be recognized from text. */
   launchAgent?: TuiAgent
-  shellPath?: string
   isWsl?: boolean
   /** Distro for WSL spawns (null = Windows default distro); drives the WSL hook relay + endpoint repoint. Only read when isWsl. */
   wslDistro?: string | null
@@ -1157,7 +1157,9 @@ function promoteAgentTeamsShimPath(
     return
   }
   const shimPath = firstPathEntry(requestedPath)
-  if (!shimPath) {
+  // Why: requestedPath is captured before buildPtyHostEnv scrubs, so a legacy entry that
+  // reached the front would be re-prepended here and outlive the scrub.
+  if (!shimPath || isLegacyTerminalShimPathEntry(shimPath)) {
     return
   }
   const currentPathKey = env.PATH !== undefined || env.Path === undefined ? 'PATH' : 'Path'
@@ -1507,11 +1509,7 @@ function resolvePiAgentSourceDir(
   if (kind === 'prime-agent') {
     return (
       readEnvWithProcessFallback(baseEnv, primaryKey) ??
-      readShellStartupEnvVar(
-        primaryKey,
-        baseEnv.HOME ?? process.env.HOME,
-        baseEnv.SHELL ?? process.env.SHELL
-      )
+      readSessionShellStartupEnvVar(primaryKey, baseEnv)
     )
   }
 
@@ -1526,11 +1524,7 @@ function resolvePiAgentSourceDir(
     return publicDir
   }
 
-  return readShellStartupEnvVar(
-    primaryKey,
-    baseEnv.HOME ?? process.env.HOME,
-    baseEnv.SHELL ?? process.env.SHELL
-  )
+  return readSessionShellStartupEnvVar(primaryKey, baseEnv)
 }
 
 function resolveScopedPiAgentSourceDir(
@@ -1581,11 +1575,6 @@ function exposePiManagedExtensionEnv(
     } else {
       delete baseEnv.ORCA_PRIME_AGENT_SOURCE_AGENT_DIR
     }
-    if (managedEnv.ORCA_PRIME_AGENT_STATUS_EXTENSION) {
-      baseEnv.ORCA_PRIME_AGENT_STATUS_EXTENSION = managedEnv.ORCA_PRIME_AGENT_STATUS_EXTENSION
-    } else {
-      delete baseEnv.ORCA_PRIME_AGENT_STATUS_EXTENSION
-    }
     return
   }
   delete baseEnv.ORCA_PI_CODING_AGENT_DIR
@@ -1684,14 +1673,7 @@ function resolveOpenCodeSourceConfigDir(baseEnv: Record<string, string>): string
     return undefined
   }
 
-  return (
-    configDir ??
-    readShellStartupEnvVar(
-      'OPENCODE_CONFIG_DIR',
-      baseEnv.HOME ?? process.env.HOME,
-      baseEnv.SHELL ?? process.env.SHELL
-    )
-  )
+  return configDir ?? readSessionShellStartupEnvVar('OPENCODE_CONFIG_DIR', baseEnv)
 }
 
 /**
@@ -1728,8 +1710,6 @@ export function buildPtyHostEnv(
   })
 
   const shouldPrepareOmpShadow = piAgentKind === 'omp' || !hasLaunchCommand
-  const shouldPreparePrimeStatus =
-    piAgentKind === 'prime-agent' || (opts.isWsl && !hasLaunchCommand)
   // Why: source shadows are agent-scoped; trusting the other kind's source reintroduces Pi/OMP extension-state shadowing.
   const preexistingPiAgentDir = resolvePiAgentSourceDir(baseEnv, 'pi')
   const preexistingOmpAgentDir =
@@ -1788,12 +1768,6 @@ export function buildPtyHostEnv(
     if (opts.isWsl === true) {
       // Why: hook POSTs to 127.0.0.1 die inside WSL's NAT namespace; use the guest-resident relay's endpoint instead of the Windows one.
       const distro = opts.wslDistro ?? null
-      const hookInstance = wslHookRelayManager.getInstanceKey()
-      if (hookInstance) {
-        baseEnv.ORCA_WSL_HOOK_INSTANCE = hookInstance
-      } else {
-        delete baseEnv.ORCA_WSL_HOOK_INSTANCE
-      }
       wslHookRelayManager.ensureForDistro(distro)
       const guestEndpoint = wslHookRelayManager.getGuestEndpointFilePath(distro)
       if (guestEndpoint) {
@@ -1840,14 +1814,13 @@ export function buildPtyHostEnv(
       exposePiManagedExtensionEnv(baseEnv, 'omp', ompEnv)
     }
 
-    if (shouldPreparePrimeStatus) {
-      // Why: the Windows host cannot safely resolve or write Prime's guest
-      // config root; WSL loads the host-managed status file explicitly.
-      const primeEnv = opts.isWsl
-        ? piTitlebarExtensionService.buildStatusOnlyPtyEnv('prime-agent')
-        : piTitlebarExtensionService.buildPtyEnv(id, preexistingPrimeAgentDir, 'prime-agent', {
-            materializeDefaultHome: explicitPiAgentKind === 'prime-agent'
-          })
+    if (piAgentKind === 'prime-agent' && !opts.isWsl) {
+      const primeEnv = piTitlebarExtensionService.buildPtyEnv(
+        id,
+        preexistingPrimeAgentDir,
+        'prime-agent',
+        { materializeDefaultHome: explicitPiAgentKind === 'prime-agent' }
+      )
       Object.assign(baseEnv, primeEnv)
       exposePiManagedExtensionEnv(baseEnv, 'prime-agent', primeEnv)
     }
@@ -1920,22 +1893,9 @@ export function buildPtyHostEnv(
       : bundledCliBin
   }
 
-  // Why: PATH shims keep GitHub attribution scoped to Orca's own PTYs without rewriting user git config.
-  if (!opts.githubAttributionEnabled) {
-    delete baseEnv.ORCA_ENABLE_GIT_ATTRIBUTION
-    delete baseEnv.ORCA_GIT_COMMIT_TRAILER
-    delete baseEnv.ORCA_GH_PR_FOOTER
-    delete baseEnv.ORCA_GH_ISSUE_FOOTER
-    delete baseEnv.ORCA_ATTRIBUTION_SHIM_DIR
-  }
-  applyTerminalAttributionEnv(baseEnv, {
-    enabled: opts.githubAttributionEnabled,
-    userDataPath: opts.userDataPath,
-    shellFamily: resolveAttributionShellFamily({
-      shellPath: opts.shellPath,
-      isWsl: opts.isWsl
-    })
-  })
+  // Why: must run after the prepends above — they re-read PATH from the unscrubbed
+  // process.env when baseEnv carries none, which is the daemon path's normal shape.
+  stripLegacyTerminalShimEnv(baseEnv, process.platform)
 
   return baseEnv
 }
@@ -2482,10 +2442,8 @@ export function registerPtyHandlers(
             skipCodexHomeEnv,
             settings: getSettings?.()
           }),
-          githubAttributionEnabled: getSettings?.()?.enableGitHubAttribution ?? false,
           launchCommand: ctx?.command,
           launchAgent: ctx?.launchAgent,
-          shellPath: ctx?.shellPath,
           isWsl: ctx?.isWsl,
           wslDistro: ctx?.wslDistro ?? null,
           agentStatusHooksEnabled: isAgentStatusHooksEnabled(getSettings?.()),
@@ -3605,6 +3563,23 @@ export function registerPtyHandlers(
     syntheticKillExitPtyIds.set(id, cleanupTimer)
   }
 
+  // Why: a rejected split retires its PTY while kill's shutdown is still in flight; kill's late
+  // synthetic exit must not land afterwards, or an SSH pane's code -1 would re-preserve the
+  // surface the retirement just removed. Timed like the duplicate window so a reused id is free.
+  const retiredRejectedPtyIds = new Map<string, NodeJS.Timeout>()
+
+  function rememberRetiredRejectedPty(id: string): void {
+    const existing = retiredRejectedPtyIds.get(id)
+    if (existing) {
+      clearTimeout(existing)
+    }
+    const cleanupTimer = setTimeout(() => {
+      retiredRejectedPtyIds.delete(id)
+    }, SYNTHETIC_KILL_EXIT_DUPLICATE_WINDOW_MS)
+    cleanupTimer.unref?.()
+    retiredRejectedPtyIds.set(id, cleanupTimer)
+  }
+
   function consumeSyntheticKillExit(id: string): boolean {
     const cleanupTimer = syntheticKillExitPtyIds.get(id)
     if (!cleanupTimer) {
@@ -4063,6 +4038,7 @@ export function registerPtyHandlers(
     rows: number
     seq?: number
     lastTitle?: string
+    kittyKeyboardFlags?: number
   } | null
   const pendingSerializeRequests = new Map<
     string,
@@ -4091,6 +4067,7 @@ export function registerPtyHandlers(
           rows?: unknown
           seq?: unknown
           lastTitle?: unknown
+          kittyKeyboardFlags?: unknown
         } | null
       }
     ) => {
@@ -4110,6 +4087,7 @@ export function registerPtyHandlers(
           rows: number
           seq?: number
           lastTitle?: string
+          kittyKeyboardFlags?: number
         } = {
           data: snapshot.data,
           cols: snapshot.cols,
@@ -4121,6 +4099,12 @@ export function registerPtyHandlers(
         if (typeof snapshot.lastTitle === 'string' && snapshot.lastTitle.length > 0) {
           result.lastTitle = snapshot.lastTitle
         }
+        // Why gated on seq: without a boundary the flags cannot be reconciled
+        // against live bytes, so they prove nothing.
+        const kittyKeyboardFlags = parseTerminalKittyKeyboardFlags(snapshot.kittyKeyboardFlags)
+        if (result.seq !== undefined && kittyKeyboardFlags !== undefined) {
+          result.kittyKeyboardFlags = kittyKeyboardFlags
+        }
         settleSerializeRequest(args.requestId, result)
       } else {
         settleSerializeRequest(args.requestId, null)
@@ -4587,6 +4571,7 @@ export function registerPtyHandlers(
         worktreeId: string
         tabId: string
         leafId: string
+        expectedSourceBinding?: PtyBindingSourceExpectation
       } | null = null
       if (shouldPersistHostSessionBinding) {
         if (
@@ -4605,7 +4590,10 @@ export function registerPtyHandlers(
           store,
           worktreeId: args.worktreeId,
           tabId: args.tabId,
-          leafId: args.leafId
+          leafId: args.leafId,
+          ...(args.expectedSourceBinding
+            ? { expectedSourceBinding: args.expectedSourceBinding }
+            : {})
         }
       }
       const sshScopedEnv = stripRemotePaneEnvWhenHooksDisabled(args.connectionId, args.env)
@@ -4698,10 +4686,8 @@ export function registerPtyHandlers(
           selectedCodexHomePath,
           skipCodexHomeEnv,
           stripInheritedOrcaCodexHome,
-          githubAttributionEnabled: getSettings?.()?.enableGitHubAttribution ?? false,
           launchCommand,
           launchAgent: isTuiAgent(args.launchAgent) ? args.launchAgent : undefined,
-          shellPath: daemonShellOverride ?? process.env.COMSPEC,
           isWsl: shouldSkipCodexHomeEnvForWindowsShell(daemonShellOverride, cwd),
           wslDistro: codexSelectionTarget.runtime === 'wsl' ? expectedWslDistro : null,
           agentStatusHooksEnabled: isAgentStatusHooksEnabled(getSettings?.()),
@@ -4747,6 +4733,8 @@ export function registerPtyHandlers(
       spawnOptions.envToDelete = mergePtyEnvDeletions(
         authEnvToDelete,
         args.envToDelete ?? [],
+        // Why: disable old hosts without removing ORCA_REAL_* while their Windows shim remains on PATH.
+        isDaemonHostSpawn || args.connectionId ? LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS : [],
         isDaemonHostSpawn ? getInheritedAgentHookEnvKeysToDelete(env) : [],
         // Why: ungated, unlike the agent-hook keys — the local provider and the relay host also spread their own process.env into every spawn.
         getInheritedClaudeSessionStampEnvKeysToDelete(env)
@@ -4900,6 +4888,15 @@ export function registerPtyHandlers(
       let stablePaneBindingPersisted = false
       let rejectedRegistrationCandidate: PtySpawnResult | null = null
       let pendingRegistrationPtyId: string | null = null
+      // Why hoisted to the reply scope: main reconciles the provider sequence
+      // deep inside the spawn path, but the pane needs that renderer-domain
+      // boundary beside the daemon snapshot's kitty flags.
+      let reconciledSnapshotSeq: number | null = null
+      // False when bytes crossed the data socket during the spawn RPC: the
+      // reconciled boundary covers them, but the daemon proved its kitty flags
+      // before they existed, so the claim must not erase what the pane may
+      // have scanned from those bytes live.
+      let snapshotKittyFlagsCoverReconciledSeq = true
       let preparedProvisionalExecutionContext = false
       let releaseWorktreeSpawn: (() => void) | undefined
       try {
@@ -5050,11 +5047,19 @@ export function registerPtyHandlers(
           // Why: admission precedes sequence/context state and every durable publication below.
           runtime?.assertPtyRegistrationAllowed?.(result.id, result.incarnationId)
           if (result.providerSequence) {
-            runtime?.synchronizePtyOutputSequenceFromProvider?.(
-              result.id,
-              result.providerSequence,
-              sequenceBeforeProviderSpawn
-            )
+            const runtimeSequenceBeforeReconcile = runtime?.getPtyOutputSequence?.(result.id) ?? 0
+            // Why kept: this is the reattach boundary in the RENDERER's sequence
+            // domain, and the daemon snapshot's kitty flags mean nothing without
+            // the boundary they were proven at.
+            reconciledSnapshotSeq =
+              runtime?.synchronizePtyOutputSequenceFromProvider?.(
+                result.id,
+                result.providerSequence,
+                sequenceBeforeProviderSpawn
+              ) ?? null
+            if (runtimeSequenceBeforeReconcile > sequenceBeforeProviderSpawn) {
+              snapshotKittyFlagsCoverReconciledSeq = false
+            }
           }
           ensureWslHookRelayForReattach(result, args.connectionId)
           runtime?.preparePtyExecutionContext?.(
@@ -5225,15 +5230,19 @@ export function registerPtyHandlers(
               leafId: hostSessionBinding.leafId,
               ptyId: result.id,
               ...(result.incarnationId ? { incarnationId: result.incarnationId } : {}),
-              ...(cwd ? { startupCwd: cwd } : {})
+              ...(cwd ? { startupCwd: cwd } : {}),
+              ...(hostSessionBinding.expectedSourceBinding
+                ? { expectedSourceBinding: hostSessionBinding.expectedSourceBinding }
+                : {})
             }
-            if (args.connectionId) {
-              hostSessionBinding.store.persistPtyBinding(
-                binding,
-                toSshExecutionHostId(args.connectionId)
-              )
-            } else {
-              hostSessionBinding.store.persistPtyBinding(binding)
+            const persisted = args.connectionId
+              ? hostSessionBinding.store.persistPtyBinding(
+                  binding,
+                  toSshExecutionHostId(args.connectionId)
+                )
+              : hostSessionBinding.store.persistPtyBinding(binding)
+            if (persisted === false) {
+              throw new Error('terminal_split_source_not_found')
             }
           } catch (err) {
             console.error('[pty] failed to persist runtime PTY binding after spawn:', err)
@@ -5246,6 +5255,9 @@ export function registerPtyHandlers(
               }
               clearProviderPtyState(result.id)
             }
+            if (err instanceof Error && err.message === 'terminal_split_source_not_found') {
+              throw err
+            }
             throw Object.assign(new Error(createTerminalSessionStateSaveFailureMessage()), {
               agentSessionOperationOutcome: 'unknown' as const
             })
@@ -5356,6 +5368,11 @@ export function registerPtyHandlers(
         }
         resolvePaneSpawnReservation(paneSpawnReservationKey, paneSpawnReservation, {
           ...result,
+          ...(typeof result.snapshotKittyKeyboardFlags === 'number' &&
+          reconciledSnapshotSeq !== null &&
+          snapshotKittyFlagsCoverReconciledSeq
+            ? { snapshotSeq: reconciledSnapshotSeq }
+            : { snapshotKittyKeyboardFlags: undefined }),
           isReattach: true
         })
         return response
@@ -5472,19 +5489,23 @@ export function registerPtyHandlers(
         // Why: controller is synchronous, but keep ownership until async shutdown proves whether the provider emitted an exit.
         void shutdownProviderAndDetectExit(provider, ptyId, { immediate: false })
           .then((providerExitObserved) => {
+            const retired = retiredRejectedPtyIds.has(ptyId)
             const incarnationId = finishPtyShutdown(ptyId, connectionId, store)
-            if (!providerExitObserved) {
+            if (!providerExitObserved && !retired) {
               runtime?.onPtyExit(ptyId, -1, incarnationId)
               rememberSyntheticKillExit(ptyId)
               sendPtyExitToRenderer({ id: ptyId, code: -1 })
             }
           })
           .catch((err) => {
+            const retired = retiredRejectedPtyIds.has(ptyId)
             if (isPtyAlreadyGoneError(err)) {
               const incarnationId = finishPtyShutdown(ptyId, connectionId, store)
-              runtime?.onPtyExit(ptyId, -1, incarnationId)
-              rememberSyntheticKillExit(ptyId)
-              sendPtyExitToRenderer({ id: ptyId, code: -1 })
+              if (!retired) {
+                runtime?.onPtyExit(ptyId, -1, incarnationId)
+                rememberSyntheticKillExit(ptyId)
+                sendPtyExitToRenderer({ id: ptyId, code: -1 })
+              }
               return
             }
             console.warn(
@@ -5492,7 +5513,9 @@ export function registerPtyHandlers(
             )
             // Why: close runtime tails without clearing provider ownership, so
             // a retry can still target a PTY that survived the failed shutdown.
-            runtime?.onPtyExit(ptyId, -1, ptyIncarnationById.get(ptyId))
+            if (!retired) {
+              runtime?.onPtyExit(ptyId, -1, ptyIncarnationById.get(ptyId))
+            }
           })
         return true
       }
@@ -5503,12 +5526,31 @@ export function registerPtyHandlers(
           console.warn(
             `[pty] Failed to stop PTY ${ptyId}: ${err instanceof Error ? err.message : String(err)}`
           )
-          runtime?.onPtyExit(ptyId, -1, ptyIncarnationById.get(ptyId))
+          if (!retiredRejectedPtyIds.has(ptyId)) {
+            runtime?.onPtyExit(ptyId, -1, ptyIncarnationById.get(ptyId))
+          }
         })
         return true
       }
       return killWithCurrentProvider()
     },
+    retireRejectedPty: (ptyId) => {
+      rememberRetiredRejectedPty(ptyId)
+      // Why: a completed stop already cleared provider state, tombstoned the lease and told the
+      // renderer; repeating that double-fires the exit IPC. The runtime still needs code 0 so an
+      // SSH pane retires for good instead of staying preserved by the stop's negative exit.
+      if (!ptyOwnership.has(ptyId)) {
+        runtime?.onPtyExit(ptyId, 0, ptyIncarnationById.get(ptyId))
+        return
+      }
+      let connectionId: string | null | undefined = ptyOwnership.get(ptyId)
+      const parsedSshId = connectionId === undefined ? parseAppSshPtyId(ptyId) : null
+      connectionId ??= parsedSshId?.connectionId
+      const incarnationId = finishPtyShutdown(ptyId, connectionId, store)
+      runtime?.onPtyExit(ptyId, 0, incarnationId)
+      rememberSyntheticKillExit(ptyId)
+      sendPtyExitToRenderer({ id: ptyId, code: 0 })
+    },
     markReversibleStops: (ptyIds) => {
       for (const ptyId of ptyIds) {
         reversibleStopOwnersByPtyId.set(ptyId, (reversibleStopOwnersByPtyId.get(ptyId) ?? 0) + 1)
@@ -5732,6 +5774,7 @@ export function registerPtyHandlers(
       alternateScreen?: boolean
       scrollbackAnsi?: string
       pendingEscapeTailAnsi?: string
+      kittyKeyboardFlags?: number
     } | null> => {
       if (!runtime || typeof args?.id !== 'string' || args.id.length === 0) {
         return null
@@ -5917,6 +5960,15 @@ export function registerPtyHandlers(
       let stablePaneBindingPersisted = false
       let rejectedRegistrationCandidate: PtySpawnResult | null = null
       let pendingRegistrationPtyId: string | null = null
+      // Why hoisted to the reply scope: main reconciles the provider sequence
+      // deep inside the spawn path, but the pane needs that renderer-domain
+      // boundary beside the daemon snapshot's kitty flags.
+      let reconciledSnapshotSeq: number | null = null
+      // False when bytes crossed the data socket during the spawn RPC: the
+      // reconciled boundary covers them, but the daemon proved its kitty flags
+      // before they existed, so the claim must not erase what the pane may
+      // have scanned from those bytes live.
+      let snapshotKittyFlagsCoverReconciledSeq = true
       let preparedProvisionalExecutionContext = false
       let releaseWorktreeSpawn: (() => void) | undefined
       try {
@@ -6174,9 +6226,7 @@ export function registerPtyHandlers(
         const requestedAgentTeamsPath = baseEnv?.ORCA_AGENT_TEAMS_TEAM_ID
           ? baseEnv[resolvePathEnvKey(baseEnv, process.platform)]
           : undefined
-        const agentTeamsEnvToDelete = shouldRefreshAgentTeamsEnv
-          ? ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
-          : undefined
+        const agentTeamsEnvToDelete = shouldRefreshAgentTeamsEnv ? ['TERM_PROGRAM'] : undefined
         if (baseEnv && stablePaneKey) {
           baseEnv.ORCA_PANE_KEY = stablePaneKey
           if (typeof args.tabId === 'string') {
@@ -6315,10 +6365,8 @@ export function registerPtyHandlers(
               selectedCodexHomePath,
               skipCodexHomeEnv,
               stripInheritedOrcaCodexHome,
-              githubAttributionEnabled: getSettings?.()?.enableGitHubAttribution ?? false,
               launchCommand,
               launchAgent: isTuiAgent(args.launchAgent) ? args.launchAgent : undefined,
-              shellPath: effectiveShellOverride ?? process.env.COMSPEC,
               isWsl: shouldSkipCodexHomeEnvForWindowsShell(effectiveShellOverride, cwd),
               wslDistro: codexSelectionTarget.runtime === 'wsl' ? expectedWslDistro : null,
               agentStatusHooksEnabled: isAgentStatusHooksEnabled(getSettings?.()),
@@ -6351,6 +6399,8 @@ export function registerPtyHandlers(
           envToDelete,
           args.envToDelete ?? [],
           agentTeamsEnvToDelete ?? [],
+          // Why: disable old hosts without removing ORCA_REAL_* while their Windows shim remains on PATH.
+          isDaemonHostSpawn || args.connectionId ? LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS : [],
           isDaemonHostSpawn ? getInheritedAgentHookEnvKeysToDelete(spawnEnv) : [],
           getInheritedClaudeSessionStampEnvKeysToDelete(spawnEnv),
           skipCodexHomeEnv ? CODEX_HOME_ENV_KEYS : [],
@@ -6537,11 +6587,19 @@ export function registerPtyHandlers(
           assertSpawnReplyWasLive(result)
           runtime?.assertPtyRegistrationAllowed?.(result.id, result.incarnationId)
           if (result.providerSequence) {
-            runtime?.synchronizePtyOutputSequenceFromProvider?.(
-              result.id,
-              result.providerSequence,
-              sequenceBeforeProviderSpawn
-            )
+            const runtimeSequenceBeforeReconcile = runtime?.getPtyOutputSequence?.(result.id) ?? 0
+            // Why kept: this is the reattach boundary in the RENDERER's sequence
+            // domain, and the daemon snapshot's kitty flags mean nothing without
+            // the boundary they were proven at.
+            reconciledSnapshotSeq =
+              runtime?.synchronizePtyOutputSequenceFromProvider?.(
+                result.id,
+                result.providerSequence,
+                sequenceBeforeProviderSpawn
+              ) ?? null
+            if (runtimeSequenceBeforeReconcile > sequenceBeforeProviderSpawn) {
+              snapshotKittyFlagsCoverReconciledSeq = false
+            }
           }
           ensureWslHookRelayForReattach(result, args.connectionId)
           runtime?.preparePtyExecutionContext?.(
@@ -6917,6 +6975,13 @@ export function registerPtyHandlers(
         }
         const response = {
           ...result,
+          // Why both or neither: a pane can only adopt proven kitty flags together
+          // with the sequence boundary they describe.
+          ...(typeof result.snapshotKittyKeyboardFlags === 'number' &&
+          reconciledSnapshotSeq !== null &&
+          snapshotKittyFlagsCoverReconciledSeq
+            ? { snapshotSeq: reconciledSnapshotSeq }
+            : { snapshotKittyKeyboardFlags: undefined }),
           ...(!result.isReattach && effectiveLaunchConfig
             ? { launchConfig: effectiveLaunchConfig }
             : {}),
diff --git a/src/main/ipc/repos-remote.test.ts b/src/main/ipc/repos-remote.test.ts
index d3440ed4579..bbd639eac32 100644
--- a/src/main/ipc/repos-remote.test.ts
+++ b/src/main/ipc/repos-remote.test.ts
@@ -2167,6 +2167,28 @@ describe('repos:add + repos:clone', () => {
     expect(invalidateAuthorizedRootsCacheMock).toHaveBeenCalled()
   })
 
+  it('persists agent worktree visibility through local repos:update', () => {
+    const updated = {
+      id: 'repo-agent-visibility',
+      path: '/tmp/repo-agent-visibility',
+      displayName: 'repo-agent-visibility',
+      kind: 'git',
+      badgeColor: '#22c55e',
+      agentWorktreeVisibility: 'show'
+    }
+    mockStore.updateRepo.mockReturnValue(updated)
+
+    const result = handlers.get('repos:update')!(null, {
+      repoId: updated.id,
+      updates: { agentWorktreeVisibility: 'show' }
+    })
+
+    expect(result).toBe(updated)
+    expect(mockStore.updateRepo).toHaveBeenCalledWith(updated.id, {
+      agentWorktreeVisibility: 'show'
+    })
+  })
+
   it('prepares and invalidates roots when project host setup update changes worktree base path', () => {
     const repo = {
       id: 'repo-setup-update-root',
diff --git a/src/main/ipc/repos.ts b/src/main/ipc/repos.ts
index 558ed1d5a22..b1500963f27 100644
--- a/src/main/ipc/repos.ts
+++ b/src/main/ipc/repos.ts
@@ -41,6 +41,7 @@ import { isTuiAgent } from '../../shared/tui-agent-config'
 import { TaskSourceContextSchema } from '../../shared/task-source-context-schema'
 import { WorkspaceLinkedItemSchema } from '../../shared/workspace-linked-item-schema'
 import { isWorkspaceLinkedItemSourceContextMatch } from '../../shared/workspace-linked-item-source-context'
+import { DiffCommentSchema } from '../../shared/diff-comment-schema'
 import { invalidateAuthorizedRootsCache } from './filesystem-auth'
 import type { ChildProcess } from 'node:child_process'
 import { access, mkdir, readdir, rm } from 'node:fs/promises'
@@ -951,7 +952,8 @@ const FolderWorkspaceUpdateArgs = z.object({
       createdWithAgent: z.string().refine(isTuiAgent).optional(),
       pendingFirstAgentMessageRename: z.boolean().optional(),
       firstAgentMessageRenameError: z.string().nullable().optional(),
-      lastActivityAt: z.number().finite().optional()
+      lastActivityAt: z.number().finite().optional(),
+      diffComments: z.array(DiffCommentSchema).optional()
     })
     .superRefine(assertFolderWorkspaceLinkedSourceContextMatch)
 })
@@ -2124,6 +2126,7 @@ export function registerRepoHandlers(mainWindow: BrowserWindow, store: Store): v
             | 'externalWorktreeVisibilityPromptDismissedAt'
             | 'externalWorktreeInboxBaselinePaths'
             | 'importedExternalWorktreePaths'
+            | 'agentWorktreeVisibility'
             | 'projectGroupId'
             | 'projectGroupOrder'
           >
@@ -2194,6 +2197,14 @@ export function registerRepoHandlers(mainWindow: BrowserWindow, store: Store): v
       ) {
         delete updates.externalWorktreeVisibility
       }
+      if (
+        'agentWorktreeVisibility' in updates &&
+        updates.agentWorktreeVisibility !== undefined &&
+        updates.agentWorktreeVisibility !== 'hide' &&
+        updates.agentWorktreeVisibility !== 'show'
+      ) {
+        delete updates.agentWorktreeVisibility
+      }
       if (
         'externalWorktreeVisibilityPromptDismissedAt' in updates &&
         updates.externalWorktreeVisibilityPromptDismissedAt !== undefined &&
diff --git a/src/main/ipc/runtime-environment-connectivity-handlers.ts b/src/main/ipc/runtime-environment-connectivity-handlers.ts
index 9d3732f886b..2c4d1462540 100644
--- a/src/main/ipc/runtime-environment-connectivity-handlers.ts
+++ b/src/main/ipc/runtime-environment-connectivity-handlers.ts
@@ -183,6 +183,7 @@ function registerPassiveCallHandler(getUserDataPath: () => string): void {
         params?: unknown
         timeoutMs?: number
         expectedEnvironmentPairingRevision?: number
+        expectedRuntimeId?: string
       }
     ): Promise<RuntimeRpcResponse<unknown>> => {
       const environment = resolveEnvironment(getUserDataPath(), args.selector)
@@ -197,7 +198,8 @@ function registerPassiveCallHandler(getUserDataPath: () => string): void {
           args.method,
           args.params,
           args.timeoutMs,
-          args.expectedEnvironmentPairingRevision
+          args.expectedEnvironmentPairingRevision,
+          args.expectedRuntimeId ? { expectedRuntimeId: args.expectedRuntimeId } : undefined
         )
       } catch (error) {
         const failure = runtimeEnvironmentCallFailure(environment, args.method, error)
diff --git a/src/main/ipc/runtime-environment-federated-read-routing.test.ts b/src/main/ipc/runtime-environment-federated-read-routing.test.ts
new file mode 100644
index 00000000000..09e649e73f5
--- /dev/null
+++ b/src/main/ipc/runtime-environment-federated-read-routing.test.ts
@@ -0,0 +1,173 @@
+import { mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { encodePairingOffer } from '../../shared/pairing'
+import { REMOTE_RUNTIME_SHARED_CONTROL_CAPABILITY } from '../../shared/protocol-version'
+import { addEnvironmentFromPairingCode } from '../../shared/runtime-environment-store'
+
+const { sendRemoteRuntimeRequestMock, sendRemoteRuntimeSharedControlRequestMock } = vi.hoisted(
+  () => ({
+    sendRemoteRuntimeRequestMock: vi.fn(),
+    sendRemoteRuntimeSharedControlRequestMock: vi.fn()
+  })
+)
+
+vi.mock('../../shared/remote-runtime-client', () => ({
+  sendRemoteRuntimeRequest: sendRemoteRuntimeRequestMock
+}))
+
+vi.mock('./runtime-environment-request-connections', () => ({
+  sendRemoteRuntimeConnectionRequest: vi.fn(),
+  sendRemoteRuntimeSharedControlRequest: sendRemoteRuntimeSharedControlRequestMock,
+  reconnectRemoteRuntimeSharedControlConnection: vi.fn()
+}))
+
+import {
+  callRuntimeEnvironment,
+  resetSharedControlSupport
+} from './runtime-environment-transport-routing'
+
+describe('federated read RPC transport routing', () => {
+  let userDataPath: string
+  let environmentId: string
+
+  beforeEach(() => {
+    userDataPath = mkdtempSync(join(tmpdir(), 'orca-federated-read-routing-'))
+    environmentId = addEnvironmentFromPairingCode(userDataPath, {
+      name: 'worker',
+      pairingCode: encodePairingOffer({
+        v: 2,
+        endpoint: 'ws://127.0.0.1:6768',
+        deviceToken: 'device-token',
+        publicKeyB64: Buffer.from(new Uint8Array(32).fill(1)).toString('base64')
+      })
+    }).id
+    resetSharedControlSupport()
+    sendRemoteRuntimeRequestMock.mockReset()
+    sendRemoteRuntimeSharedControlRequestMock.mockReset()
+  })
+
+  afterEach(() => {
+    rmSync(userDataPath, { recursive: true, force: true })
+  })
+
+  it('routes an enveloped federation read over shared control with its authority intact', async () => {
+    const envelope = {
+      orchestrationCapability: 'capability',
+      orchestrationContractVersion: 1,
+      orchestrationRequestId: 'request-1',
+      compatibilityInvocationId: 'compatibility-1',
+      orchestrationCompatibilityEvidence: {
+        terminalHandle: 'term-1',
+        paneKey: 'pane-1',
+        launchToken: 'launch-1'
+      }
+    }
+    sendRemoteRuntimeRequestMock.mockResolvedValue({
+      id: 'status',
+      ok: true,
+      result: { capabilities: [REMOTE_RUNTIME_SHARED_CONTROL_CAPABILITY] },
+      _meta: { runtimeId: 'runtime-worker' }
+    })
+    sendRemoteRuntimeSharedControlRequestMock.mockResolvedValue({
+      id: 'pull',
+      ok: true,
+      result: { runtimeEpoch: 'runtime-worker', items: [] },
+      _meta: { runtimeId: 'runtime-worker' }
+    })
+
+    await expect(
+      callRuntimeEnvironment(
+        userDataPath,
+        environmentId,
+        'orchestration.federationPull',
+        { dispatchId: 'dispatch-1', afterSequence: 0, limit: 50 },
+        15_000,
+        undefined,
+        envelope
+      )
+    ).resolves.toMatchObject({ ok: true })
+
+    expect(sendRemoteRuntimeRequestMock.mock.calls.map((call) => call[1])).toEqual(['status.get'])
+    expect(sendRemoteRuntimeSharedControlRequestMock).toHaveBeenCalledWith(
+      environmentId,
+      expect.any(Object),
+      'orchestration.federationPull',
+      { dispatchId: 'dispatch-1', afterSequence: 0, limit: 50 },
+      15_000,
+      envelope
+    )
+  })
+
+  it('keeps enveloped federation mutations on the one-shot transport', async () => {
+    const envelope = { orchestrationContractVersion: 1, orchestrationRequestId: 'ack-1' }
+    sendRemoteRuntimeRequestMock.mockResolvedValue({
+      id: 'ack',
+      ok: true,
+      result: { acknowledgedThrough: 4 },
+      _meta: { runtimeId: 'runtime-worker' }
+    })
+
+    await callRuntimeEnvironment(
+      userDataPath,
+      environmentId,
+      'orchestration.federationAck',
+      { dispatchId: 'dispatch-1', throughSequence: 4 },
+      15_000,
+      undefined,
+      envelope
+    )
+
+    expect(sendRemoteRuntimeRequestMock).toHaveBeenCalledWith(
+      expect.any(Object),
+      'orchestration.federationAck',
+      { dispatchId: 'dispatch-1', throughSequence: 4 },
+      15_000,
+      envelope
+    )
+    expect(sendRemoteRuntimeSharedControlRequestMock).not.toHaveBeenCalled()
+  })
+
+  it('falls back to one-shot with the envelope when shared control is unavailable', async () => {
+    const envelope = { orchestrationContractVersion: 1 }
+    sendRemoteRuntimeRequestMock.mockImplementation(async (_pairing, method) =>
+      method === 'status.get'
+        ? {
+            id: 'status',
+            ok: true,
+            result: { capabilities: [] },
+            _meta: { runtimeId: 'runtime-worker' }
+          }
+        : {
+            id: 'pull',
+            ok: true,
+            result: { runtimeEpoch: 'runtime-worker', items: [] },
+            _meta: { runtimeId: 'runtime-worker' }
+          }
+    )
+
+    await callRuntimeEnvironment(
+      userDataPath,
+      environmentId,
+      'orchestration.federationPull',
+      { dispatchId: 'dispatch-1', afterSequence: 0, limit: 50 },
+      15_000,
+      undefined,
+      envelope
+    )
+
+    expect(sendRemoteRuntimeRequestMock.mock.calls.map((call) => call[1])).toEqual([
+      'status.get',
+      'orchestration.federationPull'
+    ])
+    expect(sendRemoteRuntimeRequestMock).toHaveBeenLastCalledWith(
+      expect.any(Object),
+      'orchestration.federationPull',
+      { dispatchId: 'dispatch-1', afterSequence: 0, limit: 50 },
+      15_000,
+      envelope
+    )
+    expect(sendRemoteRuntimeSharedControlRequestMock).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/ipc/runtime-environment-federated-read-transport.bench.test.ts b/src/main/ipc/runtime-environment-federated-read-transport.bench.test.ts
new file mode 100644
index 00000000000..2e6893ba4ea
--- /dev/null
+++ b/src/main/ipc/runtime-environment-federated-read-transport.bench.test.ts
@@ -0,0 +1,207 @@
+import { readFileSync } from 'node:fs'
+import { performance } from 'node:perf_hooks'
+import { join } from 'node:path'
+import { describe, expect, it, vi } from 'vitest'
+import { sendRemoteRuntimeRequest } from '../../shared/remote-runtime-client'
+import { RemoteRuntimeSharedControlConnection } from '../../shared/remote-runtime-shared-control-connection'
+import { RuntimeEnvironmentStoreSchema } from '../../shared/runtime-environments'
+
+const runLiveBenchmark = isFederatedReadBenchmarkEnabled(process.env.ORCA_FEDERATED_READ_BENCH)
+
+it('interpolates even-sized benchmark samples', () => expect(percentile([1, 3], 0.5)).toBe(2))
+
+it.each([
+  ['1', true],
+  ['true', false],
+  [undefined, false]
+])('enables the live benchmark only for %s', (value, enabled) => {
+  expect(isFederatedReadBenchmarkEnabled(value)).toBe(enabled)
+})
+
+it('closes the retained connection after a measured request rejects', async () => {
+  let requestCount = 0
+  const fixture = createSharedControlFixture(async () => {
+    requestCount += 1
+    if (requestCount === 4) {
+      throw new Error('injected measured request failure')
+    }
+    return { ok: true }
+  })
+
+  await expect(measureSharedControlRequests(fixture.connection, {}, 1)).rejects.toThrow(
+    'injected measured request failure'
+  )
+
+  expect(requestCount).toBe(4)
+  expect.soft(fixture.close).toHaveBeenCalledOnce()
+  expect.soft(fixture.socketClose).toHaveBeenCalledOnce()
+  expect(fixture.retainedHandleCount()).toBe(0)
+})
+
+it('closes the retained connection after successful measurements', async () => {
+  const fixture = createSharedControlFixture(async () => ({ ok: true }))
+
+  await expect(measureSharedControlRequests(fixture.connection, {}, 1)).resolves.toMatchObject({
+    sharedControl: { count: 1 },
+    diagnostics: { state: 'ready', pendingRequestCount: 0 }
+  })
+
+  expect(fixture.close).toHaveBeenCalledOnce()
+  expect(fixture.socketClose).toHaveBeenCalledOnce()
+  expect(fixture.retainedHandleCount()).toBe(0)
+})
+
+describe.runIf(runLiveBenchmark)('federated read RPC transport benchmark', () => {
+  it('compares one-shot and shared-control latency on one saved runtime', async () => {
+    const userDataPath = process.env.ORCA_RUNTIME_USER_DATA_PATH
+    const environmentName = process.env.ORCA_RUNTIME_ENVIRONMENT
+    if (!userDataPath || !environmentName) {
+      throw new Error('Set ORCA_RUNTIME_USER_DATA_PATH and ORCA_RUNTIME_ENVIRONMENT.')
+    }
+    const store = RuntimeEnvironmentStoreSchema.parse(
+      JSON.parse(readFileSync(join(userDataPath, 'orca-environments.json'), 'utf8'))
+    )
+    const environment = store.environments.find((entry) => entry.name === environmentName)
+    if (!environment) {
+      throw new Error(`Unknown runtime environment: ${environmentName}`)
+    }
+    const endpoint =
+      environment.endpoints.find((entry) => entry.id === environment.preferredEndpointId) ??
+      environment.endpoints[0]
+    if (!endpoint) {
+      throw new Error(`Runtime environment ${environmentName} has no endpoint.`)
+    }
+    const pairing = {
+      v: 2 as const,
+      endpoint: endpoint.endpoint,
+      deviceToken: endpoint.deviceToken,
+      publicKeyB64: endpoint.publicKeyB64
+    }
+    const params = {
+      dispatchId: 'sta3880_benchmark_missing',
+      afterSequence: 0,
+      limit: 50
+    }
+    const oneShot = await measureRequests(() =>
+      sendRemoteRuntimeRequest(pairing, 'orchestration.federationPull', params, 15_000, {
+        orchestrationContractVersion: 1
+      })
+    )
+    const shared = new RemoteRuntimeSharedControlConnection(pairing, {
+      environmentId: environment.id
+    })
+    const { sharedControl, diagnostics } = await measureSharedControlRequests(shared, params)
+
+    expect(diagnostics).toMatchObject({ state: 'ready', pendingRequestCount: 0 })
+    process.stdout.write(`${JSON.stringify({ oneShot, sharedControl }, null, 2)}\n`)
+  }, 120_000)
+})
+
+async function measureSharedControlRequests(
+  shared: RemoteRuntimeSharedControlConnection,
+  params: unknown,
+  count = 30
+): Promise<{
+  sharedControl: Awaited<ReturnType<typeof measureRequests>>
+  diagnostics: ReturnType<RemoteRuntimeSharedControlConnection['getDiagnostics']>
+}> {
+  try {
+    const sharedControl = await measureRequests(
+      () =>
+        shared.request('orchestration.federationPull', params, 15_000, {
+          orchestrationContractVersion: 1
+        }),
+      count
+    )
+    const diagnostics = shared.getDiagnostics()
+    return { sharedControl, diagnostics }
+  } finally {
+    shared.close()
+  }
+}
+
+async function measureRequests(
+  request: () => Promise<{ ok: boolean; error?: { code: string } }>,
+  count = 30
+): Promise<{
+  count: number
+  meanMs: number
+  medianMs: number
+  p95Ms: number
+  minMs: number
+  maxMs: number
+  responseCodes: string[]
+}> {
+  for (let index = 0; index < 3; index++) {
+    await request()
+  }
+  const durations: number[] = []
+  const responseCodes = new Set<string>()
+  for (let index = 0; index < count; index++) {
+    const startedAt = performance.now()
+    const response = await request()
+    durations.push(performance.now() - startedAt)
+    if (!response.ok && response.error) {
+      responseCodes.add(response.error.code)
+    }
+  }
+  durations.sort((left, right) => left - right)
+  return {
+    count,
+    meanMs: round(durations.reduce((sum, value) => sum + value, 0) / count),
+    medianMs: round(percentile(durations, 0.5)),
+    p95Ms: round(percentile(durations, 0.95)),
+    minMs: round(durations[0] ?? 0),
+    maxMs: round(durations.at(-1) ?? 0),
+    responseCodes: [...responseCodes]
+  }
+}
+
+function percentile(sorted: number[], fraction: number): number {
+  if (sorted.length === 0) {
+    return 0
+  }
+  const rank = (sorted.length - 1) * fraction
+  const lowerIndex = Math.floor(rank)
+  const upperIndex = Math.ceil(rank)
+  const lower = sorted[lowerIndex] ?? 0
+  const upper = sorted[upperIndex] ?? lower
+  return lower + (upper - lower) * (rank - lowerIndex)
+}
+
+function round(value: number): number {
+  return Math.round(value * 100) / 100
+}
+
+function isFederatedReadBenchmarkEnabled(value: string | undefined): boolean {
+  return value === '1'
+}
+
+function createSharedControlFixture(
+  request: () => Promise<{ ok: boolean; error?: { code: string } }>
+): {
+  connection: RemoteRuntimeSharedControlConnection
+  close: ReturnType<typeof vi.fn>
+  socketClose: ReturnType<typeof vi.fn>
+  retainedHandleCount: () => number
+} {
+  const connection = new RemoteRuntimeSharedControlConnection({
+    v: 2,
+    endpoint: 'ws://127.0.0.1:1',
+    deviceToken: 'token',
+    publicKeyB64: Buffer.from(new Uint8Array(32).fill(1)).toString('base64')
+  })
+  const socketClose = vi.fn()
+  const unsafe = connection as unknown as {
+    state: string
+    ws: { readyState: number; close: () => void } | null
+    sharedKey: Uint8Array | null
+    request: typeof request
+  }
+  unsafe.state = 'ready'
+  unsafe.ws = { readyState: 1, close: socketClose }
+  unsafe.sharedKey = new Uint8Array(32).fill(2)
+  unsafe.request = vi.fn(request)
+  const close = vi.spyOn(connection, 'close')
+  return { connection, close, socketClose, retainedHandleCount: () => (unsafe.ws ? 1 : 0) }
+}
diff --git a/src/main/ipc/runtime-environment-request-connections.ts b/src/main/ipc/runtime-environment-request-connections.ts
index 946a0d30cf8..c9782d61772 100644
--- a/src/main/ipc/runtime-environment-request-connections.ts
+++ b/src/main/ipc/runtime-environment-request-connections.ts
@@ -1,5 +1,8 @@
 import type { PairingOffer } from '../../shared/pairing'
-import type { RuntimeRpcResponse } from '../../shared/runtime-rpc-envelope'
+import type {
+  RuntimeOrchestrationEnvelope,
+  RuntimeRpcResponse
+} from '../../shared/runtime-rpc-envelope'
 import { RemoteRuntimeRequestConnection } from '../../shared/remote-runtime-request-connection'
 import { RemoteRuntimeSharedControlConnection } from '../../shared/remote-runtime-shared-control-connection'
 import type {
@@ -52,9 +55,15 @@ export function sendRemoteRuntimeSharedControlRequest<TResult>(
   pairing: PairingOffer,
   method: string,
   params: unknown,
-  timeoutMs: number
+  timeoutMs: number,
+  envelope?: RuntimeOrchestrationEnvelope
 ): Promise<RuntimeRpcResponse<TResult>> {
-  return getSharedControlConnection(environmentId, pairing).request(method, params, timeoutMs)
+  return getSharedControlConnection(environmentId, pairing).request(
+    method,
+    params,
+    timeoutMs,
+    envelope
+  )
 }
 
 export function subscribeRemoteRuntimeSharedControlRequest<TResult>(
@@ -68,13 +77,15 @@ export function subscribeRemoteRuntimeSharedControlRequest<TResult>(
     onBinary?: (bytes: Uint8Array<ArrayBufferLike>) => void
     onError: (error: { code: string; message: string }) => void
     onClose?: () => void
-  }
+  },
+  envelope?: RuntimeOrchestrationEnvelope
 ): Promise<RemoteRuntimeSharedSubscription> {
   return getSharedControlConnection(environmentId, pairing).subscribe(
     method,
     params,
     timeoutMs,
-    callbacks
+    callbacks,
+    envelope?.expectedRuntimeId
   )
 }
 
diff --git a/src/main/ipc/runtime-environment-transport-routing.ts b/src/main/ipc/runtime-environment-transport-routing.ts
index d144ee087e1..0792a1ea009 100644
--- a/src/main/ipc/runtime-environment-transport-routing.ts
+++ b/src/main/ipc/runtime-environment-transport-routing.ts
@@ -1,5 +1,6 @@
 import { getPreferredPairingOffer } from '../../shared/runtime-environments'
 import { resolveEnvironment, markEnvironmentUsed } from '../../shared/runtime-environment-store'
+import { isOrchestrationMutation } from '../../shared/orchestration-rpc-contract'
 import type {
   RuntimeOrchestrationEnvelope,
   RuntimeRpcResponse
@@ -108,7 +109,8 @@ export async function callRuntimeEnvironment(
       const pairing = getPreferredPairingOffer(currentEnvironment)
       endpoint = pairing.endpoint
       const effectiveTimeoutMs = timeoutMs ?? DEFAULT_REMOTE_RUNTIME_TIMEOUT_MS
-      if (envelope) {
+      const sharedControlEnvelope = shouldUseSharedControlEnvelope(method, params, envelope)
+      if (envelope && !sharedControlEnvelope) {
         const response = await sendRemoteRuntimeRequest(
           pairing,
           method,
@@ -135,19 +137,36 @@ export async function callRuntimeEnvironment(
         !shouldUseOneShotRequest(method) &&
         (await supportsSharedControl(userDataPath, currentEnvironment, pairing, effectiveTimeoutMs))
       ) {
-        const response = await sendRemoteRuntimeSharedControlRequest(
-          currentEnvironment.id,
-          pairing,
-          method,
-          params,
-          effectiveTimeoutMs
-        )
+        const response = sharedControlEnvelope
+          ? await sendRemoteRuntimeSharedControlRequest(
+              currentEnvironment.id,
+              pairing,
+              method,
+              params,
+              effectiveTimeoutMs,
+              sharedControlEnvelope
+            )
+          : await sendRemoteRuntimeSharedControlRequest(
+              currentEnvironment.id,
+              pairing,
+              method,
+              params,
+              effectiveTimeoutMs
+            )
         markEnvironmentUsedFromResponse(userDataPath, currentEnvironment.id, response)
         return response
       }
       // Why: startup/control-plane RPCs use the proven one-shot path so repo
       // hydration cannot be coupled to a stale terminal-control connection.
-      const response = await sendRemoteRuntimeRequest(pairing, method, params, effectiveTimeoutMs)
+      const response = sharedControlEnvelope
+        ? await sendRemoteRuntimeRequest(
+            pairing,
+            method,
+            params,
+            effectiveTimeoutMs,
+            sharedControlEnvelope
+          )
+        : await sendRemoteRuntimeRequest(pairing, method, params, effectiveTimeoutMs)
       markEnvironmentUsedFromResponse(userDataPath, currentEnvironment.id, response)
       return response
     })
@@ -174,11 +193,14 @@ export async function subscribeRuntimeEnvironment(
         | { type: 'close' }
     ) => void
     onClose: () => void
-  }
+  },
+  expectedRuntimeId?: string
 ): Promise<RemoteRuntimeSubscription> {
   const environment = resolveEnvironment(userDataPath, selector)
   const pairing = getPreferredPairingOffer(environment)
   const effectiveTimeoutMs = timeoutMs ?? DEFAULT_REMOTE_RUNTIME_TIMEOUT_MS
+  const envelope: RuntimeOrchestrationEnvelope | undefined =
+    expectedRuntimeId === undefined ? undefined : { expectedRuntimeId }
   let markedUsed = false
   const markUsedOnce = (runtimeId: string): void => {
     if (markedUsed) {
@@ -221,7 +243,8 @@ export async function subscribeRuntimeEnvironment(
         method,
         params,
         effectiveTimeoutMs,
-        callbacksWithMarkUsed
+        callbacksWithMarkUsed,
+        envelope
       )
     }
     return await subscribeRemoteRuntimeRequest(
@@ -229,7 +252,9 @@ export async function subscribeRuntimeEnvironment(
       method,
       params,
       effectiveTimeoutMs,
-      callbacksWithMarkUsed
+      callbacksWithMarkUsed,
+      undefined,
+      envelope
     )
   } catch (error) {
     if (error instanceof Error) {
@@ -253,6 +278,16 @@ function shouldUseCachedRequestConnection(method: string): boolean {
   return method === 'terminal.send' || method === 'terminal.updateViewport'
 }
 
+function shouldUseSharedControlEnvelope(
+  method: string,
+  params: unknown,
+  envelope: RuntimeOrchestrationEnvelope | undefined
+): RuntimeOrchestrationEnvelope | undefined {
+  return envelope && method.startsWith('orchestration.') && !isOrchestrationMutation(method, params)
+    ? envelope
+    : undefined
+}
+
 function shouldUseOneShotRequest(method: string): boolean {
   // Why: snapshot recovery must remain available while a retained shared-control stream is reconnecting after a HUB restart.
   return method === 'session.tabs.list' || method === 'session.tabs.listAll'
diff --git a/src/main/ipc/runtime-environments.test.ts b/src/main/ipc/runtime-environments.test.ts
index 9ca8da98600..b351b88681a 100644
--- a/src/main/ipc/runtime-environments.test.ts
+++ b/src/main/ipc/runtime-environments.test.ts
@@ -1094,7 +1094,13 @@ describe('registerRuntimeEnvironmentHandlers', () => {
     await add(null, { name: 'desk', pairingCode: pairingCode() })
 
     const subscribe = handler<
-      { selector: string; method: string; params?: unknown; subscriptionId?: string },
+      {
+        selector: string
+        method: string
+        params?: unknown
+        subscriptionId?: string
+        expectedRuntimeId?: string
+      },
       { subscriptionId: string; requestId: string }
     >('runtimeEnvironments:subscribe')
     await subscribe(
@@ -1107,7 +1113,12 @@ describe('registerRuntimeEnvironmentHandlers', () => {
           removeListener: vi.fn()
         }
       },
-      { selector: 'desk', method: 'browser.screencast', params: { pageId: 'page-1' } }
+      {
+        selector: 'desk',
+        method: 'browser.screencast',
+        params: { pageId: 'page-1' },
+        expectedRuntimeId: 'runtime-1'
+      }
     )
     await subscribe(
       {
@@ -1127,14 +1138,18 @@ describe('registerRuntimeEnvironmentHandlers', () => {
       'browser.screencast',
       { pageId: 'page-1' },
       15_000,
-      expect.any(Object)
+      expect.any(Object),
+      undefined,
+      { expectedRuntimeId: 'runtime-1' }
     )
     expect(subscribeRemoteRuntimeRequestMock).toHaveBeenCalledWith(
       expect.any(Object),
       'terminal.multiplex',
       { client: { id: 'client-1' } },
       15_000,
-      expect.any(Object)
+      expect.any(Object),
+      undefined,
+      undefined
     )
     expect(subscribeRemoteRuntimeSharedControlRequestMock).not.toHaveBeenCalled()
   })
@@ -1163,7 +1178,13 @@ describe('registerRuntimeEnvironmentHandlers', () => {
     await add(null, { name: 'desk', pairingCode: pairingCode() })
 
     const subscribe = handler<
-      { selector: string; method: string; params?: unknown; subscriptionId?: string },
+      {
+        selector: string
+        method: string
+        params?: unknown
+        subscriptionId?: string
+        expectedRuntimeId?: string
+      },
       { subscriptionId: string; requestId: string }
     >('runtimeEnvironments:subscribe')
     await expect(
@@ -1177,7 +1198,11 @@ describe('registerRuntimeEnvironmentHandlers', () => {
             removeListener: vi.fn()
           }
         },
-        { selector: 'desk', method: 'session.tabs.subscribeAll' }
+        {
+          selector: 'desk',
+          method: 'session.tabs.subscribeAll',
+          expectedRuntimeId: 'runtime-1'
+        }
       )
     ).resolves.toMatchObject({ requestId: 'tabs-shared' })
 
@@ -1187,7 +1212,8 @@ describe('registerRuntimeEnvironmentHandlers', () => {
       'session.tabs.subscribeAll',
       undefined,
       15_000,
-      expect.any(Object)
+      expect.any(Object),
+      { expectedRuntimeId: 'runtime-1' }
     )
     expect(subscribeRemoteRuntimeRequestMock).not.toHaveBeenCalled()
   })
@@ -1315,7 +1341,9 @@ describe('registerRuntimeEnvironmentHandlers', () => {
       'session.tabs.subscribeAll',
       undefined,
       15_000,
-      expect.any(Object)
+      expect.any(Object),
+      undefined,
+      undefined
     )
     expect(subscribeRemoteRuntimeSharedControlRequestMock).not.toHaveBeenCalled()
   })
@@ -1659,7 +1687,9 @@ describe('registerRuntimeEnvironmentHandlers', () => {
       'terminal.subscribe',
       { terminal: 't1' },
       25,
-      expect.any(Object)
+      expect.any(Object),
+      undefined,
+      undefined
     )
     expect(sent).toEqual([
       expect.objectContaining({ subscriptionId: result.subscriptionId, type: 'response' }),
diff --git a/src/main/ipc/runtime-environments.ts b/src/main/ipc/runtime-environments.ts
index e31f8569dec..3ddf4e2aa6c 100644
--- a/src/main/ipc/runtime-environments.ts
+++ b/src/main/ipc/runtime-environments.ts
@@ -90,6 +90,7 @@ export function registerRuntimeEnvironmentHandlers(store: Store): void {
         timeoutMs?: number
         subscriptionId?: string
         expectedEnvironmentPairingRevision?: number
+        expectedRuntimeId?: string
       }
     ): Promise<{ subscriptionId: string; requestId: string }> => {
       const subscriptionId =
@@ -180,7 +181,8 @@ export function registerRuntimeEnvironmentHandlers(store: Store): void {
               retained?.removeDestroyedListener()
               remoteRuntimeSubscriptions.delete(subscriptionId)
             }
-          }
+          },
+          args.expectedRuntimeId
         )
       } catch (error) {
         removeDestroyedListener()
diff --git a/src/main/ipc/runtime-watcher-quarantine-queue.ts b/src/main/ipc/runtime-watcher-quarantine-queue.ts
index e326b299943..bc2b4cf5fd4 100644
--- a/src/main/ipc/runtime-watcher-quarantine-queue.ts
+++ b/src/main/ipc/runtime-watcher-quarantine-queue.ts
@@ -33,7 +33,7 @@ export class RuntimeWatcherQuarantineQueue<T> {
         }
         settled = true
         const index = this.waiters.indexOf(waiter)
-        if (index >= 0) {
+        if (index !== -1) {
           this.waiters.splice(index, 1)
         }
         callback()
diff --git a/src/main/ipc/ssh-pty-legacy-projection-record.ts b/src/main/ipc/ssh-pty-legacy-projection-record.ts
index 45c666dc09a..6d9843d888c 100644
--- a/src/main/ipc/ssh-pty-legacy-projection-record.ts
+++ b/src/main/ipc/ssh-pty-legacy-projection-record.ts
@@ -117,7 +117,7 @@ export function reclaimProjectionRecord(
     return
   }
   const index = ids.indexOf(id)
-  if (index >= 0) {
+  if (index !== -1) {
     ids.splice(index, 1)
   }
   if (ids.length === 0) {
diff --git a/src/main/ipc/ssh.ts b/src/main/ipc/ssh.ts
index 59ffcfbc9a9..0c504c5f0a0 100644
--- a/src/main/ipc/ssh.ts
+++ b/src/main/ipc/ssh.ts
@@ -177,7 +177,7 @@ export async function requestActiveSshAiVaultSessionList(
   targetId: string,
   params: SshAiVaultRelayListParams,
   options: { signal?: AbortSignal; timeoutMs?: number } = {}
-): Promise<unknown | null> {
+): Promise<unknown> {
   if (isRuntimeOwnedSshTargetId(targetId)) {
     return null
   }
@@ -192,7 +192,7 @@ export async function requestActiveSshAiVaultSessionTitles(
   targetId: string,
   params: SshAiVaultRelayTitleParams,
   options: { signal?: AbortSignal; timeoutMs?: number } = {}
-): Promise<unknown | null> {
+): Promise<unknown> {
   if (isRuntimeOwnedSshTargetId(targetId)) {
     return null
   }
diff --git a/src/main/ipc/terminal-preview-output-stream.test.ts b/src/main/ipc/terminal-preview-output-stream.test.ts
new file mode 100644
index 00000000000..4f293015178
--- /dev/null
+++ b/src/main/ipc/terminal-preview-output-stream.test.ts
@@ -0,0 +1,60 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { WebContents } from 'electron'
+import { TerminalPreviewOutputStream } from './terminal-preview-output-stream'
+
+function makeStream(): TerminalPreviewOutputStream {
+  const contents = {
+    id: 1,
+    isDestroyed: () => false,
+    send: vi.fn()
+  } as unknown as WebContents
+  return new TerminalPreviewOutputStream(
+    contents,
+    'p1',
+    () => undefined,
+    () => undefined
+  )
+}
+
+// The renderer needs each buffered chunk's mode, not just its bytes.
+// Returning a bare string[] made a proven post-snapshot `CSI > u` look like
+// historical redelivery, so the TUI's single pop later landed on a stale frame.
+describe('TerminalPreviewOutputStream.completeSnapshot', () => {
+  it('drops chunks the snapshot already covers', () => {
+    const stream = makeStream()
+    stream.append('abc', { seq: 5, rawLength: 3 })
+    expect(stream.completeSnapshot(5)).toEqual([])
+  })
+
+  it('gives a strictly newer sequenced chunk live mode', () => {
+    const stream = makeStream()
+    stream.append('abc', { seq: 9, rawLength: 3 })
+    expect(stream.completeSnapshot(6)).toEqual([{ data: 'abc', mode: 'live' }])
+  })
+
+  it('slices a partially covered chunk and keeps the suffix live', () => {
+    const stream = makeStream()
+    stream.append('abc', { seq: 7, rawLength: 3 })
+    expect(stream.completeSnapshot(6)).toEqual([{ data: 'c', mode: 'live' }])
+  })
+
+  it('falls back to replay mode for an unsliceable transformed overlap', () => {
+    const stream = makeStream()
+    // Renderer-side transforms make raw offsets unmappable, so the covered head
+    // cannot be removed and the whole chunk stays uncertain redelivery.
+    stream.append('abc', { seq: 7, rawLength: 3, transformed: true })
+    expect(stream.completeSnapshot(6)).toEqual([{ data: 'abc', mode: 'replay' }])
+  })
+
+  it('falls back to replay mode when the chunk carries no sequence metadata', () => {
+    const stream = makeStream()
+    stream.append('abc')
+    expect(stream.completeSnapshot(6)).toEqual([{ data: 'abc', mode: 'replay' }])
+  })
+
+  it('falls back to replay mode when the snapshot itself is unsequenced', () => {
+    const stream = makeStream()
+    stream.append('abc', { seq: 9, rawLength: 3 })
+    expect(stream.completeSnapshot(undefined)).toEqual([{ data: 'abc', mode: 'replay' }])
+  })
+})
diff --git a/src/main/ipc/terminal-preview-output-stream.ts b/src/main/ipc/terminal-preview-output-stream.ts
index af14424cbe2..16cb1613565 100644
--- a/src/main/ipc/terminal-preview-output-stream.ts
+++ b/src/main/ipc/terminal-preview-output-stream.ts
@@ -1,6 +1,9 @@
 import type { WebContents } from 'electron'
 import { iterateTerminalInputChunks } from '../../shared/terminal-input'
-import type { TerminalPreviewDataPayload } from '../../shared/terminal-preview'
+import type {
+  TerminalPreviewDataPayload,
+  TerminalPreviewReplayChunk
+} from '../../shared/terminal-preview'
 
 const OUTPUT_BATCH_MS = 5
 export const TERMINAL_PREVIEW_OUTPUT_BATCH_MAX_BYTES = 64 * 1024
@@ -16,22 +19,37 @@ export type TerminalPreviewOutputMeta = {
 
 type PendingOutput = { data: string; bytes: number; meta?: TerminalPreviewOutputMeta }
 
-function outputAfterSnapshotSeq(output: PendingOutput, snapshotSeq?: number): string | null {
+/**
+ * Split one buffered chunk against the snapshot boundary, keeping WHY it
+ * survived. Only a chunk whose sequence metadata proves it is the suffix after
+ * that boundary may advance kitty state with live stack semantics; an overlap
+ * that cannot be sliced is redelivery, and a redelivered `CSI > u` applied as a
+ * push would leave the TUI's single pop landing on a stale frame.
+ */
+function outputAfterSnapshotSeq(
+  output: PendingOutput,
+  snapshotSeq?: number
+): TerminalPreviewReplayChunk | null {
   if (
     typeof snapshotSeq !== 'number' ||
     typeof output.meta?.seq !== 'number' ||
     typeof output.meta.rawLength !== 'number'
   ) {
-    return output.data
+    return { data: output.data, mode: 'replay' }
   }
   if (output.meta.seq <= snapshotSeq) {
     return null
   }
   const startSeq = output.meta.seq - output.meta.rawLength
-  if (startSeq >= snapshotSeq || output.meta.transformed === true) {
-    return output.data
+  if (startSeq >= snapshotSeq) {
+    return { data: output.data, mode: 'live' }
   }
-  return output.data.slice(snapshotSeq - startSeq)
+  if (output.meta.transformed === true) {
+    // Transformed payloads make raw offsets unmappable, so the covered head
+    // cannot be sliced off and the whole chunk stays uncertain redelivery.
+    return { data: output.data, mode: 'replay' }
+  }
+  return { data: output.data.slice(snapshotSeq - startSeq), mode: 'live' }
 }
 
 /** Owns one preview's bounded snapshot/live output queue and acknowledgements. */
@@ -101,10 +119,10 @@ export class TerminalPreviewOutputStream {
     return true
   }
 
-  completeSnapshot(snapshotSeq?: number): string[] {
+  completeSnapshot(snapshotSeq?: number): TerminalPreviewReplayChunk[] {
     const replay = this.initialPending.flatMap((output) => {
       const uncovered = outputAfterSnapshotSeq(output, snapshotSeq)
-      return uncovered ? [uncovered] : []
+      return uncovered && uncovered.data.length > 0 ? [uncovered] : []
     })
     this.initialPending = []
     this.initialPendingBytes = 0
diff --git a/src/main/ipc/terminal-preview.test.ts b/src/main/ipc/terminal-preview.test.ts
index a01fd7c70eb..b8460554b73 100644
--- a/src/main/ipc/terminal-preview.test.ts
+++ b/src/main/ipc/terminal-preview.test.ts
@@ -122,7 +122,9 @@ describe('registerTerminalPreviewHandlers', () => {
 
     await expect(resultPromise).resolves.toEqual({
       snapshot: { data: 'screen', cols: 80, rows: 20, seq: 6 },
-      replay: ['c']
+      // A sliced suffix is proven post-snapshot output, so it applies with live
+      // kitty semantics rather than as redelivery.
+      replay: [{ data: 'c', mode: 'live' }]
     })
     expect(runtime.registerRawTerminalViewSubscriber).toHaveBeenCalledWith('p1')
   })
@@ -239,6 +241,64 @@ describe('registerTerminalPreviewHandlers', () => {
     expect(sender.send).not.toHaveBeenCalled()
   })
 
+  // Flags and image must come from ONE capture. Publishing flags from
+  // a separate "current state" read would describe a different stream position,
+  // so replaying the intervening bytes could duplicate or reorder transitions.
+  it('returns the kitty flags of the capture that produced the returned image', async () => {
+    const runtime = makeRuntime()
+    const snapshotResolvers: ((snapshot: {
+      data: string
+      cols: number
+      rows: number
+      seq: number
+      kittyKeyboardFlags?: number
+    }) => void)[] = []
+    runtime.serializeTerminalBuffer.mockImplementation(
+      () =>
+        new Promise((resolve) => {
+          snapshotResolvers.push(resolve)
+        })
+    )
+    registerTerminalPreviewHandlers(runtime as never)
+    const sender = makeSender()
+
+    const resultPromise = handlers.get('terminalPreview:connect')!(eventFor(sender), {
+      ptyId: 'p1'
+    }) as Promise<unknown>
+    const chunk = 'x'.repeat(64 * 1024)
+    for (let index = 0; index < 5; index++) {
+      runtime.listeners[0]!(chunk)
+    }
+    // The first capture overflowed; its flags must not survive onto the second image.
+    snapshotResolvers[0]!({
+      data: 'first',
+      cols: 80,
+      rows: 20,
+      seq: 1,
+      kittyKeyboardFlags: 0
+    })
+    await vi.waitFor(() => expect(snapshotResolvers).toHaveLength(2))
+    snapshotResolvers[1]!({
+      data: 'second',
+      cols: 80,
+      rows: 20,
+      seq: 2,
+      kittyKeyboardFlags: 8
+    })
+
+    await expect(resultPromise).resolves.toEqual({
+      snapshot: {
+        data: 'second',
+        cols: 80,
+        rows: 20,
+        seq: 2,
+        kittyKeyboardFlags: 8
+      },
+      replay: []
+    })
+    expect(runtime.serializeTerminalBuffer).toHaveBeenCalledTimes(2)
+  })
+
   it('releases output and raw-view presence on unsubscribe and sender destruction', async () => {
     const runtime = makeRuntime()
     registerTerminalPreviewHandlers(runtime as never)
diff --git a/src/main/ipc/workspace-ports.test.ts b/src/main/ipc/workspace-ports.test.ts
index f5afe03628b..9c847b14ad8 100644
--- a/src/main/ipc/workspace-ports.test.ts
+++ b/src/main/ipc/workspace-ports.test.ts
@@ -1,7 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import type { WorkspacePort, WorkspacePortScanResult } from '../../shared/workspace-ports'
 
-const handlers = new Map<string, (_event: unknown, args: unknown) => Promise<unknown> | unknown>()
+const handlers = new Map<string, (_event: unknown, args: unknown) => unknown>()
 const { handleMock, removeHandlerMock, scanWorkspacePortsMock, processKillMock } = vi.hoisted(
   () => ({
     handleMock: vi.fn(),
diff --git a/src/main/ipc/worktree-common-git-directory.ts b/src/main/ipc/worktree-common-git-directory.ts
index a2ec6b0e990..7fb464f3c94 100644
--- a/src/main/ipc/worktree-common-git-directory.ts
+++ b/src/main/ipc/worktree-common-git-directory.ts
@@ -26,7 +26,7 @@ function isFileStat(value: GitDirectoryStat): boolean {
 function runtimeDirname(pathValue: string): string {
   const normalized = normalizeRuntimePathSeparators(pathValue).replace(/\/+$/, '')
   const index = normalized.lastIndexOf('/')
-  if (index < 0) {
+  if (index === -1) {
     return '.'
   }
   if (index === 0) {
diff --git a/src/main/ipc/worktree-git-common-polling.ts b/src/main/ipc/worktree-git-common-polling.ts
index dae122943a3..86cc06e1420 100644
--- a/src/main/ipc/worktree-git-common-polling.ts
+++ b/src/main/ipc/worktree-git-common-polling.ts
@@ -74,7 +74,7 @@ async function snapshotGitCommon(
   previous?: GitCommonSnapshot,
   includePrimary = true,
   forceFullScan = false,
-  statusRefPaths: Set<string> = new Set()
+  statusRefPaths = new Set<string>()
 ): Promise<GitCommonSnapshot> {
   const worktreesDir = join(commonDirPath, 'worktrees')
   const [worktreesDirSignature, primarySignatures, statusRefSignatures] = await Promise.all([
diff --git a/src/main/jira/attachment-images.ts b/src/main/jira/attachment-images.ts
index ce2e682b872..d1cfb2ab079 100644
--- a/src/main/jira/attachment-images.ts
+++ b/src/main/jira/attachment-images.ts
@@ -191,7 +191,7 @@ export function createMediaMarkdownResolver(
     }
     const index = queue.findIndex((entry) => entry.id === image.id)
     // Why: already-consumed images must not re-emit; fall through to positional pairing.
-    if (index < 0) {
+    if (index === -1) {
       return null
     }
     queue.splice(index, 1)
diff --git a/src/main/jira/client.ts b/src/main/jira/client.ts
index 70f45628461..cd3497fb2be 100644
--- a/src/main/jira/client.ts
+++ b/src/main/jira/client.ts
@@ -61,7 +61,7 @@ export function acquire(signal?: AbortSignal): Promise<void> {
       signal,
       onAbort: () => {
         const index = queue.indexOf(entry)
-        if (index < 0) {
+        if (index === -1) {
           return
         }
         queue.splice(index, 1)
diff --git a/src/main/keybindings/keybinding-file.ts b/src/main/keybindings/keybinding-file.ts
index 4d41a42ba87..7a357010406 100644
--- a/src/main/keybindings/keybinding-file.ts
+++ b/src/main/keybindings/keybinding-file.ts
@@ -221,7 +221,7 @@ function removeConflictingOverrides(
 
     for (const conflict of conflicts) {
       for (const actionId of conflict.actionIds) {
-        if (Object.prototype.hasOwnProperty.call(next, actionId)) {
+        if (Object.hasOwn(next, actionId)) {
           conflictingOverrides.add(actionId)
         }
       }
@@ -346,8 +346,8 @@ export function seedLegacyTabSwitchBindings(
   // common + active-platform sections directly so the seed never replaces it.
   const toSeed = actionIds.filter(
     (actionId) =>
-      !Object.prototype.hasOwnProperty.call(current.commonOverrides, actionId) &&
-      !Object.prototype.hasOwnProperty.call(activePlatformOverrides, actionId)
+      !Object.hasOwn(current.commonOverrides, actionId) &&
+      !Object.hasOwn(activePlatformOverrides, actionId)
   )
   if (toSeed.length === 0) {
     return { seeded: false, snapshot: current }
diff --git a/src/main/kimi/hook-service.ts b/src/main/kimi/hook-service.ts
index 8036330272a..a7b954f01cb 100644
--- a/src/main/kimi/hook-service.ts
+++ b/src/main/kimi/hook-service.ts
@@ -58,10 +58,12 @@ function getManagedCommand(scriptPath: string): string {
   return wrapPosixHookCommand(posixPath)
 }
 
-function getManagedScript(): string {
-  return [
-    '#!/bin/sh',
-    ...buildPosixHookPayloadCapture(),
+function getManagedScript(target: 'local' | 'posix' = 'local'): string {
+  // Why (#11549 class): on Windows this .sh runs under Git Bash but the caller is a
+  // Windows process that can abandon the pipe, so the missing-env guard must run before
+  // the capture owns stdin. POSIX callers close stdin (#8110), so posix keeps capture-first.
+  const windowsLocal = target === 'local' && process.platform === 'win32'
+  const endpointRefreshAndGuard = [
     // Why: refresh PORT/TOKEN/ENV/VERSION from the current Orca install so a PTY
     // that survived an Orca restart still reaches the live listener. See
     // claude/hook-service.ts for the full rationale.
@@ -70,7 +72,13 @@ function getManagedScript(): string {
     'fi',
     'if [ -z "$ORCA_AGENT_HOOK_PORT" ] || [ -z "$ORCA_AGENT_HOOK_TOKEN" ] || [ -z "$ORCA_PANE_KEY" ]; then',
     '  exit 0',
-    'fi',
+    'fi'
+  ]
+  return [
+    '#!/bin/sh',
+    ...(windowsLocal
+      ? [...endpointRefreshAndGuard, ...buildPosixHookPayloadCapture()]
+      : [...buildPosixHookPayloadCapture(), ...endpointRefreshAndGuard]),
     // Why: worktreeId embeds a filesystem path, so hand-building JSON in POSIX
     // shell is not safe once a path contains quotes or newlines. Post the raw
     // hook payload plus metadata as form fields and let the receiver parse it.
@@ -212,7 +220,7 @@ export class KimiHookService {
       const text = (await readTextFileRemote(sftp, remoteConfigPath)) ?? ''
       const command = wrapPosixHookCommand(remoteScriptPath)
       // Write the script first so config.toml never points at a missing script.
-      await writeManagedScriptRemote(sftp, remoteScriptPath, getManagedScript())
+      await writeManagedScriptRemote(sftp, remoteScriptPath, getManagedScript('posix'))
       await writeTextFileRemoteAtomic(sftp, remoteConfigPath, applyManagedKimiHooks(text, command))
       return {
         agent: 'kimi',
diff --git a/src/main/line-editor-ready-output-scanner.test.ts b/src/main/line-editor-ready-output-scanner.test.ts
new file mode 100644
index 00000000000..332f1d65f04
--- /dev/null
+++ b/src/main/line-editor-ready-output-scanner.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from 'vitest'
+import {
+  createLineEditorReadyOutputScanState,
+  scanForLineEditorReadyOutput
+} from './line-editor-ready-output-scanner'
+
+describe('line editor ready output scanner', () => {
+  it.each(['\x1b[?2004h', '\x1b[?1034h'])('detects %j across chunks', (sequence) => {
+    const state = createLineEditorReadyOutputScanState()
+    expect(scanForLineEditorReadyOutput(state, `prompt${sequence.slice(0, 4)}`)).toBe(false)
+    expect(scanForLineEditorReadyOutput(state, sequence.slice(4))).toBe(true)
+  })
+
+  it('ignores ordinary prompt output', () => {
+    expect(
+      scanForLineEditorReadyOutput(createLineEditorReadyOutputScanState(), 'user@host % ')
+    ).toBe(false)
+  })
+})
diff --git a/src/main/line-editor-ready-output-scanner.ts b/src/main/line-editor-ready-output-scanner.ts
new file mode 100644
index 00000000000..03467887a9a
--- /dev/null
+++ b/src/main/line-editor-ready-output-scanner.ts
@@ -0,0 +1,19 @@
+const LINE_EDITOR_READY_SEQUENCES = ['\x1b[?2004h', '\x1b[?1034h'] as const
+const MAX_SEQUENCE_LENGTH = Math.max(...LINE_EDITOR_READY_SEQUENCES.map((value) => value.length))
+
+export type LineEditorReadyOutputScanState = {
+  tail: string
+}
+
+export function createLineEditorReadyOutputScanState(): LineEditorReadyOutputScanState {
+  return { tail: '' }
+}
+
+export function scanForLineEditorReadyOutput(
+  state: LineEditorReadyOutputScanState,
+  data: string
+): boolean {
+  const combined = state.tail + data
+  state.tail = combined.slice(-(MAX_SEQUENCE_LENGTH - 1))
+  return LINE_EDITOR_READY_SEQUENCES.some((sequence) => combined.includes(sequence))
+}
diff --git a/src/main/linear/issue-context-client.ts b/src/main/linear/issue-context-client.ts
index 1f4863d235a..c9e5085f3bb 100644
--- a/src/main/linear/issue-context-client.ts
+++ b/src/main/linear/issue-context-client.ts
@@ -43,7 +43,7 @@ export type ResolvedIssue = {
 export async function searchLinearIssuesForAgents(args: {
   query: string
   limit?: number
-  workspaceId?: string | 'all'
+  workspaceId?: (string & {}) | 'all'
 }): Promise<LinearSearchResult> {
   const limit = clampLinearSearchLimit(args.limit)
   const workspaceId = resolveSearchWorkspaceId(args.workspaceId)
@@ -144,14 +144,18 @@ function getExplicitClientEntries(workspaceId?: string): {
   }
 }
 
-function resolveSearchWorkspaceId(workspaceId?: string | 'all'): string | 'all' | undefined {
+function resolveSearchWorkspaceId(
+  workspaceId?: (string & {}) | 'all'
+): (string & {}) | 'all' | undefined {
   if (!workspaceId || workspaceId === 'all') {
     return workspaceId
   }
   return resolveWorkspaceSelector({ workspaceId }, getConnectedWorkspaces())?.id ?? workspaceId
 }
 
-function throwIfExplicitWorkspaceHasConnectedAlternatives(workspaceId?: string | 'all'): void {
+function throwIfExplicitWorkspaceHasConnectedAlternatives(
+  workspaceId?: (string & {}) | 'all'
+): void {
   if (!workspaceId || workspaceId === 'all') {
     return
   }
@@ -169,7 +173,7 @@ function throwIfExplicitWorkspaceHasConnectedAlternatives(workspaceId?: string |
 export async function withLinearRead<T>(
   entry: LinearClientForWorkspace,
   read: () => Promise<T>,
-  selection?: string | 'all'
+  selection?: (string & {}) | 'all'
 ): Promise<T> {
   void selection
   await acquire()
@@ -206,7 +210,7 @@ async function readIssueWorkspace(
 async function readIssueWorkspaces(
   entries: LinearClientForWorkspace[],
   identifier: string,
-  selection: string | 'all',
+  selection: (string & {}) | 'all',
   initialFailures: WorkspaceReadFailure[] = []
 ): Promise<ResolvedIssue[]> {
   if (selection !== 'all') {
@@ -243,7 +247,7 @@ async function readSearchWorkspace(
   entry: LinearClientForWorkspace,
   query: string,
   limit: number,
-  workspaceId?: string | 'all'
+  workspaceId?: (string & {}) | 'all'
 ): Promise<LinearSearchIssueSummary[]> {
   const response = await withLinearRead(
     entry,
@@ -269,7 +273,7 @@ async function readSearchWorkspaces(
   entries: LinearClientForWorkspace[],
   query: string,
   limit: number,
-  workspaceId?: string | 'all',
+  workspaceId?: (string & {}) | 'all',
   initialFailures: WorkspaceReadFailure[] = []
 ): Promise<{ results: LinearSearchIssueSummary[][]; failures: WorkspaceReadFailure[] }> {
   if (workspaceId && workspaceId !== 'all') {
diff --git a/src/main/linear/mcp-issue-list.ts b/src/main/linear/mcp-issue-list.ts
index 3906442879e..09c5fff3336 100644
--- a/src/main/linear/mcp-issue-list.ts
+++ b/src/main/linear/mcp-issue-list.ts
@@ -106,7 +106,7 @@ export async function listMcpIssues(
   }
 }
 
-function getIssueListEntries(workspaceId?: string | 'all'): {
+function getIssueListEntries(workspaceId?: (string & {}) | 'all'): {
   entries: LinearClientForWorkspace[]
   failures: WorkspaceReadFailure[]
 } {
diff --git a/src/main/memory/windows-process-resource-collector.ts b/src/main/memory/windows-process-resource-collector.ts
index d73ae95b8c9..527c4678fc9 100644
--- a/src/main/memory/windows-process-resource-collector.ts
+++ b/src/main/memory/windows-process-resource-collector.ts
@@ -286,7 +286,7 @@ export function parseTypeperfProcessOutput(stdout: string): WindowsProcessResour
 function parseTypeperfCounterPath(path: string): { instance: string; counter: string } | null {
   const processStart = path.lastIndexOf('\\Process(')
   const counterStart = path.lastIndexOf(')\\')
-  if (processStart < 0 || counterStart <= processStart + 9) {
+  if (processStart === -1 || counterStart <= processStart + 9) {
     return null
   }
   return {
diff --git a/src/main/minimax/minimax-cookie-store.ts b/src/main/minimax/minimax-cookie-store.ts
index 3864f892bfb..1b98a1a81c6 100644
--- a/src/main/minimax/minimax-cookie-store.ts
+++ b/src/main/minimax/minimax-cookie-store.ts
@@ -33,7 +33,7 @@ function decodeCookieEnvelope(raw: Buffer): MiniMaxCookieEnvelope | null {
   }
   const rest = text.slice(COOKIE_ENVELOPE_PREFIX.length)
   const separator = rest.indexOf(':')
-  if (separator < 0) {
+  if (separator === -1) {
     throw new Error('MiniMax session cookie could not be decrypted')
   }
   const kind = rest.slice(0, separator)
diff --git a/src/main/native-chat/host-readable-transcript-path-fs-gate.test.ts b/src/main/native-chat/host-readable-transcript-path-fs-gate.test.ts
index 30bd3716d3e..5043bd14f6c 100644
--- a/src/main/native-chat/host-readable-transcript-path-fs-gate.test.ts
+++ b/src/main/native-chat/host-readable-transcript-path-fs-gate.test.ts
@@ -20,6 +20,7 @@ import {
   resetHostReadableTranscriptPathCacheForTests,
   toHostReadableTranscriptPath
 } from './host-readable-transcript-path'
+import { WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS } from './wsl-transcript-fs-gate'
 
 type AccessControl = {
   resolve: () => void
@@ -97,4 +98,27 @@ describe('WSL transcript filesystem gate', () => {
     releaseWsl?.()
     await expect(wslProbe).resolves.toBe(firstUncPath)
   })
+
+  // Last on purpose: the never-settling Ubuntu probe leaves its gate permit
+  // stuck for the rest of this module's lifetime.
+  it('falls through to the next distro when a probe exceeds the gate deadline', async () => {
+    vi.useFakeTimers()
+    const DEBIAN_HOME = '\\\\wsl.localhost\\Debian\\home\\ada'
+    const debianUncPath = '\\\\wsl.localhost\\Debian\\home\\ada\\.codex\\sessions\\first.jsonl'
+    try {
+      fsMocks.access.mockImplementation((path) =>
+        path === firstUncPath ? new Promise<void>(() => {}) : Promise.resolve()
+      )
+      const resolved = toHostReadableTranscriptPath(firstGuestPath, {
+        platform: 'win32',
+        listWslHomeDirs: async () => [UBUNTU_HOME, DEBIAN_HOME]
+      })
+
+      await vi.waitFor(() => expect(fsMocks.access).toHaveBeenCalledWith(firstUncPath))
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await expect(resolved).resolves.toBe(debianUncPath)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
 })
diff --git a/src/main/native-chat/host-readable-transcript-path.test.ts b/src/main/native-chat/host-readable-transcript-path.test.ts
index 043c77ee4c0..4d19b3fa8e8 100644
--- a/src/main/native-chat/host-readable-transcript-path.test.ts
+++ b/src/main/native-chat/host-readable-transcript-path.test.ts
@@ -7,6 +7,7 @@ import {
   toHostReadableTranscriptPath,
   wslCodexSessionsDirs
 } from './host-readable-transcript-path'
+import { WslTranscriptFsError } from './wsl-transcript-fs-gate'
 
 const UBUNTU_HOME = '\\\\wsl.localhost\\Ubuntu\\home\\ada'
 const DEBIAN_HOME = '\\\\wsl.localhost\\Debian\\home\\other'
@@ -109,6 +110,38 @@ describe('toHostReadableTranscriptPath', () => {
     ).resolves.toBeNull()
   })
 
+  it('prefers a later distro hit over an earlier gate refusal', async () => {
+    // Guest path under Debian's $HOME so the refusing Debian probe ranks first.
+    await expect(
+      toHostReadableTranscriptPath('/home/other/x.jsonl', {
+        platform: 'win32',
+        pathExists: async (candidate) => {
+          if (candidate.includes('Debian')) {
+            throw new WslTranscriptFsError('timeout', 'slow share')
+          }
+          return candidate.includes('Ubuntu')
+        },
+        listWslHomeDirs: async () => [DEBIAN_HOME, UBUNTU_HOME]
+      })
+    ).resolves.toBe('\\\\wsl.localhost\\Ubuntu\\home\\other\\x.jsonl')
+  })
+
+  it('reports unavailability, not a miss, when a refused distro was never probed', async () => {
+    const refusal = new WslTranscriptFsError('timeout', 'slow share')
+    await expect(
+      toHostReadableTranscriptPath('/home/other/x.jsonl', {
+        platform: 'win32',
+        pathExists: async (candidate) => {
+          if (candidate.includes('Debian')) {
+            throw refusal
+          }
+          return false
+        },
+        listWslHomeDirs: async () => [DEBIAN_HOME, UBUNTU_HOME]
+      })
+    ).rejects.toBe(refusal)
+  })
+
   it('does not translate guest paths off Windows', async () => {
     await expect(
       toHostReadableTranscriptPath('/home/ada/rollout.jsonl', {
diff --git a/src/main/native-chat/host-readable-transcript-path.ts b/src/main/native-chat/host-readable-transcript-path.ts
index 2672040e38b..4d919099536 100644
--- a/src/main/native-chat/host-readable-transcript-path.ts
+++ b/src/main/native-chat/host-readable-transcript-path.ts
@@ -4,7 +4,11 @@ import { isAbsolute } from 'node:path'
 import { isWslUncPath, parseWslUncPath, toWindowsWslPath } from '../../shared/wsl-paths'
 import { WSL_CODEX_RUNTIME_HOME_SEGMENTS } from '../pty/codex-home-wsl-env'
 import { getWslHomeAsync, listWslDistrosAsync } from '../wsl'
-import { runWslTranscriptFsTask } from './wsl-transcript-fs-gate'
+import {
+  runWslTranscriptFsTask,
+  wslTranscriptFsRefusal,
+  type WslTranscriptFsError
+} from './wsl-transcript-fs-gate'
 
 /**
  * True for guest-absolute Linux paths that Win32 cannot open as-is.
@@ -136,12 +140,22 @@ export async function toHostReadableTranscriptPath(
   const homeDirs = await wslHomeDirs(deps.listWslHomeDirs ?? defaultListWslHomeDirs)
   // Sequential on purpose: the ranked order picks the owning distro, and probing
   // every distro at once would fan out 9P calls to ones the user left stopped.
+  let unavailable: WslTranscriptFsError | undefined
   for (const distro of rankDistrosForGuestPath(homeDirs, path)) {
     const uncPath = toWindowsWslPath(path, distro)
-    if (await pathExists(uncPath)) {
-      return uncPath
+    try {
+      if (await pathExists(uncPath)) {
+        return uncPath
+      }
+    } catch (error) {
+      // Why: one stalled distro must not hide another distro's hit.
+      unavailable = wslTranscriptFsRefusal(error)
     }
   }
+  // No hit and at least one distro never probed: "couldn't look", not "absent".
+  if (unavailable) {
+    throw unavailable
+  }
   return null
 }
 
diff --git a/src/main/native-chat/native-chat-file-provenance.test.ts b/src/main/native-chat/native-chat-file-provenance.test.ts
new file mode 100644
index 00000000000..f92bd829026
--- /dev/null
+++ b/src/main/native-chat/native-chat-file-provenance.test.ts
@@ -0,0 +1,129 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { NativeChatMessage } from '../../shared/native-chat-types'
+import type { RuntimeMobileSessionClientTab } from '../../shared/runtime-types'
+import { nativeChatTranscriptIncludesPath } from './native-chat-file-provenance'
+
+function terminalTab(): RuntimeMobileSessionClientTab {
+  return {
+    type: 'terminal',
+    id: 'tab-1',
+    title: 'Codex',
+    parentTabId: 'parent-1',
+    leafId: 'leaf-1',
+    launchAgent: 'codex',
+    agentStatus: {
+      state: 'done',
+      prompt: '',
+      updatedAt: 1,
+      stateStartedAt: 1,
+      paneKey: 'parent-1:leaf-1',
+      stateHistory: [],
+      agentType: 'codex',
+      providerSession: {
+        key: 'session_id',
+        id: 'session-1',
+        transcriptPath: '/host/transcripts/session-1.jsonl'
+      }
+    },
+    isActive: true,
+    status: 'ready',
+    terminal: 'term-1'
+  }
+}
+
+function message(role: NativeChatMessage['role'], text: string): NativeChatMessage {
+  return {
+    id: `${role}-1`,
+    role,
+    blocks: [{ type: 'text', text }],
+    timestamp: 1,
+    source: 'transcript'
+  }
+}
+
+describe('nativeChatTranscriptIncludesPath', () => {
+  it('accepts a path in recent assistant output from the host-bound session', async () => {
+    const readTranscript = vi.fn(async () => ({
+      messages: [message('assistant', 'Open ~/orca-plans/result.html to review it.')]
+    }))
+
+    await expect(
+      nativeChatTranscriptIncludesPath({
+        tabs: [terminalTab()],
+        context: { tabId: 'tab-1', sessionId: 'session-1' },
+        pathText: '~/orca-plans/result.html',
+        absolutePath: '/Users/ada/orca-plans/result.html',
+        readTranscript
+      })
+    ).resolves.toBe(true)
+    expect(readTranscript).toHaveBeenCalledWith({
+      agent: 'codex',
+      sessionId: 'session-1',
+      transcriptPath: '/host/transcripts/session-1.jsonl',
+      limit: 2000
+    })
+  })
+
+  it('rejects a client session identity that does not match the host tab', async () => {
+    const readTranscript = vi.fn()
+
+    await expect(
+      nativeChatTranscriptIncludesPath({
+        tabs: [terminalTab()],
+        context: { tabId: 'tab-1', sessionId: 'forged-session' },
+        pathText: '/etc/passwd',
+        absolutePath: '/etc/passwd',
+        readTranscript
+      })
+    ).resolves.toBe(false)
+    expect(readTranscript).not.toHaveBeenCalled()
+  })
+
+  it('accepts a path followed by a sentence-final period', async () => {
+    const readTranscript = vi.fn(async () => ({
+      messages: [message('assistant', 'Open /tmp/orca-pr14166-external.txt.')]
+    }))
+
+    await expect(
+      nativeChatTranscriptIncludesPath({
+        tabs: [terminalTab()],
+        context: { tabId: 'tab-1', sessionId: 'session-1' },
+        pathText: '/tmp/orca-pr14166-external.txt',
+        absolutePath: '/tmp/orca-pr14166-external.txt',
+        readTranscript
+      })
+    ).resolves.toBe(true)
+  })
+
+  it('does not accept a longer filename sharing the requested path prefix', async () => {
+    const readTranscript = vi.fn(async () => ({
+      messages: [message('assistant', 'Open /tmp/orca-pr14166-external.txt.backup')]
+    }))
+
+    await expect(
+      nativeChatTranscriptIncludesPath({
+        tabs: [terminalTab()],
+        context: { tabId: 'tab-1', sessionId: 'session-1' },
+        pathText: '/tmp/orca-pr14166-external.txt',
+        absolutePath: '/tmp/orca-pr14166-external.txt',
+        readTranscript
+      })
+    ).resolves.toBe(false)
+  })
+
+  it('does not treat user-authored transcript text as agent provenance', async () => {
+    const readTranscript = vi.fn(async () => ({
+      messages: [message('user', 'Please open /etc/passwd')]
+    }))
+
+    await expect(
+      nativeChatTranscriptIncludesPath({
+        tabs: [terminalTab()],
+        context: { tabId: 'tab-1', sessionId: 'session-1' },
+        pathText: '/etc/passwd',
+        absolutePath: '/etc/passwd',
+        readTranscript
+      })
+    ).resolves.toBe(false)
+  })
+})
diff --git a/src/main/native-chat/native-chat-file-provenance.ts b/src/main/native-chat/native-chat-file-provenance.ts
new file mode 100644
index 00000000000..07b0b47082e
--- /dev/null
+++ b/src/main/native-chat/native-chat-file-provenance.ts
@@ -0,0 +1,74 @@
+import type { AgentType, NativeChatMessage } from '../../shared/native-chat-types'
+import { resolveNativeChatTranscriptAgent } from '../../shared/native-chat-agent-support'
+import type {
+  RuntimeMobileSessionClientTab,
+  RuntimeMobileSessionTerminalClientTab,
+  RuntimeNativeChatFileContext
+} from '../../shared/runtime-types'
+import { recentTerminalOutputIncludesPath } from '../runtime/terminal-output-path-candidates'
+import { readNativeChatTranscriptTail } from './transcript-tail-reader'
+
+// Match the largest transcript window mobile can render so any visible citation remains provable.
+const NATIVE_CHAT_FILE_PROVENANCE_WINDOW = 2000
+
+type TranscriptRead = (args: {
+  agent: AgentType
+  sessionId: string
+  transcriptPath?: string
+  limit: number
+}) => Promise<{ messages: NativeChatMessage[] } | { error: string }>
+
+function transcriptTextIncludesPath(text: string, pathText: string, absolutePath: string): boolean {
+  if (recentTerminalOutputIncludesPath(text, pathText, absolutePath)) {
+    return true
+  }
+  // Mobile excludes a sentence-final period from the tappable path span.
+  return recentTerminalOutputIncludesPath(text, `${pathText}.`, `${absolutePath}.`)
+}
+
+export async function nativeChatTranscriptIncludesPath(args: {
+  tabs: readonly RuntimeMobileSessionClientTab[]
+  context: RuntimeNativeChatFileContext
+  pathText: string
+  absolutePath: string
+  readTranscript?: TranscriptRead
+}): Promise<boolean> {
+  const tab = args.tabs.find(
+    (candidate): candidate is RuntimeMobileSessionTerminalClientTab =>
+      candidate.type === 'terminal' && candidate.id === args.context.tabId
+  )
+  const providerSession = tab?.agentStatus?.providerSession
+  const agent = tab?.agentStatus?.agentType ?? tab?.launchAgent
+  if (
+    !tab ||
+    !providerSession ||
+    providerSession.id !== args.context.sessionId ||
+    !agent ||
+    !resolveNativeChatTranscriptAgent(agent)
+  ) {
+    return false
+  }
+
+  try {
+    const result = await (args.readTranscript ?? readNativeChatTranscriptTail)({
+      agent,
+      sessionId: providerSession.id,
+      ...(providerSession.transcriptPath ? { transcriptPath: providerSession.transcriptPath } : {}),
+      limit: NATIVE_CHAT_FILE_PROVENANCE_WINDOW
+    })
+    if (!('messages' in result)) {
+      return false
+    }
+    return result.messages.some(
+      (message) =>
+        message.role === 'assistant' &&
+        message.blocks.some(
+          (block) =>
+            block.type === 'text' &&
+            transcriptTextIncludesPath(block.text, args.pathText, args.absolutePath)
+        )
+    )
+  } catch {
+    return false
+  }
+}
diff --git a/src/main/native-chat/session-file-resolver-wsl-scan-gate.test.ts b/src/main/native-chat/session-file-resolver-wsl-scan-gate.test.ts
index 07ccc107d65..af14882b371 100644
--- a/src/main/native-chat/session-file-resolver-wsl-scan-gate.test.ts
+++ b/src/main/native-chat/session-file-resolver-wsl-scan-gate.test.ts
@@ -1,10 +1,12 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as WslTranscriptFsGateModule from './wsl-transcript-fs-gate'
 
 const WSL_SESSIONS_DIR = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex\\sessions'
+const DEBIAN_SESSIONS_DIR = '\\\\wsl.localhost\\Debian\\home\\ada\\.codex\\sessions'
 const LOCAL_SESSIONS_DIR = 'C:\\Users\\ada\\.codex\\sessions'
 
 const mocks = vi.hoisted(() => ({
-  gate: vi.fn(async () => []),
+  gate: vi.fn(async (_options: { path: string }) => []),
   walk: vi.fn(
     async (
       dir: string,
@@ -18,7 +20,8 @@ const mocks = vi.hoisted(() => ({
   )
 }))
 
-vi.mock('./wsl-transcript-fs-gate', () => ({
+vi.mock('./wsl-transcript-fs-gate', async (importOriginal) => ({
+  ...(await importOriginal<typeof WslTranscriptFsGateModule>()),
   runWslTranscriptFsTask: mocks.gate
 }))
 vi.mock('../ai-vault/session-scanner-discovery', () => ({
@@ -26,6 +29,7 @@ vi.mock('../ai-vault/session-scanner-discovery', () => ({
 }))
 
 import { resolveSessionFilePath } from './session-file-resolver'
+import { WslTranscriptFsError } from './wsl-transcript-fs-gate'
 
 beforeEach(() => {
   mocks.gate.mockClear()
@@ -53,4 +57,77 @@ describe('Codex WSL scan gate', () => {
     expect(mocks.gate).not.toHaveBeenCalled()
     expect(mocks.walk).toHaveBeenCalledTimes(1)
   })
+
+  it("still surfaces a later root's hit when an earlier root is gate-refused", async () => {
+    const hit = `${DEBIAN_SESSIONS_DIR}\\2026\\rollout-1-session-id.jsonl`
+    mocks.gate.mockImplementation(async (options) => {
+      if (options.path.includes('Ubuntu')) {
+        throw new WslTranscriptFsError('timeout', 'slow share')
+      }
+      return []
+    })
+    mocks.walk.mockImplementation(async (dir, _agent, _issues, options) => {
+      await options.readDirectory?.(dir)
+      return dir === DEBIAN_SESSIONS_DIR ? [hit] : []
+    })
+
+    await expect(
+      resolveSessionFilePath('codex', 'session-id', {
+        codexSessionsDirs: [WSL_SESSIONS_DIR, DEBIAN_SESSIONS_DIR]
+      })
+    ).resolves.toBe(hit)
+  })
+
+  it('reports unavailability, not a miss, when every scanned root is gate-refused', async () => {
+    const refusal = new WslTranscriptFsError('unavailable', 'stuck permits')
+    mocks.gate.mockRejectedValue(refusal)
+
+    await expect(
+      resolveSessionFilePath('codex', 'session-id', {
+        codexSessionsDirs: [WSL_SESSIONS_DIR]
+      })
+    ).rejects.toBe(refusal)
+  })
+
+  it('falls through a gate-refused hook path to an id-based hit', async () => {
+    const hit = `${DEBIAN_SESSIONS_DIR}\\2026\\rollout-1-session-id.jsonl`
+    mocks.gate.mockImplementation(async (options: { operation?: string; path: string }) => {
+      if (options.operation === 'access') {
+        throw new WslTranscriptFsError('timeout', 'slow share')
+      }
+      return []
+    })
+    mocks.walk.mockImplementation(async (dir, _agent, _issues, options) => {
+      await options.readDirectory?.(dir)
+      return dir === DEBIAN_SESSIONS_DIR ? [hit] : []
+    })
+
+    await expect(
+      resolveSessionFilePath('codex', 'session-id', {
+        transcriptPath: `${WSL_SESSIONS_DIR}\\2026\\rollout-1-session-id.jsonl`,
+        codexSessionsDirs: [DEBIAN_SESSIONS_DIR]
+      })
+    ).resolves.toBe(hit)
+  })
+
+  it('surfaces the hook-path refusal when the id search also misses', async () => {
+    const refusal = new WslTranscriptFsError('unavailable', 'stuck permits')
+    mocks.gate.mockImplementation(async (options: { operation?: string; path: string }) => {
+      if (options.operation === 'access') {
+        throw refusal
+      }
+      return []
+    })
+    mocks.walk.mockImplementation(async (dir, _agent, _issues, options) => {
+      await options.readDirectory?.(dir)
+      return []
+    })
+
+    await expect(
+      resolveSessionFilePath('codex', 'session-id', {
+        transcriptPath: `${WSL_SESSIONS_DIR}\\2026\\rollout-1-session-id.jsonl`,
+        codexSessionsDirs: [LOCAL_SESSIONS_DIR]
+      })
+    ).rejects.toBe(refusal)
+  })
 })
diff --git a/src/main/native-chat/session-file-resolver.ts b/src/main/native-chat/session-file-resolver.ts
index f597529d933..f0376e01f02 100644
--- a/src/main/native-chat/session-file-resolver.ts
+++ b/src/main/native-chat/session-file-resolver.ts
@@ -1,7 +1,10 @@
 import { homedir } from 'node:os'
 import { basename, extname, join } from 'node:path'
 import type { AgentType } from '../../shared/native-chat-types'
-import { resolveNativeChatTranscriptAgent } from '../../shared/native-chat-agent-support'
+import {
+  resolveNativeChatTranscriptAgent,
+  type NativeChatTranscriptAgent
+} from '../../shared/native-chat-agent-support'
 import { isWslUncPath } from '../../shared/wsl-paths'
 import { walkSessionFiles } from '../ai-vault/session-scanner-discovery'
 import { OMP_SESSION_ARTIFACT_DIR_PATTERN } from '../ai-vault/session-scanner-omp-subagent-transcripts'
@@ -13,6 +16,7 @@ import {
 } from '../../shared/grok-session-paths'
 import { toHostReadableTranscriptPath, wslCodexSessionsDirs } from './host-readable-transcript-path'
 import { findWslCodexSessionPath } from './wsl-codex-session-path-scan'
+import { wslTranscriptFsRefusal, type WslTranscriptFsError } from './wsl-transcript-fs-gate'
 
 // Why: these mirror the path constants in ai-vault/session-scanner.ts. Reads
 // run in the main process against the runtime's own home directory; over SSH
@@ -95,14 +99,34 @@ export async function resolveSessionFilePath(
   // beats reconstructing a path from the session id. Route it through the host
   // readability check so a WSL guest path becomes an openable UNC on Windows;
   // stale/missing paths fall through to the id-based search.
+  let unavailable: WslTranscriptFsError | undefined
   const hookPath = options.transcriptPath?.trim()
   if (hookPath && extname(hookPath) === '.jsonl') {
-    const hostReadable = await toHostReadableTranscriptPath(hookPath, { signal })
-    if (hostReadable) {
-      return hostReadable
+    try {
+      const hostReadable = await toHostReadableTranscriptPath(hookPath, { signal })
+      if (hostReadable) {
+        return hostReadable
+      }
+    } catch (error) {
+      // Why: the id-based search may still hit; surface the refusal only when
+      // it does not, so a stalled distro reads as unavailable, never "missing".
+      unavailable = wslTranscriptFsRefusal(error)
     }
   }
 
+  const resolved = await resolveSessionFileById(transcriptAgent, sessionId, options, signal)
+  if (!resolved && unavailable) {
+    throw unavailable
+  }
+  return resolved
+}
+
+async function resolveSessionFileById(
+  transcriptAgent: NativeChatTranscriptAgent,
+  sessionId: string,
+  options: ResolveSessionFileOptions,
+  signal?: AbortSignal
+): Promise<string | null> {
   const trimmedId = sessionId.trim()
   if (!trimmedId) {
     return null
@@ -132,6 +156,10 @@ export async function resolveSessionFilePath(
   if (transcriptAgent === 'omp') {
     return resolveOmpSessionFile(trimmedId, options.ompSessionsDir ?? ompSessionsDir(), signal)
   }
+  // Why: a new transcript agent must pick its own resolver. Falling through to
+  // OMP's scan would search the wrong root with a foreign session id, so fail
+  // the build here instead of resolving silently wrong at runtime.
+  transcriptAgent satisfies never
   return null
 }
 
@@ -178,6 +206,7 @@ async function findCodexRolloutInDirs(
   sessionsDirs: string[],
   signal?: AbortSignal
 ): Promise<string | null> {
+  let unavailable: WslTranscriptFsError | undefined
   for (const sessionsDir of sessionsDirs) {
     // Why: no existence pre-check — walkSessionFiles already yields [] for a
     // missing/unreadable root, and a sync probe would block the main thread on a
@@ -190,18 +219,27 @@ async function findCodexRolloutInDirs(
       }
     }
     const isWslRoot = isWslUncPath(sessionsDir)
-    const files = isWslRoot
-      ? await findWslCodexSessionPath(sessionsDir, sessionId, signal)
-      : (
-          await walkSessionFiles(sessionsDir, 'codex', [], {
-            ...scanOptions,
-            signal
-          })
-        )[0]
-    if (files) {
-      return files
+    try {
+      const files = isWslRoot
+        ? await findWslCodexSessionPath(sessionsDir, sessionId, signal)
+        : (
+            await walkSessionFiles(sessionsDir, 'codex', [], {
+              ...scanOptions,
+              signal
+            })
+          )[0]
+      if (files) {
+        return files
+      }
+    } catch (error) {
+      // Why: one stalled distro must not hide another root's hit.
+      unavailable = wslTranscriptFsRefusal(error)
     }
   }
+  // No hit and at least one root never scanned: "couldn't look", not "missing".
+  if (unavailable) {
+    throw unavailable
+  }
   return null
 }
 
diff --git a/src/main/native-chat/transcript-file-version.ts b/src/main/native-chat/transcript-file-version.ts
index 69634c0a957..2de3c76821f 100644
--- a/src/main/native-chat/transcript-file-version.ts
+++ b/src/main/native-chat/transcript-file-version.ts
@@ -1,4 +1,6 @@
-import { stat } from 'node:fs/promises'
+import { readTranscriptSlice, wslGatedStat } from './wsl-transcript-fs-access'
+
+const BOUNDARY_FINGERPRINT_BYTES = 64
 
 export type TranscriptFileVersion = {
   identity: string
@@ -7,8 +9,11 @@ export type TranscriptFileVersion = {
   ctimeMs: number
 }
 
-export async function readTranscriptFileVersion(filePath: string): Promise<TranscriptFileVersion> {
-  const value = await stat(filePath)
+export async function readTranscriptFileVersion(
+  filePath: string,
+  signal?: AbortSignal
+): Promise<TranscriptFileVersion> {
+  const value = await wslGatedStat(filePath, 'exact', signal)
   return {
     identity: `${value.dev}:${value.ino}`,
     size: value.size,
@@ -17,6 +22,19 @@ export async function readTranscriptFileVersion(filePath: string): Promise<Trans
   }
 }
 
+export async function boundaryFingerprint(
+  filePath: string,
+  offset: number,
+  signal?: AbortSignal
+): Promise<string> {
+  if (offset <= 0) {
+    return ''
+  }
+  const start = Math.max(0, offset - BOUNDARY_FINGERPRINT_BYTES)
+  const slice = await readTranscriptSlice(filePath, start, offset - start, 'exact', signal)
+  return slice.toString('base64')
+}
+
 export function transcriptFileVersionChanged(
   current: TranscriptFileVersion,
   previous: TranscriptFileVersion
diff --git a/src/main/native-chat/transcript-incremental-reader.ts b/src/main/native-chat/transcript-incremental-reader.ts
index 8ad8cc335d1..1dd60f58292 100644
--- a/src/main/native-chat/transcript-incremental-reader.ts
+++ b/src/main/native-chat/transcript-incremental-reader.ts
@@ -1,10 +1,10 @@
-import { open, stat } from 'node:fs/promises'
 import type { NativeChatMessage, NativeChatTurnLifecycle } from '../../shared/native-chat-types'
 import { transcriptFallbackId } from './transcript-fallback-id'
 import {
   MAX_NATIVE_CHAT_TRANSCRIPT_RECORD_BYTES,
   type NativeChatLineDecoder
 } from './transcript-tail-reader'
+import { openTranscriptReadStream, wslGatedStat } from './wsl-transcript-fs-access'
 
 const APPEND_BATCH_MESSAGE_LIMIT = 40
 
@@ -30,16 +30,21 @@ export async function readIncrementalTranscriptMessages(
   decode: NativeChatLineDecoder,
   onBatch?: (messages: NativeChatMessage[]) => void,
   decodeLifecycle?: (line: string, fallbackId: string) => NativeChatTurnLifecycle | null,
-  onLifecycle?: (lifecycle: NativeChatTurnLifecycle) => void
+  onLifecycle?: (lifecycle: NativeChatTurnLifecycle) => void,
+  signal?: AbortSignal
 ): Promise<NativeChatMessage[]> {
-  const end = (await stat(filePath)).size
+  const end = (await wslGatedStat(filePath, 'exact', signal)).size
   if (end <= state.offset) {
     return []
   }
   const messages: NativeChatMessage[] = []
-  const handle = await open(filePath, 'r')
+  const stream = openTranscriptReadStream(
+    filePath,
+    { start: state.offset, end: end - 1 },
+    'exact',
+    signal
+  )
   try {
-    const stream = handle.createReadStream({ start: state.offset, end: end - 1, autoClose: false })
     let absoluteOffset = state.offset
     for await (const rawChunk of stream) {
       const chunk = Buffer.isBuffer(rawChunk) ? rawChunk : Buffer.from(rawChunk)
@@ -62,7 +67,9 @@ export async function readIncrementalTranscriptMessages(
     }
     return messages
   } finally {
-    await handle.close()
+    // Early exits (throw/oversized-record bail) must not leak the fd or, on
+    // UNC, the gated handle the generator's finally closes.
+    stream.destroy()
   }
 
   function retainPart(part: Buffer): void {
diff --git a/src/main/native-chat/transcript-read-cache-refusal-recovery.test.ts b/src/main/native-chat/transcript-read-cache-refusal-recovery.test.ts
new file mode 100644
index 00000000000..4e865b306fc
--- /dev/null
+++ b/src/main/native-chat/transcript-read-cache-refusal-recovery.test.ts
@@ -0,0 +1,115 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+const mocks = vi.hoisted(() => ({
+  resolve: vi.fn<() => Promise<string | null>>(),
+  stat: vi.fn(),
+  open: vi.fn()
+}))
+
+vi.mock('./session-file-resolver', () => ({
+  resolveSessionFilePath: mocks.resolve
+}))
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat,
+  open: mocks.open
+}))
+
+import {
+  clearNativeChatTranscriptCache,
+  readNativeChatTranscriptCached
+} from './transcript-read-cache'
+import {
+  WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS,
+  WSL_TRANSCRIPT_FS_SLOW_MESSAGE
+} from './wsl-transcript-fs-gate'
+
+const BODY = Buffer.from(
+  `${JSON.stringify({
+    type: 'user',
+    uuid: 'u-0',
+    timestamp: '2026-06-01T10:00:00.000Z',
+    message: { role: 'user', content: 'hello' }
+  })}\n`
+)
+
+let releaseStall: (() => void) | undefined
+
+function stalls<T>(value: T): Promise<T> {
+  return new Promise<T>((resolve) => {
+    releaseStall = () => resolve(value)
+  })
+}
+
+function transcriptHandle(body = BODY) {
+  return {
+    read: vi.fn(async (buffer: Buffer, offset: number, length: number, position: number) => {
+      const slice = body.subarray(position, Math.min(position + length, body.length))
+      slice.copy(buffer, offset)
+      return { bytesRead: slice.length, buffer }
+    }),
+    close: vi.fn(async () => {})
+  }
+}
+
+beforeEach(() => {
+  clearNativeChatTranscriptCache()
+  mocks.resolve.mockReset()
+  mocks.stat.mockReset()
+  mocks.open.mockReset()
+  releaseStall = undefined
+  mocks.resolve.mockResolvedValue(UNC_PATH)
+  // The file itself never changes across the refusal and the recovery.
+  mocks.stat.mockResolvedValue({ mtimeMs: 42, size: BODY.length })
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+})
+
+describe('cached native chat transcript read after WSL gate refusals', () => {
+  it('retries a refused stat instead of caching it as a missing file', async () => {
+    mocks.stat.mockReturnValueOnce(stalls({ mtimeMs: 42, size: BODY.length }))
+    const refused = readNativeChatTranscriptCached('claude', 'session-id')
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+
+    expect(await refused).toEqual({ error: WSL_TRANSCRIPT_FS_SLOW_MESSAGE })
+    releaseStall?.()
+    releaseStall = undefined
+    await vi.advanceTimersByTimeAsync(0)
+    mocks.open.mockResolvedValue(transcriptHandle())
+
+    await expect(readNativeChatTranscriptCached('claude', 'session-id')).resolves.toMatchObject({
+      messages: [expect.objectContaining({ role: 'user' })]
+    })
+    expect(mocks.stat).toHaveBeenCalledTimes(2)
+  })
+
+  it('retries the body on the next call even though the mtime is unchanged', async () => {
+    mocks.open.mockResolvedValue({
+      read: vi.fn((buffer: Buffer) => stalls({ bytesRead: 0, buffer })),
+      close: vi.fn(async () => {})
+    })
+    const refused = readNativeChatTranscriptCached('claude', 'session-id')
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    expect(await refused).toEqual({ error: WSL_TRANSCRIPT_FS_SLOW_MESSAGE })
+
+    releaseStall?.()
+    releaseStall = undefined
+    await vi.advanceTimersByTimeAsync(0)
+    mocks.open.mockResolvedValue(transcriptHandle())
+
+    const recovered = await readNativeChatTranscriptCached('claude', 'session-id')
+
+    expect(mocks.open).toHaveBeenCalledTimes(2)
+    expect(recovered).toMatchObject({
+      messages: [expect.objectContaining({ role: 'user' })]
+    })
+  })
+})
diff --git a/src/main/native-chat/transcript-read-cache-wsl-stall.test.ts b/src/main/native-chat/transcript-read-cache-wsl-stall.test.ts
new file mode 100644
index 00000000000..1ce0a22e455
--- /dev/null
+++ b/src/main/native-chat/transcript-read-cache-wsl-stall.test.ts
@@ -0,0 +1,91 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+
+const mocks = vi.hoisted(() => ({
+  resolve: vi.fn<() => Promise<string | null>>(),
+  stat: vi.fn(),
+  read: vi.fn()
+}))
+
+vi.mock('./session-file-resolver', () => ({
+  resolveSessionFilePath: mocks.resolve
+}))
+vi.mock('./transcript-reader', () => ({
+  readNativeChatTranscript: mocks.read
+}))
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat
+}))
+
+import {
+  clearNativeChatTranscriptCache,
+  readNativeChatTranscriptCached
+} from './transcript-read-cache'
+import { WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS } from './wsl-transcript-fs-gate'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+
+beforeEach(() => {
+  mocks.resolve.mockReset()
+  mocks.stat.mockReset()
+  mocks.read.mockReset()
+  mocks.resolve.mockResolvedValue(UNC_PATH)
+  clearNativeChatTranscriptCache()
+})
+
+describe('cached native chat transcript read with a stalled post-resolution stat', () => {
+  it('reports a retryable error without notFound and leaves nothing cached', async () => {
+    vi.useFakeTimers()
+    try {
+      mocks.stat.mockReturnValueOnce(new Promise(() => {}))
+      const stalled = readNativeChatTranscriptCached('claude', 'session-id')
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+
+      const result = await stalled
+      expect(result).toEqual({ error: SLOW_MESSAGE })
+      expect(result).not.toHaveProperty('notFound')
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('re-attempts the stat on the next call instead of serving a poisoned entry', async () => {
+    // The stalled task above still holds its permit, so this fast-fails on the
+    // stuck route rather than waiting out a second deadline — but it must still
+    // reach `stat` again once a different distro answers.
+    const healthyPath = '\\\\wsl.localhost\\Debian\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+    mocks.resolve.mockResolvedValue(healthyPath)
+    mocks.stat.mockResolvedValue({ mtimeMs: 5, size: 0 })
+    mocks.read.mockResolvedValue({ messages: [] })
+
+    await readNativeChatTranscriptCached('claude', 'session-id')
+
+    expect(mocks.stat).toHaveBeenCalledWith(healthyPath)
+  })
+
+  it('serves the cached parse rather than a retry banner once the distro stalls', async () => {
+    const path = '\\\\wsl.localhost\\Fedora\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+    mocks.resolve.mockResolvedValue(path)
+    mocks.stat.mockResolvedValue({ mtimeMs: 9, size: 4 })
+    mocks.read.mockResolvedValue({ messages: [{ role: 'user', text: 'hi' }] })
+    const warm = await readNativeChatTranscriptCached('claude', 'session-id')
+
+    vi.useFakeTimers()
+    try {
+      mocks.stat.mockReturnValueOnce(new Promise(() => {}))
+      const stalled = readNativeChatTranscriptCached('claude', 'session-id')
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+
+      // The stat is what the stall refuses; the parse it would have validated is
+      // complete and unchanged, so the chat stays rendered.
+      await expect(stalled).resolves.toBe(warm)
+      expect(mocks.read).toHaveBeenCalledOnce()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
diff --git a/src/main/native-chat/transcript-read-cache.ts b/src/main/native-chat/transcript-read-cache.ts
index 8943c223dd2..ee0c8ddcafd 100644
--- a/src/main/native-chat/transcript-read-cache.ts
+++ b/src/main/native-chat/transcript-read-cache.ts
@@ -1,7 +1,13 @@
-import { stat } from 'node:fs/promises'
 import type { AgentType } from '../../shared/native-chat-types'
 import { resolveSessionFilePath } from './session-file-resolver'
 import { readNativeChatTranscript, type ReadTranscriptResult } from './transcript-reader'
+import { wslGatedStat } from './wsl-transcript-fs-access'
+import {
+  WSL_TRANSCRIPT_FS_CAPACITY_MESSAGE,
+  WSL_TRANSCRIPT_FS_SLOW_MESSAGE,
+  WslTranscriptFsError,
+  wslTranscriptFsRefusal
+} from './wsl-transcript-fs-gate'
 
 // Why: both the desktop IPC handler and the runtime RPC handler read the same
 // host-filesystem transcript, so a single process-global cache keyed by the
@@ -71,9 +77,14 @@ function cacheKey(agent: AgentType, filePath: string): string {
 
 async function fileStat(filePath: string): Promise<{ mtimeMs: number; bytes: number }> {
   try {
-    const stats = await stat(filePath)
+    const stats = await wslGatedStat(filePath, 'exact')
     return { mtimeMs: stats.mtimeMs, bytes: stats.size }
-  } catch {
+  } catch (err) {
+    // Why: swallowing a gate refusal into an unknown mtime falls through to a
+    // full read that burns a second deadline. Let the caller report it instead.
+    if (err instanceof WslTranscriptFsError) {
+      throw err
+    }
     return { mtimeMs: Number.NaN, bytes: 0 }
   }
 }
@@ -89,7 +100,14 @@ export async function readNativeChatTranscriptCached(
   /** Hook-reported authoritative transcript path, preferred over the id glob. */
   transcriptPath?: string
 ): Promise<ReadTranscriptResult> {
-  const filePath = await resolveSessionFilePath(agent, sessionId, { transcriptPath })
+  let filePath: string | null
+  try {
+    filePath = await resolveSessionFilePath(agent, sessionId, { transcriptPath })
+  } catch (err) {
+    // Why: gate refusal is transient unavailability — report it without caching
+    // or `notFound` so the next call re-resolves.
+    return { error: wslTranscriptFsRefusal(err).message }
+  }
   if (!filePath) {
     // Not cached (see below): a not-yet-flushed transcript should be re-checked
     // on the next call, not pinned as a settled miss (#8401).
@@ -97,8 +115,22 @@ export async function readNativeChatTranscriptCached(
   }
 
   const key = cacheKey(agent, filePath)
-  const { mtimeMs, bytes } = await fileStat(filePath)
   const cached = cache.get(key)
+  let mtimeMs: number
+  let bytes: number
+  try {
+    ;({ mtimeMs, bytes } = await fileStat(filePath))
+  } catch (err) {
+    // Why: the refusal says the distro stalled, not that this parse went stale —
+    // a complete cached transcript beats a retry banner. With nothing cached the
+    // error stands, and no `notFound`, so the next call re-stats a woken distro.
+    if (cached) {
+      // Bump recency so a session read through a stall survives eviction.
+      setCached(key, cached)
+      return cached.result
+    }
+    return { error: wslTranscriptFsRefusal(err).message }
+  }
   if (cached && Number.isFinite(mtimeMs) && cached.mtimeMs === mtimeMs) {
     // Bump recency so a frequently-read session survives eviction.
     setCached(key, cached)
@@ -106,12 +138,25 @@ export async function readNativeChatTranscriptCached(
   }
 
   const result = await readNativeChatTranscript(agent, sessionId, { filePath })
-  if (Number.isFinite(mtimeMs)) {
+  // Why: a body-read refusal is transient unavailability, but the file's mtime
+  // is unchanged by it — caching it would serve the retryable error to every
+  // later call until the transcript itself changes, even after the distro woke.
+  if (Number.isFinite(mtimeMs) && !isGateRefusal(result)) {
     setCached(key, { result, mtimeMs, bytes })
   }
   return result
 }
 
+// The reader flattens a refusal into its message, so that is the only handle
+// this layer has on one.
+function isGateRefusal(result: ReadTranscriptResult): boolean {
+  return (
+    'error' in result &&
+    (result.error === WSL_TRANSCRIPT_FS_SLOW_MESSAGE ||
+      result.error === WSL_TRANSCRIPT_FS_CAPACITY_MESSAGE)
+  )
+}
+
 /** Test-only: drop the transcript parse cache between runs. */
 export function clearNativeChatTranscriptCache(): void {
   cache.clear()
diff --git a/src/main/native-chat/transcript-reader-wsl-stall.test.ts b/src/main/native-chat/transcript-reader-wsl-stall.test.ts
new file mode 100644
index 00000000000..47d50ab74bc
--- /dev/null
+++ b/src/main/native-chat/transcript-reader-wsl-stall.test.ts
@@ -0,0 +1,85 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+
+const mocks = vi.hoisted(() => ({ open: vi.fn() }))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  open: mocks.open
+}))
+
+import { readNativeChatTranscript } from './transcript-reader'
+import { WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS } from './wsl-transcript-fs-gate'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+
+const LINE = JSON.stringify({
+  type: 'user',
+  uuid: 'u1',
+  timestamp: '2026-01-01T00:00:00.000Z',
+  message: { role: 'user', content: 'hi' }
+})
+
+function handleServing(body: Buffer, delayMs = 0) {
+  return {
+    read: vi.fn(
+      (buffer: Buffer, offset: number, length: number, position: number) =>
+        new Promise((resolve) => {
+          const slice = body.subarray(position, Math.min(position + length, body.length))
+          slice.copy(buffer, offset)
+          const settle = () => resolve({ bytesRead: slice.length, buffer })
+          if (delayMs > 0) {
+            setTimeout(settle, delayMs)
+          } else {
+            settle()
+          }
+        })
+    ),
+    close: vi.fn(async () => {})
+  }
+}
+
+beforeEach(() => {
+  mocks.open.mockReset()
+})
+
+describe('native chat transcript read with a stalled post-resolution body read', () => {
+  it('surfaces a retryable error without notFound when the first chunk never settles', async () => {
+    vi.useFakeTimers()
+    try {
+      mocks.open.mockResolvedValue({
+        read: vi.fn(() => new Promise(() => {})),
+        close: vi.fn(async () => {})
+      })
+      const reading = readNativeChatTranscript('claude', 'session-id', { filePath: UNC_PATH })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+
+      const result = await reading
+      expect(result).toEqual({ error: SLOW_MESSAGE })
+      expect(result).not.toHaveProperty('notFound')
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('succeeds when every chunk is slow but under the deadline, past the whole-file budget', async () => {
+    vi.useFakeTimers()
+    const healthyPath = '\\\\wsl.localhost\\Debian\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+    try {
+      const chunkDelayMs = WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS / 2
+      mocks.open.mockResolvedValue(handleServing(Buffer.from(`${LINE}\n`), chunkDelayMs))
+      const reading = readNativeChatTranscript('claude', 'session-id', { filePath: healthyPath })
+
+      // Two chunk admissions (body + EOF probe) span more than one exact deadline.
+      await vi.advanceTimersByTimeAsync(chunkDelayMs * 4)
+
+      const result = await reading
+      expect(result).toMatchObject({ messages: [expect.objectContaining({ id: 'u1' })] })
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
diff --git a/src/main/native-chat/transcript-reader.ts b/src/main/native-chat/transcript-reader.ts
index 8cb57fdb91d..a4d3acb7465 100644
--- a/src/main/native-chat/transcript-reader.ts
+++ b/src/main/native-chat/transcript-reader.ts
@@ -1,4 +1,3 @@
-import { createReadStream } from 'node:fs'
 import type {
   AgentType,
   NativeChatMessage,
@@ -7,6 +6,8 @@ import type {
 import { resolveNativeChatTranscriptAgent } from '../../shared/native-chat-agent-support'
 import { errorMessage } from '../ai-vault/session-scanner-values'
 import { resolveSessionFilePath, type ResolveSessionFileOptions } from './session-file-resolver'
+import { openTranscriptReadStream } from './wsl-transcript-fs-access'
+import { wslTranscriptFsRefusal } from './wsl-transcript-fs-gate'
 import {
   decodeClaudeTranscriptLine,
   decodeCodexTranscriptLine,
@@ -41,7 +42,14 @@ export async function readNativeChatTranscript(
   sessionId: string,
   options: ReadTranscriptOptions = {}
 ): Promise<ReadTranscriptResult> {
-  const filePath = options.filePath ?? (await resolveSessionFilePath(agent, sessionId, options))
+  let filePath: string | null
+  try {
+    filePath = options.filePath ?? (await resolveSessionFilePath(agent, sessionId, options))
+  } catch (err) {
+    // Why: gate refusal is transient unavailability with retry guidance —
+    // `notFound` would settle callers into a false "missing" state.
+    return { error: wslTranscriptFsRefusal(err).message }
+  }
   if (!filePath) {
     return { error: `No transcript found for ${agent} session ${sessionId}`, notFound: true }
   }
@@ -74,7 +82,7 @@ async function readTranscript(
   filePath: string,
   decode: (line: string, fallbackId: string) => NativeChatMessage | null
 ): Promise<NativeChatMessage[]> {
-  const stream = createReadStream(filePath, { encoding: 'utf-8' })
+  const stream = openTranscriptReadStream(filePath, { encoding: 'utf-8' }, 'exact')
   const { messages } = await decodeTranscriptStream(stream, filePath, 0, decode, true)
   return messages
 }
diff --git a/src/main/native-chat/transcript-stream-lines.test.ts b/src/main/native-chat/transcript-stream-lines.test.ts
index 2bfa6f6f9d2..bc80d88bc0a 100644
--- a/src/main/native-chat/transcript-stream-lines.test.ts
+++ b/src/main/native-chat/transcript-stream-lines.test.ts
@@ -32,6 +32,23 @@ describe('decodeTranscriptStream', () => {
     expect(incremental.messages[0]?.id).toBe(full.messages[1]?.id)
   })
 
+  it('keeps a codepoint split across two Buffer chunks intact', async () => {
+    const line = `{"text":"😀é中"}\n`
+    const bytes = Buffer.from(line, 'utf8')
+    // Split inside the emoji's 4-byte sequence, as a 1 MiB gated chunk boundary does.
+    const split = Buffer.from('{"text":"', 'utf8').length + 2
+    const result = await decodeTranscriptStream(
+      Readable.from([bytes.subarray(0, split), bytes.subarray(split)]),
+      '/chat.jsonl',
+      0,
+      decode,
+      false
+    )
+
+    expect(result.messages[0]?.blocks[0]).toEqual({ type: 'text', text: line.slice(0, -1) })
+    expect(result.consumedBytes).toBe(bytes.length)
+  })
+
   it('does not consume a partial trailing JSONL record', async () => {
     const complete = '{"first":true}\n'
     const partial = '{"second"'
diff --git a/src/main/native-chat/transcript-stream-lines.ts b/src/main/native-chat/transcript-stream-lines.ts
index a764941ad30..2d9e30915bc 100644
--- a/src/main/native-chat/transcript-stream-lines.ts
+++ b/src/main/native-chat/transcript-stream-lines.ts
@@ -1,4 +1,5 @@
 import type { Readable } from 'node:stream'
+import { StringDecoder } from 'node:string_decoder'
 import type { NativeChatMessage } from '../../shared/native-chat-types'
 import { transcriptFallbackId } from './transcript-fallback-id'
 
@@ -12,11 +13,14 @@ export async function decodeTranscriptStream(
   includeTrailingLine: boolean
 ): Promise<{ messages: NativeChatMessage[]; consumedBytes: number }> {
   const messages: NativeChatMessage[] = []
+  // Why: a Buffer chunk can end mid-codepoint, and decoding it standalone would
+  // both corrupt the line and shift `consumedBytes` (which seeds fallback ids).
+  const decoder = new StringDecoder('utf8')
   let pending = ''
   let consumedBytes = 0
 
   for await (const chunk of stream) {
-    pending += typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf8')
+    pending += typeof chunk === 'string' ? chunk : decoder.write(Buffer.from(chunk))
     let newlineIndex = pending.indexOf('\n')
     while (newlineIndex !== -1) {
       const segment = pending.slice(0, newlineIndex + 1)
@@ -26,6 +30,7 @@ export async function decodeTranscriptStream(
       newlineIndex = pending.indexOf('\n')
     }
   }
+  pending += decoder.end()
 
   if (includeTrailingLine && pending.length > 0) {
     decodeLine(pending, consumedBytes)
diff --git a/src/main/native-chat/transcript-tail-reader-wsl-gate.test.ts b/src/main/native-chat/transcript-tail-reader-wsl-gate.test.ts
new file mode 100644
index 00000000000..da040de2794
--- /dev/null
+++ b/src/main/native-chat/transcript-tail-reader-wsl-gate.test.ts
@@ -0,0 +1,112 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const mocks = vi.hoisted(() => ({
+  resolve: vi.fn<() => Promise<string | null>>(),
+  stat: vi.fn(),
+  open: vi.fn()
+}))
+
+vi.mock('./session-file-resolver', () => ({
+  resolveSessionFilePath: mocks.resolve
+}))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat,
+  open: mocks.open
+}))
+
+import { readNativeChatTranscriptTail } from './transcript-tail-reader'
+import { WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS, WslTranscriptFsError } from './wsl-transcript-fs-gate'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+
+describe('native chat transcript tail under WSL gate refusals', () => {
+  beforeEach(() => {
+    mocks.resolve.mockReset()
+  })
+
+  it('reports a gate refusal as a retryable error, not a missing transcript', async () => {
+    mocks.resolve.mockRejectedValueOnce(new WslTranscriptFsError('timeout', 'slow share'))
+
+    await expect(
+      readNativeChatTranscriptTail({ agent: 'codex', sessionId: 'session-id', limit: 10 })
+    ).resolves.toEqual({ error: 'slow share' })
+  })
+
+  it('rethrows non-gate resolver failures', async () => {
+    mocks.resolve.mockRejectedValueOnce(new Error('resolver crashed'))
+
+    await expect(
+      readNativeChatTranscriptTail({ agent: 'codex', sessionId: 'session-id', limit: 10 })
+    ).rejects.toThrow('resolver crashed')
+  })
+})
+
+describe('native chat transcript tail with stalled post-resolution UNC I/O', () => {
+  const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex\\sessions\\a.jsonl'
+  // A stalled task holds its gate permit until the underlying call settles, so
+  // each case releases its stall before the next one runs.
+  let releaseStall: (() => void) | undefined
+
+  function stalls<T>(): Promise<T> {
+    return new Promise<T>((resolve) => {
+      releaseStall = () => resolve(undefined as T)
+    })
+  }
+
+  async function tailAfterStall(): Promise<unknown> {
+    const pending = readNativeChatTranscriptTail({
+      agent: 'codex',
+      sessionId: 'session-id',
+      filePath: UNC_PATH,
+      limit: 10
+    })
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    return pending
+  }
+
+  beforeEach(() => {
+    mocks.stat.mockReset()
+    mocks.open.mockReset()
+    releaseStall = undefined
+    vi.useFakeTimers()
+  })
+
+  afterEach(async () => {
+    releaseStall?.()
+    await vi.advanceTimersByTimeAsync(0)
+    vi.useRealTimers()
+  })
+
+  it('reports a stalled stat as retryable without notFound', async () => {
+    mocks.stat.mockImplementation(stalls)
+    const result = await tailAfterStall()
+    expect(result).toEqual({ error: SLOW_MESSAGE })
+    expect(result).not.toHaveProperty('notFound')
+  })
+
+  it('reports a stalled open as retryable without notFound', async () => {
+    mocks.stat.mockResolvedValue({ size: 4096 })
+    mocks.open.mockImplementation(stalls)
+    const result = await tailAfterStall()
+    expect(result).toEqual({ error: SLOW_MESSAGE })
+    expect(result).not.toHaveProperty('notFound')
+  })
+
+  it('closes the handle without a second admission when a positional read stalls', async () => {
+    const close = vi.fn(async () => {})
+    mocks.stat.mockResolvedValue({ size: 4096 })
+    mocks.open.mockResolvedValue({ read: vi.fn(stalls), close })
+
+    const result = await tailAfterStall()
+
+    expect(result).toEqual({ error: SLOW_MESSAGE })
+    expect(result).not.toHaveProperty('notFound')
+    // Fire-and-forget close: never gated, never awaited, exactly once.
+    await vi.advanceTimersByTimeAsync(0)
+    expect(close).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/src/main/native-chat/transcript-tail-reader.ts b/src/main/native-chat/transcript-tail-reader.ts
index c7b1527858a..e9cbe430090 100644
--- a/src/main/native-chat/transcript-tail-reader.ts
+++ b/src/main/native-chat/transcript-tail-reader.ts
@@ -1,4 +1,4 @@
-import { open, stat } from 'node:fs/promises'
+import type { FileHandle } from 'node:fs/promises'
 import type {
   AgentType,
   NativeChatMessage,
@@ -17,6 +17,13 @@ import {
   nativeChatTurnLifecycleDecoderForAgent,
   type NativeChatTurnLifecycleDecoder
 } from './transcript-turn-lifecycle'
+import {
+  closeTranscriptHandle,
+  wslGatedOpen,
+  wslGatedRead,
+  wslGatedStat
+} from './wsl-transcript-fs-access'
+import { wslTranscriptFsRefusal } from './wsl-transcript-fs-gate'
 
 export const MAX_NATIVE_CHAT_TRANSCRIPT_RECORD_BYTES = 2 * 1024 * 1024
 const TAIL_CHUNK_BYTES = 64 * 1024
@@ -58,12 +65,15 @@ export async function readNativeChatTranscriptTailFile(
   oversizedRecordCount?: number
 }> {
   signal?.throwIfAborted()
-  const end = Math.min((await stat(filePath)).size, endOffset ?? Number.MAX_SAFE_INTEGER)
+  const end = Math.min(
+    (await wslGatedStat(filePath, 'exact', signal)).size,
+    endOffset ?? Number.MAX_SAFE_INTEGER
+  )
   signal?.throwIfAborted()
   if (end === 0) {
     return { messages: [], consumedTo: 0, hasMore: false, beforeOffset: 0 }
   }
-  const handle = await open(filePath, 'r')
+  const handle = await wslGatedOpen(filePath, 'exact', signal)
   const lineParts: Buffer[] = []
   let lineBytes = 0
   let lineOversized = false
@@ -75,13 +85,13 @@ export async function readNativeChatTranscriptTailFile(
     signal?.throwIfAborted()
     const consumedTo = includeTrailingLine
       ? end
-      : await findLastCompleteLineEnd(handle, end, signal)
+      : await findLastCompleteLineEnd(handle, filePath, end, signal)
     if (consumedTo === 0) {
       return { messages: [], consumedTo: 0, hasMore: false, beforeOffset: 0 }
     }
     const newestFirst: { message: NativeChatMessage; offset: number }[] = []
     const finalByte = Buffer.allocUnsafe(1)
-    await handle.read(finalByte, 0, 1, consumedTo - 1)
+    await wslGatedRead(handle, filePath, finalByte, 0, 1, consumedTo - 1, 'exact', signal)
     signal?.throwIfAborted()
     ignoreNextMalformedRecord = finalByte[0] !== 0x0a
     let cursor = consumedTo - (finalByte[0] === 0x0a ? 1 : 0)
@@ -89,7 +99,16 @@ export async function readNativeChatTranscriptTailFile(
       signal?.throwIfAborted()
       const start = Math.max(0, cursor - TAIL_CHUNK_BYTES)
       const buffer = Buffer.allocUnsafe(cursor - start)
-      const { bytesRead } = await handle.read(buffer, 0, buffer.length, start)
+      const { bytesRead } = await wslGatedRead(
+        handle,
+        filePath,
+        buffer,
+        0,
+        buffer.length,
+        start,
+        'exact',
+        signal
+      )
       signal?.throwIfAborted()
       let segmentEnd = bytesRead
       for (let index = bytesRead - 1; index >= 0 && newestFirst.length <= limit; index--) {
@@ -125,7 +144,7 @@ export async function readNativeChatTranscriptTailFile(
       ...(oversizedRecordCount > 0 ? { oversizedRecordCount } : {})
     }
   } finally {
-    await handle.close()
+    await closeTranscriptHandle(handle, filePath)
   }
 
   function retainPart(part: Buffer): void {
@@ -183,13 +202,14 @@ export async function readNativeChatTranscriptTailFile(
 }
 
 async function findLastCompleteLineEnd(
-  handle: Awaited<ReturnType<typeof open>>,
+  handle: FileHandle,
+  filePath: string,
   end: number,
   signal?: AbortSignal
 ): Promise<number> {
   signal?.throwIfAborted()
   const lastByte = Buffer.allocUnsafe(1)
-  await handle.read(lastByte, 0, 1, end - 1)
+  await wslGatedRead(handle, filePath, lastByte, 0, 1, end - 1, 'exact', signal)
   signal?.throwIfAborted()
   if (lastByte[0] === 0x0a) {
     return end
@@ -199,10 +219,19 @@ async function findLastCompleteLineEnd(
     signal?.throwIfAborted()
     const start = Math.max(0, cursor - TAIL_CHUNK_BYTES)
     const buffer = Buffer.allocUnsafe(cursor - start)
-    const { bytesRead } = await handle.read(buffer, 0, buffer.length, start)
+    const { bytesRead } = await wslGatedRead(
+      handle,
+      filePath,
+      buffer,
+      0,
+      buffer.length,
+      start,
+      'exact',
+      signal
+    )
     signal?.throwIfAborted()
     const newline = buffer.subarray(0, bytesRead).lastIndexOf(0x0a)
-    if (newline >= 0) {
+    if (newline !== -1) {
       return start + newline + 1
     }
     cursor = start
@@ -231,12 +260,20 @@ export async function readNativeChatTranscriptTail(
 > {
   const decode = nativeChatLineDecoderForAgent(args.agent)
   const decodeLifecycle = nativeChatTurnLifecycleDecoderForAgent(args.agent)
-  const filePath =
-    args.filePath ?? (await resolveSessionFilePath(args.agent, args.sessionId, args, signal))
-  signal?.throwIfAborted()
   if (!decode) {
     return { error: 'Transcript unavailable' }
   }
+  let filePath: string | null
+  try {
+    filePath =
+      args.filePath ?? (await resolveSessionFilePath(args.agent, args.sessionId, args, signal))
+  } catch (error) {
+    signal?.throwIfAborted()
+    // Why: gate refusal is transient unavailability with retry guidance —
+    // `notFound` would settle callers into a false "missing" state.
+    return { error: wslTranscriptFsRefusal(error).message }
+  }
+  signal?.throwIfAborted()
   // Why: a new agent session can report its id before the first JSONL flush;
   // callers keep that miss in loading/retry rather than showing a false error.
   if (!filePath) {
diff --git a/src/main/native-chat/transcript-watch-engine.ts b/src/main/native-chat/transcript-watch-engine.ts
index ff1df71ee0f..3c51319eae4 100644
--- a/src/main/native-chat/transcript-watch-engine.ts
+++ b/src/main/native-chat/transcript-watch-engine.ts
@@ -1,6 +1,6 @@
-import { open, stat } from 'node:fs/promises'
 import type { NativeChatMessage, NativeChatTurnLifecycle } from '../../shared/native-chat-types'
 import {
+  boundaryFingerprint,
   readTranscriptFileVersion,
   transcriptFileVersionChanged,
   type TranscriptFileVersion
@@ -18,6 +18,8 @@ import type {
   SubscribeNativeChatTranscriptArgs
 } from './transcript-watch-contract'
 import { createTranscriptWatchScheduler } from './transcript-watch-scheduler'
+import { wslGatedStat } from './wsl-transcript-fs-access'
+import { WslTranscriptFsError } from './wsl-transcript-fs-gate'
 
 const ROTATION_RETRY_MS = 25
 const MAX_ROTATION_RETRY_MS = 2_000
@@ -27,21 +29,6 @@ export function getActiveNativeChatWatcherCount(): number {
   return activeWatcherCount
 }
 
-async function boundaryFingerprint(filePath: string, offset: number): Promise<string> {
-  if (offset <= 0) {
-    return ''
-  }
-  const start = Math.max(0, offset - 64)
-  const handle = await open(filePath, 'r')
-  try {
-    const buffer = Buffer.allocUnsafe(offset - start)
-    const { bytesRead } = await handle.read(buffer, 0, buffer.length, start)
-    return buffer.subarray(0, bytesRead).toString('base64')
-  } finally {
-    await handle.close()
-  }
-}
-
 /**
  * Install the live-tail engine on an already-resolved file path. Returns null
  * when the file doesn't exist yet, so the caller falls back to resolve-polling.
@@ -51,11 +38,20 @@ async function boundaryFingerprint(filePath: string, offset: number): Promise<st
 export async function installTranscriptWatcher(
   filePath: string,
   decode: (line: string, fallbackId: string) => NativeChatMessage | null,
-  args: SubscribeNativeChatTranscriptArgs
+  args: SubscribeNativeChatTranscriptArgs,
+  /** Cancels the install probe so an unsubscribe during it detaches the gate
+   *  waiter immediately instead of at the 30s deadline. */
+  signal?: AbortSignal
 ): Promise<NativeChatTranscriptSubscription | null> {
   try {
-    await stat(filePath)
-  } catch {
+    await wslGatedStat(filePath, 'exact', signal)
+  } catch (error) {
+    // Why: "not flushed yet" degrades to resolve-polling, but a stalled distro
+    // must reach the caller so it can surface a retryable message instead of
+    // stranding the client at `loading`.
+    if (error instanceof WslTranscriptFsError) {
+      throw error
+    }
     return null
   }
   const { onAppend, onInitialSnapshot, onReplace, initialLimit } = args
@@ -75,6 +71,11 @@ export async function installTranscriptWatcher(
   // a persistently-failing retry loop can't spam the subscriber with error frames.
   let initialErrorEmitted = false
   let closed = false
+  // Why: every gated call on the drain path must detach the moment we
+  // unsubscribe, instead of holding a waiter until its 30s deadline, and an
+  // aborted signal also makes the gate refuse admission for anything the
+  // in-flight drain would start after teardown.
+  const gateAbort = new AbortController()
   let reading = false
   let pendingReadRequested = false
   let rotationRetryCount = 0
@@ -106,7 +107,8 @@ export async function installTranscriptWatcher(
       decodeLifecycle ?? undefined,
       (nextLifecycle) => {
         lifecycle = nextLifecycle
-      }
+      },
+      gateAbort.signal
     )
     if (!closed && (remaining.length > 0 || lifecycle)) {
       onAppend(remaining, lifecycle)
@@ -114,8 +116,8 @@ export async function installTranscriptWatcher(
   }
 
   async function finishSuccessfulDrain(startVersion: TranscriptFileVersion): Promise<void> {
-    watchedBoundary = await boundaryFingerprint(filePath, state.offset)
-    const completedVersion = await readTranscriptFileVersion(filePath)
+    watchedBoundary = await boundaryFingerprint(filePath, state.offset, gateAbort.signal)
+    const completedVersion = await readTranscriptFileVersion(filePath, gateAbort.signal)
     if (transcriptFileVersionChanged(completedVersion, startVersion)) {
       // Why: a write racing this drain needs another pass even when the reader
       // happened to reach its new EOF; timestamp-only rewrites may need replace.
@@ -135,8 +137,8 @@ export async function installTranscriptWatcher(
   }
 
   async function drainOnce(): Promise<void> {
-    const current = await readTranscriptFileVersion(filePath)
-    const currentBoundary = await boundaryFingerprint(filePath, state.offset)
+    const current = await readTranscriptFileVersion(filePath, gateAbort.signal)
+    const currentBoundary = await boundaryFingerprint(filePath, state.offset, gateAbort.signal)
     if (closed) {
       return
     }
@@ -168,7 +170,8 @@ export async function installTranscriptWatcher(
             decode,
             false,
             undefined,
-            decodeLifecycle
+            decodeLifecycle,
+            gateAbort.signal
           )
         : null
     if (closed) {
@@ -196,7 +199,8 @@ export async function installTranscriptWatcher(
             decode,
             false,
             undefined,
-            decodeLifecycle
+            decodeLifecycle,
+            gateAbort.signal
           )
         : null
     if (closed) {
@@ -225,7 +229,8 @@ export async function installTranscriptWatcher(
           decodeLifecycle ?? undefined,
           (nextLifecycle) => {
             lifecycle = nextLifecycle
-          }
+          },
+          gateAbort.signal
         )
         if (closed) {
           return
@@ -253,7 +258,7 @@ export async function installTranscriptWatcher(
         pendingReadRequested = false
         try {
           await drainOnce()
-        } catch {
+        } catch (error) {
           // Why: unlink/recreate can detach fs.watch from the pathname. Keep one
           // capped-backoff retry alive until a successor appears or we unsubscribe.
           // A still-pending initial drain also surfaces one error snapshot so a
@@ -261,7 +266,12 @@ export async function installTranscriptWatcher(
           // throwing; initialDrain stays true so a recovered read can still win.
           if (!closed && initialDrain && onInitialSnapshot && !initialErrorEmitted) {
             initialErrorEmitted = true
-            onInitialSnapshot([], false, 0, 'Transcript unavailable')
+            onInitialSnapshot(
+              [],
+              false,
+              0,
+              error instanceof WslTranscriptFsError ? error.message : 'Transcript unavailable'
+            )
           }
           scheduleRotationRetry()
           break
@@ -277,7 +287,7 @@ export async function installTranscriptWatcher(
       return
     }
     try {
-      const current = await readTranscriptFileVersion(filePath)
+      const current = await readTranscriptFileVersion(filePath, gateAbort.signal)
       if (closed) {
         return
       }
@@ -317,6 +327,7 @@ export async function installTranscriptWatcher(
         return
       }
       closed = true
+      gateAbort.abort(new Error('Native Chat transcript watcher unsubscribed'))
       scheduler.dispose()
       nativeWatcher.dispose()
       activeWatcherCount--
diff --git a/src/main/native-chat/transcript-watch-resolve-poll.test.ts b/src/main/native-chat/transcript-watch-resolve-poll.test.ts
index 70a264b93f2..e5ec941e5e9 100644
--- a/src/main/native-chat/transcript-watch-resolve-poll.test.ts
+++ b/src/main/native-chat/transcript-watch-resolve-poll.test.ts
@@ -20,6 +20,7 @@ vi.mock('./host-readable-transcript-path', async (importOriginal) => ({
 }))
 
 import { subscribeNativeChatTranscript } from './transcript-watch'
+import { WslTranscriptFsError } from './wsl-transcript-fs-gate'
 
 const realPlatform = process.platform
 
@@ -125,6 +126,41 @@ describe('native chat transcript resolve polling', () => {
     subscription.unsubscribe()
   })
 
+  it('degrades a gate-refused initial resolve to the poll fallback instead of failing', async () => {
+    const engine = { unsubscribe: vi.fn(), watching: true }
+    mocks.resolve
+      .mockRejectedValueOnce(new WslTranscriptFsError('unavailable', 'stuck permits'))
+      .mockResolvedValue('/home/ada/found.jsonl')
+    mocks.install.mockImplementation((filePath: string) => (filePath ? engine : null))
+
+    const subscription = await subscribeNativeChatTranscript({
+      agent: 'claude',
+      sessionId: 'session-id',
+      resolvePollIntervalMs: 10,
+      onAppend: () => {}
+    })
+    expect(subscription.watching).toBe(true)
+
+    await vi.advanceTimersByTimeAsync(20)
+    expect(
+      mocks.install.mock.calls.some(([filePath]) => filePath === '/home/ada/found.jsonl')
+    ).toBe(true)
+    subscription.unsubscribe()
+    expect(engine.unsubscribe).toHaveBeenCalled()
+  })
+
+  it('still fails subscribe on non-gate resolver errors', async () => {
+    mocks.resolve.mockRejectedValueOnce(new Error('resolver crashed'))
+
+    await expect(
+      subscribeNativeChatTranscript({
+        agent: 'claude',
+        sessionId: 'session-id',
+        onAppend: () => {}
+      })
+    ).rejects.toThrow('resolver crashed')
+  })
+
   it('cancels queued WSL resolution when the subscription closes', async () => {
     setPlatform('win32')
     let receivedSignal: AbortSignal | undefined
diff --git a/src/main/native-chat/transcript-watch-wsl-exact-path.test.ts b/src/main/native-chat/transcript-watch-wsl-exact-path.test.ts
index 5a483c11c48..814addff83c 100644
--- a/src/main/native-chat/transcript-watch-wsl-exact-path.test.ts
+++ b/src/main/native-chat/transcript-watch-wsl-exact-path.test.ts
@@ -68,7 +68,12 @@ describe('exact hook path install on a Windows host with WSL (#10326)', () => {
     })
 
     await vi.advanceTimersByTimeAsync(50)
-    expect(mocks.install).toHaveBeenCalledWith(ROLLOUT_UNC, expect.anything(), expect.anything())
+    expect(mocks.install).toHaveBeenCalledWith(
+      ROLLOUT_UNC,
+      expect.anything(),
+      expect.anything(),
+      expect.any(AbortSignal)
+    )
     expect(mocks.install.mock.calls.every(([path]) => path !== ROLLOUT_LINUX)).toBe(true)
     subscription.unsubscribe()
   })
@@ -84,7 +89,12 @@ describe('exact hook path install on a Windows host with WSL (#10326)', () => {
     })
 
     await vi.advanceTimersByTimeAsync(50)
-    expect(mocks.install).toHaveBeenCalledWith(ROLLOUT_LINUX, expect.anything(), expect.anything())
+    expect(mocks.install).toHaveBeenCalledWith(
+      ROLLOUT_LINUX,
+      expect.anything(),
+      expect.anything(),
+      expect.any(AbortSignal)
+    )
     subscription.unsubscribe()
   })
 })
diff --git a/src/main/native-chat/transcript-watch-wsl-stall.test.ts b/src/main/native-chat/transcript-watch-wsl-stall.test.ts
new file mode 100644
index 00000000000..3fd066325bb
--- /dev/null
+++ b/src/main/native-chat/transcript-watch-wsl-stall.test.ts
@@ -0,0 +1,175 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type { NativeChatMessage } from '../../shared/native-chat-types'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.claude\\projects\\p\\session.jsonl'
+
+const mocks = vi.hoisted(() => ({
+  resolve: vi.fn<() => Promise<string | null>>(),
+  stat: vi.fn(),
+  open: vi.fn()
+}))
+
+vi.mock('./session-file-resolver', () => ({ resolveSessionFilePath: mocks.resolve }))
+vi.mock('./transcript-native-watcher', () => ({
+  createTranscriptNativeWatcher: () => ({
+    bind: () => true,
+    needsRebind: () => false,
+    invalidate: () => {},
+    dispose: () => {}
+  })
+}))
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat,
+  open: mocks.open
+}))
+
+import { subscribeNativeChatTranscript } from './transcript-watch'
+import { WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS } from './wsl-transcript-fs-gate'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+
+type Snapshot = [NativeChatMessage[], boolean, number, string | undefined]
+
+let releaseStall: (() => void) | undefined
+let unhandled: unknown[] = []
+
+function stalls<T>(): Promise<T> {
+  return new Promise<T>((resolve) => {
+    releaseStall = () => resolve(undefined as T)
+  })
+}
+
+function subscribeCollecting(snapshots: Snapshot[]) {
+  return subscribeNativeChatTranscript({
+    agent: 'claude',
+    sessionId: 'session-id',
+    onAppend: () => {},
+    onInitialSnapshot: (messages, hasMore, beforeOffset, error) => {
+      snapshots.push([messages, hasMore, beforeOffset, error])
+    },
+    initialLimit: 10,
+    resolvePollIntervalMs: 50,
+    reconciliationIntervalMs: 1_000
+  })
+}
+
+function trackUnhandled(reason: unknown): void {
+  unhandled.push(reason)
+}
+
+beforeEach(() => {
+  mocks.resolve.mockReset()
+  mocks.stat.mockReset()
+  mocks.open.mockReset()
+  releaseStall = undefined
+  unhandled = []
+  process.on('unhandledRejection', trackUnhandled)
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  releaseStall?.()
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+  process.off('unhandledRejection', trackUnhandled)
+})
+
+const EMPTY_STATS = { size: 0, mtimeMs: 1, ctimeMs: 1, ino: 1, dev: 1, mtime: new Date(0) }
+
+describe('native chat transcript subscription with a stalled install stat', () => {
+  it('keeps watching and emits exactly one retryable snapshot, then the real one', async () => {
+    mocks.resolve.mockResolvedValue(UNC_PATH)
+    mocks.stat.mockImplementationOnce(stalls).mockResolvedValue(EMPTY_STATS)
+    const snapshots: Snapshot[] = []
+
+    // Not awaited yet: the setup install is itself blocked on the stalled stat.
+    const subscribing = subscribeCollecting(snapshots)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    const subscription = await subscribing
+    expect(subscription.watching).toBe(true)
+
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    expect(snapshots).toEqual([[[], false, 0, SLOW_MESSAGE]])
+
+    // Later poll ticks fast-fail on the still-stuck route without re-emitting.
+    await vi.advanceTimersByTimeAsync(500)
+    expect(snapshots).toHaveLength(1)
+
+    // The distro wakes: the same subscription still delivers a real snapshot.
+    releaseStall?.()
+    await vi.advanceTimersByTimeAsync(500)
+
+    expect(snapshots.length).toBeGreaterThan(1)
+    expect(snapshots.at(-1)?.[3]).toBeUndefined()
+    subscription.unsubscribe()
+    expect(unhandled).toEqual([])
+  })
+
+  it('keeps the poll loop alive on a non-gate resolve failure without emitting a frame', async () => {
+    // First resolve misses (transcript not flushed) so setup falls through to
+    // the poll loop; every later tick throws a non-gate error.
+    mocks.resolve
+      .mockResolvedValueOnce(null)
+      .mockRejectedValue(Object.assign(new Error('EACCES'), { code: 'EACCES' }))
+    const snapshots: Snapshot[] = []
+
+    const subscription = await subscribeCollecting(snapshots)
+    const attemptsAfterSetup = mocks.resolve.mock.calls.length
+    await vi.advanceTimersByTimeAsync(500)
+
+    expect(snapshots).toEqual([])
+    // Still retrying: the rethrow-free branch must not kill `void runAttempt()`.
+    expect(mocks.resolve.mock.calls.length).toBeGreaterThan(attemptsAfterSetup)
+    expect(unhandled).toEqual([])
+    subscription.unsubscribe()
+  })
+
+  it('detaches drain waiters on unsubscribe and starts no further gated work', async () => {
+    mocks.resolve.mockResolvedValue(UNC_PATH)
+    mocks.stat.mockResolvedValue({ ...EMPTY_STATS, size: 64 })
+    let releaseOpen: ((handle: unknown) => void) | undefined
+    mocks.open.mockReturnValue(
+      new Promise((resolve) => {
+        releaseOpen = resolve
+      })
+    )
+    const handle = {
+      read: vi.fn(async () => ({ bytesRead: 0, buffer: Buffer.alloc(0) })),
+      close: vi.fn(async () => {})
+    }
+
+    const subscription = await subscribeCollecting([])
+    await vi.advanceTimersByTimeAsync(100)
+    expect(mocks.open).toHaveBeenCalledTimes(1)
+    const statCallsAtTeardown = mocks.stat.mock.calls.length
+
+    subscription.unsubscribe()
+    // No timer advance: the waiter must detach on unsubscribe, not 30s later.
+    releaseOpen?.(handle)
+    await vi.advanceTimersByTimeAsync(0)
+
+    // The drain that was in flight must not admit anything more.
+    expect(handle.read).not.toHaveBeenCalled()
+    expect(mocks.stat.mock.calls.length).toBe(statCallsAtTeardown)
+    // Nobody is left to own the late handle, so the gate closes it.
+    expect(handle.close).toHaveBeenCalledTimes(1)
+    expect(unhandled).toEqual([])
+  })
+
+  it('tears down cleanly while an admission is still stalled', async () => {
+    mocks.resolve.mockResolvedValue(UNC_PATH)
+    mocks.stat.mockImplementation(stalls)
+    const snapshots: Snapshot[] = []
+
+    const subscribing = subscribeCollecting(snapshots)
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    const subscription = await subscribing
+
+    expect(() => subscription.unsubscribe()).not.toThrow()
+    await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+    expect(unhandled).toEqual([])
+  })
+})
diff --git a/src/main/native-chat/transcript-watch.ts b/src/main/native-chat/transcript-watch.ts
index fff5bc60599..b2ef5b05ec3 100644
--- a/src/main/native-chat/transcript-watch.ts
+++ b/src/main/native-chat/transcript-watch.ts
@@ -11,6 +11,7 @@ import type {
   SubscribeNativeChatTranscriptArgs
 } from './transcript-watch-contract'
 import { nativeChatLineDecoderForAgent } from './transcript-tail-reader'
+import { WslTranscriptFsError, wslTranscriptFsRefusal } from './wsl-transcript-fs-gate'
 
 export { readNativeChatTranscriptTail } from './transcript-tail-reader'
 export { getActiveNativeChatWatcherCount } from './transcript-watch-engine'
@@ -32,7 +33,7 @@ async function attemptInstall(
   if (!filePath) {
     return null
   }
-  const installed = await installTranscriptWatcher(filePath, decode, args)
+  const installed = await installTranscriptWatcher(filePath, decode, args, signal)
   if (signal?.aborted) {
     installed?.unsubscribe()
     signal.throwIfAborted()
@@ -77,6 +78,9 @@ function subscribeViaResolvePoll(
   // the exact-path install doesn't wait on the slower id-glob (#10326).
   let hostReadableExactPath: string | null = null
   let lastWslTranslateAt = 0
+  // Latches only once a frame was actually emitted, so a subscriber without the
+  // callback can't suppress it for a later one.
+  let gateErrorEmitted = false
   const resolveController = new AbortController()
 
   function scheduleAttempt(): void {
@@ -140,9 +144,18 @@ function subscribeViaResolvePoll(
         lastFallbackResolveAt = Date.now()
         result = await attemptInstall(args, decode, resolveController.signal)
       }
-    } catch {
+    } catch (error) {
       // Why: a transient resolve failure (EACCES/EIO during the glob) must not
-      // kill the poll loop with an unhandled rejection — retry like a miss.
+      // kill the poll loop with an unhandled rejection — retry like a miss. A
+      // stalled WSL distro would otherwise poll silently forever, leaving the
+      // client at 'loading'; emit its retryable message once and keep polling,
+      // so a later tick's real snapshot still replaces it. Narrowed with a bare
+      // instanceof, never wslTranscriptFsRefusal — that helper rethrows, and
+      // runAttempt is invoked as `void runAttempt()`.
+      if (error instanceof WslTranscriptFsError && !gateErrorEmitted && args.onInitialSnapshot) {
+        gateErrorEmitted = true
+        args.onInitialSnapshot([], false, 0, error.message)
+      }
       result = null
     }
     if (closed) {
@@ -207,7 +220,16 @@ export async function subscribeNativeChatTranscript(
     return { unsubscribe: () => {}, watching: false }
   }
 
-  const installed = await attemptInstall(args, decode, setupSignal)
+  let installed: NativeChatTranscriptSubscription | null
+  try {
+    installed = await attemptInstall(args, decode, setupSignal)
+  } catch (error) {
+    setupSignal?.throwIfAborted()
+    // Why: a gate-refused resolve (stalled WSL distro) must degrade to the
+    // resolve-poll fallback below, not fail the subscribe outright.
+    void wslTranscriptFsRefusal(error) // rethrows anything that is not a gate refusal
+    installed = null
+  }
   if (installed) {
     return installed
   }
diff --git a/src/main/native-chat/wsl-transcript-fs-access.test.ts b/src/main/native-chat/wsl-transcript-fs-access.test.ts
new file mode 100644
index 00000000000..6f978453239
--- /dev/null
+++ b/src/main/native-chat/wsl-transcript-fs-access.test.ts
@@ -0,0 +1,400 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as NodeFsModule from 'node:fs'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+import type * as GateModule from './wsl-transcript-fs-gate'
+
+const UNC_PATH = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.codex\\sessions\\a.jsonl'
+const OTHER_DISTRO_UNC_PATH = '\\\\wsl.localhost\\Debian\\home\\ada\\.codex\\sessions\\a.jsonl'
+const LEGACY_UNC_PATH = '\\\\wsl$\\Ubuntu\\home\\ada\\.codex\\sessions\\a.jsonl'
+const WINDOWS_PATH = 'C:\\Users\\ada\\.codex\\sessions\\a.jsonl'
+const POSIX_PATH = '/home/ada/.codex/sessions/a.jsonl'
+
+const mocks = vi.hoisted(() => ({
+  stat: vi.fn(),
+  lstat: vi.fn(),
+  readdir: vi.fn(),
+  readFile: vi.fn(),
+  open: vi.fn(),
+  createReadStream: vi.fn(),
+  runTask: vi.fn()
+}))
+
+vi.mock('node:fs', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsModule>()),
+  createReadStream: mocks.createReadStream
+}))
+
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  stat: mocks.stat,
+  lstat: mocks.lstat,
+  readdir: mocks.readdir,
+  readFile: mocks.readFile,
+  open: mocks.open
+}))
+
+vi.mock('./wsl-transcript-fs-gate', async (importOriginal) => {
+  const original = await importOriginal<typeof GateModule>()
+  mocks.runTask.mockImplementation(original.runWslTranscriptFsTask)
+  return { ...original, runWslTranscriptFsTask: mocks.runTask }
+})
+
+import {
+  closeTranscriptHandle,
+  openTranscriptReadStream,
+  readTranscriptSlice,
+  wslGatedLstat,
+  wslGatedOpen,
+  wslGatedRead,
+  wslGatedReaddir,
+  wslGatedReadFile,
+  wslGatedStat,
+  WSL_TRANSCRIPT_READ_CHUNK_BYTES
+} from './wsl-transcript-fs-access'
+import {
+  resetWslTranscriptFsGateForTests,
+  WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS,
+  WslTranscriptFsError
+} from './wsl-transcript-fs-gate'
+
+function fakeHandle() {
+  return { read: vi.fn(), close: vi.fn(async () => {}) }
+}
+
+beforeEach(() => {
+  // The gate mock delegates to the real implementation, so its module state
+  // survives between cases — a case that leaves a task stalled would otherwise
+  // mark that route stuck and fast-fail every later case on it.
+  resetWslTranscriptFsGateForTests()
+  // runTask keeps the real gate implementation installed by the mock factory;
+  // only its call log is cleared.
+  mocks.runTask.mockClear()
+  for (const [name, mock] of Object.entries(mocks)) {
+    if (name !== 'runTask') {
+      mock.mockReset()
+    }
+  }
+})
+
+describe('transcript filesystem accessor off WSL UNC', () => {
+  it.each([
+    ['a posix path', POSIX_PATH],
+    ['a Windows drive path', WINDOWS_PATH]
+  ])('never enters the gate for %s', async (_label, path) => {
+    mocks.stat.mockResolvedValue({ size: 1 })
+    mocks.lstat.mockResolvedValue({ size: 1 })
+    mocks.readdir.mockResolvedValue([])
+    mocks.readFile.mockResolvedValue('body')
+    const handle = fakeHandle()
+    handle.read.mockResolvedValue({ bytesRead: 0, buffer: Buffer.alloc(0) })
+    mocks.open.mockResolvedValue(handle)
+    mocks.createReadStream.mockReturnValue('raw-stream')
+
+    await wslGatedStat(path, 'exact')
+    await wslGatedLstat(path, 'scan')
+    await wslGatedReaddir(path, 'scan')
+    await wslGatedReadFile(path, 'utf-8', 'scan')
+    const opened = await wslGatedOpen(path, 'exact')
+    await wslGatedRead(opened, path, Buffer.alloc(1), 0, 1, 0, 'exact')
+    const stream = openTranscriptReadStream(path, { encoding: 'utf-8' }, 'scan')
+
+    expect(mocks.runTask).not.toHaveBeenCalled()
+    expect(mocks.stat).toHaveBeenCalledWith(path)
+    expect(mocks.readdir).toHaveBeenCalledWith(path, { withFileTypes: true })
+    expect(mocks.readFile).toHaveBeenCalledWith(path, 'utf-8')
+    expect(mocks.open).toHaveBeenCalledWith(path, 'r')
+    // Off UNC the raw stream is handed back verbatim, encoding included.
+    expect(stream).toBe('raw-stream')
+    expect(mocks.createReadStream).toHaveBeenCalledWith(path, {
+      encoding: 'utf-8',
+      signal: undefined
+    })
+  })
+
+  it('forwards the caller signal so the local stream honours cancellation', () => {
+    mocks.createReadStream.mockReturnValue('raw-stream')
+    const controller = new AbortController()
+
+    openTranscriptReadStream(POSIX_PATH, { start: 4 }, 'exact', controller.signal)
+
+    expect(mocks.createReadStream).toHaveBeenCalledWith(POSIX_PATH, {
+      start: 4,
+      signal: controller.signal
+    })
+  })
+})
+
+describe('transcript filesystem accessor on WSL UNC', () => {
+  it.each([
+    ['wsl.localhost', UNC_PATH],
+    ['wsl$', LEGACY_UNC_PATH]
+  ])('routes %s paths through the gate', async (_label, path) => {
+    mocks.stat.mockResolvedValue({ size: 7 })
+    mocks.lstat.mockResolvedValue({ size: 7 })
+    mocks.readdir.mockResolvedValue([])
+    mocks.readFile.mockResolvedValue('body')
+
+    await wslGatedStat(path, 'exact')
+    await wslGatedLstat(path, 'scan')
+    await wslGatedReaddir(path, 'scan')
+    await wslGatedReadFile(path, 'utf-8', 'scan')
+
+    expect(mocks.runTask.mock.calls.map(([options]) => options.operation)).toEqual([
+      'stat',
+      'lstat',
+      'readdir',
+      'readfile'
+    ])
+  })
+
+  it('opts positional reads and opens out of coalescing', async () => {
+    const handle = fakeHandle()
+    handle.read.mockResolvedValue({ bytesRead: 1, buffer: Buffer.alloc(1) })
+    mocks.open.mockResolvedValue(handle)
+
+    const opened = await wslGatedOpen(UNC_PATH, 'exact')
+    await wslGatedRead(opened, UNC_PATH, Buffer.alloc(1), 0, 1, 0, 'exact')
+
+    for (const call of mocks.runTask.mock.calls) {
+      expect(call[0]).toMatchObject({ dedupe: false })
+    }
+  })
+
+  it('reads a slice and closes the handle even when the read rejects', async () => {
+    const handle = fakeHandle()
+    handle.read.mockRejectedValue(new Error('EIO'))
+    mocks.open.mockResolvedValue(handle)
+
+    await expect(readTranscriptSlice(UNC_PATH, 4, 8, 'scan')).rejects.toThrow('EIO')
+    expect(handle.close).toHaveBeenCalledTimes(1)
+  })
+
+  it('yields Buffer chunks and closes the handle when the consumer destroys the stream', async () => {
+    const handle = fakeHandle()
+    handle.read.mockImplementation(
+      async (buffer: Buffer, offset: number, length: number, position: number) => {
+        const body = Buffer.from('{"a":1}\n{"b":2}\n')
+        const slice = body.subarray(position, Math.min(position + length, body.length))
+        slice.copy(buffer, offset)
+        return { bytesRead: slice.length, buffer }
+      }
+    )
+    mocks.open.mockResolvedValue(handle)
+
+    const stream = openTranscriptReadStream(UNC_PATH, {}, 'exact')
+    const chunks: unknown[] = []
+    for await (const chunk of stream) {
+      chunks.push(chunk)
+      break
+    }
+    stream.destroy()
+    await new Promise((resolve) => setImmediate(resolve))
+
+    expect(chunks).toHaveLength(1)
+    expect(Buffer.isBuffer(chunks[0])).toBe(true)
+    expect((chunks[0] as Buffer).toString('utf-8')).toBe('{"a":1}\n{"b":2}\n')
+    expect(handle.close).toHaveBeenCalledTimes(1)
+  })
+
+  it('swallows close failures so teardown never rejects', async () => {
+    const handle = fakeHandle()
+    handle.close.mockRejectedValue(new Error('stalled close'))
+    await expect(closeTranscriptHandle(handle as never, UNC_PATH)).resolves.toBeUndefined()
+    await new Promise((resolve) => setImmediate(resolve))
+  })
+
+  it('drains handle closes one at a time so teardown cannot flood the thread pool', async () => {
+    let releaseFirst: (() => void) | undefined
+    const first = fakeHandle()
+    first.close.mockReturnValue(
+      new Promise<void>((resolve) => {
+        releaseFirst = resolve
+      })
+    )
+    const second = fakeHandle()
+
+    await closeTranscriptHandle(first as never, UNC_PATH)
+    await closeTranscriptHandle(second as never, UNC_PATH)
+    await new Promise((resolve) => setImmediate(resolve))
+
+    // A blocked uv_fs_close holds a libuv thread the gate cannot see, so the
+    // second one must wait rather than occupy a thread of its own.
+    expect(first.close).toHaveBeenCalledTimes(1)
+    expect(second.close).not.toHaveBeenCalled()
+
+    releaseFirst?.()
+    await new Promise((resolve) => setImmediate(resolve))
+    expect(second.close).toHaveBeenCalledTimes(1)
+  })
+
+  it('keeps a blocked close on one distro from stranding teardown on another', async () => {
+    let releaseStuck: (() => void) | undefined
+    const stuck = fakeHandle()
+    stuck.close.mockReturnValue(
+      new Promise<void>((resolve) => {
+        releaseStuck = resolve
+      })
+    )
+    const healthy = fakeHandle()
+
+    try {
+      await closeTranscriptHandle(stuck as never, UNC_PATH)
+      await closeTranscriptHandle(healthy as never, OTHER_DISTRO_UNC_PATH)
+      await new Promise((resolve) => setImmediate(resolve))
+
+      // A close that never settles on a stalled mount would hold a shared lane
+      // for the process lifetime, leaking every later descriptor with it.
+      expect(stuck.close).toHaveBeenCalledTimes(1)
+      expect(healthy.close).toHaveBeenCalledTimes(1)
+    } finally {
+      releaseStuck?.()
+      await new Promise((resolve) => setImmediate(resolve))
+    }
+  })
+
+  it.each([
+    ['stat', wslGatedStat, mocks.stat],
+    ['lstat', wslGatedLstat, mocks.lstat]
+  ])(
+    'detaches a cancelled %s waiter without waiting out the deadline',
+    async (_op, gated, mock) => {
+      let release: (() => void) | undefined
+      mock.mockReturnValue(
+        new Promise((resolve) => {
+          release = () => resolve({ size: 0 })
+        })
+      )
+      try {
+        const controller = new AbortController()
+        const reason = new Error('unsubscribed')
+        const pending = gated(UNC_PATH, 'exact', controller.signal)
+        const settled = pending.then(
+          () => 'resolved',
+          (error: unknown) => error
+        )
+        // Let the gate admit and start the syscall, so this covers the waiter on a
+        // RUNNING unabortable call rather than a still-queued one.
+        await new Promise((resolve) => setImmediate(resolve))
+        expect(mock).toHaveBeenCalledTimes(1)
+
+        controller.abort(reason)
+
+        // No timer advance: the waiter must be gone the moment the caller cancels,
+        // not 30s later when its deadline fires.
+        await expect(settled).resolves.toBe(reason)
+      } finally {
+        release?.()
+        await new Promise((resolve) => setImmediate(resolve))
+      }
+    }
+  )
+
+  it('closes an abandoned open whose syscall lands after the caller gave up', async () => {
+    vi.useFakeTimers()
+    let release: ((handle: unknown) => void) | undefined
+    mocks.open.mockReturnValue(
+      new Promise((resolve) => {
+        release = resolve
+      })
+    )
+    try {
+      const handle = fakeHandle()
+      const refused = wslGatedOpen(UNC_PATH, 'exact').catch((error: unknown) => error)
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+      await expect(refused).resolves.toBeInstanceOf(WslTranscriptFsError)
+
+      release?.(handle)
+      await vi.advanceTimersByTimeAsync(0)
+
+      // Nobody received the handle, so the gate owns closing it.
+      expect(handle.close).toHaveBeenCalledTimes(1)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
+
+describe('transcript handle close off WSL UNC', () => {
+  it('awaits teardown and surfaces the failure, as the raw close did', async () => {
+    const handle = fakeHandle()
+    let closed = false
+    handle.close.mockImplementation(async () => {
+      await new Promise((resolve) => setImmediate(resolve))
+      closed = true
+    })
+
+    await closeTranscriptHandle(handle as never, POSIX_PATH)
+    expect(closed).toBe(true)
+
+    handle.close.mockRejectedValue(new Error('EIO on close'))
+    await expect(closeTranscriptHandle(handle as never, WINDOWS_PATH)).rejects.toThrow(
+      'EIO on close'
+    )
+  })
+})
+
+describe('per-chunk admission', () => {
+  it('carries a codepoint straddling the 1 MiB chunk boundary across chunks', async () => {
+    const emoji = Buffer.from('😀', 'utf8')
+    // Two of the emoji's four bytes land in chunk 1, two in chunk 2 — derived
+    // from the production constant so the fixture cannot drift off the boundary.
+    const body = Buffer.concat([
+      Buffer.alloc(WSL_TRANSCRIPT_READ_CHUNK_BYTES - 2, 0x61),
+      emoji,
+      Buffer.from('tail\n', 'utf8')
+    ])
+    const handle = fakeHandle()
+    handle.read.mockImplementation(
+      async (buffer: Buffer, offset: number, length: number, position: number) => {
+        const slice = body.subarray(position, Math.min(position + length, body.length))
+        slice.copy(buffer, offset)
+        return { bytesRead: slice.length, buffer }
+      }
+    )
+    mocks.open.mockResolvedValue(handle)
+
+    const stream = openTranscriptReadStream(UNC_PATH, { encoding: 'utf-8' }, 'exact')
+    let decoded = ''
+    for await (const chunk of stream) {
+      expect(typeof chunk).toBe('string')
+      decoded += chunk as string
+    }
+
+    expect(decoded).not.toContain('�')
+    expect(decoded).toBe(body.toString('utf8'))
+    expect(handle.read.mock.calls.length).toBeGreaterThan(1)
+  })
+
+  it('surfaces a gate refusal mid-stream as an error event', async () => {
+    vi.useFakeTimers()
+    try {
+      let served = 0
+      const handle = fakeHandle()
+      handle.read.mockImplementation((buffer: Buffer) => {
+        if (served++ === 0) {
+          buffer.write('x')
+          return Promise.resolve({ bytesRead: 1, buffer })
+        }
+        return new Promise(() => {})
+      })
+      mocks.open.mockResolvedValue(handle)
+
+      const stream = openTranscriptReadStream(UNC_PATH, {}, 'exact')
+      const drained = (async () => {
+        for await (const chunk of stream) {
+          void chunk
+        }
+      })()
+      const settled = drained.then(
+        () => null,
+        (error: unknown) => error
+      )
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS + 1)
+
+      await expect(settled).resolves.toBeInstanceOf(WslTranscriptFsError)
+      expect(handle.close).toHaveBeenCalledTimes(1)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
diff --git a/src/main/native-chat/wsl-transcript-fs-access.ts b/src/main/native-chat/wsl-transcript-fs-access.ts
new file mode 100644
index 00000000000..b50c1b1f5f6
--- /dev/null
+++ b/src/main/native-chat/wsl-transcript-fs-access.ts
@@ -0,0 +1,276 @@
+import { createReadStream, type Dirent, type Stats } from 'node:fs'
+import { lstat, open, readdir, readFile, stat, type FileHandle } from 'node:fs/promises'
+import { Readable } from 'node:stream'
+import { StringDecoder } from 'node:string_decoder'
+import { isWslUncPath } from '../../shared/wsl-paths'
+import { runWslTranscriptFsTask, type WslTranscriptFsTaskPriority } from './wsl-transcript-fs-gate'
+import { wslTranscriptFsRouteKey } from './wsl-transcript-fs-route'
+
+/** Never nest a gated call inside another — that deadlocks the scan slot. */
+
+// Why: one deadline per chunk instead of one for the whole file, so a large
+// healthy-but-slow transcript is not false-failed by a whole-file timeout.
+export const WSL_TRANSCRIPT_READ_CHUNK_BYTES = 1024 * 1024
+type Operation = Parameters<typeof runWslTranscriptFsTask>[0]['operation']
+
+function runPathOperation<T>(
+  operation: Operation,
+  path: string,
+  priority: WslTranscriptFsTaskPriority,
+  signal: AbortSignal | undefined,
+  task: () => Promise<T>,
+  options?: { dedupe?: boolean; onAbandonedResult?: (value: T) => void }
+): Promise<T> {
+  return isWslUncPath(path)
+    ? runWslTranscriptFsTask({ operation, path, priority, signal, ...options }, task)
+    : task()
+}
+
+export function wslGatedStat(
+  path: string,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<Stats> {
+  return runPathOperation('stat', path, priority, signal, () => stat(path))
+}
+
+export function wslGatedLstat(
+  path: string,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<Stats> {
+  return runPathOperation('lstat', path, priority, signal, () => lstat(path))
+}
+
+export function wslGatedReaddir(
+  path: string,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<Dirent[]> {
+  return runPathOperation('readdir', path, priority, signal, () =>
+    readdir(path, { withFileTypes: true })
+  )
+}
+
+export function wslGatedReadFile(
+  path: string,
+  encoding: BufferEncoding,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<string> {
+  return runPathOperation('readfile', path, priority, signal, () => readFile(path, encoding))
+}
+
+// dedupe:false — two joiners would share one FileHandle and both close it.
+export function wslGatedOpen(
+  path: string,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<FileHandle> {
+  return runPathOperation('open', path, priority, signal, () => open(path, 'r'), {
+    dedupe: false,
+    // An unabortable open can still succeed after its caller timed out or
+    // cancelled; without this the descriptor leaks for the process lifetime.
+    onAbandonedResult: (handle) => void closeTranscriptHandle(handle, path)
+  })
+}
+
+/**
+ * `path` is only the gate's route key and UNC guard — the handle carries no
+ * path and is never re-opened. dedupe:false because `read` fills the CALLER's
+ * buffer: a joiner would receive the first caller's buffer while its own
+ * (often `Buffer.allocUnsafe`) stays uninitialized.
+ */
+export function wslGatedRead(
+  handle: FileHandle,
+  path: string,
+  buffer: Buffer,
+  offset: number,
+  length: number,
+  position: number,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<{ bytesRead: number; buffer: Buffer }> {
+  return runPathOperation(
+    'read',
+    path,
+    priority,
+    signal,
+    () => handle.read(buffer, offset, length, position),
+    { dedupe: false }
+  )
+}
+
+// A blocked `uv_fs_close` holds a libuv threadpool thread just like a blocked
+// read does, but it is invisible to the gate — so UNC teardown drains one handle
+// at a time. Unbounded fire-and-forget closes are what would exhaust the pool the
+// gate's two permits are sized against, re-creating the process-wide stall the
+// gate exists to prevent; serializing them costs at most one extra busy thread.
+// The queue cannot grow without bound: opens on a stuck route already fast-fail.
+// Keyed by route like the gate's own admission, because a close that blocks on a
+// stalled distro never settles — a shared queue would strand every later close,
+// including handles on healthy distros, for the process lifetime.
+const MAX_CONCURRENT_UNC_CLOSES_PER_ROUTE = 1
+type RouteCloseQueue = { queued: FileHandle[]; active: number }
+const closeQueuesByRoute = new Map<string, RouteCloseQueue>()
+
+function drainQueuedCloses(route: string): void {
+  const lane = closeQueuesByRoute.get(route)
+  if (!lane) {
+    return
+  }
+  while (lane.active < MAX_CONCURRENT_UNC_CLOSES_PER_ROUTE) {
+    const handle = lane.queued.shift()
+    if (!handle) {
+      if (lane.active === 0) {
+        closeQueuesByRoute.delete(route)
+      }
+      return
+    }
+    lane.active += 1
+    void handle
+      .close()
+      .catch(() => {})
+      .finally(() => {
+        lane.active -= 1
+        drainQueuedCloses(route)
+      })
+  }
+}
+
+/**
+ * Never gated. Off UNC this is the prior contract verbatim — the caller awaits
+ * fd teardown and a close failure surfaces. On UNC it is fire-and-forget:
+ * closing a handle on a stalled mount can itself block, and a gated close would
+ * burn a permit and a waiter deadline purely for teardown. One leaked fd until
+ * the OS unblocks beats a second blocked waiter.
+ */
+export function closeTranscriptHandle(handle: FileHandle, path: string): Promise<void> {
+  if (!isWslUncPath(path)) {
+    return handle.close()
+  }
+  const route = wslTranscriptFsRouteKey(path)
+  const lane = closeQueuesByRoute.get(route) ?? { queued: [], active: 0 }
+  closeQueuesByRoute.set(route, lane)
+  lane.queued.push(handle)
+  drainQueuedCloses(route)
+  return Promise.resolve()
+}
+
+/**
+ * Open, read one slice, close — for callers that want bytes at an offset and
+ * never touch the handle. Each of the two syscalls is admitted separately, so a
+ * stalled mount fails at whichever one it blocks on.
+ */
+export async function readTranscriptSlice(
+  path: string,
+  position: number,
+  length: number,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Promise<Buffer> {
+  const handle = await wslGatedOpen(path, priority, signal)
+  try {
+    const buffer = Buffer.allocUnsafe(length)
+    const { bytesRead } = await wslGatedRead(
+      handle,
+      path,
+      buffer,
+      0,
+      length,
+      position,
+      priority,
+      signal
+    )
+    return buffer.subarray(0, bytesRead)
+  } finally {
+    await closeTranscriptHandle(handle, path)
+  }
+}
+
+export type TranscriptReadStreamOptions = {
+  start?: number
+  /** Inclusive, matching `createReadStream`. */
+  end?: number
+  /** Set it to get decoded string chunks on both branches; leave it unset and
+   *  the UNC branch yields `Buffer`s the consumer must decode incrementally
+   *  itself, since a chunk boundary can split a multibyte codepoint. */
+  encoding?: BufferEncoding
+}
+
+async function* gatedChunks(
+  path: string,
+  options: TranscriptReadStreamOptions,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): AsyncGenerator<Buffer | string> {
+  const handle = await wslGatedOpen(path, priority, signal)
+  // Why: chunk boundaries fall mid-codepoint, so decoding each slice
+  // independently would emit U+FFFD on both sides of any straddling character.
+  const decoder = options.encoding ? new StringDecoder(options.encoding) : null
+  try {
+    let position = options.start ?? 0
+    for (;;) {
+      const length =
+        options.end === undefined
+          ? WSL_TRANSCRIPT_READ_CHUNK_BYTES
+          : Math.min(WSL_TRANSCRIPT_READ_CHUNK_BYTES, options.end - position + 1)
+      if (length <= 0) {
+        break
+      }
+      const buffer = Buffer.allocUnsafe(length)
+      const { bytesRead } = await wslGatedRead(
+        handle,
+        path,
+        buffer,
+        0,
+        length,
+        position,
+        priority,
+        signal
+      )
+      if (bytesRead <= 0) {
+        break
+      }
+      position += bytesRead
+      const chunk = buffer.subarray(0, bytesRead)
+      if (!decoder) {
+        yield chunk
+        continue
+      }
+      const decoded = decoder.write(chunk)
+      if (decoded) {
+        yield decoded
+      }
+    }
+    // Trailing bytes of an incomplete sequence at EOF, replacement-char'd once.
+    const trailing = decoder?.end()
+    if (trailing) {
+      yield trailing
+    }
+  } finally {
+    // Runs on `.destroy()` too (Readable.from calls the generator's return()),
+    // so an aborted head-read cannot leak the gated handle.
+    await closeTranscriptHandle(handle, path)
+  }
+}
+
+/**
+ * A read stream whose UNC branch admits and deadlines each 1 MiB chunk
+ * separately. A gate refusal mid-stream surfaces as an `'error'` event carrying
+ * the `WslTranscriptFsError`, which every existing consumer funnels into its
+ * `catch`.
+ */
+export function openTranscriptReadStream(
+  path: string,
+  options: TranscriptReadStreamOptions,
+  priority: WslTranscriptFsTaskPriority,
+  signal?: AbortSignal
+): Readable {
+  if (!isWslUncPath(path)) {
+    // Node destroys the stream with an AbortError on abort, matching how the
+    // gated branch surfaces cancellation to the same consumers.
+    return createReadStream(path, { ...options, signal })
+  }
+  return Readable.from(gatedChunks(path, options, priority, signal))
+}
diff --git a/src/main/native-chat/wsl-transcript-fs-gate.test.ts b/src/main/native-chat/wsl-transcript-fs-gate.test.ts
index b434d13cc4e..9c979002d01 100644
--- a/src/main/native-chat/wsl-transcript-fs-gate.test.ts
+++ b/src/main/native-chat/wsl-transcript-fs-gate.test.ts
@@ -1,5 +1,17 @@
-import { describe, expect, it, vi } from 'vitest'
-import { runWslTranscriptFsTask } from './wsl-transcript-fs-gate'
+import { afterEach, beforeEach, describe, expect, it, vi, type MockInstance } from 'vitest'
+import {
+  runWslTranscriptFsTask,
+  WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS,
+  WSL_TRANSCRIPT_FS_MAX_PENDING_TASKS,
+  WSL_TRANSCRIPT_FS_MAX_WAITERS_PER_TASK,
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from './wsl-transcript-fs-gate'
+
+const SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+const CAPACITY_MESSAGE =
+  'WSL transcript discovery is temporarily unavailable because too many filesystem requests are already waiting. Try again shortly or restart Orca if the issue continues.'
 
 function deferred<T>(): {
   promise: Promise<T>
@@ -28,6 +40,16 @@ function run(
 }
 
 describe('WSL transcript filesystem task scheduling', () => {
+  let warnSpy: MockInstance
+
+  beforeEach(() => {
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    warnSpy.mockRestore()
+  })
+
   it('does not block an exact probe behind a running scan on the same route', async () => {
     const stalled = deferred<string>()
     const scanTask = vi.fn(() => stalled.promise)
@@ -97,8 +119,9 @@ describe('WSL transcript filesystem task scheduling', () => {
     const abandonedTask = vi.fn(async () => 'unused')
     const abandoned = run('\\\\wsl.localhost\\Fedora\\a', 'scan', abandonedTask, controller.signal)
 
-    controller.abort(new Error('closed subscription'))
-    await expect(abandoned).rejects.toThrow('closed subscription')
+    const reason = new Error('closed subscription')
+    controller.abort(reason)
+    await expect(abandoned).rejects.toBe(reason)
     ubuntu.resolve('ubuntu')
     debian.resolve('debian')
     await Promise.all([first, second])
@@ -116,6 +139,29 @@ describe('WSL transcript filesystem task scheduling', () => {
     expect(duplicateTask).not.toHaveBeenCalled()
   })
 
+  it('never joins an exact probe onto the same file queued as scan work', async () => {
+    const transcript = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\live.jsonl'
+    const statTask = (priority: 'exact' | 'scan', task: () => Promise<string>): Promise<string> =>
+      runWslTranscriptFsTask({ operation: 'stat', path: transcript, priority }, task)
+    // Hold the single scan slot on another distro so the same-file scan stat
+    // cannot run — a joiner would inherit exactly that queued position.
+    const blocked = deferred<string>()
+    const holderTask = vi.fn(() => blocked.promise)
+    const holder = run('\\\\wsl.localhost\\Debian\\tree', 'scan', holderTask)
+    await vi.waitFor(() => expect(holderTask).toHaveBeenCalledOnce())
+
+    const scanTask = vi.fn(async () => 'scan')
+    const scanned = statTask('scan', scanTask)
+    const exactTask = vi.fn(async () => 'exact')
+
+    await expect(statTask('exact', exactTask)).resolves.toBe('exact')
+    expect(exactTask).toHaveBeenCalledOnce()
+    expect(scanTask).not.toHaveBeenCalled()
+
+    blocked.resolve('holder')
+    await expect(Promise.all([holder, scanned])).resolves.toEqual(['holder', 'scan'])
+  })
+
   it('keeps shared work needed by a remaining waiter', async () => {
     const pending = deferred<string>()
     const task = vi.fn(() => pending.promise)
@@ -125,8 +171,9 @@ describe('WSL transcript filesystem task scheduling', () => {
     const second = run('\\\\wsl.localhost\\Ubuntu\\shared', 'exact', task, secondController.signal)
     await vi.waitFor(() => expect(task).toHaveBeenCalledOnce())
 
-    firstController.abort(new Error('first closed'))
-    await expect(first).rejects.toThrow('first closed')
+    const reason = new Error('first closed')
+    firstController.abort(reason)
+    await expect(first).rejects.toBe(reason)
     pending.resolve('second')
     await expect(second).resolves.toBe('second')
     expect(task).toHaveBeenCalledOnce()
@@ -175,4 +222,507 @@ describe('WSL transcript filesystem task scheduling', () => {
 
     await expect(Promise.all(tasks)).resolves.toEqual(['0', '1', '2', '3'])
   })
+
+  it.each([
+    ['exact', WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS],
+    ['scan', WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS]
+  ] as const)('rejects a stalled %s waiter at its deadline', async (priority, deadlineMs) => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const task = vi.fn(() => stalled.promise)
+      const pending = run(`\\\\wsl.localhost\\Deadline-${priority}\\a`, priority, task)
+      const rejected = expect(pending).rejects.toMatchObject({
+        name: 'WslTranscriptFsError',
+        code: 'timeout',
+        message: SLOW_MESSAGE
+      })
+      let settled = false
+      void pending.then(
+        () => (settled = true),
+        () => (settled = true)
+      )
+
+      await vi.advanceTimersByTimeAsync(0)
+      expect(task).toHaveBeenCalledOnce()
+      await vi.advanceTimersByTimeAsync(deadlineMs - 1)
+      expect(settled).toBe(false)
+      await vi.advanceTimersByTimeAsync(1)
+      await rejected
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it.each([
+    ['exact', WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS],
+    ['scan', WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS]
+  ] as const)('completes healthy %s work below its deadline', async (priority, deadlineMs) => {
+    vi.useFakeTimers()
+    const work = deferred<string>()
+    try {
+      const pending = run(`\\\\wsl.localhost\\Healthy-${priority}\\a`, priority, () => work.promise)
+
+      await vi.advanceTimersByTimeAsync(deadlineMs - 1)
+      work.resolve('healthy')
+      await expect(pending).resolves.toBe('healthy')
+      expect(vi.getTimerCount()).toBe(0)
+      await vi.advanceTimersByTimeAsync(deadlineMs)
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      work.resolve('healthy')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('does not let one timed-out waiter settle a later shared waiter', async () => {
+    vi.useFakeTimers()
+    const work = deferred<string>()
+    const task = vi.fn(() => work.promise)
+    try {
+      const path = '\\\\wsl.localhost\\Ubuntu\\staggered'
+      const first = run(path, 'exact', task)
+      const firstRejected = expect(first).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(10_000)
+      const second = run(path, 'exact', task)
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS - 10_000)
+      await firstRejected
+      work.resolve('shared')
+      await expect(second).resolves.toBe('shared')
+      expect(task).toHaveBeenCalledOnce()
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      work.resolve('shared')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('rejects newest work when the pending queue is full', async () => {
+    vi.useFakeTimers()
+    const ubuntu = deferred<string>()
+    const debian = deferred<string>()
+    const queuedController = new AbortController()
+    try {
+      const ubuntuTask = vi.fn(() => ubuntu.promise)
+      const debianTask = vi.fn(() => debian.promise)
+      const first = run('\\\\wsl.localhost\\Ubuntu\\occupied', 'exact', ubuntuTask)
+      const second = run('\\\\wsl.localhost\\Debian\\occupied', 'exact', debianTask)
+      await vi.advanceTimersByTimeAsync(0)
+
+      const queued = Array.from({ length: WSL_TRANSCRIPT_FS_MAX_PENDING_TASKS }, (_, index) =>
+        run(
+          `\\\\wsl.localhost\\Queued-${index}\\a`,
+          'exact',
+          async () => String(index),
+          index === 0 ? queuedController.signal : undefined
+        )
+      )
+      const overflowTask = vi.fn(async () => 'overflow')
+      await expect(
+        run('\\\\wsl.localhost\\Overflow\\a', 'exact', overflowTask)
+      ).rejects.toMatchObject({ code: 'capacity', message: CAPACITY_MESSAGE })
+      expect(overflowTask).not.toHaveBeenCalled()
+
+      const reason = new Error('queued caller closed')
+      queuedController.abort(reason)
+      await expect(queued[0]).rejects.toBe(reason)
+      const replacement = run('\\\\wsl.localhost\\Replacement\\a', 'exact', async () => 'new')
+
+      ubuntu.resolve('ubuntu')
+      debian.resolve('debian')
+      await expect(
+        Promise.all([first, second, ...queued.slice(1), replacement])
+      ).resolves.toHaveLength(WSL_TRANSCRIPT_FS_MAX_PENDING_TASKS + 2)
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      ubuntu.resolve('ubuntu')
+      debian.resolve('debian')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('caps callers waiting on shared work', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    const task = vi.fn(() => stalled.promise)
+    const firstController = new AbortController()
+    try {
+      const path = '\\\\wsl.localhost\\Ubuntu\\shared-cap'
+      const waiters = Array.from({ length: WSL_TRANSCRIPT_FS_MAX_WAITERS_PER_TASK }, (_, index) =>
+        run(path, 'exact', task, index === 0 ? firstController.signal : undefined)
+      )
+      await vi.advanceTimersByTimeAsync(0)
+
+      await expect(run(path, 'exact', task)).rejects.toMatchObject({
+        code: 'capacity',
+        message: CAPACITY_MESSAGE
+      })
+      const reason = new Error('first waiter closed')
+      firstController.abort(reason)
+      await expect(waiters[0]).rejects.toBe(reason)
+      const replacement = run(path, 'exact', task)
+      stalled.resolve('shared')
+      await expect(Promise.all([...waiters.slice(1), replacement])).resolves.toEqual(
+        Array(WSL_TRANSCRIPT_FS_MAX_WAITERS_PER_TASK).fill('shared')
+      )
+      expect(task).toHaveBeenCalledOnce()
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      stalled.resolve('shared')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('fails new work fast after both running permits stall', async () => {
+    vi.useFakeTimers()
+    const ubuntu = deferred<string>()
+    const debian = deferred<string>()
+    try {
+      const first = run('\\\\wsl.localhost\\Ubuntu\\stalled', 'exact', () => ubuntu.promise)
+      const second = run('\\\\wsl.localhost\\Debian\\stalled', 'exact', () => debian.promise)
+      const firstRejected = expect(first).rejects.toBeInstanceOf(WslTranscriptFsError)
+      const secondRejected = expect(second).rejects.toBeInstanceOf(WslTranscriptFsError)
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await Promise.all([firstRejected, secondRejected])
+      const laterTask = vi.fn(async () => 'later')
+      await expect(
+        run('\\\\wsl.localhost\\Fedora\\later', 'exact', laterTask)
+      ).rejects.toMatchObject({ code: 'unavailable', message: SLOW_MESSAGE })
+      expect(laterTask).not.toHaveBeenCalled()
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      ubuntu.resolve('ubuntu')
+      debian.resolve('debian')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('fails only work needing a stuck lane fast, keeping the other permit usable', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const stuck = run('\\\\wsl.localhost\\Ubuntu\\lane-stuck', 'exact', () => stalled.promise)
+      const stuckRejected = expect(stuck).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await stuckRejected
+
+      const sameLaneTask = vi.fn(async () => 'same-lane')
+      await expect(
+        run('\\\\wsl.localhost\\Ubuntu\\lane-stuck-sibling', 'exact', sameLaneTask)
+      ).rejects.toMatchObject({ code: 'unavailable', message: SLOW_MESSAGE })
+      expect(sameLaneTask).not.toHaveBeenCalled()
+      await expect(
+        run('\\\\wsl.localhost\\Debian\\healthy-lane', 'exact', async () => 'debian')
+      ).resolves.toBe('debian')
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('fails scans and same-route probes fast while a scan is stuck', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const stuckScan = run('\\\\wsl.localhost\\Ubuntu\\stuck-tree', 'scan', () => stalled.promise)
+      const stuckRejected = expect(stuckScan).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS)
+      await stuckRejected
+
+      const otherScanTask = vi.fn(async () => 'other-scan')
+      await expect(
+        run('\\\\wsl.localhost\\Debian\\other-tree', 'scan', otherScanTask)
+      ).rejects.toMatchObject({ code: 'unavailable' })
+      expect(otherScanTask).not.toHaveBeenCalled()
+      // The whole Ubuntu mount is hung — an exact probe there would only burn
+      // the remaining permit on it.
+      await expect(
+        run('\\\\wsl.localhost\\Ubuntu\\live-probe', 'exact', async () => 'exact')
+      ).rejects.toMatchObject({ code: 'unavailable' })
+      await expect(
+        run('\\\\wsl.localhost\\Debian\\live-probe', 'exact', async () => 'exact')
+      ).resolves.toBe('exact')
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('keeps a stuck exact probe from feeding a doomed scan the second permit', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const stuck = run('\\\\wsl.localhost\\Ubuntu\\hung-file', 'exact', () => stalled.promise)
+      const stuckRejected = expect(stuck).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await stuckRejected
+
+      const doomedScanTask = vi.fn(async () => 'doomed')
+      await expect(
+        run('\\\\wsl.localhost\\Ubuntu\\tree', 'scan', doomedScanTask)
+      ).rejects.toMatchObject({ code: 'unavailable' })
+      expect(doomedScanTask).not.toHaveBeenCalled()
+      await expect(
+        run('\\\\wsl.localhost\\Debian\\tree', 'scan', async () => 'debian-scan')
+      ).resolves.toBe('debian-scan')
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('admits new work again once stuck work finally settles', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const stuck = run('\\\\wsl.localhost\\Ubuntu\\recovering', 'exact', () => stalled.promise)
+      const stuckRejected = expect(stuck).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await stuckRejected
+      await expect(
+        run('\\\\wsl.localhost\\Ubuntu\\recovering-next', 'exact', async () => 'blocked')
+      ).rejects.toMatchObject({ code: 'unavailable' })
+
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      await expect(
+        run('\\\\wsl.localhost\\Ubuntu\\recovering-next', 'exact', async () => 'recovered')
+      ).resolves.toBe('recovered')
+      expect(vi.getTimerCount()).toBe(0)
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('refuses to join in-flight work already past its own deadline', async () => {
+    vi.useFakeTimers()
+    const work = deferred<string>()
+    const task = vi.fn(() => work.promise)
+    try {
+      const path = '\\\\wsl.localhost\\Ubuntu\\join-stuck'
+      const first = run(path, 'exact', task)
+      const firstRejected = expect(first).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(10_000)
+      const second = run(path, 'exact', task)
+      const secondRejected = expect(second).rejects.toMatchObject({ code: 'timeout' })
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS - 10_000)
+      await firstRejected
+      const joinTask = vi.fn(async () => 'join')
+      await expect(run(path, 'exact', joinTask)).rejects.toMatchObject({ code: 'unavailable' })
+      expect(joinTask).not.toHaveBeenCalled()
+      await vi.advanceTimersByTimeAsync(10_000)
+      await secondRejected
+    } finally {
+      work.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('fails joins onto queued work fast when stuck I/O keeps it from running', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    const queuedTask = vi.fn(async () => 'queued')
+    try {
+      const stuck = run('\\\\wsl.localhost\\Ubuntu\\trap-hung', 'exact', () => stalled.promise)
+      const stuckRejected = expect(stuck).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(5_000)
+      // Queued behind the same route before the hang is detected.
+      const queuedPath = '\\\\wsl.localhost\\Ubuntu\\trap-queued'
+      const queued = run(queuedPath, 'exact', queuedTask)
+      const queuedRejected = expect(queued).rejects.toMatchObject({ code: 'timeout' })
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS - 5_000)
+      await stuckRejected
+      // Re-requests must not keep the doomed queued task alive with fresh
+      // deadlines — that would defeat the fail-fast for as long as I/O hangs.
+      await expect(run(queuedPath, 'exact', queuedTask)).rejects.toMatchObject({
+        code: 'unavailable'
+      })
+      await vi.advanceTimersByTimeAsync(5_000)
+      await queuedRejected
+      expect(queuedTask).not.toHaveBeenCalled()
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('does not feed a stuck route the other permit from the queue', async () => {
+    vi.useFakeTimers()
+    const scanWork = deferred<string>()
+    const debianWork = deferred<string>()
+    const ubuntuTask = vi.fn(async () => 'ubuntu')
+    try {
+      const scanU = run(
+        '\\\\wsl.localhost\\Ubuntu\\queued-route-tree',
+        'scan',
+        () => scanWork.promise
+      )
+      const exactD = run(
+        '\\\\wsl.localhost\\Debian\\queued-route-d',
+        'exact',
+        () => debianWork.promise
+      )
+      const scanRejected = expect(scanU).rejects.toMatchObject({ code: 'timeout' })
+      const exactDRejected = expect(exactD).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(35_000)
+      await exactDRejected
+
+      // Queued before Ubuntu's hang is detected at the 60s scan deadline.
+      const queuedU = run('\\\\wsl.localhost\\Ubuntu\\queued-route-file', 'exact', ubuntuTask)
+      const queuedURejected = expect(queuedU).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(25_000)
+      await scanRejected
+
+      debianWork.resolve('debian')
+      await vi.advanceTimersByTimeAsync(0)
+      expect(ubuntuTask).not.toHaveBeenCalled()
+      await vi.advanceTimersByTimeAsync(5_000)
+      await queuedURejected
+      expect(ubuntuTask).not.toHaveBeenCalled()
+    } finally {
+      scanWork.resolve('late')
+      debianWork.resolve('debian')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('warns once per task that outlives its deadline while running', async () => {
+    vi.useFakeTimers()
+    const stalled = deferred<string>()
+    try {
+      const stuck = run('\\\\wsl.localhost\\Ubuntu\\logged', 'exact', () => stalled.promise)
+      const stuckRejected = expect(stuck).rejects.toMatchObject({ code: 'timeout' })
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS * 3)
+      await stuckRejected
+      expect(warnSpy).toHaveBeenCalledOnce()
+      expect(warnSpy.mock.calls[0][0]).toContain('exact')
+      expect(warnSpy.mock.calls[0][0]).toContain('logged')
+    } finally {
+      stalled.resolve('late')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+
+  it('does not mark a scan permit stuck before the scan deadline', async () => {
+    vi.useFakeTimers()
+    const exactWork = deferred<string>()
+    const scanWork = deferred<string>()
+    try {
+      const exact = run(
+        '\\\\wsl.localhost\\Ubuntu\\stalled-exact',
+        'exact',
+        () => exactWork.promise
+      )
+      const scanTask = vi.fn(() => scanWork.promise)
+      const scanPath = '\\\\wsl.localhost\\Debian\\healthy-scan'
+      const scan = run(scanPath, 'scan', scanTask)
+      const exactRejected = expect(exact).rejects.toMatchObject({ code: 'timeout' })
+
+      await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS)
+      await exactRejected
+      const duplicateTask = vi.fn(async () => 'duplicate')
+      const duplicate = run(scanPath, 'scan', duplicateTask)
+
+      scanWork.resolve('scan')
+      await expect(Promise.all([scan, duplicate])).resolves.toEqual(['scan', 'scan'])
+      expect(scanTask).toHaveBeenCalledOnce()
+      expect(duplicateTask).not.toHaveBeenCalled()
+    } finally {
+      exactWork.resolve('late')
+      scanWork.resolve('scan')
+      await vi.advanceTimersByTimeAsync(0)
+      vi.useRealTimers()
+    }
+  })
+})
+
+describe('WSL transcript filesystem task coalescing opt-out', () => {
+  const READ_PATH = '\\\\wsl.localhost\\Alpine\\home\\ada\\transcript.jsonl'
+
+  function gatedRead(task: (signal: AbortSignal) => Promise<Buffer>): Promise<Buffer> {
+    return runWslTranscriptFsTask(
+      { operation: 'read', path: READ_PATH, priority: 'exact', dedupe: false },
+      task
+    )
+  }
+
+  it('fills each caller its own buffer for identical positional reads', async () => {
+    const first = Buffer.alloc(4, 0xa1)
+    const second = Buffer.alloc(4, 0xb2)
+    const bodies = [Buffer.from('AAAA'), Buffer.from('BBBB')]
+
+    const reads = Promise.all([
+      gatedRead(async () => {
+        bodies.shift()!.copy(first)
+        return first
+      }),
+      gatedRead(async () => {
+        bodies.shift()!.copy(second)
+        return second
+      })
+    ])
+
+    await expect(reads).resolves.toEqual([first, second])
+    expect(first.toString()).toBe('AAAA')
+    expect(second.toString()).toBe('BBBB')
+    // Neither caller kept its sentinel nor received the other's bytes.
+    expect(first.equals(second)).toBe(false)
+  })
+
+  it('gives each open call a distinct handle', async () => {
+    const handles = [
+      { id: 1, closed: false },
+      { id: 2, closed: false }
+    ]
+    let served = 0
+    const opened = await Promise.all(
+      handles.map(() =>
+        runWslTranscriptFsTask(
+          { operation: 'open', path: READ_PATH, priority: 'exact', dedupe: false },
+          async () => handles[served++]
+        )
+      )
+    )
+
+    expect(opened[0]).not.toBe(opened[1])
+    opened[0].closed = true
+    expect(opened[1].closed).toBe(false)
+  })
+
+  it('still coalesces identical work when dedupe is omitted', async () => {
+    const stalled = deferred<string>()
+    const task = vi.fn(() => stalled.promise)
+    const path = '\\\\wsl.localhost\\Alpine\\home\\ada'
+    const first = run(path, 'scan', task)
+    await vi.waitFor(() => expect(task).toHaveBeenCalledOnce())
+    const joiner = run(
+      path,
+      'scan',
+      vi.fn(async () => 'never')
+    )
+
+    stalled.resolve('shared')
+    await expect(Promise.all([first, joiner])).resolves.toEqual(['shared', 'shared'])
+    expect(task).toHaveBeenCalledOnce()
+  })
 })
diff --git a/src/main/native-chat/wsl-transcript-fs-gate.ts b/src/main/native-chat/wsl-transcript-fs-gate.ts
index 03225b1d3de..84848e13f11 100644
--- a/src/main/native-chat/wsl-transcript-fs-gate.ts
+++ b/src/main/native-chat/wsl-transcript-fs-gate.ts
@@ -1,6 +1,35 @@
-import { parseWslUncPath } from '../../shared/wsl-paths'
+import { wslTranscriptFsRouteKey } from './wsl-transcript-fs-route'
 
 const MAX_CONCURRENT_WSL_TRANSCRIPT_FS_TASKS = 2
+export const WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS = 30_000
+export const WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS = 60_000
+// Burst bounds keep polling fan-out from growing retained tasks or callers indefinitely.
+export const WSL_TRANSCRIPT_FS_MAX_PENDING_TASKS = 64
+export const WSL_TRANSCRIPT_FS_MAX_WAITERS_PER_TASK = 64
+export const WSL_TRANSCRIPT_FS_SLOW_MESSAGE =
+  'WSL transcript files are temporarily unavailable because filesystem access is taking too long. Try again shortly or restart Orca if the issue continues.'
+export const WSL_TRANSCRIPT_FS_CAPACITY_MESSAGE =
+  'WSL transcript discovery is temporarily unavailable because too many filesystem requests are already waiting. Try again shortly or restart Orca if the issue continues.'
+
+export type WslTranscriptFsFailureCode = 'timeout' | 'capacity' | 'unavailable'
+
+export class WslTranscriptFsError extends Error {
+  constructor(
+    readonly code: WslTranscriptFsFailureCode,
+    message: string
+  ) {
+    super(message)
+    this.name = 'WslTranscriptFsError'
+  }
+}
+
+/** Narrow a caught error to a gate refusal, rethrowing anything else. */
+export function wslTranscriptFsRefusal(error: unknown): WslTranscriptFsError {
+  if (error instanceof WslTranscriptFsError) {
+    return error
+  }
+  throw error
+}
 
 export type WslTranscriptFsTaskPriority = 'exact' | 'scan'
 
@@ -9,39 +38,39 @@ type TaskWaiter<T> = {
   reject: (error: unknown) => void
   signal?: AbortSignal
   onAbort?: () => void
+  timeout?: ReturnType<typeof setTimeout>
 }
 
 type ScheduledTask<T> = {
   key: string
   laneKey: string
+  route: string
   priority: WslTranscriptFsTaskPriority
   operation: (signal: AbortSignal) => Promise<T>
+  /** Dispose a value no waiter is left to own (see settleTask). */
+  onAbandonedResult?: (value: T) => void
   controller: AbortController
   waiters: Set<TaskWaiter<T>>
   state: 'queued' | 'running' | 'settled'
+  // Set by the deadline timer, sharing the waiters' monotonic clock — wall time
+  // would misjudge stuckness across laptop sleep or NTP steps.
+  stuck: boolean
+  stuckTimer?: ReturnType<typeof setTimeout>
 }
 
 type UnknownScheduledTask = ScheduledTask<unknown>
 
-let activeTaskCount = 0
 let activeScanCount = 0
+let undedupedTaskId = 0
 const activeLaneKeys = new Set<string>()
 const queuedTasks: UnknownScheduledTask[] = []
 const inFlightTasks = new Map<string, UnknownScheduledTask>()
+const activeTasks = new Set<UnknownScheduledTask>()
 
 function abortReason(signal: AbortSignal): unknown {
   return signal.reason ?? new Error('WSL transcript filesystem task aborted')
 }
 
-function routeKey(path: string): string {
-  const normalized = path.replace(/\\/g, '/')
-  const match = normalized.match(/^\/\/(wsl\.localhost|wsl\$)\/([^/]+)/i)
-  if (match) {
-    return `${match[1].toLowerCase()}/${match[2].trim().toLowerCase()}`
-  }
-  return parseWslUncPath(path)?.distro.trim().toLowerCase() ?? path
-}
-
 function removeQueuedTask(task: UnknownScheduledTask): void {
   const index = queuedTasks.indexOf(task)
   if (index !== -1) {
@@ -55,11 +84,11 @@ function clearTask(task: UnknownScheduledTask): void {
   }
 }
 
-function abandonTaskIfUnused(task: UnknownScheduledTask): void {
+function abandonTaskIfUnused(task: UnknownScheduledTask, reason?: unknown): void {
   if (task.waiters.size > 0 || task.state === 'settled') {
     return
   }
-  task.controller.abort()
+  task.controller.abort(reason)
   // Running I/O keeps its permit; new callers need a reusable controller.
   clearTask(task)
   if (task.state === 'queued') {
@@ -69,24 +98,89 @@ function abandonTaskIfUnused(task: UnknownScheduledTask): void {
   }
 }
 
+function removeWaiter<T>(task: ScheduledTask<T>, waiter: TaskWaiter<T>): boolean {
+  if (!task.waiters.delete(waiter)) {
+    return false
+  }
+  if (waiter.signal && waiter.onAbort) {
+    waiter.signal.removeEventListener('abort', waiter.onAbort)
+  }
+  if (waiter.timeout) {
+    clearTimeout(waiter.timeout)
+  }
+  return true
+}
+
+function timeoutMs(priority: WslTranscriptFsTaskPriority): number {
+  return priority === 'exact'
+    ? WSL_TRANSCRIPT_FS_EXACT_TIMEOUT_MS
+    : WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS
+}
+
+function timeoutError(): WslTranscriptFsError {
+  return new WslTranscriptFsError('timeout', WSL_TRANSCRIPT_FS_SLOW_MESSAGE)
+}
+
+function capacityError(): WslTranscriptFsError {
+  return new WslTranscriptFsError('capacity', WSL_TRANSCRIPT_FS_CAPACITY_MESSAGE)
+}
+
+function unavailableError(): WslTranscriptFsError {
+  return new WslTranscriptFsError('unavailable', WSL_TRANSCRIPT_FS_SLOW_MESSAGE)
+}
+
+/**
+ * The stuck running task that would doom a new task's admission: one on the
+ * same route (the whole distro mount is hung, whatever the priority — spending
+ * the other permit on it escalates one bad distro into a global outage), one
+ * holding the single scan slot, or (with every permit stuck) any permit.
+ */
+function stuckBlocker(
+  route: string,
+  priority: WslTranscriptFsTaskPriority
+): UnknownScheduledTask | undefined {
+  const stuck = [...activeTasks].filter((task) => task.stuck)
+  if (stuck.length === MAX_CONCURRENT_WSL_TRANSCRIPT_FS_TASKS) {
+    return stuck[0]
+  }
+  return stuck.find(
+    (task) => task.route === route || (priority === 'scan' && task.priority === 'scan')
+  )
+}
+
+// Caller-abort pre-checks live in runWslTranscriptFsTask; nothing here yields
+// before the waiter is attached, so no aborted-signal recheck is needed.
+// The task's own priority is every waiter's deadline: the dedupe key carries
+// priority, so a joiner can only ever join a task scheduled at its own.
 function attachWaiter<T>(task: ScheduledTask<T>, signal?: AbortSignal): Promise<T> {
-  if (signal?.aborted) {
-    abandonTaskIfUnused(task as UnknownScheduledTask)
-    return Promise.reject(abortReason(signal))
+  if (task.waiters.size >= WSL_TRANSCRIPT_FS_MAX_WAITERS_PER_TASK) {
+    return Promise.reject(capacityError())
   }
   return new Promise<T>((resolve, reject) => {
     const waiter: TaskWaiter<T> = { resolve, reject, signal }
+    task.waiters.add(waiter)
     if (signal) {
       waiter.onAbort = () => {
-        if (!task.waiters.delete(waiter)) {
+        const reason = abortReason(signal)
+        if (!removeWaiter(task, waiter)) {
           return
         }
-        reject(abortReason(signal))
-        abandonTaskIfUnused(task as UnknownScheduledTask)
+        reject(reason)
+        abandonTaskIfUnused(task as UnknownScheduledTask, reason)
       }
       signal.addEventListener('abort', waiter.onAbort, { once: true })
     }
-    task.waiters.add(waiter)
+    // UNC/9P calls cannot be aborted; two blocked calls can retain both slots until settling or
+    // Orca restarts, while caller and queue retention remains bounded.
+    waiter.timeout = setTimeout(() => {
+      const error = timeoutError()
+      if (!removeWaiter(task, waiter)) {
+        return
+      }
+      reject(error)
+      abandonTaskIfUnused(task as UnknownScheduledTask, error)
+    }, timeoutMs(task.priority))
+    waiter.timeout.unref?.()
   })
 }
 
@@ -95,16 +189,19 @@ function settleTask<T>(task: ScheduledTask<T>, result: { value: T } | { error: u
     return
   }
   task.state = 'settled'
-  activeTaskCount -= 1
   if (task.priority === 'scan') {
     activeScanCount -= 1
   }
   activeLaneKeys.delete(task.laneKey)
+  activeTasks.delete(task as UnknownScheduledTask)
+  clearTimeout(task.stuckTimer)
   clearTask(task as UnknownScheduledTask)
+  // Why: an unabortable syscall can still succeed after its last waiter timed
+  // out or cancelled. A resource-valued result (open's FileHandle) then has no
+  // owner left to close it, so ownership passes to the task's disposer.
+  const abandoned = task.waiters.size === 0
   for (const waiter of task.waiters) {
-    if (waiter.signal && waiter.onAbort) {
-      waiter.signal.removeEventListener('abort', waiter.onAbort)
-    }
+    removeWaiter(task, waiter)
     if ('value' in result) {
       waiter.resolve(result.value)
     } else {
@@ -112,17 +209,34 @@ function settleTask<T>(task: ScheduledTask<T>, result: { value: T } | { error: u
     }
   }
   task.waiters.clear()
+  if (abandoned && 'value' in result) {
+    // Contained: a disposer that throws must not skip the pump below and wedge
+    // every queued task behind this one.
+    try {
+      task.onAbandonedResult?.(result.value)
+    } catch {
+      // Best-effort teardown; nothing left to report it to.
+    }
+  }
   pumpTasks()
 }
 
 function nextTaskIndex(): number {
+  // Tasks queued before their route hung must not be fed the other permit;
+  // their waiters drain by deadline while healthy routes use the slot.
+  const stuckRoutes = new Set(
+    [...activeTasks].filter((task) => task.stuck).map((task) => task.route)
+  )
   for (const priority of ['exact', 'scan'] as const) {
     // Why: keep one libuv slot available for a live transcript probe.
     if (priority === 'scan' && activeScanCount > 0) {
       continue
     }
     const index = queuedTasks.findIndex(
-      (task) => task.priority === priority && !activeLaneKeys.has(task.laneKey)
+      (task) =>
+        task.priority === priority &&
+        !activeLaneKeys.has(task.laneKey) &&
+        !stuckRoutes.has(task.route)
     )
     if (index !== -1) {
       return index
@@ -132,7 +246,7 @@ function nextTaskIndex(): number {
 }
 
 function pumpTasks(): void {
-  while (activeTaskCount < MAX_CONCURRENT_WSL_TRANSCRIPT_FS_TASKS) {
+  while (activeTasks.size < MAX_CONCURRENT_WSL_TRANSCRIPT_FS_TASKS) {
     const index = nextTaskIndex()
     if (index === -1) {
       return
@@ -142,11 +256,21 @@ function pumpTasks(): void {
       continue
     }
     task.state = 'running'
-    activeTaskCount += 1
     if (task.priority === 'scan') {
       activeScanCount += 1
     }
     activeLaneKeys.add(task.laneKey)
+    activeTasks.add(task)
+    // Anchored at run start: queue wait says nothing about the I/O itself, so
+    // the fail-fast may lag admission by at most one deadline period.
+    task.stuckTimer = setTimeout(() => {
+      task.stuck = true
+      console.warn(
+        `[wsl-transcript-fs-gate] ${task.priority} filesystem task still running after ` +
+          `${timeoutMs(task.priority)}ms and holding a permit: ${task.key}`
+      )
+    }, timeoutMs(task.priority))
+    task.stuckTimer.unref?.()
     void Promise.resolve()
       .then(() => {
         task.controller.signal.throwIfAborted()
@@ -159,38 +283,93 @@ function pumpTasks(): void {
   }
 }
 
+/**
+ * Test-only: drop every task and counter so a case that leaves a task stalled
+ * (holding a permit, marking its route stuck) cannot fast-fail the next one.
+ * Tasks are marked settled first, so a late resolution from the unabortable
+ * syscall they are still blocked on cannot decrement counters this just zeroed.
+ */
+export function resetWslTranscriptFsGateForTests(): void {
+  for (const task of [...activeTasks, ...queuedTasks]) {
+    task.state = 'settled'
+    clearTimeout(task.stuckTimer)
+    for (const waiter of task.waiters) {
+      removeWaiter(task, waiter)
+    }
+  }
+  activeTasks.clear()
+  queuedTasks.length = 0
+  inFlightTasks.clear()
+  activeLaneKeys.clear()
+  activeScanCount = 0
+}
+
 /** Bound 9P work without letting scans delay exact transcript probes. */
 export function runWslTranscriptFsTask<T>(
   options: {
-    operation: 'access' | 'readdir'
+    operation: 'access' | 'readdir' | 'stat' | 'lstat' | 'open' | 'read' | 'readfile'
     path: string
     priority: WslTranscriptFsTaskPriority
     signal?: AbortSignal
+    /** Opt out of coalescing when the result is not the whole answer (`open`,
+     *  positional `read`): a joiner would share the handle or the buffer. */
+    dedupe?: boolean
+    /** Release a late result no waiter is left to own (see settleTask). */
+    onAbandonedResult?: (value: T) => void
   },
   task: (signal: AbortSignal) => Promise<T>
 ): Promise<T> {
+  if (options.signal?.aborted) {
+    return Promise.reject(abortReason(options.signal))
+  }
   // Why: route spelling and Linux path case can change provider behavior, so
-  // only byte-identical filesystem requests are safe to share.
-  const key = JSON.stringify([options.operation, options.path])
+  // only byte-identical filesystem requests are safe to share. Priority is part
+  // of the key because it selects the task's lane, scan slot and deadline: an
+  // exact probe that joined a queued scan task would inherit scan scheduling and
+  // starve behind the very traffic the two priorities exist to bypass. A counter
+  // key never collides, so an un-deduped task simply never finds a join target.
+  const key =
+    options.dedupe === false
+      ? `undeduped:${++undedupedTaskId}`
+      : JSON.stringify([options.operation, options.path, options.priority])
   const existing = inFlightTasks.get(key) as ScheduledTask<T> | undefined
   if (existing) {
+    // A stuck target — or a queued target that stuck I/O keeps from ever
+    // running — dooms every joiner to a slow timeout, and each fresh joiner
+    // would keep the queued task alive past its own abandonment. Fail fast.
+    if (
+      existing.stuck ||
+      (existing.state === 'queued' && stuckBlocker(existing.route, existing.priority))
+    ) {
+      return Promise.reject(unavailableError())
+    }
     return attachWaiter(existing, options.signal)
   }
+  const route = wslTranscriptFsRouteKey(options.path)
+  // Fail fast when the permit, route, or scan slot this task needs is held by
+  // stuck I/O — queueing would only burn the caller's full deadline.
+  if (stuckBlocker(route, options.priority)) {
+    return Promise.reject(unavailableError())
+  }
+  if (queuedTasks.length >= WSL_TRANSCRIPT_FS_MAX_PENDING_TASKS) {
+    return Promise.reject(capacityError())
+  }
 
   const scheduled: ScheduledTask<T> = {
     key,
-    laneKey: `${routeKey(options.path)}:${options.priority}`,
+    laneKey: `${route}:${options.priority}`,
+    route,
     priority: options.priority,
     operation: task,
+    onAbandonedResult: options.onAbandonedResult,
     controller: new AbortController(),
     waiters: new Set(),
-    state: 'queued'
+    state: 'queued',
+    stuck: false
   }
   inFlightTasks.set(key, scheduled as UnknownScheduledTask)
   const result = attachWaiter(scheduled, options.signal)
-  if (scheduled.state === 'queued' && scheduled.waiters.size > 0) {
-    queuedTasks.push(scheduled as UnknownScheduledTask)
-    queueMicrotask(pumpTasks)
-  }
+  queuedTasks.push(scheduled as UnknownScheduledTask)
+  queueMicrotask(pumpTasks)
   return result
 }
diff --git a/src/main/native-chat/wsl-transcript-fs-route.ts b/src/main/native-chat/wsl-transcript-fs-route.ts
new file mode 100644
index 00000000000..dc576c066d7
--- /dev/null
+++ b/src/main/native-chat/wsl-transcript-fs-route.ts
@@ -0,0 +1,19 @@
+import { parseWslUncPath } from '../../shared/wsl-paths'
+
+/**
+ * The isolation unit for WSL transcript filesystem work: one stalled distro
+ * must not fast-fail or strand work on any other. Shared by the gate's
+ * admission and by the ungated close queue so both isolate on the same key.
+ *
+ * wsl$ and wsl.localhost spellings of one distro stay distinct routes on
+ * purpose (provider spelling can change behavior), so a stuck spelling never
+ * fast-fails its twin — the twin is bounded by its own waiter deadlines.
+ */
+export function wslTranscriptFsRouteKey(path: string): string {
+  const normalized = path.replace(/\\/g, '/')
+  const match = normalized.match(/^\/\/(wsl\.localhost|wsl\$)\/([^/]+)/i)
+  if (match) {
+    return `${match[1].toLowerCase()}/${match[2].trim().toLowerCase()}`
+  }
+  return parseWslUncPath(path)?.distro.trim().toLowerCase() ?? path
+}
diff --git a/src/main/network/macos-tailscale-dns-diagnostic.ts b/src/main/network/macos-tailscale-dns-diagnostic.ts
index 5ec5501525e..a4dc948c0bd 100644
--- a/src/main/network/macos-tailscale-dns-diagnostic.ts
+++ b/src/main/network/macos-tailscale-dns-diagnostic.ts
@@ -19,7 +19,7 @@ const NETWORK_LOOKUP_FAILURE_RE =
 
 function globalDnsSection(scutilOutput: string): string {
   const scopedStart = scutilOutput.indexOf('\nDNS configuration (for scoped queries)')
-  return scopedStart >= 0 ? scutilOutput.slice(0, scopedStart) : scutilOutput
+  return scopedStart !== -1 ? scutilOutput.slice(0, scopedStart) : scutilOutput
 }
 
 export function parseMacTailscaleDnsDiagnostic(scutilOutput: string): DnsDiagnostic | null {
diff --git a/src/main/observability/bundle.test.ts b/src/main/observability/bundle.test.ts
index 347e1025893..3c6644a7d43 100644
--- a/src/main/observability/bundle.test.ts
+++ b/src/main/observability/bundle.test.ts
@@ -35,7 +35,7 @@ function makeSpan(overrides: Record<string, unknown> = {}): Record<string, unkno
     kind: 'internal',
     startTimeUnixNano: String(now - 1_000_000_000n),
     endTimeUnixNano: String(now),
-    durationMs: 1.0,
+    durationMs: 1,
     attributes: {},
     events: [],
     exit: { _tag: 'Success' },
diff --git a/src/main/observability/redactor.test.ts b/src/main/observability/redactor.test.ts
index 8de2661515a..0b8ee0f9e61 100644
--- a/src/main/observability/redactor.test.ts
+++ b/src/main/observability/redactor.test.ts
@@ -333,7 +333,7 @@ function makeSpan(overrides: Partial<RedactableSpan>): RedactableSpan {
     kind: 'internal',
     startTimeUnixNano: '1000',
     endTimeUnixNano: '2000',
-    durationMs: 1.0,
+    durationMs: 1,
     attributes: {},
     events: [],
     exit: { _tag: 'Success' },
diff --git a/src/main/observability/redactor.ts b/src/main/observability/redactor.ts
index cd5570f8577..da8feb0a8b0 100644
--- a/src/main/observability/redactor.ts
+++ b/src/main/observability/redactor.ts
@@ -123,7 +123,7 @@ export function redactString(input: string): string {
 export function redactValue(
   value: unknown,
   mode: RedactorMode = 'client',
-  seen: WeakSet<object> = new WeakSet()
+  seen = new WeakSet<object>()
 ): unknown {
   if (value === null || value === undefined) {
     return value
diff --git a/src/main/opencode-usage/scanner-wsl-gate.test.ts b/src/main/opencode-usage/scanner-wsl-gate.test.ts
new file mode 100644
index 00000000000..b7c94000635
--- /dev/null
+++ b/src/main/opencode-usage/scanner-wsl-gate.test.ts
@@ -0,0 +1,117 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { join } from 'node:path'
+import type * as NodeFsPromisesModule from 'node:fs/promises'
+
+const UNC_DATA_DIR = '\\\\wsl.localhost\\Ubuntu\\home\\ada\\.local\\share\\opencode'
+const UNC_DATABASE = `${UNC_DATA_DIR}\\opencode.db`
+
+const mocks = vi.hoisted(() => ({
+  resolveDataDirectory: vi.fn<() => string>(),
+  readdir: vi.fn(),
+  stat: vi.fn()
+}))
+
+vi.mock('../opencode/opencode-data-directory', () => ({
+  resolveOpenCodeDataDirectory: mocks.resolveDataDirectory
+}))
+vi.mock('node:fs/promises', async (importOriginal) => ({
+  ...(await importOriginal<typeof NodeFsPromisesModule>()),
+  readdir: mocks.readdir,
+  stat: mocks.stat
+}))
+
+import { listOpenCodeDatabases } from './scanner'
+import {
+  WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS,
+  WslTranscriptFsError
+} from '../native-chat/wsl-transcript-fs-gate'
+
+// A stalled task holds the gate's single scan slot until it settles, so every
+// case releases its stall before the next one runs.
+let releaseStall: (() => void) | undefined
+
+function stalls<T>(): Promise<T> {
+  return new Promise<T>((resolve) => {
+    releaseStall = () => resolve([] as T)
+  })
+}
+
+function dirent(name: string) {
+  return { name, isFile: () => true }
+}
+
+// The point of the gate: an ungated syscall on a stalled 9P mount never returns,
+// so the call must still be pending at the deadline and settle just after it.
+async function settlesOnlyAtTheScanDeadline(pending: Promise<string[]>): Promise<string[]> {
+  let settled = false
+  const tracked = pending.then((value) => {
+    settled = true
+    return value
+  })
+  await vi.advanceTimersByTimeAsync(WSL_TRANSCRIPT_FS_SCAN_TIMEOUT_MS - 1)
+  expect(settled).toBe(false)
+  await vi.advanceTimersByTimeAsync(2)
+  return await tracked
+}
+
+let originalDatabaseOverride: string | undefined
+
+beforeEach(() => {
+  originalDatabaseOverride = process.env.OPENCODE_DB
+  delete process.env.OPENCODE_DB
+  mocks.resolveDataDirectory.mockReset()
+  mocks.readdir.mockReset()
+  mocks.stat.mockReset()
+  releaseStall = undefined
+  mocks.resolveDataDirectory.mockReturnValue(UNC_DATA_DIR)
+  vi.useFakeTimers()
+})
+
+afterEach(async () => {
+  releaseStall?.()
+  releaseStall = undefined
+  await vi.advanceTimersByTimeAsync(0)
+  vi.useRealTimers()
+  if (originalDatabaseOverride === undefined) {
+    delete process.env.OPENCODE_DB
+  } else {
+    process.env.OPENCODE_DB = originalDatabaseOverride
+  }
+})
+
+// Why this file exists: the AI Vault's primary OpenCode source reaches these
+// syscalls transitively, so the import-guard that pins direct `node:fs` use in
+// the transcript modules never saw them (STA-4049).
+describe('OpenCode database discovery on a stalled WSL data directory', () => {
+  it('gates the data-directory listing instead of hanging the scan', async () => {
+    mocks.readdir.mockImplementation(stalls)
+    // Asserted because an empty list alone also matches a missing data dir; the
+    // AI Vault's OpenCode source turns this callback into the scan issue.
+    const onRefusal = vi.fn()
+
+    expect(await settlesOnlyAtTheScanDeadline(listOpenCodeDatabases(onRefusal))).toEqual([])
+    expect(onRefusal).toHaveBeenCalledWith(UNC_DATA_DIR, expect.any(WslTranscriptFsError))
+  })
+
+  it('gates an absolute UNC OPENCODE_DB probe instead of hanging the scan', async () => {
+    process.env.OPENCODE_DB = UNC_DATABASE
+    mocks.stat.mockImplementation(stalls)
+    const onRefusal = vi.fn()
+
+    expect(await settlesOnlyAtTheScanDeadline(listOpenCodeDatabases(onRefusal))).toEqual([])
+    expect(mocks.readdir).not.toHaveBeenCalled()
+    // Loose on the path: `isAbsolute` is host-flavoured, so a UNC override only
+    // stays verbatim on Windows. The refusal reaching the caller is the contract.
+    expect(onRefusal).toHaveBeenCalledWith(
+      expect.stringContaining('opencode.db'),
+      expect.any(WslTranscriptFsError)
+    )
+  })
+
+  it('still lists databases when the distro answers', async () => {
+    mocks.readdir.mockResolvedValue([dirent('opencode.db'), dirent('notes.txt')])
+
+    await expect(listOpenCodeDatabases()).resolves.toEqual([join(UNC_DATA_DIR, 'opencode.db')])
+    expect(mocks.readdir).toHaveBeenCalledWith(UNC_DATA_DIR, { withFileTypes: true })
+  })
+})
diff --git a/src/main/opencode-usage/scanner.ts b/src/main/opencode-usage/scanner.ts
index b96e14be503..f3a4e6b13e1 100644
--- a/src/main/opencode-usage/scanner.ts
+++ b/src/main/opencode-usage/scanner.ts
@@ -1,7 +1,9 @@
 /* eslint-disable max-lines -- Why: OpenCode usage analytics need to normalize multiple local DB schema generations, attribute worktrees, and build persisted projections in one auditable pipeline. */
-import { readdir, realpath, stat } from 'node:fs/promises'
+import { realpath, stat } from 'node:fs/promises'
 import { basename, isAbsolute, join, posix, win32 } from 'node:path'
 import { yieldToEventLoop } from '../../shared/event-loop-yield'
+import { wslGatedReaddir, wslGatedStat } from '../native-chat/wsl-transcript-fs-access'
+import { WslTranscriptFsError } from '../native-chat/wsl-transcript-fs-gate'
 import { areWorktreePathsEqual } from '../ipc/worktree-logic'
 import { resolveOpenCodeDataDirectory } from '../opencode/opencode-data-directory'
 import Database from '../sqlite/sync-database'
@@ -75,7 +77,14 @@ function getOpenCodeDatabaseOverride(dataDirectory: string): OpenCodeDatabaseOve
   }
 }
 
-export async function listOpenCodeDatabases(): Promise<string[]> {
+// Why gated: the AI Vault's primary OpenCode source delegates here from inside
+// its discovery fan-out, so a UNC data dir or a UNC OPENCODE_DB on a stalled
+// distro would otherwise hang the whole scan on a raw syscall (STA-4049).
+export async function listOpenCodeDatabases(
+  /** Lets a caller report the refusal; an empty list otherwise reads as
+   *  "OpenCode not used" rather than "we could not look". */
+  onRefusal?: (path: string, error: WslTranscriptFsError) => void
+): Promise<string[]> {
   const dataDirectory = resolveOpenCodeDataDirectory()
   const databaseOverride = getOpenCodeDatabaseOverride(dataDirectory)
   if (databaseOverride.isConfigured) {
@@ -83,23 +92,37 @@ export async function listOpenCodeDatabases(): Promise<string[]> {
       return []
     }
     try {
-      return (await stat(databaseOverride.path)).isFile() ? [databaseOverride.path] : []
-    } catch {
+      return (await wslGatedStat(databaseOverride.path, 'scan')).isFile()
+        ? [databaseOverride.path]
+        : []
+    } catch (error) {
+      reportRefusal(databaseOverride.path, error, onRefusal)
       return []
     }
   }
 
   try {
-    const entries = await readdir(dataDirectory, { withFileTypes: true })
+    const entries = await wslGatedReaddir(dataDirectory, 'scan')
     return entries
       .filter((entry) => entry.isFile() && /^opencode(?:-[A-Za-z0-9_.-]+)?\.db$/.test(entry.name))
       .map((entry) => join(dataDirectory, entry.name))
       .sort()
-  } catch {
+  } catch (error) {
+    reportRefusal(dataDirectory, error, onRefusal)
     return []
   }
 }
 
+function reportRefusal(
+  path: string,
+  error: unknown,
+  onRefusal?: (path: string, error: WslTranscriptFsError) => void
+): void {
+  if (error instanceof WslTranscriptFsError) {
+    onRefusal?.(path, error)
+  }
+}
+
 function compareOpenCodeClaimPriority(left: string, right: string): number {
   // Why: the canonical opencode.db is the live database; it must claim
   // duplicated sessions ahead of stale sibling copies. Remaining ties use
diff --git a/src/main/orca-profiles/profile-index-store.test.ts b/src/main/orca-profiles/profile-index-store.test.ts
index a2d3446a99c..128dc56cea3 100644
--- a/src/main/orca-profiles/profile-index-store.test.ts
+++ b/src/main/orca-profiles/profile-index-store.test.ts
@@ -3,6 +3,7 @@ import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync, mkdirSync
 import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 import {
+  createDefaultLocalOrcaProfile,
   DEFAULT_LOCAL_ORCA_PROFILE_ID,
   DEFAULT_LOCAL_ORCA_PROFILE_NAME,
   ORCA_PROFILE_INDEX_SCHEMA_VERSION,
@@ -154,6 +155,27 @@ describe('profile index store', () => {
     expect(() => setActiveOrcaProfile('missing-profile')).toThrow('unknown_orca_profile')
   })
 
+  const posixIt = process.platform === 'win32' ? it.skip : it
+  posixIt('writes a fresh profile index when umask removes owner-write permission', async () => {
+    const store = await loadProfileIndexStore()
+    const indexPath = store.getOrcaProfileIndexPath()
+    const profile = createDefaultLocalOrcaProfile(1)
+    const index: OrcaProfileIndex = {
+      schemaVersion: ORCA_PROFILE_INDEX_SCHEMA_VERSION,
+      activeProfileId: profile.id,
+      profiles: [profile]
+    }
+    const originalUmask = process.umask(0o200)
+
+    try {
+      expect(() => store.writeProfileIndex(indexPath, index)).not.toThrow()
+    } finally {
+      process.umask(originalUmask)
+    }
+
+    expect(readJson(indexPath)).toEqual(index)
+  })
+
   it('recovers a corrupted profile index from the backup copy', async () => {
     const store = await loadProfileIndexStore()
     store.ensureActiveOrcaProfile()
diff --git a/src/main/persistence.test.ts b/src/main/persistence.test.ts
index 86de2ab0685..69ebcca64f8 100644
--- a/src/main/persistence.test.ts
+++ b/src/main/persistence.test.ts
@@ -36,6 +36,7 @@ import {
   ONBOARDING_FLOW_VERSION
 } from '../shared/constants'
 import { folderWorkspaceKey, worktreeWorkspaceKey } from '../shared/workspace-scope'
+import { folderWorkspaceToWorktree } from '../shared/folder-workspace-worktree'
 import { toRuntimeExecutionHostId, toSshExecutionHostId } from '../shared/execution-host'
 import { SshConnectionStore } from './ssh/ssh-connection-store'
 import { setSourceControlActionDefault } from '../shared/source-control-ai-actions'
@@ -4739,6 +4740,25 @@ describe('Store', () => {
     expect(updated!.externalWorktreeVisibilityLegacy).toBe(true)
   })
 
+  it('persists agent worktree visibility independently from external visibility', async () => {
+    const store = await createStore()
+    store.addRepo(makeRepo({ externalWorktreeVisibility: 'hide' }))
+
+    const updated = store.updateRepo('r1', { agentWorktreeVisibility: 'show' })
+
+    expect(updated).toMatchObject({
+      externalWorktreeVisibility: 'hide',
+      agentWorktreeVisibility: 'show'
+    })
+
+    store.flush()
+    const reloaded = await createStore()
+    expect(reloaded.getRepo('r1')).toMatchObject({
+      externalWorktreeVisibility: 'hide',
+      agentWorktreeVisibility: 'show'
+    })
+  })
+
   it('updateRepo clears source-control AI overrides independently from other clearable fields', async () => {
     const store = await createStore()
     store.addRepo(
@@ -5045,7 +5065,19 @@ describe('Store', () => {
     const updated = store.updateFolderWorkspace(workspace.id, {
       comment: 'Coordinate api and web',
       isPinned: true,
-      lastActivityAt: 123
+      lastActivityAt: 123,
+      diffComments: [
+        {
+          id: 'note-1',
+          worktreeId: folderWorkspaceKey(workspace.id),
+          filePath: 'README.md',
+          source: 'markdown',
+          lineNumber: 1,
+          body: 'Review this paragraph',
+          createdAt: 100,
+          side: 'modified'
+        }
+      ]
     })
 
     expect(workspace.folderPath).toBe('/workspace/platform')
@@ -5057,9 +5089,16 @@ describe('Store', () => {
       linkedTask,
       comment: 'Coordinate api and web',
       isPinned: true,
-      lastActivityAt: 123
+      lastActivityAt: 123,
+      diffComments: [expect.objectContaining({ id: 'note-1', body: 'Review this paragraph' })]
     })
     expect(store.getFolderWorkspaces()).toHaveLength(1)
+    store.flush()
+
+    const restored = await createStore()
+    expect(restored.getFolderWorkspace(workspace.id)?.diffComments).toEqual([
+      expect.objectContaining({ id: 'note-1', body: 'Review this paragraph' })
+    ])
   })
 
   it('round-trips Jira item and source context for repo-less folder workspaces', async () => {
@@ -5381,6 +5420,369 @@ describe('Store', () => {
     expect(session.browserPagesByWorkspace?.['browser-workspace']).toBeUndefined()
   })
 
+  // ── 8b. Folder-workspace review notes across a build rollback ──
+
+  function makeFolderNote(id: string, body: string, workspaceId = 'fw-1') {
+    return {
+      id,
+      worktreeId: folderWorkspaceKey(workspaceId),
+      filePath: 'README.md',
+      source: 'markdown' as const,
+      lineNumber: 1,
+      body,
+      createdAt: 100,
+      side: 'modified' as const
+    }
+  }
+
+  function folderWorkspaceRecord(overrides: Record<string, unknown> = {}) {
+    return {
+      id: 'fw-1',
+      projectGroupId: 'root',
+      name: 'Refund fix',
+      folderPath: '/workspace/platform',
+      linkedTask: null,
+      comment: '',
+      isArchived: false,
+      isUnread: false,
+      isPinned: false,
+      sortOrder: 10,
+      lastActivityAt: 5,
+      createdAt: 2,
+      updatedAt: 3,
+      ...overrides
+    }
+  }
+
+  function writeFolderWorkspaceProfile(options: {
+    workspaces: Record<string, unknown>[]
+    diffCommentsMap?: unknown
+    connectionId?: string | null
+    extraTopLevel?: Record<string, unknown>
+  }): void {
+    writeDataFile({
+      schemaVersion: 1,
+      repos: [],
+      worktreeMeta: {},
+      settings: {},
+      ui: {},
+      githubCache: { pr: {}, issue: {} },
+      projectGroups: [
+        {
+          id: 'root',
+          name: 'Platform',
+          parentPath: '/workspace/platform',
+          parentGroupId: null,
+          connectionId: options.connectionId ?? null,
+          createdFrom: 'folder-scan',
+          tabOrder: 0,
+          isCollapsed: false,
+          color: null,
+          createdAt: 1,
+          updatedAt: 1
+        }
+      ],
+      folderWorkspaces: options.workspaces,
+      ...('diffCommentsMap' in options
+        ? { folderWorkspaceDiffComments: options.diffCommentsMap }
+        : {}),
+      ...options.extraTopLevel
+    })
+  }
+
+  // The previous build's normalizeFolderWorkspaces has no diffComments projection (the line this
+  // checkout carries at src/shared/folder-workspaces.ts:107 does not exist on v1.4.179–v1.4.181),
+  // and its full-state write re-serializes everything else verbatim (the `{ ...defaults, ...parsed }`
+  // load spread and the omit-style getDurableState()).
+  function simulatePreviousBuildLoadAndFlush(onDisk: PersistedState): PersistedState {
+    return {
+      ...onDisk,
+      folderWorkspaces: onDisk.folderWorkspaces.map(
+        ({ diffComments: _droppedByOldNormalizer, ...rest }) => rest
+      )
+    }
+  }
+
+  it('keeps folder-workspace review notes across a previous-build rollback and re-upgrade', async () => {
+    const store = await createStore()
+    const group = store.createProjectGroup({
+      name: 'Platform',
+      parentPath: '/workspace/platform',
+      createdFrom: 'folder-scan'
+    })
+    const workspace = store.createFolderWorkspace({
+      projectGroupId: group.id,
+      name: 'Refund fix'
+    })
+    const note = makeFolderNote('note-1', 'Review this paragraph', workspace.id)
+    store.updateFolderWorkspace(workspace.id, { diffComments: [note] })
+    store.flush()
+
+    const persisted = readDataFile() as PersistedState
+    expect(persisted.folderWorkspaceDiffComments?.[workspace.id]).toEqual([note])
+    expect(persisted.folderWorkspaces[0]).not.toHaveProperty('diffComments')
+    // The strip lives at the serialization boundary only; live records keep their notes.
+    expect(store.getFolderWorkspace(workspace.id)?.diffComments).toEqual([note])
+    expect(folderWorkspaceToWorktree(store.getFolderWorkspace(workspace.id)!).diffComments).toEqual(
+      [note]
+    )
+
+    writeDataFile(simulatePreviousBuildLoadAndFlush(persisted))
+
+    const restored = await createStore()
+    expect(restored.getFolderWorkspace(workspace.id)?.diffComments).toEqual([note])
+    restored.flush()
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments?.[workspace.id]).toEqual([
+      note
+    ])
+  })
+
+  it('survives repeated rollback / re-upgrade hops', async () => {
+    const store = await createStore()
+    const group = store.createProjectGroup({
+      name: 'Platform',
+      parentPath: '/workspace/platform',
+      createdFrom: 'folder-scan'
+    })
+    const workspace = store.createFolderWorkspace({ projectGroupId: group.id, name: 'Refund fix' })
+    const note = makeFolderNote('note-1', 'Review this paragraph', workspace.id)
+    store.updateFolderWorkspace(workspace.id, { diffComments: [note] })
+    store.flush()
+
+    for (let hop = 0; hop < 2; hop++) {
+      writeDataFile(simulatePreviousBuildLoadAndFlush(readDataFile() as PersistedState))
+      const reupgraded = await createStore()
+      expect(reupgraded.getFolderWorkspace(workspace.id)?.diffComments).toEqual([note])
+      reupgraded.flush()
+    }
+  })
+
+  it('keeps notes and remote provenance for an SSH folder workspace across a rollback', async () => {
+    const store = await createStore()
+    const group = store.createProjectGroup({
+      name: 'Platform',
+      parentPath: '/workspace/platform',
+      connectionId: 'ssh-1',
+      createdFrom: 'folder-scan'
+    })
+    const workspace = store.createFolderWorkspace({ projectGroupId: group.id, name: 'Remote fix' })
+    expect(workspace.connectionId).toBe('ssh-1')
+    const note = makeFolderNote('note-remote', 'Remote review', workspace.id)
+    store.updateFolderWorkspace(workspace.id, { diffComments: [note] })
+    store.flush()
+
+    writeDataFile(simulatePreviousBuildLoadAndFlush(readDataFile() as PersistedState))
+
+    const restored = await createStore()
+    expect(restored.getFolderWorkspace(workspace.id)?.diffComments).toEqual([note])
+    expect(restored.getFolderWorkspace(workspace.id)?.connectionId).toBe('ssh-1')
+  })
+
+  it('round-trips unknown top-level state keys through load and flush', async () => {
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord({ unknownNestedField: 'from-a-newer-build' })],
+      extraTopLevel: { unknownTopLevelKey: { kept: 'verbatim' } }
+    })
+
+    const store = await createStore()
+    store.updateFolderWorkspace('fw-1', { comment: 'touch' })
+    store.flush()
+
+    const persisted = readDataFile() as PersistedState & { unknownTopLevelKey?: unknown }
+    expect(
+      persisted.unknownTopLevelKey,
+      'Unknown top-level keys must survive load + flush. Note preservation relies on this: converting the ' +
+        '`{ ...defaults, ...parsed }` load spread or the omit-style getDurableState() into an ' +
+        'allowlist re-opens folder-workspace note loss for the then-previous build.'
+    ).toEqual({ kept: 'verbatim' })
+    expect(
+      persisted.folderWorkspaces[0],
+      'Documents existing behavior, not a guarantee: normalizeFolderWorkspaces rebuilds each ' +
+        'record field-by-field, so nested unknown fields are dropped. That is why notes moved ' +
+        'to a top-level key.'
+    ).not.toHaveProperty('unknownNestedField')
+  })
+
+  it('migrates legacy inline folder-workspace notes into the top-level map', async () => {
+    const note = makeFolderNote('note-1', 'Legacy inline note')
+    writeFolderWorkspaceProfile({ workspaces: [folderWorkspaceRecord({ diffComments: [note] })] })
+
+    const store = await createStore()
+    expect(store.getFolderWorkspace('fw-1')?.diffComments).toEqual([note])
+    store.flush()
+
+    const persisted = readDataFile() as PersistedState
+    expect(persisted.folderWorkspaceDiffComments?.['fw-1']).toEqual([note])
+    expect(persisted.folderWorkspaces[0]).not.toHaveProperty('diffComments')
+  })
+
+  it('keeps notes across a rollback when the session never edits anything', async () => {
+    const note = makeFolderNote('note-1', 'Legacy inline note')
+    writeFolderWorkspaceProfile({ workspaces: [folderWorkspaceRecord({ diffComments: [note] })] })
+
+    // Launch and quit on the fixed build, with no mutation: loadNeedsSave must make the
+    // relocation durable on its own. This is the reported P0 sequence.
+    const upgraded = await createStore()
+    upgraded.flush()
+
+    writeDataFile(simulatePreviousBuildLoadAndFlush(readDataFile() as PersistedState))
+
+    const restored = await createStore()
+    expect(restored.getFolderWorkspace('fw-1')?.diffComments).toEqual([note])
+  })
+
+  it('keeps notes authored inline on a rolled-back #14112 build over a staler map entry', async () => {
+    const mapped = makeFolderNote('note-mapped', 'Note from the fixed build')
+    const authored = makeFolderNote('note-inline', 'Note authored while rolled back')
+
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord()],
+      diffCommentsMap: { 'fw-1': [mapped] }
+    })
+    // #14112 persists notes inline and never learned about the top-level map, so a note authored
+    // there lands inline while the untouched map entry goes stale. Inline is the newer write.
+    const rolledBack = readDataFile() as PersistedState
+    writeDataFile({
+      ...rolledBack,
+      folderWorkspaces: rolledBack.folderWorkspaces.map((workspace) => ({
+        ...workspace,
+        diffComments: [authored]
+      }))
+    })
+
+    const store = await createStore()
+    expect(store.getFolderWorkspace('fw-1')?.diffComments).toEqual([authored])
+    store.flush()
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments).toEqual({
+      'fw-1': [authored]
+    })
+  })
+
+  it('never lets an empty or unrelated map entry delete inline notes', async () => {
+    const inline = makeFolderNote('note-inline', 'Inline note')
+    const mapped = makeFolderNote('note-mapped', 'Mapped note')
+
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord({ diffComments: [inline] })],
+      diffCommentsMap: { 'fw-1': [] }
+    })
+    expect((await createStore()).getFolderWorkspace('fw-1')?.diffComments).toEqual([inline])
+
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord({ diffComments: [inline] })],
+      diffCommentsMap: { other: [mapped] }
+    })
+    const store = await createStore()
+    expect(store.getFolderWorkspace('fw-1')?.diffComments).toEqual([inline])
+    store.flush()
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments).toEqual({
+      'fw-1': [inline]
+    })
+  })
+
+  it('drops orphaned note entries and prunes them when workspaces are deleted', async () => {
+    const note = makeFolderNote('note-1', 'Kept note')
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord()],
+      diffCommentsMap: { 'fw-1': [note], ghost: [makeFolderNote('note-ghost', 'Orphan', 'ghost')] }
+    })
+
+    const store = await createStore()
+    store.flush()
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments).toEqual({
+      'fw-1': [note]
+    })
+
+    const reloaded = await createStore()
+    reloaded.flush()
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments).not.toHaveProperty(
+      'ghost'
+    )
+
+    // Delete paths carry no pruning code: the map is derived from live workspaces on every write.
+    expect(reloaded.removeFolderWorkspace('fw-1')).toBe(true)
+    reloaded.flush()
+    expect(readDataFile() as PersistedState).not.toHaveProperty('folderWorkspaceDiffComments')
+
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord()],
+      diffCommentsMap: { 'fw-1': [note] }
+    })
+    const groupDelete = await createStore()
+    expect(groupDelete.deleteProjectGroup('root')).toBe(true)
+    groupDelete.flush()
+    expect(readDataFile() as PersistedState).not.toHaveProperty('folderWorkspaceDiffComments')
+  })
+
+  it('writes no folderWorkspaceDiffComments key for note-free profiles', async () => {
+    const store = await createStore()
+    const group = store.createProjectGroup({
+      name: 'Platform',
+      parentPath: '/workspace/platform',
+      createdFrom: 'folder-scan'
+    })
+    const workspace = store.createFolderWorkspace({ projectGroupId: group.id, name: 'No notes' })
+    store.flush()
+    expect('folderWorkspaceDiffComments' in (readDataFile() as object)).toBe(false)
+
+    store.updateFolderWorkspace(workspace.id, { diffComments: [] })
+    store.flush()
+    expect('folderWorkspaceDiffComments' in (readDataFile() as object)).toBe(false)
+  })
+
+  it.each([
+    ['null root', null, undefined],
+    ['string root', 'oops', undefined],
+    ['array root', [], undefined],
+    ['non-array entry value', { 'fw-1': 'oops' }, undefined],
+    ['array of non-DiffComment members', { 'fw-1': [7] }, [7]]
+  ])(
+    'tolerates a corrupt folderWorkspaceDiffComments map (%s)',
+    async (_label, diffCommentsMap, expected) => {
+      writeFolderWorkspaceProfile({ workspaces: [folderWorkspaceRecord()], diffCommentsMap })
+
+      const store = await createStore()
+
+      expect(store.getFolderWorkspace('fw-1')?.diffComments).toEqual(expected)
+    }
+  )
+
+  it('passes note members through verbatim on load and re-write', async () => {
+    // Shape-only guard: the moment member filtering is added here, the fix itself becomes a new
+    // deletion path for user-authored prose.
+    const noteWithExtras = { ...makeFolderNote('note-1', 'Body'), unknownNoteField: 'kept' }
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord(), folderWorkspaceRecord({ id: 'fw-2', name: 'Second' })],
+      diffCommentsMap: { 'fw-1': [7], 'fw-2': [noteWithExtras] }
+    })
+
+    const store = await createStore()
+    store.flush()
+
+    const persisted = readDataFile() as PersistedState
+    expect(persisted.folderWorkspaceDiffComments).toEqual({
+      'fw-1': [7],
+      'fw-2': [noteWithExtras]
+    })
+  })
+
+  it('derives the written note map from live workspaces, never a stale loaded copy', async () => {
+    const loadedNote = makeFolderNote('note-loaded', 'Loaded note')
+    const editedNote = makeFolderNote('note-edited', 'Edited note')
+    writeFolderWorkspaceProfile({
+      workspaces: [folderWorkspaceRecord()],
+      diffCommentsMap: { 'fw-1': [loadedNote] }
+    })
+
+    const store = await createStore()
+    store.updateFolderWorkspace('fw-1', { diffComments: [editedNote] })
+    store.flush()
+
+    expect((readDataFile() as PersistedState).folderWorkspaceDiffComments).toEqual({
+      'fw-1': [editedNote]
+    })
+  })
+
   // ── 9. Settings: get/update ────────────────────────────────────────
 
   it('updateSettings merges partial updates', async () => {
@@ -5622,6 +6024,50 @@ describe('Store', () => {
     expect(persisted.settings).not.toHaveProperty('terminalScrollbackBytes')
   })
 
+  it('retires the persisted GitHub attribution setting without dropping unknown settings', async () => {
+    const settledStore = await createStore()
+    settledStore.flush()
+    const settled = readDataFile() as { settings: Record<string, unknown> }
+    settled.settings.enableGitHubAttribution = true
+    settled.settings.futureSetting = { enabled: true }
+    writeDataFile(settled)
+
+    vi.useFakeTimers()
+    try {
+      const store = await createStore()
+
+      expect(store.getSettings()).not.toHaveProperty('enableGitHubAttribution')
+      expect(store.getSettings()).toHaveProperty('futureSetting', { enabled: true })
+      vi.advanceTimersByTime(5_000)
+      await store.waitForPendingWrite()
+    } finally {
+      vi.useRealTimers()
+    }
+    const persisted = readDataFile() as { settings?: Record<string, unknown> }
+    expect(persisted.settings).not.toHaveProperty('enableGitHubAttribution')
+    expect(persisted.settings).toHaveProperty('futureSetting', { enabled: true })
+  })
+
+  it('ignores retired GitHub attribution updates and strips stale in-memory values on save', async () => {
+    const store = await createStore()
+    const listener = vi.fn()
+    store.onSettingsChanged(listener)
+
+    const updated = store.updateSettings({ enableGitHubAttribution: true } as never, {
+      notifyListeners: true
+    })
+
+    expect(updated).not.toHaveProperty('enableGitHubAttribution')
+    expect(listener).not.toHaveBeenCalled()
+    const settings = store.getSettings() as GlobalSettings & Record<string, unknown>
+    settings.enableGitHubAttribution = false
+    settings.futureSetting = 'kept'
+    store.flush()
+    const persisted = readDataFile() as { settings?: Record<string, unknown> }
+    expect(persisted.settings).not.toHaveProperty('enableGitHubAttribution')
+    expect(persisted.settings?.futureSetting).toBe('kept')
+  })
+
   it('normalizes terminal cursor style before persistence and listener broadcasts', async () => {
     const store = await createStore()
     store.updateSettings({ terminalCursorStyle: 'underline' })
@@ -9200,6 +9646,242 @@ describe('Store', () => {
     )
   })
 
+  it('admits a split binding only while the exact source still owns its layout leaf', async () => {
+    for (const hostId of [undefined, 'ssh:ssh-1']) {
+      const store = await createStore()
+      store.setWorkspaceSession(
+        {
+          ...getDefaultWorkspaceSession(),
+          tabsByWorktree: {
+            wt1: [makeTerminalTab({ id: 'tab1', worktreeId: 'wt1', ptyId: 'pty-source' })]
+          },
+          terminalLayoutsByTabId: {
+            tab1: {
+              root: { type: 'leaf', leafId: TEST_LEAF_1 },
+              activeLeafId: TEST_LEAF_1,
+              expandedLeafId: null,
+              ptyIdsByLeafId: { [TEST_LEAF_1]: 'pty-source' }
+            }
+          }
+        },
+        hostId
+      )
+      const staleRendererSession = structuredClone(store.getWorkspaceSession(hostId))
+
+      expect(
+        store.persistPtyBinding(
+          {
+            worktreeId: 'wt1',
+            tabId: 'different-target-tab',
+            leafId: TEST_LEAF_2,
+            ptyId: 'pty-split',
+            expectedSourceBinding: {
+              worktreeId: 'wt1',
+              tabId: 'tab1',
+              leafId: TEST_LEAF_1,
+              ptyId: 'pty-source'
+            }
+          },
+          hostId
+        )
+      ).toBe(false)
+      expect(
+        store
+          .getWorkspaceSession(hostId)
+          .tabsByWorktree.wt1.some((tab) => tab.id === 'different-target-tab')
+      ).toBe(false)
+
+      expect(
+        store.persistPtyBinding(
+          {
+            worktreeId: 'wt-canonical',
+            tabId: 'tab1',
+            leafId: TEST_LEAF_2,
+            ptyId: 'pty-split',
+            expectedSourceBinding: {
+              worktreeId: 'wt1',
+              tabId: 'tab1',
+              leafId: TEST_LEAF_1,
+              ptyId: 'pty-source'
+            }
+          },
+          hostId
+        )
+      ).toBe(true)
+      const admitted = store.getWorkspaceSession(hostId)
+      expect(admitted.terminalTopologyRevisionByRepoId?.wt1).toBe(1)
+      expect(admitted.terminalLayoutsByTabId.tab1.ptyIdsByLeafId).toMatchObject({
+        [TEST_LEAF_1]: 'pty-source',
+        [TEST_LEAF_2]: 'pty-split'
+      })
+
+      store.setWorkspaceSession(staleRendererSession, hostId)
+      expect(
+        store.getWorkspaceSession(hostId).terminalLayoutsByTabId.tab1.ptyIdsByLeafId
+      ).toMatchObject({
+        [TEST_LEAF_1]: 'pty-source',
+        [TEST_LEAF_2]: 'pty-split'
+      })
+
+      expect(
+        store.persistPtyBinding(
+          {
+            worktreeId: 'wt1',
+            tabId: 'rejected-tab',
+            leafId: TEST_LEAF_2,
+            ptyId: 'pty-rejected',
+            expectedSourceBinding: {
+              worktreeId: 'wt1',
+              tabId: 'missing-source-tab',
+              leafId: TEST_LEAF_1,
+              ptyId: 'pty-source'
+            }
+          },
+          hostId
+        )
+      ).toBe(false)
+      expect(
+        store
+          .getWorkspaceSession(hostId)
+          .tabsByWorktree.wt1.some((tab) => tab.id === 'rejected-tab')
+      ).toBe(false)
+      expect(
+        store.getWorkspaceSession(hostId).terminalLayoutsByTabId['rejected-tab']
+      ).toBeUndefined()
+    }
+  })
+
+  it('rejects a split source incarnation mismatch', async () => {
+    const store = await createStore()
+    store.setWorkspaceSession({
+      ...getDefaultWorkspaceSession(),
+      tabsByWorktree: {
+        wt1: [makeTerminalTab({ id: 'tab1', worktreeId: 'wt1', ptyId: 'pty-source' })]
+      },
+      terminalLayoutsByTabId: {
+        tab1: {
+          root: { type: 'leaf', leafId: TEST_LEAF_1 },
+          activeLeafId: TEST_LEAF_1,
+          expandedLeafId: null,
+          ptyIdsByLeafId: { [TEST_LEAF_1]: 'pty-source' }
+        }
+      },
+      terminalPtyIncarnationsByPaneKey: { [`tab1:${TEST_LEAF_1}`]: 'persisted-incarnation' }
+    })
+
+    expect(
+      store.persistPtyBinding({
+        worktreeId: 'wt1',
+        tabId: 'tab1',
+        leafId: TEST_LEAF_2,
+        ptyId: 'pty-split',
+        expectedSourceBinding: {
+          tabId: 'tab1',
+          leafId: TEST_LEAF_1,
+          ptyId: 'pty-source',
+          incarnationId: 'different-incarnation'
+        }
+      })
+    ).toBe(false)
+    expect(store.getWorkspaceSession().terminalLayoutsByTabId.tab1.root).toEqual({
+      type: 'leaf',
+      leafId: TEST_LEAF_1
+    })
+  })
+
+  it('requires an expected split source incarnation in the owning host partition', async () => {
+    for (const hostId of [undefined, 'ssh:ssh-1']) {
+      const store = await createStore()
+      const sourceSession: WorkspaceSessionState = {
+        ...getDefaultWorkspaceSession(),
+        tabsByWorktree: {
+          wt1: [makeTerminalTab({ id: 'tab1', worktreeId: 'wt1', ptyId: 'pty-source' })]
+        },
+        terminalLayoutsByTabId: {
+          tab1: {
+            root: { type: 'leaf', leafId: TEST_LEAF_1 },
+            activeLeafId: TEST_LEAF_1,
+            expandedLeafId: null,
+            ptyIdsByLeafId: { [TEST_LEAF_1]: 'pty-source' }
+          }
+        }
+      }
+      if (hostId) {
+        store.setWorkspaceSession(
+          {
+            ...sourceSession,
+            terminalPtyIncarnationsByPaneKey: {
+              [`tab1:${TEST_LEAF_1}`]: 'live-incarnation'
+            }
+          },
+          undefined
+        )
+      }
+      store.setWorkspaceSession(sourceSession, hostId)
+
+      expect(
+        store.persistPtyBinding(
+          {
+            worktreeId: 'wt1',
+            tabId: 'tab1',
+            leafId: TEST_LEAF_2,
+            ptyId: 'pty-split',
+            expectedSourceBinding: {
+              worktreeId: 'wt1',
+              tabId: 'tab1',
+              leafId: TEST_LEAF_1,
+              ptyId: 'pty-source',
+              incarnationId: 'live-incarnation'
+            }
+          },
+          hostId
+        )
+      ).toBe(false)
+      expect(store.getWorkspaceSession(hostId).terminalLayoutsByTabId.tab1.root).toEqual({
+        type: 'leaf',
+        leafId: TEST_LEAF_1
+      })
+    }
+  })
+
+  // Why: a session restored without an incarnation map still owns a valid source binding, so the
+  // split path must be able to fence on the pane alone instead of an id persistence never recorded.
+  it('admits a split whose source pane has no persisted incarnation', async () => {
+    const store = await createStore()
+    store.setWorkspaceSession(
+      {
+        ...getDefaultWorkspaceSession(),
+        tabsByWorktree: {
+          wt1: [makeTerminalTab({ id: 'tab1', worktreeId: 'wt1', ptyId: 'pty-source' })]
+        },
+        terminalLayoutsByTabId: {
+          tab1: {
+            root: { type: 'leaf', leafId: TEST_LEAF_1 },
+            activeLeafId: TEST_LEAF_1,
+            expandedLeafId: null,
+            ptyIdsByLeafId: { [TEST_LEAF_1]: 'pty-source' }
+          }
+        }
+      },
+      undefined
+    )
+
+    expect(
+      store.persistPtyBinding({
+        worktreeId: 'wt1',
+        tabId: 'tab1',
+        leafId: TEST_LEAF_2,
+        ptyId: 'pty-split',
+        expectedSourceBinding: {
+          worktreeId: 'wt1',
+          tabId: 'tab1',
+          leafId: TEST_LEAF_1,
+          ptyId: 'pty-source'
+        }
+      })
+    ).toBe(true)
+  })
+
   it('rejects competing PTY and incarnation changes during reconciliation', async () => {
     const store = await createStore()
     const paneKey = `tab1:${TEST_LEAF_1}`
diff --git a/src/main/persistence.ts b/src/main/persistence.ts
index e772d82f555..ae253a59c8c 100644
--- a/src/main/persistence.ts
+++ b/src/main/persistence.ts
@@ -257,6 +257,10 @@ import { normalizeUiLanguage } from '../shared/ui-language'
 import { normalizeBrowserPageZoomLevel } from '../shared/browser-page-zoom'
 import { persistedUIValuesEqual } from '../shared/persisted-ui-equality'
 import { ActiveViewPreference } from './active-view-preference'
+import {
+  collectFolderWorkspaceDiffComments,
+  normalizeFolderWorkspaceDiffComments
+} from './folder-workspace-diff-comments'
 import {
   normalizeFolderWorkspaceName,
   normalizeFolderWorkspaces
@@ -652,6 +656,11 @@ type LegacyTerminalScrollbackSettings = {
   terminalScrollbackBytes?: unknown
 }
 
+type RetiredGlobalSettings = {
+  terminalScrollbackBytes?: unknown
+  enableGitHubAttribution?: unknown
+}
+
 const LEGACY_TERMINAL_TUI_SCROLL_SENSITIVITY_DEFAULT = 3
 
 function readLegacyTerminalScrollbackSettings(settings: unknown): LegacyTerminalScrollbackSettings {
@@ -660,12 +669,16 @@ function readLegacyTerminalScrollbackSettings(settings: unknown): LegacyTerminal
     : {}
 }
 
-function stripLegacyTerminalScrollbackBytes(
+function stripRetiredGlobalSettings(
   settings: Partial<GlobalSettings> | undefined
 ): Partial<GlobalSettings> {
-  const { terminalScrollbackBytes: _legacyScrollbackBytes, ...rest } = (settings ??
-    {}) as Partial<GlobalSettings> & { terminalScrollbackBytes?: unknown }
+  const {
+    terminalScrollbackBytes: _legacyScrollbackBytes,
+    enableGitHubAttribution: _legacyGitHubAttribution,
+    ...rest
+  } = (settings ?? {}) as Partial<GlobalSettings> & RetiredGlobalSettings
   void _legacyScrollbackBytes
+  void _legacyGitHubAttribution
   return rest
 }
 
@@ -674,11 +687,8 @@ function migrateTerminalScrollbackRows(settings: unknown): {
   needsSave: boolean
 } {
   const legacySettings = readLegacyTerminalScrollbackSettings(settings)
-  const hasRows = Object.prototype.hasOwnProperty.call(legacySettings, 'terminalScrollbackRows')
-  const hasLegacyBytes = Object.prototype.hasOwnProperty.call(
-    legacySettings,
-    'terminalScrollbackBytes'
-  )
+  const hasRows = Object.hasOwn(legacySettings, 'terminalScrollbackRows')
+  const hasLegacyBytes = Object.hasOwn(legacySettings, 'terminalScrollbackBytes')
   const rows = hasRows
     ? normalizeDesktopTerminalScrollbackRows(legacySettings.terminalScrollbackRows)
     : legacyTerminalScrollbackBytesToRows(legacySettings.terminalScrollbackBytes)
@@ -1686,7 +1696,7 @@ type LayoutLeafNormalization = {
 
 function collectLayoutLeafCounts(
   node: TerminalPaneLayoutNode,
-  counts: Map<string, number> = new Map()
+  counts = new Map<string, number>()
 ): Map<string, number> {
   if (node.type === 'leaf') {
     counts.set(node.leafId, (counts.get(node.leafId) ?? 0) + 1)
@@ -2784,6 +2794,14 @@ export type StoreOptions = {
   dataFile?: string
 }
 
+export type PtyBindingSourceExpectation = {
+  worktreeId?: string
+  tabId: string
+  leafId: string
+  ptyId: string
+  incarnationId?: string
+}
+
 export class Store {
   private state: PersistedState
   private readonly dataFile: string
@@ -2845,6 +2863,7 @@ export class Store {
     // profile avoids serializing the multi-MB recovery store on navigation.
     this.activeViewPreference = new ActiveViewPreference(this.dataFile, this.state.ui?.activeView)
     const adaptedProjectGroups = this.adaptFlatFolderScanProjectGroups()
+    this.hydrateFolderWorkspaceDiffComments()
     for (const entry of normalized.migrationUnsupportedEntries) {
       setMigrationUnsupportedPty(entry)
     }
@@ -2865,6 +2884,33 @@ export class Store {
     }
   }
 
+  // Why: notes live top-level on disk so an older build's field-by-field
+  // normalizeFolderWorkspaces can't drop them; re-attach them to the in-memory records here.
+  private hydrateFolderWorkspaceDiffComments(): void {
+    const stored = this.state.folderWorkspaceDiffComments
+    let relocatedInline = false
+    for (const workspace of this.state.folderWorkspaces ?? []) {
+      if (Array.isArray(workspace.diffComments) && workspace.diffComments.length > 0) {
+        // Inline wins: an intervening rollback to a #14112 build writes notes inline and leaves the
+        // older map untouched, so inline is the last notes-aware write. Also makes the relocation
+        // durable even if the user never edits anything this session.
+        relocatedInline = true
+        continue
+      }
+      const comments = stored?.[workspace.id]
+      // Not `??`: a degenerate `{ id: [] }` entry must not delete an intact inline value.
+      if (Array.isArray(comments) && comments.length > 0) {
+        workspace.diffComments = comments
+      }
+    }
+    if (relocatedInline) {
+      this.loadNeedsSave = true
+    }
+    // Write-only projection: buildStateToSave() is the only producer, so leaving the loaded map in
+    // state would make it a stale second source of truth that getDurableState() spreads back out.
+    delete this.state.folderWorkspaceDiffComments
+  }
+
   private adaptFlatFolderScanProjectGroups(): boolean {
     // Why: older folder imports kept a real parent path but flat repos; upgrade that shape into v1 sparse folder scopes.
     const groups = this.state.projectGroups ?? []
@@ -3145,6 +3191,13 @@ export class Store {
         if (migratedTerminalScrollback.needsSave) {
           this.loadNeedsSave = true
         }
+        if (
+          parsed.settings &&
+          typeof parsed.settings === 'object' &&
+          Object.hasOwn(parsed.settings, 'enableGitHubAttribution')
+        ) {
+          this.loadNeedsSave = true
+        }
         const migratedTerminalTuiScrollSensitivity = migrateTerminalTuiScrollSensitivityDefault(
           parsed.settings
         )
@@ -3407,6 +3460,9 @@ export class Store {
             parsed.folderWorkspaces,
             normalizedProjectGroups
           ),
+          folderWorkspaceDiffComments: normalizeFolderWorkspaceDiffComments(
+            parsed.folderWorkspaceDiffComments
+          ),
           worktreeLineageById: parsed.worktreeLineageById ?? {},
           mobileClientTabSelectionsByDeviceId: normalizePersistedMobileClientTabSelections(
             parsed.mobileClientTabSelectionsByDeviceId
@@ -3417,7 +3473,7 @@ export class Store {
           settings: {
             ...defaults.settings,
             // Why (#7977): keep persisted experimentalNewWorktreeCardStyle:true — v1.4.130's onboarding auto-wrote it as a plain boolean, so it's indistinguishable from a real opt-in; only the default changed.
-            ...stripLegacyTerminalScrollbackBytes(parsed.settings),
+            ...stripRetiredGlobalSettings(parsed.settings),
             prBotAuthorOverrides: normalizePRBotAuthorOverrides(
               parsed.settings?.prBotAuthorOverrides
             ),
@@ -4001,6 +4057,13 @@ export class Store {
     // Why: clone before encrypting secrets so in-memory this.state stays plaintext.
     const stateToSave = {
       ...this.getDurableState(),
+      // Why both keys unconditionally: the explicit keys always win over the spread, and
+      // JSON.stringify drops the `undefined` value so a note-free profile gains no key on disk.
+      // The strip builds a new array here only; this.state records keep their notes in memory.
+      folderWorkspaces: (this.state.folderWorkspaces ?? []).map(
+        ({ diffComments: _relocated, ...rest }) => rest
+      ),
+      folderWorkspaceDiffComments: collectFolderWorkspaceDiffComments(this.state.folderWorkspaces),
       sshPtyConsumerRecoveries: (this.state.sshPtyConsumerRecoveries ?? []).map((record) => ({
         ...record,
         ownerLease: encryptToSentinel(
@@ -4009,7 +4072,7 @@ export class Store {
         )
       })),
       settings: {
-        ...this.state.settings,
+        ...stripRetiredGlobalSettings(this.state.settings),
         opencodeSessionCookie: encryptToSentinel(
           PROTECTED_SECRET_SLOT.opencodeSessionCookie,
           this.state.settings.opencodeSessionCookie
@@ -4551,6 +4614,7 @@ export class Store {
         | 'pendingFirstAgentMessageRename'
         | 'firstAgentMessageRenameError'
         | 'lastActivityAt'
+        | 'diffComments'
       >
     >
   ): FolderWorkspace | null {
@@ -4624,6 +4688,9 @@ export class Store {
     if (updates.lastActivityAt !== undefined && Number.isFinite(updates.lastActivityAt)) {
       workspace.lastActivityAt = updates.lastActivityAt
     }
+    if (updates.diffComments !== undefined) {
+      workspace.diffComments = updates.diffComments
+    }
     workspace.updatedAt = Date.now()
     this.scheduleSave()
     return workspace
@@ -4915,6 +4982,7 @@ export class Store {
         | 'externalWorktreeVisibilityPromptDismissedAt'
         | 'externalWorktreeInboxBaselinePaths'
         | 'importedExternalWorktreePaths'
+        | 'agentWorktreeVisibility'
         | 'projectGroupId'
         | 'projectGroupOrder'
         | 'projectHostSetupMethod'
@@ -5814,7 +5882,7 @@ export class Store {
     updates: Partial<GlobalSettings>,
     options: { notifyListeners?: boolean; originWebContentsId?: number } = {}
   ): GlobalSettings {
-    const sanitizedUpdates = stripLegacyTerminalScrollbackBytes(updates)
+    const sanitizedUpdates = stripRetiredGlobalSettings(updates)
     if ('opencodeSessionCookie' in updates && !updates.opencodeSessionCookie) {
       this.protectedSecrets.removeRetainedBlob(PROTECTED_SECRET_SLOT.opencodeSessionCookie)
     }
@@ -6782,15 +6850,37 @@ export class Store {
       incarnationId?: string
       startupCwd?: string
       expectedBinding?: { ptyId: string; incarnationId?: string }
+      expectedSourceBinding?: PtyBindingSourceExpectation
     },
     hostId?: string | null
   ): boolean {
     const resolvedHostId = this.resolveHostId(hostId)
     const session = this.getWorkspaceSession(resolvedHostId)
     const paneKey = `${args.tabId}:${args.leafId}`
+    const bindingWorktreeId = args.expectedSourceBinding?.worktreeId ?? args.worktreeId
+    if (args.expectedSourceBinding) {
+      const expected = args.expectedSourceBinding
+      if (expected.tabId !== args.tabId) {
+        return false
+      }
+      const sourceTab = session.tabsByWorktree?.[bindingWorktreeId]?.find(
+        (candidate) => candidate.id === expected.tabId && candidate.worktreeId === bindingWorktreeId
+      )
+      const sourceLayout = session.terminalLayoutsByTabId?.[expected.tabId]
+      const sourcePaneKey = `${expected.tabId}:${expected.leafId}`
+      if (
+        !sourceTab ||
+        sourceLayout?.ptyIdsByLeafId?.[expected.leafId] !== expected.ptyId ||
+        !layoutContainsLeafId(sourceLayout.root, expected.leafId) ||
+        (expected.incarnationId !== undefined &&
+          session.terminalPtyIncarnationsByPaneKey?.[sourcePaneKey] !== expected.incarnationId)
+      ) {
+        return false
+      }
+    }
     if (args.expectedBinding) {
-      const tab = session.tabsByWorktree?.[args.worktreeId]?.find(
-        (candidate) => candidate.id === args.tabId && candidate.worktreeId === args.worktreeId
+      const tab = session.tabsByWorktree?.[bindingWorktreeId]?.find(
+        (candidate) => candidate.id === args.tabId && candidate.worktreeId === bindingWorktreeId
       )
       const boundPtyId = session.terminalLayoutsByTabId?.[args.tabId]?.ptyIdsByLeafId?.[args.leafId]
       if (
@@ -6813,9 +6903,13 @@ export class Store {
       args.incarnationId !== args.expectedBinding.incarnationId
     let terminalMembershipChanged = false
     const advanceTopologyFence = (): void => {
-      const repoId = getRepoIdFromWorktreeId(args.worktreeId)
+      const repoId = getRepoIdFromWorktreeId(bindingWorktreeId)
       const currentRevision = session.terminalTopologyRevisionByRepoId?.[repoId] ?? 0
-      if (!reconciledIncarnation && (!terminalMembershipChanged || currentRevision <= 0)) {
+      const establishesSplitAuthority = args.expectedSourceBinding !== undefined
+      if (
+        !reconciledIncarnation &&
+        (!terminalMembershipChanged || (currentRevision <= 0 && !establishesSplitAuthority))
+      ) {
         return
       }
       // Why: host-admitted membership or incarnation changes must outrank a stale renderer replay.
@@ -6846,7 +6940,7 @@ export class Store {
         delete session.terminalSurfaceTombstonesByPaneKey[paneKey]
       }
     }
-    const tabs = session.tabsByWorktree?.[args.worktreeId]
+    const tabs = session.tabsByWorktree?.[bindingWorktreeId]
     const tab = tabs?.find((t) => t.id === args.tabId)
     if (tab) {
       tab.ptyId = args.ptyId
@@ -6857,18 +6951,19 @@ export class Store {
         ...(tabs ?? []),
         createMinimalPersistedTerminalTab({
           ...args,
+          worktreeId: bindingWorktreeId,
           existingTabCount: tabs?.length ?? 0
         })
       ]
       session.tabsByWorktree = {
         ...session.tabsByWorktree,
-        [args.worktreeId]: nextTabs
+        [bindingWorktreeId]: nextTabs
       }
-      session.activeWorktreeId ??= args.worktreeId
+      session.activeWorktreeId ??= bindingWorktreeId
       session.activeTabId ??= args.tabId
       session.activeTabIdByWorktree = {
         ...session.activeTabIdByWorktree,
-        [args.worktreeId]: session.activeTabIdByWorktree?.[args.worktreeId] ?? args.tabId
+        [bindingWorktreeId]: session.activeTabIdByWorktree?.[bindingWorktreeId] ?? args.tabId
       }
     }
     if (!isTerminalLeafId(args.leafId)) {
@@ -7235,14 +7330,14 @@ export class Store {
       (entry) =>
         entry.targetId === normalizedLease.targetId && entry.ptyId === normalizedLease.ptyId
     )
-    const existing = existingIndex >= 0 ? this.state.sshRemotePtyLeases[existingIndex] : undefined
+    const existing = existingIndex !== -1 ? this.state.sshRemotePtyLeases[existingIndex] : undefined
     const next: SshRemotePtyLease = {
       ...existing,
       ...normalizedLease,
       createdAt: existing?.createdAt ?? normalizedLease.createdAt ?? now,
       updatedAt: normalizedLease.updatedAt ?? now
     }
-    if (existingIndex >= 0) {
+    if (existingIndex !== -1) {
       this.state.sshRemotePtyLeases[existingIndex] = next
     } else {
       this.state.sshRemotePtyLeases.push(next)
diff --git a/src/main/pi/legacy-omp-overlay-migration.ts b/src/main/pi/legacy-omp-overlay-migration.ts
index 88baf78ea9f..74d6039fcb5 100644
--- a/src/main/pi/legacy-omp-overlay-migration.ts
+++ b/src/main/pi/legacy-omp-overlay-migration.ts
@@ -146,7 +146,7 @@ function copyMissingLegacyOmpOverlayEntries(
   overlayDir: string,
   sourceAgentDir: string,
   pathSegments: string[] = [],
-  copiedFilePaths: Set<string> = new Set()
+  copiedFilePaths = new Set<string>()
 ): boolean {
   let completed = true
   let entries: Dirent[]
diff --git a/src/main/pi/titlebar-extension-service.test.ts b/src/main/pi/titlebar-extension-service.test.ts
index 485ea71cafa..e197a4a0c3a 100644
--- a/src/main/pi/titlebar-extension-service.test.ts
+++ b/src/main/pi/titlebar-extension-service.test.ts
@@ -94,10 +94,6 @@ describe('PiTitlebarExtensionService', () => {
     rmSync(join(userDataDir, 'pi-agent-overlays'), { recursive: true, force: true })
     rmSync(join(userDataDir, 'omp-agent-overlays'), { recursive: true, force: true })
     rmSync(join(userDataDir, 'omp-managed-status-extension'), { recursive: true, force: true })
-    rmSync(join(userDataDir, 'prime-agent-managed-status-extension'), {
-      recursive: true,
-      force: true
-    })
   })
 
   function expectPiHomeIntact(): void {
@@ -185,21 +181,6 @@ describe('PiTitlebarExtensionService', () => {
     expectPiHomeIntact()
   })
 
-  it('writes a Prime status-only extension outside the guest-owned config dir', () => {
-    const svc = new PiTitlebarExtensionService()
-    const env = svc.buildStatusOnlyPtyEnv('prime-agent')
-    const statusPath = join(
-      userDataDir,
-      'prime-agent-managed-status-extension',
-      'orca-agent-status.ts'
-    )
-
-    expect(env).toEqual({ ORCA_PRIME_AGENT_STATUS_EXTENSION: statusPath })
-    expect(readFileSync(statusPath, 'utf8')).toContain('/hook/prime-agent')
-    expect(readFileSync(statusPath, 'utf8')).not.toContain("return '/hook/omp'")
-    expectPiHomeIntact()
-  })
-
   it('uses the same source dir for multiple PTYs with the same Pi dir', () => {
     const svc = new PiTitlebarExtensionService()
     const firstEnv = svc.buildPtyEnv('pty-shared-1', piHome, 'pi')
diff --git a/src/main/pi/titlebar-extension-service.ts b/src/main/pi/titlebar-extension-service.ts
index 59c0f44797f..5e728fa0274 100644
--- a/src/main/pi/titlebar-extension-service.ts
+++ b/src/main/pi/titlebar-extension-service.ts
@@ -27,10 +27,7 @@ export const isSafeDescendCandidate = sharedIsSafeDescendCandidate
 
 const PI_AGENT_SUBDIR = 'agent'
 const ORCA_MANAGED_EXTENSION_MARKER = '@orca-managed-pi-extension'
-const MANAGED_STATUS_EXTENSION_DIR: Record<'omp' | 'prime-agent', string> = {
-  omp: 'omp-managed-status-extension',
-  'prime-agent': 'prime-agent-managed-status-extension'
-}
+const OMP_MANAGED_STATUS_EXTENSION_DIR = 'omp-managed-status-extension'
 
 type ManagedExtensionWriteResult = 'written' | 'skipped-user-owned' | 'failed'
 
@@ -124,11 +121,8 @@ export class PiTitlebarExtensionService {
     }
   }
 
-  private writeFallbackStatusExtension(
-    source: string,
-    kind: keyof typeof MANAGED_STATUS_EXTENSION_DIR
-  ): string | undefined {
-    const fallbackDir = join(app.getPath('userData'), MANAGED_STATUS_EXTENSION_DIR[kind])
+  private writeOmpFallbackStatusExtension(source: string): string | undefined {
+    const fallbackDir = join(app.getPath('userData'), OMP_MANAGED_STATUS_EXTENSION_DIR)
     try {
       mkdirSync(fallbackDir, { recursive: true })
     } catch {
@@ -171,7 +165,7 @@ export class PiTitlebarExtensionService {
         statusResult === 'written'
           ? statusExtensionPath
           : kind === 'omp'
-            ? this.writeFallbackStatusExtension(statusSource, 'omp')
+            ? this.writeOmpFallbackStatusExtension(statusSource)
             : undefined
     }
   }
@@ -201,7 +195,7 @@ export class PiTitlebarExtensionService {
     if (!existsSync(sourceAgentDir) && !materializeDefaultHome) {
       if (kind === 'omp') {
         const statusSource = withOrcaManagedExtensionMarker(getPiAgentStatusExtensionSource(kind))
-        const statusExtensionPath = this.writeFallbackStatusExtension(statusSource, 'omp')
+        const statusExtensionPath = this.writeOmpFallbackStatusExtension(statusSource)
         return statusExtensionPath ? { ORCA_OMP_STATUS_EXTENSION: statusExtensionPath } : {}
       }
       return {}
@@ -226,12 +220,6 @@ export class PiTitlebarExtensionService {
     return env
   }
 
-  buildStatusOnlyPtyEnv(kind: 'prime-agent'): Record<string, string> {
-    const source = withOrcaManagedExtensionMarker(getPiAgentStatusExtensionSource(kind))
-    const statusExtensionPath = this.writeFallbackStatusExtension(source, kind)
-    return statusExtensionPath ? { ORCA_PRIME_AGENT_STATUS_EXTENSION: statusExtensionPath } : {}
-  }
-
   clearPty(ptyId: string): void {
     // Why: PTY teardown doesn't know which kind was launched (the daemon
     // exit path discards the launch command). Sweep both old PTY-scoped
diff --git a/src/main/plugins/plugin-dev-watcher.ts b/src/main/plugins/plugin-dev-watcher.ts
index c6aefa12699..6e7f6f908f0 100644
--- a/src/main/plugins/plugin-dev-watcher.ts
+++ b/src/main/plugins/plugin-dev-watcher.ts
@@ -98,7 +98,7 @@ export class PluginDevWatcher {
 
   private removeSubscription(subscription: WatcherProcessSubscription): void {
     const index = this.subscriptions.indexOf(subscription)
-    if (index >= 0) {
+    if (index !== -1) {
       this.subscriptions.splice(index, 1)
     }
   }
diff --git a/src/main/plugins/plugin-host-runtime.ts b/src/main/plugins/plugin-host-runtime.ts
index 2a2f5f9fcab..b7f3eb9b8a1 100644
--- a/src/main/plugins/plugin-host-runtime.ts
+++ b/src/main/plugins/plugin-host-runtime.ts
@@ -20,7 +20,7 @@ export type PluginHostCallError = Error & { code?: string }
 export type PluginWorkerOrcaApi = {
   /** Register the handler for a command declared in the manifest. */
   commands: {
-    register(commandId: string, handler: (args: unknown) => unknown | Promise<unknown>): void
+    register(commandId: string, handler: (args: unknown) => unknown): void
   }
   /** Handle an event the manifest subscribed to (`contributes.events`). */
   events: {
@@ -55,7 +55,7 @@ export function createPluginWorkerRuntime(
   const send = options.send
   const importModule = options.importModule ?? ((specifier: string) => import(specifier))
   const exit = options.exit ?? ((code: number) => process.exit(code))
-  const commandHandlers = new Map<string, (args: unknown) => unknown | Promise<unknown>>()
+  const commandHandlers = new Map<string, (args: unknown) => unknown>()
   const eventHandlers = new Map<string, ((payload: unknown) => void | Promise<void>)[]>()
   const pendingHostCalls = new Map<
     number,
@@ -64,7 +64,7 @@ export function createPluginWorkerRuntime(
   let nextHostCallId = 0
   let initialized = false
   let shuttingDown = false
-  let deactivate: (() => unknown | Promise<unknown>) | null = null
+  let deactivate: (() => unknown) | null = null
 
   async function handleInit(input: {
     pluginRoot: string
@@ -88,7 +88,7 @@ export function createPluginWorkerRuntime(
     if (module.deactivate !== undefined && typeof module.deactivate !== 'function') {
       throw new Error(`plugin entry ${input.mainEntry} has a non-function deactivate export`)
     }
-    deactivate = (module.deactivate as (() => unknown | Promise<unknown>) | undefined) ?? null
+    deactivate = (module.deactivate as (() => unknown) | undefined) ?? null
     const orca: PluginWorkerOrcaApi = {
       commands: {
         register(commandId, handler) {
diff --git a/src/main/plugins/plugin-worker-output-buffer.ts b/src/main/plugins/plugin-worker-output-buffer.ts
index dfbe0478c28..836330c8799 100644
--- a/src/main/plugins/plugin-worker-output-buffer.ts
+++ b/src/main/plugins/plugin-worker-output-buffer.ts
@@ -34,7 +34,7 @@ export function pipePluginWorkerOutput(
     while (remaining.length > 0) {
       if (discarding) {
         const newline = remaining.indexOf('\n')
-        if (newline < 0) {
+        if (newline === -1) {
           return
         }
         discarding = false
@@ -42,20 +42,20 @@ export function pipePluginWorkerOutput(
         continue
       }
       const newline = remaining.indexOf('\n')
-      const segment = newline < 0 ? remaining : remaining.slice(0, newline)
+      const segment = newline === -1 ? remaining : remaining.slice(0, newline)
       const available = PLUGIN_WORKER_OUTPUT_LINE_LIMIT - buffered.length
       if (segment.length > available) {
         emit(buffered + segment.slice(0, available), true)
         buffered = ''
-        discarding = newline < 0
+        discarding = newline === -1
       } else {
         buffered += segment
-        if (newline >= 0) {
+        if (newline !== -1) {
           emit(buffered)
           buffered = ''
         }
       }
-      if (newline < 0) {
+      if (newline === -1) {
         return
       }
       remaining = remaining.slice(newline + 1)
diff --git a/src/main/plugins/plugin-worker-slot-pool.ts b/src/main/plugins/plugin-worker-slot-pool.ts
index 5b86acf38d7..7cb6c79d6f1 100644
--- a/src/main/plugins/plugin-worker-slot-pool.ts
+++ b/src/main/plugins/plugin-worker-slot-pool.ts
@@ -49,7 +49,7 @@ export class PluginWorkerSlotPool {
           }
           cancelled = true
           const index = this.waiters.indexOf(waiter)
-          if (index >= 0) {
+          if (index !== -1) {
             this.waiters.splice(index, 1)
           }
           signal.removeEventListener('abort', waiter.onAbort)
diff --git a/src/main/providers/__tests__/shell-ready-framework/shell-script-test.ts b/src/main/providers/__tests__/shell-ready-framework/shell-script-test.ts
index c9217f17994..a1dd3727c54 100644
--- a/src/main/providers/__tests__/shell-ready-framework/shell-script-test.ts
+++ b/src/main/providers/__tests__/shell-ready-framework/shell-script-test.ts
@@ -62,6 +62,8 @@ export async function shellScriptTest(
 
     const env: Record<string, string> = {
       ...config.env,
+      // Why: these examples inspect startup-file discovery, not the PTY-owner protocol stream.
+      ORCA_SHELL_STARTUP_IDENTITY: '0',
       // Why: the framework creates user startup files under testHome after
       // computing the wrapper config; route wrapper discovery to that fixture.
       HOME: testHome,
diff --git a/src/main/providers/local-pty-provider.test.ts b/src/main/providers/local-pty-provider.test.ts
index 03e7127ce4c..eedcb87abfc 100644
--- a/src/main/providers/local-pty-provider.test.ts
+++ b/src/main/providers/local-pty-provider.test.ts
@@ -2,6 +2,7 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { delimiter } from 'node:path'
 import type * as MacosTccLoginShell from './macos-tcc-login-shell'
+import { stripLegacyTerminalShimEnv } from '../pty/legacy-terminal-shim-dir'
 
 const {
   existsSyncMock,
@@ -15,7 +16,8 @@ const {
   readWindowsConptyProcessIdsMock,
   killWithDescendantSweepMock,
   isWslAvailableAsyncMock,
-  wslUncDirectoryExistsMock
+  wslUncDirectoryExistsMock,
+  createShellPromptReadinessProbeMock
 } = vi.hoisted(() => ({
   existsSyncMock: vi.fn(),
   statSyncMock: vi.fn(),
@@ -28,7 +30,8 @@ const {
   readWindowsConptyProcessIdsMock: vi.fn(),
   killWithDescendantSweepMock: vi.fn(),
   isWslAvailableAsyncMock: vi.fn(),
-  wslUncDirectoryExistsMock: vi.fn()
+  wslUncDirectoryExistsMock: vi.fn(),
+  createShellPromptReadinessProbeMock: vi.fn()
 }))
 
 vi.mock('fs', () => ({
@@ -107,6 +110,10 @@ vi.mock('../wsl', () => ({
   wslUncDirectoryExists: (...args: unknown[]) => wslUncDirectoryExistsMock(...args)
 }))
 
+vi.mock('../shell-prompt-readiness-probe', () => ({
+  createShellPromptReadinessProbe: createShellPromptReadinessProbeMock
+}))
+
 import {
   _resetLocalPtyProviderStateForTest,
   LOCAL_PTY_FORCE_KILL_RETRY_MS,
@@ -174,6 +181,7 @@ describe('LocalPtyProvider', () => {
     isWslAvailableAsyncMock.mockResolvedValue(true)
     wslUncDirectoryExistsMock.mockReset()
     wslUncDirectoryExistsMock.mockReturnValue(true)
+    createShellPromptReadinessProbeMock.mockReset()
 
     exitCb = undefined
     mockProc = {
@@ -534,6 +542,24 @@ describe('LocalPtyProvider', () => {
       expect(spawnCall[2].env.CUSTOM_VAR).toBe('custom-value')
     })
 
+    it('verifies shell identity against the exact spawn PATH', async () => {
+      provider.configure({
+        buildSpawnEnv: (_id, env) => ({ ...env, PATH: '/post-hook/bin' })
+      })
+
+      await provider.spawn({
+        cols: 80,
+        rows: 24,
+        command: 'printf ready',
+        env: { PATH: '/pre-hook/bin' }
+      })
+
+      expect(spawnMock.mock.calls.at(-1)?.[2].env.PATH).toBe('/post-hook/bin')
+      expect(createShellPromptReadinessProbeMock).toHaveBeenCalledWith(
+        expect.objectContaining({ shellPathEnv: '/post-hook/bin' })
+      )
+    })
+
     it('does not inherit NODE_ENV from the Orca process env', async () => {
       // Why: NODE_ENV in Orca's process is Orca's build mode (electron-vite sets
       // `development` in dev runs); leaking it breaks `next build` and Vitest.
@@ -551,7 +577,9 @@ describe('LocalPtyProvider', () => {
 
       const spawnCall = spawnMock.mock.calls.at(-1)!
       expect(spawnCall[2].env.NODE_ENV).toBeUndefined()
-      expect(spawnCall[2].env.PATH).toBe(process.env.PATH)
+      const expectedEnv = { PATH: process.env.PATH ?? '' }
+      stripLegacyTerminalShimEnv(expectedEnv, process.platform)
+      expect(spawnCall[2].env.PATH).toBe(expectedEnv.PATH)
     })
 
     it('keeps an explicitly requested NODE_ENV for spawned terminals', async () => {
@@ -633,6 +661,23 @@ describe('LocalPtyProvider', () => {
       }
     })
 
+    it.each([
+      ['after the ready marker', ['\x1b]777;orca-shell-ready\x07', '\x1b[?2004hfish> ']],
+      ['after the ESC introducer', ['\x1b]777;orca-shell-ready\x07\x1b', '[?2004hfish> ']]
+    ])('preserves Fish bracketed-paste output split %s', async (_boundary, chunks) => {
+      process.env.SHELL = '/usr/bin/fish'
+      const received: string[] = []
+      provider.configure({ onData: (_id, data) => received.push(data) })
+
+      await provider.spawn({ cols: 80, rows: 24, command: 'printf ready' })
+      const dataCallback = mockProc.onData.mock.calls[0]?.[0] as (data: string) => void
+      for (const chunk of chunks) {
+        dataCallback(chunk)
+      }
+
+      expect(received.join('')).toBe('\x1b[?2004hfish> ')
+    })
+
     it('releases held marker-prefix bytes when local shell readiness times out', async () => {
       vi.useFakeTimers()
       const onData = vi.fn()
@@ -685,8 +730,8 @@ describe('LocalPtyProvider', () => {
       provider.configure({
         buildSpawnEnv: (_id, env) => {
           env.TERM_PROGRAM = 'Orca'
-          env.ORCA_ATTRIBUTION_SHIM_DIR = '/tmp/orca-attribution'
-          env.PATH = `/tmp/orca-attribution:${env.PATH ?? ''}`
+          env.ORCA_STALE_TEST_ENV = '/tmp/orca-stale'
+          env.PATH = `/tmp/orca-stale:${env.PATH ?? ''}`
           return env
         }
       })
@@ -699,7 +744,7 @@ describe('LocalPtyProvider', () => {
           PATH: '/tmp/orca-agent-teams-bin:/usr/bin',
           ORCA_AGENT_TEAMS_TEAM_ID: 'team-test'
         },
-        envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+        envToDelete: ['TERM_PROGRAM', 'ORCA_STALE_TEST_ENV']
       })
 
       const spawnCall = spawnMock.mock.calls.at(-1)!
@@ -707,7 +752,20 @@ describe('LocalPtyProvider', () => {
       expect(spawnCall[2].env.TERM).toBe('screen-256color')
       expect(spawnCall[2].env.PATH.split(':')[0]).toBe('/tmp/orca-agent-teams-bin')
       expect(spawnCall[2].env.TERM_PROGRAM).toBeUndefined()
-      expect(spawnCall[2].env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+      expect(spawnCall[2].env.ORCA_STALE_TEST_ENV).toBeUndefined()
+    })
+
+    it('does not re-promote a legacy attribution path for Agent Teams', async () => {
+      await provider.spawn({
+        cols: 80,
+        rows: 24,
+        env: {
+          PATH: '/tmp/orca-terminal-attribution/posix:/usr/bin',
+          ORCA_AGENT_TEAMS_TEAM_ID: 'team-test'
+        }
+      })
+
+      expect(spawnMock.mock.calls.at(-1)?.[2].env.PATH).toBe('/usr/bin')
     })
 
     it('drops stale inherited Git config indices behind a smaller explicit count', async () => {
@@ -817,9 +875,9 @@ describe('LocalPtyProvider', () => {
       Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
       provider.configure({
         buildSpawnEnv: (_id, env) => {
-          // Why: attribution collapses Windows PATH onto `Path` and prepends its own shim dir.
+          // Why: host env collapses Windows PATH onto `Path` and prepends its own shim dir.
           delete env.PATH
-          env.Path = `/tmp/orca-attribution:${env.Path ?? ''}`
+          env.Path = `/tmp/orca-stale:${env.Path ?? ''}`
           return env
         }
       })
diff --git a/src/main/providers/local-pty-provider.ts b/src/main/providers/local-pty-provider.ts
index aafd04b9e1b..b4af3c907fb 100644
--- a/src/main/providers/local-pty-provider.ts
+++ b/src/main/providers/local-pty-provider.ts
@@ -13,6 +13,7 @@ import { existsSync } from 'node:fs'
 import * as pty from 'node-pty'
 import { getDefaultWslDistro, parseWslPath, isWslAvailableAsync } from '../wsl'
 import { splitWorktreeIdForFilesystem } from '../../shared/worktree-id'
+import { isBracketedPasteSafeShell } from '../../shared/startup-command-submission'
 import {
   injectHistoryEnv,
   updateHistFileForFallback,
@@ -26,11 +27,8 @@ import {
 } from './local-pty-utils'
 import { prepareMacosTccLoginShell } from './macos-tcc-login-shell'
 import {
-  getAttributionShellLaunchConfig,
+  getMarkerlessShellLaunchConfig,
   getShellReadyLaunchConfig,
-  createShellReadyScanState,
-  drainShellReadyHeldBytes,
-  scanForShellReady,
   writeStartupCommandWhenShellReady,
   STARTUP_COMMAND_READY_MAX_WAIT_MS
 } from './local-pty-shell-ready'
@@ -38,6 +36,7 @@ import type { ShellReadySignal } from './local-pty-shell-ready'
 import { removeInheritedNoColor } from '../pty/terminal-color-env'
 import { removeAppImageRuntimeEnv } from '../pty/appimage-terminal-env'
 import { stripInheritedBuildModeEnv } from '../pty/build-mode-env'
+import { stripLegacyTerminalShimEnv } from '../pty/legacy-terminal-shim-dir'
 import { SessionNotFoundError } from '../daemon/daemon-errors'
 import { resolvePathEnvKey } from '../pty/windows-environment-path'
 import { isHostCodexHomeForWsl, isWslCodexHomeForHost } from '../pty/codex-home-wsl-env'
@@ -74,6 +73,15 @@ import {
   createPtySlaveEchoProbe,
   readPtySlavePath
 } from '../../shared/pty-slave-line-discipline-echo'
+import {
+  createShellStartupOutputScanState,
+  drainShellStartupOutputScanState,
+  scanShellStartupOutput
+} from '../shell-startup-output-scanner'
+import {
+  createShellPromptReadinessProbe,
+  type ShellPromptReadinessProbe
+} from '../shell-prompt-readiness-probe'
 import {
   expandWindowsEnvironmentVariables,
   expandWindowsPathEnvironmentVariables
@@ -781,7 +789,6 @@ export class LocalPtyProvider implements IPtyProvider {
     if (!wslInfo && process.platform !== 'win32') {
       // Why: OpenCode/Codex PATH restoration and OMP's status wrapper need shell-ready code after user startup files run.
       const needsNoMarkerWrapper =
-        finalEnv.ORCA_ATTRIBUTION_SHIM_DIR ||
         finalEnv.ORCA_OPENCODE_CONFIG_DIR ||
         finalEnv.ORCA_MIMOCODE_HOME ||
         finalEnv.ORCA_OMP_STATUS_EXTENSION ||
@@ -798,16 +805,16 @@ export class LocalPtyProvider implements IPtyProvider {
         getFallbackShellReadyConfig = (shell) =>
           shouldWaitForShellReady
             ? getShellReadyLaunchConfig(shell)
-            : getAttributionShellLaunchConfig(shell)
+            : getMarkerlessShellLaunchConfig(shell)
         shellLaunch = shouldWaitForShellReady
           ? getShellReadyLaunchConfig(shellPath)
-          : getAttributionShellLaunchConfig(shellPath)
+          : getMarkerlessShellLaunchConfig(shellPath)
       } else if (args.command) {
         getFallbackShellReadyConfig = (shell) => getShellReadyLaunchConfig(shell)
         shellLaunch = getShellReadyLaunchConfig(shellPath)
       } else if (needsNoMarkerWrapper) {
-        getFallbackShellReadyConfig = (shell) => getAttributionShellLaunchConfig(shell)
-        shellLaunch = getAttributionShellLaunchConfig(shellPath)
+        getFallbackShellReadyConfig = (shell) => getMarkerlessShellLaunchConfig(shell)
+        shellLaunch = getMarkerlessShellLaunchConfig(shellPath)
       } else {
         getFallbackShellReadyConfig = undefined
       }
@@ -823,6 +830,8 @@ export class LocalPtyProvider implements IPtyProvider {
       finalEnv,
       requestedEnv ? requestedEnv[resolvePathEnvKey(requestedEnv, process.platform)] : undefined
     )
+    // Why: raw requested PATH promotion runs after the host-env scrub.
+    stripLegacyTerminalShimEnv(finalEnv, process.platform)
 
     // Why: worktree-scoped HISTFILE — without it worktrees share one global history (terminal-history-scope-design §7–§10).
     const worktreeId = args.worktreeId
@@ -950,8 +959,10 @@ export class LocalPtyProvider implements IPtyProvider {
     // Shell-ready startup command support
     let resolveShellReady: ((signal: ShellReadySignal) => void) | null = null
     let shellReadyTimeout: ReturnType<typeof setTimeout> | null = null
-    const shellReadyScanState = shellReadyLaunch?.supportsReadyMarker
-      ? createShellReadyScanState()
+    let shellStartupPid: number | null = null
+    let shellPromptReadinessProbe: ShellPromptReadinessProbe | null = null
+    let shellStartupOutputScanState = shellReadyLaunch?.supportsReadyMarker
+      ? createShellStartupOutputScanState()
       : null
     const shellReadyPromise = args.command
       ? new Promise<ShellReadySignal>((resolve) => {
@@ -966,20 +977,39 @@ export class LocalPtyProvider implements IPtyProvider {
         clearTimeout(shellReadyTimeout)
         shellReadyTimeout = null
       }
+      shellPromptReadinessProbe?.dispose()
+      shellPromptReadinessProbe = null
       const resolve = resolveShellReady
       resolveShellReady = null
       resolve(signal)
     }
     const releaseHeldShellReadyBytes = (): void => {
-      if (!shellReadyScanState) {
+      if (!shellStartupOutputScanState) {
         return
       }
-      const heldBytes = drainShellReadyHeldBytes(shellReadyScanState)
+      const heldBytes = drainShellStartupOutputScanState(shellStartupOutputScanState)
+      shellStartupOutputScanState = null
       if (heldBytes.length === 0) {
         return
       }
       startupIngress.accept(heldBytes)
     }
+    if (shellStartupOutputScanState) {
+      shellPromptReadinessProbe = createShellPromptReadinessProbe({
+        slavePath: readPtySlavePath(proc),
+        shellPath,
+        shellCwd: effectiveCwd,
+        shellPathEnv: finalEnv.PATH,
+        getShellPid: () => shellStartupPid,
+        onPromptReady: () => {
+          console.warn(
+            `[pty] ${id}: shell-ready wrapper was replaced before its marker; releasing at the identified shell prompt. OSC 133 integration may be unavailable.`
+          )
+          releaseHeldShellReadyBytes()
+          finishShellReady({ postMarkerBytesObserved: true })
+        }
+      })
+    }
     if (args.command) {
       if (shellReadyLaunch?.supportsReadyMarker) {
         shellReadyTimeout = setTimeout(() => {
@@ -1001,20 +1031,28 @@ export class LocalPtyProvider implements IPtyProvider {
         startupCommandCleanup?.()
         startupCommandCleanup = null
         resolveShellReady = null
+        shellPromptReadinessProbe?.dispose()
+        shellPromptReadinessProbe = null
       })
     }
 
     const disposables: { dispose: () => void }[] = []
     const onDataDisposable = proc.onData((rawData) => {
       let data = rawData
-      if (shellReadyScanState && resolveShellReady) {
-        const scanned = scanForShellReady(shellReadyScanState, rawData)
+      if (shellStartupOutputScanState && resolveShellReady) {
+        const scanned = scanShellStartupOutput(shellStartupOutputScanState, data)
         data = scanned.output
-        if (scanned.matched) {
+        if (scanned.shellPid) {
+          shellStartupPid = scanned.shellPid
+        }
+        if (scanned.ready) {
           finishShellReady({ postMarkerBytesObserved: scanned.postMarkerBytesObserved })
         }
       }
       startupIngress.accept(data)
+      if (resolveShellReady && data.length > 0) {
+        shellPromptReadinessProbe?.notifyOutput(data)
+      }
     })
     if (onDataDisposable) {
       disposables.push(onDataDisposable)
@@ -1032,6 +1070,8 @@ export class LocalPtyProvider implements IPtyProvider {
         shellReadyTimeout = null
       }
       startupCommandCleanup?.()
+      shellPromptReadinessProbe?.dispose()
+      shellPromptReadinessProbe = null
       clearPtyState(id)
       startupIngress.drainAndClose()
       startupIngressByPty.delete(id)
@@ -1048,10 +1088,14 @@ export class LocalPtyProvider implements IPtyProvider {
     ptyDisposables.set(id, disposables)
 
     if (args.command && !startupCommandDeliveredInShellArgs) {
-      // Why: only POSIX bash/zsh have bracketed-paste armed so multiline startup prompts paste literally; others use raw submit.
+      // Why: shells with bracketed paste armed take a multiline startup prompt literally; others use raw submit.
       const spawnedShellName = getSpawnedShellName(shellPath).toLowerCase()
       const bracketedPasteSafe =
-        process.platform !== 'win32' && (spawnedShellName === 'bash' || spawnedShellName === 'zsh')
+        process.platform !== 'win32' &&
+        isBracketedPasteSafeShell({
+          shellName: spawnedShellName,
+          waitsForShellReady: shellReadyLaunch?.supportsReadyMarker === true
+        })
       writeStartupCommandWhenShellReady(
         shellReadyPromise,
         proc,
diff --git a/src/main/providers/local-pty-shell-ready.test.ts b/src/main/providers/local-pty-shell-ready.test.ts
index d9034a5cc24..64d8859e6cc 100644
--- a/src/main/providers/local-pty-shell-ready.test.ts
+++ b/src/main/providers/local-pty-shell-ready.test.ts
@@ -380,10 +380,10 @@ describePosix('local PTY shell-ready launch config', () => {
     expect(init).toContain('functions -e __orca_shell_ready_marker')
   })
 
-  it('keeps attribution-only fish spawns unwrapped', async () => {
-    const { getAttributionShellLaunchConfig } = await importFreshLocalPtyShellReady()
+  it('keeps markerless fish spawns unwrapped', async () => {
+    const { getMarkerlessShellLaunchConfig } = await importFreshLocalPtyShellReady()
 
-    const config = getAttributionShellLaunchConfig('/opt/homebrew/bin/fish')
+    const config = getMarkerlessShellLaunchConfig('/opt/homebrew/bin/fish')
 
     expect(config).toEqual({ args: null, env: {}, supportsReadyMarker: false })
   })
@@ -485,6 +485,7 @@ describePosix('local PTY shell-ready launch config', () => {
     const zshrc = readFileSync(join(userDataPath, 'shell-ready', 'zsh', '.zshrc'), 'utf8')
     const zlogin = readFileSync(join(userDataPath, 'shell-ready', 'zsh', '.zlogin'), 'utf8')
     expect(zshenv).toContain('_orca_user_zdotdir="${_orca_spawn_orig_zdotdir:-$HOME}"')
+    expect(zshenv).toContain('printf "\\033]777;orca-shell-start:%s\\007" "$$"')
     expect(zshenv).toContain('*/shell-ready/zsh) _orca_user_zdotdir="$HOME" ;;')
     expect(zshenv).toContain('""|*/shell-ready/zsh) export ORCA_ORIG_ZDOTDIR="$HOME" ;;')
     expectZdotdirSourceContext(zprofile, '.zprofile')
@@ -526,8 +527,6 @@ describePosix('local PTY shell-ready launch config', () => {
       '[[ -n "${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="${ORCA_CODEX_HOME}"'
     const agentTeamsPathRestoreLine = '[[ -n "${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0'
     const ompWrapperLine = 'command omp --extension "${ORCA_OMP_STATUS_EXTENSION}" "$@"'
-    const primeWrapperLine =
-      'command prime-agent --extension "${ORCA_PRIME_AGENT_STATUS_EXTENSION}" "$@"'
     expect(zshrc).toContain(restoreLine)
     expect(zlogin).toContain(restoreLine)
     expect(bashRc).toContain(restoreLine)
@@ -549,9 +548,12 @@ describePosix('local PTY shell-ready launch config', () => {
     expect(zshrc).toContain(ompWrapperLine)
     expect(zlogin).toContain(ompWrapperLine)
     expect(bashRc).toContain(ompWrapperLine)
-    expect(zshrc).toContain(primeWrapperLine)
-    expect(zlogin).toContain(primeWrapperLine)
-    expect(bashRc).toContain(primeWrapperLine)
+    for (const wrapperFile of [zshrc, zlogin, bashRc]) {
+      expect(wrapperFile).not.toContain('prime-agent()')
+      expect(wrapperFile).not.toContain('__orca_prime_agent')
+      expect(wrapperFile).not.toContain('ORCA_PRIME_AGENT_STATUS_EXTENSION')
+      expect(wrapperFile).not.toContain('command prime-agent --extension')
+    }
   })
 
   // Why: issue #2422 — without OSC 133 C/D markers, bash sessions kept the worktree spinner "working" ~30min after the agent exited.
@@ -814,8 +816,6 @@ path=(/custom/bin $path)
       }
       delete cleanEnv.ZDOTDIR
       delete cleanEnv.ORCA_ORIG_ZDOTDIR
-      // Why: this test isolates zsh top-level path scoping, not attribution shim ordering.
-      delete cleanEnv.ORCA_ATTRIBUTION_SHIM_DIR
       cleanEnv.ZDOTDIR = config.env.ZDOTDIR // Point to Orca wrapper dir
 
       const result = spawnSync(
@@ -854,7 +854,6 @@ path=(/custom/bin $path)
         }
         delete cleanEnv.ZDOTDIR
         delete cleanEnv.ORCA_ORIG_ZDOTDIR
-        delete cleanEnv.ORCA_ATTRIBUTION_SHIM_DIR
         delete cleanEnv.USER_ZSHRC_LOADED
         cleanEnv.ZDOTDIR = join(movedUserData, 'shell-ready', 'zsh')
 
@@ -902,7 +901,6 @@ path=(/custom/bin $path)
         }
         delete cleanEnv.ZDOTDIR
         delete cleanEnv.ORCA_ORIG_ZDOTDIR
-        delete cleanEnv.ORCA_ATTRIBUTION_SHIM_DIR
         delete cleanEnv.USER_ZSHRC_LOADED
         cleanEnv.ZDOTDIR = join(nonAsciiUserData, 'shell-ready', 'zsh')
 
diff --git a/src/main/providers/local-pty-shell-ready.ts b/src/main/providers/local-pty-shell-ready.ts
index 63885e23579..9a3230590ec 100644
--- a/src/main/providers/local-pty-shell-ready.ts
+++ b/src/main/providers/local-pty-shell-ready.ts
@@ -15,13 +15,13 @@ import {
   isPowerShellExecutableName
 } from '../powershell-osc133-bootstrap'
 import { getPosixOmpShellWrapper } from '../pty/omp-shell-wrapper'
-import { getPosixPrimeAgentShellWrapper } from '../pty/prime-agent-shell-wrapper'
 import { buildStartupCommandSubmission } from '../../shared/startup-command-submission'
 import {
   getFishShellReadyInitCommand,
   getZshEnvTemplate,
   getZshFinalZdotdirRestoreBlock,
   getZshShellReadyMarkerRegistrationBlock,
+  SHELL_STARTUP_IDENTITY_MARKER_BLOCK,
   getZshStartupFileSourceBlock
 } from '../shell-templates'
 export {
@@ -93,6 +93,7 @@ function resolveOriginalZshenvSourceDir(): string {
 
 export function getBashShellReadyRcfileContent(): string {
   return `# Orca bash shell-ready wrapper
+${SHELL_STARTUP_IDENTITY_MARKER_BLOCK}
 [[ -f /etc/profile ]] && source /etc/profile
 if [[ -f "$HOME/.bash_profile" ]]; then
   source "$HOME/.bash_profile"
@@ -109,14 +110,6 @@ fi
 # Why: preserve bash's normal login-shell contract. Many users already source
 # ~/.bashrc from ~/.bash_profile; forcing ~/.bashrc again here would duplicate
 # PATH edits, hooks, and prompt init in Orca startup-command shells.
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-__orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -130,7 +123,6 @@ __orca_restore_agent_teams_path
 [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
 [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
 ${getPosixOmpShellWrapper()}
-${getPosixPrimeAgentShellWrapper()}
 # Why: Codex must keep using Orca's runtime CODEX_HOME after profile scripts.
 [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 # Why: emit OSC 133 C/D so terminal-command-lifecycle can drop stale agent
@@ -226,14 +218,6 @@ ${getZshStartupFileSourceBlock({
   interactiveOnly: true,
   skipWhenHomeIsCurrentZdotdir: true
 })}
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-[[ ! -o login ]] && __orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -247,7 +231,6 @@ if [[ ! -o login ]]; then
   [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
 [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
   ${getPosixOmpShellWrapper()}
-  ${getPosixPrimeAgentShellWrapper()}
   # Why: Codex must keep using Orca's runtime CODEX_HOME after rc files.
   [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 fi
@@ -288,14 +271,6 @@ ${getZshStartupFileSourceBlock({ fileName: '.zprofile' })}
   const zshRc = getZshShellReadyRcfileContent()
   const zshLogin = `# Orca zsh shell-ready wrapper
 ${getZshStartupFileSourceBlock({ fileName: '.zlogin', interactiveOnly: true })}
-__orca_restore_attribution_path() {
-  [[ -n "\${ORCA_ATTRIBUTION_SHIM_DIR:-}" ]] || return 0
-  case "$PATH" in
-    "\${ORCA_ATTRIBUTION_SHIM_DIR}"|"\${ORCA_ATTRIBUTION_SHIM_DIR}:"*) return 0 ;;
-  esac
-  export PATH="\${ORCA_ATTRIBUTION_SHIM_DIR}:$PATH"
-}
-__orca_restore_attribution_path
 __orca_restore_agent_teams_path() {
   [[ -n "\${ORCA_AGENT_TEAMS_SHIM_DIR:-}" ]] || return 0
   case "$PATH" in
@@ -308,7 +283,6 @@ __orca_restore_agent_teams_path
 [[ -n "\${ORCA_OPENCODE_CONFIG_DIR:-}" ]] && export OPENCODE_CONFIG_DIR="\${ORCA_OPENCODE_CONFIG_DIR}"
 [[ -n "\${ORCA_MIMOCODE_HOME:-}" ]] && export MIMOCODE_HOME="\${ORCA_MIMOCODE_HOME}"
 ${getPosixOmpShellWrapper()}
-${getPosixPrimeAgentShellWrapper()}
 [[ -n "\${ORCA_CODEX_HOME:-}" ]] && export CODEX_HOME="\${ORCA_CODEX_HOME}"
 ${getZshShellReadyMarkerRegistrationBlock(SHELL_READY_MARKER_ESCAPED)}
 ${getZshFinalZdotdirRestoreBlock()}
@@ -372,7 +346,8 @@ function getWrappedShellLaunchConfig(
         ORCA_ORIG_ZDOTDIR: resolveOriginalZdotdir(),
         ORCA_ZSHENV_SOURCE_DIR: resolveOriginalZshenvSourceDir(),
         ZDOTDIR: `${getShellReadyWrapperRoot()}/zsh`,
-        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0'
+        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0',
+        ORCA_SHELL_STARTUP_IDENTITY: options.emitReadyMarker ? '1' : '0'
       },
       supportsReadyMarker: options.emitReadyMarker
     }
@@ -383,7 +358,8 @@ function getWrappedShellLaunchConfig(
     return {
       args: ['--rcfile', `${getShellReadyWrapperRoot()}/bash/rcfile`],
       env: {
-        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0'
+        ORCA_SHELL_READY_MARKER: options.emitReadyMarker ? '1' : '0',
+        ORCA_SHELL_STARTUP_IDENTITY: options.emitReadyMarker ? '1' : '0'
       },
       supportsReadyMarker: options.emitReadyMarker
     }
@@ -402,7 +378,7 @@ function getWrappedShellLaunchConfig(
     }
   }
 
-  // Why: mirrors daemon/shell-ready.ts; attribution-only fish stays unwrapped.
+  // Why: mirrors daemon/shell-ready.ts; markerless fish stays unwrapped.
   if (shellName === 'fish' && options.emitReadyMarker) {
     return {
       args: ['-l', '-C', getFishShellReadyInitCommand(SHELL_READY_MARKER_ESCAPED)],
@@ -422,7 +398,7 @@ export function getShellReadyLaunchConfig(shellPath: string): ShellReadyLaunchCo
   return getWrappedShellLaunchConfig(shellPath, { emitReadyMarker: true })
 }
 
-export function getAttributionShellLaunchConfig(shellPath: string): ShellReadyLaunchConfig {
+export function getMarkerlessShellLaunchConfig(shellPath: string): ShellReadyLaunchConfig {
   return getWrappedShellLaunchConfig(shellPath, { emitReadyMarker: false })
 }
 
@@ -433,7 +409,7 @@ export function writeStartupCommandWhenShellReady(
   proc: pty.IPty,
   startupCommand: string,
   onExit: (cleanup: () => void) => void,
-  // Why: only Orca-wrapped bash/zsh have bracketed-paste active; other shells use the raw path to avoid echoing the ESC[200~ markers.
+  // Why: only shells with bracketed-paste active (see isBracketedPasteSafeShell) accept the wrapper; others use the raw path so ESC[200~ isn't echoed.
   options: { bracketedPasteSafe?: boolean } = {}
 ): void {
   let sent = false
diff --git a/src/main/providers/provider-dispatch.test.ts b/src/main/providers/provider-dispatch.test.ts
index 57d7e3f815c..2ba058ffd9c 100644
--- a/src/main/providers/provider-dispatch.test.ts
+++ b/src/main/providers/provider-dispatch.test.ts
@@ -62,6 +62,7 @@ import {
   unregisterSshPtyProvider
 } from '../ipc/pty'
 import type { IPtyProvider } from './types'
+import { LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS } from '../pty/legacy-terminal-shim-dir'
 
 describe('PTY provider dispatch', () => {
   const handlers = new Map<string, (...args: unknown[]) => unknown>()
@@ -147,6 +148,7 @@ describe('PTY provider dispatch', () => {
     const sshSpawnArgs = vi.mocked(mockSshProvider.spawn).mock.calls.at(-1)![0]
     expect([...(sshSpawnArgs.envToDelete ?? [])].sort()).toEqual(
       [
+        ...LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS,
         'CLAUDE_CODE_CHILD_SESSION',
         'CLAUDE_CODE_SESSION_ID',
         'CLAUDE_CODE_BRIDGE_SESSION_ID'
diff --git a/src/main/providers/pty-provider-contract.ts b/src/main/providers/pty-provider-contract.ts
index e1017cab2c4..09f3cda62fd 100644
--- a/src/main/providers/pty-provider-contract.ts
+++ b/src/main/providers/pty-provider-contract.ts
@@ -32,6 +32,10 @@ export type PtyProviderBufferSnapshot = {
   oscLinks?: TerminalOscLinkRange[]
   alternateScreen?: boolean
   pendingEscapeTailAnsi?: string
+  /** Effective kitty keyboard flags PROVEN at this snapshot's own `seq`
+   *  boundary. Absent means the source could not prove them; readers must not
+   *  rewrite that silence into a known `0`. */
+  kittyKeyboardFlags?: number
 }
 
 export type PtySpawnOptions = {
diff --git a/src/main/providers/pty-spawn-result.ts b/src/main/providers/pty-spawn-result.ts
index 66fec74a482..ebed657ee21 100644
--- a/src/main/providers/pty-spawn-result.ts
+++ b/src/main/providers/pty-spawn-result.ts
@@ -49,6 +49,9 @@ export type PtySpawnResult = {
    *  (terminal-query-authority.md §kitty). Never replayed into a renderer
    *  xterm — POST_REPLAY_REATTACH_RESET's kitty reset stays authoritative. */
   snapshotKittyKeyboardFlags?: number
+  /** Renderer-domain sequence main reconciled for the attach boundary those
+   *  flags describe. Set by main, not the provider. */
+  snapshotSeq?: number
   /** True when the spawn reattached to an existing daemon session. */
   isReattach?: boolean
   /** Last OSC title tracked by the daemon session the snapshot came from.
diff --git a/src/main/providers/ssh-pty-provider.test.ts b/src/main/providers/ssh-pty-provider.test.ts
index d299e65b716..40301906f52 100644
--- a/src/main/providers/ssh-pty-provider.test.ts
+++ b/src/main/providers/ssh-pty-provider.test.ts
@@ -427,7 +427,7 @@ describe('SshPtyProvider', () => {
 
     it('preserves explicit TERM and forwards final env deletions to the relay', async () => {
       mux.request.mockResolvedValue({ id: 'pty-env-precedence' })
-      const envToDelete = ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+      const envToDelete = ['TERM_PROGRAM', 'ORCA_STALE_TEST_ENV']
 
       await provider.spawn({
         cols: 120,
@@ -435,7 +435,7 @@ describe('SshPtyProvider', () => {
         env: {
           TERM: 'screen-256color',
           TERM_PROGRAM: 'stale-terminal',
-          ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/stale-attribution'
+          ORCA_STALE_TEST_ENV: '/tmp/stale-env'
         },
         envToDelete
       })
@@ -452,7 +452,7 @@ describe('SshPtyProvider', () => {
       })
       const spawnCall = mux.request.mock.calls.find((call) => call[0] === 'pty.spawn')
       expect(spawnCall?.[1]?.env).not.toHaveProperty('TERM_PROGRAM')
-      expect(spawnCall?.[1]?.env).not.toHaveProperty('ORCA_ATTRIBUTION_SHIM_DIR')
+      expect(spawnCall?.[1]?.env).not.toHaveProperty('ORCA_STALE_TEST_ENV')
     })
 
     it('forwards provider command delivery to the relay', async () => {
diff --git a/src/main/providers/windows-foreground-process-rows.ts b/src/main/providers/windows-foreground-process-rows.ts
index 7e4cdd2e48d..d5e8f8185cd 100644
--- a/src/main/providers/windows-foreground-process-rows.ts
+++ b/src/main/providers/windows-foreground-process-rows.ts
@@ -112,7 +112,7 @@ function parseWindowsProcessValueRows(stdout: string): WindowsProcessRow[] {
       continue
     }
     const eq = line.indexOf('=')
-    if (eq < 0) {
+    if (eq === -1) {
       continue
     }
     const key = line.slice(0, eq)
diff --git a/src/main/providers/windows-shell-args.test.ts b/src/main/providers/windows-shell-args.test.ts
index c3bead6c5b2..534bfc90085 100644
--- a/src/main/providers/windows-shell-args.test.ts
+++ b/src/main/providers/windows-shell-args.test.ts
@@ -280,16 +280,17 @@ describe('resolveWindowsShellLaunchArgs', () => {
     expect(existsSync(join(userDataPath, 'shell-ready', 'bash', 'rcfile'))).toBe(true)
     expect(existsSync(join(userDataPath, 'shell-ready', 'zsh', '.zshenv'))).toBe(true)
 
-    // Why: typed agents need the host-managed status extension in WSL.
+    // Why: typed OMP keeps its existing shell integration, while typed Prime
+    // commands must reach the user's binary without Orca rewriting argv.
     const bashRcfile = readFileSync(join(userDataPath, 'shell-ready', 'bash', 'rcfile'), 'utf8')
     const zshLogin = readFileSync(join(userDataPath, 'shell-ready', 'zsh', '.zlogin'), 'utf8')
     for (const wrapperFile of [bashRcfile, zshLogin]) {
       expect(wrapperFile).toContain('command omp --extension "${ORCA_OMP_STATUS_EXTENSION}" "$@"')
       expect(wrapperFile).toContain('omp() { __orca_omp "$@"; }')
-      expect(wrapperFile).toContain(
-        'command prime-agent --extension "${ORCA_PRIME_AGENT_STATUS_EXTENSION}" "$@"'
-      )
-      expect(wrapperFile).toContain('prime-agent() { __orca_prime_agent "$@"; }')
+      expect(wrapperFile).not.toContain('prime-agent()')
+      expect(wrapperFile).not.toContain('__orca_prime_agent')
+      expect(wrapperFile).not.toContain('ORCA_PRIME_AGENT_STATUS_EXTENSION')
+      expect(wrapperFile).not.toContain('command prime-agent --extension')
     }
   })
 
diff --git a/src/main/pty/legacy-terminal-posix-tombstone.ts b/src/main/pty/legacy-terminal-posix-tombstone.ts
new file mode 100644
index 00000000000..4520b9e4708
--- /dev/null
+++ b/src/main/pty/legacy-terminal-posix-tombstone.ts
@@ -0,0 +1,69 @@
+const SHELL_DOLLAR = '$'
+
+const POSIX_TOMBSTONE = String.raw`#!/usr/bin/env bash
+set -u
+
+command_name="__ORCA_COMMAND__"
+wrapper_dir="$(cd -- "$(dirname -- "${SHELL_DOLLAR}{BASH_SOURCE[0]}")" && pwd)"
+legacy_wrapper_dir="${SHELL_DOLLAR}{ORCA_ATTRIBUTION_SHIM_DIR:-}"
+cleaned_path="${SHELL_DOLLAR}{PATH:-}"
+
+filter_path() {
+  local legacy_target="$legacy_wrapper_dir"
+  while [[ "$legacy_target" != "/" && "$legacy_target" == */ ]]; do
+    legacy_target="${SHELL_DOLLAR}{legacy_target%/}"
+  done
+  local remaining="$cleaned_path"
+  local filtered_path=""
+  local separator=""
+  path_entry_kept=0
+  local entry normalized candidate has_more
+  while true; do
+    if [[ "$remaining" == *:* ]]; then
+      entry="${SHELL_DOLLAR}{remaining%%:*}"
+      remaining="${SHELL_DOLLAR}{remaining#*:}"
+      has_more=1
+    else
+      entry="$remaining"
+      has_more=0
+    fi
+    normalized="$entry"
+    while [[ "$normalized" != "/" && "$normalized" == */ ]]; do
+      normalized="${SHELL_DOLLAR}{normalized%/}"
+    done
+    candidate="${SHELL_DOLLAR}{entry:-.}"
+    if [[ -n "$legacy_target" && "$normalized" == "$legacy_target" ]]; then
+      :
+    elif [[ "$candidate" -ef "$wrapper_dir" ]]; then
+      :
+    else
+      filtered_path+="$separator$entry"
+      separator=":"
+      path_entry_kept=1
+    fi
+    [[ "$has_more" == 1 ]] || break
+  done
+  cleaned_path="$filtered_path"
+}
+
+filter_path
+unset ORCA_ENABLE_GIT_ATTRIBUTION ORCA_GIT_COMMIT_TRAILER ORCA_GH_PR_FOOTER
+unset ORCA_GH_ISSUE_FOOTER ORCA_ATTRIBUTION_SHIM_DIR ORCA_REAL_GIT ORCA_REAL_GH ORCA_ATTRIBUTION_BYPASS
+
+real_command=""
+if [[ "$path_entry_kept" == 1 ]]; then
+  real_command="$(PATH="$cleaned_path" type -P "$command_name" || true)"
+fi
+if [[ -n "$real_command" && "$real_command" -ef "${SHELL_DOLLAR}{BASH_SOURCE[0]}" ]]; then
+  real_command=""
+fi
+if [[ -z "$real_command" ]]; then
+  printf 'Orca compatibility wrapper could not locate %s on PATH.\n' "$command_name" >&2
+  exit 127
+fi
+PATH="$cleaned_path" exec "$real_command" "$@"
+`
+
+export function renderLegacyTerminalPosixTombstone(command: 'git' | 'gh'): string {
+  return POSIX_TOMBSTONE.replaceAll('__ORCA_COMMAND__', command)
+}
diff --git a/src/main/pty/legacy-terminal-shim-dir.test.ts b/src/main/pty/legacy-terminal-shim-dir.test.ts
new file mode 100644
index 00000000000..32e59800266
--- /dev/null
+++ b/src/main/pty/legacy-terminal-shim-dir.test.ts
@@ -0,0 +1,343 @@
+import { spawn } from 'node:child_process'
+import {
+  chmodSync,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  __resetLegacyTerminalShimNeutralizationForTests,
+  neutralizeLegacyTerminalShimDir,
+  stripLegacyTerminalShimEnv
+} from './legacy-terminal-shim-dir'
+
+const itOnPosix = process.platform === 'win32' ? it.skip : it
+// Why: the failure case uses directory permissions, which Windows ignores and root bypasses.
+const itOnPosixNonRoot = process.platform === 'win32' || process.getuid?.() === 0 ? it.skip : it
+
+describe('legacy terminal shim neutralization', () => {
+  const tempRoots: string[] = []
+
+  const makeUserDataDir = (): string => {
+    const userData = mkdtempSync(join(tmpdir(), 'orca-legacy-shim-'))
+    tempRoots.push(userData)
+    return userData
+  }
+
+  beforeEach(() => {
+    __resetLegacyTerminalShimNeutralizationForTests()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+    for (const tempRoot of tempRoots.splice(0)) {
+      rmSync(tempRoot, { recursive: true, force: true })
+    }
+  })
+
+  it('atomically replaces the legacy command paths with executable tombstones', () => {
+    const userData = makeUserDataDir()
+    const legacyRoot = join(userData, 'orca-terminal-attribution')
+    const posixDir = join(legacyRoot, 'posix')
+    const win32Dir = join(legacyRoot, 'win32')
+    mkdirSync(posixDir, { recursive: true })
+    mkdirSync(win32Dir, { recursive: true })
+    writeFileSync(join(posixDir, 'git'), 'legacy attribution wrapper')
+    writeFileSync(join(win32Dir, 'gh.cmd'), 'legacy attribution wrapper')
+
+    neutralizeLegacyTerminalShimDir(userData)
+
+    for (const path of [
+      join(posixDir, 'git'),
+      join(posixDir, 'gh'),
+      join(win32Dir, 'git.cmd'),
+      join(win32Dir, 'gh.cmd')
+    ]) {
+      expect(existsSync(path)).toBe(true)
+      expect(readFileSync(path, 'utf8')).not.toContain('Co-authored-by: Orca')
+      if (process.platform !== 'win32') {
+        expect(statSync(path).mode & 0o111).not.toBe(0)
+      }
+    }
+    expect(readFileSync(join(legacyRoot, 'VERSION'), 'utf8')).toBe('7\n')
+  })
+
+  it('rejects stale Windows real-command paths inside the wrapper directory', () => {
+    const userData = makeUserDataDir()
+    const win32Dir = join(userData, 'orca-terminal-attribution', 'win32')
+
+    neutralizeLegacyTerminalShimDir(userData)
+
+    const cmd = readFileSync(join(win32Dir, 'git.cmd'), 'utf8')
+    expect(cmd).toContain(
+      'if defined orca_real for %%G in ("%orca_real%") do if /I "%%~dpG"=="%~dp0" set "orca_real="'
+    )
+    const powershell = readFileSync(join(win32Dir, 'git-wrapper.ps1'), 'utf8')
+    expect(powershell).toContain('[StringComparison]::OrdinalIgnoreCase')
+    expect(powershell).toContain('$realCommand = $null')
+    expect(powershell.indexOf('[StringComparison]::OrdinalIgnoreCase')).toBeLessThan(
+      powershell.indexOf('Test-Path -LiteralPath $realCommand')
+    )
+  })
+
+  it('removes every Windows PATH occurrence of both captured wrapper directories', () => {
+    const userData = makeUserDataDir()
+    const win32Dir = join(userData, 'orca-terminal-attribution', 'win32')
+
+    neutralizeLegacyTerminalShimDir(userData)
+
+    const cmd = readFileSync(join(win32Dir, 'git.cmd'), 'utf8')
+    const cmdCapture = 'set "orca_legacy_wrapper_dir=%ORCA_ATTRIBUTION_SHIM_DIR%"'
+    expect(cmd.indexOf(cmdCapture)).toBeLessThan(cmd.indexOf('set "ORCA_ATTRIBUTION_SHIM_DIR="'))
+    expect(cmd).toContain('for %%P in ("%PATH:;=" "%") do call :orca_append_path "%%~P"')
+    expect(cmd).toContain('if /I "%orca_path_entry_dir%"=="%orca_wrapper_dir%" exit /b')
+    expect(cmd).toContain(
+      'if defined orca_legacy_wrapper_dir for %%G in ("%orca_legacy_wrapper_dir%") do if /I "%orca_path_entry_dir%"=="%%~fG\\" exit /b'
+    )
+
+    const powershell = readFileSync(join(win32Dir, 'git-wrapper.ps1'), 'utf8')
+    expect(powershell.indexOf('$legacyWrapperDir = $env:ORCA_ATTRIBUTION_SHIM_DIR')).toBeLessThan(
+      powershell.indexOf('Remove-Item "Env:$_"')
+    )
+    expect(powershell).toContain('$wrapperDirs = @($wrapperDir, $legacyWrapperDir)')
+    expect(powershell).toContain("$env:PATH = (($env:PATH -split ';') | Where-Object {")
+    expect(powershell).toContain('[StringComparison]::OrdinalIgnoreCase')
+  })
+
+  it('does not throw when the legacy directory is absent', () => {
+    const userData = makeUserDataDir()
+
+    expect(() => neutralizeLegacyTerminalShimDir(userData)).not.toThrow()
+    expect(existsSync(join(userData, 'orca-terminal-attribution', 'posix', 'git'))).toBe(true)
+  })
+
+  itOnPosixNonRoot('retries a startup failure in-process and latches after success', async () => {
+    vi.useFakeTimers()
+    const userData = makeUserDataDir()
+    const posixDir = join(userData, 'orca-terminal-attribution', 'posix')
+    const gitWrapper = join(posixDir, 'git')
+    mkdirSync(posixDir, { recursive: true })
+    writeFileSync(gitWrapper, 'legacy attribution wrapper')
+    chmodSync(posixDir, 0o500)
+    try {
+      neutralizeLegacyTerminalShimDir(userData)
+      expect(readFileSync(gitWrapper, 'utf8')).toBe('legacy attribution wrapper')
+    } finally {
+      chmodSync(posixDir, 0o700)
+    }
+
+    try {
+      await vi.advanceTimersByTimeAsync(1_000)
+      expect(readFileSync(gitWrapper, 'utf8')).not.toContain('legacy attribution wrapper')
+
+      writeFileSync(gitWrapper, 'recreated after success')
+      neutralizeLegacyTerminalShimDir(userData)
+      expect(readFileSync(gitWrapper, 'utf8')).toBe('recreated after success')
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  itOnPosix('keeps a real Bash command hash working with trailing PATH separators', async () => {
+    const userData = makeUserDataDir()
+    const shimDir = join(userData, 'orca-terminal-attribution', 'posix')
+    const shimGit = join(shimDir, 'git')
+    const realBin = join(userData, 'real-bin')
+    const realGit = join(realBin, 'git')
+    mkdirSync(shimDir, { recursive: true })
+    mkdirSync(realBin, { recursive: true })
+    writeFileSync(shimGit, '#!/usr/bin/env bash\nexit 99\n', { mode: 0o755 })
+    writeFileSync(
+      realGit,
+      "#!/usr/bin/env bash\nprintf 'arg=<%s>\\n' \"$@\"\ncat\nprintf 'fixture stderr\\n' >&2\nexit 23\n",
+      { mode: 0o755 }
+    )
+    const child = spawn('bash', ['--noprofile', '--norc'], {
+      cwd: shimDir,
+      env: {
+        ...process.env,
+        PATH: `${shimDir}//::${realBin}:${process.env.PATH ?? ''}`,
+        ORCA_ENABLE_GIT_ATTRIBUTION: '1',
+        ORCA_GIT_COMMIT_TRAILER: 'Co-authored-by: Orca <help@stably.ai>',
+        ORCA_ATTRIBUTION_SHIM_DIR: ''
+      },
+      stdio: ['pipe', 'pipe', 'pipe']
+    })
+    let stdout = ''
+    let stderr = ''
+    child.stdout.setEncoding('utf8')
+    child.stderr.setEncoding('utf8')
+    child.stdout.on('data', (chunk: string) => {
+      stdout += chunk
+    })
+    child.stderr.on('data', (chunk: string) => {
+      stderr += chunk
+    })
+    const ready = waitForOutput(child.stdout, '__ORCA_HASH_READY__\n')
+    child.stdin.write(`hash -p ${quoteBash(shimGit)} git\nprintf '__ORCA_HASH_READY__\\n'\n`)
+
+    try {
+      await ready
+    } catch (error) {
+      child.kill('SIGKILL')
+      throw error
+    }
+    neutralizeLegacyTerminalShimDir(userData)
+    const closed = waitForChildClose(child, 2_000)
+    child.stdin.end("printf 'stdin payload\\n' | git commit -m 'subject with spaces'; exit $?\n")
+
+    try {
+      expect(await closed).toBe(23)
+    } finally {
+      child.kill('SIGKILL')
+    }
+    expect(stdout).toContain('arg=<commit>\narg=<-m>\narg=<subject with spaces>\nstdin payload\n')
+    expect(stdout).not.toContain('Co-authored-by: Orca')
+    expect(stderr).toBe('fixture stderr\n')
+  })
+
+  it('drops inherited shim env and its PATH entry without touching real entries', () => {
+    const env: Record<string, string> = {
+      PATH: `/home/u/.orca/orca-terminal-attribution/posix:/usr/local/bin:/usr/bin`,
+      ORCA_ENABLE_GIT_ATTRIBUTION: '1',
+      ORCA_GIT_COMMIT_TRAILER: 'Co-authored-by: Orca <help@stably.ai>',
+      ORCA_GH_PR_FOOTER: 'footer',
+      ORCA_GH_ISSUE_FOOTER: 'footer',
+      ORCA_ATTRIBUTION_SHIM_DIR: '/home/u/.orca/orca-terminal-attribution/posix',
+      ORCA_REAL_GIT: '/usr/bin/git',
+      ORCA_REAL_GH: '/usr/bin/gh',
+      HOME: '/home/u'
+    }
+
+    stripLegacyTerminalShimEnv(env, 'linux')
+
+    expect(env).toEqual({ PATH: '/usr/local/bin:/usr/bin', HOME: '/home/u' })
+  })
+
+  it('uses the captured POSIX shim directory literally when it contains a colon', () => {
+    const shimDir = '/tmp/orca:user/orca-terminal-attribution/posix'
+    const env: Record<string, string> = {
+      PATH: `/usr/local/bin:${shimDir}:/usr/bin`,
+      ORCA_ATTRIBUTION_SHIM_DIR: shimDir
+    }
+
+    stripLegacyTerminalShimEnv(env, 'linux')
+
+    expect(env).toEqual({ PATH: '/usr/local/bin:/usr/bin' })
+  })
+
+  it('treats legacy Windows environment keys case-insensitively', () => {
+    const shimDir = 'C:\\Users\\orca;user\\orca-terminal-attribution\\win32'
+    const env: Record<string, string> = {
+      Path: `${shimDir};C:\\Windows\\System32`,
+      orca_attribution_shim_dir: shimDir,
+      Orca_Enable_Git_Attribution: '1',
+      orca_real_git: 'C:\\Git\\git.exe'
+    }
+
+    stripLegacyTerminalShimEnv(env, 'win32')
+
+    expect(env).toEqual({ Path: 'C:\\Windows\\System32' })
+  })
+
+  it('strips legacy entries from every Windows PATH spelling', () => {
+    const env: Record<string, string> = {
+      PATH: 'C:\\Orca\\orca-terminal-attribution\\win32',
+      Path: 'C:\\Orca\\orca-terminal-attribution\\win32;C:\\Windows\\System32'
+    }
+
+    stripLegacyTerminalShimEnv(env, 'win32')
+
+    expect(env.PATH).toBeUndefined()
+    expect(env.Path).toBe('C:\\Windows\\System32')
+  })
+
+  it('matches a re-cased Windows shim path', () => {
+    const env: Record<string, string> = {
+      Path: 'C:\\Orca\\Orca-Terminal-Attribution\\Win32;C:\\Windows\\System32'
+    }
+
+    stripLegacyTerminalShimEnv(env, 'win32')
+
+    expect(env.Path).toBe('C:\\Windows\\System32')
+  })
+
+  it('preserves explicit empty PATH values', () => {
+    const windowsEnv: Record<string, string> = { PATH: '', Path: 'C:\\Windows' }
+    const posixEnv: Record<string, string> = { PATH: '' }
+
+    stripLegacyTerminalShimEnv(windowsEnv, 'win32')
+    stripLegacyTerminalShimEnv(posixEnv, 'linux')
+
+    expect(windowsEnv).toEqual({ PATH: '', Path: 'C:\\Windows' })
+    expect(posixEnv).toEqual({ PATH: '' })
+  })
+
+  it('keeps neighbouring directories that merely share the name prefix', () => {
+    const env: Record<string, string> = {
+      PATH: '/opt/orca-terminal-attribution:/opt/orca-terminal-attribution/custom-tools:/home/u/orca-terminal-attribution-notes/bin:/usr/bin'
+    }
+
+    stripLegacyTerminalShimEnv(env, 'linux')
+
+    expect(env.PATH).toBe(
+      '/opt/orca-terminal-attribution:/opt/orca-terminal-attribution/custom-tools:/home/u/orca-terminal-attribution-notes/bin:/usr/bin'
+    )
+  })
+
+  it('leaves an unrelated PATH untouched', () => {
+    const env: Record<string, string> = { PATH: '/usr/local/bin:/usr/bin' }
+    stripLegacyTerminalShimEnv(env, 'linux')
+    expect(env.PATH).toBe('/usr/local/bin:/usr/bin')
+  })
+})
+
+function quoteBash(value: string): string {
+  return `'${value.replaceAll("'", `'\\''`)}'`
+}
+
+function waitForOutput(stream: NodeJS.ReadableStream, marker: string): Promise<void> {
+  return new Promise((resolve, reject) => {
+    let output = ''
+    const onData = (chunk: string | Buffer): void => {
+      output += chunk.toString()
+      if (output.includes(marker)) {
+        cleanup()
+        resolve()
+      }
+    }
+    const onEnd = (): void => {
+      cleanup()
+      reject(new Error(`Bash exited before emitting ${marker}`))
+    }
+    const cleanup = (): void => {
+      stream.off('data', onData)
+      stream.off('end', onEnd)
+    }
+    stream.on('data', onData)
+    stream.on('end', onEnd)
+  })
+}
+
+function waitForChildClose(
+  child: ReturnType<typeof spawn>,
+  timeoutMs: number
+): Promise<number | null> {
+  return new Promise((resolve, reject) => {
+    const timeout = setTimeout(() => {
+      child.kill('SIGKILL')
+      reject(new Error(`Bash did not exit within ${timeoutMs}ms`))
+    }, timeoutMs)
+    child.once('close', (exitCode) => {
+      clearTimeout(timeout)
+      resolve(exitCode)
+    })
+  })
+}
diff --git a/src/main/pty/legacy-terminal-shim-dir.ts b/src/main/pty/legacy-terminal-shim-dir.ts
new file mode 100644
index 00000000000..0d64ebaed05
--- /dev/null
+++ b/src/main/pty/legacy-terminal-shim-dir.ts
@@ -0,0 +1,269 @@
+import { chmodSync, mkdirSync, renameSync, rmSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import {
+  LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY,
+  LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY
+} from '../../shared/legacy-terminal-attribution-env'
+import { renderLegacyTerminalPosixTombstone } from './legacy-terminal-posix-tombstone'
+
+const LEGACY_SHIM_ROOT_DIR = 'orca-terminal-attribution'
+const LEGACY_SHIM_VERSION = '7'
+const NEUTRALIZATION_RETRY_DELAYS_MS = [1_000, 5_000, 15_000, 30_000]
+export const LEGACY_TERMINAL_SHIM_ENV_KEYS = [
+  'ORCA_ENABLE_GIT_ATTRIBUTION',
+  'ORCA_GIT_COMMIT_TRAILER',
+  'ORCA_GH_PR_FOOTER',
+  'ORCA_GH_ISSUE_FOOTER',
+  'ORCA_ATTRIBUTION_SHIM_DIR',
+  'ORCA_REAL_GIT',
+  'ORCA_REAL_GH',
+  LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY
+] as const
+export const LEGACY_TERMINAL_SHIM_REMOTE_ENV_KEYS = [
+  LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY
+] as const
+
+const WIN32_PASSTHROUGH_WRAPPER = String.raw`@echo off
+setlocal
+set "orca_real=%ORCA_REAL___ORCA_UPPER_COMMAND__%"
+set "orca_wrapper_dir=%~dp0"
+set "orca_legacy_wrapper_dir=%ORCA_ATTRIBUTION_SHIM_DIR%"
+set "orca_clean_path="
+for %%P in ("%PATH:;=" "%") do call :orca_append_path "%%~P"
+set "PATH=%orca_clean_path%"
+set "ORCA_ENABLE_GIT_ATTRIBUTION="
+set "ORCA_GIT_COMMIT_TRAILER="
+set "ORCA_GH_PR_FOOTER="
+set "ORCA_GH_ISSUE_FOOTER="
+set "ORCA_ATTRIBUTION_SHIM_DIR="
+set "ORCA_ATTRIBUTION_BYPASS="
+set "ORCA_REAL_GIT="
+set "ORCA_REAL_GH="
+if defined orca_real for %%G in ("%orca_real%") do if /I "%%~dpG"=="%~dp0" set "orca_real="
+if defined orca_real if exist "%orca_real%" goto run
+for /f "delims=" %%G in ('where.exe __ORCA_COMMAND__.exe 2^>nul') do if not defined orca_real set "orca_real=%%G"
+if not defined orca_real (
+  echo Orca compatibility wrapper could not locate __ORCA_COMMAND__ on PATH. 1>&2
+  exit /b 127
+)
+:run
+"%orca_real%" %*
+exit /b %ERRORLEVEL%
+
+:orca_append_path
+for %%G in ("%~1") do set "orca_path_entry_dir=%%~fG\"
+if /I "%orca_path_entry_dir%"=="%orca_wrapper_dir%" exit /b
+if defined orca_legacy_wrapper_dir for %%G in ("%orca_legacy_wrapper_dir%") do if /I "%orca_path_entry_dir%"=="%%~fG\" exit /b
+if defined orca_clean_path (set "orca_clean_path=%orca_clean_path%;%~1") else set "orca_clean_path=%~1"
+exit /b
+`
+
+const POWERSHELL_PASSTHROUGH_WRAPPER = String.raw`$ErrorActionPreference = 'Stop'
+$commandName = '__ORCA_COMMAND__'
+$realCommand = [Environment]::GetEnvironmentVariable('ORCA_REAL___ORCA_UPPER_COMMAND__')
+$wrapperDir = Split-Path -Parent $MyInvocation.MyCommand.Path
+$legacyWrapperDir = $env:ORCA_ATTRIBUTION_SHIM_DIR
+$wrapperDirs = @($wrapperDir, $legacyWrapperDir) | Where-Object { $_ } | ForEach-Object { $_.TrimEnd('\') }
+$env:PATH = (($env:PATH -split ';') | Where-Object {
+  $pathEntry = $_
+  $pathEntry -and -not ($wrapperDirs | Where-Object {
+    [string]::Equals($_, $pathEntry.TrimEnd('\'), [StringComparison]::OrdinalIgnoreCase)
+  })
+}) -join ';'
+'ORCA_ENABLE_GIT_ATTRIBUTION', 'ORCA_GIT_COMMIT_TRAILER', 'ORCA_GH_PR_FOOTER', 'ORCA_GH_ISSUE_FOOTER', 'ORCA_ATTRIBUTION_SHIM_DIR', 'ORCA_REAL_GIT', 'ORCA_REAL_GH', 'ORCA_ATTRIBUTION_BYPASS' | ForEach-Object { Remove-Item "Env:$_" -ErrorAction SilentlyContinue }
+if ($realCommand) {
+  try {
+    $capturedDir = Split-Path -Parent ([IO.Path]::GetFullPath($realCommand))
+    if ([string]::Equals($capturedDir.TrimEnd('\'), $wrapperDir.TrimEnd('\'), [StringComparison]::OrdinalIgnoreCase)) {
+      $realCommand = $null
+    }
+  } catch {
+    $realCommand = $null
+  }
+}
+if (-not $realCommand -or -not (Test-Path -LiteralPath $realCommand)) {
+  $resolved = Get-Command "$commandName.exe" -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1
+  $realCommand = if ($resolved) { $resolved.Source } else { $null }
+}
+if (-not $realCommand) {
+  [Console]::Error.WriteLine("Orca compatibility wrapper could not locate $commandName on PATH.")
+  exit 127
+}
+& $realCommand @args
+exit $LASTEXITCODE
+`
+
+let neutralized = false
+let neutralizationRetryTimer: ReturnType<typeof setTimeout> | null = null
+let neutralizationRetryAttempt = 0
+
+export function neutralizeLegacyTerminalShimDir(userDataPath: string): void {
+  if (neutralized) {
+    return
+  }
+  try {
+    const rootDir = join(userDataPath, LEGACY_SHIM_ROOT_DIR)
+    writeNeutralWrappers(rootDir)
+    writeFileAtomically(join(rootDir, 'VERSION'), `${LEGACY_SHIM_VERSION}\n`, 0o644)
+    neutralized = true
+    clearNeutralizationRetry()
+  } catch {
+    // Why: Windows can keep a running .cmd open briefly after startup.
+    scheduleNeutralizationRetry(userDataPath)
+  }
+}
+
+function scheduleNeutralizationRetry(userDataPath: string): void {
+  if (
+    neutralizationRetryTimer ||
+    neutralizationRetryAttempt >= NEUTRALIZATION_RETRY_DELAYS_MS.length
+  ) {
+    return
+  }
+  const delayMs = NEUTRALIZATION_RETRY_DELAYS_MS[neutralizationRetryAttempt]
+  neutralizationRetryAttempt += 1
+  neutralizationRetryTimer = setTimeout(() => {
+    neutralizationRetryTimer = null
+    neutralizeLegacyTerminalShimDir(userDataPath)
+  }, delayMs)
+  neutralizationRetryTimer.unref?.()
+}
+
+function clearNeutralizationRetry(): void {
+  if (neutralizationRetryTimer) {
+    clearTimeout(neutralizationRetryTimer)
+    neutralizationRetryTimer = null
+  }
+  neutralizationRetryAttempt = 0
+}
+
+function writeNeutralWrappers(rootDir: string): void {
+  const posixDir = join(rootDir, 'posix')
+  const win32Dir = join(rootDir, 'win32')
+  mkdirSync(posixDir, { recursive: true })
+  mkdirSync(win32Dir, { recursive: true })
+  for (const command of ['git', 'gh'] as const) {
+    const upperCommand = command.toUpperCase()
+    writeFileAtomically(join(posixDir, command), renderLegacyTerminalPosixTombstone(command), 0o755)
+    writeFileAtomically(
+      join(win32Dir, `${command}.cmd`),
+      renderWindowsWrapper(WIN32_PASSTHROUGH_WRAPPER, command, upperCommand),
+      0o755
+    )
+    writeFileAtomically(
+      join(win32Dir, `${command}-wrapper.ps1`),
+      renderWindowsWrapper(POWERSHELL_PASSTHROUGH_WRAPPER, command, upperCommand),
+      0o755
+    )
+  }
+}
+
+function renderWindowsWrapper(template: string, command: string, upperCommand: string): string {
+  return template
+    .replaceAll('__ORCA_UPPER_COMMAND__', upperCommand)
+    .replaceAll('__ORCA_COMMAND__', command)
+}
+
+function writeFileAtomically(filePath: string, contents: string, mode: number): void {
+  const temporaryPath = `${filePath}.orca-neutralizing-${process.pid}`
+  try {
+    rmSync(temporaryPath, { force: true, recursive: true })
+    writeFileSync(temporaryPath, contents, { encoding: 'utf8', flag: 'wx', mode })
+    chmodSync(temporaryPath, mode)
+    renameSync(temporaryPath, filePath)
+  } finally {
+    rmSync(temporaryPath, { force: true, recursive: true })
+  }
+}
+
+export function isLegacyTerminalShimPathEntry(entry: string): boolean {
+  const normalized = entry.replaceAll('\\', '/').replace(/\/+$/, '').toLowerCase()
+  return (
+    normalized.endsWith(`/${LEGACY_SHIM_ROOT_DIR}/posix`) ||
+    normalized.endsWith(`/${LEGACY_SHIM_ROOT_DIR}/win32`)
+  )
+}
+
+export function stripLegacyTerminalShimEnv(
+  env: Record<string, string>,
+  platform: NodeJS.Platform = process.platform
+): void {
+  const windows = platform === 'win32'
+  const legacyKeySet = new Set(
+    LEGACY_TERMINAL_SHIM_ENV_KEYS.map((key) => (windows ? key.toLowerCase() : key))
+  )
+  const shimDirKey = 'ORCA_ATTRIBUTION_SHIM_DIR'.toLowerCase()
+  const explicitShimDirs = Object.entries(env)
+    .filter(([key]) =>
+      windows ? key.toLowerCase() === shimDirKey : key === 'ORCA_ATTRIBUTION_SHIM_DIR'
+    )
+    .map(([, value]) => value)
+    .filter(Boolean)
+  for (const key of Object.keys(env)) {
+    if (windows ? legacyKeySet.has(key.toLowerCase()) : legacyKeySet.has(key)) {
+      delete env[key]
+    }
+  }
+  const delimiter = windows ? ';' : ':'
+  const pathKeys = windows
+    ? Object.keys(env).filter((key) => key.toLowerCase() === 'path')
+    : ['PATH']
+  for (const pathKey of pathKeys) {
+    const current = env[pathKey]
+    if (!current) {
+      continue
+    }
+    const withoutExplicitDirs = explicitShimDirs.reduce(
+      (pathValue, shimDir) => removeLiteralPathEntry(pathValue, shimDir, delimiter, windows),
+      current
+    )
+    const cleaned = withoutExplicitDirs
+      .split(delimiter)
+      .filter((entry) => entry && !isLegacyTerminalShimPathEntry(entry))
+      .join(delimiter)
+    if (cleaned) {
+      env[pathKey] = cleaned
+    } else {
+      delete env[pathKey]
+    }
+  }
+}
+
+function removeLiteralPathEntry(
+  pathValue: string,
+  entry: string,
+  delimiter: string,
+  caseInsensitive: boolean
+): string {
+  let result = pathValue
+  const needle = caseInsensitive ? entry.toLowerCase() : entry
+  let searchStart = 0
+  for (;;) {
+    const comparable = caseInsensitive ? result.toLowerCase() : result
+    const index = comparable.indexOf(needle, searchStart)
+    if (index === -1) {
+      return result
+    }
+    const end = index + entry.length
+    const startsAtBoundary = index === 0 || result[index - 1] === delimiter
+    const endsAtBoundary = end === result.length || result[end] === delimiter
+    if (!startsAtBoundary || !endsAtBoundary) {
+      searchStart = index + 1
+      continue
+    }
+    if (result[end] === delimiter) {
+      result = result.slice(0, index) + result.slice(end + 1)
+    } else if (index > 0) {
+      result = result.slice(0, index - 1) + result.slice(end)
+    } else {
+      result = ''
+    }
+    searchStart = Math.max(0, index - 1)
+  }
+}
+
+/** Test-only: the module-level once-guard would otherwise leak across cases. */
+export function __resetLegacyTerminalShimNeutralizationForTests(): void {
+  neutralized = false
+  clearNeutralizationRetry()
+}
diff --git a/src/main/pty/posix-pty-foreground-group.ts b/src/main/pty/posix-pty-foreground-group.ts
index 124978c269d..8b3e375dbff 100644
--- a/src/main/pty/posix-pty-foreground-group.ts
+++ b/src/main/pty/posix-pty-foreground-group.ts
@@ -103,7 +103,7 @@ export function getPosixPtyForegroundGroup(
 export function signalPosixPtyForegroundGroup(
   rootPid: number,
   ptsName: string | undefined,
-  signal: NodeJS.Signals | string,
+  signal: NodeJS.Signals | (string & {}),
   fallback: () => void,
   deps: PosixPtyForegroundGroupDeps = {}
 ): void {
diff --git a/src/main/pty/prime-agent-shell-wrapper.test.ts b/src/main/pty/prime-agent-shell-wrapper.test.ts
deleted file mode 100644
index 1ad1fe774cb..00000000000
--- a/src/main/pty/prime-agent-shell-wrapper.test.ts
+++ /dev/null
@@ -1,244 +0,0 @@
-import { spawnSync } from 'node:child_process'
-import { chmodSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { dirname, join } from 'node:path'
-import { afterEach, describe, expect, it } from 'vitest'
-import { getPosixPrimeAgentShellWrapper } from './prime-agent-shell-wrapper'
-
-const describePosix = process.platform === 'win32' ? describe.skip : describe
-const hasBash = process.platform !== 'win32' && spawnSync('bash', ['--version']).status === 0
-const itWithBash = hasBash ? it : it.skip
-const tempDirs: string[] = []
-
-function makeFixture(): {
-  root: string
-  extensionPath: string
-  capturePath: string
-  endpointPath: string
-  primeHome: string
-  rcfile: string
-} {
-  const root = mkdtempSync(join(tmpdir(), 'orca-prime-wrapper-'))
-  tempDirs.push(root)
-  const binDir = join(root, 'bin')
-  const primeHome = join(root, 'guest-prime-home')
-  const extensionPath = join(root, 'orca-agent-status.ts')
-  const capturePath = join(root, 'capture')
-  const endpointPath = join(
-    root,
-    '.orca-wsl',
-    'agent-hooks',
-    'instance-testinstance',
-    'endpoint.env'
-  )
-  const rcfile = join(root, 'rcfile')
-  mkdirSync(binDir)
-  mkdirSync(primeHome)
-  mkdirSync(dirname(endpointPath), { recursive: true })
-  writeFileSync(extensionPath, 'export default {}')
-  writeFileSync(endpointPath, 'ORCA_AGENT_HOOK_PORT=4567\nORCA_AGENT_HOOK_TOKEN=current-token\n')
-  writeFileSync(rcfile, getPosixPrimeAgentShellWrapper())
-  writeFileSync(
-    join(binDir, 'prime-agent'),
-    `#!/bin/sh
-{
-  printf 'HOME=%s\n' "$PRIME_AGENT_CODING_AGENT_DIR"
-  printf 'ENDPOINT=%s\n' "$ORCA_AGENT_HOOK_ENDPOINT"
-  i=0
-  for arg in "$@"; do
-    i=$((i + 1))
-    printf 'ARG%s=%s\n' "$i" "$arg"
-  done
-} > "$ORCA_CAPTURE_FILE"
-if [ "\${1:-}" = "config" ]; then
-  printf 'preserved\n' > "$PRIME_AGENT_CODING_AGENT_DIR/config.yml"
-fi
-`,
-    { mode: 0o755 }
-  )
-  chmodSync(join(binDir, 'prime-agent'), 0o755)
-  return { root, extensionPath, capturePath, endpointPath, primeHome, rcfile }
-}
-
-function runPrime(
-  fixture: ReturnType<typeof makeFixture>,
-  command: string,
-  extensionPath = fixture.extensionPath
-): string {
-  const result = spawnSync('bash', ['--noprofile', '--rcfile', fixture.rcfile, '-ic', command], {
-    cwd: fixture.root,
-    env: {
-      ...process.env,
-      HOME: fixture.root,
-      PATH: `${join(fixture.root, 'bin')}:${process.env.PATH ?? ''}`,
-      PRIME_AGENT_CODING_AGENT_DIR: fixture.primeHome,
-      ORCA_PRIME_AGENT_STATUS_EXTENSION: extensionPath,
-      ORCA_WSL_HOOK_INSTANCE: 'testinstance',
-      ORCA_AGENT_HOOK_ENDPOINT: '/mnt/c/current/endpoint.cmd',
-      ORCA_AGENT_HOOK_PORT: '4567',
-      ORCA_AGENT_HOOK_TOKEN: 'current-token',
-      ORCA_CAPTURE_FILE: fixture.capturePath
-    },
-    encoding: 'utf8'
-  })
-  expect(result.status, result.stderr).toBe(0)
-  return readFileSync(fixture.capturePath, 'utf8')
-}
-
-describePosix('Prime Agent shell wrapper', () => {
-  afterEach(() => {
-    for (const dir of tempDirs.splice(0)) {
-      rmSync(dir, { recursive: true, force: true })
-    }
-  })
-
-  itWithBash('injects the managed extension into an interactive launch', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent ask')
-
-    expect(capture).toContain(`HOME=${fixture.primeHome}`)
-    expect(capture).toContain(`ENDPOINT=${fixture.endpointPath}`)
-    expect(capture).toContain('ARG1=--extension')
-    expect(capture).toContain(`ARG2=${fixture.extensionPath}`)
-    expect(capture).toContain('ARG3=ask')
-  })
-
-  itWithBash('preserves config subcommands and the guest Prime home', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent config')
-
-    expect(capture).toContain(`HOME=${fixture.primeHome}`)
-    expect(capture).toContain('ARG1=config')
-    expect(capture).not.toContain('ARG1=--extension')
-    expect(readFileSync(join(fixture.primeHome, 'config.yml'), 'utf8')).toBe('preserved\n')
-  })
-
-  itWithBash.each([
-    'agents',
-    'doctor',
-    'help',
-    'list',
-    'model',
-    'package',
-    'rename',
-    'schedule',
-    'send',
-    'session',
-    'shutdown',
-    'status',
-    'stop',
-    'update'
-  ])('preserves the %s subcommand argv', (subcommand) => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, `prime-agent ${subcommand}`)
-
-    expect(capture).toContain(`ARG1=${subcommand}`)
-    expect(capture).not.toContain('ARG1=--extension')
-  })
-
-  itWithBash.each(['stop', 'rename'])(
-    'preserves --daemon-socket before the %s management command',
-    (subcommand) => {
-      const fixture = makeFixture()
-      const capture = runPrime(
-        fixture,
-        `prime-agent --daemon-socket /tmp/prime.sock ${subcommand} agent-123`
-      )
-
-      expect(capture).toContain('ARG1=--daemon-socket')
-      expect(capture).toContain('ARG2=/tmp/prime.sock')
-      expect(capture).toContain(`ARG3=${subcommand}`)
-      expect(capture).not.toContain(fixture.extensionPath)
-    }
-  )
-
-  itWithBash('injects the extension after the attach agent operand', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent attach agent-123 --follow')
-
-    expect(capture).toContain('ARG1=attach')
-    expect(capture).toContain('ARG2=agent-123')
-    expect(capture).toContain('ARG3=--extension')
-    expect(capture).toContain(`ARG4=${fixture.extensionPath}`)
-    expect(capture).toContain('ARG5=--follow')
-  })
-
-  itWithBash('preserves attach help without inventing an agent operand', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent attach --help')
-
-    expect(capture).toContain('ARG1=attach')
-    expect(capture).toContain('ARG2=--help')
-    expect(capture).not.toContain(fixture.extensionPath)
-  })
-
-  itWithBash('does not override an explicit user extension', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent --extension /tmp/user-extension.ts ask')
-
-    expect(capture).toContain('ARG1=--extension')
-    expect(capture).toContain('ARG2=/tmp/user-extension.ts')
-    expect(capture).not.toContain(fixture.extensionPath)
-  })
-
-  itWithBash('does not add a second extension to attach', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(
-      fixture,
-      'prime-agent attach agent-123 --extension /tmp/user-extension.ts'
-    )
-
-    expect(capture).toContain('ARG1=attach')
-    expect(capture).toContain('ARG2=agent-123')
-    expect(capture).toContain('ARG3=--extension')
-    expect(capture).toContain('ARG4=/tmp/user-extension.ts')
-    expect(capture).not.toContain(fixture.extensionPath)
-  })
-
-  itWithBash('degrades to the original argv when the managed extension is unavailable', () => {
-    const fixture = makeFixture()
-    const capture = runPrime(fixture, 'prime-agent ask', join(fixture.root, 'missing.ts'))
-
-    expect(capture).toContain('ARG1=ask')
-    expect(capture).not.toContain('ARG1=--extension')
-  })
-
-  itWithBash('keeps the stable guest endpoint path while its relay refreshes stale data', () => {
-    const fixture = makeFixture()
-    writeFileSync(fixture.endpointPath, 'ORCA_AGENT_HOOK_PORT=4567\nORCA_AGENT_HOOK_TOKEN=stale\n')
-
-    const capture = runPrime(fixture, 'prime-agent ask')
-
-    expect(capture).toContain(`ENDPOINT=${fixture.endpointPath}`)
-    expect(capture).toContain('ARG1=--extension')
-  })
-
-  itWithBash('uses the guest endpoint path when the relay binds a fallback port', () => {
-    const fixture = makeFixture()
-    writeFileSync(
-      fixture.endpointPath,
-      'ORCA_AGENT_HOOK_PORT=9876\nORCA_AGENT_HOOK_TOKEN=current-token\n'
-    )
-
-    const capture = runPrime(fixture, 'prime-agent ask')
-
-    expect(capture).toContain(`ENDPOINT=${fixture.endpointPath}`)
-    expect(capture).toContain('ARG1=--extension')
-  })
-
-  itWithBash('does not define wrapper helpers when the bridge env is absent', () => {
-    const fixture = makeFixture()
-    const result = spawnSync(
-      'bash',
-      ['--noprofile', '--rcfile', fixture.rcfile, '-ic', 'type -t __orca_prime_agent'],
-      {
-        cwd: fixture.root,
-        env: { ...process.env, ORCA_PRIME_AGENT_STATUS_EXTENSION: '' },
-        encoding: 'utf8'
-      }
-    )
-
-    expect(result.status).not.toBe(0)
-    expect(result.stdout.trim()).toBe('')
-  })
-})
diff --git a/src/main/pty/prime-agent-shell-wrapper.ts b/src/main/pty/prime-agent-shell-wrapper.ts
deleted file mode 100644
index 97e723c26f1..00000000000
--- a/src/main/pty/prime-agent-shell-wrapper.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import { wslHookRelayEndpointFilePath } from '../../shared/wsl-hook-relay-contract'
-
-const PRIME_AGENT_SUBCOMMANDS = [
-  'agents',
-  'config',
-  'doctor',
-  'help',
-  'list',
-  'model',
-  'package',
-  'rename',
-  'schedule',
-  'send',
-  'session',
-  'shutdown',
-  'status',
-  'stop',
-  'update'
-] as const
-
-export function getPosixPrimeAgentShellWrapper(): string {
-  const subcommands = PRIME_AGENT_SUBCOMMANDS.join('|')
-  const guestEndpointPath = wslHookRelayEndpointFilePath('${HOME%/}', '${ORCA_WSL_HOOK_INSTANCE}')
-  return `# Why: WSL cannot install into Prime's guest-owned config root from the
-# Windows host, so pass Orca's status extension only to interactive launches.
-if [[ -n "\${ORCA_PRIME_AGENT_STATUS_EXTENSION:-}" ]]; then
-  __orca_prime_agent_should_skip_extension() {
-    if [[ "\${1:-}" == "--daemon-socket" && ( "\${3:-}" == "stop" || "\${3:-}" == "rename" ) ]]; then
-      return 0
-    fi
-    if [[ "\${1:-}" == --daemon-socket=* && ( "\${2:-}" == "stop" || "\${2:-}" == "rename" ) ]]; then
-      return 0
-    fi
-    case "\${1:-}" in
-      help|--help|-h|--version|-v|--extension|--extension=*) return 0 ;;
-      ${subcommands}) return 0 ;;
-    esac
-    return 1
-  }
-  __orca_prime_agent_has_explicit_extension() {
-    local __orca_arg
-    for __orca_arg in "$@"; do
-      case "$__orca_arg" in
-        --extension|--extension=*) return 0 ;;
-      esac
-    done
-    return 1
-  }
-  __orca_prime_agent() {
-    if [[ "\${1:-}" == "attach" && ( -z "\${2:-}" || "\${2:-}" == -* ) ]]; then
-      command prime-agent "$@"
-      return
-    fi
-    if ! __orca_prime_agent_should_skip_extension "$@" && ! __orca_prime_agent_has_explicit_extension "$@" && [[ -f "\${ORCA_PRIME_AGENT_STATUS_EXTENSION}" ]]; then
-      local __orca_guest_endpoint="${guestEndpointPath}"
-      if [[ -n "\${HOME:-}" && -n "\${ORCA_WSL_HOOK_INSTANCE:-}" ]]; then
-        local ORCA_AGENT_HOOK_ENDPOINT="$__orca_guest_endpoint"
-        export ORCA_AGENT_HOOK_ENDPOINT
-      fi
-      if [[ "\${1:-}" == "attach" && -n "\${2:-}" && "\${2:-}" != -* ]]; then
-        local __orca_attach_agent="$2"
-        shift 2
-        command prime-agent attach "$__orca_attach_agent" --extension "\${ORCA_PRIME_AGENT_STATUS_EXTENSION}" "$@"
-      else
-        command prime-agent --extension "\${ORCA_PRIME_AGENT_STATUS_EXTENSION}" "$@"
-      fi
-    else
-      command prime-agent "$@"
-    fi
-  }
-  prime-agent() { __orca_prime_agent "$@"; }
-fi
-`
-}
diff --git a/src/main/pty/shell-startup-env.test.ts b/src/main/pty/shell-startup-env.test.ts
index 73aabc3b753..eaf8cffeba4 100644
--- a/src/main/pty/shell-startup-env.test.ts
+++ b/src/main/pty/shell-startup-env.test.ts
@@ -1,28 +1,41 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
-const { existsSyncMock, readFileSyncMock } = vi.hoisted(() => ({
+const { existsSyncMock, readFileSyncMock, readdirSyncMock } = vi.hoisted(() => ({
   existsSyncMock: vi.fn(),
-  readFileSyncMock: vi.fn()
+  readFileSyncMock: vi.fn(),
+  readdirSyncMock: vi.fn()
 }))
 
 vi.mock('fs', () => ({
   existsSync: existsSyncMock,
-  readFileSync: readFileSyncMock
+  readFileSync: readFileSyncMock,
+  readdirSync: readdirSyncMock
 }))
 
 import {
   __resetShellStartupEnvCache,
   isShellStartupEnvProbeSupported,
+  readSessionShellStartupEnvVar,
   readShellStartupEnvVar
 } from './shell-startup-env'
 
 describe('readShellStartupEnvVar', () => {
   const originalPlatform = process.platform
   const originalShell = process.env.SHELL
+  // Why pinned: the fish branch defaults configHome to process.env.XDG_CONFIG_HOME, which CI
+  // runners set and dev machines usually do not — leaving it ambient makes these mocked paths
+  // resolve differently per host.
+  const originalXdgConfigHome = process.env.XDG_CONFIG_HOME
 
   beforeEach(() => {
+    delete process.env.XDG_CONFIG_HOME
     existsSyncMock.mockReset()
     readFileSyncMock.mockReset()
+    readdirSyncMock.mockReset()
+    // Why: only the fish branch lists a directory; every other case must see ENOENT.
+    readdirSyncMock.mockImplementation(() => {
+      throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+    })
     Object.defineProperty(process, 'platform', { configurable: true, value: 'darwin' })
     process.env.SHELL = '/bin/zsh'
     __resetShellStartupEnvCache()
@@ -35,6 +48,11 @@ describe('readShellStartupEnvVar', () => {
     } else {
       process.env.SHELL = originalShell
     }
+    if (originalXdgConfigHome === undefined) {
+      delete process.env.XDG_CONFIG_HOME
+    } else {
+      process.env.XDG_CONFIG_HOME = originalXdgConfigHome
+    }
   })
 
   function mockStartupFiles(files: Record<string, string>) {
@@ -326,4 +344,218 @@ describe('readShellStartupEnvVar', () => {
     mockStartupFiles({ '.zshrc': '# export OPENCODE_CONFIG_DIR=/from-comment\n' })
     expect(readShellStartupEnvVar('OPENCODE_CONFIG_DIR', '/home/alice')).toBeUndefined()
   })
+
+  describe('fish', () => {
+    const FISH = '/opt/homebrew/bin/fish'
+
+    function mockFishFiles(files: Record<string, string>, snippets: string[] = []) {
+      readdirSyncMock.mockImplementation((dir: string) => {
+        if (dir === '/home/alice/.config/fish/conf.d' || dir === '/cfg/fish/conf.d') {
+          return snippets
+        }
+        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' })
+      })
+      mockStartupFiles(files)
+    }
+
+    it('reads an exported set from config.fish', () => {
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME /home/alice/.codex\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/home/alice/.codex')
+    })
+
+    it('lets config.fish win over a conf.d snippet, matching fish source order', () => {
+      mockFishFiles(
+        {
+          '/home/alice/.config/fish/conf.d/10-agents.fish': 'set -gx CODEX_HOME /from/confd\n',
+          '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME /from/config\n'
+        },
+        ['10-agents.fish']
+      )
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/from/config')
+    })
+
+    it('sources conf.d snippets in filename order', () => {
+      mockFishFiles(
+        {
+          '/home/alice/.config/fish/conf.d/aaa.fish': 'set -gx CODEX_HOME /from/aaa\n',
+          '/home/alice/.config/fish/conf.d/zzz.fish': 'set -gx CODEX_HOME /from/zzz\n'
+        },
+        ['zzz.fish', 'aaa.fish', 'notes.txt']
+      )
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/from/zzz')
+    })
+
+    it('honors XDG_CONFIG_HOME', () => {
+      mockFishFiles({ '/cfg/fish/config.fish': 'set -gx CODEX_HOME /from/xdg\n' })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH, '/cfg')).toBe('/from/xdg')
+    })
+
+    // Why also via the env: the argument defaults to process.env.XDG_CONFIG_HOME, so without
+    // this every other fish case here silently depends on the host not exporting it.
+    it('defaults configHome to XDG_CONFIG_HOME from the environment', () => {
+      process.env.XDG_CONFIG_HOME = '/cfg'
+      __resetShellStartupEnvCache()
+      mockFishFiles({ '/cfg/fish/config.fish': 'set -gx CODEX_HOME /from/env-xdg\n' })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/from/env-xdg')
+    })
+
+    it('ignores sets that are not exported', () => {
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish':
+          'set -g CODEX_HOME /global\nset -l CODEX_HOME /local\nset CODEX_HOME /plain\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBeUndefined()
+    })
+
+    it('accepts every fish export spelling', () => {
+      for (const line of [
+        'set -x CODEX_HOME /a',
+        'set -xg CODEX_HOME /a',
+        'set -gx CODEX_HOME /a',
+        'set -Ux CODEX_HOME /a',
+        'set --export --global CODEX_HOME /a'
+      ]) {
+        __resetShellStartupEnvCache()
+        mockFishFiles({ '/home/alice/.config/fish/config.fish': `${line}\n` })
+        expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/a')
+      }
+    })
+
+    it('expands $HOME in double quotes and keeps single quotes literal', () => {
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME "$HOME/.codex" # note\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('/home/alice/.codex')
+
+      __resetShellStartupEnvCache()
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish': "set -gx CODEX_HOME '$HOME/.codex'\n"
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBe('$HOME/.codex')
+    })
+
+    it('does not read zsh or bash startup files for a fish user', () => {
+      mockFishFiles({
+        '/home/alice/.zshrc': 'export CODEX_HOME=/from/zsh\n',
+        '/home/alice/.bash_profile': 'export CODEX_HOME=/from/bash\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBeUndefined()
+    })
+
+    it('ignores a commented assignment', () => {
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish': '# set -gx CODEX_HOME /from-comment\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBeUndefined()
+    })
+
+    it('does not match a different variable with the same prefix', () => {
+      mockFishFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME_BACKUP /backup\n'
+      })
+      expect(readShellStartupEnvVar('CODEX_HOME', '/home/alice', FISH)).toBeUndefined()
+    })
+  })
+
+  // Why these matter: a caller that plumbs HOME/SHELL but forgets XDG_CONFIG_HOME
+  // reads a different fish config than the shell will, so the same user gets one
+  // answer locally and another over relay.
+  describe('readSessionShellStartupEnvVar', () => {
+    const FISH = '/opt/homebrew/bin/fish'
+    const savedConfigHome = process.env.XDG_CONFIG_HOME
+    const savedHome = process.env.HOME
+
+    afterEach(() => {
+      restoreEnv('XDG_CONFIG_HOME', savedConfigHome)
+      restoreEnv('HOME', savedHome)
+    })
+
+    function restoreEnv(key: string, value: string | undefined) {
+      if (value === undefined) {
+        delete process.env[key]
+      } else {
+        process.env[key] = value
+      }
+    }
+
+    it("prefers the session env's XDG_CONFIG_HOME over the main process's", () => {
+      process.env.XDG_CONFIG_HOME = '/main-process-cfg'
+      mockStartupFiles({
+        '/session-cfg/fish/config.fish': 'set -gx CODEX_HOME /from/session\n',
+        '/main-process-cfg/fish/config.fish': 'set -gx CODEX_HOME /from/main-process\n'
+      })
+
+      expect(
+        readSessionShellStartupEnvVar('CODEX_HOME', {
+          HOME: '/home/alice',
+          SHELL: FISH,
+          XDG_CONFIG_HOME: '/session-cfg'
+        })
+      ).toBe('/from/session')
+    })
+
+    it('falls back to the main process XDG_CONFIG_HOME when the session env lacks one', () => {
+      process.env.XDG_CONFIG_HOME = '/main-process-cfg'
+      mockStartupFiles({
+        '/main-process-cfg/fish/config.fish': 'set -gx CODEX_HOME /from/main-process\n'
+      })
+
+      expect(
+        readSessionShellStartupEnvVar('CODEX_HOME', { HOME: '/home/alice', SHELL: FISH })
+      ).toBe('/from/main-process')
+    })
+
+    it("falls back to fish's own ~/.config default when neither env has one", () => {
+      delete process.env.XDG_CONFIG_HOME
+      mockStartupFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME /from/default\n'
+      })
+
+      expect(
+        readSessionShellStartupEnvVar('CODEX_HOME', { HOME: '/home/alice', SHELL: FISH })
+      ).toBe('/from/default')
+    })
+
+    it('resolves against the session HOME, not the main process HOME', () => {
+      delete process.env.XDG_CONFIG_HOME
+      process.env.HOME = '/home/root-user'
+      mockStartupFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME "$HOME/.codex"\n',
+        '/home/root-user/.config/fish/config.fish': 'set -gx CODEX_HOME /from/wrong-home\n'
+      })
+
+      expect(
+        readSessionShellStartupEnvVar('CODEX_HOME', { HOME: '/home/alice', SHELL: FISH })
+      ).toBe('/home/alice/.codex')
+    })
+
+    it('lets an explicit shell override beat the session SHELL', () => {
+      delete process.env.XDG_CONFIG_HOME
+      mockStartupFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME /from/fish\n',
+        '/home/alice/.zshrc': 'export CODEX_HOME=/from/zsh\n'
+      })
+
+      expect(
+        readSessionShellStartupEnvVar(
+          'CODEX_HOME',
+          { HOME: '/home/alice', SHELL: '/bin/zsh' },
+          FISH
+        )
+      ).toBe('/from/fish')
+    })
+
+    it('falls back to the main process HOME and SHELL with no session env at all', () => {
+      delete process.env.XDG_CONFIG_HOME
+      process.env.HOME = '/home/alice'
+      process.env.SHELL = FISH
+      mockStartupFiles({
+        '/home/alice/.config/fish/config.fish': 'set -gx CODEX_HOME /from/process-env\n'
+      })
+
+      expect(readSessionShellStartupEnvVar('CODEX_HOME', undefined)).toBe('/from/process-env')
+    })
+  })
 })
diff --git a/src/main/pty/shell-startup-env.ts b/src/main/pty/shell-startup-env.ts
index f423ef38f22..ad6392160a9 100644
--- a/src/main/pty/shell-startup-env.ts
+++ b/src/main/pty/shell-startup-env.ts
@@ -1,4 +1,4 @@
-import { existsSync, readFileSync } from 'node:fs'
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
 import { posix } from 'node:path'
 
 // Why: only files the user's actual shell would source. Mixing zsh and bash
@@ -11,24 +11,45 @@ const ZSH_AFTER_ENV_FILES = ['.zprofile', '.zshrc', '.zlogin']
 // .bash_profile / .bash_login / .profile but intentionally does NOT force
 // .bashrc. Scanning .bashrc would mirror values the live Orca bash never sees.
 const BASH_LOGIN_FILES = ['.bash_profile', '.bash_login', '.profile']
+// Why: fish sources conf.d/*.fish (sorted by name) before config.fish, for
+// login and non-login shells alike — verified against fish 4.7.
+const FISH_SNIPPET_DIR = 'conf.d'
+const FISH_SNIPPET_SUFFIX = '.fish'
+const FISH_CONFIG_FILE = 'config.fish'
+
+/** Assignment grammar of a startup file: `export NAME=value` vs fish `set -gx NAME value`. */
+type StartupFileSyntax = 'export' | 'fish-set'
+
+type ShellStartupFiles = {
+  paths: readonly string[]
+  syntax: StartupFileSyntax
+}
 
 export function isShellStartupEnvProbeSupported(): boolean {
   return process.platform !== 'win32'
 }
 
-function parseExportedValue(content: string, name: string, home: string): string | undefined {
-  const assignment = new RegExp(`^export\\s+${name}=(.+)$`)
+function parseAssignedValue(
+  content: string,
+  name: string,
+  home: string,
+  syntax: StartupFileSyntax
+): string | undefined {
+  const assignment =
+    syntax === 'fish-set'
+      ? new RegExp(`^set\\s+((?:-{1,2}[A-Za-z][\\w-]*\\s+)+)${name}\\s+(.+)$`)
+      : new RegExp(`^export\\s+${name}=()(.+)$`)
   let lastMatch: string | undefined
 
   for (const rawLine of content.split(/\r?\n/)) {
     const line = rawLine.trim()
     const match = assignment.exec(line)
-    if (!match?.[1]) {
+    if (!match?.[2] || (syntax === 'fish-set' && !fishFlagsExport(match[1] ?? ''))) {
       continue
     }
     // Why: strip trailing unquoted `# comment` first so quoted values like
     // `"$HOME/.opencode" # note` survive intact for unquoteShellValue.
-    const decommented = stripTrailingComment(match[1])
+    const decommented = stripTrailingComment(match[2])
     const { text, quoted } = unquoteShellValue(decommented)
     // Why: $HOME / ${HOME} / ~ expansion mimics what the live shell would
     // do for double-quoted and unquoted values; single-quoted is literal.
@@ -41,6 +62,21 @@ function parseExportedValue(content: string, name: string, home: string): string
   return lastMatch
 }
 
+function parseExportedValue(content: string, name: string, home: string): string | undefined {
+  return parseAssignedValue(content, name, home, 'export')
+}
+
+// Why: only `set -x` / `--export` reaches child processes; `set -g`, `set -l`
+// and function-local sets never appear in the PTY's environment.
+function fishFlagsExport(flags: string): boolean {
+  return flags
+    .trim()
+    .split(/\s+/)
+    .some((flag) =>
+      flag.startsWith('--') ? flag === '--export' : /^-[A-Za-z]*x[A-Za-z]*$/.test(flag)
+    )
+}
+
 function readStartupFile(path: string): string | null {
   if (!existsSync(path)) {
     return null
@@ -52,23 +88,55 @@ function readStartupFile(path: string): string | null {
   }
 }
 
-function shellStartupFilePaths(home: string, shell: string | undefined): readonly string[] {
+function shellStartupFiles(
+  home: string,
+  shell: string | undefined,
+  configHome: string | undefined
+): ShellStartupFiles {
   if (!shell) {
     // Why: Orca's POSIX default shell is /bin/zsh when $SHELL is unset.
-    return zshStartupFilePaths(home)
+    return { paths: zshStartupFilePaths(home), syntax: 'export' }
   }
 
   const name = posix.basename(shell).toLowerCase()
   if (name === 'zsh') {
-    return zshStartupFilePaths(home)
+    return { paths: zshStartupFilePaths(home), syntax: 'export' }
   }
   if (name === 'bash') {
-    return BASH_LOGIN_FILES.map((file) => posix.join(home, file))
+    return {
+      paths: BASH_LOGIN_FILES.map((file) => posix.join(home, file)),
+      syntax: 'export'
+    }
   }
-  // Why: unsupported explicit shells (fish, nushell, custom wrappers) do not
-  // use Orca's zsh/bash shell-ready startup files, so scanning those files
+  if (name === 'fish') {
+    return {
+      paths: fishStartupFilePaths(home, configHome),
+      syntax: 'fish-set'
+    }
+  }
+  // Why: unsupported explicit shells (nushell, custom wrappers) do not use
+  // Orca's zsh/bash/fish shell-ready startup files, so scanning those files
   // would mirror values the live PTY shell never sees.
-  return []
+  return { paths: [], syntax: 'export' }
+}
+
+function fishStartupFilePaths(home: string, configHome: string | undefined): readonly string[] {
+  const fishDir = posix.join(configHome?.trim() || posix.join(home, '.config'), 'fish')
+  return [
+    ...fishSnippetPaths(posix.join(fishDir, FISH_SNIPPET_DIR)),
+    posix.join(fishDir, FISH_CONFIG_FILE)
+  ]
+}
+
+function fishSnippetPaths(snippetDir: string): readonly string[] {
+  try {
+    return readdirSync(snippetDir)
+      .filter((entry) => entry.endsWith(FISH_SNIPPET_SUFFIX))
+      .sort()
+      .map((entry) => posix.join(snippetDir, entry))
+  } catch {
+    return []
+  }
 }
 
 function zshStartupFilePaths(home: string): readonly string[] {
@@ -139,21 +207,24 @@ const cache = new Map<string, string | undefined>()
  * Limits (callers should treat the result as a hint, not authoritative):
  * - Conditionals (`[[ ... ]] && export FOO=...`), sourced files, and
  *   `$VAR` substitution beyond `$HOME` / `${HOME}` / `~` are not evaluated.
- * - Bare assignments (no `export` keyword) are ignored because POSIX shells
- *   do not export them to child processes.
+ * - Bare assignments (no `export` keyword, or fish `set` without `-x`) are
+ *   ignored because they never reach child processes.
  * - Files are scanned in shell evaluation order for the user's $SHELL family
- *   only (zsh OR bash, not both); unsupported explicit shells scan nothing.
- *   LAST matching assignment wins.
+ *   only (zsh OR bash OR fish, never mixed); unsupported explicit shells scan
+ *   nothing. LAST matching assignment wins.
+ * - fish universal variables (`set -Ux` stored in fish_variables) are only
+ *   seen when the assignment is also written in a config file.
  * - Windows is unsupported (PowerShell profile parsing is out of scope).
  *
- * Results are memoized per (name, home, shell) for the process lifetime —
- * shell startup files do not change mid-session in any practical scenario,
- * and PTY spawn is on the hot path.
+ * Results are memoized per (name, home, shell, configHome) for the process
+ * lifetime — shell startup files do not change mid-session in any practical
+ * scenario, and PTY spawn is on the hot path.
  */
 export function readShellStartupEnvVar(
   name: string,
   home = process.env.HOME,
-  shell = process.env.SHELL
+  shell = process.env.SHELL,
+  configHome = process.env.XDG_CONFIG_HOME
 ): string | undefined {
   if (!home || !isShellStartupEnvProbeSupported()) {
     return undefined
@@ -164,20 +235,21 @@ export function readShellStartupEnvVar(
     return undefined
   }
 
-  const cacheKey = `${name}\0${home}\0${shell ?? ''}`
+  const cacheKey = `${name}\0${home}\0${shell ?? ''}\0${configHome ?? ''}`
   if (cache.has(cacheKey)) {
     return cache.get(cacheKey)
   }
 
   let lastMatch: string | undefined
 
-  for (const path of shellStartupFilePaths(home, shell)) {
+  const { paths, syntax } = shellStartupFiles(home, shell, configHome)
+  for (const path of paths) {
     const content = readStartupFile(path)
     if (content === null) {
       continue
     }
 
-    const match = parseExportedValue(content, name, home)
+    const match = parseAssignedValue(content, name, home, syntax)
     if (match !== undefined) {
       lastMatch = match
     }
@@ -187,6 +259,34 @@ export function readShellStartupEnvVar(
   return lastMatch
 }
 
+/** The env keys that decide which startup files a shell would actually source. */
+export type ShellStartupEnvSource = {
+  HOME?: string | undefined
+  SHELL?: string | undefined
+  XDG_CONFIG_HOME?: string | undefined
+}
+
+/**
+ * Same probe, resolved against a session/PTY env with process.env as fallback.
+ *
+ * Why this exists rather than three inline `??` chains per call site: dropping
+ * XDG_CONFIG_HOME silently scans a *different* fish config than the shell will,
+ * so local launches and relay launches disagree about the same user's
+ * `set -gx` — a divergence with no visible symptom until it is wrong.
+ */
+export function readSessionShellStartupEnvVar(
+  name: string,
+  sessionEnv: ShellStartupEnvSource | undefined,
+  shellOverride?: string
+): string | undefined {
+  return readShellStartupEnvVar(
+    name,
+    sessionEnv?.HOME ?? process.env.HOME,
+    shellOverride ?? sessionEnv?.SHELL ?? process.env.SHELL,
+    sessionEnv?.XDG_CONFIG_HOME ?? process.env.XDG_CONFIG_HOME
+  )
+}
+
 /**
  * Test-only helper to reset the per-process cache between cases.
  * Why: production callers never invalidate (rc files don't change at
diff --git a/src/main/pty/windows-environment-path.test.ts b/src/main/pty/windows-environment-path.test.ts
index e1ace3350ca..4aaa7f91bdd 100644
--- a/src/main/pty/windows-environment-path.test.ts
+++ b/src/main/pty/windows-environment-path.test.ts
@@ -12,6 +12,7 @@ vi.mock('node:child_process', () => ({
 
 import {
   __resetPersistedWindowsPathCacheForTests,
+  invalidatePersistedWindowsPathCache,
   mergePersistedWindowsPath,
   mergePersistedWindowsPathAsync,
   readPersistedWindowsPathSegments,
@@ -127,6 +128,165 @@ describe('readPersistedWindowsPathSegments', () => {
     }
   })
 
+  it('invalidates the cache after Windows reports an environment change', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\OldMachine'))
+      .mockReturnValueOnce(registryPath('C:\\OldUser'))
+      .mockReturnValueOnce(registryPath('C:\\NewMachine'))
+      .mockReturnValueOnce(registryPath('C:\\NewUser'))
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\OldMachine', 'C:\\OldUser'])
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\OldMachine', 'C:\\OldUser'])
+
+      invalidatePersistedWindowsPathCache()
+
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\NewMachine', 'C:\\NewUser'])
+      expect(registryGetKeyMock).toHaveBeenCalledTimes(4)
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('combines a fresh hive with the other hive last known good after invalidation', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\OldMachine'))
+      .mockReturnValueOnce(registryPath('C:\\OldUser'))
+      .mockReturnValueOnce(registryPath('C:\\NewMachine'))
+      .mockImplementationOnce(() => {
+        throw new Error('user registry unavailable')
+      })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\OldMachine', 'C:\\OldUser'])
+      invalidatePersistedWindowsPathCache()
+
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\NewMachine', 'C:\\OldUser'])
+      expect(registryGetKeyMock).toHaveBeenCalledTimes(4)
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('combines a fresh user hive with the machine hive last known good', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\OldMachine'))
+      .mockReturnValueOnce(registryPath('C:\\OldUser'))
+      .mockImplementationOnce(() => {
+        throw new Error('machine registry unavailable')
+      })
+      .mockReturnValueOnce(registryPath('C:\\NewUser'))
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\OldMachine', 'C:\\OldUser'])
+      invalidatePersistedWindowsPathCache()
+
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\OldMachine', 'C:\\NewUser'])
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('withholds a partial first registry snapshot instead of changing PATH precedence', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\Machine'))
+      .mockImplementationOnce(() => {
+        throw new Error('user registry unavailable')
+      })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      const env = { Path: 'C:\\UserAlias;C:\\Existing' }
+
+      mergePersistedWindowsPath(env)
+
+      expect(env.Path).toBe('C:\\UserAlias;C:\\Existing')
+      expect(readPersistedWindowsPathSegments()).toEqual([])
+      expect(registryGetKeyMock).toHaveBeenCalledTimes(2)
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('withholds the reverse partial first snapshot', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockImplementationOnce(() => {
+        throw new Error('machine registry unavailable')
+      })
+      .mockReturnValueOnce(registryPath('C:\\User'))
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments()).toEqual([])
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('does not duplicate an unresolved asynchronous refresh for a synchronous caller', async () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\Machine'))
+      .mockImplementationOnce(() => {
+        throw new Error('user registry unavailable')
+      })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      const refresh = readPersistedWindowsPathSegmentsAsync()
+
+      expect(readPersistedWindowsPathSegments()).toEqual([])
+      await expect(refresh).resolves.toEqual([])
+      expect(registryGetKeyMock).toHaveBeenCalledTimes(2)
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('does not let injected test reads populate production fallback state', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    const execFileSync = vi
+      .fn()
+      .mockReturnValueOnce('    Path    REG_SZ    C:\\InjectedMachine\r\n')
+      .mockReturnValueOnce('    Path    REG_SZ    C:\\InjectedUser\r\n')
+    registryGetKeyMock.mockImplementation(() => {
+      throw new Error('registry unavailable')
+    })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments({ platform: 'win32', execFileSync })).toEqual([
+        'C:\\InjectedMachine',
+        'C:\\InjectedUser'
+      ])
+      expect(readPersistedWindowsPathSegments()).toEqual([])
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
   it('keeps the last good segments when a forced read hits a blocked registry', () => {
     const originalPlatform = process.platform
     Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
@@ -173,6 +333,33 @@ describe('readPersistedWindowsPathSegments', () => {
     }
   })
 
+  it('does not resurrect a successfully emptied hive when the other hive fails', () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\Machine'))
+      .mockReturnValueOnce(registryPath('C:\\User'))
+      .mockImplementationOnce(() => {
+        throw new Error('machine registry unavailable')
+      })
+      .mockReturnValueOnce(registryPath(''))
+      .mockImplementation(() => {
+        throw new Error('registry unavailable')
+      })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\Machine', 'C:\\User'])
+      invalidatePersistedWindowsPathCache()
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\Machine'])
+      invalidatePersistedWindowsPathCache()
+      expect(readPersistedWindowsPathSegments()).toEqual(['C:\\Machine'])
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
   it('deduplicates concurrent forced asynchronous refreshes and merges each environment', async () => {
     const originalPlatform = process.platform
     Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
@@ -232,6 +419,71 @@ describe('readPersistedWindowsPathSegments', () => {
       Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
     }
   })
+
+  it('does not let an older async read replace a newer synchronous refresh', async () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\OldMachine'))
+      .mockReturnValueOnce(registryPath('C:\\OldUser'))
+      .mockReturnValueOnce(registryPath('C:\\NewMachine'))
+      .mockReturnValueOnce(registryPath('C:\\NewUser'))
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      const olderRead = readPersistedWindowsPathSegmentsAsync({ forceRefresh: true })
+      expect(readPersistedWindowsPathSegments({ forceRefresh: true })).toEqual([
+        'C:\\NewMachine',
+        'C:\\NewUser'
+      ])
+
+      await expect(olderRead).resolves.toEqual(['C:\\NewMachine', 'C:\\NewUser'])
+      await expect(readPersistedWindowsPathSegmentsAsync()).resolves.toEqual([
+        'C:\\NewMachine',
+        'C:\\NewUser'
+      ])
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
+
+  it('uses a current-generation refresh before merging an invalidated read', async () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+    registryGetKeyMock
+      .mockReturnValueOnce(registryPath('C:\\OldMachine'))
+      .mockImplementationOnce(() => {
+        queueMicrotask(invalidatePersistedWindowsPathCache)
+        return registryPath('C:\\OldUser')
+      })
+      .mockReturnValueOnce(registryPath('C:\\NewMachine'))
+      .mockReturnValueOnce(registryPath('C:\\NewUser'))
+      .mockImplementation(() => {
+        throw new Error('registry unavailable')
+      })
+    __resetPersistedWindowsPathCacheForTests()
+
+    try {
+      const env = { Path: 'C:\\Injected' }
+      await mergePersistedWindowsPathAsync(env)
+
+      expect(env.Path).toBe('C:\\Injected;C:\\NewMachine;C:\\NewUser')
+      await expect(readPersistedWindowsPathSegmentsAsync()).resolves.toEqual([
+        'C:\\NewMachine',
+        'C:\\NewUser'
+      ])
+      invalidatePersistedWindowsPathCache()
+      await expect(readPersistedWindowsPathSegmentsAsync()).resolves.toEqual([
+        'C:\\NewMachine',
+        'C:\\NewUser'
+      ])
+      expect(registryGetKeyMock).toHaveBeenCalledTimes(6)
+    } finally {
+      __resetPersistedWindowsPathCacheForTests()
+      Object.defineProperty(process, 'platform', { configurable: true, value: originalPlatform })
+    }
+  })
 })
 
 describe('mergePersistedWindowsPath', () => {
@@ -247,7 +499,7 @@ describe('mergePersistedWindowsPath', () => {
     expect(env.Path).toBe('C:\\Users\\orca\\AppData\\Local\\agy\\bin;C:\\Windows')
   })
 
-  it('appends missing persisted segments without reordering the inherited PATH', () => {
+  it('adopts persisted machine and user PATH ordering', () => {
     const execFileSync = vi
       .fn()
       .mockReturnValueOnce(
@@ -271,7 +523,7 @@ describe('mergePersistedWindowsPath', () => {
     mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
 
     expect(env.Path).toBe(
-      'C:\\Existing;C:\\Windows\\System32;C:\\Users\\me\\AppData\\Local\\Orca\\bin'
+      'C:\\Windows\\System32;C:\\Existing;C:\\Users\\me\\AppData\\Local\\Orca\\bin'
     )
   })
 
@@ -318,6 +570,73 @@ describe('mergePersistedWindowsPath', () => {
 
     expect(env).toEqual({ Path: 'C:\\Root\\Live;C:\\Machine;C:\\User' })
   })
+
+  it('stops an inherited WindowsApps alias from shadowing a newly installed Python', () => {
+    const python = 'C:\\Users\\me\\AppData\\Local\\Programs\\Python\\Python314\\'
+    const scripts = `${python}Scripts\\`
+    const windowsApps = 'C:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps'
+    const execFileSync = vi
+      .fn()
+      .mockReturnValueOnce('    Path    REG_EXPAND_SZ    C:\\Windows\\system32;C:\\Windows\r\n')
+      .mockReturnValueOnce(`    Path    REG_EXPAND_SZ    ${python};${scripts};${windowsApps}\r\n`)
+    const env = { Path: `C:\\Windows\\system32;C:\\Windows;${windowsApps}` }
+
+    mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
+
+    const segments = env.Path.split(';')
+    expect(segments.indexOf(python)).toBeLessThan(segments.indexOf(windowsApps))
+    expect(env.Path).toBe(`C:\\Windows\\system32;C:\\Windows;${python};${scripts};${windowsApps}`)
+  })
+
+  it('keeps injected entries ahead of the persisted PATH', () => {
+    const injected = 'C:\\Users\\me\\AppData\\Local\\Orca\\resources\\bin'
+    const python = 'C:\\Users\\me\\AppData\\Local\\Programs\\Python\\Python314\\'
+    const windowsApps = 'C:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps'
+    const execFileSync = vi
+      .fn()
+      .mockReturnValueOnce('    Path    REG_EXPAND_SZ    C:\\Windows\\system32\r\n')
+      .mockReturnValueOnce(`    Path    REG_EXPAND_SZ    ${python};${windowsApps}\r\n`)
+    const env = { Path: `${injected};C:\\Windows\\system32;${windowsApps}` }
+
+    mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
+
+    expect(env.Path).toBe(`${injected};C:\\Windows\\system32;${python};${windowsApps}`)
+  })
+
+  it('leaves the inherited PATH untouched when both registry reads are blocked', () => {
+    const execFileSync = vi.fn().mockImplementation(() => {
+      throw new Error('ERROR: Access is denied.')
+    })
+    const env = { Path: 'C:\\Windows\\system32;C:\\Existing' }
+
+    mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
+
+    expect(env.Path).toBe('C:\\Windows\\system32;C:\\Existing')
+  })
+
+  it('deduplicates segments that differ only by trailing separators', () => {
+    const execFileSync = vi
+      .fn()
+      .mockReturnValueOnce('    Path    REG_SZ    C:\\Tools\r\n')
+      .mockReturnValueOnce('    Path    REG_SZ    \r\n')
+    const env = { Path: 'C:\\Tools\\' }
+
+    mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
+
+    expect(env.Path.split(';')).toEqual(['C:\\Tools'])
+  })
+
+  it('canonicalizes drive-root slash style and repetition for comparison', () => {
+    const execFileSync = vi
+      .fn()
+      .mockReturnValueOnce('    Path    REG_SZ    C:\\\\\r\n')
+      .mockReturnValueOnce('    Path    REG_SZ    \r\n')
+    const env = { Path: 'C:/' }
+
+    mergePersistedWindowsPath(env, { platform: 'win32', execFileSync })
+
+    expect(env.Path.split(';')).toEqual(['C:\\\\'])
+  })
 })
 
 describe('resolvePathEnvKey', () => {
diff --git a/src/main/pty/windows-environment-path.ts b/src/main/pty/windows-environment-path.ts
index 8fad453cab5..554e8768612 100644
--- a/src/main/pty/windows-environment-path.ts
+++ b/src/main/pty/windows-environment-path.ts
@@ -1,11 +1,15 @@
 import type { execFile, execFileSync } from 'node:child_process'
-import {
-  expandWindowsEnvironmentVariables,
-  expandWindowsPathEnvironmentVariables
-} from '../../shared/windows-environment-expansion'
+import { expandWindowsEnvironmentVariables } from '../../shared/windows-environment-expansion'
 import { getRegExePath } from '../win32-utils'
+import { mergeWindowsPathSegments } from './windows-path-segment-merge'
+import {
+  WindowsPathRegistryFallback,
+  type RegistryPathRead
+} from './windows-path-registry-fallback'
 import { readWindowsPathRegistry } from './windows-path-registry-reader'
 
+export { resolvePathEnvKey } from './windows-path-segment-merge'
+
 type ExecFile = typeof execFile
 type ExecFileSync = typeof execFileSync
 
@@ -17,8 +21,6 @@ type ReadWindowsPathOptions = {
   platform?: NodeJS.Platform
 }
 
-type RegistryPathRead = { failed: boolean; segments: string[] }
-
 const WINDOWS_PATH_REGISTRY_KEYS = [
   ['HKLM\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment', 'Path'],
   ['HKCU\\Environment', 'Path']
@@ -26,6 +28,9 @@ const WINDOWS_PATH_REGISTRY_KEYS = [
 
 const PERSISTED_WINDOWS_PATH_CACHE_TTL_MS = 30_000
 const PERSISTED_WINDOWS_PATH_QUERY_TIMEOUT_MS = 5_000
+const windowsPathRegistryFallback = new WindowsPathRegistryFallback(
+  WINDOWS_PATH_REGISTRY_KEYS.length
+)
 
 let persistedWindowsPathCache:
   | {
@@ -34,6 +39,9 @@ let persistedWindowsPathCache:
     }
   | undefined
 let pendingPersistedWindowsPathRefresh: Promise<string[]> | undefined
+let persistedWindowsPathCacheGeneration = 0
+let persistedWindowsPathReadSequence = 0
+let persistedWindowsPathCommittedSequence = 0
 
 function parseRegistryPathValue(output: string, valueName: string): string | null {
   const valuePattern = new RegExp(`^\\s*${valueName}\\s+REG_\\w+\\s+(.*)$`, 'i')
@@ -82,19 +90,20 @@ function readNativeRegistryPaths(
   }))
 }
 
-function keepLastGoodSegments(segments: string[], failedReads: number): string[] {
-  if (failedReads === WINDOWS_PATH_REGISTRY_KEYS.length && persistedWindowsPathCache) {
-    return [...persistedWindowsPathCache.segments]
+function cachePersistedWindowsPathReads(reads: RegistryPathRead[], readSequence: number): string[] {
+  if (readSequence < persistedWindowsPathCommittedSequence) {
+    // Why: a slower async read must not replace a newer synchronous refresh.
+    return persistedWindowsPathCache ? [...persistedWindowsPathCache.segments] : []
   }
-  return segments
-}
-
-function cachePersistedWindowsPathSegments(segments: string[], failedReads: number): string[] {
-  // Why: timeouts or policy blocks must not replace a usable cache, while successful empty
-  // registry values still need to remove stale entries.
-  const kept = keepLastGoodSegments(segments, failedReads)
-  persistedWindowsPathCache = { readAt: Date.now(), segments: [...kept] }
-  return [...kept]
+  persistedWindowsPathCommittedSequence = readSequence
+  const segments = windowsPathRegistryFallback.commitReads(reads)
+  if (!segments) {
+    // Why: unresolved hives preserve ordering, but still need negative caching on the PTY hot path.
+    persistedWindowsPathCache = { readAt: Date.now(), segments: [] }
+    return []
+  }
+  persistedWindowsPathCache = { readAt: Date.now(), segments: [...segments] }
+  return [...segments]
 }
 
 function readRegistryPathAsync(
@@ -145,19 +154,15 @@ export function readPersistedWindowsPathSegments(options: ReadWindowsPathOptions
     return [...persistedWindowsPathCache.segments]
   }
 
-  if (
-    !options.forceRefresh &&
-    useProductionCache &&
-    pendingPersistedWindowsPathRefresh &&
-    persistedWindowsPathCache
-  ) {
+  if (!options.forceRefresh && useProductionCache && pendingPersistedWindowsPathRefresh) {
     // Why: synchronous PTY construction cannot await the active refresh; its stale cache is
     // safer than duplicating the registry read on Electron's main thread.
-    return [...persistedWindowsPathCache.segments]
+    return persistedWindowsPathCache ? [...persistedWindowsPathCache.segments] : []
   }
 
   const env = options.env ?? process.env
   const pathDelimiter = getPathDelimiter(platform)
+  const readSequence = useProductionCache ? ++persistedWindowsPathReadSequence : 0
   const reads = options.execFileSync
     ? WINDOWS_PATH_REGISTRY_KEYS.map(([key, valueName]) => {
         try {
@@ -180,8 +185,6 @@ export function readPersistedWindowsPathSegments(options: ReadWindowsPathOptions
       })
     : readNativeRegistryPaths(env, pathDelimiter)
   const segments = reads.flatMap((read) => read.segments)
-  const failedReads = reads.filter((read) => read.failed).length
-
   if (!useProductionCache) {
     return segments
   }
@@ -189,7 +192,7 @@ export function readPersistedWindowsPathSegments(options: ReadWindowsPathOptions
   // Why: local PTY spawn is a hot path on Windows, and each uncached refresh performs two
   // synchronous native registry reads. A short TTL keeps terminal bursts cheap while still
   // picking up newly installed CLIs soon.
-  return cachePersistedWindowsPathSegments(segments, failedReads)
+  return cachePersistedWindowsPathReads(reads, readSequence)
 }
 
 export async function readPersistedWindowsPathSegmentsAsync(
@@ -220,6 +223,8 @@ export async function readPersistedWindowsPathSegmentsAsync(
 
   const env = options.env ?? process.env
   const pathDelimiter = getPathDelimiter(platform)
+  const cacheGeneration = persistedWindowsPathCacheGeneration
+  const readSequence = useProductionCache ? ++persistedWindowsPathReadSequence : 0
   const refresh = (
     options.execFile
       ? Promise.all(
@@ -239,7 +244,11 @@ export async function readPersistedWindowsPathSegmentsAsync(
     if (!useProductionCache) {
       return segments
     }
-    return cachePersistedWindowsPathSegments(segments, reads.filter((read) => read.failed).length)
+    if (cacheGeneration !== persistedWindowsPathCacheGeneration) {
+      // Why: callers must not merge or inspect a snapshot invalidated while its queries ran.
+      return readPersistedWindowsPathSegmentsAsync()
+    }
+    return cachePersistedWindowsPathReads(reads, readSequence)
   })
 
   if (!useProductionCache) {
@@ -256,63 +265,18 @@ export async function readPersistedWindowsPathSegmentsAsync(
 }
 
 export function __resetPersistedWindowsPathCacheForTests(): void {
+  invalidatePersistedWindowsPathCache()
+  windowsPathRegistryFallback.reset()
+  persistedWindowsPathReadSequence = 0
+  persistedWindowsPathCommittedSequence = 0
+}
+
+export function invalidatePersistedWindowsPathCache(): void {
+  persistedWindowsPathCacheGeneration += 1
   persistedWindowsPathCache = undefined
   pendingPersistedWindowsPathRefresh = undefined
 }
 
-/** Resolves the first PATH key a Windows child reads from an env block. */
-export function resolvePathEnvKey(
-  env: NodeJS.ProcessEnv | Record<string, string | undefined>,
-  platform: NodeJS.Platform,
-  hostEnv: NodeJS.ProcessEnv = process.env
-): string {
-  if (platform !== 'win32') {
-    return 'PATH'
-  }
-  // Why: the daemon receives a sparse env patch and re-merges its own block underneath it;
-  // matching the block's spelling stops that merge from resurrecting the other one.
-  return firstWindowsPathEnvKey(env) ?? firstWindowsPathEnvKey(hostEnv) ?? 'Path'
-}
-
-// Why: Win32 resolves the first case-insensitive key, and object order preserves block order.
-function firstWindowsPathEnvKey(
-  env: NodeJS.ProcessEnv | Record<string, string | undefined>
-): string | undefined {
-  for (const key of Object.keys(env)) {
-    if (key.toLowerCase() === 'path' && env[key] !== undefined) {
-      return key
-    }
-  }
-  return undefined
-}
-
-function mergeWindowsPathSegments(
-  env: NodeJS.ProcessEnv,
-  persistedSegments: string[],
-  platform: NodeJS.Platform,
-  sourceEnv: NodeJS.ProcessEnv
-): void {
-  expandWindowsPathEnvironmentVariables(env, platform)
-  const pathKey = resolvePathEnvKey(env, platform, sourceEnv)
-  const pathDelimiter = getPathDelimiter(platform)
-  const currentPath =
-    env[pathKey] ?? expandWindowsEnvironmentVariables(sourceEnv[pathKey] ?? '', sourceEnv)
-  const currentSegments = splitPathSegments(currentPath, pathDelimiter)
-  const existing = new Set(currentSegments.map((segment) => segment.toLowerCase()))
-  const missing = persistedSegments.filter((segment) => {
-    const normalized = segment.toLowerCase()
-    if (existing.has(normalized)) {
-      return false
-    }
-    existing.add(normalized)
-    return true
-  })
-
-  if (missing.length > 0) {
-    env[pathKey] = [...currentSegments, ...missing].join(pathDelimiter)
-  }
-}
-
 export function mergePersistedWindowsPath(
   env: NodeJS.ProcessEnv,
   options: ReadWindowsPathOptions = {}
@@ -323,9 +287,7 @@ export function mergePersistedWindowsPath(
   }
 
   const sourceEnv = options.env ?? process.env
-  // Why: Windows broadcasts PATH changes to future processes, but a running
-  // Electron app keeps its old environment. Append the persisted additions so
-  // newly installed CLIs resolve without unexpectedly reordering existing PATH.
+  // Why: append-only merging lets stale entries shadow newly installed executables.
   mergeWindowsPathSegments(env, readPersistedWindowsPathSegments(options), platform, sourceEnv)
 }
 
diff --git a/src/main/pty/windows-path-registry-change.test.ts b/src/main/pty/windows-path-registry-change.test.ts
new file mode 100644
index 00000000000..e6baee2cadf
--- /dev/null
+++ b/src/main/pty/windows-path-registry-change.test.ts
@@ -0,0 +1,32 @@
+import { describe, expect, it, vi } from 'vitest'
+import {
+  installWindowsPathRegistryChangeListener,
+  WINDOWS_SETTING_CHANGE_MESSAGE
+} from './windows-path-registry-change'
+
+describe('installWindowsPathRegistryChangeListener', () => {
+  it('invalidates the persisted PATH cache on a Windows settings change', () => {
+    const hooks = new Map<number, (wParam: Buffer, lParam: Buffer) => void>()
+    const invalidate = vi.fn()
+    installWindowsPathRegistryChangeListener(
+      {
+        hookWindowMessage: (message, callback) => {
+          hooks.set(message, callback)
+        }
+      },
+      { invalidate, platform: 'win32' }
+    )
+
+    hooks.get(WINDOWS_SETTING_CHANGE_MESSAGE)?.(Buffer.alloc(0), Buffer.alloc(0))
+
+    expect(invalidate).toHaveBeenCalledOnce()
+  })
+
+  it('does not hook native messages outside Windows', () => {
+    const hookWindowMessage = vi.fn()
+
+    installWindowsPathRegistryChangeListener({ hookWindowMessage }, { platform: 'linux' })
+
+    expect(hookWindowMessage).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/pty/windows-path-registry-change.ts b/src/main/pty/windows-path-registry-change.ts
new file mode 100644
index 00000000000..604d06de713
--- /dev/null
+++ b/src/main/pty/windows-path-registry-change.ts
@@ -0,0 +1,19 @@
+import type { BrowserWindow } from 'electron'
+import { invalidatePersistedWindowsPathCache } from './windows-environment-path'
+
+export const WINDOWS_SETTING_CHANGE_MESSAGE = 0x001a
+
+type WindowsMessageWindow = Pick<BrowserWindow, 'hookWindowMessage'>
+
+export function installWindowsPathRegistryChangeListener(
+  window: Partial<WindowsMessageWindow>,
+  options: { invalidate?: () => void; platform?: NodeJS.Platform } = {}
+): void {
+  if ((options.platform ?? process.platform) !== 'win32' || !window.hookWindowMessage) {
+    return
+  }
+  window.hookWindowMessage(
+    WINDOWS_SETTING_CHANGE_MESSAGE,
+    options.invalidate ?? invalidatePersistedWindowsPathCache
+  )
+}
diff --git a/src/main/pty/windows-path-registry-fallback.test.ts b/src/main/pty/windows-path-registry-fallback.test.ts
new file mode 100644
index 00000000000..a7db74af310
--- /dev/null
+++ b/src/main/pty/windows-path-registry-fallback.test.ts
@@ -0,0 +1,55 @@
+import { describe, expect, it } from 'vitest'
+import { WindowsPathRegistryFallback } from './windows-path-registry-fallback'
+
+const success = (segments: string[]) => ({ failed: false, segments })
+const failure = () => ({ failed: true, segments: [] })
+
+describe('WindowsPathRegistryFallback', () => {
+  it('withholds an incomplete snapshot until every source has succeeded', () => {
+    const fallback = new WindowsPathRegistryFallback(2)
+
+    expect(fallback.commitReads([success(['C:\\Machine']), failure()])).toBeUndefined()
+    expect(fallback.commitReads([failure(), success(['C:\\User'])])).toEqual([
+      'C:\\Machine',
+      'C:\\User'
+    ])
+  })
+
+  it('uses each source independently when a later read fails', () => {
+    const fallback = new WindowsPathRegistryFallback(2)
+    fallback.commitReads([success(['C:\\OldMachine']), success(['C:\\OldUser'])])
+
+    expect(fallback.commitReads([success(['C:\\NewMachine']), failure()])).toEqual([
+      'C:\\NewMachine',
+      'C:\\OldUser'
+    ])
+  })
+
+  it('treats a successful empty source as authoritative', () => {
+    const fallback = new WindowsPathRegistryFallback(2)
+    fallback.commitReads([success(['C:\\Machine']), success(['C:\\User'])])
+
+    expect(fallback.commitReads([failure(), success([])])).toEqual(['C:\\Machine'])
+    expect(fallback.commitReads([failure(), failure()])).toEqual(['C:\\Machine'])
+  })
+
+  it('clears retained sources on reset', () => {
+    const fallback = new WindowsPathRegistryFallback(2)
+    fallback.commitReads([success(['C:\\Machine']), success(['C:\\User'])])
+
+    fallback.reset()
+
+    expect(fallback.commitReads([failure(), failure()])).toBeUndefined()
+  })
+
+  it('does not expose retained arrays to callers', () => {
+    const fallback = new WindowsPathRegistryFallback(2)
+    const machine = ['C:\\Machine']
+    const first = fallback.commitReads([success(machine), success(['C:\\User'])])!
+
+    machine[0] = 'C:\\MutatedInput'
+    first[0] = 'C:\\MutatedOutput'
+
+    expect(fallback.commitReads([failure(), failure()])).toEqual(['C:\\Machine', 'C:\\User'])
+  })
+})
diff --git a/src/main/pty/windows-path-registry-fallback.ts b/src/main/pty/windows-path-registry-fallback.ts
new file mode 100644
index 00000000000..c551144119c
--- /dev/null
+++ b/src/main/pty/windows-path-registry-fallback.ts
@@ -0,0 +1,33 @@
+export type RegistryPathRead = { failed: boolean; segments: string[] }
+
+export class WindowsPathRegistryFallback {
+  private readonly lastGoodBySource: (string[] | undefined)[]
+
+  constructor(sourceCount: number) {
+    this.lastGoodBySource = Array.from({ length: sourceCount })
+  }
+
+  commitReads(reads: RegistryPathRead[]): string[] | undefined {
+    if (reads.length !== this.lastGoodBySource.length) {
+      return undefined
+    }
+
+    const resolved = reads.map((read, index) => {
+      if (!read.failed) {
+        const segments = [...read.segments]
+        this.lastGoodBySource[index] = segments
+        return segments
+      }
+      const lastGood = this.lastGoodBySource[index]
+      return lastGood ? [...lastGood] : undefined
+    })
+
+    return resolved.some((segments) => segments === undefined)
+      ? undefined
+      : resolved.flatMap((segments) => segments ?? [])
+  }
+
+  reset(): void {
+    this.lastGoodBySource.fill(undefined)
+  }
+}
diff --git a/src/main/pty/windows-path-registry-reader.test.ts b/src/main/pty/windows-path-registry-reader.test.ts
index 634cd30e72a..387e4238b8e 100644
--- a/src/main/pty/windows-path-registry-reader.test.ts
+++ b/src/main/pty/windows-path-registry-reader.test.ts
@@ -45,12 +45,24 @@ describe('readWindowsPathRegistry', () => {
     ])
   })
 
-  it('treats a missing PATH value as a failed query', () => {
+  it('treats a missing PATH value in a readable hive as empty', () => {
     __setWindowsPathRegistryLoaderForTests(() => ({
       HK: { LM: 1, CU: 2 },
       getRegistryKey: vi.fn(() => ({}))
     }))
 
+    expect(readWindowsPathRegistry()).toEqual([
+      { failed: false, value: '' },
+      { failed: false, value: '' }
+    ])
+  })
+
+  it('treats a present but unreadable PATH entry as a failed read', () => {
+    __setWindowsPathRegistryLoaderForTests(() => ({
+      HK: { LM: 1, CU: 2 },
+      getRegistryKey: vi.fn(() => ({ Path: undefined }))
+    }))
+
     expect(readWindowsPathRegistry()).toEqual([
       { failed: true, value: null },
       { failed: true, value: null }
diff --git a/src/main/pty/windows-path-registry-reader.ts b/src/main/pty/windows-path-registry-reader.ts
index 6f98c45e390..cff14c6ff3e 100644
--- a/src/main/pty/windows-path-registry-reader.ts
+++ b/src/main/pty/windows-path-registry-reader.ts
@@ -26,13 +26,15 @@ function readRegistryPath(
     if (!values || typeof values !== 'object') {
       return { failed: true, value: null }
     }
-    const entry = Object.entries(values).find(
+    const matchingEntry = Object.entries(values).find(
       ([name]) => name.toLowerCase() === PATH_VALUE.toLowerCase()
-    )?.[1]
-    if (!entry) {
-      return { failed: true, value: null }
+    )
+    if (!matchingEntry) {
+      return { failed: false, value: '' }
     }
+    const entry = matchingEntry[1]
     if (
+      !entry ||
       (entry.type !== WINDOWS_REG_SZ && entry.type !== WINDOWS_REG_EXPAND_SZ) ||
       typeof entry.value !== 'string'
     ) {
diff --git a/src/main/pty/windows-path-segment-merge.ts b/src/main/pty/windows-path-segment-merge.ts
new file mode 100644
index 00000000000..790a6cd06c9
--- /dev/null
+++ b/src/main/pty/windows-path-segment-merge.ts
@@ -0,0 +1,83 @@
+import {
+  expandWindowsEnvironmentVariables,
+  expandWindowsPathEnvironmentVariables
+} from '../../shared/windows-environment-expansion'
+
+export function resolvePathEnvKey(
+  env: NodeJS.ProcessEnv | Record<string, string | undefined>,
+  platform: NodeJS.Platform,
+  hostEnv: NodeJS.ProcessEnv = process.env
+): string {
+  if (platform !== 'win32') {
+    return 'PATH'
+  }
+  // Why: match the daemon's env-block spelling so its merge cannot resurrect another PATH key.
+  return firstWindowsPathEnvKey(env) ?? firstWindowsPathEnvKey(hostEnv) ?? 'Path'
+}
+
+// Why: Win32 uses the first case-insensitive key, and object order preserves block order.
+function firstWindowsPathEnvKey(
+  env: NodeJS.ProcessEnv | Record<string, string | undefined>
+): string | undefined {
+  for (const key of Object.keys(env)) {
+    if (key.toLowerCase() === 'path' && env[key] !== undefined) {
+      return key
+    }
+  }
+  return undefined
+}
+
+function normalizeSegmentKey(segment: string): string {
+  const trimmed = segment.replace(/[\\/]+$/, '')
+  // Why: roots keep one separator because `C:\` and drive-relative `C:` differ.
+  return (/^[a-z]:$/i.test(trimmed) && trimmed !== segment ? `${trimmed}\\` : trimmed).toLowerCase()
+}
+
+function dedupeSegments(segments: string[]): string[] {
+  const seen = new Set<string>()
+  return segments.filter((segment) => {
+    const key = normalizeSegmentKey(segment)
+    if (seen.has(key)) {
+      return false
+    }
+    seen.add(key)
+    return true
+  })
+}
+
+function splitPathSegments(pathValue: string, pathDelimiter: string): string[] {
+  return pathValue
+    .split(pathDelimiter)
+    .map((segment) => segment.trim())
+    .filter(Boolean)
+}
+
+export function mergeWindowsPathSegments(
+  env: NodeJS.ProcessEnv,
+  persistedSegments: string[],
+  platform: NodeJS.Platform,
+  sourceEnv: NodeJS.ProcessEnv
+): void {
+  expandWindowsPathEnvironmentVariables(env, platform)
+  const pathKey = resolvePathEnvKey(env, platform, sourceEnv)
+  const pathDelimiter = platform === 'win32' ? ';' : ':'
+  const currentPath =
+    env[pathKey] ?? expandWindowsEnvironmentVariables(sourceEnv[pathKey] ?? '', sourceEnv)
+  const currentSegments = splitPathSegments(currentPath, pathDelimiter)
+
+  if (persistedSegments.length === 0) {
+    return
+  }
+
+  const persisted = dedupeSegments(persistedSegments)
+  const persistedKeys = new Set(persisted.map(normalizeSegmentKey))
+  // Why: keep launch-time and Orca-injected entries that have no persisted position.
+  const injected = dedupeSegments(
+    currentSegments.filter((segment) => !persistedKeys.has(normalizeSegmentKey(segment)))
+  )
+  const merged = [...injected, ...persisted].join(pathDelimiter)
+
+  if (merged !== currentPath) {
+    env[pathKey] = merged
+  }
+}
diff --git a/src/main/pty/wsl-orca-env.test.ts b/src/main/pty/wsl-orca-env.test.ts
index c27655ba7e4..21a3f69d1cd 100644
--- a/src/main/pty/wsl-orca-env.test.ts
+++ b/src/main/pty/wsl-orca-env.test.ts
@@ -48,8 +48,7 @@ describe('addOrcaWslInteropEnv', () => {
       ORCA_USER_DATA_PATH: 'C:\\Users\\jin\\AppData\\Roaming\\Orca',
       ORCA_CLI_COMMAND: 'orca-ide',
       ORCA_OMP_STATUS_EXTENSION: 'C:\\Users\\jin\\.omp\\agent\\extensions\\orca-agent-status.ts',
-      ORCA_PRIME_AGENT_STATUS_EXTENSION:
-        'C:\\Users\\jin\\AppData\\Roaming\\Orca\\prime-agent-managed-status-extension\\orca-agent-status.ts',
+      ORCA_PRIME_AGENT_STATUS_EXTENSION: 'C:\\stale\\orca-agent-status.ts',
       ORCA_PANE_KEY: 'tab-1:leaf-1',
       ORCA_TAB_ID: 'tab-1',
       ORCA_WORKTREE_ID: 'repo::\\\\wsl.localhost\\Ubuntu\\home\\jin\\repo',
@@ -70,7 +69,7 @@ describe('addOrcaWslInteropEnv', () => {
     expect(env.WSLENV).toContain('ORCA_USER_DATA_PATH/p')
     expect(env.WSLENV).toContain('ORCA_CLI_COMMAND/u')
     expect(env.WSLENV).toContain('ORCA_OMP_STATUS_EXTENSION/p')
-    expect(env.WSLENV).toContain('ORCA_PRIME_AGENT_STATUS_EXTENSION/p')
+    expect(env.WSLENV).not.toContain('ORCA_PRIME_AGENT_STATUS_EXTENSION')
     expect(env.WSLENV).toContain('ORCA_PANE_KEY/u')
     expect(env.WSLENV).toContain('ORCA_TAB_ID/u')
     expect(env.WSLENV).toContain('ORCA_WORKTREE_ID/u')
diff --git a/src/main/pty/wsl-orca-env.ts b/src/main/pty/wsl-orca-env.ts
index 5e90eaa6b4a..40f3b957249 100644
--- a/src/main/pty/wsl-orca-env.ts
+++ b/src/main/pty/wsl-orca-env.ts
@@ -96,7 +96,6 @@ export function addOrcaWslInteropEnv(env: Record<string, string>): void {
     'ORCA_WSL_HOOK_INSTANCE/u',
     'ORCA_OMP_SOURCE_AGENT_DIR/p',
     'ORCA_OMP_STATUS_EXTENSION/p',
-    'ORCA_PRIME_AGENT_STATUS_EXTENSION/p',
     ...worktreeSetupWslenvEntries(env)
   ]
   applyWslenvPassthrough(env, passthroughEntries)
diff --git a/src/main/rate-limits/minimax-request-context.ts b/src/main/rate-limits/minimax-request-context.ts
index 34dcd47130b..ecda8329a2e 100644
--- a/src/main/rate-limits/minimax-request-context.ts
+++ b/src/main/rate-limits/minimax-request-context.ts
@@ -45,7 +45,7 @@ function parseCookiePairs(cookie: string): { name: string; value: string }[] {
     .map((part) => {
       const normalizedPart = part.replace(/^Cookie:\s*/i, '')
       const eq = normalizedPart.indexOf('=')
-      if (eq < 0) {
+      if (eq === -1) {
         return null
       }
       return {
diff --git a/src/main/rate-limits/opencode-go-usage-fetcher.ts b/src/main/rate-limits/opencode-go-usage-fetcher.ts
index 934d1e72b42..f2ea68b7588 100644
--- a/src/main/rate-limits/opencode-go-usage-fetcher.ts
+++ b/src/main/rate-limits/opencode-go-usage-fetcher.ts
@@ -47,7 +47,7 @@ function parseAuthCookies(raw: string): { name: string; value: string }[] {
     .map((p) => p.trim())
     .map((pair) => {
       const eq = pair.indexOf('=')
-      if (eq < 0) {
+      if (eq === -1) {
         return null
       }
       const name = pair.slice(0, eq).trim()
diff --git a/src/main/runtime/claude-agent-teams-shim-env.test.ts b/src/main/runtime/claude-agent-teams-shim-env.test.ts
index f79c9d150cf..362291e3c26 100644
--- a/src/main/runtime/claude-agent-teams-shim-env.test.ts
+++ b/src/main/runtime/claude-agent-teams-shim-env.test.ts
@@ -61,7 +61,7 @@ describe('claude agent teams shim env', () => {
       expect(plan).toMatchObject({
         command: "claude --teammate-mode auto 'hello'",
         env: expect.objectContaining({ TMUX_PANE: '%1' }),
-        envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+        envToDelete: ['TERM_PROGRAM']
       })
       expect(capturedShimBin).toBe(cliPath)
     }
diff --git a/src/main/runtime/claude-agent-teams-shim-env.ts b/src/main/runtime/claude-agent-teams-shim-env.ts
index 6b6eeea94ba..7f6c3a1922e 100644
--- a/src/main/runtime/claude-agent-teams-shim-env.ts
+++ b/src/main/runtime/claude-agent-teams-shim-env.ts
@@ -47,7 +47,7 @@ export async function buildClaudeAgentTeamsLaunchPlan(args: {
   return {
     command: addClaudeTeammateModeAuto(args.command),
     env,
-    envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+    envToDelete: ['TERM_PROGRAM']
   }
 }
 
diff --git a/src/main/runtime/claude-agent-teams-tmux-dispatcher.ts b/src/main/runtime/claude-agent-teams-tmux-dispatcher.ts
index a146fff476b..98159e8725e 100644
--- a/src/main/runtime/claude-agent-teams-tmux-dispatcher.ts
+++ b/src/main/runtime/claude-agent-teams-tmux-dispatcher.ts
@@ -117,7 +117,7 @@ export class ClaudeAgentTeamsTmuxDispatcher {
       direction: splitTarget.direction,
       command: parsed.positional.join(' ') || undefined,
       env: paneEnv(team, fakePaneId),
-      envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR'],
+      envToDelete: ['TERM_PROGRAM'],
       activate: false
     })
     const pane: TeamPane = {
@@ -168,7 +168,7 @@ export class ClaudeAgentTeamsTmuxDispatcher {
       direction: pane.splitDirection ?? 'horizontal',
       command,
       env: paneEnv(team, pane.fakePaneId),
-      envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR'],
+      envToDelete: ['TERM_PROGRAM'],
       activate: false
     })
     try {
diff --git a/src/main/runtime/device-registry.ts b/src/main/runtime/device-registry.ts
index 88818b3cb1d..b5f0c7a6c8d 100644
--- a/src/main/runtime/device-registry.ts
+++ b/src/main/runtime/device-registry.ts
@@ -162,7 +162,7 @@ export class DeviceRegistry {
 
   setRelayBinding(deviceId: string, binding: RelayDeviceBinding): boolean {
     const index = this.devices.findIndex((candidate) => candidate.deviceId === deviceId)
-    if (index < 0 || binding.relayDeviceId !== deviceId) {
+    if (index === -1 || binding.relayDeviceId !== deviceId) {
       return false
     }
     const nextDevices = this.devices.map((device, candidateIndex) =>
@@ -175,7 +175,7 @@ export class DeviceRegistry {
 
   setMobilePairingConnectionMode(deviceId: string, mode: MobilePairingConnectionMode): boolean {
     const index = this.devices.findIndex((candidate) => candidate.deviceId === deviceId)
-    if (index < 0 || this.devices[index]?.scope !== 'mobile') {
+    if (index === -1 || this.devices[index]?.scope !== 'mobile') {
       return false
     }
     // Why: persist before swapping memory so a failed write does not leave a
@@ -208,7 +208,7 @@ export class DeviceRegistry {
 
   updateLastSeen(deviceId: string): void {
     const index = this.devices.findIndex((d) => d.deviceId === deviceId)
-    if (index < 0) {
+    if (index === -1) {
       return
     }
     // Why: persist before memory swap so a failed write cannot leave a scanned
@@ -230,7 +230,7 @@ export class DeviceRegistry {
    */
   updateLastSeenDeferred(deviceId: string): void {
     const index = this.devices.findIndex((d) => d.deviceId === deviceId)
-    if (index < 0) {
+    if (index === -1) {
       return
     }
     if (this.devices[index]!.lastSeenAt === 0) {
diff --git a/src/main/runtime/fetch-remote-cache.test.ts b/src/main/runtime/fetch-remote-cache.test.ts
index 14c18115636..fc2d761c059 100644
--- a/src/main/runtime/fetch-remote-cache.test.ts
+++ b/src/main/runtime/fetch-remote-cache.test.ts
@@ -66,7 +66,7 @@ function fullRemoteFetchOptions(cwd: string): { cwd: string; timeout: number } {
   return { cwd, timeout: 60_000 }
 }
 
-function mockFetchResults(results: (Promise<unknown> | unknown)[]): void {
+function mockFetchResults(results: unknown[]): void {
   let fetchIndex = 0
   gitExecFileAsyncMock.mockImplementation((argv: string[]) => {
     if (argv[0] === 'rev-parse') {
diff --git a/src/main/runtime/headless-terminal-split-layout.test.ts b/src/main/runtime/headless-terminal-split-layout.test.ts
index 000434ee3d7..0fa0d33b1c0 100644
--- a/src/main/runtime/headless-terminal-split-layout.test.ts
+++ b/src/main/runtime/headless-terminal-split-layout.test.ts
@@ -2,9 +2,27 @@ import { describe, expect, it } from 'vitest'
 import type { TerminalLayoutSnapshot } from '../../shared/types'
 import {
   buildHeadlessTerminalSplitLayout,
-  countTerminalLayoutLeaves
+  countTerminalLayoutLeaves,
+  terminalLayoutContainsLeaf
 } from './headless-terminal-split-layout'
 
+describe('terminalLayoutContainsLeaf', () => {
+  it('requires the leaf in the layout tree', () => {
+    expect(
+      terminalLayoutContainsLeaf(
+        {
+          type: 'split',
+          direction: 'vertical',
+          first: { type: 'leaf', leafId: 'leaf-a' },
+          second: { type: 'leaf', leafId: 'leaf-b' }
+        },
+        'leaf-b'
+      )
+    ).toBe(true)
+    expect(terminalLayoutContainsLeaf({ type: 'leaf', leafId: 'leaf-a' }, 'leaf-b')).toBe(false)
+  })
+})
+
 describe('buildHeadlessTerminalSplitLayout (headless split persistence)', () => {
   it('splits a single-leaf tab into a 2-leaf split tree', () => {
     const existing: TerminalLayoutSnapshot = {
@@ -84,6 +102,64 @@ describe('buildHeadlessTerminalSplitLayout (headless split persistence)', () =>
     })
   })
 
+  it('replaces the provisional admission leaf with the requested split direction', () => {
+    const next = buildHeadlessTerminalSplitLayout(
+      {
+        root: {
+          type: 'split',
+          direction: 'vertical',
+          first: { type: 'leaf', leafId: 'leaf-a' },
+          second: { type: 'leaf', leafId: 'leaf-c' }
+        },
+        activeLeafId: 'leaf-c',
+        expandedLeafId: null,
+        ptyIdsByLeafId: { 'leaf-a': 'pty-a', 'leaf-c': 'provisional-pty' }
+      },
+      { leafId: 'leaf-c', ptyId: 'pty-c', splitFromLeafId: 'leaf-a', direction: 'horizontal' }
+    )
+
+    expect(next.root).toEqual({
+      type: 'split',
+      direction: 'horizontal',
+      first: { type: 'leaf', leafId: 'leaf-a' },
+      second: { type: 'leaf', leafId: 'leaf-c' }
+    })
+    expect(next.ptyIdsByLeafId).toEqual({ 'leaf-a': 'pty-a', 'leaf-c': 'pty-c' })
+  })
+
+  it('preserves a sibling committed by a concurrent split', () => {
+    const next = buildHeadlessTerminalSplitLayout(
+      {
+        root: {
+          type: 'split',
+          direction: 'vertical',
+          first: {
+            type: 'split',
+            direction: 'horizontal',
+            first: { type: 'leaf', leafId: 'leaf-a' },
+            second: { type: 'leaf', leafId: 'leaf-b' }
+          },
+          second: { type: 'leaf', leafId: 'leaf-c' }
+        },
+        activeLeafId: 'leaf-c',
+        expandedLeafId: null,
+        ptyIdsByLeafId: {
+          'leaf-a': 'pty-a',
+          'leaf-b': 'pty-b',
+          'leaf-c': 'provisional-pty'
+        }
+      },
+      { leafId: 'leaf-c', ptyId: 'pty-c', splitFromLeafId: 'leaf-a', direction: 'vertical' }
+    )
+
+    expect(countTerminalLayoutLeaves(next.root)).toBe(3)
+    expect(next.ptyIdsByLeafId).toEqual({
+      'leaf-a': 'pty-a',
+      'leaf-b': 'pty-b',
+      'leaf-c': 'pty-c'
+    })
+  })
+
   it('does not collapse — the persisted layout keeps both leaves (regression guard)', () => {
     // Why: the reported bug was the split collapsing back to one pane. After a
     // split, a rebuild reads this persisted layout, so it MUST stay multi-leaf.
diff --git a/src/main/runtime/headless-terminal-split-layout.ts b/src/main/runtime/headless-terminal-split-layout.ts
index c3947334f77..834625f9ef3 100644
--- a/src/main/runtime/headless-terminal-split-layout.ts
+++ b/src/main/runtime/headless-terminal-split-layout.ts
@@ -1,5 +1,18 @@
 import type { TerminalLayoutSnapshot, TerminalPaneLayoutNode } from '../../shared/types'
 
+export function terminalLayoutContainsLeaf(
+  node: TerminalPaneLayoutNode | null | undefined,
+  leafId: string
+): boolean {
+  if (!node) {
+    return false
+  }
+  return node.type === 'leaf'
+    ? node.leafId === leafId
+    : terminalLayoutContainsLeaf(node.first, leafId) ||
+        terminalLayoutContainsLeaf(node.second, leafId)
+}
+
 /**
  * Insert a newly split-off leaf into a terminal tab's persisted layout tree.
  *
@@ -17,7 +30,23 @@ export function buildHeadlessTerminalSplitLayout(
     direction: 'horizontal' | 'vertical'
   }
 ): TerminalLayoutSnapshot {
-  const existingRoot: TerminalPaneLayoutNode = existing?.root ?? {
+  const removeProvisionalLeaf = (node: TerminalPaneLayoutNode): TerminalPaneLayoutNode | null => {
+    if (node.type === 'leaf') {
+      return node.leafId === args.leafId ? null : node
+    }
+    const first = removeProvisionalLeaf(node.first)
+    const second = removeProvisionalLeaf(node.second)
+    if (!first) {
+      return second
+    }
+    if (!second) {
+      return first
+    }
+    return { ...node, first, second }
+  }
+  // Why: PTY admission durably appends a fallback vertical leaf before this exact-direction commit.
+  const currentRoot = existing?.root ? removeProvisionalLeaf(existing.root) : null
+  const existingRoot: TerminalPaneLayoutNode = currentRoot ?? {
     type: 'leaf',
     leafId: args.splitFromLeafId
   }
@@ -35,13 +64,15 @@ export function buildHeadlessTerminalSplitLayout(
     }
     return { ...node, first: insertSplit(node.first), second: insertSplit(node.second) }
   }
+  const ptyIdsByLeafId = { ...existing?.ptyIdsByLeafId }
+  delete ptyIdsByLeafId[args.leafId]
   return {
     ...existing,
     root: insertSplit(existingRoot),
     activeLeafId: args.leafId,
     expandedLeafId: existing?.expandedLeafId ?? null,
     ptyIdsByLeafId: {
-      ...existing?.ptyIdsByLeafId,
+      ...ptyIdsByLeafId,
       [args.leafId]: args.ptyId
     }
   }
diff --git a/src/main/runtime/linear-save-issue.test.ts b/src/main/runtime/linear-save-issue.test.ts
index add8a54d1ab..eb8ed4093d2 100644
--- a/src/main/runtime/linear-save-issue.test.ts
+++ b/src/main/runtime/linear-save-issue.test.ts
@@ -23,7 +23,7 @@ const issue = {
 
 type SaveIssueInternals = {
   resolveLinearAssignee(input: string, teamId: string, workspaceId: string): Promise<string>
-  resolveLinearAgentState(input: string, states: unknown[]): unknown | null
+  resolveLinearAgentState(input: string, states: unknown[]): unknown
   buildLinearSaveUpdate(
     params: { labels?: string[] },
     current: typeof issue,
diff --git a/src/main/runtime/orca-runtime-emulator-folder-workspace.test.ts b/src/main/runtime/orca-runtime-emulator-folder-workspace.test.ts
new file mode 100644
index 00000000000..23f7adc4df8
--- /dev/null
+++ b/src/main/runtime/orca-runtime-emulator-folder-workspace.test.ts
@@ -0,0 +1,161 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { EmulatorSessionInfo } from '../emulator/emulator-types'
+import type { FolderWorkspace } from '../../shared/types'
+import { OrcaRuntimeService } from './orca-runtime'
+
+const FOLDER_WORKSPACE_ID = 'folder-workspace-1'
+const FOLDER_WORKSPACE_KEY = `folder:${FOLDER_WORKSPACE_ID}`
+const EMULATOR_INFO: EmulatorSessionInfo = {
+  deviceUdid: 'emulator-5554',
+  streamUrl: 'scrcpy://emulator-5554',
+  wsUrl: '',
+  streamCodec: 'h264',
+  backend: 'android'
+}
+
+function makeFolderWorkspace(): FolderWorkspace {
+  return {
+    id: FOLDER_WORKSPACE_ID,
+    projectGroupId: 'project-group-1',
+    name: 'Mobile app',
+    folderPath: '/tmp/mobile-app',
+    linkedTask: null,
+    comment: '',
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 1,
+    createdAt: 1,
+    updatedAt: 1
+  }
+}
+
+describe('RuntimeEmulatorCommands folder workspace routing', () => {
+  it.each([FOLDER_WORKSPACE_KEY, `id:${FOLDER_WORKSPACE_KEY}`])(
+    'registers and publishes an attached device for selector %s',
+    async (selector) => {
+      const bridge = {
+        acquireHelperForDevice: vi.fn(async () => ({
+          info: EMULATOR_INFO,
+          release: vi.fn(async () => {})
+        })),
+        getReusableActiveForWorktree: vi.fn(async () => null),
+        registerActiveEmulator: vi.fn(),
+        stopActiveForSwitch: vi.fn(async () => null)
+      }
+      const send = vi.fn()
+      const runtime = new OrcaRuntimeService({
+        getFolderWorkspaces: () => [makeFolderWorkspace()],
+        getAllWorktreeMeta: () => new Map(),
+        getRepo: () => null,
+        getRepos: () => [],
+        getSettings: () => ({
+          mobileEmulatorEnabled: true,
+          mobileEmulatorDefaultDeviceUdid: null,
+          androidSdkPath: null
+        })
+      } as never)
+      runtime.setEmulatorBridge(bridge as never)
+      Object.assign(runtime, {
+        getAuthoritativeWindow: () => ({ webContents: { send } })
+      })
+
+      await expect(
+        runtime.emulatorAttach({
+          device: 'emulator-5554',
+          worktree: selector,
+          focus: true
+        })
+      ).resolves.toEqual({ attached: true, info: EMULATOR_INFO })
+
+      expect(bridge.acquireHelperForDevice).toHaveBeenCalledOnce()
+      expect(bridge.registerActiveEmulator).toHaveBeenCalledWith(
+        FOLDER_WORKSPACE_KEY,
+        EMULATOR_INFO,
+        { managed: true }
+      )
+      expect(send.mock.calls).toEqual([
+        ['ui:emulatorAutoAttach', { worktreeId: FOLDER_WORKSPACE_KEY, info: EMULATOR_INFO }],
+        ['emulator:pane-focus', { worktreeId: FOLDER_WORKSPACE_KEY }]
+      ])
+    }
+  )
+
+  it.each([FOLDER_WORKSPACE_KEY, `id:${FOLDER_WORKSPACE_KEY}`])(
+    'cleans up an active emulator after selector %s is deleted',
+    async (selector) => {
+      let folderWorkspaces = [makeFolderWorkspace()]
+      const shutdownActiveManagedForWorktree = vi.fn(async () => EMULATOR_INFO.deviceUdid)
+      const runtime = new OrcaRuntimeService({
+        getFolderWorkspaces: () => folderWorkspaces,
+        getAllWorktreeMeta: () => new Map(),
+        getRepo: () => null,
+        getRepos: () => [],
+        getSettings: () => ({ androidSdkPath: null })
+      } as never)
+      runtime.setEmulatorBridge({ shutdownActiveManagedForWorktree } as never)
+
+      folderWorkspaces = []
+
+      await expect(
+        runtime.emulatorShutdown({ worktree: selector, managedOnly: true })
+      ).resolves.toEqual({ ok: true, deviceUdid: EMULATOR_INFO.deviceUdid })
+      expect(shutdownActiveManagedForWorktree).toHaveBeenCalledWith(FOLDER_WORKSPACE_KEY)
+    }
+  )
+
+  it('cleans up an attach that finishes after its folder workspace is deleted', async () => {
+    let folderWorkspaces = [makeFolderWorkspace()]
+    const release = vi.fn(async () => {})
+    let finishHelperStart:
+      | ((lease: { info: EmulatorSessionInfo; release: typeof release }) => void)
+      | undefined
+    const bridge = {
+      acquireHelperForDevice: vi.fn(
+        () =>
+          new Promise<{ info: EmulatorSessionInfo; release: typeof release }>((resolve) => {
+            finishHelperStart = resolve
+          })
+      ),
+      getReusableActiveForWorktree: vi.fn(async () => null),
+      registerActiveEmulator: vi.fn(),
+      shutdownActiveManagedForWorktree: vi.fn(async () => null),
+      stopActiveForSwitch: vi.fn(async () => null)
+    }
+    const runtime = new OrcaRuntimeService({
+      getFolderWorkspaces: () => folderWorkspaces,
+      getAllWorktreeMeta: () => new Map(),
+      getRepo: () => null,
+      getRepos: () => [],
+      getSettings: () => ({
+        mobileEmulatorEnabled: true,
+        mobileEmulatorDefaultDeviceUdid: null,
+        androidSdkPath: null
+      })
+    } as never)
+    runtime.setEmulatorBridge(bridge as never)
+    Object.assign(runtime, {
+      getAuthoritativeWindow: () => ({ webContents: { send: vi.fn() } })
+    })
+
+    const attach = runtime.emulatorAttach({
+      device: EMULATOR_INFO.deviceUdid,
+      worktree: FOLDER_WORKSPACE_KEY
+    })
+    await vi.waitFor(() => expect(bridge.acquireHelperForDevice).toHaveBeenCalledOnce())
+    folderWorkspaces = []
+    await expect(
+      runtime.emulatorShutdown({ worktree: FOLDER_WORKSPACE_KEY, managedOnly: true })
+    ).resolves.toEqual({ ok: true, deviceUdid: undefined })
+    finishHelperStart?.({ info: EMULATOR_INFO, release })
+    await expect(attach).rejects.toMatchObject({
+      code: 'emulator_no_active',
+      message: 'The workspace changed while the emulator was starting. Reattach the emulator.'
+    })
+
+    expect(bridge.registerActiveEmulator).not.toHaveBeenCalled()
+    expect(bridge.shutdownActiveManagedForWorktree).toHaveBeenCalledWith(FOLDER_WORKSPACE_KEY)
+    expect(release).toHaveBeenCalledWith({ cleanupIfUnused: true })
+  })
+})
diff --git a/src/main/runtime/orca-runtime-emulator.ts b/src/main/runtime/orca-runtime-emulator.ts
index ac67464a533..7c82980c2a3 100644
--- a/src/main/runtime/orca-runtime-emulator.ts
+++ b/src/main/runtime/orca-runtime-emulator.ts
@@ -22,7 +22,8 @@ type EmulatorHostSettings = Pick<
 // Why: dedicated file for "one surface" separation (emulator), parallel to orca-runtime-browser.ts. Keeps OrcaRuntimeService focused; emulator routing easy to scan. No max-lines disable (split further if grows; per AGENTS + plan Phase 3).
 export type RuntimeEmulatorCommandHost = {
   getEmulatorBridge(): EmulatorBridge | null
-  resolveWorktreeSelector(selector: string): Promise<{ id: string }>
+  resolveEmulatorWorkspaceId(selector: string): Promise<string>
+  resolveEmulatorCleanupWorkspaceId(selector: string): Promise<string>
   getAuthoritativeWindow(): BrowserWindow
   getSettings(): EmulatorHostSettings
 }
@@ -157,13 +158,36 @@ export class RuntimeEmulatorCommands {
       // slow-to-boot Android emulator alive for instant switch-back.
       await bridge.stopActiveForSwitch(worktreeId)
     }
-    const info = await bridge.startHelperForDevice(device)
+    const lease = await bridge.acquireHelperForDevice(device)
+    const { info } = lease
     if (worktreeId) {
+      try {
+        const currentWorktreeId = await this.resolveWorktreeId(params.worktree)
+        if (currentWorktreeId !== worktreeId) {
+          throw new EmulatorError(
+            'emulator_no_active',
+            'The workspace changed while the emulator was starting. Reattach the emulator.'
+          )
+        }
+      } catch (error) {
+        // Why: the workspace can disappear while a slow Android device boots.
+        await lease.release({ cleanupIfUnused: true }).catch(() => {})
+        if (error instanceof Error && error.message === 'selector_not_found') {
+          throw new EmulatorError(
+            'emulator_no_active',
+            'The workspace changed while the emulator was starting. Reattach the emulator.'
+          )
+        }
+        throw error
+      }
       bridge.registerActiveEmulator(worktreeId, info, { managed: true })
+      await lease.release()
       this.notifyRendererEmulatorAutoAttach(worktreeId, info)
       if (params.focus) {
         this.notifyRendererEmulatorPaneFocus(worktreeId)
       }
+    } else {
+      await lease.release()
     }
     // Default: no auto steal (mirror browser tab create/switch). --focus sends emulator:pane-focus only when requested.
     return { attached: true, info }
@@ -176,7 +200,7 @@ export class RuntimeEmulatorCommands {
 
   async emulatorUnregisterActive(params: { worktree?: string }): Promise<{ ok: true }> {
     const bridge = this.requireEmulatorBridge()
-    const worktreeId = await this.resolveWorktreeId(params.worktree)
+    const worktreeId = await this.resolveCleanupWorktreeId(params.worktree)
     if (worktreeId) {
       bridge.unregisterActiveEmulator(worktreeId)
     }
@@ -203,7 +227,11 @@ export class RuntimeEmulatorCommands {
   }
 
   private async resolveWorktreeId(worktree?: string): Promise<string | undefined> {
-    return worktree ? (await this.host.resolveWorktreeSelector(worktree)).id : undefined
+    return worktree ? await this.host.resolveEmulatorWorkspaceId(worktree) : undefined
+  }
+
+  private async resolveCleanupWorktreeId(worktree?: string): Promise<string | undefined> {
+    return worktree ? await this.host.resolveEmulatorCleanupWorkspaceId(worktree) : undefined
   }
 
   async emulatorInstall(
@@ -272,7 +300,7 @@ export class RuntimeEmulatorCommands {
     worktree?: string
   }): Promise<{ ok: true; deviceUdid: string }> {
     const bridge = this.requireEmulatorBridge()
-    const worktreeId = await this.resolveWorktreeId(params.worktree)
+    const worktreeId = await this.resolveCleanupWorktreeId(params.worktree)
     const killedUdid = await bridge.kill(params.device ?? params.emulator, worktreeId)
     return { ok: true, deviceUdid: killedUdid }
   }
@@ -284,7 +312,7 @@ export class RuntimeEmulatorCommands {
     managedOnly?: boolean
   }): Promise<{ ok: true; deviceUdid?: string }> {
     const bridge = this.requireEmulatorBridge()
-    const worktreeId = await this.resolveWorktreeId(params.worktree)
+    const worktreeId = await this.resolveCleanupWorktreeId(params.worktree)
     if (params.managedOnly && worktreeId && !params.device && !params.emulator) {
       const shutdownUdid = await bridge.shutdownActiveManagedForWorktree(worktreeId)
       return { ok: true, deviceUdid: shutdownUdid ?? undefined }
diff --git a/src/main/runtime/orca-runtime-files.test.ts b/src/main/runtime/orca-runtime-files.test.ts
index ce96eddb5e0..de78d21b10b 100644
--- a/src/main/runtime/orca-runtime-files.test.ts
+++ b/src/main/runtime/orca-runtime-files.test.ts
@@ -157,6 +157,7 @@ function createRuntimeFileCommands(options?: {
   resolveTerminalContext?: ReturnType<typeof vi.fn>
   resolveTerminalFileUriHostname?: ReturnType<typeof vi.fn>
   hasRecentTerminalOutputPath?: ReturnType<typeof vi.fn>
+  hasRecentNativeChatOutputPath?: ReturnType<typeof vi.fn>
 }) {
   const store = {
     getRepo: vi.fn((_repoId?: string) => undefined as { connectionId?: string } | undefined)
@@ -192,6 +193,9 @@ function createRuntimeFileCommands(options?: {
       ? { resolveTerminalFileUriHostname: options.resolveTerminalFileUriHostname }
       : {}),
     hasRecentTerminalOutputPath: options?.hasRecentTerminalOutputPath ?? vi.fn(() => true),
+    ...(options?.hasRecentNativeChatOutputPath
+      ? { hasRecentNativeChatOutputPath: options.hasRecentNativeChatOutputPath }
+      : {}),
     resolveRuntimeGitTarget: options?.resolveRuntimeGitTarget ?? vi.fn(),
     openFile: options?.openFile ?? vi.fn(),
     ...(options?.openDiff ? { openDiff: options.openDiff } : {})
@@ -945,11 +949,18 @@ describe('RuntimeFileCommands', () => {
       )
     }
 
-    function createRemoteTerminalArtifactGrantFixture(artifactPath = '/tmp/result.json') {
-      const { commands, store } = createRuntimeFileCommands({ path: '/repo' })
+    function createRemoteTerminalArtifactGrantFixture(
+      artifactPath = '/tmp/result.json',
+      nativeChat = false
+    ) {
+      const { commands, store } = createRuntimeFileCommands({
+        path: '/repo',
+        ...(nativeChat ? { hasRecentNativeChatOutputPath: vi.fn(() => true) } : {})
+      })
       store.getRepo.mockReturnValue({ connectionId: 'ssh-1' })
       let realArtifactPath = artifactPath
-      const stat = vi.fn().mockResolvedValue({ type: 'file', size: 11, mtime: 3 })
+      let artifactStat = { type: 'file', size: 11, mtime: 3 }
+      const stat = vi.fn(async () => artifactStat)
       const readTerminalArtifact = vi
         .fn()
         .mockResolvedValue({ content: '{"ok":true}', isBinary: false })
@@ -967,10 +978,20 @@ describe('RuntimeFileCommands', () => {
         writeTerminalArtifact,
         moveArtifactTarget: (nextPath: string) => {
           realArtifactPath = nextPath
+        },
+        replaceArtifact: () => {
+          artifactStat = { type: 'file', size: 12, mtime: 4 }
         }
       }
     }
 
+    function resolveRemoteNativeChatArtifact(commands: RuntimeFileCommands, artifactPath: string) {
+      return commands.resolveTerminalPath('id:wt-1', artifactPath, null, 'client-a', null, true, {
+        tabId: 'tab-1',
+        sessionId: 'session-1'
+      })
+    }
+
     it('resolves an absolute path inside the worktree to a relative path', async () => {
       const { commands } = createRuntimeFileCommands({ path: '/repo' })
       statAsFile()
@@ -992,6 +1013,28 @@ describe('RuntimeFileCommands', () => {
       })
     })
 
+    it('keeps in-worktree resolution unchanged when chat provenance is present', async () => {
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
+      statAsFile()
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        '/repo/src/index.ts',
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(result).toMatchObject({ relativePath: 'src/index.ts', exists: true })
+      expect(hasRecentNativeChatOutputPath).not.toHaveBeenCalled()
+    })
+
     it('resolves an absolute path through a known sibling workspace', async () => {
       const sibling = {
         id: 'wt-2',
@@ -1367,9 +1410,13 @@ describe('RuntimeFileCommands', () => {
       expect(statMock).not.toHaveBeenCalled()
     })
 
-    it('does not mint an absolute terminal artifact grant without a source terminal', async () => {
+    it('keeps old-client behavior without native-chat provenance', async () => {
       const artifactPath = await tempFile('result.json', '{}')
-      const { commands } = createRuntimeFileCommands({ path: '/repo' })
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
 
       const result = await commands.resolveTerminalPath('id:wt-1', artifactPath, null, 'client-a')
 
@@ -1380,6 +1427,139 @@ describe('RuntimeFileCommands', () => {
         isDirectory: false
       })
       expect(result.openTarget).toBeUndefined()
+      expect(hasRecentNativeChatOutputPath).not.toHaveBeenCalled()
+    })
+
+    it('mints an exact-path grant for an out-of-worktree path cited by native chat', async () => {
+      const artifactPath = await tempFile('chat-result.html', '<h1>Result</h1>')
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        artifactPath,
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(hasRecentNativeChatOutputPath).toHaveBeenCalledWith(
+        'wt-1',
+        { tabId: 'tab-1', sessionId: 'session-1' },
+        artifactPath,
+        artifactPath
+      )
+      expect(result).toMatchObject({
+        worktree: 'wt-1',
+        relativePath: null,
+        absolutePath: await realpath(artifactPath),
+        exists: true,
+        isDirectory: false,
+        openTarget: {
+          kind: 'absolute-file',
+          provider: 'local',
+          absolutePath: await realpath(artifactPath),
+          readOnly: true
+        }
+      })
+      const target = absoluteFileTarget(result)
+      await expect(
+        commands.writeTerminalArtifactFile(
+          'id:wt-1',
+          target.grantId,
+          target.absolutePath,
+          '<h1>Changed</h1>',
+          'client-a'
+        )
+      ).rejects.toThrow('terminal_file_grant_read_only')
+      await expect(readFile(artifactPath, 'utf8')).resolves.toBe('<h1>Result</h1>')
+    })
+
+    it('binds a cited symlink alias to its canonical read-only target', async () => {
+      const artifactPath = await tempFile('chat-target.html', '<h1>Result</h1>')
+      const citedPath = join(artifactPath, '..', 'chat-citation.html')
+      await symlink(artifactPath, citedPath)
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        citedPath,
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(hasRecentNativeChatOutputPath).toHaveBeenCalledWith(
+        'wt-1',
+        { tabId: 'tab-1', sessionId: 'session-1' },
+        citedPath,
+        citedPath
+      )
+      expect(result).toMatchObject({
+        absolutePath: await realpath(artifactPath),
+        exists: true,
+        openTarget: {
+          kind: 'absolute-file',
+          absolutePath: await realpath(artifactPath),
+          readOnly: true
+        }
+      })
+    })
+
+    it('refuses an out-of-worktree chat path without transcript provenance', async () => {
+      const artifactPath = await tempFile('uncited-result.html', '<h1>Secret</h1>')
+      const hasRecentNativeChatOutputPath = vi.fn(() => false)
+      const { commands } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        artifactPath,
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(result).toMatchObject({ relativePath: null, exists: false })
+      expect(result.openTarget).toBeUndefined()
+      expect(hasRecentNativeChatOutputPath).toHaveBeenCalledTimes(1)
+    })
+
+    it('refuses native-chat tilde paths when the workspace runs in WSL', async () => {
+      Object.defineProperty(process, 'platform', { configurable: true, value: 'win32' })
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands } = createRuntimeFileCommands({
+        path: String.raw`\\wsl.localhost\Ubuntu\work\repo`,
+        hasRecentNativeChatOutputPath
+      })
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        '~/.ssh/config',
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(result).toMatchObject({ relativePath: null, absolutePath: null, exists: false })
+      expect(hasRecentNativeChatOutputPath).not.toHaveBeenCalled()
     })
 
     it('does not mint an absolute terminal artifact grant for an unobserved path', async () => {
@@ -2213,6 +2393,69 @@ describe('RuntimeFileCommands', () => {
       expect(writeTerminalArtifact).toHaveBeenCalled()
     })
 
+    it('reads a remote non-temp artifact cited by native chat', async () => {
+      const artifactPath = '/home/me/report.json'
+      const { commands, readTerminalArtifact } = createRemoteTerminalArtifactGrantFixture(
+        artifactPath,
+        true
+      )
+      const result = await resolveRemoteNativeChatArtifact(commands, artifactPath)
+      const target = absoluteFileTarget(result)
+
+      await expect(
+        commands.readTerminalArtifactFile(
+          'id:wt-1',
+          target.grantId,
+          target.absolutePath,
+          'client-a'
+        )
+      ).resolves.toMatchObject({ content: '{"ok":true}' })
+      expect(readTerminalArtifact).toHaveBeenCalledWith(
+        artifactPath,
+        expect.objectContaining({ expectedRealPath: artifactPath })
+      )
+    })
+
+    it('rejects a retargeted remote native-chat artifact grant', async () => {
+      const artifactPath = '/home/me/report.json'
+      const { commands, readTerminalArtifact, moveArtifactTarget } =
+        createRemoteTerminalArtifactGrantFixture(artifactPath, true)
+      const result = await resolveRemoteNativeChatArtifact(commands, artifactPath)
+      const target = absoluteFileTarget(result)
+
+      moveArtifactTarget('/home/me/private.json')
+
+      await expect(
+        commands.readTerminalArtifactFile(
+          'id:wt-1',
+          target.grantId,
+          target.absolutePath,
+          'client-a'
+        )
+      ).rejects.toThrow('terminal_file_grant_stale')
+      expect(readTerminalArtifact).not.toHaveBeenCalled()
+    })
+
+    it('rejects a replaced remote native-chat artifact grant', async () => {
+      const artifactPath = '/home/me/report.json'
+      const { commands, readTerminalArtifact, replaceArtifact } =
+        createRemoteTerminalArtifactGrantFixture(artifactPath, true)
+      const result = await resolveRemoteNativeChatArtifact(commands, artifactPath)
+      const target = absoluteFileTarget(result)
+
+      replaceArtifact()
+
+      await expect(
+        commands.readTerminalArtifactFile(
+          'id:wt-1',
+          target.grantId,
+          target.absolutePath,
+          'client-a'
+        )
+      ).rejects.toThrow('terminal_file_grant_stale')
+      expect(readTerminalArtifact).not.toHaveBeenCalled()
+    })
+
     it('rejects remote terminal artifact reads when a grant no longer resolves to the granted path', async () => {
       const { commands, readTerminalArtifact, moveArtifactTarget } =
         createRemoteTerminalArtifactGrantFixture()
@@ -2294,6 +2537,28 @@ describe('RuntimeFileCommands', () => {
       expect(stat).not.toHaveBeenCalled()
     })
 
+    it('still refuses a native-chat ~/ path on a remote worktree', async () => {
+      const hasRecentNativeChatOutputPath = vi.fn(() => true)
+      const { commands, store } = createRuntimeFileCommands({
+        path: '/repo',
+        hasRecentNativeChatOutputPath
+      })
+      store.getRepo.mockReturnValue({ connectionId: 'ssh-1' })
+
+      const result = await commands.resolveTerminalPath(
+        'id:wt-1',
+        '~/notes.md',
+        null,
+        'client-a',
+        null,
+        true,
+        { tabId: 'tab-1', sessionId: 'session-1' }
+      )
+
+      expect(result).toMatchObject({ relativePath: null, exists: false })
+      expect(hasRecentNativeChatOutputPath).not.toHaveBeenCalled()
+    })
+
     it('reports a missing remote file as not existing', async () => {
       const { commands, store } = createRuntimeFileCommands({ path: '/repo' })
       store.getRepo.mockReturnValue({ connectionId: 'ssh-1' })
diff --git a/src/main/runtime/orca-runtime-files.ts b/src/main/runtime/orca-runtime-files.ts
index f85bff8abde..fd8f76796a6 100644
--- a/src/main/runtime/orca-runtime-files.ts
+++ b/src/main/runtime/orca-runtime-files.ts
@@ -45,6 +45,7 @@ import type {
   RuntimeFileReadChunkResult,
   RuntimeFilePreviewResult,
   RuntimeFileReadResult,
+  RuntimeNativeChatFileContext,
   RuntimeTerminalPathResolution
 } from '../../shared/runtime-types'
 import {
@@ -183,6 +184,8 @@ type TerminalFileGrant = {
   clientId?: string
   expiresAt: number
   statIdentity: string | null
+  readOnly: boolean
+  provenance: 'terminal-output' | 'native-chat'
   expiryTimer?: ReturnType<typeof setTimeout>
 }
 
@@ -524,6 +527,12 @@ export type RuntimeFileCommandHost = {
     pathText: string,
     absolutePath: string
   ): boolean | Promise<boolean>
+  hasRecentNativeChatOutputPath?(
+    worktreeId: string,
+    context: RuntimeNativeChatFileContext,
+    pathText: string,
+    absolutePath: string
+  ): boolean | Promise<boolean>
   resolveRuntimeGitTarget(
     selector: string
   ): Promise<{ worktree: ResolvedRuntimeFileWorktree; connectionId?: string }>
@@ -726,7 +735,8 @@ export class RuntimeFileCommands {
     cwd?: string | null,
     clientId?: string,
     terminalHandle?: string | null,
-    crossWorkspace?: boolean
+    crossWorkspace?: boolean,
+    nativeChatContext?: RuntimeNativeChatFileContext | null
   ): Promise<RuntimeTerminalPathResolution> {
     const store = this.host.requireStore()
     const target = await this.host.resolveRuntimeFileTarget(worktreeSelector)
@@ -750,9 +760,9 @@ export class RuntimeFileCommands {
       isDirectory: false
     }
 
-    // Why: remote home is unknown (only local os.homedir), so a tapped ~/… on a remote worktree is not-openable, not guessed.
+    // Why: SSH/WSL homes are unknown here; native-chat grants must not expand their ~/… paths against the local host home.
     const isTilde = pathText.startsWith('~/') || pathText.startsWith('~\\')
-    if (isTilde && connectionId) {
+    if (isTilde && (connectionId || (nativeChatContext && parseWslPath(worktree.path)))) {
       return empty
     }
     const expanded = isTilde ? resolveRuntimePath(homedir(), pathText.slice(2)) : pathText
@@ -802,6 +812,26 @@ export class RuntimeFileCommands {
         }
       }
 
+      if (
+        nativeChatContext &&
+        (await this.host.hasRecentNativeChatOutputPath?.(
+          worktree.id,
+          nativeChatContext,
+          pathText,
+          absolutePath
+        ))
+      ) {
+        const artifactPath = await this.resolveNativeChatArtifactPath(absolutePath, connectionId)
+        return await this.resolveAbsoluteFileGrant({
+          worktreeId: worktree.id,
+          artifactPath,
+          connectionId,
+          clientId,
+          readOnly: true,
+          provenance: 'native-chat'
+        })
+      }
+
       // Why: mobile taps may hit agent artifacts outside the worktree; grant the exact path, not arbitrary absolute paths.
       if (!normalizedTerminalHandle || !terminalCwd) {
         return { ...empty, relativePath, absolutePath }
@@ -831,38 +861,13 @@ export class RuntimeFileCommands {
       ) {
         return { ...empty, relativePath, absolutePath }
       }
-      const stats = connectionId
-        ? await this.statRemoteTerminalPath(artifactPath, connectionId)
-        : await this.statLocalTerminalPath(artifactPath)
-      const isDirectory = stats.isDirectory()
-      if (!isDirectory && isTerminalArtifactHardLinked(stats)) {
-        return { ...empty, relativePath, absolutePath }
-      }
-      const grant = isDirectory
-        ? null
-        : this.createTerminalFileGrant({
-            worktreeId: worktree.id,
-            absolutePath: artifactPath,
-            provider: connectionId ? 'ssh' : 'local',
-            connectionId,
-            clientId,
-            stats
-          })
-      return {
-        worktree: worktree.id,
-        relativePath: null,
-        absolutePath: artifactPath,
-        exists: true,
-        isDirectory,
-        openTarget: grant
-          ? {
-              kind: 'absolute-file',
-              provider: grant.provider,
-              absolutePath: artifactPath,
-              grantId: grant.id
-            }
-          : undefined
-      }
+      return await this.resolveAbsoluteFileGrant({
+        worktreeId: worktree.id,
+        artifactPath,
+        rejectedAbsolutePath: absolutePath,
+        connectionId,
+        clientId
+      })
     } catch (error) {
       // Report genuine not-found as missing; let transport/permission errors surface so remote taps aren't all reported missing.
       if (
@@ -909,6 +914,72 @@ export class RuntimeFileCommands {
     return resolveAllowedLocalTerminalArtifactPath(args.absolutePath, args.worktreePath)
   }
 
+  private async resolveNativeChatArtifactPath(
+    absolutePath: string,
+    connectionId?: string
+  ): Promise<string> {
+    if (!connectionId) {
+      return canonicalPathForArtifactComparison(absolutePath)
+    }
+    const provider = getSshFilesystemProvider(connectionId)
+    if (!provider) {
+      throw new Error(SSH_FILESYSTEM_PROVIDER_UNAVAILABLE_MESSAGE)
+    }
+    return provider.realpath(absolutePath)
+  }
+
+  private async resolveAbsoluteFileGrant(args: {
+    worktreeId: string
+    artifactPath: string
+    rejectedAbsolutePath?: string
+    connectionId?: string
+    clientId?: string
+    readOnly?: boolean
+    provenance?: TerminalFileGrant['provenance']
+  }): Promise<RuntimeTerminalPathResolution> {
+    const stats = args.connectionId
+      ? await this.statRemoteTerminalPath(args.artifactPath, args.connectionId)
+      : await this.statLocalTerminalPath(args.artifactPath)
+    const isDirectory = stats.isDirectory()
+    if (!isDirectory && isTerminalArtifactHardLinked(stats)) {
+      return {
+        worktree: args.worktreeId,
+        relativePath: null,
+        absolutePath: args.rejectedAbsolutePath ?? args.artifactPath,
+        exists: false,
+        isDirectory: false
+      }
+    }
+    const grant = isDirectory
+      ? null
+      : this.createTerminalFileGrant({
+          worktreeId: args.worktreeId,
+          absolutePath: args.artifactPath,
+          provider: args.connectionId ? 'ssh' : 'local',
+          connectionId: args.connectionId,
+          clientId: args.clientId,
+          readOnly: args.readOnly === true,
+          provenance: args.provenance ?? 'terminal-output',
+          stats
+        })
+    return {
+      worktree: args.worktreeId,
+      relativePath: null,
+      absolutePath: args.artifactPath,
+      exists: true,
+      isDirectory,
+      openTarget: grant
+        ? {
+            kind: 'absolute-file',
+            provider: grant.provider,
+            absolutePath: args.artifactPath,
+            grantId: grant.id,
+            ...(grant.readOnly ? { readOnly: true } : {})
+          }
+        : undefined
+    }
+  }
+
   private async resolveAllowedRemoteTerminalArtifactPath(
     absolutePath: string,
     connectionId: string
@@ -953,6 +1024,8 @@ export class RuntimeFileCommands {
     provider: 'local' | 'ssh'
     connectionId?: string
     clientId?: string
+    readOnly?: boolean
+    provenance: TerminalFileGrant['provenance']
     stats: RuntimeFileStatLike
   }): TerminalFileGrant {
     assertTerminalArtifactNotHardLinked(args.stats)
@@ -964,7 +1037,9 @@ export class RuntimeFileCommands {
       ...(args.connectionId ? { connectionId: args.connectionId } : {}),
       ...(args.clientId ? { clientId: args.clientId } : {}),
       expiresAt: Date.now() + TERMINAL_FILE_GRANT_TTL_MS,
-      statIdentity: terminalFileStatIdentity(args.stats)
+      statIdentity: terminalFileStatIdentity(args.stats),
+      readOnly: args.readOnly === true,
+      provenance: args.provenance
     }
     this.terminalFileGrants.set(grant.id, grant)
     this.scheduleTerminalFileGrantExpiry(grant)
@@ -1129,6 +1204,9 @@ export class RuntimeFileCommands {
       absolutePath,
       clientId
     )
+    if (grant.readOnly) {
+      throw new Error('terminal_file_grant_read_only')
+    }
     if (isMobileBinaryPath(grant.absolutePath)) {
       throw new Error('binary_file')
     }
@@ -1280,12 +1358,15 @@ export class RuntimeFileCommands {
     if (!provider) {
       throw new Error(SSH_FILESYSTEM_PROVIDER_UNAVAILABLE_MESSAGE)
     }
-    const allowedPath = await this.resolveAllowedRemoteTerminalArtifactPath(
-      grant.absolutePath,
-      grant.connectionId
-    )
-    // Why: relay I/O follows symlinks, so re-canonicalize a remote temp-artifact grant after the process can mutate it.
-    if (allowedPath !== grant.absolutePath) {
+    const canonicalPath =
+      grant.provenance === 'native-chat'
+        ? await provider.realpath(grant.absolutePath)
+        : await this.resolveAllowedRemoteTerminalArtifactPath(
+            grant.absolutePath,
+            grant.connectionId
+          )
+    // Why: relay I/O follows symlinks, so re-canonicalize after the remote process can mutate the path.
+    if (canonicalPath !== grant.absolutePath) {
       throw new Error('terminal_file_grant_stale')
     }
     return provider
diff --git a/src/main/runtime/orca-runtime-git.test.ts b/src/main/runtime/orca-runtime-git.test.ts
index fcde47d5a16..68c6ff798c9 100644
--- a/src/main/runtime/orca-runtime-git.test.ts
+++ b/src/main/runtime/orca-runtime-git.test.ts
@@ -318,8 +318,7 @@ describe('RuntimeGitCommands', () => {
       getRuntimeSettings: () =>
         ({
           commitMessageAi: { enabled: true, agentId: 'codex' },
-          agentCmdOverrides: {},
-          enableGitHubAttribution: false
+          agentCmdOverrides: {}
         }) as GlobalSettings,
       getCommitMessageAgentEnvironment: () => ({
         prepareForCodexLaunch: () => '/managed/codex-home'
@@ -374,8 +373,7 @@ describe('RuntimeGitCommands', () => {
       getRuntimeSettings: () =>
         ({
           commitMessageAi: { enabled: true, agentId: 'codex' },
-          agentCmdOverrides: {},
-          enableGitHubAttribution: false
+          agentCmdOverrides: {}
         }) as GlobalSettings,
       getCommitMessageAgentEnvironment: () => ({
         prepareForCodexLaunch
diff --git a/src/main/runtime/orca-runtime-git.ts b/src/main/runtime/orca-runtime-git.ts
index 022b53ac948..67812240e43 100644
--- a/src/main/runtime/orca-runtime-git.ts
+++ b/src/main/runtime/orca-runtime-git.ts
@@ -90,10 +90,7 @@ import type { HostedReviewProvider } from '../../shared/hosted-review'
 
 export type ResolvedRuntimeGitWorktree = Worktree & { git: GitWorktreeInfo }
 type RuntimeCommitMessageSettingsOverride = Partial<
-  Pick<
-    GlobalSettings,
-    'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides' | 'enableGitHubAttribution'
-  >
+  Pick<GlobalSettings, 'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides'>
 > & {
   commitMessageDiscoveryHostKey?: string
   sourceControlAiResolvedParams?: ResolvedSourceControlAiGenerationParams
diff --git a/src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts b/src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts
new file mode 100644
index 00000000000..06a5f1cfcd0
--- /dev/null
+++ b/src/main/runtime/orca-runtime-process-incarnation-liveness.test.ts
@@ -0,0 +1,89 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { PtyProcessInfo } from '../providers/pty-process-info'
+import { OrcaRuntimeService } from './orca-runtime'
+
+const SSH_SCOPE = JSON.stringify({ kind: 'ssh', targetId: 'ssh-1' })
+const PROCESS_INCARNATION = 'remote:ssh-1:pty-1:inc-1'
+
+function runtimeWithInventory(
+  listProcesses: (connectionId?: string | null) => Promise<PtyProcessInfo[]>
+): OrcaRuntimeService {
+  const runtime = new OrcaRuntimeService()
+  runtime.setPtyController({
+    write: () => true,
+    kill: () => true,
+    getForegroundProcess: async () => null,
+    listProcesses
+  })
+  return runtime
+}
+
+describe('terminal process incarnation liveness', () => {
+  it('classifies only an exact incarnation as live on its owning provider', async () => {
+    const listProcesses = vi.fn().mockResolvedValue([
+      {
+        id: 'remote:ssh-1:pty-1',
+        incarnationId: 'inc-1',
+        cwd: '',
+        title: 'worker'
+      }
+    ])
+    const runtime = runtimeWithInventory(listProcesses)
+
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, SSH_SCOPE)
+    ).resolves.toBe('live')
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness('remote:ssh-1:pty-1:inc-old', SSH_SCOPE)
+    ).resolves.toBe('dead')
+    expect(listProcesses).toHaveBeenNthCalledWith(1, 'ssh-1')
+    expect(listProcesses).toHaveBeenNthCalledWith(2, 'ssh-1')
+  })
+
+  it('keeps missing or malformed identity and unavailable inventory unknown', async () => {
+    const listProcesses = vi
+      .fn()
+      .mockResolvedValueOnce([{ id: 'remote:ssh-1:pty-1', cwd: '', title: 'worker' }])
+      .mockResolvedValueOnce([
+        { id: 'remote:ssh-1:pty-1', incarnationId: ' inc-1 ', cwd: '', title: 'worker' }
+      ])
+      .mockRejectedValueOnce(new Error('provider unavailable'))
+    const runtime = runtimeWithInventory(listProcesses)
+
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, SSH_SCOPE)
+    ).resolves.toBe('unknown')
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, SSH_SCOPE)
+    ).resolves.toBe('unknown')
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, SSH_SCOPE)
+    ).resolves.toBe('unknown')
+  })
+
+  it('does not inspect an unproven host scope', async () => {
+    const listProcesses = vi.fn().mockResolvedValue([])
+    const runtime = runtimeWithInventory(listProcesses)
+
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, null)
+    ).resolves.toBe('unknown')
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness(PROCESS_INCARNATION, '{"kind":"ssh"}')
+    ).resolves.toBe('unknown')
+    expect(listProcesses).not.toHaveBeenCalled()
+  })
+
+  it.each([
+    [{ kind: 'local', hostId: 'local' }, null],
+    [{ kind: 'wsl', hostId: 'local', distro: 'Ubuntu' }, null]
+  ] as const)('uses the local provider inventory for %s scope', async (scope, connectionId) => {
+    const listProcesses = vi.fn().mockResolvedValue([])
+    const runtime = runtimeWithInventory(listProcesses)
+
+    await expect(
+      runtime.inspectTerminalProcessIncarnationLiveness('local-pty:inc-1', JSON.stringify(scope))
+    ).resolves.toBe('dead')
+    expect(listProcesses).toHaveBeenCalledWith(connectionId)
+  })
+})
diff --git a/src/main/runtime/orca-runtime-terminal-split-authority.test.ts b/src/main/runtime/orca-runtime-terminal-split-authority.test.ts
new file mode 100644
index 00000000000..3aa6ae47603
--- /dev/null
+++ b/src/main/runtime/orca-runtime-terminal-split-authority.test.ts
@@ -0,0 +1,378 @@
+import { describe, expect, it, vi } from 'vitest'
+import { getDefaultWorkspaceSession } from '../../shared/constants'
+import type { RuntimeMobileSessionTabsSnapshot } from '../../shared/runtime-types'
+import type { TerminalLayoutSnapshot, WorkspaceSessionState } from '../../shared/types'
+import { makePaneKey } from '../../shared/stable-pane-id'
+import { OrcaRuntimeService } from './orca-runtime'
+
+const REPO_ID = 'repo-1'
+const WORKTREE_ID = `${REPO_ID}::/workspace`
+const TAB_ID = 'tab-remote'
+const SOURCE_LEAF_ID = '11111111-1111-4111-8111-111111111111'
+const SOURCE_PTY_ID = 'pty-source'
+const SPLIT_PTY_ID = 'pty-split'
+
+function sourceLayout(): TerminalLayoutSnapshot {
+  return {
+    root: { type: 'leaf', leafId: SOURCE_LEAF_ID },
+    activeLeafId: SOURCE_LEAF_ID,
+    expandedLeafId: null,
+    ptyIdsByLeafId: { [SOURCE_LEAF_ID]: SOURCE_PTY_ID }
+  }
+}
+
+function persistedSession(includeSource = true): WorkspaceSessionState {
+  return {
+    ...getDefaultWorkspaceSession(),
+    tabsByWorktree: includeSource
+      ? {
+          [WORKTREE_ID]: [
+            {
+              id: TAB_ID,
+              ptyId: SOURCE_PTY_ID,
+              worktreeId: WORKTREE_ID,
+              title: 'Remote terminal',
+              customTitle: null,
+              color: null,
+              sortOrder: 0,
+              createdAt: 1
+            }
+          ]
+        }
+      : {},
+    terminalLayoutsByTabId: includeSource ? { [TAB_ID]: sourceLayout() } : {}
+  }
+}
+
+function remoteSnapshot(): RuntimeMobileSessionTabsSnapshot {
+  const layout = sourceLayout()
+  return {
+    worktree: WORKTREE_ID,
+    publicationEpoch: 'remote-viewer',
+    snapshotVersion: 1,
+    activeGroupId: 'group-1',
+    activeTabId: `${TAB_ID}::${SOURCE_LEAF_ID}`,
+    activeTabType: 'terminal',
+    tabGroups: [{ id: 'group-1', activeTabId: TAB_ID, tabOrder: [TAB_ID] }],
+    tabs: [
+      {
+        type: 'terminal',
+        id: `${TAB_ID}::${SOURCE_LEAF_ID}`,
+        parentTabId: TAB_ID,
+        leafId: SOURCE_LEAF_ID,
+        ptyId: SOURCE_PTY_ID,
+        title: 'Remote terminal',
+        parentLayout: layout,
+        isActive: true
+      }
+    ]
+  }
+}
+
+function createHarness(
+  includeSource = true,
+  options: {
+    connectionId?: string | null
+    deferReveal?: boolean
+    deferSpawn?: boolean
+    includePairedSnapshot?: boolean
+    rendererMounted?: boolean
+    sourceIncarnationId?: string
+    stopAndWaitResult?: boolean
+  } = {}
+) {
+  let session = persistedSession(includeSource)
+  const connectionId = options.connectionId ?? null
+  const ownerHostId = connectionId ? `ssh:${connectionId}` : 'local'
+  const requestedSessionHostIds: (string | undefined)[] = []
+  const repo = {
+    id: REPO_ID,
+    path: '/workspace',
+    displayName: 'repo',
+    badgeColor: 'blue',
+    addedAt: 1,
+    ...(connectionId ? { connectionId } : {})
+  }
+  const store = {
+    getRepos: () => [repo],
+    getRepo: (id: string) => (id === REPO_ID ? repo : undefined),
+    getWorkspaceSession: (hostId?: string) => {
+      requestedSessionHostIds.push(hostId)
+      return hostId === undefined || hostId === ownerHostId ? session : getDefaultWorkspaceSession()
+    },
+    setWorkspaceSession: (next: WorkspaceSessionState) => {
+      session = next
+    },
+    persistPtyBinding: () => true
+  }
+  let resolveSpawn: ((result: { id: string }) => void) | undefined
+  const spawn = options.deferSpawn
+    ? vi.fn(
+        () =>
+          new Promise<{ id: string }>((resolve) => {
+            resolveSpawn = resolve
+          })
+      )
+    : vi.fn(async () => ({ id: SPLIT_PTY_ID }))
+  const kill = vi.fn(() => true)
+  const retireRejectedPty = vi.fn()
+  const stopAndWait = vi.fn(async () => options.stopAndWaitResult ?? true)
+  let resolveReveal: ((result: { tabId: string }) => void) | undefined
+  const revealTerminalSession = options.deferReveal
+    ? vi.fn(
+        () =>
+          new Promise<{ tabId: string }>((resolve) => {
+            resolveReveal = resolve
+          })
+      )
+    : vi.fn().mockRejectedValue(new Error(`Terminal tab ${TAB_ID} not found`))
+  const runtime = new OrcaRuntimeService(store as never)
+  Object.assign(runtime, {
+    resolveTerminalWorkspaceLaunchScope: vi.fn(async () => ({
+      id: WORKTREE_ID,
+      path: '/workspace',
+      connectionId,
+      repo,
+      folderWorkspace: null
+    }))
+  })
+  runtime.setPtyController({
+    spawn,
+    write: () => true,
+    kill,
+    retireRejectedPty,
+    ...(options.stopAndWaitResult !== undefined ? { stopAndWait } : {}),
+    getForegroundProcess: async () => null
+  })
+  runtime.setNotifier({ revealTerminalSession } as never)
+  runtime.syncWindowGraph(1, {
+    tabs:
+      includeSource && options.rendererMounted
+        ? [
+            {
+              tabId: TAB_ID,
+              worktreeId: WORKTREE_ID,
+              title: 'Restored terminal',
+              activeLeafId: SOURCE_LEAF_ID,
+              layout: { type: 'leaf', leafId: SOURCE_LEAF_ID } as const
+            }
+          ]
+        : [],
+    leaves:
+      includeSource && options.rendererMounted
+        ? [
+            {
+              tabId: TAB_ID,
+              worktreeId: WORKTREE_ID,
+              leafId: SOURCE_LEAF_ID,
+              paneRuntimeId: 1,
+              ptyId: SOURCE_PTY_ID
+            }
+          ]
+        : [],
+    mobileSessionTabs: (options.includePairedSnapshot ?? includeSource) ? [remoteSnapshot()] : []
+  })
+  runtime.registerPty(SOURCE_PTY_ID, WORKTREE_ID, connectionId, {
+    tabId: TAB_ID,
+    leafId: SOURCE_LEAF_ID,
+    ...(options.sourceIncarnationId ? { incarnationId: options.sourceIncarnationId } : {})
+  })
+  const internals = runtime as unknown as {
+    issuePtyHandle: (pty: unknown) => string
+    mobileSessionTabsByWorktree: Map<string, RuntimeMobileSessionTabsSnapshot>
+    ptysById: Map<string, unknown>
+  }
+  const handle = internals.issuePtyHandle(internals.ptysById.get(SOURCE_PTY_ID))
+  return {
+    runtime,
+    handle,
+    spawn,
+    kill,
+    retireRejectedPty,
+    stopAndWait,
+    revealTerminalSession,
+    getSession: () => session,
+    getSnapshot: () => internals.mobileSessionTabsByWorktree.get(WORKTREE_ID),
+    requestedSessionHostIds,
+    replaceSourceIncarnation: (incarnationId: string) =>
+      runtime.registerPty(SOURCE_PTY_ID, WORKTREE_ID, connectionId, {
+        tabId: TAB_ID,
+        leafId: SOURCE_LEAF_ID,
+        incarnationId
+      }),
+    replacePersistedSourceIncarnation: (incarnationId: string) => {
+      session = {
+        ...session,
+        terminalPtyIncarnationsByPaneKey: {
+          ...session.terminalPtyIncarnationsByPaneKey,
+          [makePaneKey(TAB_ID, SOURCE_LEAF_ID)]: incarnationId
+        }
+      }
+    },
+    resolveReveal: () => resolveReveal?.({ tabId: TAB_ID }),
+    resolveSpawn: () => resolveSpawn?.({ id: SPLIT_PTY_ID })
+  }
+}
+
+describe('remote runtime terminal split authority', () => {
+  it('splits a persisted tab without consulting an unmounted host renderer', async () => {
+    const harness = createHarness()
+
+    const outcome = await harness.runtime
+      .splitTerminal(harness.handle, { direction: 'vertical' })
+      .then((split) => ({ ok: true as const, split }))
+      .catch((error: unknown) => ({ ok: false as const, error }))
+
+    expect.soft(outcome).toMatchObject({
+      ok: true,
+      split: { tabId: TAB_ID, handle: expect.stringMatching(/^term_/) }
+    })
+    expect.soft(harness.spawn).toHaveBeenCalledTimes(1)
+    expect.soft(harness.kill).not.toHaveBeenCalled()
+    expect.soft(harness.revealTerminalSession).not.toHaveBeenCalled()
+    const persistedLayout = harness.getSession().terminalLayoutsByTabId[TAB_ID]
+    expect(persistedLayout).toMatchObject({
+      root: { type: 'split', direction: 'vertical' },
+      ptyIdsByLeafId: {
+        [SOURCE_LEAF_ID]: SOURCE_PTY_ID
+      }
+    })
+    expect(Object.values(persistedLayout!.ptyIdsByLeafId!)).toContain(SPLIT_PTY_ID)
+    const siblingSurfaces = harness
+      .getSnapshot()!
+      .tabs.filter(
+        (tab): tab is Extract<typeof tab, { type: 'terminal' }> =>
+          tab.type === 'terminal' && tab.parentTabId === TAB_ID
+      )
+    expect(siblingSurfaces).toHaveLength(2)
+    expect(siblingSurfaces.every((tab) => tab.parentLayout?.root?.type === 'split')).toBe(true)
+  })
+
+  it('rejects an unowned split source before spawning a PTY', async () => {
+    const harness = createHarness(false)
+
+    const outcome = await harness.runtime
+      .splitTerminal(harness.handle, { direction: 'vertical' })
+      .then(() => 'resolved')
+      .catch((error: unknown) => (error instanceof Error ? error.message : String(error)))
+
+    expect.soft(outcome).toBe('terminal_split_source_not_found')
+    expect.soft(harness.spawn).not.toHaveBeenCalled()
+    expect.soft(harness.kill).not.toHaveBeenCalled()
+    expect.soft(harness.revealTerminalSession).not.toHaveBeenCalled()
+  })
+
+  it.each([
+    { label: 'local', connectionId: null, expectedHostId: 'local' },
+    { label: 'SSH', connectionId: 'ssh-1', expectedHostId: 'ssh:ssh-1' }
+  ])(
+    'rejects a same-ID $label source replacement when restored persistence lacks an incarnation',
+    async ({ connectionId, expectedHostId }) => {
+      const harness = createHarness(true, {
+        connectionId,
+        deferSpawn: true,
+        includePairedSnapshot: false,
+        rendererMounted: true,
+        sourceIncarnationId: 'source-before'
+      })
+
+      const split = harness.runtime.splitTerminal(harness.handle, { direction: 'vertical' })
+      await vi.waitFor(() => expect(harness.spawn).toHaveBeenCalledOnce())
+
+      expect(
+        harness.getSession().terminalPtyIncarnationsByPaneKey?.[makePaneKey(TAB_ID, SOURCE_LEAF_ID)]
+      ).toBeUndefined()
+      expect(harness.spawn).toHaveBeenCalledWith(
+        expect.objectContaining({
+          expectedSourceBinding: expect.objectContaining({ ptyId: SOURCE_PTY_ID })
+        })
+      )
+      // Why: persistence never recorded this incarnation, so sending it would make the store
+      // reject every split from a restored pane; the live id is fenced in-runtime instead.
+      expect(harness.spawn).toHaveBeenCalledWith(
+        expect.objectContaining({
+          expectedSourceBinding: expect.not.objectContaining({ incarnationId: expect.anything() })
+        })
+      )
+
+      harness.replaceSourceIncarnation('source-after')
+      harness.resolveSpawn()
+
+      await expect(split).rejects.toThrow('terminal_split_source_not_found')
+      expect(harness.kill).toHaveBeenCalledWith(SPLIT_PTY_ID)
+      expect(harness.requestedSessionHostIds).toContain(expectedHostId)
+    }
+  )
+
+  it('rejects a same-ID paired-runtime source replacement recovered without an incarnation map', async () => {
+    const harness = createHarness(true, {
+      deferSpawn: true,
+      includePairedSnapshot: true,
+      rendererMounted: false,
+      sourceIncarnationId: 'remote-before'
+    })
+
+    const split = harness.runtime.splitTerminal(harness.handle, { direction: 'horizontal' })
+    await vi.waitFor(() => expect(harness.spawn).toHaveBeenCalledOnce())
+    expect(harness.spawn).toHaveBeenCalledWith(
+      expect.objectContaining({
+        expectedSourceBinding: expect.not.objectContaining({ incarnationId: expect.anything() })
+      })
+    )
+
+    harness.replaceSourceIncarnation('remote-after')
+    harness.resolveSpawn()
+
+    await expect(split).rejects.toThrow('terminal_split_source_not_found')
+    expect(harness.kill).toHaveBeenCalledWith(SPLIT_PTY_ID)
+    expect(harness.revealTerminalSession).not.toHaveBeenCalled()
+  })
+
+  it('rejects a persisted-only source incarnation change during spawn', async () => {
+    const harness = createHarness(true, {
+      deferSpawn: true,
+      includePairedSnapshot: false,
+      stopAndWaitResult: true
+    })
+    harness.replacePersistedSourceIncarnation('persisted-before')
+
+    const split = harness.runtime.splitTerminal(harness.handle, { direction: 'horizontal' })
+    await vi.waitFor(() => expect(harness.spawn).toHaveBeenCalledOnce())
+    harness.replacePersistedSourceIncarnation('persisted-after')
+    harness.resolveSpawn()
+
+    await expect(split).rejects.toThrow('terminal_split_source_not_found')
+    expect(harness.stopAndWait).toHaveBeenCalledWith(
+      SPLIT_PTY_ID,
+      expect.objectContaining({ deadlineMs: expect.any(Number) })
+    )
+    expect(harness.kill).not.toHaveBeenCalled()
+    expect(harness.retireRejectedPty).toHaveBeenCalledWith(SPLIT_PTY_ID)
+  })
+
+  it('revalidates a projected paired-runtime source after renderer adoption', async () => {
+    const harness = createHarness(false, {
+      deferReveal: true,
+      includePairedSnapshot: true,
+      sourceIncarnationId: 'projected-before',
+      stopAndWaitResult: false
+    })
+
+    const split = harness.runtime.splitTerminal(harness.handle, { direction: 'horizontal' })
+    await vi.waitFor(() => expect(harness.revealTerminalSession).toHaveBeenCalledOnce())
+    expect(harness.spawn).toHaveBeenCalledWith(
+      expect.not.objectContaining({ expectedSourceBinding: expect.anything() })
+    )
+
+    harness.replaceSourceIncarnation('projected-after')
+    harness.resolveReveal()
+
+    await expect(split).rejects.toThrow('terminal_split_source_not_found')
+    expect(harness.stopAndWait).toHaveBeenCalledWith(
+      SPLIT_PTY_ID,
+      expect.objectContaining({ deadlineMs: expect.any(Number) })
+    )
+    expect(harness.kill).toHaveBeenCalledWith(SPLIT_PTY_ID)
+    expect(harness.retireRejectedPty).toHaveBeenCalledWith(SPLIT_PTY_ID)
+  })
+})
diff --git a/src/main/runtime/orca-runtime.test.ts b/src/main/runtime/orca-runtime.test.ts
index e5bacc5eb9e..aa68dad27ae 100644
--- a/src/main/runtime/orca-runtime.test.ts
+++ b/src/main/runtime/orca-runtime.test.ts
@@ -1525,6 +1525,7 @@ function makeRuntimeStoreWithWorkspaceSession(
             }
           }
         }
+        return true
       }
     )
   }
@@ -3324,6 +3325,37 @@ describe('OrcaRuntimeService', () => {
     expect(split.tabs.filter((tab) => tab.type === 'terminal')).toHaveLength(2)
   })
 
+  it('resolves projected split authority from the parent layout PTY binding', () => {
+    const runtime = createRuntime()
+    const tabId = 'projected-parent-tab'
+    const leafId = 'projected-leaf'
+    const ptyId = 'projected-pty'
+    const internals = runtime as unknown as {
+      mobileSessionTabsByWorktree: Map<string, unknown>
+      resolveTerminalSplitSourceAuthority: (
+        worktreeId: string,
+        tabId: string,
+        leafId: string,
+        ptyId: string
+      ) => { persisted: boolean; rendererMounted: boolean } | null
+    }
+    internals.mobileSessionTabsByWorktree.set(TEST_WORKTREE_ID, {
+      tabs: [
+        {
+          type: 'terminal',
+          parentTabId: tabId,
+          leafId,
+          ptyId: null,
+          parentLayout: { ptyIdsByLeafId: { [leafId]: ptyId } }
+        }
+      ]
+    })
+
+    expect(
+      internals.resolveTerminalSplitSourceAuthority(TEST_WORKTREE_ID, tabId, leafId, ptyId)
+    ).toMatchObject({ persisted: false, rendererMounted: false })
+  })
+
   it('keeps targeted terminal lists from adopting controller PTYs for other worktrees', async () => {
     vi.mocked(listWorktrees).mockResolvedValue([
       ...MOCK_GIT_WORKTREES,
@@ -11400,6 +11432,57 @@ describe('OrcaRuntimeService', () => {
     })
   })
 
+  it('keeps blocked prompt text authoritative over an OpenCode marker', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      spawn: vi.fn().mockResolvedValue({ id: 'pty-1' }),
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => 'opencode'
+    })
+    const leafId = '11111111-1111-4111-8111-111111111111'
+    runtime.attachWindow(1)
+    runtime.syncWindowGraph(1, {
+      tabs: [
+        {
+          tabId: 'tab-1',
+          worktreeId: TEST_WORKTREE_ID,
+          title: 'OC | Native session',
+          activeLeafId: leafId,
+          layout: null
+        }
+      ],
+      leaves: [
+        {
+          tabId: 'tab-1',
+          worktreeId: TEST_WORKTREE_ID,
+          leafId,
+          paneRuntimeId: 1,
+          ptyId: 'pty-1',
+          paneTitle: 'OC | Native session'
+        }
+      ]
+    })
+    runtime.onPtyData(
+      'pty-1',
+      'Permission required\nThis command requires permission\nAllow once\nAllow always\nReject\n',
+      123
+    )
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.getTerminalAgentStatus(terminal.handle)).resolves.toEqual({
+      handle: terminal.handle,
+      isRunningAgent: true,
+      status: 'permission'
+    })
+    await expect(
+      runtime.waitForTerminal(terminal.handle, { condition: 'tui-idle', timeoutMs: 1_000 })
+    ).resolves.toMatchObject({
+      satisfied: false,
+      blockedReason: 'codex-interactive-prompt'
+    })
+  })
+
   it('reports permission from blocked wait text over title-only working state', async () => {
     const runtime = new OrcaRuntimeService(store)
     runtime.setPtyController({
@@ -14757,6 +14840,207 @@ describe('OrcaRuntimeService', () => {
     }
   })
 
+  it('keeps a persisted split when mounted renderer adoption rejects', async () => {
+    const tabId = 'persisted-mounted-tab'
+    const ptyId = 'persisted-mounted-pty'
+    const splitPtyId = 'persisted-mounted-split-pty'
+    const { runtimeStore, getSession } = makeRuntimeStoreWithWorkspaceSession(
+      makeWorkspaceSessionWithHeadlessTerminal({
+        tabsByWorktree: {
+          [TEST_WORKTREE_ID]: [
+            {
+              id: tabId,
+              ptyId,
+              worktreeId: TEST_WORKTREE_ID,
+              title: 'Persisted terminal',
+              customTitle: null,
+              color: null,
+              sortOrder: 0,
+              createdAt: 1
+            }
+          ]
+        },
+        terminalLayoutsByTabId: {
+          [tabId]: makeHeadlessTerminalLayout({ [HEADLESS_LEAF_ID]: ptyId })
+        }
+      })
+    )
+    const revealTerminalSession = vi.fn().mockRejectedValue(new Error('renderer rejected'))
+    const kill = vi.fn(() => true)
+    let resolveSpawn!: (result: { id: string }) => void
+    const spawn = vi.fn(
+      (_args: unknown) =>
+        new Promise<{ id: string }>((resolve) => {
+          resolveSpawn = resolve
+        })
+    )
+    const runtime = new OrcaRuntimeService(runtimeStore as never)
+    runtime.setPtyController({
+      spawn,
+      write: () => true,
+      kill,
+      getForegroundProcess: async () => null
+    })
+    runtime.setNotifier({ revealTerminalSession } as never)
+    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+    runtime.registerPty(ptyId, TEST_WORKTREE_ID, null, {
+      tabId,
+      leafId: HEADLESS_LEAF_ID,
+      incarnationId: 'live-source-incarnation'
+    })
+    const internals = runtime as unknown as {
+      issuePtyHandle: (pty: unknown) => string
+      ptysById: Map<string, unknown>
+    }
+    const handle = internals.issuePtyHandle(internals.ptysById.get(ptyId))
+    const split = runtime.splitTerminal(handle, { direction: 'horizontal' })
+    await vi.waitFor(() => expect(spawn).toHaveBeenCalledOnce())
+    const splitSpawn = spawn.mock.calls[0]?.[0] as
+      | { expectedSourceBinding?: { incarnationId?: string } }
+      | undefined
+    // Why: persistence never recorded an incarnation for this pane, so sending the live-only id
+    // would make the store's fence reject every split from a restored session.
+    expect(splitSpawn?.expectedSourceBinding).not.toHaveProperty('incarnationId')
+
+    runtime.syncWindowGraph(1, {
+      tabs: [
+        {
+          tabId,
+          worktreeId: TEST_WORKTREE_ID,
+          title: 'Persisted terminal',
+          activeLeafId: HEADLESS_LEAF_ID,
+          layout: { type: 'leaf', leafId: HEADLESS_LEAF_ID }
+        }
+      ],
+      leaves: [
+        {
+          tabId,
+          worktreeId: TEST_WORKTREE_ID,
+          leafId: HEADLESS_LEAF_ID,
+          paneRuntimeId: 1,
+          ptyId
+        }
+      ]
+    })
+    resolveSpawn({ id: splitPtyId })
+
+    await expect(split).resolves.toMatchObject({
+      tabId,
+      handle: expect.stringMatching(/^term_/)
+    })
+
+    expect(revealTerminalSession).toHaveBeenCalledOnce()
+    expect(kill).not.toHaveBeenCalled()
+    expect(getSession().terminalLayoutsByTabId[tabId]?.root).toMatchObject({
+      type: 'split',
+      direction: 'horizontal'
+    })
+  })
+
+  it('rejects a persisted split closed during spawn without recreating its tab', async () => {
+    const tabId = 'closing-persisted-tab'
+    const ptyId = 'closing-persisted-pty'
+    const { runtimeStore, getSession, setSession } = makeRuntimeStoreWithWorkspaceSession(
+      makeWorkspaceSessionWithHeadlessTerminal({
+        tabsByWorktree: {
+          [TEST_WORKTREE_ID]: [
+            {
+              id: tabId,
+              ptyId,
+              worktreeId: TEST_WORKTREE_ID,
+              title: 'Closing terminal',
+              customTitle: null,
+              color: null,
+              sortOrder: 0,
+              createdAt: 1
+            }
+          ]
+        },
+        terminalLayoutsByTabId: {
+          [tabId]: makeHeadlessTerminalLayout({ [HEADLESS_LEAF_ID]: ptyId })
+        }
+      })
+    )
+    let resolveSpawn!: (result: { id: string }) => void
+    const spawn = vi.fn(
+      (_args: unknown) =>
+        new Promise<{ id: string }>((resolve) => {
+          resolveSpawn = resolve
+        })
+    )
+    const kill = vi.fn(() => false)
+    const runtime = new OrcaRuntimeService(runtimeStore as never)
+    runtime.setPtyController({
+      spawn,
+      write: () => true,
+      kill,
+      getForegroundProcess: async () => null
+    })
+    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+    runtime.registerPty(ptyId, TEST_WORKTREE_ID, null, {
+      tabId,
+      leafId: HEADLESS_LEAF_ID
+    })
+    const internals = runtime as unknown as {
+      issuePtyHandle: (pty: unknown) => string
+      ptysById: Map<string, unknown>
+    }
+    const handle = internals.issuePtyHandle(internals.ptysById.get(ptyId))
+    const split = runtime.splitTerminal(handle, { direction: 'vertical' })
+    await vi.waitFor(() => expect(spawn).toHaveBeenCalledOnce())
+
+    setSession(getDefaultWorkspaceSession())
+    runtimeStore.persistPtyBinding.mockReturnValue(false)
+    resolveSpawn({ id: 'rejected-split-pty' })
+
+    await expect(split).rejects.toThrow('terminal_split_source_not_found')
+    expect(spawn.mock.calls[0]?.[0]).toMatchObject({
+      persistHostSessionBinding: true,
+      expectedSourceBinding: {
+        worktreeId: TEST_WORKTREE_ID,
+        tabId,
+        leafId: HEADLESS_LEAF_ID,
+        ptyId
+      }
+    })
+    expect(kill).toHaveBeenCalledWith('rejected-split-pty')
+    expect(getSession().tabsByWorktree[TEST_WORKTREE_ID]).toBeUndefined()
+    expect(getSession().terminalLayoutsByTabId[tabId]).toBeUndefined()
+  })
+
+  it('rejects a projected split retired during spawn before publishing the new pane', async () => {
+    let resolveSplitSpawn!: (result: { id: string }) => void
+    const spawn = vi
+      .fn()
+      .mockResolvedValueOnce({ id: 'projected-source-pty' })
+      .mockImplementationOnce(
+        () =>
+          new Promise<{ id: string }>((resolve) => {
+            resolveSplitSpawn = resolve
+          })
+      )
+    const kill = vi.fn(() => true)
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      spawn,
+      write: () => true,
+      kill,
+      getForegroundProcess: async () => null
+    })
+    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+
+    const { handle } = await runtime.createTerminal(`path:${TEST_WORKTREE_PATH}`)
+    const split = runtime.splitTerminal(handle, { direction: 'vertical' })
+    await vi.waitFor(() => expect(spawn).toHaveBeenCalledTimes(2))
+
+    runtime['mobileSessionTabsByWorktree'].delete(TEST_WORKTREE_ID)
+    resolveSplitSpawn({ id: 'retired-projected-split-pty' })
+
+    await expect(split).rejects.toThrow('terminal_split_source_not_found')
+    expect(kill).toHaveBeenCalledWith('retired-projected-split-pty')
+    expect(runtime['mobileSessionTabsByWorktree'].has(TEST_WORKTREE_ID)).toBe(false)
+  })
+
   it('splits folder workspace pty-backed terminal sessions with folder cwd and env', async () => {
     const folderPath = await mkdtemp(join(tmpdir(), 'orca-runtime-folder-split-'))
     const spawn = vi
@@ -14835,6 +15119,80 @@ describe('OrcaRuntimeService', () => {
     })
   })
 
+  it('atomically admits persisted SSH splits in the SSH host partition', async () => {
+    const tabId = 'ssh-split-tab'
+    const sourcePtyId = 'ssh:ssh-1@@source-pty'
+    const splitPtyId = 'ssh:ssh-1@@split-pty'
+    const remoteRepo = { ...store.getRepo(TEST_REPO_ID)!, connectionId: 'ssh-1' }
+    const { runtimeStore, getSession } = makeRuntimeStoreWithWorkspaceSession(
+      makeWorkspaceSessionWithHeadlessTerminal({
+        tabsByWorktree: {
+          [TEST_WORKTREE_ID]: [
+            {
+              id: tabId,
+              ptyId: sourcePtyId,
+              worktreeId: TEST_WORKTREE_ID,
+              title: 'SSH terminal',
+              customTitle: null,
+              color: null,
+              sortOrder: 0,
+              createdAt: 1
+            }
+          ]
+        },
+        terminalLayoutsByTabId: {
+          [tabId]: makeHeadlessTerminalLayout({ [HEADLESS_LEAF_ID]: sourcePtyId })
+        }
+      }),
+      'ssh:ssh-1'
+    )
+    const spawn = vi.fn().mockResolvedValue({ id: splitPtyId })
+    const runtime = new OrcaRuntimeService({
+      ...runtimeStore,
+      getRepos: () => [remoteRepo],
+      getRepo: (id: string) => (id === TEST_REPO_ID ? remoteRepo : undefined)
+    } as never)
+    runtime.setPtyController({
+      spawn,
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => null
+    })
+    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+    runtime.registerPty(sourcePtyId, TEST_WORKTREE_ID, 'ssh-1', {
+      tabId,
+      leafId: HEADLESS_LEAF_ID
+    })
+    const internals = runtime as unknown as {
+      issuePtyHandle: (pty: unknown) => string
+      ptysById: Map<string, unknown>
+    }
+    const handle = internals.issuePtyHandle(internals.ptysById.get(sourcePtyId))
+
+    await expect(runtime.splitTerminal(handle, { direction: 'vertical' })).resolves.toMatchObject({
+      tabId,
+      handle: expect.stringMatching(/^term_/)
+    })
+
+    expect(spawn).toHaveBeenCalledWith(
+      expect.objectContaining({
+        connectionId: 'ssh-1',
+        worktreeId: TEST_WORKTREE_ID,
+        persistHostSessionBinding: true,
+        expectedSourceBinding: expect.objectContaining({
+          worktreeId: TEST_WORKTREE_ID,
+          tabId,
+          leafId: HEADLESS_LEAF_ID,
+          ptyId: sourcePtyId
+        })
+      })
+    )
+    expect(getSession().terminalLayoutsByTabId[tabId]?.root).toMatchObject({
+      type: 'split',
+      direction: 'vertical'
+    })
+  })
+
   it('returns an actionable discoverability warning when default adoption fails after spawn', async () => {
     const spawn = vi.fn().mockResolvedValue({ id: 'pty-bg' })
     const revealTerminalSession = vi.fn().mockRejectedValue(new Error('Renderer timed out'))
@@ -15309,6 +15667,28 @@ describe('OrcaRuntimeService', () => {
     })
   })
 
+  it('resolves live-leaf tui-idle from an OpenCode native title', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => null
+    })
+    syncSinglePty(runtime, 'remote:pty-1', {
+      tabTitle: 'repo terminal',
+      paneTitle: 'ssh build-host | OC | Native session'
+    })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(
+      runtime.waitForTerminal(terminal.handle, { condition: 'tui-idle', timeoutMs: 1_000 })
+    ).resolves.toMatchObject({
+      handle: terminal.handle,
+      condition: 'tui-idle',
+      status: 'running'
+    })
+  })
+
   it('does not treat a Codex launch title as tui-idle readiness', async () => {
     vi.useFakeTimers()
     try {
@@ -22494,6 +22874,65 @@ describe('OrcaRuntimeService', () => {
     })
   })
 
+  it('does not authorize an OpenCode marker left on a shell pane', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => 'zsh'
+    })
+    syncSinglePty(runtime, 'pty-1', { paneTitle: 'OC | zsh' })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.isTerminalRunningAgent(terminal.handle)).resolves.toBe(false)
+    await expect(runtime.getTerminalAgentStatus(terminal.handle)).resolves.toEqual({
+      handle: terminal.handle,
+      isRunningAgent: false,
+      status: null
+    })
+  })
+
+  it('authorizes a hookless OpenCode marker with an OpenCode foreground process', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => 'opencode'
+    })
+    syncSinglePty(runtime, 'pty-1', { paneTitle: 'OC | Native session' })
+    const [terminal] = (await runtime.listTerminals()).terminals
+
+    await expect(runtime.isTerminalRunningAgent(terminal.handle)).resolves.toBe(true)
+    await expect(runtime.getTerminalAgentStatus(terminal.handle)).resolves.toEqual({
+      handle: terminal.handle,
+      isRunningAgent: true,
+      status: 'idle'
+    })
+  })
+
+  it('does not authorize an OpenCode marker left on a runtime PTY shell', async () => {
+    const runtime = new OrcaRuntimeService(store)
+    runtime.setPtyController({
+      spawn: vi.fn().mockResolvedValue({ id: 'pty-bg' }),
+      write: () => true,
+      kill: () => true,
+      getForegroundProcess: async () => 'zsh'
+    })
+    runtime.attachWindow(1)
+    runtime.syncWindowGraph(1, { tabs: [], leaves: [] })
+    const { handle } = await runtime.createTerminal(`path:${TEST_WORKTREE_PATH}`, {
+      command: 'bash',
+      title: 'OC | zsh'
+    })
+
+    await expect(runtime.isTerminalRunningAgent(handle)).resolves.toBe(false)
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toEqual({
+      handle,
+      isRunningAgent: false,
+      status: null
+    })
+  })
+
   // Why: a leaf with no PTY is the same no-evidence case as an unreadable foreground —
   // nothing was even asked, so the bare title is all that is left. The corroborating
   // foreground here is deliberately unreachable: no ptyId means no read.
diff --git a/src/main/runtime/orca-runtime.ts b/src/main/runtime/orca-runtime.ts
index 0b234b24160..55d2195c31e 100644
--- a/src/main/runtime/orca-runtime.ts
+++ b/src/main/runtime/orca-runtime.ts
@@ -6,6 +6,8 @@ import {
   isClaudeManagementTitle,
   isCursorAgentTitle,
   isCursorNativeAgentTitle,
+  isOpenCodeNativeTitle,
+  isQuarterCircleSpinnerOnlyAgentTitle,
   isShellProcess,
   normalizeTerminalTitle
 } from '../../shared/agent-detection'
@@ -39,6 +41,7 @@ import type {
 } from '../../shared/terminal-side-effect-facts'
 import type { TerminalGitHubPRLink } from '../../shared/terminal-github-pr-link-detector'
 import { TerminalKittyKeyboardModeTracker } from '../../shared/terminal-kitty-keyboard-mode-tracker'
+import { parseTerminalKittyKeyboardFlags } from '../../shared/terminal-kitty-keyboard-flags'
 import {
   AGENT_STATUS_STALE_AFTER_MS,
   isFreshNonDoneAgentStatus,
@@ -117,6 +120,11 @@ import { resolveWorktreeCreateBase } from '../worktree-create-base'
 import { resolveWorktreeAddBaseRef } from '../../shared/worktree-base-ref'
 import { OrchestrationDb } from './orchestration/db'
 import { reconcileRequestedWorkerTerminalReleases } from './orchestration/worker-terminal-release-reconciliation'
+import {
+  classifyWorkerTerminalProcessIncarnation,
+  parseWorkerTerminalHostScope,
+  type WorkerTerminalHostScope
+} from './orchestration/worker-terminal-process-liveness'
 import { rollbackWorkspaceSessionAfterFailedAsyncWrite } from './workspace-session-failed-write-rollback'
 import { OrchestrationError } from './orchestration/orchestration-error'
 import {
@@ -527,7 +535,8 @@ import { RemoteRuntimeTerminalCreateIdempotency } from './remote-runtime-termina
 import { deriveRemoteRuntimeTerminalCreateHandle } from './remote-runtime-terminal-create-identity'
 import {
   buildHeadlessTerminalSplitLayout,
-  countTerminalLayoutLeaves
+  countTerminalLayoutLeaves,
+  terminalLayoutContainsLeaf
 } from './headless-terminal-split-layout'
 import { RECENT_PTY_OUTPUT_LIMIT, RecentPtyOutputBuffer } from './recent-pty-output-buffer'
 import {
@@ -702,6 +711,7 @@ import {
   scanLocalRepoWorktreesForResolution,
   type RuntimeWorktreeScanResult
 } from './repo-worktree-resolution-scan'
+import { readRepoWorktreeAdminFingerprint } from './repo-worktree-admin-fingerprint'
 import {
   getLocalWorktreePathAccess,
   removeLocalWorktreePath,
@@ -922,7 +932,7 @@ import {
   WORKTREE_CREATE_MAX_SUFFIX_ATTEMPTS
 } from '../worktree-create-candidates'
 import { normalizeSparseDirectories } from '../ipc/sparse-checkout-directories'
-import type { Store } from '../persistence'
+import type { PtyBindingSourceExpectation, Store } from '../persistence'
 import type { StatsCollector } from '../stats/collector'
 import { AgentDetector } from '../stats/agent-detector'
 import {
@@ -1003,6 +1013,7 @@ import {
   recentTerminalOutputIncludesPath,
   recentTerminalPathCandidatesIncludePath
 } from './terminal-output-path-candidates'
+import { nativeChatTranscriptIncludesPath } from '../native-chat/native-chat-file-provenance'
 import {
   getSelectedReviewBranch,
   getSelectedReviewLookupHints,
@@ -1309,6 +1320,8 @@ type RuntimePtyWorktreeRecord = {
   paneKey: string | null
   launchConfig: SleepingAgentLaunchConfig | null
   launchToken: string | null
+  // Why: provider PTY IDs can be reused; launch identity belongs only to the process that received the token.
+  launchIncarnationId: PtyIncarnationId | null
   launchAgent: TuiAgent | null
   foregroundAgent: TuiAgent | null
   connected: boolean
@@ -1617,6 +1630,9 @@ type RuntimeTerminalBufferSnapshot = {
   alternateScreen?: boolean
   scrollbackAnsi?: string
   pendingEscapeTailAnsi?: string
+  /** Effective kitty flags proven at this snapshot's own `seq`. Absent means
+   *  the winning source could not prove them. */
+  kittyKeyboardFlags?: number
 }
 
 type HeadlessSeedMetadata = {
@@ -1677,6 +1693,7 @@ type RuntimePtyController = {
     sessionId?: string
     isNewSession?: boolean
     persistHostSessionBinding?: boolean
+    expectedSourceBinding?: PtyBindingSourceExpectation
     terminalColorQueryReplies?: { foreground?: string; background?: string }
     agentSessionEnsure?: {
       claim: AgentSessionExecutionClaim
@@ -1709,6 +1726,7 @@ type RuntimePtyController = {
    *  False on doubt (absent session, SSH-scoped id, non-daemon provider). */
   attach?(ptyId: string): Promise<boolean>
   kill(ptyId: string): boolean
+  retireRejectedPty?(ptyId: string): void
   stopAndWait?(
     ptyId: string,
     opts?: { keepHistory?: boolean; deadlineMs?: number }
@@ -1729,7 +1747,14 @@ type RuntimePtyController = {
   serializeBuffer?(
     ptyId: string,
     opts?: { scrollbackRows?: number; altScreenForcesZeroRows?: boolean }
-  ): Promise<{ data: string; cols: number; rows: number; seq?: number; lastTitle?: string } | null>
+  ): Promise<{
+    data: string
+    cols: number
+    rows: number
+    seq?: number
+    lastTitle?: string
+    kittyKeyboardFlags?: number
+  } | null>
   /** Authoritative provider-owned snapshot for restored PTYs with no mounted renderer. */
   serializeProviderBuffer?(
     ptyId: string,
@@ -1805,6 +1830,9 @@ const BRACKETED_PASTE_END = '\x1b[201~'
 const BRACKETED_PASTE_QUIET_MS = 1500
 const DRAFT_PASTE_READY_TIMEOUT_MS = 8000
 const MOBILE_TERMINAL_SURFACE_TIMEOUT_MS = 10_000
+// Why: the split already failed; the caller waits on this teardown only to learn whether the
+// fallback kill is needed, so keep it short — an unreachable host must not stall the rejection.
+const REJECTED_SPLIT_PTY_STOP_TIMEOUT_MS = 2_000
 const MOBILE_TERMINAL_READY_FALLBACK_MS = 1000
 const SSH_PANE_RECOVERY_GRACE_MS = 30_000
 // Why: long enough that a keystroke burst to a proven-dead leaf probes once,
@@ -1983,10 +2011,7 @@ export type OrchestrationCompatibilityTerminalAuthority = {
   processIncarnation: string | null
   paneKey: string | null
   launchTokenHash: string | null
-  hostScope:
-    | { kind: 'local'; hostId: 'local' }
-    | { kind: 'wsl'; hostId: 'local'; distro: string }
-    | { kind: 'ssh'; targetId: string }
+  hostScope: WorkerTerminalHostScope
 }
 
 export type LegacyWorkerTerminalRecoveryResult = {
@@ -2512,12 +2537,25 @@ type RuntimeWorktreeScanCache = {
   runtimeKey: string
   result: RuntimeWorktreeScanResult
   expiresAt: number
+  /**
+   * Git-admin state read as of the scan's start, kept unresolved so no caller ever waits on the
+   * probe to receive a scan result. Resolves to `null` when the state could not be read.
+   */
+  adminFingerprint: Promise<string | null>
+  /** When the Git scan behind `result` actually ran, so reconciliation can be bounded. */
+  scannedAt: number
 }
 
 type RuntimeWorktreeScanInFlight = {
   generation: number
   runtimeKey: string
-  promise: Promise<RuntimeWorktreeScanResult>
+  promise: Promise<RuntimeWorktreeScanRefresh>
+}
+
+type RuntimeWorktreeScanRefresh = {
+  result: RuntimeWorktreeScanResult
+  adminFingerprint: Promise<string | null>
+  scannedAt: number
 }
 
 type WorktreeLineageCandidate = {
@@ -7662,10 +7700,10 @@ export class OrcaRuntimeService {
     ptyId: string
     splitFromLeafId: string
     direction: 'horizontal' | 'vertical'
-  }): void {
+  }): boolean {
     const session = this.getWorkspaceSessionForWorktree(args.worktreeId)
     if (!session || !this.store?.setWorkspaceSession) {
-      return
+      return false
     }
     const existing = session.terminalLayoutsByTabId?.[args.tabId]
     const nextLayout = buildHeadlessTerminalSplitLayout(
@@ -7679,6 +7717,7 @@ export class OrcaRuntimeService {
         [args.tabId]: nextLayout
       }
     })
+    return true
   }
 
   private persistHeadlessTerminalActiveLeaf(
@@ -8744,6 +8783,13 @@ export class OrcaRuntimeService {
       this.resolveTerminalFileUriHostname(terminalHandle),
     hasRecentTerminalOutputPath: (terminalHandle, pathText, absolutePath) =>
       this.hasRecentTerminalOutputPath(terminalHandle, pathText, absolutePath),
+    hasRecentNativeChatOutputPath: (worktreeId, context, pathText, absolutePath) =>
+      nativeChatTranscriptIncludesPath({
+        tabs: this.getMobileSessionTabsForWorktree(worktreeId).tabs,
+        context,
+        pathText,
+        absolutePath
+      }),
     resolveRuntimeGitTarget: (selector) => this.resolveRuntimeGitTarget(selector),
     openFile: (worktreeId, filePath, relativePath, runtimeEnvironmentId) => {
       if (!this.notifier?.openFile) {
@@ -9376,6 +9422,7 @@ export class OrcaRuntimeService {
       isTuiAgent(agentLaunchAuthority.launchAgent)
     ) {
       pty.launchToken = agentLaunchAuthority.launchToken
+      pty.launchIncarnationId = binding.incarnationId
       pty.launchAgent = agentLaunchAuthority.launchAgent
     }
     const pendingIncarnation = this.pendingPtyRegistrationIncarnations.get(ptyId)
@@ -11599,6 +11646,7 @@ export class OrcaRuntimeService {
     oscLinks?: TerminalOscLinkRange[]
     alternateScreen?: boolean
     pendingEscapeTailAnsi?: string
+    kittyKeyboardFlags?: number
   } | null> {
     if (this.providerSnapshotPreferredPtys.has(ptyId)) {
       // Why: pre-attach stream bytes only form a suffix of restored state. A
@@ -11648,6 +11696,7 @@ export class OrcaRuntimeService {
     lastTitle?: string
     source?: 'renderer'
     oscLinks?: TerminalOscLinkRange[]
+    kittyKeyboardFlags?: number
   } | null> {
     if (this.ptyController?.hasRendererSerializer?.(ptyId) === false) {
       return null
@@ -11660,6 +11709,7 @@ export class OrcaRuntimeService {
       cwd?: string | null
       lastTitle?: string
       oscLinks?: TerminalOscLinkRange[]
+      kittyKeyboardFlags?: number
     } | null = null
     try {
       // Why: recovery/read fallback wants visible alt-screen content (e.g. an
@@ -12042,6 +12092,7 @@ export class OrcaRuntimeService {
     oscLinks?: TerminalOscLinkRange[]
     alternateScreen?: boolean
     scrollbackAnsi?: string
+    kittyKeyboardFlags?: number
     // Why: dangling mid-escape tail the restorer must write LAST, after any
     // reset, so the next live chunk completes it instead of rendering it
     // literally (Bug E / #7329).
@@ -12070,6 +12121,12 @@ export class OrcaRuntimeService {
           source: 'headless' as const,
           oscLinks: snapshot.oscLinks,
           scrollbackAnsi: snapshot.scrollbackAnsi,
+          // Why beside outputSequence and never re-read later: the flags must
+          // describe the same stream position as the image, or replay would
+          // apply push/pop transitions twice or out of order.
+          ...(parseTerminalKittyKeyboardFlags(snapshot.modes?.kittyKeyboardFlags) !== undefined
+            ? { kittyKeyboardFlags: snapshot.modes.kittyKeyboardFlags }
+            : {}),
           ...(snapshot.pendingEscapeTailAnsi
             ? { pendingEscapeTailAnsi: snapshot.pendingEscapeTailAnsi }
             : {}),
@@ -12375,6 +12432,7 @@ export class OrcaRuntimeService {
     }
     this.restoredOrchestrationAuthorityByPtyId.delete(ptyId)
     pty.launchToken = null
+    pty.launchIncarnationId = null
     const paneKeys = new Set<string>()
     if (pty.paneKey && parsePaneKey(pty.paneKey)) {
       paneKeys.add(pty.paneKey)
@@ -15512,6 +15570,24 @@ export class OrcaRuntimeService {
     }
   }
 
+  async inspectTerminalProcessIncarnationLiveness(
+    processIncarnation: string,
+    serializedHostScope: string | null
+  ): Promise<'live' | 'dead' | 'unknown'> {
+    const hostScope = parseWorkerTerminalHostScope(serializedHostScope)
+    if (!hostScope || !this.ptyController?.listProcesses) {
+      return 'unknown'
+    }
+    const listed = await withTimeoutResult(
+      this.ptyController.listProcesses(hostScope.kind === 'ssh' ? hostScope.targetId : null),
+      PTY_CONTROLLER_LIST_TIMEOUT_MS
+    )
+    if (!listed.ok) {
+      return 'unknown'
+    }
+    return classifyWorkerTerminalProcessIncarnation(processIncarnation, listed.value)
+  }
+
   private getTerminalTopologyRevision(worktreeId: string): number {
     const repoId = getRepoIdFromWorktreeId(worktreeId)
     return (
@@ -16722,7 +16798,8 @@ export class OrcaRuntimeService {
     const liveTitleClearsBlockedText =
       terminal.titleStatusIsLive &&
       terminal.titleStatus !== null &&
-      terminal.titleStatus !== 'permission'
+      terminal.titleStatus !== 'permission' &&
+      !isOpenCodeNativeTitle(terminal.title)
     if (terminal.titleStatus === 'permission' && terminal.titleStatusIsLive) {
       return { handle, isRunningAgent: true, status: 'permission' }
     }
@@ -16749,6 +16826,20 @@ export class OrcaRuntimeService {
       }
     }
     if (terminal.titleStatus) {
+      // Why: an OpenCode marker and a lone quarter-circle spinner (STA-4028) are activity,
+      // not identity, so resolve both through the identity/foreground evidence path.
+      if (
+        isOpenCodeNativeTitle(terminal.title) ||
+        isQuarterCircleSpinnerOnlyAgentTitle(terminal.title)
+      ) {
+        const isRunningAgent = await this.isTerminalRunningAgent(handle)
+        this.assertTerminalAgentStatusPtyBinding(handle, ptyId)
+        return {
+          handle,
+          isRunningAgent,
+          status: isRunningAgent ? terminal.titleStatus : null
+        }
+      }
       return { handle, isRunningAgent: true, status: terminal.titleStatus }
     }
 
@@ -18436,6 +18527,7 @@ export class OrcaRuntimeService {
         | 'pendingFirstAgentMessageRename'
         | 'firstAgentMessageRenameError'
         | 'lastActivityAt'
+        | 'diffComments'
       >
     >
   ): Promise<FolderWorkspace | null> {
@@ -19083,6 +19175,7 @@ export class OrcaRuntimeService {
         | 'externalWorktreeVisibilityPromptDismissedAt'
         | 'externalWorktreeInboxBaselinePaths'
         | 'importedExternalWorktreePaths'
+        | 'agentWorktreeVisibility'
         | 'projectGroupId'
         | 'projectGroupOrder'
       >
@@ -23664,8 +23757,7 @@ export class OrcaRuntimeService {
       this.invalidateWorktreeScanCacheForRepo(worktree.repoId)
     }
     const shouldClearPushTarget =
-      Object.prototype.hasOwnProperty.call(metaUpdates, 'pushTarget') &&
-      metaUpdates.pushTarget === null
+      Object.hasOwn(metaUpdates, 'pushTarget') && metaUpdates.pushTarget === null
     const normalizedMetaUpdates: Partial<WorktreeMeta> = shouldClearPushTarget
       ? { ...metaUpdates, pushTarget: undefined }
       : (metaUpdates as Partial<WorktreeMeta>)
@@ -25721,6 +25813,7 @@ export class OrcaRuntimeService {
               ? copySleepingAgentLaunchConfig(effectiveLaunchConfig)
               : null
             pty.launchToken = launchToken ?? null
+            pty.launchIncarnationId = launchToken ? pty.incarnationId : null
             pty.launchAgent = launchOpts.launchAgent ?? null
           }
           pty.tabId = tabId
@@ -27286,6 +27379,17 @@ export class OrcaRuntimeService {
     }
     const direction = opts.direction ?? 'horizontal'
     const workspace = await this.resolveTerminalWorkspaceLaunchScope(`id:${pty.worktreeId}`)
+    const sourceAuthority = this.resolveTerminalSplitSourceAuthority(
+      workspace.id,
+      parentTabId,
+      parsedPaneKey.leafId,
+      pty.ptyId
+    )
+    if (!sourceAuthority) {
+      throw new Error('terminal_split_source_not_found')
+    }
+    const sourceIncarnationId =
+      sourceAuthority.liveIncarnationId ?? sourceAuthority.persistedIncarnationId
     const leafId = randomUUID()
     const preAllocatedHandle = this.createPreAllocatedTerminalHandle()
     const paneKey = makePaneKey(parentTabId, leafId)
@@ -27302,7 +27406,25 @@ export class OrcaRuntimeService {
       preAllocatedHandle,
       tabId: parentTabId,
       leafId,
-      persistHostSessionBinding: true
+      persistHostSessionBinding: true,
+      ...(sourceAuthority.persisted
+        ? {
+            expectedSourceBinding: {
+              ...(sourceAuthority.persistedWorktreeId
+                ? { worktreeId: sourceAuthority.persistedWorktreeId }
+                : {}),
+              tabId: parentTabId,
+              leafId: parsedPaneKey.leafId,
+              ptyId: pty.ptyId,
+              // Why: the store can only match its own persisted map, so a live-only id it never
+              // recorded would reject every split from a session restored without incarnations.
+              // The live id is fenced by revalidateSourceAuthority below instead.
+              ...(sourceAuthority.persistedIncarnationId
+                ? { incarnationId: sourceAuthority.persistedIncarnationId }
+                : {})
+            }
+          }
+        : {})
     })
     this.registerPreAllocatedHandleForPty(result.id, preAllocatedHandle)
     if (result.wslDistro) {
@@ -27320,7 +27442,7 @@ export class OrcaRuntimeService {
       )
     }
 
-    try {
+    const revealSplit = async (): Promise<void> => {
       await this.notifier?.revealTerminalSession?.(workspace.id, {
         ptyId: result.id,
         title: null,
@@ -27332,33 +27454,163 @@ export class OrcaRuntimeService {
         splitDirection: direction,
         splitTelemetrySource: opts.telemetrySource
       })
+    }
+
+    try {
+      const revalidateSourceAuthority = (): void => {
+        const current = this.resolveTerminalSplitSourceAuthority(
+          workspace.id,
+          parentTabId,
+          parsedPaneKey.leafId,
+          pty.ptyId
+        )
+        if (
+          !current ||
+          (sourceAuthority.persisted && !current.persisted) ||
+          (sourceIncarnationId !== null &&
+            (current.liveIncarnationId ?? current.persistedIncarnationId) !== sourceIncarnationId)
+        ) {
+          throw new Error('terminal_split_source_not_found')
+        }
+      }
+      revalidateSourceAuthority()
+      if (!sourceAuthority.persisted) {
+        await revealSplit()
+        // Why: rejecting here unmounts the pane the reveal just added only because the retire
+        // below always emits its exit and the tab still holds the source sibling — the renderer's
+        // exit handler closes non-final panes. Never close it by tabId: that drops the whole tab.
+        revalidateSourceAuthority()
+      }
+      if (createdPty) {
+        const persisted = this.persistHeadlessTerminalSplit({
+          worktreeId: workspace.id,
+          tabId: parentTabId,
+          leafId,
+          ptyId: createdPty.ptyId,
+          splitFromLeafId: parsedPaneKey.leafId,
+          direction
+        })
+        if (sourceAuthority.persisted && !persisted) {
+          throw new Error('workspace_session_unavailable')
+        }
+        this.publishPtyBackedMobileSessionTerminal(workspace.id, createdPty, {
+          tabId: parentTabId,
+          leafId,
+          title: null,
+          activate: opts.activate !== false,
+          split: { splitFromLeafId: parsedPaneKey.leafId, direction }
+        })
+      }
     } catch (error) {
       this.setPairedRendererSessionOwnership(result.id, false)
-      this.ptyController.kill?.(result.id)
+      let stopped = false
+      try {
+        stopped =
+          (await this.ptyController.stopAndWait?.(result.id, {
+            deadlineMs: Date.now() + REJECTED_SPLIT_PTY_STOP_TIMEOUT_MS
+          })) ?? false
+      } catch {
+        // Best-effort fallback below preserves the original split authority error.
+      }
+      if (!stopped) {
+        this.ptyController.kill(result.id)
+      }
+      this.ptyController.retireRejectedPty?.(result.id)
       throw error
     }
-    if (createdPty) {
-      this.publishPtyBackedMobileSessionTerminal(workspace.id, createdPty, {
-        tabId: parentTabId,
-        leafId,
-        title: null,
-        activate: opts.activate !== false,
-        split: { splitFromLeafId: parsedPaneKey.leafId, direction }
-      })
-      // Why: persist the split so a later snapshot rebuild keeps it instead of collapsing to a single pane.
-      this.persistHeadlessTerminalSplit({
-        worktreeId: workspace.id,
-        tabId: parentTabId,
-        leafId,
-        ptyId: createdPty.ptyId,
-        splitFromLeafId: parsedPaneKey.leafId,
-        direction
-      })
+    const committedSourceAuthority = sourceAuthority.persisted
+      ? this.resolveTerminalSplitSourceAuthority(
+          workspace.id,
+          parentTabId,
+          parsedPaneKey.leafId,
+          pty.ptyId
+        )
+      : null
+    if (sourceAuthority.persisted && committedSourceAuthority?.rendererMounted) {
+      // Why: renderer adoption is a projection after the durable main commit; rejection cannot undo it.
+      void revealSplit().catch(() => undefined)
     }
 
     return { handle: this.issuePtyHandle(createdPty ?? pty), tabId: parentTabId, paneRuntimeId: -1 }
   }
 
+  private resolveTerminalSplitSourceAuthority(
+    worktreeId: string,
+    tabId: string,
+    leafId: string,
+    ptyId: string
+  ): {
+    persisted: boolean
+    rendererMounted: boolean
+    persistedWorktreeId: string | null
+    persistedIncarnationId: string | null
+    liveIncarnationId: string | null
+  } | null {
+    const session = this.getWorkspaceSessionForWorktree(worktreeId)
+    const sessionWorktreeId = session ? resolveTerminalSessionWorktreeId(session, worktreeId) : null
+    const persistedTab = sessionWorktreeId
+      ? session?.tabsByWorktree[sessionWorktreeId]?.find(
+          (tab) => tab.id === tabId && runtimeWorktreeIdsEqual(tab.worktreeId, worktreeId)
+        )
+      : undefined
+    const persistedLayout = session?.terminalLayoutsByTabId?.[tabId]
+    const persistedIncarnationId =
+      session?.terminalPtyIncarnationsByPaneKey?.[makePaneKey(tabId, leafId)] ?? null
+    const liveIncarnationId = this.ptysById.get(ptyId)?.incarnationId ?? null
+    if (
+      persistedIncarnationId &&
+      liveIncarnationId &&
+      persistedIncarnationId !== liveIncarnationId
+    ) {
+      return null
+    }
+    const persisted = Boolean(
+      persistedTab &&
+      persistedLayout?.ptyIdsByLeafId?.[leafId] === ptyId &&
+      terminalLayoutContainsLeaf(persistedLayout.root, leafId)
+    )
+    const rendererTab = this.tabs.get(tabId)
+    const rendererLeaf = this.leaves.get(this.getLeafKey(tabId, leafId))
+    const rendererMounted = Boolean(
+      rendererTab &&
+      rendererLeaf &&
+      runtimeWorktreeIdsEqual(rendererTab.worktreeId, worktreeId) &&
+      runtimeWorktreeIdsEqual(rendererLeaf.worktreeId, worktreeId) &&
+      rendererLeaf.ptyId === ptyId
+    )
+    if (persisted && persistedLayout) {
+      return {
+        persisted: true,
+        rendererMounted,
+        persistedWorktreeId: sessionWorktreeId,
+        persistedIncarnationId,
+        liveIncarnationId
+      }
+    }
+    // Why: renderer adoption can precede graph sync; this path still requires reveal success before commit.
+    const projected = [...this.mobileSessionTabsByWorktree.entries()].some(
+      ([candidateWorktreeId, snapshot]) =>
+        runtimeWorktreeIdsEqual(candidateWorktreeId, worktreeId) &&
+        snapshot.tabs.some(
+          (tab) =>
+            tab.type === 'terminal' &&
+            tab.parentTabId === tabId &&
+            tab.leafId === leafId &&
+            (tab.ptyId === ptyId || tab.parentLayout?.ptyIdsByLeafId?.[leafId] === ptyId)
+        )
+    )
+    if (!rendererMounted && !projected) {
+      return null
+    }
+    return {
+      persisted: false,
+      rendererMounted,
+      persistedWorktreeId: null,
+      persistedIncarnationId: null,
+      liveIncarnationId
+    }
+  }
+
   async handleAgentTeamsTmuxCompat(
     request: AgentTeamsTmuxCompatRequest
   ): Promise<AgentTeamsTmuxCompatResponse> {
@@ -27788,7 +28040,7 @@ export class OrcaRuntimeService {
           committedPtyIds,
           terminalHandlesByPtyId
         })
-        if (failedStopIndex >= 0) {
+        if (failedStopIndex !== -1) {
           const failedStop = stopResults[failedStopIndex]
           throw Object.assign(new Error('terminal_worktree_sleep_failed'), {
             ptyId: orderedLivePtyIds[failedStopIndex],
@@ -27815,7 +28067,7 @@ export class OrcaRuntimeService {
         committedPtyIds,
         terminalHandlesByPtyId
       })
-      if (failedStopIndex >= 0 && remainingLivePtyIds.size > 0) {
+      if (failedStopIndex !== -1 && remainingLivePtyIds.size > 0) {
         const failedStop = stopResults[failedStopIndex]
         console.error('[runtime] worktree terminal sleep physical stop failed', {
           worktreeId: worktree.id,
@@ -28174,16 +28426,9 @@ export class OrcaRuntimeService {
   private async resolveFolderWorkspaceLaunchScope(
     selector: string
   ): Promise<TerminalWorkspaceLaunchScope | null> {
-    const workspaceSelector = selector.startsWith('id:') ? selector.slice(3) : selector
-    const parsed = parseWorkspaceKey(workspaceSelector)
-    if (parsed?.type !== 'folder') {
-      return null
-    }
-    const workspace = this.store
-      ?.getFolderWorkspaces?.()
-      .find((entry) => entry.id === parsed.folderWorkspaceId)
+    const workspace = this.resolveFolderWorkspaceSelector(selector)
     if (!workspace) {
-      throw new Error('selector_not_found')
+      return null
     }
     if (!this.store) {
       throw new Error('runtime_unavailable')
@@ -28203,6 +28448,36 @@ export class OrcaRuntimeService {
     }
   }
 
+  private resolveFolderWorkspaceSelector(selector: string): FolderWorkspace | null {
+    const workspaceSelector = selector.startsWith('id:') ? selector.slice(3) : selector
+    const parsed = parseWorkspaceKey(workspaceSelector)
+    if (parsed?.type !== 'folder') {
+      return null
+    }
+    const workspace = this.store
+      ?.getFolderWorkspaces?.()
+      .find((entry) => entry.id === parsed.folderWorkspaceId)
+    if (!workspace) {
+      throw new Error('selector_not_found')
+    }
+    return workspace
+  }
+
+  private async resolveEmulatorWorkspaceId(selector: string): Promise<string> {
+    const folderWorkspace = this.resolveFolderWorkspaceSelector(selector)
+    return folderWorkspace
+      ? folderWorkspaceKey(folderWorkspace.id)
+      : (await this.resolveWorktreeSelector(selector)).id
+  }
+
+  private async resolveEmulatorCleanupWorkspaceId(selector: string): Promise<string> {
+    const workspaceSelector = selector.startsWith('id:') ? selector.slice(3) : selector
+    const parsed = parseWorkspaceKey(workspaceSelector)
+    return parsed?.type === 'folder'
+      ? folderWorkspaceKey(parsed.folderWorkspaceId)
+      : this.resolveEmulatorWorkspaceId(selector)
+  }
+
   private folderWorkspaceToResolvedWorktree(folderWorkspace: FolderWorkspace): ResolvedWorktree {
     const worktree = folderWorkspaceToWorktree(folderWorkspace)
     return {
@@ -29038,26 +29313,30 @@ export class OrcaRuntimeService {
     }
     const inFlight = this.worktreeScanInFlight.get(repo.id)
     if (inFlight?.generation === generation && inFlight.runtimeKey === runtimeKey) {
-      return inFlight.promise
+      return (await inFlight.promise).result
     }
-    const promise = this.listRepoWorktreesForResolutionUncached(repo, projectRuntime)
+    const reusableCached =
+      cached?.generation === generation && cached.runtimeKey === runtimeKey ? cached : null
+    const promise = this.refreshRepoWorktreeScan(repo, projectRuntime, reusableCached)
     this.worktreeScanInFlight.set(repo.id, { generation, runtimeKey, promise })
     try {
-      const result = await promise
+      const refresh = await promise
       // Why: back off local spawn failures under resource pressure while disconnected SSH can recover on the next poll.
       if (
-        (result.ok || !repo.connectionId) &&
+        (refresh.result.ok || !repo.connectionId) &&
         generation === (this.worktreeScanGenerations.get(repo.id) ?? 0) &&
         this.worktreeScanInFlight.get(repo.id)?.promise === promise
       ) {
         this.worktreeScanCache.set(repo.id, {
           generation,
           runtimeKey,
-          result,
-          expiresAt: Date.now() + resolveWorktreeScanCacheTtlMs(repo)
+          result: refresh.result,
+          expiresAt: Date.now() + resolveWorktreeScanCacheTtlMs(repo),
+          adminFingerprint: refresh.adminFingerprint,
+          scannedAt: refresh.scannedAt
         })
       }
-      return result
+      return refresh.result
     } finally {
       if (this.worktreeScanInFlight.get(repo.id)?.promise === promise) {
         this.worktreeScanInFlight.delete(repo.id)
@@ -29065,6 +29344,50 @@ export class OrcaRuntimeService {
     }
   }
 
+  /**
+   * Refresh one repo's worktree rows, skipping the `git worktree list` subprocess when a cheap
+   * Git-admin fingerprint proves nothing changed since the cached scan.
+   */
+  private async refreshRepoWorktreeScan(
+    repo: Repo,
+    projectRuntime: ProjectExecutionRuntimeResolution | undefined,
+    cached: RuntimeWorktreeScanCache | null
+  ): Promise<RuntimeWorktreeScanRefresh> {
+    const scannedAt = Date.now()
+    // SSH and WSL-routed repos run Git off-host, so a local admin-dir read cannot describe them.
+    const fingerprintCapable =
+      !repo.connectionId &&
+      // Why: a repo whose scan TTL already reaches the reconciliation interval can never reuse a
+      // fingerprint, so reading one would be pure work. Agent-scratch roots are that case today.
+      resolveWorktreeScanCacheTtlMs(repo) < WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS &&
+      !getLocalProjectWorktreeGitOptionsForRuntime(repo, projectRuntime).wslDistro
+    // Why issue it before the scan: a change landing while the scan runs must not be stamped as
+    // already-observed, or the next probe would mask it until the reconciliation deadline.
+    const adminFingerprint = fingerprintCapable
+      ? readRepoWorktreeAdminFingerprint(repo.path)
+      : UNFINGERPRINTED_WORKTREE_SCAN
+    const reusable =
+      fingerprintCapable &&
+      cached?.result.ok === true &&
+      scannedAt - cached.scannedAt < WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS
+        ? cached
+        : null
+    if (reusable) {
+      // Why await only here: this is the one branch whose decision needs the probe. A scan-bound
+      // caller must never wait on it, or every cold read pays filesystem latency it cannot use.
+      const [current, previous] = await Promise.all([adminFingerprint, reusable.adminFingerprint])
+      if (current !== null && current === previous) {
+        return {
+          result: reusable.result,
+          adminFingerprint: reusable.adminFingerprint,
+          scannedAt: reusable.scannedAt
+        }
+      }
+    }
+    const result = await this.listRepoWorktreesForResolutionUncached(repo, projectRuntime)
+    return { result, adminFingerprint, scannedAt }
+  }
+
   private async listRepoWorktreesForResolutionUncached(
     repo: Repo,
     projectRuntime: ProjectExecutionRuntimeResolution | undefined
@@ -29218,6 +29541,7 @@ export class OrcaRuntimeService {
         paneKey: state.paneKey ?? null,
         launchConfig: null,
         launchToken: null,
+        launchIncarnationId: null,
         launchAgent: null,
         foregroundAgent: null,
         connected: state.connected ?? true,
@@ -29834,7 +30158,7 @@ export class OrcaRuntimeService {
   private syncMobileSessionTabs(
     snapshots: RuntimeMobileSessionTabsSnapshot[] | undefined,
     unchangedWorktreeIds?: string[],
-    resyncWorktreeIds: Set<string> = new Set()
+    resyncWorktreeIds = new Set<string>()
   ): Set<string> {
     const changedWorktreeIds = new Set<string>()
     if (snapshots === undefined) {
@@ -31359,19 +31683,29 @@ export class OrcaRuntimeService {
         return await this.isPtyRunningAgent(pty.pty, leaf)
       }
       const { leaf } = this.getLiveLeafForHandle(handle)
+      const trackedPty = leaf.ptyId ? this.ptysById.get(leaf.ptyId) : null
       // Why: check the leaf pane title and the tab title, which already carries OSC-enriched agent indicators (e.g. ✳ prefix).
       const paneTitle = getLatestLeafTitle(leaf, null)
       const paneTitleClassification = classifyAgentTitle(paneTitle)
-      if (paneTitleClassification === 'agent') {
+      if (
+        trackedPty
+          ? ptyTitleProvesAgentPresence(trackedPty, paneTitle, paneTitleClassification)
+          : agentTitleProvesAgentPresence(paneTitle, paneTitleClassification)
+      ) {
         return true
       }
       const tabTitle = this.tabs.get(leaf.tabId)?.title?.trim() || null
       const tabTitleClassification = paneTitle === null ? classifyAgentTitle(tabTitle) : 'neutral'
-      if (tabTitleClassification === 'agent') {
+      if (
+        trackedPty
+          ? ptyTitleProvesAgentPresence(trackedPty, tabTitle, tabTitleClassification)
+          : agentTitleProvesAgentPresence(tabTitle, tabTitleClassification)
+      ) {
         return true
       }
+      const openCodeMarkerTitle = paneTitle ?? tabTitle
       const waitText = buildTerminalWaitText(leaf.tailBuffer, leaf.tailPartialLine, leaf.preview)
-      if (isKnownReadyPromptPreview(waitText)) {
+      if (!isOpenCodeNativeTitle(openCodeMarkerTitle) && isKnownReadyPromptPreview(waitText)) {
         return true
       }
       const hasCurrentTitleEvidence = paneTitle !== null || tabTitle !== null
@@ -31415,7 +31749,7 @@ export class OrcaRuntimeService {
         )
       : null
     const leafTitleClassification = classifyAgentTitle(leafTitle)
-    if (leafTitleClassification === 'agent') {
+    if (ptyTitleProvesAgentPresence(pty, leafTitle, leafTitleClassification)) {
       return true
     }
     const ptyTitle = getLatestAgentCandidateTitle(
@@ -31423,15 +31757,19 @@ export class OrcaRuntimeService {
       { title: pty.lastOscTitle, updatedAt: pty.lastOscTitleAt }
     )
     const ptyTitleClassification = classifyAgentTitle(ptyTitle)
-    if (leafTitle === null && ptyTitleClassification === 'agent') {
+    if (leafTitle === null && ptyTitleProvesAgentPresence(pty, ptyTitle, ptyTitleClassification)) {
       return true
     }
     const managementTitleClassification = classifyLatestAgentTitle({
       title: pty.managementTitle,
       updatedAt: pty.managementTitleAt
     })
+    const openCodeMarkerTitle = leafTitle ?? ptyTitle
+    if (isOpenCodeNativeTitle(openCodeMarkerTitle) && pty.launchAgent === 'opencode') {
+      return true
+    }
     const waitText = buildTerminalWaitText(pty.tailBuffer, pty.tailPartialLine, pty.preview)
-    if (isKnownReadyPromptPreview(waitText)) {
+    if (!isOpenCodeNativeTitle(openCodeMarkerTitle) && isKnownReadyPromptPreview(waitText)) {
       return true
     }
     // Why: stale status is a fallback only when no current title evidence exists; neutral titles (shells) clear it.
@@ -32494,7 +32832,7 @@ export class OrcaRuntimeService {
   linearSearchForAgents(args: {
     query: string
     limit?: number
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
   }): ReturnType<typeof searchLinearIssuesForAgents> {
     return searchLinearIssuesForAgents(args)
   }
@@ -32504,7 +32842,7 @@ export class OrcaRuntimeService {
   }
 
   async linearTeamListForAgents(params: {
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
   }): Promise<LinearTeamListResult> {
     try {
       const result = await listLinearTeamsForAgent(params.workspaceId)
@@ -32583,7 +32921,7 @@ export class OrcaRuntimeService {
   async linearProjectListForAgents(params: {
     query?: string
     limit?: number
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
   }): Promise<LinearProjectListResult> {
     const limit = clampLinearSearchLimit(params.limit)
     try {
@@ -32622,7 +32960,7 @@ export class OrcaRuntimeService {
     filter?: LinearIssueListFilter
     teamInput?: string
     limit?: number
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
   }): Promise<LinearIssueListResult> {
     const filter = params.filter ?? 'assigned'
     const limit = clampLinearIssueListLimit(params.limit)
@@ -34305,7 +34643,7 @@ export class OrcaRuntimeService {
 
   private async resolveLinearTeamInput(
     teamInput: string,
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
   ): Promise<{
     id: string
     key: string
@@ -34868,7 +35206,9 @@ export class OrcaRuntimeService {
 
   private readonly emulatorCommands = new RuntimeEmulatorCommands({
     getEmulatorBridge: () => this.emulatorBridge,
-    resolveWorktreeSelector: (selector) => this.resolveWorktreeSelector(selector),
+    resolveEmulatorWorkspaceId: (selector) => this.resolveEmulatorWorkspaceId(selector),
+    resolveEmulatorCleanupWorkspaceId: (selector) =>
+      this.resolveEmulatorCleanupWorkspaceId(selector),
     getAuthoritativeWindow: () => this.getAuthoritativeWindow(),
     getSettings: () => this.requireStore().getSettings()
   })
@@ -35372,6 +35712,12 @@ const WORKTREE_SCAN_CACHE_TTL_MS = 30_000
 // fan-out was measured at ~128 git execs/min on real installs, mostly against
 // these (crash-cluster diagnostics, 2026-07).
 const WORKTREE_SCAN_AGENT_SCRATCH_TTL_MS = 5 * 60_000
+// Why: the Git-admin fingerprint reads HEAD and its ref tip exactly, but sparse-checkout pattern
+// edits are invisible to it and a tip living in packed-refs or reftable only gets an mtime + size
+// stamp, so a real scan still runs on this interval even while the probe reports "unchanged".
+export const WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS = 5 * 60_000
+/** Stand-in for a repo the local admin probe cannot or need not describe; never matches a real read. */
+const UNFINGERPRINTED_WORKTREE_SCAN: Promise<string | null> = Promise.resolve(null)
 const RESOLVED_WORKTREE_REPO_TIMEOUT_MS = 5000
 
 export function resolveWorktreeScanCacheTtlMs(repo: Pick<Repo, 'path' | 'connectionId'>): number {
@@ -36213,12 +36559,12 @@ function applyTerminalLineControls(line: string): {
   hadControl: boolean
 } {
   const carriageIndex = line.lastIndexOf('\r')
-  const latestRedraw = carriageIndex >= 0 ? line.slice(carriageIndex + 1) : line
+  const latestRedraw = carriageIndex !== -1 ? line.slice(carriageIndex + 1) : line
   if (!latestRedraw.includes('\u0008') && !latestRedraw.includes('\u001b')) {
     return {
       text: latestRedraw,
       cursorColumn: latestRedraw.length,
-      hadControl: carriageIndex >= 0
+      hadControl: carriageIndex !== -1
     }
   }
 
@@ -36675,6 +37021,8 @@ function detectExplicitIdleStatusFromTitle(title: string): AgentStatus | null {
   // Why: launch titles like "Codex YOLO" contain an agent name but aren't readiness signals; terminal.wait needs explicit idle evidence.
   if (
     EXPLICIT_IDLE_TITLE_RE.test(title) ||
+    // Why: unblock hookless remote waits; guarded writes corroborate this marker.
+    isOpenCodeNativeTitle(title) ||
     title.startsWith(CLAUDE_IDLE_PREFIX) ||
     title.startsWith('* ') ||
     title.includes(GEMINI_IDLE_PREFIX) ||
@@ -36812,7 +37160,7 @@ function isTerminalWaitWhitespace(value: string, index: number): boolean {
 }
 
 const TERMINAL_WAIT_BLOCKED_SENTINEL_RE =
-  /update available|choose working directory to|codex just got an upgrade|hooks need review|do you trust|trust this|trusted workspace|press enter to (?:confirm|continue|view|insert)|press t to trust/i
+  /update available|choose working directory to|codex just got an upgrade|hooks need review|do you trust|trust this|trusted workspace|press enter to (?:confirm|continue|view|insert)|press t to trust|permission required|requires permission|allow once|allow always/i
 
 function findTerminalWaitBlockedSignal(
   normalized: string
@@ -36882,6 +37230,20 @@ function findTerminalWaitBlockedSignal(
       candidates.push({ reason: 'codex-interactive-prompt', index: interactivePromptIndex })
     }
   }
+  const permissionPromptIndex = Math.max(
+    normalized.lastIndexOf('permission required'),
+    normalized.lastIndexOf('requires permission')
+  )
+  if (permissionPromptIndex !== -1) {
+    const permissionSegment = normalized.slice(permissionPromptIndex, permissionPromptIndex + 1_500)
+    const decisionCount = ['allow once', 'allow always', 'reject', 'deny'].filter((choice) =>
+      permissionSegment.includes(choice)
+    ).length
+    if (decisionCount >= 2) {
+      // Why: preserve the existing remote receipt value for mixed-version clients.
+      candidates.push({ reason: 'codex-interactive-prompt', index: permissionPromptIndex })
+    }
+  }
   return candidates.length > 0
     ? candidates.reduce((latest, candidate) =>
         candidate.index > latest.index ? candidate : latest
@@ -37363,6 +37725,33 @@ function getLatestLeafTitle(leaf: RuntimeLeafRecord, tabTitle: string | null): s
   )
 }
 
+// Why: an 'agent' title only proves an agent owns the pane when something other than a
+// quarter-circle spinner carries it — those glyphs are generic progress frames (STA-4028).
+function agentTitleProvesAgentPresence(
+  title: string | null,
+  classification: 'agent' | 'management' | 'neutral'
+): boolean {
+  return (
+    classification === 'agent' &&
+    !isOpenCodeNativeTitle(title) &&
+    !isQuarterCircleSpinnerOnlyAgentTitle(title)
+  )
+}
+
+function ptyTitleProvesAgentPresence(
+  pty: RuntimePtyWorktreeRecord,
+  title: string | null,
+  classification: 'agent' | 'management' | 'neutral'
+): boolean {
+  return (
+    agentTitleProvesAgentPresence(title, classification) ||
+    (isQuarterCircleSpinnerOnlyAgentTitle(title) &&
+      pty.launchAgent === 'claude' &&
+      pty.launchToken !== null &&
+      pty.launchIncarnationId === pty.incarnationId)
+  )
+}
+
 function classifyAgentTitle(title: string | null): 'agent' | 'management' | 'neutral' {
   if (!title) {
     return 'neutral'
diff --git a/src/main/runtime/orchestration/db.ts b/src/main/runtime/orchestration/db.ts
index 259664c5544..ec279aef763 100644
--- a/src/main/runtime/orchestration/db.ts
+++ b/src/main/runtime/orchestration/db.ts
@@ -44,6 +44,7 @@ import { OrchestrationError } from './orchestration-error'
 import { resolveOrchestrationMigrationStartVersion } from './orchestration-schema-version-skew'
 import {
   deriveWorkerTerminalListState,
+  WORKER_SETTLED_STATES,
   type WorkerTerminalResourceRow,
   type WorkerTerminalArchiveRow,
   type WorkerTerminalArchiveStatus,
@@ -72,6 +73,17 @@ function isEquivalentPaneKey(a: string, b: string): boolean {
   return Boolean(aLeaf && bLeaf && aLeaf === bLeaf)
 }
 
+function parseWorkerTerminalPriorOwnerIds(value: string): string[] | null {
+  try {
+    const parsed: unknown = JSON.parse(value)
+    return Array.isArray(parsed) && parsed.every((entry) => typeof entry === 'string')
+      ? parsed
+      : null
+  } catch {
+    return null
+  }
+}
+
 // Why: indexable pre-filter for isEquivalentPaneKey — equal strings and equal leaves both share the
 // text after the first ':', so this narrows candidates without deciding equivalence itself.
 const RUN_PANE_KEY_MATCH_SUFFIX_SQL =
@@ -81,7 +93,7 @@ const DISPATCH_PANE_KEY_MATCH_SUFFIX_SQL =
 
 function paneKeyMatchSuffix(paneKey: string): string {
   const colon = paneKey.indexOf(':')
-  return colon < 0 ? paneKey : paneKey.slice(colon + 1)
+  return colon === -1 ? paneKey : paneKey.slice(colon + 1)
 }
 
 export type {
@@ -285,7 +297,7 @@ type RunListCursor = {
 // Schema versions: v2 'heartbeat'+last_heartbeat_at, v3 delivered_at, v4 task-creator terminal, v5 task_title/display_name, v6 pane identity, v7 lightweight Runs, v8 crash-safe Run deliveries, v9 durable question threads, v10 Dispatch capabilities, v11 durable mutation receipts, v12 composed worker state, v18 post-v6 version-skew repair, v19 adopted legacy Runs and compatibility receipts, v20 legacy question backfill, v21 legacy scheduler-loss provenance, v22 dispatch assignee lookup, v23 worker terminal resource ownership, v24 creator-incarnation authority, v25 active Dispatch handle lookup, v26 indexed mutation receipt capacity.
 const SCHEMA_VERSION = 26
 
-function hardenOrchestrationDatabaseFiles(dbPath: string | ':memory:'): void {
+function hardenOrchestrationDatabaseFiles(dbPath: (string & {}) | ':memory:'): void {
   if (dbPath === ':memory:' || process.platform === 'win32') {
     // Why: Windows protects these files through Orca's current-user-only userData DACL; POSIX mode bits are inert there.
     return
@@ -308,7 +320,7 @@ export class OrchestrationDb {
   // per-terminal fan-out. Only createDispatchContext flips this false→true.
   private hasAnyDispatchContextsCache: boolean | undefined
 
-  constructor(dbPath: string | ':memory:') {
+  constructor(dbPath: (string & {}) | ':memory:') {
     this.db = new Database(dbPath)
     this.db.pragma('journal_mode = WAL')
     this.db.pragma('synchronous = NORMAL')
@@ -3851,7 +3863,7 @@ export class OrchestrationDb {
     return this.db.prepare('SELECT * FROM tasks ORDER BY created_at').all() as TaskRow[]
   }
 
-  // Why: LEFT JOIN keeps non-dispatched tasks (NULL assignee); the MAX(rowid) subquery matches getDispatchContext's most-recent-active-dispatch semantics.
+  // Why: the correlated indexed lookup avoids materializing every retained Dispatch before filtering Tasks.
   listTasksWithDispatch(filter?: {
     status?: TaskStatus
     ready?: boolean
@@ -3879,16 +3891,14 @@ export class OrchestrationDb {
         d.assignee_handle AS assignee_handle,
         d.id              AS dispatch_id
       FROM tasks t
-      LEFT JOIN (
-        SELECT dc.*
-        FROM dispatch_contexts dc
-        INNER JOIN (
-          SELECT task_id, MAX(rowid) AS max_rowid
-          FROM dispatch_contexts
-          WHERE status IN ('pending', 'dispatched')
-          GROUP BY task_id
-        ) latest ON latest.task_id = dc.task_id AND latest.max_rowid = dc.rowid
-      ) d ON d.task_id = t.id
+      LEFT JOIN dispatch_contexts d ON d.rowid = (
+        SELECT candidate.rowid
+        FROM dispatch_contexts candidate
+        WHERE candidate.task_id = t.id
+          AND candidate.status IN ('pending', 'dispatched')
+        ORDER BY candidate.rowid DESC
+        LIMIT 1
+      )
       ${where}
       ORDER BY t.created_at
     `
@@ -5096,13 +5106,44 @@ export class OrchestrationDb {
     dispatchId: string
     direction: FederationRelayDirection
     throughSequence: number
+    settleRemoteReport?: { sequence: number; outcome: WorkerReportOutcome }
   }): void {
-    this.db
-      .prepare(
-        `UPDATE federation_relay_items SET acked_at = COALESCE(acked_at, datetime('now'))
-         WHERE dispatch_id = ? AND direction = ? AND sequence <= ?`
-      )
-      .run(params.dispatchId, params.direction, params.throughSequence)
+    this.db.exec('BEGIN IMMEDIATE')
+    try {
+      if (params.settleRemoteReport) {
+        const report = this.getFederationRelayItem(
+          params.dispatchId,
+          params.direction,
+          params.settleRemoteReport.sequence
+        )
+        if (
+          params.direction !== 'to_home' ||
+          params.settleRemoteReport.sequence > params.throughSequence ||
+          report?.kind !== 'worker_done' ||
+          parseFederatedWorkerReportOutcome(report.payload) !== params.settleRemoteReport.outcome
+        ) {
+          throw new OrchestrationError(
+            'request_mismatch',
+            `Federation acknowledgment for ${params.dispatchId} does not match its queued worker_done.`
+          )
+        }
+        this.settleRemoteAttachmentInRelayTransaction(
+          params.dispatchId,
+          params.settleRemoteReport.outcome,
+          'worker_report_settled'
+        )
+      }
+      this.db
+        .prepare(
+          `UPDATE federation_relay_items SET acked_at = COALESCE(acked_at, datetime('now'))
+           WHERE dispatch_id = ? AND direction = ? AND sequence <= ?`
+        )
+        .run(params.dispatchId, params.direction, params.throughSequence)
+      this.db.exec('COMMIT')
+    } catch (error) {
+      this.db.exec('ROLLBACK')
+      throw error
+    }
   }
 
   setFederatedHomeImportSequence(dispatchId: string, sequence: number): void {
@@ -5140,7 +5181,11 @@ export class OrchestrationDb {
           result: string
         }
       | { kind: 'rejected'; code: string; reason: string }
-  }): { message: MessageRow; duplicate: boolean } {
+  }): {
+    message: MessageRow
+    duplicate: boolean
+    lifecycle?: WorkerReportSettlement | { action: 'rejected'; code: string; reason: string }
+  } {
     this.db.exec('BEGIN IMMEDIATE')
     try {
       const federated = this.getFederatedDispatch(params.dispatchId)
@@ -5150,18 +5195,14 @@ export class OrchestrationDb {
           `Federated Dispatch ${params.dispatchId} was not found.`
         )
       }
-      if (params.sequence <= federated.to_home_imported_sequence) {
-        const existing = this.getMessageById(params.message.id)
-        if (!existing) {
-          throw new OrchestrationError(
-            'operation_unknown',
-            `Federated relay sequence ${params.sequence} was committed without its message.`
-          )
-        }
-        this.db.exec('COMMIT')
-        return { message: existing, duplicate: true }
+      const duplicate = params.sequence <= federated.to_home_imported_sequence
+      if (duplicate && !this.getMessageById(params.message.id)) {
+        throw new OrchestrationError(
+          'operation_unknown',
+          `Federated relay sequence ${params.sequence} was committed without its message.`
+        )
       }
-      if (params.sequence !== federated.to_home_imported_sequence + 1) {
+      if (!duplicate && params.sequence !== federated.to_home_imported_sequence + 1) {
         throw new OrchestrationError(
           'operation_unknown',
           `Federated relay for ${params.dispatchId} is not contiguous after sequence ${federated.to_home_imported_sequence}.`
@@ -5188,32 +5229,45 @@ export class OrchestrationDb {
           dispatchId: params.dispatchId
         })
       }
-      if (params.lifecycle.kind === 'heartbeat') {
+      let lifecycle:
+        | WorkerReportSettlement
+        | { action: 'rejected'; code: string; reason: string }
+        | undefined
+      if (params.lifecycle.kind === 'heartbeat' && !duplicate) {
         this.recordHeartbeat(params.dispatchId, params.lifecycle.at)
       } else if (params.lifecycle.kind === 'worker_report') {
-        const settlement = this.settleWorkerReportInTransaction({
+        lifecycle = this.settleWorkerReportInTransaction({
           taskId: params.lifecycle.taskId,
           dispatchId: params.dispatchId,
           outcome: params.lifecycle.outcome,
           result: params.lifecycle.result
         })
-        if (settlement.action === 'rejected') {
+        if (lifecycle.action === 'rejected' && !duplicate) {
           message = this.convertLifecycleMessageToRejection(
             message.id,
-            settlement.code,
-            settlement.reason
+            lifecycle.code,
+            lifecycle.reason
           ) as MessageRow
         }
       } else if (params.lifecycle.kind === 'rejected') {
-        message = this.convertLifecycleMessageToRejection(
-          message.id,
-          params.lifecycle.code,
-          params.lifecycle.reason
-        ) as MessageRow
+        lifecycle = {
+          action: 'rejected',
+          code: params.lifecycle.code,
+          reason: params.lifecycle.reason
+        }
+        if (!duplicate) {
+          message = this.convertLifecycleMessageToRejection(
+            message.id,
+            params.lifecycle.code,
+            params.lifecycle.reason
+          ) as MessageRow
+        }
+      }
+      if (!duplicate) {
+        this.setFederatedHomeImportSequence(params.dispatchId, params.sequence)
       }
-      this.setFederatedHomeImportSequence(params.dispatchId, params.sequence)
       this.db.exec('COMMIT')
-      return { message, duplicate: false }
+      return { message, duplicate, ...(lifecycle ? { lifecycle } : {}) }
     } catch (error) {
       this.db.exec('ROLLBACK')
       throw error
@@ -5314,19 +5368,37 @@ export class OrchestrationDb {
 
   private settleRemoteAttachmentInRelayTransaction(
     dispatchId: string,
-    outcome: WorkerReportOutcome | undefined
+    outcome: WorkerReportOutcome | undefined,
+    stage = 'worker_report_queued'
   ): void {
     if (!outcome) {
       return
     }
+    const attachment = this.getRemoteDispatchAttachment(dispatchId)
+    const state = outcome === 'succeeded' ? 'succeeded' : 'failed'
+    if (!attachment) {
+      throw new OrchestrationError(
+        'dispatch_not_found',
+        `Remote Dispatch ${dispatchId} was not found.`
+      )
+    }
+    if (attachment.state === state) {
+      return
+    }
+    if (attachment.state !== 'ready') {
+      throw new OrchestrationError(
+        'request_mismatch',
+        `Remote Dispatch ${dispatchId} cannot settle as ${state} from ${attachment.state}.`
+      )
+    }
     this.db
       .prepare(
         `UPDATE remote_dispatch_attachments
-         SET state = ?, stage = 'worker_report_queued', capability_hash = NULL,
+         SET state = ?, stage = ?, capability_hash = NULL,
              updated_at = datetime('now')
          WHERE dispatch_id = ? AND state = 'ready'`
       )
-      .run(outcome === 'succeeded' ? 'succeeded' : 'failed', dispatchId)
+      .run(state, stage, dispatchId)
   }
 
   isDispatchProcessCurrent(params: {
@@ -5818,12 +5890,12 @@ export class OrchestrationDb {
       if (!worker) {
         throw new OrchestrationError('dispatch_not_found', `Dispatch ${dispatchId} was not found.`)
       }
-      if (!['succeeded', 'failed'].includes(worker.state)) {
+      if (!WORKER_SETTLED_STATES.includes(worker.state)) {
         // Why: release is post-completion cleanup only; recording intent for an unsettled or
         // uncertain worker would let recovery close a terminal the coordinator never reviewed.
         throw new OrchestrationError(
           'dispatch_inactive',
-          `Dispatch ${dispatchId} is ${worker.state}; only a succeeded or failed worker can release. Use worker-stop to cancel an active worker.`
+          `Dispatch ${dispatchId} is ${worker.state}; only a settled worker can release. Use worker-stop to cancel an active worker.`
         )
       }
       const resource = this.getWorkerTerminalResourceByOwner(dispatchId)
@@ -5838,6 +5910,10 @@ export class OrchestrationDb {
         this.db.exec('COMMIT')
         return { disposition: 'already_released', resource }
       }
+      if (worker.state === 'stopped' || worker.state === 'abandoned') {
+        this.db.exec('COMMIT')
+        return { disposition: 'retained', resource, reason: 'identity_unproven' }
+      }
       if (resource.ownership_state === 'external') {
         this.db.exec('COMMIT')
         return {
@@ -5886,6 +5962,66 @@ export class OrchestrationDb {
     }
   }
 
+  settleDeadWorkerTerminalRelease(params: {
+    requestingDispatchId: string
+    resourceId: string
+    processIncarnation: string
+  }):
+    | { disposition: 'released'; resource: WorkerTerminalResourceRow }
+    | { disposition: 'retained'; resource: WorkerTerminalResourceRow } {
+    this.db.exec('BEGIN IMMEDIATE')
+    try {
+      const resource = this.getWorkerTerminalResource(params.resourceId)
+      if (!resource) {
+        throw new OrchestrationError(
+          'dispatch_not_found',
+          `Worker terminal resource ${params.resourceId} was not found.`
+        )
+      }
+      const priorOwners = parseWorkerTerminalPriorOwnerIds(resource.prior_owner_dispatch_ids)
+      const requesterRelated =
+        resource.owner_dispatch_id === params.requestingDispatchId ||
+        priorOwners?.includes(params.requestingDispatchId) === true
+      const requester = this.getWorkerDispatch(params.requestingDispatchId)
+      const owner = this.getWorkerDispatch(resource.owner_dispatch_id)
+      const requesterSettled = Boolean(requester && WORKER_SETTLED_STATES.includes(requester.state))
+      const ownerSettled = Boolean(owner && WORKER_SETTLED_STATES.includes(owner.state))
+      if (
+        !priorOwners ||
+        !requesterRelated ||
+        !requesterSettled ||
+        !ownerSettled ||
+        resource.process_incarnation !== params.processIncarnation ||
+        resource.ownership_state === 'released' ||
+        !['not_requested', 'retained', 'unknown'].includes(resource.release_state)
+      ) {
+        this.db.exec('COMMIT')
+        return { disposition: 'retained', resource }
+      }
+      this.db
+        .prepare(
+          `UPDATE worker_terminal_resources
+           SET release_state = 'released', ownership_state = 'released', retained_reason = NULL,
+               release_requested_at = COALESCE(release_requested_at, datetime('now')),
+               release_completed_at = datetime('now'), release_error = NULL,
+               updated_at = datetime('now')
+           WHERE id = ? AND process_incarnation = ? AND ownership_state != 'released'
+             AND release_state IN ('not_requested', 'retained', 'unknown')`
+        )
+        .run(params.resourceId, params.processIncarnation)
+      const released = this.getWorkerTerminalResource(
+        params.resourceId
+      ) as WorkerTerminalResourceRow
+      this.db.exec('COMMIT')
+      return released.release_state === 'released'
+        ? { disposition: 'released', resource: released }
+        : { disposition: 'retained', resource: released }
+    } catch (error) {
+      this.db.exec('ROLLBACK')
+      throw error
+    }
+  }
+
   storeWorkerTerminalArchive(params: {
     dispatchId: string
     resourceId: string
@@ -6804,3 +6940,18 @@ export class OrchestrationDb {
     this.db.close()
   }
 }
+
+function parseFederatedWorkerReportOutcome(payload: string): WorkerReportOutcome | undefined {
+  try {
+    const message = JSON.parse(payload) as { payload?: unknown }
+    if (typeof message.payload !== 'string') {
+      return undefined
+    }
+    const report = JSON.parse(message.payload) as { outcome?: unknown }
+    return report.outcome === 'succeeded' || report.outcome === 'failed'
+      ? report.outcome
+      : undefined
+  } catch {
+    return undefined
+  }
+}
diff --git a/src/main/runtime/orchestration/federation-lifecycle-settlement.ts b/src/main/runtime/orchestration/federation-lifecycle-settlement.ts
new file mode 100644
index 00000000000..921db91b728
--- /dev/null
+++ b/src/main/runtime/orchestration/federation-lifecycle-settlement.ts
@@ -0,0 +1,70 @@
+import type { OrcaRuntimeService } from '../orca-runtime'
+
+export type FederatedLifecycleSettlement =
+  | { action: 'completed' | 'failed'; authority: 'run_home' }
+  | { action: 'rejected'; code: string; reason: string; authority: 'run_home' }
+
+type Waiter = (settlement: FederatedLifecycleSettlement) => void
+
+const waitersByRuntime = new WeakMap<OrcaRuntimeService, Map<string, Set<Waiter>>>()
+
+export function publishFederatedLifecycleSettlement(
+  runtime: OrcaRuntimeService,
+  dispatchId: string,
+  sequence: number,
+  settlement: FederatedLifecycleSettlement
+): void {
+  const waiters = waitersByRuntime.get(runtime)?.get(settlementKey(dispatchId, sequence))
+  for (const waiter of waiters ?? []) {
+    waiter(settlement)
+  }
+}
+
+export function waitForFederatedLifecycleSettlement(
+  runtime: OrcaRuntimeService,
+  dispatchId: string,
+  sequence: number,
+  options: { timeoutMs: number; signal?: AbortSignal }
+): Promise<FederatedLifecycleSettlement | undefined> {
+  return new Promise((resolve) => {
+    if (options.signal?.aborted) {
+      resolve(undefined)
+      return
+    }
+    const runtimeWaiters = getRuntimeWaiters(runtime)
+    const key = settlementKey(dispatchId, sequence)
+    const waiters = runtimeWaiters.get(key) ?? new Set<Waiter>()
+    runtimeWaiters.set(key, waiters)
+    let timer: ReturnType<typeof setTimeout> | undefined
+    const finish = (settlement?: FederatedLifecycleSettlement) => {
+      if (timer) {
+        clearTimeout(timer)
+      }
+      options.signal?.removeEventListener('abort', onAbort)
+      waiters.delete(onSettlement)
+      if (waiters.size === 0) {
+        runtimeWaiters.delete(key)
+      }
+      resolve(settlement)
+    }
+    const onSettlement: Waiter = (settlement) => finish(settlement)
+    const onAbort = () => finish()
+    waiters.add(onSettlement)
+    options.signal?.addEventListener('abort', onAbort, { once: true })
+    timer = setTimeout(() => finish(), options.timeoutMs)
+  })
+}
+
+function getRuntimeWaiters(runtime: OrcaRuntimeService): Map<string, Set<Waiter>> {
+  const existing = waitersByRuntime.get(runtime)
+  if (existing) {
+    return existing
+  }
+  const created = new Map<string, Set<Waiter>>()
+  waitersByRuntime.set(runtime, created)
+  return created
+}
+
+function settlementKey(dispatchId: string, sequence: number): string {
+  return `${dispatchId}:${sequence}`
+}
diff --git a/src/main/runtime/orchestration/federation-sync.ts b/src/main/runtime/orchestration/federation-sync.ts
index 5ad4f1fc09a..13ec9dce561 100644
--- a/src/main/runtime/orchestration/federation-sync.ts
+++ b/src/main/runtime/orchestration/federation-sync.ts
@@ -5,6 +5,8 @@ import {
   type WorkerReportOutcome
 } from './types'
 import type { OrcaRuntimeService } from '../orca-runtime'
+import type { FederatedLifecycleSettlement } from './federation-lifecycle-settlement'
+import { ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION } from '../../../shared/protocol-version'
 import { OrchestrationError } from './orchestration-error'
 import {
   acquireFederationAckLease,
@@ -58,6 +60,8 @@ export async function syncFederatedDispatch(
     )
   }
   const ackLease = acquireFederationAckLease(runtime, dispatchId)
+  const supportsLifecycleSettlement =
+    federated.protocol_version >= ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION
 
   const pulled = (await runtime.callOrchestrationWorkerServer(
     federated.environment_id,
@@ -65,12 +69,17 @@ export async function syncFederatedDispatch(
     {
       dispatchId,
       afterSequence: federated.to_home_imported_sequence,
+      ...(supportsLifecycleSettlement ? { replayUnacknowledged: true } : {}),
       limit: 50
     },
     15_000
   )) as { runtimeEpoch: string; items: PulledRelayItem[] }
-  let cursor = federated.to_home_imported_sequence
+  let cursor =
+    supportsLifecycleSettlement && pulled.items.length > 0
+      ? pulled.items[0].sequence - 1
+      : federated.to_home_imported_sequence
   let imported = 0
+  const settlements: { sequence: number; lifecycle: FederatedLifecycleSettlement }[] = []
   for (const item of pulled.items) {
     if (item.dispatch_id !== dispatchId || item.sequence !== cursor + 1) {
       throw new OrchestrationError(
@@ -96,6 +105,18 @@ export async function syncFederatedDispatch(
       },
       lifecycle: parseFederatedLifecycle(message, item.message_id, dispatchId, dispatch.task_id)
     })
+    if (stored.lifecycle && supportsLifecycleSettlement) {
+      settlements.push({
+        sequence: item.sequence,
+        lifecycle:
+          stored.lifecycle.action === 'settled'
+            ? {
+                action: stored.lifecycle.outcome === 'succeeded' ? 'completed' : 'failed',
+                authority: 'run_home'
+              }
+            : { ...stored.lifecycle, authority: 'run_home' }
+      })
+    }
     cursor = item.sequence
     runtime.notifyMessageArrived(stored.message.to_handle, stored.message.type)
     imported += stored.duplicate ? 0 : 1
@@ -110,7 +131,11 @@ export async function syncFederatedDispatch(
     await runtime.callOrchestrationWorkerServer(
       federated.environment_id,
       'orchestration.federationAck',
-      { dispatchId, throughSequence: cursor },
+      {
+        dispatchId,
+        throughSequence: cursor,
+        ...(settlements.length > 0 ? { settlements } : {})
+      },
       15_000,
       { orchestrationRequestId: `relay_ack_${dispatchId}_${cursor}` }
     )
diff --git a/src/main/runtime/orchestration/setup-completion-signal.ts b/src/main/runtime/orchestration/setup-completion-signal.ts
index 23e22008387..15c74d2294e 100644
--- a/src/main/runtime/orchestration/setup-completion-signal.ts
+++ b/src/main/runtime/orchestration/setup-completion-signal.ts
@@ -61,7 +61,7 @@ export function createSetupCompletionScanner(
       }
       const combined = `${carry}${data}`
       const markerIndex = combined.lastIndexOf(expectedPrefix)
-      if (markerIndex >= 0) {
+      if (markerIndex !== -1) {
         const suffix = combined.slice(markerIndex + expectedPrefix.length)
         const match = suffix.match(/^(-?\d+)\r?\n/)
         if (match) {
diff --git a/src/main/runtime/orchestration/worker-terminal-process-liveness.ts b/src/main/runtime/orchestration/worker-terminal-process-liveness.ts
new file mode 100644
index 00000000000..5a6e92c7878
--- /dev/null
+++ b/src/main/runtime/orchestration/worker-terminal-process-liveness.ts
@@ -0,0 +1,62 @@
+import type { PtyProcessInfo } from '../../providers/pty-process-info'
+
+export type WorkerTerminalHostScope =
+  | { kind: 'local'; hostId: 'local' }
+  | { kind: 'wsl'; hostId: 'local'; distro: string }
+  | { kind: 'ssh'; targetId: string }
+
+export function parseWorkerTerminalHostScope(value: string | null): WorkerTerminalHostScope | null {
+  if (!value) {
+    return null
+  }
+  let parsed: unknown
+  try {
+    parsed = JSON.parse(value)
+  } catch {
+    return null
+  }
+  if (!parsed || typeof parsed !== 'object') {
+    return null
+  }
+  const scope = parsed as Record<string, unknown>
+  if (scope.kind === 'local' && scope.hostId === 'local') {
+    return { kind: 'local', hostId: 'local' }
+  }
+  if (
+    scope.kind === 'wsl' &&
+    scope.hostId === 'local' &&
+    typeof scope.distro === 'string' &&
+    scope.distro.length > 0
+  ) {
+    return { kind: 'wsl', hostId: 'local', distro: scope.distro }
+  }
+  if (scope.kind === 'ssh' && typeof scope.targetId === 'string' && scope.targetId.length > 0) {
+    return { kind: 'ssh', targetId: scope.targetId }
+  }
+  return null
+}
+
+export function classifyWorkerTerminalProcessIncarnation(
+  processIncarnation: string,
+  sessions: readonly PtyProcessInfo[]
+): 'live' | 'dead' | 'unknown' {
+  const possibleMatches = sessions.filter((session) =>
+    processIncarnation.startsWith(`${session.id}:`)
+  )
+  if (
+    possibleMatches.some((session) => {
+      const incarnationId = session.incarnationId
+      if (!incarnationId || incarnationId !== incarnationId.trim()) {
+        return false
+      }
+      return `${session.id}:${incarnationId}` === processIncarnation
+    })
+  ) {
+    return 'live'
+  }
+  return possibleMatches.some(
+    (session) => !session.incarnationId || session.incarnationId !== session.incarnationId.trim()
+  )
+    ? 'unknown'
+    : 'dead'
+}
diff --git a/src/main/runtime/quarter-circle-title-send-authorization.test.ts b/src/main/runtime/quarter-circle-title-send-authorization.test.ts
new file mode 100644
index 00000000000..d8e58073cb0
--- /dev/null
+++ b/src/main/runtime/quarter-circle-title-send-authorization.test.ts
@@ -0,0 +1,212 @@
+// STA-4028 (regression from #13925): quarter circles are ordinary progress glyphs —
+// ora, installers, any TUI animates them — so a title carrying nothing else must not
+// authorize a guarded send, which auto-submits with Enter into whatever owns the pane.
+import { describe, expect, it, vi } from 'vitest'
+import { OrcaRuntimeService } from './orca-runtime'
+import { assertTerminalAgentSendable } from './rpc/terminal-agent-send-guard'
+import { detectAgentStatusFromTitle } from '../../shared/agent-detection'
+
+vi.mock('electron', () => ({
+  BrowserWindow: { fromId: vi.fn(() => null) },
+  webContents: { fromId: vi.fn(() => null) },
+  ipcMain: { on: vi.fn(), removeListener: vi.fn() },
+  app: { getPath: vi.fn(() => '/tmp') }
+}))
+
+const LEAF_ID = '11111111-1111-4111-8111-111111111111'
+const TAB_ID = 'tab-1'
+const WORKTREE_ID = 'wt-1'
+const PTY_ID = 'pty-1'
+
+// Captured from Claude Code 2.1.228 while it read this repository's package.json.
+const SPINNER_ONLY_TITLE = '◑ Check package version in package.json'
+const SPINNER_WITH_IDENTITY_TITLE = '◐ Claude Code'
+const BRAILLE_SPINNER_ONLY_TITLE = '⠂ Deploying release 4.2'
+
+async function createRuntimeWithTitle(
+  paneTitle: string,
+  foregroundProcess: string | null,
+  launchAgent?: 'claude',
+  verifiedLaunch = true
+): Promise<{
+  runtime: OrcaRuntimeService
+  handle: string
+  getForegroundProcess: ReturnType<typeof vi.fn>
+}> {
+  const runtime = new OrcaRuntimeService(null)
+  const internals = runtime as unknown as {
+    resolveTerminalWorkspaceLaunchScope: (selector: string) => Promise<unknown>
+  }
+  vi.spyOn(internals, 'resolveTerminalWorkspaceLaunchScope').mockResolvedValue({
+    id: WORKTREE_ID,
+    path: '/repo/app',
+    connectionId: null,
+    repo: null,
+    folderWorkspace: null
+  })
+  const getForegroundProcess = vi.fn(async () => foregroundProcess)
+  runtime.setPtyController({
+    spawn: vi.fn().mockResolvedValue({ id: PTY_ID, incarnationId: 'initial-incarnation' }),
+    write: () => true,
+    kill: () => true,
+    getForegroundProcess
+  })
+  const terminal = await runtime.createTerminal(`id:${WORKTREE_ID}`, {
+    tabId: TAB_ID,
+    leafId: LEAF_ID,
+    title: 'Terminal',
+    ...(launchAgent
+      ? {
+          launchAgent,
+          ...(verifiedLaunch
+            ? { launchConfig: { agentCommand: 'claude', agentArgs: '', agentEnv: {} } }
+            : {})
+        }
+      : {})
+  })
+  runtime.attachWindow(1)
+  runtime.syncWindowGraph(1, {
+    tabs: [
+      {
+        tabId: TAB_ID,
+        worktreeId: WORKTREE_ID,
+        title: 'Terminal',
+        activeLeafId: LEAF_ID,
+        layout: null
+      }
+    ],
+    leaves: [
+      {
+        tabId: TAB_ID,
+        worktreeId: WORKTREE_ID,
+        leafId: LEAF_ID,
+        paneRuntimeId: 1,
+        ptyId: PTY_ID,
+        paneTitle
+      }
+    ]
+  })
+  return { runtime, handle: terminal.handle, getForegroundProcess }
+}
+
+const AUTHORIZED = 'authorized'
+
+async function guardedSendResult(runtime: OrcaRuntimeService, handle: string): Promise<string> {
+  try {
+    await assertTerminalAgentSendable({ runtime, handle, assertWritable: () => {} })
+    return AUTHORIZED
+  } catch (error) {
+    return error instanceof Error ? error.message : String(error)
+  }
+}
+
+describe('quarter-circle title send authorization (STA-4028)', () => {
+  it('refuses a guarded send when a quarter-circle spinner is the only agent evidence', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(SPINNER_ONLY_TITLE, 'node')
+
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toMatchObject({
+      isRunningAgent: false
+    })
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe('terminal_guard_no_agent')
+  })
+
+  it('refuses a guarded send when the foreground process cannot be read at all', async () => {
+    // Why: SSH and folder-workspace panes can fail the foreground read; no evidence
+    // stays a refusal rather than falling back to the glyph.
+    const { runtime, handle } = await createRuntimeWithTitle(SPINNER_ONLY_TITLE, null)
+
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe('terminal_guard_no_agent')
+  })
+
+  it('authorizes a guarded send when the foreground process is a recognized agent', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(SPINNER_ONLY_TITLE, 'claude')
+
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toMatchObject({
+      isRunningAgent: true,
+      status: 'working'
+    })
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe(AUTHORIZED)
+  })
+
+  it('authorizes a managed Claude launch when the foreground process is unavailable', async () => {
+    const { runtime, handle, getForegroundProcess } = await createRuntimeWithTitle(
+      SPINNER_ONLY_TITLE,
+      null,
+      'claude'
+    )
+    expect(
+      (
+        runtime as unknown as {
+          ptysById: Map<string, { launchAgent: string | null; launchToken: string | null }>
+        }
+      ).ptysById.get(PTY_ID)
+    ).toMatchObject({ launchAgent: 'claude', launchToken: expect.any(String) })
+
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toMatchObject({
+      isRunningAgent: true,
+      status: 'working'
+    })
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe(AUTHORIZED)
+    expect(getForegroundProcess).not.toHaveBeenCalled()
+  })
+
+  it('does not trust an unverified Claude launch hint', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(
+      SPINNER_ONLY_TITLE,
+      null,
+      'claude',
+      false
+    )
+
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe('terminal_guard_no_agent')
+  })
+
+  it('does not carry managed Claude identity into a replacement PTY incarnation', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(SPINNER_ONLY_TITLE, null, 'claude')
+    const pty = (
+      runtime as unknown as {
+        ptysById: Map<
+          string,
+          { incarnationId: string | null; launchIncarnationId: string | null; launchToken: string }
+        >
+      }
+    ).ptysById.get(PTY_ID)
+    expect(pty).toMatchObject({
+      incarnationId: 'initial-incarnation',
+      launchIncarnationId: 'initial-incarnation'
+    })
+
+    runtime.onPtySpawned(PTY_ID, 'replacement-incarnation', { awaitsRegistration: false })
+
+    expect(pty).toMatchObject({
+      incarnationId: 'replacement-incarnation',
+      launchIncarnationId: 'initial-incarnation',
+      launchToken: expect.any(String)
+    })
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toMatchObject({
+      isRunningAgent: false
+    })
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe('terminal_guard_no_agent')
+  })
+
+  it('authorizes a guarded send when the busy title itself names the agent', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(SPINNER_WITH_IDENTITY_TITLE, null)
+
+    await expect(runtime.getTerminalAgentStatus(handle)).resolves.toMatchObject({
+      isRunningAgent: true,
+      status: 'working'
+    })
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe(AUTHORIZED)
+  })
+
+  it('leaves braille-spinner authorization unchanged', async () => {
+    const { runtime, handle } = await createRuntimeWithTitle(BRAILLE_SPINNER_ONLY_TITLE, null)
+
+    await expect(guardedSendResult(runtime, handle)).resolves.toBe(AUTHORIZED)
+  })
+
+  it('keeps the quarter-circle glyph a working activity signal (#13889)', async () => {
+    expect(detectAgentStatusFromTitle(SPINNER_ONLY_TITLE)).toBe('working')
+    expect(detectAgentStatusFromTitle(SPINNER_WITH_IDENTITY_TITLE)).toBe('working')
+  })
+})
diff --git a/src/main/runtime/repo-worktree-admin-fingerprint.test.ts b/src/main/runtime/repo-worktree-admin-fingerprint.test.ts
new file mode 100644
index 00000000000..15d4aad4484
--- /dev/null
+++ b/src/main/runtime/repo-worktree-admin-fingerprint.test.ts
@@ -0,0 +1,152 @@
+// Real-binary coverage: the fingerprint's whole job is to predict what `git worktree list` would
+// report, so a mocked filesystem would only prove the assumptions, not the Git layout they model.
+import { execFile } from 'node:child_process'
+import { mkdir, mkdtemp, realpath, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { promisify } from 'node:util'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+import { readRepoWorktreeAdminFingerprint } from './repo-worktree-admin-fingerprint'
+
+const execFileAsync = promisify(execFile)
+
+let scratchDir = ''
+let repoPath = ''
+let worktreePath = ''
+
+async function git(args: string[], cwd: string): Promise<string> {
+  const { stdout } = await execFileAsync('git', args, { cwd })
+  return stdout
+}
+
+async function fingerprint(path = repoPath): Promise<string | null> {
+  return await readRepoWorktreeAdminFingerprint(path)
+}
+
+beforeEach(async () => {
+  // realpath: macOS hands out /var/... temp paths while Git records /private/var/... in `gitdir`.
+  scratchDir = await realpath(await mkdtemp(join(tmpdir(), 'orca-worktree-fingerprint-')))
+  repoPath = join(scratchDir, 'repo')
+  worktreePath = join(scratchDir, 'trees', 'feature')
+  await mkdir(repoPath, { recursive: true })
+  await mkdir(join(scratchDir, 'trees'), { recursive: true })
+  await git(['init', '-q'], repoPath)
+  await git(['config', 'user.email', 'fingerprint@example.invalid'], repoPath)
+  await git(['config', 'user.name', 'Fingerprint'], repoPath)
+  await writeFile(join(repoPath, 'seed.txt'), 'seed\n')
+  await git(['add', '-A'], repoPath)
+  await git(['commit', '-qm', 'seed'], repoPath)
+  await git(['worktree', 'add', '-q', worktreePath, '-b', 'feature'], repoPath)
+})
+
+afterEach(async () => {
+  await rm(scratchDir, { recursive: true, force: true })
+})
+
+describe('readRepoWorktreeAdminFingerprint', () => {
+  it('is stable while nothing changes', async () => {
+    const first = await fingerprint()
+    expect(first).not.toBeNull()
+    expect(await fingerprint()).toBe(first)
+  })
+
+  it('changes when a worktree is added', async () => {
+    const before = await fingerprint()
+    await git(
+      ['worktree', 'add', '-q', join(scratchDir, 'trees', 'second'), '-b', 'second'],
+      repoPath
+    )
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a worktree is removed', async () => {
+    const before = await fingerprint()
+    await git(['worktree', 'remove', worktreePath], repoPath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a worktree directory is deleted outside Git', async () => {
+    // The admin dir is untouched by `rm -rf`, but the row's `prunable` flag flips.
+    const before = await fingerprint()
+    await rm(worktreePath, { recursive: true, force: true })
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a worktree is moved', async () => {
+    const before = await fingerprint()
+    await git(['worktree', 'move', worktreePath, join(scratchDir, 'trees', 'moved')], repoPath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a worktree is locked', async () => {
+    const before = await fingerprint()
+    await git(['worktree', 'lock', worktreePath], repoPath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a linked worktree switches branch', async () => {
+    const before = await fingerprint()
+    // A longer ref name keeps the difference visible even on a coarse mtime clock.
+    await git(['checkout', '-q', '-b', 'feature-with-a-much-longer-name'], worktreePath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when a linked worktree records a commit', async () => {
+    // Committing rewrites refs/heads/feature and leaves HEAD alone, but moves the reported HEAD oid.
+    const before = await fingerprint()
+    await writeFile(join(worktreePath, 'work.txt'), 'work\n')
+    await git(['add', '-A'], worktreePath)
+    await git(['commit', '-qm', 'work'], worktreePath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when the main worktree records a commit', async () => {
+    const before = await fingerprint()
+    await writeFile(join(repoPath, 'more.txt'), 'more\n')
+    await git(['add', '-A'], repoPath)
+    await git(['commit', '-qm', 'more'], repoPath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('still tracks a tip whose loose ref has been packed away', async () => {
+    await git(['pack-refs', '--all'], repoPath)
+    const before = await fingerprint()
+    await writeFile(join(worktreePath, 'packed.txt'), 'packed\n')
+    await git(['add', '-A'], worktreePath)
+    await git(['commit', '-qm', 'packed'], worktreePath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('changes when the main worktree switches branch', async () => {
+    const before = await fingerprint()
+    await git(['checkout', '-q', '-b', 'main-with-a-much-longer-name'], repoPath)
+    expect(await fingerprint()).not.toBe(before)
+  })
+
+  it('resolves the same admin state from a linked worktree path', async () => {
+    // A linked worktree can itself be the registered repo path; both must describe one common dir.
+    expect(await fingerprint(worktreePath)).toBe(await fingerprint(repoPath))
+  })
+
+  it('reads a bare repo through its own gitdir', async () => {
+    const barePath = join(scratchDir, 'bare.git')
+    await git(['clone', '-q', '--bare', repoPath, barePath], scratchDir)
+    const before = await fingerprint(barePath)
+    expect(before).not.toBeNull()
+    await git(
+      ['worktree', 'add', '-q', join(scratchDir, 'trees', 'from-bare'), '-b', 'bare-tree'],
+      barePath
+    )
+    expect(await fingerprint(barePath)).not.toBe(before)
+  })
+
+  it('returns null for a directory that is not a git repo', async () => {
+    const plainPath = join(scratchDir, 'plain')
+    await mkdir(plainPath, { recursive: true })
+    expect(await fingerprint(plainPath)).toBeNull()
+  })
+
+  it('returns null for a missing path', async () => {
+    expect(await fingerprint(join(scratchDir, 'absent'))).toBeNull()
+  })
+})
diff --git a/src/main/runtime/repo-worktree-admin-fingerprint.ts b/src/main/runtime/repo-worktree-admin-fingerprint.ts
new file mode 100644
index 00000000000..1c3cf103e67
--- /dev/null
+++ b/src/main/runtime/repo-worktree-admin-fingerprint.ts
@@ -0,0 +1,191 @@
+import { readdir, readFile, stat } from 'node:fs/promises'
+import path from 'node:path'
+import { mapWithConcurrency } from '../../shared/map-with-concurrency'
+
+// NUL can appear in neither a path nor a Git ref, so field boundaries stay unambiguous.
+const FIELD_SEPARATOR = '\u0000'
+const MISSING = '-'
+// Why: this runs per repo on a polling path, so a repo with hundreds of worktrees must not queue its
+// whole admin dir onto the fs threadpool at once. Mirrors SPARSE_CHECKOUT_DETECTION_CONCURRENCY.
+const LINKED_WORKTREE_PROBE_CONCURRENCY = 8
+
+/**
+ * Cheap, subprocess-free summary of a local repo's Git worktree administrative state.
+ *
+ * Equal fingerprints mean `git worktree list --porcelain` would report the same rows, so a caller
+ * can extend a scan cache instead of spawning Git. `null` means "cannot prove unchanged" (not a
+ * Git repo, unreadable layout, permission error) and callers must fall back to a real scan.
+ *
+ * Not covered: sparse-checkout pattern edits, and a tip moved through a ref store this cannot read
+ * exactly (packed refs, the reftable backend), which fall back to a coarser mtime + size stamp.
+ * Callers bound both with a periodic unconditional rescan.
+ */
+export async function readRepoWorktreeAdminFingerprint(repoPath: string): Promise<string | null> {
+  try {
+    const commonDir = await resolveGitCommonDir(repoPath)
+    if (!commonDir) {
+      return null
+    }
+    const adminDir = path.join(commonDir, 'worktrees')
+    const names = await readLinkedWorktreeNames(adminDir)
+    const [mainHead, mainExists, packedRefs, reftable] = await Promise.all([
+      readHeadStamp(commonDir, commonDir),
+      readExistenceStamp(repoPath),
+      // A tip whose loose ref file was packed away still moves these.
+      readFileStamp(path.join(commonDir, 'packed-refs')),
+      readFileStamp(path.join(commonDir, 'reftable'))
+    ])
+    const linked = await mapWithConcurrency(
+      names,
+      LINKED_WORKTREE_PROBE_CONCURRENCY,
+      async (name) => await readLinkedWorktreeStamp(commonDir, adminDir, name)
+    )
+    return [mainHead, mainExists, packedRefs, reftable, String(names.length), ...linked].join(
+      FIELD_SEPARATOR
+    )
+  } catch {
+    return null
+  }
+}
+
+async function readLinkedWorktreeStamp(
+  commonDir: string,
+  adminDir: string,
+  name: string
+): Promise<string> {
+  const entryDir = path.join(adminDir, name)
+  // `gitdir` holds "<worktree>/.git"; its contents follow `git worktree move` and `git worktree repair`.
+  const gitdirTarget = await readTrimmedFile(path.join(entryDir, 'gitdir'))
+  const [head, locked, worktreeExists] = await Promise.all([
+    readHeadStamp(commonDir, entryDir),
+    readExistenceStamp(path.join(entryDir, 'locked')),
+    // Deleting a worktree directory outside Orca flips its `prunable` row without touching the admin dir.
+    gitdirTarget ? readExistenceStamp(path.dirname(gitdirTarget)) : Promise.resolve(MISSING)
+  ])
+  return [name, gitdirTarget ?? MISSING, head, locked, worktreeExists].join(FIELD_SEPARATOR)
+}
+
+/**
+ * Identify the commit `git worktree list` would print for one checkout: the HEAD line itself plus,
+ * when HEAD is a symref, the tip it names. Reading the tip is what makes a plain commit visible —
+ * committing rewrites `refs/heads/<branch>` and leaves HEAD untouched.
+ */
+async function readHeadStamp(commonDir: string, headDir: string): Promise<string> {
+  const head = await readTrimmedFile(path.join(headDir, 'HEAD'))
+  if (!head) {
+    return MISSING
+  }
+  const refName = head.match(/^ref:\s*(.+?)\s*$/)?.[1]
+  if (!refName || !isSafeRefName(refName)) {
+    // Detached HEAD already holds the object id, and an unrecognized HEAD is covered by its own text.
+    return head
+  }
+  // Per-worktree refs (`refs/bisect`, `refs/worktree`) live beside the checkout; branches are shared.
+  const tip =
+    (await readTrimmedFile(path.join(headDir, refName))) ??
+    (await readTrimmedFile(path.join(commonDir, refName)))
+  return [head, tip ?? MISSING].join(FIELD_SEPARATOR)
+}
+
+/** Keep a hand-edited HEAD from steering the probe outside the repo's ref store. */
+function isSafeRefName(refName: string): boolean {
+  const segments = refName.split(/[\\/]/)
+  return (
+    segments[0] === 'refs' &&
+    segments.length > 1 &&
+    segments.every((segment) => segment.length > 0 && segment !== '.' && segment !== '..') &&
+    !path.isAbsolute(refName)
+  )
+}
+
+async function readLinkedWorktreeNames(adminDir: string): Promise<string[]> {
+  try {
+    const entries = await readdir(adminDir, { withFileTypes: true })
+    return entries
+      .filter((entry) => entry.isDirectory())
+      .map((entry) => entry.name)
+      .sort()
+  } catch (err) {
+    // A repo with no linked worktrees has no admin dir at all; anything else is a real read failure.
+    if (isMissingEntryError(err)) {
+      return []
+    }
+    throw err
+  }
+}
+
+async function resolveGitCommonDir(repoPath: string): Promise<string | null> {
+  const gitDir = await resolveGitDir(repoPath)
+  if (!gitDir) {
+    return null
+  }
+  // A linked worktree's gitdir points at the shared admin root through `commondir`.
+  const commonDir = await readTrimmedFile(path.join(gitDir, 'commondir'))
+  return commonDir ? path.resolve(gitDir, commonDir) : gitDir
+}
+
+async function resolveGitDir(repoPath: string): Promise<string | null> {
+  const dotGitPath = path.join(repoPath, '.git')
+  let dotGitStats: Awaited<ReturnType<typeof stat>> | null = null
+  try {
+    dotGitStats = await stat(dotGitPath)
+  } catch (err) {
+    if (!isMissingEntryError(err)) {
+      throw err
+    }
+  }
+  if (!dotGitStats) {
+    // Bare repo, or a repo path that already is a gitdir.
+    return (await readExistenceStamp(path.join(repoPath, 'HEAD'))) === 'y' ? repoPath : null
+  }
+  if (dotGitStats.isDirectory()) {
+    return dotGitPath
+  }
+  if (!dotGitStats.isFile()) {
+    return null
+  }
+  const contents = await readTrimmedFile(dotGitPath)
+  const match = contents?.match(/^gitdir:\s*(.+?)\s*$/m)
+  return match ? path.resolve(repoPath, match[1]) : null
+}
+
+async function readTrimmedFile(filePath: string): Promise<string | null> {
+  try {
+    const trimmed = (await readFile(filePath, 'utf-8')).trim()
+    return trimmed.length > 0 ? trimmed : null
+  } catch (err) {
+    if (isMissingEntryError(err)) {
+      return null
+    }
+    throw err
+  }
+}
+
+async function readFileStamp(filePath: string): Promise<string> {
+  try {
+    const stats = await stat(filePath)
+    return `${stats.mtimeMs}:${stats.size}`
+  } catch (err) {
+    if (isMissingEntryError(err)) {
+      return MISSING
+    }
+    throw err
+  }
+}
+
+async function readExistenceStamp(targetPath: string): Promise<string> {
+  try {
+    await stat(targetPath)
+    return 'y'
+  } catch (err) {
+    if (isMissingEntryError(err)) {
+      return 'n'
+    }
+    throw err
+  }
+}
+
+function isMissingEntryError(err: unknown): boolean {
+  const code = (err as NodeJS.ErrnoException | null)?.code
+  return code === 'ENOENT' || code === 'ENOTDIR'
+}
diff --git a/src/main/runtime/rpc/core.ts b/src/main/runtime/rpc/core.ts
index 8e09e942a08..fa3c812ce82 100644
--- a/src/main/runtime/rpc/core.ts
+++ b/src/main/runtime/rpc/core.ts
@@ -46,6 +46,7 @@ export type RpcRequest = {
   authToken: string
   method: string
   params?: unknown
+  expectedRuntimeId?: string
   orchestrationCapability?: string
   orchestrationContractVersion?: number
   orchestrationRequestId?: string
@@ -107,13 +108,13 @@ export type RpcContext = {
   ) => () => void
 }
 
-export type RpcHandler<TParams> = (params: TParams, ctx: RpcContext) => Promise<unknown> | unknown
+export type RpcHandler<TParams> = (params: TParams, ctx: RpcContext) => unknown
 
 // Why: RpcMethod erases the param type; centralizing the cast in defineMethod sidesteps RpcHandler's contravariance.
 export type RpcMethod = {
   readonly name: string
   readonly params: ZodType | null
-  readonly handler: (params: unknown, ctx: RpcContext) => Promise<unknown> | unknown
+  readonly handler: (params: unknown, ctx: RpcContext) => unknown
 }
 
 type DefineMethodSpec<TSchema extends ZodType | null> = {
diff --git a/src/main/runtime/rpc/dispatcher-computer-errors.test.ts b/src/main/runtime/rpc/dispatcher-computer-errors.test.ts
index 862973e3913..10bc94b771b 100644
--- a/src/main/runtime/rpc/dispatcher-computer-errors.test.ts
+++ b/src/main/runtime/rpc/dispatcher-computer-errors.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it } from 'vitest'
+import { describe, expect, it, vi } from 'vitest'
 import { z } from 'zod'
 import { RpcDispatcher } from './dispatcher'
 import { defineMethod, InvalidArgumentError, type RpcRequest } from './core'
@@ -41,6 +41,26 @@ const METHODS = [
 ]
 
 describe('RpcDispatcher computer-use validation errors', () => {
+  it('rejects a replacement runtime before invoking a one-shot handler', async () => {
+    const handler = vi.fn(() => ({ ok: true }))
+    const dispatcher = new RpcDispatcher({
+      runtime: makeRuntime(),
+      methods: [defineMethod({ name: 'terminal.create', params: z.object({}), handler })]
+    })
+
+    const response = await dispatcher.dispatch({
+      ...makeRequest('terminal.create', {}),
+      expectedRuntimeId: 'previous-runtime'
+    })
+
+    expect(response).toMatchObject({
+      ok: false,
+      error: { code: 'runtime_replaced' },
+      _meta: { runtimeId: 'test-runtime' }
+    })
+    expect(handler).not.toHaveBeenCalled()
+  })
+
   it('adds recovery steps to one-shot computer schema failures', async () => {
     const dispatcher = new RpcDispatcher({ runtime: makeRuntime(), methods: METHODS })
 
diff --git a/src/main/runtime/rpc/dispatcher.ts b/src/main/runtime/rpc/dispatcher.ts
index be11b2b0c64..995d0f00d64 100644
--- a/src/main/runtime/rpc/dispatcher.ts
+++ b/src/main/runtime/rpc/dispatcher.ts
@@ -43,6 +43,14 @@ export class RpcDispatcher {
 
   async dispatch(request: RpcRequest, options?: { signal?: AbortSignal }): Promise<RpcResponse> {
     const meta = this.meta()
+    if (request.expectedRuntimeId && request.expectedRuntimeId !== meta.runtimeId) {
+      return errorResponse(
+        request.id,
+        meta,
+        'runtime_replaced',
+        'The runtime changed before the request could be applied. Refresh and try again.'
+      )
+    }
     const method = this.registry.get(request.method)
     if (!method) {
       return errorResponse(
@@ -139,6 +147,19 @@ export class RpcDispatcher {
     options?: RpcDispatchStreamingOptions
   ): Promise<void> {
     const meta = this.meta()
+    if (request.expectedRuntimeId && request.expectedRuntimeId !== meta.runtimeId) {
+      reply(
+        JSON.stringify(
+          errorResponse(
+            request.id,
+            meta,
+            'runtime_replaced',
+            'The runtime changed before the request could be applied. Refresh and try again.'
+          )
+        )
+      )
+      return
+    }
     const method = this.registry.get(request.method)
     if (!method) {
       reply(
diff --git a/src/main/runtime/rpc/methods/client-ui.ts b/src/main/runtime/rpc/methods/client-ui.ts
index 540333bf5ac..73326756cd9 100644
--- a/src/main/runtime/rpc/methods/client-ui.ts
+++ b/src/main/runtime/rpc/methods/client-ui.ts
@@ -8,7 +8,7 @@ import {
 } from './client-ui-schemas'
 // Type-only side effect: keeps the schema/PersistedUIState parity assertions in
 // the typecheck graph so drift fails the build instead of a paired client.
-import type {} from './ui-state-schema-parity-checks'
+
 import { TerminalQuickCommandsUpdate } from './terminal-quick-command-rpc-schema'
 
 export const CLIENT_UI_METHODS: RpcMethod[] = [
diff --git a/src/main/runtime/rpc/methods/files-terminal-path-resolution.test.ts b/src/main/runtime/rpc/methods/files-terminal-path-resolution.test.ts
index 2055222ff7f..d589b74116c 100644
--- a/src/main/runtime/rpc/methods/files-terminal-path-resolution.test.ts
+++ b/src/main/runtime/rpc/methods/files-terminal-path-resolution.test.ts
@@ -40,7 +40,8 @@ describe('files.resolveTerminalPath RPC', () => {
       '/repo',
       undefined,
       'term-1',
-      false
+      false,
+      null
     )
     expect(response).toMatchObject({
       ok: true,
@@ -67,7 +68,30 @@ describe('files.resolveTerminalPath RPC', () => {
       null,
       undefined,
       null,
-      true
+      true,
+      null
+    )
+  })
+
+  it('forwards optional native-chat provenance', async () => {
+    const { runtime, dispatcher } = createDispatcher()
+
+    await dispatcher.dispatch(
+      makeRequest('files.resolveTerminalPath', {
+        worktree: 'id:wt-1',
+        pathText: '/outside/result.html',
+        nativeChatContext: { tabId: 'tab-1', sessionId: 'session-1' }
+      })
+    )
+
+    expect(runtime.resolveTerminalPath).toHaveBeenLastCalledWith(
+      'id:wt-1',
+      '/outside/result.html',
+      null,
+      undefined,
+      null,
+      false,
+      { tabId: 'tab-1', sessionId: 'session-1' }
     )
   })
 })
diff --git a/src/main/runtime/rpc/methods/files.ts b/src/main/runtime/rpc/methods/files.ts
index ffaa48b510e..741fc65635f 100644
--- a/src/main/runtime/rpc/methods/files.ts
+++ b/src/main/runtime/rpc/methods/files.ts
@@ -78,6 +78,12 @@ const ResolveTerminalPath = WorktreeSelector.extend({
   crossWorkspace: z
     .unknown()
     .transform((v) => v === true)
+    .optional(),
+  nativeChatContext: z
+    .object({
+      tabId: z.string().min(1),
+      sessionId: z.string().min(1)
+    })
     .optional()
 })
 
@@ -257,7 +263,8 @@ export const FILE_METHODS: RpcAnyMethod[] = [
         params.cwd ?? null,
         clientId,
         params.terminal ?? null,
-        params.crossWorkspace === true
+        params.crossWorkspace === true,
+        params.nativeChatContext ?? null
       )
   }),
   defineMethod({
diff --git a/src/main/runtime/rpc/methods/folder-workspace.ts b/src/main/runtime/rpc/methods/folder-workspace.ts
index 9f36b7eb4dc..aa39654d9f8 100644
--- a/src/main/runtime/rpc/methods/folder-workspace.ts
+++ b/src/main/runtime/rpc/methods/folder-workspace.ts
@@ -6,6 +6,7 @@ import { TaskSourceContextSchema } from '../../../../shared/task-source-context-
 import { WorkspaceLinkedItemSchema } from '../../../../shared/workspace-linked-item-schema'
 import { isWorkspaceLinkedItemSourceContextMatch } from '../../../../shared/workspace-linked-item-source-context'
 import { resolveRpcWorkspaceCreatorProvenance } from '../workspace-creator-context'
+import { DiffCommentSchema } from '../../../../shared/diff-comment-schema'
 
 const FolderWorkspaceLinkedTask = WorkspaceLinkedItemSchema.nullable()
 
@@ -59,7 +60,8 @@ const FolderWorkspaceUpdate = z.object({
       createdWithAgent: z.string().refine(isTuiAgent).optional(),
       pendingFirstAgentMessageRename: z.boolean().optional(),
       firstAgentMessageRenameError: z.string().nullable().optional(),
-      lastActivityAt: OptionalFiniteNumber
+      lastActivityAt: OptionalFiniteNumber,
+      diffComments: z.array(DiffCommentSchema).optional()
     })
     .superRefine(assertLinkedTaskSourceContextMatch)
 })
diff --git a/src/main/runtime/rpc/methods/git-params.ts b/src/main/runtime/rpc/methods/git-params.ts
index 0fe273108a5..00ec4bb6913 100644
--- a/src/main/runtime/rpc/methods/git-params.ts
+++ b/src/main/runtime/rpc/methods/git-params.ts
@@ -179,7 +179,6 @@ export const GitGenerateCommitMessage = WorktreeSelector.extend({
   sourceControlAi: SourceControlAiSettings.optional(),
   sourceControlAiResolvedParams: ResolvedSourceControlAiGenerationParams.optional(),
   agentCmdOverrides: z.record(z.string(), z.string()).optional(),
-  enableGitHubAttribution: z.boolean().optional(),
   commitMessageDiscoveryHostKey: z.string().optional()
 })
 
diff --git a/src/main/runtime/rpc/methods/git.test.ts b/src/main/runtime/rpc/methods/git.test.ts
index bf6b0838e22..e6ab9f3340d 100644
--- a/src/main/runtime/rpc/methods/git.test.ts
+++ b/src/main/runtime/rpc/methods/git.test.ts
@@ -530,7 +530,6 @@ describe('git RPC methods', () => {
         worktree: 'id:wt-1',
         commitMessageAi,
         agentCmdOverrides,
-        enableGitHubAttribution: true,
         commitMessageDiscoveryHostKey: 'runtime:env-1'
       })
     )
@@ -538,7 +537,6 @@ describe('git RPC methods', () => {
     expect(runtime.generateRuntimeCommitMessage).toHaveBeenCalledWith('id:wt-1', {
       commitMessageAi,
       agentCmdOverrides,
-      enableGitHubAttribution: true,
       commitMessageDiscoveryHostKey: 'runtime:env-1'
     })
   })
diff --git a/src/main/runtime/rpc/methods/git.ts b/src/main/runtime/rpc/methods/git.ts
index c30e80f4338..9363551507e 100644
--- a/src/main/runtime/rpc/methods/git.ts
+++ b/src/main/runtime/rpc/methods/git.ts
@@ -33,7 +33,6 @@ type CommitMessageGenerationOverride = {
   sourceControlAi?: GlobalSettings['sourceControlAi']
   sourceControlAiResolvedParams?: ResolvedSourceControlAiGenerationParams
   agentCmdOverrides?: GlobalSettings['agentCmdOverrides']
-  enableGitHubAttribution?: boolean
   commitMessageDiscoveryHostKey?: string
 }
 
@@ -44,7 +43,6 @@ function buildCommitMessageGenerationOverride(params: {
   sourceControlAi?: unknown
   sourceControlAiResolvedParams?: unknown
   agentCmdOverrides?: unknown
-  enableGitHubAttribution?: boolean
   commitMessageDiscoveryHostKey?: string
 }): CommitMessageGenerationOverride | undefined {
   if (
@@ -52,7 +50,6 @@ function buildCommitMessageGenerationOverride(params: {
     params.sourceControlAi === undefined &&
     params.sourceControlAiResolvedParams === undefined &&
     params.agentCmdOverrides === undefined &&
-    params.enableGitHubAttribution === undefined &&
     params.commitMessageDiscoveryHostKey === undefined
   ) {
     return undefined
@@ -75,9 +72,6 @@ function buildCommitMessageGenerationOverride(params: {
           agentCmdOverrides: params.agentCmdOverrides as GlobalSettings['agentCmdOverrides']
         }
       : {}),
-    ...(params.enableGitHubAttribution !== undefined
-      ? { enableGitHubAttribution: params.enableGitHubAttribution }
-      : {}),
     ...(params.commitMessageDiscoveryHostKey !== undefined
       ? { commitMessageDiscoveryHostKey: params.commitMessageDiscoveryHostKey }
       : {})
diff --git a/src/main/runtime/rpc/methods/linear-agent-access.test.ts b/src/main/runtime/rpc/methods/linear-agent-access.test.ts
index 945eadb20b8..56c32168460 100644
--- a/src/main/runtime/rpc/methods/linear-agent-access.test.ts
+++ b/src/main/runtime/rpc/methods/linear-agent-access.test.ts
@@ -355,7 +355,7 @@ type LinearUnconfirmedBuilder = {
     target: unknown,
     extra?: unknown
   ): Error & { data?: { cause?: string; nextSteps?: string[] } }
-  resolveLinearAgentState(input: string, states: unknown[]): unknown | null
+  resolveLinearAgentState(input: string, states: unknown[]): unknown
   linearCreatedIssueMatchesIntent(issue: unknown, intent: unknown): boolean
   linearSavedIssueMatchesIntent(issue: unknown, intent: unknown): boolean
   notifyLinearLinkedIssueUpdated(
@@ -372,13 +372,13 @@ type LinearRetryLookupTester = {
     parentId: string | null,
     workspaceId: string,
     required: boolean
-  ): Promise<unknown | null>
+  ): Promise<unknown>
   getMatchingLinearAttachmentWrite(
     writeId: string,
     issueId: string,
     workspaceId: string,
     required: boolean
-  ): Promise<unknown | null>
+  ): Promise<unknown>
   getMatchingLinearCreatedIssue(
     writeId: string,
     teamId: string,
@@ -386,7 +386,7 @@ type LinearRetryLookupTester = {
     workspaceId: string,
     required: boolean,
     intent?: unknown
-  ): Promise<unknown | null>
+  ): Promise<unknown>
   refetchLinearCommentAfterDuplicate(
     writeId: string,
     issueId: string,
diff --git a/src/main/runtime/rpc/methods/linear-agent-project-access.test.ts b/src/main/runtime/rpc/methods/linear-agent-project-access.test.ts
index cd51e8a0798..9e0f1568050 100644
--- a/src/main/runtime/rpc/methods/linear-agent-project-access.test.ts
+++ b/src/main/runtime/rpc/methods/linear-agent-project-access.test.ts
@@ -10,7 +10,7 @@ type LinearProjectResolverTester = {
     id: string
     name: string
   }>
-  readLinearProjectByIdForCreate(id: string, workspaceId: string): Promise<unknown | null>
+  readLinearProjectByIdForCreate(id: string, workspaceId: string): Promise<unknown>
   readLinearProjectsForCreate(query: string, workspaceId: string): Promise<unknown[]>
   readLinearProjectsByExactNameForCreate(name: string, workspaceId: string): Promise<unknown[]>
 }
diff --git a/src/main/runtime/rpc/methods/native-chat.ts b/src/main/runtime/rpc/methods/native-chat.ts
index 5a15b3a8d8f..3b8d42287de 100644
--- a/src/main/runtime/rpc/methods/native-chat.ts
+++ b/src/main/runtime/rpc/methods/native-chat.ts
@@ -138,7 +138,7 @@ function sanitizeToolInput(
   const result: Record<string, unknown> = {}
   let count = 0
   for (const key in value) {
-    if (!Object.prototype.hasOwnProperty.call(value, key)) {
+    if (!Object.hasOwn(value, key)) {
       continue
     }
     if (count >= MOBILE_TOOL_INPUT_ITEMS_CAP || budget.remaining <= 0) {
@@ -148,7 +148,7 @@ function sanitizeToolInput(
     let boundedKey = key.slice(0, Math.min(key.length, budget.remaining, 128))
     // Why: sibling keys sharing a >=128-char (or budget-truncated) prefix collapse
     // to the same bounded key; suffix collisions so neither field is silently lost.
-    if (Object.prototype.hasOwnProperty.call(result, boundedKey)) {
+    if (Object.hasOwn(result, boundedKey)) {
       boundedKey = `${boundedKey}~${count}`
     }
     budget.remaining -= boundedKey.length
diff --git a/src/main/runtime/rpc/methods/orchestration-federated-worker-start.ts b/src/main/runtime/rpc/methods/orchestration-federated-worker-start.ts
index 23a6dc0928f..561c35603f2 100644
--- a/src/main/runtime/rpc/methods/orchestration-federated-worker-start.ts
+++ b/src/main/runtime/rpc/methods/orchestration-federated-worker-start.ts
@@ -4,6 +4,8 @@ import {
   ORCHESTRATION_CONTRACT_RUNTIME_CAPABILITY,
   ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION,
   ORCHESTRATION_FEDERATION_CONTROL_MAIL_RUNTIME_CAPABILITY,
+  ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION,
+  ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY,
   ORCHESTRATION_FEDERATION_RUNTIME_CAPABILITY
 } from '../../../../shared/protocol-version'
 import { orchestrationMigrationData } from '../../../../shared/orchestration-rpc-contract'
@@ -82,11 +84,16 @@ export async function startFederatedWorker(args: {
     capabilities: status.capabilities,
     serverName: server.name
   })
-  const federationProtocolVersion = status.capabilities?.includes(
+  const supportsControlMail = status.capabilities?.includes(
     ORCHESTRATION_FEDERATION_CONTROL_MAIL_RUNTIME_CAPABILITY
   )
-    ? ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION
-    : 1
+  const federationProtocolVersion =
+    supportsControlMail &&
+    status.capabilities?.includes(ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY)
+      ? ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION
+      : supportsControlMail
+        ? ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION
+        : 1
 
   const setupDecision = createsWorktree ? (params.setup ?? 'run') : 'not_applicable'
   const started = db.createStartingWorkerDispatch({
diff --git a/src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts b/src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts
new file mode 100644
index 00000000000..894462e5397
--- /dev/null
+++ b/src/main/runtime/rpc/methods/orchestration-federation-lifecycle-settlement.test.ts
@@ -0,0 +1,448 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  ORCHESTRATION_CONTRACT_VERSION,
+  ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY
+} from '../../../../shared/protocol-version'
+import type { RuntimeRpcResponse } from '../../../../shared/runtime-rpc-envelope'
+import { OrcaRuntimeService } from '../../orca-runtime'
+import { OrchestrationDb } from '../../orchestration/db'
+import type { OrchestrationEnvironmentTransport } from '../../orchestration/environment-transport'
+import { waitForFederatedLifecycleSettlement } from '../../orchestration/federation-lifecycle-settlement'
+import { RpcDispatcher } from '../dispatcher'
+import { ORCHESTRATION_METHODS } from './orchestration'
+import { createFederationWorkerStartRequest as startRequest } from './orchestration-federation-test-request'
+
+describe('orchestration federation lifecycle settlement', () => {
+  let homeDb: OrchestrationDb
+  let workerDb: OrchestrationDb
+  let homeRuntime: OrcaRuntimeService
+  let workerRuntime: OrcaRuntimeService
+  let homeDispatcher: RpcDispatcher
+  let workerDispatcher: RpcDispatcher
+  let workerCapabilities: string[]
+  let failNextAckBeforeDelivery: boolean
+
+  beforeEach(() => {
+    homeDb = new OrchestrationDb(':memory:')
+    workerDb = new OrchestrationDb(':memory:')
+    workerRuntime = new OrcaRuntimeService()
+    workerRuntime.setOrchestrationDb(workerDb)
+    workerDispatcher = new RpcDispatcher({ runtime: workerRuntime, methods: ORCHESTRATION_METHODS })
+    workerCapabilities = [...(workerRuntime.getStatus().capabilities ?? [])]
+    failNextAckBeforeDelivery = false
+    const transport: OrchestrationEnvironmentTransport = {
+      resolve: () => ({
+        environmentId: 'environment_windows',
+        name: 'windows',
+        peerFingerprint: 'windows_peer_fingerprint'
+      }),
+      call: async (_selector, method, params, _timeoutMs, envelope) => {
+        if (method === 'status.get') {
+          return {
+            id: 'status',
+            ok: true,
+            result: { ...workerRuntime.getStatus(), capabilities: workerCapabilities },
+            _meta: { runtimeId: workerRuntime.getRuntimeId() }
+          }
+        }
+        if (method === 'orchestration.federationAck' && failNextAckBeforeDelivery) {
+          failNextAckBeforeDelivery = false
+          throw new Error('connection lost before acknowledgment')
+        }
+        return (await workerDispatcher.dispatch({
+          id: `remote_${method}`,
+          authToken: 'run-home-device-token',
+          method,
+          params,
+          orchestrationContractVersion: envelope?.orchestrationContractVersion,
+          orchestrationRequestId: envelope?.orchestrationRequestId,
+          orchestrationCapability: envelope?.orchestrationCapability
+        })) as RuntimeRpcResponse<unknown>
+      }
+    }
+    homeRuntime = new OrcaRuntimeService(null, undefined, {
+      orchestrationEnvironmentTransport: transport
+    })
+    homeRuntime.setOrchestrationDb(homeDb)
+    homeDispatcher = new RpcDispatcher({ runtime: homeRuntime, methods: ORCHESTRATION_METHODS })
+    vi.spyOn(homeRuntime, 'getTerminalPaneKey').mockReturnValue(
+      'tab_coord:aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'
+    )
+    configureWorkerRuntime()
+  })
+
+  afterEach(() => {
+    homeRuntime.stopOrchestrationFederationRelay()
+    homeDb.close()
+    workerDb.close()
+  })
+
+  function configureWorkerRuntime(): void {
+    vi.spyOn(workerRuntime, 'validateOrchestrationAgentLauncher').mockImplementation(() => {})
+    vi.spyOn(workerRuntime, 'showRepo').mockResolvedValue({
+      id: 'windows-repo',
+      kind: 'git'
+    } as never)
+    vi.spyOn(workerRuntime, 'createManagedWorktree').mockResolvedValue({
+      worktree: { id: 'repo::windows-worktree', repoId: 'repo' },
+      startupTerminal: { spawned: true, handle: 'term_windows_worker' },
+      setupReceipt: {
+        requested: 'run',
+        hookFound: true,
+        startupPolicy: 'start-immediately',
+        state: 'running'
+      }
+    } as never)
+    vi.spyOn(workerRuntime, 'listTerminals').mockResolvedValue({
+      terminals: [{ handle: 'term_windows_worker', title: 'Codex' }],
+      totalCount: 1,
+      truncated: false
+    } as never)
+    vi.spyOn(workerRuntime, 'waitForTerminal').mockResolvedValue({
+      handle: 'term_windows_worker',
+      condition: 'tui-idle',
+      satisfied: true,
+      status: 'running',
+      exitCode: null
+    })
+    vi.spyOn(workerRuntime, 'getTerminalPaneKey').mockReturnValue(
+      'tab_worker:bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb'
+    )
+    vi.spyOn(workerRuntime, 'getTerminalProcessIncarnation').mockReturnValue(
+      'windows_runtime:pty:1'
+    )
+    vi.spyOn(workerRuntime, 'getTerminalOrchestrationCliCommand').mockReturnValue('orca')
+    vi.spyOn(workerRuntime, 'sendTerminalAgentPrompt').mockResolvedValue({
+      handle: 'term_windows_worker',
+      accepted: true,
+      bytesWritten: 1
+    })
+  }
+
+  function createHomeTask() {
+    const run = homeDb.createRun({
+      objective: 'Mac to Windows',
+      coordinatorHandle: 'term_coord',
+      coordinatorPaneKey: 'tab_coord:aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'
+    })
+    return homeDb.createTask({ spec: 'Audit Windows behavior', runId: run.id })
+  }
+
+  async function sendRemoteCompletion(taskId: string, reportedTaskId: string, sync = true) {
+    await homeDispatcher.dispatch(startRequest(taskId))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(taskId)!
+    const prompt = vi.mocked(workerRuntime.sendTerminalAgentPrompt).mock.calls[0]?.[1] ?? ''
+    const capability = prompt.match(/--dispatch-capability (dcap_[A-Za-z0-9_-]+)/)?.[1]
+    const sent = workerDispatcher.dispatch({
+      id: 'rpc_waiting_worker_done',
+      authToken: 'worker-local-token',
+      orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+      orchestrationRequestId: 'waiting_worker_done_request',
+      orchestrationCapability: capability,
+      method: 'orchestration.send',
+      params: {
+        from: 'term_windows_worker',
+        subject: 'Done',
+        type: 'worker_done',
+        payload: JSON.stringify({
+          taskId: reportedTaskId,
+          dispatchId: dispatch.id,
+          outcome: 'succeeded'
+        })
+      }
+    })
+    await vi.waitFor(() =>
+      expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toHaveLength(1)
+    )
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)?.state).toBe('ready')
+    if (sync) {
+      await homeRuntime.syncOrchestrationFederation()
+    }
+    return { sent, dispatch }
+  }
+
+  it('waits for Run-home settlement when an older CLI omits the wait hint', async () => {
+    const task = createHomeTask()
+
+    const { sent, dispatch } = await sendRemoteCompletion(task.id, task.id)
+
+    await expect(sent).resolves.toMatchObject({
+      ok: true,
+      result: { lifecycle: { action: 'completed', authority: 'run_home' } }
+    })
+    expect(homeDb.getTask(task.id)?.status).toBe('completed')
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)).toMatchObject({
+      state: 'succeeded',
+      stage: 'worker_report_settled',
+      capability_hash: null
+    })
+  })
+
+  it('returns a Run-home rejection for a mismatched remote task', async () => {
+    const task = createHomeTask()
+
+    const { sent } = await sendRemoteCompletion(task.id, 'task_wrong')
+
+    await expect(sent).resolves.toMatchObject({
+      ok: true,
+      result: {
+        lifecycle: {
+          action: 'rejected',
+          code: 'task_dispatch_mismatch',
+          authority: 'run_home'
+        }
+      }
+    })
+    expect(homeDb.getTask(task.id)?.status).toBe('dispatched')
+  })
+
+  it('rejects before queueing when the negotiated protocol lacks settlement verdicts', async () => {
+    workerCapabilities = workerCapabilities.filter(
+      (capability) =>
+        capability !== ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY
+    )
+    const task = createHomeTask()
+
+    await homeDispatcher.dispatch(startRequest(task.id))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(task.id)!
+    const prompt = vi.mocked(workerRuntime.sendTerminalAgentPrompt).mock.calls[0]?.[1] ?? ''
+    const capability = prompt.match(/--dispatch-capability (dcap_[A-Za-z0-9_-]+)/)?.[1]
+
+    await expect(
+      workerDispatcher.dispatch({
+        id: 'rpc_unsupported_worker_done',
+        authToken: 'worker-local-token',
+        orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+        orchestrationRequestId: 'unsupported_worker_done_request',
+        orchestrationCapability: capability,
+        method: 'orchestration.send',
+        params: {
+          from: 'term_windows_worker',
+          subject: 'Done',
+          type: 'worker_done',
+          payload: JSON.stringify({
+            taskId: task.id,
+            dispatchId: dispatch.id,
+            outcome: 'succeeded'
+          })
+        }
+      })
+    ).resolves.toMatchObject({
+      ok: false,
+      error: { code: 'capability_unsupported' }
+    })
+    expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toEqual([])
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)?.protocol_version).toBe(2)
+  })
+
+  it('does not settle an attachment from a verdict for non-lifecycle mail', async () => {
+    const task = createHomeTask()
+    await homeDispatcher.dispatch(startRequest(task.id))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(task.id)!
+    const relay = workerDb.enqueueFederationRelay({
+      dispatchId: dispatch.id,
+      direction: 'to_home',
+      kind: 'status',
+      payload: '{}'
+    })
+
+    await expect(
+      workerDispatcher.dispatch({
+        id: 'rpc_unrelated_settlement',
+        authToken: 'run-home-device-token',
+        orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+        orchestrationRequestId: 'unrelated_settlement_request',
+        method: 'orchestration.federationAck',
+        params: {
+          dispatchId: dispatch.id,
+          throughSequence: relay.sequence,
+          settlements: [
+            {
+              sequence: relay.sequence,
+              lifecycle: { action: 'completed', authority: 'run_home' }
+            }
+          ]
+        }
+      })
+    ).resolves.toMatchObject({ ok: false, error: { code: 'request_mismatch' } })
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)?.state).toBe('ready')
+    expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toHaveLength(1)
+  })
+
+  it('does not settle an attachment from a verdict that contradicts the queued outcome', async () => {
+    const task = createHomeTask()
+    await homeDispatcher.dispatch(startRequest(task.id))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(task.id)!
+    const relay = workerDb.enqueueFederationRelay({
+      dispatchId: dispatch.id,
+      direction: 'to_home',
+      kind: 'worker_done',
+      payload: JSON.stringify({
+        payload: JSON.stringify({
+          taskId: task.id,
+          dispatchId: dispatch.id,
+          outcome: 'failed'
+        })
+      })
+    })
+
+    await expect(
+      workerDispatcher.dispatch({
+        id: 'rpc_contradictory_settlement',
+        authToken: 'run-home-device-token',
+        orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+        orchestrationRequestId: 'contradictory_settlement_request',
+        method: 'orchestration.federationAck',
+        params: {
+          dispatchId: dispatch.id,
+          throughSequence: relay.sequence,
+          settlements: [
+            {
+              sequence: relay.sequence,
+              lifecycle: { action: 'completed', authority: 'run_home' }
+            }
+          ]
+        }
+      })
+    ).resolves.toMatchObject({ ok: false, error: { code: 'request_mismatch' } })
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)?.state).toBe('ready')
+    expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toHaveLength(1)
+  })
+
+  it('returns operation_unknown when Run-home settlement waiting is aborted', async () => {
+    const task = createHomeTask()
+    await homeDispatcher.dispatch(startRequest(task.id))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(task.id)!
+    const prompt = vi.mocked(workerRuntime.sendTerminalAgentPrompt).mock.calls[0]?.[1] ?? ''
+    const capability = prompt.match(/--dispatch-capability (dcap_[A-Za-z0-9_-]+)/)?.[1]
+    const controller = new AbortController()
+    const sent = workerDispatcher.dispatch(
+      {
+        id: 'rpc_aborted_worker_done',
+        authToken: 'worker-local-token',
+        orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+        orchestrationRequestId: 'aborted_worker_done_request',
+        orchestrationCapability: capability,
+        method: 'orchestration.send',
+        params: {
+          from: 'term_windows_worker',
+          subject: 'Done',
+          type: 'worker_done',
+          payload: JSON.stringify({
+            taskId: task.id,
+            dispatchId: dispatch.id,
+            outcome: 'succeeded'
+          })
+        }
+      },
+      { signal: controller.signal }
+    )
+    await vi.waitFor(() =>
+      expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toHaveLength(1)
+    )
+
+    controller.abort()
+
+    await expect(sent).resolves.toMatchObject({
+      ok: false,
+      error: { code: 'operation_unknown' }
+    })
+  })
+
+  it('does not register a waiter for an already-aborted signal', async () => {
+    const controller = new AbortController()
+    controller.abort()
+    const addEventListener = vi.spyOn(controller.signal, 'addEventListener')
+
+    await expect(
+      waitForFederatedLifecycleSettlement(workerRuntime, 'ctx_aborted', 1, {
+        timeoutMs: 0,
+        signal: controller.signal
+      })
+    ).resolves.toBeUndefined()
+    expect(addEventListener).not.toHaveBeenCalled()
+  })
+
+  it('replays a committed settlement after the first acknowledgment is lost', async () => {
+    const task = createHomeTask()
+    await homeDispatcher.dispatch(startRequest(task.id))
+    homeRuntime.stopOrchestrationFederationRelay()
+    const dispatch = homeDb.getDispatchContext(task.id)!
+    const prompt = vi.mocked(workerRuntime.sendTerminalAgentPrompt).mock.calls[0]?.[1] ?? ''
+    const capability = prompt.match(/--dispatch-capability (dcap_[A-Za-z0-9_-]+)/)?.[1]
+    const sent = workerDispatcher.dispatch({
+      id: 'rpc_replayed_worker_done',
+      authToken: 'worker-local-token',
+      orchestrationContractVersion: ORCHESTRATION_CONTRACT_VERSION,
+      orchestrationRequestId: 'replayed_worker_done_request',
+      orchestrationCapability: capability,
+      method: 'orchestration.send',
+      params: {
+        from: 'term_windows_worker',
+        subject: 'Done',
+        type: 'worker_done',
+        waitForLifecycleSettlement: true,
+        payload: JSON.stringify({
+          taskId: task.id,
+          dispatchId: dispatch.id,
+          outcome: 'succeeded'
+        })
+      }
+    })
+    await vi.waitFor(() =>
+      expect(workerDb.listPendingFederationRelay(dispatch.id, 'to_home')).toHaveLength(1)
+    )
+    failNextAckBeforeDelivery = true
+
+    await expect(homeRuntime.syncOrchestrationFederatedDispatch(dispatch.id)).rejects.toThrow(
+      'connection lost before acknowledgment'
+    )
+    expect(homeDb.getTask(task.id)?.status).toBe('completed')
+    await homeRuntime.syncOrchestrationFederatedDispatch(dispatch.id)
+
+    await expect(sent).resolves.toMatchObject({
+      ok: true,
+      result: { lifecycle: { action: 'completed', authority: 'run_home' } }
+    })
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)).toMatchObject({
+      state: 'succeeded',
+      stage: 'worker_report_settled',
+      capability_hash: null
+    })
+  })
+
+  it('replays a rejection without mutating its durable message twice', async () => {
+    const task = createHomeTask()
+    const { sent, dispatch } = await sendRemoteCompletion(task.id, 'task_wrong', false)
+    failNextAckBeforeDelivery = true
+
+    await expect(homeRuntime.syncOrchestrationFederatedDispatch(dispatch.id)).rejects.toThrow(
+      'connection lost before acknowledgment'
+    )
+    const [relay] = workerDb.listPendingFederationRelay(dispatch.id, 'to_home')
+    const firstMessage = homeDb.getMessageById(relay.message_id)
+    await homeRuntime.syncOrchestrationFederatedDispatch(dispatch.id)
+
+    await expect(sent).resolves.toMatchObject({
+      ok: true,
+      result: {
+        lifecycle: {
+          action: 'rejected',
+          code: 'task_dispatch_mismatch',
+          authority: 'run_home'
+        }
+      }
+    })
+    expect(homeDb.getMessageById(relay.message_id)).toMatchObject({
+      subject: firstMessage?.subject,
+      body: firstMessage?.body,
+      payload: firstMessage?.payload
+    })
+    expect(workerDb.getRemoteDispatchAttachment(dispatch.id)?.state).toBe('ready')
+  })
+})
diff --git a/src/main/runtime/rpc/methods/orchestration-federation-relay.ts b/src/main/runtime/rpc/methods/orchestration-federation-relay.ts
index fbc3e97fb3b..848b711b851 100644
--- a/src/main/runtime/rpc/methods/orchestration-federation-relay.ts
+++ b/src/main/runtime/rpc/methods/orchestration-federation-relay.ts
@@ -2,18 +2,42 @@ import { z } from 'zod'
 import { ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION } from '../../../../shared/protocol-version'
 import { importFederatedControlMessage } from '../../orchestration/federation-control-message'
 import { OrchestrationError } from '../../orchestration/orchestration-error'
+import {
+  publishFederatedLifecycleSettlement,
+  type FederatedLifecycleSettlement
+} from '../../orchestration/federation-lifecycle-settlement'
 import { defineMethod, type RpcMethod } from '../core'
 import { OptionalFiniteNumber, requiredString } from '../schemas'
 
 const FederationPullParams = z.object({
   dispatchId: requiredString('Missing Dispatch ID'),
   afterSequence: OptionalFiniteNumber,
+  replayUnacknowledged: z.boolean().optional(),
   limit: OptionalFiniteNumber
 })
 
 const FederationAckParams = z.object({
   dispatchId: requiredString('Missing Dispatch ID'),
-  throughSequence: z.number().int().nonnegative()
+  throughSequence: z.number().int().nonnegative(),
+  settlements: z
+    .array(
+      z.object({
+        sequence: z.number().int().positive(),
+        lifecycle: z.discriminatedUnion('action', [
+          z.object({
+            action: z.enum(['completed', 'failed']),
+            authority: z.literal('run_home')
+          }),
+          z.object({
+            action: z.literal('rejected'),
+            code: z.string(),
+            reason: z.string(),
+            authority: z.literal('run_home')
+          })
+        ])
+      })
+    )
+    .optional()
 })
 
 const FederationImportParams = z.object({
@@ -39,12 +63,16 @@ export const ORCHESTRATION_FEDERATION_RELAY_METHODS: RpcMethod[] = [
       return {
         dispatchId: params.dispatchId,
         runtimeEpoch: runtime.getRuntimeId(),
-        items: runtime.getOrchestrationDb().listFederationRelay({
-          dispatchId: params.dispatchId,
-          direction: 'to_home',
-          afterSequence: params.afterSequence ?? 0,
-          limit: params.limit
-        })
+        items: params.replayUnacknowledged
+          ? runtime
+              .getOrchestrationDb()
+              .listPendingFederationRelay(params.dispatchId, 'to_home', params.limit)
+          : runtime.getOrchestrationDb().listFederationRelay({
+              dispatchId: params.dispatchId,
+              direction: 'to_home',
+              afterSequence: params.afterSequence ?? 0,
+              limit: params.limit
+            })
       }
     }
   }),
@@ -53,11 +81,42 @@ export const ORCHESTRATION_FEDERATION_RELAY_METHODS: RpcMethod[] = [
     params: FederationAckParams,
     handler: (params, { runtime, authenticatedCallerFingerprint }) => {
       requireHomeAttachment(runtime, params.dispatchId, authenticatedCallerFingerprint)
+      const settlements = (params.settlements ?? []).filter(
+        (settlement) => settlement.sequence <= params.throughSequence
+      )
+      const terminalSettlements = settlements.filter(
+        (settlement) =>
+          settlement.lifecycle.action === 'completed' || settlement.lifecycle.action === 'failed'
+      )
+      if (terminalSettlements.length > 1) {
+        throw new OrchestrationError(
+          'request_mismatch',
+          `Federation acknowledgment for ${params.dispatchId} contains conflicting settlements.`
+        )
+      }
+      const terminalSettlement = terminalSettlements[0]
       runtime.getOrchestrationDb().acknowledgeFederationRelay({
         dispatchId: params.dispatchId,
         direction: 'to_home',
-        throughSequence: params.throughSequence
+        throughSequence: params.throughSequence,
+        ...(!terminalSettlement
+          ? {}
+          : {
+              settleRemoteReport: {
+                sequence: terminalSettlement.sequence,
+                outcome:
+                  terminalSettlement.lifecycle.action === 'completed' ? 'succeeded' : 'failed'
+              }
+            })
       })
+      for (const settlement of settlements) {
+        publishFederatedLifecycleSettlement(
+          runtime,
+          params.dispatchId,
+          settlement.sequence,
+          settlement.lifecycle as FederatedLifecycleSettlement
+        )
+      }
       return { dispatchId: params.dispatchId, acknowledgedThrough: params.throughSequence }
     }
   }),
diff --git a/src/main/runtime/rpc/methods/orchestration-federation-start-schema.ts b/src/main/runtime/rpc/methods/orchestration-federation-start-schema.ts
index e6bea35c20a..9c03345ef88 100644
--- a/src/main/runtime/rpc/methods/orchestration-federation-start-schema.ts
+++ b/src/main/runtime/rpc/methods/orchestration-federation-start-schema.ts
@@ -6,7 +6,7 @@ export const FederationAttachStartParams = z.object({
   dispatchId: requiredString('Missing Dispatch ID'),
   taskId: requiredString('Missing Task ID'),
   taskSpec: requiredString('Missing Task spec'),
-  protocolVersion: z.union([z.literal(1), z.literal(2)]),
+  protocolVersion: z.union([z.literal(1), z.literal(2), z.literal(3)]),
   worktree: requiredString('Missing remote worktree selector'),
   name: OptionalString,
   repo: OptionalString,
diff --git a/src/main/runtime/rpc/methods/orchestration-federation.test.ts b/src/main/runtime/rpc/methods/orchestration-federation.test.ts
index 94674ee84cc..ca850587ff0 100644
--- a/src/main/runtime/rpc/methods/orchestration-federation.test.ts
+++ b/src/main/runtime/rpc/methods/orchestration-federation.test.ts
@@ -194,7 +194,7 @@ describe('orchestration federation', () => {
     const attachment = workerDb.getRemoteDispatchAttachment(dispatch.id)
     expect(attachment).toMatchObject({
       task_id: task.id,
-      protocol_version: 2,
+      protocol_version: 3,
       state: 'ready',
       worktree_id: 'repo::windows-worktree',
       terminal_handle: 'term_windows_worker'
@@ -356,11 +356,8 @@ describe('orchestration federation', () => {
         })
       }
     })
-    expect(sent).toMatchObject({
-      ok: true,
-      result: { relay: { dispatchId: dispatch.id, accepted: true } }
-    })
-    expect(homeDb.getTask(task.id)?.status).toBe('dispatched')
+    expect(sent).toMatchObject({ ok: true, result: { lifecycle: { action: 'completed' } } })
+    expect(homeDb.getTask(task.id)?.status).toBe('completed')
 
     await homeRuntime.syncOrchestrationFederation()
 
diff --git a/src/main/runtime/rpc/methods/orchestration-worker-release.test.ts b/src/main/runtime/rpc/methods/orchestration-worker-release.test.ts
index 25670dda1e7..d2c17db9ba0 100644
--- a/src/main/runtime/rpc/methods/orchestration-worker-release.test.ts
+++ b/src/main/runtime/rpc/methods/orchestration-worker-release.test.ts
@@ -21,6 +21,7 @@ describe('orchestration worker release', () => {
   let runtime: OrcaRuntimeService
   let ctx: RpcContext
   let activeRunId: string
+  let inspectProcessLiveness: ReturnType<typeof vi.fn>
 
   const coordinatorPaneKey = 'tab_coord:aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa'
   const workerPaneKey = 'tab_worker:bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb'
@@ -30,6 +31,12 @@ describe('orchestration worker release', () => {
     dbOpen = true
     runtime = new OrcaRuntimeService()
     runtime.setOrchestrationDb(db)
+    inspectProcessLiveness = vi.fn().mockResolvedValue('live')
+    ;(
+      runtime as unknown as {
+        inspectTerminalProcessIncarnationLiveness: typeof inspectProcessLiveness
+      }
+    ).inspectTerminalProcessIncarnationLiveness = inspectProcessLiveness
     vi.spyOn(runtime, 'getTerminalPaneKey').mockImplementation((handle) =>
       handle === 'term_coord'
         ? coordinatorPaneKey
@@ -215,7 +222,7 @@ describe('orchestration worker release', () => {
     setup()
     const { dispatchId } = await startWorker()
     await expect(call('orchestration.workerRelease', { dispatch: dispatchId })).rejects.toThrow(
-      /only a succeeded or failed worker can release/
+      /only a settled worker can release/
     )
     expect(runtime.closeTerminal).not.toHaveBeenCalled()
     expect(db.getWorkerTerminalResourceByOwner(dispatchId)?.release_state).toBe('not_requested')
@@ -232,6 +239,44 @@ describe('orchestration worker release', () => {
     expect(runtime.closeTerminal).not.toHaveBeenCalled()
   })
 
+  it('reconciles a dead external terminal without closing a process', async () => {
+    setup()
+    const { dispatchId } = await startSettledWorker('succeeded', { terminal: 'term_worker' })
+    inspectProcessLiveness.mockResolvedValue('dead')
+
+    await expect(
+      call('orchestration.workerRelease', { dispatch: dispatchId })
+    ).resolves.toMatchObject({ state: 'released', processAction: 'none' })
+    expect(inspectProcessLiveness).toHaveBeenCalledWith(
+      'runtime_test:term_worker:1',
+      JSON.stringify({ kind: 'local', hostId: 'local' })
+    )
+    expect(runtime.closeTerminal).not.toHaveBeenCalled()
+    expect(db.getWorkerTerminalResourceByOwner(dispatchId)).toMatchObject({
+      ownership_state: 'released',
+      release_state: 'released'
+    })
+  })
+
+  it('retains dead inventory evidence when persisted ownership history is invalid', async () => {
+    setup()
+    const { dispatchId } = await startSettledWorker('succeeded', { terminal: 'term_worker' })
+    const resource = db.getWorkerTerminalResourceByOwner(dispatchId)
+    const raw = (
+      db as unknown as { db: { prepare: (sql: string) => { run: (...args: unknown[]) => void } } }
+    ).db
+    raw
+      .prepare('UPDATE worker_terminal_resources SET prior_owner_dispatch_ids = ? WHERE id = ?')
+      .run('{invalid', resource?.id)
+    inspectProcessLiveness.mockResolvedValue('dead')
+
+    await expect(
+      call('orchestration.workerRelease', { dispatch: dispatchId })
+    ).resolves.toMatchObject({ state: 'retained', processAction: 'none' })
+    expect(runtime.closeTerminal).not.toHaveBeenCalled()
+    expect(db.getWorkerTerminalResourceByOwner(dispatchId)?.release_state).not.toBe('released')
+  })
+
   it('retains a user-taken-over terminal durably', async () => {
     setup()
     const { dispatchId } = await startSettledWorker()
@@ -248,6 +293,50 @@ describe('orchestration worker release', () => {
     expect(db.getWorkerTerminalResourceByOwner(dispatchId)?.ownership_state).toBe('user_owned')
   })
 
+  it('reconciles a dead user-taken-over terminal without closing a process', async () => {
+    setup()
+    const { dispatchId } = await startSettledWorker()
+    await call('orchestration.workerTerminalUserInput', { paneKey: workerPaneKey })
+    inspectProcessLiveness.mockResolvedValue('dead')
+
+    await expect(
+      call('orchestration.workerRelease', { dispatch: dispatchId })
+    ).resolves.toMatchObject({ state: 'released', processAction: 'none' })
+    expect(inspectProcessLiveness).toHaveBeenCalledWith(
+      'runtime_test:term_worker:1',
+      JSON.stringify({ kind: 'local', hostId: 'local' })
+    )
+    expect(runtime.closeTerminal).not.toHaveBeenCalled()
+    expect(db.getWorkerTerminalResourceByOwner(dispatchId)).toMatchObject({
+      ownership_state: 'released',
+      release_state: 'released'
+    })
+  })
+
+  it.each(['stopped', 'abandoned'] as const)(
+    'reconciles a dead %s worker without closing a process',
+    async (state) => {
+      setup()
+      const { dispatchId } = await startWorker()
+      if (state === 'stopped') {
+        db.beginWorkerStop(dispatchId)
+        db.settleWorkerStop(dispatchId)
+      } else {
+        db.abandonWorkerDispatch(dispatchId)
+      }
+      inspectProcessLiveness.mockResolvedValue('dead')
+
+      await expect(
+        call('orchestration.workerRelease', { dispatch: dispatchId })
+      ).resolves.toMatchObject({ state: 'released', processAction: 'none' })
+      expect(runtime.closeTerminal).not.toHaveBeenCalled()
+      expect(db.getWorkerTerminalResourceByOwner(dispatchId)).toMatchObject({
+        ownership_state: 'released',
+        release_state: 'released'
+      })
+    }
+  )
+
   it('lets user takeover cancel a release while output capture is pending', async () => {
     setup()
     const { dispatchId } = await startSettledWorker()
@@ -617,6 +706,7 @@ describe('orchestration worker release', () => {
     expect(transferred?.terminal_handle).toBe('term_reminted')
     expect(db.getWorkerTerminalResourceByOwner(first.dispatchId)).toBeUndefined()
 
+    inspectProcessLiveness.mockResolvedValueOnce('dead')
     const oldRelease = (await call('orchestration.workerRelease', {
       dispatch: first.dispatchId
     })) as { state: string; reason?: string }
@@ -632,6 +722,27 @@ describe('orchestration worker release', () => {
     expect(runtime.closeTerminal).toHaveBeenCalledWith('term_reminted')
   })
 
+  it('reconciles dead transferred ownership after the current owner settles', async () => {
+    setup()
+    const first = await startSettledWorker('succeeded')
+    const second = await startWorker({ terminal: 'term_reminted' })
+    settle(second.taskId, second.dispatchId, 'succeeded')
+    inspectProcessLiveness.mockResolvedValue('dead')
+
+    await expect(
+      call('orchestration.workerRelease', { dispatch: first.dispatchId })
+    ).resolves.toMatchObject({ state: 'released', processAction: 'none' })
+    expect(inspectProcessLiveness).toHaveBeenCalledWith(
+      'runtime_test:term_worker:1',
+      JSON.stringify({ kind: 'local', hostId: 'local' })
+    )
+    expect(runtime.closeTerminal).not.toHaveBeenCalled()
+    expect(db.getWorkerTerminalResourceByOwner(second.dispatchId)).toMatchObject({
+      ownership_state: 'released',
+      release_state: 'released'
+    })
+  })
+
   it('rejects exact reuse after release intent instead of closing the new worker', async () => {
     setup()
     const first = await startSettledWorker('succeeded')
@@ -744,9 +855,14 @@ describe('orchestration worker release', () => {
     expect(listed.workers).toContainEqual(
       expect.objectContaining({ dispatchId, terminalState: 'retained' })
     )
-    await expect(call('orchestration.workerRelease', { dispatch: dispatchId })).rejects.toThrow(
-      /only a succeeded or failed worker can release/
-    )
+    await expect(
+      call('orchestration.workerRelease', { dispatch: dispatchId })
+    ).resolves.toMatchObject({
+      state: 'retained',
+      reason: 'identity_unproven',
+      processAction: 'none'
+    })
+    expect(runtime.closeTerminal).not.toHaveBeenCalled()
   })
 
   it('worker-show exposes the terminal resource', async () => {
diff --git a/src/main/runtime/rpc/methods/orchestration-worker-release.ts b/src/main/runtime/rpc/methods/orchestration-worker-release.ts
index f01cd72de47..446887f581a 100644
--- a/src/main/runtime/rpc/methods/orchestration-worker-release.ts
+++ b/src/main/runtime/rpc/methods/orchestration-worker-release.ts
@@ -54,12 +54,36 @@ export const ORCHESTRATION_WORKER_RELEASE_METHODS: RpcMethod[] = [
         }
       }
       if (requested.disposition === 'retained') {
+        const resource = requested.resource
+        const processIncarnation = resource?.process_incarnation
+        if (
+          processIncarnation &&
+          (await runtime.inspectTerminalProcessIncarnationLiveness(
+            processIncarnation,
+            resource.host_scope
+          )) === 'dead'
+        ) {
+          const reconciled = db.settleDeadWorkerTerminalRelease({
+            requestingDispatchId: params.dispatch,
+            resourceId: resource.id,
+            processIncarnation
+          })
+          if (reconciled.disposition === 'released') {
+            runtime.notifyMessageArrived(`dispatch:${params.dispatch}`, 'status')
+            return {
+              dispatchId: params.dispatch,
+              state: 'released',
+              processAction: 'none',
+              archive: archiveSummary(reconciled.resource)
+            }
+          }
+        }
         return {
           dispatchId: params.dispatch,
           state: 'retained',
           reason: requested.reason,
           processAction: 'none',
-          archive: archiveSummary(requested.resource)
+          archive: archiveSummary(resource)
         }
       }
       return completeWorkerTerminalRelease({
diff --git a/src/main/runtime/rpc/methods/orchestration.test.ts b/src/main/runtime/rpc/methods/orchestration.test.ts
index 6fb19e0a4c1..f95b20a8b05 100644
--- a/src/main/runtime/rpc/methods/orchestration.test.ts
+++ b/src/main/runtime/rpc/methods/orchestration.test.ts
@@ -415,7 +415,7 @@ describe('orchestration RPC methods', () => {
       )
       vi.spyOn(runtime, 'deliverPendingMessagesForHandle').mockImplementation(() => {})
 
-      await call('orchestration.send', {
+      const result = await call('orchestration.send', {
         from: 'term_worker',
         to: 'term_coord',
         subject: 'Done',
@@ -429,6 +429,7 @@ describe('orchestration RPC methods', () => {
 
       expect(db.getTask(task.id)?.status).toBe('completed')
       expect(db.getDispatchContextById(dispatch.id)?.status).toBe('completed')
+      expect(result).toMatchObject({ lifecycle: { action: 'completed' } })
     })
 
     it('rejects an identity-less lifecycle send resolved through the coordinator handle', async () => {
@@ -482,7 +483,7 @@ describe('orchestration RPC methods', () => {
       }
 
       expect(db.getTask(task.id)?.status).toBe('completed')
-      expect(result.lifecycle).toBeUndefined()
+      expect(result.lifecycle).toMatchObject({ action: 'completed' })
       expect(result.message).toMatchObject({
         type: 'worker_done',
         subject: 'Done'
diff --git a/src/main/runtime/rpc/methods/orchestration.ts b/src/main/runtime/rpc/methods/orchestration.ts
index fdcb9168e69..f3dee4d2171 100644
--- a/src/main/runtime/rpc/methods/orchestration.ts
+++ b/src/main/runtime/rpc/methods/orchestration.ts
@@ -13,6 +13,7 @@ import { buildDispatchPreamble } from '../../orchestration/preamble'
 import { formatMessageBanner } from '../../orchestration/formatter'
 import { isGroupAddress, resolveGroupAddress } from '../../orchestration/groups'
 import { reconcileLifecycleMessage } from '../../orchestration/lifecycle-reconciliation'
+import { waitForFederatedLifecycleSettlement } from '../../orchestration/federation-lifecycle-settlement'
 import { abbreviateOrchestrationTasks } from '../../../../shared/orchestration-task-summary'
 import {
   ORCHESTRATION_LEGACY_RUN_ID,
@@ -28,7 +29,10 @@ import { OrchestrationError } from '../../orchestration/orchestration-error'
 import type { OrcaRuntimeService } from '../../orca-runtime'
 import type { RunRow } from '../../orchestration/types'
 import { encodeFederatedControlMessage } from '../../orchestration/federation-control-message'
-import { ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION } from '../../../../shared/protocol-version'
+import {
+  ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION,
+  ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION
+} from '../../../../shared/protocol-version'
 
 const TASK_STATUSES: TaskStatus[] = [
   'pending',
@@ -86,6 +90,7 @@ const SendParams = z
     // Why: pane key is the remint-stable identity used to verify worker_done/heartbeat ownership; the from handle stays routing metadata.
     senderPaneKey: OptionalString,
     run: OptionalString,
+    waitForLifecycleSettlement: OptionalBoolean,
     devMode: OptionalBoolean
   })
   .superRefine((params, ctx) => {
@@ -392,7 +397,8 @@ export const ORCHESTRATION_METHODS: RpcMethod[] = [
         orchestrationCapability,
         legacyCoordinatorRunId,
         revalidateLegacyCoordinator,
-        orchestrationCompatibilityCallerAuthority
+        orchestrationCompatibilityCallerAuthority,
+        signal
       }
     ) => {
       const db = runtime.getOrchestrationDb()
@@ -445,6 +451,16 @@ export const ORCHESTRATION_METHODS: RpcMethod[] = [
             'Remote worker_done requires outcome=succeeded|failed.'
           )
         }
+        if (
+          outcome &&
+          remoteAttachment.protocol_version <
+            ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION
+        ) {
+          throw new OrchestrationError(
+            'capability_unsupported',
+            'The Run-home runtime cannot confirm worker_done settlement. Update it before retrying; no report was queued.'
+          )
+        }
         const relay = db.enqueueFederationRelay({
           dispatchId: remoteAttachment.dispatch_id,
           direction: 'to_home',
@@ -457,9 +473,20 @@ export const ORCHESTRATION_METHODS: RpcMethod[] = [
             priority: params.priority ?? 'normal',
             threadId: params.threadId ?? null,
             payload: params.payload ?? null
-          }),
-          settleRemoteOutcome: outcome
+          })
         })
+        const lifecycle = outcome
+          ? await waitForFederatedLifecycleSettlement(runtime, relay.dispatch_id, relay.sequence, {
+              timeoutMs: 30_000,
+              signal
+            })
+          : undefined
+        if (outcome && !lifecycle) {
+          throw new OrchestrationError(
+            'operation_unknown',
+            'worker_done was queued, but the Run-home runtime did not confirm settlement. Verify the Task and Dispatch before retrying.'
+          )
+        }
         return {
           relay: {
             messageId: relay.message_id,
@@ -468,9 +495,7 @@ export const ORCHESTRATION_METHODS: RpcMethod[] = [
             destination: 'run_home',
             accepted: true
           },
-          ...(outcome
-            ? { lifecycle: { action: outcome === 'succeeded' ? 'completed' : 'failed' } }
-            : {})
+          ...(lifecycle ? { lifecycle } : {})
         }
       }
       const routing = resolveMessageRun(runtime, {
@@ -628,6 +653,10 @@ export const ORCHESTRATION_METHODS: RpcMethod[] = [
             runtime.notifyMessageArrived(to, rejection.type)
             return { message: rejection, lifecycle: reconciled }
           }
+          runtime.notifyMessageArrived(to, msg.type)
+          return msg.type === 'worker_done'
+            ? { message: msg, lifecycle: reconciled }
+            : { message: msg }
         }
         runtime.notifyMessageArrived(to, msg.type)
         return { message: msg }
diff --git a/src/main/runtime/rpc/methods/repo-update-schema.ts b/src/main/runtime/rpc/methods/repo-update-schema.ts
index 6fdb59c3ae9..aaa0d886fb0 100644
--- a/src/main/runtime/rpc/methods/repo-update-schema.ts
+++ b/src/main/runtime/rpc/methods/repo-update-schema.ts
@@ -54,6 +54,7 @@ export function createRepoUpdateSchema<T extends z.ZodRawShape>(
       externalWorktreeVisibilityPromptDismissedAt: z.number().finite().optional(),
       externalWorktreeInboxBaselinePaths: z.array(z.string()).optional(),
       importedExternalWorktreePaths: z.array(z.string()).optional(),
+      agentWorktreeVisibility: z.enum(['hide', 'show']).optional(),
       externalWorktreeDiscoverySuppressedAt: z.number().finite().nullable().optional(),
       projectGroupId: OptionalString.nullable().optional(),
       projectGroupOrder: OptionalFiniteNumber,
diff --git a/src/main/runtime/rpc/methods/repo.test.ts b/src/main/runtime/rpc/methods/repo.test.ts
index 09991c4103e..7c31660c1c4 100644
--- a/src/main/runtime/rpc/methods/repo.test.ts
+++ b/src/main/runtime/rpc/methods/repo.test.ts
@@ -303,6 +303,33 @@ describe('repo RPC methods', () => {
     })
   })
 
+  it('persists agent worktree visibility updates', async () => {
+    const runtime = {
+      getRuntimeId: () => 'test-runtime',
+      updateRepo: vi.fn().mockResolvedValue({
+        id: 'repo-1',
+        path: '/srv/repo',
+        agentWorktreeVisibility: 'show'
+      })
+    } as unknown as OrcaRuntimeService
+    const dispatcher = new RpcDispatcher({ runtime, methods: REPO_METHODS })
+
+    const response = await dispatcher.dispatch(
+      makeRequest('repo.update', {
+        repo: 'repo-1',
+        updates: { agentWorktreeVisibility: 'show' }
+      })
+    )
+
+    expect(runtime.updateRepo).toHaveBeenCalledWith('repo-1', {
+      agentWorktreeVisibility: 'show'
+    })
+    expect(response).toMatchObject({
+      ok: true,
+      result: { repo: { id: 'repo-1', agentWorktreeVisibility: 'show' } }
+    })
+  })
+
   it('persists resolved GitHub upstream metadata updates', async () => {
     const runtime = {
       getRuntimeId: () => 'test-runtime',
diff --git a/src/main/runtime/rpc/methods/terminal-split-env.test.ts b/src/main/runtime/rpc/methods/terminal-split-env.test.ts
new file mode 100644
index 00000000000..3bbf1291f00
--- /dev/null
+++ b/src/main/runtime/rpc/methods/terminal-split-env.test.ts
@@ -0,0 +1,37 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { OrcaRuntimeService } from '../../orca-runtime'
+import type { RpcRequest } from '../core'
+import { RpcDispatcher } from '../dispatcher'
+import { TERMINAL_METHODS } from './terminal'
+
+describe('terminal split environment forwarding', () => {
+  it('forwards requested environment deletions to the runtime owner', async () => {
+    const splitTerminal = vi.fn().mockResolvedValue({ handle: 'term-split' })
+    const runtime = {
+      getRuntimeId: () => 'runtime-1',
+      splitTerminal
+    } as unknown as OrcaRuntimeService
+    const dispatcher = new RpcDispatcher({ runtime, methods: TERMINAL_METHODS })
+    const request: RpcRequest = {
+      id: 'split-1',
+      authToken: 'token',
+      method: 'terminal.split',
+      params: {
+        terminal: 'term-1',
+        direction: 'horizontal',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION']
+      }
+    }
+
+    await dispatcher.dispatch(request)
+
+    expect(splitTerminal).toHaveBeenCalledWith('term-1', {
+      direction: 'horizontal',
+      command: undefined,
+      env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+      envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
+      telemetrySource: undefined
+    })
+  })
+})
diff --git a/src/main/runtime/rpc/methods/terminal.ts b/src/main/runtime/rpc/methods/terminal.ts
index 1cdec021e55..32c31149f3f 100644
--- a/src/main/runtime/rpc/methods/terminal.ts
+++ b/src/main/runtime/rpc/methods/terminal.ts
@@ -99,6 +99,8 @@ type SnapshotFrameOptions = {
   source?: 'headless' | 'renderer'
   oscLinks?: TerminalOscLinkRange[]
   pendingEscapeTailAnsi?: string
+  /** Effective kitty flags proven at this frame's own `seq`. */
+  kittyKeyboardFlags?: number
 }
 
 type SerializedSnapshot = {
@@ -113,6 +115,7 @@ type SerializedSnapshot = {
   scrollbackRows: number
   truncatedByByteBudget: boolean
   pendingEscapeTailAnsi?: string
+  kittyKeyboardFlags?: number
 } | null
 
 type TerminalViewportClient = {
@@ -648,6 +651,15 @@ function sendSnapshotFrames(
         source: options.source,
         oscLinks: options.oscLinks,
         pendingEscapeTailAnsi: options.pendingEscapeTailAnsi,
+        // Why conditional and additive: old clients ignore the unknown field,
+        // and a new client must read absence as unknown rather than zero, so
+        // no opcode or capability negotiation is involved (Rule 1 of
+        // docs/reference/remote-wire-compatibility.md).
+        // Why `seq` is required: the flags are only proven at this frame's own
+        // seq, so without a replay boundary the client cannot order them.
+        ...(typeof options.seq === 'number' && options.kittyKeyboardFlags !== undefined
+          ? { kittyKeyboardFlags: options.kittyKeyboardFlags }
+          : {}),
         truncated: options.truncated === true,
         truncatedByByteBudget: options.truncatedByByteBudget === true
       })
@@ -973,6 +985,7 @@ const TerminalSplit = TerminalHandle.extend({
     .optional(),
   command: OptionalString,
   env: z.record(z.string(), z.string()).optional(),
+  envToDelete: z.array(z.string().min(1).max(256)).max(32).optional(),
   telemetrySource: z.enum(TERMINAL_PANE_SPLIT_SOURCES).optional()
 })
 
@@ -1460,6 +1473,7 @@ export const TERMINAL_METHODS: RpcAnyMethod[] = [
         direction: params.direction,
         command: params.command,
         env: params.env,
+        envToDelete: params.envToDelete,
         telemetrySource: params.telemetrySource
       })
     })
@@ -1840,6 +1854,7 @@ export const TERMINAL_METHODS: RpcAnyMethod[] = [
               reason: 'ack-pending-overflow',
               seq: serialized.seq,
               source: serialized.source,
+              kittyKeyboardFlags: serialized.kittyKeyboardFlags,
               truncatedByByteBudget: serialized.truncatedByByteBudget,
               data: serialized.data
             }
@@ -2327,6 +2342,7 @@ export const TERMINAL_METHODS: RpcAnyMethod[] = [
             seq: serialized?.seq,
             cwd: serialized?.cwd,
             source: serialized?.source,
+            kittyKeyboardFlags: serialized?.kittyKeyboardFlags,
             oscLinks: serialized?.oscLinks,
             pendingEscapeTailAnsi: serialized?.pendingEscapeTailAnsi,
             truncated: false,
@@ -2669,6 +2685,7 @@ export const TERMINAL_METHODS: RpcAnyMethod[] = [
               truncated: initialOutputOverflowed,
               truncatedByByteBudget: serialized?.truncatedByByteBudget,
               source: serialized?.source,
+              kittyKeyboardFlags: serialized?.kittyKeyboardFlags,
               oscLinks: serialized?.oscLinks,
               pendingEscapeTailAnsi: serialized?.pendingEscapeTailAnsi,
               data:
diff --git a/src/main/runtime/rpc/methods/worktree-schemas.test.ts b/src/main/runtime/rpc/methods/worktree-schemas.test.ts
index e1eb22f2c52..5737e2c4c8d 100644
--- a/src/main/runtime/rpc/methods/worktree-schemas.test.ts
+++ b/src/main/runtime/rpc/methods/worktree-schemas.test.ts
@@ -109,14 +109,14 @@ describe('worktree RPC schemas', () => {
     const parsed = WorktreeSet.parse({ worktree: 'id:r1::/repos/wt', displayName: '' })
 
     expect(parsed.displayName).toBe('')
-    expect(Object.prototype.hasOwnProperty.call(parsed, 'displayName')).toBe(true)
+    expect(Object.hasOwn(parsed, 'displayName')).toBe(true)
   })
 
   it('still omits a display name that was never sent', () => {
     const parsed = WorktreeSet.parse({ worktree: 'id:r1::/repos/wt', comment: 'note' })
 
     expect(parsed.displayName).toBeUndefined()
-    expect(Object.prototype.hasOwnProperty.call(parsed, 'displayName')).toBe(false)
+    expect(Object.hasOwn(parsed, 'displayName')).toBe(false)
   })
 
   it('ignores a non-string display name rather than persisting it', () => {
diff --git a/src/main/runtime/rpc/orchestration-legacy-compatibility.ts b/src/main/runtime/rpc/orchestration-legacy-compatibility.ts
index 291d35b895f..31d3b5b1952 100644
--- a/src/main/runtime/rpc/orchestration-legacy-compatibility.ts
+++ b/src/main/runtime/rpc/orchestration-legacy-compatibility.ts
@@ -206,7 +206,7 @@ export class OrchestrationLegacyCompatibility {
     request: RpcRequest,
     params: unknown,
     signal?: AbortSignal
-  ): Promise<unknown | undefined> {
+  ): Promise<unknown> {
     if (request.method === 'orchestration.send') {
       return await handleLegacyLifecycleSend({
         runtime: this.runtime,
diff --git a/src/main/runtime/rpc/orchestration-legacy-lifecycle.ts b/src/main/runtime/rpc/orchestration-legacy-lifecycle.ts
index 9ffe17cca6e..7e76128bd19 100644
--- a/src/main/runtime/rpc/orchestration-legacy-lifecycle.ts
+++ b/src/main/runtime/rpc/orchestration-legacy-lifecycle.ts
@@ -17,7 +17,7 @@ export async function handleLegacyLifecycleSend(args: {
   authority: LegacyCompatibilityAuthority
   request: RpcRequest
   params: LegacySendParams
-}): Promise<unknown | undefined> {
+}): Promise<unknown> {
   const { runtime, authority, request, params } = args
   if (!['heartbeat', 'worker_done', 'escalation'].includes(params.type ?? '')) {
     return undefined
diff --git a/src/main/runtime/rpc/orchestration-legacy-mail.ts b/src/main/runtime/rpc/orchestration-legacy-mail.ts
index e41e0c11509..c83d7ffdf2f 100644
--- a/src/main/runtime/rpc/orchestration-legacy-mail.ts
+++ b/src/main/runtime/rpc/orchestration-legacy-mail.ts
@@ -20,7 +20,7 @@ export async function handleLegacyCheck(args: {
   request: RpcRequest
   params: LegacyCheckParams
   signal?: AbortSignal
-}): Promise<unknown | undefined> {
+}): Promise<unknown> {
   const { runtime, authority, request, params, signal } = args
   if (params.run) {
     return undefined
@@ -138,7 +138,7 @@ export async function handleLegacyReply(args: {
   authority: LegacyCompatibilityAuthority
   request: RpcRequest
   params: LegacyReplyParams
-}): Promise<unknown | undefined> {
+}): Promise<unknown> {
   const { runtime, authority, request, params } = args
   const db = runtime.getOrchestrationDb()
   const original = db.getMessageById(params.id)
diff --git a/src/main/runtime/rpc/orchestration-legacy-question.ts b/src/main/runtime/rpc/orchestration-legacy-question.ts
index 69dec720a3a..cd463155619 100644
--- a/src/main/runtime/rpc/orchestration-legacy-question.ts
+++ b/src/main/runtime/rpc/orchestration-legacy-question.ts
@@ -17,7 +17,7 @@ export async function handleLegacyAsk(args: {
   request: RpcRequest
   params: LegacyAskParams
   signal?: AbortSignal
-}): Promise<unknown | undefined> {
+}): Promise<unknown> {
   const { runtime, authority, request, params, signal } = args
   const dispatch = authority.resolveAskDispatch(request, params)
   if (!dispatch || dispatch.contract_version !== LEGACY_CONTRACT_VERSION) {
diff --git a/src/main/runtime/rpc/orchestration-mutation-executor.ts b/src/main/runtime/rpc/orchestration-mutation-executor.ts
index 2334cd709eb..701970eb58c 100644
--- a/src/main/runtime/rpc/orchestration-mutation-executor.ts
+++ b/src/main/runtime/rpc/orchestration-mutation-executor.ts
@@ -22,7 +22,7 @@ export class OrchestrationMutationExecutor {
   async run(
     request: RpcRequest,
     params: unknown,
-    invoke: (mutation?: DurableMutationInvocation) => Promise<unknown> | unknown,
+    invoke: (mutation?: DurableMutationInvocation) => unknown,
     callerFingerprintOverride?: string
   ): Promise<unknown> {
     const requestId = request.orchestrationRequestId
diff --git a/src/main/runtime/rpc/orchestration-mutation-ledger.test.ts b/src/main/runtime/rpc/orchestration-mutation-ledger.test.ts
index 4062dacf9a1..a9cbfbc5ab7 100644
--- a/src/main/runtime/rpc/orchestration-mutation-ledger.test.ts
+++ b/src/main/runtime/rpc/orchestration-mutation-ledger.test.ts
@@ -38,7 +38,7 @@ describe('durable orchestration mutation ledger', () => {
     }
   })
 
-  function createHarness(dbPath: string | ':memory:' = ':memory:') {
+  function createHarness(dbPath: (string & {}) | ':memory:' = ':memory:') {
     const db = new OrchestrationDb(dbPath)
     const runtime = new OrcaRuntimeService()
     runtime.setOrchestrationDb(db)
diff --git a/src/main/runtime/rpc/streaming.test.ts b/src/main/runtime/rpc/streaming.test.ts
index 382353de803..4b4ce8a9f21 100644
--- a/src/main/runtime/rpc/streaming.test.ts
+++ b/src/main/runtime/rpc/streaming.test.ts
@@ -231,6 +231,28 @@ describe('RpcDispatcher streaming', () => {
     expect(response.streaming).toBeUndefined()
   })
 
+  it('rejects a replacement runtime before streaming dispatch invokes a mutation', async () => {
+    const messages: string[] = []
+    const handler = vi.fn(() => ({ terminal: { handle: 'terminal-1' } }))
+    const dispatcher = new RpcDispatcher({
+      runtime: stubRuntime(),
+      methods: [defineMethod({ name: 'terminal.create', params: z.object({}), handler })]
+    })
+
+    await dispatcher.dispatchStreaming(
+      { ...makeRequest('terminal.create', {}), expectedRuntimeId: 'previous-runtime' },
+      (message) => messages.push(message)
+    )
+
+    expect(messages).toHaveLength(1)
+    expect(JSON.parse(messages[0]!)).toMatchObject({
+      ok: false,
+      error: { code: 'runtime_replaced' },
+      _meta: { runtimeId: 'test-runtime' }
+    })
+    expect(handler).not.toHaveBeenCalled()
+  })
+
   it('returns error for unknown method via dispatchStreaming', async () => {
     const messages: string[] = []
     const dispatcher = new RpcDispatcher({
diff --git a/src/main/runtime/rpc/terminal-opencode-send-guard.integration.test.ts b/src/main/runtime/rpc/terminal-opencode-send-guard.integration.test.ts
new file mode 100644
index 00000000000..2671449b606
--- /dev/null
+++ b/src/main/runtime/rpc/terminal-opencode-send-guard.integration.test.ts
@@ -0,0 +1,71 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { OrcaRuntimeService } from '../orca-runtime'
+import { RpcDispatcher } from './dispatcher'
+import type { RpcRequest } from './core'
+import { TERMINAL_METHODS } from './methods/terminal'
+
+function request(method: string, params: unknown): RpcRequest {
+  return { id: 'request-1', authToken: 'test-token', method, params }
+}
+
+describe('OpenCode guarded terminal send', () => {
+  afterEach(() => vi.useRealTimers())
+
+  it('refuses a marker title left on a shell without writing notes', async () => {
+    vi.useFakeTimers()
+    const write = vi.fn(() => true)
+    const runtime = new OrcaRuntimeService()
+    runtime.setPtyController({
+      write,
+      kill: () => true,
+      getForegroundProcess: async () => 'zsh'
+    })
+    runtime.attachWindow(1)
+    runtime.syncWindowGraph(1, {
+      tabs: [
+        {
+          tabId: 'tab-1',
+          worktreeId: 'repo-1::/tmp/worktree',
+          title: 'OC | zsh',
+          activeLeafId: 'pane-1',
+          layout: null
+        }
+      ],
+      leaves: [
+        {
+          tabId: 'tab-1',
+          worktreeId: 'repo-1::/tmp/worktree',
+          leafId: 'pane-1',
+          paneRuntimeId: 1,
+          ptyId: 'pty-1',
+          paneTitle: 'OC | zsh'
+        }
+      ]
+    })
+    const [terminal] = (await runtime.listTerminals()).terminals
+    const dispatcher = new RpcDispatcher({ runtime, methods: TERMINAL_METHODS })
+
+    await expect(
+      dispatcher.dispatch(request('terminal.agentStatus', { terminal: terminal.handle }))
+    ).resolves.toMatchObject({
+      ok: true,
+      result: { agentStatus: { isRunningAgent: false, status: null } }
+    })
+
+    const send = dispatcher.dispatch(
+      request('terminal.send', {
+        terminal: terminal.handle,
+        text: '$(touch should-not-run)',
+        requireAgentStatus: 'sendable',
+        client: { id: 'desktop-1', type: 'desktop' }
+      })
+    )
+    await vi.advanceTimersByTimeAsync(1_500)
+
+    await expect(send).resolves.toMatchObject({
+      ok: true,
+      result: { send: { accepted: false, bytesWritten: 0, refusedReason: 'no-agent' } }
+    })
+    expect(write).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/main/runtime/runtime-rpc.test.ts b/src/main/runtime/runtime-rpc.test.ts
index 2df636da4c0..5ccffe24550 100644
--- a/src/main/runtime/runtime-rpc.test.ts
+++ b/src/main/runtime/runtime-rpc.test.ts
@@ -6026,7 +6026,7 @@ describe('OrcaRuntimeRpcServer WebSocket bind host (STA-2370)', () => {
     const wideStartGate = new Promise<void>((resolve) => {
       releaseWideStart = resolve
     })
-    let wideStopSpy: ReturnType<typeof vi.spyOn> | null = null
+    let wideStopSpy: ReturnType<typeof vi.spyOn> = null
     vi.spyOn(target, 'startWebSocketTransport').mockImplementation(async (opts) => {
       if (opts.host === '0.0.0.0') {
         // Why: hold the widen mid-flight (loopback already stopped) so stop() must race the rebind.
diff --git a/src/main/runtime/runtime-rpc.ts b/src/main/runtime/runtime-rpc.ts
index b783382c544..326801c6fa9 100644
--- a/src/main/runtime/runtime-rpc.ts
+++ b/src/main/runtime/runtime-rpc.ts
@@ -1409,7 +1409,7 @@ export class OrcaRuntimeRpcServer {
     // never orphan a running 0.0.0.0 listener outside activeTransports (and thus outside stop()).
     this.activeTransports[index] = widened.transport
     const metaIndex = this.transports.findIndex((meta) => meta.kind === 'websocket')
-    if (metaIndex >= 0) {
+    if (metaIndex !== -1) {
       this.transports[metaIndex] = { kind: 'websocket', endpoint: widened.endpoint }
     }
     try {
@@ -1451,7 +1451,7 @@ export class OrcaRuntimeRpcServer {
       )
       this.activeTransports.splice(index, 1)
       const metaIndex = this.transports.findIndex((meta) => meta.kind === 'websocket')
-      if (metaIndex >= 0) {
+      if (metaIndex !== -1) {
         this.transports.splice(metaIndex, 1)
       }
       this.wsBoundHost = null
@@ -1466,7 +1466,7 @@ export class OrcaRuntimeRpcServer {
     // orphan a live transport outside activeTransports (and thus outside stop()).
     this.activeTransports[index] = restored.transport
     const metaIndex = this.transports.findIndex((meta) => meta.kind === 'websocket')
-    if (metaIndex >= 0) {
+    if (metaIndex !== -1) {
       this.transports[metaIndex] = { kind: 'websocket', endpoint: restored.endpoint }
     }
     try {
diff --git a/src/main/runtime/windows-firewall-remote-scope.ts b/src/main/runtime/windows-firewall-remote-scope.ts
index 9845413d079..6968435a8aa 100644
--- a/src/main/runtime/windows-firewall-remote-scope.ts
+++ b/src/main/runtime/windows-firewall-remote-scope.ts
@@ -109,7 +109,7 @@ function maskPrefixLength(maskText: string, version: IpVersion): number | null {
 function parseIpRange(scope: string): IpRange | null {
   const trimmed = scope.trim()
   const dashIndex = trimmed.indexOf('-')
-  if (dashIndex >= 0) {
+  if (dashIndex !== -1) {
     if (dashIndex !== trimmed.lastIndexOf('-')) {
       return null
     }
@@ -122,7 +122,7 @@ function parseIpRange(scope: string): IpRange | null {
   }
 
   const slashIndex = trimmed.indexOf('/')
-  if (slashIndex >= 0) {
+  if (slashIndex !== -1) {
     if (slashIndex !== trimmed.lastIndexOf('/')) {
       return null
     }
@@ -195,7 +195,7 @@ function expandEmbeddedIpv4(address: string): string | null {
   }
   const lastColon = address.lastIndexOf(':')
   const ipv4 = parseIpv4(address.slice(lastColon + 1))
-  if (lastColon < 0 || !ipv4) {
+  if (lastColon === -1 || !ipv4) {
     return null
   }
   const high = ((ipv4.value >> 16n) & 0xffffn).toString(16)
diff --git a/src/main/runtime/workspace-session-failed-write-rollback.ts b/src/main/runtime/workspace-session-failed-write-rollback.ts
index 9460c27b6ed..f770511bb27 100644
--- a/src/main/runtime/workspace-session-failed-write-rollback.ts
+++ b/src/main/runtime/workspace-session-failed-write-rollback.ts
@@ -2,7 +2,7 @@ import { isDeepStrictEqual } from 'node:util'
 import type { WorkspaceSessionState } from '../../shared/types'
 
 const MISSING = Symbol('missing')
-type RollbackValue = unknown | typeof MISSING
+type RollbackValue = unknown
 
 function isRecord(value: RollbackValue): value is Record<string, unknown> {
   return (
diff --git a/src/main/runtime/worktree-scan-admin-fingerprint-gate.test.ts b/src/main/runtime/worktree-scan-admin-fingerprint-gate.test.ts
new file mode 100644
index 00000000000..05c0fe9cd6f
--- /dev/null
+++ b/src/main/runtime/worktree-scan-admin-fingerprint-gate.test.ts
@@ -0,0 +1,326 @@
+// The fingerprint's own behaviour is covered against real Git in repo-worktree-admin-fingerprint.test.ts.
+// This suite pins the cache wiring: when the probe may skip a `git worktree list`, and when it may not.
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const electronMocks = vi.hoisted(() => {
+  const ipcMain = {
+    on: vi.fn(() => ipcMain),
+    removeListener: vi.fn(() => ipcMain),
+    emit: vi.fn(() => true)
+  }
+  return {
+    BrowserWindow: { fromId: vi.fn((): unknown => null) },
+    webContents: { fromId: vi.fn((): unknown => null) },
+    ipcMain,
+    app: { getPath: vi.fn(() => '/tmp'), isPackaged: false }
+  }
+})
+vi.mock('electron', () => electronMocks)
+
+const getSshGitProviderMock = vi.hoisted(() => vi.fn())
+vi.mock('../providers/ssh-git-dispatch', () => ({
+  getSshGitProvider: getSshGitProviderMock,
+  getSshGitProviderGeneration: vi.fn(() => 0),
+  SSH_GIT_PROVIDER_UNAVAILABLE_MESSAGE: 'unavailable',
+  requireSshGitProvider: (connectionId: string) => getSshGitProviderMock(connectionId)
+}))
+
+const listWorktreesStrictMock = vi.hoisted(() => vi.fn())
+vi.mock('../git/worktree', async (importOriginal) => ({
+  ...(await importOriginal<Record<string, unknown>>()),
+  listWorktreesStrict: listWorktreesStrictMock
+}))
+
+const readRepoWorktreeAdminFingerprintMock = vi.hoisted(() => vi.fn())
+vi.mock('./repo-worktree-admin-fingerprint', () => ({
+  readRepoWorktreeAdminFingerprint: readRepoWorktreeAdminFingerprintMock
+}))
+
+import { OrcaRuntimeService, WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS } from './orca-runtime'
+
+const REPO_ID = 'repo-local'
+const REPO_PATH = '/Users/me/dev/app'
+const WORKTREE_PATH = '/Users/me/dev/app-feature'
+const WORKTREE_ID = `${REPO_ID}::${WORKTREE_PATH}`
+const MAIN_WORKTREE_ID = `${REPO_ID}::${REPO_PATH}`
+const SCAN_TTL_MS = 30_000
+
+function makeMeta(overrides: Record<string, unknown> = {}) {
+  return {
+    displayName: 'feature',
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    linkedGitLabMR: null,
+    linkedGitLabIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 0,
+    ...overrides
+  }
+}
+
+function makeStore(options: { connectionId?: string; repoCount?: number; repoPath?: string } = {}) {
+  const metaById: Record<string, ReturnType<typeof makeMeta>> = {
+    [WORKTREE_ID]: makeMeta(),
+    [MAIN_WORKTREE_ID]: makeMeta({ displayName: 'main' })
+  }
+  const basePath = options.repoPath ?? REPO_PATH
+  const repos = Array.from({ length: options.repoCount ?? 1 }, (_unused, index) => ({
+    id: index === 0 ? REPO_ID : `${REPO_ID}-${index}`,
+    path: index === 0 ? basePath : `${basePath}-${index}`,
+    displayName: 'app',
+    badgeColor: 'blue',
+    addedAt: 1,
+    ...(options.connectionId === undefined ? {} : { connectionId: options.connectionId })
+  }))
+  const store = {
+    getRepo: (id: string) => store.getRepos().find((repo) => repo.id === id),
+    getRepos: () => repos,
+    getAllWorktreeMeta: () => metaById,
+    getWorktreeMeta: (id: string) => metaById[id],
+    setWorktreeMeta: (id: string, meta: Record<string, unknown>) => {
+      metaById[id] = { ...(metaById[id] ?? makeMeta()), ...meta } as never
+      return metaById[id]
+    },
+    removeWorktreeMeta: () => {},
+    getAllWorktreeLineage: () => ({}),
+    getAllWorkspaceLineage: () => ({}),
+    removeWorktreeLineage: vi.fn(),
+    removeWorkspaceLineage: vi.fn(),
+    getGitHubCache: () => undefined as never,
+    getSettings: () => ({
+      workspaceDir: '/tmp/workspaces',
+      nestWorkspaces: false,
+      refreshLocalBaseRefOnWorktreeCreate: false,
+      branchPrefix: 'none',
+      branchPrefixCustom: ''
+    }),
+    getProjects: () => []
+  }
+  return store
+}
+
+type RuntimeInternals = { listResolvedWorktrees: () => Promise<unknown> }
+
+function makeRuntime(
+  options: { connectionId?: string; repoCount?: number; repoPath?: string } = {}
+): {
+  runtime: OrcaRuntimeService
+  list: () => Promise<unknown>
+} {
+  const runtime = new OrcaRuntimeService(makeStore(options) as never)
+  return {
+    runtime,
+    list: () => (runtime as unknown as RuntimeInternals).listResolvedWorktrees()
+  }
+}
+
+function scanCount(): number {
+  return listWorktreesStrictMock.mock.calls.length
+}
+
+describe('worktree scan admin-fingerprint gate', () => {
+  beforeEach(() => {
+    getSshGitProviderMock.mockReset()
+    listWorktreesStrictMock.mockReset()
+    listWorktreesStrictMock.mockResolvedValue([
+      { path: REPO_PATH, head: 'abc', branch: 'main', isBare: false, isMainWorktree: true },
+      { path: WORKTREE_PATH, head: 'def', branch: 'feature', isBare: false, isMainWorktree: false }
+    ])
+    readRepoWorktreeAdminFingerprintMock.mockReset()
+    readRepoWorktreeAdminFingerprintMock.mockResolvedValue('fp-1')
+  })
+
+  it('skips the Git scan past the TTL while the admin fingerprint is unchanged', async () => {
+    vi.useFakeTimers()
+    try {
+      const { list } = makeRuntime()
+
+      await list()
+      expect(scanCount()).toBe(1)
+
+      vi.advanceTimersByTime(SCAN_TTL_MS + 1_000)
+      await list()
+      expect(scanCount()).toBe(1)
+
+      // The suppressed read must still re-arm the TTL rather than probing on every poll.
+      vi.advanceTimersByTime(1_000)
+      await list()
+      expect(scanCount()).toBe(1)
+      expect(readRepoWorktreeAdminFingerprintMock).toHaveBeenCalledTimes(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('rescans at the TTL once the admin fingerprint changes', async () => {
+    vi.useFakeTimers()
+    try {
+      const { list } = makeRuntime()
+
+      await list()
+      expect(scanCount()).toBe(1)
+
+      readRepoWorktreeAdminFingerprintMock.mockResolvedValue('fp-2')
+      vi.advanceTimersByTime(SCAN_TTL_MS + 1_000)
+      await list()
+      expect(scanCount()).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('reconciles with a real scan once the bounded interval elapses', async () => {
+    vi.useFakeTimers()
+    try {
+      const { list } = makeRuntime()
+
+      await list()
+      expect(scanCount()).toBe(1)
+
+      // Keep polling past the TTL with an unchanged fingerprint; only the reconcile deadline rescans.
+      for (
+        let elapsed = 31_000;
+        elapsed < WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS;
+        elapsed += 31_000
+      ) {
+        vi.advanceTimersByTime(31_000)
+        await list()
+      }
+      expect(scanCount()).toBe(1)
+
+      vi.advanceTimersByTime(WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS)
+      await list()
+      expect(scanCount()).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('still rescans immediately when an event invalidates the repo', async () => {
+    vi.useFakeTimers()
+    try {
+      const { runtime, list } = makeRuntime()
+
+      await list()
+      expect(scanCount()).toBe(1)
+
+      runtime.notifyBranchRenamed(REPO_ID)
+      await list()
+      expect(scanCount()).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('scans when the probe cannot describe the repo', async () => {
+    vi.useFakeTimers()
+    try {
+      readRepoWorktreeAdminFingerprintMock.mockResolvedValue(null)
+      const { list } = makeRuntime()
+
+      await list()
+      vi.advanceTimersByTime(SCAN_TTL_MS + 1_000)
+      await list()
+
+      expect(scanCount()).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('never probes a repo whose scan TTL already reaches the reconcile interval', async () => {
+    // Agent-scratch roots carry a 5-minute TTL, so a fingerprint could never be reused. Reading one
+    // would be pure work on a polling path.
+    vi.useFakeTimers()
+    try {
+      const { list } = makeRuntime({ repoPath: '/tmp/.codex-tmp/capsule-a' })
+
+      await list()
+      vi.advanceTimersByTime(WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS + 1_000)
+      await list()
+
+      expect(scanCount()).toBe(2)
+      expect(readRepoWorktreeAdminFingerprintMock).not.toHaveBeenCalled()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('never consults the probe for SSH repos', async () => {
+    vi.useFakeTimers()
+    try {
+      const listWorktrees = vi.fn(async () => [
+        { path: REPO_PATH, head: 'abc', branch: 'main', isBare: false, isMainWorktree: true }
+      ])
+      getSshGitProviderMock.mockReturnValue({ listWorktrees })
+      const { list } = makeRuntime({ connectionId: 'ssh-remote-1' })
+
+      await list()
+      vi.advanceTimersByTime(SCAN_TTL_MS + 1_000)
+      await list()
+
+      expect(listWorktrees).toHaveBeenCalledTimes(2)
+      expect(readRepoWorktreeAdminFingerprintMock).not.toHaveBeenCalled()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('does not extend a failed scan on an unchanged fingerprint', async () => {
+    vi.useFakeTimers()
+    try {
+      listWorktreesStrictMock.mockRejectedValue(new Error('git unavailable'))
+      const { list } = makeRuntime()
+
+      await list()
+      expect(scanCount()).toBe(1)
+
+      vi.advanceTimersByTime(SCAN_TTL_MS + 1_000)
+      await list()
+      expect(scanCount()).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('bounds Git fan-out under a sustained 1 Hz polling workload', async () => {
+    // Reproduces the reported steady state: 10 idle repos, a caller polling faster than the
+    // resolved-snapshot TTL. Before the gate this cost one `git worktree list` per repo per 30 s.
+    vi.useFakeTimers()
+    try {
+      const REPOS = 10
+      const POLL_SECONDS = 30 * 60
+      const { list } = makeRuntime({ repoCount: REPOS })
+
+      for (let second = 0; second < POLL_SECONDS; second += 1) {
+        await list()
+        vi.advanceTimersByTime(1_000)
+      }
+
+      // One scan per repo per cache refresh: the TTL alone would refresh 60x per repo, the
+      // reconcile deadline refreshes 6x. 600 -> 60 `git worktree list` spawns per half hour.
+      const ttlOnlyScans = (REPOS * POLL_SECONDS * 1_000) / SCAN_TTL_MS
+      const reconcileScans =
+        (REPOS * POLL_SECONDS * 1_000) / WORKTREE_SCAN_ADMIN_RECONCILE_INTERVAL_MS
+      expect(ttlOnlyScans).toBe(600)
+      expect(reconcileScans).toBe(60)
+      expect(scanCount()).toBe(reconcileScans)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('shares one probe and one scan across concurrent callers', async () => {
+    const { list } = makeRuntime()
+
+    await Promise.all([list(), list(), list()])
+
+    expect(scanCount()).toBe(1)
+    expect(readRepoWorktreeAdminFingerprintMock).toHaveBeenCalledTimes(1)
+  })
+})
diff --git a/src/main/shell-prompt-readiness-probe.test.ts b/src/main/shell-prompt-readiness-probe.test.ts
new file mode 100644
index 00000000000..c2c783953ac
--- /dev/null
+++ b/src/main/shell-prompt-readiness-probe.test.ts
@@ -0,0 +1,227 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const lineEditorProbe = vi.hoisted(() => vi.fn())
+const processReadinessProbe = vi.hoisted(() => vi.fn())
+const resolveExecutablePath = vi.hoisted(() => vi.fn((value: string) => Promise.resolve(value)))
+vi.mock('../shared/pty-slave-line-discipline-echo', () => ({
+  createPtySlaveLineEditorProbe: () => lineEditorProbe
+}))
+vi.mock('../shared/shell-process-readiness', () => ({
+  readShellProcessReadiness: processReadinessProbe,
+  resolveShellExecutablePath: resolveExecutablePath
+}))
+
+import { createShellPromptReadinessProbe } from './shell-prompt-readiness-probe'
+
+describe('shell prompt readiness probe', () => {
+  beforeEach(() => {
+    vi.useFakeTimers()
+    lineEditorProbe.mockReset()
+    processReadinessProbe.mockReset()
+    resolveExecutablePath.mockClear()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('accepts only the identified shell pid in line-editor mode and foreground', async () => {
+    lineEditorProbe.mockResolvedValue('line-editor')
+    processReadinessProbe.mockResolvedValue({ executablePath: '/bin/zsh', foreground: true })
+    const onPromptReady = vi.fn()
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady,
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+
+    expect(onPromptReady).toHaveBeenCalledOnce()
+  })
+
+  it('preserves an unset child PATH for executable resolution', async () => {
+    lineEditorProbe.mockResolvedValue('line-editor')
+    processReadinessProbe.mockResolvedValue({ executablePath: '/bin/zsh', foreground: true })
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady: vi.fn(),
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+
+    expect(resolveExecutablePath).toHaveBeenCalledWith('/bin/zsh', process.cwd(), undefined)
+  })
+
+  it.each([
+    ['silent read', 'other', { executablePath: '/bin/zsh', foreground: true }],
+    ['background shell', 'line-editor', { executablePath: '/bin/zsh', foreground: false }],
+    ['different foreground process', 'line-editor', null],
+    [
+      'non-shell replacement image',
+      'line-editor',
+      { executablePath: '/usr/bin/sqlite3', foreground: true }
+    ],
+    [
+      'non-shell image with the shell basename',
+      'line-editor',
+      { executablePath: '/tmp/zsh', foreground: true }
+    ]
+  ])('rejects %s', async (_name, terminalState, rows) => {
+    lineEditorProbe.mockResolvedValue(terminalState)
+    processReadinessProbe.mockResolvedValue(rows)
+    const onPromptReady = vi.fn()
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady,
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+
+    expect(onPromptReady).not.toHaveBeenCalled()
+    if (terminalState === 'other') {
+      expect(processReadinessProbe).not.toHaveBeenCalled()
+    }
+  })
+
+  it('does no external work when the ready marker cancels the settle window', async () => {
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady: vi.fn(),
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    probe?.dispose()
+    await vi.advanceTimersByTimeAsync(10)
+
+    expect(lineEditorProbe).not.toHaveBeenCalled()
+    expect(processReadinessProbe).not.toHaveBeenCalled()
+  })
+
+  it('invalidates an in-flight result when newer output arrives', async () => {
+    const pending: { resolve?: (value: string) => void } = {}
+    lineEditorProbe.mockImplementation(
+      () => new Promise((resolve) => (pending.resolve = resolve as (value: string) => void))
+    )
+    processReadinessProbe.mockResolvedValue({ executablePath: '/bin/zsh', foreground: true })
+    const onPromptReady = vi.fn()
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady,
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+    probe?.notifyOutput('\x1b[?2004h')
+    pending.resolve?.('line-editor')
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(onPromptReady).not.toHaveBeenCalled()
+    expect(processReadinessProbe).not.toHaveBeenCalled()
+  })
+
+  it('does not inspect a process after disposal during a line-editor probe', async () => {
+    const pending: { resolve?: (value: string) => void } = {}
+    lineEditorProbe.mockImplementation(
+      () => new Promise((resolve) => (pending.resolve = resolve as (value: string) => void))
+    )
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady: vi.fn(),
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+    probe?.dispose()
+    pending.resolve?.('line-editor')
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(processReadinessProbe).not.toHaveBeenCalled()
+  })
+
+  it('invalidates process readiness that resolves after disposal', async () => {
+    const pending: { resolve?: (value: { executablePath: string; foreground: boolean }) => void } =
+      {}
+    lineEditorProbe.mockResolvedValue('line-editor')
+    processReadinessProbe.mockImplementation(
+      () => new Promise((resolve) => (pending.resolve = resolve))
+    )
+    const onPromptReady = vi.fn()
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady,
+      settleMs: 10
+    })
+
+    probe?.notifyOutput('\x1b[?2004h')
+    await vi.advanceTimersByTimeAsync(10)
+    probe?.dispose()
+    pending.resolve?.({ executablePath: '/bin/zsh', foreground: true })
+    await vi.advanceTimersByTimeAsync(0)
+
+    expect(onPromptReady).not.toHaveBeenCalled()
+  })
+
+  it('ignores slow startup output until the line editor enables its protocol', async () => {
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady: vi.fn(),
+      settleMs: 10
+    })
+
+    for (let index = 0; index < 20; index += 1) {
+      probe?.notifyOutput(`startup ${index}\n`)
+      await vi.advanceTimersByTimeAsync(20)
+    }
+
+    expect(lineEditorProbe).not.toHaveBeenCalled()
+    expect(processReadinessProbe).not.toHaveBeenCalled()
+  })
+
+  it('bounds rejected line-editor retries', async () => {
+    lineEditorProbe.mockResolvedValue('line-editor')
+    processReadinessProbe.mockResolvedValue({
+      executablePath: '/usr/bin/sqlite3',
+      foreground: true
+    })
+    const probe = createShellPromptReadinessProbe({
+      slavePath: '/dev/ttys048',
+      shellPath: '/bin/zsh',
+      getShellPid: () => 42,
+      onPromptReady: vi.fn(),
+      settleMs: 10
+    })
+
+    for (let index = 0; index < 10; index += 1) {
+      probe?.notifyOutput('\x1b[?2004h')
+      await vi.advanceTimersByTimeAsync(10)
+    }
+
+    expect(lineEditorProbe).toHaveBeenCalledTimes(4)
+    expect(processReadinessProbe).toHaveBeenCalledTimes(4)
+  })
+})
diff --git a/src/main/shell-prompt-readiness-probe.ts b/src/main/shell-prompt-readiness-probe.ts
new file mode 100644
index 00000000000..11583fd2de7
--- /dev/null
+++ b/src/main/shell-prompt-readiness-probe.ts
@@ -0,0 +1,107 @@
+import { createPtySlaveLineEditorProbe } from '../shared/pty-slave-line-discipline-echo'
+import {
+  readShellProcessReadiness,
+  resolveShellExecutablePath
+} from '../shared/shell-process-readiness'
+import {
+  createLineEditorReadyOutputScanState,
+  scanForLineEditorReadyOutput
+} from './line-editor-ready-output-scanner'
+import { basename } from 'node:path'
+
+export const SHELL_PROMPT_PROBE_SETTLE_MS = 50
+export const MAX_SHELL_PROMPT_PROBES = 4
+
+export type ShellPromptReadinessProbe = {
+  notifyOutput(data: string): void
+  dispose(): void
+}
+
+export function createShellPromptReadinessProbe(options: {
+  slavePath: string | undefined
+  getShellPid: () => number | null
+  shellPath: string | undefined
+  shellCwd?: string
+  shellPathEnv?: string
+  onPromptReady: () => void
+  settleMs?: number
+}): ShellPromptReadinessProbe | null {
+  const lineEditorProbe = createPtySlaveLineEditorProbe(options.slavePath)
+  if (!lineEditorProbe) {
+    return null
+  }
+  const settleMs = options.settleMs ?? SHELL_PROMPT_PROBE_SETTLE_MS
+  const expectedShellName = options.shellPath ? basename(options.shellPath).toLowerCase() : null
+  const outputScanState = createLineEditorReadyOutputScanState()
+  let disposed = false
+  let timer: ReturnType<typeof setTimeout> | null = null
+  let generation = 0
+  let probesStarted = 0
+
+  const probe = async (scheduledGeneration: number): Promise<void> => {
+    if (disposed || scheduledGeneration !== generation) {
+      return
+    }
+    const shellPid = options.getShellPid()
+    if (!shellPid || (await lineEditorProbe()) !== 'line-editor') {
+      return
+    }
+    if (disposed || scheduledGeneration !== generation) {
+      return
+    }
+    const [shell, expectedPath] = await Promise.all([
+      readShellProcessReadiness(shellPid),
+      options.shellPath
+        ? resolveShellExecutablePath(
+            options.shellPath,
+            options.shellCwd ?? process.cwd(),
+            options.shellPathEnv
+          )
+        : Promise.resolve(null)
+    ])
+    if (disposed || scheduledGeneration !== generation) {
+      return
+    }
+    if (
+      !shell?.foreground ||
+      !expectedShellName ||
+      !expectedPath ||
+      basename(shell.executablePath).toLowerCase() !== expectedShellName ||
+      shell.executablePath !== expectedPath
+    ) {
+      return
+    }
+    disposed = true
+    options.onPromptReady()
+  }
+
+  return {
+    notifyOutput(data: string): void {
+      if (
+        disposed ||
+        probesStarted >= MAX_SHELL_PROMPT_PROBES ||
+        !scanForLineEditorReadyOutput(outputScanState, data)
+      ) {
+        return
+      }
+      generation += 1
+      const scheduledGeneration = generation
+      if (timer) {
+        clearTimeout(timer)
+      }
+      timer = setTimeout(() => {
+        timer = null
+        probesStarted += 1
+        void probe(scheduledGeneration).catch(() => {})
+      }, settleMs)
+    },
+    dispose(): void {
+      disposed = true
+      generation += 1
+      if (timer) {
+        clearTimeout(timer)
+        timer = null
+      }
+    }
+  }
+}
diff --git a/src/main/shell-ready-marker-scanner.ts b/src/main/shell-ready-marker-scanner.ts
index 0e6250e1c4e..a8b58499852 100644
--- a/src/main/shell-ready-marker-scanner.ts
+++ b/src/main/shell-ready-marker-scanner.ts
@@ -11,6 +11,10 @@ export type ShellReadyScanResult = {
   postMarkerBytesObserved: boolean
 }
 
+type ShellReadyBoundaryScanResult = ShellReadyScanResult & {
+  postMarkerOutputIndex: number | null
+}
+
 export function createShellReadyScanState(): ShellReadyScanState {
   return { matchPos: 0, heldBytes: '' }
 }
@@ -22,7 +26,10 @@ export function drainShellReadyHeldBytes(state: ShellReadyScanState): string {
   return heldBytes
 }
 
-export function scanForShellReady(state: ShellReadyScanState, data: string): ShellReadyScanResult {
+export function scanForShellReadyBoundary(
+  state: ShellReadyScanState,
+  data: string
+): ShellReadyBoundaryScanResult {
   let output = ''
 
   for (let i = 0; i < data.length; i += 1) {
@@ -49,7 +56,8 @@ export function scanForShellReady(state: ShellReadyScanState, data: string): She
       return {
         output: output + remaining,
         matched: true,
-        postMarkerBytesObserved: remaining.length > 0
+        postMarkerBytesObserved: remaining.length > 0,
+        postMarkerOutputIndex: output.length
       }
     } else {
       output += state.heldBytes
@@ -64,5 +72,15 @@ export function scanForShellReady(state: ShellReadyScanState, data: string): She
     }
   }
 
-  return { output, matched: false, postMarkerBytesObserved: false }
+  return {
+    output,
+    matched: false,
+    postMarkerBytesObserved: false,
+    postMarkerOutputIndex: null
+  }
+}
+
+export function scanForShellReady(state: ShellReadyScanState, data: string): ShellReadyScanResult {
+  const { postMarkerOutputIndex: _, ...result } = scanForShellReadyBoundary(state, data)
+  return result
 }
diff --git a/src/main/shell-startup-identity-scanner.test.ts b/src/main/shell-startup-identity-scanner.test.ts
new file mode 100644
index 00000000000..2b1607c23e6
--- /dev/null
+++ b/src/main/shell-startup-identity-scanner.test.ts
@@ -0,0 +1,46 @@
+import { describe, expect, it } from 'vitest'
+import {
+  createShellStartupIdentityScanState,
+  drainShellStartupIdentityHeldBytes,
+  scanForShellStartupIdentity
+} from './shell-startup-identity-scanner'
+
+describe('shell startup identity scanner', () => {
+  it('strips a split identity marker and returns its shell pid', () => {
+    const state = createShellStartupIdentityScanState()
+    expect(scanForShellStartupIdentity(state, 'before\x1b]777;orca-shell-st')).toEqual({
+      output: 'before',
+      shellPid: null
+    })
+    expect(scanForShellStartupIdentity(state, 'art:12345\x07after')).toEqual({
+      output: 'after',
+      shellPid: 12345
+    })
+  })
+
+  it('forwards lookalikes unchanged', () => {
+    const state = createShellStartupIdentityScanState()
+    const input = 'a\x1b]777;orca-shell-start:nope\x07b'
+    expect(scanForShellStartupIdentity(state, input)).toEqual({ output: input, shellPid: null })
+  })
+
+  it('forwards an unrelated OSC ending in digits', () => {
+    const state = createShellStartupIdentityScanState()
+    const input = '\x1b]1337;remote-session:12345'
+    expect(scanForShellStartupIdentity(state, input)).toEqual({ output: input, shellPid: null })
+    expect(state.heldBytes).toBe('')
+  })
+
+  it('releases an incomplete marker on teardown', () => {
+    const state = createShellStartupIdentityScanState()
+    scanForShellStartupIdentity(state, '\x1b]777;orca-shell-start:12')
+    expect(drainShellStartupIdentityHeldBytes(state)).toBe('\x1b]777;orca-shell-start:12')
+  })
+
+  it('does not retain an unbounded digit stream', () => {
+    const state = createShellStartupIdentityScanState()
+    const input = `\x1b]777;orca-shell-start:${'1'.repeat(100)}`
+    expect(scanForShellStartupIdentity(state, input).output).toBe(input)
+    expect(state.heldBytes).toBe('')
+  })
+})
diff --git a/src/main/shell-startup-identity-scanner.ts b/src/main/shell-startup-identity-scanner.ts
new file mode 100644
index 00000000000..234b69e6bbf
--- /dev/null
+++ b/src/main/shell-startup-identity-scanner.ts
@@ -0,0 +1,72 @@
+export const SHELL_STARTUP_IDENTITY_PREFIX = '\x1b]777;orca-shell-start:'
+const POSSIBLE_PID_SUFFIX = /^\d{0,20}$/
+
+export type ShellStartupIdentityScanState = {
+  heldBytes: string
+}
+
+export type ShellStartupIdentityScanResult = {
+  output: string
+  shellPid: number | null
+}
+
+export function createShellStartupIdentityScanState(): ShellStartupIdentityScanState {
+  return { heldBytes: '' }
+}
+
+export function drainShellStartupIdentityHeldBytes(state: ShellStartupIdentityScanState): string {
+  const heldBytes = state.heldBytes
+  state.heldBytes = ''
+  return heldBytes
+}
+
+function isPossibleMarker(candidate: string): boolean {
+  if (candidate.length <= SHELL_STARTUP_IDENTITY_PREFIX.length) {
+    return SHELL_STARTUP_IDENTITY_PREFIX.startsWith(candidate)
+  }
+  if (!candidate.startsWith(SHELL_STARTUP_IDENTITY_PREFIX)) {
+    return false
+  }
+  const suffix = candidate.slice(SHELL_STARTUP_IDENTITY_PREFIX.length)
+  return POSSIBLE_PID_SUFFIX.test(suffix)
+}
+
+export function scanForShellStartupIdentity(
+  state: ShellStartupIdentityScanState,
+  data: string
+): ShellStartupIdentityScanResult {
+  let pending = state.heldBytes + data
+  let output = ''
+  state.heldBytes = ''
+
+  while (pending.length > 0) {
+    const start = pending.indexOf(SHELL_STARTUP_IDENTITY_PREFIX[0] as string)
+    if (start === -1) {
+      output += pending
+      break
+    }
+    output += pending.slice(0, start)
+    const candidate = pending.slice(start)
+    if (isPossibleMarker(candidate)) {
+      state.heldBytes = candidate
+      break
+    }
+    if (candidate.startsWith(SHELL_STARTUP_IDENTITY_PREFIX)) {
+      const suffix = candidate.slice(SHELL_STARTUP_IDENTITY_PREFIX.length)
+      const terminator = suffix.indexOf('\x07')
+      const pidText = terminator === -1 ? '' : suffix.slice(0, terminator)
+      if (/^\d+$/.test(pidText)) {
+        const shellPid = Number(pidText)
+        const markerLength = SHELL_STARTUP_IDENTITY_PREFIX.length + terminator + 1
+        return {
+          output: output + candidate.slice(markerLength),
+          shellPid: Number.isSafeInteger(shellPid) && shellPid > 0 ? shellPid : null
+        }
+      }
+    }
+    output += candidate[0]
+    pending = candidate.slice(1)
+  }
+
+  return { output, shellPid: null }
+}
diff --git a/src/main/shell-startup-output-scanner.test.ts b/src/main/shell-startup-output-scanner.test.ts
new file mode 100644
index 00000000000..1a0930b9395
--- /dev/null
+++ b/src/main/shell-startup-output-scanner.test.ts
@@ -0,0 +1,121 @@
+import { describe, expect, it } from 'vitest'
+import {
+  createShellStartupOutputScanState,
+  drainShellStartupOutputScanState,
+  scanShellStartupOutput
+} from './shell-startup-output-scanner'
+
+const READY_MARKER = '\x1b]777;orca-shell-ready\x07'
+const IDENTITY_MARKER = '\x1b]777;orca-shell-start:12345\x07'
+
+function scanChunks(chunks: string[]): {
+  output: string
+  shellPid: number | null
+  ready: boolean
+  postMarkerBytesObserved: boolean
+} {
+  const state = createShellStartupOutputScanState()
+  let output = ''
+  let shellPid: number | null = null
+  let ready = false
+  let postMarkerBytesObserved = false
+
+  for (const chunk of chunks) {
+    const scanned = scanShellStartupOutput(state, chunk)
+    output += scanned.output
+    shellPid ??= scanned.shellPid
+    ready ||= scanned.ready
+    postMarkerBytesObserved ||= scanned.postMarkerBytesObserved
+  }
+  return { output, shellPid, ready, postMarkerBytesObserved }
+}
+
+function expectEverySplitToProduce(
+  input: string,
+  expected: Omit<ReturnType<typeof scanChunks>, 'postMarkerBytesObserved'>
+): void {
+  for (let split = 0; split <= input.length; split += 1) {
+    const { postMarkerBytesObserved: _, ...scanned } = scanChunks([
+      input.slice(0, split),
+      input.slice(split)
+    ])
+    expect(scanned, `split ${split}`).toEqual(expected)
+  }
+}
+
+describe('shell startup output scanner', () => {
+  it.each([
+    ['after the ready marker', [READY_MARKER, '\x1b[?2004hfish> ']],
+    ['after the ESC introducer', [`${READY_MARKER}\x1b`, '[?2004hfish> ']]
+  ])('preserves Fish output split %s', (_boundary, chunks) => {
+    const state = createShellStartupOutputScanState()
+    let output = ''
+
+    for (const chunk of chunks) {
+      output += scanShellStartupOutput(state, chunk).output
+    }
+
+    expect(output).toBe('\x1b[?2004hfish> ')
+  })
+
+  it('preserves every post-ready byte at every chunk boundary', () => {
+    expectEverySplitToProduce(`${READY_MARKER}${IDENTITY_MARKER}prompt`, {
+      output: `${IDENTITY_MARKER}prompt`,
+      shellPid: null,
+      ready: true
+    })
+    expectEverySplitToProduce(`${READY_MARKER}\x1b[?2004hfish> `, {
+      output: '\x1b[?2004hfish> ',
+      shellPid: null,
+      ready: true
+    })
+  })
+
+  it('strips pre-ready markers at every chunk boundary', () => {
+    expectEverySplitToProduce(`${IDENTITY_MARKER}${READY_MARKER}prompt`, {
+      output: 'prompt',
+      shellPid: 12345,
+      ready: true
+    })
+  })
+
+  it('strips identity and readiness markers from one chunk', () => {
+    const state = createShellStartupOutputScanState()
+    const scanned = scanShellStartupOutput(state, `${IDENTITY_MARKER}${READY_MARKER}prompt`)
+
+    expect(scanned).toEqual({
+      output: 'prompt',
+      shellPid: 12345,
+      ready: true,
+      postMarkerBytesObserved: true
+    })
+  })
+
+  it('counts an identity-held byte as post-marker output', () => {
+    const state = createShellStartupOutputScanState()
+
+    expect(scanShellStartupOutput(state, `${READY_MARKER}\x1b`)).toEqual({
+      output: '\x1b',
+      shellPid: null,
+      ready: true,
+      postMarkerBytesObserved: true
+    })
+  })
+
+  it('drains every incomplete scanner prefix in byte order', () => {
+    const state = createShellStartupOutputScanState()
+    expect(scanShellStartupOutput(state, '\x1b]777;orca-shell-st').output).toBe('')
+
+    expect(drainShellStartupOutputScanState(state)).toBe('\x1b]777;orca-shell-st')
+  })
+
+  it('drains simultaneous identity and readiness prefixes in input order', () => {
+    const state = createShellStartupOutputScanState()
+    expect(scanShellStartupOutput(state, '\x1b]777;orca-shell-st').output).toBe('')
+    expect(scanShellStartupOutput(state, '\x1b]777;orca-shell-rea').output).toBe('')
+
+    expect(drainShellStartupOutputScanState(state)).toBe(
+      '\x1b]777;orca-shell-st\x1b]777;orca-shell-rea'
+    )
+  })
+})
diff --git a/src/main/shell-startup-output-scanner.ts b/src/main/shell-startup-output-scanner.ts
new file mode 100644
index 00000000000..b87626c24eb
--- /dev/null
+++ b/src/main/shell-startup-output-scanner.ts
@@ -0,0 +1,68 @@
+import {
+  createShellReadyScanState,
+  drainShellReadyHeldBytes,
+  scanForShellReadyBoundary,
+  type ShellReadyScanState
+} from './shell-ready-marker-scanner'
+import {
+  createShellStartupIdentityScanState,
+  drainShellStartupIdentityHeldBytes,
+  scanForShellStartupIdentity,
+  type ShellStartupIdentityScanState
+} from './shell-startup-identity-scanner'
+
+export type ShellStartupOutputScanState = {
+  ready: ShellReadyScanState
+  identity: ShellStartupIdentityScanState | null
+}
+
+export type ShellStartupOutputScanResult = {
+  output: string
+  shellPid: number | null
+  ready: boolean
+  postMarkerBytesObserved: boolean
+}
+
+export function createShellStartupOutputScanState(): ShellStartupOutputScanState {
+  return {
+    ready: createShellReadyScanState(),
+    identity: createShellStartupIdentityScanState()
+  }
+}
+
+export function scanShellStartupOutput(
+  state: ShellStartupOutputScanState,
+  data: string
+): ShellStartupOutputScanResult {
+  const readiness = scanForShellReadyBoundary(state.ready, data)
+  const postMarkerOutputIndex = readiness.postMarkerOutputIndex ?? readiness.output.length
+  const identityInput = readiness.output.slice(0, postMarkerOutputIndex)
+  let shellPid: number | null = null
+  let output = identityInput
+  if (state.identity) {
+    const identity = scanForShellStartupIdentity(state.identity, identityInput)
+    output = identity.output
+    shellPid = identity.shellPid
+    if (shellPid) {
+      state.identity = null
+    }
+  }
+
+  if (readiness.matched && state.identity) {
+    output += drainShellStartupIdentityHeldBytes(state.identity)
+    state.identity = null
+  }
+  output += readiness.output.slice(postMarkerOutputIndex)
+  return {
+    output,
+    shellPid,
+    ready: readiness.matched,
+    postMarkerBytesObserved: readiness.postMarkerBytesObserved
+  }
+}
+
+export function drainShellStartupOutputScanState(state: ShellStartupOutputScanState): string {
+  const output = state.identity ? drainShellStartupIdentityHeldBytes(state.identity) : ''
+  state.identity = null
+  return output + drainShellReadyHeldBytes(state.ready)
+}
diff --git a/src/main/shell-templates.ts b/src/main/shell-templates.ts
index e6372979069..5b481217d90 100644
--- a/src/main/shell-templates.ts
+++ b/src/main/shell-templates.ts
@@ -5,11 +5,17 @@ function quotePosixSingle(value: string): string {
   return `'${value.replace(/'/g, `'\\''`)}'`
 }
 
+export const SHELL_STARTUP_IDENTITY_MARKER_BLOCK = `if [[ "\${ORCA_SHELL_STARTUP_IDENTITY:-0}" == "1" ]]; then
+  unset ORCA_SHELL_STARTUP_IDENTITY
+  printf "\\033]777;orca-shell-start:%s\\007" "$$"
+fi`
+
 export function getZshEnvTemplate(zshDir: string, headerPrefix = ''): string {
   const header = headerPrefix
     ? `Orca ${headerPrefix} zsh shell-ready wrapper`
     : 'Orca zsh shell-ready wrapper'
   return `# ${header}
+${SHELL_STARTUP_IDENTITY_MARKER_BLOCK}
 # Why: capture the runtime wrapper dir before it is unset below. On WSL this
 # file is generated with a Windows path but sourced via /mnt/c, so the baked
 # literal is unusable there and ZDOTDIR must be restored from this value.
diff --git a/src/main/source-control/forge-provider.ts b/src/main/source-control/forge-provider.ts
index 775943052da..a3aef433110 100644
--- a/src/main/source-control/forge-provider.ts
+++ b/src/main/source-control/forge-provider.ts
@@ -66,7 +66,7 @@ export type ForgeReviewByNumberInput = ForgeProviderRepositoryContext & {
 export type ForgeProvider = {
   id: ForgeProviderId
   supportsReviewCreation: boolean
-  resolveRepository(context: ForgeProviderRepositoryContext): Promise<unknown | null>
+  resolveRepository(context: ForgeProviderRepositoryContext): Promise<unknown>
   getReviewForBranch(input: ForgeReviewForBranchInput): Promise<HostedReviewInfo | null>
   getReviewByNumber(input: ForgeReviewByNumberInput): Promise<HostedReviewInfo | null>
   createReview?(
diff --git a/src/main/source-control/stacked-hosted-review-creation.ts b/src/main/source-control/stacked-hosted-review-creation.ts
index 0a36588f493..53327cbd404 100644
--- a/src/main/source-control/stacked-hosted-review-creation.ts
+++ b/src/main/source-control/stacked-hosted-review-creation.ts
@@ -38,9 +38,8 @@ export async function createStackedHostedReview(
           url: created.existingReview.url
         }
       }
-    } else {
-      currentReview = { number: created.number, url: created.url }
     }
+    currentReview = { number: created.number, url: created.url }
   }
   if (!currentReview) {
     return {
diff --git a/src/main/ssh/sftp-namespace-resolution.test.ts b/src/main/ssh/sftp-namespace-resolution.test.ts
index 98ba2637c7d..5239e834152 100644
--- a/src/main/ssh/sftp-namespace-resolution.test.ts
+++ b/src/main/ssh/sftp-namespace-resolution.test.ts
@@ -35,10 +35,7 @@ const MARKER_STATS = {
   size: 0
 }
 
-function makeSftp(options: {
-  startPath?: string | Error | unknown
-  lstat?: (path: string) => LstatOutcome
-}): {
+function makeSftp(options: { startPath?: unknown; lstat?: (path: string) => LstatOutcome }): {
   sftp: SFTPWrapper
   realpathCalls: string[]
   lstatCalls: string[]
diff --git a/src/main/ssh/ssh-channel-multiplexer.ts b/src/main/ssh/ssh-channel-multiplexer.ts
index 0000f2f353b..d87a7ad8f5b 100644
--- a/src/main/ssh/ssh-channel-multiplexer.ts
+++ b/src/main/ssh/ssh-channel-multiplexer.ts
@@ -39,7 +39,7 @@ export type SshMultiplexerRequestOptions = {
 
 export type NotificationHandler = (method: string, params: Record<string, unknown>) => void
 export type MethodNotificationHandler = (params: Record<string, unknown>) => void
-export type RequestHandler = (params: Record<string, unknown>) => Promise<unknown> | unknown
+export type RequestHandler = (params: Record<string, unknown>) => unknown
 
 export type MultiplexerDisposeReason = 'shutdown' | 'connection_lost'
 
diff --git a/src/main/ssh/ssh-relay-session.ts b/src/main/ssh/ssh-relay-session.ts
index e002c334aad..820eb7e1360 100644
--- a/src/main/ssh/ssh-relay-session.ts
+++ b/src/main/ssh/ssh-relay-session.ts
@@ -438,7 +438,7 @@ export class SshRelaySession {
   async requestAiVaultSessionList(
     params: SshAiVaultRelayListParams,
     options: { signal?: AbortSignal; timeoutMs?: number } = {}
-  ): Promise<unknown | null> {
+  ): Promise<unknown> {
     if (this.aiVaultListMethodSupported === false) {
       return null
     }
@@ -465,7 +465,7 @@ export class SshRelaySession {
   async requestAiVaultSessionTitles(
     params: SshAiVaultRelayTitleParams,
     options: { signal?: AbortSignal; timeoutMs?: number } = {}
-  ): Promise<unknown | null> {
+  ): Promise<unknown> {
     if (this.aiVaultTitleMethodSupported === false) {
       return null
     }
@@ -1436,7 +1436,7 @@ export class SshRelaySession {
     })
   }
 
-  // Why: ship plugin/extension source from Orca so agent-event changes don't force a relay redeploy (agent-status-over-ssh.md §4/§8). Best-effort.
+  // Why: ship plugin/extension source from Orca so agent-event changes don't force a relay redeploy — the relay is versioned independently. Best-effort: failure only costs agent status on this host.
   private async installPluginsOnRelay(mux: SshChannelMultiplexer): Promise<void> {
     if (!isRemoteAgentHooksEnabled() || !this.areAgentStatusHooksEnabled()) {
       return
@@ -1513,7 +1513,7 @@ export class SshRelaySession {
       if (typeof envelope.paneKey !== 'string') {
         return
       }
-      // Why: forward env/version verbatim so cross-build warn-once diagnostics fire on remote events too (agent-status-over-ssh.md §3).
+      // Why: forward the agent CLI's env/version verbatim (not the relay's) so warn-once protocol-mismatch diagnostics fire for remote events too.
       agentHookServer.ingestRemote(
         {
           paneKey: envelope.paneKey,
diff --git a/src/main/ssh/ssh-remote-node-toolchain-probe.ts b/src/main/ssh/ssh-remote-node-toolchain-probe.ts
index b1e0b8d544a..d6d7f1d7a06 100644
--- a/src/main/ssh/ssh-remote-node-toolchain-probe.ts
+++ b/src/main/ssh/ssh-remote-node-toolchain-probe.ts
@@ -50,7 +50,7 @@ export function nodeToolchainVersionsMeetRequirements(versionOutput: string): bo
 function markedVersionMajor(output: string, marker: string): number | null {
   const lines = output.split(/\r?\n/)
   const markerIndex = lines.indexOf(marker)
-  if (markerIndex < 0) {
+  if (markerIndex === -1) {
     return null
   }
   for (const line of lines.slice(markerIndex + 1)) {
diff --git a/src/main/startup/configure-process.test.ts b/src/main/startup/configure-process.test.ts
index eaf9f42aeec..54ecdc61424 100644
--- a/src/main/startup/configure-process.test.ts
+++ b/src/main/startup/configure-process.test.ts
@@ -396,6 +396,46 @@ describe('configureElectronNetworkCompatibility', () => {
   })
 })
 
+describe('disableUnsupportedChromiumFeatures', () => {
+  it('disables FedCM before Chromium sessions are created', async () => {
+    const { app } = await import('electron')
+    const { disableUnsupportedChromiumFeatures } = await import('./configure-process')
+
+    vi.mocked(app.commandLine.appendSwitch).mockClear()
+    disableUnsupportedChromiumFeatures()
+
+    expect(app.commandLine.appendSwitch).toHaveBeenCalledWith('disable-features', 'FedCm')
+  })
+
+  it('preserves existing disabled Chromium features', async () => {
+    const { app } = await import('electron')
+    const { disableUnsupportedChromiumFeatures } = await import('./configure-process')
+
+    vi.mocked(app.commandLine.getSwitchValue).mockReturnValueOnce('ExistingFeature')
+    vi.mocked(app.commandLine.appendSwitch).mockClear()
+    disableUnsupportedChromiumFeatures()
+
+    expect(app.commandLine.appendSwitch).toHaveBeenCalledWith(
+      'disable-features',
+      'FedCm,ExistingFeature'
+    )
+  })
+
+  it('does not duplicate FedCM when disable-features already includes it', async () => {
+    const { app } = await import('electron')
+    const { disableUnsupportedChromiumFeatures } = await import('./configure-process')
+
+    vi.mocked(app.commandLine.getSwitchValue).mockReturnValueOnce('FedCm,ExistingFeature')
+    vi.mocked(app.commandLine.appendSwitch).mockClear()
+    disableUnsupportedChromiumFeatures()
+
+    expect(app.commandLine.appendSwitch).toHaveBeenCalledWith(
+      'disable-features',
+      'FedCm,ExistingFeature'
+    )
+  })
+})
+
 describe('enableMainProcessGpuFeatures', () => {
   const originalPlatform = Object.getOwnPropertyDescriptor(process, 'platform')
   const originalE2EUserDataDir = process.env.ORCA_E2E_USER_DATA_DIR
diff --git a/src/main/startup/configure-process.ts b/src/main/startup/configure-process.ts
index e545d89da9c..e39963bc9f2 100644
--- a/src/main/startup/configure-process.ts
+++ b/src/main/startup/configure-process.ts
@@ -66,6 +66,20 @@ export function configureElectronNetworkCompatibility(
   app.commandLine.appendSwitch('disable-http2')
 }
 
+export function disableUnsupportedChromiumFeatures(): void {
+  appendDisabledChromiumFeatures(['FedCm'])
+}
+
+function appendDisabledChromiumFeatures(features: string[]): void {
+  const existingFeatures = app.commandLine
+    .getSwitchValue('disable-features')
+    .split(',')
+    .map((feature) => feature.trim())
+    .filter(Boolean)
+  const disabledFeatures = Array.from(new Set([...features, ...existingFeatures])).join(',')
+  app.commandLine.appendSwitch('disable-features', disabledFeatures)
+}
+
 function getProcessPathDelimiter(): string {
   return process.platform === 'win32' ? ';' : ':'
 }
@@ -300,11 +314,7 @@ export function enableMainProcessGpuFeatures(): void {
     app.commandLine.appendSwitch('enable-features', features)
   }
 
-  const existingDisabledFeatures = app.commandLine.getSwitchValue('disable-features')
   // Why: IntensiveWakeUpThrottling clamps hidden-page timers to 1/min after 5min, delaying agent-done/bell notifications ~60s.
   // This opt-out is skipped under GPU fallback (win32-only today); if throttling ever reaches Windows it must move out of this path.
-  const disabledFeatures = ['IntensiveWakeUpThrottling', existingDisabledFeatures]
-    .filter(Boolean)
-    .join(',')
-  app.commandLine.appendSwitch('disable-features', disabledFeatures)
+  appendDisabledChromiumFeatures(['IntensiveWakeUpThrottling'])
 }
diff --git a/src/main/startup/hydrate-shell-path.ts b/src/main/startup/hydrate-shell-path.ts
index 9cf7dc75608..38a16816507 100644
--- a/src/main/startup/hydrate-shell-path.ts
+++ b/src/main/startup/hydrate-shell-path.ts
@@ -71,11 +71,11 @@ function pickShell(): string | null {
 function parseCapturedPath(stdout: string, pathDelimiter: string = delimiter): string[] {
   const cleaned = stdout.replace(ANSI_RE, '')
   const first = cleaned.indexOf(DELIMITER)
-  if (first < 0) {
+  if (first === -1) {
     return []
   }
   const second = cleaned.indexOf(DELIMITER, first + DELIMITER.length)
-  if (second < 0) {
+  if (second === -1) {
     return []
   }
   const value = cleaned.slice(first + DELIMITER.length, second).trim()
diff --git a/src/main/text-generation/commit-message-text-generation.test.ts b/src/main/text-generation/commit-message-text-generation.test.ts
index 885f24d1667..1163f54bb42 100644
--- a/src/main/text-generation/commit-message-text-generation.test.ts
+++ b/src/main/text-generation/commit-message-text-generation.test.ts
@@ -89,7 +89,6 @@ beforeEach(() => {
 describe('resolveCommitMessageSettings', () => {
   it('falls back when a dynamic persisted model was not discovered', () => {
     const settings = getDefaultSettings('/tmp')
-    settings.enableGitHubAttribution = true
     settings.commitMessageAi = {
       enabled: true,
       agentId: 'codex',
diff --git a/src/main/warp-themes/discovery.ts b/src/main/warp-themes/discovery.ts
index 6f3f80b51da..fd29419c12c 100644
--- a/src/main/warp-themes/discovery.ts
+++ b/src/main/warp-themes/discovery.ts
@@ -142,7 +142,7 @@ export function getWarpThemeDirectories(): string[] {
 export function warpThemeSourceLabelForDirectory(directoryPath: string): string {
   const parts = directoryPath.split(/[\\/]+/).filter(Boolean)
   const themesIndex = parts.findLastIndex((part) => part.toLowerCase() === 'themes')
-  if (themesIndex < 0) {
+  if (themesIndex === -1) {
     return parts.at(-1) || 'Warp themes'
   }
 
diff --git a/src/main/window/createMainWindow.ts b/src/main/window/createMainWindow.ts
index e46d84855f3..0661b6c3d06 100644
--- a/src/main/window/createMainWindow.ts
+++ b/src/main/window/createMainWindow.ts
@@ -59,6 +59,7 @@ import { closeDashboardPopout } from './dashboard-popout-window'
 import { installPrivilegedWindowNavigationPolicy } from './privileged-window-navigation'
 import { isMacosTahoeOrNewer } from './macos-tahoe-release'
 import { registerPluginPanelNavigationGuard } from '../plugins/plugin-panel-navigation-guard'
+import { installWindowsPathRegistryChangeListener } from '../pty/windows-path-registry-change'
 
 // Why: show/restore/resume can overlap before the size nudge resets; never capture the temporary width as the next baseline.
 const activeRepaintJiggles = new WeakSet<BrowserWindow>()
@@ -304,6 +305,7 @@ export function createMainWindow(
     }
   })
   const rendererWebContentsId = mainWindow.webContents.id
+  installWindowsPathRegistryChangeListener(mainWindow)
   // Why: native paste fallback is privileged IPC; only the top-level renderer may request it.
   setTrustedUIRendererWebContentsId(rendererWebContentsId)
 
@@ -334,7 +336,7 @@ export function createMainWindow(
     mainWindow.webContents.setZoomLevel(level)
     // Why: native traffic lights don't scale with CSS zoom; reposition on startup to stay aligned with the zoomed titlebar.
     if (process.platform === 'darwin') {
-      syncTrafficLightPosition(mainWindow, Math.pow(1.2, level))
+      syncTrafficLightPosition(mainWindow, 1.2 ** level)
     }
   })
 
diff --git a/src/preload/api-types.ts b/src/preload/api-types.ts
index 5878afc57b4..364bc2d95b2 100644
--- a/src/preload/api-types.ts
+++ b/src/preload/api-types.ts
@@ -1197,6 +1197,7 @@ export type PreloadApi = {
           | 'externalWorktreeVisibilityPromptDismissedAt'
           | 'externalWorktreeInboxBaselinePaths'
           | 'importedExternalWorktreePaths'
+          | 'agentWorktreeVisibility'
           | 'projectGroupId'
           | 'projectGroupOrder'
           | 'forkSyncMode'
@@ -1333,6 +1334,7 @@ export type PreloadApi = {
           | 'pendingFirstAgentMessageRename'
           | 'firstAgentMessageRenameError'
           | 'lastActivityAt'
+          | 'diffComments'
         >
       >
     }) => Promise<FolderWorkspace | null>
@@ -1475,6 +1477,7 @@ export type PreloadApi = {
       env?: Record<string, string>
       envToDelete?: string[]
       command?: string
+      commandDelivery?: 'renderer' | 'provider'
       launchConfig?: SleepingAgentLaunchConfig
       resumeProviderSession?: AgentProviderSessionMetadata
       launchToken?: string
@@ -1504,6 +1507,8 @@ export type PreloadApi = {
       snapshotPrefixAnsi?: string
       snapshotFrameAnsi?: string
       snapshotFrameRestoreAnsi?: string
+      snapshotKittyKeyboardFlags?: number
+      snapshotSeq?: number
       isReattach?: boolean
       isAlternateScreen?: boolean
       replay?: string
@@ -1586,6 +1591,9 @@ export type PreloadApi = {
       /** Trailing incomplete escape the emulator ingested; the restorer must
        *  write it after its post-replay resets, last before live chunks. */
       pendingEscapeTailAnsi?: string
+      /** Effective kitty flags the snapshot owner proved at `seq`. Absent means
+       *  unknown; consumers must not turn that into a known `0`. */
+      kittyKeyboardFlags?: number
     } | null>
     getRendererDeliveryDebugSnapshot: () => Promise<{
       pendingPtyCount: number
@@ -1656,6 +1664,7 @@ export type PreloadApi = {
         rows: number
         seq?: number
         lastTitle?: string
+        kittyKeyboardFlags?: number
       } | null
     ) => void
     declarePendingPaneSerializer: (paneKey: string) => Promise<number>
@@ -3409,6 +3418,7 @@ export type PreloadApi = {
       params?: unknown
       timeoutMs?: number
       expectedEnvironmentPairingRevision?: number
+      expectedRuntimeId?: string
     }) => Promise<RuntimeRpcResponse<unknown>>
     subscribe: (
       args: {
@@ -3417,6 +3427,7 @@ export type PreloadApi = {
         params?: unknown
         timeoutMs?: number
         expectedEnvironmentPairingRevision?: number
+        expectedRuntimeId?: string
       },
       callbacks: {
         onResponse: (response: RuntimeRpcResponse<unknown>) => void
diff --git a/src/preload/index.ts b/src/preload/index.ts
index b8925205948..0f94666a65d 100644
--- a/src/preload/index.ts
+++ b/src/preload/index.ts
@@ -948,6 +948,7 @@ const api = {
       env?: Record<string, string>
       envToDelete?: string[]
       command?: string
+      commandDelivery?: 'renderer' | 'provider'
       launchConfig?: SleepingAgentLaunchConfig
       resumeProviderSession?: AgentProviderSessionMetadata
       launchToken?: string
@@ -975,6 +976,8 @@ const api = {
       snapshotPrefixAnsi?: string
       snapshotFrameAnsi?: string
       snapshotFrameRestoreAnsi?: string
+      snapshotKittyKeyboardFlags?: number
+      snapshotSeq?: number
       isReattach?: boolean
       isAlternateScreen?: boolean
       replay?: string
@@ -1095,6 +1098,7 @@ const api = {
       alternateScreen?: boolean
       scrollbackAnsi?: string
       pendingEscapeTailAnsi?: string
+      kittyKeyboardFlags?: number
     } | null> => ipcRenderer.invoke('pty:getMainBufferSnapshot', { id, opts }),
 
     getRendererDeliveryDebugSnapshot: (): Promise<{
@@ -1257,6 +1261,7 @@ const api = {
         rows: number
         seq?: number
         lastTitle?: string
+        kittyKeyboardFlags?: number
       } | null
     ): void => {
       ipcRenderer.send('pty:serializeBuffer:response', { requestId, snapshot })
@@ -1463,7 +1468,7 @@ const api = {
       checkName?: string
       url?: string | null
       prRepo?: GitHubOwnerRepo | null
-    }): Promise<unknown | null> => ipcRenderer.invoke('gh:prCheckDetails', args),
+    }): Promise<unknown> => ipcRenderer.invoke('gh:prCheckDetails', args),
 
     rerunPRChecks: (args: {
       repoPath: string
@@ -4425,6 +4430,7 @@ const api = {
       params?: unknown
       timeoutMs?: number
       expectedEnvironmentPairingRevision?: number
+      expectedRuntimeId?: string
     }): Promise<RuntimeRpcResponse<unknown>> =>
       ipcRenderer.invoke('runtimeEnvironments:call', args),
     subscribe: async (
@@ -4434,6 +4440,7 @@ const api = {
         params?: unknown
         timeoutMs?: number
         expectedEnvironmentPairingRevision?: number
+        expectedRuntimeId?: string
       },
       callbacks: {
         onResponse: (response: RuntimeRpcResponse<unknown>) => void
@@ -4935,8 +4942,7 @@ if (process.contextIsolated) {
     console.error(error)
   }
 } else {
-  // @ts-ignore (define in dts)
   window.electron = electronAPI
-  // @ts-ignore (define in dts)
+  // @ts-expect-error (define in dts)
   window.api = api
 }
diff --git a/src/preload/runtime-environment-subscriptions.test.ts b/src/preload/runtime-environment-subscriptions.test.ts
index 585b0f75fa9..a77614e1196 100644
--- a/src/preload/runtime-environment-subscriptions.test.ts
+++ b/src/preload/runtime-environment-subscriptions.test.ts
@@ -68,7 +68,12 @@ describe('subscribeRuntimeEnvironmentFromPreload', () => {
 
     const cleanupPromise = subscribeRuntimeEnvironmentFromPreload(
       ipc,
-      { selector: 'desk', method: 'terminal.subscribe' },
+      {
+        selector: 'desk',
+        method: 'terminal.subscribe',
+        expectedEnvironmentPairingRevision: 7,
+        expectedRuntimeId: 'runtime-1'
+      },
       { onResponse, onBinary },
       () => 'sub-1'
     )
@@ -80,6 +85,8 @@ describe('subscribeRuntimeEnvironmentFromPreload', () => {
     expect(ipc.invoke).toHaveBeenCalledWith('runtimeEnvironments:subscribe', {
       selector: 'desk',
       method: 'terminal.subscribe',
+      expectedEnvironmentPairingRevision: 7,
+      expectedRuntimeId: 'runtime-1',
       subscriptionId: 'sub-1'
     })
 
diff --git a/src/preload/runtime-environment-subscriptions.ts b/src/preload/runtime-environment-subscriptions.ts
index f9d46b467aa..c804c651f73 100644
--- a/src/preload/runtime-environment-subscriptions.ts
+++ b/src/preload/runtime-environment-subscriptions.ts
@@ -5,6 +5,8 @@ type RuntimeEnvironmentSubscribeArgs = {
   method: string
   params?: unknown
   timeoutMs?: number
+  expectedEnvironmentPairingRevision?: number
+  expectedRuntimeId?: string
 }
 
 type RuntimeEnvironmentSubscriptionCallbacks = {
diff --git a/src/relay/agent-hook-server.ts b/src/relay/agent-hook-server.ts
index 3166c70a2f5..6a281a7ed83 100644
--- a/src/relay/agent-hook-server.ts
+++ b/src/relay/agent-hook-server.ts
@@ -1,8 +1,9 @@
 /* eslint-disable max-lines -- Why: parsing, replay cache, endpoint writing, and retry state are one lifecycle unit; splitting obscures cleanup ordering across reconnects. */
 // Relay-side adapter for the shared agent-hook listener: hosts a loopback HTTP server and
 // forwards each parsed payload via a callback so `relay.ts` re-emits it as an `agent.hook`
-// JSON-RPC notification over the SSH channel. Replay cache is bounded one-entry-per-paneKey —
-// see docs/design/agent-status-over-ssh.md §5 (Path 3, request-driven replay) for the rationale.
+// JSON-RPC notification over the SSH channel. Replay cache is bounded one-entry-per-paneKey: a
+// reattaching Orca only needs each pane's current status, never its history, and the bound keeps a
+// long-lived relay from growing with every event.
 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'
 import { randomUUID } from 'node:crypto'
 import { basename, dirname, join } from 'node:path'
@@ -99,10 +100,10 @@ export class RelayAgentHookServer {
   private state: HookListenerState = createHookListenerState()
   // Why: retain envelope metadata so replays match live POSTs.
   // Invariant: keys mirror state.lastStatusByPaneKey, populated/cleared in lockstep.
-  private lastEnvelopeMetaByPaneKey: Map<
+  private lastEnvelopeMetaByPaneKey = new Map<
     string,
     { source: AgentHookSource; env?: string; version?: string }
-  > = new Map()
+  >()
   private assistantMessageRetryTimers = new Map<string, ReturnType<typeof setTimeout>>()
   private codexSubagentPollTimers = new Map<string, ReturnType<typeof setTimeout>>()
   private forward: RelayHookForward
diff --git a/src/relay/ai-vault-service-client.ts b/src/relay/ai-vault-service-client.ts
index 87c0d6e4c84..c873c380506 100644
--- a/src/relay/ai-vault-service-client.ts
+++ b/src/relay/ai-vault-service-client.ts
@@ -123,7 +123,7 @@ export class RelayAiVaultServiceClient implements RelayAiVaultServiceApi {
         continue
       }
       const index = this.queue.findIndex((call) => call.lane === lane)
-      if (index < 0) {
+      if (index === -1) {
         continue
       }
       const call = this.queue.splice(index, 1)[0]!
@@ -241,7 +241,7 @@ export class RelayAiVaultServiceClient implements RelayAiVaultServiceApi {
 
   private cancel(call: RelayAiVaultServiceCall): void {
     const index = this.queue.indexOf(call)
-    if (index >= 0) {
+    if (index !== -1) {
       this.queue.splice(index, 1)
       settleRelayAiVaultServiceCall(call, relayAiVaultAbortError())
       this.pump()
diff --git a/src/relay/dispatcher-client-writer.test.ts b/src/relay/dispatcher-client-writer.test.ts
index 13e49b59e8e..83b5e7960b7 100644
--- a/src/relay/dispatcher-client-writer.test.ts
+++ b/src/relay/dispatcher-client-writer.test.ts
@@ -51,7 +51,7 @@ function createWriter(
         sink.drainWaiters.push(callback)
         return () => {
           const index = sink.drainWaiters.indexOf(callback)
-          if (index >= 0) {
+          if (index !== -1) {
             sink.drainWaiters.splice(index, 1)
           }
         }
diff --git a/src/relay/external-automations-handler.ts b/src/relay/external-automations-handler.ts
index baaaa99481e..03bb0b9beba 100644
--- a/src/relay/external-automations-handler.ts
+++ b/src/relay/external-automations-handler.ts
@@ -382,7 +382,7 @@ export class ExternalAutomationsHandler {
       (sessionRun, index) =>
         !usedSessionRunIndexes.has(index) && this.getRunKey(sessionRun) === outputRunKey
     )
-    if (exactMatchIndex >= 0) {
+    if (exactMatchIndex !== -1) {
       return exactMatchIndex
     }
 
@@ -755,7 +755,7 @@ export class ExternalAutomationsHandler {
     }
   }
 
-  private readHermesSessionDbRunById(jobId: string, runId: string): unknown | null {
+  private readHermesSessionDbRunById(jobId: string, runId: string): unknown {
     if (!existsSync(HERMES_STATE_DB)) {
       return null
     }
diff --git a/src/relay/git-handler-utils.ts b/src/relay/git-handler-utils.ts
index ab3bb61faba..25885cfe4dc 100644
--- a/src/relay/git-handler-utils.ts
+++ b/src/relay/git-handler-utils.ts
@@ -106,7 +106,7 @@ export function parseUnmergedEntry(
  */
 export function parseBranchDiff(
   stdout: string,
-  statsByPath: Map<string, GitLineStats> = new Map()
+  statsByPath = new Map<string, GitLineStats>()
 ): Record<string, unknown>[] {
   const entries: Record<string, unknown>[] = []
   for (const line of stdout.split(/\r?\n/)) {
diff --git a/src/relay/plugin-overlay-env.test.ts b/src/relay/plugin-overlay-env.test.ts
index 78e08918297..7746307cf47 100644
--- a/src/relay/plugin-overlay-env.test.ts
+++ b/src/relay/plugin-overlay-env.test.ts
@@ -104,4 +104,31 @@ describe('plugin overlay env source resolution', () => {
       )
     ).toBe('/remote/original-prime')
   })
+
+  // Why: the session env is the only place a fish user's XDG_CONFIG_HOME shows up
+  // (config.fish exports it, so no GUI-launched process inherits it). Dropping it
+  // here would scan ~/.config and disagree with the same lookup on the main side.
+  it.skipIf(process.platform === 'win32')(
+    'reads fish config under the session XDG_CONFIG_HOME',
+    () => {
+      const configHome = join(homeDir, 'xdg')
+      mkdirSync(join(configHome, 'fish'), { recursive: true })
+      writeFileSync(
+        join(configHome, 'fish', 'config.fish'),
+        'set -gx OPENCODE_CONFIG_DIR "$HOME/company-opencode"\n'
+      )
+      mkdirSync(join(homeDir, '.config', 'fish'), { recursive: true })
+      writeFileSync(
+        join(homeDir, '.config', 'fish', 'config.fish'),
+        'set -gx OPENCODE_CONFIG_DIR /wrong-default-config-home\n'
+      )
+
+      expect(
+        resolveOpenCodeSourceConfigDir(
+          { HOME: homeDir, XDG_CONFIG_HOME: configHome },
+          '/opt/homebrew/bin/fish'
+        )
+      ).toBe(join(homeDir, 'company-opencode'))
+    }
+  )
 })
diff --git a/src/relay/plugin-overlay-env.ts b/src/relay/plugin-overlay-env.ts
index 4b91da8ff62..1db43f4717e 100644
--- a/src/relay/plugin-overlay-env.ts
+++ b/src/relay/plugin-overlay-env.ts
@@ -1,4 +1,4 @@
-import { readShellStartupEnvVar } from '../main/pty/shell-startup-env'
+import { readSessionShellStartupEnvVar } from '../main/pty/shell-startup-env'
 import {
   PRIMARY_AGENT_DIR_ENV_BY_KIND,
   SOURCE_AGENT_DIR_ENV_BY_KIND,
@@ -14,7 +14,9 @@ function readStartupEnv(
   env: Record<string, string>,
   shell: string | undefined
 ): string | undefined {
-  return readShellStartupEnvVar(name, env.HOME ?? process.env.HOME, shell ?? env.SHELL)
+  // Why the session env first: it is closer to the user's shell than the relay
+  // process env, and fish config lives under its XDG_CONFIG_HOME.
+  return readSessionShellStartupEnvVar(name, env, shell)
 }
 
 export function resolveOpenCodeSourceConfigDir(
diff --git a/src/relay/plugin-overlay.ts b/src/relay/plugin-overlay.ts
index 6ff480ef91a..ffb9116beae 100644
--- a/src/relay/plugin-overlay.ts
+++ b/src/relay/plugin-overlay.ts
@@ -4,11 +4,11 @@
 // renderer are meaningless on SSH targets, so the relay performs the remote
 // filesystem work itself.
 //
-// Plugin source strings ship over the JSON-RPC channel at session-ready
-// (commit #7) — they are NOT bundled with the relay binary because the
-// relay is versioned independently from Orca and the plugin source changes
-// frequently as new agent events get added (see docs/design/agent-status-
-// over-ssh.md §4 "Why ship the plugin source over the wire").
+// Plugin source strings ship over the JSON-RPC channel at session-ready —
+// they are NOT bundled with the relay binary because the relay is versioned
+// independently from Orca and the plugin source changes frequently as new
+// agent events get added; bundling would make every such change a relay
+// redeploy, and an old relay would silently serve stale plugin code.
 //
 // We deliberately do not reuse OpenCodeHookService / PiTitlebarExtensionService
 // directly: those modules import `electron` and ride on Orca's userData
diff --git a/src/relay/pty-handler.test.ts b/src/relay/pty-handler.test.ts
index 35d11461c53..06eaa15d5ff 100644
--- a/src/relay/pty-handler.test.ts
+++ b/src/relay/pty-handler.test.ts
@@ -11,9 +11,11 @@ import {
   SETUP_AGENT_SEQUENCE_STARTUP_COMMAND_ENV
 } from '../shared/setup-agent-sequencing'
 import { PTY_STARTUP_INGRESS_VERSION } from '../shared/pty-startup-ingress'
+import { stripLegacyTerminalShimEnv } from '../main/pty/legacy-terminal-shim-dir'
 
-const { mockPtySpawn, mockPtyInstance } = vi.hoisted(() => ({
+const { mockPtySpawn, mockPtyInstance, mockCreateShellPromptReadinessProbe } = vi.hoisted(() => ({
   mockPtySpawn: vi.fn(),
+  mockCreateShellPromptReadinessProbe: vi.fn(),
   mockPtyInstance: {
     // Why: attach now proves the backing pid is alive before replaying, so the
     // default managed PTY must report a live pid. Reuse the test runner's own
@@ -38,6 +40,10 @@ vi.mock('../main/pty/posix-pty-process-groups', () => ({
   forceKillPosixPtyProcessGroups: vi.fn((_pid: number, fallback: () => void) => fallback())
 }))
 
+vi.mock('../main/shell-prompt-readiness-probe', () => ({
+  createShellPromptReadinessProbe: mockCreateShellPromptReadinessProbe
+}))
+
 import {
   IMMEDIATE_PTY_EXIT_TIMEOUT_MS,
   MAX_RELAY_PTY_SESSIONS,
@@ -139,6 +145,11 @@ describe('PtyHandler', () => {
     mockPtyInstance.clear.mockReset()
     mockPtyInstance.pause.mockReset()
     mockPtyInstance.resume.mockReset()
+    mockCreateShellPromptReadinessProbe.mockReset()
+    mockCreateShellPromptReadinessProbe.mockReturnValue({
+      notifyOutput: vi.fn(),
+      dispose: vi.fn()
+    })
     vi.spyOn(ptyShellUtils, 'processHasChildren').mockResolvedValue(false)
 
     mockPtySpawn.mockReturnValue({ ...mockPtyInstance })
@@ -298,7 +309,56 @@ describe('PtyHandler', () => {
 
     const spawnOptions = mockPtySpawn.mock.calls[0][2] as { env: Record<string, string> }
     expect(spawnOptions.env.NODE_ENV).toBeUndefined()
-    expect(spawnOptions.env.PATH).toBe(process.env.PATH)
+    const expectedEnv = { PATH: process.env.PATH ?? '' }
+    stripLegacyTerminalShimEnv(expectedEnv, process.platform)
+    expect(spawnOptions.env.PATH).toBe(expectedEnv.PATH)
+  })
+
+  it('does not inherit legacy attribution state from the relay process', async () => {
+    const keys = ['ORCA_ENABLE_GIT_ATTRIBUTION', 'ORCA_ATTRIBUTION_SHIM_DIR', 'PATH'] as const
+    const saved = Object.fromEntries(keys.map((key) => [key, process.env[key]]))
+    process.env.ORCA_ENABLE_GIT_ATTRIBUTION = '1'
+    process.env.ORCA_ATTRIBUTION_SHIM_DIR = '/tmp/orca-terminal-attribution/posix'
+    process.env.PATH = '/tmp/orca-terminal-attribution/posix:/usr/bin'
+
+    try {
+      await dispatcher.callRequest('pty.spawn', { cols: 80, rows: 24 })
+      const spawnedEnv = mockPtySpawn.mock.calls.at(-1)?.[2] as {
+        env: Record<string, string>
+      }
+      expect(spawnedEnv.env.PATH).toBe('/usr/bin')
+      expect(spawnedEnv.env.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
+      expect(spawnedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+
+      const state = (await dispatcher.callRequest('pty.serialize', {
+        ids: ['pty-1']
+      })) as string
+      await handler.dispose({ waitForPhysicalExit: false })
+      mockPtySpawn.mockClear()
+      dispatcher = createMockDispatcher()
+      handler = new PtyHandler(dispatcher as unknown as RelayDispatcher)
+      const killSpy = vi.spyOn(process, 'kill').mockImplementation(() => true)
+      try {
+        await dispatcher.callRequest('pty.revive', { state })
+      } finally {
+        killSpy.mockRestore()
+      }
+
+      const revivedEnv = mockPtySpawn.mock.calls.at(-1)?.[2] as {
+        env: Record<string, string>
+      }
+      expect(revivedEnv.env.PATH).toBe('/usr/bin')
+      expect(revivedEnv.env.ORCA_ENABLE_GIT_ATTRIBUTION).toBeUndefined()
+      expect(revivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+    } finally {
+      for (const [key, value] of Object.entries(saved)) {
+        if (value === undefined) {
+          delete process.env[key]
+        } else {
+          process.env[key] = value
+        }
+      }
+    }
   })
 
   it('keeps a renderer-supplied NODE_ENV for the spawned shell', async () => {
@@ -829,6 +889,7 @@ describe('PtyHandler', () => {
     vi.advanceTimersByTime(49)
     const term = mockPtySpawn.mock.results[0]?.value
     expect(handler.retainedStartupCommandCount).toBe(1)
+    expect(handler.retainedStartupCommandBytes).toBe('echo provider-owned'.length)
     expect(term.write).not.toHaveBeenCalled()
 
     vi.advanceTimersByTime(1)
@@ -870,6 +931,9 @@ describe('PtyHandler', () => {
         | { env?: Record<string, string> }
         | undefined
       expect(spawnOptions?.env?.ORCA_SHELL_READY_MARKER).toBe('1')
+      expect(handler.retainedStartupCommandCount).toBe(1)
+      expect(handler.retainedStartupCommandBytes).toBe(0)
+      vi.advanceTimersByTime(15_000)
       expect(handler.retainedStartupCommandCount).toBe(0)
     }
   )
@@ -906,7 +970,7 @@ describe('PtyHandler', () => {
         | { env?: Record<string, string> }
         | undefined
       expect(spawnOptions?.env?.ORCA_SHELL_READY_MARKER).toBe('1')
-      expect(handler.retainedStartupCommandCount).toBe(0)
+      expect(handler.retainedStartupCommandCount).toBe(1)
     }
   )
 
@@ -1043,6 +1107,224 @@ describe('PtyHandler', () => {
     }
   )
 
+  it.skipIf(process.platform === 'win32')(
+    'recovers provider delivery when startup exec replaces the relay wrapper',
+    async () => {
+      let dataCallback: ((data: string) => void) | undefined
+      const term = {
+        ...mockPtyInstance,
+        onData: vi.fn((cb: (data: string) => void) => {
+          dataCallback = cb
+        }),
+        onExit: vi.fn()
+      }
+      mockPtySpawn.mockReturnValue(term)
+      const homeDir = mkdtempSync(join(tmpdir(), 'relay-provider-exec-spawn-'))
+      const oldShell = process.env.SHELL
+      process.env.SHELL = '/bin/bash'
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          env: { HOME: homeDir },
+          command: 'echo after-exec',
+          commandDelivery: 'provider',
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+        rmSync(homeDir, { recursive: true, force: true })
+      }
+
+      dataCallback?.(`\x1b]777;orca-shell-start:${process.pid}\x07\x1b[?2004hremote $ `)
+      await vi.advanceTimersByTimeAsync(8)
+
+      const promptOptions = mockCreateShellPromptReadinessProbe.mock.calls[0]?.[0] as {
+        onPromptReady: () => void
+      }
+      expect(
+        mockCreateShellPromptReadinessProbe.mock.results[0]?.value.notifyOutput
+      ).toHaveBeenCalledWith('\x1b[?2004hremote $ ')
+      expect(dispatcher.notify).toHaveBeenCalledWith('pty.data', {
+        id: 'pty-1',
+        data: '\x1b[?2004hremote $ '
+      })
+      promptOptions.onPromptReady()
+      await vi.advanceTimersByTimeAsync(50)
+
+      expect(term.write).toHaveBeenCalledWith('echo after-exec\n')
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'signals renderer delivery when startup exec replaces the relay wrapper',
+    async () => {
+      let dataCallback: ((data: string) => void) | undefined
+      const term = {
+        ...mockPtyInstance,
+        onData: vi.fn((cb: (data: string) => void) => {
+          dataCallback = cb
+        }),
+        onExit: vi.fn()
+      }
+      mockPtySpawn.mockReturnValue(term)
+      const homeDir = mkdtempSync(join(tmpdir(), 'relay-renderer-exec-spawn-'))
+      const oldShell = process.env.SHELL
+      process.env.SHELL = '/bin/bash'
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          env: { HOME: homeDir },
+          command: 'echo after-exec',
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+        rmSync(homeDir, { recursive: true, force: true })
+      }
+
+      dataCallback?.(`\x1b]777;orca-shell-start:${process.pid}\x07\x1b[?2004hremote $ `)
+      await vi.advanceTimersByTimeAsync(8)
+      expect(dispatcher.notify).toHaveBeenCalledWith('pty.data', {
+        id: 'pty-1',
+        data: '\x1b[?2004hremote $ '
+      })
+
+      const promptOptions = mockCreateShellPromptReadinessProbe.mock.calls[0]?.[0] as {
+        onPromptReady: () => void
+      }
+      promptOptions.onPromptReady()
+      await vi.advanceTimersByTimeAsync(8)
+
+      expect(term.write).not.toHaveBeenCalled()
+      expect(dispatcher.notify).toHaveBeenCalledWith('pty.data', {
+        id: 'pty-1',
+        data: '\x1b]777;orca-shell-ready\x07'
+      })
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'forwards the supported ready marker to renderer delivery',
+    async () => {
+      let dataCallback: ((data: string) => void) | undefined
+      const term = {
+        ...mockPtyInstance,
+        onData: vi.fn((cb: (data: string) => void) => {
+          dataCallback = cb
+        }),
+        onExit: vi.fn()
+      }
+      mockPtySpawn.mockReturnValue(term)
+      const homeDir = mkdtempSync(join(tmpdir(), 'relay-renderer-ready-spawn-'))
+      const oldShell = process.env.SHELL
+      process.env.SHELL = '/bin/bash'
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          env: { HOME: homeDir },
+          command: 'echo after-ready',
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+        rmSync(homeDir, { recursive: true, force: true })
+      }
+
+      dataCallback?.(
+        `\x1b]777;orca-shell-start:${process.pid}\x07\x1b]777;orca-shell-ready\x07remote $ `
+      )
+      await vi.advanceTimersByTimeAsync(8)
+
+      expect(dispatcher.notify).toHaveBeenCalledWith('pty.data', {
+        id: 'pty-1',
+        data: '\x1b]777;orca-shell-ready\x07remote $ '
+      })
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'releases split renderer readiness through one completed path',
+    async () => {
+      let dataCallback: ((data: string) => void) | undefined
+      const term = {
+        ...mockPtyInstance,
+        onData: vi.fn((cb: (data: string) => void) => {
+          dataCallback = cb
+        }),
+        onExit: vi.fn()
+      }
+      mockPtySpawn.mockReturnValue(term)
+      const homeDir = mkdtempSync(join(tmpdir(), 'relay-renderer-split-ready-spawn-'))
+      const oldShell = process.env.SHELL
+      process.env.SHELL = '/bin/bash'
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          env: { HOME: homeDir },
+          command: 'echo after-ready',
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+        rmSync(homeDir, { recursive: true, force: true })
+      }
+
+      dataCallback?.(`\x1b]777;orca-shell-start:${process.pid}\x07\x1b]777;orca-shell-ready`)
+      dataCallback?.('\x07remote $ ')
+      await vi.advanceTimersByTimeAsync(8)
+
+      const probe = mockCreateShellPromptReadinessProbe.mock.results[0]?.value
+      expect(probe.notifyOutput).not.toHaveBeenCalled()
+      expect(probe.dispose).toHaveBeenCalledOnce()
+      expect(dispatcher.notify).toHaveBeenCalledWith('pty.data', {
+        id: 'pty-1',
+        data: '\x1b]777;orca-shell-ready\x07remote $ '
+      })
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'does not retain renderer readiness state for unsupported shells',
+    async () => {
+      const oldShell = process.env.SHELL
+      process.env.SHELL = '/bin/sh'
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          command: 'x'.repeat(256 * 1024),
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+      }
+
+      const spawnOptions = mockPtySpawn.mock.calls[0]?.[2] as
+        | { env?: Record<string, string> }
+        | undefined
+      expect(spawnOptions?.env?.ORCA_SHELL_READY_MARKER).toBe('0')
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
   it.skipIf(process.platform === 'win32')(
     'flushes held shell-ready marker bytes when provider delivery falls back',
     async () => {
@@ -1142,6 +1424,50 @@ describe('PtyHandler', () => {
     ).rejects.toThrow('PTY "pty-1" not found')
   })
 
+  it.skipIf(process.platform === 'win32')(
+    'releases renderer readiness state when attach reaps a dead shell',
+    async () => {
+      const oldShell = process.env.SHELL
+      const oldHome = process.env.HOME
+      const homeDir = mkdtempSync(join(tmpdir(), 'relay-dead-shell-ready-spawn-'))
+      process.env.SHELL = '/bin/bash'
+      process.env.HOME = homeDir
+      try {
+        await dispatcher.callRequest('pty.spawn', {
+          env: { HOME: homeDir },
+          command: 'x'.repeat(256 * 1024),
+          startupCommandDelivery: 'shell-ready'
+        })
+      } finally {
+        if (oldShell === undefined) {
+          delete process.env.SHELL
+        } else {
+          process.env.SHELL = oldShell
+        }
+        if (oldHome === undefined) {
+          delete process.env.HOME
+        } else {
+          process.env.HOME = oldHome
+        }
+        rmSync(homeDir, { recursive: true, force: true })
+      }
+      expect(handler.retainedStartupCommandCount).toBe(1)
+
+      const aliveSpy = vi.spyOn(ptyShellUtils, 'isProcessAlive').mockReturnValue(false)
+      try {
+        await expect(dispatcher.callRequest('pty.attach', { id: 'pty-1' })).rejects.toThrow(
+          'PTY "pty-1" not found'
+        )
+      } finally {
+        aliveSpy.mockRestore()
+      }
+
+      expect(handler.retainedStartupCommandCount).toBe(0)
+      vi.advanceTimersByTime(15_000)
+      expect(handler.retainedStartupCommandCount).toBe(0)
+    }
+  )
+
   it('settles concurrent immediate shutdown when attach proves the shell exited', async () => {
     const mockKill = vi.fn()
     mockPtySpawn.mockReturnValue({
@@ -2523,16 +2849,16 @@ describe('PtyHandler', () => {
     handler.addEnvAugmenter(() => ({
       TERM: 'augmenter-term',
       TERM_PROGRAM: 'augmenter-terminal',
-      ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/augmenter-attribution'
+      ORCA_STALE_TEST_ENV: '/tmp/augmenter-stale'
     }))
 
     await dispatcher.callRequest('pty.spawn', {
       env: {
         TERM: 'screen-256color',
         TERM_PROGRAM: 'renderer-terminal',
-        ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/renderer-attribution'
+        ORCA_STALE_TEST_ENV: '/tmp/renderer-stale'
       },
-      envToDelete: ['TERM_PROGRAM', 'ORCA_ATTRIBUTION_SHIM_DIR']
+      envToDelete: ['TERM_PROGRAM', 'ORCA_STALE_TEST_ENV']
     })
 
     const spawnEnv = mockPtySpawn.mock.calls[0][2] as {
@@ -2544,7 +2870,7 @@ describe('PtyHandler', () => {
     expect(spawnEnv.env.COLORTERM).toBe('truecolor')
     expect(spawnEnv.env.FORCE_HYPERLINK).toBe('1')
     expect(spawnEnv.env.TERM_PROGRAM).toBeUndefined()
-    expect(spawnEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+    expect(spawnEnv.env.ORCA_STALE_TEST_ENV).toBeUndefined()
   })
 
   it('replaces an ambient TERM=dumb when no explicit TERM is supplied', async () => {
@@ -2734,9 +3060,16 @@ describe('PtyHandler', () => {
       ORCA_AGENT_HOOK_TOKEN: 'abc-uuid'
     }))
     const killSpy = vi.spyOn(process, 'kill').mockImplementation(() => true)
+    const oldStartupIdentity = process.env.ORCA_SHELL_STARTUP_IDENTITY
+    process.env.ORCA_SHELL_STARTUP_IDENTITY = '1'
     try {
       await dispatcher.callRequest('pty.revive', { state })
     } finally {
+      if (oldStartupIdentity === undefined) {
+        delete process.env.ORCA_SHELL_STARTUP_IDENTITY
+      } else {
+        process.env.ORCA_SHELL_STARTUP_IDENTITY = oldStartupIdentity
+      }
       killSpy.mockRestore()
     }
 
@@ -2749,6 +3082,8 @@ describe('PtyHandler', () => {
     expect(callArgs.env.ORCA_AGENT_HOOK_TOKEN).toBe('abc-uuid')
     expect(callArgs.env.TERM).toBe('xterm-256color')
     expect(callArgs.env.TERM_PROGRAM).toBe('Orca')
+    expect(callArgs.env.ORCA_SHELL_READY_MARKER).toBe('0')
+    expect(callArgs.env.ORCA_SHELL_STARTUP_IDENTITY).toBe('0')
   })
 
   it('fences both revived worktree identity and cwd with rollback', async () => {
@@ -2900,7 +3235,7 @@ describe('PtyHandler', () => {
   it('normalizes an explicit empty TERM and preserves sanitized env deletions on revive', async () => {
     await dispatcher.callRequest('pty.spawn', {
       env: { TERM: '' },
-      envToDelete: ['ORCA_ATTRIBUTION_SHIM_DIR', '', 42]
+      envToDelete: ['ORCA_STALE_TEST_ENV', '', 42]
     })
 
     const initialEnv = mockPtySpawn.mock.calls[0][2] as {
@@ -2916,14 +3251,14 @@ describe('PtyHandler', () => {
       envToDelete?: string[]
     }[]
     expect(serialized.explicitTerm).toBeUndefined()
-    expect(serialized.envToDelete).toEqual(['ORCA_ATTRIBUTION_SHIM_DIR'])
+    expect(serialized.envToDelete).toEqual(['ORCA_STALE_TEST_ENV'])
 
     await handler.dispose({ waitForPhysicalExit: false })
     mockPtySpawn.mockClear()
     dispatcher = createMockDispatcher()
     handler = new PtyHandler(dispatcher as unknown as RelayDispatcher)
     handler.addEnvAugmenter(() => ({
-      ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/revived-attribution'
+      ORCA_STALE_TEST_ENV: '/tmp/revived-stale'
     }))
     const killSpy = vi.spyOn(process, 'kill').mockImplementation(() => true)
     try {
@@ -2938,7 +3273,7 @@ describe('PtyHandler', () => {
     }
     expect(revivedEnv.name).toBe('xterm-256color')
     expect(revivedEnv.env.TERM).toBe('xterm-256color')
-    expect(revivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+    expect(revivedEnv.env.ORCA_STALE_TEST_ENV).toBeUndefined()
   })
 
   it('drops legacy empty explicit TERM metadata after revive', async () => {
@@ -2950,11 +3285,11 @@ describe('PtyHandler', () => {
         rows: 24,
         cwd: process.cwd(),
         explicitTerm: '',
-        envToDelete: ['ORCA_ATTRIBUTION_SHIM_DIR']
+        envToDelete: ['ORCA_STALE_TEST_ENV']
       }
     ])
     handler.addEnvAugmenter(() => ({
-      ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/legacy-empty-attribution'
+      ORCA_STALE_TEST_ENV: '/tmp/legacy-empty-stale'
     }))
     const killSpy = vi.spyOn(process, 'kill').mockImplementation(() => true)
     try {
@@ -2969,7 +3304,7 @@ describe('PtyHandler', () => {
     }
     expect(revivedEnv.name).toBe('xterm-256color')
     expect(revivedEnv.env.TERM).toBe('xterm-256color')
-    expect(revivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+    expect(revivedEnv.env.ORCA_STALE_TEST_ENV).toBeUndefined()
 
     const serializedState = (await dispatcher.callRequest('pty.serialize', {
       ids: ['pty-8']
@@ -2979,13 +3314,13 @@ describe('PtyHandler', () => {
       envToDelete?: string[]
     }[]
     expect(serialized.explicitTerm).toBeUndefined()
-    expect(serialized.envToDelete).toEqual(['ORCA_ATTRIBUTION_SHIM_DIR'])
+    expect(serialized.envToDelete).toEqual(['ORCA_STALE_TEST_ENV'])
   })
 
   it('preserves explicit TERM and env deletions through repeated revive cycles', async () => {
     await dispatcher.callRequest('pty.spawn', {
       env: { TERM: 'screen-256color' },
-      envToDelete: ['ORCA_ATTRIBUTION_SHIM_DIR']
+      envToDelete: ['ORCA_STALE_TEST_ENV']
     })
     let state = (await dispatcher.callRequest('pty.serialize', { ids: ['pty-1'] })) as string
 
@@ -2996,7 +3331,7 @@ describe('PtyHandler', () => {
       dispatcher = createMockDispatcher()
       handler = new PtyHandler(dispatcher as unknown as RelayDispatcher)
       handler.addEnvAugmenter(() => ({
-        ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/first-revive'
+        ORCA_STALE_TEST_ENV: '/tmp/first-revive'
       }))
       await dispatcher.callRequest('pty.revive', { state })
 
@@ -3006,12 +3341,12 @@ describe('PtyHandler', () => {
       }
       expect(firstRevivedEnv.name).toBe('screen-256color')
       expect(firstRevivedEnv.env.TERM).toBe('screen-256color')
-      expect(firstRevivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+      expect(firstRevivedEnv.env.ORCA_STALE_TEST_ENV).toBeUndefined()
       state = (await dispatcher.callRequest('pty.serialize', { ids: ['pty-1'] })) as string
       expect(JSON.parse(state)).toMatchObject([
         {
           explicitTerm: 'screen-256color',
-          envToDelete: ['ORCA_ATTRIBUTION_SHIM_DIR']
+          envToDelete: ['ORCA_STALE_TEST_ENV']
         }
       ])
 
@@ -3020,7 +3355,7 @@ describe('PtyHandler', () => {
       dispatcher = createMockDispatcher()
       handler = new PtyHandler(dispatcher as unknown as RelayDispatcher)
       handler.addEnvAugmenter(() => ({
-        ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/second-revive'
+        ORCA_STALE_TEST_ENV: '/tmp/second-revive'
       }))
       await dispatcher.callRequest('pty.revive', { state })
     } finally {
@@ -3033,12 +3368,12 @@ describe('PtyHandler', () => {
     }
     expect(secondRevivedEnv.name).toBe('screen-256color')
     expect(secondRevivedEnv.env.TERM).toBe('screen-256color')
-    expect(secondRevivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBeUndefined()
+    expect(secondRevivedEnv.env.ORCA_STALE_TEST_ENV).toBeUndefined()
   })
 
   it('revives legacy serialized entries with default TERM and no env deletions', async () => {
     handler.addEnvAugmenter(() => ({
-      ORCA_ATTRIBUTION_SHIM_DIR: '/tmp/legacy-attribution'
+      ORCA_STALE_TEST_ENV: '/tmp/legacy-stale'
     }))
     const state = JSON.stringify([
       {
@@ -3058,7 +3393,7 @@ describe('PtyHandler', () => {
 
     const revivedEnv = mockPtySpawn.mock.calls[0][2] as { env: Record<string, string> }
     expect(revivedEnv.env.TERM).toBe('xterm-256color')
-    expect(revivedEnv.env.ORCA_ATTRIBUTION_SHIM_DIR).toBe('/tmp/legacy-attribution')
+    expect(revivedEnv.env.ORCA_STALE_TEST_ENV).toBe('/tmp/legacy-stale')
   })
 
   it('revive preserves attach identity metadata without exporting hook identity env', async () => {
diff --git a/src/relay/pty-handler.ts b/src/relay/pty-handler.ts
index 9471b2a3b9f..3f8bd593e08 100644
--- a/src/relay/pty-handler.ts
+++ b/src/relay/pty-handler.ts
@@ -27,12 +27,17 @@ import {
 } from '../shared/cross-platform-path'
 import { splitWorktreeId } from '../shared/worktree-id'
 import { PhysicalExitTracker } from '../shared/physical-exit-tracker'
+import { SHELL_READY_MARKER_PREFIX } from '../main/shell-ready-marker-scanner'
 import {
-  createShellReadyScanState,
-  drainShellReadyHeldBytes,
-  scanForShellReady,
-  type ShellReadyScanState
-} from '../main/shell-ready-marker-scanner'
+  createShellStartupOutputScanState,
+  drainShellStartupOutputScanState,
+  scanShellStartupOutput,
+  type ShellStartupOutputScanState
+} from '../main/shell-startup-output-scanner'
+import {
+  createShellPromptReadinessProbe,
+  type ShellPromptReadinessProbe
+} from '../main/shell-prompt-readiness-probe'
 import { applyTerminalGitCredentialPromptGuard } from '../shared/terminal-git-credential-guard'
 import {
   gitCredentialPromptGuardEnv,
@@ -42,6 +47,7 @@ import { isTuiAgent } from '../shared/tui-agent-config'
 import type { TuiAgent } from '../shared/types'
 import { forceKillPosixPtyProcessGroups } from '../main/pty/posix-pty-process-groups'
 import { stripInheritedBuildModeEnv } from '../main/pty/build-mode-env'
+import { stripLegacyTerminalShimEnv } from '../main/pty/legacy-terminal-shim-dir'
 import {
   PTY_STARTUP_INGRESS_VERSION,
   PtyStartupIngress,
@@ -147,6 +153,9 @@ type ManagedPty = {
   worktreeId?: string
   terminalHandle?: string
   explicitTerm?: string
+  shellPath?: string
+  shellCwd?: string
+  shellPathEnv?: string
   envToDelete: string[]
   gitCredentialPromptGuarded: boolean
   startupCommand?: ManagedStartupCommand
@@ -178,10 +187,13 @@ type PendingPtyOutput = RelayPtySourceOutput & {
 }
 
 type ManagedStartupCommand = {
-  command: string
+  command: string | null
+  providerDelivery: boolean
   delivered: boolean
   waitForShellReady: boolean
-  scanState: ShellReadyScanState | null
+  outputScanState: ShellStartupOutputScanState | null
+  shellPid: number | null
+  promptProbe: ShellPromptReadinessProbe | null
   timer: ReturnType<typeof setTimeout> | null
 }
 
@@ -245,6 +257,7 @@ const INTERACTIVE_REDRAW_MAX_CHARS = PTY_OUTPUT_FLUSH_CHUNK_CHARS
 const INTERACTIVE_OUTPUT_BUDGET_CHARS = 32 * 1024
 const STARTUP_COMMAND_WRITE_DELAY_MS = 50
 const STARTUP_COMMAND_SHELL_READY_FALLBACK_MS = 1500
+const RENDERER_SHELL_READY_RETENTION_MS = 15_000
 const PTY_FORCE_KILL_RETRY_DELAY_MS = 250
 const PTY_FORCE_KILL_MAX_ATTEMPTS = 2
 const ALLOWED_SIGNALS = new Set([
@@ -557,7 +570,7 @@ export class PtyHandler {
   }
 
   /** Register an env augmenter merged into every spawn env *after* process.env and renderer env.
-   *  Used by the relay-hook server to inject ORCA_AGENT_HOOK_* coords. See docs/design/agent-status-over-ssh.md §3. */
+   *  Used by the relay-hook server to inject ORCA_AGENT_HOOK_* coords: evaluated per spawn (not captured once), so a late or restarted hook-server bind still reaches the next PTY. */
   addEnvAugmenter(augmenter: PtyEnvAugmenter): () => void {
     this.envAugmenters.push(augmenter)
     return () => {
@@ -603,15 +616,13 @@ export class PtyHandler {
       }
     }
     const result = mergeGitConfigEnvProtocol(baseEnv, augmented) as Record<string, string>
+    // Why: an older client may not ask a newly upgraded relay to delete inherited shim state.
+    stripLegacyTerminalShimEnv(result, process.platform)
     // Why: match local/daemon precedence so defaults/augmenters can't resurrect explicitly-removed values.
     for (const key of envToDelete) {
       delete result[key]
     }
-    if (
-      !envToDelete.includes('TERM') &&
-      rendererEnv &&
-      Object.prototype.hasOwnProperty.call(rendererEnv, 'TERM')
-    ) {
+    if (!envToDelete.includes('TERM') && rendererEnv && Object.hasOwn(rendererEnv, 'TERM')) {
       result.TERM = rendererEnv.TERM
     }
     // Why: node-pty defaults missing/empty TERM per-platform; normalize so POSIX and Windows children agree.
@@ -638,10 +649,20 @@ export class PtyHandler {
 
   private releaseStartupCommand(managed: ManagedPty): void {
     this.clearStartupCommandTimer(managed)
+    managed.startupCommand?.promptProbe?.dispose()
     managed.startupCommand = undefined
   }
 
-  private scheduleStartupCommandDelivery(managed: ManagedPty, delayMs: number): void {
+  private drainStartupScanBytes(startup: ManagedStartupCommand): string {
+    if (!startup.outputScanState) {
+      return ''
+    }
+    const heldBytes = drainShellStartupOutputScanState(startup.outputScanState)
+    startup.outputScanState = null
+    return heldBytes
+  }
+
+  private scheduleStartupCommandResolution(managed: ManagedPty, delayMs: number): void {
     const startup = managed.startupCommand
     if (!startup || startup.delivered || managed.disposed) {
       return
@@ -649,22 +670,25 @@ export class PtyHandler {
     this.clearStartupCommandTimer(managed)
     startup.timer = setTimeout(() => {
       startup.timer = null
-      this.deliverStartupCommand(managed)
+      if (startup.providerDelivery) {
+        this.deliverStartupCommand(managed)
+      } else {
+        this.signalRendererShellReady(managed)
+      }
     }, delayMs)
   }
 
   private deliverStartupCommand(managed: ManagedPty): void {
     const startup = managed.startupCommand
-    if (!startup || startup.delivered || managed.disposed) {
+    if (!startup?.providerDelivery || !startup.command || startup.delivered || managed.disposed) {
       return
     }
     startup.delivered = true
     this.clearStartupCommandTimer(managed)
-    if (startup.scanState) {
-      const heldBytes = drainShellReadyHeldBytes(startup.scanState)
-      if (heldBytes) {
-        managed.startupIngress?.accept(heldBytes)
-      }
+    startup.promptProbe?.dispose()
+    const heldBytes = this.drainStartupScanBytes(startup)
+    if (heldBytes) {
+      managed.startupIngress?.accept(heldBytes)
     }
     const submit = process.platform === 'win32' ? '\r' : '\n'
     // Why: only the shell-ready wrapper arms bracketed-paste; other shells use raw submit so ESC[200~ markers aren't echoed.
@@ -676,6 +700,19 @@ export class PtyHandler {
     managed.pty.write(payload)
   }
 
+  private signalRendererShellReady(managed: ManagedPty): void {
+    const startup = managed.startupCommand
+    if (!startup || startup.providerDelivery || startup.delivered || managed.disposed) {
+      return
+    }
+    startup.delivered = true
+    this.clearStartupCommandTimer(managed)
+    startup.promptProbe?.dispose()
+    managed.startupIngress?.accept(this.drainStartupScanBytes(startup))
+    managed.startupIngress?.accept(`${SHELL_READY_MARKER_PREFIX}\x07`)
+    managed.startupCommand = undefined
+  }
+
   /** Wire onData/onExit listeners for a managed PTY and store it. */
   private wireAndStore(managed: ManagedPty): void {
     managed.physicalExit = new PhysicalExitTracker()
@@ -701,16 +738,43 @@ export class PtyHandler {
       onEmission: emitIngressData,
       ...(echoProbe ? { echoProbe } : {})
     })
+    const startup = managed.startupCommand
+    if (startup?.waitForShellReady) {
+      startup.promptProbe = createShellPromptReadinessProbe({
+        slavePath: readPtySlavePath(managed.pty),
+        shellPath: managed.shellPath,
+        shellCwd: managed.shellCwd,
+        shellPathEnv: managed.shellPathEnv,
+        getShellPid: () => startup.shellPid,
+        onPromptReady: () => {
+          if (startup.providerDelivery) {
+            this.scheduleStartupCommandResolution(managed, STARTUP_COMMAND_WRITE_DELAY_MS)
+          } else {
+            this.signalRendererShellReady(managed)
+          }
+        }
+      })
+    }
     managed.pty.onData((data: string) => {
       const startup = managed.startupCommand
-      if (startup?.waitForShellReady && startup.scanState && !startup.delivered) {
-        const scanned = scanForShellReady(startup.scanState, data)
+      if (startup?.waitForShellReady && startup.outputScanState && !startup.delivered) {
+        const scanned = scanShellStartupOutput(startup.outputScanState, data)
         data = scanned.output
-        if (scanned.matched) {
-          this.scheduleStartupCommandDelivery(managed, STARTUP_COMMAND_WRITE_DELAY_MS)
+        if (scanned.shellPid) {
+          startup.shellPid = scanned.shellPid
+        }
+        if (scanned.ready) {
+          if (startup.providerDelivery) {
+            this.scheduleStartupCommandResolution(managed, STARTUP_COMMAND_WRITE_DELAY_MS)
+          } else {
+            this.signalRendererShellReady(managed)
+          }
         }
       }
       managed.startupIngress?.accept(data)
+      if (startup && !startup.delivered && data.length > 0) {
+        startup.promptProbe?.notifyOutput(data)
+      }
     })
     managed.pty.onExit(({ exitCode }: { exitCode: number }) => {
       managed.physicalExit?.markExited()
@@ -748,11 +812,11 @@ export class PtyHandler {
 
   private releaseRelayIngress(managed: ManagedPty): void {
     const startupCommand = managed.startupCommand
-    const scanState = startupCommand?.scanState
-    if (scanState) {
-      const held = drainShellReadyHeldBytes(scanState)
-      startupCommand.scanState = null
-      managed.startupIngress?.accept(held)
+    if (startupCommand) {
+      this.clearStartupCommandTimer(managed)
+      startupCommand.promptProbe?.dispose()
+      managed.startupIngress?.accept(this.drainStartupScanBytes(startupCommand))
+      managed.startupCommand = undefined
     }
     managed.startupIngress?.drainAndClose()
   }
@@ -1431,7 +1495,7 @@ export class PtyHandler {
     const explicitTerm =
       !envToDelete.includes('TERM') &&
       env &&
-      Object.prototype.hasOwnProperty.call(env, 'TERM') &&
+      Object.hasOwn(env, 'TERM') &&
       typeof env.TERM === 'string' &&
       env.TERM.length > 0
         ? env.TERM
@@ -1475,11 +1539,15 @@ export class PtyHandler {
         startupCommandDelivery:
           params.startupCommandDelivery === 'shell-ready' ? 'shell-ready' : undefined
       })
+    const managedStartupCommand = shouldProviderDeliverCommand ? command : launchCommandHint
     // Why: both renderer- and provider-delivered startup commands use this marker; the delivering side strips it from output.
     const shellLaunch = getRelayShellLaunchConfig(shell, spawnEnv, process.platform, {
       terminalWindowsWslDistro,
-      emitReadyMarker: shouldEmitShellReadyMarker
+      emitReadyMarker: shouldEmitShellReadyMarker,
+      emitStartupIdentity: shouldEmitShellReadyMarker
     })
+    const rendererShellReadySupported =
+      !shouldProviderDeliverCommand && shellLaunch.env.ORCA_SHELL_READY_MARKER === '1'
 
     if (context?.signal?.aborted || context?.isStale()) {
       // Why: cancellation remains side-effect-free until the exact native spawn seam.
@@ -1500,7 +1568,12 @@ export class PtyHandler {
         rows,
         cwd,
         // Why: relay shells inherit process.env; don't let an ambient Orca marker enable shell-ready unless requested.
-        env: { ...spawnEnv, ORCA_SHELL_READY_MARKER: '0', ...shellLaunch.env }
+        env: {
+          ...spawnEnv,
+          ORCA_SHELL_READY_MARKER: '0',
+          ORCA_SHELL_STARTUP_IDENTITY: '0',
+          ...shellLaunch.env
+        }
       })
     } catch (error) {
       // Why: Windows loads conpty.node only on first spawn, so handle that late binding failure here.
@@ -1539,6 +1612,9 @@ export class PtyHandler {
       ...(explicitTerm !== undefined ? { explicitTerm } : {}),
       envToDelete,
       gitCredentialPromptGuarded,
+      shellPath: shell,
+      shellCwd: cwd,
+      shellPathEnv: spawnEnv.PATH,
       ownerBackend: resolvePtyOwnerBackend({
         platform: process.platform,
         shellPath: shell,
@@ -1546,16 +1622,19 @@ export class PtyHandler {
       }),
       ...(startupIngressIntent ? { startupIngressIntent } : {}),
       ...(terminalHandle ? { terminalHandle } : {}),
-      ...(shouldProviderDeliverCommand
+      ...(managedStartupCommand && (shouldProviderDeliverCommand || rendererShellReadySupported)
         ? {
             startupCommand: {
-              command,
+              command: shouldProviderDeliverCommand ? managedStartupCommand : null,
+              providerDelivery: shouldProviderDeliverCommand,
               delivered: false,
               waitForShellReady: shellLaunch.env.ORCA_SHELL_READY_MARKER === '1',
-              scanState:
+              outputScanState:
                 shellLaunch.env.ORCA_SHELL_READY_MARKER === '1'
-                  ? createShellReadyScanState()
+                  ? createShellStartupOutputScanState()
                   : null,
+              shellPid: null,
+              promptProbe: null,
               timer: null
             }
           }
@@ -1572,11 +1651,13 @@ export class PtyHandler {
       this.releaseStartupCommand(managed)
       this.requestGracefulKill(managed, 'terminate stale')
     } else if (managed.startupCommand) {
-      this.scheduleStartupCommandDelivery(
+      this.scheduleStartupCommandResolution(
         managed,
-        managed.startupCommand.waitForShellReady
-          ? STARTUP_COMMAND_SHELL_READY_FALLBACK_MS
-          : STARTUP_COMMAND_WRITE_DELAY_MS
+        managed.startupCommand.providerDelivery
+          ? managed.startupCommand.waitForShellReady
+            ? STARTUP_COMMAND_SHELL_READY_FALLBACK_MS
+            : STARTUP_COMMAND_WRITE_DELAY_MS
+          : RENDERER_SHELL_READY_RETENTION_MS
       )
     }
     return {
@@ -2033,7 +2114,12 @@ export class PtyHandler {
       rows: entry.rows,
       cwd: entry.cwd,
       // Why: no provider-delivered command is waiting for a ready marker.
-      env: { ...spawnEnv, ORCA_SHELL_READY_MARKER: '0', ...shellLaunch.env }
+      env: {
+        ...spawnEnv,
+        ORCA_SHELL_READY_MARKER: '0',
+        ORCA_SHELL_STARTUP_IDENTITY: '0',
+        ...shellLaunch.env
+      }
     })
     this.wireAndStore({
       id: entry.id,
@@ -2212,6 +2298,14 @@ export class PtyHandler {
     return count
   }
 
+  get retainedStartupCommandBytes(): number {
+    let bytes = 0
+    for (const managed of this.ptys.values()) {
+      bytes += managed.startupCommand?.command?.length ?? 0
+    }
+    return bytes
+  }
+
   get graceTimerActive(): boolean {
     return this.graceTimer !== null
   }
diff --git a/src/relay/pty-shell-launch.test.ts b/src/relay/pty-shell-launch.test.ts
index c4c5b5f11ad..04f7a261583 100644
--- a/src/relay/pty-shell-launch.test.ts
+++ b/src/relay/pty-shell-launch.test.ts
@@ -181,6 +181,12 @@ describe('getRelayShellLaunchConfig', () => {
       expect(config.args).toEqual(['-l'])
       expect(config.env.ZDOTDIR).toBe(zshRoot)
       expect(config.env.ORCA_SHELL_READY_MARKER).toBe('1')
+      expect(readFileSync(join(zshRoot, '.zshenv'), 'utf8')).toContain(
+        'printf "\\033]777;orca-shell-start:%s\\007" "$$"'
+      )
+      expect(readFileSync(join(zshRoot, '.zshenv'), 'utf8')).toContain(
+        'unset ORCA_SHELL_STARTUP_IDENTITY'
+      )
       expect(zlogin).toContain('zle -N zle-line-init __orca_prompt_mark')
       expect(zlogin).toContain('printf "\\033]777;orca-shell-ready\\007"')
     }
@@ -195,11 +201,26 @@ describe('getRelayShellLaunchConfig', () => {
       const bashRc = readFileSync(config.args[1] as string, 'utf8')
 
       expect(config.env.ORCA_SHELL_READY_MARKER).toBe('1')
+      expect(bashRc).toContain('printf "\\033]777;orca-shell-start:%s\\007" "$$"')
+      expect(bashRc).toContain('unset ORCA_SHELL_STARTUP_IDENTITY')
       expect(bashRc).toContain('__orca_append_prompt_command "__orca_prompt_mark"')
       expect(bashRc).toContain('printf "\\033]777;orca-shell-ready\\007"')
     }
   )
 
+  it.skipIf(process.platform === 'win32')(
+    'wraps zsh when only startup identity emission is requested',
+    () => {
+      const config = getRelayShellLaunchConfig('/bin/zsh', { HOME: homeDir }, 'linux', {
+        emitStartupIdentity: true
+      })
+
+      expect(config.env.ZDOTDIR).toBe(join(homeDir, '.orca-relay', 'shell-ready', 'zsh'))
+      expect(config.env.ORCA_SHELL_STARTUP_IDENTITY).toBe('1')
+      expect(config.env.ORCA_SHELL_READY_MARKER).toBeUndefined()
+    }
+  )
+
   itWithBash('runs the relay bash wrapper without fake C/D markers before the first prompt', () => {
     const config = getRelayShellLaunchConfig('/bin/bash', { HOME: homeDir })
     const output = runInteractiveBashRcfile(config.args[1] as string, homeDir)
diff --git a/src/relay/pty-shell-launch.ts b/src/relay/pty-shell-launch.ts
index 5f58b89702c..7a6d7d7a097 100644
--- a/src/relay/pty-shell-launch.ts
+++ b/src/relay/pty-shell-launch.ts
@@ -5,6 +5,7 @@ import { getPosixOmpShellWrapper } from '../main/pty/omp-shell-wrapper'
 import {
   getZshFinalZdotdirRestoreBlock,
   getZshShellReadyMarkerRegistrationBlock,
+  SHELL_STARTUP_IDENTITY_MARKER_BLOCK,
   getZshStartupFileSourceBlock
 } from '../main/shell-templates'
 
@@ -84,6 +85,7 @@ function ensureOverlayRestoreWrappers(root: string): void {
   const bashDir = join(root, 'bash')
 
   const zshEnv = `# Orca relay zsh overlay wrapper
+${SHELL_STARTUP_IDENTITY_MARKER_BLOCK}
 export ORCA_ORIG_ZDOTDIR="\${ORCA_ORIG_ZDOTDIR:-$HOME}"
 case "\${ORCA_ORIG_ZDOTDIR%/}" in
   */shell-ready/zsh) export ORCA_ORIG_ZDOTDIR="$HOME" ;;
@@ -133,6 +135,7 @@ ${getZshFinalZdotdirRestoreBlock('"${ORCA_USER_ZDOTDIR:-${ORCA_ORIG_ZDOTDIR:-$HO
 ${getZshShellReadyMarkerRegistrationBlock(SHELL_READY_MARKER_ESCAPED)}
 `
   const bashRc = `# Orca relay bash overlay wrapper
+${SHELL_STARTUP_IDENTITY_MARKER_BLOCK}
 [[ -f /etc/profile ]] && source /etc/profile
 if [[ -f "$HOME/.bash_profile" ]]; then
   source "$HOME/.bash_profile"
@@ -264,10 +267,15 @@ export function getRelayShellLaunchConfig(
   shellPath: string,
   env: Record<string, string>,
   platform: NodeJS.Platform = process.platform,
-  options: { emitReadyMarker?: boolean; terminalWindowsWslDistro?: string | null } = {}
+  options: {
+    emitReadyMarker?: boolean
+    emitStartupIdentity?: boolean
+    terminalWindowsWslDistro?: string | null
+  } = {}
 ): RelayShellLaunchConfig {
   const shellName = shellBasename(shellPath)
   const emitReadyMarker = options.emitReadyMarker === true
+  const emitStartupIdentity = options.emitStartupIdentity === true
   if (platform === 'win32') {
     // Why: pwsh also exists on POSIX remotes; Windows-specific shell args must
     // only apply when the relay itself is running on native Windows.
@@ -283,9 +291,9 @@ export function getRelayShellLaunchConfig(
   if (shellName !== 'zsh' && shellName !== 'bash') {
     return { args: POSIX_LOGIN_ARGS, env: {} }
   }
-  // Why: preserve plain zsh startup fast path; only force wrappers when
-  // shell-ready or overlay env restoration is requested.
-  if (shellName === 'zsh' && !hasOverlayRestoreEnv(env) && !emitReadyMarker) {
+  // Why: preserve plain zsh startup fast path unless markers or overlay restoration are requested.
+  const requiresZshWrapper = hasOverlayRestoreEnv(env) || emitReadyMarker || emitStartupIdentity
+  if (shellName === 'zsh' && !requiresZshWrapper) {
     return { args: POSIX_LOGIN_ARGS, env: {} }
   }
 
@@ -298,13 +306,17 @@ export function getRelayShellLaunchConfig(
       env: {
         ORCA_ORIG_ZDOTDIR: resolveOriginalZdotdir(env),
         ZDOTDIR: join(root, 'zsh'),
-        ...(emitReadyMarker ? { ORCA_SHELL_READY_MARKER: '1' } : {})
+        ...(emitReadyMarker ? { ORCA_SHELL_READY_MARKER: '1' } : {}),
+        ...(emitStartupIdentity ? { ORCA_SHELL_STARTUP_IDENTITY: '1' } : {})
       }
     }
   }
 
   return {
     args: ['--rcfile', join(root, 'bash', 'rcfile')],
-    env: emitReadyMarker ? { ORCA_SHELL_READY_MARKER: '1' } : {}
+    env: {
+      ...(emitReadyMarker ? { ORCA_SHELL_READY_MARKER: '1' } : {}),
+      ...(emitStartupIdentity ? { ORCA_SHELL_STARTUP_IDENTITY: '1' } : {})
+    }
   }
 }
diff --git a/src/relay/relay-watcher-event-emitter.test.ts b/src/relay/relay-watcher-event-emitter.test.ts
index acf734acd71..0f0991e5c01 100644
--- a/src/relay/relay-watcher-event-emitter.test.ts
+++ b/src/relay/relay-watcher-event-emitter.test.ts
@@ -61,7 +61,7 @@ function createRecordingSink(highWaterMark?: number): {
       drainWaiters.push(callback)
       return () => {
         const index = drainWaiters.indexOf(callback)
-        if (index >= 0) {
+        if (index !== -1) {
           drainWaiters.splice(index, 1)
         }
       }
diff --git a/src/relay/relay.ts b/src/relay/relay.ts
index cf4b4808668..afd7ef9a02b 100644
--- a/src/relay/relay.ts
+++ b/src/relay/relay.ts
@@ -549,7 +549,7 @@ async function main(): Promise<void> {
     const marker = process.argv.indexOf('--orca-cli')
     await runOrcaCliMode(
       sockPath,
-      marker >= 0 ? process.argv.slice(marker + 1) : [],
+      marker !== -1 ? process.argv.slice(marker + 1) : [],
       endpointCredential
     )
     return
@@ -780,7 +780,7 @@ async function main(): Promise<void> {
   )
 
   // ── Agent-hook server ─────────────────────────────────────────────
-  // Why: loopback HTTP receiver so remote-PTY agent CLIs post hook events locally, forwarded to Orca as agent.hook notifications. See docs/design/agent-status-over-ssh.md §2-§5.
+  // Why: loopback HTTP receiver so remote-PTY agent CLIs post hook events to a local port (they can't reach Orca's host); the relay forwards them as agent.hook notifications.
   const hookServer = new RelayAgentHookServer({
     // Why: scope endpoint.env/cmd by socket path so multiple relay daemons on one account can't overwrite each other's hook tokens.
     endpointDir: endpointDir ?? endpointDirForRelaySocket(sockPath),
@@ -870,7 +870,7 @@ async function main(): Promise<void> {
     return env
   })
 
-  // Why: evict pane status cache + overlay dirs on PTY exit so panes don't ghost after reconnect (§5 Path 3) or leak dirs.
+  // Why: evict pane status cache + overlay dirs on PTY exit, else the next reconnect replays a dead pane's last status (ghost row) and overlay dirs leak.
   ptyHandler.setExitListener(({ paneKey, id }) => {
     if (paneKey) {
       hookServer.clearPaneState(paneKey)
@@ -878,7 +878,7 @@ async function main(): Promise<void> {
     pluginOverlay.clearOverlay(paneKey ?? id)
   })
 
-  // Why: forward cached entries as notifications before returning so the response trails all replays, closing a reconnect race. See docs/design/agent-status-over-ssh.md §5 Path 3.
+  // Why: forward cached entries as notifications before returning, so the response trails every replay and Orca can't treat replay as done while frames are still in flight.
   dispatcher.onRequest(AGENT_HOOK_REQUEST_REPLAY_METHOD, async () => {
     const replayed = hookServer.replayCachedPayloadsForPanes()
     return { replayed }
@@ -887,7 +887,7 @@ async function main(): Promise<void> {
   // Why: relay-local installers collapse hundreds of SFTP request/response RTTs to one RPC.
   registerManagedHookInstaller(dispatcher)
 
-  // Why: plugin sources ship over the wire so an Orca update doesn't force a relay redeploy; cache them per spawn. See docs/design/agent-status-over-ssh.md §4.
+  // Why: plugin sources ship over the wire — the relay is versioned independently of Orca, so bundling them would make every agent-event change a relay redeploy.
   // Why: bound per-source size so a buggy/hostile Orca can't OOM the relay by pushing a giant string.
   dispatcher.onRequest(AGENT_HOOK_INSTALL_PLUGINS_METHOD, async (params) => {
     const opencode = params.opencodePluginSource
diff --git a/src/renderer/src/App.tsx b/src/renderer/src/App.tsx
index 84b6bb9e155..0795d6221a3 100644
--- a/src/renderer/src/App.tsx
+++ b/src/renderer/src/App.tsx
@@ -1416,7 +1416,9 @@ function App(): React.JSX.Element {
         hideWorkspacesFromOtherDevices,
         alwaysShowDefaultBranchWorkspace,
         showDotfilesByWorktree,
-        filterRepoIds,
+        // Why: the store keeps this readonly for identity stability, but PersistedUI crosses to
+        // main, which owns a mutable array — copy at the boundary rather than widening the wire type.
+        filterRepoIds: [...filterRepoIds],
         // Why (#9002): activeView is deliberately NOT included here. It used to
         // ride this same 150ms writer (#8265), which meant every top-level view
         // switch scheduled a full durable-state save. The narrow preference
@@ -1476,18 +1478,17 @@ function App(): React.JSX.Element {
     } else if (settings.theme === 'light') {
       applyDocumentTheme('light')
       return undefined
-    } else {
-      // system
-      const mq = window.matchMedia('(prefers-color-scheme: dark)')
-      applyDocumentTheme('system')
-      const handler = (): void => {
-        applyDocumentTheme('system')
-        // System theme changes don't mutate the store, so mobile terminal colors need an explicit graph republish.
-        scheduleRuntimeGraphSync()
-      }
-      mq.addEventListener('change', handler)
-      return () => mq.removeEventListener('change', handler)
     }
+    // system
+    const mq = window.matchMedia('(prefers-color-scheme: dark)')
+    applyDocumentTheme('system')
+    const handler = (): void => {
+      applyDocumentTheme('system')
+      // System theme changes don't mutate the store, so mobile terminal colors need an explicit graph republish.
+      scheduleRuntimeGraphSync()
+    }
+    mq.addEventListener('change', handler)
+    return () => mq.removeEventListener('change', handler)
   }, [settings])
 
   useEffect(() => {
diff --git a/src/renderer/src/components/AgentWorkingSpinner.test.tsx b/src/renderer/src/components/AgentWorkingSpinner.test.tsx
index 25c04f39783..f887dab132c 100644
--- a/src/renderer/src/components/AgentWorkingSpinner.test.tsx
+++ b/src/renderer/src/components/AgentWorkingSpinner.test.tsx
@@ -50,7 +50,99 @@ describe('AgentWorkingSpinner', () => {
     }
   })
 
-  it('anchors mount and restart animations to the shared document epoch', async () => {
+  // Why: animationstart fires on the first start and on every restart (class
+  // re-add, display:none reveal), so it alone keeps every ring phase-locked.
+  // A negative animation-delay cannot — it is static, so a restart replays the
+  // stale mount-time offset and the rings fan out across steps.
+  it('anchors every animation start to the shared document epoch', async () => {
+    const animation = {
+      animationName: 'agent-spinner-rotate',
+      startTime: 321
+    } as unknown as Animation
+    const getAnimations = vi.fn(() => [animation])
+    const originalGetAnimations = Object.getOwnPropertyDescriptor(
+      HTMLElement.prototype,
+      'getAnimations'
+    )
+    Object.defineProperty(HTMLElement.prototype, 'getAnimations', {
+      configurable: true,
+      value: getAnimations
+    })
+    const container = document.createElement('div')
+    document.body.appendChild(container)
+    const root = createRoot(container)
+    const fireAnimationStart = async (): Promise<void> => {
+      const event = new Event('animationstart', { bubbles: true })
+      Object.defineProperty(event, 'animationName', { value: 'agent-spinner-rotate' })
+      await act(async () => {
+        container.querySelector('[data-agent-spinner]')!.dispatchEvent(event)
+      })
+    }
+
+    try {
+      await act(async () => {
+        root.render(<AgentWorkingSpinner />)
+      })
+      // Why: mount must not query animations — that forces a synchronous style
+      // recalc per ring for a phase the first animationstart sets anyway.
+      expect(getAnimations).not.toHaveBeenCalled()
+
+      await fireAnimationStart()
+      expect(animation.startTime).toBe(0)
+
+      animation.startTime = 654
+      await fireAnimationStart()
+      expect(animation.startTime).toBe(0)
+      expect(getAnimations).toHaveBeenCalledTimes(2)
+    } finally {
+      act(() => root.unmount())
+      container.remove()
+      if (originalGetAnimations === undefined) {
+        Reflect.deleteProperty(HTMLElement.prototype, 'getAnimations')
+      } else {
+        Object.defineProperty(HTMLElement.prototype, 'getAnimations', originalGetAnimations)
+      }
+    }
+  })
+
+  // Why: reduced motion resolves the rule to `animation: none`, so no animation
+  // exists to start and none to anchor. Pins that dropping the ref-time anchor
+  // adds no exposure here — both paths were already no-ops.
+  it('anchors nothing when reduced motion leaves no animation to start', async () => {
+    const getAnimations = vi.fn(() => [] as Animation[])
+    const originalGetAnimations = Object.getOwnPropertyDescriptor(
+      HTMLElement.prototype,
+      'getAnimations'
+    )
+    Object.defineProperty(HTMLElement.prototype, 'getAnimations', {
+      configurable: true,
+      value: getAnimations
+    })
+    const container = document.createElement('div')
+    document.body.appendChild(container)
+    const root = createRoot(container)
+
+    try {
+      await act(async () => {
+        root.render(<AgentWorkingSpinner />)
+      })
+      const el = container.querySelector('[data-agent-spinner]')
+
+      expect(el).not.toBeNull()
+      expect(getAnimations).not.toHaveBeenCalled()
+      expect(el!.className).toContain('motion-reduce:border-t-yellow-500')
+    } finally {
+      act(() => root.unmount())
+      container.remove()
+      if (originalGetAnimations === undefined) {
+        Reflect.deleteProperty(HTMLElement.prototype, 'getAnimations')
+      } else {
+        Object.defineProperty(HTMLElement.prototype, 'getAnimations', originalGetAnimations)
+      }
+    }
+  })
+
+  it('ignores animation starts from other animations on the same element', async () => {
     const animation = {
       animationName: 'agent-spinner-rotate',
       startTime: 321
@@ -72,16 +164,14 @@ describe('AgentWorkingSpinner', () => {
       await act(async () => {
         root.render(<AgentWorkingSpinner />)
       })
-      expect(animation.startTime).toBe(0)
-
-      animation.startTime = 654
-      const restart = new Event('animationstart', { bubbles: true })
-      Object.defineProperty(restart, 'animationName', { value: 'agent-spinner-rotate' })
+      const unrelated = new Event('animationstart', { bubbles: true })
+      Object.defineProperty(unrelated, 'animationName', { value: 'compact-agent-expansion-reveal' })
       await act(async () => {
-        container.querySelector('[data-agent-spinner]')!.dispatchEvent(restart)
+        container.querySelector('[data-agent-spinner]')!.dispatchEvent(unrelated)
       })
-      expect(animation.startTime).toBe(0)
-      expect(getAnimations).toHaveBeenCalledTimes(2)
+
+      expect(getAnimations).not.toHaveBeenCalled()
+      expect(animation.startTime).toBe(321)
     } finally {
       act(() => root.unmount())
       container.remove()
diff --git a/src/renderer/src/components/AgentWorkingSpinner.tsx b/src/renderer/src/components/AgentWorkingSpinner.tsx
index 9b20a862b09..7d2ab0a0b5a 100644
--- a/src/renderer/src/components/AgentWorkingSpinner.tsx
+++ b/src/renderer/src/components/AgentWorkingSpinner.tsx
@@ -3,8 +3,10 @@ import { cn } from '@/lib/utils'
 
 const SPINNER_ANIMATION_NAME = 'agent-spinner-rotate'
 
-// Why: CSS assigns per-element start times after refs run; anchoring the Web
-// Animation timeline gives late mounts exact phase sync without recurring JS.
+// Why: anchoring the Web Animation timeline gives late mounts exact phase sync
+// without recurring JS. Driven only by animationstart — a ref-time call would
+// force a synchronous style recalc per mount for a phase animationstart fixes
+// one frame later anyway (measured: 24ms of blocking work per 200 mounts).
 function syncSpinnerPhase(el: HTMLSpanElement | null): void {
   if (el === null || typeof el.getAnimations !== 'function') {
     return
@@ -33,7 +35,6 @@ function handleSpinnerAnimationStart(event: React.AnimationEvent<HTMLSpanElement
 export function AgentWorkingSpinner({ className }: { className?: string }): React.JSX.Element {
   return (
     <span
-      ref={syncSpinnerPhase}
       onAnimationStart={handleSpinnerAnimationStart}
       data-agent-spinner=""
       className={cn(
diff --git a/src/renderer/src/components/BrowserCookieImportDisclosure.tsx b/src/renderer/src/components/BrowserCookieImportDisclosure.tsx
new file mode 100644
index 00000000000..9e7c203675d
--- /dev/null
+++ b/src/renderer/src/components/BrowserCookieImportDisclosure.tsx
@@ -0,0 +1,28 @@
+import { Info } from 'lucide-react'
+import { translate } from '@/i18n/i18n'
+import { DropdownMenuLabel, DropdownMenuSeparator } from '@/components/ui/dropdown-menu'
+
+export function BrowserCookieImportDisclosure(): React.JSX.Element {
+  return (
+    <>
+      <DropdownMenuSeparator />
+      <DropdownMenuLabel className="flex max-w-64 items-start gap-2 whitespace-normal py-2 font-normal">
+        <Info aria-hidden className="mt-0.5 size-3.5 shrink-0" />
+        <span className="min-w-0">
+          <span className="block font-medium leading-4 text-foreground">
+            {translate(
+              'auto.components.BrowserCookieImportDisclosure.title',
+              "Google logins aren't imported"
+            )}
+          </span>
+          <span className="block leading-4 text-muted-foreground">
+            {translate(
+              'auto.components.BrowserCookieImportDisclosure.description',
+              'Sign in to Google directly in Orca.'
+            )}
+          </span>
+        </span>
+      </DropdownMenuLabel>
+    </>
+  )
+}
diff --git a/src/renderer/src/components/GitHubItemDialog.tsx b/src/renderer/src/components/GitHubItemDialog.tsx
index eee4a5a106c..5f73fb31bea 100644
--- a/src/renderer/src/components/GitHubItemDialog.tsx
+++ b/src/renderer/src/components/GitHubItemDialog.tsx
@@ -1240,7 +1240,7 @@ if (typeof window !== 'undefined' && window.api?.gh?.onWorkItemMutated) {
     invalidateWorkItemDetailsCacheByMatch(payload)
   })
 }
-if (typeof import.meta !== 'undefined' && import.meta.hot) {
+if (import.meta !== undefined && import.meta.hot) {
   import.meta.hot.dispose(() => {
     workItemMutatedUnsub?.()
     workItemDetailsCacheEventUnsub?.()
diff --git a/src/renderer/src/components/PullRequestPage.tsx b/src/renderer/src/components/PullRequestPage.tsx
index 69969b5f3bd..aedc7bdd5e0 100644
--- a/src/renderer/src/components/PullRequestPage.tsx
+++ b/src/renderer/src/components/PullRequestPage.tsx
@@ -1286,7 +1286,7 @@ if (typeof window !== 'undefined' && window.api?.gh?.onWorkItemMutated) {
     invalidateWorkItemDetailsCacheByMatch(payload)
   })
 }
-if (typeof import.meta !== 'undefined' && import.meta.hot) {
+if (import.meta !== undefined && import.meta.hot) {
   import.meta.hot.dispose(() => {
     workItemMutatedUnsub?.()
     workItemDetailsCacheEventUnsub?.()
diff --git a/src/renderer/src/components/TaskPage.tsx b/src/renderer/src/components/TaskPage.tsx
index 520f2debbdd..29bc0bc4587 100644
--- a/src/renderer/src/components/TaskPage.tsx
+++ b/src/renderer/src/components/TaskPage.tsx
@@ -6960,7 +6960,7 @@ export default function TaskPage(): React.JSX.Element {
     const authorityPage = pages.findIndex((page) =>
       page?.some((item) => authorityItemKeys.has(taskPageGitHubItemKey(item.repoId, item.id)))
     )
-    const quietPage = authorityPage >= 0 ? authorityPage : currentPage
+    const quietPage = authorityPage !== -1 ? authorityPage : currentPage
     const visiblePage = currentPage > quietPage ? currentPage : undefined
     const pageItemKeys = (page: number): Set<string> =>
       new Set((pages[page] ?? []).map((item) => taskPageGitHubItemKey(item.repoId, item.id)))
diff --git a/src/renderer/src/components/Terminal.tsx b/src/renderer/src/components/Terminal.tsx
index a8938a4e507..d555a92d22c 100644
--- a/src/renderer/src/components/Terminal.tsx
+++ b/src/renderer/src/components/Terminal.tsx
@@ -12,6 +12,7 @@ import {
 } from '@/constants/terminal'
 import { useAppStore } from '../store'
 import { folderWorkspaceKey } from '../../../shared/workspace-scope'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 import { useAllWorktrees } from '../store/selectors'
 import { getConnectionId } from '../lib/connection-context'
 import { basename } from '../lib/path'
@@ -181,6 +182,7 @@ import {
   useManualTerminalWorktreeParking
 } from './terminal-pane/use-manual-terminal-worktree-parking'
 import { EDITOR_TAB_CONTENT_TYPES, getEditorCmdSaveFileId } from './editor/editor-cmd-save-target'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 const EditorPanel = lazy(() => import('./editor/EditorPanel'))
 
@@ -188,6 +190,10 @@ const EditorPanel = lazy(() => import('./editor/EditorPanel'))
 const CLOSE_DIALOG_DEBOUNCE_MS = 200
 type TerminalStoreSnapshot = ReturnType<typeof useAppStore.getState>
 
+function showClientCreationActionError(error: unknown): void {
+  toast.error(error instanceof Error ? error.message : String(error))
+}
+
 function haveSameIdSet(left: ReadonlySet<string>, right: ReadonlySet<string>): boolean {
   if (left.size !== right.size) {
     return false
@@ -1597,7 +1603,7 @@ function Terminal(): React.JSX.Element | null {
     void openMobileEmulatorTab(activeWorktreeId, {
       placement: 'rightSplit',
       targetGroupId: targetGroupId ?? undefined
-    })
+    }).catch(showClientCreationActionError)
   }, [activeWorktreeId])
 
   const handleNewBrowserTab = useCallback(() => {
@@ -1608,22 +1614,31 @@ function Terminal(): React.JSX.Element | null {
       useAppStore.getState().activeGroupIdByWorktree[activeWorktreeId] ??
       useAppStore.getState().groupsByWorktree[activeWorktreeId]?.[0]?.id
     if (targetGroupId) {
-      void openNewBrowserTabInActiveWorkspace(targetGroupId)
+      void openNewBrowserTabInActiveWorkspace(targetGroupId).catch(showClientCreationActionError)
       return
     }
-    const defaultUrl = useAppStore.getState().browserDefaultUrl ?? 'about:blank'
+    const state = useAppStore.getState()
+    const browserAvailability = getClientCreationActionPolicy(state, activeWorktreeId)[
+      'managed-browser'
+    ]
+    if (browserAvailability.state !== 'enabled') {
+      toast.error(browserAvailability.reason)
+      return
+    }
+    const defaultUrl = state.browserDefaultUrl ?? 'about:blank'
     const runtimeEnvironmentId = getActiveWorktreeRuntimeEnvironmentId(activeWorktreeId)
-    if (isWebRuntimeSessionActive(runtimeEnvironmentId)) {
+    if (browserAvailability.provider === 'paired-runtime' && runtimeEnvironmentId) {
       void createWebRuntimeSessionBrowserTab({
         worktreeId: activeWorktreeId,
         environmentId: runtimeEnvironmentId,
         url: defaultUrl
-      })
+      }).catch(showClientCreationActionError)
       return
     }
     createBrowserTab(activeWorktreeId, defaultUrl, {
       title: translate('auto.components.Terminal.37da0d736f', 'New Browser Tab'),
-      focusAddressBar: true
+      focusAddressBar: true,
+      ...(runtimeEnvironmentId ? { browserRuntimeEnvironmentId: null } : {})
     })
   }, [activeWorktreeId, createBrowserTab, openNewBrowserTabInActiveWorkspace])
 
@@ -1643,8 +1658,16 @@ function Terminal(): React.JSX.Element | null {
         return
       }
       const runtimeEnvironmentId = getActiveWorktreeRuntimeEnvironmentId(activeWorktreeId)
+      const browserAvailability = getClientCreationActionPolicy(state, activeWorktreeId)[
+        'managed-browser'
+      ]
+      if (browserAvailability.state !== 'enabled') {
+        toast.error(browserAvailability.reason)
+        return
+      }
       if (
-        isWebRuntimeSessionActive(runtimeEnvironmentId) &&
+        browserAvailability.provider === 'paired-runtime' &&
+        runtimeEnvironmentId &&
         browserWorkspaceHasRemoteOwner(state, source.id, runtimeEnvironmentId)
       ) {
         void createWebRuntimeSessionBrowserTab({
@@ -1652,12 +1675,17 @@ function Terminal(): React.JSX.Element | null {
           environmentId: runtimeEnvironmentId,
           url: source.url,
           profileId: source.sessionProfileId
-        })
+        }).catch(showClientCreationActionError)
         return
       }
-      createBrowserTab(activeWorktreeId, source.url, {
-        ...buildDuplicatedBrowserTabOptions(source)
-      })
+      try {
+        createBrowserTab(activeWorktreeId, source.url, {
+          ...buildDuplicatedBrowserTabOptions(source),
+          ...(runtimeEnvironmentId ? { browserRuntimeEnvironmentId: null } : {})
+        })
+      } catch (error) {
+        showClientCreationActionError(error)
+      }
     },
     [activeWorktreeId, createBrowserTab]
   )
@@ -2032,7 +2060,11 @@ function Terminal(): React.JSX.Element | null {
       if (!e.repeat && matchShortcut('tab.reopenClosed')) {
         e.preventDefault()
         notifyTerminalCapture('tab.reopenClosed')
-        useAppStore.getState().reopenClosedTab(activeWorktreeId)
+        try {
+          useAppStore.getState().reopenClosedTab(activeWorktreeId)
+        } catch (error) {
+          showClientCreationActionError(error)
+        }
         return
       }
 
@@ -2040,8 +2072,18 @@ function Terminal(): React.JSX.Element | null {
       if (!e.repeat && matchShortcut('tab.newBrowser')) {
         e.preventDefault()
         notifyTerminalCapture('tab.newBrowser')
+        const browserAvailability = getClientCreationActionPolicy(
+          useAppStore.getState(),
+          floatingWorkspaceFocused ? FLOATING_TERMINAL_WORKTREE_ID : activeWorktreeId
+        )['managed-browser']
+        if (browserAvailability.state !== 'enabled') {
+          toast.error(browserAvailability.reason)
+          return
+        }
         if (floatingWorkspaceFocused) {
-          void createFloatingWorkspaceBrowserTab(useAppStore.getState())
+          void createFloatingWorkspaceBrowserTab(useAppStore.getState()).catch(
+            showClientCreationActionError
+          )
           return
         }
         handleNewBrowserTab()
@@ -2052,6 +2094,14 @@ function Terminal(): React.JSX.Element | null {
       if (!e.repeat && mobileEmulatorEnabled && matchShortcut('tab.newSimulator')) {
         e.preventDefault()
         notifyTerminalCapture('tab.newSimulator')
+        const simulatorAvailability = getClientCreationActionPolicy(
+          useAppStore.getState(),
+          activeWorktreeId
+        )['mobile-emulator']
+        if (simulatorAvailability.state !== 'enabled') {
+          toast.error(simulatorAvailability.reason)
+          return
+        }
         if (!floatingWorkspaceFocused) {
           handleNewSimulatorTab()
         }
diff --git a/src/renderer/src/components/WorktreeJumpPalette.linear-url.test.tsx b/src/renderer/src/components/WorktreeJumpPalette.linear-url.test.tsx
new file mode 100644
index 00000000000..709d57777c7
--- /dev/null
+++ b/src/renderer/src/components/WorktreeJumpPalette.linear-url.test.tsx
@@ -0,0 +1,741 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { flushSync } from 'react-dom'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as ReactI18Next from 'react-i18next'
+import { useAppStore } from '@/store'
+import type { AppState } from '@/store/types'
+import type { GitHubWorkItem, LinearIssue, Repo } from '../../../shared/types'
+import { projectHostSetupProjectionFromRepos } from '../../../shared/project-host-setup-projection'
+import { resolveWorkspaceCreationTarget } from '@/lib/project-host-workspace-target'
+import { WORKTREE_PALETTE_QUERY_MAX_BYTES } from '@/lib/worktree-palette-query-bounds'
+import WorktreeJumpPalette from './WorktreeJumpPalette'
+import { makeRecentTabState, makeRepo, makeWorktree } from './worktree-jump-palette-test-fixtures'
+
+const { lookupCmdJGitHubUrlWorkItem } = vi.hoisted(() => ({
+  lookupCmdJGitHubUrlWorkItem: vi.fn()
+}))
+
+vi.mock('@/lib/cmd-j-github-url-lookup', () => ({
+  lookupCmdJGitHubUrlWorkItem
+}))
+
+vi.mock('react-i18next', async (importOriginal) => {
+  const actual = await importOriginal<typeof ReactI18Next>()
+  return {
+    ...actual,
+    useTranslation: () => ({
+      t: (_key: string, fallback?: string) => fallback ?? _key
+    })
+  }
+})
+
+vi.mock('sonner', () => ({
+  toast: {
+    success: vi.fn(),
+    error: vi.fn(),
+    info: vi.fn(),
+    warning: vi.fn(),
+    message: vi.fn()
+  }
+}))
+
+vi.mock('@/hooks/useSettingsNavigationMetadata', () => ({
+  useSettingsNavigationMetadata: () => []
+}))
+
+vi.mock('@/components/sidebar/StatusIndicator', () => ({
+  default: () => <span data-status-indicator="true" />
+}))
+
+vi.mock('@/components/repo/RepoBadgeLabel', () => ({
+  RepoBadgeMark: () => <span data-repo-badge-mark="true" />
+}))
+
+vi.mock('@/components/cmd-j/palette-host-badge', () => ({
+  getPaletteHostBadge: () => null
+}))
+
+vi.mock('@/components/ui/command', async () => {
+  const React = await import('react')
+  return {
+    Command: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
+    CommandGroup: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
+    CommandDialog: ({
+      children,
+      open,
+      commandProps,
+      onOpenChange
+    }: {
+      children: React.ReactNode
+      open?: boolean
+      commandProps?: { value?: string; onValueChange?: (next: string) => void }
+      onOpenChange?: (open: boolean) => void
+    }) => {
+      requestCommandDialogClose = () => onOpenChange?.(false)
+      return open ? (
+        <div data-command-dialog="true" data-command-value={commandProps?.value ?? ''}>
+          {children}
+        </div>
+      ) : null
+    },
+    CommandInput: ({
+      value,
+      onValueChange
+    }: {
+      value?: string
+      onValueChange?: (next: string) => void
+    }) => {
+      setCommandQuery = onValueChange ?? null
+      return (
+        <input
+          data-command-input="true"
+          value={value}
+          onChange={(event) => onValueChange?.(event.currentTarget.value)}
+        />
+      )
+    },
+    CommandList: React.forwardRef(function CommandList(
+      { children }: { children: React.ReactNode },
+      ref: React.ForwardedRef<HTMLDivElement>
+    ) {
+      return (
+        <div ref={ref} data-command-list="true">
+          {children}
+        </div>
+      )
+    }),
+    CommandEmpty: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
+    CommandItem: ({
+      children,
+      onSelect,
+      value,
+      ...props
+    }: {
+      children: React.ReactNode
+      onSelect?: (value: string) => void
+      value?: string
+    } & Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onSelect' | 'value'>) => (
+      <button
+        {...props}
+        data-command-item={value ?? ''}
+        onClick={() => onSelect?.(value ?? '')}
+        type="button"
+      >
+        {children}
+      </button>
+    )
+  }
+})
+
+const LINEAR_URL = 'https://linear.app/stably/issue/STA-4084/restore-osc-133-shell-integration'
+const initialAppState = useAppStore.getInitialState()
+let testRoot: Root
+let testContainer: HTMLDivElement
+let setCommandQuery: ((next: string) => void) | null = null
+let requestCommandDialogClose: (() => void) | null = null
+
+function makeLinearIssue(patch: Partial<LinearIssue> = {}): LinearIssue {
+  return {
+    id: 'issue-sta-4084',
+    workspaceId: 'linear-workspace-1',
+    workspaceName: 'Stably',
+    identifier: 'STA-4084',
+    title: 'Restore OSC 133 shell integration',
+    branchName: 'sta-4084-restore-osc-133-shell-integration',
+    url: LINEAR_URL,
+    state: { name: 'Todo', type: 'unstarted', color: '#999999' },
+    team: { id: 'team-sta', name: 'Stably', key: 'STA' },
+    labels: [],
+    labelIds: [],
+    estimate: null,
+    priority: 2,
+    updatedAt: '2026-08-12T12:00:00.000Z',
+    ...patch
+  }
+}
+
+function deferredValue<T>(): { promise: Promise<T>; resolve: (value: T) => void } {
+  let resolve!: (value: T) => void
+  return {
+    promise: new Promise<T>((next) => {
+      resolve = next
+    }),
+    resolve
+  }
+}
+
+async function flushEffects(): Promise<void> {
+  await act(async () => {
+    await Promise.resolve()
+    await Promise.resolve()
+  })
+}
+
+async function renderPalette(overrides: Partial<AppState>): Promise<void> {
+  useAppStore.setState({
+    activeModal: 'worktree-palette',
+    activeWorktreeId: null,
+    repos: [makeRepo()],
+    tabsByWorktree: {},
+    browserTabsByWorktree: {},
+    browserPagesByWorkspace: {},
+    unifiedTabsByWorktree: {},
+    hideDefaultBranchWorkspace: false,
+    hideAutomationGeneratedWorkspaces: false,
+    alwaysShowDefaultBranchWorkspace: true,
+    lastVisitedAtByWorktreeId: {},
+    linearStatus: {
+      connected: true,
+      viewer: null,
+      workspaces: [
+        {
+          id: 'linear-workspace-1',
+          displayName: 'Linear User',
+          email: null,
+          organizationId: 'linear-organization-1',
+          organizationName: 'Stably',
+          organizationUrlKey: 'stably'
+        }
+      ],
+      selectedWorkspaceId: 'all'
+    },
+    ...makeRecentTabState(),
+    ...overrides
+  } as Partial<AppState>)
+
+  await act(async () => {
+    testRoot.render(<WorktreeJumpPalette />)
+  })
+  await flushEffects()
+}
+
+function getRenderedRowIds(): string[] {
+  return [...testContainer.querySelectorAll<HTMLElement>('[data-command-item]')].map(
+    (node) => node.dataset.commandItem ?? ''
+  )
+}
+
+function getCommandValue(): string {
+  return (
+    testContainer.querySelector<HTMLElement>('[data-command-dialog]')?.dataset.commandValue ?? ''
+  )
+}
+
+describe('WorktreeJumpPalette Linear URL intent', () => {
+  beforeEach(() => {
+    globalThis.IS_REACT_ACT_ENVIRONMENT = true
+    setCommandQuery = null
+    requestCommandDialogClose = null
+    lookupCmdJGitHubUrlWorkItem.mockReset()
+    lookupCmdJGitHubUrlWorkItem.mockResolvedValue(null)
+    useAppStore.setState(initialAppState, true)
+    testContainer = document.createElement('div')
+    document.body.appendChild(testContainer)
+    testRoot = createRoot(testContainer)
+  })
+
+  afterEach(async () => {
+    await act(async () => {
+      testRoot.unmount()
+    })
+    vi.useRealTimers()
+    document.body.replaceChildren()
+    useAppStore.setState(initialAppState, true)
+  })
+
+  it('delays loading feedback before replacing the pending row with an issue preview', async () => {
+    const issueLookup = deferredValue<LinearIssue | null>()
+    const fetchLinearIssue = vi.fn(() => issueLookup.promise)
+    await renderPalette({
+      fetchLinearIssue,
+      linearStatus: {
+        connected: true,
+        viewer: null,
+        workspaces: [
+          {
+            id: 'linear-workspace-1',
+            displayName: 'Linear User',
+            email: null,
+            organizationId: 'linear-organization-1',
+            organizationName: 'Stably',
+            organizationUrlKey: 'stably'
+          }
+        ],
+        selectedWorkspaceId: 'all'
+      }
+    })
+
+    vi.useFakeTimers()
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    const pendingRow = testContainer.querySelector<HTMLElement>(
+      '[data-cmd-j-linear-issue-preview="true"]'
+    )
+    expect(getRenderedRowIds().find(Boolean)).toBe('__create_worktree__')
+    expect(getCommandValue()).toBe('__create_worktree__')
+    expect(pendingRow?.dataset.cmdJLinearIssueState).toBe('loading')
+    expect(pendingRow?.getAttribute('aria-busy')).toBe('true')
+    expect(pendingRow?.getAttribute('aria-label')).toBe(
+      'Create worktree from Linear issue STA-4084'
+    )
+    expect(pendingRow?.textContent).toContain('Create worktree from Linear issue')
+    expect(pendingRow?.textContent).not.toContain('Loading Linear issue…')
+    expect(fetchLinearIssue).toHaveBeenCalledWith(
+      'STA-4084',
+      'linear-workspace-1',
+      expect.objectContaining({
+        sourceContext: expect.objectContaining({
+          provider: 'linear',
+          projectId: 'repo:repo-1',
+          projectHostSetupId: 'repo-1',
+          repoId: 'repo-1',
+          hostId: 'local'
+        })
+      })
+    )
+
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(199)
+    })
+    expect(pendingRow?.textContent).not.toContain('Loading Linear issue…')
+
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(1)
+    })
+    expect(pendingRow?.getAttribute('aria-label')).toBe('Loading Linear issue STA-4084')
+    expect(pendingRow?.textContent).toContain('Loading Linear issue…')
+
+    await act(async () => {
+      issueLookup.resolve(makeLinearIssue())
+      await issueLookup.promise
+    })
+    await flushEffects()
+
+    const resolvedRow = testContainer.querySelector<HTMLElement>(
+      '[data-cmd-j-linear-issue-preview="true"]'
+    )
+    expect(resolvedRow?.dataset.cmdJLinearIssueState).toBe('resolved')
+    expect(resolvedRow?.textContent).toContain('STA-4084')
+    expect(resolvedRow?.textContent).toContain('Restore OSC 133 shell integration')
+    expect(getRenderedRowIds().find(Boolean)).toBe('__create_worktree__')
+    expect(getCommandValue()).toBe('__create_worktree__')
+  })
+
+  it('rejects oversized Linear URLs before lookup or create-row rendering', async () => {
+    const fetchLinearIssue = vi.fn(async () => makeLinearIssue())
+    await renderPalette({ fetchLinearIssue })
+
+    await act(async () =>
+      setCommandQuery?.(`${LINEAR_URL}/${'a'.repeat(WORKTREE_PALETTE_QUERY_MAX_BYTES)}`)
+    )
+    await flushEffects()
+
+    expect(fetchLinearIssue).not.toHaveBeenCalled()
+    expect(getRenderedRowIds()).not.toContain('__create_worktree__')
+    expect(testContainer.querySelector('[data-cmd-j-linear-issue-preview="true"]')).toBeNull()
+  })
+
+  it('opens the composer with the resolved issue and generated workspace name', async () => {
+    await renderPalette({
+      fetchLinearIssue: vi.fn(async () => makeLinearIssue()),
+      prefetchWorktreeCreateBase: vi.fn(async () => {})
+    })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    await act(async () => {
+      testContainer.querySelector<HTMLElement>('[data-command-item="__create_worktree__"]')?.click()
+      await Promise.resolve()
+    })
+    await flushEffects()
+
+    expect(useAppStore.getState().activeModal).toBe('new-workspace-composer')
+    expect(useAppStore.getState().modalData).toMatchObject({
+      prefilledName: 'sta-4084-restore-osc-133-shell-integration',
+      initialRepoId: 'repo-1',
+      telemetrySource: 'command_palette',
+      linkedWorkItem: {
+        provider: 'linear',
+        type: 'issue',
+        linearIdentifier: 'STA-4084',
+        linearWorkspaceId: 'linear-workspace-1',
+        title: 'Restore OSC 133 shell integration'
+      },
+      taskSourceContext: {
+        provider: 'linear',
+        projectId: 'repo:repo-1',
+        projectHostSetupId: 'repo-1',
+        repoId: 'repo-1',
+        hostId: 'local',
+        providerIdentity: {
+          provider: 'linear',
+          workspaceId: 'linear-workspace-1',
+          workspaceName: 'Stably',
+          teamId: 'team-sta',
+          teamKey: 'STA'
+        }
+      }
+    })
+  })
+
+  it('keeps runtime folder projects as the Linear lookup and composer owner', async () => {
+    const folderRepo: Repo = {
+      ...makeRepo(),
+      id: 'folder-repo',
+      kind: 'folder' as const,
+      executionHostId: 'runtime:folder-env'
+    }
+    const fetchLinearIssue = vi.fn(async () => makeLinearIssue())
+    const prefetchWorktreeCreateBase = vi.fn(async () => {})
+    await renderPalette({
+      activeRepoId: folderRepo.id,
+      repos: [folderRepo],
+      fetchLinearIssue,
+      prefetchWorktreeCreateBase
+    })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    expect(fetchLinearIssue).toHaveBeenCalledWith(
+      'STA-4084',
+      'linear-workspace-1',
+      expect.objectContaining({
+        sourceContext: expect.objectContaining({
+          provider: 'linear',
+          projectId: 'repo:folder-repo',
+          projectHostSetupId: 'folder-repo',
+          repoId: 'folder-repo',
+          hostId: 'runtime:folder-env'
+        })
+      })
+    )
+
+    await act(async () => {
+      testContainer.querySelector<HTMLElement>('[data-command-item="__create_worktree__"]')?.click()
+      await Promise.resolve()
+    })
+    await flushEffects()
+
+    expect(useAppStore.getState().modalData).toMatchObject({
+      initialRepoId: 'folder-repo',
+      taskSourceContext: {
+        provider: 'linear',
+        projectId: 'repo:folder-repo',
+        projectHostSetupId: 'folder-repo',
+        repoId: 'folder-repo',
+        hostId: 'runtime:folder-env'
+      }
+    })
+    const projection = projectHostSetupProjectionFromRepos([folderRepo])
+    expect(
+      resolveWorkspaceCreationTarget({
+        eligibleRepos: [folderRepo],
+        projects: projection.projects,
+        projectHostSetups: projection.setups,
+        initialRepoId: 'folder-repo',
+        projectId: 'repo:folder-repo',
+        hostId: 'runtime:folder-env',
+        projectHostSetupId: 'folder-repo'
+      })
+    ).toMatchObject({ status: 'ready', target: { repoId: 'folder-repo' } })
+    expect(prefetchWorktreeCreateBase).not.toHaveBeenCalled()
+  })
+
+  it('maps a runtime-owned active repo to its eligible project sibling', async () => {
+    const unrelatedRepo = { ...makeRepo(), id: 'unrelated-repo' }
+    const localSibling = {
+      ...makeRepo(),
+      id: 'local-sibling',
+      upstream: { owner: 'stablyai', repo: 'orca' }
+    }
+    const runtimeOwnedRepo = {
+      ...makeRepo(),
+      id: 'runtime-owned',
+      connectionId: 'runtime-ssh-workspace-1',
+      upstream: { owner: 'stablyai', repo: 'orca' }
+    }
+    const fetchLinearIssue = vi.fn(async () => makeLinearIssue())
+    await renderPalette({
+      activeRepoId: runtimeOwnedRepo.id,
+      repos: [unrelatedRepo, localSibling, runtimeOwnedRepo],
+      fetchLinearIssue
+    })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    expect(fetchLinearIssue).toHaveBeenCalledWith(
+      'STA-4084',
+      'linear-workspace-1',
+      expect.objectContaining({
+        sourceContext: expect.objectContaining({
+          projectId: 'github:stablyai/orca',
+          repoId: 'local-sibling'
+        })
+      })
+    )
+  })
+
+  it('does not open the composer after the palette closes during lookup', async () => {
+    const issueLookup = deferredValue<LinearIssue | null>()
+    await renderPalette({ fetchLinearIssue: vi.fn(() => issueLookup.promise) })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    await act(async () => {
+      testContainer.querySelector<HTMLElement>('[data-command-item="__create_worktree__"]')?.click()
+      useAppStore.getState().closeModal()
+    })
+    await act(async () => {
+      issueLookup.resolve(makeLinearIssue())
+      await issueLookup.promise
+    })
+    await flushEffects()
+
+    expect(useAppStore.getState().activeModal).toBe('none')
+  })
+
+  it('restores focus when a loading selection is abandoned', async () => {
+    const focusTarget = document.createElement('button')
+    document.body.appendChild(focusTarget)
+    focusTarget.focus()
+    const issueLookup = deferredValue<LinearIssue | null>()
+    await renderPalette({
+      activeWorktreeId: 'wt-alpha',
+      fetchLinearIssue: vi.fn(() => issueLookup.promise)
+    })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+    await act(async () => {
+      testContainer.querySelector<HTMLElement>('[data-command-item="__create_worktree__"]')?.click()
+    })
+    await act(async () => setCommandQuery?.('ordinary name'))
+    testContainer.querySelector<HTMLElement>('[data-command-input="true"]')?.focus()
+
+    await act(async () => requestCommandDialogClose?.())
+    await act(async () => {
+      issueLookup.resolve(makeLinearIssue())
+      await issueLookup.promise
+      await new Promise((resolve) => window.setTimeout(resolve, 50))
+    })
+
+    expect(document.activeElement).toBe(focusTarget)
+    expect(useAppStore.getState().activeModal).toBe('none')
+  })
+
+  it('awaits the live URL after replacing an already resolved URL', async () => {
+    const secondLookup = deferredValue<LinearIssue | null>()
+    await renderPalette({
+      fetchLinearIssue: vi.fn((identifier: string) =>
+        identifier === 'STA-4084' ? Promise.resolve(makeLinearIssue()) : secondLookup.promise
+      )
+    })
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+    await act(async () =>
+      setCommandQuery?.('https://linear.app/stably/issue/STA-4099/current-second-issue')
+    )
+    await flushEffects()
+
+    await act(async () => {
+      testContainer.querySelector<HTMLElement>('[data-command-item="__create_worktree__"]')?.click()
+    })
+    expect(useAppStore.getState().activeModal).toBe('worktree-palette')
+
+    await act(async () => {
+      secondLookup.resolve(
+        makeLinearIssue({
+          id: 'issue-sta-4099',
+          identifier: 'STA-4099',
+          title: 'Current second issue',
+          url: 'https://linear.app/stably/issue/STA-4099/current-second-issue'
+        })
+      )
+      await secondLookup.promise
+    })
+    await flushEffects()
+
+    expect(useAppStore.getState().modalData).toMatchObject({
+      linkedWorkItem: { linearIdentifier: 'STA-4099', title: 'Current second issue' }
+    })
+  })
+
+  it('does not let a stale lookup replace a newer URL preview', async () => {
+    const firstLookup = deferredValue<LinearIssue | null>()
+    const secondLookup = deferredValue<LinearIssue | null>()
+    await renderPalette({
+      fetchLinearIssue: vi.fn((identifier: string) =>
+        identifier === 'STA-4084' ? firstLookup.promise : secondLookup.promise
+      )
+    })
+
+    vi.useFakeTimers()
+    await act(async () => setCommandQuery?.('https://linear.app/stably/issue/STA-4084/first'))
+    await flushEffects()
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(200)
+    })
+    expect(testContainer.textContent).toContain('Loading Linear issue…')
+
+    await act(async () => {
+      flushSync(() => setCommandQuery?.('https://linear.app/stably/issue/STA-4099/second'))
+      const currentPendingRow = testContainer.querySelector<HTMLElement>(
+        '[data-cmd-j-linear-issue-preview="true"]'
+      )
+      expect(currentPendingRow?.getAttribute('aria-label')).toBe(
+        'Create worktree from Linear issue STA-4099'
+      )
+      expect(currentPendingRow?.textContent).toContain('Create worktree from Linear issue')
+      expect(currentPendingRow?.textContent).not.toContain('Loading Linear issue…')
+    })
+    await flushEffects()
+
+    await act(async () => {
+      firstLookup.resolve(makeLinearIssue({ title: 'Stale first issue' }))
+      await firstLookup.promise
+    })
+    await flushEffects()
+
+    expect(testContainer.textContent).toContain('STA-4099')
+    expect(testContainer.textContent).not.toContain('Stale first issue')
+
+    await act(async () => {
+      secondLookup.resolve(
+        makeLinearIssue({
+          id: 'issue-sta-4099',
+          identifier: 'STA-4099',
+          title: 'Current second issue',
+          url: 'https://linear.app/stably/issue/STA-4099/current-second-issue'
+        })
+      )
+      await secondLookup.promise
+    })
+    await flushEffects()
+
+    expect(testContainer.textContent).toContain('Current second issue')
+    expect(testContainer.textContent).not.toContain('Stale first issue')
+    expect(getCommandValue()).toBe('__create_worktree__')
+  })
+
+  it('selects an existing Linear-linked worktree and keeps create underneath', async () => {
+    const linked = makeWorktree('wt-linked', 'Linked Linear workspace', {
+      linkedLinearIssue: 'STA-4084',
+      linkedLinearIssueOrganizationUrlKey: 'stably'
+    })
+    const other = makeWorktree('wt-other', 'Unrelated workspace')
+    await renderPalette({
+      fetchLinearIssue: vi.fn(async () => makeLinearIssue()),
+      worktreesByRepo: { 'repo-1': [other, linked] }
+    })
+
+    await act(async () => setCommandQuery?.(LINEAR_URL))
+    await flushEffects()
+
+    expect(getRenderedRowIds().filter(Boolean)).toEqual([
+      'worktree:wt-linked',
+      '__create_worktree__'
+    ])
+    expect(getCommandValue()).toBe('worktree:wt-linked')
+    expect(testContainer.querySelector('[data-cmd-j-linear-issue-preview="true"]')).not.toBeNull()
+  })
+
+  it('resolves a pasted GitHub issue URL and opens create with the linked issue', async () => {
+    const githubIssueUrl = 'https://github.com/stablyai/orca/issues/14198'
+    const githubIssue = {
+      id: 'issue-14198',
+      type: 'issue',
+      number: 14198,
+      title: 'Agent terminals disappearing randomly',
+      state: 'open',
+      url: githubIssueUrl,
+      labels: [],
+      updatedAt: '2026-08-12T12:00:00.000Z',
+      author: 'nwparker',
+      repoId: 'repo-1'
+    } satisfies GitHubWorkItem
+    lookupCmdJGitHubUrlWorkItem.mockResolvedValue(githubIssue)
+    await renderPalette({
+      prefetchWorktreeCreateBase: vi.fn(async () => {})
+    })
+
+    await act(async () => setCommandQuery?.(githubIssueUrl))
+    await flushEffects()
+
+    const preview = testContainer.querySelector<HTMLElement>('[data-cmd-j-task-url-preview="true"]')
+    expect(getRenderedRowIds().find(Boolean)).toBe('__create_worktree__')
+    expect(getCommandValue()).toBe('__create_worktree__')
+    expect(preview?.dataset.cmdJTaskUrlProvider).toBe('github')
+    expect(preview?.dataset.cmdJTaskUrlState).toBe('resolved')
+    expect(preview?.getAttribute('aria-label')).toBe(
+      'Create worktree from GitHub issue stablyai/orca#14198: Agent terminals disappearing randomly'
+    )
+    expect(preview?.textContent).toContain('#14198')
+    expect(preview?.textContent).toContain('Agent terminals disappearing randomly')
+    expect(lookupCmdJGitHubUrlWorkItem).toHaveBeenCalledWith(
+      expect.objectContaining({
+        link: expect.objectContaining({ type: 'issue', number: 14198 }),
+        repo: expect.objectContaining({ id: 'repo-1' })
+      })
+    )
+
+    await act(async () => {
+      preview?.click()
+      await Promise.resolve()
+    })
+    await flushEffects()
+
+    expect(useAppStore.getState().activeModal).toBe('new-workspace-composer')
+    expect(useAppStore.getState().modalData).toMatchObject({
+      prefilledName: 'agent-terminals-disappearing-randomly',
+      initialRepoId: 'repo-1',
+      telemetrySource: 'command_palette',
+      linkedWorkItem: {
+        provider: 'github',
+        type: 'issue',
+        number: 14198,
+        title: 'Agent terminals disappearing randomly',
+        url: githubIssueUrl,
+        repoId: 'repo-1'
+      },
+      initialGitHubWorkItem: githubIssue
+    })
+  })
+
+  it('previews a pasted GitHub pull URL', async () => {
+    await renderPalette({})
+    await act(async () => setCommandQuery?.('https://github.com/stablyai/orca/pull/12789'))
+    await flushEffects()
+
+    const preview = testContainer.querySelector<HTMLElement>('[data-cmd-j-task-url-preview="true"]')
+    expect(preview?.dataset.cmdJTaskUrlProvider).toBe('github')
+    expect(preview?.getAttribute('aria-label')).toBe(
+      'Create worktree from GitHub pull request stablyai/orca#12789'
+    )
+    expect(preview?.textContent).toContain('#12789')
+  })
+
+  it('selects an existing GitHub-linked worktree and keeps create underneath', async () => {
+    const linked = makeWorktree('wt-linked', 'Linked GitHub workspace', { linkedIssue: 14198 })
+    const other = makeWorktree('wt-other', 'Unrelated workspace', { linkedIssue: 7 })
+    await renderPalette({
+      repos: [{ ...makeRepo(), displayName: 'stablyai/orca' }],
+      worktreesByRepo: { 'repo-1': [other, linked] }
+    })
+
+    await act(async () => setCommandQuery?.('https://github.com/stablyai/orca/issues/14198'))
+    await flushEffects()
+
+    expect(getRenderedRowIds().filter(Boolean)).toEqual([
+      'worktree:wt-linked',
+      '__create_worktree__'
+    ])
+    expect(getCommandValue()).toBe('worktree:wt-linked')
+    expect(
+      testContainer.querySelector<HTMLElement>('[data-cmd-j-task-url-preview="true"]')?.dataset
+        .cmdJTaskUrlProvider
+    ).toBe('github')
+  })
+})
diff --git a/src/renderer/src/components/WorktreeJumpPalette.tsx b/src/renderer/src/components/WorktreeJumpPalette.tsx
index aaccdda3da7..f95bc25de5b 100644
--- a/src/renderer/src/components/WorktreeJumpPalette.tsx
+++ b/src/renderer/src/components/WorktreeJumpPalette.tsx
@@ -15,7 +15,6 @@ import {
   FileText,
   FolderTree,
   Globe,
-  Plus,
   Server,
   ServerOff,
   Smartphone,
@@ -175,23 +174,39 @@ import { resolvePaletteFocusRestoreTarget } from '@/components/cmd-j/palette-foc
 import { selectWorktreePaletteCacheInputs } from '@/components/cmd-j/worktree-palette-cache-inputs'
 import { getRepoHostIdentity } from '@/store/slices/repo-host-identity'
 import { buildPluginQuickActions } from '@/components/cmd-j/plugin-quick-actions'
+import { PaletteCreateWorktreeRow } from '@/components/cmd-j/PaletteCreateWorktreeRow'
 import { WorkspaceEmojiSuggestionPopover } from '@/components/workspace-emoji/WorkspaceEmojiSuggestionPopover'
 import { useWorkspaceEmojiShortcodeInput } from '@/components/workspace-emoji/useWorkspaceEmojiShortcodeInput'
 import { usePluginCommands } from '@/store/plugin-panels'
 import {
   getComposerEligibleRepos,
+  resolveComposerActiveRepoId,
   resolveComposerGitRepoId
 } from '@/lib/new-workspace-composer-repo'
+import { resolveWorkspaceCreationTarget } from '@/lib/project-host-workspace-target'
 import { lookupGitHubWorkItemForSource } from '@/lib/github-work-item-source-lookup'
+import { lookupCmdJGitHubUrlWorkItem } from '@/lib/cmd-j-github-url-lookup'
+import { buildLinearIssueLinkedWorkItem } from '@/lib/linear-linked-work-item'
+import { lookupLinearIssueUrl } from '@/lib/linear-issue-url-lookup'
+import {
+  getCmdJTaskUrlCreatePreview,
+  parseCmdJTaskSourceUrl,
+  withResolvedCmdJGitHubPreview
+} from '@/lib/worktree-palette-task-url-match'
 import type { SettingsNavTarget } from '@/lib/settings-navigation-types'
 import { getHostDisplayLabelOverrides } from '../../../shared/host-setting-overrides'
 import {
   getSettingsFocusedExecutionHostId,
   isRuntimeOwnedSshTargetId
 } from '../../../shared/execution-host'
-import type { TerminalTab, Worktree } from '../../../shared/types'
+import type { GitHubWorkItem, LinearIssue, TerminalTab, Worktree } from '../../../shared/types'
 import { isGitRepoKind } from '../../../shared/repo-kind'
-import { buildTaskSourceContextFromRepo } from '../../../shared/task-source-context'
+import {
+  buildTaskSourceContextFromRepo,
+  normalizeTaskSourceContext,
+  type TaskSourceContext
+} from '../../../shared/task-source-context'
+import { getLinearIssueWorkspaceName } from '../../../shared/workspace-name'
 import { translate } from '@/i18n/i18n'
 
 type WorktreePaletteItem = {
@@ -254,6 +269,22 @@ type CreateWorktreePaletteItem = {
   type: 'create-worktree'
 }
 
+type CmdJLinearIssuePreview = {
+  query: string
+  issue: LinearIssue | null
+  loading: boolean
+  initialRepoId: string | null
+  sourceContext: TaskSourceContext | null
+}
+
+type CmdJGitHubWorkItemPreview = {
+  query: string
+  item: GitHubWorkItem | null
+  loading: boolean
+  initialRepoId: string | null
+  sourceContext: TaskSourceContext | null
+}
+
 // Why: keep quick actions curated — Cmd+J is a fast intent surface, not a dump of every setup button.
 type PaletteItem =
   | WorktreePaletteItem
@@ -321,8 +352,8 @@ function shouldIncludeOpenTabInRecentSection({
   worktree: Worktree
   row: RecentWorkspaceTabRow
   paneSources: TabPaneInputSources
-  unreadTerminalTabs: Record<string, true | boolean | undefined>
-  unreadAgentCompletionPanes: Record<string, true | boolean | undefined>
+  unreadTerminalTabs: Record<string, boolean | undefined>
+  unreadAgentCompletionPanes: Record<string, boolean | undefined>
   now: number
 }): boolean {
   if (worktree.isArchived) {
@@ -374,14 +405,28 @@ function getComposerPrefetchRepoId(
   state: ReturnType<typeof useAppStore.getState>,
   initialRepoId?: string
 ): string | null {
+  const eligibleRepos = getComposerEligibleRepos(state.repos)
   return resolveComposerGitRepoId({
-    eligibleRepos: getComposerEligibleRepos(state.repos),
+    eligibleRepos,
     initialRepoId,
-    activeRepoId: state.activeRepoId,
+    activeRepoId: resolveComposerActiveRepoId(state.repos, eligibleRepos, state.activeRepoId),
     focusedHostScope: state.workspaceHostScope
   })
 }
 
+function getComposerDefaultWorkspaceTarget(state: ReturnType<typeof useAppStore.getState>) {
+  const eligibleRepos = getComposerEligibleRepos(state.repos)
+  const activeRepoId = resolveComposerActiveRepoId(state.repos, eligibleRepos, state.activeRepoId)
+  const resolution = resolveWorkspaceCreationTarget({
+    eligibleRepos,
+    projects: state.projects,
+    projectHostSetups: state.projectHostSetups,
+    activeRepoId,
+    focusedHostScope: state.workspaceHostScope
+  })
+  return resolution.status === 'ready' ? resolution.target : null
+}
+
 function appendPaletteListEntries(
   target: PaletteListEntry[],
   source: readonly PaletteItem[]
@@ -639,7 +684,29 @@ function WorktreeJumpPaletteContent({
 
   const [query, setQuery] = useState('')
   const deferredQuery = useDeferredValue(query)
+  const liveQueryRef = useRef(query)
+  liveQueryRef.current = query
+  const taskSourceUrl = useMemo(() => parseCmdJTaskSourceUrl(query), [query])
+  const linearIssueUrlIntent = taskSourceUrl?.provider === 'linear' ? taskSourceUrl.intent : null
+  const githubUrlLink = taskSourceUrl?.provider === 'github' ? taskSourceUrl.link : null
+  const parsedTaskUrlCreatePreview = useMemo(
+    () => (taskSourceUrl ? getCmdJTaskUrlCreatePreview(taskSourceUrl) : null),
+    [taskSourceUrl]
+  )
   const [selectedItemId, setSelectedItemId] = useState('')
+  const [linearIssuePreview, setLinearIssuePreview] = useState<CmdJLinearIssuePreview | null>(null)
+  const [githubWorkItemPreview, setGithubWorkItemPreview] =
+    useState<CmdJGitHubWorkItemPreview | null>(null)
+  const githubLookupGenerationRef = useRef(0)
+  const githubLookupRef = useRef<{
+    query: string
+    promise: Promise<CmdJGitHubWorkItemPreview>
+  } | null>(null)
+  const linearIssueLookupGenerationRef = useRef(0)
+  const linearIssueLookupRef = useRef<{
+    query: string
+    promise: Promise<CmdJLinearIssuePreview>
+  } | null>(null)
   // Why: the id cmdk auto-selected for the last committed list, so a late recent-order snapshot can
   // tell "nobody has moved the highlight yet" from "the user arrowed somewhere deliberately".
   const autoSelectedItemIdRef = useRef<string | null>(null)
@@ -743,7 +810,8 @@ function WorktreeJumpPaletteContent({
     [defaultHostId, projectGroups]
   )
 
-  const hasQuery = deferredQuery.trim().length > 0
+  const paletteSearchQuery = taskSourceUrl ? query.trim() : deferredQuery.trim()
+  const hasQuery = paletteSearchQuery.length > 0
   const isLoading = repos.length > 0 && Object.keys(worktreesByRepo).length === 0
 
   // Why: keep running-agent workspaces visible under "Hide sleeping" even when the live PTY is momentarily absent, matching sidebar. #7197
@@ -920,7 +988,7 @@ function WorktreeJumpPaletteContent({
     () =>
       searchWorktrees(
         sortedWorktrees,
-        deferredQuery.trim(),
+        paletteSearchQuery,
         repoMap,
         prCache,
         issueCache,
@@ -929,7 +997,7 @@ function WorktreeJumpPaletteContent({
       ),
     [
       sortedWorktrees,
-      deferredQuery,
+      paletteSearchQuery,
       repoMap,
       prCache,
       issueCache,
@@ -1480,23 +1548,37 @@ function WorktreeJumpPaletteContent({
   // Why: filtering via buildQuickActionContext() inside a memo with stable primitive deps
   // instead of calling it inline every render — a fresh context object as a useMemo dep
   // defeated the middleItems memo (new identity every keystroke).
+  const quickActionAvailabilityInputs = useMemo(
+    () => ({
+      activeView,
+      activeWorktreeId,
+      worktreesByRepo,
+      repos,
+      sshConnectionStates,
+      activeGroupIdByWorktree,
+      groupsByWorktree,
+      isLoading,
+      activeRuntimeEnvironmentId: settings?.activeRuntimeEnvironmentId,
+      runtimeStatusByEnvironmentId
+    }),
+    [
+      activeView,
+      activeWorktreeId,
+      worktreesByRepo,
+      repos,
+      sshConnectionStates,
+      activeGroupIdByWorktree,
+      groupsByWorktree,
+      isLoading,
+      settings?.activeRuntimeEnvironmentId,
+      runtimeStatusByEnvironmentId
+    ]
+  )
   const availableActionResults = useMemo(() => {
+    void quickActionAvailabilityInputs
     const ctx = buildQuickActionContext()
     return actionResults.filter((action) => action.isAvailable(ctx).available)
-  }, [
-    actionResults,
-    buildQuickActionContext,
-    // oxlint-disable-next-line react-hooks/exhaustive-deps -- these are the availability-determining primitives buildQuickActionContext reads from the store; listing them ensures the memo recomputes when availability actually changes, not on every render.
-    activeView,
-    activeWorktreeId,
-    worktreesByRepo,
-    repos,
-    sshConnectionStates,
-    activeGroupIdByWorktree,
-    groupsByWorktree,
-    isLoading,
-    settings?.activeRuntimeEnvironmentId
-  ])
+  }, [actionResults, buildQuickActionContext, quickActionAvailabilityInputs])
 
   const middleItems = useMemo<(SettingsPaletteItem | QuickActionPaletteItem)[]>(
     () =>
@@ -1599,7 +1681,10 @@ function WorktreeJumpPaletteContent({
   const digitShortcutModifiers =
     useShortcutKeyComboDetails(DIGIT_INDEX_ACTION_ID)[0]?.keys.slice(0, -1) ?? []
 
-  const { createWorktreeName, showCreateAction } = useMemo(
+  const {
+    createWorktreeName: deferredCreateWorktreeName,
+    showCreateAction: deferredShowCreateAction
+  } = useMemo(
     () =>
       getWorktreePaletteCreateActionState({
         canCreateWorktree,
@@ -1607,6 +1692,154 @@ function WorktreeJumpPaletteContent({
       }),
     [canCreateWorktree, deferredQuery]
   )
+  const createWorktreeName = taskSourceUrl ? query.trim() : deferredCreateWorktreeName
+  const showCreateAction = deferredShowCreateAction || taskSourceUrl !== null
+
+  // Why: arm the lookup before Enter can target the newly rendered Linear row.
+  useLayoutEffect(() => {
+    const generation = ++linearIssueLookupGenerationRef.current
+    linearIssueLookupRef.current = null
+    if (!visible || !linearIssueUrlIntent) {
+      setLinearIssuePreview(null)
+      return
+    }
+
+    const state = useAppStore.getState()
+    const workspaceTarget = getComposerDefaultWorkspaceTarget(state)
+    const initialRepoId = workspaceTarget?.repoId ?? null
+    const sourceContext = workspaceTarget
+      ? buildTaskSourceContextFromRepo({
+          provider: 'linear',
+          projectId: workspaceTarget.projectId,
+          repo: workspaceTarget.repo,
+          projectHostSetupId: workspaceTarget.projectHostSetupId
+        })
+      : null
+    const pendingPreview: CmdJLinearIssuePreview = {
+      query: createWorktreeName,
+      issue: null,
+      loading: true,
+      initialRepoId,
+      sourceContext
+    }
+    setLinearIssuePreview(pendingPreview)
+
+    const promise = lookupLinearIssueUrl({
+      intent: linearIssueUrlIntent,
+      knownStatus: state.linearStatus,
+      sourceContext,
+      fetchLinearIssue: state.fetchLinearIssue
+    })
+      .catch(() => null)
+      .then(
+        (issue): CmdJLinearIssuePreview => ({
+          ...pendingPreview,
+          issue,
+          loading: false
+        })
+      )
+    linearIssueLookupRef.current = { query: createWorktreeName, promise }
+    void promise.then((preview) => {
+      if (linearIssueLookupGenerationRef.current === generation) {
+        setLinearIssuePreview(preview)
+      }
+    })
+
+    return () => {
+      if (linearIssueLookupGenerationRef.current === generation) {
+        linearIssueLookupGenerationRef.current += 1
+      }
+    }
+  }, [createWorktreeName, linearIssueUrlIntent, visible])
+
+  useLayoutEffect(() => {
+    const generation = ++githubLookupGenerationRef.current
+    githubLookupRef.current = null
+    if (!visible || !githubUrlLink) {
+      setGithubWorkItemPreview(null)
+      return
+    }
+
+    const state = useAppStore.getState()
+    const workspaceTarget = getComposerDefaultWorkspaceTarget(state)
+    const initialRepoId = workspaceTarget?.repoId ?? null
+    const sourceContext = workspaceTarget
+      ? buildTaskSourceContextFromRepo({
+          provider: 'github',
+          projectId: workspaceTarget.projectId,
+          repo: workspaceTarget.repo,
+          projectHostSetupId: workspaceTarget.projectHostSetupId
+        })
+      : null
+    const pendingPreview: CmdJGitHubWorkItemPreview = {
+      query: createWorktreeName,
+      item: null,
+      loading: true,
+      initialRepoId,
+      sourceContext
+    }
+    setGithubWorkItemPreview(pendingPreview)
+
+    const promise = lookupCmdJGitHubUrlWorkItem({
+      link: githubUrlLink,
+      repo: workspaceTarget?.repo ?? null,
+      sourceContext
+    })
+      .catch(() => null)
+      .then(
+        (item): CmdJGitHubWorkItemPreview => ({
+          ...pendingPreview,
+          item: item ?? null,
+          loading: false
+        })
+      )
+    githubLookupRef.current = { query: createWorktreeName, promise }
+    void promise.then((preview) => {
+      if (githubLookupGenerationRef.current === generation) {
+        setGithubWorkItemPreview(preview)
+      }
+    })
+
+    return () => {
+      if (githubLookupGenerationRef.current === generation) {
+        githubLookupGenerationRef.current += 1
+      }
+    }
+  }, [createWorktreeName, githubUrlLink, visible])
+
+  const taskUrlCreatePreview = useMemo(() => {
+    if (!parsedTaskUrlCreatePreview) {
+      return null
+    }
+    const preview =
+      githubWorkItemPreview?.query === createWorktreeName ? githubWorkItemPreview : null
+    return withResolvedCmdJGitHubPreview(
+      parsedTaskUrlCreatePreview,
+      preview?.item?.title ?? null,
+      preview?.loading === true
+    )
+  }, [createWorktreeName, githubWorkItemPreview, parsedTaskUrlCreatePreview])
+
+  const currentGitHubWorkItemPreview =
+    githubWorkItemPreview?.query === createWorktreeName ? githubWorkItemPreview : null
+  const currentLinearIssuePreview =
+    linearIssuePreview?.query === createWorktreeName ? linearIssuePreview : null
+  const [linearLoadingFeedbackQuery, setLinearLoadingFeedbackQuery] = useState<string | null>(null)
+  useEffect(() => {
+    if (!currentLinearIssuePreview?.loading) {
+      setLinearLoadingFeedbackQuery(null)
+      return
+    }
+    setLinearLoadingFeedbackQuery(null)
+    const timer = window.setTimeout(
+      () => setLinearLoadingFeedbackQuery(currentLinearIssuePreview.query),
+      200
+    )
+    return () => window.clearTimeout(timer)
+  }, [currentLinearIssuePreview?.loading, currentLinearIssuePreview?.query])
+  const showLinearLoadingFeedback =
+    currentLinearIssuePreview?.loading === true &&
+    linearLoadingFeedbackQuery === currentLinearIssuePreview.query
 
   const listEntries = useMemo<PaletteListEntry[]>(() => {
     const entries: PaletteListEntry[] = []
@@ -1733,6 +1966,18 @@ function WorktreeJumpPaletteContent({
       }
     }
 
+    // Why: a pasted issue/PR URL is decisive. Show linked worktrees first so
+    // Enter jumps; keep create available underneath when the user wants a new one.
+    if (taskSourceUrl) {
+      if (visibleWorktreeItems.length > 0) {
+        pushWorktreeSection()
+      }
+      if (showCreateAction) {
+        entries.push({ id: CREATE_WORKTREE_ITEM_ID, type: 'create-worktree' })
+      }
+      return entries
+    }
+
     if (!hasQuery) {
       // Why: the recent section leads the empty-query view; nothing else in this branch is populated.
       pushOpenTabSection()
@@ -1809,7 +2054,14 @@ function WorktreeJumpPaletteContent({
       entries.push({ id: CREATE_WORKTREE_ITEM_ID, type: 'create-worktree' })
     }
     return entries
-  }, [hasQuery, openTabsLeadSections, paletteSections, showCreateAction, worktreeItems.length])
+  }, [
+    hasQuery,
+    openTabsLeadSections,
+    paletteSections,
+    showCreateAction,
+    taskSourceUrl,
+    worktreeItems.length
+  ])
 
   // Why derive from listEntries: multi-primary interleave must stay identical for
   // empty-state counts and keyboard selection — dual-path builders drifted before.
@@ -2248,12 +2500,15 @@ function WorktreeJumpPaletteContent({
   }, [handleSelectItem, hasQuery, query.length, visible])
 
   const handleCreateWorktree = useCallback(() => {
-    skipRestoreFocusRef.current = true
     const trimmed = createWorktreeName.trim()
+    if (liveQueryRef.current.trim() !== trimmed) {
+      return
+    }
     const ghLink = parseGitHubIssueOrPRLink(trimmed)
     const ghNumber = parseGitHubIssueOrPRNumber(trimmed)
 
     const openComposer = (data: Record<string, unknown>): void => {
+      skipRestoreFocusRef.current = true
       prefetchCreateWorkspaceBaseForComposer(
         typeof data.initialRepoId === 'string' ? data.initialRepoId : undefined
       )
@@ -2265,28 +2520,107 @@ function WorktreeJumpPaletteContent({
       )
     }
 
-    // Case 1: user pasted a GH issue/PR URL.
-    if (ghLink) {
-      const { number } = ghLink
-      const state = useAppStore.getState()
-
-      // Why: the existing-worktree check only needs the issue/PR number (repo-agnostic in worktree meta).
-      const matches = allWorktrees.filter(
-        (w) => !w.isArchived && (w.linkedIssue === number || w.linkedPR === number)
-      )
-      const activeMatch = matches.find((w) => w.repoId === state.activeRepoId) ?? matches[0]
-      if (activeMatch) {
-        closeModal()
-        // Why: #9939 — jumping to an already-open workspace must focus its own terminal.
-        const activation = activateAndRevealWorktree(activeMatch.id)
-        if (!queueWorkspaceActivationTerminalFocus(activeMatch.id, activation)) {
-          focusFallbackSurface()
+    if (linearIssueUrlIntent) {
+      const openLinearIssueComposer = async (): Promise<void> => {
+        const lookup = linearIssueLookupRef.current
+        const preview = currentLinearIssuePreview?.loading
+          ? await lookup?.promise
+          : (currentLinearIssuePreview ?? (await lookup?.promise))
+        if (
+          lookup?.query !== trimmed ||
+          linearIssueLookupRef.current !== lookup ||
+          liveQueryRef.current.trim() !== trimmed
+        ) {
+          return
         }
-        recordFeatureInteraction('cmd-j-workspace-open')
-        return
-      }
+        const composerData = preview?.issue
+          ? (() => {
+              const taskSourceContext = preview.sourceContext
+                ? normalizeTaskSourceContext({
+                    ...preview.sourceContext,
+                    providerIdentity: {
+                      provider: 'linear',
+                      workspaceId: preview.issue.workspaceId ?? null,
+                      workspaceName: preview.issue.workspaceName ?? null,
+                      teamId: preview.issue.team.id,
+                      teamKey: preview.issue.team.key
+                    },
+                    accountLabel: preview.issue.workspaceName ?? null
+                  })
+                : null
+              return {
+                prefilledName: getLinearIssueWorkspaceName(preview.issue),
+                linkedWorkItem: buildLinearIssueLinkedWorkItem(preview.issue),
+                ...(preview.initialRepoId ? { initialRepoId: preview.initialRepoId } : {}),
+                ...(taskSourceContext ? { taskSourceContext } : {})
+              }
+            })()
+          : preview?.initialRepoId
+            ? { prefilledName: trimmed, initialRepoId: preview.initialRepoId }
+            : { prefilledName: trimmed }
 
-      // Why: hand the raw URL to the composer so it runs Cmd+N cross-project detection; pre-resolving here silently linked to the wrong project.
+        if (useAppStore.getState().activeModal !== 'worktree-palette') {
+          return
+        }
+        openComposer(composerData)
+      }
+      void openLinearIssueComposer()
+      return
+    }
+
+    // Case 1: user pasted a GH/GitLab/Jira URL.
+    // Why: GitHub uses the in-flight Cmd+J preview so Enter attaches the issue/PR
+    // entity. GitLab/Jira still hand the raw URL to the composer. Linked worktrees
+    // are listed above this row — selecting one jumps there.
+    if (ghLink) {
+      const openGitHubUrlComposer = async (): Promise<void> => {
+        const lookup = githubLookupRef.current
+        const preview = currentGitHubWorkItemPreview?.loading
+          ? await lookup?.promise
+          : (currentGitHubWorkItemPreview ?? (await lookup?.promise))
+        if (
+          lookup?.query !== trimmed ||
+          githubLookupRef.current !== lookup ||
+          liveQueryRef.current.trim() !== trimmed
+        ) {
+          return
+        }
+        const item = preview?.item ?? null
+        const composerData = item
+          ? (() => {
+              const linkedWorkItem: LinkedWorkItemSummary = {
+                provider: 'github',
+                type: item.type,
+                number: item.number,
+                title: item.title,
+                url: item.url,
+                ...(item.repoId ? { repoId: item.repoId } : {})
+              }
+              return {
+                prefilledName:
+                  getLinkedWorkItemWorkspaceName(linkedWorkItem)?.seedName ??
+                  getLinkedWorkItemSuggestedName({ title: item.title }),
+                linkedWorkItem,
+                initialGitHubWorkItem: item,
+                ...(preview?.initialRepoId ? { initialRepoId: preview.initialRepoId } : {}),
+                ...(preview?.sourceContext ? { taskSourceContext: preview.sourceContext } : {})
+              }
+            })()
+          : preview?.initialRepoId
+            ? { prefilledName: trimmed, initialRepoId: preview.initialRepoId }
+            : { prefilledName: trimmed }
+
+        if (useAppStore.getState().activeModal !== 'worktree-palette') {
+          return
+        }
+        openComposer(composerData)
+      }
+      void openGitHubUrlComposer()
+      return
+    }
+
+    if (taskUrlCreatePreview) {
+      const state = useAppStore.getState()
       const eligibleRepos = state.repos.filter((r) => isGitRepoKind(r))
       const repoForLookup =
         (state.activeRepoId && eligibleRepos.find((r) => r.id === state.activeRepoId)) ||
@@ -2307,6 +2641,7 @@ function WorktreeJumpPaletteContent({
       )
       const activeMatch = matches.find((w) => w.repoId === state.activeRepoId) ?? matches[0]
       if (activeMatch) {
+        skipRestoreFocusRef.current = true
         closeModal()
         // Why: #9939 — jumping to an already-open workspace must focus its own terminal.
         const activation = activateAndRevealWorktree(activeMatch.id)
@@ -2333,6 +2668,7 @@ function WorktreeJumpPaletteContent({
       })
       const lookupToken = createLookupGuard.start()
       preserveCreateLookupOnCloseRef.current = true
+      skipRestoreFocusRef.current = true
       recordFeatureInteraction('cmd-j-create-workspace')
       closeModal()
       void lookupGitHubWorkItemForSource({
@@ -2386,8 +2722,12 @@ function WorktreeJumpPaletteContent({
     closeModal,
     createLookupGuard,
     createWorktreeName,
+    currentGitHubWorkItemPreview,
+    currentLinearIssuePreview,
     focusFallbackSurface,
+    linearIssueUrlIntent,
     openModal,
+    taskUrlCreatePreview,
     prefetchCreateWorkspaceBaseForComposer,
     recordFeatureInteraction,
     repoMap
@@ -2589,26 +2929,21 @@ function WorktreeJumpPaletteContent({
               }
 
               if (entry.type === 'create-worktree') {
+                const linearPreviewIssue = currentLinearIssuePreview?.issue ?? null
+                const linearPreviewLoading =
+                  linearIssueUrlIntent !== null && currentLinearIssuePreview?.loading !== false
                 return (
-                  <CommandItem
+                  <PaletteCreateWorktreeRow
                     key={entry.id}
-                    value={CREATE_WORKTREE_ITEM_ID}
-                    onSelect={handleCreateWorktree}
                     className={cn(JUMP_PALETTE_ITEM_CLASSNAME, 'mt-1 py-1.5')}
-                  >
-                    <div className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full border border-dashed border-border/60 bg-muted/25 text-muted-foreground/70">
-                      <Plus size={13} aria-hidden="true" />
-                    </div>
-                    <div className="min-w-0 flex-1">
-                      <div className="text-[14px] font-semibold tracking-[-0.01em] text-foreground">
-                        {translate(
-                          'auto.components.WorktreeJumpPalette.95be6587d3',
-                          'Create worktree "{{value0}}"',
-                          { value0: createWorktreeName }
-                        )}
-                      </div>
-                    </div>
-                  </CommandItem>
+                    createWorktreeName={createWorktreeName}
+                    linearIdentifier={linearIssueUrlIntent?.identifier ?? null}
+                    linearIssue={linearPreviewIssue}
+                    linearPending={linearPreviewLoading}
+                    showLinearLoadingFeedback={showLinearLoadingFeedback}
+                    taskUrlPreview={taskUrlCreatePreview}
+                    onSelect={handleCreateWorktree}
+                  />
                 )
               }
 
diff --git a/src/renderer/src/components/automations/AutomationEditorDialog.tsx b/src/renderer/src/components/automations/AutomationEditorDialog.tsx
index 90eb5a9df47..6ac0c7bc66c 100644
--- a/src/renderer/src/components/automations/AutomationEditorDialog.tsx
+++ b/src/renderer/src/components/automations/AutomationEditorDialog.tsx
@@ -62,7 +62,7 @@ type AutomationEditorDialogProps = {
   canSave: boolean
   createTarget: AutomationCreateTarget
   repos: readonly Repo[]
-  projectHostSetups: ProjectHostSetup[]
+  projectHostSetups: readonly ProjectHostSetup[]
   automationYamlHooksByRepoKey: Record<string, OrcaHooks | null>
   getAutomationHooksCacheKey: (repoId: string) => string
   repoMap: Map<string, Repo>
diff --git a/src/renderer/src/components/automations/AutomationEditorDialogFooter.tsx b/src/renderer/src/components/automations/AutomationEditorDialogFooter.tsx
index ff5a67cc41b..160dac72d8b 100644
--- a/src/renderer/src/components/automations/AutomationEditorDialogFooter.tsx
+++ b/src/renderer/src/components/automations/AutomationEditorDialogFooter.tsx
@@ -32,7 +32,7 @@ type AutomationEditorDialogFooterProps = {
   isSaving: boolean
   canSave: boolean
   repos: readonly Repo[]
-  projectHostSetups: ProjectHostSetup[]
+  projectHostSetups: readonly ProjectHostSetup[]
   automationYamlHooksByRepoKey: Record<string, OrcaHooks | null>
   getAutomationHooksCacheKey: (repoId: string) => string
   repoMap: Map<string, Repo>
diff --git a/src/renderer/src/components/automations/AutomationListExternalRows.tsx b/src/renderer/src/components/automations/AutomationListExternalRows.tsx
index 25a9f137397..8cd712b09c2 100644
--- a/src/renderer/src/components/automations/AutomationListExternalRows.tsx
+++ b/src/renderer/src/components/automations/AutomationListExternalRows.tsx
@@ -36,6 +36,8 @@ import {
   AUTOMATIONS_TABLE_ROW_SELECTED_CLASS
 } from './automations-table-layout'
 import { isPortaledRowMenuClick, isRowActivationKey } from './automation-list-row-interaction'
+import { getExternalAutomationLastRunSnapshot } from './automation-list-last-run'
+import { AutomationListLastRunCell } from './AutomationListLastRunCell'
 import { AutomationListStatusCell } from './AutomationListStatusCell'
 import { translate } from '@/i18n/i18n'
 
@@ -85,6 +87,7 @@ export function AutomationListExternalRows({
         const nextRunLabel = entry.job.enabled
           ? formatExternalDate(entry.job.nextRunAt, relativeNow)
           : translate('auto.components.automations.AutomationsPage.paused', 'Paused')
+        const lastRunSnapshot = getExternalAutomationLastRunSnapshot(entry.job)
 
         return (
           <ContextMenu key={entry.key}>
@@ -124,6 +127,7 @@ export function AutomationListExternalRows({
                 <span className="min-w-0 truncate text-muted-foreground" title={nextRunLabel}>
                   {nextRunLabel}
                 </span>
+                <AutomationListLastRunCell snapshot={lastRunSnapshot} now={relativeNow} />
                 <AutomationListStatusCell enabled={entry.job.enabled} />
                 <span className="truncate text-center text-xs text-muted-foreground">
                   {providerLabel}
diff --git a/src/renderer/src/components/automations/AutomationListFilterMenu.tsx b/src/renderer/src/components/automations/AutomationListFilterMenu.tsx
new file mode 100644
index 00000000000..54efbc819a0
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationListFilterMenu.tsx
@@ -0,0 +1,192 @@
+import React from 'react'
+import { ListFilter, X } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger
+} from '@/components/ui/dropdown-menu'
+import { translate } from '@/i18n/i18n'
+import {
+  countAutomationListFilters,
+  EMPTY_AUTOMATION_LIST_FILTER,
+  type AutomationListFilter,
+  type AutomationListLastRunFilter,
+  type AutomationListStatusFilter
+} from './automation-list-view'
+
+function FilterPill({
+  label,
+  value,
+  onClear
+}: {
+  label: string
+  value: string
+  onClear: () => void
+}): React.JSX.Element {
+  return (
+    <span className="inline-flex h-6 items-center gap-1 rounded-full border border-border/60 bg-muted/50 pl-2 pr-1 text-[11px] text-foreground">
+      <span className="text-muted-foreground">{label}:</span>
+      <span className="max-w-[140px] truncate font-medium">{value}</span>
+      <button
+        type="button"
+        aria-label={translate(
+          'auto.components.automations.AutomationListFilterMenu.removeFilter',
+          'Remove {{value0}} filter',
+          { value0: label }
+        )}
+        onClick={onClear}
+        className="rounded-full p-0.5 text-muted-foreground transition hover:bg-muted hover:text-foreground"
+      >
+        <X className="size-3" />
+      </button>
+    </span>
+  )
+}
+
+export function AutomationListFilterPills({
+  filter,
+  onChange
+}: {
+  filter: AutomationListFilter
+  onChange: (next: AutomationListFilter) => void
+}): React.JSX.Element | null {
+  const statusLabel = translate('auto.components.automations.AutomationsPage.tableStatus', 'Status')
+  const lastRunLabel = translate(
+    'auto.components.automations.AutomationsPage.tableLastRun',
+    'Last run'
+  )
+  const statusValueLabel =
+    filter.status === 'enabled'
+      ? translate('auto.components.automations.AutomationDetail.eaa02014f8', 'Enabled')
+      : filter.status === 'paused'
+        ? translate('auto.components.automations.AutomationDetail.b09b2384fd', 'Paused')
+        : null
+  const lastRunValueLabel =
+    filter.lastRun === 'failed'
+      ? translate('auto.components.automations.AutomationListFilterMenu.failed', 'Failed')
+      : filter.lastRun === 'succeeded'
+        ? translate('auto.components.automations.AutomationListFilterMenu.succeeded', 'Succeeded')
+        : filter.lastRun === 'never'
+          ? translate('auto.components.automations.AutomationListFilterMenu.neverRan', 'Never ran')
+          : null
+  if (!statusValueLabel && !lastRunValueLabel) {
+    return null
+  }
+  return (
+    <>
+      {statusValueLabel ? (
+        <FilterPill
+          label={statusLabel}
+          value={statusValueLabel}
+          onClear={() => onChange({ ...filter, status: 'all' })}
+        />
+      ) : null}
+      {lastRunValueLabel ? (
+        <FilterPill
+          label={lastRunLabel}
+          value={lastRunValueLabel}
+          onClear={() => onChange({ ...filter, lastRun: 'all' })}
+        />
+      ) : null}
+    </>
+  )
+}
+
+export function AutomationListFilterMenu({
+  filter,
+  onChange
+}: {
+  filter: AutomationListFilter
+  onChange: (next: AutomationListFilter) => void
+}): React.JSX.Element {
+  const activeCount = countAutomationListFilters(filter)
+  const statusLabel = translate('auto.components.automations.AutomationsPage.tableStatus', 'Status')
+  const lastRunLabel = translate(
+    'auto.components.automations.AutomationsPage.tableLastRun',
+    'Last run'
+  )
+
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button
+          type="button"
+          variant="ghost"
+          size="sm"
+          className="h-8 shrink-0 gap-1.5 border border-border bg-background px-2.5 text-xs shadow-none hover:bg-muted/50 focus-visible:border-ring/70 focus-visible:ring-0"
+        >
+          <ListFilter className="size-3.5" />
+          {translate('auto.components.automations.AutomationListFilterMenu.filters', 'Filters')}
+          {activeCount > 0 ? (
+            <span className="rounded-full bg-foreground px-1.5 text-[10px] font-semibold leading-4 text-background">
+              {activeCount}
+            </span>
+          ) : null}
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="start" className="w-48">
+        <DropdownMenuLabel>{statusLabel}</DropdownMenuLabel>
+        <DropdownMenuRadioGroup
+          value={filter.status}
+          onValueChange={(value) =>
+            onChange({ ...filter, status: value as AutomationListStatusFilter })
+          }
+        >
+          <DropdownMenuRadioItem value="all">
+            {translate('auto.components.automations.AutomationListFilterMenu.all', 'All')}
+          </DropdownMenuRadioItem>
+          <DropdownMenuRadioItem value="enabled">
+            {translate('auto.components.automations.AutomationDetail.eaa02014f8', 'Enabled')}
+          </DropdownMenuRadioItem>
+          <DropdownMenuRadioItem value="paused">
+            {translate('auto.components.automations.AutomationDetail.b09b2384fd', 'Paused')}
+          </DropdownMenuRadioItem>
+        </DropdownMenuRadioGroup>
+        <DropdownMenuSeparator />
+        <DropdownMenuLabel>{lastRunLabel}</DropdownMenuLabel>
+        <DropdownMenuRadioGroup
+          value={filter.lastRun}
+          onValueChange={(value) =>
+            onChange({ ...filter, lastRun: value as AutomationListLastRunFilter })
+          }
+        >
+          <DropdownMenuRadioItem value="all">
+            {translate('auto.components.automations.AutomationListFilterMenu.all', 'All')}
+          </DropdownMenuRadioItem>
+          <DropdownMenuRadioItem value="failed">
+            {translate('auto.components.automations.AutomationListFilterMenu.failed', 'Failed')}
+          </DropdownMenuRadioItem>
+          <DropdownMenuRadioItem value="succeeded">
+            {translate(
+              'auto.components.automations.AutomationListFilterMenu.succeeded',
+              'Succeeded'
+            )}
+          </DropdownMenuRadioItem>
+          <DropdownMenuRadioItem value="never">
+            {translate(
+              'auto.components.automations.AutomationListFilterMenu.neverRan',
+              'Never ran'
+            )}
+          </DropdownMenuRadioItem>
+        </DropdownMenuRadioGroup>
+        {activeCount > 0 ? (
+          <>
+            <DropdownMenuSeparator />
+            <DropdownMenuItem onSelect={() => onChange(EMPTY_AUTOMATION_LIST_FILTER)}>
+              {translate(
+                'auto.components.automations.AutomationListFilterMenu.clear',
+                'Clear filters'
+              )}
+            </DropdownMenuItem>
+          </>
+        ) : null}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationListLastRunCell.tsx b/src/renderer/src/components/automations/AutomationListLastRunCell.tsx
new file mode 100644
index 00000000000..6b5ddf42d9c
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationListLastRunCell.tsx
@@ -0,0 +1,37 @@
+import React from 'react'
+import { cn } from '@/lib/utils'
+import {
+  formatAutomationLastRunCell,
+  type AutomationLastRunSnapshot
+} from './automation-list-last-run'
+
+export function AutomationListLastRunCell({
+  snapshot,
+  now
+}: {
+  snapshot: AutomationLastRunSnapshot
+  now: number
+}): React.JSX.Element {
+  const cell = formatAutomationLastRunCell(snapshot, now)
+  const failed = cell.tone === 'failed'
+  return (
+    <span
+      className={cn(
+        'inline-flex min-w-0 items-center gap-1.5 truncate',
+        failed ? 'text-destructive' : 'text-muted-foreground'
+      )}
+      title={cell.title}
+    >
+      {cell.tone !== 'never' ? (
+        <span
+          className={cn(
+            'size-1.5 shrink-0 rounded-full',
+            failed ? 'bg-destructive' : 'bg-muted-foreground/70'
+          )}
+          aria-hidden="true"
+        />
+      ) : null}
+      <span className="truncate">{cell.text}</span>
+    </span>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationListLocalRows.test.tsx b/src/renderer/src/components/automations/AutomationListLocalRows.test.tsx
index b6c41db55af..221e0e45142 100644
--- a/src/renderer/src/components/automations/AutomationListLocalRows.test.tsx
+++ b/src/renderer/src/components/automations/AutomationListLocalRows.test.tsx
@@ -6,11 +6,13 @@ import userEvent from '@testing-library/user-event'
 import { afterEach, describe, expect, it, vi } from 'vitest'
 import type {
   Automation,
+  AutomationRun,
   ExternalAutomationJob,
   ExternalAutomationManager
 } from '../../../../shared/automations-types'
 import { AutomationListLocalRows } from './AutomationListLocalRows'
 import { AutomationListExternalRows } from './AutomationListExternalRows'
+import { indexLatestAutomationRuns } from './automation-list-last-run'
 
 // Why: Tooltip needs a provider in the app; stub so rows render standalone.
 vi.mock('@/components/ui/tooltip', () => ({
@@ -84,16 +86,42 @@ function makeExternalManager(): ExternalAutomationManager {
   }
 }
 
+function makeRun(overrides: Partial<AutomationRun> = {}): AutomationRun {
+  return {
+    id: 'run-1',
+    automationId: 'automation-1',
+    title: 'test',
+    scheduledFor: 1,
+    status: 'dispatch_failed',
+    trigger: 'scheduled',
+    workspaceId: 'worktree-1',
+    sessionKind: 'terminal',
+    chatSessionId: null,
+    terminalSessionId: null,
+    terminalPaneKey: null,
+    terminalPtyId: null,
+    outputSnapshot: null,
+    precheckResult: null,
+    usage: null,
+    error: 'boom',
+    startedAt: Date.now() - 8 * 60 * 60 * 1000,
+    dispatchedAt: Date.now() - 8 * 60 * 60 * 1000,
+    createdAt: Date.now() - 8 * 60 * 60 * 1000,
+    ...overrides
+  }
+}
+
 function renderLocalRows(handlers: {
   onSelect: (automationId: string) => void
   onDelete?: (automation: Automation) => void
+  runs?: AutomationRun[]
 }) {
   return render(
     <AutomationListLocalRows
       automations={[makeAutomation()]}
       selectedId={null}
       isSelectedLocal={true}
-      runs={[]}
+      lastRunByAutomationId={indexLatestAutomationRuns(handlers.runs ?? [])}
       relativeNow={Date.now()}
       repoMap={new Map()}
       worktreeMap={new Map()}
@@ -162,6 +190,11 @@ describe('Automation list row selection', () => {
     expect(onSelect).not.toHaveBeenCalled()
   })
 
+  it('shows last-run status and relative time', () => {
+    renderLocalRows({ onSelect: vi.fn(), runs: [makeRun()] })
+    expect(screen.getByText('Failed 8h ago')).toBeTruthy()
+  })
+
   it('still selects when the local row itself is clicked', async () => {
     const onSelect = vi.fn()
     const { container } = renderLocalRows({ onSelect })
diff --git a/src/renderer/src/components/automations/AutomationListLocalRows.tsx b/src/renderer/src/components/automations/AutomationListLocalRows.tsx
index 97ec2c7bb5f..93019241d63 100644
--- a/src/renderer/src/components/automations/AutomationListLocalRows.tsx
+++ b/src/renderer/src/components/automations/AutomationListLocalRows.tsx
@@ -31,6 +31,8 @@ import type { ProjectHostSetup, Repo, Worktree } from '../../../../shared/types'
 import type { RuntimeStatus } from '../../../../shared/runtime-types'
 import type { TaskSourceHostAvailability } from '../task-source-context-summary'
 import type { AutomationHostTarget } from './automation-host-client'
+import { getLocalAutomationLastRunSnapshot } from './automation-list-last-run'
+import { AutomationListLastRunCell } from './AutomationListLastRunCell'
 import { formatAutomationDateTimeWithRelative } from './automation-page-parts'
 import { getAutomationTargetAvailability } from './automation-target-availability'
 import { getAgentLabel } from './automation-draft-model'
@@ -48,7 +50,7 @@ export function AutomationListLocalRows({
   automations,
   selectedId,
   isSelectedLocal,
-  runs,
+  lastRunByAutomationId,
   relativeNow,
   repoMap,
   worktreeMap,
@@ -67,7 +69,7 @@ export function AutomationListLocalRows({
   automations: readonly Automation[]
   selectedId: string | null | undefined
   isSelectedLocal: boolean
-  runs: readonly AutomationRun[]
+  lastRunByAutomationId: ReadonlyMap<string, AutomationRun>
   relativeNow: number
   repoMap: ReadonlyMap<string, Repo>
   worktreeMap: ReadonlyMap<string, Worktree>
@@ -86,19 +88,6 @@ export function AutomationListLocalRows({
   onToggle: (automation: Automation) => void
   onDelete: (automation: Automation) => void
 }): React.JSX.Element {
-  // Why: one pass over runs instead of a full scan per rendered automation —
-  // this list re-renders on the relativeNow timer.
-  const lastRunByAutomationId = React.useMemo(() => {
-    const latest = new Map<string, AutomationRun>()
-    for (const run of runs) {
-      const existing = latest.get(run.automationId)
-      if (!existing || run.createdAt > existing.createdAt) {
-        latest.set(run.automationId, run)
-      }
-    }
-    return latest
-  }, [runs])
-
   return (
     <>
       {automations.map((automation) => {
@@ -132,6 +121,7 @@ export function AutomationListLocalRows({
           ? (hostLabelById.get(hostId) ?? getExecutionHostLabel(hostId))
           : getLocalExecutionHostLabel()
         const lastRun = lastRunByAutomationId.get(automation.id)
+        const lastRunSnapshot = getLocalAutomationLastRunSnapshot(automation, lastRun)
         const lastRunCost =
           lastRun?.usage?.status === 'known'
             ? formatAutomationCost(lastRun.usage.estimatedCostUsd)
@@ -213,6 +203,7 @@ export function AutomationListLocalRows({
                 <span className="min-w-0 truncate text-muted-foreground" title={nextRunLabel}>
                   {nextRunLabel}
                 </span>
+                <AutomationListLastRunCell snapshot={lastRunSnapshot} now={relativeNow} />
                 <AutomationListStatusCell enabled={automation.enabled} />
                 <Tooltip>
                   <TooltipTrigger asChild>
diff --git a/src/renderer/src/components/automations/AutomationListSortHeader.tsx b/src/renderer/src/components/automations/AutomationListSortHeader.tsx
new file mode 100644
index 00000000000..2c24a344328
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationListSortHeader.tsx
@@ -0,0 +1,51 @@
+import React from 'react'
+import { ArrowDown, ArrowUp } from 'lucide-react'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+import type { AutomationListSort, AutomationListSortField } from './automation-list-view'
+
+export function AutomationListSortHeader({
+  field,
+  label,
+  sort,
+  onSort
+}: {
+  field: AutomationListSortField
+  label: string
+  sort: AutomationListSort | null
+  onSort: (field: AutomationListSortField) => void
+}): React.JSX.Element {
+  const active = sort?.field === field
+  const direction = active ? sort.direction : null
+  // Why: one interpolated key per direction — word order and punctuation around
+  // the column name differ per language.
+  const sortedLabel =
+    direction === 'asc'
+      ? translate(
+          'auto.components.automations.AutomationListSortHeader.sortedAscending',
+          '{{value0}}, sorted ascending',
+          { value0: label }
+        )
+      : direction === 'desc'
+        ? translate(
+            'auto.components.automations.AutomationListSortHeader.sortedDescending',
+            '{{value0}}, sorted descending',
+            { value0: label }
+          )
+        : null
+  return (
+    <button
+      type="button"
+      onClick={() => onSort(field)}
+      aria-label={sortedLabel ?? label}
+      className={cn(
+        'flex min-w-0 items-center gap-1 rounded-sm text-left text-[11px] font-medium tracking-[0.08em] uppercase select-none hover:text-foreground focus-visible:ring-2 focus-visible:ring-ring/50 focus-visible:outline-none',
+        active && 'text-foreground'
+      )}
+    >
+      <span className="truncate">{label}</span>
+      {direction === 'asc' ? <ArrowUp aria-hidden="true" className="size-3 shrink-0" /> : null}
+      {direction === 'desc' ? <ArrowDown aria-hidden="true" className="size-3 shrink-0" /> : null}
+    </button>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationListTableHeader.tsx b/src/renderer/src/components/automations/AutomationListTableHeader.tsx
new file mode 100644
index 00000000000..8adbd127727
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationListTableHeader.tsx
@@ -0,0 +1,50 @@
+import React from 'react'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+import {
+  AUTOMATIONS_TABLE_GRID_CLASS,
+  AUTOMATIONS_TABLE_HEADER_CLASS
+} from './automations-table-layout'
+import { AutomationListSortHeader } from './AutomationListSortHeader'
+import type { AutomationListSort, AutomationListSortField } from './automation-list-view'
+
+export function AutomationListTableHeader({
+  sort,
+  onSort
+}: {
+  sort: AutomationListSort | null
+  onSort: (field: AutomationListSortField) => void
+}): React.JSX.Element {
+  return (
+    <div className={cn(AUTOMATIONS_TABLE_GRID_CLASS, AUTOMATIONS_TABLE_HEADER_CLASS)}>
+      <AutomationListSortHeader
+        field="name"
+        label={translate('auto.components.automations.AutomationsPage.tableName', 'Name')}
+        sort={sort}
+        onSort={onSort}
+      />
+      <span>
+        {translate('auto.components.automations.AutomationDetail.18763ded26', 'Schedule')}
+      </span>
+      <span>
+        {translate('auto.components.automations.AutomationsPage.tableProject', 'Project')}
+      </span>
+      <span>
+        {translate('auto.components.automations.AutomationDetail.578ff46987', 'Next run')}
+      </span>
+      <AutomationListSortHeader
+        field="lastRun"
+        label={translate('auto.components.automations.AutomationsPage.tableLastRun', 'Last run')}
+        sort={sort}
+        onSort={onSort}
+      />
+      <span>{translate('auto.components.automations.AutomationsPage.tableStatus', 'Status')}</span>
+      <span className="text-center">
+        {translate('auto.components.automations.AutomationDetail.2df8970cd5', 'Agent')}
+      </span>
+      <span className="sr-only">
+        {translate('auto.components.automations.AutomationsPage.tableActions', 'Actions')}
+      </span>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationListToolbar.tsx b/src/renderer/src/components/automations/AutomationListToolbar.tsx
new file mode 100644
index 00000000000..31e55df9e04
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationListToolbar.tsx
@@ -0,0 +1,86 @@
+import React from 'react'
+import { Plus, RefreshCw } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+import { clampAutomationListSearchQueryInput } from './automation-list-search'
+import type { AutomationListFilter } from './automation-list-view'
+import { AutomationListFilterMenu, AutomationListFilterPills } from './AutomationListFilterMenu'
+import { AutomationListSearchField } from './AutomationListSearchField'
+import type { AutomationTemplate } from './automation-templates'
+
+export function AutomationListToolbar({
+  listSearchQuery,
+  isListSearchQueryTooLarge,
+  onListSearchQueryChange,
+  filter,
+  onFilterChange,
+  onRefresh,
+  isRefreshing,
+  openCreateDialog
+}: {
+  listSearchQuery: string
+  isListSearchQueryTooLarge: boolean
+  onListSearchQueryChange: (query: string) => void
+  filter: AutomationListFilter
+  onFilterChange: (filter: AutomationListFilter) => void
+  onRefresh: () => void
+  isRefreshing: boolean
+  openCreateDialog: (template?: AutomationTemplate) => void
+}): React.JSX.Element {
+  return (
+    <div className="flex shrink-0 items-start justify-between gap-3">
+      <div className="flex min-w-0 flex-wrap items-center gap-2">
+        <div className="flex shrink-0 items-center gap-2">
+          <AutomationListSearchField
+            query={listSearchQuery}
+            isTooLarge={isListSearchQueryTooLarge}
+            className="w-56"
+            onQueryChange={(query) =>
+              onListSearchQueryChange(clampAutomationListSearchQueryInput(query))
+            }
+            onClear={() => onListSearchQueryChange('')}
+          />
+          <AutomationListFilterMenu filter={filter} onChange={onFilterChange} />
+          <Tooltip>
+            <TooltipTrigger asChild>
+              <Button
+                type="button"
+                variant="ghost"
+                size="icon-sm"
+                aria-label={translate(
+                  'auto.components.automations.AutomationsPage.19a6e30eae',
+                  'Refresh automations'
+                )}
+                onClick={onRefresh}
+                disabled={isRefreshing}
+                className="shrink-0 border border-border bg-background shadow-none hover:bg-muted/50"
+              >
+                <RefreshCw className={cn('size-4', isRefreshing && 'animate-spin')} />
+              </Button>
+            </TooltipTrigger>
+            <TooltipContent side="bottom" sideOffset={6}>
+              {translate(
+                'auto.components.automations.AutomationsPage.19a6e30eae',
+                'Refresh automations'
+              )}
+            </TooltipContent>
+          </Tooltip>
+        </div>
+        <AutomationListFilterPills filter={filter} onChange={onFilterChange} />
+      </div>
+      <Button
+        type="button"
+        variant="default"
+        size="sm"
+        className="shrink-0"
+        onClick={() => openCreateDialog()}
+        data-contextual-tour-target="automations-create"
+      >
+        <Plus className="size-4" />
+        {translate('auto.components.automations.AutomationsPage.newAutomation', 'New Automation')}
+      </Button>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationSchedulePicker.tsx b/src/renderer/src/components/automations/AutomationSchedulePicker.tsx
index 1f6f6d96ebf..b1dde548163 100644
--- a/src/renderer/src/components/automations/AutomationSchedulePicker.tsx
+++ b/src/renderer/src/components/automations/AutomationSchedulePicker.tsx
@@ -19,6 +19,7 @@ import {
 } from '../../../../shared/automation-schedules'
 import type { AutomationDraft } from './AutomationEditorDialog'
 import { AutomationCustomCronPanel } from './AutomationCustomCronPanel'
+import { AutomationTimeField, parseAutomationTime } from './AutomationTimeField'
 import { Field } from './automation-page-parts'
 import { translate } from '@/i18n/i18n'
 
@@ -49,49 +50,6 @@ const DAY_OPTIONS = [
   ['5', 'Friday'],
   ['6', 'Saturday']
 ] as const
-const HOUR_OPTIONS = Array.from({ length: 12 }, (_, index) => String(index + 1))
-const MINUTE_OPTIONS = Array.from({ length: 60 }, (_, index) => String(index))
-const PERIOD_OPTIONS = ['AM', 'PM'] as const
-
-function parseTime(value: string): { hour: number; minute: number } {
-  const [hour, minute] = value.split(':').map((part) => Number(part))
-  return {
-    hour: Number.isInteger(hour) && hour >= 0 && hour <= 23 ? hour : 9,
-    minute: Number.isInteger(minute) && minute >= 0 && minute <= 59 ? minute : 0
-  }
-}
-
-function formatTimeInput(hour: number, minute: number): string {
-  return `${String(hour).padStart(2, '0')}:${String(minute).padStart(2, '0')}`
-}
-
-function getClockParts(time: string): { hour12: number; minute: number; period: 'AM' | 'PM' } {
-  const { hour, minute } = parseTime(time)
-  return {
-    hour12: hour % 12 === 0 ? 12 : hour % 12,
-    minute,
-    period: hour >= 12 ? 'PM' : 'AM'
-  }
-}
-
-function updateTimePart(
-  time: string,
-  patch: { hour12?: number; minute?: number; period?: 'AM' | 'PM' }
-): string {
-  const current = getClockParts(time)
-  const nextHour12 = patch.hour12 ?? current.hour12
-  const nextPeriod = patch.period ?? current.period
-  const nextMinute = patch.minute ?? current.minute
-  const hour24 =
-    nextPeriod === 'AM'
-      ? nextHour12 === 12
-        ? 0
-        : nextHour12
-      : nextHour12 === 12
-        ? 12
-        : nextHour12 + 12
-  return formatTimeInput(hour24, nextMinute)
-}
 
 function getDraftScheduleLabel(draft: AutomationDraft): string {
   if (draft.preset === 'custom') {
@@ -99,7 +57,7 @@ function getDraftScheduleLabel(draft: AutomationDraft): string {
       ? formatAutomationSchedule(draft.customSchedule)
       : 'Advanced schedule'
   }
-  const { hour, minute } = parseTime(draft.time)
+  const { hour, minute } = parseAutomationTime(draft.time)
   return formatAutomationSchedule(
     buildAutomationRrule({
       preset: draft.preset,
@@ -118,7 +76,7 @@ function buildCustomScheduleSeed(draft: AutomationDraft): string {
   if (draft.preset === 'custom') {
     return ''
   }
-  const { hour, minute } = parseTime(draft.time)
+  const { hour, minute } = parseAutomationTime(draft.time)
   return buildAutomationCronSchedule({
     preset: draft.preset,
     hour,
@@ -151,13 +109,20 @@ export function AutomationSchedulePicker({
 }): React.JSX.Element {
   const [open, setOpen] = React.useState(false)
   const label = getDraftScheduleLabel(draft)
-  const clockParts = getClockParts(draft.time)
   const customSchedule = draft.customSchedule.trim()
   const customScheduleInvalid =
     draft.preset === 'custom' &&
     customSchedule.length > 0 &&
     !validateAdvancedSchedule(customSchedule)
 
+  const setTime = (time: string): void => {
+    onDraftChange((current) => ({
+      ...current,
+      time,
+      scheduleWarning: null
+    }))
+  }
+
   return (
     <Popover open={open} onOpenChange={setOpen}>
       <PopoverTrigger asChild>
@@ -198,7 +163,7 @@ export function AutomationSchedulePicker({
               <SelectTrigger className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}>
                 <SelectValue />
               </SelectTrigger>
-              <SelectContent>
+              <SelectContent position="popper">
                 {AUTOMATION_SCHEDULE_PRESET_OPTIONS.map(([value, fallbackLabel, labelKey]) => (
                   <SelectItem key={value} value={value}>
                     {getAutomationSchedulePresetLabel([value, fallbackLabel, labelKey])}
@@ -232,7 +197,7 @@ export function AutomationSchedulePicker({
                     <SelectTrigger className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}>
                       <SelectValue />
                     </SelectTrigger>
-                    <SelectContent>
+                    <SelectContent position="popper">
                       {DAY_OPTIONS.map(([value, dayLabel]) => (
                         <SelectItem key={value} value={value}>
                           {dayLabel}
@@ -249,27 +214,7 @@ export function AutomationSchedulePicker({
                     'Minute'
                   )}
                 >
-                  <Select
-                    value={String(clockParts.minute)}
-                    onValueChange={(minute) =>
-                      onDraftChange((current) => ({
-                        ...current,
-                        time: updateTimePart(current.time, { minute: Number(minute) }),
-                        scheduleWarning: null
-                      }))
-                    }
-                  >
-                    <SelectTrigger className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}>
-                      <SelectValue />
-                    </SelectTrigger>
-                    <SelectContent>
-                      {MINUTE_OPTIONS.map((minute) => (
-                        <SelectItem key={minute} value={minute}>
-                          :{minute.padStart(2, '0')}
-                        </SelectItem>
-                      ))}
-                    </SelectContent>
-                  </Select>
+                  <AutomationTimeField time={draft.time} mode="minute" onTimeChange={setTime} />
                 </Field>
               ) : (
                 <Field
@@ -278,89 +223,7 @@ export function AutomationSchedulePicker({
                     'Time'
                   )}
                 >
-                  <div className="grid grid-cols-[minmax(0,1fr)_minmax(0,1fr)_minmax(0,0.8fr)] gap-2">
-                    <Select
-                      value={String(clockParts.hour12)}
-                      onValueChange={(hour12) =>
-                        onDraftChange((current) => ({
-                          ...current,
-                          time: updateTimePart(current.time, { hour12: Number(hour12) }),
-                          scheduleWarning: null
-                        }))
-                      }
-                    >
-                      <SelectTrigger
-                        aria-label={translate(
-                          'auto.components.automations.AutomationSchedulePicker.6b802ecc99',
-                          'Hour'
-                        )}
-                        className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}
-                      >
-                        <SelectValue />
-                      </SelectTrigger>
-                      <SelectContent>
-                        {HOUR_OPTIONS.map((hour) => (
-                          <SelectItem key={hour} value={hour}>
-                            {hour}
-                          </SelectItem>
-                        ))}
-                      </SelectContent>
-                    </Select>
-                    <Select
-                      value={String(clockParts.minute)}
-                      onValueChange={(minute) =>
-                        onDraftChange((current) => ({
-                          ...current,
-                          time: updateTimePart(current.time, { minute: Number(minute) }),
-                          scheduleWarning: null
-                        }))
-                      }
-                    >
-                      <SelectTrigger
-                        aria-label={translate(
-                          'auto.components.automations.AutomationSchedulePicker.9e677335b0',
-                          'Minute'
-                        )}
-                        className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}
-                      >
-                        <SelectValue />
-                      </SelectTrigger>
-                      <SelectContent>
-                        {MINUTE_OPTIONS.map((minute) => (
-                          <SelectItem key={minute} value={minute}>
-                            {minute.padStart(2, '0')}
-                          </SelectItem>
-                        ))}
-                      </SelectContent>
-                    </Select>
-                    <Select
-                      value={clockParts.period}
-                      onValueChange={(period) =>
-                        onDraftChange((current) => ({
-                          ...current,
-                          time: updateTimePart(current.time, { period: period as 'AM' | 'PM' }),
-                          scheduleWarning: null
-                        }))
-                      }
-                    >
-                      <SelectTrigger
-                        aria-label={translate(
-                          'auto.components.automations.AutomationSchedulePicker.22359b186a',
-                          'AM or PM'
-                        )}
-                        className={cn('w-full min-w-0', FIELD_CONTROL_CLASS)}
-                      >
-                        <SelectValue />
-                      </SelectTrigger>
-                      <SelectContent>
-                        {PERIOD_OPTIONS.map((period) => (
-                          <SelectItem key={period} value={period}>
-                            {period}
-                          </SelectItem>
-                        ))}
-                      </SelectContent>
-                    </Select>
-                  </div>
+                  <AutomationTimeField time={draft.time} mode="time" onTimeChange={setTime} />
                 </Field>
               )}
             </>
diff --git a/src/renderer/src/components/automations/AutomationTimeField.test.tsx b/src/renderer/src/components/automations/AutomationTimeField.test.tsx
new file mode 100644
index 00000000000..d085d41385d
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationTimeField.test.tsx
@@ -0,0 +1,177 @@
+// @vitest-environment happy-dom
+
+import '@testing-library/jest-dom/vitest'
+import React from 'react'
+import { cleanup, render, screen } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import {
+  AutomationTimeField,
+  formatAutomationTimeFromClockParts,
+  formatAutomationTimeInput,
+  getAutomationClockParts,
+  parseAutomationTime,
+  resolveDigitCommit,
+  resolveDigitStep
+} from './AutomationTimeField'
+
+afterEach(() => {
+  cleanup()
+})
+
+describe('AutomationTimeField helpers', () => {
+  it('parses and formats 24h time values', () => {
+    expect(parseAutomationTime('09:15')).toEqual({ hour: 9, minute: 15 })
+    expect(parseAutomationTime('23:59')).toEqual({ hour: 23, minute: 59 })
+    expect(parseAutomationTime('bad')).toEqual({ hour: 9, minute: 0 })
+    expect(formatAutomationTimeInput(9, 5)).toBe('09:05')
+    expect(formatAutomationTimeInput(0, 0)).toBe('00:00')
+  })
+
+  it('converts between 12h clock parts and 24h storage', () => {
+    expect(getAutomationClockParts('00:05')).toEqual({ hour12: 12, minute: 5, period: 'AM' })
+    expect(getAutomationClockParts('13:30')).toEqual({ hour12: 1, minute: 30, period: 'PM' })
+    expect(getAutomationClockParts('12:00')).toEqual({ hour12: 12, minute: 0, period: 'PM' })
+    expect(formatAutomationTimeFromClockParts({ hour12: 12, minute: 5, period: 'AM' })).toBe(
+      '00:05'
+    )
+    expect(formatAutomationTimeFromClockParts({ hour12: 1, minute: 30, period: 'PM' })).toBe(
+      '13:30'
+    )
+    expect(formatAutomationTimeFromClockParts({ hour12: 12, minute: 0, period: 'PM' })).toBe(
+      '12:00'
+    )
+  })
+
+  it('resolves digit commits with empty → min and range clamp', () => {
+    expect(resolveDigitCommit('', 9, 1, 12)).toBe(1)
+    expect(resolveDigitCommit('', 15, 0, 59)).toBe(0)
+    expect(resolveDigitCommit('9', 1, 1, 12)).toBe(9)
+    expect(resolveDigitCommit('00', 9, 1, 12)).toBe(1)
+    expect(resolveDigitCommit('24', 9, 0, 23)).toBe(23)
+    expect(resolveDigitCommit('99', 15, 0, 59)).toBe(59)
+    expect(resolveDigitCommit('abc', 15, 0, 59)).toBe(15)
+  })
+
+  it('steps from in-progress text rather than only the committed value', () => {
+    expect(resolveDigitStep('1', 9, 1, 12, 1)).toBe(2)
+    // At the min bound, down wraps to max.
+    expect(resolveDigitStep('1', 9, 1, 12, -1)).toBe(12)
+    expect(resolveDigitStep('', 9, 1, 12, 1)).toBe(10)
+    expect(resolveDigitStep('12', 12, 1, 12, 1)).toBe(1)
+    expect(resolveDigitStep('0', 0, 0, 59, -1)).toBe(59)
+  })
+})
+
+function ControlledTimeField({
+  initialTime = '09:15',
+  mode = 'time',
+  onTimeChange
+}: {
+  initialTime?: string
+  mode?: 'time' | 'minute'
+  onTimeChange?: (time: string) => void
+}): React.JSX.Element {
+  const [time, setTime] = React.useState(initialTime)
+  return (
+    <AutomationTimeField
+      time={time}
+      mode={mode}
+      onTimeChange={(next) => {
+        setTime(next)
+        onTimeChange?.(next)
+      }}
+    />
+  )
+}
+
+describe('AutomationTimeField interactions', () => {
+  it('renders a unified 12h field with AM/PM instead of nested selects', () => {
+    render(<ControlledTimeField initialTime="13:15" />)
+
+    expect(screen.getByLabelText('Hour')).toHaveValue('1')
+    expect(screen.getByLabelText('Minute')).toHaveValue('15')
+    expect(screen.getByRole('button', { name: /^AM or PM:/ })).toHaveTextContent('PM')
+    expect(document.querySelector('[data-slot="select"]')).toBeNull()
+  })
+
+  it('names the selected period for assistive technology', async () => {
+    const user = userEvent.setup()
+    render(<ControlledTimeField initialTime="01:15" />)
+
+    const period = screen.getByRole('button', { name: 'AM or PM: AM' })
+    expect(period).toHaveAttribute('aria-pressed', 'false')
+
+    await user.click(period)
+
+    expect(screen.getByRole('button', { name: 'AM or PM: PM' })).toHaveAttribute(
+      'aria-pressed',
+      'true'
+    )
+  })
+
+  it('renders minute-only mode for hourly cadence', () => {
+    render(<ControlledTimeField mode="minute" />)
+
+    expect(screen.getByLabelText('Minute')).toHaveValue('15')
+    expect(screen.queryByLabelText('Hour')).toBeNull()
+    expect(screen.queryByRole('button', { name: /^AM or PM:/ })).toBeNull()
+  })
+
+  it('commits typed hour/minute and toggles AM/PM into 24h storage', async () => {
+    const user = userEvent.setup()
+    const onTimeChange = vi.fn()
+    render(<ControlledTimeField onTimeChange={onTimeChange} />)
+
+    const hour = screen.getByLabelText('Hour')
+    await user.clear(hour)
+    await user.type(hour, '11')
+    expect(onTimeChange).toHaveBeenLastCalledWith('11:15')
+
+    onTimeChange.mockClear()
+    const minute = screen.getByLabelText('Minute')
+    await user.clear(minute)
+    await user.type(minute, '05')
+    expect(onTimeChange).toHaveBeenLastCalledWith('11:05')
+
+    onTimeChange.mockClear()
+    await user.click(screen.getByRole('button', { name: /^AM or PM:/ }))
+    expect(onTimeChange).toHaveBeenLastCalledWith('23:05')
+    expect(screen.getByRole('button', { name: /^AM or PM:/ })).toHaveTextContent('PM')
+  })
+
+  it('treats empty blur as min and does not re-fire after 2-digit auto-commit', async () => {
+    const user = userEvent.setup()
+    const onTimeChange = vi.fn()
+    render(<ControlledTimeField onTimeChange={onTimeChange} />)
+
+    const minute = screen.getByLabelText('Minute')
+    await user.clear(minute)
+    await user.tab()
+    expect(onTimeChange).toHaveBeenLastCalledWith('09:00')
+    expect(minute).toHaveValue('00')
+
+    onTimeChange.mockClear()
+    await user.click(minute)
+    await user.clear(minute)
+    await user.type(minute, '30')
+    // 2-digit entry auto-commits once; blur must not emit a second identical update.
+    const callsAfterType = onTimeChange.mock.calls.length
+    expect(onTimeChange).toHaveBeenLastCalledWith('09:30')
+    await user.tab()
+    expect(onTimeChange.mock.calls.length).toBe(callsAfterType)
+  })
+
+  it('arrow-steps from the in-progress digit, not only the last commit', async () => {
+    const user = userEvent.setup()
+    const onTimeChange = vi.fn()
+    render(<ControlledTimeField onTimeChange={onTimeChange} />)
+
+    const hour = screen.getByLabelText('Hour')
+    await user.clear(hour)
+    await user.type(hour, '1')
+    onTimeChange.mockClear()
+    await user.keyboard('{ArrowUp}')
+    expect(onTimeChange).toHaveBeenLastCalledWith('02:15')
+  })
+})
diff --git a/src/renderer/src/components/automations/AutomationTimeField.tsx b/src/renderer/src/components/automations/AutomationTimeField.tsx
new file mode 100644
index 00000000000..9eb842c170a
--- /dev/null
+++ b/src/renderer/src/components/automations/AutomationTimeField.tsx
@@ -0,0 +1,261 @@
+import React from 'react'
+import { Clock } from 'lucide-react'
+import { cn } from '@/lib/utils'
+import { translate } from '@/i18n/i18n'
+
+const TIME_SHELL_CLASS =
+  'flex h-9 w-full items-center gap-2 rounded-md border border-input bg-input/30 px-3 shadow-xs transition-[color,box-shadow] focus-within:border-ring focus-within:ring-[3px] focus-within:ring-ring/50 dark:bg-input/30'
+
+export type AutomationClockParts = {
+  hour12: number
+  minute: number
+  period: 'AM' | 'PM'
+}
+
+export function parseAutomationTime(value: string): { hour: number; minute: number } {
+  const [hour, minute] = value.split(':').map((part) => Number(part))
+  return {
+    hour: Number.isInteger(hour) && hour >= 0 && hour <= 23 ? hour : 9,
+    minute: Number.isInteger(minute) && minute >= 0 && minute <= 59 ? minute : 0
+  }
+}
+
+export function formatAutomationTimeInput(hour: number, minute: number): string {
+  return `${String(hour).padStart(2, '0')}:${String(minute).padStart(2, '0')}`
+}
+
+export function getAutomationClockParts(time: string): AutomationClockParts {
+  const { hour, minute } = parseAutomationTime(time)
+  return {
+    hour12: hour % 12 === 0 ? 12 : hour % 12,
+    minute,
+    period: hour >= 12 ? 'PM' : 'AM'
+  }
+}
+
+export function formatAutomationTimeFromClockParts(parts: AutomationClockParts): string {
+  const hour24 =
+    parts.period === 'AM'
+      ? parts.hour12 === 12
+        ? 0
+        : parts.hour12
+      : parts.hour12 === 12
+        ? 12
+        : parts.hour12 + 12
+  return formatAutomationTimeInput(hour24, parts.minute)
+}
+
+export function clampInt(value: number, min: number, max: number): number {
+  if (!Number.isFinite(value)) {
+    return min
+  }
+  return Math.min(max, Math.max(min, Math.trunc(value)))
+}
+
+/** Resolve typed digits on commit. Empty → min (0 minutes / 1 hour). */
+export function resolveDigitCommit(raw: string, value: number, min: number, max: number): number {
+  const trimmed = raw.trim()
+  if (trimmed === '') {
+    return min
+  }
+  const parsed = Number(trimmed)
+  if (!Number.isFinite(parsed)) {
+    return value
+  }
+  return clampInt(parsed, min, max)
+}
+
+/** Step from in-progress text when present, otherwise the committed value. */
+export function resolveDigitStep(
+  raw: string,
+  value: number,
+  min: number,
+  max: number,
+  delta: 1 | -1
+): number {
+  const trimmed = raw.trim()
+  const parsed = trimmed === '' ? Number.NaN : Number(trimmed)
+  const base = Number.isFinite(parsed) ? clampInt(parsed, min, max) : value
+  if (delta === 1) {
+    return base >= max ? min : base + 1
+  }
+  return base <= min ? max : base - 1
+}
+
+function pad2(value: number): string {
+  return String(value).padStart(2, '0')
+}
+
+function TimeDigitInput({
+  value,
+  min,
+  max,
+  pad = true,
+  ariaLabel,
+  onCommit
+}: {
+  value: number
+  min: number
+  max: number
+  pad?: boolean
+  ariaLabel: string
+  onCommit: (value: number) => void
+}): React.JSX.Element {
+  const [text, setText] = React.useState(pad ? pad2(value) : String(value))
+  const [focused, setFocused] = React.useState(false)
+  // Track last emitted commit so blur after 2-digit auto-commit does not re-fire.
+  const lastCommittedRef = React.useRef(value)
+
+  // Keep the visible digits in sync while the field is not being edited.
+  React.useEffect(() => {
+    lastCommittedRef.current = value
+    if (!focused) {
+      setText(pad ? pad2(value) : String(value))
+    }
+  }, [focused, pad, value])
+
+  const commit = (raw: string): void => {
+    const next = resolveDigitCommit(raw, value, min, max)
+    setText(pad ? pad2(next) : String(next))
+    if (next === lastCommittedRef.current) {
+      return
+    }
+    lastCommittedRef.current = next
+    onCommit(next)
+  }
+
+  return (
+    <input
+      type="text"
+      inputMode="numeric"
+      autoComplete="off"
+      spellCheck={false}
+      aria-label={ariaLabel}
+      value={text}
+      onFocus={(event) => {
+        setFocused(true)
+        event.currentTarget.select()
+      }}
+      onBlur={() => {
+        setFocused(false)
+        commit(text)
+      }}
+      onChange={(event) => {
+        const next = event.target.value.replace(/\D/g, '').slice(0, 2)
+        setText(next)
+        if (next.length === 2) {
+          commit(next)
+        }
+      }}
+      onKeyDown={(event) => {
+        if (event.key === 'ArrowUp' || event.key === 'ArrowDown') {
+          event.preventDefault()
+          const next = resolveDigitStep(text, value, min, max, event.key === 'ArrowUp' ? 1 : -1)
+          setText(pad ? pad2(next) : String(next))
+          if (next !== lastCommittedRef.current) {
+            lastCommittedRef.current = next
+            onCommit(next)
+          }
+          return
+        }
+        if (event.key === 'Enter') {
+          event.currentTarget.blur()
+        }
+      }}
+      className="h-7 w-9 rounded-sm border-0 bg-transparent p-0 text-center text-sm tabular-nums tracking-wide text-foreground outline-none selection:bg-primary/20 focus-visible:bg-accent/50"
+    />
+  )
+}
+
+export function AutomationTimeField({
+  time,
+  mode = 'time',
+  onTimeChange,
+  className
+}: {
+  time: string
+  mode?: 'time' | 'minute'
+  onTimeChange: (time: string) => void
+  className?: string
+}): React.JSX.Element {
+  const clock = getAutomationClockParts(time)
+  // Why: digit commits close over the latest clock parts without stale hour/minute.
+  // Sync in an effect so render stays pure (React Doctor: no ref writes during render).
+  const clockRef = React.useRef(clock)
+  React.useEffect(() => {
+    clockRef.current = getAutomationClockParts(time)
+  }, [time])
+
+  const patchTime = (patch: Partial<AutomationClockParts>): void => {
+    // Why: apply the patch to the ref immediately so a second digit field commit
+    // in the same tick (or before the parent re-renders) cannot clobber the first.
+    const next = { ...clockRef.current, ...patch }
+    clockRef.current = next
+    onTimeChange(formatAutomationTimeFromClockParts(next))
+  }
+
+  return (
+    <div className={cn(TIME_SHELL_CLASS, className)}>
+      <Clock className="size-4 shrink-0 text-muted-foreground" aria-hidden />
+      <div className="flex min-w-0 flex-1 items-center gap-1.5">
+        {mode === 'time' ? (
+          <>
+            <TimeDigitInput
+              value={clock.hour12}
+              min={1}
+              max={12}
+              pad={false}
+              ariaLabel={translate(
+                'auto.components.automations.AutomationTimeField.aa593eb5e2',
+                'Hour'
+              )}
+              onCommit={(hour12) => patchTime({ hour12 })}
+            />
+            <span className="select-none text-sm text-muted-foreground" aria-hidden>
+              :
+            </span>
+            <TimeDigitInput
+              value={clock.minute}
+              min={0}
+              max={59}
+              ariaLabel={translate(
+                'auto.components.automations.AutomationTimeField.32a5e4e35e',
+                'Minute'
+              )}
+              onCommit={(minute) => patchTime({ minute })}
+            />
+            <button
+              type="button"
+              // The label overrides the visible text, so name the current period explicitly.
+              aria-label={`${translate(
+                'auto.components.automations.AutomationTimeField.39ec1383f6',
+                'AM or PM'
+              )}: ${clock.period}`}
+              aria-pressed={clock.period === 'PM'}
+              onClick={() => patchTime({ period: clock.period === 'AM' ? 'PM' : 'AM' })}
+              className="ml-auto h-7 shrink-0 rounded-sm px-2 text-sm font-medium text-muted-foreground outline-none transition-colors hover:bg-accent/60 hover:text-foreground focus-visible:bg-accent/60 focus-visible:text-foreground"
+            >
+              {clock.period}
+            </button>
+          </>
+        ) : (
+          <>
+            <span className="select-none text-sm text-muted-foreground" aria-hidden>
+              :
+            </span>
+            <TimeDigitInput
+              value={clock.minute}
+              min={0}
+              max={59}
+              ariaLabel={translate(
+                'auto.components.automations.AutomationTimeField.32a5e4e35e',
+                'Minute'
+              )}
+              onCommit={(minute) => patchTime({ minute })}
+            />
+          </>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/automations/AutomationsListPanel.tsx b/src/renderer/src/components/automations/AutomationsListPanel.tsx
index a9c246fe782..a792839885c 100644
--- a/src/renderer/src/components/automations/AutomationsListPanel.tsx
+++ b/src/renderer/src/components/automations/AutomationsListPanel.tsx
@@ -1,7 +1,6 @@
 import React from 'react'
-import { Plus, RefreshCw } from 'lucide-react'
+import { Plus } from 'lucide-react'
 import { Button } from '@/components/ui/button'
-import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
 import { cn } from '@/lib/utils'
 import type {
   Automation,
@@ -15,29 +14,35 @@ import type { ProjectHostSetup, Repo, Worktree } from '../../../../shared/types'
 import type { RuntimeStatus } from '../../../../shared/runtime-types'
 import type { TaskSourceHostAvailability } from '../task-source-context-summary'
 import type { AutomationHostTarget } from './automation-host-client'
-import { clampAutomationListSearchQueryInput } from './automation-list-search'
 import type { AutomationPaneTab } from './automation-page-state'
-import { AutomationListSearchField } from './AutomationListSearchField'
 import { getAutomationTemplates, type AutomationTemplate } from './automation-templates'
-import type { ExternalAutomationListEntry } from './external-automation-list-entries'
 import { AutomationListLocalRows } from './AutomationListLocalRows'
 import { AutomationListExternalRows } from './AutomationListExternalRows'
-import {
-  AUTOMATIONS_TABLE_CONTAINER_CLASS,
-  AUTOMATIONS_TABLE_GRID_CLASS,
-  AUTOMATIONS_TABLE_HEADER_CLASS
-} from './automations-table-layout'
+import { AUTOMATIONS_TABLE_CONTAINER_CLASS } from './automations-table-layout'
 import { translate } from '@/i18n/i18n'
+import type {
+  AutomationListFilter,
+  AutomationListSort,
+  AutomationListSortField,
+  AutomationListViewItem
+} from './automation-list-view'
+import { AutomationListTableHeader } from './AutomationListTableHeader'
+import { AutomationListToolbar } from './AutomationListToolbar'
+import { indexLatestAutomationRuns } from './automation-list-last-run'
 
 type AutomationsListPanelProps = {
   hasListItems: boolean
   hasFilteredListItems: boolean
   isListSearchActive: boolean
+  isListFilterActive: boolean
   listSearchQuery: string
   isListSearchQueryTooLarge: boolean
   onListSearchQueryChange: (query: string) => void
-  filteredAutomations: readonly Automation[]
-  filteredExternalAutomationEntries: readonly ExternalAutomationListEntry[]
+  visibleItems: readonly AutomationListViewItem[]
+  listFilter: AutomationListFilter
+  onListFilterChange: (filter: AutomationListFilter) => void
+  listSort: AutomationListSort | null
+  onListSort: (field: AutomationListSortField) => void
   // Why: use explicit ids, not resolved detail selection (which falls back to the
   // first row) — list highlight should only mark a user-chosen row.
   selectedId: string | null
@@ -79,11 +84,15 @@ export function AutomationsListPanel({
   hasListItems,
   hasFilteredListItems,
   isListSearchActive,
+  isListFilterActive,
   listSearchQuery,
   isListSearchQueryTooLarge,
   onListSearchQueryChange,
-  filteredAutomations,
-  filteredExternalAutomationEntries,
+  visibleItems,
+  listFilter,
+  onListFilterChange,
+  listSort,
+  onListSort,
   selectedId,
   selectedExternalKey,
   runs,
@@ -111,6 +120,10 @@ export function AutomationsListPanel({
   onRefresh,
   isRefreshing
 }: AutomationsListPanelProps): React.JSX.Element {
+  // Why: one pass over runs for the whole list — each row renders its own
+  // component, so indexing per row would be O(rows × runs) on every re-render.
+  const lastRunByAutomationId = React.useMemo(() => indexLatestAutomationRuns(runs), [runs])
+
   return (
     <section
       className="flex min-h-0 flex-1 flex-col overflow-hidden px-3 pb-4 md:px-5"
@@ -153,58 +166,17 @@ export function AutomationsListPanel({
           </div>
         </div>
       ) : (
-        <div className="flex min-h-0 flex-1 flex-col gap-3">
-          <div className="flex shrink-0 items-center justify-between gap-3">
-            <div className="flex min-w-0 items-center gap-2">
-              <AutomationListSearchField
-                query={listSearchQuery}
-                isTooLarge={isListSearchQueryTooLarge}
-                className="w-full max-w-xs"
-                onQueryChange={(query) =>
-                  onListSearchQueryChange(clampAutomationListSearchQueryInput(query))
-                }
-                onClear={() => onListSearchQueryChange('')}
-              />
-              <Tooltip>
-                <TooltipTrigger asChild>
-                  <Button
-                    type="button"
-                    variant="ghost"
-                    size="icon-sm"
-                    aria-label={translate(
-                      'auto.components.automations.AutomationsPage.19a6e30eae',
-                      'Refresh automations'
-                    )}
-                    onClick={onRefresh}
-                    disabled={isRefreshing}
-                    className="shrink-0 border border-border bg-background shadow-none hover:bg-muted/50"
-                  >
-                    <RefreshCw className={cn('size-4', isRefreshing && 'animate-spin')} />
-                  </Button>
-                </TooltipTrigger>
-                <TooltipContent side="bottom" sideOffset={6}>
-                  {translate(
-                    'auto.components.automations.AutomationsPage.19a6e30eae',
-                    'Refresh automations'
-                  )}
-                </TooltipContent>
-              </Tooltip>
-            </div>
-            <Button
-              type="button"
-              variant="default"
-              size="sm"
-              className="shrink-0"
-              onClick={() => openCreateDialog()}
-              data-contextual-tour-target="automations-create"
-            >
-              <Plus className="size-4" />
-              {translate(
-                'auto.components.automations.AutomationsPage.newAutomation',
-                'New Automation'
-              )}
-            </Button>
-          </div>
+        <div className="flex min-h-0 flex-1 flex-col gap-4">
+          <AutomationListToolbar
+            listSearchQuery={listSearchQuery}
+            isListSearchQueryTooLarge={isListSearchQueryTooLarge}
+            onListSearchQueryChange={onListSearchQueryChange}
+            filter={listFilter}
+            onFilterChange={onListFilterChange}
+            onRefresh={onRefresh}
+            isRefreshing={isRefreshing}
+            openCreateDialog={openCreateDialog}
+          />
 
           <div
             className={cn(
@@ -214,88 +186,61 @@ export function AutomationsListPanel({
           >
             {hasFilteredListItems ? (
               <>
-                <div className={cn(AUTOMATIONS_TABLE_GRID_CLASS, AUTOMATIONS_TABLE_HEADER_CLASS)}>
-                  <span>
-                    {translate('auto.components.automations.AutomationsPage.tableName', 'Name')}
-                  </span>
-                  <span>
-                    {translate(
-                      'auto.components.automations.AutomationDetail.18763ded26',
-                      'Schedule'
-                    )}
-                  </span>
-                  <span>
-                    {translate(
-                      'auto.components.automations.AutomationsPage.tableProject',
-                      'Project'
-                    )}
-                  </span>
-                  <span>
-                    {translate(
-                      'auto.components.automations.AutomationDetail.578ff46987',
-                      'Next run'
-                    )}
-                  </span>
-                  <span>
-                    {translate('auto.components.automations.AutomationsPage.tableStatus', 'Status')}
-                  </span>
-                  <span className="text-center">
-                    {translate('auto.components.automations.AutomationDetail.2df8970cd5', 'Agent')}
-                  </span>
-                  <span className="sr-only">
-                    {translate(
-                      'auto.components.automations.AutomationsPage.tableActions',
-                      'Actions'
-                    )}
-                  </span>
-                </div>
+                <AutomationListTableHeader sort={listSort} onSort={onListSort} />
                 <div className="divide-y divide-border/50">
-                  <AutomationListLocalRows
-                    automations={filteredAutomations}
-                    selectedId={selectedId}
-                    isSelectedLocal={selectedExternalKey === null}
-                    runs={runs}
-                    relativeNow={relativeNow}
-                    repoMap={repoMap}
-                    worktreeMap={worktreeMap}
-                    projectHostSetups={projectHostSetups}
-                    sshConnectionStates={sshConnectionStates}
-                    runtimeStatusByEnvironmentId={runtimeStatusByEnvironmentId}
-                    automationHostTarget={automationHostTarget}
-                    automationSourceHostAvailabilityById={automationSourceHostAvailabilityById}
-                    hostLabelById={hostLabelById}
-                    onSelect={(automationId) => {
-                      selectExternalKey(null)
-                      selectAutomationId(automationId)
-                      onOpenDetail()
-                    }}
-                    onRunNow={runNow}
-                    onEdit={openEditDialog}
-                    onToggle={toggleAutomation}
-                    onDelete={requestDeleteAutomation}
-                  />
-                  <AutomationListExternalRows
-                    entries={filteredExternalAutomationEntries}
-                    selectedExternalKey={selectedExternalKey}
-                    relativeNow={relativeNow}
-                    sshConnectionStates={sshConnectionStates}
-                    externalActionKey={externalActionKey}
-                    onSelect={(entryKey) => {
-                      selectAutomationId(null)
-                      selectExternalKey(entryKey)
-                      setActivePaneTab('overview')
-                      onOpenDetail()
-                    }}
-                    onRequestAction={requestExternalAction}
-                    onEdit={openEditExternalDialog}
-                  />
+                  {visibleItems.map((item) =>
+                    item.kind === 'local' ? (
+                      <AutomationListLocalRows
+                        key={item.id}
+                        automations={[item.automation]}
+                        selectedId={selectedId}
+                        isSelectedLocal={selectedExternalKey === null}
+                        lastRunByAutomationId={lastRunByAutomationId}
+                        relativeNow={relativeNow}
+                        repoMap={repoMap}
+                        worktreeMap={worktreeMap}
+                        projectHostSetups={projectHostSetups}
+                        sshConnectionStates={sshConnectionStates}
+                        runtimeStatusByEnvironmentId={runtimeStatusByEnvironmentId}
+                        automationHostTarget={automationHostTarget}
+                        automationSourceHostAvailabilityById={automationSourceHostAvailabilityById}
+                        hostLabelById={hostLabelById}
+                        onSelect={(automationId) => {
+                          selectExternalKey(null)
+                          selectAutomationId(automationId)
+                          onOpenDetail()
+                        }}
+                        onRunNow={runNow}
+                        onEdit={openEditDialog}
+                        onToggle={toggleAutomation}
+                        onDelete={requestDeleteAutomation}
+                      />
+                    ) : (
+                      <AutomationListExternalRows
+                        key={item.id}
+                        entries={[item.entry]}
+                        selectedExternalKey={selectedExternalKey}
+                        relativeNow={relativeNow}
+                        sshConnectionStates={sshConnectionStates}
+                        externalActionKey={externalActionKey}
+                        onSelect={(entryKey) => {
+                          selectAutomationId(null)
+                          selectExternalKey(entryKey)
+                          setActivePaneTab('overview')
+                          onOpenDetail()
+                        }}
+                        onRequestAction={requestExternalAction}
+                        onEdit={openEditExternalDialog}
+                      />
+                    )
+                  )}
                 </div>
               </>
-            ) : isListSearchActive ? (
+            ) : isListSearchActive || isListFilterActive ? (
               <div className="px-3 py-6 text-center text-sm text-muted-foreground">
                 {translate(
-                  'auto.components.automations.AutomationsPage.noSearchMatches',
-                  'No automations match your search.'
+                  'auto.components.automations.AutomationsPage.noListMatches',
+                  'No automations match.'
                 )}
               </div>
             ) : null}
diff --git a/src/renderer/src/components/automations/AutomationsPage.tsx b/src/renderer/src/components/automations/AutomationsPage.tsx
index 996f474a7c9..b1fe9c4988b 100644
--- a/src/renderer/src/components/automations/AutomationsPage.tsx
+++ b/src/renderer/src/components/automations/AutomationsPage.tsx
@@ -106,6 +106,13 @@ import {
 import { buildExternalAutomationListEntries } from './external-automation-list-entries'
 import { shouldCloseDetailForLostSelection } from './automation-detail-selection'
 import { useAutomationListSearch } from './use-automation-list-search'
+import { useAutomationListView } from './use-automation-list-view'
+import {
+  EMPTY_AUTOMATION_LIST_FILTER,
+  nextAutomationListSort,
+  type AutomationListFilter,
+  type AutomationListSort
+} from './automation-list-view'
 import { AutomationDeleteDialog, ExternalAutomationDeleteDialog } from './AutomationDeleteDialogs'
 import { AutomationsListPanel } from './AutomationsListPanel'
 import { AutomationsDetailPane } from './AutomationsDetailPane'
@@ -173,6 +180,8 @@ export default function AutomationsPage(): React.JSX.Element {
   const [isLoading, setIsLoading] = useState(true)
   const [isSaving, setIsSaving] = useState(false)
   const [listSearchQuery, setListSearchQuery] = useState('')
+  const [listFilter, setListFilter] = useState<AutomationListFilter>(EMPTY_AUTOMATION_LIST_FILTER)
+  const [listSort, setListSort] = useState<AutomationListSort | null>(null)
   const [createOpen, setCreateOpen] = useState(false)
   const [createTarget, setCreateTarget] = useState<AutomationCreateTarget>('orca')
   const [editingAutomationId, setEditingAutomationId] = useState<string | null>(null)
@@ -273,8 +282,7 @@ export default function AutomationsPage(): React.JSX.Element {
     isListSearchActive,
     filteredAutomations,
     filteredExternalAutomationEntries,
-    hasListItems,
-    hasFilteredListItems
+    hasListItems
   } = useAutomationListSearch({
     listSearchQuery,
     automations,
@@ -285,6 +293,21 @@ export default function AutomationsPage(): React.JSX.Element {
     selectAutomationId,
     selectExternalKey
   })
+  const {
+    visibleItems,
+    isListFilterActive,
+    hasVisibleListItems: hasFilteredListItems
+  } = useAutomationListView({
+    automations: filteredAutomations,
+    externalEntries: filteredExternalAutomationEntries,
+    runs,
+    filter: listFilter,
+    sort: listSort,
+    selectedId,
+    selectedExternalKey,
+    selectAutomationId,
+    selectExternalKey
+  })
 
   const selectedExternal =
     externalAutomationEntries.find((entry) => entry.key === selectedExternalKey) ??
@@ -355,7 +378,7 @@ export default function AutomationsPage(): React.JSX.Element {
   const loadAutomationYamlHooksForRepo = useCallback(
     async (repoId: string): Promise<OrcaHooks | null> => {
       const key = getAutomationHooksCacheKey(repoId)
-      if (Object.prototype.hasOwnProperty.call(automationYamlHooksByRepoKey, key)) {
+      if (Object.hasOwn(automationYamlHooksByRepoKey, key)) {
         return automationYamlHooksByRepoKey[key] ?? null
       }
       const existingPromise = automationHookCheckPromisesRef.current.get(key)
@@ -376,7 +399,7 @@ export default function AutomationsPage(): React.JSX.Element {
         return hooks
       }
       setAutomationYamlHooksByRepoKey((current) =>
-        Object.prototype.hasOwnProperty.call(current, key) ? current : { ...current, [key]: hooks }
+        Object.hasOwn(current, key) ? current : { ...current, [key]: hooks }
       )
       return hooks
     },
@@ -2015,11 +2038,15 @@ export default function AutomationsPage(): React.JSX.Element {
           hasListItems={hasListItems}
           hasFilteredListItems={hasFilteredListItems}
           isListSearchActive={isListSearchActive}
+          isListFilterActive={isListFilterActive}
           listSearchQuery={listSearchQuery}
           isListSearchQueryTooLarge={isListSearchQueryTooLarge}
           onListSearchQueryChange={setListSearchQuery}
-          filteredAutomations={filteredAutomations}
-          filteredExternalAutomationEntries={filteredExternalAutomationEntries}
+          visibleItems={visibleItems}
+          listFilter={listFilter}
+          onListFilterChange={setListFilter}
+          listSort={listSort}
+          onListSort={(field) => setListSort((current) => nextAutomationListSort(current, field))}
           selectedId={selectedId}
           selectedExternalKey={selectedExternalKey}
           runs={runs}
diff --git a/src/renderer/src/components/automations/AutomationsPageSkeleton.tsx b/src/renderer/src/components/automations/AutomationsPageSkeleton.tsx
index 58990205c4c..172502b29a1 100644
--- a/src/renderer/src/components/automations/AutomationsPageSkeleton.tsx
+++ b/src/renderer/src/components/automations/AutomationsPageSkeleton.tsx
@@ -16,20 +16,23 @@ function TableRowSkeleton({
   scheduleWidthClass,
   projectWidthClass,
   nextWidthClass,
+  lastRunWidthClass,
   statusWidthClass
 }: {
   nameWidthClass: string
   scheduleWidthClass: string
   projectWidthClass: string
   nextWidthClass: string
+  lastRunWidthClass: string
   statusWidthClass: string
 }): React.JSX.Element {
   return (
-    <div className={cn(AUTOMATIONS_TABLE_GRID_CLASS, 'items-center gap-3 px-3 py-2')}>
+    <div className={cn(AUTOMATIONS_TABLE_GRID_CLASS, 'min-h-11 items-center gap-3 px-3 py-3')}>
       <SkeletonBar className={cn('h-3.5', nameWidthClass)} />
       <SkeletonBar className={cn('h-3.5', scheduleWidthClass)} />
       <SkeletonBar className={cn('h-3.5', projectWidthClass)} />
       <SkeletonBar className={cn('h-3.5', nextWidthClass)} />
+      <SkeletonBar className={cn('h-3.5', lastRunWidthClass)} />
       <SkeletonBar className={cn('h-3.5', statusWidthClass)} />
       <SkeletonBar className="mx-auto size-4 rounded" />
       <SkeletonBar className="size-6 rounded-md" />
@@ -44,6 +47,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-36',
     projectWidthClass: 'w-28',
     nextWidthClass: 'w-24',
+    lastRunWidthClass: 'w-20',
     statusWidthClass: 'w-16'
   },
   {
@@ -52,6 +56,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-28',
     projectWidthClass: 'w-32',
     nextWidthClass: 'w-20',
+    lastRunWidthClass: 'w-24',
     statusWidthClass: 'w-14'
   },
   {
@@ -60,6 +65,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-40',
     projectWidthClass: 'w-24',
     nextWidthClass: 'w-28',
+    lastRunWidthClass: 'w-16',
     statusWidthClass: 'w-16'
   },
   {
@@ -68,6 +74,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-32',
     projectWidthClass: 'w-36',
     nextWidthClass: 'w-24',
+    lastRunWidthClass: 'w-20',
     statusWidthClass: 'w-14'
   },
   {
@@ -76,6 +83,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-24',
     projectWidthClass: 'w-28',
     nextWidthClass: 'w-20',
+    lastRunWidthClass: 'w-24',
     statusWidthClass: 'w-16'
   },
   {
@@ -84,6 +92,7 @@ const TABLE_ROW_SKELETONS = [
     scheduleWidthClass: 'w-36',
     projectWidthClass: 'w-20',
     nextWidthClass: 'w-24',
+    lastRunWidthClass: 'w-16',
     statusWidthClass: 'w-14'
   }
 ] as const
@@ -91,7 +100,7 @@ const TABLE_ROW_SKELETONS = [
 export function AutomationsPageSkeleton(): React.JSX.Element {
   return (
     <div
-      className="flex min-h-0 flex-1 flex-col gap-3 overflow-hidden px-3 pb-4 md:px-5"
+      className="flex min-h-0 flex-1 flex-col gap-4 overflow-hidden px-3 pb-4 md:px-5"
       aria-busy="true"
       aria-label={translate(
         'auto.components.automations.AutomationsPageSkeleton.55527b7bcf',
@@ -100,7 +109,8 @@ export function AutomationsPageSkeleton(): React.JSX.Element {
     >
       <div className="flex shrink-0 items-center justify-between gap-3">
         <div className="flex min-w-0 items-center gap-2">
-          <SkeletonBar className="h-8 w-full max-w-xs rounded-md" />
+          <SkeletonBar className="h-8 w-56 shrink-0 rounded-md" />
+          <SkeletonBar className="h-8 w-20 shrink-0 rounded-md" />
           <SkeletonBar className="size-8 shrink-0 rounded-md" />
         </div>
         <SkeletonBar className="h-8 w-32 shrink-0 rounded-md" />
@@ -114,6 +124,7 @@ export function AutomationsPageSkeleton(): React.JSX.Element {
           <SkeletonBar className="h-2.5 w-14" />
           <SkeletonBar className="h-2.5 w-14" />
           <SkeletonBar className="h-2.5 w-16" />
+          <SkeletonBar className="h-2.5 w-16" />
           <SkeletonBar className="h-2.5 w-12" />
           <SkeletonBar className="mx-auto h-2.5 w-10" />
           <span />
diff --git a/src/renderer/src/components/automations/automation-draft-model.ts b/src/renderer/src/components/automations/automation-draft-model.ts
index 747bc615782..2abf4511388 100644
--- a/src/renderer/src/components/automations/automation-draft-model.ts
+++ b/src/renderer/src/components/automations/automation-draft-model.ts
@@ -17,8 +17,8 @@ export function formatTimeInput(hour: number, minute: number): string {
 export function parseDraftTime(time: string): { hour: number; minute: number } {
   const [rawHour, rawMinute] = time.split(':').map((part) => Number(part))
   return {
-    hour: Number.isFinite(rawHour) ? rawHour : 9,
-    minute: Number.isFinite(rawMinute) ? rawMinute : 0
+    hour: Number.isInteger(rawHour) && rawHour >= 0 && rawHour <= 23 ? rawHour : 9,
+    minute: Number.isInteger(rawMinute) && rawMinute >= 0 && rawMinute <= 59 ? rawMinute : 0
   }
 }
 
diff --git a/src/renderer/src/components/automations/automation-list-last-run.test.ts b/src/renderer/src/components/automations/automation-list-last-run.test.ts
new file mode 100644
index 00000000000..7eb54e123a5
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-list-last-run.test.ts
@@ -0,0 +1,168 @@
+import { describe, expect, it } from 'vitest'
+import type {
+  Automation,
+  AutomationRun,
+  ExternalAutomationJob
+} from '../../../../shared/automations-types'
+import {
+  formatAutomationLastRunCell,
+  getExternalAutomationLastRunSnapshot,
+  getLocalAutomationLastRunSnapshot,
+  getToneForAutomationRunStatus,
+  indexLatestAutomationRuns
+} from './automation-list-last-run'
+
+function makeAutomation(overrides: Partial<Automation> = {}): Automation {
+  return {
+    id: 'automation-1',
+    name: 'Nightly',
+    prompt: 'run',
+    precheck: null,
+    agentId: 'codex',
+    projectId: 'repo-1',
+    executionTargetType: 'local',
+    executionTargetId: 'local',
+    schedulerOwner: 'local_host_service',
+    workspaceMode: 'existing',
+    workspaceId: 'worktree-1',
+    baseBranch: null,
+    reuseSession: false,
+    timezone: 'UTC',
+    rrule: 'FREQ=DAILY',
+    dtstart: 1,
+    enabled: true,
+    nextRunAt: 2,
+    missedRunPolicy: 'run_once_within_grace',
+    missedRunGraceMinutes: 720,
+    createdAt: 1,
+    updatedAt: 1,
+    ...overrides
+  }
+}
+
+function makeRun(overrides: Partial<AutomationRun> = {}): AutomationRun {
+  return {
+    id: 'run-1',
+    automationId: 'automation-1',
+    title: 'Nightly',
+    scheduledFor: 10,
+    status: 'completed',
+    trigger: 'scheduled',
+    workspaceId: 'worktree-1',
+    sessionKind: 'terminal',
+    chatSessionId: null,
+    terminalSessionId: null,
+    terminalPaneKey: null,
+    terminalPtyId: null,
+    outputSnapshot: null,
+    precheckResult: null,
+    usage: null,
+    error: null,
+    startedAt: 20,
+    dispatchedAt: 30,
+    createdAt: 10,
+    ...overrides
+  }
+}
+
+function makeJob(overrides: Partial<ExternalAutomationJob> = {}): ExternalAutomationJob {
+  return {
+    id: 'job-1',
+    managerId: 'manager-1',
+    provider: 'hermes',
+    name: 'Digest',
+    schedule: '0 9 * * 1-5',
+    rawSchedule: null,
+    enabled: true,
+    state: 'enabled',
+    prompt: null,
+    promptPreview: '',
+    nextRunAt: null,
+    lastRunAt: null,
+    lastStatus: null,
+    lastError: null,
+    workdir: null,
+    runCount: 0,
+    runs: [],
+    ...overrides
+  }
+}
+
+describe('automation-list-last-run', () => {
+  it('indexes the newest run per automation', () => {
+    const latest = indexLatestAutomationRuns([
+      makeRun({ id: 'old', createdAt: 10, dispatchedAt: 10 }),
+      makeRun({ id: 'new', createdAt: 50, dispatchedAt: 50, status: 'dispatch_failed' }),
+      makeRun({ id: 'other', automationId: 'automation-2', createdAt: 20 })
+    ])
+    expect(latest.get('automation-1')?.id).toBe('new')
+    expect(latest.get('automation-2')?.id).toBe('other')
+  })
+
+  it('classifies local run statuses', () => {
+    expect(getToneForAutomationRunStatus('dispatch_failed')).toBe('failed')
+    expect(getToneForAutomationRunStatus('completed')).toBe('succeeded')
+    expect(getToneForAutomationRunStatus('dispatched')).toBe('running')
+    expect(getToneForAutomationRunStatus('skipped_precheck')).toBe('skipped')
+  })
+
+  it('prefers the latest run over lastRunAt-only metadata', () => {
+    const snapshot = getLocalAutomationLastRunSnapshot(
+      makeAutomation({ lastRunAt: 5 }),
+      makeRun({ status: 'dispatch_failed', dispatchedAt: 40, createdAt: 40 })
+    )
+    expect(snapshot.tone).toBe('failed')
+    expect(snapshot.at).toBe(40)
+    expect(snapshot.statusLabel).toBe('Failed')
+  })
+
+  it('falls back to lastRunAt when no run history exists', () => {
+    const snapshot = getLocalAutomationLastRunSnapshot(makeAutomation({ lastRunAt: 99 }), undefined)
+    expect(snapshot).toEqual({ at: 99, tone: 'unknown', statusLabel: '' })
+  })
+
+  it('treats missing local history as never run', () => {
+    expect(getLocalAutomationLastRunSnapshot(makeAutomation(), undefined).tone).toBe('never')
+  })
+
+  it('classifies external last-run status and errors', () => {
+    expect(
+      getExternalAutomationLastRunSnapshot(
+        makeJob({ lastRunAt: '2026-08-12T01:00:00Z', lastStatus: 'failed' })
+      )
+    ).toMatchObject({ tone: 'failed', statusLabel: 'Failed' })
+    expect(
+      getExternalAutomationLastRunSnapshot(
+        makeJob({ lastRunAt: '2026-08-12T01:00:00Z', lastStatus: 'ok' })
+      )
+    ).toMatchObject({ tone: 'succeeded', statusLabel: 'Done' })
+    expect(
+      getExternalAutomationLastRunSnapshot(makeJob({ lastError: 'boom', lastStatus: null }))
+    ).toMatchObject({ tone: 'failed', statusLabel: 'Failed' })
+    expect(
+      getExternalAutomationLastRunSnapshot(
+        makeJob({ lastRunAt: '2026-08-12T01:00:00Z', lastStatus: 'ok', lastError: 'stale' })
+      )
+    ).toMatchObject({ tone: 'succeeded', statusLabel: 'Done' })
+    expect(getExternalAutomationLastRunSnapshot(makeJob()).tone).toBe('never')
+  })
+
+  it('formats last-run cells as status plus relative time', () => {
+    const now = Date.parse('2026-08-12T10:00:00Z')
+    const failed = formatAutomationLastRunCell(
+      { at: now - 8 * 60 * 60 * 1000, tone: 'failed', statusLabel: 'Failed' },
+      now
+    )
+    expect(failed.text).toBe('Failed 8h ago')
+    expect(failed.tone).toBe('failed')
+    expect(
+      formatAutomationLastRunCell({ at: null, tone: 'never', statusLabel: '' }, now).text
+    ).toBe('Never')
+    const failedNoTime = formatAutomationLastRunCell(
+      { at: null, tone: 'failed', statusLabel: 'Failed' },
+      now
+    )
+    expect(failedNoTime.text).toBe('Failed')
+    expect(failedNoTime.tone).toBe('failed')
+  })
+})
diff --git a/src/renderer/src/components/automations/automation-list-last-run.ts b/src/renderer/src/components/automations/automation-list-last-run.ts
new file mode 100644
index 00000000000..7d5127337fa
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-list-last-run.ts
@@ -0,0 +1,152 @@
+import { translate } from '@/i18n/i18n'
+import type {
+  Automation,
+  AutomationRun,
+  AutomationRunStatus,
+  ExternalAutomationJob
+} from '../../../../shared/automations-types'
+import {
+  formatAutomationDateTime,
+  formatAutomationRelativeTime,
+  getAutomationRunStatusLabel
+} from './automation-page-parts'
+
+export type AutomationLastRunTone =
+  | 'failed'
+  | 'succeeded'
+  | 'running'
+  | 'skipped'
+  | 'never'
+  | 'unknown'
+
+export type AutomationLastRunSnapshot = {
+  at: number | null
+  tone: AutomationLastRunTone
+  statusLabel: string
+}
+
+const EXTERNAL_FAILED_STATUSES = new Set(['failed', 'fail', 'error', 'dispatch_failed'])
+const EXTERNAL_SUCCEEDED_STATUSES = new Set([
+  'ok',
+  'completed',
+  'success',
+  'succeeded',
+  'done',
+  'healthy'
+])
+
+export function indexLatestAutomationRuns(
+  runs: readonly AutomationRun[]
+): ReadonlyMap<string, AutomationRun> {
+  const latest = new Map<string, AutomationRun>()
+  for (const run of runs) {
+    const existing = latest.get(run.automationId)
+    if (!existing || run.createdAt > existing.createdAt) {
+      latest.set(run.automationId, run)
+    }
+  }
+  return latest
+}
+
+export function getAutomationRunLastRunAt(run: AutomationRun): number {
+  return run.dispatchedAt ?? run.startedAt ?? run.createdAt
+}
+
+export function getToneForAutomationRunStatus(status: AutomationRunStatus): AutomationLastRunTone {
+  if (status === 'dispatch_failed') {
+    return 'failed'
+  }
+  if (status === 'completed') {
+    return 'succeeded'
+  }
+  if (status === 'pending' || status === 'dispatching' || status === 'dispatched') {
+    return 'running'
+  }
+  if (status.startsWith('skipped')) {
+    return 'skipped'
+  }
+  return 'unknown'
+}
+
+export function getLocalAutomationLastRunSnapshot(
+  automation: Automation,
+  lastRun: AutomationRun | undefined
+): AutomationLastRunSnapshot {
+  if (lastRun) {
+    return {
+      at: getAutomationRunLastRunAt(lastRun),
+      tone: getToneForAutomationRunStatus(lastRun.status),
+      statusLabel: getAutomationRunStatusLabel(lastRun.status)
+    }
+  }
+  if (automation.lastRunAt) {
+    return {
+      at: automation.lastRunAt,
+      tone: 'unknown',
+      statusLabel: ''
+    }
+  }
+  return { at: null, tone: 'never', statusLabel: '' }
+}
+
+function parseExternalLastRunAt(value: string | null): number | null {
+  if (!value) {
+    return null
+  }
+  const parsed = Date.parse(value)
+  return Number.isFinite(parsed) ? parsed : null
+}
+
+export function getExternalAutomationLastRunSnapshot(
+  job: ExternalAutomationJob
+): AutomationLastRunSnapshot {
+  const at = parseExternalLastRunAt(job.lastRunAt)
+  const raw = job.lastStatus?.trim() ?? ''
+  const normalized = raw.toLowerCase()
+  if (!at && !raw && !job.lastError) {
+    return { at: null, tone: 'never', statusLabel: '' }
+  }
+  if (EXTERNAL_SUCCEEDED_STATUSES.has(normalized)) {
+    return {
+      at,
+      tone: 'succeeded',
+      statusLabel: translate('auto.components.automations.automation.list.last.run.done', 'Done')
+    }
+  }
+  if (EXTERNAL_FAILED_STATUSES.has(normalized) || Boolean(job.lastError)) {
+    return {
+      at,
+      tone: 'failed',
+      statusLabel: translate(
+        'auto.components.automations.automation.list.last.run.failed',
+        'Failed'
+      )
+    }
+  }
+  if (raw) {
+    return { at, tone: 'unknown', statusLabel: raw }
+  }
+  return { at, tone: 'unknown', statusLabel: '' }
+}
+
+export function formatAutomationLastRunCell(
+  snapshot: AutomationLastRunSnapshot,
+  now: number
+): { text: string; title: string; tone: AutomationLastRunTone } {
+  const status = snapshot.statusLabel.trim()
+  if (snapshot.tone === 'never') {
+    const never = formatAutomationDateTime(null)
+    return { text: never, title: never, tone: 'never' }
+  }
+  if (snapshot.at == null) {
+    return { text: status || formatAutomationDateTime(null), title: status, tone: snapshot.tone }
+  }
+  const relative = formatAutomationRelativeTime(snapshot.at, now)
+  const absolute = formatAutomationDateTime(snapshot.at)
+  const text = status && relative ? `${status} ${relative}` : status || relative || absolute
+  return {
+    text,
+    title: status ? `${status} · ${absolute}` : absolute,
+    tone: snapshot.tone
+  }
+}
diff --git a/src/renderer/src/components/automations/automation-list-view.test.ts b/src/renderer/src/components/automations/automation-list-view.test.ts
new file mode 100644
index 00000000000..01a0cfa7799
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-list-view.test.ts
@@ -0,0 +1,167 @@
+import { describe, expect, it } from 'vitest'
+import type {
+  Automation,
+  AutomationRun,
+  ExternalAutomationJob,
+  ExternalAutomationManager
+} from '../../../../shared/automations-types'
+import {
+  applyAutomationListView,
+  countAutomationListFilters,
+  isAutomationListFilterActive,
+  nextAutomationListSort
+} from './automation-list-view'
+import type { ExternalAutomationListEntry } from './external-automation-list-entries'
+
+function makeAutomation(overrides: Partial<Automation> = {}): Automation {
+  return {
+    id: 'automation-1',
+    name: 'Zebra job',
+    prompt: 'run',
+    precheck: null,
+    agentId: 'codex',
+    projectId: 'repo-1',
+    executionTargetType: 'local',
+    executionTargetId: 'local',
+    schedulerOwner: 'local_host_service',
+    workspaceMode: 'existing',
+    workspaceId: 'worktree-1',
+    baseBranch: null,
+    reuseSession: false,
+    timezone: 'UTC',
+    rrule: 'FREQ=DAILY',
+    dtstart: 1,
+    enabled: true,
+    nextRunAt: 2,
+    missedRunPolicy: 'run_once_within_grace',
+    missedRunGraceMinutes: 720,
+    createdAt: 1,
+    updatedAt: 1,
+    ...overrides
+  }
+}
+
+function makeRun(overrides: Partial<AutomationRun> = {}): AutomationRun {
+  return {
+    id: 'run-1',
+    automationId: 'automation-1',
+    title: 'Zebra job',
+    scheduledFor: 10,
+    status: 'completed',
+    trigger: 'scheduled',
+    workspaceId: 'worktree-1',
+    sessionKind: 'terminal',
+    chatSessionId: null,
+    terminalSessionId: null,
+    terminalPaneKey: null,
+    terminalPtyId: null,
+    outputSnapshot: null,
+    precheckResult: null,
+    usage: null,
+    error: null,
+    startedAt: 20,
+    dispatchedAt: 30,
+    createdAt: 10,
+    ...overrides
+  }
+}
+
+function makeExternalEntry(
+  overrides: Partial<ExternalAutomationJob> = {}
+): ExternalAutomationListEntry {
+  const manager: ExternalAutomationManager = {
+    id: 'manager-1',
+    provider: 'hermes',
+    label: 'Local Hermes',
+    targetLabel: 'Local',
+    target: { type: 'local' },
+    status: 'available',
+    error: null,
+    canManage: true,
+    jobs: []
+  }
+  const job: ExternalAutomationJob = {
+    id: 'job-1',
+    managerId: manager.id,
+    provider: 'hermes',
+    name: 'Alpha digest',
+    schedule: '0 9 * * 1-5',
+    rawSchedule: null,
+    enabled: true,
+    state: 'enabled',
+    prompt: null,
+    promptPreview: '',
+    nextRunAt: null,
+    lastRunAt: '2026-08-12T01:00:00Z',
+    lastStatus: 'failed',
+    lastError: null,
+    workdir: null,
+    runCount: 1,
+    runs: [],
+    ...overrides
+  }
+  return { key: `${manager.id}:${job.id}`, manager, job }
+}
+
+describe('automation-list-view', () => {
+  it('counts and detects active filters', () => {
+    expect(isAutomationListFilterActive({ status: 'all', lastRun: 'all' })).toBe(false)
+    expect(isAutomationListFilterActive({ status: 'paused', lastRun: 'all' })).toBe(true)
+    expect(countAutomationListFilters({ status: 'paused', lastRun: 'failed' })).toBe(2)
+  })
+
+  it('toggles sort direction and defaults last run to newest first', () => {
+    expect(nextAutomationListSort(null, 'name')).toEqual({ field: 'name', direction: 'asc' })
+    expect(nextAutomationListSort(null, 'lastRun')).toEqual({ field: 'lastRun', direction: 'desc' })
+    expect(nextAutomationListSort({ field: 'name', direction: 'asc' }, 'name')).toEqual({
+      field: 'name',
+      direction: 'desc'
+    })
+    expect(nextAutomationListSort({ field: 'name', direction: 'asc' }, 'lastRun')).toEqual({
+      field: 'lastRun',
+      direction: 'desc'
+    })
+  })
+
+  it('filters by enabled state and last-run outcome', () => {
+    const items = applyAutomationListView({
+      automations: [
+        makeAutomation({ id: 'paused', name: 'Paused', enabled: false }),
+        makeAutomation({ id: 'ok', name: 'Healthy' })
+      ],
+      externalEntries: [makeExternalEntry()],
+      runs: [
+        makeRun({ automationId: 'paused', status: 'completed' }),
+        makeRun({ automationId: 'ok', status: 'dispatch_failed' })
+      ],
+      filter: { status: 'enabled', lastRun: 'failed' },
+      sort: null
+    })
+    expect(items.map((item) => item.id)).toEqual(['ok', 'manager-1:job-1'])
+  })
+
+  it('sorts by name across local and external rows', () => {
+    const items = applyAutomationListView({
+      automations: [makeAutomation({ name: 'Zebra job' })],
+      externalEntries: [makeExternalEntry({ name: 'Alpha digest' })],
+      runs: [],
+      filter: { status: 'all', lastRun: 'all' },
+      sort: { field: 'name', direction: 'asc' }
+    })
+    expect(items.map((item) => item.name)).toEqual(['Alpha digest', 'Zebra job'])
+  })
+
+  it('sorts by last run newest first and keeps never-run rows last', () => {
+    const items = applyAutomationListView({
+      automations: [
+        makeAutomation({ id: 'old', name: 'Old' }),
+        makeAutomation({ id: 'never', name: 'Never' })
+      ],
+      externalEntries: [makeExternalEntry({ lastRunAt: '2026-08-12T09:00:00Z' })],
+      runs: [makeRun({ automationId: 'old', dispatchedAt: Date.parse('2026-08-11T09:00:00Z') })],
+      filter: { status: 'all', lastRun: 'all' },
+      sort: { field: 'lastRun', direction: 'desc' }
+    })
+    expect(items.map((item) => item.id)).toEqual(['manager-1:job-1', 'old', 'never'])
+  })
+})
diff --git a/src/renderer/src/components/automations/automation-list-view.ts b/src/renderer/src/components/automations/automation-list-view.ts
new file mode 100644
index 00000000000..49d44aadb3d
--- /dev/null
+++ b/src/renderer/src/components/automations/automation-list-view.ts
@@ -0,0 +1,191 @@
+import { getIntlLocale } from '@/i18n/i18n'
+import type { Automation, AutomationRun } from '../../../../shared/automations-types'
+import type { ExternalAutomationListEntry } from './external-automation-list-entries'
+import {
+  getExternalAutomationLastRunSnapshot,
+  getLocalAutomationLastRunSnapshot,
+  indexLatestAutomationRuns,
+  type AutomationLastRunSnapshot
+} from './automation-list-last-run'
+
+export type AutomationListStatusFilter = 'all' | 'enabled' | 'paused'
+export type AutomationListLastRunFilter = 'all' | 'failed' | 'succeeded' | 'never'
+export type AutomationListSortField = 'name' | 'lastRun'
+export type AutomationListSortDirection = 'asc' | 'desc'
+
+export type AutomationListSort = {
+  field: AutomationListSortField
+  direction: AutomationListSortDirection
+}
+
+export type AutomationListViewItem =
+  | {
+      kind: 'local'
+      id: string
+      name: string
+      enabled: boolean
+      lastRunAt: number | null
+      lastRun: AutomationLastRunSnapshot
+      automation: Automation
+    }
+  | {
+      kind: 'external'
+      id: string
+      name: string
+      enabled: boolean
+      lastRunAt: number | null
+      lastRun: AutomationLastRunSnapshot
+      entry: ExternalAutomationListEntry
+    }
+
+export type AutomationListFilter = {
+  status: AutomationListStatusFilter
+  lastRun: AutomationListLastRunFilter
+}
+
+export const EMPTY_AUTOMATION_LIST_FILTER: AutomationListFilter = {
+  status: 'all',
+  lastRun: 'all'
+}
+
+export function isAutomationListFilterActive(filter: AutomationListFilter): boolean {
+  return filter.status !== 'all' || filter.lastRun !== 'all'
+}
+
+export function countAutomationListFilters(filter: AutomationListFilter): number {
+  return (filter.status !== 'all' ? 1 : 0) + (filter.lastRun !== 'all' ? 1 : 0)
+}
+
+export function defaultAutomationListSortDirection(
+  field: AutomationListSortField
+): AutomationListSortDirection {
+  return field === 'lastRun' ? 'desc' : 'asc'
+}
+
+export function nextAutomationListSort(
+  current: AutomationListSort | null,
+  field: AutomationListSortField
+): AutomationListSort {
+  if (current?.field !== field) {
+    return { field, direction: defaultAutomationListSortDirection(field) }
+  }
+  return {
+    field,
+    direction: current.direction === 'asc' ? 'desc' : 'asc'
+  }
+}
+
+function matchesStatusFilter(enabled: boolean, filter: AutomationListStatusFilter): boolean {
+  if (filter === 'all') {
+    return true
+  }
+  return filter === 'enabled' ? enabled : !enabled
+}
+
+function matchesLastRunFilter(
+  snapshot: AutomationLastRunSnapshot,
+  filter: AutomationListLastRunFilter
+): boolean {
+  if (filter === 'all') {
+    return true
+  }
+  return snapshot.tone === filter
+}
+
+export function buildAutomationListViewItems({
+  automations,
+  externalEntries,
+  runs
+}: {
+  automations: readonly Automation[]
+  externalEntries: readonly ExternalAutomationListEntry[]
+  runs: readonly AutomationRun[]
+}): AutomationListViewItem[] {
+  const lastRunByAutomationId = indexLatestAutomationRuns(runs)
+  const locals: AutomationListViewItem[] = automations.map((automation) => {
+    const lastRun = getLocalAutomationLastRunSnapshot(
+      automation,
+      lastRunByAutomationId.get(automation.id)
+    )
+    return {
+      kind: 'local',
+      id: automation.id,
+      name: automation.name,
+      enabled: automation.enabled,
+      lastRunAt: lastRun.at,
+      lastRun,
+      automation
+    }
+  })
+  const externals: AutomationListViewItem[] = externalEntries.map((entry) => {
+    const lastRun = getExternalAutomationLastRunSnapshot(entry.job)
+    return {
+      kind: 'external',
+      id: entry.key,
+      name: entry.job.name,
+      enabled: entry.job.enabled,
+      lastRunAt: lastRun.at,
+      lastRun,
+      entry
+    }
+  })
+  return [...locals, ...externals]
+}
+
+export function filterAutomationListViewItems(
+  items: readonly AutomationListViewItem[],
+  filter: AutomationListFilter
+): AutomationListViewItem[] {
+  if (!isAutomationListFilterActive(filter)) {
+    return [...items]
+  }
+  return items.filter(
+    (item) =>
+      matchesStatusFilter(item.enabled, filter.status) &&
+      matchesLastRunFilter(item.lastRun, filter.lastRun)
+  )
+}
+
+export function sortAutomationListViewItems(
+  items: readonly AutomationListViewItem[],
+  sort: AutomationListSort | null
+): AutomationListViewItem[] {
+  if (!sort) {
+    return [...items]
+  }
+  const next = [...items]
+  const locale = getIntlLocale()
+  next.sort((left, right) => {
+    const compared =
+      sort.field === 'name'
+        ? left.name.localeCompare(right.name, locale, { sensitivity: 'base' })
+        : (left.lastRunAt ?? 0) - (right.lastRunAt ?? 0)
+    if (compared !== 0) {
+      return sort.direction === 'asc' ? compared : -compared
+    }
+    return left.id.localeCompare(right.id)
+  })
+  return next
+}
+
+export function applyAutomationListView({
+  automations,
+  externalEntries,
+  runs,
+  filter,
+  sort
+}: {
+  automations: readonly Automation[]
+  externalEntries: readonly ExternalAutomationListEntry[]
+  runs: readonly AutomationRun[]
+  filter: AutomationListFilter
+  sort: AutomationListSort | null
+}): AutomationListViewItem[] {
+  return sortAutomationListViewItems(
+    filterAutomationListViewItems(
+      buildAutomationListViewItems({ automations, externalEntries, runs }),
+      filter
+    ),
+    sort
+  )
+}
diff --git a/src/renderer/src/components/automations/automations-table-layout.ts b/src/renderer/src/components/automations/automations-table-layout.ts
index f6947f8c7f4..b32c09d9fac 100644
--- a/src/renderer/src/components/automations/automations-table-layout.ts
+++ b/src/renderer/src/components/automations/automations-table-layout.ts
@@ -1,8 +1,8 @@
 /** Shared layout classes for the automations list table.
  * Matches AutomationRunHistory / ExternalAutomationRunTable / Tasks list tables. */
-// Name | Schedule | Project | Next run | Status | Agent | Actions
+// Name | Schedule | Project | Next run | Last run | Status | Agent | Actions
 export const AUTOMATIONS_TABLE_GRID_CLASS =
-  'grid grid-cols-[minmax(0,1.5fr)_minmax(7rem,10rem)_minmax(5rem,9rem)_minmax(10rem,1.2fr)_minmax(4.5rem,6rem)_2.5rem_2.5rem]'
+  'grid grid-cols-[minmax(0,1.4fr)_minmax(7.5rem,10rem)_minmax(4.5rem,8rem)_minmax(8.5rem,1fr)_minmax(8rem,11rem)_minmax(4.5rem,6rem)_2.5rem_2.5rem]'
 
 export const AUTOMATIONS_TABLE_CONTAINER_CLASS = 'rounded-md border border-border/50 bg-muted/20'
 
@@ -10,6 +10,6 @@ export const AUTOMATIONS_TABLE_HEADER_CLASS =
   'sticky top-0 z-10 h-8 items-center gap-3 border-b border-border/50 bg-muted/25 px-3 text-[11px] font-medium uppercase tracking-[0.08em] text-muted-foreground'
 
 export const AUTOMATIONS_TABLE_ROW_CLASS =
-  'w-full cursor-pointer items-center gap-3 px-3 py-2 text-left text-sm transition-colors hover:bg-accent hover:text-accent-foreground focus-visible:outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50'
+  'w-full min-h-11 cursor-pointer items-center gap-3 px-3 py-3 text-left text-sm transition-colors hover:bg-accent hover:text-accent-foreground focus-visible:outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50'
 
 export const AUTOMATIONS_TABLE_ROW_SELECTED_CLASS = 'bg-accent text-accent-foreground'
diff --git a/src/renderer/src/components/automations/use-automation-list-view.ts b/src/renderer/src/components/automations/use-automation-list-view.ts
new file mode 100644
index 00000000000..f87550c4079
--- /dev/null
+++ b/src/renderer/src/components/automations/use-automation-list-view.ts
@@ -0,0 +1,98 @@
+import { useEffect, useMemo } from 'react'
+import type { Automation, AutomationRun } from '../../../../shared/automations-types'
+import type { ExternalAutomationListEntry } from './external-automation-list-entries'
+import {
+  applyAutomationListView,
+  isAutomationListFilterActive,
+  type AutomationListFilter,
+  type AutomationListSort,
+  type AutomationListViewItem
+} from './automation-list-view'
+
+export function useAutomationListView({
+  automations,
+  externalEntries,
+  runs,
+  filter,
+  sort,
+  selectedId,
+  selectedExternalKey,
+  selectAutomationId,
+  selectExternalKey
+}: {
+  automations: readonly Automation[]
+  externalEntries: readonly ExternalAutomationListEntry[]
+  runs: readonly AutomationRun[]
+  filter: AutomationListFilter
+  sort: AutomationListSort | null
+  selectedId: string | null
+  selectedExternalKey: string | null
+  selectAutomationId: (automationId: string | null) => void
+  selectExternalKey: (externalKey: string | null) => void
+}): {
+  visibleItems: readonly AutomationListViewItem[]
+  isListFilterActive: boolean
+  hasVisibleListItems: boolean
+} {
+  const isListFilterActive = isAutomationListFilterActive(filter)
+  const visibleItems = useMemo(
+    () =>
+      applyAutomationListView({
+        automations,
+        externalEntries,
+        runs,
+        filter,
+        sort
+      }),
+    [automations, externalEntries, filter, runs, sort]
+  )
+  const hasVisibleListItems = visibleItems.length > 0
+
+  // Why: search already hides rows; filter/sort must keep highlight + detail on a
+  // still-visible row so the list never points at something the user cannot see.
+  useEffect(() => {
+    if (!isListFilterActive && !sort) {
+      return
+    }
+    const localVisible =
+      selectedExternalKey === null &&
+      selectedId != null &&
+      visibleItems.some((item) => item.kind === 'local' && item.id === selectedId)
+    const externalVisible =
+      selectedExternalKey != null &&
+      visibleItems.some((item) => item.kind === 'external' && item.id === selectedExternalKey)
+    if (localVisible || externalVisible) {
+      return
+    }
+    const first = visibleItems[0]
+    if (!first) {
+      return
+    }
+    if (first.kind === 'local') {
+      if (selectedExternalKey !== null) {
+        selectExternalKey(null)
+      }
+      if (selectedId !== first.id) {
+        selectAutomationId(first.id)
+      }
+      return
+    }
+    if (selectedExternalKey !== first.id) {
+      selectExternalKey(first.id)
+    }
+  }, [
+    isListFilterActive,
+    selectAutomationId,
+    selectExternalKey,
+    selectedExternalKey,
+    selectedId,
+    sort,
+    visibleItems
+  ])
+
+  return {
+    visibleItems,
+    isListFilterActive,
+    hasVisibleListItems
+  }
+}
diff --git a/src/renderer/src/components/browser-cookie-import-google-disclosure.test.tsx b/src/renderer/src/components/browser-cookie-import-google-disclosure.test.tsx
new file mode 100644
index 00000000000..0d17baed21b
--- /dev/null
+++ b/src/renderer/src/components/browser-cookie-import-google-disclosure.test.tsx
@@ -0,0 +1,187 @@
+/**
+ * @vitest-environment happy-dom
+ *
+ * STA-3811: imports never touch the Google cookie family, so every import menu must disclose it
+ * at the moment of decision.
+ */
+import { act, type ReactNode } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import en from '@/i18n/locales/en.json'
+
+const DISCLOSURE_TITLE = "Google logins aren't imported"
+const DISCLOSURE_DESCRIPTION = 'Sign in to Google directly in Orca.'
+
+vi.mock('@/components/ui/dropdown-menu', () => dropdownMenuStubs())
+vi.mock('../ui/dropdown-menu', () => dropdownMenuStubs())
+vi.mock('@/components/ui/popover', () => popoverStubs())
+vi.mock('@/store', () => ({ useAppStore: appStoreStub() }))
+vi.mock('../../store', () => ({ useAppStore: appStoreStub() }))
+vi.mock('sonner', () => ({ toast: { success: vi.fn(), error: vi.fn() } }))
+
+import { BrowserCookieImportDisclosure } from './BrowserCookieImportDisclosure'
+import { BrowserImportHintButton } from './browser-pane/BrowserImportHintButton'
+import { BrowserToolbarMenuDropdown } from './browser-pane/browser-toolbar-menu-dropdown'
+import { BrowserProfileRow } from './settings/BrowserProfileRow'
+import { BrowserUseCookieImportStep } from './settings/BrowserUseCookieImportStep'
+
+const DETECTED_BROWSERS = [
+  {
+    family: 'chrome',
+    label: 'Google Chrome',
+    profiles: [{ name: 'Default', directory: 'Default' }],
+    selectedProfile: 'Default'
+  }
+]
+
+describe('cookie-import Google disclosure footer', () => {
+  let container: HTMLDivElement
+  let root: Root
+
+  beforeEach(() => {
+    container = document.createElement('div')
+    document.body.append(container)
+    root = createRoot(container)
+  })
+
+  afterEach(() => {
+    act(() => root.unmount())
+    container.remove()
+  })
+
+  it.each([
+    [
+      'browser toolbar overflow',
+      () => (
+        <BrowserToolbarMenuDropdown
+          menuOpen
+          onMenuOpenChange={vi.fn()}
+          allProfiles={[]}
+          effectiveProfileId="default"
+          onSwitchProfile={vi.fn()}
+          onNewProfile={vi.fn()}
+          detectedBrowsers={DETECTED_BROWSERS}
+          onFetchDetectedBrowsers={vi.fn()}
+          browserSessionImportState={null}
+          onImportFromBrowser={vi.fn()}
+          onImportFromFile={vi.fn()}
+          viewportPresetId={null}
+          onApplyViewportPreset={vi.fn()}
+        />
+      )
+    ],
+    ['browser toolbar hint', () => <BrowserImportHintButton profileId="default" />],
+    [
+      'Settings browser-use setup',
+      () => (
+        <BrowserUseCookieImportStep
+          cookiesImported={false}
+          isImportingDefault={false}
+          step3Blocked={false}
+          sourceLabel={null}
+        />
+      )
+    ],
+    [
+      'Settings browser-profile row',
+      () => (
+        <BrowserProfileRow
+          profile={{ id: 'default', name: 'Default', partition: 'persist:default' } as never}
+          detectedBrowsers={DETECTED_BROWSERS}
+          importState={null}
+          isActive
+          onSelect={vi.fn()}
+        />
+      )
+    ]
+  ] satisfies [string, () => ReactNode][])('is shown in the %s menu', (_name, renderSurface) => {
+    act(() => root.render(renderSurface()))
+
+    expect(container.textContent).toContain(DISCLOSURE_TITLE)
+    expect(container.textContent).toContain(DISCLOSURE_DESCRIPTION)
+  })
+
+  it('renders the icon and separator as non-interactive footer chrome', () => {
+    act(() => root.render(<BrowserCookieImportDisclosure />))
+
+    const label = container.querySelector('[data-testid="dropdown-menu-label"]')
+    expect(label?.querySelector('svg')).not.toBeNull()
+    expect(label?.previousElementSibling?.tagName).toBe('HR')
+  })
+
+  it('reads the footer copy from the catalog', () => {
+    expect(catalogEntry('auto.components.BrowserCookieImportDisclosure.title')).toBe(
+      DISCLOSURE_TITLE
+    )
+    expect(catalogEntry('auto.components.BrowserCookieImportDisclosure.description')).toBe(
+      DISCLOSURE_DESCRIPTION
+    )
+  })
+})
+
+function catalogEntry(key: string): unknown {
+  return key
+    .split('.')
+    .reduce<unknown>(
+      (node, part) =>
+        typeof node === 'object' && node !== null
+          ? (node as Record<string, unknown>)[part]
+          : undefined,
+      en
+    )
+}
+
+function dropdownMenuStubs(): Record<string, unknown> {
+  const passthrough = ({ children }: { children?: ReactNode }): ReactNode => children
+  const block = ({ children }: { children?: ReactNode }): ReactNode => <div>{children}</div>
+  return {
+    DropdownMenu: passthrough,
+    DropdownMenuContent: block,
+    DropdownMenuItem: block,
+    DropdownMenuLabel: ({ children }: { children?: ReactNode }): ReactNode => (
+      <div data-testid="dropdown-menu-label">{children}</div>
+    ),
+    DropdownMenuPortal: passthrough,
+    DropdownMenuRadioGroup: passthrough,
+    DropdownMenuRadioItem: block,
+    DropdownMenuSeparator: () => <hr />,
+    DropdownMenuSub: passthrough,
+    DropdownMenuSubContent: block,
+    DropdownMenuSubTrigger: block,
+    DropdownMenuTrigger: passthrough
+  }
+}
+
+function popoverStubs(): Record<string, unknown> {
+  const passthrough = ({ children }: { children?: ReactNode }): ReactNode => children
+  const block = ({ children }: { children?: ReactNode }): ReactNode => <div>{children}</div>
+  return { Popover: passthrough, PopoverContent: block, PopoverTrigger: passthrough }
+}
+
+function appStoreStub(): unknown {
+  const state = {
+    browserImportHintHidden: false,
+    browserSessionImportState: null,
+    detectedBrowsers: [
+      {
+        family: 'chrome',
+        label: 'Google Chrome',
+        profiles: [{ name: 'Default', directory: 'Default' }],
+        selectedProfile: 'Default'
+      }
+    ],
+    detectedBrowsersLoaded: true,
+    fetchDetectedBrowsers: vi.fn(),
+    importCookiesFromBrowser: vi.fn(),
+    importCookiesToProfile: vi.fn(),
+    openSettingsTarget: vi.fn(),
+    openSettingsPage: vi.fn(),
+    persistedUIReady: true,
+    setBrowserImportHintHidden: vi.fn(),
+    settingsSearchQuery: ''
+  }
+  const useAppStore = (selector?: (s: typeof state) => unknown): unknown =>
+    selector ? selector(state) : state
+  useAppStore.getState = (): typeof state => state
+  return useAppStore
+}
diff --git a/src/renderer/src/components/browser-pane/BrowserImportHintButton.tsx b/src/renderer/src/components/browser-pane/BrowserImportHintButton.tsx
index 32af12eeb10..0f318fb8107 100644
--- a/src/renderer/src/components/browser-pane/BrowserImportHintButton.tsx
+++ b/src/renderer/src/components/browser-pane/BrowserImportHintButton.tsx
@@ -3,6 +3,7 @@ import { Import } from 'lucide-react'
 import { toast } from 'sonner'
 import { emitBrowserCookieImportToast } from '@/lib/browser-cookie-import-toast'
 import { Button } from '@/components/ui/button'
+import { BrowserCookieImportDisclosure } from '@/components/BrowserCookieImportDisclosure'
 import {
   DropdownMenu,
   DropdownMenuContent,
@@ -100,7 +101,8 @@ export function BrowserImportHintButton({
               value1: browser?.label ?? browserFamily,
               value2: browserProfile ? ` (${browserProfile})` : ''
             }
-          )
+          ),
+          result.executionHostLabel
         )
         return
       }
@@ -120,7 +122,8 @@ export function BrowserImportHintButton({
           'auto.components.browser.pane.BrowserImportHintButton.d40d584769',
           'Imported {{value0}} cookies from file.',
           { value0: result.summary.importedCookies }
-        )
+        ),
+        result.executionHostLabel
       )
       return
     }
@@ -257,6 +260,7 @@ export function BrowserImportHintButton({
                     'From File…'
                   )}
                 </DropdownMenuItem>
+                <BrowserCookieImportDisclosure />
               </DropdownMenuContent>
             </DropdownMenu>
 
diff --git a/src/renderer/src/components/browser-pane/BrowserPane.remote-link-routing.test.ts b/src/renderer/src/components/browser-pane/BrowserPane.remote-link-routing.test.ts
new file mode 100644
index 00000000000..2ea6375f123
--- /dev/null
+++ b/src/renderer/src/components/browser-pane/BrowserPane.remote-link-routing.test.ts
@@ -0,0 +1,19 @@
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { describe, expect, it } from 'vitest'
+
+describe('remote browser link routing', () => {
+  it('pins context-menu opens to the runtime that owns the pane', () => {
+    const source = readFileSync(
+      fileURLToPath(new URL('./BrowserPane.tsx', import.meta.url)),
+      'utf8'
+    )
+    const paneStart = source.indexOf('function RemoteBrowserPagePane')
+    const actionStart = source.indexOf('void openWorkspaceBrowserTab({', paneStart)
+    const actionEnd = source.indexOf('}).catch((error) => {', actionStart)
+    const openRequest = source.slice(actionStart, actionEnd)
+
+    expect(openRequest).toContain('workspaceId: worktreeId')
+    expect(openRequest).toContain('expectedRuntimeEnvironmentId: runtimeEnvironmentId')
+  })
+})
diff --git a/src/renderer/src/components/browser-pane/BrowserPane.tsx b/src/renderer/src/components/browser-pane/BrowserPane.tsx
index ada2d7a07ae..9158962d88c 100644
--- a/src/renderer/src/components/browser-pane/BrowserPane.tsx
+++ b/src/renderer/src/components/browser-pane/BrowserPane.tsx
@@ -189,6 +189,7 @@ import { shouldPollChromiumErrorPage } from './chromium-error-page-polling'
 import { useContextualTour } from '@/components/contextual-tours/use-contextual-tour'
 import { translate } from '@/i18n/i18n'
 import { isBrowserPagePanePaintable } from './browser-page-paintability'
+import { openWorkspaceBrowserTab } from '@/lib/workspace-browser-tab-open'
 import { useMarkupMode, type MarkupCaptureContext } from './markup/useMarkupMode'
 import { MarkupOverlay } from './markup/MarkupOverlay'
 import { MarkupDrawButton } from './markup/MarkupDrawButton'
@@ -935,7 +936,6 @@ function RemoteBrowserPagePane({
   const remotePageHandle = useAppStore(
     (s) => s.remoteBrowserPageHandlesByPageId[browserTab.id] ?? null
   )
-  const createBrowserTab = useAppStore((s) => s.createBrowserTab)
   const closeBrowserPage = useAppStore((s) => s.closeBrowserPage)
   const closeBrowserTab = useAppStore((s) => s.closeBrowserTab)
   const keybindings = useAppStore((state) => state.keybindings)
@@ -2037,10 +2037,19 @@ function RemoteBrowserPagePane({
                       role="menuitem"
                       className="relative flex w-full cursor-default items-center gap-2 rounded-[7px] px-2 py-0.5 text-[12px] leading-5 font-medium outline-none select-none hover:bg-black/8 dark:hover:bg-white/14"
                       onClick={() => {
-                        createBrowserTab(worktreeId, contextMenu.linkUrl!, {
-                          title: contextMenu.linkUrl!
-                        })
+                        const linkUrl = contextMenu.linkUrl!
                         setContextMenu(null)
+                        void openWorkspaceBrowserTab({
+                          workspaceId: worktreeId,
+                          url: linkUrl,
+                          intent: { kind: 'url' },
+                          expectedRuntimeEnvironmentId: runtimeEnvironmentId
+                        }).catch((error) => {
+                          setPaneNotice({
+                            kind: 'direct',
+                            text: error instanceof Error ? error.message : String(error)
+                          })
+                        })
                       }}
                     >
                       {translate(
@@ -2883,7 +2892,7 @@ function BrowserPagePane({
         return
       }
       // Why: convert OS screen cursor coords to renderer CSS pixels — immune to guest/renderer coordinate-space mismatches from zoom/DPI.
-      const zoomFactor = Math.pow(1.2, window.api.ui.getZoomLevel())
+      const zoomFactor = 1.2 ** window.api.ui.getZoomLevel()
       const x = Math.round((event.screenX - window.screenX) / zoomFactor)
       const y = Math.round((event.screenY - window.screenY) / zoomFactor)
       console.debug(
diff --git a/src/renderer/src/components/browser-pane/BrowserToolbarMenu.tsx b/src/renderer/src/components/browser-pane/BrowserToolbarMenu.tsx
index 90afa5aec59..f712d33abd2 100644
--- a/src/renderer/src/components/browser-pane/BrowserToolbarMenu.tsx
+++ b/src/renderer/src/components/browser-pane/BrowserToolbarMenu.tsx
@@ -205,7 +205,8 @@ export function BrowserToolbarMenu({
                 value0: result.summary.importedCookies,
                 value1: browser?.label ?? browserFamily
               }
-            )
+            ),
+        result.executionHostLabel
       )
     } else {
       toast.error(result.reason)
@@ -221,7 +222,8 @@ export function BrowserToolbarMenu({
           'auto.components.browser.pane.BrowserToolbarMenu.53bbe3dab4',
           'Imported {{value0}} cookies from file.',
           { value0: result.summary.importedCookies }
-        )
+        ),
+        result.executionHostLabel
       )
     } else if (result.reason !== 'canceled') {
       toast.error(result.reason)
diff --git a/src/renderer/src/components/browser-pane/browser-address-bar-suggestions.ts b/src/renderer/src/components/browser-pane/browser-address-bar-suggestions.ts
index 5351073140b..6ac0fe12c52 100644
--- a/src/renderer/src/components/browser-pane/browser-address-bar-suggestions.ts
+++ b/src/renderer/src/components/browser-pane/browser-address-bar-suggestions.ts
@@ -127,7 +127,7 @@ export function buildBrowserAddressBarSuggestions({
 
   // Why: the history row gives Enter the same target while showing real page metadata.
   const duplicateIdx = historySuggestions.findIndex((h) => h.url === topAction.url)
-  if (duplicateIdx >= 0) {
+  if (duplicateIdx !== -1) {
     return historySuggestions.slice(0, MAX_BROWSER_ADDRESS_BAR_SUGGESTIONS)
   }
 
diff --git a/src/renderer/src/components/browser-pane/browser-toolbar-menu-dropdown.tsx b/src/renderer/src/components/browser-pane/browser-toolbar-menu-dropdown.tsx
index b34453ba3e3..508eb059ca2 100644
--- a/src/renderer/src/components/browser-pane/browser-toolbar-menu-dropdown.tsx
+++ b/src/renderer/src/components/browser-pane/browser-toolbar-menu-dropdown.tsx
@@ -13,6 +13,7 @@ import {
   DropdownMenuSubTrigger,
   DropdownMenuTrigger
 } from '@/components/ui/dropdown-menu'
+import { BrowserCookieImportDisclosure } from '@/components/BrowserCookieImportDisclosure'
 import { useAppStore } from '@/store'
 import { BROWSER_FAMILY_LABELS } from '../../../../shared/constants'
 import type { BrowserSessionProfile, BrowserViewportPresetId } from '../../../../shared/types'
@@ -170,6 +171,7 @@ export function BrowserToolbarMenuDropdown({
                   'From File…'
                 )}
               </DropdownMenuItem>
+              <BrowserCookieImportDisclosure />
             </DropdownMenuSubContent>
           </DropdownMenuPortal>
         </DropdownMenuSub>
diff --git a/src/renderer/src/components/browser-pane/context-menu-positioning.test.ts b/src/renderer/src/components/browser-pane/context-menu-positioning.test.ts
index 397647b181f..647b6696907 100644
--- a/src/renderer/src/components/browser-pane/context-menu-positioning.test.ts
+++ b/src/renderer/src/components/browser-pane/context-menu-positioning.test.ts
@@ -43,7 +43,7 @@ function computeCorrection(
 
 describe('screen-to-viewport coordinate conversion', () => {
   it('converts screen coords to viewport at zoom 1.0', () => {
-    const result = computeViewportCoords(650, 400, 100, 50, 1.0)
+    const result = computeViewportCoords(650, 400, 100, 50, 1)
     expect(result.x).toBe(550)
     expect(result.y).toBe(350)
   })
@@ -64,7 +64,7 @@ describe('screen-to-viewport coordinate conversion', () => {
   })
 
   it('handles cursor at window origin', () => {
-    const result = computeViewportCoords(100, 50, 100, 50, 1.0)
+    const result = computeViewportCoords(100, 50, 100, 50, 1)
     expect(result.x).toBe(0)
     expect(result.y).toBe(0)
   })
@@ -203,7 +203,7 @@ describe('full pipeline', () => {
       screenCursor.y,
       windowPos.x,
       windowPos.y,
-      1.0
+      1
     )
 
     expect(menuPos.x).toBe(550)
@@ -236,7 +236,7 @@ describe('full pipeline', () => {
       screenCursor.y,
       windowPos.x,
       windowPos.y,
-      1.0
+      1
     )
     const cssOffset = { x: 60, y: 40 }
     const measured = { left: menuPos.x + cssOffset.x, top: menuPos.y + cssOffset.y }
@@ -255,7 +255,7 @@ describe('full pipeline', () => {
       screenCursor.y,
       windowPos.x,
       windowPos.y,
-      1.0
+      1
     )
     const corrected = computeCorrection(menuPos.x, menuPos.y, menuPos.x, menuPos.y)
 
diff --git a/src/renderer/src/components/cmd-j/PaletteCreateWorktreeRow.tsx b/src/renderer/src/components/cmd-j/PaletteCreateWorktreeRow.tsx
new file mode 100644
index 00000000000..2079a0c8fbf
--- /dev/null
+++ b/src/renderer/src/components/cmd-j/PaletteCreateWorktreeRow.tsx
@@ -0,0 +1,172 @@
+import React, { useEffect, useState } from 'react'
+import { Github, Gitlab, Plus } from 'lucide-react'
+import { LinearIcon } from '@/components/icons/LinearIcon'
+import { JiraIcon } from '@/components/icons/JiraIcon'
+import { CommandItem } from '@/components/ui/command'
+import { CREATE_WORKTREE_ITEM_ID } from '@/lib/worktree-palette-create-action'
+import type { CmdJTaskUrlCreatePreview } from '@/lib/worktree-palette-task-url-match'
+import type { LinearIssue } from '../../../../shared/types'
+import { translate } from '@/i18n/i18n'
+
+function TaskUrlProviderIcon({
+  provider
+}: {
+  provider: CmdJTaskUrlCreatePreview['provider']
+}): React.JSX.Element {
+  if (provider === 'github') {
+    return <Github className="size-3" aria-hidden="true" />
+  }
+  if (provider === 'gitlab') {
+    return <Gitlab className="size-3" aria-hidden="true" />
+  }
+  return <JiraIcon className="size-3" />
+}
+
+export function PaletteCreateWorktreeRow({
+  className,
+  createWorktreeName,
+  linearIdentifier,
+  linearIssue,
+  linearPending,
+  showLinearLoadingFeedback,
+  taskUrlPreview,
+  onSelect
+}: {
+  className: string
+  createWorktreeName: string
+  linearIdentifier: string | null
+  linearIssue: Pick<LinearIssue, 'identifier' | 'title'> | null
+  linearPending: boolean
+  showLinearLoadingFeedback: boolean
+  taskUrlPreview: CmdJTaskUrlCreatePreview | null
+  onSelect: () => void
+}): React.JSX.Element {
+  const showLinearPreview = linearPending || linearIssue !== null
+  const linearPreviewLabel = linearIssue
+    ? translate(
+        'worktreeJumpPalette.linearIssue.createLabel',
+        'Create worktree from Linear issue {{value0}}: {{value1}}',
+        { value0: linearIssue.identifier, value1: linearIssue.title }
+      )
+    : linearPending && showLinearLoadingFeedback
+      ? translate(
+          'worktreeJumpPalette.linearIssue.loadingLabel',
+          'Loading Linear issue {{value0}}',
+          { value0: linearIdentifier ?? '' }
+        )
+      : linearPending
+        ? translate(
+            'worktreeJumpPalette.linearIssue.pendingLabel',
+            'Create worktree from Linear issue {{value0}}',
+            { value0: linearIdentifier ?? '' }
+          )
+        : undefined
+  const previewLabel = showLinearPreview
+    ? linearPreviewLabel
+    : (taskUrlPreview?.createLabel ?? undefined)
+  const [showTaskUrlLoadingFeedback, setShowTaskUrlLoadingFeedback] = useState(false)
+  useEffect(() => {
+    if (!taskUrlPreview?.loading) {
+      setShowTaskUrlLoadingFeedback(false)
+      return
+    }
+    setShowTaskUrlLoadingFeedback(false)
+    const timer = window.setTimeout(() => setShowTaskUrlLoadingFeedback(true), 200)
+    return () => window.clearTimeout(timer)
+  }, [taskUrlPreview?.identifier, taskUrlPreview?.loading])
+
+  return (
+    <CommandItem
+      value={CREATE_WORKTREE_ITEM_ID}
+      onSelect={onSelect}
+      aria-label={previewLabel}
+      aria-busy={linearPending || Boolean(taskUrlPreview?.loading && !showLinearPreview)}
+      data-cmd-j-linear-issue-preview={showLinearPreview ? 'true' : undefined}
+      data-cmd-j-linear-issue-state={
+        linearIssue ? 'resolved' : linearPending ? 'loading' : undefined
+      }
+      data-cmd-j-task-url-preview={taskUrlPreview && !showLinearPreview ? 'true' : undefined}
+      data-cmd-j-task-url-provider={
+        taskUrlPreview && !showLinearPreview ? taskUrlPreview.provider : undefined
+      }
+      data-cmd-j-task-url-state={
+        taskUrlPreview && !showLinearPreview
+          ? taskUrlPreview.loading
+            ? 'loading'
+            : 'resolved'
+          : undefined
+      }
+      className={className}
+    >
+      {showLinearPreview ? (
+        <>
+          <div className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full border border-border/60 bg-muted/25 text-muted-foreground/70">
+            <LinearIcon className="size-3" />
+          </div>
+          <div className="min-w-0 flex-1">
+            <div className="flex min-w-0 items-baseline gap-2">
+              <span className="shrink-0 font-mono text-[12px] font-semibold text-muted-foreground">
+                {linearIssue?.identifier ?? linearIdentifier}
+              </span>
+              {linearIssue ? (
+                <span className="truncate text-[14px] font-semibold tracking-[-0.01em] text-foreground">
+                  {linearIssue.title}
+                </span>
+              ) : null}
+            </div>
+            <div className="mt-0.5 truncate text-[12px] text-muted-foreground">
+              {linearIssue || !showLinearLoadingFeedback
+                ? translate(
+                    'worktreeJumpPalette.linearIssue.createHint',
+                    'Create worktree from Linear issue'
+                  )
+                : translate('worktreeJumpPalette.linearIssue.loadingHint', 'Loading Linear issue…')}
+            </div>
+          </div>
+        </>
+      ) : taskUrlPreview ? (
+        <>
+          <div className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full border border-border/60 bg-muted/25 text-muted-foreground/70">
+            <TaskUrlProviderIcon provider={taskUrlPreview.provider} />
+          </div>
+          <div className="min-w-0 flex-1">
+            <div className="flex min-w-0 items-baseline gap-2">
+              <span className="shrink-0 font-mono text-[12px] font-semibold text-muted-foreground">
+                {taskUrlPreview.identifier}
+              </span>
+              <span className="truncate text-[14px] font-semibold tracking-[-0.01em] text-foreground">
+                {taskUrlPreview.subtitle}
+              </span>
+            </div>
+            <div className="mt-0.5 truncate text-[12px] text-muted-foreground">
+              {taskUrlPreview.loading && showTaskUrlLoadingFeedback
+                ? translate('worktreeJumpPalette.taskUrl.loadingHint', 'Loading {{value0}}…', {
+                    value0: taskUrlPreview.kindLabel
+                  })
+                : translate(
+                    'worktreeJumpPalette.taskUrl.createHint',
+                    'Create worktree from {{value0}}',
+                    { value0: taskUrlPreview.kindLabel }
+                  )}
+            </div>
+          </div>
+        </>
+      ) : (
+        <>
+          <div className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full border border-dashed border-border/60 bg-muted/25 text-muted-foreground/70">
+            <Plus size={13} aria-hidden="true" />
+          </div>
+          <div className="min-w-0 flex-1">
+            <div className="text-[14px] font-semibold tracking-[-0.01em] text-foreground">
+              {translate(
+                'auto.components.WorktreeJumpPalette.95be6587d3',
+                'Create worktree "{{value0}}"',
+                { value0: createWorktreeName }
+              )}
+            </div>
+          </div>
+        </>
+      )}
+    </CommandItem>
+  )
+}
diff --git a/src/renderer/src/components/cmd-j/palette-activation-focus-routing.test.ts b/src/renderer/src/components/cmd-j/palette-activation-focus-routing.test.ts
index afe3b97da70..be90cc29c94 100644
--- a/src/renderer/src/components/cmd-j/palette-activation-focus-routing.test.ts
+++ b/src/renderer/src/components/cmd-j/palette-activation-focus-routing.test.ts
@@ -53,8 +53,9 @@ describe('Cmd+J activation focus routing (#9939)', () => {
     )
     const activationCalls =
       handler.match(/const activation = activateAndRevealWorktree\(activeMatch\.id\)/g)?.length ?? 0
-    // Both issue/PR match paths must restore focus when terminal routing declines.
-    expect(activationCalls).toBe(2)
+    // Typed #N still jumps from create. Pasted issue/PR URLs jump via the
+    // worktree row (handleSelectWorktree), which has its own focus routing.
+    expect(activationCalls).toBe(1)
     expect(
       handler.match(
         /if \(!queueWorkspaceActivationTerminalFocus\(activeMatch\.id, activation\)\) \{\s*focusFallbackSurface\(\)\s*\}/g
diff --git a/src/renderer/src/components/cmd-j/quick-action-context.test.ts b/src/renderer/src/components/cmd-j/quick-action-context.test.ts
index 5e753b42372..7ce2e107613 100644
--- a/src/renderer/src/components/cmd-j/quick-action-context.test.ts
+++ b/src/renderer/src/components/cmd-j/quick-action-context.test.ts
@@ -278,6 +278,43 @@ describe('Cmd+J quick action context', () => {
     expect(calls).toEqual([])
   })
 
+  it('omits unsupported paired-web browser execution without affecting terminal or markdown', async () => {
+    const calls: string[] = []
+    const actions = new Map(getCmdJQuickActions().map((action) => [action.id, action]))
+    const context = {
+      ...ctx({}),
+      activeWorktree: null,
+      runtimeMode: 'paired-web' as const,
+      managedBrowserCreationEnabled: false,
+      openNewBrowserTab: async () => {
+        calls.push('browser')
+      },
+      openNewMarkdownFile: async () => {
+        calls.push('markdown')
+      },
+      openNewTerminalTab: async () => {
+        calls.push('terminal')
+      },
+      openCreateWorkspace: () => {},
+      deleteActiveWorkspace: () => {},
+      openAddQuickCommand: () => {}
+    } satisfies CmdJQuickActionContext
+
+    expect(actions.get('new-browser-tab')?.isAvailable(context)).toEqual({
+      available: false,
+      reason: 'client-action-unsupported'
+    })
+    await expect(actions.get('new-browser-tab')?.run(context)).resolves.toEqual({
+      status: 'unavailable',
+      reason: 'client-action-unsupported'
+    })
+    expect(actions.get('new-markdown-file')?.isAvailable(context)).toEqual({ available: true })
+    expect(actions.get('new-terminal-tab')?.isAvailable(context)).toEqual({ available: true })
+    await actions.get('new-markdown-file')?.run(context)
+    await actions.get('new-terminal-tab')?.run(context)
+    expect(calls).toEqual(['markdown', 'terminal'])
+  })
+
   it('runtime re-check invokes the current workspace delete action when available', async () => {
     const calls: string[] = []
     const action = getCmdJQuickActions().find((entry) => entry.id === 'delete-workspace')
diff --git a/src/renderer/src/components/cmd-j/quick-action-context.ts b/src/renderer/src/components/cmd-j/quick-action-context.ts
index bf3e764f5ab..79007eae750 100644
--- a/src/renderer/src/components/cmd-j/quick-action-context.ts
+++ b/src/renderer/src/components/cmd-j/quick-action-context.ts
@@ -2,12 +2,14 @@ import type { AppState } from '@/store/types'
 import { findWorktreeById } from '@/store/slices/worktree-helpers'
 import type { Worktree } from '../../../../shared/types'
 import type { SshConnectionStatus } from '../../../../shared/ssh-types'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 export type CmdJUnavailableReason =
   | 'loading'
   | 'no-active-workspace'
   | 'ssh-disconnected'
   | 'no-active-group'
+  | 'client-action-unsupported'
 
 export type CmdJQuickActionAvailability =
   | { available: true }
@@ -25,6 +27,7 @@ export type CmdJQuickActionContext = {
   isLoading: boolean
   sshStatus: SshConnectionStatus | null
   runtimeMode: 'local-desktop' | 'paired-web'
+  managedBrowserCreationEnabled?: boolean
   activeGroupId: string | null
   openNewBrowserTab: (groupId: string) => Promise<void>
   openNewMarkdownFile: (groupId: string) => Promise<void>
@@ -110,6 +113,15 @@ export function getWorkspaceScopedActionAvailability(
   return { available: true }
 }
 
+export function getBrowserWorkspaceActionAvailability(
+  ctx: CmdJQuickActionContext
+): CmdJQuickActionAvailability {
+  if (ctx.managedBrowserCreationEnabled === false) {
+    return { available: false, reason: 'client-action-unsupported' }
+  }
+  return getWorkspaceScopedActionAvailability(ctx)
+}
+
 export function getCurrentWorkspaceActionAvailability(
   ctx: Pick<CmdJQuickActionContext, 'activeView' | 'activeWorktreeId' | 'isLoading' | 'sshStatus'>
 ): CmdJQuickActionAvailability {
@@ -151,6 +163,9 @@ export function buildCmdJQuickActionContext(args: {
     args.state.settings?.activeRuntimeEnvironmentId?.trim()
       ? 'paired-web'
       : 'local-desktop'
+  const managedBrowserCreationEnabled =
+    getClientCreationActionPolicy(args.state, activeWorktreeId)['managed-browser'].state ===
+    'enabled'
 
   return {
     activeView: args.state.activeView,
@@ -159,6 +174,7 @@ export function buildCmdJQuickActionContext(args: {
     isLoading,
     sshStatus: getActiveWorktreeSshStatus(args.state, activeWorktree),
     runtimeMode,
+    managedBrowserCreationEnabled,
     activeGroupId,
     openNewBrowserTab: args.openNewBrowserTab,
     openNewMarkdownFile: args.openNewMarkdownFile,
@@ -182,5 +198,7 @@ export function getUnavailableQuickActionMessage(
       return `Can't ${actionTitle.toLowerCase()} — workspace is disconnected.`
     case 'no-active-group':
       return `Can't ${actionTitle.toLowerCase()} — no tab group is available.`
+    case 'client-action-unsupported':
+      return `Can't ${actionTitle.toLowerCase()} — this client and runtime do not support it.`
   }
 }
diff --git a/src/renderer/src/components/cmd-j/quick-actions.ts b/src/renderer/src/components/cmd-j/quick-actions.ts
index 8ad3f957a16..70f0e5f6859 100644
--- a/src/renderer/src/components/cmd-j/quick-actions.ts
+++ b/src/renderer/src/components/cmd-j/quick-actions.ts
@@ -3,6 +3,7 @@ import type { LucideIcon } from 'lucide-react'
 import type { CmdJQuickActionAvailability, CmdJQuickActionContext } from './quick-action-context'
 import {
   getCurrentWorkspaceActionAvailability,
+  getBrowserWorkspaceActionAvailability,
   getWorkspaceScopedActionAvailability
 } from './quick-action-context'
 import { translate } from '@/i18n/i18n'
@@ -38,6 +39,12 @@ function currentWorkspaceActionAvailability(
   return getCurrentWorkspaceActionAvailability(ctx)
 }
 
+function browserWorkspaceActionAvailability(
+  ctx: CmdJQuickActionContext
+): CmdJQuickActionAvailability {
+  return getBrowserWorkspaceActionAvailability(ctx)
+}
+
 async function runWorkspaceAction(
   ctx: CmdJQuickActionContext,
   run: (groupId: string) => Promise<void>
@@ -72,8 +79,14 @@ export const getCmdJQuickActions = createLocalizedCatalog((): CmdJQuickAction[]
       translate('auto.components.cmd.j.quick.actions.verbs.openBrowser', 'open browser'),
       translate('auto.components.cmd.j.quick.actions.verbs.browserTab', 'browser tab')
     ],
-    isAvailable: workspaceActionAvailability,
-    run: (ctx) => runWorkspaceAction(ctx, ctx.openNewBrowserTab)
+    isAvailable: browserWorkspaceActionAvailability,
+    run: async (ctx) => {
+      const availability = browserWorkspaceActionAvailability(ctx)
+      if (!availability.available) {
+        return { status: 'unavailable', reason: availability.reason }
+      }
+      return runWorkspaceAction(ctx, ctx.openNewBrowserTab)
+    }
   },
   {
     id: 'new-markdown-file',
diff --git a/src/renderer/src/components/contextual-tours/contextual-tour-gate.ts b/src/renderer/src/components/contextual-tours/contextual-tour-gate.ts
index 07ffc248c28..155f2bfb5a8 100644
--- a/src/renderer/src/components/contextual-tours/contextual-tour-gate.ts
+++ b/src/renderer/src/components/contextual-tours/contextual-tour-gate.ts
@@ -173,7 +173,7 @@ export function getContextualTourStepProgress(args: {
   stepIndex: number
 }): { current: number; total: number } | null {
   const visibleIndex = args.visibleStepIndexes.indexOf(args.stepIndex)
-  if (visibleIndex < 0) {
+  if (visibleIndex === -1) {
     return null
   }
   return { current: visibleIndex + 1, total: args.visibleStepIndexes.length }
diff --git a/src/renderer/src/components/dashboard-popout/AgentKanbanCard.test.tsx b/src/renderer/src/components/dashboard-popout/AgentKanbanCard.test.tsx
index 5036478d94c..523da058675 100644
--- a/src/renderer/src/components/dashboard-popout/AgentKanbanCard.test.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentKanbanCard.test.tsx
@@ -102,6 +102,23 @@ describe('AgentKanbanCard', () => {
     expect(container.querySelector('.lucide-message-circle-question-mark')).toBeNull()
   })
 
+  it('shows the saved SSH host beside the repository metadata', () => {
+    const { container } = renderCard({
+      card: card({
+        hostKind: 'ssh',
+        executionHostId: 'ssh:opaque-target',
+        hostLabel: 'openclaw'
+      }),
+      now: 2_000
+    })
+
+    expect(screen.getByLabelText('SSH host · openclaw')).toHaveAttribute(
+      'data-dashboard-host-badge',
+      'ssh'
+    )
+    expect(container.querySelector('.lucide-server')).toBeInTheDocument()
+  })
+
   it('shows review metadata and expands grouped subagents without opening the terminal', () => {
     const onOpenTerminal = vi.fn()
     renderCard({
diff --git a/src/renderer/src/components/dashboard-popout/AgentKanbanCard.tsx b/src/renderer/src/components/dashboard-popout/AgentKanbanCard.tsx
index 4e6cffa14af..580c6c3a165 100644
--- a/src/renderer/src/components/dashboard-popout/AgentKanbanCard.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentKanbanCard.tsx
@@ -20,6 +20,7 @@ import {
 } from '../../../../shared/dashboard-snapshot'
 import type { RepoIcon } from '../../../../shared/repo-icon'
 import { translate } from '@/i18n/i18n'
+import { DashboardHostBadge } from './DashboardHostBadge'
 
 /** Compact "started N ago" (the card is glanceable — coarse units are fine). */
 function formatStartedAgo(startedAt: number, now: number): string {
@@ -95,6 +96,9 @@ function sameCard(a: DashboardCard, b: DashboardCard): boolean {
     a.leafId === b.leafId &&
     a.repoName === b.repoName &&
     a.worktreeName === b.worktreeName &&
+    a.hostKind === b.hostKind &&
+    a.executionHostId === b.executionHostId &&
+    a.hostLabel === b.hostLabel &&
     a.hasReview === b.hasReview &&
     a.review?.number === b.review?.number &&
     a.review?.state === b.review?.state &&
@@ -327,6 +331,12 @@ export const AgentKanbanCard = memo(
               {card.repoName}
             </TooltipContent>
           </Tooltip>
+          <DashboardHostBadge
+            hostKind={card.hostKind}
+            executionHostId={card.executionHostId}
+            hostLabel={card.hostLabel}
+            className="size-[18px] rounded-[5px] bg-muted-foreground/10 transition-colors group-hover:text-foreground"
+          />
           {worktreeInFooter ? <span className="truncate">{card.worktreeName}</span> : null}
           <ReviewPill card={card} />
           {displayTimestamp(card) > 0 ? (
diff --git a/src/renderer/src/components/dashboard-popout/AgentMapProjectLabel.test.tsx b/src/renderer/src/components/dashboard-popout/AgentMapProjectLabel.test.tsx
index c900aa01740..afc3b44c057 100644
--- a/src/renderer/src/components/dashboard-popout/AgentMapProjectLabel.test.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentMapProjectLabel.test.tsx
@@ -5,6 +5,7 @@ import { render } from '@testing-library/react'
 import { describe, expect, it, vi } from 'vitest'
 import type { AgentMapLayout } from './agent-map-layout'
 import { AgentMapScene } from './AgentMapScene'
+import { TooltipProvider } from '@/components/ui/tooltip'
 
 const LAYOUT: AgentMapLayout = {
   projects: [
@@ -60,4 +61,56 @@ describe('AgentMapScene project labels', () => {
     expect(container.querySelector('.agent-map-project-label-frame')).toHaveAttribute('x', '-48')
     expect(container.querySelector('.agent-map-project-label-frame')).toHaveAttribute('width', '96')
   })
+
+  it('labels an SSH-backed project ring with its saved host', () => {
+    const sshLayout: AgentMapLayout = {
+      ...LAYOUT,
+      projects: [
+        {
+          ...LAYOUT.projects[0],
+          worktrees: [
+            {
+              id: 'worktree-1:openclaw',
+              worktreeId: 'worktree-1',
+              executionHostId: 'ssh:opaque-target',
+              hostKind: 'ssh',
+              hostLabel: 'openclaw',
+              name: 'humpback',
+              workspaceKind: 'worktree',
+              x: 120,
+              y: 120,
+              radius: 48,
+              agents: [],
+              statusCounts: { working: 0, blocked: 0, waiting: 0, done: 0, idle: 0 },
+              quiet: true
+            }
+          ]
+        }
+      ]
+    }
+    const { container } = render(
+      <TooltipProvider>
+        <svg>
+          <AgentMapScene
+            layout={sshLayout}
+            zoom={1}
+            labelScale={1}
+            mapScale={0.5}
+            heldProjectId={null}
+            heldWorktreeId={null}
+            selectedPaneKey={null}
+            allowAggregation
+            showOrchestrationLinks
+            nodeRefs={{ current: new Map() }}
+            onSelectAgent={vi.fn()}
+            onAgentKeyDown={vi.fn()}
+          />
+        </svg>
+      </TooltipProvider>
+    )
+
+    const badge = container.querySelector('[data-dashboard-host-badge="ssh"]')
+    expect(badge).toHaveAccessibleName('SSH host · openclaw')
+    expect(badge).toHaveClass('agent-map-project-host-badge', 'pointer-events-auto')
+  })
 })
diff --git a/src/renderer/src/components/dashboard-popout/AgentMapScene.tsx b/src/renderer/src/components/dashboard-popout/AgentMapScene.tsx
index 2181e4c0f2c..ea7ed7d192e 100644
--- a/src/renderer/src/components/dashboard-popout/AgentMapScene.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentMapScene.tsx
@@ -15,6 +15,7 @@ import { selectVisibleAgentMapLabels } from './agent-map-label-declutter'
 import { agentMapDirectLineageChevronPath } from './agent-map-lineage-chevron-path'
 import { AgentMapWorktreeLabel } from './AgentMapWorktreeLabel'
 import { AgentMapWorktreeRingNode } from './AgentMapWorktreeRingNode'
+import { DashboardHostBadge } from './DashboardHostBadge'
 
 type AgentMapSceneProps = {
   layout: AgentMapLayout
@@ -129,6 +130,13 @@ export const AgentMapScene = memo(function AgentMapScene({
       {layout.projects.map((project) => {
         const worktreesById = new Map(project.worktrees.map((worktree) => [worktree.id, worktree]))
         const projectLabelHalfWidth = project.radius * mapScale
+        const projectHostsById = new Map<string, AgentMapWorktreeRing>()
+        for (const worktree of project.worktrees) {
+          if (worktree.hostKind === 'ssh' || worktree.hostKind === 'remote') {
+            projectHostsById.set(`${worktree.hostKind}:${worktree.executionHostId ?? ''}`, worktree)
+          }
+        }
+        const projectHosts = [...projectHostsById.values()]
         const projectCountText = translate(
           'dashboardPopout.map.projectCount',
           '{{agents}} agents · {{workspaces}} workspaces',
@@ -253,6 +261,16 @@ export const AgentMapScene = memo(function AgentMapScene({
                   <span className="agent-map-project-name min-w-0 truncate">
                     {project.name.toUpperCase()}
                   </span>
+                  {projectHosts.map((host) => (
+                    <DashboardHostBadge
+                      key={`${host.hostKind}:${host.executionHostId ?? ''}`}
+                      hostKind={host.hostKind}
+                      executionHostId={host.executionHostId}
+                      hostLabel={host.hostLabel}
+                      keyboardFocusable
+                      className="agent-map-project-host-badge"
+                    />
+                  ))}
                 </div>
               </foreignObject>
               {visibleLabels.projectCountIds.has(project.id) ? (
diff --git a/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx b/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx
index 2d72b7304f9..cc20e2db048 100644
--- a/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.test.tsx
@@ -44,6 +44,7 @@ const imeHarness = vi.hoisted(() => ({
     claimKeyEvent: ReturnType<typeof vi.fn>
     dispose: ReturnType<typeof vi.fn>
     sendInput: (data: string) => void
+    getKittyKeyboardFlags: () => number
   }[],
   trackers: [] as { dispose: ReturnType<typeof vi.fn> }[],
   claimResult: false
@@ -115,11 +116,17 @@ vi.mock('@/lib/shortcut-platform', () => ({
   getShortcutPlatform: () => platformState.value
 }))
 vi.mock('@/components/terminal-pane/terminal-ime-native-text-forwarder', () => ({
-  installTerminalImeNativeTextForwarder: (args: { sendInput: (data: string) => void }) => {
+  installTerminalImeNativeTextForwarder: (args: {
+    sendInput: (data: string) => void
+    getKittyKeyboardFlags?: () => number
+  }) => {
     const forwarder = {
       claimKeyEvent: vi.fn(() => imeHarness.claimResult),
       dispose: vi.fn(),
-      sendInput: args.sendInput
+      sendInput: args.sendInput,
+      // Why captured: the bridge's whole job is handing the live mirror to the
+      // forwarder, so the test reads what a real commit would read.
+      getKittyKeyboardFlags: args.getKittyKeyboardFlags ?? ((): number => 0)
     }
     imeHarness.forwarders.push(forwarder)
     return forwarder
@@ -270,6 +277,26 @@ describe('AgentTerminalPreview', () => {
     expect(imeHarness.trackers).toHaveLength(0)
   })
 
+  // The bridge omitted this dependency entirely, so every Preview
+  // commit was evaluated at flags 0. Ordering and provenance live in
+  // preview-terminal-snapshot-replay.test.ts; this pins the wiring.
+  it('hands the forwarder the live mirror seeded from the snapshot flags', async () => {
+    platformState.value = 'darwin'
+    connect.mockResolvedValue({
+      snapshot: { data: '', cols: 80, rows: 24, seq: 1, kittyKeyboardFlags: 8 },
+      replay: []
+    })
+    render(<AgentTerminalPreview ptyId="pty-1" />)
+    await waitFor(() => expect(imeHarness.forwarders).toHaveLength(1))
+    await waitFor(() => expect(imeHarness.forwarders[0]!.getKittyKeyboardFlags()).toBe(8))
+
+    // Live output keeps advancing the same mirror the forwarder reads.
+    act(() => {
+      emitData?.({ type: 'data', ptyId: 'pty-1', data: '\x1b[<u', bytes: 4 })
+    })
+    expect(imeHarness.forwarders[0]!.getKittyKeyboardFlags()).toBe(0)
+  })
+
   it('disposes the IME bridge on unmount', async () => {
     platformState.value = 'darwin'
     const view = render(<AgentTerminalPreview ptyId="pty-1" />)
diff --git a/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.tsx b/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.tsx
index d187694b841..340225784f2 100644
--- a/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.tsx
+++ b/src/renderer/src/components/dashboard-popout/AgentTerminalPreview.tsx
@@ -6,6 +6,7 @@ import { subscribeToTerminalUserInput } from '@/components/terminal-pane/termina
 import { composeActiveTerminalTheme } from '@/components/terminal-pane/terminal-appearance'
 import { useSystemPrefersDark } from '@/components/terminal-pane/use-system-prefers-dark'
 import { TerminalKittyKeyboardModeTracker } from '../../../../shared/terminal-kitty-keyboard-mode-tracker'
+import { replayPreviewConnectionSnapshot } from './preview-terminal-snapshot-replay'
 import { useEffectiveMacOptionAsAlt } from '@/lib/keyboard-layout/use-effective-mac-option-as-alt'
 import {
   buildPreviewAppearanceOptions,
@@ -210,7 +211,11 @@ export function AgentTerminalPreview({
 
     const installImeNativeTextBridge = (): void => {
       if (terminal) {
-        imeBridge = installPreviewImeBridge(terminal)
+        // Why a live getter: kitty state can change between keydown and commit,
+        // and the tracker outlives every reconnect inside this effect.
+        imeBridge = installPreviewImeBridge(terminal, {
+          getKittyKeyboardFlags: () => kittyKeyboardModes.flags
+        })
       }
     }
 
@@ -304,22 +309,13 @@ export function AgentTerminalPreview({
           clamp(snap.rows ?? FALLBACK_ROWS, 2, 200)
         )
         terminal.reset()
-        // Why: the reset drops xterm's kitty flags, so the mirror must restart
-        // from the incoming snapshot instead of the dead session's state.
-        kittyKeyboardModes.reset()
-      }
-      if (snap.scrollbackAnsi) {
-        writeReplayed(snap.scrollbackAnsi)
-      }
-      if (snap.data) {
-        writeReplayed(snap.data)
-      }
-      if (snap.pendingEscapeTailAnsi) {
-        writeReplayed(snap.pendingEscapeTailAnsi)
-      }
-      for (const data of connection.replay) {
-        writeReplayed(data)
       }
+      replayPreviewConnectionSnapshot({
+        snapshot: snap,
+        replay: connection.replay,
+        kittyKeyboardModes,
+        write: (chunk, live) => writeReplayed(chunk, undefined, live)
+      })
       for (const payload of pendingLivePayloads.splice(0)) {
         writeLive(payload)
       }
diff --git a/src/renderer/src/components/dashboard-popout/DashboardHostBadge.test.tsx b/src/renderer/src/components/dashboard-popout/DashboardHostBadge.test.tsx
new file mode 100644
index 00000000000..08211439eb7
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/DashboardHostBadge.test.tsx
@@ -0,0 +1,54 @@
+// @vitest-environment happy-dom
+
+import '@testing-library/jest-dom/vitest'
+import { cleanup, fireEvent, render, screen } from '@testing-library/react'
+import { afterEach, describe, expect, it } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { DashboardHostBadge } from './DashboardHostBadge'
+
+afterEach(cleanup)
+
+describe('DashboardHostBadge', () => {
+  it('names a saved SSH host in its focusable tooltip', async () => {
+    render(
+      <TooltipProvider>
+        <DashboardHostBadge
+          hostKind="ssh"
+          executionHostId="ssh:opaque-target"
+          hostLabel="openclaw"
+          keyboardFocusable
+        />
+      </TooltipProvider>
+    )
+
+    const badge = screen.getByLabelText('SSH host · openclaw')
+    expect(badge).toHaveAttribute('data-dashboard-host-badge', 'ssh')
+    expect(badge.querySelector('.lucide-server')).toBeInTheDocument()
+
+    fireEvent.focus(badge)
+    expect(await screen.findByRole('tooltip')).toHaveTextContent('SSH host · openclaw')
+  })
+
+  it('distinguishes paired Orca hosts and omits local hosts', () => {
+    const { rerender } = render(
+      <TooltipProvider>
+        <DashboardHostBadge
+          hostKind="remote"
+          executionHostId="runtime:server-1"
+          hostLabel="Build Mac"
+        />
+      </TooltipProvider>
+    )
+
+    const badge = screen.getByLabelText('Remote Orca host · Build Mac')
+    expect(badge).toHaveAttribute('data-dashboard-host-badge', 'remote')
+    expect(badge.querySelector('.lucide-server')).toBeInTheDocument()
+
+    rerender(
+      <TooltipProvider>
+        <DashboardHostBadge hostKind="local" executionHostId="local" />
+      </TooltipProvider>
+    )
+    expect(screen.queryByLabelText(/host/i)).not.toBeInTheDocument()
+  })
+})
diff --git a/src/renderer/src/components/dashboard-popout/DashboardHostBadge.tsx b/src/renderer/src/components/dashboard-popout/DashboardHostBadge.tsx
new file mode 100644
index 00000000000..6b8f0d88f03
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/DashboardHostBadge.tsx
@@ -0,0 +1,81 @@
+import { Server } from 'lucide-react'
+import { Tooltip, TooltipContent, TooltipTrigger } from '@/components/ui/tooltip'
+import { translate } from '@/i18n/i18n'
+import { cn } from '@/lib/utils'
+import type { DashboardCardHostKind } from '../../../../shared/dashboard-snapshot'
+import { parseExecutionHostId, type ExecutionHostId } from '../../../../shared/execution-host'
+
+type DashboardHostBadgeProps = {
+  hostKind?: DashboardCardHostKind
+  executionHostId?: ExecutionHostId
+  hostLabel?: string
+  keyboardFocusable?: boolean
+  className?: string
+  iconClassName?: string
+}
+
+function fallbackHostLabel(executionHostId: ExecutionHostId | undefined): string | null {
+  const parsed = parseExecutionHostId(executionHostId)
+  if (parsed?.kind === 'ssh') {
+    return parsed.targetId
+  }
+  if (parsed?.kind === 'runtime') {
+    return parsed.environmentId
+  }
+  return null
+}
+
+export function dashboardHostTooltipLabel({
+  hostKind,
+  executionHostId,
+  hostLabel
+}: Pick<DashboardHostBadgeProps, 'hostKind' | 'executionHostId' | 'hostLabel'>): string | null {
+  if (hostKind !== 'ssh' && hostKind !== 'remote') {
+    return null
+  }
+  const label = hostLabel?.trim() || fallbackHostLabel(executionHostId)
+  if (hostKind === 'ssh') {
+    return label
+      ? translate('dashboardPopout.host.sshNamed', 'SSH host · {{host}}', { host: label })
+      : translate('dashboardPopout.host.ssh', 'SSH host')
+  }
+  return label
+    ? translate('dashboardPopout.host.remoteNamed', 'Remote Orca host · {{host}}', { host: label })
+    : translate('dashboardPopout.host.remote', 'Remote Orca host')
+}
+
+export function DashboardHostBadge({
+  hostKind,
+  executionHostId,
+  hostLabel,
+  keyboardFocusable = false,
+  className,
+  iconClassName
+}: DashboardHostBadgeProps): React.JSX.Element | null {
+  const tooltipLabel = dashboardHostTooltipLabel({ hostKind, executionHostId, hostLabel })
+  if (!tooltipLabel) {
+    return null
+  }
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>
+        <span
+          className={cn(
+            'inline-flex shrink-0 items-center justify-center text-muted-foreground',
+            keyboardFocusable &&
+              'pointer-events-auto focus-visible:rounded-sm focus-visible:ring-2 focus-visible:ring-ring focus-visible:outline-none',
+            className
+          )}
+          data-dashboard-host-badge={hostKind}
+          aria-label={tooltipLabel}
+          tabIndex={keyboardFocusable ? 0 : undefined}
+        >
+          <Server className={cn('size-3', iconClassName)} aria-hidden />
+        </span>
+      </TooltipTrigger>
+      <TooltipContent side="top" sideOffset={4}>
+        {tooltipLabel}
+      </TooltipContent>
+    </Tooltip>
+  )
+}
diff --git a/src/renderer/src/components/dashboard-popout/agent-map-layout-metadata.ts b/src/renderer/src/components/dashboard-popout/agent-map-layout-metadata.ts
index 69238b73cf3..e24274b7718 100644
--- a/src/renderer/src/components/dashboard-popout/agent-map-layout-metadata.ts
+++ b/src/renderer/src/components/dashboard-popout/agent-map-layout-metadata.ts
@@ -1,5 +1,6 @@
-import type { DashboardCard } from '../../../../shared/dashboard-snapshot'
+import type { DashboardCard, DashboardWorkspace } from '../../../../shared/dashboard-snapshot'
 import type { AgentMapLayout, AgentMapStatusCounts } from './agent-map-layout'
+import { agentMapWorkspaceIdentity } from './agent-map-workspace-identity'
 import { agentMapDurationMinutes, agentMapNodeStatus } from './agent-map-node-metadata'
 
 function emptyStatusCounts(): AgentMapStatusCounts {
@@ -9,15 +10,25 @@ function emptyStatusCounts(): AgentMapStatusCounts {
 export function refreshAgentMapMetadata(
   geometry: AgentMapLayout,
   cards: DashboardCard[],
+  workspaces: DashboardWorkspace[],
   now: number
 ): AgentMapLayout {
   const cardsByPaneKey = new Map(cards.map((card) => [card.paneKey, card]))
+  const workspacesById = new Map(
+    workspaces.map((workspace) => [agentMapWorkspaceIdentity(workspace), workspace])
+  )
   const projects = geometry.projects.map((project) => {
     let projectName = project.name
     let agentCount = 0
     const worktrees = project.worktrees.map((worktree) => {
-      let worktreeName = worktree.name
-      let workspaceKind = worktree.workspaceKind
+      const workspace = workspacesById.get(worktree.id)
+      if (workspace) {
+        projectName = workspace.repoName
+      }
+      let worktreeName = workspace?.worktreeName ?? worktree.name
+      let workspaceKind = workspace?.workspaceKind ?? worktree.workspaceKind
+      let hostKind = workspace?.hostKind ?? worktree.hostKind
+      let hostLabel = workspace?.hostLabel ?? worktree.hostLabel
       const statusCounts = emptyStatusCounts()
       const agents = worktree.agents.flatMap((agent) => {
         const card = cardsByPaneKey.get(agent.card.paneKey)
@@ -27,6 +38,8 @@ export function refreshAgentMapMetadata(
         projectName = card.repoName
         worktreeName = card.worktreeName
         workspaceKind = card.workspaceKind ?? 'worktree'
+        hostKind = card.hostKind ?? hostKind
+        hostLabel = card.hostLabel ?? hostLabel
         agentCount += 1
         statusCounts[agentMapNodeStatus(card)] += 1
         return [
@@ -42,6 +55,8 @@ export function refreshAgentMapMetadata(
         ...worktree,
         name: worktreeName,
         workspaceKind,
+        hostKind,
+        hostLabel,
         agents,
         statusCounts,
         quiet: statusCounts.idle === agents.length
diff --git a/src/renderer/src/components/dashboard-popout/agent-map-layout.test.ts b/src/renderer/src/components/dashboard-popout/agent-map-layout.test.ts
index 52c47be08f5..c36cbda6ff2 100644
--- a/src/renderer/src/components/dashboard-popout/agent-map-layout.test.ts
+++ b/src/renderer/src/components/dashboard-popout/agent-map-layout.test.ts
@@ -142,6 +142,25 @@ describe('agent map layout', () => {
     )
   })
 
+  it('preserves remote host presentation on its workspace ring', () => {
+    const layout = deriveAgentMapLayout(
+      [
+        card({
+          executionHostId: 'ssh:opaque-target',
+          hostKind: 'ssh',
+          hostLabel: 'openclaw'
+        })
+      ],
+      NOW
+    )
+
+    expect(layout.projects[0].worktrees[0]).toMatchObject({
+      executionHostId: 'ssh:opaque-target',
+      hostKind: 'ssh',
+      hostLabel: 'openclaw'
+    })
+  })
+
   it('reserves project and workspace header bands above dense ring contents', () => {
     const layout = deriveAgentMapLayout(
       Array.from({ length: 24 }, (_unused, index) =>
@@ -448,6 +467,38 @@ describe('agent map layout', () => {
     expect(topologyChanged.cache.packingGeneration).toBe(2)
   })
 
+  it('refreshes saved host labels without repacking geometry', () => {
+    const cards = [
+      card({
+        executionHostId: 'ssh:builder',
+        hostKind: 'ssh',
+        hostLabel: 'Builder'
+      })
+    ]
+    const workspaces = [
+      workspace({
+        worktreeId: 'worktree-1',
+        executionHostId: 'ssh:builder',
+        hostKind: 'ssh',
+        hostLabel: 'Builder'
+      })
+    ]
+    const initial = updateAgentMapLayout(null, cards, NOW, workspaces)
+    packWorktrees.mockClear()
+
+    const updated = updateAgentMapLayout(
+      initial.cache,
+      cards.map((candidate) => ({ ...candidate, hostLabel: 'CI Builder' })),
+      NOW,
+      workspaces.map((candidate) => ({ ...candidate, hostLabel: 'CI Builder' }))
+    )
+
+    expect(updated.cache).toBe(initial.cache)
+    expect(updated.cache.packingGeneration).toBe(1)
+    expect(packWorktrees).not.toHaveBeenCalled()
+    expect(updated.layout.projects[0].worktrees[0].hostLabel).toBe('CI Builder')
+  })
+
   it('packs worktree rings tightly without a square grid', () => {
     const layout = deriveAgentMapLayout(
       Array.from({ length: 36 }, (_, index) =>
diff --git a/src/renderer/src/components/dashboard-popout/agent-map-layout.ts b/src/renderer/src/components/dashboard-popout/agent-map-layout.ts
index 79f5e7c77f0..f8a5d975233 100644
--- a/src/renderer/src/components/dashboard-popout/agent-map-layout.ts
+++ b/src/renderer/src/components/dashboard-popout/agent-map-layout.ts
@@ -13,6 +13,7 @@ import {
   agentMapWorktreeIdentityFromParts
 } from './agent-map-workspace-identity'
 import { layoutAgentMapWorktreeLineage } from './agent-map-worktree-lineage-layout'
+import { agentMapWorktreeHost } from './agent-map-worktree-host'
 
 type DashboardCard = DashboardSnapshotTypes.DashboardCard
 type DashboardCardDotState = DashboardSnapshotTypes.DashboardCardDotState
@@ -58,6 +59,8 @@ export type AgentMapWorktreeRing = {
   clusterParentId?: string
   worktreeId: string
   executionHostId: DashboardCard['executionHostId']
+  hostKind?: DashboardCard['hostKind']
+  hostLabel?: string
   name: string
   workspaceKind: NonNullable<DashboardCard['workspaceKind']>
   x: number
@@ -154,7 +157,8 @@ function buildLocalWorktree(
   for (const card of cards) {
     statusCounts[agentMapNodeStatus(card)] += 1
   }
-  const executionHostId = workspace?.executionHostId ?? cards[0]?.executionHostId
+  const host = agentMapWorktreeHost(cards, workspace)
+  const executionHostId = host.executionHostId
   const parentWorktreeId = workspace?.parentWorktreeId ?? cards[0]?.parentWorktreeId
   return {
     id,
@@ -162,7 +166,7 @@ function buildLocalWorktree(
       ? agentMapWorktreeIdentityFromParts(parentWorktreeId, executionHostId)
       : undefined,
     worktreeId: workspace?.worktreeId ?? cards[0]?.worktreeId ?? id,
-    executionHostId,
+    ...host,
     name: workspace?.worktreeName ?? cards[0]?.worktreeName ?? id,
     workspaceKind: workspace?.workspaceKind ?? cards[0]?.workspaceKind ?? 'worktree',
     x: 0,
@@ -316,6 +320,6 @@ export function updateAgentMapLayout(
       layout: geometry
     }
   }
-  const layout = refreshAgentMapMetadata(cache.geometry, cards, now)
+  const layout = refreshAgentMapMetadata(cache.geometry, cards, workspaces, now)
   return { cache, layout }
 }
diff --git a/src/renderer/src/components/dashboard-popout/agent-map-worktree-host.ts b/src/renderer/src/components/dashboard-popout/agent-map-worktree-host.ts
new file mode 100644
index 00000000000..247b3f5b08c
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/agent-map-worktree-host.ts
@@ -0,0 +1,25 @@
+import type { DashboardCard, DashboardWorkspace } from '../../../../shared/dashboard-snapshot'
+import { parseExecutionHostId } from '../../../../shared/execution-host'
+
+export function agentMapWorktreeHost(
+  cards: DashboardCard[],
+  workspace?: DashboardWorkspace
+): {
+  executionHostId: DashboardCard['executionHostId']
+  hostKind: DashboardCard['hostKind']
+  hostLabel: DashboardCard['hostLabel']
+} {
+  const executionHostId = workspace?.executionHostId ?? cards[0]?.executionHostId
+  const parsedHost = parseExecutionHostId(executionHostId)
+  const hostKind =
+    parsedHost?.kind === 'ssh'
+      ? 'ssh'
+      : parsedHost?.kind === 'runtime'
+        ? 'remote'
+        : (workspace?.hostKind ?? cards[0]?.hostKind)
+  return {
+    executionHostId,
+    hostKind,
+    hostLabel: workspace?.hostLabel ?? cards[0]?.hostLabel
+  }
+}
diff --git a/src/renderer/src/components/dashboard-popout/dashboard-agent-status-patch.ts b/src/renderer/src/components/dashboard-popout/dashboard-agent-status-patch.ts
index f3d32a9b462..816474eb70f 100644
--- a/src/renderer/src/components/dashboard-popout/dashboard-agent-status-patch.ts
+++ b/src/renderer/src/components/dashboard-popout/dashboard-agent-status-patch.ts
@@ -35,7 +35,7 @@ export function patchDashboardSnapshotFromAgentStatus(
     return { matched: true, snapshot }
   }
   const index = snapshot.cards.findIndex((card) => card.paneKey === event.paneKey)
-  if (index < 0) {
+  if (index === -1) {
     return { matched: false, snapshot }
   }
   const card = snapshot.cards[index]
diff --git a/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts b/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts
new file mode 100644
index 00000000000..3e69cd75d3b
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge-kitty-bytes.test.ts
@@ -0,0 +1,281 @@
+// @vitest-environment happy-dom
+// The release oracle: exact outbound bytes from the REAL shared
+// forwarder behind installPreviewImeBridge. A wiring-only mock cannot show that
+// a Preview opened on a bit-3 TUI commits CSI-u, nor that exactly one release
+// leaves the forwarder in either macOS event order.
+import { Terminal } from '@xterm/xterm'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { installPreviewImeBridge } from './preview-terminal-ime-bridge'
+
+vi.mock('@/lib/shortcut-platform', () => ({
+  getShortcutPlatform: () => 'darwin'
+}))
+
+const COMMA = { key: ',', code: 'Comma', keyCode: 188 }
+
+type Session = {
+  emitted: string[]
+  flagReads: number
+  setFlags: (flags: number) => void
+  keydown: (init?: { shiftKey?: boolean; repeat?: boolean; key?: string; code?: string }) => void
+  keyup: (init?: { shiftKey?: boolean; key?: string; code?: string }) => void
+  commit: (text: string) => void
+  /** An input event the text system produced without committing text. */
+  swallow: () => void
+  xtermKittyFlags: () => number
+  dispose: () => void
+}
+
+function open(initialFlags: number): Session {
+  const container = document.createElement('div')
+  document.body.appendChild(container)
+  const terminal = new Terminal()
+  terminal.open(container)
+  const textarea = terminal.textarea!
+  let flags = initialFlags
+  let flagReads = 0
+  const bridge = installPreviewImeBridge(terminal, {
+    getKittyKeyboardFlags: () => {
+      flagReads += 1
+      return flags
+    }
+  })!
+  terminal.attachCustomKeyEventHandler((event) => !bridge.claimKeyEvent(event))
+  const emitted: string[] = []
+  terminal.onData((data) => emitted.push(data))
+
+  const key = (
+    type: string,
+    init: { key?: string; code?: string; shiftKey?: boolean; repeat?: boolean }
+  ): void => {
+    const event = new KeyboardEvent(type, {
+      key: init.key ?? COMMA.key,
+      code: init.code ?? COMMA.code,
+      shiftKey: init.shiftKey === true,
+      repeat: init.repeat === true,
+      bubbles: true,
+      cancelable: true
+    })
+    Object.defineProperty(event, 'keyCode', { value: COMMA.keyCode })
+    textarea.dispatchEvent(event)
+  }
+
+  const input = (data: string | null): void => {
+    for (const type of ['beforeinput', 'input']) {
+      const event = new InputEvent(type, { bubbles: true })
+      Object.defineProperty(event, 'inputType', { value: 'insertText' })
+      Object.defineProperty(event, 'data', { value: data })
+      textarea.dispatchEvent(event)
+    }
+  }
+
+  return {
+    emitted,
+    get flagReads() {
+      return flagReads
+    },
+    setFlags: (next) => {
+      flags = next
+    },
+    keydown: (init = {}) => key('keydown', init),
+    keyup: (init = {}) => key('keyup', init),
+    commit: (text) => input(text),
+    swallow: () => input(null),
+    xtermKittyFlags: () =>
+      (
+        terminal as unknown as {
+          _core?: { coreService?: { kittyKeyboard?: { flags?: number } } }
+        }
+      )._core?.coreService?.kittyKeyboard?.flags ?? 0,
+    dispose: () => {
+      bridge.dispose()
+      terminal.dispose()
+    }
+  }
+}
+
+describe('preview IME bridge outbound bytes', () => {
+  beforeEach(() => {
+    vi.spyOn(HTMLCanvasElement.prototype, 'getContext').mockReturnValue({
+      measureText: () => ({ width: 10 })
+    } as unknown as CanvasRenderingContext2D)
+  })
+  afterEach(() => {
+    vi.restoreAllMocks()
+    document.body.replaceChildren()
+  })
+
+  // The bug: the bridge omitted getKittyKeyboardFlags entirely, so every commit
+  // was evaluated at flags 0 and a bit-3 TUI received the legacy text it declined.
+  it('encodes the commit from the flags proven before any live output', () => {
+    const session = open(8)
+    session.keydown()
+    session.commit('，')
+    session.keyup()
+    expect(session.emitted.join('')).toBe('\x1b[44u')
+    session.dispose()
+  })
+
+  describe.each([
+    ['keydown -> insertText -> keyup', false],
+    // An ordering some macOS input sources use; the earlier design cleared the
+    // claimed press here, so the later commit could never be encoded as CSI-u.
+    ['keydown -> keyup -> insertText', true]
+  ])('in %s order', (_name, keyupFirst) => {
+    const type = (session: Session): void => {
+      session.keydown()
+      if (keyupFirst) {
+        session.keyup()
+        session.commit('，')
+      } else {
+        session.commit('，')
+        session.keyup()
+      }
+    }
+
+    it.each([
+      ['no flags', 0, '，'],
+      ['disambiguate only', 1, '，'],
+      ['event types', 2, '，\x1b[44;1:3u'],
+      ['all keys as escape codes', 8, '\x1b[44u'],
+      ['all keys + event types', 10, '\x1b[44u\x1b[44;1:3u']
+    ])('emits the %s byte shape', (_flagName, flags, expected) => {
+      const session = open(flags)
+      type(session)
+      expect(session.emitted.join('')).toBe(expected)
+      session.dispose()
+    })
+
+    it('owns the release even though xterm holds no kitty state', () => {
+      const session = open(10)
+      // The forwarder must not delegate the keyup: Preview deliberately never
+      // restores kitty flags into xterm, so xterm would emit nothing here.
+      expect(session.xtermKittyFlags()).toBe(0)
+      type(session)
+      expect(session.emitted.join('')).toBe('\x1b[44u\x1b[44;1:3u')
+      session.dispose()
+    })
+
+    it('reads the mutable getter exactly once, at commit time', () => {
+      const session = open(0)
+      session.keydown()
+      expect(session.flagReads).toBe(0)
+      session.setFlags(8)
+      if (keyupFirst) {
+        session.keyup()
+        expect(session.flagReads).toBe(0)
+        session.commit('，')
+      } else {
+        session.commit('，')
+        session.keyup()
+      }
+      expect(session.flagReads).toBe(1)
+      // The commit-time read is what both the press AND its release encode from.
+      expect(session.emitted.join('')).toBe('\x1b[44u')
+      session.dispose()
+    })
+
+    it('emits nothing when the input source swallowed the press', () => {
+      const session = open(10)
+      session.keydown()
+      if (keyupFirst) {
+        session.keyup()
+        session.swallow()
+      } else {
+        session.swallow()
+        session.keyup()
+      }
+      // A release describes a press the app received; none did.
+      expect(session.emitted.join('')).toBe('')
+      session.dispose()
+    })
+  })
+
+  it('encodes the release from the keyup state when Shift is released first', () => {
+    const session = open(10)
+    // `!` on Digit1: the press reports the base key with the Shift modifier.
+    session.keydown({ key: '!', code: 'Digit1', shiftKey: true })
+    session.commit('！')
+    session.keyup({ key: '1', code: 'Digit1', shiftKey: false })
+    // 49 is `1`; the release carries no modifier because none was held at release.
+    expect(session.emitted.join('')).toBe('\x1b[49;2u\x1b[49;1:3u')
+    session.dispose()
+  })
+
+  it('emits one release for a held key across auto-repeat', () => {
+    const session = open(10)
+    session.keydown()
+    session.commit('，')
+    session.keydown({ repeat: true })
+    session.commit('，')
+    session.keyup()
+    // Press, repeat, then exactly one release for the single physical press.
+    expect(session.emitted.join('')).toBe('\x1b[44u\x1b[44;1:2u\x1b[44;1:3u')
+    session.dispose()
+  })
+
+  it('keeps an owed release when a later repeat commits under flags that owe none', () => {
+    const session = open(10)
+    session.keydown()
+    session.commit('，')
+    session.setFlags(8)
+    session.keydown({ repeat: true })
+    session.commit('，')
+    session.setFlags(10)
+    session.keyup()
+    // The repeat requested no event types, but its commit must not erase the
+    // release the delivered first press still owes under the flags it was
+    // sent with.
+    expect(session.emitted.join('')).toBe('\x1b[44u\x1b[44u\x1b[44;1:3u')
+    session.dispose()
+  })
+
+  it('suppresses the owed release when event types are no longer negotiated at keyup', () => {
+    // xterm parity: KittyKeyboard.evaluate drops RELEASE reports the moment
+    // report_event_types is gone, so an app that popped the mode — or the
+    // successor shell of a TUI that quit on this very key — never receives
+    // CSI-u bytes it did not negotiate.
+    const session = open(10)
+    session.keydown()
+    session.commit('，')
+    session.setFlags(0)
+    session.keyup()
+    expect(session.emitted.join('')).toBe('\x1b[44u')
+    session.dispose()
+  })
+
+  it('releases each key of a two-key rollover exactly once', () => {
+    const session = open(10)
+    session.keydown()
+    session.commit('，')
+    session.keydown({ key: '.', code: 'Period' })
+    session.commit('。')
+    session.keyup()
+    session.keyup({ key: '.', code: 'Period' })
+    expect(session.emitted.join('')).toBe('\x1b[44u\x1b[46u\x1b[44;1:3u\x1b[46;1:3u')
+    session.dispose()
+  })
+
+  it('leaves no release behind when a claim is retired without committing', () => {
+    const session = open(10)
+    session.keydown()
+    // The input source ate the first press; the next keydown retires it.
+    session.keydown({ key: '.', code: 'Period' })
+    session.commit('。')
+    session.keyup()
+    session.keyup({ key: '.', code: 'Period' })
+    expect(session.emitted.join('')).toBe('\x1b[46u\x1b[46;1:3u')
+    session.dispose()
+  })
+
+  it('synthesizes nothing on blur or disposal', () => {
+    const session = open(10)
+    session.keydown()
+    session.commit('，')
+    session.emitted.length = 0
+    document.querySelector('.xterm')?.dispatchEvent(new FocusEvent('blur', { bubbles: true }))
+    session.keyup()
+    session.dispose()
+    expect(session.emitted.join('')).toBe('')
+  })
+})
diff --git a/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge.ts b/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge.ts
index 5171a529edb..dcfa851d920 100644
--- a/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge.ts
+++ b/src/renderer/src/components/dashboard-popout/preview-terminal-ime-bridge.ts
@@ -9,14 +9,29 @@ export type PreviewImeBridge = {
   dispose: () => void
 }
 
+export type PreviewImeBridgeOptions = {
+  /**
+   * The preview's live kitty mirror, read once per commit. Required, not
+   * optional: omitting it evaluated every commit at flags `0`, so a Preview on
+   * a bit-3 TUI silently sent legacy text the app had declined.
+   */
+  getKittyKeyboardFlags: () => number
+}
+
 /**
  * Native-text bridge for the preview terminal.
  *
  * Why: xterm's kitty encoder can encode+cancel a printable keydown before
  * Chromium commits IME/native text, silently dropping the glyph. Mirrors
  * TerminalPane's forwarder, macOS-only like the pane's install.
+ *
+ * Bit policy stays in terminal-ime-kitty-commit-encoding.ts: the getter is
+ * forwarded unchanged, never masked or reduced to a boolean.
  */
-export function installPreviewImeBridge(terminal: Terminal): PreviewImeBridge | null {
+export function installPreviewImeBridge(
+  terminal: Terminal,
+  options: PreviewImeBridgeOptions
+): PreviewImeBridge | null {
   if (getShortcutPlatform() !== 'darwin') {
     return null
   }
@@ -24,7 +39,8 @@ export function installPreviewImeBridge(terminal: Terminal): PreviewImeBridge |
   const forwarder = installTerminalImeNativeTextForwarder({
     terminalElement: terminal.element,
     isComposing: () => compositionTracker?.isActive() ?? false,
-    sendInput: (data) => terminal.input(data)
+    sendInput: (data) => terminal.input(data),
+    getKittyKeyboardFlags: options.getKittyKeyboardFlags
   })
   return {
     claimKeyEvent: (event) => forwarder?.claimKeyEvent(event) ?? false,
diff --git a/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts b/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts
new file mode 100644
index 00000000000..3e288626259
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.test.ts
@@ -0,0 +1,124 @@
+import { describe, expect, it } from 'vitest'
+import { TerminalKittyKeyboardModeTracker } from '../../../../shared/terminal-kitty-keyboard-mode-tracker'
+import type {
+  TerminalPreviewReplayChunk,
+  TerminalPreviewSnapshot
+} from '../../../../shared/terminal-preview'
+import { replayPreviewConnectionSnapshot } from './preview-terminal-snapshot-replay'
+
+function apply(
+  snapshot: Partial<TerminalPreviewSnapshot>,
+  replay: TerminalPreviewReplayChunk[] = [],
+  kittyKeyboardModes = new TerminalKittyKeyboardModeTracker()
+): { modes: TerminalKittyKeyboardModeTracker; written: string[] } {
+  const written: string[] = []
+  replayPreviewConnectionSnapshot({
+    snapshot: { data: '', cols: 80, rows: 24, ...snapshot },
+    replay,
+    kittyKeyboardModes,
+    write: (chunk, live) => {
+      written.push(chunk)
+      if (live) {
+        kittyKeyboardModes.scan(chunk)
+      } else {
+        kittyKeyboardModes.scanReplay(chunk)
+      }
+    }
+  })
+  return { modes: kittyKeyboardModes, written }
+}
+
+// The Preview's mirror is the only thing that can tell the IME
+// forwarder what the TUI negotiated, and snapshot ANSI never carries kitty
+// pushes — so the flags have to arrive as metadata and be applied in order.
+describe('replayPreviewConnectionSnapshot', () => {
+  it('adopts flags the snapshot owner proved, before any live output', () => {
+    const { modes } = apply({ kittyKeyboardFlags: 8 })
+    expect(modes.flags).toBe(8)
+    expect(modes.snapshotFlags).toBe(8)
+  })
+
+  it('leaves the mirror unproven and at the raw-text fallback when the field is absent', () => {
+    const { modes } = apply({ data: 'plain output' })
+    expect(modes.flags).toBe(0)
+    expect(modes.snapshotFlags).toBeUndefined()
+
+    // A later explicit negotiation still upgrades it.
+    modes.scan('\x1b[>8u')
+    expect(modes.flags).toBe(8)
+  })
+
+  it('replaces an earlier 8 when a replacement snapshot proves 0', () => {
+    const modes = new TerminalKittyKeyboardModeTracker()
+    apply({ kittyKeyboardFlags: 8 }, [], modes)
+    apply({ kittyKeyboardFlags: 0 }, [], modes)
+    expect(modes.flags).toBe(0)
+    expect(modes.snapshotFlags).toBe(0)
+  })
+
+  it('carries live-proven flags across a resync snapshot that proves nothing', () => {
+    // A grid change or capture overflow against an old host fetches a
+    // replacement snapshot with no kitty metadata; wiping the mirror there
+    // reintroduces the raw-text-into-a-bit-3-TUI bug on every resync.
+    const modes = new TerminalKittyKeyboardModeTracker()
+    apply({ data: 'first frame' }, [], modes)
+    modes.scan('\x1b[>8u')
+    apply({ data: 'second frame' }, [], modes)
+    expect(modes.flags).toBe(8)
+    expect(modes.snapshotFlags).toBe(8)
+  })
+
+  it('carries nothing across a flagless snapshot when the mirror never proved state', () => {
+    // The constructor's known-zero was never proven for the previewed PTY;
+    // carrying it would launder a fresh default into a host-proven inactive.
+    const modes = new TerminalKittyKeyboardModeTracker()
+    apply({ data: 'first frame' }, [], modes)
+    apply({ data: 'second frame' }, [], modes)
+    expect(modes.flags).toBe(0)
+    expect(modes.snapshotFlags).toBeUndefined()
+  })
+
+  it('keeps proven flags across a replacement snapshot whose ANSI carries no kitty bytes', () => {
+    // The resync path used to reset the mirror and then scan kitty-free ANSI,
+    // which is what silently dropped a live TUI's negotiation.
+    const modes = new TerminalKittyKeyboardModeTracker()
+    apply({ data: 'first frame' }, [], modes)
+    apply({ data: 'second frame', cols: 90, rows: 30, kittyKeyboardFlags: 8 }, [], modes)
+    expect(modes.flags).toBe(8)
+  })
+
+  it('restores onto the screen the snapshot scan selected', () => {
+    const { modes } = apply({ data: '\x1b[?1049h', kittyKeyboardFlags: 8 })
+    expect(modes.isAlternateScreen).toBe(true)
+    expect(modes.snapshotFlags).toBe(8)
+    // Leaving the alternate screen returns to the main screen's own slot, which
+    // this snapshot never proved.
+    modes.scan('\x1b[?1049l')
+    expect(modes.snapshotFlags).toBeUndefined()
+  })
+
+  it('advances a proven suffix with live semantics and applies redelivery idempotently', () => {
+    const { modes } = apply({ kittyKeyboardFlags: 0 }, [
+      { data: '\x1b[>8u', mode: 'live' },
+      // A redelivered push applied as a push would leave the app's single pop
+      // landing on a stale frame.
+      { data: '\x1b[>8u', mode: 'replay' }
+    ])
+    expect(modes.flags).toBe(8)
+    modes.scan('\x1b[<u')
+    expect(modes.flags).toBe(0)
+    expect(modes.snapshotFlags).toBe(0)
+  })
+
+  it('writes scrollback, frame, escape tail, then replay, in that order', () => {
+    const { written } = apply(
+      {
+        scrollbackAnsi: 'history',
+        data: 'frame',
+        pendingEscapeTailAnsi: '\x1b['
+      },
+      [{ data: 'tail', mode: 'live' }]
+    )
+    expect(written).toEqual(['history', 'frame', '\x1b[', 'tail'])
+  })
+})
diff --git a/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.ts b/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.ts
new file mode 100644
index 00000000000..43d4333cc17
--- /dev/null
+++ b/src/renderer/src/components/dashboard-popout/preview-terminal-snapshot-replay.ts
@@ -0,0 +1,41 @@
+import type { TerminalKittyKeyboardModeTracker } from '../../../../shared/terminal-kitty-keyboard-mode-tracker'
+import { parseTerminalKittyKeyboardFlags } from '../../../../shared/terminal-kitty-keyboard-flags'
+import type {
+  TerminalPreviewReplayChunk,
+  TerminalPreviewSnapshot
+} from '../../../../shared/terminal-preview'
+
+/**
+ * Apply snapshot + buffered replay, restoring proven kitty flags after the
+ * snapshot scan (snapshot ANSI omits kitty pushes). Synchronous so no browser
+ * event observes the temporary reset.
+ */
+export function replayPreviewConnectionSnapshot(args: {
+  snapshot: TerminalPreviewSnapshot
+  replay: TerminalPreviewReplayChunk[]
+  kittyKeyboardModes: TerminalKittyKeyboardModeTracker
+  /** Scans the chunk into the mirror and queues it for xterm. */
+  write: (chunk: string, live: boolean) => void
+}): void {
+  const { snapshot, kittyKeyboardModes } = args
+  // Why: carry only live-proven flags across a flagless resync; a fresh mirror's zero is ungrounded.
+  const provenFlags =
+    parseTerminalKittyKeyboardFlags(snapshot.kittyKeyboardFlags) ??
+    (kittyKeyboardModes.hasProvenBaseline ? kittyKeyboardModes.snapshotFlags : undefined)
+  kittyKeyboardModes.resetForSnapshot()
+  if (snapshot.scrollbackAnsi) {
+    args.write(snapshot.scrollbackAnsi, false)
+  }
+  if (snapshot.data) {
+    args.write(snapshot.data, false)
+  }
+  if (snapshot.pendingEscapeTailAnsi) {
+    args.write(snapshot.pendingEscapeTailAnsi, false)
+  }
+  if (provenFlags !== undefined) {
+    kittyKeyboardModes.restoreSnapshotFlags(provenFlags)
+  }
+  for (const chunk of args.replay) {
+    args.write(chunk.data, chunk.mode === 'live')
+  }
+}
diff --git a/src/renderer/src/components/dashboard/agent-finished-timestamp.test.ts b/src/renderer/src/components/dashboard/agent-finished-timestamp.test.ts
index 92df277ef9d..84116333a1c 100644
--- a/src/renderer/src/components/dashboard/agent-finished-timestamp.test.ts
+++ b/src/renderer/src/components/dashboard/agent-finished-timestamp.test.ts
@@ -1,4 +1,5 @@
 import { describe, expect, it } from 'vitest'
+import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
 import { lastEnteredDoneAt } from './agent-finished-timestamp'
 
@@ -37,3 +38,17 @@ describe('lastEnteredDoneAt session boundaries (STA-3386)', () => {
     ).toBe(1_000)
   })
 })
+
+describe('lastEnteredDoneAt shares the Smart Sort completion clock', () => {
+  it('times an ordinary completion from stateStartedAt, not updatedAt', () => {
+    const entry = doneEntry({ stateStartedAt: 2_000, updatedAt: 190_000 })
+    expect(lastEnteredDoneAt(row(entry))).toBe(2_000)
+    expect(agentEntryCompletionAt(entry)).toBe(2_000)
+  })
+
+  it('still shows when an interrupted turn stopped, though it never ranks as done', () => {
+    const entry = doneEntry({ interrupted: true, stateStartedAt: 2_000 })
+    expect(lastEnteredDoneAt(row(entry))).toBe(2_000)
+    expect(agentEntryCompletionAt(entry)).toBeNull()
+  })
+})
diff --git a/src/renderer/src/components/dashboard/agent-finished-timestamp.ts b/src/renderer/src/components/dashboard/agent-finished-timestamp.ts
index 6449e570fe1..599a07d118a 100644
--- a/src/renderer/src/components/dashboard/agent-finished-timestamp.ts
+++ b/src/renderer/src/components/dashboard/agent-finished-timestamp.ts
@@ -1,3 +1,4 @@
+import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import type { DashboardAgentRow } from './useDashboardData'
 
 /**
@@ -15,9 +16,15 @@ export function lastEnteredDoneAt(
     return null
   }
   const entry = agent.entry
-  // Why: a session-boundary done means the session connected idle (STA-3386) — nothing
-  // finished; fall through to history (which never records session boundaries).
-  if (entry.state === 'done' && entry.sessionBoundary !== true) {
+  // Why: same primitive Smart Sort ranks on, so the displayed age and Done eligibility share a clock.
+  // (Session-boundary `done` means the session connected idle — STA-3386 — so it resolves to the real
+  // completion it displaced, if any.)
+  const completedAt = agentEntryCompletionAt(entry)
+  if (completedAt !== null) {
+    return completedAt
+  }
+  // Why: display is looser than ranking — an interrupted turn still shows when it stopped.
+  if (entry.state === 'done' && entry.interrupted === true && entry.sessionBoundary !== true) {
     return entry.stateStartedAt
   }
   for (let i = (entry.stateHistory?.length ?? 0) - 1; i >= 0; i--) {
diff --git a/src/renderer/src/components/dashboard/build-dashboard-snapshot-folder-workspace.test.ts b/src/renderer/src/components/dashboard/build-dashboard-snapshot-folder-workspace.test.ts
index f5db7045970..822a3b80e96 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-snapshot-folder-workspace.test.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-snapshot-folder-workspace.test.ts
@@ -100,7 +100,9 @@ function state(): DashboardSnapshotState {
 
 describe('buildDashboardSnapshot folder workspaces', () => {
   it('places folder-workspace agents in their real project group without git assumptions', () => {
-    const snapshot = buildDashboardSnapshot(state(), NOW)
+    const sshState = state()
+    sshState.sshTargetLabels = new Map([['ssh-1', 'openclaw']])
+    const snapshot = buildDashboardSnapshot(sshState, NOW)
 
     expect(snapshot.cards).toHaveLength(1)
     expect(snapshot.cards[0]).toMatchObject({
@@ -111,7 +113,8 @@ describe('buildDashboardSnapshot folder workspaces', () => {
       worktreeName: 'Docs workspace',
       workspaceKind: 'folder',
       hostKind: 'ssh',
-      executionHostId: 'ssh:ssh-1'
+      executionHostId: 'ssh:ssh-1',
+      hostLabel: 'openclaw'
     })
     expect(snapshot.filterOptions?.projects).toEqual([
       { id: 'folder-workspace:group-1', label: 'Documentation' }
@@ -124,7 +127,8 @@ describe('buildDashboardSnapshot folder workspaces', () => {
         worktreeName: 'Docs workspace',
         workspaceKind: 'folder',
         hostKind: 'ssh',
-        executionHostId: 'ssh:ssh-1'
+        executionHostId: 'ssh:ssh-1',
+        hostLabel: 'openclaw'
       })
     ])
   })
@@ -135,10 +139,35 @@ describe('buildDashboardSnapshot folder workspaces', () => {
       { ...folderWorkspace(), connectionId: null, executionHostId: 'runtime:environment-1' }
     ]
     runtimeState.projectGroups = [{ ...projectGroup(), connectionId: null }]
+    runtimeState.runtimeEnvironments = [
+      { id: 'environment-1', name: 'Build Mac' }
+    ] as unknown as DashboardSnapshotState['runtimeEnvironments']
 
     const snapshot = buildDashboardSnapshot(runtimeState, NOW)
 
     expect(snapshot.cards[0].hostKind).toBe('remote')
     expect(snapshot.cards[0].executionHostId).toBe('runtime:environment-1')
+    expect(snapshot.cards[0].hostLabel).toBe('Build Mac')
+  })
+
+  it('uses the user-facing host label override', () => {
+    const runtimeState = state()
+    runtimeState.folderWorkspaces = [
+      { ...folderWorkspace(), connectionId: null, executionHostId: 'runtime:environment-1' }
+    ]
+    runtimeState.projectGroups = [{ ...projectGroup(), connectionId: null }]
+    runtimeState.runtimeEnvironments = [
+      { id: 'environment-1', name: 'Build Mac' }
+    ] as unknown as DashboardSnapshotState['runtimeEnvironments']
+    runtimeState.settings = {
+      hostSettingOverrides: {
+        'runtime:environment-1': { displayLabel: 'CI Builder' }
+      }
+    } as unknown as DashboardSnapshotState['settings']
+
+    const snapshot = buildDashboardSnapshot(runtimeState, NOW)
+
+    expect(snapshot.cards[0].hostLabel).toBe('CI Builder')
+    expect(snapshot.workspaces?.[0].hostLabel).toBe('CI Builder')
   })
 })
diff --git a/src/renderer/src/components/dashboard/build-dashboard-snapshot.test.ts b/src/renderer/src/components/dashboard/build-dashboard-snapshot.test.ts
index 90630a3d924..d4e9bdc565a 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-snapshot.test.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-snapshot.test.ts
@@ -603,6 +603,50 @@ describe('buildDashboardSnapshot', () => {
     expect(mapMetadataCalls.parentPaneKey).not.toHaveBeenCalled()
   })
 
+  it('indexes runtime host labels once per detailed snapshot', () => {
+    let environmentIdReads = 0
+    const environmentCount = 24
+    const runtimeEnvironments = Array.from({ length: environmentCount }, (_, index) => {
+      const environment = { id: `environment-${index}`, name: `Builder ${index}` }
+      Object.defineProperty(environment, 'id', {
+        enumerable: true,
+        get: () => {
+          environmentIdReads += 1
+          return `environment-${index}`
+        }
+      })
+      return environment
+    }) as unknown as DashboardSnapshotState['runtimeEnvironments']
+    const executionHostId = `runtime:environment-${environmentCount - 1}` as const
+
+    const snapshot = buildDashboardSnapshot(
+      baseState({
+        repos: [
+          {
+            id: 'r1',
+            path: '/r1',
+            displayName: 'Repo One',
+            badgeColor: '#000',
+            addedAt: 0,
+            executionHostId
+          }
+        ],
+        worktreesByRepo: {
+          r1: [
+            { ...worktree(), hostId: executionHostId },
+            { ...worktree('w2', 'wt-two'), hostId: executionHostId }
+          ]
+        },
+        runtimeEnvironments,
+        agentStatusByPaneKey: { [PANE_KEY]: entry({}) }
+      }),
+      NOW
+    )
+
+    expect(snapshot.cards[0].hostLabel).toBe(`Builder ${environmentCount - 1}`)
+    expect(environmentIdReads).toBe(environmentCount)
+  })
+
   it("resolves a live pty's host-input profile for card snapshots", () => {
     const snapshot = buildDashboardSnapshot(
       baseState({ agentStatusByPaneKey: { [PANE_KEY]: entry({}) } }),
diff --git a/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts b/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
index 808ffba0236..53e959f489c 100644
--- a/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
+++ b/src/renderer/src/components/dashboard/build-dashboard-snapshot.ts
@@ -40,8 +40,8 @@ import {
   type DashboardCardContextState
 } from './dashboard-card-context'
 import {
-  dashboardCardMapWorkspaceMetadata,
-  collectActiveDashboardWorkspaces
+  collectActiveDashboardWorkspaces,
+  dashboardCardMapWorkspaceMetadata
 } from './dashboard-snapshot-workspaces'
 import {
   boundedLabel,
@@ -75,7 +75,11 @@ export type DashboardSnapshotState = Pick<
   | 'settings'
 > &
   DashboardCardContextState &
-  Partial<DashboardCardTerminalInputState & DashboardLaunchDetectionState>
+  Partial<
+    DashboardCardTerminalInputState &
+      DashboardLaunchDetectionState &
+      Pick<AppState, 'runtimeEnvironments' | 'sshTargetLabels'>
+  >
 
 /**
  * Derive the serializable dashboard snapshot from the live renderer store.
@@ -185,13 +189,19 @@ export function buildDashboardSnapshot(
       ? resolveDashboardCardContext(state, repo, worktree)
       : undefined
     if (workspaces && workspaces.length < DASHBOARD_MAX_MAP_WORKSPACES) {
+      const hostMetadata = dashboardCardMapWorkspaceMetadata(
+        workspace,
+        null,
+        undefined,
+        clientHost.platform
+      )
       workspaces.push({
         repoId: workspace.projectId,
         worktreeId,
         repoName: boundedLabel(workspace.projectName),
         worktreeName: boundedLabel(worktree.displayName),
         ...(parentWorktreeId ? { parentWorktreeId } : {}),
-        ...dashboardCardMapWorkspaceMetadata(workspace, null, undefined, clientHost.platform),
+        ...hostMetadata,
         workspaceStatusId: context?.workspaceStatus.id,
         workspaceStatusLabel: context?.workspaceStatus.label,
         workspaceStatusColor: context?.workspaceStatus.color,
@@ -246,6 +256,14 @@ export function buildDashboardSnapshot(
             })
           : null
       const finishedAt = lastEnteredDoneAt(row)
+      const hostMetadata = includeCardDetails
+        ? dashboardCardMapWorkspaceMetadata(
+            workspace,
+            ptyId,
+            terminalInput ?? undefined,
+            clientHost.platform
+          )
+        : undefined
       // Only repos that actually contribute a card ship their icon.
       repoIconsByRepoId[workspace.projectId] = workspace.repoIcon
 
@@ -266,12 +284,7 @@ export function buildDashboardSnapshot(
           ? {
               parentPaneKey: dashboardCardParentPaneKey(row),
               ...(parentWorktreeId ? { parentWorktreeId } : {}),
-              ...dashboardCardMapWorkspaceMetadata(
-                workspace,
-                ptyId,
-                terminalInput ?? undefined,
-                clientHost.platform
-              )
+              ...hostMetadata
             }
           : {}),
         workspaceStatusId: context?.workspaceStatus.id,
diff --git a/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts b/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
index a83619511f8..fcb34581414 100644
--- a/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
+++ b/src/renderer/src/components/dashboard/dashboard-snapshot-workspaces.ts
@@ -1,13 +1,21 @@
 import type { AppState } from '@/store/types'
 import { getRemoteRuntimePtyEnvironmentId } from '@/runtime/runtime-terminal-stream'
-import type {
-  DashboardCard,
-  DashboardCardHostKind,
-  DashboardCardWorkspaceKind
+import {
+  DASHBOARD_MAX_LABEL_LENGTH,
+  type DashboardCard,
+  type DashboardCardHostKind,
+  type DashboardCardWorkspaceKind
 } from '../../../../shared/dashboard-snapshot'
 import type { RepoIcon } from '../../../../shared/repo-icon'
-import { getWorktreeExecutionHostId, type ExecutionHostId } from '../../../../shared/execution-host'
+import {
+  getWorktreeExecutionHostId,
+  parseExecutionHostId,
+  toRuntimeExecutionHostId,
+  toSshExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
 import { folderWorkspaceToWorktree } from '../../../../shared/folder-workspace-worktree'
+import { getHostDisplayLabelOverrides } from '../../../../shared/host-setting-overrides'
 import { isFolderRepo } from '../../../../shared/repo-kind'
 import { parseAppSshPtyId } from '../../../../shared/ssh-pty-id'
 
@@ -19,10 +27,32 @@ export type ActiveDashboardWorkspace = {
   worktree: AppState['worktreesByRepo'][string][number] & { parentWorktreeId?: string | null }
   workspaceKind: DashboardCardWorkspaceKind
   remoteHostKind: Extract<DashboardCardHostKind, 'ssh' | 'remote'> | null
+  hostLabel?: string
 }
 
 type DashboardWorkspaceState = Pick<AppState, 'repos' | 'worktreesByRepo'> &
-  Partial<Pick<AppState, 'folderWorkspaces' | 'projectGroups'>>
+  Partial<
+    Pick<
+      AppState,
+      'folderWorkspaces' | 'projectGroups' | 'runtimeEnvironments' | 'settings' | 'sshTargetLabels'
+    >
+  >
+
+function buildHostLabelLookup(
+  state: DashboardWorkspaceState
+): ReadonlyMap<ExecutionHostId, string> {
+  const labels = new Map<ExecutionHostId, string>()
+  for (const [targetId, label] of state.sshTargetLabels ?? []) {
+    labels.set(toSshExecutionHostId(targetId), label)
+  }
+  for (const environment of state.runtimeEnvironments ?? []) {
+    labels.set(toRuntimeExecutionHostId(environment.id), environment.name)
+  }
+  for (const [hostId, label] of getHostDisplayLabelOverrides(state.settings)) {
+    labels.set(hostId, label)
+  }
+  return labels
+}
 
 function remoteHostKind(
   connectionId: string | null | undefined,
@@ -40,6 +70,20 @@ export function collectActiveDashboardWorkspaces(
 ): ActiveDashboardWorkspace[] {
   const workspaces: ActiveDashboardWorkspace[] = []
   const seenWorkspaceIds = new Set<string>()
+  let hostLabels: ReadonlyMap<ExecutionHostId, string> | null = null
+  const resolveHostLabel = (executionHostId: ExecutionHostId): string | undefined => {
+    const parsed = includeMapMetadata ? parseExecutionHostId(executionHostId) : null
+    if (parsed?.kind !== 'ssh' && parsed?.kind !== 'runtime') {
+      return undefined
+    }
+    hostLabels ??= buildHostLabelLookup(state)
+    const label =
+      hostLabels.get(executionHostId) ??
+      (parsed.kind === 'ssh' ? parsed.targetId : parsed.environmentId)
+    return label.length > DASHBOARD_MAX_LABEL_LENGTH
+      ? label.slice(0, DASHBOARD_MAX_LABEL_LENGTH)
+      : label
+  }
 
   for (const repo of state.repos ?? []) {
     for (const worktree of state.worktreesByRepo?.[repo.id] ?? []) {
@@ -47,6 +91,9 @@ export function collectActiveDashboardWorkspaces(
         continue
       }
       seenWorkspaceIds.add(worktree.id)
+      const workspaceHostLabel = includeMapMetadata
+        ? resolveHostLabel(getWorktreeExecutionHostId(worktree, repo))
+        : undefined
       workspaces.push({
         projectId: repo.id,
         projectName: repo.displayName,
@@ -56,7 +103,8 @@ export function collectActiveDashboardWorkspaces(
         workspaceKind: includeMapMetadata && isFolderRepo(repo) ? 'folder' : 'worktree',
         remoteHostKind: includeMapMetadata
           ? remoteHostKind(repo.connectionId, worktree.hostId ?? repo.executionHostId)
-          : null
+          : null,
+        ...(workspaceHostLabel ? { hostLabel: workspaceHostLabel } : {})
       })
     }
   }
@@ -70,6 +118,9 @@ export function collectActiveDashboardWorkspaces(
       continue
     }
     const projectGroup = projectGroupsById.get(folderWorkspace.projectGroupId)
+    const workspaceHostLabel = includeMapMetadata
+      ? resolveHostLabel(getWorktreeExecutionHostId(worktree, undefined))
+      : undefined
     workspaces.push({
       projectId: `folder-workspace:${folderWorkspace.projectGroupId}`,
       projectName: projectGroup?.name ?? folderWorkspace.name,
@@ -82,7 +133,8 @@ export function collectActiveDashboardWorkspaces(
             folderWorkspace.connectionId ?? projectGroup?.connectionId,
             worktree.hostId ?? projectGroup?.executionHostId
           )
-        : null
+        : null,
+      ...(workspaceHostLabel ? { hostLabel: workspaceHostLabel } : {})
     })
   }
   return workspaces
@@ -115,10 +167,12 @@ export function dashboardCardMapWorkspaceMetadata(
   hostKind: DashboardCardHostKind
   executionHostId: ExecutionHostId
   workspaceKind: DashboardCardWorkspaceKind
+  hostLabel?: string
 } {
   return {
     hostKind: dashboardCardHostKind(workspace, ptyId, terminalInput, clientPlatform),
     executionHostId: getWorktreeExecutionHostId(workspace.worktree, workspace.repo ?? undefined),
-    workspaceKind: workspace.workspaceKind
+    workspaceKind: workspace.workspaceKind,
+    ...(workspace.hostLabel ? { hostLabel: workspace.hostLabel } : {})
   }
 }
diff --git a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.test.tsx b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.test.tsx
index c632f19bc4e..7cd7bf94c93 100644
--- a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.test.tsx
+++ b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.test.tsx
@@ -77,6 +77,7 @@ function makeSnapshotWatchState(): DashboardSnapshotWatchState {
     detectedWorktreesByRepo: {},
     folderWorkspaces: [],
     projectGroups: [],
+    sshTargetLabels: new Map(),
     restoredRuntimeHostIdByWorkspaceSessionKey: {},
     runtimeEnvironments: [],
     runtimeEnvironmentCatalogHydrated: false,
@@ -207,6 +208,12 @@ describe('useDashboardPopoutBridge', () => {
     expect(
       dashboardSnapshotInputsChanged({ ...previousState, agentStatusEpoch: 1 }, previousState)
     ).toBe(false)
+    expect(
+      dashboardSnapshotInputsChanged(
+        { ...previousState, sshTargetLabels: new Map([['target-1', 'Builder']]) },
+        previousState
+      )
+    ).toBe(true)
 
     // Why: each card's preview terminal keys against a host-input profile
     // derived from these. Not republishing leaves the pop-out encoding bytes
diff --git a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
index 2c42757036d..3d58b9100c8 100644
--- a/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
+++ b/src/renderer/src/components/dashboard/useDashboardPopoutBridge.ts
@@ -78,6 +78,7 @@ export function dashboardSnapshotInputsChanged(
     // these two instead of worktreesByRepo.
     state.folderWorkspaces !== previousState.folderWorkspaces ||
     state.projectGroups !== previousState.projectGroups ||
+    state.sshTargetLabels !== previousState.sshTargetLabels ||
     state.restoredRuntimeHostIdByWorkspaceSessionKey !==
       previousState.restoredRuntimeHostIdByWorkspaceSessionKey ||
     state.runtimeEnvironments !== previousState.runtimeEnvironments ||
diff --git a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.test.ts b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.test.ts
index 2b6c35db8f0..d2481a9201e 100644
--- a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.test.ts
+++ b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.test.ts
@@ -161,4 +161,17 @@ describe('useLiveDashboardSnapshot', () => {
     rerender()
     expect(result.current.cards[0].terminalInput?.hostPlatform).toBe('win32')
   })
+
+  it('re-derives saved SSH labels when the target catalog changes', () => {
+    seed({ tabAutoGenerateTitle: false })
+    useAppStore.setState({
+      repos: [{ ...repo(), connectionId: 'target-1', executionHostId: 'ssh:target-1' }]
+    })
+    const { result, rerender } = renderHook(() => useLiveDashboardSnapshot())
+    expect(result.current.cards[0].hostLabel).toBe('target-1')
+
+    useAppStore.setState({ sshTargetLabels: new Map([['target-1', 'Builder']]) })
+    rerender()
+    expect(result.current.cards[0].hostLabel).toBe('Builder')
+  })
 })
diff --git a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
index 9782f91c697..d3848178509 100644
--- a/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
+++ b/src/renderer/src/components/dashboard/useLiveDashboardSnapshot.ts
@@ -41,6 +41,7 @@ export function useLiveDashboardSnapshot(): DashboardSnapshot {
   // these two instead of worktreesByRepo.
   const folderWorkspaces = useAppStore((s) => s.folderWorkspaces)
   const projectGroups = useAppStore((s) => s.projectGroups)
+  const sshTargetLabels = useAppStore((s) => s.sshTargetLabels)
   const sshConnectionStates = useAppStore((s) => s.sshConnectionStates)
   const sshStateByEnvironment = useAppStore((s) => s.sshStateByEnvironment)
   const runtimeStatusByEnvironmentId = useAppStore((s) => s.runtimeStatusByEnvironmentId)
@@ -82,6 +83,7 @@ export function useLiveDashboardSnapshot(): DashboardSnapshot {
           detectedWorktreesByRepo,
           folderWorkspaces,
           projectGroups,
+          sshTargetLabels,
           sshConnectionStates,
           sshStateByEnvironment,
           runtimeStatusByEnvironmentId,
@@ -120,6 +122,7 @@ export function useLiveDashboardSnapshot(): DashboardSnapshot {
       detectedWorktreesByRepo,
       folderWorkspaces,
       projectGroups,
+      sshTargetLabels,
       sshConnectionStates,
       sshStateByEnvironment,
       runtimeStatusByEnvironmentId,
diff --git a/src/renderer/src/components/editor/CheckRunDetailsPanel.tsx b/src/renderer/src/components/editor/CheckRunDetailsPanel.tsx
index 50350fb1b47..6003be19e05 100644
--- a/src/renderer/src/components/editor/CheckRunDetailsPanel.tsx
+++ b/src/renderer/src/components/editor/CheckRunDetailsPanel.tsx
@@ -27,8 +27,8 @@ function formatCheckTimestamp(value: string | null | undefined): string | null {
 }
 
 type CheckStatusLike = {
-  status: PRCheckDetail['status'] | string | null | undefined
-  conclusion: PRCheckDetail['conclusion'] | string | null | undefined
+  status: PRCheckDetail['status'] | (string & {}) | null | undefined
+  conclusion: PRCheckDetail['conclusion'] | (string & {}) | null | undefined
 }
 
 function getCheckStatusLabel(check: CheckStatusLike): string {
diff --git a/src/renderer/src/components/editor/CombinedDiffViewer.tsx b/src/renderer/src/components/editor/CombinedDiffViewer.tsx
index f4bf62d3d54..fd87b515349 100644
--- a/src/renderer/src/components/editor/CombinedDiffViewer.tsx
+++ b/src/renderer/src/components/editor/CombinedDiffViewer.tsx
@@ -13,7 +13,7 @@ import { getVirtualizedScrollAnchorForOffset } from '@/hooks/virtualized-scroll-
 import { createProgrammaticScrollMarks } from '@/hooks/programmatic-scroll-marks'
 import { joinPath } from '@/lib/path'
 import { detectLanguage } from '@/lib/language-detect'
-import { openFilePreviewToSide } from '@/lib/file-preview'
+import { openFilePreviewToSide, useWorkspaceFileBrowserActionPredicate } from '@/lib/file-preview'
 import { canOpenDiffSectionPreviewToSide } from './diff-section-preview'
 import { setWithLRU } from '@/lib/scroll-cache'
 import { getCombinedDiffSectionConnectionId } from './combined-diff-section-connection'
@@ -247,6 +247,7 @@ export default function CombinedDiffViewer({
     selectWorktreeDiffCommentsOrEmpty(s, file.worktreeId)
   )
   const activeGroupId = useAppStore((s) => s.activeGroupIdByWorktree[file.worktreeId])
+  const canOpenWorkspaceFileBrowserForPath = useWorkspaceFileBrowserActionPredicate(file.worktreeId)
   const isDark =
     settings?.theme === 'dark' ||
     (settings?.theme === 'system' && window.matchMedia('(prefers-color-scheme: dark)').matches)
@@ -1182,10 +1183,7 @@ export default function CombinedDiffViewer({
       if (!detail || detail.worktreeId !== file.worktreeId) {
         return
       }
-      const hasRuntimeOwnerFilter = Object.prototype.hasOwnProperty.call(
-        detail,
-        'runtimeEnvironmentId'
-      )
+      const hasRuntimeOwnerFilter = Object.hasOwn(detail, 'runtimeEnvironmentId')
       const targetRuntimeOwner = detail.runtimeEnvironmentId?.trim() || null
       const fileRuntimeOwner = file.runtimeEnvironmentId?.trim() || null
       if (hasRuntimeOwnerFilter && targetRuntimeOwner !== fileRuntimeOwner) {
@@ -1294,7 +1292,10 @@ export default function CombinedDiffViewer({
         !canOpenDiffSectionPreviewToSide({
           path: section.path,
           status: section.status,
-          isCommitSurface: isCommitMode
+          isCommitSurface: isCommitMode,
+          canOpenWorkspaceFileBrowser: canOpenWorkspaceFileBrowserForPath(
+            joinPath(file.filePath, section.path)
+          )
         })
       ) {
         return
@@ -1316,7 +1317,14 @@ export default function CombinedDiffViewer({
         sourceGroupId
       })
     },
-    [activeGroupId, file.filePath, file.id, file.worktreeId, isCommitMode]
+    [
+      activeGroupId,
+      canOpenWorkspaceFileBrowserForPath,
+      file.filePath,
+      file.id,
+      file.worktreeId,
+      isCommitMode
+    ]
   )
 
   const handleSectionSave = useCallback(
@@ -2063,7 +2071,10 @@ export default function CombinedDiffViewer({
                           canOpenDiffSectionPreviewToSide({
                             path: section.path,
                             status: section.status,
-                            isCommitSurface: isCommitMode
+                            isCommitSurface: isCommitMode,
+                            canOpenWorkspaceFileBrowser: canOpenWorkspaceFileBrowserForPath(
+                              joinPath(file.filePath, section.path)
+                            )
                           })
                             ? openSectionPreview
                             : undefined
diff --git a/src/renderer/src/components/editor/EditorPanel.tsx b/src/renderer/src/components/editor/EditorPanel.tsx
index 233d8a9e123..60dcf72f811 100644
--- a/src/renderer/src/components/editor/EditorPanel.tsx
+++ b/src/renderer/src/components/editor/EditorPanel.tsx
@@ -2,7 +2,7 @@ import React, { useCallback, useMemo, useRef, useState } from 'react'
 import { useAppStore } from '@/store'
 import { getConnectionId } from '@/lib/connection-context'
 import { detectLanguage } from '@/lib/language-detect'
-import { openFilePreviewToSide } from '@/lib/file-preview'
+import { canShowWorkspaceFileBrowserAction, openFilePreviewToSide } from '@/lib/file-preview'
 import { getEditorHeaderCopyState } from './editor-header'
 import { isLocalPathOpenBlocked, showLocalPathOpenBlockedToast } from '@/lib/local-path-open-guard'
 import { settingsForRuntimeOwner } from '@/runtime/runtime-rpc-client'
@@ -45,6 +45,11 @@ function EditorPanelInner({
   const activeViewStateId = activeViewStateIdProp ?? activeFileId
   const activeFile = openFiles.find((f) => f.id === activeFileId) ?? null
   const activeWorktreeId = activeFile?.worktreeId
+  const canOpenWorkspaceFileBrowser = useAppStore((s) =>
+    activeWorktreeId && activeFile
+      ? canShowWorkspaceFileBrowserAction(s, activeWorktreeId, activeFile.filePath)
+      : false
+  )
   const markFileDirty = useAppStore((s) => s.markFileDirty)
   const pendingEditorReveal = useAppStore((s) => s.pendingEditorReveal)
   // Why: background Git refreshes for other worktrees must not wake every
@@ -229,7 +234,8 @@ function EditorPanelInner({
     gitStatusEntries,
     gitBranchEntries,
     markdownViewMode,
-    isChangesMode
+    isChangesMode,
+    canOpenWorkspaceFileBrowser
   })
 
   const handleOpenPreviewToSide = (): void => {
diff --git a/src/renderer/src/components/editor/IpynbViewer.tsx b/src/renderer/src/components/editor/IpynbViewer.tsx
index bbf7ded32ed..4aac74ae495 100644
--- a/src/renderer/src/components/editor/IpynbViewer.tsx
+++ b/src/renderer/src/components/editor/IpynbViewer.tsx
@@ -435,7 +435,7 @@ function getCellKey(cell: IpynbCell, index: number): string {
 }
 
 function hasOwnDraft(drafts: Record<string, string>, key: string): boolean {
-  return Object.prototype.hasOwnProperty.call(drafts, key)
+  return Object.hasOwn(drafts, key)
 }
 
 function EditableTextCell({
diff --git a/src/renderer/src/components/editor/diff-section-preview.test.ts b/src/renderer/src/components/editor/diff-section-preview.test.ts
index 20ecbae22a2..c419171c202 100644
--- a/src/renderer/src/components/editor/diff-section-preview.test.ts
+++ b/src/renderer/src/components/editor/diff-section-preview.test.ts
@@ -7,7 +7,8 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'docs/demo.html',
         status: 'modified',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(true)
   })
@@ -17,7 +18,8 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'index.htm',
         status: 'added',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(true)
   })
@@ -27,14 +29,16 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'scratch.html',
         status: 'untracked',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(true)
     expect(
       canOpenDiffSectionPreviewToSide({
         path: 'renamed.html',
         status: 'renamed',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(true)
   })
@@ -44,7 +48,8 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'Docs/DEMO.HTML',
         status: 'modified',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(true)
   })
@@ -54,7 +59,8 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'gone.html',
         status: 'deleted',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(false)
   })
@@ -64,7 +70,8 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'docs/demo.html',
         status: 'modified',
-        isCommitSurface: true
+        isCommitSurface: true,
+        canOpenWorkspaceFileBrowser: true
       })
     ).toBe(false)
   })
@@ -74,7 +81,19 @@ describe('canOpenDiffSectionPreviewToSide', () => {
       canOpenDiffSectionPreviewToSide({
         path: 'src/app.ts',
         status: 'modified',
-        isCommitSurface: false
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: true
+      })
+    ).toBe(false)
+  })
+
+  it('disables previews when the workspace browser provider is unavailable', () => {
+    expect(
+      canOpenDiffSectionPreviewToSide({
+        path: 'docs/demo.html',
+        status: 'modified',
+        isCommitSurface: false,
+        canOpenWorkspaceFileBrowser: false
       })
     ).toBe(false)
   })
diff --git a/src/renderer/src/components/editor/diff-section-preview.ts b/src/renderer/src/components/editor/diff-section-preview.ts
index 6e0fa684822..479709d3a91 100644
--- a/src/renderer/src/components/editor/diff-section-preview.ts
+++ b/src/renderer/src/components/editor/diff-section-preview.ts
@@ -8,7 +8,11 @@ export function canOpenDiffSectionPreviewToSide(params: {
   path: string
   status: string
   isCommitSurface: boolean
+  canOpenWorkspaceFileBrowser: boolean
 }): boolean {
+  if (!params.canOpenWorkspaceFileBrowser) {
+    return false
+  }
   if (params.isCommitSurface) {
     return false
   }
diff --git a/src/renderer/src/components/editor/editor-autosave.ts b/src/renderer/src/components/editor/editor-autosave.ts
index c6d01a8cdf8..c647fbfb779 100644
--- a/src/renderer/src/components/editor/editor-autosave.ts
+++ b/src/renderer/src/components/editor/editor-autosave.ts
@@ -23,6 +23,9 @@ export type EditorPathMutationTarget = {
   relativePath: string
   runtimeEnvironmentId?: string | null
   allowLocalWindowsWslAliases?: true
+  indexedOpenFiles?: {
+    matches: (openFiles: OpenFile[]) => OpenFile[]
+  }
 }
 
 export type EditorSaveQuiesceTarget = { fileId: string } | EditorPathMutationTarget
@@ -127,8 +130,11 @@ export function getOpenFilesForExternalFileChange(
   openFiles: OpenFile[],
   target: EditorPathMutationTarget
 ): OpenFile[] {
+  if (target.indexedOpenFiles) {
+    return target.indexedOpenFiles.matches(openFiles)
+  }
   const absolutePath = joinPath(target.worktreePath, target.relativePath)
-  const hasRuntimeOwnerFilter = Object.prototype.hasOwnProperty.call(target, 'runtimeEnvironmentId')
+  const hasRuntimeOwnerFilter = Object.hasOwn(target, 'runtimeEnvironmentId')
   const targetRuntimeOwner = target.runtimeEnvironmentId?.trim() || null
   return openFiles.filter((file) => {
     if (file.worktreeId !== target.worktreeId) {
diff --git a/src/renderer/src/components/editor/editor-external-watch-path-index.test.ts b/src/renderer/src/components/editor/editor-external-watch-path-index.test.ts
new file mode 100644
index 00000000000..68e33bc6baf
--- /dev/null
+++ b/src/renderer/src/components/editor/editor-external-watch-path-index.test.ts
@@ -0,0 +1,185 @@
+import { describe, expect, it } from 'vitest'
+import type { OpenFile } from '@/store/slices/editor'
+import { indexEditorExternalWatchBatchPaths } from './editor-external-watch-path-index'
+
+const wslScope = {
+  worktreeId: 'wt-wsl',
+  worktreePath: '\\\\wsl.localhost\\Ubuntu\\workspace\\repo',
+  runtimeEnvironmentId: null,
+  allowLocalWindowsWslAliases: true as const
+}
+
+function file(overrides: Partial<OpenFile> & Pick<OpenFile, 'id' | 'filePath'>): OpenFile {
+  return {
+    relativePath: 'file.ts',
+    worktreeId: 'wt-wsl',
+    mode: 'edit',
+    isDirty: false,
+    content: '',
+    language: 'typescript',
+    ...overrides
+  } as OpenFile
+}
+
+describe('editor external watch path batch index', () => {
+  it('matches UNC aliases for updates, deletes, and restored tombstones', () => {
+    const restored = file({
+      id: 'restored',
+      filePath: '//wsl.localhost/Ubuntu/workspace/repo/file.ts',
+      externalMutation: 'deleted'
+    })
+    const index = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: wslScope.worktreePath,
+        events: [
+          {
+            kind: 'delete',
+            absolutePath: '\\\\wsl$\\Ubuntu\\workspace\\repo\\file.ts'
+          },
+          {
+            kind: 'create',
+            absolutePath: '\\\\wsl.localhost\\Ubuntu\\workspace\\repo\\file.ts'
+          }
+        ]
+      },
+      [restored],
+      wslScope
+    )
+
+    expect(index.deletedOpenEditors).toEqual([
+      {
+        file: restored,
+        normalizedDeletePath: '//wsl/ubuntu/workspace/repo/file.ts'
+      }
+    ])
+    expect(index.matchesCreateOrUpdate(restored)).toBe(true)
+    expect(index.matchingOpenFiles(index.changes[0])).toEqual([restored])
+  })
+
+  it('matches /mnt drive aliases without folding WSL filesystem case', () => {
+    const mounted = file({
+      id: 'mounted',
+      filePath: '//wsl.localhost/Ubuntu/mnt/c/Repo/File.ts'
+    })
+    const nativeScope = { ...wslScope, worktreePath: 'C:\\Repo' }
+    const matching = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: nativeScope.worktreePath,
+        events: [{ kind: 'update', absolutePath: 'c:\\repo\\file.ts' }]
+      },
+      [mounted],
+      nativeScope
+    )
+    const wrongLinuxCase = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: nativeScope.worktreePath,
+        events: [{ kind: 'update', absolutePath: 'C:\\Repo\\File.ts' }]
+      },
+      [
+        file({
+          id: 'linux-case',
+          filePath: '//wsl.localhost/Ubuntu/home/Alice/File.ts'
+        })
+      ],
+      nativeScope
+    )
+
+    expect(matching.matchingOpenFiles(matching.changes[0])).toEqual([mounted])
+    expect(wrongLinuxCase.matchingOpenFiles(wrongLinuxCase.changes[0])).toEqual([])
+  })
+
+  it('keeps aliases literal for SSH, runtimes, and POSIX scopes', () => {
+    const restored = file({
+      id: 'restored',
+      filePath: '//wsl.localhost/Ubuntu/workspace/repo/file.ts'
+    })
+    const payload = {
+      worktreePath: wslScope.worktreePath,
+      events: [
+        {
+          kind: 'update' as const,
+          absolutePath: '\\\\wsl.localhost\\Ubuntu\\workspace\\repo\\file.ts'
+        }
+      ]
+    }
+
+    for (const scope of [
+      { ...wslScope, allowLocalWindowsWslAliases: undefined },
+      { ...wslScope, runtimeEnvironmentId: 'env-1', allowLocalWindowsWslAliases: undefined }
+    ]) {
+      const index = indexEditorExternalWatchBatchPaths(payload, [restored], scope)
+      expect(index.matchingOpenFiles(index.changes[0])).toEqual([])
+    }
+
+    const posix = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: '/srv/repo',
+        events: [{ kind: 'update', absolutePath: '/srv/repo/file.ts' }]
+      },
+      [restored],
+      {
+        ...wslScope,
+        worktreePath: '/srv/repo',
+        allowLocalWindowsWslAliases: undefined
+      }
+    )
+    expect(posix.matchingOpenFiles(posix.changes[0])).toEqual([])
+  })
+
+  it('filters owners and preserves open-file ordering across edit and diff matches', () => {
+    const edit = file({ id: 'edit', filePath: 'C:\\Repo\\file.ts' })
+    const runtime = file({
+      id: 'runtime',
+      filePath: 'C:\\Repo\\file.ts',
+      runtimeEnvironmentId: 'env-1'
+    })
+    const diff = file({
+      id: 'diff',
+      filePath: 'C:\\Repo\\file.ts',
+      mode: 'diff',
+      diffSource: 'unstaged'
+    })
+    const index = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: 'C:\\Repo',
+        events: [{ kind: 'update', absolutePath: 'c:\\repo\\file.ts' }]
+      },
+      [diff, runtime, edit],
+      { ...wslScope, worktreePath: 'C:\\Repo' }
+    )
+
+    expect(index.matchingOpenFiles(index.changes[0]).map(({ id }) => id)).toEqual(['diff', 'edit'])
+  })
+
+  it('deduplicates repeated events and detects only working-tree combined diffs', () => {
+    const index = indexEditorExternalWatchBatchPaths(
+      {
+        worktreePath: 'C:\\Repo',
+        events: [
+          { kind: 'create', absolutePath: 'C:\\Repo\\file.ts' },
+          { kind: 'update', absolutePath: 'C:\\Repo\\file.ts' },
+          { kind: 'update', absolutePath: 'C:\\Repo\\folder', isDirectory: true }
+        ]
+      },
+      [
+        file({
+          id: 'combined',
+          filePath: 'C:\\Repo',
+          mode: 'diff',
+          diffSource: 'combined-uncommitted'
+        }),
+        file({
+          id: 'branch',
+          filePath: 'C:\\Repo',
+          mode: 'diff',
+          diffSource: 'combined-branch'
+        })
+      ],
+      { ...wslScope, worktreePath: 'C:\\Repo' }
+    )
+
+    expect(index.changes.map(({ relativePath }) => relativePath)).toEqual(['file.ts'])
+    expect(index.createOrUpdatePaths.size).toBe(1)
+    expect(index.hasCombinedDiffConsumer).toBe(true)
+  })
+})
diff --git a/src/renderer/src/components/editor/editor-external-watch-path-index.ts b/src/renderer/src/components/editor/editor-external-watch-path-index.ts
new file mode 100644
index 00000000000..f1cb7054c67
--- /dev/null
+++ b/src/renderer/src/components/editor/editor-external-watch-path-index.ts
@@ -0,0 +1,256 @@
+import { joinPath } from '@/lib/path'
+import { getExternalFileChangeRelativePath } from '@/components/right-sidebar/useFileExplorerWatch'
+import type { OpenFile } from '@/store/slices/editor'
+import type { FsChangedPayload } from '../../../../shared/types'
+import {
+  getLocalWindowsWslPathIdentity,
+  normalizeRuntimePathForComparison,
+  type LocalWindowsWslPathIdentity
+} from '../../../../shared/cross-platform-path'
+
+type WatchScope = {
+  worktreeId: string
+  worktreePath: string
+  runtimeEnvironmentId: string | null
+  allowLocalWindowsWslAliases?: true
+}
+
+type IndexedPath = {
+  absolutePath: string
+  identity: LocalWindowsWslPathIdentity
+}
+
+type IndexedOpenFile = {
+  file: OpenFile
+  index: number
+  identity: LocalWindowsWslPathIdentity | null
+}
+
+export type IndexedExternalWatchChange = IndexedPath & {
+  relativePath: string
+}
+
+export type EditorExternalWatchBatchPathIndex = {
+  createOrUpdatePaths: ReadonlyMap<string, string>
+  changes: readonly IndexedExternalWatchChange[]
+  deletedOpenEditors: readonly { file: OpenFile; normalizedDeletePath: string }[]
+  hasCombinedDiffConsumer: boolean
+  matchesCreateOrUpdate: (file: OpenFile) => boolean
+  matchingOpenFiles: (
+    change: IndexedExternalWatchChange,
+    currentOpenFiles?: OpenFile[]
+  ) => OpenFile[]
+}
+
+function openFileRuntimeOwner(file: Pick<OpenFile, 'runtimeEnvironmentId'>): string | null {
+  return file.runtimeEnvironmentId?.trim() || null
+}
+
+function addToListMap<T>(map: Map<string, T[]>, key: string, value: T): void {
+  const existing = map.get(key)
+  if (existing) {
+    existing.push(value)
+  } else {
+    map.set(key, [value])
+  }
+}
+
+class IndexedPathLookup<T> {
+  private readonly direct = new Map<string, T>()
+  private readonly aliases = new Map<string, T>()
+  private readonly wslAliases = new Map<string, T>()
+
+  constructor(private readonly allowAliases: boolean) {}
+
+  add(path: IndexedPath, value: T): void {
+    this.direct.set(path.identity.normalizedPath, value)
+    if (!this.allowAliases) {
+      return
+    }
+    this.aliases.set(path.identity.aliasComparisonPath, value)
+    if (path.identity.isWslUnc) {
+      this.wslAliases.set(path.identity.aliasComparisonPath, value)
+    }
+  }
+
+  get(identity: LocalWindowsWslPathIdentity): T | undefined {
+    const direct = this.direct.get(identity.normalizedPath)
+    if (direct !== undefined || !this.allowAliases) {
+      return direct
+    }
+    return identity.isWslUnc
+      ? this.aliases.get(identity.aliasComparisonPath)
+      : this.wslAliases.get(identity.aliasComparisonPath)
+  }
+}
+
+function pathIdentity(value: string, allowAliases: boolean): LocalWindowsWslPathIdentity {
+  if (allowAliases) {
+    return getLocalWindowsWslPathIdentity(value)
+  }
+  const normalizedPath = normalizeRuntimePathForComparison(value)
+  return { normalizedPath, aliasComparisonPath: normalizedPath, isWslUnc: false }
+}
+
+function collectMatchingFiles(
+  direct: readonly IndexedOpenFile[],
+  aliases: readonly IndexedOpenFile[],
+  diffs: readonly IndexedOpenFile[]
+): OpenFile[] {
+  const byIndex = new Map<number, OpenFile>()
+  for (const entry of [...direct, ...aliases, ...diffs]) {
+    byIndex.set(entry.index, entry.file)
+  }
+  return [...byIndex.entries()].sort(([left], [right]) => left - right).map(([, file]) => file)
+}
+
+class IndexedOpenFileLookup {
+  private readonly directEditors = new Map<string, IndexedOpenFile[]>()
+  private readonly aliasEditors = new Map<string, IndexedOpenFile[]>()
+  private readonly wslAliasEditors = new Map<string, IndexedOpenFile[]>()
+  private readonly diffsByRelativePath = new Map<string, IndexedOpenFile[]>()
+  readonly indexedOpenFiles = new Map<string, IndexedOpenFile>()
+  readonly hasCombinedDiffConsumer: boolean
+
+  constructor(
+    openFiles: OpenFile[],
+    scope: WatchScope,
+    private readonly allowAliases: boolean
+  ) {
+    let hasCombinedDiffConsumer = false
+    for (const [index, file] of openFiles.entries()) {
+      if (
+        file.worktreeId !== scope.worktreeId ||
+        openFileRuntimeOwner(file) !== scope.runtimeEnvironmentId
+      ) {
+        continue
+      }
+      if (
+        file.mode === 'diff' &&
+        (file.diffSource === 'combined-uncommitted' || file.diffSource === 'combined-all')
+      ) {
+        hasCombinedDiffConsumer = true
+        continue
+      }
+      if (file.mode === 'diff') {
+        if (file.diffSource === 'unstaged' || file.diffSource === 'staged') {
+          addToListMap(this.diffsByRelativePath, file.relativePath, {
+            file,
+            index,
+            identity: null
+          })
+        }
+        continue
+      }
+      if (file.mode !== 'edit' && file.mode !== 'markdown-preview') {
+        continue
+      }
+      const identity = pathIdentity(file.filePath, allowAliases)
+      const indexedFile = { file, index, identity }
+      this.indexedOpenFiles.set(file.id, indexedFile)
+      addToListMap(this.directEditors, file.filePath, indexedFile)
+      if (allowAliases) {
+        addToListMap(this.aliasEditors, identity.aliasComparisonPath, indexedFile)
+        if (identity.isWslUnc) {
+          addToListMap(this.wslAliasEditors, identity.aliasComparisonPath, indexedFile)
+        }
+      }
+    }
+    this.hasCombinedDiffConsumer = hasCombinedDiffConsumer
+  }
+
+  matchingOpenFiles(change: IndexedExternalWatchChange): OpenFile[] {
+    const aliases = !this.allowAliases
+      ? []
+      : change.identity.isWslUnc
+        ? (this.aliasEditors.get(change.identity.aliasComparisonPath) ?? [])
+        : (this.wslAliasEditors.get(change.identity.aliasComparisonPath) ?? [])
+    return collectMatchingFiles(
+      this.directEditors.get(change.absolutePath) ?? [],
+      aliases,
+      this.diffsByRelativePath.get(change.relativePath) ?? []
+    )
+  }
+}
+
+export function indexEditorExternalWatchBatchPaths(
+  payload: FsChangedPayload,
+  openFiles: OpenFile[],
+  scope: WatchScope
+): EditorExternalWatchBatchPathIndex {
+  const allowAliases = scope.allowLocalWindowsWslAliases === true
+  const createOrUpdateLookup = new IndexedPathLookup<IndexedPath>(allowAliases)
+  const deleteLookup = new IndexedPathLookup<IndexedPath>(allowAliases)
+  const createOrUpdatePaths = new Map<string, string>()
+  const changesByRelativePath = new Map<string, IndexedExternalWatchChange>()
+
+  for (const event of payload.events) {
+    if (event.kind === 'overflow') {
+      continue
+    }
+    const eventPath: IndexedPath = {
+      absolutePath: event.absolutePath,
+      identity: pathIdentity(event.absolutePath, allowAliases)
+    }
+    if (event.kind === 'delete') {
+      deleteLookup.add(eventPath, eventPath)
+      continue
+    }
+    if (event.isDirectory !== true) {
+      createOrUpdatePaths.set(eventPath.identity.normalizedPath, event.absolutePath)
+      createOrUpdateLookup.add(eventPath, eventPath)
+    }
+    const relativePath = getExternalFileChangeRelativePath(
+      scope.worktreePath,
+      event.absolutePath,
+      event.isDirectory
+    )
+    if (relativePath && !changesByRelativePath.has(relativePath)) {
+      const absolutePath = joinPath(scope.worktreePath, relativePath)
+      changesByRelativePath.set(relativePath, {
+        relativePath,
+        absolutePath,
+        identity: eventPath.identity
+      })
+    }
+  }
+
+  const initialOpenFileLookup = new IndexedOpenFileLookup(openFiles, scope, allowAliases)
+  const openFileLookups = new WeakMap<OpenFile[], IndexedOpenFileLookup>()
+  openFileLookups.set(openFiles, initialOpenFileLookup)
+  const getOpenFileLookup = (currentOpenFiles: OpenFile[]): IndexedOpenFileLookup => {
+    const existing = openFileLookups.get(currentOpenFiles)
+    if (existing) {
+      return existing
+    }
+    const indexed = new IndexedOpenFileLookup(currentOpenFiles, scope, allowAliases)
+    openFileLookups.set(currentOpenFiles, indexed)
+    return indexed
+  }
+  const matchesCreateOrUpdate = (file: OpenFile): boolean => {
+    const identity =
+      initialOpenFileLookup.indexedOpenFiles.get(file.id)?.identity ??
+      pathIdentity(file.filePath, allowAliases)
+    return createOrUpdateLookup.get(identity) !== undefined
+  }
+  const deletedOpenEditors: { file: OpenFile; normalizedDeletePath: string }[] = []
+  for (const indexedFile of initialOpenFileLookup.indexedOpenFiles.values()) {
+    const deletedPath = deleteLookup.get(indexedFile.identity!)
+    if (deletedPath) {
+      deletedOpenEditors.push({
+        file: indexedFile.file,
+        normalizedDeletePath: deletedPath.identity.normalizedPath
+      })
+    }
+  }
+
+  return {
+    createOrUpdatePaths,
+    changes: [...changesByRelativePath.values()],
+    deletedOpenEditors,
+    hasCombinedDiffConsumer: initialOpenFileLookup.hasCombinedDiffConsumer,
+    matchesCreateOrUpdate,
+    matchingOpenFiles: (change, currentOpenFiles = openFiles) =>
+      getOpenFileLookup(currentOpenFiles).matchingOpenFiles(change)
+  }
+}
diff --git a/src/renderer/src/components/editor/editor-panel-draft-selector.ts b/src/renderer/src/components/editor/editor-panel-draft-selector.ts
index 8cc7e07fb27..b455af4e56f 100644
--- a/src/renderer/src/components/editor/editor-panel-draft-selector.ts
+++ b/src/renderer/src/components/editor/editor-panel-draft-selector.ts
@@ -43,7 +43,7 @@ export function createEditorPanelDraftSelector(
       const draft = state.editorDrafts[fileId]
       return (
         draft !== previousSelection[fileId] ||
-        (draft === undefined && Object.prototype.hasOwnProperty.call(previousSelection, fileId))
+        (draft === undefined && Object.hasOwn(previousSelection, fileId))
       )
     })
     if (!changed) {
diff --git a/src/renderer/src/components/editor/editor-panel-render-model.test.ts b/src/renderer/src/components/editor/editor-panel-render-model.test.ts
index fc4efff0a5c..fc7e66a78ea 100644
--- a/src/renderer/src/components/editor/editor-panel-render-model.test.ts
+++ b/src/renderer/src/components/editor/editor-panel-render-model.test.ts
@@ -42,7 +42,8 @@ function renderModel(args: {
     gitStatusEntries: args.gitStatusByWorktree?.[activeFile.worktreeId],
     gitBranchEntries: undefined,
     markdownViewMode: args.markdownViewMode ?? {},
-    isChangesMode: args.isChangesMode ?? false
+    isChangesMode: args.isChangesMode ?? false,
+    canOpenWorkspaceFileBrowser: true
   })
 }
 
@@ -66,6 +67,22 @@ describe('getEditorPanelRenderModel HTML preview affordance', () => {
     )
   })
 
+  it('disables preview when the workspace browser provider is unavailable', () => {
+    const activeFile = htmlFile()
+    const model = getEditorPanelRenderModel({
+      activeFile,
+      fileContents: {},
+      editorDrafts: {},
+      gitStatusEntries: undefined,
+      gitBranchEntries: undefined,
+      markdownViewMode: {},
+      isChangesMode: false,
+      canOpenWorkspaceFileBrowser: false
+    })
+
+    expect(model.canOpenPreviewToSide).toBe(false)
+  })
+
   it('enables preview for single HTML diffs whose file exists on disk', () => {
     const model = renderModel({
       activeFile: htmlFile({ mode: 'diff', diffSource: 'unstaged' } as Partial<OpenFile>),
diff --git a/src/renderer/src/components/editor/editor-panel-render-model.ts b/src/renderer/src/components/editor/editor-panel-render-model.ts
index 4f46a0f1717..87fa868c1dd 100644
--- a/src/renderer/src/components/editor/editor-panel-render-model.ts
+++ b/src/renderer/src/components/editor/editor-panel-render-model.ts
@@ -26,6 +26,7 @@ type EditorPanelRenderModelParams = {
   gitBranchEntries: StoreState['gitBranchChangesByWorktree'][string] | undefined
   markdownViewMode: StoreState['markdownViewMode']
   isChangesMode: boolean
+  canOpenWorkspaceFileBrowser: boolean
 }
 
 export function getEditorPanelRenderModel({
@@ -35,7 +36,8 @@ export function getEditorPanelRenderModel({
   gitStatusEntries,
   gitBranchEntries,
   markdownViewMode,
-  isChangesMode
+  isChangesMode,
+  canOpenWorkspaceFileBrowser
 }: EditorPanelRenderModelParams) {
   const isSingleDiff =
     activeFile.mode === 'diff' &&
@@ -163,6 +165,7 @@ export function getEditorPanelRenderModel({
     // when the modified side still exists on disk (canOpen excludes deleted
     // files and commit diffs whose content may not match the working tree).
     canOpenPreviewToSide:
+      canOpenWorkspaceFileBrowser &&
       canPreviewLanguage(viewerLanguage) &&
       (activeFile.mode === 'edit' || (isSingleDiff && openFileState.canOpen)),
     mdViewMode,
diff --git a/src/renderer/src/components/editor/monaco-context-menu-paste.ts b/src/renderer/src/components/editor/monaco-context-menu-paste.ts
index 4a33fb68352..9b513f8e426 100644
--- a/src/renderer/src/components/editor/monaco-context-menu-paste.ts
+++ b/src/renderer/src/components/editor/monaco-context-menu-paste.ts
@@ -60,7 +60,7 @@ function resolvePasteMetadata(
   return {
     pasteOnNewLine: emptySelectionClipboard && metadata.isFromEmptySelection === true,
     multicursorText:
-      typeof metadata.multicursorText !== 'undefined' ? (metadata.multicursorText ?? null) : null,
+      metadata.multicursorText !== undefined ? (metadata.multicursorText ?? null) : null,
     mode: metadata.mode ?? null
   }
 }
diff --git a/src/renderer/src/components/editor/monaco-markdown-doc-completions.ts b/src/renderer/src/components/editor/monaco-markdown-doc-completions.ts
index 882b011e9b3..4d33a1f3985 100644
--- a/src/renderer/src/components/editor/monaco-markdown-doc-completions.ts
+++ b/src/renderer/src/components/editor/monaco-markdown-doc-completions.ts
@@ -9,7 +9,7 @@ import {
 type MonacoApi = Parameters<OnMount>[1]
 
 let provider: IDisposable | null = null
-let providerMonaco: MonacoApi | null = null
+let providerMonaco: MonacoApi = null
 const documentsByModel = new Map<string, MarkdownDocument[]>()
 
 export function ensureMarkdownDocCompletionProvider(monaco: MonacoApi): void {
diff --git a/src/renderer/src/components/editor/rich-markdown-slash-command-catalog.tsx b/src/renderer/src/components/editor/rich-markdown-slash-command-catalog.tsx
index 922e1abe2f1..3cd31be6f6d 100644
--- a/src/renderer/src/components/editor/rich-markdown-slash-command-catalog.tsx
+++ b/src/renderer/src/components/editor/rich-markdown-slash-command-catalog.tsx
@@ -1,4 +1,3 @@
-import type {} from '@tiptap/extension-mathematics'
 import {
   ChevronRight,
   ImageIcon,
diff --git a/src/renderer/src/components/editor/rich-markdown-terminal-path-paste.ts b/src/renderer/src/components/editor/rich-markdown-terminal-path-paste.ts
index cfdb7f422fd..037004a5303 100644
--- a/src/renderer/src/components/editor/rich-markdown-terminal-path-paste.ts
+++ b/src/renderer/src/components/editor/rich-markdown-terminal-path-paste.ts
@@ -14,7 +14,7 @@ function readClipboardText(event: ClipboardEvent, type: string): string {
 function getWindowsPathBasename(filePath: string): string {
   const normalized = filePath.replaceAll('/', '\\')
   const separatorIndex = normalized.lastIndexOf('\\')
-  return separatorIndex >= 0 ? normalized.slice(separatorIndex + 1) : normalized
+  return separatorIndex !== -1 ? normalized.slice(separatorIndex + 1) : normalized
 }
 
 function extractClipboardAnchors(html: string): ClipboardAnchor[] {
diff --git a/src/renderer/src/components/editor/useLocalImageSrc.ts b/src/renderer/src/components/editor/useLocalImageSrc.ts
index 9a8327af090..df174160bb8 100644
--- a/src/renderer/src/components/editor/useLocalImageSrc.ts
+++ b/src/renderer/src/components/editor/useLocalImageSrc.ts
@@ -130,7 +130,7 @@ if (typeof window !== 'undefined') {
   window.addEventListener('focus', invalidateImageCache)
 }
 
-if (typeof import.meta !== 'undefined' && import.meta.hot) {
+if (import.meta !== undefined && import.meta.hot) {
   // Why: Vite can re-evaluate this module without a full renderer reload.
   // Disposing the module-level listener and blob URLs prevents dev-session leaks.
   import.meta.hot.dispose(disposeImageCacheModuleState)
diff --git a/src/renderer/src/components/feature-wall/FeatureWallBrowserAction.tsx b/src/renderer/src/components/feature-wall/FeatureWallBrowserAction.tsx
index 2e039c2f2ce..b6d185e9092 100644
--- a/src/renderer/src/components/feature-wall/FeatureWallBrowserAction.tsx
+++ b/src/renderer/src/components/feature-wall/FeatureWallBrowserAction.tsx
@@ -16,9 +16,15 @@ import {
   promptForSetupGuideProject,
   useSetupTargetWorktree
 } from './FeatureWallSetupWorkflowActions'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 export function BrowserAction(props: { done: boolean }): React.JSX.Element {
   const targetWorktree = useSetupTargetWorktree()
+  const browserCreationEnabled = useAppStore(
+    (state) =>
+      getClientCreationActionPolicy(state, targetWorktree?.id ?? null)['managed-browser'].state ===
+      'enabled'
+  )
   const openModal = useAppStore((s) => s.openModal)
   const closeModal = useAppStore((s) => s.closeModal)
   const openNewBrowserTabInActiveWorkspace = useAppStore(
@@ -39,7 +45,9 @@ export function BrowserAction(props: { done: boolean }): React.JSX.Element {
       state.activeGroupIdByWorktree[targetWorktree.id] ??
       state.groupsByWorktree[targetWorktree.id]?.[0]?.id
     if (groupId) {
-      void openNewBrowserTabInActiveWorkspace(groupId)
+      void openNewBrowserTabInActiveWorkspace(groupId).catch((error) => {
+        toast.error(error instanceof Error ? error.message : String(error))
+      })
     } else {
       toast.warning(
         translate(
@@ -58,7 +66,7 @@ export function BrowserAction(props: { done: boolean }): React.JSX.Element {
 
   return (
     <div className="flex flex-wrap items-center gap-2.5">
-      {props.done ? null : (
+      {props.done || !browserCreationEnabled ? null : (
         <Button type="button" size="sm" className="w-fit gap-2" onClick={handleTryIt}>
           <ArrowUpRight className="size-3.5" />
           {translate(
diff --git a/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.tsx b/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.tsx
index 1cede3297a4..2f60cb89902 100644
--- a/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.tsx
+++ b/src/renderer/src/components/floating-terminal/FloatingTerminalPanel.tsx
@@ -116,6 +116,7 @@ import { shouldRestoreMaximizedPanelBounds } from './floating-terminal-panel-res
 import { translate } from '@/i18n/i18n'
 import { consumeFloatingTerminalOpenMaximizedIntent } from '@/lib/floating-terminal'
 import { selectFloatingTerminalPanelInputs } from './floating-terminal-panel-inputs'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 const LOCAL_RUNTIME_SETTINGS = { activeRuntimeEnvironmentId: null } as const
 const NO_ACTIVITY_TERMINAL_PORTALS = []
 
@@ -271,6 +272,11 @@ export function FloatingTerminalPanel({
   const newMarkdownShortcut = useShortcutKeyDetails('tab.newMarkdown')
   const openMarkdownShortcut = useShortcutKeyDetails('tab.openMarkdown')
   const closeShortcut = useShortcutKeyDetails('tab.close')
+  const managedBrowserCreationEnabled = useAppStore(
+    (state) =>
+      getClientCreationActionPolicy(state, FLOATING_TERMINAL_WORKTREE_ID)['managed-browser']
+        .state === 'enabled'
+  )
 
   const [cwd, setCwd] = useState<string | null>(null)
   const [markdownCwd, setMarkdownCwd] = useState<string | null>(null)
@@ -389,6 +395,7 @@ export function FloatingTerminalPanel({
     terminalTabs: tabs,
     assignments: terminalAssignments,
     isWorktreeActive: open,
+    activeTerminalTabId: activeTerminalId,
     coldParkTerminalPanes: false,
     shouldMeasureHiddenWorktree: false,
     activityTerminalPortals: NO_ACTIVITY_TERMINAL_PORTALS
@@ -794,6 +801,14 @@ export function FloatingTerminalPanel({
   )
 
   const createFloatingBrowserTab = useCallback(() => {
+    const availability = getClientCreationActionPolicy(
+      useAppStore.getState(),
+      FLOATING_TERMINAL_WORKTREE_ID
+    )['managed-browser']
+    if (availability.state !== 'enabled') {
+      toast.error(availability.reason)
+      return
+    }
     const url = browserDefaultUrl ?? 'about:blank'
     createBrowserTab(FLOATING_TERMINAL_WORKTREE_ID, url, {
       title: translate(
@@ -1284,6 +1299,14 @@ export function FloatingTerminalPanel({
         if (resolution.action === 'tab.newTerminal') {
           createFloatingTerminalTab()
         } else if (resolution.action === 'tab.newBrowser') {
+          const availability = getClientCreationActionPolicy(
+            useAppStore.getState(),
+            FLOATING_TERMINAL_WORKTREE_ID
+          )['managed-browser']
+          if (availability.state !== 'enabled') {
+            toast.error(availability.reason)
+            return 'handled'
+          }
           createFloatingBrowserTab()
         } else if (resolution.action === 'tab.newMarkdown') {
           createFloatingMarkdownTab()
@@ -1959,6 +1982,7 @@ export function FloatingTerminalPanel({
               onNewMarkdown={createFloatingMarkdownTab}
               onOpenMarkdown={openFloatingMarkdownTab}
               onNewBrowser={createFloatingBrowserTab}
+              showNewBrowser={managedBrowserCreationEnabled}
               onClose={() => onOpenChange(false)}
               onFocusPanel={focusPanelForShortcuts}
               newTerminalShortcut={newTerminalShortcut}
@@ -2101,6 +2125,7 @@ function FloatingTerminalEmptyState({
   onNewMarkdown,
   onOpenMarkdown,
   onNewBrowser,
+  showNewBrowser,
   onClose,
   onFocusPanel,
   newTerminalShortcut,
@@ -2113,6 +2138,7 @@ function FloatingTerminalEmptyState({
   onNewMarkdown: () => void
   onOpenMarkdown: () => void
   onNewBrowser: () => void
+  showNewBrowser: boolean
   onClose: () => void
   onFocusPanel: () => void
   newTerminalShortcut: ShortcutKeyComboDetails
@@ -2176,21 +2202,23 @@ function FloatingTerminalEmptyState({
           </span>
           <FloatingEmptyStateShortcut shortcut={openMarkdownShortcut} />
         </Button>
-        <Button
-          type="button"
-          variant="ghost"
-          className="grid h-8 w-full grid-cols-[1rem_minmax(0,1fr)_auto] items-center gap-2.5 rounded-md px-3 py-0 text-sm font-normal text-foreground hover:bg-muted/40 hover:text-foreground"
-          onClick={onNewBrowser}
-        >
-          <Globe className="size-3.5 opacity-90" />
-          <span className="truncate text-left leading-none">
-            {translate(
-              'auto.components.floating.terminal.FloatingTerminalPanel.8b07759314',
-              'New Browser'
-            )}
-          </span>
-          <FloatingEmptyStateShortcut shortcut={newBrowserShortcut} />
-        </Button>
+        {showNewBrowser ? (
+          <Button
+            type="button"
+            variant="ghost"
+            className="grid h-8 w-full grid-cols-[1rem_minmax(0,1fr)_auto] items-center gap-2.5 rounded-md px-3 py-0 text-sm font-normal text-foreground hover:bg-muted/40 hover:text-foreground"
+            onClick={onNewBrowser}
+          >
+            <Globe className="size-3.5 opacity-90" />
+            <span className="truncate text-left leading-none">
+              {translate(
+                'auto.components.floating.terminal.FloatingTerminalPanel.8b07759314',
+                'New Browser'
+              )}
+            </span>
+            <FloatingEmptyStateShortcut shortcut={newBrowserShortcut} />
+          </Button>
+        ) : null}
         <Button
           type="button"
           variant="ghost"
diff --git a/src/renderer/src/components/floating-terminal/floating-terminal-panel-bounds.ts b/src/renderer/src/components/floating-terminal/floating-terminal-panel-bounds.ts
index aef4c99dfe6..91e97c2de79 100644
--- a/src/renderer/src/components/floating-terminal/floating-terminal-panel-bounds.ts
+++ b/src/renderer/src/components/floating-terminal/floating-terminal-panel-bounds.ts
@@ -60,7 +60,7 @@ function clampValue(value: number, min: number, max: number): number {
 }
 
 function getWindowStorage(): Storage | null {
-  return typeof window !== 'undefined' && typeof window.localStorage !== 'undefined'
+  return typeof window !== 'undefined' && window.localStorage !== undefined
     ? window.localStorage
     : null
 }
diff --git a/src/renderer/src/components/floating-terminal/floating-terminal-trigger-position.ts b/src/renderer/src/components/floating-terminal/floating-terminal-trigger-position.ts
index effee92d52a..fb127b23778 100644
--- a/src/renderer/src/components/floating-terminal/floating-terminal-trigger-position.ts
+++ b/src/renderer/src/components/floating-terminal/floating-terminal-trigger-position.ts
@@ -48,7 +48,7 @@ function isAnchorY(value: unknown): value is FloatingTerminalAnchorY {
 }
 
 function getWindowStorage(): Storage | null {
-  return typeof window !== 'undefined' && typeof window.localStorage !== 'undefined'
+  return typeof window !== 'undefined' && window.localStorage !== undefined
     ? window.localStorage
     : null
 }
diff --git a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
index b96d3fad358..826d70aea9f 100644
--- a/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
+++ b/src/renderer/src/components/native-chat/claude-model-switch-confirmation.ts
@@ -43,14 +43,14 @@ function hasClaudeModelSwitchSuccess(buffer: string, modelLabel: string): boolea
   // every picker token prevents one context variant from confirming another.
   const labelTokens = modelLabel.toLowerCase().match(/[a-z]+|\d+[a-z]*/g) ?? []
   const successStart = text.lastIndexOf('setmodelto')
-  if (successStart < 0 || labelTokens.length === 0) {
+  if (successStart === -1 || labelTokens.length === 0) {
     return false
   }
   const successText = text.slice(successStart)
   let tokenEnd = 0
   for (const token of labelTokens) {
     const tokenStart = successText.indexOf(token, tokenEnd)
-    if (tokenStart < 0) {
+    if (tokenStart === -1) {
       return false
     }
     tokenEnd = tokenStart + token.length
diff --git a/src/renderer/src/components/native-chat/claude-terminal-session-options.ts b/src/renderer/src/components/native-chat/claude-terminal-session-options.ts
index 3b8ad86a47a..c7e88eaa898 100644
--- a/src/renderer/src/components/native-chat/claude-terminal-session-options.ts
+++ b/src/renderer/src/components/native-chat/claude-terminal-session-options.ts
@@ -52,7 +52,7 @@ function frameCell(line: string): string {
   if (line.startsWith(FRAME_COLUMN)) {
     const afterBorder = line.slice(FRAME_COLUMN.length)
     const columnEnd = afterBorder.indexOf(FRAME_COLUMN)
-    return (columnEnd < 0 ? afterBorder : afterBorder.slice(0, columnEnd)).trim()
+    return (columnEnd === -1 ? afterBorder : afterBorder.slice(0, columnEnd)).trim()
   }
   // Unframed buffers put the descriptor on the row directly, behind box art.
   return line.replace(/^[^A-Za-z0-9]+/, '').trim()
@@ -171,7 +171,7 @@ function labelNamesReportedModel(reportedModel: string, label: string): boolean
   let cursor = 1
   for (const token of labelTokens.slice(1)) {
     const found = nameTokens.indexOf(token, cursor)
-    if (found < 0) {
+    if (found === -1) {
       return false
     }
     cursor = found + 1
@@ -212,7 +212,7 @@ export function readClaudeSessionOptionsFromTerminalScreen(
   }
   const lines = normalizedScreenLines(screen)
   const headerIndex = lines.findIndex(isClaudeHeaderRow)
-  if (headerIndex < 0) {
+  if (headerIndex === -1) {
     return null
   }
   const descriptorCell = claudeModelDescriptorCell(lines, headerIndex)
diff --git a/src/renderer/src/components/native-chat/native-chat-pending-occurrence.ts b/src/renderer/src/components/native-chat/native-chat-pending-occurrence.ts
index 7185b6ad1d3..5a4631421bc 100644
--- a/src/renderer/src/components/native-chat/native-chat-pending-occurrence.ts
+++ b/src/renderer/src/components/native-chat/native-chat-pending-occurrence.ts
@@ -191,7 +191,7 @@ export function selectPendingIndicesRepresentedByUserTexts(
       }
       represented.add(entry.index)
       const at = remaining.findIndex((candidate) => candidate.index === entry.index)
-      if (at >= 0) {
+      if (at !== -1) {
         remaining.splice(at, 1)
       }
     }
diff --git a/src/renderer/src/components/native-chat/native-chat-pending.ts b/src/renderer/src/components/native-chat/native-chat-pending.ts
index 410de8add38..a33b4e27838 100644
--- a/src/renderer/src/components/native-chat/native-chat-pending.ts
+++ b/src/renderer/src/components/native-chat/native-chat-pending.ts
@@ -99,7 +99,7 @@ function messagesAfterPendingBoundary(
     return messages.filter((message) => messageIsAfterPendingTimestamp(message, pending))
   }
   const boundaryIndex = messages.findIndex((message) => message.id === pending.afterMessageId)
-  if (boundaryIndex >= 0) {
+  if (boundaryIndex !== -1) {
     return messages.slice(boundaryIndex + 1)
   }
   // A bounded authoritative read can page the boundary out. Fall back to the
@@ -164,7 +164,7 @@ export function prunePendingSends(
       return false
     }
     const openIndex = stillOpen.indexOf(entry)
-    return openIndex < 0 || !gluedRepresented.has(openIndex)
+    return openIndex === -1 || !gluedRepresented.has(openIndex)
   })
   return next.length === pending.length ? pending : next
 }
@@ -208,7 +208,7 @@ export function pendingSendsAsMessages(
         return false
       }
       const openIndex = stillVisible.indexOf(entry)
-      return openIndex < 0 || !gluedRepresented.has(openIndex)
+      return openIndex === -1 || !gluedRepresented.has(openIndex)
     })
     .map((entry) => ({
       id: `pending:${entry.id}`,
diff --git a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField-source-boundaries.test.ts b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField-source-boundaries.test.ts
index 414b438bad7..10857e8d67a 100644
--- a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField-source-boundaries.test.ts
+++ b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField-source-boundaries.test.ts
@@ -99,6 +99,31 @@ describe('SmartWorkspaceNameField repo-backed source boundaries', () => {
     expect(githubLookupSection).toContain('repoBackedSearchTargets.map')
   })
 
+  it('does not fan decisive Linear URLs out to unrelated providers', () => {
+    const githubGate = sourceBetween(
+      FIELD_SOURCE,
+      'const shouldQueryGithub =',
+      'const shouldQueryLinear ='
+    )
+    const branchGate = sourceBetween(
+      FIELD_SOURCE,
+      'const branchSearchRequest = useMemo',
+      'useEffect(() => {\n    if (!branchSearchRequest)'
+    )
+    const gitlabGate = sourceBetween(
+      FIELD_SOURCE,
+      'const shouldQueryGitlab =',
+      'useEffect(() => {\n    if (!shouldQueryGitlab'
+    )
+
+    expect(FIELD_SOURCE).toContain(
+      "linearUrlIntent !== null && (mode === 'smart' || mode === 'linear')"
+    )
+    expect(githubGate).toContain('!linearUrlIntentOwnsInput')
+    expect(branchGate).toContain('linearUrlIntentOwnsInput')
+    expect(gitlabGate).toContain('!linearUrlIntentOwnsInput')
+  })
+
   it('reports the active source mode without lifting source search state', () => {
     expect(FIELD_SOURCE).toContain('onActiveSourceModeChange?: (mode: SmartNameMode) => void')
     expect(FIELD_SOURCE).toContain('onActiveSourceModeChange')
diff --git a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.ime-enter.test.tsx b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.ime-enter.test.tsx
index f3c81f5b573..8055d963e1f 100644
--- a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.ime-enter.test.tsx
+++ b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.ime-enter.test.tsx
@@ -3,6 +3,7 @@
 import React, { act } from 'react'
 import { createRoot, type Root } from 'react-dom/client'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { useAppStore } from '@/store'
 import SmartWorkspaceNameField from './SmartWorkspaceNameField'
 
 vi.mock('@/store', () => {
@@ -10,6 +11,7 @@ vi.mock('@/store', () => {
     repos: [],
     addRepo: vi.fn(),
     checkLinearConnection: vi.fn(),
+    fetchLinearIssue: vi.fn(),
     fetchWorkItems: vi.fn(),
     fetchWorkItemsAcrossRepos: vi.fn(),
     getCachedWorkItems: vi.fn(() => null),
@@ -25,6 +27,7 @@ vi.mock('@/store', () => {
   }
   const useAppStore = (selector: (s: typeof state) => unknown): unknown => selector(state)
   useAppStore.getState = () => state
+  useAppStore.setState = (patch: Partial<typeof state>) => Object.assign(state, patch)
   return { useAppStore }
 })
 
@@ -79,6 +82,13 @@ let container: HTMLDivElement
 let root: Root
 
 beforeEach(() => {
+  useAppStore.setState({
+    linearStatus: { connected: false, viewer: null },
+    linearStatusChecked: false,
+    fetchLinearIssue: vi.fn(async () => null),
+    listLinearIssues: vi.fn(async () => ({ items: [] })),
+    searchLinearIssues: vi.fn(async () => [])
+  })
   container = document.createElement('div')
   document.body.appendChild(container)
   root = createRoot(container)
@@ -88,6 +98,7 @@ afterEach(() => {
   act(() => {
     root.unmount()
   })
+  vi.useRealTimers()
   container.remove()
 })
 
@@ -261,6 +272,87 @@ describe('SmartWorkspaceNameField IME Enter guard', () => {
   })
 })
 
+describe('SmartWorkspaceNameField Linear URL loading', () => {
+  it('blocks Enter and delays visible loading feedback while preserving its layout', async () => {
+    vi.useFakeTimers()
+    const url = 'https://linear.app/stably/issue/STA-4084/restore-shell-integration'
+    const onPlainEnter = vi.fn()
+    const onValueChange = vi.fn()
+    const onLinearIssueSelect = vi.fn()
+    useAppStore.setState({
+      linearStatus: {
+        connected: true,
+        viewer: null,
+        activeWorkspaceId: 'workspace-1',
+        selectedWorkspaceId: 'workspace-1',
+        workspaces: [
+          {
+            id: 'workspace-1',
+            displayName: 'Stably User',
+            email: null,
+            organizationId: 'organization-stably',
+            organizationName: 'Stably',
+            organizationUrlKey: 'stably'
+          }
+        ]
+      },
+      linearStatusChecked: true,
+      fetchLinearIssue: vi.fn(() => new Promise<null>(() => {}))
+    })
+
+    await act(async () => {
+      root.render(
+        <SmartWorkspaceNameField
+          repos={[]}
+          repoId="repo-1"
+          onRepoChange={vi.fn()}
+          value={url}
+          onValueChange={onValueChange}
+          onGitHubItemSelect={vi.fn()}
+          onBranchSelect={vi.fn()}
+          onLinearIssueSelect={onLinearIssueSelect}
+          selectedSource={null}
+          onClearSelectedSource={vi.fn()}
+          onPlainEnter={onPlainEnter}
+        />
+      )
+    })
+
+    const input = container.querySelector<HTMLInputElement>('[data-workspace-name-input="true"]')
+    const describedBy = input?.getAttribute('aria-describedby')
+    const status = describedBy ? container.querySelector<HTMLElement>(`#${describedBy}`) : null
+    const reservedResults = container.querySelector<HTMLElement>('[aria-hidden="true"].space-y-1')
+    expect(input?.getAttribute('aria-busy')).toBe('true')
+    expect(status?.getAttribute('role')).toBe('status')
+    expect(status?.getAttribute('aria-live')).toBe('polite')
+    expect(status?.textContent).toContain('Loading Linear issue…')
+    expect(container.textContent).not.toContain('Start typing to create a name or find a source.')
+    expect(reservedResults?.classList.contains('invisible')).toBe(true)
+    expect(reservedResults?.children).toHaveLength(3)
+
+    if (!input) {
+      throw new Error('workspace name input not rendered')
+    }
+    pressEnter(input)
+    expect(onPlainEnter).not.toHaveBeenCalled()
+    expect(onValueChange).not.toHaveBeenCalled()
+    expect(onLinearIssueSelect).not.toHaveBeenCalled()
+
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(199)
+    })
+    expect(reservedResults?.classList.contains('invisible')).toBe(true)
+
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(1)
+    })
+    const visibleResults = container.querySelector<HTMLElement>('[aria-hidden="true"].space-y-1')
+    expect(visibleResults).toBe(reservedResults)
+    expect(visibleResults?.classList.contains('invisible')).toBe(false)
+    expect(visibleResults?.querySelectorAll('.animate-pulse')).toHaveLength(3)
+  })
+})
+
 describe('SmartWorkspaceNameField emoji shortcodes', () => {
   it('replaces a completed shortcode as it is typed', () => {
     const onValueChange = vi.fn()
diff --git a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.tsx b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.tsx
index 6ddc4e3ae93..b87523a7d2d 100644
--- a/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.tsx
+++ b/src/renderer/src/components/new-workspace/SmartWorkspaceNameField.tsx
@@ -61,10 +61,18 @@ import {
   getVisibleBranchResults,
   getVisibleHeldProviderResults,
   isBlockingJiraUrlIntent,
-  isSmartWorkspaceSourceQueryWithinLimit,
   type SmartNameMode,
   type SmartWorkspaceSourceRow
 } from './smart-workspace-source-results'
+import {
+  getSmartWorkspaceLinearSearchQuery,
+  isBlockingLinearUrlIntent,
+  isSmartWorkspaceLinearIssueIntentMatch,
+  parseBoundedSmartWorkspaceLinearIssueInput,
+  parseBoundedSmartWorkspaceLinearIssueUrlIntent,
+  prioritizeSmartWorkspaceLinearIssueResults
+} from '../../../../shared/new-workspace/smart-workspace-linear-intent'
+import { isSmartWorkspaceSourceQueryWithinLimit } from '../../../../shared/new-workspace/smart-workspace-source-query'
 import { filterAvailableTaskProviders } from '../../../../shared/task-providers'
 import type {
   BaseRefSearchResult,
@@ -109,6 +117,7 @@ import {
   type WorkspaceEmojiSuggestion
 } from '@/lib/workspace-emoji-shortcodes'
 import { WorkspaceEmojiSuggestionPopover } from '@/components/workspace-emoji/WorkspaceEmojiSuggestionPopover'
+import { lookupLinearIssueUrl } from '@/lib/linear-issue-url-lookup'
 
 type RepoOption = ReturnType<typeof useAppStore.getState>['repos'][number]
 const EMPTY_REPO_SEARCH_REPOS: readonly RepoOption[] = []
@@ -259,6 +268,7 @@ export default function SmartWorkspaceNameField({
     checkLinearConnection,
     fetchWorkItems,
     fetchWorkItemsAcrossRepos,
+    fetchLinearIssue,
     getCachedWorkItems,
     linearStatus,
     linearStatusChecked,
@@ -277,6 +287,7 @@ export default function SmartWorkspaceNameField({
       checkLinearConnection: s.checkLinearConnection,
       fetchWorkItems: s.fetchWorkItems,
       fetchWorkItemsAcrossRepos: s.fetchWorkItemsAcrossRepos,
+      fetchLinearIssue: s.fetchLinearIssue,
       getCachedWorkItems: s.getCachedWorkItems,
       linearStatus: s.linearStatus,
       linearStatusChecked: s.linearStatusChecked,
@@ -378,6 +389,10 @@ export default function SmartWorkspaceNameField({
   const [gitlabLoading, setGitlabLoading] = useState(false)
   const [branchesLoading, setBranchesLoading] = useState(false)
   const [linearLoading, setLinearLoading] = useState(false)
+  const [linearUrlLoadingFeedbackQuery, setLinearUrlLoadingFeedbackQuery] = useState<string | null>(
+    null
+  )
+  const [settledLinearUrlQuery, setSettledLinearUrlQuery] = useState<string | null>(null)
   const [jiraLoading, setJiraLoading] = useState(false)
   const [commandValue, setCommandValue] = useState('')
   const [emojiCommandValue, setEmojiCommandValue] = useState('')
@@ -411,6 +426,7 @@ export default function SmartWorkspaceNameField({
   const jiraSourceConnected = jiraConnectionStatus?.connected === true
   const showJiraSiteContext = mode === 'jira' && jiraConnectionStatus?.selectedSiteId === 'all'
   const jiraStatusId = React.useId()
+  const linearStatusId = React.useId()
 
   useEffect(() => {
     onActiveSourceModeChange?.(mode)
@@ -626,15 +642,32 @@ export default function SmartWorkspaceNameField({
     () => (sourceQueryWithinLimit ? parseGitHubIssueOrPRLink(debouncedQuery) : null),
     [debouncedQuery, sourceQueryWithinLimit]
   )
+  const linearUrlIntent = useMemo(
+    () => parseBoundedSmartWorkspaceLinearIssueUrlIntent(value),
+    [value]
+  )
+  const linearUrlIntentOwnsInput =
+    linearUrlIntent !== null && (mode === 'smart' || mode === 'linear')
+  const linearQuery = linearUrlIntentOwnsInput ? value : debouncedQuery
+  useEffect(() => {
+    if (!linearUrlIntentOwnsInput || !linearLoading) {
+      setLinearUrlLoadingFeedbackQuery(null)
+      return
+    }
+    setLinearUrlLoadingFeedbackQuery(null)
+    const timer = window.setTimeout(() => setLinearUrlLoadingFeedbackQuery(linearQuery), 200)
+    return () => window.clearTimeout(timer)
+  }, [linearLoading, linearQuery, linearUrlIntentOwnsInput])
   const shouldQueryGithub =
     sourceQueryWithinLimit &&
     !repoBackedSourcesDisabled &&
     !jiraSource.intent &&
+    !linearUrlIntentOwnsInput &&
     !textOnly &&
     repoBackedSearchTargets.length > 0 &&
     (mode === 'smart' || mode === 'github')
   const shouldQueryLinear =
-    sourceQueryWithinLimit &&
+    isSmartWorkspaceSourceQueryWithinLimit(linearQuery) &&
     !jiraSource.intent &&
     !textOnly &&
     linearAvailable &&
@@ -909,7 +942,7 @@ export default function SmartWorkspaceNameField({
   const branchSearchRequest = useMemo(
     () =>
       getBranchSearchRequest({
-        disabled: disabled || jiraSource.intent,
+        disabled: disabled || jiraSource.intent || linearUrlIntentOwnsInput,
         branchesEnabled: branchesEnabled && !repoBackedSourcesDisabled,
         textOnly,
         mode,
@@ -922,6 +955,7 @@ export default function SmartWorkspaceNameField({
       debouncedQuery,
       disabled,
       jiraSource.intent,
+      linearUrlIntentOwnsInput,
       mode,
       repoBackedSourcesDisabled,
       selectedRepo?.id,
@@ -975,21 +1009,32 @@ export default function SmartWorkspaceNameField({
     if (disabled || !shouldQueryLinear || !linearStatus.connected) {
       setLinearIssues([])
       setLinearLoading(false)
+      setSettledLinearUrlQuery(null)
       return
     }
     let stale = false
     setLinearLoading(true)
-    const trimmed = debouncedQuery.trim()
+    setSettledLinearUrlQuery(null)
+    const trimmed = linearQuery.trim()
     // Why: empty-query list must not briefly paint the previous non-empty result set.
     if (trimmed === '') {
       setLinearIssues([])
     }
-    const request = trimmed
-      ? searchLinearIssues(trimmed, RESULT_LIMIT, { sourceContext: linearSourceContext })
-      : listLinearIssues(
-          { kind: 'list', filter: 'assigned', limit: RESULT_LIMIT },
-          { sourceContext: linearSourceContext }
-        ).then((result) => result.items)
+    const request = linearUrlIntent
+      ? lookupLinearIssueUrl({
+          intent: linearUrlIntent,
+          knownStatus: linearStatus,
+          sourceContext: linearSourceContext,
+          fetchLinearIssue
+        }).then((issue) => (issue ? [issue] : []))
+      : trimmed
+        ? searchLinearIssues(getSmartWorkspaceLinearSearchQuery(trimmed), RESULT_LIMIT, {
+            sourceContext: linearSourceContext
+          })
+        : listLinearIssues(
+            { kind: 'list', filter: 'assigned', limit: RESULT_LIMIT },
+            { sourceContext: linearSourceContext }
+          ).then((result) => result.items)
     void request
       .then((issues) => {
         if (!stale) {
@@ -1004,6 +1049,7 @@ export default function SmartWorkspaceNameField({
       .finally(() => {
         if (!stale) {
           setLinearLoading(false)
+          setSettledLinearUrlQuery(linearUrlIntent ? trimmed : null)
         }
       })
     return () => {
@@ -1011,7 +1057,7 @@ export default function SmartWorkspaceNameField({
     }
     // Why: list/search are stable store methods; depending on them would refetch on unrelated store writes.
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [debouncedQuery, disabled, linearSourceContext, linearStatus.connected, shouldQueryLinear])
+  }, [disabled, linearQuery, linearSourceContext, linearStatus, linearUrlIntent, shouldQueryLinear])
 
   useEffect(() => {
     if (!shouldQueryJira || !jiraSourceContext || !jiraSearchJql) {
@@ -1067,6 +1113,7 @@ export default function SmartWorkspaceNameField({
     sourceQueryWithinLimit &&
     !repoBackedSourcesDisabled &&
     !jiraSource.intent &&
+    !linearUrlIntentOwnsInput &&
     !textOnly &&
     gitlabSourceAvailable &&
     repoBackedSearchTargets.length > 0 &&
@@ -1199,6 +1246,11 @@ export default function SmartWorkspaceNameField({
     shouldQueryGitlab
   ])
 
+  const linearUrlLookupFailed =
+    linearUrlIntentOwnsInput &&
+    settledLinearUrlQuery === linearQuery.trim() &&
+    !linearLoading &&
+    linearIssues.length === 0
   const rows = useMemo<RowEntry[]>(() => {
     if (jiraSource.intent && jiraSource.accountChoices.length > 0) {
       return jiraSource.accountChoices.map((site) => ({
@@ -1234,12 +1286,16 @@ export default function SmartWorkspaceNameField({
         value,
         debouncedQuery
       }),
-      linearAvailable,
-      linearIssues: getVisibleHeldProviderResults({
-        items: linearIssues,
+      linearAvailable: linearAvailable && !linearUrlLookupFailed,
+      linearIssues: prioritizeSmartWorkspaceLinearIssueResults(
         value,
-        debouncedQuery
-      }),
+        getVisibleHeldProviderResults({
+          items: linearIssues,
+          value,
+          debouncedQuery: linearUrlIntentOwnsInput ? value : debouncedQuery
+        })
+      ),
+      linearUrlIntentOwnsResults: true,
       mode,
       resultLimit: RESULT_LIMIT,
       value
@@ -1257,6 +1313,8 @@ export default function SmartWorkspaceNameField({
     jiraIssues,
     linearAvailable,
     linearIssues,
+    linearUrlLookupFailed,
+    linearUrlIntentOwnsInput,
     mode,
     selectedRepo?.id,
     value
@@ -1274,7 +1332,8 @@ export default function SmartWorkspaceNameField({
   const debouncedQueryWithinSourceLimit = isSmartWorkspaceSourceQueryWithinLimit(debouncedQuery)
   const trimmedValue = valueWithinSourceLimit ? value.trim() : ''
   const trimmedDebouncedQuery = debouncedQueryWithinSourceLimit ? debouncedQuery.trim() : ''
-  const isQueryStale = trimmedValue.length > 0 && trimmedDebouncedQuery !== trimmedValue
+  const isQueryStale =
+    !linearUrlIntentOwnsInput && trimmedValue.length > 0 && trimmedDebouncedQuery !== trimmedValue
 
   // Why: when the typed value is an unambiguous source ref, snap the highlight to that row so Enter picks it over the typed-text fallback.
   const sourceIntent = useMemo<'github' | 'gitlab' | 'linear' | 'jira' | null>(() => {
@@ -1294,11 +1353,25 @@ export default function SmartWorkspaceNameField({
     if (parseGitLabIssueOrMRLink(trimmed) !== null) {
       return 'gitlab'
     }
-    if (linearAvailable && /^[A-Za-z][A-Za-z0-9_]*-\d+$/.test(trimmed)) {
-      return 'linear'
+    if (linearAvailable) {
+      const linearIntent = parseBoundedSmartWorkspaceLinearIssueInput(trimmed)
+      if (
+        linearIntent &&
+        rows.some(
+          (row) =>
+            row.kind === 'linear' && isSmartWorkspaceLinearIssueIntentMatch(linearIntent, row.issue)
+        )
+      ) {
+        return 'linear'
+      }
     }
     return null
-  }, [jiraSource.intent, linearAvailable, value])
+  }, [jiraSource.intent, linearAvailable, rows, value])
+  const unresolvedLinearUrlIntent =
+    linearUrlIntentOwnsInput &&
+    linearAvailable &&
+    sourceIntent !== 'linear' &&
+    (linearLoading || settledLinearUrlQuery !== linearQuery.trim())
 
   const resolvedCommandValue = resolveSmartWorkspaceCommandValue({
     currentValue: commandValue,
@@ -1342,9 +1415,14 @@ export default function SmartWorkspaceNameField({
       (suggestion) => `emoji:${suggestion.shortcode}` === resolvedEmojiCommandValue
     ) ?? null
 
+  const showLinearUrlLoadingFeedback =
+    linearLoading && linearUrlIntentOwnsInput && linearUrlLoadingFeedbackQuery === linearQuery
+  const visibleLinearLoading =
+    linearLoading && (!linearUrlIntentOwnsInput || showLinearUrlLoadingFeedback)
   const loading = jiraSource.intent
     ? jiraSource.loading
-    : githubLoading || gitlabLoading || branchesLoading || linearLoading || jiraLoading
+    : githubLoading || gitlabLoading || branchesLoading || visibleLinearLoading || jiraLoading
+  const reserveLinearLoadingResults = unresolvedLinearUrlIntent && searchResultRows.length === 0
   // Why: only spin on first load — not on every in-flight refresh while rows stay visible.
   const showSearchSpinner = loading && searchResultRows.length === 0
   const ActiveInputIcon =
@@ -1831,7 +1909,11 @@ export default function SmartWorkspaceNameField({
                     onPaste={(event) => {
                       // Why: a pasted issue URL is the whole intent — don't splice it into a name.
                       const pasted = event.clipboardData.getData('text')
-                      if (!pasted || !isBlockingJiraUrlIntent(mode, pasted)) {
+                      if (
+                        !pasted ||
+                        (!isBlockingJiraUrlIntent(mode, pasted) &&
+                          !isBlockingLinearUrlIntent(mode, pasted))
+                      ) {
                         return
                       }
                       event.preventDefault()
@@ -1896,6 +1978,10 @@ export default function SmartWorkspaceNameField({
                           handleEmojiSelect(selectedEmojiSuggestion)
                           return
                         }
+                        if (unresolvedLinearUrlIntent) {
+                          event.preventDefault()
+                          return
+                        }
                         if (open && rows.length > 0) {
                           const row = rows.find((entry) => entry.value === resolvedCommandValue)
                           if (row) {
@@ -1934,8 +2020,16 @@ export default function SmartWorkspaceNameField({
                     }}
                     placeholder={placeholder}
                     disabled={disabled}
-                    aria-busy={jiraSource.intent && jiraSource.loading}
-                    aria-describedby={jiraSource.intent ? jiraStatusId : undefined}
+                    aria-busy={
+                      (jiraSource.intent && jiraSource.loading) || unresolvedLinearUrlIntent
+                    }
+                    aria-describedby={
+                      jiraSource.intent
+                        ? jiraStatusId
+                        : unresolvedLinearUrlIntent
+                          ? linearStatusId
+                          : undefined
+                    }
                     // Why: match the project/run-on comboboxes' solid `bg-background` — the input's
                     // default transparent fill made it read a different color on light mode.
                     className="h-9 bg-background pl-8 text-sm"
@@ -2011,8 +2105,23 @@ export default function SmartWorkspaceNameField({
                   </CommandItem>
                 </div>
               ) : null}
-              {jiraSource.errorKind ? null : loading && searchResultRows.length === 0 ? (
-                <div className="space-y-1 p-1">
+              {jiraSource.errorKind ? null : reserveLinearLoadingResults ? (
+                <div
+                  aria-hidden="true"
+                  className={cn('space-y-1 p-1', !showLinearUrlLoadingFeedback && 'invisible')}
+                >
+                  {[0, 1, 2].map((index) => (
+                    <div
+                      key={index}
+                      className={cn(
+                        'h-8 rounded bg-muted/40',
+                        showLinearUrlLoadingFeedback && 'animate-pulse'
+                      )}
+                    />
+                  ))}
+                </div>
+              ) : showSearchSpinner ? (
+                <div aria-hidden="true" className="space-y-1 p-1">
                   {[0, 1, 2].map((index) => (
                     <div key={index} className="h-8 animate-pulse rounded bg-muted/40" />
                   ))}
@@ -2088,6 +2197,14 @@ export default function SmartWorkspaceNameField({
           ) : null}
         </div>
       ) : null}
+      {unresolvedLinearUrlIntent ? (
+        <div id={linearStatusId} role="status" aria-live="polite" className="sr-only">
+          {translate(
+            'auto.components.new.workspace.SmartWorkspaceNameField.loadingLinearIssue',
+            'Loading Linear issue…'
+          )}
+        </div>
+      ) : null}
       <WorkspaceEmojiSuggestionPopover
         anchorRef={localInputRef}
         open={emojiMenuOpen}
diff --git a/src/renderer/src/components/new-workspace/project-combobox-matching.ts b/src/renderer/src/components/new-workspace/project-combobox-matching.ts
index ac298ebd6c5..2e3459ac745 100644
--- a/src/renderer/src/components/new-workspace/project-combobox-matching.ts
+++ b/src/renderer/src/components/new-workspace/project-combobox-matching.ts
@@ -10,7 +10,7 @@ export type ScoredProjectOption = {
 
 function substringHits(text: string, query: string): number[] | null {
   const at = text.toLowerCase().indexOf(query)
-  return at < 0 ? null : Array.from({ length: query.length }, (_, offset) => at + offset)
+  return at === -1 ? null : Array.from({ length: query.length }, (_, offset) => at + offset)
 }
 
 /**
@@ -27,7 +27,7 @@ function nameHitsFor(name: string, query: string): number[] | null {
   let cursor = 0
   for (const char of query) {
     const found = haystack.indexOf(char, cursor)
-    if (found < 0) {
+    if (found === -1) {
       return null
     }
     hits.push(found)
@@ -60,7 +60,7 @@ export function rankProjectOptions(
   const scored: ScoredProjectOption[] = []
   for (const option of options) {
     const recentAt = recentIds.indexOf(option.id)
-    const recency = recentAt < 0 ? 0 : 32 - recentAt * 4
+    const recency = recentAt === -1 ? 0 : 32 - recentAt * 4
     if (query.length === 0) {
       scored.push({ option, score: recency, nameHits: [], detailHits: [] })
       continue
diff --git a/src/renderer/src/components/new-workspace/smart-workspace-command-value.test.ts b/src/renderer/src/components/new-workspace/smart-workspace-command-value.test.ts
index 8a25b457c3e..7e5f36ec13e 100644
--- a/src/renderer/src/components/new-workspace/smart-workspace-command-value.test.ts
+++ b/src/renderer/src/components/new-workspace/smart-workspace-command-value.test.ts
@@ -31,6 +31,17 @@ describe('resolveSmartWorkspaceCommandValue', () => {
     ).toBe('use-name')
   })
 
+  it('keeps arbitrary text armed when Linear search results are present', () => {
+    expect(
+      resolveSmartWorkspaceCommandValue({
+        currentValue: '',
+        rows: [row('use-name', 'use-name'), row('linear', 'linear-STA-4084')],
+        isQueryStale: false,
+        sourceIntent: null
+      })
+    ).toBe('use-name')
+  })
+
   it('keeps typed text armed while the query is ahead of debounced search', () => {
     expect(
       resolveSmartWorkspaceCommandValue({
diff --git a/src/renderer/src/components/new-workspace/smart-workspace-source-results.test.ts b/src/renderer/src/components/new-workspace/smart-workspace-source-results.test.ts
index ff76c018426..780800bb9a4 100644
--- a/src/renderer/src/components/new-workspace/smart-workspace-source-results.test.ts
+++ b/src/renderer/src/components/new-workspace/smart-workspace-source-results.test.ts
@@ -1,6 +1,5 @@
 import { describe, expect, it } from 'vitest'
 import {
-  SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES,
   buildJiraIssueSearchJql,
   buildSmartWorkspaceSourceRows,
   getBranchSearchRequest,
@@ -8,9 +7,20 @@ import {
   getVisibleBranchResults,
   getVisibleHeldProviderResults,
   isBlockingJiraUrlIntent,
-  isSmartWorkspaceSourceQueryWithinLimit,
   shouldHoldSourceResultsForQuery
 } from './smart-workspace-source-results'
+import {
+  getSmartWorkspaceLinearSearchQuery,
+  isBlockingLinearUrlIntent,
+  isSmartWorkspaceLinearIssueIntentMatch,
+  parseBoundedSmartWorkspaceLinearIssueInput,
+  parseBoundedSmartWorkspaceLinearIssueUrlIntent,
+  prioritizeSmartWorkspaceLinearIssueResults
+} from '../../../../shared/new-workspace/smart-workspace-linear-intent'
+import {
+  SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES,
+  isSmartWorkspaceSourceQueryWithinLimit
+} from '../../../../shared/new-workspace/smart-workspace-source-query'
 
 describe('Branch source results', () => {
   it('requests empty-query branch results in Branch mode', () => {
@@ -497,6 +507,183 @@ describe('source query byte limits', () => {
   })
 })
 
+describe('Linear issue source input', () => {
+  const issueUrl = 'https://linear.app/stably/issue/STA-4084/restore-osc-133-shell-integration'
+
+  it('normalizes a Linear issue URL to its identifier for search', () => {
+    expect(parseBoundedSmartWorkspaceLinearIssueInput(issueUrl)).toEqual({
+      identifier: 'STA-4084',
+      organizationUrlKey: 'stably'
+    })
+    expect(getSmartWorkspaceLinearSearchQuery(issueUrl)).toBe('STA-4084')
+  })
+
+  it('keeps arbitrary names as ordinary Linear search text', () => {
+    expect(parseBoundedSmartWorkspaceLinearIssueInput('restore shell integration')).toBeNull()
+    expect(getSmartWorkspaceLinearSearchQuery(' restore shell integration ')).toBe(
+      'restore shell integration'
+    )
+  })
+
+  it('only replaces the whole field for unmistakable Linear URL intent', () => {
+    expect(isBlockingLinearUrlIntent('smart', issueUrl)).toBe(true)
+    expect(isBlockingLinearUrlIntent('linear', issueUrl)).toBe(true)
+    expect(isBlockingLinearUrlIntent('text', issueUrl)).toBe(false)
+    expect(isBlockingLinearUrlIntent('github', issueUrl)).toBe(false)
+    expect(isBlockingLinearUrlIntent('gitlab', issueUrl)).toBe(false)
+    expect(isBlockingLinearUrlIntent('branches', issueUrl)).toBe(false)
+    expect(isBlockingLinearUrlIntent('smart', 'STA-4084')).toBe(false)
+    expect(isBlockingLinearUrlIntent('smart', 'restore-4084')).toBe(false)
+    expect(
+      isBlockingLinearUrlIntent('smart', 'https://linear.app.evil.test/stably/issue/STA-4084')
+    ).toBe(false)
+    expect(
+      isBlockingLinearUrlIntent('smart', 'https://linear.app/stably/not-an-issue/issue/STA-4084')
+    ).toBe(false)
+    expect(
+      isBlockingLinearUrlIntent('smart', 'https://linear.app/stably/issue/STA-4084/title/more')
+    ).toBe(false)
+    expect(
+      isBlockingLinearUrlIntent(
+        'smart',
+        'https://linear.app/stably/issue/STA-4084%2Fnot-the-identifier'
+      )
+    ).toBe(false)
+    expect(
+      parseBoundedSmartWorkspaceLinearIssueUrlIntent(
+        'https://linear.app/stably/issue/STA-4084/title'
+      )
+    ).toEqual({ identifier: 'STA-4084', organizationUrlKey: 'stably' })
+  })
+
+  it('keeps the exact Linear URL result ahead of provider result caps', () => {
+    const exactIssue = {
+      id: 'stably-issue',
+      identifier: 'STA-4084',
+      url: issueUrl
+    } as never
+    const rows = buildSmartWorkspaceSourceRows({
+      mode: 'smart',
+      value: issueUrl,
+      branches: Array.from({ length: 12 }, (_, index) => ({
+        refName: `origin/provider-result-${index}`,
+        localBranchName: `provider-result-${index}`
+      })),
+      githubItems: Array.from({ length: 12 }, (_, index) => ({
+        repoId: 'repo-1',
+        type: 'issue',
+        number: index + 1
+      })) as never,
+      gitlabItems: [],
+      linearIssues: [exactIssue],
+      gitlabAvailable: false,
+      linearAvailable: true,
+      linearUrlIntentOwnsResults: true,
+      resultLimit: 12
+    })
+
+    expect(rows.map((row) => row.kind)).toEqual(['use-name', 'linear'])
+    expect(rows[0]).toMatchObject({ kind: 'use-name', value: 'use-name', name: issueUrl })
+    expect(rows[1]).toMatchObject({ value: 'linear-stably-issue', issue: exactIssue })
+  })
+
+  it('keeps typed-text available while a Linear URL has not resolved yet', () => {
+    expect(
+      buildSmartWorkspaceSourceRows({
+        mode: 'smart',
+        value: issueUrl,
+        branches: [],
+        githubItems: [],
+        gitlabItems: [],
+        linearIssues: [],
+        gitlabAvailable: false,
+        linearAvailable: true,
+        linearUrlIntentOwnsResults: true,
+        resultLimit: 12
+      })
+    ).toEqual([{ kind: 'use-name', value: 'use-name', name: issueUrl }])
+  })
+
+  it('preserves arbitrary-name fallback for consumers without exact URL lookup', () => {
+    const rows = buildSmartWorkspaceSourceRows({
+      mode: 'smart',
+      value: issueUrl,
+      branches: [],
+      githubItems: [],
+      gitlabItems: [],
+      linearIssues: [],
+      gitlabAvailable: false,
+      linearAvailable: true,
+      resultLimit: 12
+    })
+
+    expect(rows).toEqual([{ kind: 'use-name', value: 'use-name', name: issueUrl }])
+  })
+
+  it('prioritizes only the issue from the URL organization', () => {
+    const otherWorkspace = {
+      id: 'other-issue',
+      identifier: 'STA-4084',
+      url: 'https://linear.app/other/issue/STA-4084'
+    } as never
+    const exactIssue = {
+      id: 'stably-issue',
+      identifier: 'STA-4084',
+      url: issueUrl
+    } as never
+    const unrelatedIssue = {
+      id: 'unrelated-issue',
+      identifier: 'STA-9999',
+      url: 'https://linear.app/stably/issue/STA-9999'
+    } as never
+
+    expect(
+      prioritizeSmartWorkspaceLinearIssueResults(issueUrl, [
+        otherWorkspace,
+        unrelatedIssue,
+        exactIssue
+      ]).map((issue) => issue.id)
+    ).toEqual(['stably-issue', 'other-issue', 'unrelated-issue'])
+    expect(
+      isSmartWorkspaceLinearIssueIntentMatch(
+        parseBoundedSmartWorkspaceLinearIssueInput(issueUrl)!,
+        otherWorkspace
+      )
+    ).toBe(false)
+  })
+
+  it('matches bare Linear keys by identifier without changing provider order for names', () => {
+    const issue = {
+      id: 'stably-issue',
+      identifier: 'STA-4084',
+      url: issueUrl
+    } as never
+    const other = {
+      id: 'other-issue',
+      identifier: 'STA-9999',
+      url: 'https://linear.app/stably/issue/STA-9999'
+    } as never
+
+    expect(
+      isSmartWorkspaceLinearIssueIntentMatch(
+        parseBoundedSmartWorkspaceLinearIssueInput('sta-4084')!,
+        issue
+      )
+    ).toBe(true)
+    expect(prioritizeSmartWorkspaceLinearIssueResults('restore shell', [other, issue])).toEqual([
+      other,
+      issue
+    ])
+  })
+
+  it('rejects oversized Linear input before parsing it', () => {
+    const oversized = `${issueUrl}#${'x'.repeat(SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES)}`
+
+    expect(parseBoundedSmartWorkspaceLinearIssueInput(oversized)).toBeNull()
+    expect(isBlockingLinearUrlIntent('smart', oversized)).toBe(false)
+  })
+})
+
 describe('Jira issue search', () => {
   it('keeps valid Jira URL intent blocking in both Smart and Jira modes', () => {
     const firstUrl = 'https://company.atlassian.net/browse/ORCA-1'
diff --git a/src/renderer/src/components/new-workspace/use-jira-url-source.test.tsx b/src/renderer/src/components/new-workspace/use-jira-url-source.test.tsx
index fc3a60a5504..1f6df54bfb2 100644
--- a/src/renderer/src/components/new-workspace/use-jira-url-source.test.tsx
+++ b/src/renderer/src/components/new-workspace/use-jira-url-source.test.tsx
@@ -50,7 +50,7 @@ function site(id: string, email = `${id}@example.com`): JiraSite {
 
 function status(
   sites: JiraSite[],
-  selectedSiteId: string | 'all' | null = null
+  selectedSiteId: (string & {}) | 'all' | null = null
 ): JiraConnectionStatus {
   return {
     connected: true,
diff --git a/src/renderer/src/components/new-workspace/use-jira-url-source.ts b/src/renderer/src/components/new-workspace/use-jira-url-source.ts
index e1dc6efd6a6..0441e37edc9 100644
--- a/src/renderer/src/components/new-workspace/use-jira-url-source.ts
+++ b/src/renderer/src/components/new-workspace/use-jira-url-source.ts
@@ -54,7 +54,7 @@ function getPreferredSite(
   matches: JiraSite[],
   selectedAccount: AccountSelection | null,
   requestKey: string,
-  selectedSiteId: string | 'all' | null | undefined,
+  selectedSiteId: (string & {}) | 'all' | null | undefined,
   activeSiteId: string | null | undefined
 ): JiraSite | null {
   const explicitId = selectedAccount?.requestKey === requestKey ? selectedAccount.siteId : null
diff --git a/src/renderer/src/components/pr-comments-resolution-prompt.ts b/src/renderer/src/components/pr-comments-resolution-prompt.ts
index a31d4340844..d86a4e8d653 100644
--- a/src/renderer/src/components/pr-comments-resolution-prompt.ts
+++ b/src/renderer/src/components/pr-comments-resolution-prompt.ts
@@ -150,7 +150,7 @@ export function buildPRCommentsResolutionPrompt({
     '- For outdated comments, inspect the current file and nearby code before editing. Apply the reviewer intent only if it still matches the current code.',
     '- Keep changes minimal and coherent. If multiple selected comments conflict or require a larger design decision, stop and report the tradeoff instead of guessing.',
     '- Preserve unrelated staged and unstaged work. Do not run destructive cleanup commands such as git reset --hard, git checkout ., git restore ., or git stash.',
-    '- Host thread resolution and any fixing replies are handled by Orca after launch. Do not resolve or unresolve threads on the host, reply on the host, edit host comments, or use provider APIs/CLIs just to change review state.',
+    '- Orca acknowledges this feedback on the host itself after launch. Do not resolve or unresolve threads on the host, reply on the host, edit host comments, or use provider APIs/CLIs just to change review state.',
     '- Do not push, create commits, or rewrite history.',
     '- Run git diff --check before finishing. Run the most focused relevant tests, typecheck, or lint command you can reasonably identify; if validation is impractical, explain why.',
     '',
diff --git a/src/renderer/src/components/quick-open-search.ts b/src/renderer/src/components/quick-open-search.ts
index db13042c8fa..690c59aae00 100644
--- a/src/renderer/src/components/quick-open-search.ts
+++ b/src/renderer/src/components/quick-open-search.ts
@@ -29,6 +29,22 @@ export function prepareQuickOpenFiles(files: readonly string[]): QuickOpenIndexe
   })
 }
 
+const preparedQuickOpenFiles = new WeakMap<readonly string[], QuickOpenIndexedFile[]>()
+
+// Why: keystroke-driven callers re-classify on every character, but the index
+// only changes when the file list array itself is replaced.
+export function getPreparedQuickOpenFiles(
+  files: readonly string[]
+): readonly QuickOpenIndexedFile[] {
+  const cached = preparedQuickOpenFiles.get(files)
+  if (cached) {
+    return cached
+  }
+  const prepared = prepareQuickOpenFiles(files)
+  preparedQuickOpenFiles.set(files, prepared)
+  return prepared
+}
+
 export function isQuickOpenQueryTooLarge(
   query: string,
   maxBytes = QUICK_OPEN_QUERY_MAX_BYTES
diff --git a/src/renderer/src/components/right-sidebar/ChecksPanel.tsx b/src/renderer/src/components/right-sidebar/ChecksPanel.tsx
index c109c46b1a3..25489863d7f 100644
--- a/src/renderer/src/components/right-sidebar/ChecksPanel.tsx
+++ b/src/renderer/src/components/right-sidebar/ChecksPanel.tsx
@@ -79,17 +79,16 @@ import {
   getBrokenChecks,
   getCheckDetailsPromptKey
 } from '../pr-checks-fix-prompt'
-import {
-  buildPRCommentsResolutionPrompt,
-  isResolvablePRCommentGroup
-} from '../pr-comments-resolution-prompt'
+import { buildPRCommentsResolutionPrompt } from '../pr-comments-resolution-prompt'
 import { buildPRCommentConversationReplyBody } from './pr-comment-fixing-reply-body'
+import { buildSnapshottedThreadResolver } from './pr-comment-snapshotted-thread-resolver'
 import {
   acknowledgePRCommentsAfterAiLaunch,
   attachPRReviewReplyParent,
   canPostPRReviewThreadReply,
   checksPanelReviewStableKey,
   clearPendingPRCommentAiAck,
+  hasPRCommentGroupNeedingReply,
   resolvePRReviewReplyThreadId,
   setPendingPRCommentAiAck,
   takePendingPRCommentAiAck
@@ -195,7 +194,7 @@ import { formatCreateError } from './create-pull-request-review-copy'
 import { stripBaseRef, useCreatePullRequestDialogFields } from './useCreatePullRequestDialogFields'
 import { localizedHostedReviewCopy } from '@/i18n/hosted-review-localized-copy'
 import { translate } from '@/i18n/i18n'
-import { groupPRComments, type PRCommentGroup } from '../../../../shared/pr-comment-groups'
+import type { PRCommentGroup } from '../../../../shared/pr-comment-groups'
 import {
   openChecksPanelHostedReviewUrl,
   resolveChecksPanelHostedReviewModifierDestination,
@@ -3126,9 +3125,6 @@ export default function ChecksPanel(): React.JSX.Element {
       if (commentResolutionAckBusyRef.current) {
         return
       }
-      const selectedThreadIds = selectedGroups.flatMap((group) =>
-        group.kind === 'thread' && isResolvablePRCommentGroup(group) ? [group.threadId] : []
-      )
       if (selectedGroups.length === 0) {
         toast.message(
           translate(
@@ -3168,12 +3164,26 @@ export default function ChecksPanel(): React.JSX.Element {
         }
       })()
       const githubTarget = githubTargetFromPr ?? githubTargetFromUrl
+      // Why: resolving needs no prRepo, so a degraded PR entry that only yields a number must
+      // still ack by resolving instead of failing every selected thread.
+      const githubResolveTarget =
+        githubTarget ??
+        (activeReview.provider === 'github' && prNumber
+          ? { repoPath: repo.path, repoId: repo.id, prNumber }
+          : undefined)
+      // Why: the ack resolves against this MR after delivery, so pin the iid now — the panel
+      // may already be showing a different review by then.
+      const gitlabTarget =
+        activeReview.provider === 'gitlab'
+          ? { repoPath: repo.path, repoId: repo.id, iid: activeReview.number }
+          : undefined
       const commentResolution = {
         reviewContextKey: stateRequestKey,
         provider: activeReview.provider,
-        selectedThreadIds,
         selectedGroups,
-        githubTarget
+        githubTarget,
+        githubResolveTarget,
+        gitlabTarget
       }
       claimedCommentResolutionRef.current = null
       commentResolutionLaunchAcceptedRef.current = false
@@ -3185,13 +3195,13 @@ export default function ChecksPanel(): React.JSX.Element {
           { value0: activeReview.provider === 'gitlab' ? 'MR' : 'PR' }
         ),
         // Why: only GitHub with a resolved PR target posts fixing replies; other providers
-        // must not be promised a reply the ack never sends. Review threads get one reply
-        // each, conversation comments share one — so the copy stays deliberately vague.
+        // must not be promised a reply the ack never sends. Resolvable threads are acked by
+        // resolving alone, so the copy leads with that.
         description:
           githubTarget && activeReview.provider === 'github'
             ? translate(
-                'auto.components.right.sidebar.ChecksPanel.ed3f79c031',
-                'Review the prompt before starting an agent. After the prompt is delivered, Orca replies to the selected comments and resolves host threads when possible.'
+                'auto.components.right.sidebar.ChecksPanel.5eb2163b6b',
+                'Review the prompt before starting an agent. After the prompt is delivered, Orca resolves the selected host threads and replies to comments it cannot resolve.'
               )
             : translate(
                 'auto.components.right.sidebar.ChecksPanel.abf59262fb',
@@ -3257,25 +3267,42 @@ export default function ChecksPanel(): React.JSX.Element {
         checksPanelReviewStableKey(asyncResultKeyRef.current) === launchStableKey
       const githubTarget = resolution.githubTarget
       const canReplyOnHost = resolution.provider === 'github' && githubTarget != null
-      // Why: only GitHub posts fixing replies today; a GitLab MR reaching replied=0 is expected, not an error.
-      let lastReplyError =
-        resolution.provider === 'github' && githubTarget == null
+      // Why: only GitHub posts fixing replies today; a GitLab MR reaching replied=0 is expected,
+      // and a missing reply target only matters when something in the selection needs a reply.
+      let lastHostError =
+        resolution.provider === 'github' &&
+        githubTarget == null &&
+        hasPRCommentGroupNeedingReply(resolution.selectedGroups)
           ? translate(
               'auto.components.right.sidebar.ChecksPanel.7e4b2a19c0',
               'Could not resolve the GitHub PR to reply on.'
             )
           : undefined
+      const resolveSnapshottedThread = buildSnapshottedThreadResolver({
+        provider: resolution.provider,
+        githubResolveTarget: resolution.githubResolveTarget,
+        gitlabTarget: resolution.gitlabTarget,
+        resolveReviewThread,
+        resolveGitLabDiscussion: (args) =>
+          resolveGitLabMRDiscussionForChecks({ ...args, settings }),
+        isPanelStillOnLaunchReview,
+        onResolvedOptimistically: (threadId) => {
+          setComments((prev) => markPRCommentThreadResolved(prev, threadId, true))
+        },
+        onResolveFailed: ({ threadId, error }) => {
+          lastHostError =
+            error ||
+            translate(
+              'auto.components.right.sidebar.ChecksPanel.430f1a62d4',
+              'Could not resolve the selected thread on the host.'
+            )
+          console.warn('Post-launch thread resolve failed:', threadId, error)
+        }
+      })
       const counts = await acknowledgePRCommentsAfterAiLaunch({
         groups: resolution.selectedGroups,
         deps: {
-          isStillCurrent: isPanelStillOnLaunchReview,
-          isThreadStillResolvable: (threadId) => {
-            const currentGroup = groupPRComments(commentsRef.current).find(
-              (group) => group.kind === 'thread' && group.threadId === threadId
-            )
-            return Boolean(currentGroup && isResolvablePRCommentGroup(currentGroup))
-          },
-          resolveThread: (threadId) => handleResolve(threadId, true, { notifyOnFailure: false }),
+          resolveThread: resolveSnapshottedThread,
           canReply: canReplyOnHost,
           replyInThread: async (comment, body) => {
             if (!githubTarget || !canPostPRReviewThreadReply(comment)) {
@@ -3316,11 +3343,11 @@ export default function ChecksPanel(): React.JSX.Element {
                 }
                 return true
               }
-              lastReplyError = result.error
+              lastHostError = result.error
               console.warn('In-thread fixing reply failed:', result.error)
               return false
             } catch (err) {
-              lastReplyError = err instanceof Error ? err.message : String(err)
+              lastHostError = err instanceof Error ? err.message : String(err)
               console.warn('Failed to post in-thread fixing reply for review comment:', err)
               return false
             }
@@ -3347,11 +3374,11 @@ export default function ChecksPanel(): React.JSX.Element {
                 }
                 return true
               }
-              lastReplyError = result.error
+              lastHostError = result.error
               console.warn('Conversation fixing reply failed:', result.error)
               return false
             } catch (err) {
-              lastReplyError = err instanceof Error ? err.message : String(err)
+              lastHostError = err instanceof Error ? err.message : String(err)
               console.warn('Failed to post conversation fixing reply for review comment:', err)
               return false
             }
@@ -3364,9 +3391,12 @@ export default function ChecksPanel(): React.JSX.Element {
       }
 
       // Why: surface the underlying API error when replies were possible but none landed.
+      // Resolvable threads are acked by resolving, so replied=0 is correct when nothing needed one.
       const repliedNoneDespiteHostSupport =
-        canReplyOnHost && counts.replied === 0 && resolution.selectedGroups.length > 0
-      if (counts.failed > 0 || repliedNoneDespiteHostSupport || lastReplyError) {
+        canReplyOnHost &&
+        counts.replied === 0 &&
+        hasPRCommentGroupNeedingReply(resolution.selectedGroups)
+      if (counts.failed > 0 || repliedNoneDespiteHostSupport || lastHostError) {
         toast.error(
           translate(
             'auto.components.right.sidebar.ChecksPanel.f273f2271c',
@@ -3376,7 +3406,7 @@ export default function ChecksPanel(): React.JSX.Element {
               value1: counts.replied,
               value2: counts.skipped,
               value3: counts.failed,
-              value4: lastReplyError ? ` ${lastReplyError}` : ''
+              value4: lastHostError ? ` ${lastHostError}` : ''
             }
           )
         )
@@ -3399,8 +3429,9 @@ export default function ChecksPanel(): React.JSX.Element {
       addPRConversationComment,
       addPRReviewCommentReply,
       clearSentCommentSelection,
-      handleResolve,
-      refreshCommentsAfterBulkResolve
+      refreshCommentsAfterBulkResolve,
+      resolveReviewThread,
+      settings
     ]
   )
 
diff --git a/src/renderer/src/components/right-sidebar/FileExplorer.tsx b/src/renderer/src/components/right-sidebar/FileExplorer.tsx
index 8db2f1d0be1..e8191d1b3e7 100644
--- a/src/renderer/src/components/right-sidebar/FileExplorer.tsx
+++ b/src/renderer/src/components/right-sidebar/FileExplorer.tsx
@@ -57,6 +57,7 @@ import { CLOSE_ALL_CONTEXT_MENUS_EVENT } from '@/components/tab-bar/SortableTab'
 import type { RightSidebarExplorerView } from '../../../../shared/types'
 import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
 import { createNewTerminalTab } from '@/components/terminal/terminal-tab-create'
+import { useWorkspaceFileBrowserActionPredicate } from '@/lib/file-preview'
 
 function FileExplorerFiles(): React.JSX.Element {
   const explorerView = useAppStore((s) => s.rightSidebarExplorerView)
@@ -80,6 +81,8 @@ function FileExplorerFiles(): React.JSX.Element {
     [nameFilterQuery, showRightSidebarFiles, showRightSidebarSearch]
   )
   const activeWorktreeId = useAppStore((s) => s.activeWorktreeId)
+  const canOpenWorkspaceFileBrowserForPath =
+    useWorkspaceFileBrowserActionPredicate(activeWorktreeId)
   const activeWorktree = useActiveWorktree()
   const activeRepo = useRepoById(activeWorktree?.repoId ?? null)
   const supportsFolderDownload = useAppStore((s) => {
@@ -778,6 +781,7 @@ function FileExplorerFiles(): React.JSX.Element {
                 connectionId={activeRepo?.connectionId ?? null}
                 runtimeDownloadContext={runtimeDownloadContext}
                 supportsFolderDownload={supportsFolderDownload}
+                canOpenInOrcaBrowser={canOpenWorkspaceFileBrowserForPath}
                 onClick={handleRowClick}
                 onDoubleClick={handleDoubleClick}
                 onViewFile={handleClick}
diff --git a/src/renderer/src/components/right-sidebar/FileExplorerRow.tsx b/src/renderer/src/components/right-sidebar/FileExplorerRow.tsx
index 9fec091faf0..a5e232cb29e 100644
--- a/src/renderer/src/components/right-sidebar/FileExplorerRow.tsx
+++ b/src/renderer/src/components/right-sidebar/FileExplorerRow.tsx
@@ -267,6 +267,7 @@ type FileExplorerRowProps = {
   connectionId?: string | null
   runtimeDownloadContext?: RuntimeFileOperationArgs | null
   supportsFolderDownload?: boolean
+  canOpenInOrcaBrowser: boolean
   canCollapseFolderSubtree: boolean
   targetDir: string
   targetDepth: number
@@ -455,6 +456,7 @@ export function FileExplorerRow({
   connectionId,
   runtimeDownloadContext,
   supportsFolderDownload = false,
+  canOpenInOrcaBrowser,
   canCollapseFolderSubtree,
   targetDir,
   targetDepth,
@@ -764,7 +766,7 @@ export function FileExplorerRow({
             {translate('auto.components.right.sidebar.FileExplorerRow.1d8e182c32', 'View File')}
           </ContextMenuItem>
         )}
-        {!node.isDirectory && activeWorktreeId && (
+        {!node.isDirectory && activeWorktreeId && canOpenInOrcaBrowser && (
           <ContextMenuItem onSelect={handleOpenInOrcaBrowser}>
             <Globe />
             {translate(
diff --git a/src/renderer/src/components/right-sidebar/FileExplorerVirtualRows.tsx b/src/renderer/src/components/right-sidebar/FileExplorerVirtualRows.tsx
index 67a52bb7c9e..d72e7a5ca19 100644
--- a/src/renderer/src/components/right-sidebar/FileExplorerVirtualRows.tsx
+++ b/src/renderer/src/components/right-sidebar/FileExplorerVirtualRows.tsx
@@ -29,6 +29,7 @@ type FileExplorerVirtualRowsProps = {
   connectionId?: string | null
   runtimeDownloadContext?: RuntimeFileOperationArgs | null
   supportsFolderDownload?: boolean
+  canOpenInOrcaBrowser?: (filePath: string) => boolean
   onClick: (node: TreeNode, event: React.MouseEvent<HTMLButtonElement>) => void
   onDoubleClick: (node: TreeNode) => void
   onViewFile: (node: TreeNode) => void
@@ -75,6 +76,7 @@ export function FileExplorerVirtualRows(props: FileExplorerVirtualRowsProps): Re
     connectionId,
     runtimeDownloadContext,
     supportsFolderDownload = false,
+    canOpenInOrcaBrowser = () => false,
     onClick,
     onDoubleClick,
     onViewFile,
@@ -179,6 +181,7 @@ export function FileExplorerVirtualRows(props: FileExplorerVirtualRowsProps): Re
               connectionId={connectionId}
               runtimeDownloadContext={runtimeDownloadContext}
               supportsFolderDownload={supportsFolderDownload}
+              canOpenInOrcaBrowser={canOpenInOrcaBrowser(n.path)}
               canCollapseFolderSubtree={canCollapseFolderSubtree}
               targetDir={n.isDirectory ? n.path : dirname(n.path)}
               targetDepth={n.isDirectory ? n.depth + 1 : n.depth}
diff --git a/src/renderer/src/components/right-sidebar/GitHistoryCommitContextMenu.tsx b/src/renderer/src/components/right-sidebar/GitHistoryCommitContextMenu.tsx
index 4746a1cacf8..5ff8e9691fd 100644
--- a/src/renderer/src/components/right-sidebar/GitHistoryCommitContextMenu.tsx
+++ b/src/renderer/src/components/right-sidebar/GitHistoryCommitContextMenu.tsx
@@ -7,6 +7,8 @@ import {
 } from '@/components/ui/context-menu'
 import { translate } from '@/i18n/i18n'
 import type { GitHistoryItem } from '../../../../shared/git-history'
+import { useAppStore } from '@/store'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 export type GitHistoryCommitAction = 'open-remote' | 'copy-hash' | 'copy-message' | 'explain'
 
@@ -17,15 +19,22 @@ export function GitHistoryCommitContextMenu({
   item: GitHistoryItem
   onAction: (action: GitHistoryCommitAction, item: GitHistoryItem) => void
 }): React.JSX.Element {
+  const managedBrowserCreationEnabled = useAppStore(
+    (state) =>
+      getClientCreationActionPolicy(state, state.activeWorktreeId)['managed-browser'].state ===
+      'enabled'
+  )
   return (
     <ContextMenuContent className="w-56">
-      <ContextMenuItem onSelect={() => onAction('open-remote', item)}>
-        <Globe className="size-3.5" />
-        {translate(
-          'auto.components.right.sidebar.GitHistoryCommitContextMenu.7b1c4e9a02',
-          'Open commit in browser'
-        )}
-      </ContextMenuItem>
+      {managedBrowserCreationEnabled ? (
+        <ContextMenuItem onSelect={() => onAction('open-remote', item)}>
+          <Globe className="size-3.5" />
+          {translate(
+            'auto.components.right.sidebar.GitHistoryCommitContextMenu.7b1c4e9a02',
+            'Open commit in browser'
+          )}
+        </ContextMenuItem>
+      ) : null}
       <ContextMenuItem onSelect={() => onAction('copy-hash', item)}>
         <Hash className="size-3.5" />
         {translate(
diff --git a/src/renderer/src/components/right-sidebar/GitHistoryRow.tsx b/src/renderer/src/components/right-sidebar/GitHistoryRow.tsx
index b236d15533c..f41ea2f92b4 100644
--- a/src/renderer/src/components/right-sidebar/GitHistoryRow.tsx
+++ b/src/renderer/src/components/right-sidebar/GitHistoryRow.tsx
@@ -94,7 +94,12 @@ export const GitHistoryRow = React.forwardRef<HTMLElement, GitHistoryRowProps>(
                 {item.subject}
               </span>
             </TooltipTrigger>
-            <TooltipContent side="bottom" sideOffset={6} className="max-w-96 whitespace-pre-wrap">
+            <TooltipContent
+              side="bottom"
+              sideOffset={6}
+              collisionPadding={8}
+              className="max-w-[min(76ch,var(--radix-tooltip-content-available-width))] break-words text-wrap whitespace-pre-wrap"
+            >
               {rowTooltip}
             </TooltipContent>
           </Tooltip>
diff --git a/src/renderer/src/components/right-sidebar/PortsPanel.test.tsx b/src/renderer/src/components/right-sidebar/PortsPanel.test.tsx
index 1dc5b616ed5..9cb86404dd8 100644
--- a/src/renderer/src/components/right-sidebar/PortsPanel.test.tsx
+++ b/src/renderer/src/components/right-sidebar/PortsPanel.test.tsx
@@ -61,7 +61,8 @@ const compatibleStatus = {
   runtimeId: 'runtime-1',
   graphStatus: 'ready',
   runtimeProtocolVersion: RUNTIME_PROTOCOL_VERSION,
-  minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION
+  minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+  capabilities: ['browser.screencast.v1']
 }
 
 const localScan = vi.fn()
@@ -318,7 +319,7 @@ describe('PortsPanel runtime routing', () => {
     ).toEqual(['runtime-repo::/srv/app', 'repo::/workspace/app'])
   })
 
-  it('opens remote workspace ports in the server-side browser and binds the local page handle', async () => {
+  it('reuses the capability verdict across remote port opens', async () => {
     runtimeEnvironmentCall.mockImplementation(({ method }: { method: string }) =>
       Promise.resolve({
         id: method,
@@ -331,6 +332,14 @@ describe('PortsPanel runtime routing', () => {
     const createBrowserTab = vi.fn(() => ({ activePageId: 'local-page-1' }))
     const setRemoteBrowserPageHandle = vi.fn()
 
+    await expect(
+      openWorkspacePortInBrowser({
+        port: workspacePort,
+        runtimeTarget: { kind: 'environment', environmentId: 'env-1' },
+        createBrowserTab: createBrowserTab as never,
+        setRemoteBrowserPageHandle: setRemoteBrowserPageHandle as never
+      })
+    ).resolves.toEqual({ ok: true })
     await expect(
       openWorkspacePortInBrowser({
         port: workspacePort,
@@ -340,9 +349,11 @@ describe('PortsPanel runtime routing', () => {
       })
     ).resolves.toEqual({ ok: true })
 
+    expect(activateAndRevealWorktreeMock).toHaveBeenCalledTimes(2)
     expect(activateAndRevealWorktreeMock).toHaveBeenCalledWith('repo::/workspace/app')
     expect(runtimeEnvironmentCall.mock.calls.map((call) => call[0].method)).toEqual([
       'status.get',
+      'browser.tabCreate',
       'browser.tabCreate'
     ])
     expect(runtimeEnvironmentCall.mock.calls[1][0].params).toEqual({
@@ -353,7 +364,8 @@ describe('PortsPanel runtime routing', () => {
       'repo::/workspace/app',
       'http://127.0.0.1:63468',
       {
-        activate: true
+        activate: true,
+        browserRuntimeEnvironmentId: 'env-1'
       }
     )
     expect(setRemoteBrowserPageHandle).toHaveBeenCalledWith('local-page-1', {
@@ -362,6 +374,34 @@ describe('PortsPanel runtime routing', () => {
     })
   })
 
+  it('rejects remote port browser creation before RPC without the screencast provider', async () => {
+    runtimeEnvironmentCall.mockImplementation(({ method }: { method: string }) =>
+      Promise.resolve({
+        id: method,
+        ok: true,
+        result: { ...compatibleStatus, capabilities: [] },
+        _meta: { runtimeId: 'runtime-1' }
+      })
+    )
+    const createBrowserTab = vi.fn()
+
+    await expect(
+      openWorkspacePortInBrowser({
+        port: workspacePort,
+        runtimeTarget: { kind: 'environment', environmentId: 'env-1' },
+        createBrowserTab: createBrowserTab as never,
+        setRemoteBrowserPageHandle: vi.fn() as never
+      })
+    ).resolves.toEqual({
+      ok: false,
+      reason:
+        'Managed browser tabs are unavailable because the paired runtime does not support browser streaming.'
+    })
+
+    expect(runtimeEnvironmentCall.mock.calls.map((call) => call[0].method)).toEqual(['status.get'])
+    expect(createBrowserTab).not.toHaveBeenCalled()
+  })
+
   it('opens workspace ports in the system browser when link routing is off', async () => {
     const createBrowserTab = vi.fn()
     const setRemoteBrowserPageHandle = vi.fn()
@@ -579,7 +619,7 @@ describe('PortsPanel runtime routing', () => {
     expect(createBrowserTab).toHaveBeenCalledWith(
       'repo::/workspace/app',
       'http://127.0.0.1:63468',
-      { activate: true }
+      { activate: true, browserRuntimeEnvironmentId: 'env-1' }
     )
     expect(setRemoteBrowserPageHandle).toHaveBeenCalledWith('local-page-1', {
       environmentId: 'env-1',
diff --git a/src/renderer/src/components/right-sidebar/PortsPanel.tsx b/src/renderer/src/components/right-sidebar/PortsPanel.tsx
index b0c1dae3a4d..2f481e8014d 100644
--- a/src/renderer/src/components/right-sidebar/PortsPanel.tsx
+++ b/src/renderer/src/components/right-sidebar/PortsPanel.tsx
@@ -58,6 +58,7 @@ import {
 import type { PortForwardEntry, EnrichedDetectedPort } from '../../../../shared/ssh-types'
 import type { WorkspacePort } from '../../../../shared/workspace-ports'
 import { translate } from '@/i18n/i18n'
+import { openWorkspaceBrowserTab } from '@/lib/workspace-browser-tab-open'
 
 export {
   killWorkspacePortForTarget,
@@ -804,7 +805,6 @@ function SshPortsPanel(): React.JSX.Element {
   const portForwardsByConnection = useAppStore((s) => s.portForwardsByConnection)
   const detectedPortsByConnection = useAppStore((s) => s.detectedPortsByConnection)
   const sshConnectionStates = useAppStore((s) => s.sshConnectionStates)
-  const createBrowserTab = useAppStore((s) => s.createBrowserTab)
   // Why: scope the panel to the active worktree's SSH connection so
   // actions target the correct machine and the disconnected state
   // reflects the active worktree, not some other SSH session.
@@ -884,11 +884,15 @@ function SshPortsPanel(): React.JSX.Element {
         )
         return
       }
-      createBrowserTab(activeWorktree.id, url, {
-        activate: true
+      void openWorkspaceBrowserTab({
+        workspaceId: activeWorktree.id,
+        url,
+        intent: { kind: 'url' }
+      }).catch((error) => {
+        toast.error(error instanceof Error ? error.message : String(error))
       })
     },
-    [activeWorktree?.id, createBrowserTab, settings]
+    [activeWorktree?.id, settings]
   )
 
   const handleDialogClose = useCallback(() => {
diff --git a/src/renderer/src/components/right-sidebar/SourceControl.hosted-review-header-link.test.tsx b/src/renderer/src/components/right-sidebar/SourceControl.hosted-review-header-link.test.tsx
index ee90c607ada..c3544b4ff1f 100644
--- a/src/renderer/src/components/right-sidebar/SourceControl.hosted-review-header-link.test.tsx
+++ b/src/renderer/src/components/right-sidebar/SourceControl.hosted-review-header-link.test.tsx
@@ -8,7 +8,8 @@ const { openHttpLinkMock } = vi.hoisted(() => ({ openHttpLinkMock: vi.fn() }))
 
 vi.mock('@/lib/http-link-routing', () => ({
   openHttpLink: openHttpLinkMock,
-  registerHttpLinkStoreAccessor: vi.fn()
+  registerHttpLinkStoreAccessor: vi.fn(),
+  registerRuntimeHttpLinkBrowserOpener: vi.fn()
 }))
 
 function makeReview(overrides: Partial<HostedReviewInfo> = {}): HostedReviewInfo {
diff --git a/src/renderer/src/components/right-sidebar/ai-vault-scope-paths.ts b/src/renderer/src/components/right-sidebar/ai-vault-scope-paths.ts
index 7bc85b13093..c9ad8137fc9 100644
--- a/src/renderer/src/components/right-sidebar/ai-vault-scope-paths.ts
+++ b/src/renderer/src/components/right-sidebar/ai-vault-scope-paths.ts
@@ -3,7 +3,7 @@ import {
   normalizeRuntimePathForComparison
 } from '../../../../shared/cross-platform-path'
 import type { ProjectHostSetupProjection } from '../../../../shared/project-host-setup-projection'
-import type { Worktree } from '../../../../shared/types'
+import type { ProjectHostSetup, Worktree } from '../../../../shared/types'
 import { splitWorktreeIdForFilesystem } from '../../../../shared/worktree-id'
 
 export function deriveAiVaultWorkspaceScopePaths(
@@ -88,10 +88,10 @@ export function deriveAiVaultScopeSessionPaths(
 
 function buildProjectSetupsByRepoId(
   projection?: ProjectHostSetupProjection
-): Map<string, ProjectHostSetupProjection['setups']> {
-  const setupsByRepoId = new Map<string, ProjectHostSetupProjection['setups']>()
+): Map<string, ProjectHostSetup[]> {
+  const setupsByRepoId = new Map<string, ProjectHostSetup[]>()
   for (const setup of projection?.setups ?? []) {
-    const setups = setupsByRepoId.get(setup.repoId) ?? []
+    const setups: ProjectHostSetup[] = setupsByRepoId.get(setup.repoId) ?? []
     setups.push(setup)
     setupsByRepoId.set(setup.repoId, setups)
   }
diff --git a/src/renderer/src/components/right-sidebar/checks-panel-content.tsx b/src/renderer/src/components/right-sidebar/checks-panel-content.tsx
index 7091d995996..ad0824e424f 100644
--- a/src/renderer/src/components/right-sidebar/checks-panel-content.tsx
+++ b/src/renderer/src/components/right-sidebar/checks-panel-content.tsx
@@ -78,7 +78,7 @@ import {
   getPRCommentGroupActionState,
   isPRCommentGroupQueueableForAI,
   partitionPRCommentGroupsForTriage,
-  sortPRCommentGroupsForTimeline,
+  sortPRCommentGroupsByRecency,
   type PRCommentGroupActionState
 } from '@/lib/pr-comment-action-state'
 import { formatPrCommentRelativeTime } from '../../../../shared/pr-comment-time'
@@ -2477,9 +2477,13 @@ export function PRCommentsList({
     [botAuthorOverrides, commentFilter, comments]
   )
   const groups = React.useMemo(() => groupPRComments(visibleComments), [visibleComments])
-  const triageGroups = React.useMemo(() => partitionPRCommentGroupsForTriage(groups), [groups])
-  // Why: triage mode prioritizes actionability; timeline restores the host discussion history.
-  const timelineGroups = React.useMemo(() => sortPRCommentGroupsForTimeline(groups), [groups])
+  const triageGroups = React.useMemo(
+    // Why: grouped sections read newest-first so recent discussion surfaces at the top.
+    () => partitionPRCommentGroupsForTriage(sortPRCommentGroupsByRecency(groups, 'newest-first')),
+    [groups]
+  )
+  // Why: timeline reads oldest-first so the discussion history unfolds in order.
+  const timelineGroups = React.useMemo(() => sortPRCommentGroupsByRecency(groups), [groups])
   const canShowResolveWithAI = Boolean(
     onResolveSelectedCommentsWithAI && selectableGroups.length > 0
   )
diff --git a/src/renderer/src/components/right-sidebar/checks-panel-review-creation.ts b/src/renderer/src/components/right-sidebar/checks-panel-review-creation.ts
index 95c9ccfde97..d0534124397 100644
--- a/src/renderer/src/components/right-sidebar/checks-panel-review-creation.ts
+++ b/src/renderer/src/components/right-sidebar/checks-panel-review-creation.ts
@@ -63,7 +63,7 @@ export function isChecksPanelCreateEligibilityConfirmable(input: {
  * provisional or draft-preserve path.
  */
 export function shouldOpenChecksPanelCreateComposer(input: {
-  activeReview: unknown | null
+  activeReview: unknown
   isFolder: boolean
   branch: string
   hostedReviewCreation: HostedReviewCreationEligibility | null
diff --git a/src/renderer/src/components/right-sidebar/hosted-review-header-chrome.tsx b/src/renderer/src/components/right-sidebar/hosted-review-header-chrome.tsx
index 66733779c77..b13a5728d2f 100644
--- a/src/renderer/src/components/right-sidebar/hosted-review-header-chrome.tsx
+++ b/src/renderer/src/components/right-sidebar/hosted-review-header-chrome.tsx
@@ -1,5 +1,5 @@
 import React from 'react'
-import { GitMerge } from 'lucide-react'
+import { GitMerge, GitPullRequestClosed, GitPullRequestDraft } from 'lucide-react'
 import type { HostedReviewInfo } from '../../../../shared/hosted-review'
 import { cn } from '@/lib/utils'
 import { PullRequestIcon } from './checks-panel-content'
@@ -17,6 +17,23 @@ function hostedReviewStateClass(review: HostedReviewInfo): string {
   return 'text-muted-foreground/50'
 }
 
+// Why: draft and closed only differed by a near-identical muted tone on the same
+// glyph, so a draft review read as closed.
+function hostedReviewStateIcon(
+  review: HostedReviewInfo
+): React.ComponentType<{ className?: string }> | null {
+  if (review.state === 'merged') {
+    return GitMerge
+  }
+  if (review.state === 'closed') {
+    return GitPullRequestClosed
+  }
+  if (review.state === 'draft') {
+    return GitPullRequestDraft
+  }
+  return null
+}
+
 export function HostedReviewIcon({
   review,
   className
@@ -24,7 +41,8 @@ export function HostedReviewIcon({
   review: HostedReviewInfo
   className?: string
 }): React.JSX.Element {
-  const Icon = review.provider === 'gitlab' ? GitMerge : PullRequestIcon
+  const providerIcon = review.provider === 'gitlab' ? GitMerge : PullRequestIcon
+  const Icon = hostedReviewStateIcon(review) ?? providerIcon
   return <Icon className={cn(className, hostedReviewStateClass(review))} />
 }
 
diff --git a/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.test.ts b/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.test.ts
new file mode 100644
index 00000000000..ea4b5936ed6
--- /dev/null
+++ b/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.test.ts
@@ -0,0 +1,178 @@
+import { describe, expect, it, vi } from 'vitest'
+import {
+  buildSnapshottedThreadResolver,
+  type SnapshottedThreadResolverDeps
+} from './pr-comment-snapshotted-thread-resolver'
+
+const PR_REPO = { owner: 'acme', repo: 'widgets', host: 'github.com' }
+
+function deps(
+  overrides: Partial<SnapshottedThreadResolverDeps> = {}
+): SnapshottedThreadResolverDeps {
+  return {
+    provider: 'github',
+    githubResolveTarget: { repoPath: '/repos/widgets', repoId: 'repo-1', prNumber: 42 },
+    resolveReviewThread: vi.fn().mockResolvedValue(true),
+    resolveGitLabDiscussion: vi.fn().mockResolvedValue({ ok: true }),
+    isPanelStillOnLaunchReview: () => true,
+    onResolvedOptimistically: vi.fn(),
+    onResolveFailed: vi.fn(),
+    ...overrides
+  }
+}
+
+describe('buildSnapshottedThreadResolver', () => {
+  it('resolves a GitHub thread against the snapshotted PR, passing prRepo when known', async () => {
+    const resolveReviewThread = vi.fn().mockResolvedValue(true)
+    const onResolvedOptimistically = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        githubResolveTarget: {
+          repoPath: '/repos/widgets',
+          repoId: 'repo-1',
+          prNumber: 42,
+          prRepo: PR_REPO
+        },
+        resolveReviewThread,
+        onResolvedOptimistically
+      })
+    )
+
+    expect(await resolve('T1')).toBe(true)
+    expect(resolveReviewThread).toHaveBeenCalledWith('/repos/widgets', 42, 'T1', true, {
+      repoId: 'repo-1',
+      prRepo: PR_REPO
+    })
+    expect(onResolvedOptimistically).toHaveBeenCalledWith('T1')
+  })
+
+  // Why: resolveReviewThread takes prRepo as an option; a degraded PR entry must still resolve.
+  it('resolves a GitHub thread when the snapshot has no prRepo', async () => {
+    const resolveReviewThread = vi.fn().mockResolvedValue(true)
+    const resolve = buildSnapshottedThreadResolver(deps({ resolveReviewThread }))
+
+    expect(await resolve('T1')).toBe(true)
+    expect(resolveReviewThread).toHaveBeenCalledWith('/repos/widgets', 42, 'T1', true, {
+      repoId: 'repo-1',
+      prRepo: undefined
+    })
+  })
+
+  it('resolves a GitLab discussion against the snapshotted MR iid', async () => {
+    const resolveGitLabDiscussion = vi.fn().mockResolvedValue({ ok: true })
+    const resolveReviewThread = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        provider: 'gitlab',
+        githubResolveTarget: undefined,
+        gitlabTarget: { repoPath: '/repos/widgets', repoId: 'repo-1', iid: 7 },
+        resolveGitLabDiscussion,
+        resolveReviewThread
+      })
+    )
+
+    expect(await resolve('D1')).toBe(true)
+    expect(resolveGitLabDiscussion).toHaveBeenCalledWith({
+      repoPath: '/repos/widgets',
+      repoId: 'repo-1',
+      iid: 7,
+      discussionId: 'D1',
+      resolved: true
+    })
+    expect(resolveReviewThread).not.toHaveBeenCalled()
+  })
+
+  it('fails without calling a host when the provider cannot resolve threads', async () => {
+    const resolveReviewThread = vi.fn()
+    const resolveGitLabDiscussion = vi.fn()
+    const onResolveFailed = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        provider: 'bitbucket',
+        githubResolveTarget: undefined,
+        resolveReviewThread,
+        resolveGitLabDiscussion,
+        onResolveFailed
+      })
+    )
+
+    expect(await resolve('T1')).toBe(false)
+    expect(resolveReviewThread).not.toHaveBeenCalled()
+    expect(resolveGitLabDiscussion).not.toHaveBeenCalled()
+    expect(onResolveFailed).toHaveBeenCalledWith({ threadId: 'T1', error: undefined })
+  })
+
+  it('fails when the snapshotted target is missing', async () => {
+    const resolveGithub = buildSnapshottedThreadResolver(deps({ githubResolveTarget: undefined }))
+    const resolveGitlab = buildSnapshottedThreadResolver(
+      deps({ provider: 'gitlab', githubResolveTarget: undefined, gitlabTarget: undefined })
+    )
+
+    expect(await resolveGithub('T1')).toBe(false)
+    expect(await resolveGitlab('D1')).toBe(false)
+  })
+
+  it('surfaces the GitLab host error instead of swallowing it', async () => {
+    const onResolveFailed = vi.fn()
+    const onResolvedOptimistically = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        provider: 'gitlab',
+        githubResolveTarget: undefined,
+        gitlabTarget: { repoPath: '/repos/widgets', repoId: 'repo-1', iid: 7 },
+        resolveGitLabDiscussion: vi.fn().mockResolvedValue({ ok: false, error: 'timed out' }),
+        onResolveFailed,
+        onResolvedOptimistically
+      })
+    )
+
+    expect(await resolve('D1')).toBe(false)
+    expect(onResolveFailed).toHaveBeenCalledWith({ threadId: 'D1', error: 'timed out' })
+    expect(onResolvedOptimistically).not.toHaveBeenCalled()
+  })
+
+  // Why: one rejected host call must not abort the bulk ack pool.
+  it('reports a rejected host call as a failure', async () => {
+    const onResolveFailed = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        resolveReviewThread: vi.fn().mockRejectedValue(new Error('socket closed')),
+        onResolveFailed
+      })
+    )
+
+    expect(await resolve('T1')).toBe(false)
+    expect(onResolveFailed).toHaveBeenCalledWith({ threadId: 'T1', error: 'socket closed' })
+  })
+
+  it('skips the optimistic update when the resolve failed', async () => {
+    const onResolvedOptimistically = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        resolveReviewThread: vi.fn().mockResolvedValue(false),
+        onResolvedOptimistically
+      })
+    )
+
+    expect(await resolve('T1')).toBe(false)
+    expect(onResolvedOptimistically).not.toHaveBeenCalled()
+  })
+
+  // Why: the host call still belongs to the launch review, but the optimistic row would land
+  // in whatever review the panel navigated to.
+  it('still resolves on the host but skips the optimistic update after the panel moved', async () => {
+    const resolveReviewThread = vi.fn().mockResolvedValue(true)
+    const onResolvedOptimistically = vi.fn()
+    const resolve = buildSnapshottedThreadResolver(
+      deps({
+        resolveReviewThread,
+        isPanelStillOnLaunchReview: () => false,
+        onResolvedOptimistically
+      })
+    )
+
+    expect(await resolve('T1')).toBe(true)
+    expect(resolveReviewThread).toHaveBeenCalledTimes(1)
+    expect(onResolvedOptimistically).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.ts b/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.ts
new file mode 100644
index 00000000000..f5fddeb05b2
--- /dev/null
+++ b/src/renderer/src/components/right-sidebar/pr-comment-snapshotted-thread-resolver.ts
@@ -0,0 +1,89 @@
+import type { HostedReviewInfo } from '../../../../shared/hosted-review'
+import type {
+  PendingPRCommentAiAckGithubResolveTarget,
+  PendingPRCommentAiAckGitlabTarget
+} from './pr-comments-ai-launch-ack'
+
+/** Host outcome shape; GitLab reports a message, GitHub only reports success. */
+export type SnapshottedThreadResolveOutcome = { ok: boolean; error?: string }
+
+export type SnapshottedThreadResolverDeps = {
+  provider: HostedReviewInfo['provider']
+  githubResolveTarget?: PendingPRCommentAiAckGithubResolveTarget
+  gitlabTarget?: PendingPRCommentAiAckGitlabTarget
+  resolveReviewThread: (
+    repoPath: string,
+    prNumber: number,
+    threadId: string,
+    resolve: boolean,
+    options: {
+      repoId: string
+      prRepo?: PendingPRCommentAiAckGithubResolveTarget['prRepo']
+    }
+  ) => Promise<boolean>
+  resolveGitLabDiscussion: (args: {
+    repoPath: string
+    repoId: string
+    iid: number
+    discussionId: string
+    resolved: boolean
+  }) => Promise<SnapshottedThreadResolveOutcome>
+  /** False once the panel moved to another review: host calls continue, UI writes stop. */
+  isPanelStillOnLaunchReview: () => boolean
+  onResolvedOptimistically: (threadId: string) => void
+  onResolveFailed: (args: { threadId: string; error?: string }) => void
+}
+
+/**
+ * Resolve one host thread against the review snapshotted at launch: the panel can be showing a
+ * different PR/MR by the time the agent prompt lands, so live state must not pick the target.
+ */
+export function buildSnapshottedThreadResolver(
+  deps: SnapshottedThreadResolverDeps
+): (threadId: string) => Promise<boolean> {
+  return async (threadId: string): Promise<boolean> => {
+    const outcome = await resolveOnHost(deps, threadId)
+    if (!outcome.ok) {
+      deps.onResolveFailed({ threadId, error: outcome.error })
+      return false
+    }
+    // Why: the optimistic row must never land in another review's list; the caller's guarded
+    // refresh reconciles whichever panel is actually showing.
+    if (deps.isPanelStillOnLaunchReview()) {
+      deps.onResolvedOptimistically(threadId)
+    }
+    return true
+  }
+}
+
+async function resolveOnHost(
+  deps: SnapshottedThreadResolverDeps,
+  threadId: string
+): Promise<SnapshottedThreadResolveOutcome> {
+  try {
+    if (deps.provider === 'gitlab') {
+      if (!deps.gitlabTarget) {
+        return { ok: false }
+      }
+      return await deps.resolveGitLabDiscussion({
+        repoPath: deps.gitlabTarget.repoPath,
+        repoId: deps.gitlabTarget.repoId,
+        iid: deps.gitlabTarget.iid,
+        discussionId: threadId,
+        resolved: true
+      })
+    }
+    if (deps.provider !== 'github' || !deps.githubResolveTarget) {
+      return { ok: false }
+    }
+    const target = deps.githubResolveTarget
+    const ok = await deps.resolveReviewThread(target.repoPath, target.prNumber, threadId, true, {
+      repoId: target.repoId,
+      prRepo: target.prRepo
+    })
+    return { ok }
+  } catch (err) {
+    // Why: one rejected host call would otherwise abort the whole bulk ack pool.
+    return { ok: false, error: err instanceof Error ? err.message : String(err) }
+  }
+}
diff --git a/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.test.ts b/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.test.ts
index dec478b8e1f..3ae9663f314 100644
--- a/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.test.ts
+++ b/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.test.ts
@@ -8,6 +8,8 @@ import {
   checksPanelReviewStableKey,
   clearPendingPRCommentAiAck,
   getPRCommentGroupReplyTarget,
+  getPRCommentGroupsNeedingReply,
+  hasPRCommentGroupNeedingReply,
   PR_COMMENT_ACK_MAX_CONCURRENCY,
   resolvePRReviewReplyThreadId,
   setPendingPRCommentAiAck,
@@ -290,17 +292,16 @@ describe('checksPanelReviewStableKey', () => {
 })
 
 describe('acknowledgePRCommentsAfterAiLaunch', () => {
-  it('replies in-thread and resolves host-resolvable threads', async () => {
+  // Why: the reported bug — resolving is the acknowledgement, so a resolvable thread must
+  // never also get a "Fixing." reply on top of a thread that visibly collapsed.
+  it('resolves host-resolvable threads without replying to them', async () => {
     const resolveThread = vi.fn().mockResolvedValue(true)
     const replyInThread = vi.fn().mockResolvedValue(true)
     const replyAsConversation = vi.fn().mockResolvedValue(true)
-    const group = openThread('T1')
 
     const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [group, openThread('T2', 11)],
+      groups: [openThread('T1'), openThread('T2', 11)],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
         resolveThread,
         canReply: true,
         replyInThread,
@@ -308,24 +309,19 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
       }
     })
 
-    expect(result).toEqual({ resolved: 2, replied: 2, skipped: 0, failed: 0 })
-    expect(replyInThread).toHaveBeenCalledTimes(2)
-    expect(replyInThread).toHaveBeenCalledWith(group.root, PR_COMMENT_AI_FIXING_REPLY)
+    expect(result).toEqual({ resolved: 2, replied: 0, skipped: 0, failed: 0 })
+    expect(resolveThread.mock.calls.map(([threadId]) => threadId)).toEqual(['T1', 'T2'])
+    expect(replyInThread).not.toHaveBeenCalled()
     expect(replyAsConversation).not.toHaveBeenCalled()
-    expect(resolveThread).toHaveBeenCalledTimes(2)
   })
 
-  // Why: on GitHub canReply is true; a failed resolve still leaves the thread open and
-  // must count as failed or the success toast lies.
-  it('still replies in-thread when resolve fails, and counts the failed resolve', async () => {
-    const replyInThread = vi.fn().mockResolvedValue(true)
-    const group = openThread('T1')
+  // Why: a failed resolve leaves the thread open on the host, so the toast must not claim success.
+  it('counts a failed resolve instead of falling back to a reply', async () => {
+    const replyInThread = vi.fn()
 
     const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [group],
+      groups: [openThread('T1')],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
         resolveThread: vi.fn().mockResolvedValue(false),
         canReply: true,
         replyInThread,
@@ -333,19 +329,161 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
       }
     })
 
-    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 0, failed: 1 })
-    expect(replyInThread).toHaveBeenCalledWith(group.root, PR_COMMENT_AI_FIXING_REPLY)
+    expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
+    expect(replyInThread).not.toHaveBeenCalled()
   })
 
-  it('posts a conversation @-reply for standalone conversation comments', async () => {
-    const replyAsConversation = vi.fn().mockResolvedValue(true)
-    const group = standalone(42)
+  // Why: GitLab reaches the ack with canReply false, so a failed resolve has no reply to fall
+  // back on and must still be counted.
+  it('counts a failed resolve on a provider that cannot reply', async () => {
+    const replyInThread = vi.fn()
+    const replyAsConversation = vi.fn()
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [openThread('T1')],
+      deps: {
+        resolveThread: vi.fn().mockResolvedValue(false),
+        canReply: false,
+        replyInThread,
+        replyAsConversation
+      }
+    })
+
+    expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
+    expect(replyInThread).not.toHaveBeenCalled()
+    expect(replyAsConversation).not.toHaveBeenCalled()
+  })
+
+  // Why: resolve used to be gated on panel/live-comment state and got silently skipped when
+  // a slow agent launch outlived either; the snapshotted threadId must always be attempted.
+  it('resolves every selected thread with no live-state gate', async () => {
+    const resolveThread = vi.fn().mockResolvedValue(true)
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [openThread('T1'), openThread('T2', 11), openThread('T3', 12)],
+      deps: {
+        resolveThread,
+        canReply: true,
+        replyInThread: vi.fn(),
+        replyAsConversation: vi.fn()
+      }
+    })
+
+    expect(resolveThread).toHaveBeenCalledTimes(3)
+    expect(result).toEqual({ resolved: 3, replied: 0, skipped: 0, failed: 0 })
+  })
+
+  // Why: GitLab MRs reach the ack with canReply false; resolve is the whole acknowledgement there.
+  it('resolves threads on providers that cannot reply', async () => {
+    const resolveThread = vi.fn().mockResolvedValue(true)
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [openThread('T1')],
+      deps: {
+        resolveThread,
+        canReply: false,
+        replyInThread: vi.fn(),
+        replyAsConversation: vi.fn()
+      }
+    })
+
+    expect(result).toEqual({ resolved: 1, replied: 0, skipped: 0, failed: 0 })
+    expect(resolveThread).toHaveBeenCalledWith('T1')
+  })
+
+  // Why: a summary thread GitHub *can* resolve is acked by resolving, even though its
+  // pullrequestreview anchor rules out a nested reply.
+  it('resolves a review-summary thread instead of batching it into a conversation post', async () => {
+    const resolveThread = vi.fn().mockResolvedValue(true)
+    const replyAsConversation = vi.fn()
+    const summaryThread: PRCommentGroup = {
+      kind: 'thread',
+      threadId: 'T_summary',
+      root: comment({
+        id: 30,
+        threadId: 'T_summary',
+        isResolved: false,
+        url: 'https://github.com/acme/widgets/pull/42#pullrequestreview-999'
+      }),
+      replies: []
+    }
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [summaryThread],
+      deps: {
+        resolveThread,
+        canReply: true,
+        replyInThread: vi.fn(),
+        replyAsConversation
+      }
+    })
+
+    expect(result).toEqual({ resolved: 1, replied: 0, skipped: 0, failed: 0 })
+    expect(resolveThread).toHaveBeenCalledWith('T_summary')
+    expect(replyAsConversation).not.toHaveBeenCalled()
+  })
+
+  // Why: an already-resolved thread has nothing left to close, so it falls back to a reply.
+  it('replies in-thread when the thread is already resolved', async () => {
+    const replyInThread = vi.fn().mockResolvedValue(true)
+    const resolveThread = vi.fn()
+    const group: PRCommentGroup = {
+      kind: 'thread',
+      threadId: 'T1',
+      root: comment({ id: 10, threadId: 'T1', path: 'a.ts', isResolved: true }),
+      replies: []
+    }
 
     const result = await acknowledgePRCommentsAfterAiLaunch({
       groups: [group],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
+        resolveThread,
+        canReply: true,
+        replyInThread,
+        replyAsConversation: vi.fn()
+      }
+    })
+
+    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 0, failed: 0 })
+    expect(resolveThread).not.toHaveBeenCalled()
+    expect(replyInThread).toHaveBeenCalledWith(group.root, PR_COMMENT_AI_FIXING_REPLY)
+  })
+
+  // Why: GitHub's replies endpoint keys off the top-level review comment id; replying to the
+  // newest reply 404s.
+  it('replies to the thread root, not the newest reply, on an already-resolved thread', async () => {
+    const replyInThread = vi.fn().mockResolvedValue(true)
+    const root = comment({ id: 10, threadId: 'T1', path: 'a.ts', isResolved: true })
+    const group: PRCommentGroup = {
+      kind: 'thread',
+      threadId: 'T1',
+      root,
+      replies: [
+        comment({ id: 11, threadId: 'T1', path: 'a.ts', body: 'first' }),
+        comment({ id: 12, threadId: 'T1', path: 'a.ts', body: 'latest' })
+      ]
+    }
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [group],
+      deps: {
+        resolveThread: vi.fn(),
+        canReply: true,
+        replyInThread,
+        replyAsConversation: vi.fn()
+      }
+    })
+
+    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 0, failed: 0 })
+    expect(replyInThread).toHaveBeenCalledWith(root, PR_COMMENT_AI_FIXING_REPLY)
+  })
+
+  it('posts a conversation @-reply for standalone conversation comments', async () => {
+    const replyAsConversation = vi.fn().mockResolvedValue(true)
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [standalone(42)],
+      deps: {
         resolveThread: vi.fn(),
         canReply: true,
         replyInThread: vi.fn(),
@@ -364,8 +502,6 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     await acknowledgePRCommentsAfterAiLaunch({
       groups: [openThread('T1'), openThread('T2', 11)],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
         resolveThread: vi.fn().mockResolvedValue(true),
         canReply: true,
         replyInThread: vi.fn().mockResolvedValue(true),
@@ -379,13 +515,10 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
   it('posts a conversation @-reply for CodeRabbit review summaries', async () => {
     const replyInThread = vi.fn().mockResolvedValue(true)
     const replyAsConversation = vi.fn().mockResolvedValue(true)
-    const group = codeRabbitReviewSummary(77)
 
     const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [group],
+      groups: [codeRabbitReviewSummary(77)],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
         resolveThread: vi.fn(),
         canReply: true,
         replyInThread,
@@ -398,8 +531,8 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     expect(replyAsConversation).toHaveBeenCalledWith(`@coderabbitai ${PR_COMMENT_AI_FIXING_REPLY}`)
   })
 
-  // Why: the reported bug — N selected summaries used to produce N near-identical
-  // "Fixing." conversation comments; one combined post covers the whole set.
+  // Why: N selected summaries used to produce N near-identical "Fixing." conversation
+  // comments; one combined post covers the whole set.
   it('combines every unresolvable review summary into one conversation comment', async () => {
     const replyAsConversation = vi.fn().mockResolvedValue(true)
     const resolveThread = vi.fn()
@@ -407,8 +540,6 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     const result = await acknowledgePRCommentsAfterAiLaunch({
       groups: [codeRabbitReviewSummary(30), codeRabbitReviewSummary(31), standalone(32)],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => false,
         resolveThread,
         canReply: true,
         replyInThread: vi.fn(),
@@ -432,31 +563,8 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     expect(resolveThread).not.toHaveBeenCalled()
   })
 
-  it('mixes in-thread and conversation replies in a single selection', async () => {
-    const replyInThread = vi.fn().mockResolvedValue(true)
-    const replyAsConversation = vi.fn().mockResolvedValue(true)
-    const thread = openThread('T1', 10)
-    const summary = codeRabbitReviewSummary(30)
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [thread, summary],
-      deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread: vi.fn().mockResolvedValue(true),
-        canReply: true,
-        replyInThread,
-        replyAsConversation
-      }
-    })
-
-    expect(result).toEqual({ resolved: 1, replied: 2, skipped: 0, failed: 0 })
-    expect(replyInThread).toHaveBeenCalledWith(thread.root, PR_COMMENT_AI_FIXING_REPLY)
-    expect(replyAsConversation).toHaveBeenCalledWith(`@coderabbitai ${PR_COMMENT_AI_FIXING_REPLY}`)
-  })
-
-  // Why: nestable threads keep one reply each; only the conversation half is batched.
-  it('replies once per thread and once for the whole conversation set', async () => {
+  it('resolves threads and batches the conversation half in a single selection', async () => {
+    const resolveThread = vi.fn().mockResolvedValue(true)
     const replyInThread = vi.fn().mockResolvedValue(true)
     const replyAsConversation = vi.fn().mockResolvedValue(true)
 
@@ -468,27 +576,42 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
         standalone(31)
       ],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread: vi.fn().mockResolvedValue(true),
+        resolveThread,
         canReply: true,
         replyInThread,
         replyAsConversation
       }
     })
 
-    expect(result).toEqual({ resolved: 2, replied: 3, skipped: 0, failed: 0 })
-    expect(replyInThread).toHaveBeenCalledTimes(2)
+    expect(result).toEqual({ resolved: 2, replied: 1, skipped: 0, failed: 0 })
+    expect(replyInThread).not.toHaveBeenCalled()
     expect(replyAsConversation).toHaveBeenCalledTimes(1)
     expect(replyAsConversation.mock.calls[0]?.[0]).toContain('Fixing:')
   })
 
+  // Why: a path-only review comment with no thread metadata still nests a reply.
+  it('replies in-thread for an unresolvable comment that supports nesting', async () => {
+    const replyInThread = vi.fn().mockResolvedValue(true)
+    const target = comment({ id: 10, path: 'src/a.ts', line: 12 })
+
+    const result = await acknowledgePRCommentsAfterAiLaunch({
+      groups: [{ kind: 'standalone', comment: target }],
+      deps: {
+        resolveThread: vi.fn(),
+        canReply: true,
+        replyInThread,
+        replyAsConversation: vi.fn()
+      }
+    })
+
+    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 0, failed: 0 })
+    expect(replyInThread).toHaveBeenCalledWith(target, PR_COMMENT_AI_FIXING_REPLY)
+  })
+
   it('counts a failed conversation reply instead of silently reporting success', async () => {
     const result = await acknowledgePRCommentsAfterAiLaunch({
       groups: [codeRabbitReviewSummary(30)],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => false,
         resolveThread: vi.fn(),
         canReply: true,
         replyInThread: vi.fn(),
@@ -499,37 +622,10 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
   })
 
-  it('replies to the thread root in a multi-comment thread', async () => {
-    const replyInThread = vi.fn().mockResolvedValue(true)
-    const group: PRCommentGroup = {
-      kind: 'thread',
-      threadId: 'T1',
-      root: comment({ id: 10, threadId: 'T1', path: 'a.ts', isResolved: false }),
-      replies: [comment({ id: 11, threadId: 'T1', path: 'a.ts', body: 'prior reply' })]
-    }
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [group],
-      deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => false,
-        resolveThread: vi.fn(),
-        canReply: true,
-        replyInThread,
-        replyAsConversation: vi.fn()
-      }
-    })
-
-    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 0, failed: 0 })
-    expect(replyInThread).toHaveBeenCalledWith(group.root, PR_COMMENT_AI_FIXING_REPLY)
-  })
-
-  it('skips when reply is unavailable and resolve cannot run', async () => {
+  it('skips an unresolvable comment when the provider cannot reply', async () => {
     const result = await acknowledgePRCommentsAfterAiLaunch({
       groups: [standalone()],
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
         resolveThread: vi.fn(),
         canReply: false,
         replyInThread: vi.fn(),
@@ -540,27 +636,10 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     expect(result).toEqual({ resolved: 0, replied: 0, skipped: 1, failed: 0 })
   })
 
-  it('counts a failure when resolve fails and reply is unavailable', async () => {
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [openThread('T1')],
-      deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread: vi.fn().mockResolvedValue(false),
-        canReply: false,
-        replyInThread: vi.fn(),
-        replyAsConversation: vi.fn()
-      }
-    })
-
-    expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
-  })
-
   it('keeps a durable pending payload across take', () => {
     const payload: PendingPRCommentAiAck = {
       reviewContextKey: 'repo::main::owner/repo::12::abc',
       provider: 'github',
-      selectedThreadIds: ['T1'],
       selectedGroups: [openThread('T1')]
     }
     clearPendingPRCommentAiAck()
@@ -569,136 +648,78 @@ describe('acknowledgePRCommentsAfterAiLaunch', () => {
     expect(takePendingPRCommentAiAck()).toBeNull()
   })
 
-  it('still posts all replies when the review context becomes stale mid-loop', async () => {
-    let live = true
-    const replyInThread = vi.fn().mockImplementation(async () => {
-      live = false
-      return true
-    })
-    const resolveThread = vi.fn().mockResolvedValue(true)
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [openThread('T1'), openThread('T2', 11), openThread('T3', 12)],
-      deps: {
-        isStillCurrent: () => live,
-        isThreadStillResolvable: () => true,
-        resolveThread,
-        canReply: true,
-        replyInThread,
-        replyAsConversation: vi.fn()
-      }
-    })
-
-    // Why: replies must not depend on checks-panel key stability; resolve stops after context
-    // goes stale, and each skipped resolve is reported rather than silently counted as success.
-    expect(replyInThread).toHaveBeenCalledTimes(3)
-    expect(resolveThread).toHaveBeenCalledTimes(0)
-    expect(result).toEqual({ resolved: 0, replied: 3, skipped: 3, failed: 0 })
-  })
-
-  // Why: resolving after a failed reply closes the thread with no ack at all.
-  it('leaves a thread open when its fixing reply failed', async () => {
-    const resolveThread = vi.fn().mockResolvedValue(true)
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [openThread('T1')],
-      deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread,
-        canReply: true,
-        replyInThread: vi.fn().mockResolvedValue(false),
-        replyAsConversation: vi.fn()
-      }
-    })
-
-    expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
-    expect(resolveThread).not.toHaveBeenCalled()
-  })
-
-  it('does not resolve batched conversation groups when the combined post failed', async () => {
-    const resolveThread = vi.fn()
-    const summaryThread: PRCommentGroup = {
-      kind: 'thread',
-      threadId: 'T_summary',
-      root: comment({
-        id: 30,
-        threadId: 'T_summary',
-        isResolved: false,
-        url: 'https://github.com/acme/widgets/pull/42#pullrequestreview-999'
-      }),
-      replies: []
+  // Why: the ack resolves after delivery, by which point the panel may show another review —
+  // the host target must ride along in the payload, not be re-read from live state.
+  it('carries the snapshotted GitLab target through take', () => {
+    const payload: PendingPRCommentAiAck = {
+      reviewContextKey: 'repo::main::gitlab::7::abc',
+      provider: 'gitlab',
+      selectedGroups: [openThread('D1')],
+      gitlabTarget: { repoPath: '/repos/widgets', repoId: 'repo-1', iid: 7 }
     }
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [summaryThread],
-      deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread,
-        canReply: true,
-        replyInThread: vi.fn(),
-        replyAsConversation: vi.fn().mockResolvedValue(false)
-      }
+    clearPendingPRCommentAiAck()
+    setPendingPRCommentAiAck(payload)
+    expect(takePendingPRCommentAiAck()?.gitlabTarget).toEqual({
+      repoPath: '/repos/widgets',
+      repoId: 'repo-1',
+      iid: 7
     })
-
-    expect(result).toEqual({ resolved: 0, replied: 0, skipped: 0, failed: 1 })
-    expect(resolveThread).not.toHaveBeenCalled()
   })
 
-  it('reports a resolvable thread as skipped when the panel context moved', async () => {
-    const resolveThread = vi.fn()
-
-    const result = await acknowledgePRCommentsAfterAiLaunch({
-      groups: [openThread('T1')],
-      deps: {
-        isStillCurrent: () => false,
-        isThreadStillResolvable: () => true,
-        resolveThread,
-        canReply: true,
-        replyInThread: vi.fn().mockResolvedValue(true),
-        replyAsConversation: vi.fn()
-      }
-    })
-
-    expect(result).toEqual({ resolved: 0, replied: 1, skipped: 1, failed: 0 })
-    expect(resolveThread).not.toHaveBeenCalled()
-  })
-
-  it('runs groups with bounded concurrency, replying before resolving in each group', async () => {
+  it('runs groups with bounded concurrency', async () => {
     const groups = Array.from({ length: 9 }, (_, index) => openThread(`T${index}`, 100 + index))
-    const order: string[] = []
     let inFlight = 0
     let peakInFlight = 0
 
-    const track = async <T>(label: string, value: T): Promise<T> => {
-      inFlight += 1
-      peakInFlight = Math.max(peakInFlight, inFlight)
-      order.push(label)
-      await Promise.resolve()
-      inFlight -= 1
-      return value
-    }
-
     const result = await acknowledgePRCommentsAfterAiLaunch({
       groups,
       deps: {
-        isStillCurrent: () => true,
-        isThreadStillResolvable: () => true,
-        resolveThread: (threadId) => track(`resolve:${threadId}`, true),
+        resolveThread: async () => {
+          inFlight += 1
+          peakInFlight = Math.max(peakInFlight, inFlight)
+          await Promise.resolve()
+          inFlight -= 1
+          return true
+        },
         canReply: true,
-        replyInThread: (comment) => track(`reply:${comment.threadId}`, true),
+        replyInThread: vi.fn(),
         replyAsConversation: vi.fn()
       }
     })
 
-    expect(result).toEqual({ resolved: 9, replied: 9, skipped: 0, failed: 0 })
+    expect(result).toEqual({ resolved: 9, replied: 0, skipped: 0, failed: 0 })
     expect(peakInFlight).toBeGreaterThan(1)
     expect(peakInFlight).toBeLessThanOrEqual(PR_COMMENT_ACK_MAX_CONCURRENCY)
-    for (const group of groups) {
-      expect(order.indexOf(`reply:${group.threadId}`)).toBeLessThan(
-        order.indexOf(`resolve:${group.threadId}`)
-      )
+  })
+})
+
+describe('getPRCommentGroupsNeedingReply', () => {
+  it('keeps only the groups the host cannot close for us', () => {
+    const summary = codeRabbitReviewSummary(30)
+    const conversation = standalone(31)
+    const resolvedThread: PRCommentGroup = {
+      kind: 'thread',
+      threadId: 'T_done',
+      root: comment({ id: 12, threadId: 'T_done', isResolved: true }),
+      replies: []
     }
+
+    expect(
+      getPRCommentGroupsNeedingReply([
+        openThread('T1'),
+        summary,
+        conversation,
+        resolvedThread,
+        openThread('T2', 11)
+      ])
+    ).toEqual([summary, conversation, resolvedThread])
+  })
+})
+
+describe('hasPRCommentGroupNeedingReply', () => {
+  it('matches the filtered list without materializing it', () => {
+    expect(hasPRCommentGroupNeedingReply([openThread('T1'), openThread('T2', 11)])).toBe(false)
+    expect(hasPRCommentGroupNeedingReply([openThread('T1'), standalone(31)])).toBe(true)
+    expect(hasPRCommentGroupNeedingReply([])).toBe(false)
   })
 })
diff --git a/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.ts b/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.ts
index 8eadffdcdfb..6c427f84acc 100644
--- a/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.ts
+++ b/src/renderer/src/components/right-sidebar/pr-comments-ai-launch-ack.ts
@@ -15,9 +15,7 @@ export type PRCommentAiLaunchAckCounts = {
 }
 
 export type PRCommentAiLaunchAckDeps = {
-  isStillCurrent: () => boolean
-  /** True when the thread is still open and host-resolvable in live comment state. */
-  isThreadStillResolvable: (threadId: string) => boolean
+  /** Resolve a host thread. Always called against the threadId snapshotted at launch. */
   resolveThread: (threadId: string) => Promise<boolean>
   /** Provider supports posting a reply (GitHub in the Checks panel today). */
   canReply: boolean
@@ -164,26 +162,37 @@ async function mapWithBoundedConcurrency<T, R>(
 type BatchedConversationReply = {
   counts: PRCommentAiLaunchAckCounts
   handled: ReadonlySet<PRCommentGroup>
-  replyOk: boolean
 }
 
 const NO_BATCHED_CONVERSATION_REPLY: BatchedConversationReply = {
   counts: EMPTY_ACK_COUNTS,
-  handled: new Set(),
-  replyOk: false
+  handled: new Set()
+}
+
+/** Groups that need a posted reply because the host cannot close them for us. */
+export function getPRCommentGroupsNeedingReply(
+  groups: readonly PRCommentGroup[]
+): PRCommentGroup[] {
+  return groups.filter((group) => !isResolvablePRCommentGroup(group))
+}
+
+/** Emptiness test for the above without materializing the filtered list. */
+export function hasPRCommentGroupNeedingReply(groups: readonly PRCommentGroup[]): boolean {
+  return groups.some((group) => !isResolvablePRCommentGroup(group))
 }
 
 /**
- * After launching an agent for selected review feedback:
- * post a fixing reply (one nested reply per review thread, one combined conversation
- * comment for everything that has no nested-reply endpoint), then resolve host threads.
+ * After launching an agent for selected review feedback, acknowledge every selection
+ * exactly once: host-resolvable threads are resolved, and anything the host cannot close
+ * gets a fixing reply (one nested reply per review thread, one combined conversation
+ * comment for everything with no nested-reply endpoint).
  *
- * Why: replies use a snapshotted GitHub target and must not abort just because
- * the checks-panel async key churned mid-launch. isStillCurrent only gates
- * host-thread resolve + UI refresh, not the reply posts themselves.
+ * Why resolve instead of reply: a resolved thread collapses on the host, which *is* the
+ * acknowledgement — an extra "Fixing." comment only adds noise to a thread the user can
+ * already see is handled.
  *
- * Groups run through a bounded pool; reply-before-resolve stays serial *within*
- * a group because the resolve decision reads live comment state the reply mutates.
+ * Every host call targets state snapshotted at launch, so a slow agent start or the user
+ * navigating away can no longer silently drop the resolve. Groups run through a bounded pool.
  */
 export async function acknowledgePRCommentsAfterAiLaunch(args: {
   groups: readonly PRCommentGroup[]
@@ -192,7 +201,7 @@ export async function acknowledgePRCommentsAfterAiLaunch(args: {
   // Why: conversation comments have no replies endpoint, so one post per selected item
   // would spam the PR timeline with near-identical "Fixing." comments.
   const conversationGroups = args.deps.canReply
-    ? args.groups.filter(
+    ? getPRCommentGroupsNeedingReply(args.groups).filter(
         (group) => !canPostPRReviewThreadReply(getPRCommentGroupReplyTarget(group))
       )
     : []
@@ -228,8 +237,7 @@ async function postBatchedConversationReply(
   return {
     // Why: one host POST covers the whole set, so the toast must count it once.
     counts: { ...EMPTY_ACK_COUNTS, replied: replyOk ? 1 : 0, failed: replyOk ? 0 : 1 },
-    handled: new Set(groups),
-    replyOk
+    handled: new Set(groups)
   }
 }
 
@@ -239,50 +247,34 @@ async function acknowledgePRCommentGroup(
   batch: BatchedConversationReply
 ): Promise<PRCommentAiLaunchAckCounts> {
   const counts = { ...EMPTY_ACK_COUNTS }
-  const threadId =
-    group.kind === 'thread' && isResolvablePRCommentGroup(group) ? group.threadId : null
 
-  if (deps.canReply) {
-    const replyOk = batch.handled.has(group)
-      ? batch.replyOk
-      : await postInThreadFixingReply(group, deps, counts)
-    // Why: resolving a thread whose fixing reply never landed closes it silently —
-    // the user was promised an ack, so leave it open and let the toast report the failure.
-    if (!replyOk) {
-      return counts
-    }
-  }
-
-  if (threadId == null || !deps.isThreadStillResolvable(threadId)) {
-    if (!deps.canReply) {
-      counts.skipped += 1
+  if (isResolvablePRCommentGroup(group)) {
+    if (await deps.resolveThread(group.threadId)) {
+      counts.resolved += 1
+    } else {
+      counts.failed += 1
     }
     return counts
   }
 
-  // Why: resolve is UI/host-state sensitive; skip it if the panel context moved.
-  // Replies already used a snapshotted target and must not be gated the same way.
-  if (!deps.isStillCurrent()) {
+  if (!deps.canReply) {
     counts.skipped += 1
     return counts
   }
-
-  if (await deps.resolveThread(threadId)) {
-    counts.resolved += 1
-  } else {
-    // Why: a resolve failure leaves the thread open on the host regardless of whether
-    // the reply landed; counting it only when !canReply made GitHub failures invisible.
-    counts.failed += 1
+  // The combined conversation post already covered this group and counted itself.
+  if (batch.handled.has(group)) {
+    return counts
   }
+  await postInThreadFixingReply(group, deps, counts)
   return counts
 }
 
-/** Mutates counts in place; returns whether the nested reply landed. */
+/** Mutates counts in place. */
 async function postInThreadFixingReply(
   group: PRCommentGroup,
   deps: PRCommentAiLaunchAckDeps,
   counts: PRCommentAiLaunchAckCounts
-): Promise<boolean> {
+): Promise<void> {
   const replyOk = await deps.replyInThread(
     getPRCommentGroupReplyTarget(group),
     PR_COMMENT_AI_FIXING_REPLY
@@ -292,24 +284,41 @@ async function postInThreadFixingReply(
   } else {
     counts.failed += 1
   }
-  return replyOk
 }
 
-/** Snapshotted at queue time so the post-launch ack does not depend on live React state. */
-export type PendingPRCommentAiAckGithubTarget = {
+/**
+ * Snapshotted at queue time so the post-launch ack does not depend on live React state.
+ * Resolving a thread only needs the PR handle — prRepo is optional on resolveReviewThread,
+ * so a PR cache entry without it must still be able to ack by resolving.
+ */
+export type PendingPRCommentAiAckGithubResolveTarget = {
   repoPath: string
   repoId: string
   prNumber: number
+  prRepo?: NonNullable<PRInfo['prRepo']>
+}
+
+/** The reply endpoints genuinely need prRepo, so they get the stricter target. */
+export type PendingPRCommentAiAckGithubTarget = PendingPRCommentAiAckGithubResolveTarget & {
   prRepo: NonNullable<PRInfo['prRepo']>
 }
 
+/** Snapshotted at queue time so the post-launch ack does not depend on live React state. */
+export type PendingPRCommentAiAckGitlabTarget = {
+  repoPath: string
+  repoId: string
+  iid: number
+}
+
 /** What a queued comment-resolution launch must still ack once its prompt is delivered. */
 export type PendingPRCommentAiAck = {
   reviewContextKey: string
   provider: HostedReviewInfo['provider']
-  selectedThreadIds: string[]
   selectedGroups: PRCommentGroup[]
+  /** Reply target: requires prRepo. */
   githubTarget?: PendingPRCommentAiAckGithubTarget
+  githubResolveTarget?: PendingPRCommentAiAckGithubResolveTarget
+  gitlabTarget?: PendingPRCommentAiAckGitlabTarget
 }
 
 /** Durable pending ack payload so dialog close / re-renders cannot drop it before launch. */
diff --git a/src/renderer/src/components/right-sidebar/pr-comments-list-selection.test.tsx b/src/renderer/src/components/right-sidebar/pr-comments-list-selection.test.tsx
index b8ab4111a77..c6f0130d1c1 100644
--- a/src/renderer/src/components/right-sidebar/pr-comments-list-selection.test.tsx
+++ b/src/renderer/src/components/right-sidebar/pr-comments-list-selection.test.tsx
@@ -7,44 +7,64 @@ import { createRoot, type Root } from 'react-dom/client'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { TooltipProvider } from '@/components/ui/tooltip'
 
-vi.mock('@/components/ui/dropdown-menu', () => ({
-  DropdownMenu: ({ children }: { children: ReactNode }) => <>{children}</>,
-  DropdownMenuContent: ({ children }: { children: ReactNode }) => <div>{children}</div>,
-  DropdownMenuLabel: ({ children }: { children: ReactNode }) => <div>{children}</div>,
-  DropdownMenuItem: ({
-    children,
-    onSelect
-  }: {
-    children: ReactNode
-    onSelect?: (event: Event) => void
-  }) => (
-    <button
-      type="button"
-      role="menuitem"
-      onClick={() => onSelect?.({ preventDefault: () => {} } as unknown as Event)}
-    >
-      {children}
-    </button>
-  ),
-  DropdownMenuRadioGroup: ({ children }: { children: ReactNode }) => <>{children}</>,
-  DropdownMenuRadioItem: ({
-    children,
-    onSelect
-  }: {
-    children: ReactNode
-    onSelect?: (event: Event) => void
-  }) => (
-    <button
-      type="button"
-      role="menuitemradio"
-      onClick={() => onSelect?.({ preventDefault: () => {} } as unknown as Event)}
-    >
-      {children}
-    </button>
-  ),
-  DropdownMenuSeparator: () => <hr />,
-  DropdownMenuTrigger: ({ children }: { children: ReactNode }) => <>{children}</>
-}))
+vi.mock('@/components/ui/dropdown-menu', () => {
+  // Radix keeps the selection callback on the group, so the mocked items need it too.
+  let onRadioValueChange: ((value: string) => void) | undefined
+  return {
+    DropdownMenu: ({ children }: { children: ReactNode }) => <>{children}</>,
+    DropdownMenuContent: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+    DropdownMenuLabel: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+    DropdownMenuItem: ({
+      children,
+      onSelect
+    }: {
+      children: ReactNode
+      onSelect?: (event: Event) => void
+    }) => (
+      <button
+        type="button"
+        role="menuitem"
+        onClick={() => onSelect?.({ preventDefault: () => {} } as unknown as Event)}
+      >
+        {children}
+      </button>
+    ),
+    DropdownMenuRadioGroup: ({
+      children,
+      onValueChange
+    }: {
+      children: ReactNode
+      onValueChange?: (value: string) => void
+    }) => {
+      onRadioValueChange = onValueChange
+      return <>{children}</>
+    },
+    DropdownMenuRadioItem: ({
+      children,
+      value,
+      onSelect
+    }: {
+      children: ReactNode
+      value?: string
+      onSelect?: (event: Event) => void
+    }) => (
+      <button
+        type="button"
+        role="menuitemradio"
+        onClick={() => {
+          onSelect?.({ preventDefault: () => {} } as unknown as Event)
+          if (value !== undefined) {
+            onRadioValueChange?.(value)
+          }
+        }}
+      >
+        {children}
+      </button>
+    ),
+    DropdownMenuSeparator: () => <hr />,
+    DropdownMenuTrigger: ({ children }: { children: ReactNode }) => <>{children}</>
+  }
+})
 import type { PRComment } from '../../../../shared/types'
 import type { PRCommentGroup } from '../../../../shared/pr-comment-groups'
 import {
@@ -167,6 +187,24 @@ function hasButton(label: string): boolean {
   )
 }
 
+function selectDisplayMode(label: string): void {
+  const item = [...container.querySelectorAll('[role="menuitemradio"]')].find(
+    (candidate) => candidate.textContent === label
+  )
+  if (!item) {
+    throw new Error(`Display mode not found: ${label}`)
+  }
+  act(() => {
+    item.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+  })
+}
+
+function renderedGroupOrder(labels: readonly string[]): string[] {
+  return [...container.querySelectorAll('[data-testid="pr-comment-group"]')].map(
+    (row) => labels.find((label) => row.textContent?.includes(label)) ?? '<unmatched>'
+  )
+}
+
 function clickMenuItem(label: string): void {
   clickButton('More comment actions')
   const menuItem =
@@ -256,12 +294,20 @@ describe('PRCommentsList comment resolution selection', () => {
   it('lets a user queue one eligible comment thread for the agent from the visible row action', () => {
     const onResolveSelectedCommentsWithAI = vi.fn()
     renderList({
+      // Why: distinct timestamps pin thread-1 to the first row under the newest-first grouped order.
       comments: [
-        comment({ id: 1, threadId: 'thread-1', path: 'src/a.ts', isResolved: false }),
+        comment({
+          id: 1,
+          createdAt: '2026-05-15T00:00:00Z',
+          threadId: 'thread-1',
+          path: 'src/a.ts',
+          isResolved: false
+        }),
         comment({
           id: 2,
           author: 'bob',
           body: 'Second thread.',
+          createdAt: '2026-05-14T00:00:00Z',
           threadId: 'thread-2',
           path: 'src/b.ts',
           isResolved: false
@@ -499,3 +545,62 @@ describe('PRCommentsList comment resolution selection', () => {
     expect(hasButton('Send 1 queued comments to AI')).toBe(true)
   })
 })
+
+describe('PRCommentsList comment ordering', () => {
+  const labels = ['Oldest note.', 'Middle note.', 'Newest note.']
+
+  it('reads newest-first in grouped mode and oldest-first in timeline mode', () => {
+    renderList({
+      comments: [
+        comment({ id: 1, body: 'Middle note.', createdAt: '2026-05-14T00:00:00Z' }),
+        comment({ id: 2, body: 'Newest note.', createdAt: '2026-05-15T00:00:00Z' }),
+        comment({ id: 3, body: 'Oldest note.', createdAt: '2026-05-13T00:00:00Z' })
+      ]
+    })
+
+    expect(renderedGroupOrder(labels)).toEqual(['Newest note.', 'Middle note.', 'Oldest note.'])
+
+    selectDisplayMode('Timeline')
+
+    expect(renderedGroupOrder(labels)).toEqual(['Oldest note.', 'Middle note.', 'Newest note.'])
+  })
+
+  it('ranks a replied-to thread by its fresh reply in grouped mode only', () => {
+    const threadLabels = ['Replied thread.', 'Quiet thread.']
+    renderList({
+      comments: [
+        comment({
+          id: 1,
+          body: 'Replied thread.',
+          createdAt: '2026-05-14T00:00:00Z',
+          threadId: 'thread-1',
+          path: 'src/a.ts',
+          isResolved: false
+        }),
+        comment({
+          id: 2,
+          body: 'Quiet thread.',
+          createdAt: '2026-05-13T00:00:00Z',
+          threadId: 'thread-2',
+          path: 'src/b.ts',
+          isResolved: false
+        }),
+        comment({
+          id: 3,
+          body: 'Fresh reply.',
+          createdAt: '2026-05-16T00:00:00Z',
+          threadId: 'thread-1',
+          path: 'src/a.ts',
+          isResolved: false
+        })
+      ]
+    })
+
+    expect(renderedGroupOrder(threadLabels)).toEqual(['Replied thread.', 'Quiet thread.'])
+
+    // Why: timeline ranks by when a thread started, so the quiet older root leads again.
+    selectDisplayMode('Timeline')
+
+    expect(renderedGroupOrder(threadLabels)).toEqual(['Quiet thread.', 'Replied thread.'])
+  })
+})
diff --git a/src/renderer/src/components/right-sidebar/source-control-text-generation-defaults.ts b/src/renderer/src/components/right-sidebar/source-control-text-generation-defaults.ts
index 89212dd6149..08bc9fb6d9d 100644
--- a/src/renderer/src/components/right-sidebar/source-control-text-generation-defaults.ts
+++ b/src/renderer/src/components/right-sidebar/source-control-text-generation-defaults.ts
@@ -21,7 +21,7 @@ function textGenerationRecipeIsConfigured(
   actionId: SourceControlTextActionId,
   recipe: TextGenerationRecipeConfiguration | null | undefined
 ): boolean {
-  if (Object.prototype.hasOwnProperty.call(recipe ?? {}, 'agentId')) {
+  if (Object.hasOwn(recipe ?? {}, 'agentId')) {
     return true
   }
   if (
diff --git a/src/renderer/src/components/right-sidebar/useGitHistoryCommitActions.ts b/src/renderer/src/components/right-sidebar/useGitHistoryCommitActions.ts
index ed943889453..c60c6f1f3e0 100644
--- a/src/renderer/src/components/right-sidebar/useGitHistoryCommitActions.ts
+++ b/src/renderer/src/components/right-sidebar/useGitHistoryCommitActions.ts
@@ -18,6 +18,7 @@ import {
   type SourceControlRowOpenEvent
 } from './source-control-split-open'
 import type { GitHistoryCommitAction } from './GitHistoryCommitContextMenu'
+import { openWorkspaceBrowserTab } from '@/lib/workspace-browser-tab-open'
 
 const EMPTY_BRANCH_CHANGE_ENTRIES: GitBranchChangeEntry[] = []
 
@@ -47,7 +48,6 @@ export function useGitHistoryCommitActions({
 }): GitHistoryCommitActions {
   const openCommitAllDiffs = useAppStore((s) => s.openCommitAllDiffs)
   const openCommitDiff = useAppStore((s) => s.openCommitDiff)
-  const createBrowserTab = useAppStore((s) => s.createBrowserTab)
 
   // Caches each commit's compare result so expanding a commit fetches its files
   // once, and opening a single file (or the combined diff) reuses that same
@@ -202,16 +202,20 @@ export function useGitHistoryCommitActions({
           { sha: item.id }
         )
           .then((url) => {
-            if (url) {
-              createBrowserTab(activeWorktreeId, url, { activate: true })
-            } else {
+            if (!url) {
               toast.error(
                 translate(
                   'auto.components.right.sidebar.SourceControl.04a5d7239b',
                   'This repository has no supported web remote'
                 )
               )
+              return
             }
+            return openWorkspaceBrowserTab({
+              workspaceId: activeWorktreeId,
+              url,
+              intent: { kind: 'url' }
+            })
           })
           .catch(() => {
             toast.error(
@@ -279,7 +283,7 @@ export function useGitHistoryCommitActions({
         promptDelivery: 'submit-after-ready'
       })
     },
-    [activeRepoSettings, activeWorktreeId, copyCommitText, createBrowserTab, worktreePath]
+    [activeRepoSettings, activeWorktreeId, copyCommitText, worktreePath]
   )
 
   return { loadCommitFiles, openHistoryCommitDiff, openCommitFile, handleCommitAction }
diff --git a/src/renderer/src/components/settings/AccountsPane.tsx b/src/renderer/src/components/settings/AccountsPane.tsx
index 81dd540ff5f..c8500b99cfa 100644
--- a/src/renderer/src/components/settings/AccountsPane.tsx
+++ b/src/renderer/src/components/settings/AccountsPane.tsx
@@ -383,12 +383,12 @@ export function AccountsPane({
     useState<CodexRateLimitAccountsState>(emptyCodexAccountsState)
   const [codexAccountsLoaded, setCodexAccountsLoaded] = useState(false)
   const [codexAction, setCodexAction] = useState<
-    'idle' | 'adding' | `reauth:${string}` | `remove:${string}` | `select:${string | 'system'}`
+    'idle' | 'adding' | `reauth:${string}` | `remove:${string}` | `select:${string}`
   >('idle')
   const [claudeAccounts, setClaudeAccounts] =
     useState<ClaudeRateLimitAccountsState>(emptyClaudeAccountsState)
   const [claudeAction, setClaudeAction] = useState<
-    'idle' | 'adding' | `reauth:${string}` | `remove:${string}` | `select:${string | 'system'}`
+    'idle' | 'adding' | `reauth:${string}` | `remove:${string}` | `select:${string}`
   >('idle')
   // Why: capture the account's runtime slot when the dialog opens; the roster
   // can change underneath an open dialog and lose the slot to diff for restarts.
diff --git a/src/renderer/src/components/settings/BrowserProfileRow.tsx b/src/renderer/src/components/settings/BrowserProfileRow.tsx
index 891164d5bd5..a6324661901 100644
--- a/src/renderer/src/components/settings/BrowserProfileRow.tsx
+++ b/src/renderer/src/components/settings/BrowserProfileRow.tsx
@@ -14,6 +14,7 @@ import {
   DropdownMenuSubTrigger,
   DropdownMenuTrigger
 } from '../ui/dropdown-menu'
+import { BrowserCookieImportDisclosure } from '../BrowserCookieImportDisclosure'
 import { useAppStore } from '../../store'
 import { BROWSER_FAMILY_LABELS } from '../../../../shared/constants'
 import { translate } from '@/i18n/i18n'
@@ -80,7 +81,8 @@ export function BrowserProfileRow({
                 value1: browser?.label ?? browserFamily,
                 value2: profile.label
               }
-            )
+            ),
+        result.executionHostLabel
       )
     } else {
       toast.error(result.reason)
@@ -96,7 +98,8 @@ export function BrowserProfileRow({
           'auto.components.settings.BrowserProfileRow.b4c167764d',
           'Imported {{value0}} cookies from file into {{value1}}.',
           { value0: result.summary.importedCookies, value1: profile.label }
-        )
+        ),
+        result.executionHostLabel
       )
     } else if (result.reason !== 'canceled') {
       toast.error(result.reason)
@@ -213,6 +216,7 @@ export function BrowserProfileRow({
             <DropdownMenuItem onSelect={() => void handleImportFromFile()}>
               {translate('auto.components.settings.BrowserProfileRow.ebb78dfd6f', 'From File…')}
             </DropdownMenuItem>
+            <BrowserCookieImportDisclosure />
           </DropdownMenuContent>
         </DropdownMenu>
         {isDefault ? (
diff --git a/src/renderer/src/components/settings/BrowserUseCookieImportStep.tsx b/src/renderer/src/components/settings/BrowserUseCookieImportStep.tsx
index 1332883e4a1..28f6f5221c9 100644
--- a/src/renderer/src/components/settings/BrowserUseCookieImportStep.tsx
+++ b/src/renderer/src/components/settings/BrowserUseCookieImportStep.tsx
@@ -3,6 +3,7 @@ import { toast } from 'sonner'
 import { emitBrowserCookieImportToast } from '@/lib/browser-cookie-import-toast'
 import { cn } from '@/lib/utils'
 import { Button } from '../ui/button'
+import { BrowserCookieImportDisclosure } from '../BrowserCookieImportDisclosure'
 import {
   DropdownMenu,
   DropdownMenuContent,
@@ -58,7 +59,8 @@ export function BrowserUseCookieImportStep({
             value1: browser?.label ?? browserFamily,
             value2: browserProfile ? ` (${browserProfile})` : ''
           }
-        )
+        ),
+        result.executionHostLabel
       )
     } else {
       toast.error(result.reason)
@@ -74,7 +76,8 @@ export function BrowserUseCookieImportStep({
           'auto.components.settings.BrowserUsePane.8f2675c2f3',
           'Imported {{value0}} cookies from file.',
           { value0: result.summary.importedCookies }
-        )
+        ),
+        result.executionHostLabel
       )
     } else if (result.reason !== 'canceled') {
       toast.error(result.reason)
@@ -204,6 +207,7 @@ export function BrowserUseCookieImportStep({
             <DropdownMenuItem onSelect={() => void handleImportFromFile()}>
               {translate('auto.components.settings.BrowserUsePane.be6df68384', 'From File…')}
             </DropdownMenuItem>
+            <BrowserCookieImportDisclosure />
           </DropdownMenuContent>
         </DropdownMenu>
       </div>
diff --git a/src/renderer/src/components/settings/FloatingWorkspacePane.tsx b/src/renderer/src/components/settings/FloatingWorkspacePane.tsx
index acffb2d007c..14ace880d92 100644
--- a/src/renderer/src/components/settings/FloatingWorkspacePane.tsx
+++ b/src/renderer/src/components/settings/FloatingWorkspacePane.tsx
@@ -10,6 +10,7 @@ import { getFloatingWorkspaceSearchEntries } from './floating-workspace-search'
 import { matchesSettingsSearch } from './settings-search'
 import { useAppStore } from '../../store'
 import { translate } from '@/i18n/i18n'
+import { isWebClientLocation } from '@/lib/web-client-location'
 
 type FloatingWorkspacePaneProps = {
   settings: GlobalSettings
@@ -35,6 +36,7 @@ export function FloatingWorkspacePane({
   updateSettings
 }: FloatingWorkspacePaneProps): React.JSX.Element | null {
   const searchQuery = useAppStore((state) => state.settingsSearchQuery)
+  const includeBrowser = !isWebClientLocation()
   const [resolvedFloatingWorkspacePath, setResolvedFloatingWorkspacePath] = useState('')
 
   useEffect(() => {
@@ -72,7 +74,7 @@ export function FloatingWorkspacePane({
     resolvedFloatingWorkspacePath
   })
 
-  if (!matchesSettingsSearch(searchQuery, getFloatingWorkspaceSearchEntries())) {
+  if (!matchesSettingsSearch(searchQuery, getFloatingWorkspaceSearchEntries({ includeBrowser }))) {
     return null
   }
 
@@ -91,7 +93,7 @@ export function FloatingWorkspacePane({
           'floating workspace',
           'floating terminal',
           'terminal',
-          'browser',
+          ...(includeBrowser ? ['browser'] : []),
           'markdown',
           'note',
           'global',
diff --git a/src/renderer/src/components/settings/GitPane.tsx b/src/renderer/src/components/settings/GitPane.tsx
index ccf1befdeb7..72eb70f15c2 100644
--- a/src/renderer/src/components/settings/GitPane.tsx
+++ b/src/renderer/src/components/settings/GitPane.tsx
@@ -322,55 +322,6 @@ export function GitPane({
         branchPromptDiscardSignal={branchPromptDiscardSignal}
         settingsSearchQuery={searchQuery}
       />
-    ) : null,
-    matchesSettingsSearch(searchQuery, {
-      title: translate('auto.components.settings.GitPane.e02ea23a32', 'Orca Attribution'),
-      description: translate(
-        'auto.components.settings.GitPane.d2eede4c54',
-        'Add Orca attribution to commits, PRs, and issues.'
-      ),
-      keywords: [
-        translate('auto.components.settings.GitPane.32dca11189', 'github'),
-        translate('auto.components.settings.GitPane.895d3f70b8', 'gh'),
-        translate('auto.components.settings.GitPane.b4ef5428a7', 'pr'),
-        translate('auto.components.settings.GitPane.afada55042', 'issue'),
-        translate('auto.components.settings.GitPane.9838c921ed', 'co-author'),
-        translate('auto.components.settings.GitPane.b5f534717a', 'coauthored'),
-        translate('auto.components.settings.GitPane.b9b5771bb1', 'attribution'),
-        translate('auto.components.settings.GitPane.e71ce09c42', 'orca')
-      ]
-    }) ? (
-      <SearchableSetting
-        key="github-attribution"
-        title={translate('auto.components.settings.GitPane.e02ea23a32', 'Orca Attribution')}
-        description={translate(
-          'auto.components.settings.GitPane.d2eede4c54',
-          'Add Orca attribution to commits, PRs, and issues.'
-        )}
-        keywords={['github', 'gh', 'pr', 'issue', 'co-author', 'coauthored', 'attribution', 'orca']}
-        className="flex items-center justify-between gap-4 py-2"
-      >
-        <div className="space-y-0.5">
-          <Label>
-            {translate('auto.components.settings.GitPane.e02ea23a32', 'Orca Attribution')}
-          </Label>
-          <p className="text-xs text-muted-foreground">
-            {translate(
-              'auto.components.settings.GitPane.d2eede4c54',
-              'Add Orca attribution to commits, PRs, and issues.'
-            )}
-          </p>
-        </div>
-        <Switch
-          aria-label={translate('auto.components.settings.GitPane.e02ea23a32', 'Orca Attribution')}
-          checked={settings.enableGitHubAttribution}
-          onCheckedChange={(checked) =>
-            updateSettings({
-              enableGitHubAttribution: checked
-            })
-          }
-        />
-      </SearchableSetting>
     ) : null
   ].filter(Boolean)
 
diff --git a/src/renderer/src/components/settings/QuickCommandsList.tsx b/src/renderer/src/components/settings/QuickCommandsList.tsx
index ec377677ee5..3a0042b32a8 100644
--- a/src/renderer/src/components/settings/QuickCommandsList.tsx
+++ b/src/renderer/src/components/settings/QuickCommandsList.tsx
@@ -1,4 +1,4 @@
-import { Check, Copy, Pencil, Trash2 } from 'lucide-react'
+import { Check, Copy, Pencil, TerminalSquare, Trash2 } from 'lucide-react'
 import type {
   Repo,
   TerminalQuickCommand,
@@ -29,6 +29,15 @@ function getScopeLabel(
   return repo ? getQuickCommandRepoLabel(repo) : 'Missing project'
 }
 
+function getRunModeLabel(command: TerminalQuickCommand): string {
+  if (isTerminalAgentQuickCommand(command)) {
+    return translate('auto.components.settings.QuickCommandsPane.4ccc63da87', 'Agent')
+  }
+  return command.appendEnter
+    ? translate('auto.components.settings.QuickCommandsPane.9b3e338d62', 'Enter')
+    : translate('auto.components.settings.QuickCommandsPane.9fcfc29519', 'Insert')
+}
+
 function QuickCommandRow({
   command,
   repoById,
@@ -43,6 +52,7 @@ function QuickCommandRow({
   const scope = getTerminalQuickCommandScope(command)
   const body = getTerminalQuickCommandBody(command)
   const { canCopy, copyText, status } = useClipboardTextCopyFeedback(body)
+  const commandName = command.label || 'quick command'
 
   const copyLabel =
     status === 'copied'
@@ -51,19 +61,24 @@ function QuickCommandRow({
         ? translate('auto.components.settings.QuickCommandsPane.53b17a4b1b', "Couldn't copy")
         : canCopy
           ? translate('auto.components.settings.QuickCommandsPane.a9a564b7e7', 'Copy {{value0}}', {
-              value0: command.label || 'quick command'
+              value0: commandName
             })
           : translate('auto.components.settings.QuickCommandsPane.69a1441a21', 'Nothing to copy')
+  const editLabel = translate(
+    'auto.components.settings.QuickCommandsPane.7d90fd5299',
+    'Edit {{value0}}',
+    { value0: commandName }
+  )
 
   return (
-    <div className="flex items-center gap-3 rounded-md border border-border/60 bg-background px-3 py-2 shadow-xs">
+    <div className="group/qc flex items-center gap-3 rounded-md px-2 py-2.5 transition-colors hover:bg-accent/60 focus-within:bg-accent/60">
       <div className="min-w-0 flex-1">
         <div className="flex min-w-0 items-center gap-2">
           <div className="truncate text-sm font-medium">
             {command.label ||
               translate('auto.components.settings.QuickCommandsPane.2bb9e38e93', 'Untitled')}
           </div>
-          <Badge variant="outline" className="max-w-44 gap-1.5">
+          <Badge variant="outline" className="max-w-44 gap-1.5 text-[11px] font-normal">
             {scope.type === 'repo' ? (
               <>
                 <RepoBadgeMark color={repoById.get(scope.repoId)?.badgeColor} />
@@ -74,9 +89,9 @@ function QuickCommandRow({
             )}
           </Badge>
         </div>
-        <div className="flex min-w-0 items-center gap-1.5 text-xs text-foreground/80">
+        <div className="mt-0.5 flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground">
           {isTerminalAgentQuickCommand(command) ? (
-            <span className="shrink-0 text-muted-foreground">
+            <span className="shrink-0">
               <AgentIcon agent={command.agent} size={12} />
             </span>
           ) : null}
@@ -91,59 +106,95 @@ function QuickCommandRow({
           </span>
         </div>
       </div>
-      <div className="shrink-0 text-[11px] font-medium text-foreground/75">
-        {isTerminalAgentQuickCommand(command)
-          ? translate('auto.components.settings.QuickCommandsPane.4ccc63da87', 'Agent')
-          : command.appendEnter
-            ? translate('auto.components.settings.QuickCommandsPane.9b3e338d62', 'Enter')
-            : translate('auto.components.settings.QuickCommandsPane.9fcfc29519', 'Insert')}
+      <div className="w-12 shrink-0 text-right text-[11px] text-muted-foreground">
+        {getRunModeLabel(command)}
+      </div>
+      {/* Why can-hover: touch devices never hover, so the actions must stay visible there. */}
+      <div className="flex shrink-0 items-center gap-0.5 transition-opacity can-hover:opacity-0 group-hover/qc:opacity-100 group-focus-within/qc:opacity-100">
+        <Button
+          type="button"
+          variant="ghost"
+          size="icon-sm"
+          aria-label={editLabel}
+          title={editLabel}
+          onClick={() => onEdit(command)}
+        >
+          <Pencil />
+        </Button>
+        <Button
+          type="button"
+          variant="ghost"
+          size="icon-sm"
+          disabled={!canCopy}
+          aria-label={copyLabel}
+          title={copyLabel}
+          onClick={() => void copyText()}
+          className={cn(
+            status === 'copied' && 'text-status-success',
+            status === 'failed' && 'text-destructive'
+          )}
+        >
+          {status === 'copied' ? <Check /> : <Copy />}
+        </Button>
+        <Button
+          type="button"
+          variant="ghost"
+          size="icon-sm"
+          aria-label={translate(
+            'auto.components.settings.QuickCommandsPane.8764c6e9e4',
+            'Remove {{value0}}',
+            { value0: commandName }
+          )}
+          onClick={() => onRemove(command)}
+          className="text-muted-foreground hover:text-destructive"
+        >
+          <Trash2 />
+        </Button>
+      </div>
+    </div>
+  )
+}
+
+function QuickCommandsEmptyState({
+  hasCommands,
+  hasQuery
+}: {
+  hasCommands: boolean
+  hasQuery: boolean
+}): React.JSX.Element {
+  if (hasCommands) {
+    return (
+      <div className="px-2 py-10 text-center text-sm text-muted-foreground">
+        {hasQuery
+          ? translate(
+              'auto.components.settings.QuickCommandsList.noSearchMatches',
+              'No commands match this search.'
+            )
+          : translate(
+              'auto.components.settings.QuickCommandsPane.3eb9897ab0',
+              'No commands in the selected scopes.'
+            )}
+      </div>
+    )
+  }
+  // Why no action here: the toolbar's Add Command sits directly above.
+  return (
+    <div className="flex flex-col items-center gap-3 px-2 py-10 text-center">
+      <TerminalSquare className="size-7 text-muted-foreground/50" />
+      <div className="space-y-1">
+        <p className="text-sm text-muted-foreground">
+          {translate(
+            'auto.components.settings.QuickCommandsPane.38d61927e6',
+            'No quick commands saved.'
+          )}
+        </p>
+        <p className="text-xs text-muted-foreground/80">
+          {translate(
+            'auto.components.settings.QuickCommandsPane.c36912efd5',
+            'Run them from the Quick Commands button in the tab bar, or right-click inside any terminal.'
+          )}
+        </p>
       </div>
-      <Button
-        type="button"
-        variant="ghost"
-        size="icon-sm"
-        disabled={!canCopy}
-        aria-label={copyLabel}
-        title={copyLabel}
-        onClick={() => void copyText()}
-        className={cn(
-          status === 'copied' && 'text-status-success',
-          status === 'failed' && 'text-destructive'
-        )}
-      >
-        {status === 'copied' ? <Check /> : <Copy />}
-      </Button>
-      <Button
-        type="button"
-        variant="ghost"
-        size="icon-sm"
-        aria-label={translate(
-          'auto.components.settings.QuickCommandsPane.7d90fd5299',
-          'Edit {{value0}}',
-          {
-            value0: command.label || 'quick command'
-          }
-        )}
-        onClick={() => onEdit(command)}
-      >
-        <Pencil />
-      </Button>
-      <Button
-        type="button"
-        variant="ghost"
-        size="icon-sm"
-        aria-label={translate(
-          'auto.components.settings.QuickCommandsPane.8764c6e9e4',
-          'Remove {{value0}}',
-          {
-            value0: command.label || 'quick command'
-          }
-        )}
-        onClick={() => onRemove(command)}
-        className="text-muted-foreground hover:text-destructive"
-      >
-        <Trash2 />
-      </Button>
     </div>
   )
 }
@@ -151,43 +202,32 @@ function QuickCommandRow({
 export function QuickCommandsList({
   commands,
   visibleCommands,
+  hasQuery,
   repoById,
   onEdit,
   onRemove
 }: {
   commands: TerminalQuickCommand[]
   visibleCommands: TerminalQuickCommand[]
+  hasQuery: boolean
   repoById: Map<string, Pick<Repo, 'displayName' | 'path' | 'badgeColor'>>
   onEdit: (command: TerminalQuickCommand) => void
   onRemove: (command: TerminalQuickCommand) => void
 }): React.JSX.Element {
+  if (visibleCommands.length === 0) {
+    return <QuickCommandsEmptyState hasCommands={commands.length > 0} hasQuery={hasQuery} />
+  }
   return (
-    <div className="overflow-hidden rounded-lg border border-border/50 bg-muted/20">
-      {visibleCommands.length === 0 ? (
-        <div className="px-3 py-6 text-sm text-muted-foreground">
-          {commands.length === 0
-            ? translate(
-                'auto.components.settings.QuickCommandsPane.38d61927e6',
-                'No quick commands saved.'
-              )
-            : translate(
-                'auto.components.settings.QuickCommandsPane.3eb9897ab0',
-                'No commands in the selected scopes.'
-              )}
-        </div>
-      ) : (
-        <div className="max-h-[60vh] space-y-2 overflow-y-auto p-2 scrollbar-sleek">
-          {visibleCommands.map((command) => (
-            <QuickCommandRow
-              key={command.id}
-              command={command}
-              repoById={repoById}
-              onEdit={onEdit}
-              onRemove={onRemove}
-            />
-          ))}
-        </div>
-      )}
+    <div className="-mx-2 divide-y divide-border/50">
+      {visibleCommands.map((command) => (
+        <QuickCommandRow
+          key={command.id}
+          command={command}
+          repoById={repoById}
+          onEdit={onEdit}
+          onRemove={onRemove}
+        />
+      ))}
     </div>
   )
 }
diff --git a/src/renderer/src/components/settings/QuickCommandsPane.tsx b/src/renderer/src/components/settings/QuickCommandsPane.tsx
index f7f703e7ac1..a4f1ea85fe4 100644
--- a/src/renderer/src/components/settings/QuickCommandsPane.tsx
+++ b/src/renderer/src/components/settings/QuickCommandsPane.tsx
@@ -1,26 +1,25 @@
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react'
-import { Plus } from 'lucide-react'
 import type { GlobalSettings, TerminalQuickCommand } from '../../../../shared/types'
 import { getTerminalQuickCommandScope } from '../../../../shared/terminal-quick-commands'
 import {
   createTerminalQuickCommandDraft,
   TerminalQuickCommandDialog
 } from '@/components/terminal-quick-commands/TerminalQuickCommandDialog'
+import { searchTerminalQuickCommands } from '@/lib/terminal-quick-command-search'
 import { useAppStore } from '../../store'
 import { Button } from '../ui/button'
-import { Label } from '../ui/label'
 import { useConfirmationDialog } from '@/components/confirmation-dialog-context'
 import { getSettingOwnershipSummary } from './setting-ownership'
 import { translate } from '@/i18n/i18n'
 import { QuickCommandsList } from './QuickCommandsList'
-import { GLOBAL_SCOPE_KEY, QuickCommandsScopeFilter } from './QuickCommandsScopeFilter'
+import { QuickCommandsToolbar } from './QuickCommandsToolbar'
+import { GLOBAL_SCOPE_KEY } from './QuickCommandsScopeFilter'
 import {
   getRepoExecutionHostId,
   LOCAL_EXECUTION_HOST_ID,
   parseExecutionHostId,
   type ExecutionHostId
 } from '../../../../shared/execution-host'
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '../ui/select'
 import {
   getTerminalQuickCommandHostOptions,
   shouldShowTerminalQuickCommandHostOwnership
@@ -130,6 +129,7 @@ export function QuickCommandsPane({
   // automatically rather than being silently excluded.
   const [scopeSelection, setScopeSelection] = useState<ReadonlySet<string> | null>(null)
   const [scopePopoverOpen, setScopePopoverOpen] = useState(false)
+  const [query, setQuery] = useState('')
 
   const availableHostId = getAvailableQuickCommandHostId(selectedHostId, hostOptions)
   const editorHostIsCurrent =
@@ -164,7 +164,7 @@ export function QuickCommandsPane({
   const effectiveSelection: ReadonlySet<string> = scopeSelection ?? allScopeKeys
   const showAll = scopeSelection === null
 
-  const visibleCommands = commands.filter((command) => {
+  const scopedCommands = commands.filter((command) => {
     const scope = getTerminalQuickCommandScope(command)
     if (showAll) {
       return true
@@ -174,6 +174,7 @@ export function QuickCommandsPane({
     }
     return effectiveSelection.has(scope.repoId)
   })
+  const visibleCommands = searchTerminalQuickCommands(scopedCommands, query)
 
   const createDraftForCurrentFilter = useCallback((): TerminalQuickCommand => {
     // Why: when the user has narrowed to a single repo scope, the natural
@@ -273,68 +274,32 @@ export function QuickCommandsPane({
     void useAppStore.getState().deleteTerminalQuickCommand(selectedHostId, command.id)
   }
 
-  return (
-    <div className="space-y-3">
-      <div className="flex items-center justify-between gap-3 py-2">
-        <div className="space-y-1">
-          <Label>
-            {translate('auto.components.settings.QuickCommandsPane.f91b649324', 'Saved Commands')}
-          </Label>
-          <p className="text-xs text-muted-foreground">
-            {shouldShowTerminalQuickCommandHostOwnership(hostOptions)
-              ? ownership.description
-              : translate(
-                  'auto.components.settings.settingOwnership.terminalQuickCommands',
-                  'Commands are saved on this client, then scoped globally or to a project setup so they run from the selected terminal context.'
-                )}
-          </p>
-        </div>
-        <Button
-          type="button"
-          variant="outline"
-          size="sm"
-          disabled={!canManageSelectedHost}
-          onClick={() =>
-            setEditor({
-              mode: 'add',
-              command: createDraftForCurrentFilter(),
-              connectionGeneration: selectedRuntimeConnectionGeneration,
-              hostId: selectedHostId
-            })
-          }
-        >
-          <Plus />
-          {translate('auto.components.settings.QuickCommandsPane.5aacc8f7dc', 'Add Command')}
-        </Button>
-      </div>
+  const openAddDialog = (): void =>
+    setEditor({
+      mode: 'add',
+      command: createDraftForCurrentFilter(),
+      connectionGeneration: selectedRuntimeConnectionGeneration,
+      hostId: selectedHostId
+    })
 
+  return (
+    <div className="space-y-4">
       {shouldShowTerminalQuickCommandHostOwnership(hostOptions) ? (
-        <div className="space-y-2">
-          <Label htmlFor="quick-command-storage-host">
-            {translate('auto.components.settings.QuickCommandsPane.89f7e57fcc', 'Saved on')}
-          </Label>
-          <Select
-            value={selectedHostId}
-            onValueChange={(value) => {
-              setSelectedHostId(value as ExecutionHostId)
-              setScopeSelection(null)
-            }}
-          >
-            <SelectTrigger id="quick-command-storage-host" size="sm" className="w-56">
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              {hostOptions.map((host) => (
-                <SelectItem key={host.id} value={host.id}>
-                  {host.label}
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        </div>
+        <p className="text-xs text-muted-foreground">{ownership.description}</p>
       ) : null}
 
-      <QuickCommandsScopeFilter
+      <QuickCommandsToolbar
+        query={query}
+        setQuery={setQuery}
+        hostOptions={hostOptions}
+        showHostSelect={shouldShowTerminalQuickCommandHostOwnership(hostOptions)}
+        selectedHostId={selectedHostId}
+        onHostChange={(hostId) => {
+          setSelectedHostId(hostId)
+          setScopeSelection(null)
+        }}
+        canAdd={canManageSelectedHost}
+        onAdd={openAddDialog}
         repos={hostRepos}
         effectiveSelection={effectiveSelection}
         showAll={showAll}
@@ -408,6 +373,7 @@ export function QuickCommandsPane({
           <QuickCommandsList
             commands={commands}
             visibleCommands={visibleCommands}
+            hasQuery={query.trim().length > 0}
             repoById={repoById}
             onEdit={(command) =>
               setEditor({
@@ -428,6 +394,7 @@ export function QuickCommandsPane({
           mode={editor.mode}
           command={editor.command}
           repos={hostRepos}
+          defaultAdvancedOpen
           onOpenChange={(open) => !open && setEditor(null)}
           onSave={saveCommand}
         />
diff --git a/src/renderer/src/components/settings/QuickCommandsToolbar.tsx b/src/renderer/src/components/settings/QuickCommandsToolbar.tsx
new file mode 100644
index 00000000000..65e034eeb3f
--- /dev/null
+++ b/src/renderer/src/components/settings/QuickCommandsToolbar.tsx
@@ -0,0 +1,116 @@
+import type { Dispatch, SetStateAction } from 'react'
+import { Plus, Search } from 'lucide-react'
+import type { Repo } from '../../../../shared/types'
+import type { ExecutionHostId } from '../../../../shared/execution-host'
+import { Button } from '../ui/button'
+import { Input } from '../ui/input'
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '../ui/select'
+import { translate } from '@/i18n/i18n'
+import { QuickCommandsScopeFilter } from './QuickCommandsScopeFilter'
+
+type QuickCommandsToolbarProps = {
+  query: string
+  setQuery: (query: string) => void
+  hostOptions: readonly { id: ExecutionHostId; label: string }[]
+  showHostSelect: boolean
+  selectedHostId: ExecutionHostId
+  onHostChange: (hostId: ExecutionHostId) => void
+  canAdd: boolean
+  onAdd: () => void
+  repos: readonly Repo[]
+  effectiveSelection: ReadonlySet<string>
+  showAll: boolean
+  scopePopoverOpen: boolean
+  setScopePopoverOpen: Dispatch<SetStateAction<boolean>>
+  handleSelectAll: () => void
+  toggleScope: (key: string) => void
+}
+
+export function QuickCommandsToolbar({
+  query,
+  setQuery,
+  hostOptions,
+  showHostSelect,
+  selectedHostId,
+  onHostChange,
+  canAdd,
+  onAdd,
+  repos,
+  effectiveSelection,
+  showAll,
+  scopePopoverOpen,
+  setScopePopoverOpen,
+  handleSelectAll,
+  toggleScope
+}: QuickCommandsToolbarProps): React.JSX.Element {
+  const searchLabel = translate(
+    'auto.components.settings.QuickCommandsToolbar.searchLabel',
+    'Search commands'
+  )
+
+  return (
+    <div className="flex flex-wrap items-center gap-2">
+      <div className="relative min-w-52 flex-1">
+        <Search className="pointer-events-none absolute top-1/2 left-2.5 size-3.5 -translate-y-1/2 text-muted-foreground" />
+        <Input
+          value={query}
+          onChange={(event) => setQuery(event.target.value)}
+          placeholder={searchLabel}
+          aria-label={searchLabel}
+          className="h-8 pl-8 text-xs"
+        />
+      </div>
+
+      <QuickCommandsScopeFilter
+        repos={repos}
+        effectiveSelection={effectiveSelection}
+        showAll={showAll}
+        scopePopoverOpen={scopePopoverOpen}
+        setScopePopoverOpen={setScopePopoverOpen}
+        handleSelectAll={handleSelectAll}
+        toggleScope={toggleScope}
+      />
+
+      {showHostSelect ? (
+        <Select
+          value={selectedHostId}
+          onValueChange={(value) => onHostChange(value as ExecutionHostId)}
+        >
+          <SelectTrigger
+            id="quick-command-storage-host"
+            size="sm"
+            aria-label={translate(
+              'auto.components.settings.QuickCommandsPane.89f7e57fcc',
+              'Saved on'
+            )}
+            className="text-xs"
+          >
+            <span className="text-muted-foreground">
+              {translate('auto.components.settings.QuickCommandsPane.89f7e57fcc', 'Saved on')}
+            </span>
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            {hostOptions.map((host) => (
+              <SelectItem key={host.id} value={host.id}>
+                {host.label}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+      ) : null}
+
+      <Button
+        type="button"
+        variant="outline"
+        size="sm"
+        disabled={!canAdd}
+        onClick={onAdd}
+        className="ml-auto"
+      >
+        <Plus />
+        {translate('auto.components.settings.QuickCommandsPane.5aacc8f7dc', 'Add Command')}
+      </Button>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/settings/Settings.tsx b/src/renderer/src/components/settings/Settings.tsx
index 393f70a6b35..cf07ff934cd 100644
--- a/src/renderer/src/components/settings/Settings.tsx
+++ b/src/renderer/src/components/settings/Settings.tsx
@@ -1464,7 +1464,7 @@ function Settings(): React.JSX.Element {
                   )}
                   description={translate(
                     'auto.components.settings.Settings.cfa34f4465',
-                    'Branch naming, base refs, attribution, and Git AI Author.'
+                    'Branch naming, base refs, and Git AI Author.'
                   )}
                   searchEntries={getSectionSearchEntries('git')}
                   forceVisible={hasUnsavedSourceControlAiPromptChanges}
diff --git a/src/renderer/src/components/settings/SettingsConstants.ts b/src/renderer/src/components/settings/SettingsConstants.ts
index 260d8b48971..f129bea3265 100644
--- a/src/renderer/src/components/settings/SettingsConstants.ts
+++ b/src/renderer/src/components/settings/SettingsConstants.ts
@@ -11,7 +11,7 @@ export {
 } from '../../../../shared/ui-zoom-level'
 
 export function zoomLevelToPercent(level: number): number {
-  return Math.round(100 * Math.pow(1.2, level))
+  return Math.round(100 * 1.2 ** level)
 }
 
 export function mergeFontSuggestions(
diff --git a/src/renderer/src/components/settings/ShortcutsPane.tsx b/src/renderer/src/components/settings/ShortcutsPane.tsx
index 8c8b2eb2222..97d5a553163 100644
--- a/src/renderer/src/components/settings/ShortcutsPane.tsx
+++ b/src/renderer/src/components/settings/ShortcutsPane.tsx
@@ -1,4 +1,5 @@
 import React, { useEffect, useMemo, useState } from 'react'
+import { useShallow } from 'zustand/react/shallow'
 import {
   findKeybindingConflictsForDefinitions,
   formatKeybindingList,
@@ -14,22 +15,12 @@ import { EMPTY_DISABLED_TUI_AGENTS } from './shortcut-groups'
 import { useAppStore } from '../../store'
 import { KeybindingsFileActions } from './KeybindingsFileActions'
 import { SettingsSubsectionHeader } from './SettingsFormControls'
-import { getShortcutTerminalStatus } from './shortcut-terminal-status'
 import {
   hasCommonBindingOverride,
-  hasOwnBindingOverride,
   removeBindingOverride,
   sameBindings
 } from './keybinding-override-edits'
-import {
-  buildShortcutGlobalSearchMatcher,
-  matchesShortcutFilter,
-  matchesShortcutLocalSearch,
-  normalizeShortcutLocalSearchQuery,
-  ShortcutFilterRail,
-  type ShortcutFilter,
-  type ShortcutRowsByGroup
-} from './ShortcutFilterRail'
+import { ShortcutFilterRail, type ShortcutFilter } from './ShortcutFilterRail'
 import { ShortcutRowsList } from './ShortcutRowsList'
 import { ShortcutTerminalPolicyControl } from './ShortcutTerminalPolicyControl'
 import { getTerminalShortcutPolicySearchEntry } from './shortcuts-search'
@@ -45,6 +36,8 @@ import { useMountedRef } from '@/hooks/useMountedRef'
 import { translate } from '@/i18n/i18n'
 import { useEditablePluginCommands } from '@/store/plugin-panels'
 import { buildShortcutDefinitionCatalog } from './shortcut-definition-catalog'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
+import { buildShortcutRowVisibility } from './shortcut-row-visibility'
 
 const isMac = navigator.userAgent.includes('Mac')
 const platform: NodeJS.Platform = isMac
@@ -68,23 +61,28 @@ export function ShortcutsPane(): React.JSX.Element {
   const resetKeybindingOverride = useAppStore((state) => state.resetKeybindingOverride)
   const disableKeybindingAction = useAppStore((state) => state.disableKeybindingAction)
   const pluginCommands = useEditablePluginCommands()
+  const [managedBrowserCreationEnabled, mobileEmulatorCreationEnabled] = useAppStore(
+    useShallow((state) => {
+      const policy = getClientCreationActionPolicy(state, state.activeWorktreeId)
+      return [
+        policy['managed-browser'].state === 'enabled',
+        policy['mobile-emulator'].state === 'enabled'
+      ] as const
+    })
+  )
   const mountedRef = useMountedRef()
   const [errors, setErrors] = useState<Partial<Record<KeybindingActionId, string>>>({})
   const [recordingActionId, setRecordingActionId] = useState<KeybindingActionId | null>(null)
-  // Which binding index of the recording action is being captured. Equals the
-  // effective length when capturing a brand-new (appended) binding.
+  // The effective length targets a new appended binding.
   const [recordingBindingIndex, setRecordingBindingIndex] = useState<number | null>(null)
-  // Bindings an action had right before it was disabled, so "Enable" can restore
-  // them in one click instead of forcing a reset-to-default.
+  // Preserve disabled bindings so Enable can restore them.
   const [disableMemory, setDisableMemory] = useState<Partial<Record<KeybindingActionId, string[]>>>(
     {}
   )
   const [shortcutQuery, setShortcutQuery] = useState('')
   const [shortcutFilter, setShortcutFilter] = useState<ShortcutFilter>('all')
 
-  // Why: tell the main process to suspend global shortcut dispatch while any row
-  // is recording, so the captured chord lands in the editor instead of firing.
-  // One source of truth here avoids races between per-row recorder effects.
+  // Why: suspend global dispatch so a captured chord reaches the editor.
   useEffect(() => {
     window.api.ui.setShortcutRecorderFocused(recordingActionId !== null)
     return () => window.api.ui.setShortcutRecorderFocused(false)
@@ -110,55 +108,31 @@ export function ShortcutsPane(): React.JSX.Element {
     const definition = definitionForAction(actionId)
     return definition ? getEffectiveKeybindingsForDefinition(definition, platform, overrides) : []
   }
-  const shortcutGroups = useMemo<ShortcutRowsByGroup[]>(
+  const { filterCounts, shortcutRows, visibleShortcutCount, visibleShortcutGroups } = useMemo(
     () =>
-      groups.map((group) => ({
-        title: group.title,
-        rows: group.items.map((item) => {
-          const effective = getEffectiveKeybindingsForDefinition(item, platform, keybindings)
-          const modified = hasOwnBindingOverride(keybindings, item.id)
-          const warnings = conflictByAction.get(item.id) ?? []
-          return {
-            item,
-            groupTitle: group.title,
-            effective,
-            modified,
-            warnings,
-            terminalStatus: getShortcutTerminalStatus(
-              item,
-              terminalShortcutPolicy,
-              effective.length > 0
-            )
-          }
-        })
-      })),
-    [conflictByAction, groups, keybindings, terminalShortcutPolicy]
-  )
-  const shortcutSearchQuery = normalizeShortcutLocalSearchQuery(shortcutQuery)
-  const shortcutRows = shortcutGroups.flatMap((group) => group.rows)
-  const matchesShortcutGlobalSearch = buildShortcutGlobalSearchMatcher(shortcutRows, searchQuery)
-  const matchesShortcutSearch = (row: ShortcutRowsByGroup['rows'][number]): boolean =>
-    shortcutSearchQuery !== null &&
-    matchesShortcutGlobalSearch(row) &&
-    matchesShortcutLocalSearch(row, shortcutSearchQuery, platform)
-  const baseVisibleRows = shortcutRows.filter((row) => matchesShortcutSearch(row))
-  const filterCounts: Record<ShortcutFilter, number> = {
-    all: baseVisibleRows.length,
-    modified: baseVisibleRows.filter((row) => row.modified).length,
-    unassigned: baseVisibleRows.filter((row) => row.effective.length === 0).length,
-    conflicts: baseVisibleRows.filter((row) => row.warnings.length > 0).length
-  }
-  const visibleShortcutGroups = shortcutGroups
-    .map((group) => ({
-      title: group.title,
-      rows: group.rows.filter(
-        (row) => matchesShortcutSearch(row) && matchesShortcutFilter(row, shortcutFilter)
-      )
-    }))
-    .filter((group) => group.rows.length > 0)
-  const visibleShortcutCount = visibleShortcutGroups.reduce(
-    (sum, group) => sum + group.rows.length,
-    0
+      buildShortcutRowVisibility({
+        groups,
+        keybindings,
+        conflictByAction,
+        terminalShortcutPolicy,
+        platform,
+        managedBrowserCreationEnabled,
+        mobileEmulatorCreationEnabled,
+        settingsSearchQuery: searchQuery,
+        shortcutQuery,
+        shortcutFilter
+      }),
+    [
+      conflictByAction,
+      groups,
+      keybindings,
+      managedBrowserCreationEnabled,
+      mobileEmulatorCreationEnabled,
+      searchQuery,
+      shortcutFilter,
+      shortcutQuery,
+      terminalShortcutPolicy
+    ]
   )
 
   const saveBindings = async (
@@ -236,8 +210,7 @@ export function ShortcutsPane(): React.JSX.Element {
       return
     }
 
-    // Edit just the targeted binding (or append a new one) instead of replacing
-    // the whole list, so an action's other bindings survive the capture.
+    // Preserve sibling bindings when editing or appending one chord.
     const current = effectiveBindingsForAction(actionId)
     const next =
       recordingBindingIndex === null || recordingBindingIndex >= current.length
@@ -290,8 +263,7 @@ export function ShortcutsPane(): React.JSX.Element {
   }
 
   const clearRecordingForAction = (actionId: KeybindingActionId): void => {
-    // Why: disable/reset are final shortcut edits; the next keypress must not
-    // be captured into the shortcut the user just removed or restored.
+    // Why: final edits must not leave the recorder armed.
     if (recordingActionId === actionId) {
       setRecordingBindingIndex(null)
     }
@@ -367,9 +339,7 @@ export function ShortcutsPane(): React.JSX.Element {
           />
 
           <ShortcutRowsList
-            // overflow-x-hidden is explicit: overflow-y-auto alone makes the
-            // browser compute overflow-x to auto, which produced the phantom
-            // horizontal scroll when long edit-time content popped in.
+            // Why: overflow-y-auto otherwise creates a phantom horizontal scrollbar.
             className="min-h-0 min-w-0 flex-1 overflow-x-hidden overflow-y-auto pr-1 scrollbar-sleek"
             groups={visibleShortcutGroups}
             platform={platform}
diff --git a/src/renderer/src/components/settings/VoicePane.test.tsx b/src/renderer/src/components/settings/VoicePane.test.tsx
index 890d971656e..84f6bbd5393 100644
--- a/src/renderer/src/components/settings/VoicePane.test.tsx
+++ b/src/renderer/src/components/settings/VoicePane.test.tsx
@@ -253,4 +253,74 @@ describe('VoicePane', () => {
 
     expect(recordFeatureInteraction).not.toHaveBeenCalled()
   })
+
+  it('merges an in-flight voice write onto the newest settings, not the render-time snapshot', async () => {
+    const updateSettings = vi.fn()
+    let resolveClear: () => void = () => {}
+    const clearing = new Promise<{ configured: boolean }>((resolve) => {
+      resolveClear = () => resolve({ configured: false })
+    })
+    useAppStoreMock.mockImplementation((selector: (state: Record<string, unknown>) => unknown) =>
+      selector({
+        modelStates: [],
+        refreshModelStates: vi.fn(),
+        markFeatureTipsSeen: vi.fn(),
+        recordFeatureInteraction: vi.fn()
+      })
+    )
+    useShortcutLabelMock.mockReturnValue('Ctrl+Shift+Y')
+    installWindowApi(vi.fn(async () => deniedMicrophoneResult))
+    window.api.speech.getOpenAiApiKeyStatus = vi.fn(async () => ({ configured: true }))
+    window.api.speech.clearOpenAiApiKey = vi.fn(() => clearing)
+
+    const settingsWithKey = (enabled: boolean): GlobalSettings =>
+      ({
+        voice: {
+          ...getDefaultVoiceSettings(),
+          enabled,
+          openAiApiKeyConfigured: true,
+          microphoneDeviceId: 'usb-mic',
+          microphoneDeviceLabel: 'USB Microphone'
+        }
+      }) as GlobalSettings
+
+    const container = document.createElement('div')
+    document.body.appendChild(container)
+    const root = createRoot(container)
+    await act(async () => {
+      root.render(<VoicePane settings={settingsWithKey(true)} updateSettings={updateSettings} />)
+    })
+
+    const disconnect = container.querySelector<HTMLButtonElement>(
+      'button[aria-label="Disconnect OpenAI API key"]'
+    )
+    if (!disconnect) {
+      throw new Error('Disconnect OpenAI API key button was not rendered')
+    }
+    await act(async () => {
+      disconnect.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    // The user turns dictation off while the clear-key IPC is still in flight.
+    await act(async () => {
+      root.render(<VoicePane settings={settingsWithKey(false)} updateSettings={updateSettings} />)
+    })
+
+    await act(async () => {
+      resolveClear()
+      await clearing
+    })
+    root.unmount()
+
+    expect(updateSettings).toHaveBeenCalledTimes(1)
+    expect(updateSettings).toHaveBeenCalledWith({
+      voice: {
+        ...getDefaultVoiceSettings(),
+        enabled: false,
+        openAiApiKeyConfigured: false,
+        microphoneDeviceId: 'usb-mic',
+        microphoneDeviceLabel: 'USB Microphone'
+      }
+    })
+  })
 })
diff --git a/src/renderer/src/components/settings/VoicePane.tsx b/src/renderer/src/components/settings/VoicePane.tsx
index a1fdfbe9edd..f6729301702 100644
--- a/src/renderer/src/components/settings/VoicePane.tsx
+++ b/src/renderer/src/components/settings/VoicePane.tsx
@@ -36,6 +36,15 @@ export function VoicePane({ settings, updateSettings }: VoicePaneProps): React.J
   const [openAiKeyPending, setOpenAiKeyPending] = useState(false)
   const [pendingCloudModelId, setPendingCloudModelId] = useState<string | null>(null)
   const mountedRef = useRef(true)
+  // Why: every write here is a read-modify-write of the whole voice object, and the
+  // writers are async (key status probe, save/clear key). Merging onto the render-time
+  // snapshot would resurrect settings that changed while the IPC was in flight — e.g.
+  // reverting `enabled` to false and leaving the microphone picker permanently disabled.
+  // Written in an effect, not during render: the async writers all run post-commit.
+  const voiceSettingsRef = useRef(voiceSettings)
+  useEffect(() => {
+    voiceSettingsRef.current = voiceSettings
+  }, [voiceSettings])
 
   const handlePaneRef = useCallback((node: HTMLDivElement | null): void => {
     mountedRef.current = node !== null
@@ -45,12 +54,12 @@ export function VoicePane({ settings, updateSettings }: VoicePaneProps): React.J
     (updates: Partial<VoiceSettings>): void => {
       updateSettings({
         voice: {
-          ...voiceSettings,
+          ...voiceSettingsRef.current,
           ...updates
         }
       })
     },
-    [updateSettings, voiceSettings]
+    [updateSettings]
   )
 
   useEffect(() => {
diff --git a/src/renderer/src/components/settings/floating-workspace-search.ts b/src/renderer/src/components/settings/floating-workspace-search.ts
index 9ca0dca43f6..e0a40747702 100644
--- a/src/renderer/src/components/settings/floating-workspace-search.ts
+++ b/src/renderer/src/components/settings/floating-workspace-search.ts
@@ -2,69 +2,86 @@ import { translate } from '@/i18n/i18n'
 import { translateSearchKeyword } from './settings-search-keywords'
 import { createLocalizedCatalog } from '@/i18n/localized-catalog'
 
-export const getFloatingWorkspaceSearchEntries = createLocalizedCatalog(() => [
-  {
-    title: translate(
-      'auto.components.settings.floating.workspace.search.b2b60e7163',
-      'Floating Workspace'
-    ),
-    description: translate(
-      'auto.components.settings.floating.workspace.search.b96b5ee6cf',
-      'Enable the floating workspace, choose where new tabs start, and choose where the toggle button appears.'
-    ),
-    keywords: [
-      translate(
-        'auto.components.settings.floating.workspace.search.a08e482f6d',
-        'floating workspace'
+function buildFloatingWorkspaceSearchEntries(includeBrowser: boolean) {
+  return [
+    {
+      title: translate(
+        'auto.components.settings.floating.workspace.search.b2b60e7163',
+        'Floating Workspace'
       ),
-      translate(
-        'auto.components.settings.floating.workspace.search.6f183fa1b9',
-        'floating terminal'
+      description: translate(
+        'auto.components.settings.floating.workspace.search.b96b5ee6cf',
+        'Enable the floating workspace, choose where new tabs start, and choose where the toggle button appears.'
       ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.ebeedb2f6a',
-        'quick terminal'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.2b5efa55c9',
-        'global'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.6410fe83d8',
-        'terminal'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.49db74a92d',
-        'browser'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.884e5e6132',
-        'markdown'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.156ffeee08',
-        'note'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.52db6e3baf',
-        'notes'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.a38bfc3f77',
-        'quick panel'
-      ),
-      translate(
-        'auto.components.settings.floating.workspace.search.6765b85e48',
-        'launch directory'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.a452146574',
-        'toggle button'
-      ),
-      ...translateSearchKeyword(
-        'auto.components.settings.floating.workspace.search.94f4d013c8',
-        'status bar'
-      )
-    ]
-  }
-])
+      keywords: [
+        translate(
+          'auto.components.settings.floating.workspace.search.a08e482f6d',
+          'floating workspace'
+        ),
+        translate(
+          'auto.components.settings.floating.workspace.search.6f183fa1b9',
+          'floating terminal'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.ebeedb2f6a',
+          'quick terminal'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.2b5efa55c9',
+          'global'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.6410fe83d8',
+          'terminal'
+        ),
+        ...(includeBrowser
+          ? translateSearchKeyword(
+              'auto.components.settings.floating.workspace.search.49db74a92d',
+              'browser'
+            )
+          : []),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.884e5e6132',
+          'markdown'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.156ffeee08',
+          'note'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.52db6e3baf',
+          'notes'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.a38bfc3f77',
+          'quick panel'
+        ),
+        translate(
+          'auto.components.settings.floating.workspace.search.6765b85e48',
+          'launch directory'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.a452146574',
+          'toggle button'
+        ),
+        ...translateSearchKeyword(
+          'auto.components.settings.floating.workspace.search.94f4d013c8',
+          'status bar'
+        )
+      ]
+    }
+  ]
+}
+
+const getFloatingWorkspaceSearchEntriesWithBrowser = createLocalizedCatalog(() =>
+  buildFloatingWorkspaceSearchEntries(true)
+)
+const getFloatingWorkspaceSearchEntriesWithoutBrowser = createLocalizedCatalog(() =>
+  buildFloatingWorkspaceSearchEntries(false)
+)
+
+export function getFloatingWorkspaceSearchEntries(options?: { includeBrowser?: boolean }) {
+  return options?.includeBrowser === false
+    ? getFloatingWorkspaceSearchEntriesWithoutBrowser()
+    : getFloatingWorkspaceSearchEntriesWithBrowser()
+}
diff --git a/src/renderer/src/components/settings/git-search.ts b/src/renderer/src/components/settings/git-search.ts
index 70b67a70864..b130c4587c5 100644
--- a/src/renderer/src/components/settings/git-search.ts
+++ b/src/renderer/src/components/settings/git-search.ts
@@ -121,22 +121,5 @@ export const getGitPaneSearchEntries = createLocalizedCatalog(() => [
       )
     ]
   },
-  ...getAutoRenameBranchSearchEntries(),
-  {
-    title: translate('auto.components.settings.git.search.bc7d9f69ce', 'Orca Attribution'),
-    description: translate(
-      'auto.components.settings.git.search.118c23484b',
-      'Add Orca attribution to commits, PRs, and issues.'
-    ),
-    keywords: [
-      ...translateSearchKeyword('auto.components.settings.git.search.d088806071', 'github'),
-      ...translateSearchKeyword('auto.components.settings.git.search.16f53f7323', 'gh'),
-      ...translateSearchKeyword('auto.components.settings.git.search.6bdea421bb', 'pr'),
-      ...translateSearchKeyword('auto.components.settings.git.search.af0a144bfb', 'issue'),
-      ...translateSearchKeyword('auto.components.settings.git.search.61f9f5d1fc', 'co-author'),
-      ...translateSearchKeyword('auto.components.settings.git.search.8461c908ae', 'coauthored'),
-      ...translateSearchKeyword('auto.components.settings.git.search.1b93c1143c', 'attribution'),
-      ...translateSearchKeyword('auto.components.settings.git.search.61eab13403', 'orca')
-    ]
-  }
+  ...getAutoRenameBranchSearchEntries()
 ])
diff --git a/src/renderer/src/components/settings/keybinding-override-edits.ts b/src/renderer/src/components/settings/keybinding-override-edits.ts
index e0e88d00782..21b339ba98f 100644
--- a/src/renderer/src/components/settings/keybinding-override-edits.ts
+++ b/src/renderer/src/components/settings/keybinding-override-edits.ts
@@ -15,7 +15,7 @@ export function hasOwnBindingOverride(
   overrides: KeybindingOverrides,
   actionId: KeybindingActionId
 ): boolean {
-  return Object.prototype.hasOwnProperty.call(overrides, actionId)
+  return Object.hasOwn(overrides, actionId)
 }
 
 export function removeBindingOverride(
diff --git a/src/renderer/src/components/settings/repository-source-control-ai-draft.ts b/src/renderer/src/components/settings/repository-source-control-ai-draft.ts
index 1e516bab7a8..370f60f3d2f 100644
--- a/src/renderer/src/components/settings/repository-source-control-ai-draft.ts
+++ b/src/renderer/src/components/settings/repository-source-control-ai-draft.ts
@@ -19,7 +19,7 @@ export function hasOwnActionOverride(
   overrides: RepoSourceControlAiOverrides['actionOverrides'],
   actionId: SourceControlActionId
 ): boolean {
-  return Object.prototype.hasOwnProperty.call(overrides ?? {}, actionId)
+  return Object.hasOwn(overrides ?? {}, actionId)
 }
 
 export function triStateValue(value: boolean | null | undefined): 'inherit' | 'on' | 'off' {
diff --git a/src/renderer/src/components/settings/shortcut-row-visibility.test.ts b/src/renderer/src/components/settings/shortcut-row-visibility.test.ts
new file mode 100644
index 00000000000..9077e36cd97
--- /dev/null
+++ b/src/renderer/src/components/settings/shortcut-row-visibility.test.ts
@@ -0,0 +1,39 @@
+import { describe, expect, it } from 'vitest'
+import { getKeybindingDefinition } from '../../../../shared/keybindings'
+import type { ShortcutGroup } from './shortcut-groups'
+import { buildShortcutRowVisibility } from './shortcut-row-visibility'
+
+function creationGroup(): ShortcutGroup {
+  const items = (
+    ['tab.newTerminal', 'tab.newBrowser', 'tab.newMarkdown', 'tab.newSimulator'] as const
+  ).map((actionId) => {
+    const definition = getKeybindingDefinition(actionId)
+    if (!definition) {
+      throw new Error(`Missing keybinding definition: ${actionId}`)
+    }
+    return definition
+  })
+  return { title: 'Tabs', items }
+}
+
+describe('buildShortcutRowVisibility', () => {
+  it('hides client-impossible creation shortcuts without hiding terminal or markdown', () => {
+    const result = buildShortcutRowVisibility({
+      groups: [creationGroup()],
+      keybindings: {},
+      conflictByAction: new Map(),
+      terminalShortcutPolicy: 'orca-first',
+      platform: 'darwin',
+      managedBrowserCreationEnabled: false,
+      mobileEmulatorCreationEnabled: false,
+      settingsSearchQuery: '',
+      shortcutQuery: '',
+      shortcutFilter: 'all'
+    })
+
+    expect(result.shortcutRows.map((row) => row.item.id)).toEqual([
+      'tab.newTerminal',
+      'tab.newMarkdown'
+    ])
+  })
+})
diff --git a/src/renderer/src/components/settings/shortcut-row-visibility.ts b/src/renderer/src/components/settings/shortcut-row-visibility.ts
new file mode 100644
index 00000000000..4a2a6e08f16
--- /dev/null
+++ b/src/renderer/src/components/settings/shortcut-row-visibility.ts
@@ -0,0 +1,96 @@
+import {
+  getEffectiveKeybindingsForDefinition,
+  type KeybindingActionId,
+  type KeybindingOverrides,
+  type TerminalShortcutPolicy
+} from '../../../../shared/keybindings'
+import { hasOwnBindingOverride } from './keybinding-override-edits'
+import type { ShortcutGroup } from './shortcut-groups'
+import { getShortcutTerminalStatus } from './shortcut-terminal-status'
+import {
+  buildShortcutGlobalSearchMatcher,
+  matchesShortcutFilter,
+  matchesShortcutLocalSearch,
+  normalizeShortcutLocalSearchQuery,
+  type ShortcutFilter,
+  type ShortcutRowsByGroup
+} from './ShortcutFilterRail'
+
+export function buildShortcutRowVisibility(options: {
+  groups: ShortcutGroup[]
+  keybindings: KeybindingOverrides
+  conflictByAction: Map<KeybindingActionId, string[]>
+  terminalShortcutPolicy: TerminalShortcutPolicy
+  platform: NodeJS.Platform
+  managedBrowserCreationEnabled: boolean
+  mobileEmulatorCreationEnabled: boolean
+  settingsSearchQuery: string
+  shortcutQuery: string
+  shortcutFilter: ShortcutFilter
+}): {
+  filterCounts: Record<ShortcutFilter, number>
+  shortcutRows: ShortcutRowsByGroup['rows']
+  visibleShortcutCount: number
+  visibleShortcutGroups: ShortcutRowsByGroup[]
+} {
+  const shortcutGroups = options.groups.map((group) => ({
+    title: group.title,
+    rows: group.items
+      .filter(
+        (item) =>
+          (options.managedBrowserCreationEnabled || item.id !== 'tab.newBrowser') &&
+          (options.mobileEmulatorCreationEnabled || item.id !== 'tab.newSimulator')
+      )
+      .map((item) => {
+        const effective = getEffectiveKeybindingsForDefinition(
+          item,
+          options.platform,
+          options.keybindings
+        )
+        return {
+          item,
+          groupTitle: group.title,
+          effective,
+          modified: hasOwnBindingOverride(options.keybindings, item.id),
+          warnings: options.conflictByAction.get(item.id) ?? [],
+          terminalStatus: getShortcutTerminalStatus(
+            item,
+            options.terminalShortcutPolicy,
+            effective.length > 0
+          )
+        }
+      })
+  }))
+  const shortcutRows = shortcutGroups.flatMap((group) => group.rows)
+  const localQuery = normalizeShortcutLocalSearchQuery(options.shortcutQuery)
+  const matchesGlobalSearch = buildShortcutGlobalSearchMatcher(
+    shortcutRows,
+    options.settingsSearchQuery
+  )
+  const matchesSearch = (row: ShortcutRowsByGroup['rows'][number]): boolean =>
+    localQuery !== null &&
+    matchesGlobalSearch(row) &&
+    matchesShortcutLocalSearch(row, localQuery, options.platform)
+  const baseVisibleRows = shortcutRows.filter(matchesSearch)
+  const filterCounts: Record<ShortcutFilter, number> = {
+    all: baseVisibleRows.length,
+    modified: baseVisibleRows.filter((row) => row.modified).length,
+    unassigned: baseVisibleRows.filter((row) => row.effective.length === 0).length,
+    conflicts: baseVisibleRows.filter((row) => row.warnings.length > 0).length
+  }
+  const visibleShortcutGroups = shortcutGroups
+    .map((group) => ({
+      title: group.title,
+      rows: group.rows.filter(
+        (row) => matchesSearch(row) && matchesShortcutFilter(row, options.shortcutFilter)
+      )
+    }))
+    .filter((group) => group.rows.length > 0)
+
+  return {
+    filterCounts,
+    shortcutRows,
+    visibleShortcutCount: visibleShortcutGroups.reduce((sum, group) => sum + group.rows.length, 0),
+    visibleShortcutGroups
+  }
+}
diff --git a/src/renderer/src/components/settings/shortcuts-search.ts b/src/renderer/src/components/settings/shortcuts-search.ts
index 223b1421ee4..2746056f46e 100644
--- a/src/renderer/src/components/settings/shortcuts-search.ts
+++ b/src/renderer/src/components/settings/shortcuts-search.ts
@@ -34,15 +34,35 @@ export const getTerminalShortcutPolicySearchEntry = createLocalizedCatalog(
   })
 )
 
-export const getShortcutsPaneSearchEntries = createLocalizedCatalog(() => [
-  ...KEYBINDING_DEFINITIONS.map((item) => ({
-    title: item.title,
-    description: translate(
-      'auto.components.settings.shortcuts.search.groupShortcut',
-      '{{value0}} shortcut',
-      { value0: item.group }
-    ),
-    keywords: [...item.searchKeywords]
-  })),
-  getTerminalShortcutPolicySearchEntry()
-])
+const getShortcutDefinitionSearchEntries = createLocalizedCatalog(() =>
+  KEYBINDING_DEFINITIONS.map((item) => ({
+    actionId: item.id,
+    searchEntry: {
+      title: item.title,
+      description: translate(
+        'auto.components.settings.shortcuts.search.groupShortcut',
+        '{{value0}} shortcut',
+        { value0: item.group }
+      ),
+      keywords: [...item.searchKeywords]
+    }
+  }))
+)
+
+export function getShortcutsPaneSearchEntries(options?: {
+  includeManagedBrowser?: boolean
+  includeMobileEmulator?: boolean
+}): SettingsSearchEntry[] {
+  const includeManagedBrowser = options?.includeManagedBrowser !== false
+  const includeMobileEmulator = options?.includeMobileEmulator !== false
+  return [
+    ...getShortcutDefinitionSearchEntries()
+      .filter(
+        ({ actionId }) =>
+          (includeManagedBrowser || actionId !== 'tab.newBrowser') &&
+          (includeMobileEmulator || actionId !== 'tab.newSimulator')
+      )
+      .map(({ searchEntry }) => searchEntry),
+    getTerminalShortcutPolicySearchEntry()
+  ]
+}
diff --git a/src/renderer/src/components/sidebar/AddRepoDialog.tsx b/src/renderer/src/components/sidebar/AddRepoDialog.tsx
index 54148a0d4a3..ade12730dee 100644
--- a/src/renderer/src/components/sidebar/AddRepoDialog.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoDialog.tsx
@@ -18,6 +18,7 @@ import {
   useAddRepoHostedController,
   type AddRepoDialogHostedController
 } from './use-add-repo-hosted-controller'
+import { routeAddRepoBrowse } from './add-repo-browse-authority'
 
 export default React.memo(function AddRepoDialog({
   hosted
@@ -308,7 +309,7 @@ export default React.memo(function AddRepoDialog({
         selectedSshTargetId={hostSelection.selectedSshTargetId}
         selectedHostLabel={
           hostSelection.hostOptions.find((host) => host.id === hostSelection.selectedHostId)
-            ?.label ?? hostSelection.selectedHostId
+            ?.label ?? null
         }
         lockSshTargetSelection={hostSelection.selectedParsedHost?.kind === 'ssh'}
         remotePath={remotePath}
@@ -324,26 +325,31 @@ export default React.memo(function AddRepoDialog({
         isCreating={isCreating}
         hostSelector={<AddRepoHostSelectorSlot hostSelection={hostSelection} />}
         showRemoteAction={false}
-        browseHostKind={
-          selectedHostKind === 'ssh' || selectedHostKind === 'runtime' ? selectedHostKind : 'local'
-        }
+        actionsDisabled={!hostSelection.selectedHostId}
+        browseHostKind={selectedHostKind ?? 'runtime'}
         createDefaultParent={createDefaultParent}
         createGitAvailability={createGitAvailability}
         createRuntimeParentStatus={createRuntimeParentStatus}
         createParentDefaultPending={createParentDefaultPending}
         manualCreateParentEntry={isRuntimeEnvironmentActive || selectedHostKind === 'ssh'}
-        onBrowse={
-          selectedHostKind === 'ssh'
-            ? () => void handleOpenRemoteStep(hostSelection.selectedSshTargetId)
-            : selectedHostKind === 'runtime'
-              ? () => setStep('server-path')
-              : handleBrowse
+        onBrowse={() =>
+          routeAddRepoBrowse(hostSelection.selectedParsedHost, {
+            browseLocal: () => void handleBrowse(),
+            browseRuntime: () => setStep('server-path'),
+            browseSsh: (targetId) => void handleOpenRemoteStep(targetId)
+          })
         }
         onOpenCloneStep={() => {
+          if (!hostSelection.selectedHostId) {
+            return
+          }
           setCloneError(null)
           setStep('clone')
         }}
         onOpenCreateStep={() => {
+          if (!hostSelection.selectedHostId) {
+            return
+          }
           setCreateError(null)
           setStep('create')
         }}
diff --git a/src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx b/src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx
index b70c299be36..abdd169d4fd 100644
--- a/src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoDialogStepContent.test.tsx
@@ -281,4 +281,16 @@ describe('AddRepoDialogStepContent nested imports', () => {
     expect(html).not.toContain('Create on host')
     expect(html).not.toContain('Want to import many repos at once?')
   })
+
+  it('opens the in-app filesystem browser for a paired runtime', () => {
+    const html = renderStepContent({
+      step: 'server-path',
+      isRuntimeEnvironmentActive: true,
+      activeRuntimeEnvironmentId: 'paired-host'
+    })
+
+    expect(html).toContain('Browse host filesystem')
+    expect(html).toContain('Navigate to a directory and click Select to choose it.')
+    expect(html).toContain('Select folder')
+  })
 })
diff --git a/src/renderer/src/components/sidebar/AddRepoDialogStepContent.tsx b/src/renderer/src/components/sidebar/AddRepoDialogStepContent.tsx
index ee05b70b433..9a0da649f8c 100644
--- a/src/renderer/src/components/sidebar/AddRepoDialogStepContent.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoDialogStepContent.tsx
@@ -46,6 +46,7 @@ type AddRepoDialogStepContentProps = {
   hostSelector?: ReactNode
   showRemoteAction?: boolean
   canCreateProject?: boolean
+  actionsDisabled?: boolean
   manualCreateParentEntry?: boolean
   browseHostKind?: 'local' | 'ssh' | 'runtime'
   createDefaultParent: string
@@ -115,6 +116,7 @@ export function AddRepoDialogStepContent({
   hostSelector,
   showRemoteAction = true,
   canCreateProject = true,
+  actionsDisabled = false,
   manualCreateParentEntry = isRuntimeEnvironmentActive,
   browseHostKind = 'local',
   createDefaultParent,
@@ -159,6 +161,7 @@ export function AddRepoDialogStepContent({
         hostSelector={hostSelector}
         showRemoteAction={showRemoteAction}
         canCreateProject={canCreateProject}
+        actionsDisabled={actionsDisabled}
         browseHostKind={browseHostKind}
         onBrowse={onBrowse}
         onOpenCloneStep={onOpenCloneStep}
diff --git a/src/renderer/src/components/sidebar/AddRepoHostSelector.tsx b/src/renderer/src/components/sidebar/AddRepoHostSelector.tsx
index 0d73eca96cd..b9ab6c89068 100644
--- a/src/renderer/src/components/sidebar/AddRepoHostSelector.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoHostSelector.tsx
@@ -13,7 +13,7 @@ import { canConnectAddRepoHost, canSelectAddRepoHost } from './add-repo-host-ava
 
 type AddRepoHostSelectorProps = {
   hosts: SidebarHostOption[]
-  selectedHostId: ExecutionHostId
+  selectedHostId: ExecutionHostId | null
   open: boolean
   onOpenChange: (open: boolean) => void
   onSelectHost: (hostId: ExecutionHostId) => void
diff --git a/src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx b/src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx
index 40fc712810a..6fa3b88aceb 100644
--- a/src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoStartSteps.test.tsx
@@ -53,6 +53,7 @@ function renderServerPathStartStep(runtimeEnvironmentId: string | null): string
 
 type LocalStartStepDomOptions = {
   isAdding?: boolean
+  actionsDisabled?: boolean
   addProjectBusyLabel?: string | null
   nestedScanInProgress?: boolean
   nestedScanId?: string | null
@@ -76,6 +77,7 @@ async function renderLocalStartStepDom(
           repoCount={1}
           isSshLikely={isSshLikely}
           isAdding={options.isAdding ?? false}
+          actionsDisabled={options.actionsDisabled ?? false}
           addProjectBusyLabel={options.addProjectBusyLabel ?? null}
           nestedScanInProgress={options.nestedScanInProgress ?? false}
           nestedScanId={options.nestedScanId ?? null}
@@ -257,6 +259,20 @@ describe('AddRepoLocalStartStep', () => {
     })
   })
 
+  it('disables host-scoped actions until a host is selectable', async () => {
+    const { container, root } = await renderLocalStartStepDom(false, { actionsDisabled: true })
+
+    expect(findButton(container, 'Browse folder').disabled).toBe(true)
+    expect(findButton(container, 'Clone from URL').disabled).toBe(true)
+    expect(findButton(container, 'Project on SSH host').disabled).toBe(true)
+    expect(findButton(container, 'Create new project').disabled).toBe(true)
+    expect(findButton(container, 'Browse folder').textContent).not.toContain('⏎')
+
+    await act(async () => {
+      root.unmount()
+    })
+  })
+
   it('marks the autofocused Browse action as selected with the ⏎ chip', async () => {
     const { container, root } = await renderLocalStartStepDom(false)
 
diff --git a/src/renderer/src/components/sidebar/AddRepoStartSteps.tsx b/src/renderer/src/components/sidebar/AddRepoStartSteps.tsx
index 71f8485842b..e5e4b409abc 100644
--- a/src/renderer/src/components/sidebar/AddRepoStartSteps.tsx
+++ b/src/renderer/src/components/sidebar/AddRepoStartSteps.tsx
@@ -69,6 +69,7 @@ type AddRepoLocalStartStepProps = {
   hostSelector?: ReactNode
   showRemoteAction?: boolean
   canCreateProject?: boolean
+  actionsDisabled?: boolean
   browseHostKind?: 'local' | 'ssh' | 'runtime'
   onBrowse: () => void
   onOpenCloneStep: () => void
@@ -87,6 +88,7 @@ export function AddRepoLocalStartStep({
   hostSelector,
   showRemoteAction = true,
   canCreateProject = true,
+  actionsDisabled = false,
   browseHostKind = 'local',
   onBrowse,
   onOpenCloneStep,
@@ -96,6 +98,7 @@ export function AddRepoLocalStartStep({
 }: AddRepoLocalStartStepProps): React.JSX.Element {
   const browseActionRef = useRef<HTMLButtonElement | null>(null)
   const actionsRef = useRef<HTMLDivElement | null>(null)
+  const actionsUnavailable = isAdding || actionsDisabled
   const { primaryAction, secondaryActions } = getAddRepoLocalStartActions({
     isSshLikely,
     onBrowse,
@@ -111,16 +114,13 @@ export function AddRepoLocalStartStep({
   // it follows keyboard focus so Enter always activates the highlighted action. Browse is
   // autofocused on open, so it starts selected; Tab and ↑/↓ move the highlight.
   const [selectedKind, setSelectedKind] = useState<string | null>(primaryAction.kind)
+  const visibleSelectedKind = actionsUnavailable ? null : selectedKind
 
   useEffect(() => {
-    if (isAdding) {
-      setSelectedKind(null)
-      return
-    }
-    if (!isAdding) {
+    if (!actionsUnavailable) {
       browseActionRef.current?.focus()
     }
-  }, [isAdding])
+  }, [actionsUnavailable])
 
   // ↑/↓ rove focus across the action buttons in visual order; focus drives the selection.
   const handleArrowNavigation = (event: React.KeyboardEvent<HTMLDivElement>): void => {
@@ -177,8 +177,8 @@ export function AddRepoLocalStartStep({
           icon={primaryAction.icon}
           title={primaryAction.title}
           description={primaryAction.description}
-          disabled={isAdding}
-          selected={selectedKind === primaryAction.kind}
+          disabled={actionsUnavailable}
+          selected={visibleSelectedKind === primaryAction.kind}
           buttonRef={browseActionRef}
           onClick={primaryAction.onClick}
           onFocus={() => setSelectedKind(primaryAction.kind)}
@@ -199,8 +199,8 @@ export function AddRepoLocalStartStep({
                 icon={action.icon}
                 title={action.title}
                 description={action.description}
-                disabled={isAdding || Boolean(action.disabled)}
-                selected={selectedKind === action.kind}
+                disabled={actionsUnavailable || Boolean(action.disabled)}
+                selected={visibleSelectedKind === action.kind}
                 onClick={action.onClick}
                 onFocus={() => setSelectedKind(action.kind)}
                 className={cn(
diff --git a/src/renderer/src/components/sidebar/WorktreeList.tsx b/src/renderer/src/components/sidebar/WorktreeList.tsx
index 2b6f3e9ee24..be462b94bf0 100644
--- a/src/renderer/src/components/sidebar/WorktreeList.tsx
+++ b/src/renderer/src/components/sidebar/WorktreeList.tsx
@@ -104,12 +104,18 @@ import {
   getVirtualRowTransform,
   pruneStaleVirtualRowElementCache,
   shouldUseHeaderTopSpacing,
+  WORKTREE_SIDEBAR_VIRTUAL_ROW_GAP,
   type RenderRow
 } from './worktree-list-virtual-rows'
 import {
   revealElementInScrollContainer,
   WORKTREE_SIDEBAR_REVEAL_TOP_INSET
 } from './worktree-sidebar-reveal'
+import {
+  createPendingRevealScroll,
+  isRevealScrollSettling,
+  type PendingRevealScroll
+} from './worktree-sidebar-reveal-scroll-settle'
 import {
   getWorkspaceStatus,
   getWorkspaceStatusFromGroupKey,
@@ -246,6 +252,7 @@ import { keybindingMatchesAction } from '../../../../shared/keybindings'
 import { ProjectGroupNameDialog } from './ProjectGroupNameDialog'
 import { ProjectGroupDeleteDialog } from './ProjectGroupDeleteDialog'
 import { selectProjectGroupRemovalTargets } from '@/store/slices/project-group-removal-targets'
+import { findRepoForHost } from '@/store/slices/repo-host-identity'
 import { isGitRepoKind } from '../../../../shared/repo-kind'
 import {
   effectiveExternalWorktreeVisibility,
@@ -493,7 +500,8 @@ function revealMountedWorktreeElement(
   container: HTMLElement,
   worktreeId: string,
   behavior: ScrollBehavior,
-  optionId?: string
+  optionId?: string,
+  onScrollIssued?: (targetTop: number) => void
 ): HTMLElement | null {
   const element = optionId
     ? document.getElementById(optionId)
@@ -501,19 +509,24 @@ function revealMountedWorktreeElement(
   if (!element || !container.contains(element)) {
     return null
   }
-  return revealElementInScrollContainer(container, element, behavior) ? element : null
+  return revealElementInScrollContainer(container, element, behavior, onScrollIssued)
+    ? element
+    : null
 }
 
 function revealMountedSidebarRowElement(
   container: HTMLElement,
   rowKey: string,
-  behavior: ScrollBehavior
+  behavior: ScrollBehavior,
+  onScrollIssued?: (targetTop: number) => void
 ): HTMLElement | null {
   const element = document.getElementById(getWorktreeOptionId(rowKey))
   if (!element || !container.contains(element)) {
     return null
   }
-  return revealElementInScrollContainer(container, element, behavior) ? element : null
+  return revealElementInScrollContainer(container, element, behavior, onScrollIssued)
+    ? element
+    : null
 }
 
 function getRenderRowSidebarKey(row: RenderRow): string | null {
@@ -651,7 +664,7 @@ type VirtualizedWorktreeViewportProps = {
   collapsedGroups: Set<string>
   handleCreateForRepo: (projectId: string) => void
   handleOpenRepoSettings: (projectId: string, sectionId?: string) => void
-  handleOpenWorktreeVisibility: (projectId: string) => void
+  handleOpenWorktreeVisibility: (repo: Repo) => void
   handleShowImportedWorktrees: (projectId: string) => void
   handleKeepImportedWorktreesHidden: (projectId: string) => void
   importedWorktreeCardActionState: ReadonlyMap<string, ImportedWorktreeCardActionState>
@@ -1410,6 +1423,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
   const pendingRevealRetryRef = useRef<{ worktreeId: string; count: number } | null>(null)
   const pendingRowRevealRetryRef = useRef<{ rowKey: string; count: number } | null>(null)
   const pendingRevealFrameIdsRef = useRef<Set<number>>(new Set())
+  const pendingRevealScrollRef = useRef<PendingRevealScroll | null>(null)
   const revealHighlightFrameIdRef = useRef<number | null>(null)
   const revealHighlightTimeoutRef = useRef<number | null>(null)
   const cancelPendingRevealFrames = useCallback(() => {
@@ -1612,6 +1626,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
         groupIds: group.worktreeIds,
         draggedIds: args.draggedIds,
         draggingWorktreeId: args.draggingWorktreeId,
+        fallbackGap: WORKTREE_SIDEBAR_VIRTUAL_ROW_GAP,
         grab: args.grab,
         anchor: args.anchor
       })
@@ -2050,10 +2065,26 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
     () => window.performance.now() < directScrollInputUntilRef.current,
     []
   )
+  const markRevealScroll = useCallback((targetTop: number) => {
+    pendingRevealScrollRef.current = createPendingRevealScroll(targetTop, window.performance.now())
+  }, [])
+  const isRevealScrollSettlingNow = useCallback(() => {
+    const settling = isRevealScrollSettling({
+      now: window.performance.now(),
+      pending: pendingRevealScrollRef.current,
+      scrollTop: scrollRef.current?.scrollTop ?? 0
+    })
+    if (!settling) {
+      pendingRevealScrollRef.current = null
+    }
+    return settling
+  }, [])
   // Why: programmatic scrolls keep measurement correction quiet, but only direct input blocks anchor-restore retries.
+  // A reveal's smooth scroll is the exception: restoring the anchor mid-animation cancels it a few pixels in.
   const shouldSkipScrollAnchorRestore = useCallback(
-    () => window.performance.now() < directScrollInputUntilRef.current,
-    []
+    () =>
+      window.performance.now() < directScrollInputUntilRef.current || isRevealScrollSettlingNow(),
+    [isRevealScrollSettlingNow]
   )
 
   const virtualizer = useVirtualizer({
@@ -2080,7 +2111,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
       [stickyHeaderIndexes]
     ),
     overscan: 10,
-    gap: 6,
+    gap: WORKTREE_SIDEBAR_VIRTUAL_ROW_GAP,
     // Why: the sticky group header lives inside the virtual list, so scroll math needs the same top inset as the DOM reveal.
     scrollPaddingStart: WORKTREE_SIDEBAR_REVEAL_TOP_INSET,
     isScrollingResetDelay: USER_SCROLL_MEASUREMENT_ADJUSTMENT_SUPPRESS_MS,
@@ -2219,7 +2250,8 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
               container,
               pendingRevealWorktree.worktreeId,
               pendingRevealWorktree.behavior,
-              getRenderRowOptionId(targetRow, pendingRevealWorktree.worktreeId)
+              getRenderRowOptionId(targetRow, pendingRevealWorktree.worktreeId),
+              markRevealScroll
             )
           : null
         if (revealedOption) {
@@ -2291,6 +2323,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
     projectGroups,
     pendingRevealRetryTick,
     flashRevealedRow,
+    markRevealScroll,
     setRenamingWorktreeId,
     schedulePendingRevealFrame,
     cancelPendingRevealFrames
@@ -2379,7 +2412,8 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
         ? revealMountedSidebarRowElement(
             container,
             pendingRevealSidebarRow.rowKey,
-            pendingRevealSidebarRow.behavior
+            pendingRevealSidebarRow.behavior,
+            markRevealScroll
           )
         : null
       if (revealedElement) {
@@ -2414,6 +2448,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
     virtualizer,
     pendingRevealRetryTick,
     flashRevealedRow,
+    markRevealScroll,
     clearPendingRevealSidebarRow,
     schedulePendingRevealFrame,
     cancelPendingRevealFrames
@@ -4598,7 +4633,7 @@ const VirtualizedWorktreeViewport = React.memo(function VirtualizedWorktreeViewp
                               <DropdownMenuItem
                                 onSelect={() => {
                                   if (row.repo) {
-                                    handleOpenWorktreeVisibility(row.repo.id)
+                                    handleOpenWorktreeVisibility(row.repo)
                                   }
                                 }}
                               >
@@ -6019,8 +6054,11 @@ const WorktreeList = React.memo(function WorktreeList({
   )
 
   const handleOpenWorktreeVisibility = useCallback(
-    (projectId: string) => {
-      openModal('worktree-visibility', { repoId: projectId })
+    (repo: Repo) => {
+      openModal('worktree-visibility', {
+        repoId: repo.id,
+        hostId: getRepoExecutionHostId(repo)
+      })
     },
     [openModal]
   )
@@ -6787,9 +6825,11 @@ const WorktreeList = React.memo(function WorktreeList({
           if (!suppressExternalWorktreeInboxRepoId) {
             return
           }
-          const projectId = suppressExternalWorktreeInboxRepoId
+          const repo = findRepoForHost(repos, suppressExternalWorktreeInboxRepoId, { settings })
           setSuppressExternalWorktreeInboxRepoId(null)
-          handleOpenWorktreeVisibility(projectId)
+          if (repo) {
+            handleOpenWorktreeVisibility(repo)
+          }
         }}
       />
       <ProjectGroupDeleteDialog
diff --git a/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.test.tsx b/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.test.tsx
new file mode 100644
index 00000000000..470d02dc3d1
--- /dev/null
+++ b/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.test.tsx
@@ -0,0 +1,540 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import type { ReactNode } from 'react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type { DetectedWorktree, DetectedWorktreeListResult, Repo } from '../../../../shared/types'
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+const SCRATCH_PATH = '/repo/.claude/worktrees/scratch-1'
+
+const mocks = vi.hoisted(() => ({
+  state: {
+    activeModal: 'worktree-visibility' as string | null,
+    modalData: { repoId: 'repo-1' } as Record<string, unknown>,
+    closeModal: vi.fn(),
+    repos: [] as unknown[],
+    updateRepo: vi.fn(),
+    fetchWorktrees: vi.fn(),
+    detectedWorktreesByRepo: {} as Record<string, unknown>
+  }
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: Object.assign(
+    (selector: (state: typeof mocks.state) => unknown) => selector(mocks.state),
+    { getState: () => mocks.state }
+  )
+}))
+
+vi.mock('@/components/ui/dialog', () => ({
+  Dialog: ({ open, children }: { open: boolean; children: ReactNode }) =>
+    open ? <div>{children}</div> : null,
+  DialogContent: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  DialogDescription: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  DialogHeader: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  DialogTitle: ({ children }: { children: ReactNode }) => <div>{children}</div>
+}))
+
+vi.mock('@/i18n/i18n', () => ({
+  translate: (_key: string, fallback: string, values?: Record<string, unknown>) =>
+    values
+      ? fallback.replace(/\{\{(\w+)\}\}/g, (_match, name: string) => String(values[name] ?? ''))
+      : fallback
+}))
+
+vi.mock('@tanstack/react-virtual', () => ({
+  useVirtualizer: ({ count }: { count: number }) => ({
+    getTotalSize: () => count * 56,
+    getVirtualItems: () =>
+      Array.from({ length: Math.min(count, 10) }, (_, index) => ({
+        index,
+        key: index,
+        start: index * 56,
+        size: 56,
+        end: (index + 1) * 56,
+        lane: 0
+      })),
+    measureElement: vi.fn()
+  })
+}))
+
+function makeRepo(overrides: Partial<Repo> = {}): Repo {
+  return {
+    id: 'repo-1',
+    path: '/repo',
+    displayName: 'orca',
+    badgeColor: '#000000',
+    addedAt: Date.UTC(2026, 4, 24),
+    externalWorktreeVisibility: 'hide',
+    externalWorktreeVisibilityPromptDismissedAt: 1,
+    // Why: the inbox already stopped announcing this path; recovery must not depend on it.
+    externalWorktreeInboxBaselinePaths: [SCRATCH_PATH],
+    ...overrides
+  }
+}
+
+function makeWorktree(overrides: Partial<DetectedWorktree> = {}): DetectedWorktree {
+  return {
+    id: `repo-1::${overrides.path ?? SCRATCH_PATH}`,
+    repoId: 'repo-1',
+    path: SCRATCH_PATH,
+    displayName: 'scratch-1',
+    branch: 'refs/heads/scratch-1',
+    head: 'abc123',
+    isBare: false,
+    isMainWorktree: false,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 0,
+    ownership: 'agent-scratch',
+    selectedCheckout: false,
+    visible: false,
+    ...overrides
+  } as DetectedWorktree
+}
+
+function makeDetected(
+  worktrees: DetectedWorktree[] = [makeWorktree()],
+  overrides: Partial<DetectedWorktreeListResult> = {}
+): DetectedWorktreeListResult {
+  return {
+    repoId: 'repo-1',
+    authoritative: true,
+    source: 'git',
+    worktrees,
+    ...overrides
+  }
+}
+
+let container: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  mocks.state.activeModal = 'worktree-visibility'
+  mocks.state.modalData = { repoId: 'repo-1' }
+  mocks.state.repos = [makeRepo()]
+  mocks.state.detectedWorktreesByRepo = { 'repo-1': makeDetected() }
+  mocks.state.updateRepo.mockResolvedValue(true)
+  mocks.state.fetchWorktrees.mockResolvedValue(true)
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => {
+    root.unmount()
+  })
+  container.remove()
+  document.body.innerHTML = ''
+  vi.resetModules()
+})
+
+async function renderDialog(): Promise<void> {
+  const { default: WorktreeVisibilityDialog } = await import('./WorktreeVisibilityDialog')
+  await act(async () => {
+    root.render(<WorktreeVisibilityDialog />)
+  })
+}
+
+function deferred<T>(): {
+  promise: Promise<T>
+  resolve: (value: T) => void
+} {
+  let resolve!: (value: T) => void
+  const promise = new Promise<T>((resolvePromise) => {
+    resolve = resolvePromise
+  })
+  return { promise, resolve }
+}
+
+function buttonWithText(text: string): HTMLButtonElement {
+  const button = [...document.querySelectorAll('button')].find(
+    (candidate) => (candidate.textContent ?? '').trim() === text
+  )
+  if (!button) {
+    throw new Error(`No button with text "${text}"`)
+  }
+  return button as HTMLButtonElement
+}
+
+function alwaysShowSwitch(): HTMLButtonElement {
+  const control = document.querySelector('[role="switch"]')
+  if (!control) {
+    throw new Error('No Always show switch')
+  }
+  return control as HTMLButtonElement
+}
+
+async function click(element: HTMLElement): Promise<void> {
+  await act(async () => {
+    element.dispatchEvent(new MouseEvent('click', { bubbles: true, cancelable: true }))
+  })
+}
+
+describe('WorktreeVisibilityDialog', () => {
+  it('lists a hidden agent worktree with a repo-relative path', async () => {
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('Hidden worktrees (1)')
+    expect(document.body.textContent).toContain(
+      'Choose which hidden worktrees to show individually.'
+    )
+    expect(document.body.textContent).toContain('scratch-1')
+    expect(document.body.textContent).toContain('.claude/worktrees/scratch-1')
+    expect(document.body.textContent).not.toContain('/repo/.claude')
+    expect(
+      document.querySelector('button[aria-label="Which worktrees are hidden by default?"]')
+    ).not.toBeNull()
+  })
+
+  it('bounds rendered rows for repositories with many hidden worktrees', async () => {
+    const worktrees = Array.from({ length: 500 }, (_, index) =>
+      makeWorktree({
+        id: `hidden-${index}`,
+        path: `/repo/.claude/worktrees/scratch-${index}`,
+        displayName: `scratch-${index}`
+      })
+    )
+    mocks.state.detectedWorktreesByRepo = { 'repo-1': makeDetected(worktrees) }
+
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('Hidden worktrees (500)')
+    expect(document.querySelectorAll('ul > li').length).toBeLessThan(20)
+  })
+
+  it('recovers a hidden worktree per path through the existing import exception', async () => {
+    // Why: individual recovery remains available while the repo-wide policy is off.
+    await renderDialog()
+
+    await click(buttonWithText('Show'))
+
+    expect(mocks.state.updateRepo).toHaveBeenCalledWith('repo-1', {
+      importedExternalWorktreePaths: [SCRATCH_PATH],
+      externalWorktreeInboxBaselinePaths: [SCRATCH_PATH]
+    })
+    expect(mocks.state.fetchWorktrees).toHaveBeenCalledWith('repo-1', {
+      requireAuthoritative: true
+    })
+    expect(mocks.state.closeModal).not.toHaveBeenCalled()
+  })
+
+  it('omits the hidden list when nothing is recoverable', async () => {
+    mocks.state.detectedWorktreesByRepo = { 'repo-1': makeDetected([]) }
+    await renderDialog()
+
+    expect(document.body.textContent).not.toContain('Hidden worktrees')
+  })
+
+  it('says it is checking instead of claiming nothing is hidden on a fallback snapshot', async () => {
+    mocks.state.detectedWorktreesByRepo = {
+      'repo-1': makeDetected([makeWorktree()], { authoritative: false, source: 'session-fallback' })
+    }
+    mocks.state.fetchWorktrees.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('Checking…')
+    expect(document.body.textContent).not.toContain('Hidden worktrees')
+    expect(mocks.state.fetchWorktrees).toHaveBeenCalledWith('repo-1', {
+      requireAuthoritative: true
+    })
+  })
+
+  it('offers a retry instead of a dead end when the list cannot be read', async () => {
+    mocks.state.detectedWorktreesByRepo = {
+      'repo-1': makeDetected([makeWorktree()], { authoritative: false, source: 'session-fallback' })
+    }
+    mocks.state.fetchWorktrees.mockResolvedValue(false)
+    await renderDialog()
+
+    expect(document.querySelector('[role="alert"]')?.textContent).toContain(
+      "Could not list this repo's worktrees."
+    )
+
+    // Why: a successful authoritative refetch also writes the trusted snapshot.
+    mocks.state.fetchWorktrees.mockImplementation(async () => {
+      mocks.state.detectedWorktreesByRepo = { 'repo-1': makeDetected() }
+      return true
+    })
+    await click(buttonWithText('Try again'))
+
+    expect(document.querySelector('[role="alert"]')).toBeNull()
+    expect(document.body.textContent).toContain('Hidden worktrees')
+  })
+
+  it('keeps rows visible but not actionable until the open-time scan settles', async () => {
+    // Why: a Show clicked mid-scan could join the pre-write refetch and read
+    // success off a list computed before the import landed — a silent no-op.
+    mocks.state.fetchWorktrees.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('scratch-1')
+    expect(buttonWithText('Show').disabled).toBe(true)
+    expect(document.body.textContent).toContain('Checking…')
+  })
+
+  it('locks the repo-wide toggle until the open-time scan settles', async () => {
+    // Why: its post-write refresh must not coalesce onto a list started before the visibility write.
+    mocks.state.fetchWorktrees.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    expect(alwaysShowSwitch().disabled).toBe(true)
+  })
+
+  it('reports a failed refresh even while an older trusted snapshot is on screen', async () => {
+    // Why: a warm snapshot must not present stale rows as current with no
+    // failure indication when the host has since become unreachable.
+    mocks.state.fetchWorktrees.mockResolvedValue(false)
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('scratch-1')
+    expect(document.querySelector('[role="alert"]')?.textContent).toContain(
+      "Could not list this repo's worktrees."
+    )
+  })
+
+  it('locks retry while a row import is in flight, so it cannot race the write', async () => {
+    // Why: a retry scan started before the import's write lands can absorb the
+    // import's own refetch and report success off a pre-import list.
+    mocks.state.fetchWorktrees.mockResolvedValue(false)
+    mocks.state.updateRepo.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    await click(buttonWithText('Show'))
+
+    expect(buttonWithText('Try again').disabled).toBe(true)
+  })
+
+  it('locks the repo-wide toggle while a row import is in flight', async () => {
+    mocks.state.fetchWorktrees.mockResolvedValue(false)
+    mocks.state.updateRepo.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    await click(buttonWithText('Show'))
+
+    expect(alwaysShowSwitch().disabled).toBe(true)
+  })
+
+  it('locks row actions and retry while the repo-wide toggle is in flight', async () => {
+    mocks.state.fetchWorktrees.mockResolvedValueOnce(false)
+    mocks.state.updateRepo.mockImplementation(() => new Promise(() => {}))
+    await renderDialog()
+
+    await click(alwaysShowSwitch())
+
+    expect(buttonWithText('Show').disabled).toBe(true)
+    expect(buttonWithText('Try again').disabled).toBe(true)
+  })
+
+  it('clears a stale failure once a row import refreshes the list successfully', async () => {
+    mocks.state.fetchWorktrees.mockResolvedValueOnce(false)
+    await renderDialog()
+    expect(document.querySelector('[role="alert"]')).not.toBeNull()
+
+    mocks.state.fetchWorktrees.mockResolvedValue(true)
+    await click(buttonWithText('Show'))
+
+    expect(document.querySelector('[role="alert"]')).toBeNull()
+  })
+
+  it('does not leak an old repo action failure into a newly opened repo', async () => {
+    const update = deferred<boolean>()
+    mocks.state.updateRepo.mockReturnValueOnce(update.promise)
+    await renderDialog()
+    await click(buttonWithText('Show'))
+
+    mocks.state.modalData = { repoId: 'repo-2' }
+    mocks.state.repos = [makeRepo({ id: 'repo-2', path: '/repo-2', displayName: 'other' })]
+    mocks.state.detectedWorktreesByRepo = { 'repo-2': makeDetected([], { repoId: 'repo-2' }) }
+    await renderDialog()
+
+    update.resolve(false)
+    await act(async () => update.promise)
+
+    expect(document.querySelector('[role="alert"]')).toBeNull()
+  })
+
+  it('keeps a remounted repo locked until its earlier row action settles', async () => {
+    const update = deferred<boolean>()
+    mocks.state.updateRepo.mockReturnValueOnce(update.promise)
+    await renderDialog()
+    mocks.state.fetchWorktrees.mockClear()
+    await click(buttonWithText('Show'))
+
+    await act(async () => root.render(null))
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('Hidden worktrees (1)')
+    expect(buttonWithText('Showing…').disabled).toBe(true)
+    expect(mocks.state.fetchWorktrees).not.toHaveBeenCalled()
+
+    await act(async () => {
+      update.resolve(false)
+      await update.promise
+      await Promise.resolve()
+    })
+    expect(buttonWithText('Show').disabled).toBe(false)
+  })
+
+  it('keeps a remounted repo locked until its earlier toggle settles', async () => {
+    const update = deferred<boolean>()
+    mocks.state.updateRepo.mockReturnValueOnce(update.promise)
+    await renderDialog()
+    mocks.state.fetchWorktrees.mockClear()
+    await click(alwaysShowSwitch())
+
+    await act(async () => root.render(null))
+    await renderDialog()
+
+    expect(alwaysShowSwitch().disabled).toBe(true)
+    expect(buttonWithText('Show').disabled).toBe(true)
+    expect(mocks.state.fetchWorktrees).not.toHaveBeenCalled()
+
+    await act(async () => {
+      update.resolve(false)
+      await update.promise
+      await Promise.resolve()
+    })
+    expect(alwaysShowSwitch().disabled).toBe(false)
+  })
+
+  it('does not carry a mutation fence across same-id repos on different hosts', async () => {
+    const update = deferred<boolean>()
+    const localWorktree = makeWorktree({ hostId: 'local' })
+    const remotePath = '/srv/repo/.claude/worktrees/remote-scratch'
+    const remoteWorktree = makeWorktree({
+      id: `repo-1::${remotePath}`,
+      path: remotePath,
+      displayName: 'remote-scratch',
+      hostId: 'runtime:env-1'
+    })
+    mocks.state.modalData = { repoId: 'repo-1', hostId: 'local' }
+    mocks.state.repos = [
+      makeRepo(),
+      makeRepo({ path: '/srv/repo', displayName: 'remote', executionHostId: 'runtime:env-1' })
+    ]
+    mocks.state.detectedWorktreesByRepo = {
+      'repo-1': makeDetected([localWorktree, remoteWorktree])
+    }
+    mocks.state.updateRepo.mockReturnValueOnce(update.promise)
+    await renderDialog()
+    await click(buttonWithText('Show'))
+
+    await act(async () => root.render(null))
+    mocks.state.modalData = { repoId: 'repo-1', hostId: 'runtime:env-1' }
+    mocks.state.fetchWorktrees.mockClear()
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('remote-scratch')
+    expect(document.body.textContent).not.toContain('scratch-1')
+    expect(buttonWithText('Show').disabled).toBe(false)
+    expect(mocks.state.fetchWorktrees).toHaveBeenCalledWith('repo-1', {
+      requireAuthoritative: true,
+      executionHostId: 'runtime:env-1'
+    })
+
+    await click(buttonWithText('Show'))
+    expect(mocks.state.updateRepo).toHaveBeenLastCalledWith(
+      'repo-1',
+      {
+        importedExternalWorktreePaths: [remotePath],
+        externalWorktreeInboxBaselinePaths: [SCRATCH_PATH, remotePath]
+      },
+      { hostId: 'runtime:env-1' }
+    )
+
+    await act(async () => {
+      update.resolve(false)
+      await update.promise
+    })
+  })
+
+  it('reports a failed persistent visibility update without starting a refresh', async () => {
+    mocks.state.updateRepo.mockResolvedValue(false)
+    await renderDialog()
+    mocks.state.fetchWorktrees.mockClear()
+
+    await click(alwaysShowSwitch())
+
+    expect(document.querySelector('[role="alert"]')?.textContent).toContain(
+      'Could not update worktree visibility. Try again.'
+    )
+    expect(mocks.state.fetchWorktrees).not.toHaveBeenCalled()
+  })
+
+  it('reports a failed authoritative refresh after updating persistent visibility', async () => {
+    await renderDialog()
+    mocks.state.fetchWorktrees.mockResolvedValue(false)
+
+    await click(alwaysShowSwitch())
+
+    expect(mocks.state.fetchWorktrees).toHaveBeenLastCalledWith('repo-1', {
+      requireAuthoritative: true
+    })
+    expect(document.querySelector('[role="alert"]')?.textContent).toContain(
+      "Could not list this repo's worktrees."
+    )
+  })
+
+  it('enables the persistent policy for regular and agent worktrees', async () => {
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('Always show')
+    expect(document.body.textContent).toContain('1 worktree currently hidden')
+    expect(alwaysShowSwitch().getAttribute('aria-checked')).toBe('false')
+
+    await click(alwaysShowSwitch())
+
+    expect(mocks.state.updateRepo).toHaveBeenCalledWith('repo-1', {
+      externalWorktreeVisibility: 'show',
+      agentWorktreeVisibility: 'show',
+      externalWorktreeDiscoverySuppressedAt: null
+    })
+    expect(mocks.state.closeModal).not.toHaveBeenCalled()
+  })
+
+  it('keeps the combined switch off until the agent policy is explicitly enabled', async () => {
+    mocks.state.repos = [makeRepo({ externalWorktreeVisibility: 'show' })]
+    await renderDialog()
+
+    expect(alwaysShowSwitch().getAttribute('aria-checked')).toBe('false')
+    expect(document.body.textContent).toContain('scratch-1')
+
+    await click(alwaysShowSwitch())
+
+    expect(mocks.state.updateRepo).toHaveBeenCalledWith('repo-1', {
+      externalWorktreeVisibility: 'show',
+      agentWorktreeVisibility: 'show',
+      externalWorktreeDiscoverySuppressedAt: null
+    })
+  })
+
+  it('turns the persistent policy off without closing the dialog', async () => {
+    mocks.state.repos = [
+      makeRepo({ externalWorktreeVisibility: 'show', agentWorktreeVisibility: 'show' })
+    ]
+    await renderDialog()
+
+    expect(document.body.textContent).toContain('0 worktrees currently shown')
+    expect(alwaysShowSwitch().getAttribute('aria-checked')).toBe('true')
+
+    await click(alwaysShowSwitch())
+
+    expect(mocks.state.updateRepo).toHaveBeenCalledWith('repo-1', {
+      externalWorktreeVisibility: 'hide',
+      agentWorktreeVisibility: 'hide'
+    })
+    expect(mocks.state.closeModal).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.tsx b/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.tsx
index 5cad24b5ec7..9badad39b41 100644
--- a/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.tsx
+++ b/src/renderer/src/components/sidebar/WorktreeVisibilityDialog.tsx
@@ -1,5 +1,6 @@
-import React, { useCallback } from 'react'
+import React, { useCallback, useEffect, useId, useLayoutEffect, useRef, useState } from 'react'
 import { Eye, EyeOff } from 'lucide-react'
+import { useVirtualizer } from '@tanstack/react-virtual'
 import { useAppStore } from '@/store'
 import {
   Dialog,
@@ -9,16 +10,37 @@ import {
   DialogTitle
 } from '@/components/ui/dialog'
 import { Button } from '@/components/ui/button'
+import { Label } from '@/components/ui/label'
+import { Switch } from '@/components/ui/switch'
 import {
-  getHiddenExternalWorktrees,
-  getVisibleExternalWorktrees
+  getHiddenImportableExternalWorktrees,
+  getVisibleNonOrcaWorktrees
 } from '../../../../shared/external-worktree-inbox'
 import { isGitRepoKind } from '../../../../shared/repo-kind'
+import { relativePathInsideRoot } from '../../../../shared/cross-platform-path'
 import {
+  effectiveAgentWorktreeVisibility,
   effectiveExternalWorktreeVisibility,
   isLegacyRepoForExternalWorktreeVisibility
 } from '../../../../shared/worktree-ownership'
 import { translate } from '@/i18n/i18n'
+import {
+  importNewExternalWorktreeInboxPaths,
+  type NewExternalWorktreesInboxActionState
+} from './new-external-worktrees-inbox-actions'
+import WorktreeVisibilityHelpPopover from './WorktreeVisibilityHelpPopover'
+import { getRepoHostIdentity } from '@/store/slices/repo-host-identity'
+import {
+  resolveWorktreeVisibilityHostTarget,
+  useWorktreeVisibilityHostActions
+} from './worktree-visibility-host-target'
+import {
+  finishVisibilityMutation,
+  getActiveVisibilityMutation,
+  startVisibilityMutation,
+  type ActiveVisibilityMutation,
+  useVisibilityMutationFence
+} from './worktree-visibility-mutation-fence'
 
 export default function WorktreeVisibilityDialog(): React.JSX.Element | null {
   const activeModal = useAppStore((s) => s.activeModal)
@@ -28,59 +50,216 @@ export default function WorktreeVisibilityDialog(): React.JSX.Element | null {
   const updateRepo = useAppStore((s) => s.updateRepo)
   const fetchWorktrees = useAppStore((s) => s.fetchWorktrees)
   const detectedWorktreesByRepo = useAppStore((s) => s.detectedWorktreesByRepo)
+  const settings = useAppStore((s) => s.settings)
+  const [actionState, setActionState] = useState<NewExternalWorktreesInboxActionState | null>(null)
+  const [busyPath, setBusyPath] = useState<string | null>(null)
+  const [isToggling, setIsToggling] = useState(false)
+  const [listState, setListState] = useState<'checking' | 'ready' | 'failed'>('checking')
+  const alwaysShowSwitchId = useId()
+  const hiddenListHeadingId = useId()
+  const hiddenListRef = useRef<HTMLDivElement>(null)
 
+  const isOpen = activeModal === 'worktree-visibility'
   const repoId = typeof modalData.repoId === 'string' ? modalData.repoId : ''
-  const repo = repos.find((candidate) => candidate.id === repoId) ?? null
-  const detected = repoId ? detectedWorktreesByRepo[repoId] : undefined
+  const {
+    detected,
+    repo,
+    requestedHostId,
+    scope: mutationScope
+  } = resolveWorktreeVisibilityHostTarget(
+    { repos, settings, detectedWorktreesByRepo },
+    repoId,
+    modalData.hostId
+  )
+  const currentMutationScopeRef = useRef(mutationScope)
+  const activeMutation = getActiveVisibilityMutation(mutationScope)
+  const effectiveBusyPath =
+    busyPath ?? (activeMutation?.kind === 'row' ? activeMutation.path : null)
+  const effectivelyToggling = isToggling || activeMutation?.kind === 'toggle'
   const showOther = repo
     ? effectiveExternalWorktreeVisibility(repo, isLegacyRepoForExternalWorktreeVisibility(repo)) ===
       'show'
     : false
-  const hiddenCount = getHiddenExternalWorktrees(detected).length
-  const otherCount = getVisibleExternalWorktrees(detected).length
+  const showAgentScratch = repo ? effectiveAgentWorktreeVisibility(repo) === 'show' : false
+  const alwaysShow = showOther && showAgentScratch
+  const hiddenImportable = getHiddenImportableExternalWorktrees(detected)
+  const hiddenCount = hiddenImportable.length
+  const otherCount = getVisibleNonOrcaWorktrees(detected).length
   const hiddenWorktreeLabel = `${hiddenCount} ${hiddenCount === 1 ? 'worktree' : 'worktrees'}`
   const shownWorktreeLabel = `${otherCount} ${otherCount === 1 ? 'worktree' : 'worktrees'}`
+  const hiddenListVirtualizer = useVirtualizer({
+    count: hiddenImportable.length,
+    getScrollElement: () => hiddenListRef.current,
+    estimateSize: () => 56,
+    getItemKey: (index) => hiddenImportable[index]?.id ?? index,
+    overscan: 3,
+    initialRect: { width: 480, height: 224 }
+  })
 
-  const handleToggle = useCallback(async () => {
+  useLayoutEffect(() => {
+    currentMutationScopeRef.current = mutationScope
+  }, [mutationScope])
+
+  const { refreshTargetRepo, updateTargetRepo } = useWorktreeVisibilityHostActions(
+    fetchWorktrees,
+    updateRepo,
+    requestedHostId
+  )
+
+  useVisibilityMutationFence({
+    scope: mutationScope,
+    repoId,
+    currentScopeRef: currentMutationScopeRef,
+    refresh: refreshTargetRepo,
+    setActionState,
+    setBusyPath,
+    setIsToggling,
+    setListState
+  })
+
+  // Why: recovery must not trust a stale or fallback snapshot — an empty one
+  // would read as "nothing hidden" for a worktree that is sitting on disk (#10324).
+  useEffect(() => {
+    if (!isOpen || !repoId) {
+      return
+    }
+    // Why: reopening mid-write must not start a scan that can absorb the mutation's confirmation refresh.
+    if (getActiveVisibilityMutation(mutationScope)) {
+      return
+    }
+    let cancelled = false
+    setListState('checking')
+    void refreshTargetRepo(repoId, { requireAuthoritative: true }).then((refreshed) => {
+      if (!cancelled) {
+        setListState(refreshed ? 'ready' : 'failed')
+      }
+    })
+    return () => {
+      cancelled = true
+    }
+  }, [isOpen, mutationScope, refreshTargetRepo, repoId])
+
+  const handleRetryList = useCallback(async () => {
     if (!repoId) {
       return
     }
-    await updateRepo(repoId, {
-      externalWorktreeVisibility: showOther ? 'hide' : 'show',
-      // Why: showing hidden externals again should re-enable the inbox if the
-      // user previously opted out of discovery prompts for this repo.
-      // Why: null is the transport sentinel for clearing on remote runtime paths
-      // where `undefined` is stripped before persistence.
-      ...(!showOther ? { externalWorktreeDiscoverySuppressedAt: null } : {})
-    })
-    await fetchWorktrees(repoId)
-    closeModal()
-  }, [closeModal, fetchWorktrees, repoId, showOther, updateRepo])
+    setListState('checking')
+    const refreshed = await refreshTargetRepo(repoId, { requireAuthoritative: true })
+    if (currentMutationScopeRef.current === mutationScope) {
+      setListState(refreshed ? 'ready' : 'failed')
+    }
+  }, [mutationScope, refreshTargetRepo, repoId])
 
-  if (activeModal !== 'worktree-visibility' || !repo || !isGitRepoKind(repo)) {
+  const handleShowWorktree = useCallback(
+    async (worktreePath: string) => {
+      if (!repo) {
+        return
+      }
+      const mutation: ActiveVisibilityMutation = { kind: 'row', path: worktreePath }
+      const targetMutationScope = getRepoHostIdentity(repo)
+      startVisibilityMutation(targetMutationScope, mutation)
+      setBusyPath(worktreePath)
+      try {
+        await importNewExternalWorktreeInboxPaths({
+          projectId: repo.id,
+          repo,
+          worktreePaths: [worktreePath],
+          updateRepo: updateTargetRepo,
+          fetchWorktrees: refreshTargetRepo,
+          setInboxState: (_projectId, state) => {
+            if (currentMutationScopeRef.current !== targetMutationScope) {
+              return
+            }
+            setActionState(state)
+            // Why: a null state is only reachable after a successful authoritative
+            // refetch, which supersedes an earlier failed open-time scan.
+            if (state === null) {
+              setListState('ready')
+            }
+          }
+        })
+      } finally {
+        finishVisibilityMutation(targetMutationScope, mutation)
+        if (currentMutationScopeRef.current === targetMutationScope) {
+          setBusyPath(null)
+        }
+      }
+    },
+    [refreshTargetRepo, repo, updateTargetRepo]
+  )
+
+  const handleAlwaysShowChange = useCallback(
+    async (checked: boolean) => {
+      if (!repoId || checked === alwaysShow) {
+        return
+      }
+      const mutation: ActiveVisibilityMutation = { kind: 'toggle' }
+      startVisibilityMutation(mutationScope, mutation)
+      setActionState(null)
+      setIsToggling(true)
+      try {
+        const updated = await updateTargetRepo(repoId, {
+          externalWorktreeVisibility: checked ? 'show' : 'hide',
+          agentWorktreeVisibility: checked ? 'show' : 'hide',
+          // Why: showing hidden externals again should re-enable the inbox if the
+          // user previously opted out of discovery prompts for this repo.
+          // Why: null is the transport sentinel for clearing on remote runtime paths
+          // where `undefined` is stripped before persistence.
+          ...(checked ? { externalWorktreeDiscoverySuppressedAt: null } : {})
+        })
+        if (!updated) {
+          if (currentMutationScopeRef.current === mutationScope) {
+            setActionState({
+              pending: false,
+              error: translate(
+                'auto.components.sidebar.WorktreeVisibilityDialog.d40d436fc2',
+                'Could not update worktree visibility. Try again.'
+              )
+            })
+          }
+          return
+        }
+        const refreshed = await refreshTargetRepo(repoId, { requireAuthoritative: true })
+        if (currentMutationScopeRef.current === mutationScope) {
+          setListState(refreshed ? 'ready' : 'failed')
+        }
+      } finally {
+        finishVisibilityMutation(mutationScope, mutation)
+        if (currentMutationScopeRef.current === mutationScope) {
+          setIsToggling(false)
+        }
+      }
+    },
+    [alwaysShow, mutationScope, refreshTargetRepo, repoId, updateTargetRepo]
+  )
+
+  if (!isOpen || !repo || !isGitRepoKind(repo)) {
     return null
   }
 
   return (
     <Dialog open onOpenChange={(open) => !open && closeModal()}>
-      <DialogContent className="sm:max-w-md">
+      <DialogContent className="sm:max-w-lg">
         <DialogHeader>
-          <DialogTitle>
-            {translate(
-              'auto.components.sidebar.WorktreeVisibilityDialog.83a5ba8dd1',
-              'Non-Orca worktrees'
-            )}
-          </DialogTitle>
+          <div className="flex items-center gap-1.5">
+            <DialogTitle>
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityDialog.83a5ba8dd1',
+                'Non-Orca worktrees'
+              )}
+            </DialogTitle>
+            <WorktreeVisibilityHelpPopover />
+          </div>
           <DialogDescription>{repo.displayName}</DialogDescription>
         </DialogHeader>
 
         <div className="flex items-center gap-3 rounded-lg border border-border bg-muted/30 p-3">
           <div className="flex size-8 shrink-0 items-center justify-center rounded-md bg-background text-muted-foreground">
-            {showOther ? <Eye className="size-4" /> : <EyeOff className="size-4" />}
+            {alwaysShow ? <Eye className="size-4" /> : <EyeOff className="size-4" />}
           </div>
           <div className="min-w-0 flex-1">
             <div className="text-sm font-medium">
-              {showOther
+              {alwaysShow
                 ? translate(
                     'auto.components.sidebar.WorktreeVisibilityDialog.3e045d4cb8',
                     'Shown in sidebar'
@@ -91,7 +270,7 @@ export default function WorktreeVisibilityDialog(): React.JSX.Element | null {
                   )}
             </div>
             <div className="text-xs text-muted-foreground">
-              {showOther
+              {alwaysShow
                 ? translate(
                     'auto.components.sidebar.WorktreeVisibilityDialog.8372e4bbd9',
                     '{{value0}} currently shown',
@@ -99,21 +278,145 @@ export default function WorktreeVisibilityDialog(): React.JSX.Element | null {
                   )
                 : translate(
                     'auto.components.sidebar.WorktreeVisibilityDialog.25ddf19920',
-                    '{{value0}} available to import',
+                    '{{value0}} currently hidden',
                     { value0: hiddenWorktreeLabel }
                   )}
             </div>
           </div>
-          <Button
-            type="button"
-            variant={showOther ? 'secondary' : 'outline'}
-            onClick={handleToggle}
-          >
-            {showOther
-              ? translate('auto.components.sidebar.WorktreeVisibilityDialog.759371df43', 'Hide')
-              : translate('auto.components.sidebar.WorktreeVisibilityDialog.f1f71b9f02', 'Import')}
-          </Button>
+          <Label htmlFor={alwaysShowSwitchId} className="shrink-0 gap-2">
+            {translate(
+              'auto.components.sidebar.WorktreeVisibilityDialog.f1f71b9f02',
+              'Always show'
+            )}
+            <Switch
+              id={alwaysShowSwitchId}
+              checked={alwaysShow}
+              disabled={
+                effectiveBusyPath !== null || effectivelyToggling || listState === 'checking'
+              }
+              onCheckedChange={(checked) => void handleAlwaysShowChange(checked)}
+            />
+          </Label>
         </div>
+
+        {listState === 'checking' ? (
+          <p aria-live="polite" className="text-xs text-muted-foreground">
+            {translate('auto.components.sidebar.WorktreeVisibilityDialog.a3f19c07d2', 'Checking…')}
+          </p>
+        ) : null}
+
+        {listState === 'failed' ? (
+          <div className="flex min-w-0 items-center gap-3" role="alert">
+            <p className="min-w-0 flex-1 text-xs text-destructive">
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityDialog.b8d24e61f5',
+                "Could not list this repo's worktrees."
+              )}
+            </p>
+            <Button
+              type="button"
+              variant="outline"
+              size="sm"
+              disabled={effectiveBusyPath !== null || effectivelyToggling}
+              onClick={handleRetryList}
+            >
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityDialog.c5e70a93b1',
+                'Try again'
+              )}
+            </Button>
+          </div>
+        ) : null}
+
+        {hiddenImportable.length > 0 ? (
+          <div className="grid min-w-0 gap-2">
+            <div>
+              <h3 id={hiddenListHeadingId} className="text-sm font-medium">
+                {translate(
+                  'auto.components.sidebar.WorktreeVisibilityDialog.7d21c5e848',
+                  'Hidden worktrees ({{value0}})',
+                  { value0: hiddenImportable.length }
+                )}
+              </h3>
+              <p className="text-xs text-muted-foreground">
+                {translate(
+                  'auto.components.sidebar.WorktreeVisibilityDialog.9b53f7a160',
+                  'Choose which hidden worktrees to show individually.'
+                )}
+              </p>
+            </div>
+            <div
+              ref={hiddenListRef}
+              aria-labelledby={hiddenListHeadingId}
+              className="scrollbar-sleek max-h-56 min-w-0 overflow-y-auto"
+              tabIndex={0}
+              style={{
+                height: `${Math.min(hiddenListVirtualizer.getTotalSize(), 224)}px`
+              }}
+            >
+              <ul
+                className="relative min-w-0"
+                style={{ height: `${hiddenListVirtualizer.getTotalSize()}px` }}
+              >
+                {hiddenListVirtualizer.getVirtualItems().map((virtualRow) => {
+                  const worktree = hiddenImportable[virtualRow.index]
+                  if (!worktree) {
+                    return null
+                  }
+                  const displayPath =
+                    relativePathInsideRoot(repo.path, worktree.path) || worktree.path
+                  return (
+                    <li
+                      key={worktree.id}
+                      ref={hiddenListVirtualizer.measureElement}
+                      data-index={virtualRow.index}
+                      className="absolute left-0 top-0 w-full pb-1"
+                      style={{ transform: `translateY(${virtualRow.start}px)` }}
+                      aria-posinset={virtualRow.index + 1}
+                      aria-setsize={hiddenImportable.length}
+                    >
+                      <div className="flex min-w-0 items-center gap-3 rounded-md border border-border px-3 py-2">
+                        <div className="min-w-0 flex-1">
+                          <div className="truncate text-sm">{worktree.displayName}</div>
+                          <div className="truncate text-xs text-muted-foreground">
+                            {displayPath}
+                          </div>
+                        </div>
+                        <Button
+                          type="button"
+                          variant="outline"
+                          size="sm"
+                          disabled={
+                            effectiveBusyPath !== null ||
+                            effectivelyToggling ||
+                            listState === 'checking'
+                          }
+                          onClick={() => void handleShowWorktree(worktree.path)}
+                        >
+                          {effectiveBusyPath === worktree.path
+                            ? translate(
+                                'auto.components.sidebar.WorktreeVisibilityDialog.2f80cd4b97',
+                                'Showing…'
+                              )
+                            : translate(
+                                'auto.components.sidebar.WorktreeVisibilityDialog.e64b81d3a9',
+                                'Show'
+                              )}
+                        </Button>
+                      </div>
+                    </li>
+                  )
+                })}
+              </ul>
+            </div>
+          </div>
+        ) : null}
+
+        {actionState?.error ? (
+          <p className="text-xs text-destructive" role="alert">
+            {actionState.error}
+          </p>
+        ) : null}
       </DialogContent>
     </Dialog>
   )
diff --git a/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.test.tsx b/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.test.tsx
new file mode 100644
index 00000000000..3822753ad2c
--- /dev/null
+++ b/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.test.tsx
@@ -0,0 +1,123 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+vi.mock('@/i18n/i18n', () => ({
+  translate: (_key: string, fallback: string) => fallback
+}))
+
+let container: HTMLDivElement
+let root: Root
+
+beforeEach(() => {
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  document.body.innerHTML = ''
+})
+
+async function renderPopover(): Promise<HTMLButtonElement> {
+  const { default: WorktreeVisibilityHelpPopover } = await import('./WorktreeVisibilityHelpPopover')
+  await act(async () => root.render(<WorktreeVisibilityHelpPopover />))
+  const trigger = document.querySelector<HTMLButtonElement>(
+    'button[aria-label="Which worktrees are hidden by default?"]'
+  )
+  if (!trigger) {
+    throw new Error('Missing worktree visibility help trigger')
+  }
+  return trigger
+}
+
+function content(): HTMLElement | null {
+  return document.querySelector('[data-slot="popover-content"]')
+}
+
+async function dispatch(target: EventTarget, event: Event): Promise<void> {
+  await act(async () => target.dispatchEvent(event))
+}
+
+describe('WorktreeVisibilityHelpPopover', () => {
+  it('stays closed when the trigger receives initial dialog focus', async () => {
+    const trigger = await renderPopover()
+
+    await act(async () => trigger.focus())
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('false')
+    expect(content()).toBeNull()
+  })
+
+  it('opens on pointer hover and closes when the pointer leaves', async () => {
+    const trigger = await renderPopover()
+    const hoverTarget = trigger.parentElement
+    expect(hoverTarget).not.toBeNull()
+
+    await dispatch(
+      hoverTarget!,
+      new PointerEvent('pointerover', { bubbles: true, pointerType: 'mouse' })
+    )
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('true')
+    expect(content()?.getAttribute('aria-label')).toBe('Which worktrees are hidden by default?')
+    expect(content()?.textContent).toContain('current and future non-Orca worktrees')
+    expect(content()?.textContent).toContain('.claude/worktrees/*')
+    expect(content()?.textContent).toContain('.gsd-workspaces/*')
+
+    await dispatch(
+      hoverTarget!,
+      new PointerEvent('pointerout', {
+        bubbles: true,
+        pointerType: 'mouse',
+        relatedTarget: document.body
+      })
+    )
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('false')
+    expect(content()).toBeNull()
+  })
+
+  it('opens without moving focus and dismisses with Escape', async () => {
+    const trigger = await renderPopover()
+    trigger.focus()
+
+    await dispatch(trigger, new MouseEvent('click', { bubbles: true, cancelable: true }))
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('true')
+    expect(document.activeElement).toBe(trigger)
+
+    await dispatch(
+      document,
+      new KeyboardEvent('keydown', { key: 'Escape', bubbles: true, cancelable: true })
+    )
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('false')
+    expect(document.activeElement).toBe(trigger)
+  })
+
+  it('dismisses when the user clicks outside', async () => {
+    const trigger = await renderPopover()
+    await dispatch(trigger, new MouseEvent('click', { bubbles: true, cancelable: true }))
+    expect(trigger.getAttribute('aria-expanded')).toBe('true')
+    await act(async () => new Promise((resolve) => setTimeout(resolve, 0)))
+
+    await act(async () => {
+      document.body.dispatchEvent(
+        new PointerEvent('pointerdown', { bubbles: true, pointerType: 'mouse' })
+      )
+      document.body.dispatchEvent(
+        new PointerEvent('pointerup', { bubbles: true, pointerType: 'mouse' })
+      )
+      document.body.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+    })
+
+    expect(trigger.getAttribute('aria-expanded')).toBe('false')
+  })
+})
diff --git a/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.tsx b/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.tsx
new file mode 100644
index 00000000000..bcb96c79e84
--- /dev/null
+++ b/src/renderer/src/components/sidebar/WorktreeVisibilityHelpPopover.tsx
@@ -0,0 +1,68 @@
+import React, { useState } from 'react'
+import { CircleHelp } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { Popover, PopoverContent, PopoverTrigger } from '@/components/ui/popover'
+import { translate } from '@/i18n/i18n'
+
+export default function WorktreeVisibilityHelpPopover(): React.JSX.Element {
+  const [open, setOpen] = useState(false)
+  const title = translate(
+    'auto.components.sidebar.WorktreeVisibilityHelpPopover.c41f2d7e90',
+    'Which worktrees are hidden by default?'
+  )
+
+  return (
+    <div
+      className="inline-flex"
+      onPointerEnter={() => setOpen(true)}
+      onPointerLeave={() => setOpen(false)}
+    >
+      <Popover open={open} onOpenChange={setOpen}>
+        <PopoverTrigger asChild>
+          <Button
+            type="button"
+            variant="ghost"
+            size="icon-xs"
+            className="size-5 text-muted-foreground hover:bg-transparent hover:text-foreground dark:hover:bg-transparent"
+            aria-label={title}
+            aria-expanded={open}
+            title={title}
+            onClick={() => setOpen(true)}
+          >
+            <CircleHelp className="size-3.5" />
+          </Button>
+        </PopoverTrigger>
+        <PopoverContent
+          aria-label={title}
+          align="start"
+          side="bottom"
+          sideOffset={6}
+          className="w-80 p-3"
+          onOpenAutoFocus={(event) => event.preventDefault()}
+        >
+          <div className="text-sm font-medium">{title}</div>
+          <ul className="mt-2 grid list-disc gap-2 pl-4 text-xs leading-5 text-muted-foreground text-pretty">
+            <li>
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityHelpPopover.8db4e19a26',
+                'This setting never hides worktrees created through Orca.'
+              )}
+            </li>
+            <li>
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityHelpPopover.54a7c2f183',
+                'For newly added repositories, worktrees created manually or by another tool are hidden by default to avoid unexpected sidebar clutter.'
+              )}
+            </li>
+            <li>
+              {translate(
+                'auto.components.sidebar.WorktreeVisibilityHelpPopover.b9e0d43675',
+                'Always show includes current and future non-Orca worktrees, including agent worktrees under .claude/worktrees/* and .gsd-workspaces/*. When it is off, use Show below to add one individually.'
+              )}
+            </li>
+          </ul>
+        </PopoverContent>
+      </Popover>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/sidebar/add-remote-host-ssh-actions.ts b/src/renderer/src/components/sidebar/add-remote-host-ssh-actions.ts
index 7ad8c6f5f86..6b585156749 100644
--- a/src/renderer/src/components/sidebar/add-remote-host-ssh-actions.ts
+++ b/src/renderer/src/components/sidebar/add-remote-host-ssh-actions.ts
@@ -43,7 +43,7 @@ export async function saveNewSshHostFromForm({
 }: {
   form: EditingTarget
   ssh: SshApi
-  recordSshRepoReadoptions: (readoptions: SshRepoReadoption[]) => void
+  recordSshRepoReadoptions: (readoptions: readonly SshRepoReadoption[]) => void
   setSshTargetsMetadata: (targets: SshTarget[]) => void
   recordFeatureInteraction: (feature: 'ssh') => void
 }): Promise<'saved' | 'validation-failed' | 'failed'> {
@@ -170,7 +170,7 @@ export async function addAllSshConfigHostsToOrca({
   recordFeatureInteraction
 }: {
   ssh: SshApi
-  recordSshRepoReadoptions: (readoptions: SshRepoReadoption[]) => void
+  recordSshRepoReadoptions: (readoptions: readonly SshRepoReadoption[]) => void
   setSshTargetsMetadata: (targets: SshTarget[]) => void
   recordFeatureInteraction: (feature: 'ssh') => void
 }): Promise<{ kind: 'added'; count: number } | { kind: 'already-synced' } | { kind: 'failed' }> {
diff --git a/src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts b/src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts
new file mode 100644
index 00000000000..35ce05a2244
--- /dev/null
+++ b/src/renderer/src/components/sidebar/add-repo-browse-authority.test.ts
@@ -0,0 +1,43 @@
+import { describe, expect, it, vi } from 'vitest'
+import { parseExecutionHostId } from '../../../../shared/execution-host'
+import { routeAddRepoBrowse } from './add-repo-browse-authority'
+
+describe('routeAddRepoBrowse', () => {
+  it('opens paired host browsing without invoking native pickFolders', () => {
+    const pickFolders = vi.fn()
+    const browseRuntime = vi.fn()
+
+    routeAddRepoBrowse(parseExecutionHostId('runtime:paired-host'), {
+      browseLocal: pickFolders,
+      browseRuntime,
+      browseSsh: vi.fn()
+    })
+
+    expect(browseRuntime).toHaveBeenCalledOnce()
+    expect(pickFolders).not.toHaveBeenCalled()
+  })
+
+  it('preserves native folder browsing for desktop local hosts', () => {
+    const pickFolders = vi.fn()
+
+    routeAddRepoBrowse(parseExecutionHostId('local'), {
+      browseLocal: pickFolders,
+      browseRuntime: vi.fn(),
+      browseSsh: vi.fn()
+    })
+
+    expect(pickFolders).toHaveBeenCalledOnce()
+  })
+
+  it('preserves SSH host browsing', () => {
+    const browseSsh = vi.fn()
+
+    routeAddRepoBrowse(parseExecutionHostId('ssh:builder'), {
+      browseLocal: vi.fn(),
+      browseRuntime: vi.fn(),
+      browseSsh
+    })
+
+    expect(browseSsh).toHaveBeenCalledWith('builder')
+  })
+})
diff --git a/src/renderer/src/components/sidebar/add-repo-browse-authority.ts b/src/renderer/src/components/sidebar/add-repo-browse-authority.ts
new file mode 100644
index 00000000000..364e21201e4
--- /dev/null
+++ b/src/renderer/src/components/sidebar/add-repo-browse-authority.ts
@@ -0,0 +1,24 @@
+import type { ParsedExecutionHost } from '../../../../shared/execution-host'
+
+export type AddRepoBrowseAuthorityActions = {
+  browseLocal: () => void
+  browseRuntime: () => void
+  browseSsh: (targetId: string) => void
+}
+
+export function routeAddRepoBrowse(
+  host: ParsedExecutionHost | null,
+  actions: AddRepoBrowseAuthorityActions
+): void {
+  if (host?.kind === 'runtime') {
+    actions.browseRuntime()
+    return
+  }
+  if (host?.kind === 'ssh') {
+    actions.browseSsh(host.targetId)
+    return
+  }
+  if (host?.kind === 'local') {
+    actions.browseLocal()
+  }
+}
diff --git a/src/renderer/src/components/sidebar/add-repo-skip-finalization.ts b/src/renderer/src/components/sidebar/add-repo-skip-finalization.ts
index 4161f3bb6f9..7c9c69357ce 100644
--- a/src/renderer/src/components/sidebar/add-repo-skip-finalization.ts
+++ b/src/renderer/src/components/sidebar/add-repo-skip-finalization.ts
@@ -3,7 +3,7 @@ import { isDefaultBranchWorkspace } from './visible-worktrees'
 
 export type AddRepoSkipFinalizationState = {
   activeRepoId: string | null
-  filterRepoIds: string[]
+  filterRepoIds: readonly string[]
   showActiveOnly: boolean
   hideDefaultBranchWorkspace: boolean
   showSleepingWorkspaces: boolean
diff --git a/src/renderer/src/components/sidebar/smart-attention.test.ts b/src/renderer/src/components/sidebar/smart-attention.test.ts
index 2c4324938cd..8723cf937fc 100644
--- a/src/renderer/src/components/sidebar/smart-attention.test.ts
+++ b/src/renderer/src/components/sidebar/smart-attention.test.ts
@@ -195,6 +195,70 @@ describe('resolveAttention', () => {
     })
   })
 
+  it('drops a done pane out of Class 2 once the completion itself ages out', () => {
+    const justInside = makeEntry({
+      paneKey: 't:1',
+      state: 'done',
+      stateStartedAt: NOW - AGENT_STATUS_STALE_AFTER_MS,
+      updatedAt: NOW - 1_000
+    })
+    expect(resolveAttention([hookPane(justInside)], NOW)).toEqual({
+      cls: 2,
+      attentionTimestamp: NOW - AGENT_STATUS_STALE_AFTER_MS
+    })
+
+    const justOutside = makeEntry({
+      paneKey: 't:1',
+      state: 'done',
+      stateStartedAt: NOW - AGENT_STATUS_STALE_AFTER_MS - 1,
+      updatedAt: NOW - 1_000
+    })
+    expect(resolveAttention([hookPane(justOutside)], NOW)).toEqual(IDLE)
+  })
+
+  it('does not let same-state done writes extend Class 2 eligibility', () => {
+    // The captured regression: updatedAt was 3m04s newer than the completion, keeping a 32m-old
+    // "done" row above two spinners.
+    const entry = makeEntry({
+      paneKey: 't:1',
+      state: 'done',
+      stateStartedAt: NOW - 32 * 60_000,
+      updatedAt: NOW - 29 * 60_000
+    })
+    expect(resolveAttention([hookPane(entry)], NOW)).toEqual(IDLE)
+  })
+
+  it('keeps an expired done pane from masking a live working sibling', () => {
+    const expiredDone = makeEntry({
+      paneKey: 't:1',
+      state: 'done',
+      stateStartedAt: NOW - AGENT_STATUS_STALE_AFTER_MS - 60_000,
+      updatedAt: NOW - 1_000
+    })
+    const working = makeEntry({
+      paneKey: 't:2',
+      state: 'working',
+      stateStartedAt: NOW - 10_000,
+      updatedAt: NOW - 1_000
+    })
+    expect(resolveAttention(hookPanes([expiredDone, working]), NOW)).toEqual({
+      cls: 3,
+      attentionTimestamp: NOW - 10_000
+    })
+  })
+
+  it('ages out a session-boundary completion from its real completion time', () => {
+    const boundary = makeEntry({
+      paneKey: 't:1',
+      state: 'done',
+      sessionBoundary: true,
+      stateStartedAt: NOW - 1_000,
+      updatedAt: NOW - 500,
+      stateHistory: [makeHistory('done', NOW - AGENT_STATUS_STALE_AFTER_MS - 1)]
+    })
+    expect(resolveAttention([hookPane(boundary)], NOW)).toEqual(IDLE)
+  })
+
   it('classifies a working pane with prior done as Class 3 with the prior timestamp', () => {
     const entry = makeEntry({
       paneKey: 't:1',
diff --git a/src/renderer/src/components/sidebar/smart-attention.ts b/src/renderer/src/components/sidebar/smart-attention.ts
index d1a182cb224..5238a9091eb 100644
--- a/src/renderer/src/components/sidebar/smart-attention.ts
+++ b/src/renderer/src/components/sidebar/smart-attention.ts
@@ -1,4 +1,5 @@
 import { classifyTitleActivity, isExplicitAgentStatusFresh } from '@/lib/pane-agent-evidence'
+import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import { migrationUnsupportedToAgentStatusEntry } from '@/lib/migration-unsupported-agent-entry'
 import { tabHasLivePty } from '@/lib/tab-has-live-pty'
 import { resolveRuntimePaneTitleLeafId } from '@/lib/runtime-pane-title-leaf-id'
@@ -15,9 +16,9 @@ import { parsePaneKey } from '../../../../shared/stable-pane-id'
 /**
  * Ordinal class for the "Smart" sort. Lower number = more attention-demanding.
  *   1 — Needs you (`blocked` / `waiting`)
- *   2 — Done (`done`, not interrupted)
+ *   2 — Done (`done`, not interrupted, completed within AGENT_STATUS_STALE_AFTER_MS)
  *   3 — Working (`working`)
- *   4 — Idle (no live entry, stale entry, or interrupted `done`)
+ *   4 — Idle (no live entry, stale entry, interrupted `done`, or an aged-out completion)
  *
  * Primary sort key; ties fall back to the attention timestamp. See docs/smart-worktree-order-redesign.md.
  */
@@ -34,7 +35,7 @@ export type AttentionCause = 'blocked' | 'waiting' | 'title-heuristic'
  * Per-worktree resolution computed once before sorting.
  *
  * `attentionTimestamp` by class:
- *   - Class 1 / 2: `stateStartedAt` of the current entry.
+ *   - Class 1: `stateStartedAt` of the current entry. Class 2: the entry's completion time.
  *   - Class 3: `stateStartedAt` of the most recent prior `done`/`blocked`/`waiting` entry,
  *     falling back to the current `working` `stateStartedAt`.
  *   - Class 4: `0` — comparator drops to `effectiveRecentActivity` for idle ordering.
@@ -98,21 +99,6 @@ export function mostRecentAttentionInHistory(history: AgentStateHistoryEntry[]):
   return max > 0 ? max : null
 }
 
-function mostRecentCompletedTurnInHistory(history: AgentStateHistoryEntry[]): number | null {
-  let max = 0
-  for (const entry of history) {
-    if (
-      entry.state === 'done' &&
-      entry.interrupted !== true &&
-      Number.isFinite(entry.startedAt) &&
-      entry.startedAt > max
-    ) {
-      max = entry.startedAt
-    }
-  }
-  return max > 0 ? max : null
-}
-
 /**
  * One pane's contribution to a worktree's attention class. Fresh hook entries win; hookless
  * panes fall back to the title heuristic (design doc Edge case 9). Authority is per-pane, not per-worktree.
@@ -152,21 +138,19 @@ export function resolveAttention(panes: PaneInput[], now: number): WorktreeAtten
         ts = entry.stateStartedAt
         cause = entry.state
       } else if (entry.state === 'done') {
-        // Why: interrupted `done` (Ctrl+C) means the user is done with the turn; treat as idle, not Class 2.
-        if (entry.interrupted) {
+        // Why: null covers interrupted `done` (Ctrl+C — user is finished with it) and idle session
+        // boundaries; neither is attention.
+        const completedAt = agentEntryCompletionAt(entry)
+        if (completedAt === null) {
+          continue
+        }
+        // Why: same-state `done` writes advance updatedAt without moving the completion, so the hook
+        // freshness gate alone can keep a row in Class 2 long after the UI shows it aged out.
+        if (now - completedAt > AGENT_STATUS_STALE_AFTER_MS) {
           continue
         }
         cls = 2
-        if (entry.sessionBoundary) {
-          // Why: idle connect is not new attention; only preserve a real completion it displaced.
-          const completedAt = mostRecentCompletedTurnInHistory(entry.stateHistory)
-          if (completedAt === null) {
-            continue
-          }
-          ts = completedAt
-        } else {
-          ts = entry.stateStartedAt
-        }
+        ts = completedAt
       } else {
         // working
         cls = 3
diff --git a/src/renderer/src/components/sidebar/smart-sort.test.ts b/src/renderer/src/components/sidebar/smart-sort.test.ts
index 47c437f5199..75af8fae1cc 100644
--- a/src/renderer/src/components/sidebar/smart-sort.test.ts
+++ b/src/renderer/src/components/sidebar/smart-sort.test.ts
@@ -109,7 +109,8 @@ function ptyMapForTabs(tabsByWorktree: Record<string, TerminalTab[]>): Record<st
  * Sort helper: builds the attention map and runs the smart comparator. Mirrors
  * what callers do in production (visible-worktrees, WorktreeList).
  */
-function sortSmart(
+function sortSmartAt(
+  now: number,
   worktrees: Worktree[],
   tabsByWorktree: Record<string, TerminalTab[]>,
   agentStatusByPaneKey: Record<string, AgentStatusEntry>
@@ -120,9 +121,17 @@ function sortSmart(
     agentStatusByPaneKey,
     {},
     ptyMapForTabs(tabsByWorktree),
-    NOW
+    now
   )
-  return [...worktrees].sort(buildWorktreeComparator('smart', repoMap, NOW, attention))
+  return [...worktrees].sort(buildWorktreeComparator('smart', repoMap, now, attention))
+}
+
+function sortSmart(
+  worktrees: Worktree[],
+  tabsByWorktree: Record<string, TerminalTab[]>,
+  agentStatusByPaneKey: Record<string, AgentStatusEntry>
+): Worktree[] {
+  return sortSmartAt(NOW, worktrees, tabsByWorktree, agentStatusByPaneKey)
 }
 
 describe('smart sort — class invariants', () => {
@@ -354,6 +363,62 @@ describe('smart sort — interrupted and stale handling', () => {
   })
 })
 
+describe('smart sort — completed-agent eligibility clock', () => {
+  // Captured regression (docs/smart-sort-agent-activity-findings.md): a `done` row whose
+  // updatedAt was 3m04s newer than its completion outranked two live spinners.
+  const SCREENSHOT_AT = new Date('2026-03-27T21:44:39.000Z').getTime()
+  const at = (hhmmss: string): number => new Date(`2026-03-27T${hhmmss}.000Z`).getTime()
+
+  function capturedFixture(workingUpdatedAt = at('21:44:30')) {
+    const done = makeWorktree({ id: 'fix-linear-persistent', displayName: 'fix-linear-persistent' })
+    const workingA = makeWorktree({ id: 'allow-editing', displayName: 'allow-editing' })
+    const workingB = makeWorktree({ id: 'resume-terminal', displayName: 'resume-terminal' })
+    const tabs = {
+      [done.id]: [makeTab({ id: 'tab-done', worktreeId: done.id })],
+      [workingA.id]: [makeTab({ id: 'tab-a', worktreeId: workingA.id })],
+      [workingB.id]: [makeTab({ id: 'tab-b', worktreeId: workingB.id })]
+    }
+    const entries = {
+      [paneKey('tab-done', '1')]: makeEntry({
+        paneKey: paneKey('tab-done', '1'),
+        state: 'done',
+        stateStartedAt: at('21:12:09'),
+        // Same-state `done` writes pushed updatedAt 3m04s past the completion.
+        updatedAt: at('21:15:13')
+      }),
+      [paneKey('tab-a', '1')]: makeEntry({
+        paneKey: paneKey('tab-a', '1'),
+        state: 'working',
+        stateStartedAt: workingUpdatedAt - 68_000,
+        updatedAt: workingUpdatedAt
+      }),
+      [paneKey('tab-b', '1')]: makeEntry({
+        paneKey: paneKey('tab-b', '1'),
+        state: 'working',
+        stateStartedAt: workingUpdatedAt - 145_000,
+        updatedAt: workingUpdatedAt - 5_000
+      })
+    }
+    return { worktrees: [done, workingA, workingB], tabs, entries }
+  }
+
+  it('ranks the two spinners above the 32-minute-old completion', () => {
+    const { worktrees, tabs, entries } = capturedFixture()
+    const sorted = sortSmartAt(SCREENSHOT_AT, worktrees, tabs, entries)
+    expect(sorted.map((w) => w.id)).toEqual([
+      'allow-editing',
+      'resume-terminal',
+      'fix-linear-persistent'
+    ])
+  })
+
+  it('still ranks that completion above the spinners inside its own window', () => {
+    const { worktrees, tabs, entries } = capturedFixture(at('21:39:50'))
+    const sorted = sortSmartAt(at('21:40:00'), worktrees, tabs, entries)
+    expect(sorted[0].id).toBe('fix-linear-persistent')
+  })
+})
+
 describe('smart sort — Class 4 ordering', () => {
   it('breaks ties on effectiveRecentActivity, then displayName', () => {
     const recentlyActive = makeWorktree({
diff --git a/src/renderer/src/components/sidebar/use-add-repo-host-change-reset.ts b/src/renderer/src/components/sidebar/use-add-repo-host-change-reset.ts
index effec4b5192..52a77a3b581 100644
--- a/src/renderer/src/components/sidebar/use-add-repo-host-change-reset.ts
+++ b/src/renderer/src/components/sidebar/use-add-repo-host-change-reset.ts
@@ -7,7 +7,7 @@ export function useAddRepoHostChangeReset({
   onResetHostScopedState
 }: {
   isOpen: boolean
-  selectedHostId: string
+  selectedHostId: string | null
   onResetClosed: () => void
   onResetHostScopedState: () => void
 }) {
diff --git a/src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts b/src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts
index b9a77b2e9bd..90ee6d9df50 100644
--- a/src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts
+++ b/src/renderer/src/components/sidebar/use-add-repo-host-selection.test.ts
@@ -17,7 +17,8 @@ const mocks = vi.hoisted(() => ({
     runtimeEnvironments: [] as { id: string; name: string; source?: 'manual' | 'ephemeral-vm' }[]
   },
   sshConnect: vi.fn(),
-  sshGetState: vi.fn()
+  sshGetState: vi.fn(),
+  isWebClient: false
 }))
 
 vi.mock('react', async (importOriginal) => {
@@ -64,6 +65,10 @@ vi.mock('./use-sidebar-host-scope-options', () => ({
   useSidebarHostScopeOptions: () => ({ hostOptions: mocks.hostOptions })
 }))
 
+vi.mock('@/lib/web-client-location', () => ({
+  isWebClientLocation: () => mocks.isWebClient
+}))
+
 describe('useAddRepoHostSelection', () => {
   beforeEach(() => {
     vi.clearAllMocks()
@@ -103,6 +108,7 @@ describe('useAddRepoHostSelection', () => {
     mocks.storeState.runtimeEnvironments = []
     mocks.sshConnect.mockReset()
     mocks.sshGetState.mockReset()
+    mocks.isWebClient = false
     vi.stubGlobal('window', {
       api: {
         ssh: {
@@ -137,6 +143,56 @@ describe('useAddRepoHostSelection', () => {
     expect(setStep).toHaveBeenCalledWith('add')
   })
 
+  it('uses the paired runtime as the only local filesystem authority in web clients', async () => {
+    mocks.isWebClient = true
+    mocks.stateValues = ['local', false]
+    const { useAddRepoHostSelection } = await import('./use-add-repo-host-selection')
+
+    const result = useAddRepoHostSelection({ isOpen: true, setStep: vi.fn() })
+
+    expect(result.hostOptions.map((host) => host.id)).toEqual(['ssh:ssh-1', 'runtime:env-1'])
+    expect(result.selectedHostId).toBe('runtime:env-1')
+    expect(result.selectedParsedHost).toMatchObject({
+      kind: 'runtime',
+      environmentId: 'env-1'
+    })
+  })
+
+  it('has no local fallback while a paired web runtime is loading', async () => {
+    mocks.isWebClient = true
+    mocks.stateValues = ['local', false]
+    mocks.hostOptions = [mocks.hostOptions[0]]
+    const { useAddRepoHostSelection } = await import('./use-add-repo-host-selection')
+
+    const result = useAddRepoHostSelection({ isOpen: true, setStep: vi.fn() })
+
+    expect(result.hostOptions).toEqual([])
+    expect(result.selectedHostId).toBeNull()
+    expect(result.selectedParsedHost).toBeNull()
+    expect(mocks.stateSetters[0]).not.toHaveBeenCalledWith('local')
+  })
+
+  it.each(['error', 'blocked'] as const)(
+    'has no paired-web fallback when the only host is %s',
+    async (health) => {
+      mocks.isWebClient = true
+      mocks.stateValues = ['runtime:env-1', false]
+      mocks.hostOptions = [
+        {
+          ...mocks.hostOptions[2],
+          health
+        }
+      ]
+      const { useAddRepoHostSelection } = await import('./use-add-repo-host-selection')
+
+      const result = useAddRepoHostSelection({ isOpen: true, setStep: vi.fn() })
+
+      expect(result.hostOptions).toHaveLength(1)
+      expect(result.selectedHostId).toBeNull()
+      expect(result.selectedParsedHost).toBeNull()
+    }
+  )
+
   it('selects a local or SSH host without changing the durable active server', async () => {
     mocks.stateValues = ['runtime:env-1', false]
     mocks.storeState.settings = { activeRuntimeEnvironmentId: 'env-1' }
diff --git a/src/renderer/src/components/sidebar/use-add-repo-host-selection.ts b/src/renderer/src/components/sidebar/use-add-repo-host-selection.ts
index 684fa75d78b..8f729a5ef66 100644
--- a/src/renderer/src/components/sidebar/use-add-repo-host-selection.ts
+++ b/src/renderer/src/components/sidebar/use-add-repo-host-selection.ts
@@ -13,6 +13,7 @@ import type { AddRepoDialogStep } from './add-repo-dialog-types'
 import { useSidebarHostScopeOptions } from './use-sidebar-host-scope-options'
 import { canSelectAddRepoHost } from './add-repo-host-availability'
 import { translate } from '@/i18n/i18n'
+import { isWebClientLocation } from '@/lib/web-client-location'
 
 export function useAddRepoHostSelection({
   isOpen,
@@ -22,7 +23,7 @@ export function useAddRepoHostSelection({
   setStep: (step: AddRepoDialogStep) => void
 }): {
   hostOptions: ReturnType<typeof useSidebarHostScopeOptions>['hostOptions']
-  selectedHostId: ExecutionHostId
+  selectedHostId: ExecutionHostId | null
   selectedParsedHost: ReturnType<typeof parseExecutionHostId>
   selectedSshTargetId: string | null
   hostSelectorOpen: boolean
@@ -35,6 +36,7 @@ export function useAddRepoHostSelection({
   const sshConnectionStates = useAppStore((s) => s.sshConnectionStates)
   const runtimeEnvironments = useAppStore((s) => s.runtimeEnvironments)
   const { hostOptions } = useSidebarHostScopeOptions()
+  const isWebClient = isWebClientLocation()
   const ephemeralRuntimeEnvironmentIds = useMemo(
     () =>
       new Set(
@@ -49,26 +51,30 @@ export function useAddRepoHostSelection({
       hostOptions.filter((host) => {
         const parsed = parseExecutionHostId(host.id)
         return (
-          parsed?.kind !== 'runtime' || !ephemeralRuntimeEnvironmentIds.has(parsed.environmentId)
+          !(isWebClient && parsed?.kind === 'local') &&
+          (parsed?.kind !== 'runtime' || !ephemeralRuntimeEnvironmentIds.has(parsed.environmentId))
         )
       }),
-    [ephemeralRuntimeEnvironmentIds, hostOptions]
+    [ephemeralRuntimeEnvironmentIds, hostOptions, isWebClient]
   )
   const [selectedAddProjectHostId, setSelectedAddProjectHostId] =
     useState<ExecutionHostId>(LOCAL_EXECUTION_HOST_ID)
   const [hostSelectorOpen, setHostSelectorOpen] = useState(false)
   const previousOpenRef = useRef(false)
+  const pairedWebRuntimeHost = isWebClient
+    ? selectableHostOptions.find((host) => host.kind === 'runtime' && canSelectAddRepoHost(host))
+    : undefined
 
   const selectedHost =
     selectableHostOptions.find(
       (host) => host.id === selectedAddProjectHostId && canSelectAddRepoHost(host)
     ) ??
+    pairedWebRuntimeHost ??
     selectableHostOptions.find(
       (host) => host.id === LOCAL_EXECUTION_HOST_ID && canSelectAddRepoHost(host)
     ) ??
-    selectableHostOptions.find((host) => canSelectAddRepoHost(host)) ??
-    selectableHostOptions[0]
-  const selectedHostId = selectedHost?.id ?? LOCAL_EXECUTION_HOST_ID
+    selectableHostOptions.find((host) => canSelectAddRepoHost(host))
+  const selectedHostId = selectedHost?.id ?? (isWebClient ? null : LOCAL_EXECUTION_HOST_ID)
   const selectedParsedHost = parseExecutionHostId(selectedHostId)
   const selectedSshTargetId =
     selectedParsedHost?.kind === 'ssh' ? selectedParsedHost.targetId : null
@@ -80,14 +86,16 @@ export function useAddRepoHostSelection({
         (host) => host.id === focusedHostId && canSelectAddRepoHost(host)
       )
         ? focusedHostId
-        : LOCAL_EXECUTION_HOST_ID
-      setSelectedAddProjectHostId(nextHostId)
+        : (pairedWebRuntimeHost?.id ?? (isWebClient ? null : LOCAL_EXECUTION_HOST_ID))
+      if (nextHostId) {
+        setSelectedAddProjectHostId(nextHostId)
+      }
     }
     if (!isOpen) {
       setHostSelectorOpen(false)
     }
     previousOpenRef.current = isOpen
-  }, [isOpen, selectableHostOptions, settings])
+  }, [isOpen, isWebClient, pairedWebRuntimeHost?.id, selectableHostOptions, settings])
 
   const handleSelectAddProjectHost = useCallback(
     async (hostId: ExecutionHostId): Promise<void> => {
diff --git a/src/renderer/src/components/sidebar/use-worktree-card-controller.ts b/src/renderer/src/components/sidebar/use-worktree-card-controller.ts
index e4668bb0a4c..6a116991023 100644
--- a/src/renderer/src/components/sidebar/use-worktree-card-controller.ts
+++ b/src/renderer/src/components/sidebar/use-worktree-card-controller.ts
@@ -135,7 +135,8 @@ export function useWorktreeCardController(props: ResolvedWorktreeCardProps) {
     agentActivityDisplayMode: foundation.agentActivityDisplayMode,
     workspacePorts: foundation.workspacePorts,
     openTaskPage: foundation.openTaskPage,
-    updateWorktreeMeta: foundation.updateWorktreeMeta
+    updateWorktreeMeta: foundation.updateWorktreeMeta,
+    settings: foundation.settings
   })
 
   return {
diff --git a/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.store-subscriptions.test.tsx b/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.store-subscriptions.test.tsx
new file mode 100644
index 00000000000..693dba8f412
--- /dev/null
+++ b/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.store-subscriptions.test.tsx
@@ -0,0 +1,168 @@
+// @vitest-environment happy-dom
+
+import { act, type ReactNode } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, describe, expect, it } from 'vitest'
+import { useAppStore } from '@/store'
+import { readStoreListenerCount } from '@/store/store-listener-census'
+import type { GlobalSettings, Worktree } from '../../../../shared/types'
+import { usePromptCacheCountdownStartedAt } from './CacheTimer'
+import { useWorktreeCardSecondaryDetails } from './use-worktree-card-secondary-details'
+import { useWorktreeAgentRows } from './useWorktreeAgentRows'
+
+const WORKTREE_ID = 'repo-1::/repo/worktrees/card'
+const originalState = useAppStore.getState()
+
+let root: Root | null = null
+let container: HTMLDivElement | null = null
+
+function mount(node: ReactNode): void {
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+  act(() => root?.render(node))
+}
+
+function unmount(): void {
+  if (root) {
+    act(() => root?.unmount())
+  }
+  root = null
+  container?.remove()
+  container = null
+}
+
+function listenerCount(): number {
+  const count = readStoreListenerCount()
+  if (count === null) {
+    throw new Error('store listener census unavailable')
+  }
+  return count
+}
+
+function makeWorktree(): Worktree {
+  return {
+    id: WORKTREE_ID,
+    repoId: 'repo-1',
+    path: '/repo/worktrees/card',
+    displayName: 'Card',
+    branch: 'feature/card',
+    head: 'abc123',
+    isBare: false,
+    isMainWorktree: false,
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 1
+  }
+}
+
+function makeSettings(promptCacheTtlMs: number): GlobalSettings {
+  return { promptCacheTimerEnabled: true, promptCacheTtlMs } as GlobalSettings
+}
+
+function secondaryDetailsArgs(settings: GlobalSettings) {
+  return {
+    worktree: makeWorktree(),
+    repo: undefined,
+    statusPrDisplay: null,
+    showStatus: false,
+    showIssue: false,
+    showLinearIssue: false,
+    showJiraIssue: false,
+    showPR: false,
+    showAutomation: false,
+    showCli: false,
+    showComment: false,
+    showPorts: false,
+    issueDisplay: null,
+    linearIssue: null,
+    linearIssueDisplay: null,
+    jiraIssueDisplay: null,
+    prDisplay: null,
+    linkedGitLabMR: null,
+    linkedBitbucketPR: null,
+    linkedAzureDevOpsPR: null,
+    linkedGiteaPR: null,
+    cardProps: [] as never,
+    newCardStyle: false,
+    compactCards: false,
+    agentActivityDisplayMode: 'compact' as const,
+    workspacePorts: [],
+    openTaskPage: (() => {}) as never,
+    updateWorktreeMeta: (() => {}) as never,
+    settings
+  }
+}
+
+afterEach(() => {
+  unmount()
+  useAppStore.setState(originalState, true)
+})
+
+describe('useWorktreeCardSecondaryDetails store subscriptions', () => {
+  it('adds no store listener of its own beyond the hooks it composes', () => {
+    const settings = makeSettings(300_000)
+
+    // Baseline: the two hooks it composes, mounted on their own.
+    const composedBaseline = listenerCount()
+    function ComposedProbe(): null {
+      useWorktreeAgentRows(WORKTREE_ID, false)
+      usePromptCacheCountdownStartedAt(WORKTREE_ID, true)
+      return null
+    }
+    mount(<ComposedProbe />)
+    const composedListeners = listenerCount() - composedBaseline
+    unmount()
+
+    const baseline = listenerCount()
+    function Probe(): null {
+      useWorktreeCardSecondaryDetails(secondaryDetailsArgs(settings))
+      return null
+    }
+    mount(<Probe />)
+
+    // Why: promptCacheTtlMs comes from the settings the card already subscribes to,
+    // so this hook must not open a third subscription for the same field.
+    expect(listenerCount() - baseline).toBe(composedListeners)
+
+    unmount()
+    expect(listenerCount()).toBe(baseline)
+  })
+
+  it('reads the cache TTL from the passed settings', () => {
+    let cacheTtlMs = -1
+    function Probe({ ttl }: { ttl: number }): null {
+      cacheTtlMs = useWorktreeCardSecondaryDetails(
+        secondaryDetailsArgs(makeSettings(ttl))
+      ).cacheTtlMs
+      return null
+    }
+
+    mount(<Probe ttl={300_000} />)
+    expect(cacheTtlMs).toBe(300_000)
+
+    act(() => root?.render(<Probe ttl={120_000} />))
+    expect(cacheTtlMs).toBe(120_000)
+  })
+
+  it('reports no TTL while the aggregate cache timer is suppressed', () => {
+    let cacheTtlMs = -1
+    function Probe(): null {
+      // compactCards suppresses the aggregate timer row.
+      cacheTtlMs = useWorktreeCardSecondaryDetails({
+        ...secondaryDetailsArgs(makeSettings(300_000)),
+        compactCards: true
+      }).cacheTtlMs
+      return null
+    }
+
+    mount(<Probe />)
+    expect(cacheTtlMs).toBe(0)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.ts b/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.ts
index b5a8a6292ba..ebc7cf483c8 100644
--- a/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.ts
+++ b/src/renderer/src/components/sidebar/use-worktree-card-secondary-details.ts
@@ -1,7 +1,6 @@
 import React, { useCallback } from 'react'
 
 import type { GitHubWorkItem } from '../../../../shared/types'
-import { useAppStore } from '@/store'
 import { hasWorktreeCardDetails } from './WorktreeCardMeta'
 import { usePromptCacheCountdownStartedAt } from './CacheTimer'
 import { useWorktreeAgentRows } from './useWorktreeAgentRows'
@@ -42,7 +41,8 @@ export function useWorktreeCardSecondaryDetails({
   agentActivityDisplayMode,
   workspacePorts,
   openTaskPage,
-  updateWorktreeMeta
+  updateWorktreeMeta,
+  settings
 }: Pick<WorktreeCardProps, 'worktree' | 'repo' | 'statusPrDisplay'> &
   Pick<
     Foundation,
@@ -53,6 +53,7 @@ export function useWorktreeCardSecondaryDetails({
     | 'workspacePorts'
     | 'openTaskPage'
     | 'updateWorktreeMeta'
+    | 'settings'
   > &
   Pick<LinkedDetails, 'issueDisplay' | 'linearIssue' | 'linearIssueDisplay' | 'jiraIssueDisplay'> &
   Pick<
@@ -190,9 +191,9 @@ export function useWorktreeCardSecondaryDetails({
   })
   const hasPorts = showPorts && workspacePorts.length > 0
   const cacheStartedAt = usePromptCacheCountdownStartedAt(worktree.id, showAggregateCacheTimer)
-  const cacheTtlMs = useAppStore((s) =>
-    showAggregateCacheTimer ? (s.settings?.promptCacheTtlMs ?? 0) : 0
-  )
+  // Why: derived from the settings the card already subscribes to — a third store
+  // subscription for this one field costs a listener per card on every store write.
+  const cacheTtlMs = showAggregateCacheTimer ? (settings?.promptCacheTtlMs ?? 0) : 0
 
   return {
     showUnreadEmphasis,
diff --git a/src/renderer/src/components/sidebar/visible-worktrees.ts b/src/renderer/src/components/sidebar/visible-worktrees.ts
index f85083db406..206d81dbe38 100644
--- a/src/renderer/src/components/sidebar/visible-worktrees.ts
+++ b/src/renderer/src/components/sidebar/visible-worktrees.ts
@@ -186,7 +186,7 @@ export function computeVisibleWorktreeIds(
   worktreesByRepo: Record<string, Worktree[]>,
   sortedIds: string[],
   opts: {
-    filterRepoIds: string[]
+    filterRepoIds: readonly string[]
     showSleepingWorkspaces: boolean
     tabsByWorktree: Record<string, Pick<TerminalTab, 'id'>[]> | null
     ptyIdsByTabId: Record<string, string[]> | null
diff --git a/src/renderer/src/components/sidebar/worktree-drag-preview-offsets.ts b/src/renderer/src/components/sidebar/worktree-drag-preview-offsets.ts
index cf97cad8958..86bf48a9b0a 100644
--- a/src/renderer/src/components/sidebar/worktree-drag-preview-offsets.ts
+++ b/src/renderer/src/components/sidebar/worktree-drag-preview-offsets.ts
@@ -11,28 +11,37 @@ function arraysEqual(a: readonly string[], b: readonly string[]): boolean {
   return a.length === b.length && a.every((value, index) => value === b[index])
 }
 
-function getFallbackStride(rects: readonly WorktreeDragPreviewRect[]): number {
+function getFallbackStride(rects: readonly WorktreeDragPreviewRect[], defaultGap: number): number {
   const sortedRects = [...rects].sort((a, b) => a.groupIndex - b.groupIndex)
   const strides: number[] = []
   for (let index = 1; index < sortedRects.length; index++) {
-    strides.push(sortedRects[index]!.top - sortedRects[index - 1]!.top)
+    const previous = sortedRects[index - 1]!
+    const current = sortedRects[index]!
+    const indexDelta = current.groupIndex - previous.groupIndex
+    if (indexDelta > 0) {
+      strides.push((current.top - previous.top) / indexDelta)
+    }
   }
   if (strides.length > 0) {
     strides.sort((a, b) => a - b)
     return strides[Math.floor(strides.length / 2)]!
   }
   const firstRect = sortedRects[0]
-  return firstRect ? firstRect.bottom - firstRect.top : 0
+  return firstRect ? firstRect.bottom - firstRect.top + defaultGap : 0
 }
 
-function getFallbackGap(rects: readonly WorktreeDragPreviewRect[]): number {
+function getFallbackGap(rects: readonly WorktreeDragPreviewRect[], defaultGap: number): number {
   const sortedRects = [...rects].sort((a, b) => a.groupIndex - b.groupIndex)
   const gaps: number[] = []
   for (let index = 1; index < sortedRects.length; index++) {
-    gaps.push(Math.max(0, sortedRects[index]!.top - sortedRects[index - 1]!.bottom))
+    const previous = sortedRects[index - 1]!
+    const current = sortedRects[index]!
+    if (current.groupIndex === previous.groupIndex + 1) {
+      gaps.push(Math.max(0, current.top - previous.bottom))
+    }
   }
   if (gaps.length === 0) {
-    return 0
+    return defaultGap
   }
   gaps.sort((a, b) => a - b)
   return gaps[Math.floor(gaps.length / 2)]!
@@ -70,6 +79,8 @@ export function buildWorktreeDragPreviewOffsets(args: {
   groupIds: readonly string[]
   draggedIds: readonly string[]
   draggingWorktreeId?: string | null
+  draggedPreviewHeight?: number | null
+  fallbackGap?: number
   dropIndex: number
   rects: readonly WorktreeDragPreviewRect[]
 }): WorktreeDragPreviewLayout {
@@ -106,13 +117,18 @@ export function buildWorktreeDragPreviewOffsets(args: {
     }
   }
 
-  const fallbackStride = getFallbackStride(args.rects)
-  const fallbackGap = getFallbackGap(args.rects)
+  const defaultGap =
+    typeof args.fallbackGap === 'number' &&
+    Number.isFinite(args.fallbackGap) &&
+    args.fallbackGap >= 0
+      ? args.fallbackGap
+      : 0
+  const fallbackStride = getFallbackStride(args.rects, defaultGap)
+  const fallbackGap = getFallbackGap(args.rects, defaultGap)
   const groupRects = args.groupIds.flatMap((id) => {
     const rect = rectById.get(id)
     return rect ? [rect] : []
   })
-  const baseTop = groupRects[0]?.top ?? 0
   const fallbackHeight = Math.max(0, fallbackStride - fallbackGap)
   const gapAfterById = new Map<string, number>()
   for (let index = 0; index < groupRects.length; index++) {
@@ -120,19 +136,51 @@ export function buildWorktreeDragPreviewOffsets(args: {
     const nextRect = groupRects[index + 1]
     gapAfterById.set(
       rect.worktreeId,
-      nextRect ? Math.max(0, nextRect.top - rect.bottom) : fallbackGap
+      nextRect?.groupIndex === rect.groupIndex + 1
+        ? Math.max(0, nextRect.top - rect.bottom)
+        : fallbackGap
     )
   }
 
+  const previewDraggedId = layoutDraggedIds[0] ?? null
+  const draggedPreviewHeight =
+    previewDraggedId === args.draggingWorktreeId &&
+    typeof args.draggedPreviewHeight === 'number' &&
+    Number.isFinite(args.draggedPreviewHeight) &&
+    args.draggedPreviewHeight > 0
+      ? args.draggedPreviewHeight
+      : null
+  const getHeight = (id: string): number => {
+    const rect = rectById.get(id)
+    if (rect) {
+      return rect.bottom - rect.top
+    }
+    return id === previewDraggedId && draggedPreviewHeight !== null
+      ? draggedPreviewHeight
+      : fallbackHeight
+  }
+  const getStride = (id: string): number => getHeight(id) + (gapAfterById.get(id) ?? fallbackGap)
+
+  const firstGroupRect = groupRects[0]
+  let baseTop = firstGroupRect?.top ?? 0
+  if (firstGroupRect) {
+    // Why: virtualized leading rows are absent from rects, so derive the full
+    // list origin from the first mounted row before replaying its order.
+    for (let index = 0; index < firstGroupRect.groupIndex; index++) {
+      const id = args.groupIds[index]
+      if (id) {
+        baseTop -= getStride(id)
+      }
+    }
+  }
+
   const targetTopById = new Map<string, number>()
   let nextTop = baseTop
   // Why: lineage drag units can be much taller than ordinary cards, so replay
   // layout with measured heights instead of mapping indexes to old slot tops.
   for (const id of nextIds) {
     targetTopById.set(id, nextTop)
-    const rect = rectById.get(id)
-    const height = rect ? rect.bottom - rect.top : fallbackHeight
-    nextTop += height + (gapAfterById.get(id) ?? fallbackGap)
+    nextTop += getStride(id)
   }
 
   const offsets = new Map<string, number>()
diff --git a/src/renderer/src/components/sidebar/worktree-lineage-projection.ts b/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
index 38c8584c064..040a40eb737 100644
--- a/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
+++ b/src/renderer/src/components/sidebar/worktree-lineage-projection.ts
@@ -15,7 +15,7 @@ export function getProjectedWorktreeLineage(
   worktree: Worktree,
   lineageById: Readonly<Record<string, WorktreeLineage>>
 ): WorktreeLineage | null | undefined {
-  if (Object.prototype.hasOwnProperty.call(lineageById, worktree.id)) {
+  if (Object.hasOwn(lineageById, worktree.id)) {
     return lineageById[worktree.id]
   }
   return (worktree as WorktreeWithResolvedLineage).lineage
diff --git a/src/renderer/src/components/sidebar/worktree-list-groups.ts b/src/renderer/src/components/sidebar/worktree-list-groups.ts
index 777e9fcfbe6..a154eea8263 100644
--- a/src/renderer/src/components/sidebar/worktree-list-groups.ts
+++ b/src/renderer/src/components/sidebar/worktree-list-groups.ts
@@ -1006,9 +1006,7 @@ export function buildRows(
   workspaceStatuses: readonly WorkspaceStatusDefinition[] = cloneDefaultWorkspaceStatuses(),
   projectOrderBy: ProjectOrderBy = 'manual',
   lineageById: Record<string, WorktreeLineage> = {},
-  worktreeMap: Map<string, Worktree> = new Map(
-    worktrees.map((worktree) => [worktree.id, worktree])
-  ),
+  worktreeMap = new Map<string, Worktree>(worktrees.map((worktree) => [worktree.id, worktree])),
   nestLineage = false,
   settings?: AppState['settings'],
   projectGroups: readonly ProjectGroup[] = [],
diff --git a/src/renderer/src/components/sidebar/worktree-list-virtual-rows.ts b/src/renderer/src/components/sidebar/worktree-list-virtual-rows.ts
index 69b8c71c010..4d6b0b7162c 100644
--- a/src/renderer/src/components/sidebar/worktree-list-virtual-rows.ts
+++ b/src/renderer/src/components/sidebar/worktree-list-virtual-rows.ts
@@ -5,6 +5,7 @@ import { getLineageGroupKey, PINNED_GROUP_KEY } from './worktree-list-groups'
 
 export const GROUP_HEADER_ROW_HEIGHT = 28
 export const HOST_HEADER_ROW_HEIGHT = 32
+export const WORKTREE_SIDEBAR_VIRTUAL_ROW_GAP = 6
 const SECONDARY_GROUP_HEADER_TOP_MARGIN = 4
 const IMPORTED_WORKTREES_LINE_ROW_HEIGHT = 36
 const PENDING_CREATION_ROW_HEIGHT = 56
diff --git a/src/renderer/src/components/sidebar/worktree-manual-order.test.ts b/src/renderer/src/components/sidebar/worktree-manual-order.test.ts
index 47e728e1cb6..5d7839956c5 100644
--- a/src/renderer/src/components/sidebar/worktree-manual-order.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-manual-order.test.ts
@@ -87,6 +87,28 @@ describe('buildWorktreeDragPreviewOffsets', () => {
     ])
   })
 
+  it('keeps downward offsets stable after virtualization unmounts the leading rows', () => {
+    const { offsets, placeholderTop } = buildWorktreeDragPreviewOffsets({
+      groupIds: ['a', 'b', 'c', 'd', 'e', 'f'],
+      draggedIds: ['a'],
+      draggingWorktreeId: 'a',
+      draggedPreviewHeight: 50,
+      dropIndex: 6,
+      rects: [
+        { worktreeId: 'd', groupIndex: 3, top: 168, bottom: 218 },
+        { worktreeId: 'e', groupIndex: 4, top: 224, bottom: 274 },
+        { worktreeId: 'f', groupIndex: 5, top: 280, bottom: 330 }
+      ]
+    })
+
+    expect(Array.from(offsets)).toEqual([
+      ['d', -56],
+      ['e', -56],
+      ['f', -56]
+    ])
+    expect(placeholderTop).toBe(280)
+  })
+
   it('slides intervening rows down while dragging a row up', () => {
     const { offsets } = buildWorktreeDragPreviewOffsets({
       groupIds: ['a', 'b', 'c'],
diff --git a/src/renderer/src/components/sidebar/worktree-review-helpers.test.tsx b/src/renderer/src/components/sidebar/worktree-review-helpers.test.tsx
index 7ca741d4ced..2be58e1bff5 100644
--- a/src/renderer/src/components/sidebar/worktree-review-helpers.test.tsx
+++ b/src/renderer/src/components/sidebar/worktree-review-helpers.test.tsx
@@ -44,4 +44,85 @@ describe('ReviewIcon', () => {
     expect(blocked).not.toContain('text-emerald-500/80')
     expect(blocked).not.toBe(passing)
   })
+
+  // Why: #13088 — a draft with failing checks used the same glyph as every other
+  // review and was painted red, so it was indistinguishable from a closed PR.
+  it('gives a draft its own glyph and never paints it with a check tone', () => {
+    const draft = renderToStaticMarkup(
+      <ReviewIcon
+        review={{
+          provider: 'github',
+          number: 1,
+          title: 'Draft',
+          state: 'draft',
+          status: 'failure'
+        }}
+        className="size-3"
+        variant="generic"
+      />
+    )
+    const closed = renderToStaticMarkup(
+      <ReviewIcon
+        review={{ provider: 'github', number: 1, title: 'Closed', state: 'closed' }}
+        className="size-3"
+        variant="generic"
+      />
+    )
+
+    expect(draft).toContain('lucide-git-pull-request-draft')
+    expect(draft).not.toContain('text-rose-500/85')
+    expect(closed).toContain('lucide-git-pull-request-closed')
+    expect(draft).not.toBe(closed)
+  })
+
+  it('keeps check tones on open reviews so failing checks still stand out', () => {
+    const failing = renderToStaticMarkup(
+      <ReviewIcon
+        review={{ provider: 'github', number: 1, title: 'Open', state: 'open', status: 'failure' }}
+        className="size-3"
+        variant="generic"
+      />
+    )
+
+    expect(failing).toContain('text-rose-500/85')
+  })
+
+  it('renders merged reviews with the merge glyph', () => {
+    const merged = renderToStaticMarkup(
+      <ReviewIcon
+        review={{ provider: 'github', number: 1, title: 'Merged', state: 'merged' }}
+        className="size-3"
+        variant="generic"
+      />
+    )
+
+    expect(merged).toContain('lucide-git-merge')
+  })
+
+  // Why: a closed MR used to render the merge glyph, which read as "already merged".
+  it('overrides the GitLab provider glyph for closed merge requests', () => {
+    const closed = renderToStaticMarkup(
+      <ReviewIcon review={{ ...gitlabReview, state: 'closed' }} className="size-3" />
+    )
+
+    expect(closed).toContain('lucide-git-pull-request-closed')
+    expect(closed).not.toContain('lucide-git-merge')
+  })
+
+  // Why: folder cards render a stateless row while a linked review loads or its
+  // details fail. There is no state glyph to contradict, so problems must still be
+  // visible — but a tone-less row must not be promoted to a passing green.
+  it('flags problems on a stateless row without ever claiming success', () => {
+    const stateless = (status: 'failure' | 'pending' | 'success') =>
+      renderToStaticMarkup(
+        <ReviewIcon
+          review={{ provider: 'github', number: 1, title: 'Loading PR...', status }}
+          className="size-3"
+        />
+      )
+
+    expect(stateless('failure')).toContain('text-rose-500/85')
+    expect(stateless('pending')).toContain('text-amber-500/85')
+    expect(stateless('success')).not.toContain('text-emerald-500/80')
+  })
 })
diff --git a/src/renderer/src/components/sidebar/worktree-review-helpers.tsx b/src/renderer/src/components/sidebar/worktree-review-helpers.tsx
index 7f096a954dc..96e64fb4423 100644
--- a/src/renderer/src/components/sidebar/worktree-review-helpers.tsx
+++ b/src/renderer/src/components/sidebar/worktree-review-helpers.tsx
@@ -1,4 +1,4 @@
-import { GitMerge } from 'lucide-react'
+import { GitMerge, GitPullRequestClosed, GitPullRequestDraft } from 'lucide-react'
 import { cn } from '@/lib/utils'
 import { PullRequestIcon } from './WorktreeCardHelpers'
 import type { WorktreeCardPrDisplay } from './worktree-card-pr-display'
@@ -23,6 +23,60 @@ export function getProviderName(review: WorktreeCardPrDisplay): string {
   return 'GitHub'
 }
 
+// Why: the glyph must carry review state — tone alone made a draft with failing
+// checks render as a red PR icon, which reads as closed.
+function getStateIcon(
+  state: WorktreeCardPrDisplay['state']
+): React.ComponentType<{ className?: string }> | null {
+  if (state === 'merged') {
+    return GitMerge
+  }
+  if (state === 'closed') {
+    return GitPullRequestClosed
+  }
+  if (state === 'draft') {
+    return GitPullRequestDraft
+  }
+  return null
+}
+
+// Why: checks only gate a review that is actually open; draft/closed/merged keep
+// their state tone so the glyph agrees with its tooltip. A stateless row (folder
+// cards render one while a linked review is loading or its details failed) has no
+// state glyph to contradict, so it still flags problems — but never claims success,
+// since emerald would assert an open review we have not confirmed.
+function getCheckTone(review: WorktreeCardPrDisplay): string | null {
+  if (review.state && review.state !== 'open') {
+    return null
+  }
+  if (review.status === 'failure') {
+    return 'text-rose-500/85'
+  }
+  if (review.status === 'pending') {
+    return 'text-amber-500/85'
+  }
+  if (review.state === 'open' && review.status === 'success') {
+    return 'text-emerald-500/80'
+  }
+  return null
+}
+
+function getStateTone(state: WorktreeCardPrDisplay['state']): string {
+  if (state === 'merged') {
+    return 'text-purple-600/70 dark:text-purple-400/70'
+  }
+  if (state === 'open') {
+    return 'text-emerald-500/80'
+  }
+  if (state === 'closed') {
+    return 'text-muted-foreground/60'
+  }
+  if (state === 'draft') {
+    return 'text-muted-foreground/50'
+  }
+  return 'text-muted-foreground opacity-70'
+}
+
 export function ReviewIcon({
   review,
   className,
@@ -32,28 +86,8 @@ export function ReviewIcon({
   className?: string
   variant?: 'provider' | 'generic'
 }): React.JSX.Element {
-  const Icon = variant === 'provider' && review.provider === 'gitlab' ? GitMerge : PullRequestIcon
-  const checkTone =
-    review.state !== 'merged' && review.status === 'failure'
-      ? 'text-rose-500/85'
-      : review.state !== 'merged' && review.status === 'pending'
-        ? 'text-amber-500/85'
-        : review.state === 'open' && review.status === 'success'
-          ? 'text-emerald-500/80'
-          : null
-  return (
-    <Icon
-      className={cn(
-        className,
-        checkTone,
-        review.state === 'merged' && 'text-purple-600/70 dark:text-purple-400/70',
-        !checkTone && review.state === 'open' && 'text-emerald-500/80',
-        !checkTone && review.state === 'closed' && 'text-muted-foreground/60',
-        !checkTone && review.state === 'draft' && 'text-muted-foreground/50',
-        !checkTone &&
-          (!review.state || !['merged', 'open', 'closed', 'draft'].includes(review.state)) &&
-          'text-muted-foreground opacity-70'
-      )}
-    />
-  )
+  const providerIcon =
+    variant === 'provider' && review.provider === 'gitlab' ? GitMerge : PullRequestIcon
+  const Icon = getStateIcon(review.state) ?? providerIcon
+  return <Icon className={cn(className, getCheckTone(review) ?? getStateTone(review.state))} />
 }
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.test.ts b/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.test.ts
index 1f44a94f7fa..2a1d9652713 100644
--- a/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.test.ts
@@ -159,20 +159,20 @@ describe('worktree sidebar drag geometry under mid-drag card growth', () => {
       scrollTop: 0
     }
 
-    expect(resolveWorktreeSidebarDropAnchorIndex({ anchor, rects: COLLAPSED })).toBeNull()
+    expect(resolveWorktreeSidebarDropAnchorIndex({ anchor, groupIds: GROUP_IDS })).toBeNull()
     expect(
       resolveWorktreeSidebarDropAnchorIndex({
         anchor: { beforeWorktreeId: 'c', pointerY: 0, scrollTop: 0 },
-        rects: COLLAPSED
+        groupIds: GROUP_IDS
       })
     ).toBe(2)
     // A null anchor id means end-of-group, which survives any row count change.
     expect(
       resolveWorktreeSidebarDropAnchorIndex({
         anchor: { beforeWorktreeId: null, pointerY: 0, scrollTop: 0 },
-        rects: COLLAPSED
+        groupIds: GROUP_IDS
       })
-    ).toBe(COLLAPSED.length)
+    ).toBe(GROUP_IDS.length)
   })
 
   it('keeps one live coordinate space across a session refresh', () => {
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.ts b/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.ts
index c903868b7ca..691bd7ab67e 100644
--- a/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.ts
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-drag-geometry.ts
@@ -70,25 +70,25 @@ export function shouldReevaluateWorktreeSidebarDropAnchor(args: {
 
 /**
  * Resolve a held anchor back to a drop index in the current layout. Returns null
- * when the anchored card is gone (deleted, filtered, or unmounted by
- * virtualization), so the caller falls back to a fresh geometric decision.
+ * when the anchored card is gone (deleted or filtered), so the caller falls
+ * back to a fresh geometric decision.
  */
 export function resolveWorktreeSidebarDropAnchorIndex(args: {
   anchor: WorktreeSidebarDropAnchor
-  rects: readonly WorktreeSidebarDragRect[]
+  groupIds: readonly string[]
 }): number | null {
   if (args.anchor.beforeWorktreeId === null) {
-    return args.rects.length
+    return args.groupIds.length
   }
-  const target = args.rects.find((rect) => rect.worktreeId === args.anchor.beforeWorktreeId)
-  return target ? target.groupIndex : null
+  const targetIndex = args.groupIds.indexOf(args.anchor.beforeWorktreeId)
+  return targetIndex !== -1 ? targetIndex : null
 }
 
 export function getWorktreeSidebarDropAnchorId(args: {
-  rects: readonly WorktreeSidebarDragRect[]
+  groupIds: readonly string[]
   dropIndex: number
 }): string | null {
-  return args.rects.find((rect) => rect.groupIndex === args.dropIndex)?.worktreeId ?? null
+  return args.groupIds[args.dropIndex] ?? null
 }
 
 /**
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.test.ts b/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.test.ts
index ef6147458a1..e1f1b870287 100644
--- a/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.test.ts
@@ -174,6 +174,80 @@ describe('computeWorktreeSidebarDropPreview', () => {
 
     expect(new Set(dropIndexes).size).toBe(1)
   })
+
+  it('keeps a downward end drop stable when leading rows are virtualized', () => {
+    const groupIds = ['a', 'b', 'c', 'd', 'e', 'f']
+    const mountedRects = [
+      { worktreeId: 'd', groupIndex: 3, top: 168, bottom: 218 },
+      { worktreeId: 'e', groupIndex: 4, top: 224, bottom: 274 },
+      { worktreeId: 'f', groupIndex: 5, top: 280, bottom: 330 }
+    ]
+    const input = {
+      pointerY: 320,
+      containerTop: 0,
+      scrollTop: 0,
+      rects: mountedRects,
+      groupIds,
+      draggedIds: ['a'],
+      draggingWorktreeId: 'a',
+      grab: { offsetY: 25, height: 50 }
+    }
+
+    const first = computeWorktreeSidebarDropPreview(input)!
+    const held = computeWorktreeSidebarDropPreview({
+      ...input,
+      anchor: { beforeWorktreeId: first.dropAnchorId, pointerY: 320, scrollTop: 0 }
+    })!
+
+    for (const preview of [first, held]) {
+      expect(preview).toMatchObject({
+        dropIndex: 6,
+        dropIndicatorY: 277,
+        dropAnchorId: null
+      })
+      expect(Array.from(preview.previewOffsetsByWorktreeId)).toEqual([
+        ['d', -56],
+        ['e', -56],
+        ['f', -56]
+      ])
+    }
+  })
+
+  it('uses the full group index when the dragged row is outside the mounted window', () => {
+    const preview = computeWorktreeSidebarDropPreview({
+      pointerY: 193,
+      containerTop: 0,
+      scrollTop: 0,
+      rects: [
+        { worktreeId: 'd', groupIndex: 3, top: 168, bottom: 218 },
+        { worktreeId: 'e', groupIndex: 4, top: 224, bottom: 274 },
+        { worktreeId: 'f', groupIndex: 5, top: 280, bottom: 330 }
+      ],
+      groupIds: ['a', 'b', 'c', 'd', 'e', 'f'],
+      draggedIds: ['e'],
+      draggingWorktreeId: 'e',
+      grab: { offsetY: 25, height: 50 }
+    })
+
+    expect(preview?.dropIndex).toBe(3)
+  })
+
+  it('preserves the virtual row gap when only one row remains mounted', () => {
+    const preview = computeWorktreeSidebarDropPreview({
+      pointerY: 305,
+      containerTop: 0,
+      scrollTop: 0,
+      rects: [{ worktreeId: 'f', groupIndex: 5, top: 280, bottom: 330 }],
+      groupIds: ['a', 'b', 'c', 'd', 'e', 'f'],
+      draggedIds: ['a'],
+      draggingWorktreeId: 'a',
+      fallbackGap: 6,
+      grab: { offsetY: 25, height: 50 }
+    })
+
+    expect(preview).toMatchObject({ dropIndex: 6, dropIndicatorY: 277 })
+    expect(Array.from(preview?.previewOffsetsByWorktreeId ?? [])).toEqual([['f', -56]])
+  })
 })
 
 describe('resolveWorktreeSidebarStatusDropCommitTarget', () => {
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.ts b/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.ts
index e25f2dd2b37..c2d5012a9be 100644
--- a/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.ts
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-drop-preview.ts
@@ -178,6 +178,7 @@ export function computeWorktreeSidebarDropPreview(args: {
   groupIds: readonly string[]
   draggedIds: readonly string[]
   draggingWorktreeId?: string | null
+  fallbackGap?: number
   // Where the card was grabbed, so the drop follows the card rather than the bare
   // pointer. Omitted for native HTML5 drags, which have no reliable grab offset.
   grab?: WorktreeSidebarDragGrab | null
@@ -194,10 +195,13 @@ export function computeWorktreeSidebarDropPreview(args: {
   }
 
   const localY = args.pointerY - args.containerTop + args.scrollTop
-  const activeIndex = args.draggingWorktreeId
-    ? rects.findIndex((rect) => rect.worktreeId === args.draggingWorktreeId)
+  const activeGroupIndex = args.draggingWorktreeId
+    ? args.groupIds.indexOf(args.draggingWorktreeId)
     : -1
-  const activeRect = activeIndex >= 0 ? rects[activeIndex]! : null
+  const activeRect =
+    activeGroupIndex >= 0
+      ? (rects.find((rect) => rect.worktreeId === args.draggingWorktreeId) ?? null)
+      : null
   const referenceY = getWorktreeSidebarDragReferenceY({
     localY,
     grab: args.grab ?? null,
@@ -217,15 +221,19 @@ export function computeWorktreeSidebarDropPreview(args: {
   }
 
   const heldIndex = args.anchor
-    ? resolveWorktreeSidebarDropAnchorIndex({ anchor: args.anchor, rects })
+    ? resolveWorktreeSidebarDropAnchorIndex({ anchor: args.anchor, groupIds: args.groupIds })
     : null
   let dropIndex: number
   if (heldIndex !== null) {
     dropIndex = heldIndex
   } else if (boundaryDrop.kind === 'drop') {
     dropIndex = boundaryDrop.dropIndex
-  } else if (activeRect) {
-    dropIndex = getWorktreeSidebarClosestCenterDropIndex({ referenceY, rects, activeIndex })
+  } else if (activeGroupIndex >= 0) {
+    dropIndex = getWorktreeSidebarClosestCenterDropIndex({
+      referenceY,
+      rects,
+      activeIndex: activeGroupIndex
+    })
   } else {
     dropIndex = getWorktreeSidebarPointerDropIndex({ referenceY, rects })
   }
@@ -234,6 +242,8 @@ export function computeWorktreeSidebarDropPreview(args: {
     groupIds: args.groupIds,
     draggedIds: args.draggedIds,
     draggingWorktreeId: args.draggingWorktreeId,
+    draggedPreviewHeight: args.grab?.height,
+    fallbackGap: args.fallbackGap,
     dropIndex,
     rects
   })
@@ -246,6 +256,6 @@ export function computeWorktreeSidebarDropPreview(args: {
       activeRect
     }),
     previewOffsetsByWorktreeId: offsets,
-    dropAnchorId: getWorktreeSidebarDropAnchorId({ rects, dropIndex })
+    dropAnchorId: getWorktreeSidebarDropAnchorId({ groupIds: args.groupIds, dropIndex })
   }
 }
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.test.ts b/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.test.ts
new file mode 100644
index 00000000000..9ba2cd592d0
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.test.ts
@@ -0,0 +1,34 @@
+import { describe, expect, it } from 'vitest'
+import {
+  createPendingRevealScroll,
+  isRevealScrollSettling,
+  REVEAL_SCROLL_SETTLE_TIMEOUT_MS
+} from './worktree-sidebar-reveal-scroll-settle'
+
+describe('isRevealScrollSettling', () => {
+  it('is not settling without a reveal scroll in flight', () => {
+    expect(isRevealScrollSettling({ now: 0, pending: null, scrollTop: 120 })).toBe(false)
+  })
+
+  it('stays settling while a smooth reveal scroll is still animating', () => {
+    // Regression: the anchor restore wrote scrollTop two frames into the animation and
+    // cancelled it after a couple of pixels, so revealing took several button clicks.
+    const pending = createPendingRevealScroll(387, 0)
+    expect(isRevealScrollSettling({ now: 16, pending, scrollTop: 2 })).toBe(true)
+    expect(isRevealScrollSettling({ now: 200, pending, scrollTop: 260 })).toBe(true)
+  })
+
+  it('stops settling once the scroll reaches its target', () => {
+    const pending = createPendingRevealScroll(387, 0)
+    expect(isRevealScrollSettling({ now: 300, pending, scrollTop: 387 })).toBe(false)
+    // Sub-pixel landings still count as arrived.
+    expect(isRevealScrollSettling({ now: 300, pending, scrollTop: 386.5 })).toBe(false)
+  })
+
+  it('stops settling after the timeout so an unreachable target cannot pin the guard open', () => {
+    const pending = createPendingRevealScroll(387, 0)
+    expect(
+      isRevealScrollSettling({ now: REVEAL_SCROLL_SETTLE_TIMEOUT_MS, pending, scrollTop: 40 })
+    ).toBe(false)
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.ts b/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.ts
new file mode 100644
index 00000000000..6f0d5d878f6
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-reveal-scroll-settle.ts
@@ -0,0 +1,36 @@
+/**
+ * Tracks a smooth reveal scroll the sidebar issued itself.
+ *
+ * A smooth scroll animates across many frames, and any other scrollTop write
+ * during that window silently cancels it. The sidebar's scroll-anchor restore
+ * writes exactly that, so without this the reveal stops a couple of pixels in
+ * and the user has to click the reveal button repeatedly.
+ */
+export type PendingRevealScroll = {
+  targetTop: number
+  expiresAt: number
+}
+
+/** Ceiling for a browser smooth-scroll animation; also the escape hatch when the target turns out to be unreachable. */
+export const REVEAL_SCROLL_SETTLE_TIMEOUT_MS = 1000
+
+const SETTLED_TOLERANCE_PX = 1
+
+export function createPendingRevealScroll(targetTop: number, now: number): PendingRevealScroll {
+  return { targetTop, expiresAt: now + REVEAL_SCROLL_SETTLE_TIMEOUT_MS }
+}
+
+export function isRevealScrollSettling({
+  now,
+  pending,
+  scrollTop
+}: {
+  now: number
+  pending: PendingRevealScroll | null
+  scrollTop: number
+}): boolean {
+  if (!pending || now >= pending.expiresAt) {
+    return false
+  }
+  return Math.abs(scrollTop - pending.targetTop) > SETTLED_TOLERANCE_PX
+}
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-reveal.test.ts b/src/renderer/src/components/sidebar/worktree-sidebar-reveal.test.ts
new file mode 100644
index 00000000000..8218c0e0144
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-reveal.test.ts
@@ -0,0 +1,55 @@
+import { describe, expect, it, vi } from 'vitest'
+import { revealElementInScrollContainer } from './worktree-sidebar-reveal'
+
+function makeContainer(scrollTop: number, clientHeight: number) {
+  const scrollTo = vi.fn()
+  const container = {
+    clientHeight,
+    scrollTop,
+    contains: () => true,
+    getBoundingClientRect: () => ({ top: 0, bottom: clientHeight }) as DOMRect,
+    scrollTo
+  }
+  return { container: container as unknown as HTMLElement, scrollTo }
+}
+
+function makeElement(top: number, bottom: number): Element {
+  return {
+    getBoundingClientRect: () => ({ top, bottom }) as DOMRect
+  } as unknown as Element
+}
+
+describe('revealElementInScrollContainer', () => {
+  it('reports the scroll target it issues so callers can guard the animation', () => {
+    const { container, scrollTo } = makeContainer(0, 673)
+    const onScrollIssued = vi.fn()
+
+    // A card mounted below the fold: reveal scrolls until its bottom is in view.
+    const revealed = revealElementInScrollContainer(
+      container,
+      makeElement(1005, 1060),
+      'smooth',
+      onScrollIssued
+    )
+
+    expect(revealed).toBe(true)
+    expect(scrollTo).toHaveBeenCalledWith({ top: 387, behavior: 'smooth' })
+    expect(onScrollIssued).toHaveBeenCalledWith(387)
+  })
+
+  it('does not report a scroll when the element is already in view', () => {
+    const { container, scrollTo } = makeContainer(0, 673)
+    const onScrollIssued = vi.fn()
+
+    const revealed = revealElementInScrollContainer(
+      container,
+      makeElement(200, 260),
+      'smooth',
+      onScrollIssued
+    )
+
+    expect(revealed).toBe(true)
+    expect(scrollTo).not.toHaveBeenCalled()
+    expect(onScrollIssued).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/components/sidebar/worktree-sidebar-reveal.ts b/src/renderer/src/components/sidebar/worktree-sidebar-reveal.ts
index 38b158532af..ffc8bd7f8df 100644
--- a/src/renderer/src/components/sidebar/worktree-sidebar-reveal.ts
+++ b/src/renderer/src/components/sidebar/worktree-sidebar-reveal.ts
@@ -38,7 +38,10 @@ export function getScrollTopToRevealBounds(
 export function revealElementInScrollContainer(
   container: HTMLElement,
   element: Element,
-  behavior: ScrollBehavior
+  behavior: ScrollBehavior,
+  // Why: any other scrollTop write cancels the scroll issued here mid-animation;
+  // callers use this to stand their scroll-position guards down until it lands.
+  onScrollIssued?: (targetTop: number) => void
 ): boolean {
   if (!container.contains(element)) {
     return false
@@ -59,6 +62,8 @@ export function revealElementInScrollContainer(
     window.matchMedia?.('(prefers-reduced-motion: reduce)').matches === true
   const resolvedBehavior: ScrollBehavior =
     behavior === 'smooth' && prefersReducedMotion ? 'auto' : behavior
-  container.scrollTo({ top: Math.max(0, nextScrollTop), behavior: resolvedBehavior })
+  const targetTop = Math.max(0, nextScrollTop)
+  onScrollIssued?.(targetTop)
+  container.scrollTo({ top: targetTop, behavior: resolvedBehavior })
   return true
 }
diff --git a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.test.ts b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.test.ts
index f20ace97b4f..44c3e7f2639 100644
--- a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.test.ts
+++ b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.test.ts
@@ -331,6 +331,22 @@ describe('buildTitleDerivedAgentRows', () => {
     }
   })
 
+  // Why: the native marker is the only signal a hookless OpenCode pane emits, so
+  // without it the sidebar showed no row for a running session.
+  it('rows an OpenCode pane from its undecorated native session title', () => {
+    const rows = buildWorktreeAgentRows({
+      tabs: [makeTab('tab-1')],
+      entries: [],
+      retained: [],
+      runtimePaneTitlesByTabId: { 'tab-1': { 1: 'OC | Ad hoc build' } },
+      ptyIdsByTabId: { 'tab-1': ['pty-opencode'] },
+      terminalLayoutsByTabId: { 'tab-1': makeSingleLayout(LEAF_ID_1) },
+      now: 2000
+    })
+
+    expect(rows.map((row) => [row.agentType, row.state])).toEqual([['opencode', 'idle']])
+  })
+
   it('still resolves Claude from a title that presents Claude, owner or not', () => {
     const rowsFor = (title: string, launchAgent?: TuiAgent) =>
       buildWorktreeAgentRows({
diff --git a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
index ceba63d3e07..9224fe2cba3 100644
--- a/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
+++ b/src/renderer/src/components/sidebar/worktree-title-derived-agent-rows.ts
@@ -285,7 +285,7 @@ function resolveLeafIdForTitleFallback(args: {
   }
 
   const paneIndex = args.paneTitleEntries.findIndex(([paneId]) => Number(paneId) === args.paneId)
-  return paneIndex >= 0 ? (leafIds[paneIndex] ?? null) : null
+  return paneIndex !== -1 ? (leafIds[paneIndex] ?? null) : null
 }
 
 function collectLeafIds(node: TerminalPaneLayoutNode | null): string[] {
diff --git a/src/renderer/src/components/sidebar/worktree-visibility-host-target.ts b/src/renderer/src/components/sidebar/worktree-visibility-host-target.ts
new file mode 100644
index 00000000000..b507241b847
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-visibility-host-target.ts
@@ -0,0 +1,56 @@
+import { useCallback } from 'react'
+import type { AppState } from '@/store/types'
+import { findRepoForHost, getRepoHostIdentity } from '@/store/slices/repo-host-identity'
+import {
+  getWorktreeExecutionHostId,
+  parseExecutionHostId,
+  type ExecutionHostId
+} from '../../../../shared/execution-host'
+
+export function resolveWorktreeVisibilityHostTarget(
+  state: Pick<AppState, 'repos' | 'settings' | 'detectedWorktreesByRepo'>,
+  repoId: string,
+  modalHostId: unknown
+) {
+  const requestedHostId =
+    typeof modalHostId === 'string' ? parseExecutionHostId(modalHostId)?.id : undefined
+  const repo = findRepoForHost(state.repos, repoId, {
+    hostId: requestedHostId,
+    settings: state.settings
+  })
+  const detectedForRepo = repoId ? state.detectedWorktreesByRepo[repoId] : undefined
+  const detected =
+    detectedForRepo && repo && requestedHostId
+      ? {
+          ...detectedForRepo,
+          worktrees: detectedForRepo.worktrees.filter(
+            (worktree) => getWorktreeExecutionHostId(worktree, repo) === requestedHostId
+          )
+        }
+      : detectedForRepo
+  const scope = repo ? getRepoHostIdentity(repo) : `${requestedHostId ?? ''}\0${repoId}`
+  return { detected, repo, requestedHostId, scope }
+}
+
+export function useWorktreeVisibilityHostActions(
+  fetchWorktrees: AppState['fetchWorktrees'],
+  updateRepo: AppState['updateRepo'],
+  requestedHostId: ExecutionHostId | undefined
+) {
+  const refreshTargetRepo = useCallback(
+    (repoId: string, options?: { requireAuthoritative?: boolean }) =>
+      fetchWorktrees(repoId, {
+        ...options,
+        ...(requestedHostId ? { executionHostId: requestedHostId } : {})
+      }),
+    [fetchWorktrees, requestedHostId]
+  )
+  const updateTargetRepo = useCallback(
+    (repoId: string, updates: Parameters<AppState['updateRepo']>[1]) =>
+      requestedHostId
+        ? updateRepo(repoId, updates, { hostId: requestedHostId })
+        : updateRepo(repoId, updates),
+    [requestedHostId, updateRepo]
+  )
+  return { refreshTargetRepo, updateTargetRepo }
+}
diff --git a/src/renderer/src/components/sidebar/worktree-visibility-mutation-fence.ts b/src/renderer/src/components/sidebar/worktree-visibility-mutation-fence.ts
new file mode 100644
index 00000000000..ef18ac08f17
--- /dev/null
+++ b/src/renderer/src/components/sidebar/worktree-visibility-mutation-fence.ts
@@ -0,0 +1,92 @@
+import { useEffect, type Dispatch, type MutableRefObject, type SetStateAction } from 'react'
+
+export type ActiveVisibilityMutation = { kind: 'row'; path: string } | { kind: 'toggle' }
+type VisibilityListState = 'checking' | 'ready' | 'failed'
+
+// Why: the modal unmounts on close, but its persistence request survives dismissal.
+const activeMutations = new Map<string, ActiveVisibilityMutation>()
+const mutationListeners = new Map<string, Set<() => void>>()
+
+export function getActiveVisibilityMutation(scope: string): ActiveVisibilityMutation | undefined {
+  return activeMutations.get(scope)
+}
+
+export function startVisibilityMutation(scope: string, mutation: ActiveVisibilityMutation): void {
+  activeMutations.set(scope, mutation)
+}
+
+export function subscribeToVisibilityMutation(scope: string, listener: () => void): () => void {
+  const listeners = mutationListeners.get(scope) ?? new Set()
+  listeners.add(listener)
+  mutationListeners.set(scope, listeners)
+  return () => {
+    listeners.delete(listener)
+    if (listeners.size === 0) {
+      mutationListeners.delete(scope)
+    }
+  }
+}
+
+export function finishVisibilityMutation(scope: string, mutation: ActiveVisibilityMutation): void {
+  if (activeMutations.get(scope) !== mutation) {
+    return
+  }
+  activeMutations.delete(scope)
+  mutationListeners.get(scope)?.forEach((listener) => listener())
+}
+
+export function useVisibilityMutationFence<T>(args: {
+  scope: string
+  repoId: string
+  currentScopeRef: MutableRefObject<string>
+  refresh: (repoId: string, options: { requireAuthoritative: true }) => Promise<boolean>
+  setActionState: Dispatch<SetStateAction<T | null>>
+  setBusyPath: Dispatch<SetStateAction<string | null>>
+  setIsToggling: Dispatch<SetStateAction<boolean>>
+  setListState: Dispatch<SetStateAction<VisibilityListState>>
+}): void {
+  const {
+    currentScopeRef,
+    refresh,
+    repoId,
+    scope,
+    setActionState,
+    setBusyPath,
+    setIsToggling,
+    setListState
+  } = args
+  useEffect(() => {
+    const activeMutation = getActiveVisibilityMutation(scope)
+    setActionState(null)
+    setBusyPath(activeMutation?.kind === 'row' ? activeMutation.path : null)
+    setIsToggling(activeMutation?.kind === 'toggle')
+    if (!activeMutation) {
+      return
+    }
+    let cancelled = false
+    let unsubscribe = (): void => undefined
+    unsubscribe = subscribeToVisibilityMutation(scope, () => {
+      unsubscribe()
+      void refresh(repoId, { requireAuthoritative: true }).then((refreshed) => {
+        if (!cancelled && currentScopeRef.current === scope) {
+          setListState(refreshed ? 'ready' : 'failed')
+          setBusyPath(null)
+          setIsToggling(false)
+        }
+      })
+    })
+    return () => {
+      cancelled = true
+      unsubscribe()
+    }
+  }, [
+    currentScopeRef,
+    refresh,
+    repoId,
+    scope,
+    setActionState,
+    setBusyPath,
+    setIsToggling,
+    setListState
+  ])
+}
diff --git a/src/renderer/src/components/source-control/SourceControlActionVariableChips.tsx b/src/renderer/src/components/source-control/SourceControlActionVariableChips.tsx
index 7a99c800eb1..cd853cf42a5 100644
--- a/src/renderer/src/components/source-control/SourceControlActionVariableChips.tsx
+++ b/src/renderer/src/components/source-control/SourceControlActionVariableChips.tsx
@@ -23,7 +23,7 @@ function hasVariablePreview(
 ): boolean {
   return Boolean(
     variablePreviews &&
-    Object.prototype.hasOwnProperty.call(variablePreviews, variable) &&
+    Object.hasOwn(variablePreviews, variable) &&
     variablePreviews[variable] !== undefined &&
     variablePreviews[variable] !== null
   )
diff --git a/src/renderer/src/components/status-bar/mergeSnapshotAndSessions.ts b/src/renderer/src/components/status-bar/mergeSnapshotAndSessions.ts
index d02588001b9..baf9c189fde 100644
--- a/src/renderer/src/components/status-bar/mergeSnapshotAndSessions.ts
+++ b/src/renderer/src/components/status-bar/mergeSnapshotAndSessions.ts
@@ -69,7 +69,7 @@ function resolveSnapshotSessionLabel(
   if (parsed) {
     const tabs = ctx.tabsByWorktree[worktreeId] ?? []
     const tabIndex = tabs.findIndex((t) => t.id === parsed.tabId)
-    const tab = tabIndex >= 0 ? tabs[tabIndex] : undefined
+    const tab = tabIndex !== -1 ? tabs[tabIndex] : undefined
     if (tab) {
       const custom = tab.customTitle?.trim()
       if (custom) {
@@ -94,7 +94,7 @@ function resolveDaemonSessionLabel(
   if (tabId && resolvedWorktreeId) {
     const tabs = ctx.tabsByWorktree[resolvedWorktreeId] ?? []
     const tabIndex = tabs.findIndex((t) => t.id === tabId)
-    const tab = tabIndex >= 0 ? tabs[tabIndex] : undefined
+    const tab = tabIndex !== -1 ? tabs[tabIndex] : undefined
     if (tab) {
       const custom = tab.customTitle?.trim()
       if (custom) {
diff --git a/src/renderer/src/components/tab-bar/BrowserTab.tsx b/src/renderer/src/components/tab-bar/BrowserTab.tsx
index 87a268f75f9..e0ecca579d2 100644
--- a/src/renderer/src/components/tab-bar/BrowserTab.tsx
+++ b/src/renderer/src/components/tab-bar/BrowserTab.tsx
@@ -142,7 +142,7 @@ export default function BrowserTab({
   onCloseOthers: () => void
   onCloseToRight: () => void
   onCloseToLeft: () => void
-  onDuplicate: () => void
+  onDuplicate?: () => void
   onTogglePin: () => void
   dragData: TabDragItemData
   dropIndicator?: DropIndicator
@@ -307,11 +307,15 @@ export default function BrowserTab({
             groupId={dragData.groupId}
             trailingSeparator
           />
-          <DropdownMenuItem onSelect={onDuplicate}>
-            <Copy className="size-3.5" />
-            {translate('auto.components.tab.bar.BrowserTab.5d6e89891f', 'Duplicate Tab')}
-          </DropdownMenuItem>
-          <DropdownMenuSeparator />
+          {onDuplicate ? (
+            <>
+              <DropdownMenuItem onSelect={onDuplicate}>
+                <Copy className="size-3.5" />
+                {translate('auto.components.tab.bar.BrowserTab.5d6e89891f', 'Duplicate Tab')}
+              </DropdownMenuItem>
+              <DropdownMenuSeparator />
+            </>
+          ) : null}
           <DropdownMenuItem onSelect={onTogglePin}>
             {isPinned ? <PinOff className="size-3.5" /> : <Pin className="size-3.5" />}
             {isPinned
diff --git a/src/renderer/src/components/tab-bar/TabBar.context-menu.test.ts b/src/renderer/src/components/tab-bar/TabBar.context-menu.test.ts
index 7b3e18d0a18..c8c940c865f 100644
--- a/src/renderer/src/components/tab-bar/TabBar.context-menu.test.ts
+++ b/src/renderer/src/components/tab-bar/TabBar.context-menu.test.ts
@@ -497,6 +497,26 @@ describe('TabBar context menu wiring', () => {
     expect(menuLabels[3]).toContain('New Browser Tab')
   })
 
+  it('omits impossible paired-web actions while keeping terminal and markdown', async () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const element = await renderTabBar({
+      tabs: [TERMINAL_TAB],
+      onNewFileTab: () => {},
+      onOpenFileTab: () => {},
+      onNewSimulatorTab: () => {}
+    })
+
+    const menuLabels = findChildrenByType(element, 'DropdownMenuItem').map((item) =>
+      extractText(item.props.children)
+    )
+
+    expect(menuLabels.some((label) => label.includes('New Terminal'))).toBe(true)
+    expect(menuLabels.some((label) => label.includes('New Markdown'))).toBe(true)
+    expect(menuLabels.some((label) => label.includes('Open Markdown...'))).toBe(true)
+    expect(menuLabels.some((label) => label.includes('Browser'))).toBe(false)
+    expect(menuLabels.some((label) => label.includes('Mobile Emulator'))).toBe(false)
+  })
+
   it('turns New Mobile Emulator into a go-to action when the workspace already has one', async () => {
     const onNewSimulatorTab = vi.fn()
     appStoreSnapshot.unifiedTabsByWorktree = {
diff --git a/src/renderer/src/components/tab-bar/TabBar.tsx b/src/renderer/src/components/tab-bar/TabBar.tsx
index 43f3255676a..42aab95c37e 100644
--- a/src/renderer/src/components/tab-bar/TabBar.tsx
+++ b/src/renderer/src/components/tab-bar/TabBar.tsx
@@ -27,6 +27,8 @@ function TabBarInner(props: TabBarProps): React.JSX.Element {
     resolvedGroupId: runtime.resolvedGroupId,
     terminalOnly,
     mobileEmulatorEnabled: runtime.mobileEmulatorEnabled,
+    managedBrowserCreationEnabled: runtime.managedBrowserCreationEnabled,
+    mobileEmulatorCreationEnabled: runtime.mobileEmulatorCreationEnabled,
     workspaceHasSimulatorTab: runtime.workspaceHasSimulatorTab,
     showWindowsShellMenu: runtime.showWindowsShellMenu,
     projectRuntimeShellMenuMode: runtime.projectRuntimeShellMenuMode,
diff --git a/src/renderer/src/components/tab-bar/TabBar.windows-shell-launch.test.ts b/src/renderer/src/components/tab-bar/TabBar.windows-shell-launch.test.ts
index 34ed3da7c09..32d74d051c6 100644
--- a/src/renderer/src/components/tab-bar/TabBar.windows-shell-launch.test.ts
+++ b/src/renderer/src/components/tab-bar/TabBar.windows-shell-launch.test.ts
@@ -35,8 +35,11 @@ const appStoreSnapshot: {
   unifiedTabsByWorktree: Record<string, unknown[]>
   activeGroupIdByWorktree: Record<string, string>
   detectedAgentIds: string[] | null
+  localDetectedAgentIdsByContext: Record<string, string[] | null>
   remoteDetectedAgentIds: Record<string, string[]>
   isDetectingAgents: boolean
+  isDetectingLocalAgentsByContext: Record<string, boolean>
+  isRefreshingLocalAgentsByContext: Record<string, boolean>
   isDetectingRemoteAgents: Record<string, boolean>
 } = {
   activeRepoId: null,
@@ -51,8 +54,11 @@ const appStoreSnapshot: {
   unifiedTabsByWorktree: {},
   activeGroupIdByWorktree: {},
   detectedAgentIds: null,
+  localDetectedAgentIdsByContext: {},
   remoteDetectedAgentIds: {},
   isDetectingAgents: false,
+  isDetectingLocalAgentsByContext: {},
+  isRefreshingLocalAgentsByContext: {},
   isDetectingRemoteAgents: {}
 }
 const pinTabMock: (tabId: string) => void = vi.fn()
@@ -73,8 +79,11 @@ const useAppStoreMock = vi.fn(
       unifiedTabsByWorktree: Record<string, unknown[]>
       activeGroupIdByWorktree: Record<string, string>
       detectedAgentIds: string[] | null
+      localDetectedAgentIdsByContext: Record<string, string[] | null>
       remoteDetectedAgentIds: Record<string, string[]>
       isDetectingAgents: boolean
+      isDetectingLocalAgentsByContext: Record<string, boolean>
+      isRefreshingLocalAgentsByContext: Record<string, boolean>
       isDetectingRemoteAgents: Record<string, boolean>
       pinTab: typeof pinTabMock
       unpinTab: typeof unpinTabMock
@@ -99,8 +108,11 @@ const useAppStoreMock = vi.fn(
       unifiedTabsByWorktree: appStoreSnapshot.unifiedTabsByWorktree,
       activeGroupIdByWorktree: appStoreSnapshot.activeGroupIdByWorktree,
       detectedAgentIds: appStoreSnapshot.detectedAgentIds,
+      localDetectedAgentIdsByContext: appStoreSnapshot.localDetectedAgentIdsByContext,
       remoteDetectedAgentIds: appStoreSnapshot.remoteDetectedAgentIds,
       isDetectingAgents: appStoreSnapshot.isDetectingAgents,
+      isDetectingLocalAgentsByContext: appStoreSnapshot.isDetectingLocalAgentsByContext,
+      isRefreshingLocalAgentsByContext: appStoreSnapshot.isRefreshingLocalAgentsByContext,
       isDetectingRemoteAgents: appStoreSnapshot.isDetectingRemoteAgents,
       pinTab: pinTabMock,
       unpinTab: unpinTabMock,
@@ -168,8 +180,11 @@ useAppStoreExport.getState = vi.fn(() => ({
   unifiedTabsByWorktree: appStoreSnapshot.unifiedTabsByWorktree,
   activeGroupIdByWorktree: appStoreSnapshot.activeGroupIdByWorktree,
   detectedAgentIds: appStoreSnapshot.detectedAgentIds,
+  localDetectedAgentIdsByContext: appStoreSnapshot.localDetectedAgentIdsByContext,
   remoteDetectedAgentIds: appStoreSnapshot.remoteDetectedAgentIds,
   isDetectingAgents: appStoreSnapshot.isDetectingAgents,
+  isDetectingLocalAgentsByContext: appStoreSnapshot.isDetectingLocalAgentsByContext,
+  isRefreshingLocalAgentsByContext: appStoreSnapshot.isRefreshingLocalAgentsByContext,
   isDetectingRemoteAgents: appStoreSnapshot.isDetectingRemoteAgents,
   pinTab: pinTabMock,
   unpinTab: unpinTabMock,
@@ -348,6 +363,9 @@ describe('TabBar PowerShell launch wiring', () => {
     appStoreSnapshot.worktreesByRepo = {}
     appStoreSnapshot.unifiedTabsByWorktree = {}
     appStoreSnapshot.activeGroupIdByWorktree = {}
+    appStoreSnapshot.localDetectedAgentIdsByContext = {}
+    appStoreSnapshot.isDetectingLocalAgentsByContext = {}
+    appStoreSnapshot.isRefreshingLocalAgentsByContext = {}
     vi.stubGlobal('navigator', { userAgent: 'Windows' })
   })
 
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntry.search.test.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntry.search.test.tsx
new file mode 100644
index 00000000000..b40166cbc1d
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntry.search.test.tsx
@@ -0,0 +1,315 @@
+// @vitest-environment happy-dom
+
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { TooltipProvider } from '@/components/ui/tooltip'
+import { useAppStore } from '@/store'
+import type { AppState } from '@/store/types'
+import type { TabAgentLaunchOption } from './tab-agent-launch-options'
+import type { TabCreateMenuOption } from './tab-create-menu-options'
+import { QUICK_OPEN_QUERY_MAX_BYTES } from '../quick-open-search'
+
+const fileListMock = vi.hoisted(() => ({
+  current: { files: [] as string[], loading: false, loadError: null as string | null }
+}))
+vi.mock('../quick-open-file-list', () => ({
+  useRuntimeFileListForWorktree: () => fileListMock.current
+}))
+
+const tabSearchMock = vi.hoisted(() => ({
+  calls: [] as { enabled: boolean; query: string }[],
+  results: [] as unknown[]
+}))
+vi.mock('./use-open-tab-search', () => ({
+  useOpenTabSearch: ({ enabled, query }: { enabled: boolean; query: string }) => {
+    tabSearchMock.calls.push({ enabled, query })
+    return { query, results: tabSearchMock.results }
+  }
+}))
+
+import TabBarCreateEntry from './TabBarCreateEntry'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+let container: HTMLDivElement
+let root: Root
+
+function renderEntry(props: Record<string, unknown> = {}): void {
+  act(() => {
+    root.render(
+      <TooltipProvider>
+        <TabBarCreateEntry
+          worktreeId="wt"
+          groupId="g"
+          menuOpen
+          onOpenEntry={vi.fn().mockResolvedValue(undefined)}
+          {...props}
+        />
+      </TooltipProvider>
+    )
+  })
+}
+
+function setQuery(value: string): void {
+  const input = container.querySelector('input')!
+  const nativeSetter = Object.getOwnPropertyDescriptor(
+    window.HTMLInputElement.prototype,
+    'value'
+  )?.set
+  act(() => {
+    nativeSetter?.call(input, value)
+    input.dispatchEvent(new window.Event('input', { bubbles: true }))
+  })
+}
+
+function submit(): void {
+  act(() => {
+    container
+      .querySelector('form')!
+      .dispatchEvent(new window.Event('submit', { bubbles: true, cancelable: true }))
+  })
+}
+
+function press(key: string): void {
+  act(() => {
+    container
+      .querySelector('input')!
+      .dispatchEvent(new window.KeyboardEvent('keydown', { key, bubbles: true, cancelable: true }))
+  })
+}
+
+beforeEach(() => {
+  fileListMock.current = { files: [], loading: false, loadError: null }
+  tabSearchMock.calls = []
+  tabSearchMock.results = []
+  useAppStore.setState(
+    { ...useAppStore.getInitialState(), browserDefaultSearchEngine: null } as AppState,
+    true
+  )
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  vi.clearAllMocks()
+})
+
+describe('TabBarCreateEntry search behavior', () => {
+  it('tracks the configured provider and submits its exact classification', () => {
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('react hooks')
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Search Google')
+
+    act(() => useAppStore.setState({ browserDefaultSearchEngine: 'bing' }))
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Search Bing')
+    submit()
+
+    expect(onOpenEntry).toHaveBeenCalledWith(
+      expect.objectContaining({
+        classification: { kind: 'search', engine: 'bing', query: 'react hooks' }
+      })
+    )
+  })
+
+  it('searches a phrase on Enter while the file index is still loading', () => {
+    fileListMock.current = { files: [], loading: true, loadError: null }
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('natural language')
+
+    expect(container.querySelectorAll('[role="option"]')).toHaveLength(1)
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Search Google')
+    expect(container.querySelector('[role="status"]')?.textContent).toContain('Loading files...')
+    expect(container.querySelector('[aria-selected="true"]')).not.toBeNull()
+
+    submit()
+    expect(onOpenEntry).toHaveBeenCalledOnce()
+  })
+
+  it('requires an explicit choice for text the loading index could still match', () => {
+    fileListMock.current = { files: [], loading: true, loadError: null }
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('notes.md draft')
+
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Search Google')
+    expect(container.querySelector('[aria-selected="true"]')).toBeNull()
+
+    submit()
+    expect(onOpenEntry).not.toHaveBeenCalled()
+    expect(container.querySelector('[role="status"]')?.textContent).toContain('Choose an action.')
+
+    press('ArrowDown')
+    submit()
+    expect(onOpenEntry).toHaveBeenCalledOnce()
+  })
+
+  it('arms network actions once the index fails, since no file match can arrive', () => {
+    fileListMock.current = { files: [], loading: false, loadError: 'scan failed' }
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('example.com')
+
+    expect(container.querySelector('[aria-selected="true"]')?.textContent).toContain('Open URL')
+    submit()
+    expect(onOpenEntry).toHaveBeenCalledWith(
+      expect.objectContaining({ classification: expect.objectContaining({ kind: 'host-url' }) })
+    )
+  })
+
+  it('does not auto-open a host-like filename while the file index is unresolved', () => {
+    fileListMock.current = { files: [], loading: true, loadError: null }
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('example.com')
+
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Open URL')
+    expect(container.querySelector('[aria-selected="true"]')).toBeNull()
+    submit()
+    expect(onOpenEntry).not.toHaveBeenCalled()
+  })
+
+  it('disables the active submission and exposes failures to assistive technology', async () => {
+    let rejectOpen: ((error: Error) => void) | undefined
+    const onOpenEntry = vi.fn(
+      () =>
+        new Promise<void>((_resolve, reject) => {
+          rejectOpen = reject
+        })
+    )
+    renderEntry({ onOpenEntry })
+    setQuery('react hooks')
+    submit()
+
+    // Read-only rather than disabled so the pending input keeps keyboard focus.
+    expect(container.querySelector('input')?.disabled).toBe(false)
+    expect(container.querySelector('input')?.readOnly).toBe(true)
+    expect(container.querySelector('input')?.getAttribute('aria-busy')).toBe('true')
+    expect(container.querySelector<HTMLButtonElement>('[role="option"]')?.disabled).toBe(true)
+    expect(container.querySelector('[role="option"] .animate-spin')).not.toBeNull()
+
+    await act(async () => rejectOpen?.(new Error('Search failed safely.')))
+
+    const input = container.querySelector('input')!
+    expect(input.readOnly).toBe(false)
+    expect(input.getAttribute('aria-busy')).toBeNull()
+    expect(input.getAttribute('aria-expanded')).toBe('false')
+    expect(input.getAttribute('aria-errormessage')).toBe('tab-create-entry-error')
+    expect(container.querySelector('#tab-create-entry-error')?.textContent).toContain(
+      'Search failed safely.'
+    )
+  })
+
+  it('ignores completion from a previous menu session', async () => {
+    let resolveOpen: (() => void) | undefined
+    const onDidOpenEntry = vi.fn()
+    const onOpenEntry = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          resolveOpen = resolve
+        })
+    )
+    renderEntry({ onDidOpenEntry, onOpenEntry })
+    setQuery('react hooks')
+    submit()
+
+    renderEntry({ menuOpen: false, onDidOpenEntry, onOpenEntry })
+    renderEntry({ menuOpen: true, onDidOpenEntry, onOpenEntry })
+    await act(async () => resolveOpen?.())
+
+    expect(onDidOpenEntry).not.toHaveBeenCalled()
+    expect(container.querySelector('input')?.readOnly).toBe(false)
+  })
+
+  it('does not arm ordinary search when a ranked file disappears asynchronously', () => {
+    fileListMock.current = { files: ['project codename'], loading: false, loadError: null }
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('project codename')
+    expect(container.querySelector('[aria-selected="true"]')?.textContent).toContain('Open file')
+
+    fileListMock.current = { files: [], loading: true, loadError: null }
+    renderEntry({ onOpenEntry })
+    expect(container.querySelector('[role="option"]')?.textContent).toContain('Search Google')
+    expect(container.querySelector('[aria-selected="true"]')).toBeNull()
+    expect(container.querySelector('input')?.getAttribute('aria-activedescendant')).toBeNull()
+
+    submit()
+    expect(onOpenEntry).not.toHaveBeenCalled()
+    expect(container.querySelector('[role="status"]')?.textContent).toContain('Choose an action.')
+
+    press('ArrowDown')
+    submit()
+    expect(onOpenEntry).toHaveBeenCalledWith(
+      expect.objectContaining({ classification: expect.objectContaining({ kind: 'search' }) })
+    )
+  })
+
+  it('makes forced search the only category and disables open-tab matching', () => {
+    fileListMock.current = { files: ['gem'], loading: false, loadError: null }
+    tabSearchMock.results = [
+      {
+        id: 'open-tab:workspace:tab-1',
+        title: 'gem tab',
+        contentType: 'terminal',
+        worktreeId: 'wt',
+        tabId: 'tab-1',
+        entityId: 'term-1',
+        groupId: 'g',
+        relativePath: null
+      }
+    ]
+    const menuOptions: TabCreateMenuOption[] = [
+      { id: 'new-browser', kind: 'new-browser', keywords: ['gem'], label: 'Gem action' }
+    ]
+    const agentOptions: TabAgentLaunchOption[] = [
+      { agent: 'gemini', aliases: ['gem'], label: 'Gemini' }
+    ]
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ agentOptions, menuOptions, onOpenEntry })
+    setQuery('?gem')
+
+    const rows = container.querySelectorAll('[role="option"]')
+    expect(rows).toHaveLength(1)
+    expect(rows[0].textContent).toContain('Search Google')
+    expect(tabSearchMock.calls.at(-1)).toEqual({ enabled: false, query: '' })
+    submit()
+    expect(onOpenEntry).toHaveBeenCalledWith(
+      expect.objectContaining({
+        classification: { kind: 'search', engine: 'google', query: 'gem' }
+      })
+    )
+  })
+
+  it('treats a bare search prefix as a prompt rather than a submission error', () => {
+    const onOpenEntry = vi.fn().mockResolvedValue(undefined)
+    renderEntry({ onOpenEntry })
+    setQuery('?')
+
+    expect(container.querySelectorAll('[role="option"]')).toHaveLength(0)
+    submit()
+
+    expect(onOpenEntry).not.toHaveBeenCalled()
+    expect(container.querySelector('#tab-create-entry-error')).toBeNull()
+    expect(container.querySelector('input')?.getAttribute('aria-errormessage')).toBeNull()
+  })
+
+  it('blocks oversized forced input without surfacing global actions', () => {
+    renderEntry({
+      menuOptions: [
+        { id: 'new-browser', kind: 'new-browser', keywords: ['x'], label: 'New Browser' }
+      ],
+      agentOptions: [{ agent: 'gemini', aliases: ['x'], label: 'Gemini' }]
+    })
+    setQuery(`?${'x'.repeat(QUICK_OPEN_QUERY_MAX_BYTES)}`)
+
+    expect(container.querySelectorAll('[role="option"]')).toHaveLength(0)
+    expect(container.textContent).toContain('Search text is too large.')
+    expect(tabSearchMock.calls.at(-1)).toEqual({ enabled: false, query: '' })
+  })
+})
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntry.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntry.tsx
index fa65ce24e5f..482d81a1cf3 100644
--- a/src/renderer/src/components/tab-bar/TabBarCreateEntry.tsx
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntry.tsx
@@ -4,17 +4,10 @@ import { useRuntimeFileListForWorktree } from '../quick-open-file-list'
 import {
   createTabEntryAllowAbsolutePathsSelector,
   getTabEntryOptions,
-  isTabEntryAbsolutePathLike,
-  type TabCreateEntryArgs
+  isTabEntryAbsolutePathLike
 } from './tab-create-entry-action'
-import {
-  findMatchingTabAgentLaunchOptions,
-  type TabAgentLaunchOption
-} from './tab-agent-launch-options'
-import {
-  findMatchingTabCreateMenuOptions,
-  type TabCreateMenuOption
-} from './tab-create-menu-options'
+import { findMatchingTabAgentLaunchOptions } from './tab-agent-launch-options'
+import { findMatchingTabCreateMenuOptions } from './tab-create-menu-options'
 import {
   getActiveOptionId,
   isActiveEntryOption,
@@ -28,42 +21,30 @@ import {
 } from './TabBarCreateEntryRow'
 import { dropFileEntriesCoveredByTabResults } from './open-tab-entry-dedupe'
 import { activateOpenTabSearchResult } from './open-tab-selection-routing'
-import type { OpenTabSearchResult } from './open-tab-search'
 import { useOpenTabSearch } from './use-open-tab-search'
-import type { TuiAgent } from '../../../../shared/types'
-import { translate } from '@/i18n/i18n'
+import { DEFAULT_SEARCH_ENGINE } from '../../../../shared/browser-url'
 import { getRendererAppPlatform } from '@/lib/renderer-app-platform'
 import { useAppStore } from '@/store'
+import { isQuickOpenQueryTooLarge } from '../quick-open-search'
+import { parseForcedSearchQuery } from './tab-create-entry-forced-search'
+import { useNetworkSafeTabEntrySelection } from './tab-create-entry-network-selection'
+import { focusTabEntryMenuItemAtEdge } from './tab-create-entry-keyboard-focus'
+import {
+  getTabEntryChooseActionMessage,
+  getTabEntryOmniboxPlaceholder
+} from './tab-create-entry-copy'
+import {
+  EMPTY_AGENT_OPTIONS,
+  EMPTY_MENU_OPTIONS,
+  EMPTY_TAB_RESULTS
+} from './tab-create-entry-empty-options'
+import type { TabBarCreateEntryProps } from './tab-create-entry-props'
 
-// Leads with tabs: the omnibox now jumps to open tabs before it creates anything.
-function omniboxPlaceholder(): string {
-  return translate(
-    'auto.components.tab.bar.TabBarCreateEntry.0e5b7a3f16',
-    'Search open tabs, files, URLs, agents…'
-  )
+export default function TabBarCreateEntry(props: TabBarCreateEntryProps): React.JSX.Element {
+  return <TabBarCreateEntrySession key={String(props.menuOpen)} {...props} />
 }
 
-const EMPTY_AGENT_OPTIONS: readonly TabAgentLaunchOption[] = []
-const EMPTY_MENU_OPTIONS: readonly TabCreateMenuOption[] = []
-const EMPTY_TAB_RESULTS: readonly OpenTabSearchResult[] = []
-
-type TabBarCreateEntryProps = {
-  agentOptions?: readonly TabAgentLaunchOption[]
-  groupId: string
-  menuOpen: boolean
-  menuOptions?: readonly TabCreateMenuOption[]
-  onDidOpenEntry?: () => void
-  onLaunchAgent?: (agent: TuiAgent) => void
-  onOpenDefaultTerminal?: () => void
-  onOpenEntry?: (args: TabCreateEntryArgs) => Promise<void>
-  onQueryChange?: (query: string) => void
-  /** Runs after the menu closes, so the tab jumped to actually takes focus. */
-  onQueueSwitchFocus?: (focus: () => void) => void
-  onSelectMenuOption?: (option: TabCreateMenuOption) => void
-  worktreeId: string
-}
-
-export default function TabBarCreateEntry({
+function TabBarCreateEntrySession({
   agentOptions = EMPTY_AGENT_OPTIONS,
   groupId,
   menuOpen,
@@ -81,16 +62,33 @@ export default function TabBarCreateEntry({
   const [pending, setPending] = useState(false)
   const [error, setError] = useState<string | null>(null)
   const [switchError, setSwitchError] = useState<string | null>(null)
+  const [selectionGuidance, setSelectionGuidance] = useState<string | null>(null)
   // null = follow ranking (deferred tabs can prepend); set on arrow keys only.
   const [pinnedOptionId, setPinnedOptionId] = useState<string | null>(null)
-  const [lastMenuOpen, setLastMenuOpen] = useState(menuOpen)
   const inputRef = useRef<HTMLInputElement>(null)
+  const submissionIdRef = useRef(0)
+  useEffect(
+    () => () => {
+      submissionIdRef.current += 1
+    },
+    []
+  )
   const fileList = useRuntimeFileListForWorktree({ enabled: menuOpen, worktreeId })
-  const tabSearch = useOpenTabSearch({ enabled: menuOpen, query, worktreeId })
+  const rawQueryOversized = isQuickOpenQueryTooLarge(query)
+  const forcedSearch = parseForcedSearchQuery(query)
+  const terminalQueryMode = rawQueryOversized || forcedSearch.forced
+  const tabSearchQuery = terminalQueryMode ? '' : query
+  const tabSearch = useOpenTabSearch({
+    enabled: menuOpen && !terminalQueryMode,
+    query: tabSearchQuery,
+    worktreeId
+  })
   // Why gate on the query: the search defers, so its rows can still describe an
   // earlier query — Enter must never submit a tab the current query never matched.
-  const tabResults = tabSearch.query === query ? tabSearch.results : EMPTY_TAB_RESULTS
-  const shouldResolveAbsolutePaths = menuOpen && isTabEntryAbsolutePathLike(query.trim())
+  const tabResults =
+    !terminalQueryMode && tabSearch.query === query ? tabSearch.results : EMPTY_TAB_RESULTS
+  const shouldResolveAbsolutePaths =
+    menuOpen && !terminalQueryMode && isTabEntryAbsolutePathLike(query.trim())
   const allowAbsolutePathsSelector = useMemo(
     () =>
       createTabEntryAllowAbsolutePathsSelector(worktreeId, {
@@ -105,6 +103,9 @@ export default function TabBarCreateEntry({
     menuOpen ? (state.getKnownWorktreeById(worktreeId)?.path ?? null) : null
   )
   const localPlatform = getRendererAppPlatform() === 'win32' ? 'windows' : 'posix'
+  const searchEngine = useAppStore(
+    (state) => state.browserDefaultSearchEngine ?? DEFAULT_SEARCH_ENGINE
+  )
 
   // Why: once ArrowDown moves focus into the static menu list, ArrowUp on the
   // first item should return to the search box so the keyboard trip isn't
@@ -144,14 +145,16 @@ export default function TabBarCreateEntry({
   }, [menuOpen])
 
   const matchingMenuOptions = useMemo(
-    () => findMatchingTabCreateMenuOptions(query, menuOptions),
-    [menuOptions, query]
+    () =>
+      terminalQueryMode ? EMPTY_MENU_OPTIONS : findMatchingTabCreateMenuOptions(query, menuOptions),
+    [menuOptions, query, terminalQueryMode]
   )
   const options = useMemo(() => {
     const entryOptions = dropFileEntriesCoveredByTabResults(
       getTabEntryOptions(query, fileList, 4, {
         allowAbsolutePaths,
-        localPlatform
+        localPlatform,
+        searchEngine
       }),
       tabResults,
       worktreePath
@@ -167,25 +170,18 @@ export default function TabBarCreateEntry({
     localPlatform,
     matchingMenuOptions.length,
     query,
+    searchEngine,
     tabResults,
     worktreePath
   ])
   const matchingAgentOptions = useMemo(
-    () => findMatchingTabAgentLaunchOptions(query, agentOptions),
-    [agentOptions, query]
+    () =>
+      terminalQueryMode
+        ? EMPTY_AGENT_OPTIONS
+        : findMatchingTabAgentLaunchOptions(query, agentOptions),
+    [agentOptions, query, terminalQueryMode]
   )
 
-  if (lastMenuOpen !== menuOpen) {
-    setLastMenuOpen(menuOpen)
-    if (!menuOpen) {
-      setQuery('')
-      setPending(false)
-      setError(null)
-      setSwitchError(null)
-      setPinnedOptionId(null)
-    }
-  }
-
   const disabled = !onOpenEntry
   const hasQuery = query.trim().length > 0
   const activeOptions: ActiveOption[] = [
@@ -206,13 +202,15 @@ export default function TabBarCreateEntry({
       option
     }))
   ]
-  // Why pin by id (not index): deferred tab rows prepend and would steal a
-  // user-moved highlight if we kept a raw index. Null pin follows top rank.
-  const pinnedOptionIndex = pinnedOptionId
-    ? activeOptions.findIndex((option) => getActiveOptionId(option) === pinnedOptionId)
-    : -1
-  const activeSelectedIndex = Math.max(pinnedOptionIndex, 0)
-  const selectedActiveOption = activeOptions[activeSelectedIndex]
+  const { activeSelectedIndex, selectedActiveOption } = useNetworkSafeTabEntrySelection({
+    activeOptions,
+    fileIndexFailed: Boolean(fileList.loadError),
+    fileIndexReady: !fileList.loading && !fileList.loadError,
+    forcedSearch: forcedSearch.forced,
+    menuOpen,
+    pinnedOptionId,
+    query
+  })
   const statusOption = options.find(
     (option) => option.classification.kind === 'empty' || option.classification.kind === 'blocked'
   )
@@ -220,7 +218,7 @@ export default function TabBarCreateEntry({
     statusOption != null &&
     (statusOption.classification.kind === 'empty' || statusOption.classification.kind === 'blocked')
       ? statusOption.classification.message
-      : omniboxPlaceholder()
+      : getTabEntryOmniboxPlaceholder()
 
   const submitOption = (option?: ActiveOption) => {
     if (disabled || pending) {
@@ -233,7 +231,15 @@ export default function TabBarCreateEntry({
         onDidOpenEntry?.()
         return
       }
-      setError(statusMessage)
+      if (activeOptions.length > 0) {
+        setSelectionGuidance(getTabEntryChooseActionMessage())
+        return
+      }
+      // Why: an 'empty' status is the placeholder prompt, not a failure — showing
+      // it as an error turns a bare "?" into a red row that reads like a bug.
+      if (statusOption?.classification.kind !== 'empty') {
+        setError(statusMessage)
+      }
       return
     }
     if (selectedOption.kind === 'tab') {
@@ -260,6 +266,7 @@ export default function TabBarCreateEntry({
     }
     setPending(true)
     setError(null)
+    const submissionId = ++submissionIdRef.current
     void onOpenEntry({
       query,
       worktreeId,
@@ -268,13 +275,19 @@ export default function TabBarCreateEntry({
       classification: selectedOption.option.classification
     })
       .then(() => {
-        onDidOpenEntry?.()
+        if (submissionIdRef.current === submissionId) {
+          onDidOpenEntry?.()
+        }
       })
       .catch((caught) => {
-        setError(caught instanceof Error ? caught.message : String(caught))
+        if (submissionIdRef.current === submissionId) {
+          setError(caught instanceof Error ? caught.message : String(caught))
+        }
       })
       .finally(() => {
-        setPending(false)
+        if (submissionIdRef.current === submissionId) {
+          setPending(false)
+        }
       })
   }
 
@@ -292,15 +305,23 @@ export default function TabBarCreateEntry({
             event.stopPropagation()
             const delta = event.key === 'ArrowDown' ? 1 : -1
             const nextIndex =
-              (activeSelectedIndex + delta + activeOptions.length) % activeOptions.length
+              activeSelectedIndex === null
+                ? event.key === 'ArrowDown'
+                  ? 0
+                  : activeOptions.length - 1
+                : (activeSelectedIndex + delta + activeOptions.length) % activeOptions.length
             setPinnedOptionId(getActiveOptionId(activeOptions[nextIndex]))
+            setSelectionGuidance(null)
             return
           }
           // Why: with no result rows the static create/agent items render below;
           // move focus into that Radix menu list so it stays keyboard-navigable
           // from the search box instead of trapping focus in the input.
           if (
-            focusMenuItemAtEdge(event.currentTarget, event.key === 'ArrowDown' ? 'first' : 'last')
+            focusTabEntryMenuItemAtEdge(
+              event.currentTarget,
+              event.key === 'ArrowDown' ? 'first' : 'last'
+            )
           ) {
             event.preventDefault()
             event.stopPropagation()
@@ -326,18 +347,26 @@ export default function TabBarCreateEntry({
             setPinnedOptionId(null)
             setError(null)
             setSwitchError(null)
+            setSelectionGuidance(null)
           }}
+          // Why: disabling the focused input would hand focus to the body and
+          // break arrow/Escape navigation until the submission settles.
           disabled={disabled}
+          readOnly={pending}
+          aria-busy={pending || undefined}
           role="combobox"
-          aria-expanded={activeOptions.length > 0}
-          aria-controls={RESULT_LISTBOX_ID}
+          aria-expanded={!error && activeOptions.length > 0}
+          aria-controls={!error && activeOptions.length > 0 ? RESULT_LISTBOX_ID : undefined}
           aria-autocomplete="list"
           aria-activedescendant={
-            activeOptions.length > 0 && !error ? resultOptionDomId(activeSelectedIndex) : undefined
+            activeSelectedIndex !== null && !error
+              ? resultOptionDomId(activeSelectedIndex)
+              : undefined
           }
-          aria-label={omniboxPlaceholder()}
+          aria-label={getTabEntryOmniboxPlaceholder()}
           aria-invalid={error ? true : undefined}
-          placeholder={omniboxPlaceholder()}
+          aria-errormessage={error ? 'tab-create-entry-error' : undefined}
+          placeholder={getTabEntryOmniboxPlaceholder()}
           className="h-9 rounded-none border-0 bg-transparent px-0 text-xs font-normal text-foreground shadow-none placeholder:font-normal placeholder:text-muted-foreground focus-visible:border-0 focus-visible:ring-0 aria-invalid:border-0 aria-invalid:ring-0 md:text-xs dark:bg-transparent"
         />
       </div>
@@ -345,28 +374,46 @@ export default function TabBarCreateEntry({
           the rows the user can still act on. The live region stays mounted so a
           screen reader announces the failure instead of missing the insertion. */}
       <div role="status">
+        {error ? (
+          <div className="mt-1 px-1" id="tab-create-entry-error">
+            <EntryStatusRow message={error} />
+          </div>
+        ) : null}
         {switchError ? (
           <div className="mt-1 px-1">
             <EntryStatusRow message={switchError} />
           </div>
         ) : null}
+        {selectionGuidance ? (
+          <div className="mt-1 px-1">
+            <EntryStatusRow message={selectionGuidance} />
+          </div>
+        ) : null}
+        {activeOptions.length > 0 && statusOption ? (
+          <div className="mt-1 px-1">
+            <EntryStatusRow loading={fileList.loading} message={statusMessage} />
+          </div>
+        ) : null}
       </div>
-      {error || activeOptions.length > 0 || hasQuery ? (
+      {!error && (activeOptions.length > 0 || hasQuery) ? (
         <div
           className="mt-1 space-y-0.5 px-1"
           id={RESULT_LISTBOX_ID}
-          role={activeOptions.length > 0 && !error ? 'listbox' : undefined}
+          role={activeOptions.length > 0 ? 'listbox' : undefined}
         >
-          {error ? (
-            <EntryStatusRow message={error} />
-          ) : activeOptions.length > 0 ? (
+          {activeOptions.length > 0 ? (
             activeOptions.map((option, index) => (
               <EntryActionRow
                 key={getActiveOptionId(option)}
                 id={resultOptionDomId(index)}
                 option={option}
                 selected={index === activeSelectedIndex}
-                onClick={() => submitOption(option)}
+                disabled={disabled || pending}
+                loading={pending && index === activeSelectedIndex}
+                onClick={() => {
+                  setSelectionGuidance(null)
+                  submitOption(option)
+                }}
               />
             ))
           ) : (
@@ -377,21 +424,3 @@ export default function TabBarCreateEntry({
     </form>
   )
 }
-
-// Moves keyboard focus to the first/last enabled item of the enclosing Radix
-// menu so the static create/agent list stays navigable from the search input.
-function focusMenuItemAtEdge(fromElement: HTMLElement, edge: 'first' | 'last'): boolean {
-  const menu = fromElement.closest('[role="menu"]')
-  if (!menu) {
-    return false
-  }
-  const items = menu.querySelectorAll<HTMLElement>(
-    '[role="menuitem"]:not([data-disabled]):not([aria-disabled="true"])'
-  )
-  const target = edge === 'first' ? items[0] : items.item(items.length - 1)
-  if (!target) {
-    return false
-  }
-  target.focus()
-  return true
-}
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.test.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.test.tsx
index 616b3caa0c6..eafad8ad790 100644
--- a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.test.tsx
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.test.tsx
@@ -2,6 +2,7 @@
 
 import { act, createElement } from 'react'
 import { createRoot, type Root } from 'react-dom/client'
+import { getByRole } from '@testing-library/dom'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { TooltipProvider } from '@/components/ui/tooltip'
 import type { ActiveOption } from './tab-create-entry-active-option'
@@ -88,4 +89,18 @@ describe('EntryActionRow', () => {
     expect(renderRow(makeFileOption('README.md')).textContent).toContain('README.md')
     expect(container.textContent).not.toContain('/')
   })
+
+  it('names the provider and query without retaining a built URL', () => {
+    renderRow({
+      kind: 'entry',
+      option: {
+        id: 'search:private project',
+        classification: { kind: 'search', engine: 'kagi', query: 'private project' }
+      }
+    })
+
+    expect(getByRole(container, 'option', { name: 'Search Kagi private project' })).toBeTruthy()
+    expect(container.textContent).toBe('Search Kagi·private project')
+    expect(container.textContent).not.toContain('https://')
+  })
 })
diff --git a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
index 0cca7d4b8c6..5e99818009d 100644
--- a/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
+++ b/src/renderer/src/components/tab-bar/TabBarCreateEntryRow.tsx
@@ -5,6 +5,7 @@ import {
   GitCompare,
   Globe,
   Loader2,
+  Search,
   Smartphone,
   TerminalSquare
 } from 'lucide-react'
@@ -12,6 +13,7 @@ import { AgentIcon } from '@/lib/agent-catalog'
 import { cn } from '@/lib/utils'
 import { FilePathCursorTooltip, splitTrailingSegment } from '@/components/file-path-cursor-tooltip'
 import { translate } from '@/i18n/i18n'
+import { SEARCH_ENGINE_LABELS } from '../../../../shared/browser-url'
 import type { ActiveOption } from './tab-create-entry-active-option'
 
 export const RESULT_LISTBOX_ID = 'tab-create-entry-results'
@@ -38,12 +40,16 @@ export function EntryStatusRow({
 }
 
 export function EntryActionRow({
+  disabled = false,
   id,
+  loading = false,
   onClick,
   option,
   selected
 }: {
+  disabled?: boolean
   id: string
+  loading?: boolean
   onClick: () => void
   option: ActiveOption
   selected: boolean
@@ -56,15 +62,22 @@ export function EntryActionRow({
       id={id}
       role="option"
       aria-selected={selected}
+      disabled={disabled}
       className={cn(
-        'flex h-6 w-full items-center gap-1.5 rounded-[7px] px-1 text-left text-[11px] leading-5 outline-none',
+        'flex h-6 w-full items-center gap-1.5 rounded-[7px] px-1 text-left text-[11px] leading-5 outline-none disabled:cursor-not-allowed disabled:opacity-50',
         selected
           ? 'bg-black/8 text-accent-foreground dark:bg-white/14'
-          : 'text-muted-foreground hover:bg-black/8 hover:text-accent-foreground dark:hover:bg-white/14'
+          : // Why: CSS :hover still matches a disabled button, so a pending row would
+            // light up under the pointer despite being unactivatable.
+            'text-muted-foreground hover:bg-black/8 hover:text-accent-foreground disabled:hover:bg-transparent disabled:hover:text-muted-foreground dark:hover:bg-white/14 dark:disabled:hover:bg-transparent'
       )}
       onClick={onClick}
     >
-      {presentation.icon}
+      {loading ? (
+        <Loader2 className="size-3.5 shrink-0 animate-spin" aria-hidden="true" />
+      ) : (
+        presentation.icon
+      )}
       <span className={cn('min-w-0 truncate font-medium', presentation.showDetail && 'shrink-0')}>
         {presentation.label}
       </span>
@@ -169,6 +182,19 @@ function getActionPresentation(option: ActiveOption): {
     }
   }
   const { classification } = option.option
+  if (classification.kind === 'search') {
+    return {
+      detail: classification.query,
+      icon: <Search className="size-3.5 shrink-0" aria-hidden="true" />,
+      label: translate(
+        'auto.components.tab.bar.TabBarCreateEntry.searchProvider',
+        'Search {{value0}}',
+        { value0: SEARCH_ENGINE_LABELS[classification.engine] }
+      ),
+      prioritizeFilename: false,
+      showDetail: true
+    }
+  }
   if (classification.kind === 'explicit-url' || classification.kind === 'host-url') {
     return {
       detail: classification.url,
diff --git a/src/renderer/src/components/tab-bar/tab-bar-item-surface.tsx b/src/renderer/src/components/tab-bar/tab-bar-item-surface.tsx
index b67ce3b000a..de672c549a4 100644
--- a/src/renderer/src/components/tab-bar/tab-bar-item-surface.tsx
+++ b/src/renderer/src/components/tab-bar/tab-bar-item-surface.tsx
@@ -149,7 +149,11 @@ export function renderTabBarItems({
           onCloseOthers={() => onCloseOthers(item.id)}
           onCloseToRight={() => onCloseToRight(item.id)}
           onCloseToLeft={() => onCloseToLeft(item.id)}
-          onDuplicate={() => onDuplicateBrowserTab?.(item.id)}
+          onDuplicate={
+            runtime.managedBrowserCreationEnabled
+              ? () => onDuplicateBrowserTab?.(item.id)
+              : undefined
+          }
           onTogglePin={() => togglePinned(item)}
           dragData={dragData}
           dropIndicator={dropIndicatorByVisibleId.get(item.id) ?? null}
diff --git a/src/renderer/src/components/tab-bar/tab-bar-static-create-menu.tsx b/src/renderer/src/components/tab-bar/tab-bar-static-create-menu.tsx
index 9d68808ad94..9a7a19a9186 100644
--- a/src/renderer/src/components/tab-bar/tab-bar-static-create-menu.tsx
+++ b/src/renderer/src/components/tab-bar/tab-bar-static-create-menu.tsx
@@ -16,6 +16,8 @@ import { resolveWindowsShellLaunchTarget } from './windows-shell-launch'
 export function renderTabBarStaticCreateMenu({
   terminalOnly,
   mobileEmulatorEnabled,
+  managedBrowserCreationEnabled,
+  mobileEmulatorCreationEnabled,
   workspaceHasSimulatorTab,
   showMobileEmulatorIntroCallout,
   props,
@@ -32,6 +34,8 @@ export function renderTabBarStaticCreateMenu({
   props: TabBarProps
   terminalOnly: boolean
   mobileEmulatorEnabled: boolean
+  managedBrowserCreationEnabled: boolean
+  mobileEmulatorCreationEnabled: boolean
   workspaceHasSimulatorTab: boolean
   showMobileEmulatorIntroCallout: boolean
   windowsShellEntries: WindowsShellMenuEntry[] | undefined
@@ -97,18 +101,19 @@ export function renderTabBarStaticCreateMenu({
         <DropdownMenuShortcut>{newTerminalShortcut}</DropdownMenuShortcut>
       </DropdownMenuItem>
     )
-  const newBrowserMenuItem = !terminalOnly ? (
-    <DropdownMenuItem
-      onSelect={onNewBrowserTab}
-      className="gap-2 rounded-[7px] px-2 py-1.5 text-[12px] leading-5 font-medium"
-    >
-      <Globe className="size-4 text-muted-foreground" />
-      {translate('auto.components.tab.bar.TabBar.4833fb2cbe', 'New Browser Tab')}
-      <DropdownMenuShortcut>{newBrowserShortcut}</DropdownMenuShortcut>
-    </DropdownMenuItem>
-  ) : null
+  const newBrowserMenuItem =
+    !terminalOnly && managedBrowserCreationEnabled ? (
+      <DropdownMenuItem
+        onSelect={onNewBrowserTab}
+        className="gap-2 rounded-[7px] px-2 py-1.5 text-[12px] leading-5 font-medium"
+      >
+        <Globe className="size-4 text-muted-foreground" />
+        {translate('auto.components.tab.bar.TabBar.4833fb2cbe', 'New Browser Tab')}
+        <DropdownMenuShortcut>{newBrowserShortcut}</DropdownMenuShortcut>
+      </DropdownMenuItem>
+    ) : null
   const newSimulatorMenuItem =
-    !terminalOnly && mobileEmulatorEnabled && onNewSimulatorTab ? (
+    !terminalOnly && mobileEmulatorEnabled && mobileEmulatorCreationEnabled && onNewSimulatorTab ? (
       workspaceHasSimulatorTab ? (
         <Tooltip>
           <TooltipTrigger asChild>
@@ -168,6 +173,7 @@ export function renderTabBarStaticCreateMenu({
     !terminalOnly &&
     isMacOs &&
     mobileEmulatorEnabled &&
+    mobileEmulatorCreationEnabled &&
     onNewSimulatorTab ? (
       <MobileEmulatorTabIntroCallout />
     ) : null
diff --git a/src/renderer/src/components/tab-bar/tab-bar-surface.tsx b/src/renderer/src/components/tab-bar/tab-bar-surface.tsx
index d3b18ee5820..6e1c49ddc94 100644
--- a/src/renderer/src/components/tab-bar/tab-bar-surface.tsx
+++ b/src/renderer/src/components/tab-bar/tab-bar-surface.tsx
@@ -52,6 +52,8 @@ export function renderTabBarSurface({
   const {
     resolvedGroupId,
     mobileEmulatorEnabled,
+    managedBrowserCreationEnabled,
+    mobileEmulatorCreationEnabled,
     workspaceHasSimulatorTab,
     showMobileEmulatorIntroCallout,
     windowsTerminalCapabilities,
@@ -93,6 +95,8 @@ export function renderTabBarSurface({
     props,
     terminalOnly,
     mobileEmulatorEnabled,
+    managedBrowserCreationEnabled,
+    mobileEmulatorCreationEnabled,
     workspaceHasSimulatorTab,
     showMobileEmulatorIntroCallout,
     windowsShellEntries,
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-action.test.ts b/src/renderer/src/components/tab-bar/tab-create-entry-action.test.ts
index 7807ccc7e44..880bb561db4 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-action.test.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-action.test.ts
@@ -10,10 +10,8 @@ const readyFiles = (files: string[]) => ({ files, loading: false, loadError: nul
 describe('openTabEntryWithOperations', () => {
   function makeOperations(overrides: Partial<TabEntryOperations> = {}): TabEntryOperations {
     return {
-      createBrowserTab: vi.fn() as TabEntryOperations['createBrowserTab'],
       createRuntimePath: vi.fn().mockResolvedValue(undefined),
-      createWebRuntimeSessionBrowserTab: vi.fn().mockResolvedValue(true),
-      isWebRuntimeSessionActive: vi.fn().mockReturnValue(false),
+      openWorkspaceBrowserTab: vi.fn().mockResolvedValue(undefined),
       openFile: vi.fn(),
       statRuntimePath: vi.fn().mockResolvedValue({ size: 1, isDirectory: false, mtime: 1 }),
       authorizeExternalPath: vi.fn().mockResolvedValue(undefined),
@@ -32,9 +30,9 @@ describe('openTabEntryWithOperations', () => {
       worktreeId: 'wt-1',
       worktreePath: '/repo'
     },
-    activeRuntimeEnvironmentId: null,
     allowAbsolutePaths: true,
-    localPlatform: 'posix' as const
+    localPlatform: 'posix' as const,
+    searchEngine: 'google' as const
   }
 
   it('stats existing files before opening and rejects directories', async () => {
@@ -182,51 +180,77 @@ describe('openTabEntryWithOperations', () => {
     expect(operations.openFile).toHaveBeenCalled()
   })
 
-  it('routes paired runtime browser creation through the web session API', async () => {
-    const operations = makeOperations({
-      isWebRuntimeSessionActive: vi.fn().mockReturnValue(true)
-    })
+  it('routes URL classifications through the workspace browser opener', async () => {
+    const operations = makeOperations()
 
     await openTabEntryWithOperations({
       ...baseArgs,
       query: 'https://example.com',
-      activeRuntimeEnvironmentId: 'runtime-1',
       operations
     })
 
-    expect(operations.createWebRuntimeSessionBrowserTab).toHaveBeenCalledWith({
-      worktreeId: 'wt-1',
-      environmentId: 'runtime-1',
+    expect(operations.openWorkspaceBrowserTab).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
       url: 'https://example.com/',
-      targetGroupId: 'group-1'
+      targetGroupId: 'group-1',
+      intent: { kind: 'url' }
     })
-    expect(operations.createBrowserTab).not.toHaveBeenCalled()
   })
 
-  it('falls back to a local browser tab when paired runtime browser creation fails', async () => {
-    const operations = makeOperations({
-      createWebRuntimeSessionBrowserTab: vi.fn().mockResolvedValue(false),
-      isWebRuntimeSessionActive: vi.fn().mockReturnValue(true)
-    })
+  it('builds a search URL from the selected immutable classification', async () => {
+    const operations = makeOperations()
 
     await openTabEntryWithOperations({
       ...baseArgs,
-      query: 'https://example.com',
-      activeRuntimeEnvironmentId: 'runtime-1',
+      query: 'different query',
+      classification: { kind: 'search', engine: 'duckduckgo', query: 'react hooks' },
       operations
     })
 
-    expect(operations.createWebRuntimeSessionBrowserTab).toHaveBeenCalledWith({
-      worktreeId: 'wt-1',
-      environmentId: 'runtime-1',
-      url: 'https://example.com/',
-      targetGroupId: 'group-1'
-    })
-    expect(operations.createBrowserTab).toHaveBeenCalledWith('wt-1', 'https://example.com/', {
-      activate: true,
-      browserRuntimeEnvironmentId: null,
+    expect(operations.openWorkspaceBrowserTab).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: 'https://duckduckgo.com/?q=react%20hooks',
       targetGroupId: 'group-1',
-      title: 'https://example.com/'
+      intent: { kind: 'search', engine: 'duckduckgo' }
+    })
+  })
+
+  it('uses plain Kagi search URLs and the fallback classifier engine', async () => {
+    const operations = makeOperations()
+
+    await openTabEntryWithOperations({
+      ...baseArgs,
+      query: 'private project',
+      searchEngine: 'kagi',
+      operations
+    })
+
+    expect(operations.openWorkspaceBrowserTab).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: 'https://kagi.com/search?q=private%20project',
+      targetGroupId: 'group-1',
+      intent: { kind: 'search', engine: 'kagi' }
+    })
+  })
+
+  it('uses a configured Kagi private-session link', async () => {
+    const operations = makeOperations()
+
+    await openTabEntryWithOperations({
+      ...baseArgs,
+      query: 'private project',
+      searchEngine: 'kagi',
+      searchUrlOptions: {
+        kagiSessionLink: 'https://kagi.com/search?token=secret'
+      },
+      operations
+    })
+
+    expect(operations.openWorkspaceBrowserTab).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: 'https://kagi.com/search?token=secret&q=private+project',
+      targetGroupId: 'group-1',
+      intent: { kind: 'search', engine: 'kagi' }
     })
   })
 
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-action.ts b/src/renderer/src/components/tab-bar/tab-create-entry-action.ts
index b01f6ac8db6..6c7ec6bbdb5 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-action.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-action.ts
@@ -6,14 +6,19 @@ import {
   statRuntimePath,
   type RuntimeFileOperationArgs
 } from '@/runtime/runtime-file-client'
-import {
-  createWebRuntimeSessionBrowserTab,
-  isWebRuntimeSessionActive
-} from '@/runtime/web-runtime-session'
 import { useAppStore } from '@/store'
 import type { OpenFile } from '@/store/slices/editor'
-import type { BrowserTab as BrowserTabState } from '../../../../shared/types'
+import {
+  buildSearchUrl,
+  DEFAULT_SEARCH_ENGINE,
+  type SearchEngine,
+  type SearchUrlOptions
+} from '../../../../shared/browser-url'
 import type { RuntimeFileListState } from '../quick-open-file-list'
+import {
+  openWorkspaceBrowserTab,
+  type OpenWorkspaceBrowserTabRequest
+} from '@/lib/workspace-browser-tab-open'
 import {
   classifyTabEntryQuery,
   TAB_ENTRY_ABSOLUTE_PATH_REMOTE_BLOCKED_MESSAGE,
@@ -54,19 +59,8 @@ export type TabCreateEntryArgs = {
 }
 
 export type TabEntryOperations = {
-  createBrowserTab: (
-    worktreeId: string,
-    url: string,
-    options?: {
-      activate?: boolean
-      browserRuntimeEnvironmentId?: string | null
-      targetGroupId?: string
-      title?: string
-    }
-  ) => BrowserTabState
   createRuntimePath: typeof createRuntimePath
-  createWebRuntimeSessionBrowserTab: typeof createWebRuntimeSessionBrowserTab
-  isWebRuntimeSessionActive: typeof isWebRuntimeSessionActive
+  openWorkspaceBrowserTab: typeof openWorkspaceBrowserTab
   openFile: (
     file: Omit<OpenFile, 'id' | 'isDirty'>,
     options?: { preview?: boolean; targetGroupId?: string }
@@ -83,9 +77,10 @@ type OpenTabEntryWithOperationsArgs = {
   groupId: string
   worktreePath: string
   runtimeContext: RuntimeFileOperationArgs
-  activeRuntimeEnvironmentId: string | null
   allowAbsolutePaths: boolean
   localPlatform: TabEntryLocalPlatform
+  searchEngine: SearchEngine
+  searchUrlOptions?: SearchUrlOptions
   classification?: TabEntryActionClassification
   operations: TabEntryOperations
 }
@@ -152,8 +147,38 @@ async function openExistingFile(args: {
   )
 }
 
+type NetworkTabEntryClassification = Extract<
+  TabEntryActionClassification,
+  { kind: 'explicit-url' | 'host-url' | 'search' }
+>
+
+function isNetworkTabEntry(
+  classification: TabEntryActionClassification
+): classification is NetworkTabEntryClassification {
+  return (
+    classification.kind === 'explicit-url' ||
+    classification.kind === 'host-url' ||
+    classification.kind === 'search'
+  )
+}
+
+function getNetworkTabRequest(
+  classification: NetworkTabEntryClassification,
+  { worktreeId, groupId }: Pick<TabCreateEntryArgs, 'worktreeId' | 'groupId'>,
+  searchUrlOptions?: SearchUrlOptions
+): OpenWorkspaceBrowserTabRequest {
+  const target = { workspaceId: worktreeId, targetGroupId: groupId }
+  if (classification.kind === 'search') {
+    return {
+      ...target,
+      url: buildSearchUrl(classification.query, classification.engine, searchUrlOptions),
+      intent: { kind: 'search', engine: classification.engine }
+    }
+  }
+  return { ...target, url: classification.url, intent: { kind: 'url' } }
+}
+
 export async function openTabEntryWithOperations({
-  activeRuntimeEnvironmentId,
   allowAbsolutePaths,
   classification: selectedClassification,
   fileList,
@@ -162,43 +187,22 @@ export async function openTabEntryWithOperations({
   operations,
   query,
   runtimeContext,
+  searchEngine,
+  searchUrlOptions,
   worktreeId,
   worktreePath
 }: OpenTabEntryWithOperationsArgs): Promise<void> {
-  const entryContext: TabEntryOptionsContext = { allowAbsolutePaths, localPlatform }
+  const entryContext: TabEntryOptionsContext = { allowAbsolutePaths, localPlatform, searchEngine }
   const classification =
     selectedClassification ?? classifyTabEntryQuery(query, fileList, entryContext)
   if (classification.kind === 'empty' || classification.kind === 'blocked') {
     throw new Error(classification.message)
   }
 
-  if (classification.kind === 'explicit-url' || classification.kind === 'host-url') {
-    const runtimeSessionActive = operations.isWebRuntimeSessionActive(activeRuntimeEnvironmentId)
-    if (runtimeSessionActive) {
-      const created = await operations.createWebRuntimeSessionBrowserTab({
-        worktreeId,
-        environmentId: activeRuntimeEnvironmentId,
-        url: classification.url,
-        targetGroupId: groupId
-      })
-      if (created) {
-        return
-      }
-      // Why: headless remote runtimes cannot host browser panes yet; a URL open
-      // should still give the user a usable client-local browser tab.
-      operations.createBrowserTab(worktreeId, classification.url, {
-        activate: true,
-        browserRuntimeEnvironmentId: null,
-        targetGroupId: groupId,
-        title: classification.url
-      })
-    } else {
-      operations.createBrowserTab(worktreeId, classification.url, {
-        activate: true,
-        targetGroupId: groupId,
-        title: classification.url
-      })
-    }
+  if (isNetworkTabEntry(classification)) {
+    await operations.openWorkspaceBrowserTab(
+      getNetworkTabRequest(classification, { worktreeId, groupId }, searchUrlOptions)
+    )
     return
   }
 
@@ -256,6 +260,12 @@ export async function openTabEntryWithOperations({
 
 export async function openTabBarEntry(args: TabCreateEntryArgs): Promise<void> {
   const state = useAppStore.getState()
+  const searchUrlOptions = { kagiSessionLink: state.browserKagiSessionLink }
+  if (args.classification && isNetworkTabEntry(args.classification)) {
+    await openWorkspaceBrowserTab(getNetworkTabRequest(args.classification, args, searchUrlOptions))
+    return
+  }
+  const searchEngine = state.browserDefaultSearchEngine ?? DEFAULT_SEARCH_ENGINE
   const worktree = state.getKnownWorktreeById(args.worktreeId)
   if (!worktree) {
     throw new Error('No active worktree.')
@@ -270,15 +280,14 @@ export async function openTabBarEntry(args: TabCreateEntryArgs): Promise<void> {
     groupId: args.groupId,
     worktreePath: worktree.path,
     runtimeContext,
-    activeRuntimeEnvironmentId: runtimeContext.settings?.activeRuntimeEnvironmentId?.trim() ?? null,
     allowAbsolutePaths,
     localPlatform,
+    searchEngine,
+    searchUrlOptions,
     classification: args.classification,
     operations: {
-      createBrowserTab: state.createBrowserTab,
       createRuntimePath,
-      createWebRuntimeSessionBrowserTab,
-      isWebRuntimeSessionActive,
+      openWorkspaceBrowserTab,
       openFile: state.openFile,
       statRuntimePath,
       authorizeExternalPath: window.api.fs.authorizeExternalPath,
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
index 57708f00e8b..b93acba28aa 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.test.ts
@@ -70,6 +70,27 @@ describe('tab create entry classification', () => {
     }
   })
 
+  it('picks http for private IPv4 hosts and https for public ones', () => {
+    for (const input of ['192.168.1.5:5173', '10.0.0.2', '172.16.4.1:8080', '100.64.0.1']) {
+      expect(classifyTabEntryQuery(input, readyFiles([])), input).toMatchObject({
+        kind: 'host-url',
+        url: expect.stringMatching(/^http:\/\//)
+      })
+    }
+    for (const input of ['8.8.8.8', '1.1.1.1:8080']) {
+      expect(classifyTabEntryQuery(input, readyFiles([])), input).toMatchObject({
+        kind: 'host-url',
+        url: expect.stringMatching(/^https:\/\//)
+      })
+    }
+  })
+
+  it('blocks malformed bracketed IPv6 URL attempts', () => {
+    for (const input of ['[::1]:abc', '[::1]:99999', '[2001:db8::1]:nope/path']) {
+      expect(classifyTabEntryQuery(input, readyFiles([])), input).toMatchObject({ kind: 'blocked' })
+    }
+  })
+
   it('does not classify invalid numeric hosts as URLs', () => {
     expect(classifyTabEntryQuery('999.999.999.999', readyFiles([]))).toEqual({
       kind: 'new-file',
@@ -92,13 +113,10 @@ describe('tab create entry classification', () => {
     })
   })
 
-  it('blocks non-explicit URLs and file paths while list state is not ready', () => {
+  it('keeps safe URL actions available while the file list is not ready', () => {
     expect(
       classifyTabEntryQuery('example.com', { files: [], loading: true, loadError: null })
-    ).toEqual({
-      kind: 'blocked',
-      message: 'Loading files...'
-    })
+    ).toMatchObject({ kind: 'host-url', url: 'https://example.com/' })
     expect(
       classifyTabEntryQuery('https://example.com', { files: [], loading: true, loadError: null })
     ).toMatchObject({ kind: 'explicit-url' })
@@ -108,7 +126,7 @@ describe('tab create entry classification', () => {
         loading: false,
         loadError: 'scan failed'
       })
-    ).toEqual({ kind: 'blocked', message: 'scan failed' })
+    ).toMatchObject({ kind: 'host-url', url: 'https://example.com/' })
   })
 
   it('matches exact relative path before basename and fuzzy results', () => {
@@ -137,7 +155,8 @@ describe('tab create entry classification', () => {
       )
     ).toEqual([
       { kind: 'existing-file', matchKind: 'exact-basename', relativePath: 'src/index.ts' },
-      { kind: 'existing-file', matchKind: 'exact-basename', relativePath: 'docs/index.ts' }
+      { kind: 'existing-file', matchKind: 'exact-basename', relativePath: 'docs/index.ts' },
+      { kind: 'search', engine: 'google', query: 'index.ts' }
     ])
   })
 
@@ -148,10 +167,208 @@ describe('tab create entry classification', () => {
       )
     ).toEqual([
       { kind: 'new-file', relativePath: 'read.md' },
+      { kind: 'search', engine: 'google', query: 'read.md' },
       { kind: 'existing-file', matchKind: 'fuzzy', relativePath: 'README.md' }
     ])
   })
 
+  it('keeps single-token quick-open matches ahead of search, but not phrases', () => {
+    expect(
+      getTabEntryOptions('typescript', readyFiles(['docs/typescript-guide.md'])).map(
+        (option) => option.classification
+      )
+    ).toEqual([
+      {
+        kind: 'existing-file',
+        matchKind: 'fuzzy',
+        relativePath: 'docs/typescript-guide.md'
+      },
+      { kind: 'search', engine: 'google', query: 'typescript' },
+      { kind: 'new-file', relativePath: 'typescript' }
+    ])
+    expect(
+      getTabEntryOptions('type script', readyFiles(['docs/typescript-guide.md'])).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['search', 'new-file'])
+  })
+
+  // Fuzzy matching is a subsequence scan, so a short token matches broadly.
+  it('keeps a search slot when fuzzy matches would fill the whole list', () => {
+    const files = [
+      'src/components/Button.tsx',
+      'src/lib/bootstrap-nav.ts',
+      'docs/build-notes.md',
+      'src/base/tone.ts',
+      'src/bin/tune.ts'
+    ]
+    expect(getTabEntryOptions('btn', readyFiles(files)).map((o) => o.classification.kind)).toEqual([
+      'existing-file',
+      'existing-file',
+      'existing-file',
+      'search'
+    ])
+    // A one-slot list still answers with the file, so Enter keeps quick-open.
+    expect(
+      getTabEntryOptions('btn', readyFiles(files), 1).map((o) => o.classification.kind)
+    ).toEqual(['existing-file'])
+  })
+
+  it('ranks search before ordinary create-file actions', () => {
+    expect(
+      getTabEntryOptions('typescript', readyFiles([])).map((option) => option.classification)
+    ).toEqual([
+      { kind: 'search', engine: 'google', query: 'typescript' },
+      { kind: 'new-file', relativePath: 'typescript' }
+    ])
+  })
+
+  it('keeps strong file syntax ahead of search without treating dotted phrases as files', () => {
+    expect(
+      getTabEntryOptions('README.md', readyFiles(['docs/README-old.md'])).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['new-file', 'search', 'existing-file'])
+    for (const query of ['node.js tutorial', 'package.json docs', 'what is foo.bar']) {
+      expect(classifyTabEntryQuery(query, readyFiles([]))).toMatchObject({
+        kind: 'search',
+        query
+      })
+    }
+    for (const query of ['.env', '.gitignore']) {
+      expect(
+        getTabEntryOptions(query, readyFiles([])).map((option) => option.classification.kind)
+      ).toEqual(['new-file', 'search'])
+    }
+  })
+
+  it('searches natural-language colons while blocking explicit unsupported schemes', () => {
+    for (const query of ['error: cannot connect', 'node:fs docs', 'site:github.com react']) {
+      expect(classifyTabEntryQuery(query, readyFiles([]))).toMatchObject({ kind: 'search', query })
+    }
+    for (const query of ['ftp:example.com', 'ftp://example.com', 'custom:// bad input']) {
+      expect(classifyTabEntryQuery(query, readyFiles([]))).toMatchObject({ kind: 'blocked' })
+    }
+    expect(classifyTabEntryQuery('foo.ts:123', readyFiles([]))).toMatchObject({
+      kind: 'new-file',
+      relativePath: 'foo.ts:123'
+    })
+  })
+
+  it('blocks malformed explicit and host-like URLs unless an exact file exists', () => {
+    for (const query of ['https://', 'example.com:99999']) {
+      expect(classifyTabEntryQuery(query, readyFiles([]))).toMatchObject({ kind: 'blocked' })
+    }
+    expect(classifyTabEntryQuery('example.com:99999', readyFiles(['example.com:99999']))).toEqual({
+      kind: 'existing-file',
+      matchKind: 'exact-path',
+      relativePath: 'example.com:99999'
+    })
+  })
+
+  it('offers network actions alongside file-index status only when safe', () => {
+    const loading = { files: [], loading: true, loadError: null }
+    expect(
+      getTabEntryOptions('natural language', loading).map((option) => option.classification.kind)
+    ).toEqual(['search', 'blocked'])
+    expect(
+      getTabEntryOptions('example.com', loading).map((option) => option.classification.kind)
+    ).toEqual(['host-url', 'blocked'])
+    expect(
+      getTabEntryOptions('README.md', loading).map((option) => option.classification.kind)
+    ).toEqual(['blocked'])
+    expect(
+      getTabEntryOptions('example.com:99999', loading).map((option) => option.classification.kind)
+    ).toEqual(['blocked'])
+  })
+
+  it('keeps file matches for path prefixes that cannot be created', () => {
+    const files = ['src/main/index.ts', 'src/renderer/App.tsx']
+    // A trailing separator is an ordinary keystroke on the way to a nested path,
+    // so the matches it finds must survive the unusable-path verdict.
+    for (const query of ['src/', 'src/renderer/']) {
+      expect(
+        getTabEntryOptions(query, readyFiles(files)).map((option) => option.classification.kind),
+        query
+      ).toEqual(expect.arrayContaining(['existing-file']))
+    }
+    expect(getTabEntryOptions('src/', readyFiles([]))).toMatchObject([
+      { classification: { kind: 'blocked' } }
+    ])
+  })
+
+  it('reports the running scan for path-shaped text it cannot create yet', () => {
+    expect(
+      getTabEntryOptions('src/', { files: [], loading: true, loadError: null }).map(
+        (option) => option.id
+      )
+    ).toEqual(['loading'])
+  })
+
+  it('falls through to file and search actions for host-like text with a non-numeric port', () => {
+    expect(
+      getTabEntryOptions('docker.io:latest', readyFiles([])).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['new-file', 'search'])
+    expect(
+      getTabEntryOptions('example.com:', readyFiles([])).map((option) => option.classification.kind)
+    ).toEqual(['new-file', 'search'])
+  })
+
+  it('never turns invalid paths into search actions', () => {
+    for (const query of ['../.env', 'foo//bar', 'foo/', 'C:relative.txt', 'src/\u0000file.ts']) {
+      expect(classifyTabEntryQuery(query, readyFiles([])), query).toMatchObject({ kind: 'blocked' })
+      expect(
+        classifyTabEntryQuery(query, { files: [], loading: true, loadError: null }),
+        query
+      ).toMatchObject({ kind: 'blocked' })
+    }
+  })
+
+  it('applies the action limit once and leaves index status outside it', () => {
+    expect(getTabEntryOptions('query', readyFiles([]), 0)).toEqual([])
+    expect(
+      getTabEntryOptions('query', { files: [], loading: true, loadError: null }, 0).map(
+        (option) => option.id
+      )
+    ).toEqual(['loading'])
+    expect(
+      getTabEntryOptions('query', readyFiles(['query.md']), 1).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['existing-file'])
+    expect(
+      getTabEntryOptions('query text', readyFiles(['query.md']), 1).map(
+        (option) => option.classification.kind
+      )
+    ).toEqual(['search'])
+  })
+
+  it('forces search before URL, path, and file classification', () => {
+    for (const [input, expectedQuery] of [
+      ['?react hooks', 'react hooks'],
+      ['??foo', '?foo'],
+      ['?https://example.com', 'https://example.com'],
+      ['?/tmp/file.ts', '/tmp/file.ts']
+    ]) {
+      expect(classifyTabEntryQuery(input, readyFiles(['/tmp/file.ts']))).toEqual({
+        kind: 'search',
+        engine: 'google',
+        query: expectedQuery
+      })
+    }
+    expect(classifyTabEntryQuery('?', readyFiles([]))).toMatchObject({ kind: 'empty' })
+  })
+
+  it('retains the configured engine without building a URL', () => {
+    expect(classifyTabEntryQuery('search me', readyFiles([]), { searchEngine: 'kagi' })).toEqual({
+      kind: 'search',
+      engine: 'kagi',
+      query: 'search me'
+    })
+  })
+
   it('blocks oversized pasted file-entry queries before reading listed files', () => {
     const oversizedQuery = `src/${'secret-tab-create'.repeat(QUICK_OPEN_QUERY_MAX_BYTES)}.ts`
     const fileList = {
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
index 48983433ca2..a36ce7c8609 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-classifier.ts
@@ -1,7 +1,9 @@
-import { isQuickOpenQueryTooLarge, prepareQuickOpenFiles } from '../quick-open-search'
+import { getPreparedQuickOpenFiles, isQuickOpenQueryTooLarge } from '../quick-open-search'
 import type { RuntimeFileListState } from '../quick-open-file-list'
 import { translate } from '@/i18n/i18n'
+import { DEFAULT_SEARCH_ENGINE, type SearchEngine } from '../../../../shared/browser-url'
 import { findExistingFileMatches, isLikelyNewFileIntent } from './tab-create-entry-file-matches'
+import { parseForcedSearchQuery } from './tab-create-entry-forced-search'
 import {
   isTabEntryAbsolutePathLike,
   type TabEntryLocalPlatform,
@@ -19,6 +21,7 @@ export {
 export type TabEntryOptionsContext = {
   allowAbsolutePaths?: boolean
   localPlatform?: TabEntryLocalPlatform
+  searchEngine?: SearchEngine
 }
 
 export const TAB_ENTRY_ABSOLUTE_PATH_REMOTE_BLOCKED_MESSAGE =
@@ -33,6 +36,7 @@ export type TabEntryClassification =
       relativePath: string
     }
   | { kind: 'host-url'; url: string }
+  | { kind: 'search'; engine: SearchEngine; query: string }
   | { kind: 'new-file'; relativePath: string }
   | { kind: 'absolute-file'; filePath: string }
   | { kind: 'blocked'; message: string }
@@ -57,22 +61,78 @@ function tabEntryActionOptionId(classification: TabEntryActionClassification): s
     case 'explicit-url':
     case 'host-url':
       return `${classification.kind}:${classification.url}`
+    case 'search':
+      return `search:${classification.query}`
   }
 }
 
+function emptyOption(): TabEntryOption {
+  return {
+    id: 'empty',
+    classification: {
+      kind: 'empty',
+      message: translate(
+        'auto.components.tab.bar.tab.create.entry.classifier.c41f8d20b7',
+        'Search open tabs, files, URLs, agents…'
+      )
+    }
+  }
+}
+
+function blockedOption(id: string, message: string): TabEntryOption {
+  return { id, classification: { kind: 'blocked', message } }
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error)
+}
+
+function invalidPathOption(error: unknown): TabEntryOption {
+  return blockedOption('invalid-path', errorMessage(error))
+}
+
+function fileListStatusOption(fileList: RuntimeFileListState): TabEntryOption | null {
+  if (fileList.loading) {
+    return blockedOption(
+      'loading',
+      translate(
+        'auto.components.tab.bar.tab.create.entry.classifier.097a982ee0',
+        'Loading files...'
+      )
+    )
+  }
+  return fileList.loadError ? blockedOption('load-error', fileList.loadError) : null
+}
+
+function clampActionLimit(limit: number): number {
+  return Number.isFinite(limit) ? Math.max(0, Math.floor(limit)) : 0
+}
+
+function toOptions(
+  classifications: TabEntryActionClassification[],
+  limit: number,
+  status?: TabEntryOption | null
+): TabEntryOption[] {
+  const options: TabEntryOption[] = classifications
+    .slice(0, clampActionLimit(limit))
+    .map((classification) => ({
+      id: tabEntryActionOptionId(classification),
+      classification
+    }))
+  if (status) {
+    options.push(status)
+  }
+  return options
+}
+
 export function classifyTabEntryQuery(
   query: string,
   fileList: RuntimeFileListState,
   context: TabEntryOptionsContext = {}
 ): TabEntryClassification {
   return (
-    getTabEntryOptions(query, fileList, 1, context)[0]?.classification ?? {
-      kind: 'empty',
-      message: translate(
-        'auto.components.tab.bar.tab.create.entry.classifier.5553b283ce',
-        'Enter a URL or file path.'
-      )
-    }
+    getTabEntryOptions(query, fileList, 1, context)[0]?.classification ??
+    emptyOption().classification
   )
 }
 
@@ -84,164 +144,126 @@ export function getTabEntryOptions(
 ): TabEntryOption[] {
   if (isQuickOpenQueryTooLarge(query)) {
     return [
-      {
-        id: 'query-too-large',
-        classification: {
-          kind: 'blocked',
-          message: translate(
-            'auto.components.tab.bar.tab.create.entry.classifier.queryTooLarge',
-            'Search text is too large.'
-          )
-        }
-      }
+      blockedOption(
+        'query-too-large',
+        translate(
+          'auto.components.tab.bar.tab.create.entry.classifier.queryTooLarge',
+          'Search text is too large.'
+        )
+      )
     ]
   }
 
-  const trimmed = query.trim()
+  const parsedSearch = parseForcedSearchQuery(query)
+  const trimmed = parsedSearch.query
+  const engine = context.searchEngine ?? DEFAULT_SEARCH_ENGINE
+  const search: TabEntryActionClassification = { kind: 'search', engine, query: trimmed }
+  if (parsedSearch.forced) {
+    return trimmed ? toOptions([search], limit) : [emptyOption()]
+  }
   if (!trimmed) {
-    return [
-      {
-        id: 'empty',
-        classification: {
-          kind: 'empty',
-          message: translate(
-            'auto.components.tab.bar.tab.create.entry.classifier.c41f8d20b7',
-            'Search open tabs, files, URLs, agents…'
-          )
-        }
-      }
-    ]
+    return [emptyOption()]
   }
 
   if (isTabEntryAbsolutePathLike(trimmed)) {
     if (!context.allowAbsolutePaths) {
       return [
-        {
-          id: 'absolute-path-blocked',
-          classification: {
-            kind: 'blocked',
-            message: translate(
-              'auto.components.tab.bar.tab.create.entry.classifier.absolutePathRemoteBlocked',
-              'Absolute paths require a local workspace.'
-            )
-          }
-        }
+        blockedOption(
+          'absolute-path-blocked',
+          translate(
+            'auto.components.tab.bar.tab.create.entry.classifier.absolutePathRemoteBlocked',
+            'Absolute paths require a local workspace.'
+          )
+        )
       ]
     }
     try {
       const filePath = validateNewTabEntryAbsolutePath(trimmed, context.localPlatform)
-      return [
-        {
-          id: `absolute-file:${filePath}`,
-          classification: { kind: 'absolute-file', filePath }
-        }
-      ]
+      return toOptions([{ kind: 'absolute-file', filePath }], limit)
     } catch (error) {
-      return [
-        {
-          id: 'invalid-absolute-path',
-          classification: {
-            kind: 'blocked',
-            message: error instanceof Error ? error.message : String(error)
-          }
-        }
-      ]
+      return [blockedOption('invalid-absolute-path', errorMessage(error))]
     }
   }
 
   const explicitUrl = classifyExplicitUrl(trimmed)
   if (explicitUrl) {
-    return [
-      {
-        id: explicitUrl.kind === 'blocked' ? 'invalid-url' : `url:${explicitUrl.url}`,
-        classification: explicitUrl
-      }
-    ]
+    return explicitUrl.kind === 'blocked'
+      ? [blockedOption('invalid-url', explicitUrl.message)]
+      : toOptions([explicitUrl], limit)
   }
 
-  if (fileList.loading) {
-    return [
-      {
-        id: 'loading',
-        classification: {
-          kind: 'blocked',
-          message: translate(
-            'auto.components.tab.bar.tab.create.entry.classifier.097a982ee0',
-            'Loading files...'
-          )
-        }
-      }
-    ]
+  const hostUrl = classifyHostUrl(trimmed)
+  let newFile: TabEntryActionClassification | null = null
+  let pathError: unknown = null
+  try {
+    newFile = { kind: 'new-file', relativePath: validateNewTabEntryRelativePath(trimmed) }
+  } catch (error) {
+    pathError = error
   }
-  if (fileList.loadError) {
-    return [{ id: 'load-error', classification: { kind: 'blocked', message: fileList.loadError } }]
+
+  const fileStatus = fileListStatusOption(fileList)
+  if (fileStatus) {
+    if (hostUrl?.kind === 'blocked') {
+      return [fileStatus]
+    }
+    if (hostUrl?.kind === 'host-url') {
+      return toOptions([hostUrl], limit, fileStatus)
+    }
+    // Why: path-shaped text waits on the scan whether or not it is creatable, so
+    // "src/" reports the scan instead of flashing a path error it will not keep.
+    if (isLikelyNewFileIntent(trimmed)) {
+      return [fileStatus]
+    }
+    if (pathError) {
+      return [invalidPathOption(pathError)]
+    }
+    return toOptions([search], limit, fileStatus)
   }
+
+  const actionLimit = clampActionLimit(limit)
   const existingFiles = findExistingFileMatches(
     trimmed,
-    prepareQuickOpenFiles(fileList.files),
-    Math.max(limit, 1)
+    getPreparedQuickOpenFiles(fileList.files),
+    Math.max(actionLimit, 1)
   )
   const exactExistingFiles = existingFiles.filter((file) => file.matchKind !== 'fuzzy')
   const fuzzyExistingFiles = existingFiles.filter((file) => file.matchKind === 'fuzzy')
 
-  let newFile: TabEntryActionClassification | null = null
-  try {
-    newFile = { kind: 'new-file', relativePath: validateNewTabEntryRelativePath(trimmed) }
-  } catch {
-    newFile = null
-  }
-
-  const hostUrl = classifyHostUrl(trimmed)
-
-  const options: TabEntryActionClassification[] = []
   if (exactExistingFiles.length > 0) {
-    options.push(...exactExistingFiles)
-    if (hostUrl) {
+    const options: TabEntryActionClassification[] = [...exactExistingFiles]
+    if (hostUrl?.kind === 'host-url') {
       options.push(hostUrl)
+    } else if (!hostUrl && newFile) {
+      options.push(search)
     }
-  } else if (hostUrl) {
-    options.push(hostUrl)
-    options.push(...fuzzyExistingFiles)
-  } else if (newFile && isLikelyNewFileIntent(trimmed)) {
-    options.push(newFile, ...fuzzyExistingFiles)
-  } else {
-    options.push(...fuzzyExistingFiles)
-    if (newFile) {
-      options.push(newFile)
-    }
+    return toOptions(options, actionLimit)
   }
-
-  if (options.length > 0) {
-    return options.slice(0, limit).map((classification) => ({
-      id: tabEntryActionOptionId(classification),
-      classification
-    }))
+  if (hostUrl?.kind === 'blocked') {
+    return [blockedOption('invalid-url', hostUrl.message)]
   }
-
-  try {
-    validateNewTabEntryRelativePath(trimmed)
-  } catch (error) {
-    return [
-      {
-        id: 'invalid-path',
-        classification: {
-          kind: 'blocked',
-          message: error instanceof Error ? error.message : String(error)
-        }
-      }
-    ]
+  if (hostUrl?.kind === 'host-url') {
+    return toOptions([hostUrl, ...fuzzyExistingFiles], actionLimit)
   }
-
-  return [
-    {
-      id: 'blocked',
-      classification: {
-        kind: 'blocked',
-        message: translate(
-          'auto.components.tab.bar.tab.create.entry.classifier.42e6262ae9',
-          'No action available.'
-        )
-      }
-    }
-  ]
+  if (pathError || !newFile) {
+    // Why: an unusable path is still a live quick-open prefix — "src/" cannot be
+    // created, but it matches real files, and dropping them turns every typed
+    // separator into an error row mid-keystroke.
+    return fuzzyExistingFiles.length > 0
+      ? toOptions(fuzzyExistingFiles, actionLimit)
+      : [invalidPathOption(pathError)]
+  }
+  if (isLikelyNewFileIntent(trimmed)) {
+    return toOptions([newFile, search, ...fuzzyExistingFiles], actionLimit)
+  }
+  if (/\s/.test(trimmed)) {
+    return toOptions([search, ...fuzzyExistingFiles, newFile], actionLimit)
+  }
+  // Why: a single token is still a quick-open attempt ("btn" → Button.tsx), so
+  // only phrases promote web search over fuzzy matches. Fuzzy matching is a
+  // subsequence scan that fills every slot in a real repo, so hold one back —
+  // otherwise search silently disappears from the list it should always offer.
+  return toOptions(
+    [...fuzzyExistingFiles.slice(0, Math.max(actionLimit - 1, 1)), search, newFile],
+    actionLimit
+  )
 }
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-copy.ts b/src/renderer/src/components/tab-bar/tab-create-entry-copy.ts
new file mode 100644
index 00000000000..c90771cc540
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-copy.ts
@@ -0,0 +1,12 @@
+import { translate } from '@/i18n/i18n'
+
+export function getTabEntryOmniboxPlaceholder(): string {
+  return translate(
+    'auto.components.tab.bar.TabBarCreateEntry.0e5b7a3f16',
+    'Search open tabs, files, URLs, agents…'
+  )
+}
+
+export function getTabEntryChooseActionMessage(): string {
+  return translate('auto.components.tab.bar.TabBarCreateEntry.chooseAction', 'Choose an action.')
+}
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-empty-options.ts b/src/renderer/src/components/tab-bar/tab-create-entry-empty-options.ts
new file mode 100644
index 00000000000..e6d4c0726cf
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-empty-options.ts
@@ -0,0 +1,7 @@
+import type { OpenTabSearchResult } from './open-tab-search'
+import type { TabAgentLaunchOption } from './tab-agent-launch-options'
+import type { TabCreateMenuOption } from './tab-create-menu-options'
+
+export const EMPTY_AGENT_OPTIONS: readonly TabAgentLaunchOption[] = []
+export const EMPTY_MENU_OPTIONS: readonly TabCreateMenuOption[] = []
+export const EMPTY_TAB_RESULTS: readonly OpenTabSearchResult[] = []
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-file-matches.ts b/src/renderer/src/components/tab-bar/tab-create-entry-file-matches.ts
index fbbb30c4977..25d30cb9ce6 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-file-matches.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-file-matches.ts
@@ -18,8 +18,22 @@ function hasFilenameExtension(query: string): boolean {
   return /(?:^|[\\/])[^\\/]+\.[^\\/]+$/.test(query.trim())
 }
 
+// Why: multi-word text without path or filename syntax cannot overtake ranking
+// as a file match, so callers may treat its search ranking as already final.
+export function isUnambiguousSearchQuery(query: string): boolean {
+  const trimmed = query.trim()
+  return /\s/.test(trimmed) && !hasPathSeparator(trimmed) && !hasFilenameExtension(trimmed)
+}
+
 export function isLikelyNewFileIntent(query: string): boolean {
-  return hasPathSeparator(query) || hasFilenameExtension(query)
+  const trimmed = query.trim()
+  if (hasPathSeparator(trimmed)) {
+    return true
+  }
+  if (/\s/.test(trimmed)) {
+    return false
+  }
+  return hasFilenameExtension(trimmed) || /^\.[^.].*$/.test(trimmed)
 }
 
 function dedupeMatches(matches: ExistingFileMatch[]): ExistingFileMatch[] {
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.test.ts b/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.test.ts
new file mode 100644
index 00000000000..89df7221f8d
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from 'vitest'
+import { parseForcedSearchQuery } from './tab-create-entry-forced-search'
+
+describe('parseForcedSearchQuery', () => {
+  it.each([
+    ['react', { forced: false, query: 'react' }],
+    [' react ', { forced: false, query: 'react' }],
+    [' ?react', { forced: false, query: '?react' }],
+    ['?react hooks', { forced: true, query: 'react hooks' }],
+    ['??foo', { forced: true, query: '?foo' }],
+    ['?https://x.dev', { forced: true, query: 'https://x.dev' }],
+    ['?', { forced: true, query: '' }],
+    ['?   ', { forced: true, query: '' }]
+  ])('parses %j', (input, expected) => {
+    expect(parseForcedSearchQuery(input)).toEqual(expected)
+  })
+})
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.ts b/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.ts
new file mode 100644
index 00000000000..3849436164b
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-forced-search.ts
@@ -0,0 +1,8 @@
+export type ForcedSearchQuery = { forced: false; query: string } | { forced: true; query: string }
+
+export function parseForcedSearchQuery(input: string): ForcedSearchQuery {
+  if (!input.startsWith('?')) {
+    return { forced: false, query: input.trim() }
+  }
+  return { forced: true, query: input.slice(1).trim() }
+}
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-keyboard-focus.ts b/src/renderer/src/components/tab-bar/tab-create-entry-keyboard-focus.ts
new file mode 100644
index 00000000000..399ff3027bc
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-keyboard-focus.ts
@@ -0,0 +1,18 @@
+export function focusTabEntryMenuItemAtEdge(
+  fromElement: HTMLElement,
+  edge: 'first' | 'last'
+): boolean {
+  const menu = fromElement.closest('[role="menu"]')
+  if (!menu) {
+    return false
+  }
+  const items = menu.querySelectorAll<HTMLElement>(
+    '[role="menuitem"]:not([data-disabled]):not([aria-disabled="true"])'
+  )
+  const target = edge === 'first' ? items[0] : items.item(items.length - 1)
+  if (!target) {
+    return false
+  }
+  target.focus()
+  return true
+}
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-network-selection.ts b/src/renderer/src/components/tab-bar/tab-create-entry-network-selection.ts
new file mode 100644
index 00000000000..c1de43c2975
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-network-selection.ts
@@ -0,0 +1,68 @@
+import { useEffect, useRef } from 'react'
+import { getActiveOptionId, type ActiveOption } from './tab-create-entry-active-option'
+import { isUnambiguousSearchQuery } from './tab-create-entry-file-matches'
+
+type NetworkSelectionArgs = {
+  activeOptions: ActiveOption[]
+  fileIndexFailed: boolean
+  fileIndexReady: boolean
+  forcedSearch: boolean
+  menuOpen: boolean
+  pinnedOptionId: string | null
+  query: string
+}
+
+export function useNetworkSafeTabEntrySelection({
+  activeOptions,
+  fileIndexFailed,
+  fileIndexReady,
+  forcedSearch,
+  menuOpen,
+  pinnedOptionId,
+  query
+}: NetworkSelectionArgs): {
+  activeSelectedIndex: number | null
+  selectedActiveOption: ActiveOption | undefined
+} {
+  const pinnedOptionIndex = pinnedOptionId
+    ? activeOptions.findIndex((option) => getActiveOptionId(option) === pinnedOptionId)
+    : -1
+  const rankedOption = pinnedOptionIndex < 0 ? activeOptions[0] : undefined
+  const rankedClassification =
+    rankedOption?.kind === 'entry' ? rankedOption.option.classification : null
+  const rankedNetworkAction =
+    !forcedSearch &&
+    (rankedClassification?.kind === 'search' || rankedClassification?.kind === 'host-url')
+  // Why: a still-scanning index can promote a file match later, so hold Enter
+  // unless the scan can no longer change the ranking — it failed outright, or
+  // the text is a phrase that would never rank as a file.
+  const networkRankingSettled =
+    fileIndexReady ||
+    fileIndexFailed ||
+    (rankedClassification?.kind === 'search' &&
+      isUnambiguousSearchQuery(rankedClassification.query))
+  const rankingKey = `${menuOpen}:${query}`
+  const hasRankedOption = rankedOption !== undefined
+  // Why: once a query ranked a local action first, a later re-index that promotes
+  // a network row must not arm Enter under the user's fingers — the text they
+  // aimed at a file would silently leave for a search engine. Retyping clears it.
+  const blockedNetworkRankingRef = useRef<string | null>(null)
+  useEffect(() => {
+    if (fileIndexReady && hasRankedOption && !rankedNetworkAction) {
+      blockedNetworkRankingRef.current = rankingKey
+    }
+  }, [fileIndexReady, hasRankedOption, rankedNetworkAction, rankingKey])
+  const networkActionAllowed =
+    networkRankingSettled && blockedNetworkRankingRef.current !== rankingKey
+  const activeSelectedIndex =
+    pinnedOptionIndex >= 0
+      ? pinnedOptionIndex
+      : activeOptions.length === 0 || (rankedNetworkAction && !networkActionAllowed)
+        ? null
+        : 0
+  return {
+    activeSelectedIndex,
+    selectedActiveOption:
+      activeSelectedIndex === null ? undefined : activeOptions[activeSelectedIndex]
+  }
+}
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-props.ts b/src/renderer/src/components/tab-bar/tab-create-entry-props.ts
new file mode 100644
index 00000000000..56a4bca3abc
--- /dev/null
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-props.ts
@@ -0,0 +1,20 @@
+import type { TuiAgent } from '../../../../shared/types'
+import type { TabCreateEntryArgs } from './tab-create-entry-action'
+import type { TabAgentLaunchOption } from './tab-agent-launch-options'
+import type { TabCreateMenuOption } from './tab-create-menu-options'
+
+export type TabBarCreateEntryProps = {
+  agentOptions?: readonly TabAgentLaunchOption[]
+  groupId: string
+  menuOpen: boolean
+  menuOptions?: readonly TabCreateMenuOption[]
+  onDidOpenEntry?: () => void
+  onLaunchAgent?: (agent: TuiAgent) => void
+  onOpenDefaultTerminal?: () => void
+  onOpenEntry?: (args: TabCreateEntryArgs) => Promise<void>
+  onQueryChange?: (query: string) => void
+  /** Runs after the menu closes, so the tab jumped to actually takes focus. */
+  onQueueSwitchFocus?: (focus: () => void) => void
+  onSelectMenuOption?: (option: TabCreateMenuOption) => void
+  worktreeId: string
+}
diff --git a/src/renderer/src/components/tab-bar/tab-create-entry-url-classification.ts b/src/renderer/src/components/tab-bar/tab-create-entry-url-classification.ts
index 375e5d71764..67194fbecbf 100644
--- a/src/renderer/src/components/tab-bar/tab-create-entry-url-classification.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-entry-url-classification.ts
@@ -16,72 +16,138 @@ const HOST_FILE_EXTENSIONS = new Set([
   'yml'
 ])
 
-const LOCALHOST_WITH_PORT_PATTERN = /^localhost(?::\d{1,5})?$/i
-const IPV4_WITH_PORT_PATTERN =
-  /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(?::\d{1,5})?$/
-const DOMAIN_WITH_PORT_PATTERN =
-  /^(?=.{1,253}(?::\d{1,5})?$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,}(?::\d{1,5})?$/i
+const IPV4_PATTERN =
+  /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/
+const DOMAIN_PATTERN = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,}$/i
+const HTTP_SCHEME_PATTERN = /^https?:\/\//i
+const BRACKETED_IPV6_ATTEMPT_PATTERN = /^\[[0-9a-f:]+\](?::[^/?#]*)?(?:[/?#].*)?$/i
+const SCHEME_PREFIX_PATTERN = /^[a-z][a-z0-9+.-]*:/i
+const SCHEME_WITH_SLASHES_PATTERN = /^[a-z][a-z0-9+.-]*:\/\//i
 
 export type ExplicitUrlClassification =
   | { kind: 'blocked'; message: string }
   | { kind: 'explicit-url'; url: string }
 
-export type HostUrlClassification = { kind: 'host-url'; url: string }
+export type HostUrlClassification =
+  | { kind: 'blocked'; message: string }
+  | { kind: 'host-url'; url: string }
 
-export function classifyExplicitUrl(query: string): ExplicitUrlClassification | null {
-  // Local dev inputs are handled by host-url classification so users can
-  // enter localhost/IP addresses without an explicit scheme.
-  if (classifySchemeLessLocalDevAddress(query)) {
-    return null
+function invalidUrl(): { kind: 'blocked'; message: string } {
+  return {
+    kind: 'blocked',
+    message: translate(
+      'auto.components.tab.bar.tab.create.entry.classifier.90eb94dc48',
+      'Enter an http:// or https:// URL.'
+    )
   }
-  let url: URL
+}
+
+function parseHttpUrl(query: string): ExplicitUrlClassification {
   try {
-    url = new URL(query)
+    const url = new URL(query)
+    return (url.protocol === 'http:' || url.protocol === 'https:') && url.hostname
+      ? { kind: 'explicit-url', url: url.href }
+      : invalidUrl()
   } catch {
-    return null
+    return invalidUrl()
   }
-  if ((url.protocol !== 'http:' && url.protocol !== 'https:') || !url.hostname) {
-    return {
-      kind: 'blocked',
-      message: translate(
-        'auto.components.tab.bar.tab.create.entry.classifier.90eb94dc48',
-        'Enter an http:// or https:// URL.'
-      )
-    }
-  }
-  return { kind: 'explicit-url', url: url.href }
 }
 
-function classifyLocalDevUrl(query: string): HostUrlClassification | null {
-  const url = classifySchemeLessLocalDevAddress(query)
-  return url?.hostname ? { kind: 'host-url', url: url.href } : null
-}
-
-function classifyHostLikeUrl(query: string): HostUrlClassification | null {
-  if (/[\\/]/.test(query) || /\s/.test(query)) {
+function splitHostCandidate(query: string): { host: string; port: string | null } | null {
+  if (/[\\/\s?#]/.test(query)) {
     return null
   }
-  const extension = query.split(':')[0]?.split('.').pop()?.toLowerCase() ?? ''
+  const colonIndex = query.indexOf(':')
+  const host = colonIndex === -1 ? query : query.slice(0, colonIndex)
+  const port = colonIndex === -1 ? null : query.slice(colonIndex + 1)
+  const extension = host.split('.').pop()?.toLowerCase() ?? ''
   if (HOST_FILE_EXTENSIONS.has(extension)) {
     return null
   }
   if (
-    !LOCALHOST_WITH_PORT_PATTERN.test(query) &&
-    !IPV4_WITH_PORT_PATTERN.test(query) &&
-    !DOMAIN_WITH_PORT_PATTERN.test(query)
+    host.toLowerCase() !== 'localhost' &&
+    !IPV4_PATTERN.test(host) &&
+    !DOMAIN_PATTERN.test(host)
   ) {
     return null
   }
-  try {
-    const url = new URL(`https://${query}`)
-    return url.hostname ? { kind: 'host-url', url: url.href } : null
-  } catch {
+  return { host, port }
+}
+
+// Why: a bare LAN/dev address almost never serves TLS, but a public IP still
+// deserves https — plaintext there would be a downgrade, and IPs get no HSTS.
+function isPrivateIpv4(host: string): boolean {
+  if (!IPV4_PATTERN.test(host)) {
+    return false
+  }
+  const [first = 0, second = 0] = host.split('.').map(Number)
+  return (
+    first === 0 ||
+    first === 10 ||
+    first === 127 ||
+    (first === 100 && second >= 64 && second <= 127) || // CGNAT, incl. Tailscale
+    (first === 172 && second >= 16 && second <= 31) ||
+    (first === 169 && second === 254) ||
+    (first === 192 && second === 168)
+  )
+}
+
+function hasSourceExtensionBeforeColon(query: string): boolean {
+  const colonIndex = query.indexOf(':')
+  if (colonIndex === -1) {
+    return false
+  }
+  const extension = query.slice(0, colonIndex).split('.').pop()?.toLowerCase() ?? ''
+  return HOST_FILE_EXTENSIONS.has(extension)
+}
+
+export function classifyExplicitUrl(query: string): ExplicitUrlClassification | null {
+  if (HTTP_SCHEME_PATTERN.test(query)) {
+    return parseHttpUrl(query)
+  }
+  if (SCHEME_WITH_SLASHES_PATTERN.test(query)) {
+    return invalidUrl()
+  }
+  if (classifySchemeLessLocalDevAddress(query)) {
     return null
   }
+  if (splitHostCandidate(query)) {
+    return null
+  }
+  if (hasSourceExtensionBeforeColon(query)) {
+    return null
+  }
+  if (!SCHEME_PREFIX_PATTERN.test(query)) {
+    return null
+  }
+  if (/\s/.test(query)) {
+    return null
+  }
+  return invalidUrl()
 }
 
 export function classifyHostUrl(query: string): HostUrlClassification | null {
-  // Try exact local-dev forms first so localhost keeps http:// parity with
-  // the previous inline classifier before falling back to public hostnames.
-  return classifyLocalDevUrl(query) ?? classifyHostLikeUrl(query)
+  const candidate = splitHostCandidate(query)
+  if (!candidate) {
+    const localDevUrl = classifySchemeLessLocalDevAddress(query)
+    if (localDevUrl?.hostname) {
+      return { kind: 'host-url', url: localDevUrl.href }
+    }
+    return BRACKETED_IPV6_ATTEMPT_PATTERN.test(query) ? invalidUrl() : null
+  }
+  if (candidate.port !== null && !/^\d+$/.test(candidate.port)) {
+    // Why: "docker.io:latest" reads as a tag, not a URL attempt — fall through so
+    // file matches and search still get offered instead of blocking every row.
+    return null
+  }
+  try {
+    const scheme =
+      candidate.host.toLowerCase() === 'localhost' || isPrivateIpv4(candidate.host)
+        ? 'http'
+        : 'https'
+    const url = new URL(`${scheme}://${query}`)
+    return url.hostname ? { kind: 'host-url', url: url.href } : invalidUrl()
+  } catch {
+    return invalidUrl()
+  }
 }
diff --git a/src/renderer/src/components/tab-bar/tab-create-menu-options.test.ts b/src/renderer/src/components/tab-bar/tab-create-menu-options.test.ts
index 42ed5f2abf1..d11662c880b 100644
--- a/src/renderer/src/components/tab-bar/tab-create-menu-options.test.ts
+++ b/src/renderer/src/components/tab-bar/tab-create-menu-options.test.ts
@@ -53,6 +53,25 @@ describe('tab create menu options', () => {
     ).toEqual(['new-browser'])
   })
 
+  it('keeps terminal and markdown results when client-impossible actions are omitted', () => {
+    const options = buildTabCreateMenuOptions({
+      terminalOnly: false,
+      hasNewBrowser: false,
+      hasNewMarkdown: true,
+      hasOpenMarkdown: true,
+      hasSimulator: false,
+      simulatorIsGoTo: false
+    })
+
+    expect(options.map((option) => option.kind)).toEqual([
+      'new-terminal',
+      'new-markdown',
+      'open-markdown'
+    ])
+    expect(findMatchingTabCreateMenuOptions('browser', options)).toEqual([])
+    expect(findMatchingTabCreateMenuOptions('mobile emulator', options)).toEqual([])
+  })
+
   it('preserves default Windows shell order for tied terminal matches', () => {
     const options = buildTabCreateMenuOptions({
       terminalOnly: false,
diff --git a/src/renderer/src/components/tab-bar/terminal-tab-activity-status.ts b/src/renderer/src/components/tab-bar/terminal-tab-activity-status.ts
index 26525128517..abdcc584881 100644
--- a/src/renderer/src/components/tab-bar/terminal-tab-activity-status.ts
+++ b/src/renderer/src/components/tab-bar/terminal-tab-activity-status.ts
@@ -223,8 +223,8 @@ export function terminalTabHasUnreadActivity({
   unreadAgentCompletionPanes
 }: {
   terminalTabId: string
-  unreadTerminalTabs: Record<string, true | boolean | undefined>
-  unreadAgentCompletionPanes: Record<string, true | boolean | undefined>
+  unreadTerminalTabs: Record<string, boolean | undefined>
+  unreadAgentCompletionPanes: Record<string, boolean | undefined>
 }): boolean {
   return (
     unreadTerminalTabs[terminalTabId] === true ||
@@ -234,7 +234,7 @@ export function terminalTabHasUnreadActivity({
 
 /** Match pane-level unread completion markers to their owning terminal tab. */
 export function hasUnreadAgentCompletionForTerminalTab(
-  unreadAgentCompletionPanes: Record<string, true | boolean | undefined> | undefined,
+  unreadAgentCompletionPanes: Record<string, boolean | undefined> | undefined,
   tabId: string
 ): boolean {
   for (const [paneKey, unread] of Object.entries(unreadAgentCompletionPanes ?? {})) {
diff --git a/src/renderer/src/components/tab-bar/use-tab-bar-create-menu-controller.ts b/src/renderer/src/components/tab-bar/use-tab-bar-create-menu-controller.ts
index be4a56788db..7eb28f2bcc8 100644
--- a/src/renderer/src/components/tab-bar/use-tab-bar-create-menu-controller.ts
+++ b/src/renderer/src/components/tab-bar/use-tab-bar-create-menu-controller.ts
@@ -42,6 +42,8 @@ export function useTabBarCreateMenuController({
   resolvedGroupId,
   terminalOnly,
   mobileEmulatorEnabled,
+  managedBrowserCreationEnabled,
+  mobileEmulatorCreationEnabled,
   workspaceHasSimulatorTab,
   showWindowsShellMenu,
   projectRuntimeShellMenuMode,
@@ -60,6 +62,8 @@ export function useTabBarCreateMenuController({
   resolvedGroupId: string
   terminalOnly: boolean
   mobileEmulatorEnabled: boolean
+  managedBrowserCreationEnabled: boolean
+  mobileEmulatorCreationEnabled: boolean
   workspaceHasSimulatorTab: boolean
   showWindowsShellMenu: boolean
   projectRuntimeShellMenuMode: ReturnType<typeof getProjectRuntimeShellMenuMode>
@@ -155,14 +159,20 @@ export function useTabBarCreateMenuController({
       buildTabCreateMenuOptions({
         terminalOnly,
         windowsShellEntries,
-        hasNewBrowser: !terminalOnly,
+        hasNewBrowser: !terminalOnly && managedBrowserCreationEnabled,
         hasNewMarkdown: !terminalOnly && Boolean(onNewFileTab),
         hasOpenMarkdown: !terminalOnly && Boolean(onOpenFileTab),
-        hasSimulator: !terminalOnly && mobileEmulatorEnabled && Boolean(onNewSimulatorTab),
+        hasSimulator:
+          !terminalOnly &&
+          mobileEmulatorEnabled &&
+          mobileEmulatorCreationEnabled &&
+          Boolean(onNewSimulatorTab),
         simulatorIsGoTo: workspaceHasSimulatorTab
       }),
     [
       mobileEmulatorEnabled,
+      managedBrowserCreationEnabled,
+      mobileEmulatorCreationEnabled,
       onNewFileTab,
       onNewSimulatorTab,
       onOpenFileTab,
diff --git a/src/renderer/src/components/tab-bar/use-tab-bar-runtime-model.ts b/src/renderer/src/components/tab-bar/use-tab-bar-runtime-model.ts
index e56534cc3a1..4515de2a071 100644
--- a/src/renderer/src/components/tab-bar/use-tab-bar-runtime-model.ts
+++ b/src/renderer/src/components/tab-bar/use-tab-bar-runtime-model.ts
@@ -26,6 +26,7 @@ import { buildTabAgentLaunchOptions, orderTabLaunchAgents } from './tab-agent-la
 import type { TabAgentLaunchOption } from './tab-agent-launch-options'
 import { shouldShowWindowsShellMenu } from './windows-shell-menu-visibility'
 import { createUnifiedTabLookup } from './tab-bar-item-model'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 const isWindows = navigator.userAgent.includes('Windows')
 export const isMacOs = navigator.userAgent.includes('Mac')
@@ -77,6 +78,8 @@ export type TabBarRuntimeModel = {
   workspaceHasSimulatorTab: boolean
   toggleTabViewMode: (tabId: string) => void
   nativeChatTranscriptIsLocalReadable: boolean
+  managedBrowserCreationEnabled: boolean
+  mobileEmulatorCreationEnabled: boolean
 } & TabBarAgentProjections
 
 export function useTabBarRuntimeModel({
@@ -221,6 +224,15 @@ export function useTabBarRuntimeModel({
     () => unifiedTabs.some((tab) => tab.contentType === 'simulator'),
     [unifiedTabs]
   )
+  const [managedBrowserCreationEnabled, mobileEmulatorCreationEnabled] = useAppStore(
+    useShallow((state) => {
+      const policy = getClientCreationActionPolicy(state, worktreeId)
+      return [
+        policy['managed-browser'].state === 'enabled',
+        policy['mobile-emulator'].state === 'enabled'
+      ] as const
+    })
+  )
   // Why: tab-wide launch/title hints are safe only before split; gate the view-mode toggle to the active leaf's agent.
   const toggleTabViewMode = useAppStore((s) => s.toggleTabViewMode)
   // Why: every retained TabBar observes the same hot maps; one feature-gated selector shares their projections.
@@ -256,6 +268,8 @@ export function useTabBarRuntimeModel({
     nativeChatEnabled,
     tabAgentTypesByTabId,
     nativeChatTabWideFallbackUnsafeTabsById,
-    nativeChatTranscriptIsLocalReadable
+    nativeChatTranscriptIsLocalReadable,
+    managedBrowserCreationEnabled,
+    mobileEmulatorCreationEnabled
   }
 }
diff --git a/src/renderer/src/components/tab-group/useTabGroupWorkspaceModel.ts b/src/renderer/src/components/tab-group/useTabGroupWorkspaceModel.ts
index f493f2e5807..d2dcdcb965b 100644
--- a/src/renderer/src/components/tab-group/useTabGroupWorkspaceModel.ts
+++ b/src/renderer/src/components/tab-group/useTabGroupWorkspaceModel.ts
@@ -1,5 +1,6 @@
 /* eslint-disable max-lines -- Why: keeps group-scoped activation, close, split, and tab-order rules together with the TabGroupPanel surface. */
 import { useCallback, useMemo } from 'react'
+import { toast } from 'sonner'
 import { useShallow } from 'zustand/react/shallow'
 import type { OpenFile } from '@/store/slices/editor'
 import type {
@@ -28,6 +29,7 @@ import { ensureSimulatorTab, getSimulatorTabForWorktree } from '@/lib/ensure-sim
 import { buildDuplicatedBrowserTabOptions } from '@/lib/duplicate-browser-tab-options'
 import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
 import { browserWorkspaceHasRemoteOwner } from '@/runtime/remote-browser-tab-ownership'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 export function recordTerminalTabGroupSplit(createdTerminal: TerminalTab | null | undefined): void {
   if (!createdTerminal) {
@@ -585,7 +587,9 @@ export function useTabGroupWorkspaceModel({
       closeToLeft,
       createSplitGroup,
       newBrowserTab: () => {
-        void openNewBrowserTabInActiveWorkspace(groupId)
+        void openNewBrowserTabInActiveWorkspace(groupId).catch((error) => {
+          toast.error(error instanceof Error ? error.message : String(error))
+        })
       },
       newSimulatorTab: worktreeState.mobileEmulatorEnabled
         ? () => {
@@ -597,6 +601,8 @@ export function useTabGroupWorkspaceModel({
             void openMobileEmulatorTab(worktreeId, {
               placement: 'rightSplit',
               targetGroupId: groupId
+            }).catch((error) => {
+              toast.error(error instanceof Error ? error.message : String(error))
             })
           }
         : undefined,
@@ -612,23 +618,36 @@ export function useTabGroupWorkspaceModel({
             return
           }
           const runtimeEnvironmentId = getRuntimeEnvironmentIdForWorktree(state, worktreeId)
+          const browserAvailability = getClientCreationActionPolicy(state, worktreeId)[
+            'managed-browser'
+          ]
+          if (browserAvailability.state !== 'enabled') {
+            throw new Error(browserAvailability.reason)
+          }
           if (
-            browserWorkspaceHasRemoteOwner(state, source.id, runtimeEnvironmentId) &&
-            (await createWebRuntimeSessionBrowserTab({
+            browserAvailability.provider === 'paired-runtime' &&
+            browserWorkspaceHasRemoteOwner(state, source.id, runtimeEnvironmentId)
+          ) {
+            const created = await createWebRuntimeSessionBrowserTab({
               worktreeId,
               environmentId: runtimeEnvironmentId,
               url: source.url,
               profileId: source.sessionProfileId,
               targetGroupId: groupId
-            }))
-          ) {
-            return
+            })
+            if (created) {
+              return
+            }
+            throw new Error('The paired runtime could not duplicate the managed browser tab.')
           }
           createBrowserTab(worktreeId, source.url, {
             ...buildDuplicatedBrowserTabOptions(source),
+            ...(runtimeEnvironmentId ? { browserRuntimeEnvironmentId: null } : {}),
             targetGroupId: groupId
           })
-        })()
+        })().catch((error) => {
+          toast.error(error instanceof Error ? error.message : String(error))
+        })
       },
       // Why: target the owning group explicitly; the "+" menu can fire from an unfocused panel without updating global group focus.
       newFileTab: async () => {
diff --git a/src/renderer/src/components/task-page-cache-selectors.ts b/src/renderer/src/components/task-page-cache-selectors.ts
index 5256701003f..525fa51a336 100644
--- a/src/renderer/src/components/task-page-cache-selectors.ts
+++ b/src/renderer/src/components/task-page-cache-selectors.ts
@@ -43,7 +43,7 @@ export type TaskPageWorkItemsFetchOptions = {
   noCache: boolean
 }
 
-type WorkItemsCache = Record<string, CacheEntry<GitHubWorkItem[]>>
+type WorkItemsCache = Record<string, CacheEntry<readonly GitHubWorkItem[]>>
 export type TaskPageWorkItemPages = readonly (GitHubWorkItem[] | null)[]
 
 export function deriveTaskPageGitHubWorkItemsFetchOptions(
@@ -61,7 +61,7 @@ export function selectTaskPageWorkItemsCacheEntries(
   repos: readonly TaskPageRepoCacheInput[],
   limit: number,
   query: string
-): (CacheEntry<GitHubWorkItem[]> | undefined)[] {
+): (CacheEntry<readonly GitHubWorkItem[]> | undefined)[] {
   return repos.map(
     (repo) =>
       workItemsCache[
@@ -72,7 +72,7 @@ export function selectTaskPageWorkItemsCacheEntries(
 
 export function buildTaskPageRepoSourceState(
   repos: readonly TaskPageRepoCacheInput[],
-  entries: readonly (CacheEntry<GitHubWorkItem[]> | undefined)[]
+  entries: readonly (CacheEntry<readonly GitHubWorkItem[]> | undefined)[]
 ): TaskPageRepoSourceState[] {
   return repos.map((repo, index) => {
     const entry = entries[index]
@@ -126,7 +126,7 @@ function taskPageWorkItemCacheKey(item: GitHubWorkItem): string {
 
 export function reconcileTaskPagePagesWithWorkItemsCache(
   pages: TaskPageWorkItemPages,
-  entries: readonly (CacheEntry<GitHubWorkItem[]> | undefined)[]
+  entries: readonly (CacheEntry<readonly GitHubWorkItem[]> | undefined)[]
 ): (GitHubWorkItem[] | null)[] {
   const cachedItems = new Map<string, GitHubWorkItem>()
   for (const entry of entries) {
diff --git a/src/renderer/src/components/task-page-github-work-item-authority-refresh.ts b/src/renderer/src/components/task-page-github-work-item-authority-refresh.ts
index 6a047760195..3f11b3b93b1 100644
--- a/src/renderer/src/components/task-page-github-work-item-authority-refresh.ts
+++ b/src/renderer/src/components/task-page-github-work-item-authority-refresh.ts
@@ -50,7 +50,7 @@ export function getTaskPageGitHubRevalidatableAuthorityItemKeys(
   const quiet = getQuietRevalidateState(queryKey)
   for (const itemKey of getTaskPageGitHubConfirmedAuthorityItemKeys()) {
     const separator = itemKey.indexOf('\0')
-    if (separator < 0) {
+    if (separator === -1) {
       continue
     }
     const repoId = itemKey.slice(0, separator)
diff --git a/src/renderer/src/components/task-page-github-work-item-mutation-composition.ts b/src/renderer/src/components/task-page-github-work-item-mutation-composition.ts
index 970e777ecd3..25616c3c059 100644
--- a/src/renderer/src/components/task-page-github-work-item-mutation-composition.ts
+++ b/src/renderer/src/components/task-page-github-work-item-mutation-composition.ts
@@ -53,7 +53,7 @@ export function pendingListOpsForFamily(
       }
       const login = pending.listOp.logins[0]
       const lastIndex = acc.findIndex((op) => op.logins.length === 1 && op.logins[0] === login)
-      if (lastIndex >= 0) {
+      if (lastIndex !== -1) {
         acc[lastIndex] = pending.listOp
       } else {
         acc.push(pending.listOp)
diff --git a/src/renderer/src/components/task-page-github-work-item-mutation-registry.ts b/src/renderer/src/components/task-page-github-work-item-mutation-registry.ts
index 58428e8746e..bfd575ea4ab 100644
--- a/src/renderer/src/components/task-page-github-work-item-mutation-registry.ts
+++ b/src/renderer/src/components/task-page-github-work-item-mutation-registry.ts
@@ -65,7 +65,7 @@ export function getTaskPageGitHubConfirmedAuthorityItemKeys(): ReadonlySet<strin
   for (const itemKey of itemSourceScopeByItemKey.keys()) {
     const separator = itemKey.indexOf('\0')
     if (
-      separator >= 0 &&
+      separator !== -1 &&
       hasConfirmedAuthorityForItem(itemKey.slice(0, separator), itemKey.slice(separator + 1))
     ) {
       keys.add(itemKey)
diff --git a/src/renderer/src/components/task-page-github-work-item-quiet-revalidate.ts b/src/renderer/src/components/task-page-github-work-item-quiet-revalidate.ts
index 6c33605b569..5895eb28f85 100644
--- a/src/renderer/src/components/task-page-github-work-item-quiet-revalidate.ts
+++ b/src/renderer/src/components/task-page-github-work-item-quiet-revalidate.ts
@@ -99,7 +99,7 @@ export function settleQuietSearchRevalidate(args: {
     }
     const separator = itemKey.indexOf('\0')
     if (
-      separator >= 0 &&
+      separator !== -1 &&
       !hasPendingTaskPageGitHubOpsForItem(itemKey.slice(0, separator), itemKey.slice(separator + 1))
     ) {
       clearConfirmedAuthorityForItem(itemKey.slice(0, separator), itemKey.slice(separator + 1))
@@ -111,7 +111,7 @@ export function settleQuietSearchRevalidate(args: {
       continue
     }
     const sep = itemKey.indexOf('\0')
-    if (sep < 0) {
+    if (sep === -1) {
       continue
     }
     const repoId = itemKey.slice(0, sep)
@@ -134,7 +134,7 @@ export function settleQuietSearchRevalidate(args: {
       continue
     }
     const sep = itemKey.indexOf('\0')
-    if (sep < 0) {
+    if (sep === -1) {
       continue
     }
     if (
diff --git a/src/renderer/src/components/task-page-linear-in-orca-issues.ts b/src/renderer/src/components/task-page-linear-in-orca-issues.ts
index 3db29f31846..38f1dbe4802 100644
--- a/src/renderer/src/components/task-page-linear-in-orca-issues.ts
+++ b/src/renderer/src/components/task-page-linear-in-orca-issues.ts
@@ -101,7 +101,7 @@ export function collectLinkedLinearIssueRefsFromWorktrees(
         (candidate.sourceContext ? getTaskSourceCacheScope(candidate.sourceContext) : '') ===
           sourceScope
     )
-    if ((workspaceId || organizationUrlKey) && unscopedIndex >= 0) {
+    if ((workspaceId || organizationUrlKey) && unscopedIndex !== -1) {
       existing[unscopedIndex] = ref
     } else if (!workspaceId && !organizationUrlKey) {
       const hasSameSourceScope = existing.some(
diff --git a/src/renderer/src/components/terminal-pane/TerminalPane.tsx b/src/renderer/src/components/terminal-pane/TerminalPane.tsx
index 4498dbe6bef..323a3dc497e 100644
--- a/src/renderer/src/components/terminal-pane/TerminalPane.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalPane.tsx
@@ -1562,6 +1562,7 @@ function TerminalPane(
         worktreeId,
         cwd,
         startup: CODEX_ACCOUNT_RESTART_STARTUP,
+        mountFollowsTerminalPark: false,
         paneTransportsRef,
         paneMode2031Ref,
         paneKittyKeyboardModesRef,
diff --git a/src/renderer/src/components/terminal-pane/TerminalPaneOverlayLayer.tsx b/src/renderer/src/components/terminal-pane/TerminalPaneOverlayLayer.tsx
index 5dbc1482af9..2196f7ed094 100644
--- a/src/renderer/src/components/terminal-pane/TerminalPaneOverlayLayer.tsx
+++ b/src/renderer/src/components/terminal-pane/TerminalPaneOverlayLayer.tsx
@@ -100,11 +100,24 @@ const TerminalPaneOverlayLayer = memo(function TerminalPaneOverlayLayer({
     return entries
   }, [groupActiveTabById, unifiedTabs])
 
+  const activeTerminalTabId = useMemo(() => {
+    if (!activeGroupId) {
+      return null
+    }
+    for (const [terminalTabId, assignment] of assignments) {
+      if (assignment.groupId === activeGroupId && assignment.isActiveInGroup) {
+        return terminalTabId
+      }
+    }
+    return null
+  }, [activeGroupId, assignments])
+
   const parkedTerminalTabIds = useTerminalTabColdParking({
     worktreeId,
     terminalTabs,
     assignments,
     isWorktreeActive,
+    activeTerminalTabId,
     coldParkTerminalPanes,
     isForceParked,
     shouldMeasureHiddenWorktree,
diff --git a/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
index 797407b69a3..5c581ddc652 100644
--- a/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
+++ b/src/renderer/src/components/terminal-pane/agent-process-inspection-queue.ts
@@ -45,7 +45,7 @@ function pumpInspectionQueue(): void {
 
   const priorityIndex = inspectionQueue.findIndex((task) => task.priority === 'pending-title')
   const next =
-    priorityIndex >= 0 ? inspectionQueue.splice(priorityIndex, 1)[0] : inspectionQueue.shift()
+    priorityIndex !== -1 ? inspectionQueue.splice(priorityIndex, 1)[0] : inspectionQueue.shift()
   if (!next) {
     return
   }
diff --git a/src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts b/src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts
new file mode 100644
index 00000000000..b3b949addbe
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts
@@ -0,0 +1,608 @@
+/**
+ * Real-fish regression for #9993: Orca must never write `CSI ?997;Nn` into a PTY
+ * because fish armed DECSET 2031 around a prompt.
+ *
+ * fish toggles `?2031h ... ?2031l` in tty_handoff.rs every time it paints a prompt and
+ * withdraws before handing the tty to a child, so the arm window is ~1ms — shorter than
+ * a renderer IPC hop. Any reply lands after the withdrawal and is read by whatever owns
+ * the tty next: it paints as literal `?997;1n` at the prompt, or is swallowed by a child
+ * that reads stdin (npx / brew confirm prompts).
+ *
+ * The assertion is therefore about what a CHILD PROCESS READS, not what renders: a
+ * screen-level check passes while the child's stdin is still corrupted.
+ *
+ * Real production code under test: connectPanePty's live mode-2031 chunk observer. The
+ * mock transport writes whatever the renderer sends straight into the real fish PTY, so a
+ * reply-on-subscribe reaches the child exactly as it does in the app. DA1/CPR/OSC-10/11
+ * probes are answered by the harness because no real xterm is attached here — without
+ * them fish stalls ~10s on its DA1 wait and every timing claim becomes meaningless.
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import type * as React from 'react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  fishRequirementViolation,
+  resolveFishBinary
+} from '../../../../shared/fish-binary-requirement'
+
+// Why a version floor and not just presence: DECSET 2031 arming lives in the Rust
+// tty_handoff introduced by the fish 4.0 rewrite. An older fish cannot produce the
+// subscribe at all, so the test would pass vacuously instead of guarding anything.
+const FISH = resolveFishBinary(4)
+const FISH_BIN = FISH.path
+const itWithFish = FISH.available ? it : it.skip
+
+const PROMPT_MARK = 'ORCA997> '
+const COLOR_SCHEME_REPORT_PREFIX = '\x1b[?997'
+const ARM_2031 = '\x1b[?2031h'
+const WITHDRAW_2031 = '\x1b[?2031l'
+const LEAF_1 = '11111111-1111-4111-8111-111111111111'
+const DA1_REPLY = '\x1b[?62;4;6;22c'
+const DSR_REPLY = '\x1b[1;1R'
+const OSC_10_REPLY = '\x1b]10;rgb:eeee/eeee/eeee\x1b\\'
+const OSC_11_REPLY = '\x1b]11;rgb:1e1e/1e1e/1e1e\x1b\\'
+const TERMINAL_QUERY_REPLIES: readonly (readonly [string, string])[] = [
+  ['\x1b[0c', DA1_REPLY],
+  ['\x1b[c', DA1_REPLY],
+  ['\x1b[6n', DSR_REPLY],
+  ['\x1b]10;?\x07', OSC_10_REPLY],
+  ['\x1b]10;?\x1b\\', OSC_10_REPLY],
+  ['\x1b]11;?\x07', OSC_11_REPLY],
+  ['\x1b]11;?\x1b\\', OSC_11_REPLY]
+]
+const QUERY_CARRY_LENGTH = Math.max(...TERMINAL_QUERY_REPLIES.map(([query]) => query.length)) - 1
+
+type MutableState = Record<string, unknown>
+let mockStoreState: MutableState = {}
+let storeSubscribers: ((state: MutableState) => void)[] = []
+let transportFactoryQueue: unknown[] = []
+
+vi.mock('@/runtime/sync-runtime-graph', () => ({ scheduleRuntimeGraphSync: vi.fn() }))
+vi.mock('./terminal-webgl-atlas-recovery', () => ({
+  scheduleTerminalWebglAtlasRecovery: vi.fn()
+}))
+vi.mock('@/lib/codex-stale-pane-sweep', () => ({ notifyCodexPaneBoundForStaleSweep: vi.fn() }))
+vi.mock('sonner', () => ({ toast: { info: vi.fn() } }))
+vi.mock('./cache-timer-seeding', () => ({ shouldSeedCacheTimerOnInitialTitle: vi.fn(() => false) }))
+vi.mock('@/store', () => ({
+  useAppStore: {
+    getState: () => mockStoreState,
+    subscribe: (listener: (state: MutableState) => void) => {
+      storeSubscribers.push(listener)
+      return () => {
+        storeSubscribers = storeSubscribers.filter((candidate) => candidate !== listener)
+      }
+    }
+  }
+}))
+// Why: connectPanePty calls useNotificationDispatch's useCallback outside React.
+vi.mock('react', async (importOriginal) => ({
+  ...(await importOriginal<typeof React>()),
+  useCallback: <T>(fn: T): T => fn
+}))
+vi.mock('./pty-transport', () => ({
+  createIpcPtyTransport: vi.fn(() => {
+    const next = transportFactoryQueue.shift()
+    if (!next) {
+      throw new Error('No mock transport queued')
+    }
+    return next
+  })
+}))
+
+type ConnectCallbacks = { onData?: (data: string) => void }
+
+/** Mock transport whose renderer→PTY writes land in the real fish master fd. */
+function createPtyBackedTransport(write: (data: string) => void): {
+  transport: Record<string, unknown>
+  sent: string[]
+  emit: (data: string) => void
+} {
+  const sent: string[] = []
+  const captured: { current: ((data: string) => void) | null } = { current: null }
+  const send = (data: string): boolean => {
+    sent.push(data)
+    write(data)
+    return true
+  }
+  const transport = {
+    attach: vi.fn(),
+    connect: vi.fn(async ({ callbacks }: { callbacks?: ConnectCallbacks }) => {
+      captured.current = callbacks?.onData ?? null
+      return 'fish-pty'
+    }),
+    disconnect: vi.fn(),
+    sendInput: vi.fn(send),
+    sendInputImmediate: vi.fn(send),
+    sendInputAccepted: vi.fn(async (data: string) => send(data)),
+    isConnected: vi.fn(() => true),
+    claimViewport: vi.fn(() => true),
+    resize: vi.fn(() => true),
+    getPtyId: vi.fn(() => 'fish-pty'),
+    getConnectionId: vi.fn(() => null)
+  }
+  return { transport, sent, emit: (data: string) => captured.current?.(data) }
+}
+
+function createPane(paneId: number): Record<string, unknown> {
+  const activeBuffer = { type: 'normal' as const, viewportY: 0, baseY: 0, cursorY: 0, cursorX: 0 }
+  const container = new EventTarget()
+  Object.defineProperty(container, 'dataset', { configurable: true, value: {} })
+  return {
+    id: paneId,
+    leafId: LEAF_1,
+    stablePaneId: LEAF_1,
+    container,
+    fitAddon: { fit: vi.fn(), proposeDimensions: vi.fn(() => ({ cols: 120, rows: 30 })) },
+    terminal: {
+      cols: 120,
+      rows: 30,
+      element: {},
+      buffer: { active: activeBuffer },
+      modes: { bracketedPasteMode: false, sendFocusMode: false },
+      options: { scrollback: 5_000, theme: { foreground: '#eeeeee', background: '#111111' } },
+      write: vi.fn(),
+      resize: vi.fn(),
+      clear: vi.fn(),
+      scrollToBottom: vi.fn(),
+      paste: vi.fn(),
+      onData: vi.fn(() => ({ dispose: vi.fn() })),
+      onResize: vi.fn(() => ({ dispose: vi.fn() })),
+      onRender: vi.fn(() => ({ dispose: vi.fn() })),
+      onTitleChange: vi.fn(() => ({ dispose: vi.fn() })),
+      hasSelection: vi.fn(() => false),
+      parser: {
+        registerCsiHandler: vi.fn(() => ({ dispose: vi.fn() })),
+        registerOscHandler: vi.fn(() => ({ dispose: vi.fn() }))
+      }
+    }
+  }
+}
+
+function createDeps(): Record<string, unknown> {
+  return {
+    tabId: 'tab-1',
+    worktreeId: 'wt-1',
+    cwd: '/tmp/wt-1',
+    startup: null,
+    restoredLeafId: null,
+    restoredPtyIdByLeafId: {},
+    paneTransportsRef: { current: new Map() },
+    paneMode2031Ref: { current: new Map<number, boolean>() },
+    paneKittyKeyboardModesRef: { current: new Map() },
+    paneLastThemeModeRef: { current: new Map<number, 'dark' | 'light'>() },
+    replayingPanesRef: { current: new Map() },
+    isActiveRef: { current: true },
+    isVisibleRef: { current: true },
+    onPtyExitRef: { current: vi.fn() },
+    onAgentExitedRef: { current: vi.fn() },
+    onPtyErrorRef: { current: vi.fn() },
+    clearTabPtyId: vi.fn(),
+    consumeSuppressedPtyExit: vi.fn(() => false),
+    isPtyShutdownPending: vi.fn(() => false),
+    updateTabTitle: vi.fn(),
+    setRuntimePaneTitle: vi.fn(),
+    clearRuntimePaneTitle: vi.fn(),
+    updateTabPtyId: vi.fn(),
+    markWorktreeUnread: vi.fn(),
+    markTerminalTabUnread: vi.fn(),
+    markTerminalPaneUnread: vi.fn(),
+    clearWorktreeUnread: vi.fn(),
+    clearTerminalTabUnread: vi.fn(),
+    clearTerminalPaneUnread: vi.fn(),
+    dispatchNotification: vi.fn(),
+    onShowSessionRestoredBanner: vi.fn(),
+    setCacheTimerStartedAt: vi.fn(),
+    syncPanePtyLayoutBinding: vi.fn(),
+    clearExitedPanePtyLayoutBinding: vi.fn()
+  }
+}
+
+function createManager(pane: Record<string, unknown>): Record<string, unknown> {
+  return {
+    setPaneGpuRendering: vi.fn(),
+    markPaneHasComplexScriptOutput: vi.fn(),
+    rebuildPaneWebgl: vi.fn(),
+    hasWebglRenderer: vi.fn(() => false),
+    getPanes: vi.fn(() => [pane]),
+    closePane: vi.fn(),
+    getActivePane: vi.fn(() => pane),
+    getNumericIdForLeaf: vi.fn(() => 1),
+    setActivePane: vi.fn()
+  }
+}
+
+const sleep = (msValue: number): Promise<void> =>
+  new Promise((resolve) => setTimeout(resolve, msValue))
+
+const countOf = (haystack: string, needle: string): number => haystack.split(needle).length - 1
+
+async function waitUntil(predicate: () => boolean, timeoutMs: number): Promise<boolean> {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    if (predicate()) {
+      return true
+    }
+    await sleep(10)
+  }
+  return false
+}
+
+function createTerminalQueryResponder(write: (reply: string) => void): {
+  accept: (chunk: string) => void
+  getCarryLength: () => number
+} {
+  let carry = ''
+  return {
+    accept: (chunk) => {
+      const carriedLength = carry.length
+      const scan = carry + chunk
+      carry = scan.slice(-QUERY_CARRY_LENGTH)
+      for (let at = 0; at < scan.length; at += 1) {
+        for (const [query, reply] of TERMINAL_QUERY_REPLIES) {
+          if (!scan.startsWith(query, at)) {
+            continue
+          }
+          if (at + query.length > carriedLength) {
+            write(reply)
+          }
+          at += query.length - 1
+          break
+        }
+      }
+    },
+    getCarryLength: () => carry.length
+  }
+}
+
+function allChunkPartitions(input: string): string[][] {
+  if (input.length === 0) {
+    return [[]]
+  }
+  const partitions: string[][] = []
+  for (let end = 1; end <= input.length; end += 1) {
+    for (const suffix of allChunkPartitions(input.slice(end))) {
+      partitions.push([input.slice(0, end), ...suffix])
+    }
+  }
+  return partitions
+}
+
+function collectTerminalQueryReplies(chunks: readonly string[]): string[] {
+  const replies: string[] = []
+  const responder = createTerminalQueryResponder((reply) => replies.push(reply))
+  chunks.forEach(responder.accept)
+  return replies
+}
+
+describe('terminal query responder', () => {
+  it.each([
+    ['OSC 10 BEL', '\x1b]10;?\x07', OSC_10_REPLY],
+    ['OSC 10 ST', '\x1b]10;?\x1b\\', OSC_10_REPLY],
+    ['OSC 11 BEL', '\x1b]11;?\x07', OSC_11_REPLY],
+    ['OSC 11 ST', '\x1b]11;?\x1b\\', OSC_11_REPLY]
+  ])('answers each complete %s query once across every partition', (_label, query, reply) => {
+    for (const chunks of allChunkPartitions(query)) {
+      expect(collectTerminalQueryReplies(chunks)).toEqual([reply])
+    }
+  })
+
+  it.each([
+    ['DA1 with omitted parameter', '\x1b[c', DA1_REPLY],
+    ['DA1 with zero parameter', '\x1b[0c', DA1_REPLY],
+    ['DSR cursor position', '\x1b[6n', DSR_REPLY]
+  ])('preserves %s across every partition', (_label, query, reply) => {
+    for (const chunks of allChunkPartitions(query)) {
+      expect(collectTerminalQueryReplies(chunks)).toEqual([reply])
+    }
+  })
+
+  it.each([
+    ['unterminated OSC 10', '\x1b]10;?'],
+    ['unterminated OSC 11 ST', '\x1b]11;?\x1b'],
+    ['OSC 10 extra query marker', '\x1b]10;??\x07'],
+    ['OSC 11 stacked query', '\x1b]11;?;?\x07'],
+    ['OSC 10 malformed body', '\x1b]10;?x\x07'],
+    ['OSC 11 malformed ST body', '\x1b]11;?x\x1b\\'],
+    ['OSC slot lookalike', '\x1b]110;?\x07']
+  ])('rejects %s across every partition', (_label, input) => {
+    for (const chunks of allChunkPartitions(input)) {
+      expect(collectTerminalQueryReplies(chunks)).toEqual([])
+    }
+  })
+
+  it('answers concatenated queries once each in source order across every partition', () => {
+    const input = '\x1b]10;?\x07\x1b]11;?\x07'
+    for (const chunks of allChunkPartitions(input)) {
+      expect(collectTerminalQueryReplies(chunks)).toEqual([OSC_10_REPLY, OSC_11_REPLY])
+    }
+  })
+
+  it('bounds carry while rejecting a long unterminated query lookalike', () => {
+    const replies: string[] = []
+    const responder = createTerminalQueryResponder((reply) => replies.push(reply))
+    let maxCarryLength = 0
+    for (const fragment of `\x1b]10;?${'x'.repeat(10_000)}`) {
+      responder.accept(fragment)
+      maxCarryLength = Math.max(maxCarryLength, responder.getCarryLength())
+    }
+    for (const fragment of '\x1b]10;?\x07') {
+      responder.accept(fragment)
+    }
+
+    expect(maxCarryLength).toBe(QUERY_CARRY_LENGTH)
+    expect(responder.getCarryLength()).toBeLessThanOrEqual(QUERY_CARRY_LENGTH)
+    expect(replies).toEqual([OSC_10_REPLY])
+  })
+})
+
+describe('fish never receives a color-scheme report it did not query (#9993)', () => {
+  let configHome: string | null = null
+
+  // Always runs, so the CI lane cannot report green with the regression below skipped.
+  it('has the fish this suite needs when CI requires one', () => {
+    expect(fishRequirementViolation(FISH)).toBeNull()
+  })
+
+  beforeEach(() => {
+    vi.resetModules()
+    vi.clearAllMocks()
+    transportFactoryQueue = []
+    storeSubscribers = []
+    mockStoreState = {
+      activeWorktreeId: 'wt-1',
+      tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: 'fish-pty' }] },
+      ptyIdsByTabId: { 'tab-1': ['fish-pty'] },
+      terminalLayoutsByTabId: {
+        'tab-1': {
+          root: { type: 'leaf', leafId: LEAF_1 },
+          activeLeafId: LEAF_1,
+          expandedLeafId: null,
+          ptyIdsByLeafId: { [LEAF_1]: 'fish-pty' }
+        }
+      },
+      unreadTerminalTabs: {},
+      deleteStateByWorktreeId: {},
+      worktreesByRepo: { repo1: [{ id: 'wt-1', repoId: 'repo1', path: '/tmp/wt-1' }] },
+      runtimeStatusByEnvironmentId: new Map(),
+      repos: [{ id: 'repo1', connectionId: null }],
+      projects: [],
+      sshConnectionStates: new Map(),
+      transientClearedAgentStatusConnectionIds: {},
+      cacheTimerByKey: {},
+      // Dark app mode: a pre-fix reply is `CSI ?997;1n`, the exact payload issue #9993 reports.
+      settings: {
+        theme: 'dark',
+        promptCacheTimerEnabled: true,
+        terminalMainSideEffectAuthority: false
+      },
+      codexRestartNoticeByPtyId: {},
+      deferredSshReconnectTargets: [],
+      deferredSshSessionIdsByTabId: {},
+      removeDeferredSshReconnectTarget: vi.fn(),
+      removeDeferredSshSessionId: vi.fn(),
+      consumePendingColdRestore: vi.fn(() => null),
+      consumePendingSnapshot: vi.fn(() => null),
+      runtimePaneTitlesByTabId: {},
+      agentStatusByPaneKey: {},
+      retainedAgentsByPaneKey: {},
+      paneForegroundAgentByPaneKey: {},
+      sleepingAgentSessionsByPaneKey: {},
+      suppressedPtyExitIds: {},
+      agentLaunchConfigByPaneKey: {},
+      getAgentLaunchConfigForStatusEntry: vi.fn(),
+      getAgentLaunchConfigForStatusMetadata: vi.fn(),
+      clearSleepingAgentSession: vi.fn(),
+      registerAgentLaunchConfig: vi.fn(),
+      clearAgentLaunchConfig: vi.fn(),
+      markWorktreeUnread: vi.fn(),
+      observeTerminalGitHubPullRequestLink: vi.fn(),
+      recordTerminalInput: vi.fn(),
+      setAgentStatus: vi.fn(),
+      removeAgentStatus: vi.fn(),
+      dropAgentStatus: vi.fn(),
+      retireAgentPaneAuthority: vi.fn(),
+      setPaneForegroundAgent: vi.fn(),
+      clearPaneForegroundAgent: vi.fn(),
+      markTerminalTabUnread: vi.fn(),
+      markTerminalPaneUnread: vi.fn(),
+      markAgentCompletionPaneUnread: vi.fn()
+    }
+    ;(globalThis as unknown as { window: unknown }).window = {
+      api: {
+        pty: {
+          kill: vi.fn(),
+          signal: vi.fn(),
+          listSessions: vi.fn().mockResolvedValue([]),
+          hasPty: vi.fn().mockResolvedValue(true),
+          getSize: vi.fn().mockResolvedValue(null),
+          reportGeometry: vi.fn(),
+          getMainBufferSnapshot: vi.fn().mockResolvedValue(null),
+          getForegroundProcess: vi.fn().mockResolvedValue(null),
+          inspectProcess: vi.fn().mockResolvedValue(null),
+          confirmForegroundProcess: vi.fn().mockResolvedValue(null),
+          hasChildProcesses: vi.fn().mockResolvedValue(false),
+          write: vi.fn(),
+          writeAccepted: vi.fn().mockResolvedValue(true),
+          setHiddenRendererPty: vi.fn(),
+          setPtyDeliveryInterest: vi.fn(),
+          ackColdRestore: vi.fn(),
+          onClearBufferRequest: vi.fn(() => vi.fn()),
+          onSerializeBufferRequest: vi.fn(() => vi.fn()),
+          sendSerializedBuffer: vi.fn(),
+          declarePendingPaneSerializer: vi.fn().mockResolvedValue(1),
+          settlePaneSerializer: vi.fn().mockResolvedValue(undefined),
+          clearPendingPaneSerializer: vi.fn().mockResolvedValue(undefined),
+          reportRendererSerializerReady: vi.fn().mockResolvedValue(undefined)
+        },
+        platform: { get: vi.fn(() => ({ platform: process.platform, osRelease: '' })) },
+        notifications: {
+          dispatch: vi.fn().mockResolvedValue({ delivered: true }),
+          playSound: vi.fn().mockResolvedValue({ played: true })
+        },
+        runtime: { restoreTerminalFit: vi.fn().mockResolvedValue({ restored: true }) },
+        agentStatus: { inferInterrupt: vi.fn().mockResolvedValue(false) }
+      },
+      dispatchEvent: vi.fn(),
+      addEventListener: vi.fn(),
+      removeEventListener: vi.fn()
+    }
+    globalThis.requestAnimationFrame = vi.fn((callback: FrameRequestCallback) => {
+      callback(0)
+      return 1
+    })
+    globalThis.cancelAnimationFrame = vi.fn()
+  })
+
+  afterEach(() => {
+    delete (globalThis as { requestAnimationFrame?: unknown }).requestAnimationFrame
+    delete (globalThis as { cancelAnimationFrame?: unknown }).cancelAnimationFrame
+    delete (globalThis as { window?: unknown }).window
+    if (configHome) {
+      rmSync(configHome, { recursive: true, force: true })
+      configHome = null
+    }
+  })
+
+  itWithFish(
+    'writes no CSI 997 while fish arms mode 2031 around its prompt, so a child reads clean stdin',
+    async () => {
+      const { connectPanePty } = await import('./pty-connection')
+      const nodePty = await import('node-pty')
+
+      configHome = mkdtempSync(path.join(tmpdir(), 'orca-fish-2031-'))
+      mkdirSync(path.join(configHome, 'fish'), { recursive: true })
+      // Plain prompt, no user config: fish core toggles DEC 2031 regardless of the prompt.
+      writeFileSync(
+        path.join(configHome, 'fish/config.fish'),
+        [
+          'set -g fish_greeting ""',
+          `function fish_prompt; printf '${PROMPT_MARK}'; end`,
+          'function fish_right_prompt; end',
+          ''
+        ].join('\n')
+      )
+      // Echoes the first stdin LINE back escaped, so leaked control bytes are visible on
+      // screen. Why a line and not the first chunk: leaked replies carry no newline, so a
+      // once('data') child reports them alone whenever they arrive in their own read —
+      // which is what the issue's own `sys.stdin.readline()` repro measures.
+      const childScript = path.join(configHome, 'read-stdin.mjs')
+      writeFileSync(
+        childScript,
+        "let buffered = ''\n" +
+          "process.stdin.on('data', (d) => {\n" +
+          "  buffered += d.toString('utf8')\n" +
+          "  if (!buffered.includes('\\n')) return\n" +
+          "  process.stdout.write('CHILD-READ:' + JSON.stringify(buffered) + '\\n')\n" +
+          '  process.exit(0)\n' +
+          '})\n' +
+          "process.stdout.write('CHILD-READY\\n')\n"
+      )
+
+      const term = nodePty.spawn(FISH_BIN as string, ['-l', '-i'], {
+        name: 'xterm-256color',
+        cols: 120,
+        rows: 30,
+        cwd: configHome,
+        env: {
+          PATH: process.env.PATH ?? '/usr/bin:/bin',
+          HOME: configHome,
+          TERM: 'xterm-256color',
+          COLORTERM: 'truecolor',
+          LANG: 'en_US.UTF-8',
+          XDG_CONFIG_HOME: configHome,
+          XDG_DATA_HOME: path.join(configHome, 'data'),
+          ORCA_NODE_BIN: process.execPath,
+          ORCA_CHILD_SCRIPT: childScript
+        }
+      })
+
+      let rendered = ''
+      const { transport, sent, emit } = createPtyBackedTransport((data) => term.write(data))
+      const answerTerminalQueries = createTerminalQueryResponder((reply) => term.write(reply))
+      transportFactoryQueue.push(transport)
+
+      // Why answered here: no real xterm is attached, and fish blocks its first prompt ~10s
+      // on DA1 and re-probes every prompt. These are harness bytes, never renderer output.
+      term.onData((chunk) => {
+        rendered += chunk
+        // Maximal fragmentation keeps query handling independent of node-pty chunk boundaries.
+        for (const fragment of chunk) {
+          answerTerminalQueries.accept(fragment)
+        }
+        emit(chunk)
+      })
+
+      let exited = false
+      term.onExit(() => {
+        exited = true
+      })
+
+      try {
+        const pane = createPane(1)
+        const deps = createDeps()
+        const binding = connectPanePty(pane as never, createManager(pane) as never, deps as never)
+
+        expect(await waitUntil(() => rendered.includes(PROMPT_MARK), 15_000)).toBe(true)
+        // The arm is the settle signal.
+        expect(await waitUntil(() => rendered.includes(ARM_2031), 5_000)).toBe(true)
+        // Vacuity guard: the renderer observer must actually have seen the subscribe,
+        // otherwise "sent nothing" is trivially true. Checked here and not at the end,
+        // because the last decision races between fish's subscribe and its withdrawal.
+        const paneMode2031 = (deps as { paneMode2031Ref: { current: Map<number, boolean> } })
+          .paneMode2031Ref.current
+        expect(await waitUntil(() => paneMode2031.get(1) === true, 5_000)).toBe(true)
+
+        // Type-ahead is the deterministic leak shape: queue the child command while an
+        // external command still owns the tty, so fish repaints the prompt (`?2031h`) and
+        // consumes the buffered line in the same breath — handoff lands sub-millisecond
+        // after the subscribe, inside any reply's flight time.
+        term.write('sleep 0.4\r')
+        // Withdrawal #1: `sleep` owns the tty now, so the next line is typed ahead.
+        expect(await waitUntil(() => countOf(rendered, WITHDRAW_2031) >= 1, 5_000)).toBe(true)
+        term.write('"$ORCA_NODE_BIN" "$ORCA_CHILD_SCRIPT"\r')
+        // Withdrawal #2: fish re-armed for the prompt and accepted the child command.
+        expect(await waitUntil(() => countOf(rendered, WITHDRAW_2031) >= 2, 5_000)).toBe(true)
+        // DECSET withdrawal precedes fish's child spawn; the child's marker is the ownership signal.
+        expect(await waitUntil(() => rendered.includes('CHILD-READY'), 5_000)).toBe(true)
+
+        const renderedBeforeChildInput = rendered.length
+        // Canonical mode buffers this in the tty, so it queues behind anything already
+        // written there — including a reply the renderer sent during the handoff.
+        term.write('hello\r')
+        expect(
+          await waitUntil(
+            () => rendered.slice(renderedBeforeChildInput).includes('CHILD-READ:'),
+            10_000
+          )
+        ).toBe(true)
+
+        const childRead =
+          rendered.slice(renderedBeforeChildInput).match(/CHILD-READ:[^\r\n]*/)?.[0] ?? ''
+        // The merge-blocking assertion: the child's STDIN, not the screen. A rendered-output
+        // check passes while npx/brew confirm prompts still eat the bytes.
+        // Scope note: the harness' own DA1/CPR/OSC-11 answers can still land here — that is
+        // the separate probe-reply family (fish asks for those; nobody asked for 997).
+        expect(childRead).not.toContain('997')
+        expect(childRead).toContain('hello')
+        // Nothing the renderer sent was a color-scheme report, on any path.
+        expect(sent.filter((data) => data.includes(COLOR_SCHEME_REPORT_PREFIX))).toEqual([])
+        // And fish never echoed one back as literal prompt text.
+        expect(rendered).not.toContain('997;1n')
+
+        binding.dispose()
+      } finally {
+        term.write('exit\r')
+        await waitUntil(() => exited, 3_000)
+        try {
+          term.kill()
+        } catch {
+          // already gone
+        }
+      }
+    },
+    30_000
+  )
+})
diff --git a/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.test.ts b/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.test.ts
index 93349254955..1a9653d15c8 100644
--- a/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.test.ts
+++ b/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.test.ts
@@ -108,19 +108,19 @@ describe('startParkedTerminalByteWatcher', () => {
 
   async function startWatcher(
     overrides: Partial<ParkedTerminalByteWatcherOptions> = {}
-  ): Promise<{ dispose: () => void; sendInput: ReturnType<typeof vi.fn> }> {
+  ): Promise<{ dispose: () => void; ptyWrite: ReturnType<typeof vi.fn> }> {
     const { startParkedTerminalByteWatcher } = await import('./parked-terminal-byte-watcher')
-    const sendInput = vi.fn()
+    const ptyWrite = vi.fn()
+    ;(window as unknown as { api: { pty: Record<string, unknown> } }).api.pty.write = ptyWrite
     const dispose = startParkedTerminalByteWatcher({
       ptyId: PTY_ID,
       tabId: TAB_ID,
       worktreeId: WORKTREE_ID,
       leafId: LEAF_ID,
       paneId: PANE_ID,
-      sendInput,
       ...overrides
     })
-    return { dispose, sendInput }
+    return { dispose, ptyWrite }
   }
 
   beforeEach(() => {
@@ -360,31 +360,20 @@ describe('startParkedTerminalByteWatcher', () => {
     dispose()
   })
 
-  it('answers a DECSET 2031 subscribe split across chunks via sendInput', async () => {
-    const { dispose, sendInput } = await startWatcher()
+  // Regression pin (#9993): DECSET 2031 subscribes to future color changes — it is not a
+  // query (that is CSI ?996n). A parked tab has no view to answer with and any reply lands
+  // after fish withdrew the mode, painting `?997;1n` at the prompt.
+  it('never writes a color-scheme reply for a DECSET 2031 subscribe', async () => {
+    const { dispose, ptyWrite } = await startWatcher()
 
     emit('\x1b[?20')
-    expect(sendInput).not.toHaveBeenCalled()
-
     emit('31h')
-    expect(sendInput).toHaveBeenCalledTimes(1)
-    // theme=system + prefers-dark → dark reply per terminal-color-scheme-protocol.
-    expect(sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
-
     emit('\x1b[?2031l')
-    expect(sendInput).toHaveBeenCalledTimes(1)
+
+    expect(ptyWrite).not.toHaveBeenCalled()
     dispose()
   })
 
-  it('stops answering DECSET 2031 after dispose', async () => {
-    const { dispose, sendInput } = await startWatcher()
-
-    dispose()
-    emit('\x1b[?2031h')
-
-    expect(sendInput).not.toHaveBeenCalled()
-  })
-
   it('observes GitHub PR links across chunk boundaries', async () => {
     const { dispose } = await startWatcher()
 
@@ -608,8 +597,7 @@ describe('startParkedTerminalByteWatcher', () => {
   //
   // With the kill switch on, the watcher must not register byte parsers —
   // main is the single byte parser and the watcher's policy block consumes
-  // pty:sideEffect facts instead. The byte sidecar stays ONLY for the 2031
-  // reply (query authority never moves to main); PR links arrive as facts.
+  // pty:sideEffect facts instead; PR links arrive as facts.
   describe('with main side-effect authority on', () => {
     function enableMainAuthority(): void {
       mockStoreState.settings = {
@@ -875,19 +863,15 @@ describe('startParkedTerminalByteWatcher', () => {
       dispose()
     })
 
-    it('answers DECSET 2031 from the main 2031-subscribe fact, never the byte scan', async () => {
-      // Why: with the hidden-delivery gate on (default), parked PTY bytes are
-      // dropped in main — the fact is the only 2031 signal, and the byte
-      // sidecar must NOT exist (its registration would re-enable delivery).
+    it('stays silent on a main 2031-subscribe fact', async () => {
+      // Regression pin (#9993): the fact records a subscription for theme-flip
+      // pushes; a parked watcher must never answer it.
       enableMainAuthority()
-      const { dispose, sendInput } = await startWatcher()
+      const { dispose, ptyWrite } = await startWatcher()
 
       emit('\x1b[?2031h')
-      expect(sendInput).not.toHaveBeenCalled()
-
       await dispatchFacts([{ kind: '2031-subscribe' }])
-      expect(sendInput).toHaveBeenCalledTimes(1)
-      expect(sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
+      expect(ptyWrite).not.toHaveBeenCalled()
 
       // Why: pr-link facts arrive on the channel; byte-scanning here too
       // would observe every link twice.
@@ -912,7 +896,7 @@ describe('startParkedTerminalByteWatcher', () => {
       expect(setHiddenRendererPty).toHaveBeenLastCalledWith(PTY_ID, false)
     })
 
-    it('keeps the byte 2031 responder and no hidden bit when the gate kill switch is off', async () => {
+    it('sets no hidden bit and stays silent on 2031 when the gate kill switch is off', async () => {
       enableMainAuthority()
       mockStoreState.settings = {
         ...mockStoreState.settings,
@@ -922,20 +906,14 @@ describe('startParkedTerminalByteWatcher', () => {
       ;(
         window as unknown as { api: { pty: Record<string, unknown> } }
       ).api.pty.setHiddenRendererPty = setHiddenRendererPty
-      const { dispose, sendInput } = await startWatcher()
+      const { dispose, ptyWrite } = await startWatcher()
 
-      // Gate off — bytes keep flowing, so the split-chunk byte scan answers.
+      // Gate off — bytes keep flowing, and they still elicit nothing (#9993).
       emit('\x1b[?20')
-      expect(sendInput).not.toHaveBeenCalled()
       emit('31h')
-      expect(sendInput).toHaveBeenCalledTimes(1)
-      expect(sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
-
-      // Why: a 2031-subscribe fact must not double-fire the reply in byte
-      // mode — exactly one responder owns the answer at any time.
       await dispatchFacts([{ kind: '2031-subscribe' }])
-      expect(sendInput).toHaveBeenCalledTimes(1)
 
+      expect(ptyWrite).not.toHaveBeenCalled()
       expect(setHiddenRendererPty).not.toHaveBeenCalled()
       dispose()
     })
diff --git a/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.ts b/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.ts
index 42dff141d34..8d24cfca7f7 100644
--- a/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.ts
+++ b/src/renderer/src/components/terminal-pane/parked-terminal-byte-watcher.ts
@@ -5,12 +5,7 @@
 import { isClaudeAgent } from '../../../../shared/agent-detection'
 import { makePaneKey } from '../../../../shared/stable-pane-id'
 import { useAppStore } from '@/store'
-import {
-  mode2031SequenceFor,
-  resolveTerminalColorSchemeMode
-} from '../../../../shared/terminal-color-scheme-protocol'
 import { createTerminalGitHubPRLinkDetector } from '../../../../shared/terminal-github-pr-link-detector'
-import { getSystemPrefersDark } from '@/lib/terminal-theme'
 import {
   AGENT_TASK_COMPLETE_NOTIFICATION_GRACE_MS,
   isAgentTaskCompleteOsNotificationEnabledFromState,
@@ -22,7 +17,6 @@ import {
   createParkedTerminalCommandStatusPolicy,
   readInFlightCommandCodeTurn
 } from './parked-terminal-command-status'
-import { startParkedTerminalMode2031Responder } from './parked-terminal-mode2031-responder'
 import { subscribeToPtyData } from './pty-data-sidecar-subscriptions'
 import { createPtyOutputProcessor } from './pty-transport'
 import { isRendererHiddenPtyDeliveryGateEnabled } from './terminal-hidden-delivery-gate'
@@ -61,8 +55,6 @@ export type ParkedTerminalByteWatcherOptions = {
   initialTitle?: string
   /** Pull main's title-only snapshot when a watcher starts before its pane ever mounted (ordinary park cycles already have a title). */
   restoreTitleOnRegister?: boolean
-  /** Out-of-band reply channel to the PTY (mode-2031 color-scheme answers). */
-  sendInput: (data: string) => void
 }
 
 const parkedWatcherDisposersByPtyId = new Map<string, () => void>()
@@ -70,7 +62,7 @@ const parkedWatcherDisposersByPtyId = new Map<string, () => void>()
 export function startParkedTerminalByteWatcher(
   options: ParkedTerminalByteWatcherOptions
 ): () => void {
-  const { ptyId, tabId, worktreeId, paneId, sendInput } = options
+  const { ptyId, tabId, worktreeId, paneId } = options
   const remoteRuntimePty = isRemoteRuntimePtyId(ptyId)
   const drivesTabTitle = options.drivesTabTitle ?? true
   const paneKey = makePaneKey(tabId, options.leafId)
@@ -213,16 +205,9 @@ export function startParkedTerminalByteWatcher(
       runtimeEnvironmentId: null
     })
   const factSideEffectAuthority = mainSideEffectAuthority || remoteRuntimePty
-  // Why: decided once at watcher start — it picks which 2031 responder (byte sidecar vs fact reply) exists, so it must never flip per chunk.
   const hiddenDeliveryGateActive =
     mainSideEffectAuthority &&
     isRendererHiddenPtyDeliveryGateEnabled(useAppStore.getState().settings)
-  const factOwnsMode2031 = hiddenDeliveryGateActive || remoteRuntimePty
-
-  const sendMode2031Reply = (): void => {
-    const settings = useAppStore.getState().settings
-    sendInput(mode2031SequenceFor(resolveTerminalColorSchemeMode(settings, getSystemPrefersDark())))
-  }
 
   // Why (byte-parser mode only): reuse the transport's output processor to keep exact live-path parsing semantics.
   // initialAgentTitle: an agent already working at park time still produces a working→idle transition.
@@ -261,20 +246,13 @@ export function startParkedTerminalByteWatcher(
           onCommandCodeWorking: commandStatusPolicy.onCommandCodeWorking,
           onCommandCodeDone: commandStatusPolicy.onCommandCodeDone,
           onPrLink: (link) =>
-            useAppStore.getState().observeTerminalGitHubPullRequestLink(worktreeId, link),
-          // Why (gate mode only): the 2031 subscribe arrives as a fact, but the reply stays here — query authority stays with the view/watcher (invariant 6).
-          ...(factOwnsMode2031 ? { onMode2031Subscribe: sendMode2031Reply } : {})
+            useAppStore.getState().observeTerminalGitHubPullRequestLink(worktreeId, link)
         },
         // Why: activation-deferred tabs can start a watcher before any pane restored the title; ordinary parked tabs avoid this IPC.
         restoreTitleOnRegister: options.restoreTitleOnRegister === true
       })
     : null
 
-  // Why: no xterm answers DECSET 2031 while parked; with the gate ON, the responder's sidecar would force-feed bytes to the gated PTY, so skip it.
-  const stopMode2031Responder = factOwnsMode2031
-    ? null
-    : startParkedTerminalMode2031Responder({ ptyId, sendInput })
-
   // Why: parked tabs are the canonical hidden view — mark the PTY gated so main stops renderer byte delivery.
   const releaseHiddenDeliveryClaim = hiddenDeliveryGateActive
     ? acquireHiddenRendererPtyDeliveryClaim(ptyId)
@@ -308,7 +286,6 @@ export function startParkedTerminalByteWatcher(
     processor?.disposePendingSideEffectGauge()
     // Why: unhide BEFORE the reveal remount registers pane handlers, so main resumes delivery and emits the restore marker the pane consumes.
     releaseHiddenDeliveryClaim?.()
-    stopMode2031Responder?.()
     unsubscribeByteParsers?.()
     unregisterFactConsumer?.()
     // Why: clears tracker/timer/detector state so the watcher can't fire after the revealed pane's live parsers take over.
diff --git a/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.test.ts b/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.test.ts
deleted file mode 100644
index c619790fdb1..00000000000
--- a/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.test.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-// Why: a parked tab has no xterm, so this byte sidecar is the only thing that
-// answers DECSET 2031. fish toggles 2031 on and off around every prompt, so
-// answering the sticky "an h appeared" flag writes `?997;1n` into a shell that
-// already handed the tty to a child (#9993).
-import { beforeEach, describe, expect, it, vi } from 'vitest'
-
-const ESC = '\x1b'
-const PTY_ID = 'pty-parked-2031'
-
-// One fish prompt cycle: subscribe, paint, hand off the tty.
-const FISH_PROMPT_HANDOFF = `${ESC}[?2031h${ESC}[0m~/orca ${ESC}[32m❯${ESC}[0m ${ESC}[?2031l`
-
-let sidecarWatcher: ((data: string) => void) | null = null
-const unsubscribe = vi.fn()
-
-vi.mock('./pty-data-sidecar-subscriptions', () => ({
-  subscribeToPtyData: (_ptyId: string, watcher: (data: string) => void) => {
-    sidecarWatcher = watcher
-    return unsubscribe
-  }
-}))
-
-vi.mock('@/store', () => ({
-  useAppStore: {
-    getState: () => ({ settings: { theme: 'dark' as const } })
-  }
-}))
-
-vi.mock('@/lib/terminal-theme', () => ({
-  getSystemPrefersDark: () => true
-}))
-
-const { startParkedTerminalMode2031Responder } =
-  await import('./parked-terminal-mode2031-responder')
-
-function startResponder(): { sendInput: ReturnType<typeof vi.fn>; feed: (data: string) => void } {
-  const sendInput = vi.fn()
-  startParkedTerminalMode2031Responder({ ptyId: PTY_ID, sendInput })
-  return {
-    sendInput,
-    feed: (data: string) => sidecarWatcher?.(data)
-  }
-}
-
-beforeEach(() => {
-  sidecarWatcher = null
-  vi.clearAllMocks()
-})
-
-describe('parked-tab DECSET 2031 responder honors the chunk-final state (#9993)', () => {
-  it('does not reply to a subscribe the same chunk withdrew', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(FISH_PROMPT_HANDOFF)
-
-    expect(sendInput).not.toHaveBeenCalled()
-  })
-
-  it('replies once to a TUI that subscribes and keeps listening', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${ESC}[?2031h`)
-
-    expect(sendInput).toHaveBeenCalledTimes(1)
-    expect(sendInput).toHaveBeenCalledWith(`${ESC}[?997;1n`)
-  })
-
-  it('stays silent across a run of fish prompts', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(FISH_PROMPT_HANDOFF)
-    feed(FISH_PROMPT_HANDOFF)
-    feed(FISH_PROMPT_HANDOFF)
-
-    expect(sendInput).not.toHaveBeenCalled()
-  })
-
-  it('replies when a TUI subscribes after a prompt cycle in the same chunk', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${FISH_PROMPT_HANDOFF}${ESC}[?2031h`)
-
-    expect(sendInput).toHaveBeenCalledTimes(1)
-  })
-
-  it('still answers a subscribe split across two chunks', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${ESC}[?20`)
-    feed('31h')
-
-    expect(sendInput).toHaveBeenCalledTimes(1)
-  })
-
-  it('does not reply when the withdrawal is split across two chunks', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${ESC}[?2031h prompt ${ESC}[?20`)
-    expect(sendInput).not.toHaveBeenCalled()
-    feed('31l')
-
-    expect(sendInput).not.toHaveBeenCalled()
-  })
-
-  it('does not reply when an unrelated private mode appends a split withdrawal', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${ESC}[?2031h prompt ${ESC}[?25`)
-    expect(sendInput).not.toHaveBeenCalled()
-    feed(';2031l')
-
-    expect(sendInput).not.toHaveBeenCalled()
-  })
-
-  it('replies after an ambiguous tail resolves to another mode', () => {
-    const { sendInput, feed } = startResponder()
-
-    feed(`${ESC}[?2031h drawing ${ESC}[?20`)
-    expect(sendInput).not.toHaveBeenCalled()
-    feed('25h')
-
-    expect(sendInput).toHaveBeenCalledTimes(1)
-  })
-})
diff --git a/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.ts b/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.ts
deleted file mode 100644
index 4c2ca568de9..00000000000
--- a/src/renderer/src/components/terminal-pane/parked-terminal-mode2031-responder.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-/**
- * DECSET 2031 color-scheme responder for parked terminals (byte-scan mode).
- *
- * Why a dedicated byte sidecar: no xterm exists while a tab is parked, so
- * nothing answers a TUI's mode-2031 theme subscription. Query authority stays
- * with the view/watcher (model/view contract invariant 6), so this reply can
- * never move to main. Phase 4: this subscribeToPtyData registration doubles
- * as a delivery-interest signal, so it is only used while the hidden-delivery
- * gate is OFF — gated parked PTYs answer from the main tracker's
- * '2031-subscribe' fact instead (parked-terminal-byte-watcher.ts).
- *
- * Survives Phase 6 (skip-grammar deletion): mounted switch-off hidden panes
- * answer 2031 from xterm once the background queue drains, but a PARKED tab
- * has no xterm in any switch-off mode, and the '2031-subscribe' fact is only
- * consumed while the gate is ON — this sidecar stays the only answerer here.
- */
-import {
-  INITIAL_MODE_2031_REPLY_SCAN_STATE,
-  mode2031SequenceFor,
-  resolveTerminalColorSchemeMode,
-  scanMode2031ReplyDecision
-} from '../../../../shared/terminal-color-scheme-protocol'
-import { useAppStore } from '@/store'
-import { getSystemPrefersDark } from '@/lib/terminal-theme'
-import { subscribeToPtyData } from './pty-data-sidecar-subscriptions'
-
-export type ParkedTerminalMode2031ResponderOptions = {
-  ptyId: string
-  /** Out-of-band reply channel to the PTY (mode-2031 color-scheme answers). */
-  sendInput: (data: string) => void
-}
-
-export function startParkedTerminalMode2031Responder(
-  options: ParkedTerminalMode2031ResponderOptions
-): () => void {
-  const { ptyId, sendInput } = options
-  let scanState = INITIAL_MODE_2031_REPLY_SCAN_STATE
-  return subscribeToPtyData(ptyId, (data) => {
-    const result = scanMode2031ReplyDecision(scanState, data)
-    scanState = result.state
-    if (result.decision !== 'subscribed') {
-      return
-    }
-    // Why: reply with the resolved theme so TUIs that subscribe while parked
-    // still learn it before the pane is ever revealed.
-    const settings = useAppStore.getState().settings
-    sendInput(mode2031SequenceFor(resolveTerminalColorSchemeMode(settings, getSystemPrefersDark())))
-  })
-}
diff --git a/src/renderer/src/components/terminal-pane/pty-buffer-serializer.ts b/src/renderer/src/components/terminal-pane/pty-buffer-serializer.ts
index c32ea0aafaf..8fc1df0985c 100644
--- a/src/renderer/src/components/terminal-pane/pty-buffer-serializer.ts
+++ b/src/renderer/src/components/terminal-pane/pty-buffer-serializer.ts
@@ -16,6 +16,10 @@ export type SerializedBuffer = {
   rows: number
   seq?: number
   lastTitle?: string
+  /** Kitty flags this pane's mirror could PROVE at `seq`. Published only from
+   *  the tracker's snapshotFlags, so an old host's unknown state is never
+   *  republished as a known `0`. */
+  kittyKeyboardFlags?: number
 }
 
 export type SerializeFn = (
@@ -152,6 +156,11 @@ function ensureSerializerListener(): void {
         if (result.seq !== undefined) {
           payload.seq = result.seq
         }
+        // Why gated on seq: flags describe a boundary, and an unsequenced
+        // snapshot has none for a consumer to reconcile live bytes against.
+        if (result.seq !== undefined && result.kittyKeyboardFlags !== undefined) {
+          payload.kittyKeyboardFlags = result.kittyKeyboardFlags
+        }
         if (lastTitle !== undefined) {
           payload.lastTitle = lastTitle
         } else if (result.lastTitle !== undefined) {
diff --git a/src/renderer/src/components/terminal-pane/pty-connection-types.ts b/src/renderer/src/components/terminal-pane/pty-connection-types.ts
index 9c2f717b8a6..b2b5163ac93 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection-types.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection-types.ts
@@ -48,6 +48,9 @@ export type PtyConnectionDeps = {
   } | null
   restoredLeafId?: string | null
   restoredPtyIdByLeafId?: Record<string, string>
+  /** Park intent sampled at render time, before the host disposes the tab's
+   *  watchers; consumed once the restored layout has been replayed. */
+  mountFollowsTerminalPark: boolean
   paneTransportsRef: React.RefObject<Map<number, PtyTransport>>
   paneMode2031Ref: React.RefObject<Map<number, boolean>>
   /** Per-pane mirror of the kitty keyboard flags the pane's application
@@ -99,10 +102,8 @@ export type PtyConnectionDeps = {
   syncPanePtyLayoutBinding: (paneId: number, ptyId: string | null) => void
   clearExitedPanePtyLayoutBinding: (paneId: number, exitedPtyId: string) => void
   deferPtyInput?: (paneId: number, data: string, forward: (data: string) => void) => void
-  /** Records a DECSET 2031 subscription answered from main's
-   *  '2031-subscribe' fact, mirroring the xterm CSI handler's registry write
-   *  (paneMode2031 + last replied theme) so later theme flips push CSI 997.
-   *  The reply itself is sent by the fact handler — query authority stays
-   *  with the view (model/view contract invariant 6). */
-  recordPaneMode2031Subscription?: (paneId: number, repliedMode: 'dark' | 'light') => void
+  /** Records a DECSET 2031 subscription seen through main's '2031-subscribe'
+   *  fact (paneMode2031 + the mode at subscribe time) so later theme flips push
+   *  CSI 997. Subscribing itself is silent — see #9993. */
+  recordPaneMode2031Subscription?: (paneId: number, subscribedMode: 'dark' | 'light') => void
 }
diff --git a/src/renderer/src/components/terminal-pane/pty-connection.test.ts b/src/renderer/src/components/terminal-pane/pty-connection.test.ts
index c78ac18274b..765eacfb1dd 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection.test.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection.test.ts
@@ -25,6 +25,7 @@ import type { SshConnectionState } from '../../../../shared/ssh-types'
 import type { TerminalLayoutSnapshot, TuiAgent } from '../../../../shared/types'
 import { YOLO_TUI_AGENT_ARGS } from '../../../../shared/tui-agent-permissions'
 import { SETUP_AGENT_SEQUENCE_STARTUP_COMMAND_ENV } from '../../../../shared/setup-agent-sequencing'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
 import {
   beginAgentStartupDeliveryAttempt,
   resetAgentStartupDelayedDeliveryForTests
@@ -62,18 +63,6 @@ async function drainFakeTimerWork(limit = 20): Promise<void> {
   vi.clearAllTimers()
 }
 
-// Why: a reveal remount reads the still-live park watcher entry at connect time to
-// tell itself apart from an in-place reattach; the host disposes it a beat later.
-async function parkTabForReveal(tabId: string, ptyId: string, worktreeId = 'wt-1'): Promise<void> {
-  const { parkedWatchersByTabId } = await import('./terminal-parked-watcher-registry')
-  parkedWatchersByTabId.set(tabId, {
-    worktreeId,
-    tabPtyId: ptyId,
-    paneIdByPtyId: new Map([[ptyId, 1]]),
-    disposersByPtyId: new Map([[ptyId, () => {}]])
-  })
-}
-
 async function drainPendingTimeouts(pendingTimeouts: (() => void)[], limit = 100): Promise<void> {
   let iterations = 0
   while (pendingTimeouts.length > 0) {
@@ -338,6 +327,7 @@ type MockTransport = {
   getPtyId: ReturnType<typeof vi.fn>
   getConnectionId: ReturnType<typeof vi.fn>
   serializeBuffer?: ReturnType<typeof vi.fn>
+  serializeBufferOutcome?: ReturnType<typeof vi.fn>
 }
 
 const scheduleRuntimeGraphSync = vi.fn()
@@ -624,6 +614,7 @@ function createDeps(overrides: Record<string, unknown> = {}) {
     startup: null,
     restoredLeafId: null,
     restoredPtyIdByLeafId: {},
+    mountFollowsTerminalPark: false,
     paneTransportsRef: { current: new Map() },
     paneMode2031Ref: { current: new Map() },
     paneKittyKeyboardModesRef: { current: new Map() },
@@ -2338,6 +2329,53 @@ describe('connectPanePty', () => {
     expect(createdTransportOptions[0]?.projectRuntime).toBeUndefined()
   })
 
+  it('spawns a Floating agent on native Windows beside an active WSL project', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const { createIpcPtyTransport } = await import('./pty-transport')
+    const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+    const transport = createMockTransport()
+    transportFactoryQueue.push(transport)
+    mockStoreState = {
+      ...mockStoreState,
+      activeWorktreeId: 'wt-1',
+      tabsByWorktree: {
+        ...mockStoreState.tabsByWorktree,
+        [FLOATING_TERMINAL_WORKTREE_ID]: [
+          { id: 'tab-floating-agent', ptyId: null, launchAgent: 'codex' }
+        ]
+      },
+      projects: [{ id: 'repo1', localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' } }],
+      settings: {
+        ...mockStoreState.settings,
+        terminalWindowsShell: 'wsl.exe',
+        terminalWindowsWslDistro: 'Ubuntu',
+        localWindowsRuntimeDefault: { kind: 'wsl', distro: 'Ubuntu' }
+      }
+    }
+
+    connectPanePty(
+      createPane(1) as never,
+      createManager(1) as never,
+      createDeps({
+        tabId: 'tab-floating-agent',
+        worktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+        cwd: 'C:\\Users\\alice',
+        startup: { launchAgent: 'codex' }
+      }) as never
+    )
+    await flushAsyncTicks()
+
+    expect(createIpcPtyTransport).toHaveBeenCalledOnce()
+    expect(createRemoteRuntimePtyTransport).not.toHaveBeenCalled()
+    expect(createdTransportOptions[0]).toMatchObject({
+      worktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+      executionHostId: 'local',
+      connectionId: null,
+      launchAgent: 'codex'
+    })
+    expect(createdTransportOptions[0]?.projectRuntime).toBeUndefined()
+  })
+
   it('observes live terminal GitHub PR URLs before agent completion', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const transport = createMockTransport()
@@ -3148,6 +3186,39 @@ describe('connectPanePty', () => {
     expect(pane.terminal.write).toHaveBeenCalledWith(redraw, expect.any(Function))
   })
 
+  it('routes terminal input through deferPtyInput so the host can withhold it', async () => {
+    // Regression: inlining forwardPtyInput into onData dropped this hop, silently disabling link-click mouse suppression.
+    const { connectPanePty } = await import('./pty-connection')
+    const pane = createPane(1)
+    const transport = createMockTransport('pty-1')
+    transportFactoryQueue.push(transport)
+    const deferPtyInput = vi.fn()
+
+    connectPanePty(pane as never, createManager(1) as never, createDeps({ deferPtyInput }) as never)
+    await flushAsyncTicks()
+    sendTerminalInputThroughPane(pane, 'a')
+
+    expect(deferPtyInput).toHaveBeenCalledWith(1, 'a', expect.any(Function))
+    expect(transport.sendInput).not.toHaveBeenCalled()
+
+    const forward = deferPtyInput.mock.calls[0]?.[2] as (data: string) => void
+    forward('a')
+    expect(transport.sendInput).toHaveBeenCalledWith('a')
+  })
+
+  it('forwards terminal input directly when the host supplies no deferPtyInput', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const pane = createPane(1)
+    const transport = createMockTransport('pty-1')
+    transportFactoryQueue.push(transport)
+
+    connectPanePty(pane as never, createManager(1) as never, createDeps() as never)
+    await flushAsyncTicks()
+    sendTerminalInputThroughPane(pane, 'a')
+
+    expect(transport.sendInput).toHaveBeenCalledWith('a')
+  })
+
   it('does not let OpenTUI-style small ANSI redraw bursts monopolize foreground writes', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const pane = createPane(1)
@@ -4297,7 +4368,7 @@ describe('connectPanePty', () => {
     )
   })
 
-  it('delivers terminal-paste startup commands through xterm before submitting', async () => {
+  it('keeps SSH terminal-paste startup commands renderer-owned', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -4313,7 +4384,7 @@ describe('connectPanePty', () => {
       transport.connect.mockImplementation(
         async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
           capturedDataCallback.current = callbacks.onData ?? null
-          return 'pty-local-paste'
+          return 'pty-ssh-paste'
         }
       )
       transportFactoryQueue.push(transport)
@@ -4321,7 +4392,8 @@ describe('connectPanePty', () => {
       mockStoreState = {
         ...mockStoreState,
         tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
-        repos: [{ id: 'repo1', connectionId: null }]
+        repos: [{ id: 'repo1', connectionId: 'ssh-conn-1' }],
+        sshConnectionStates: new Map([['ssh-conn-1', { status: 'connected' }]])
       }
 
       const pane = createPane(1)
@@ -4335,6 +4407,7 @@ describe('connectPanePty', () => {
 
       connectPanePty(pane as never, manager as never, deps as never)
       expect(createdTransportOptions[0]?.command).toBeUndefined()
+      expect(createdTransportOptions[0]?.commandDelivery).toBeUndefined()
       expect(capturedDataCallback.current).not.toBeNull()
 
       capturedDataCallback.current?.('user@host $ ')
@@ -6429,121 +6502,77 @@ describe('connectPanePty', () => {
     expect(transport.sendInput).not.toHaveBeenCalled()
   })
 
-  it('waits for shell-ready before unhinted SSH startup commands', async () => {
-    // Capture the setTimeout callback directly so we can fire it without vi.useFakeTimers() (which would also replace beforeEach's rAF mock).
-    const pendingTimeouts: (() => void)[] = []
-    const originalSetTimeout = globalThis.setTimeout
-    globalThis.setTimeout = vi.fn((fn: () => void) => {
-      pendingTimeouts.push(fn)
-      return 999 as unknown as ReturnType<typeof setTimeout>
-    }) as unknown as typeof setTimeout
-
-    try {
-      const { connectPanePty } = await import('./pty-connection')
-
-      const capturedDataCallback: { current: ((data: string) => void) | null } = {
-        current: null
-      }
-      const transport = createMockTransport('pty-id')
-      transport.connect.mockImplementation(
-        async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
-          capturedDataCallback.current = callbacks.onData ?? null
-          return 'pty-ssh-1'
-        }
-      )
-      transportFactoryQueue.push(transport)
-
-      // SSH connection: the relay gets command metadata while the renderer owns delivery.
-      mockStoreState = {
-        ...mockStoreState,
-        tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
-        repos: [{ id: 'repo1', connectionId: 'ssh-conn-1' }],
-        // Why: startup delivery assumes a live connection; a disconnected target routes through the deferred-connect gate instead of spawning synchronously.
-        sshConnectionStates: new Map([['ssh-conn-1', { status: 'connected' }]])
-      }
-
-      const pane = createPane(1)
-      const manager = createManager(1)
-      const deps = createDeps({ startup: { command: "claude 'say test'" } })
-
-      connectPanePty(pane as never, manager as never, deps as never)
-      expect(capturedDataCallback.current).not.toBeNull()
-
-      capturedDataCallback.current?.('user@remote $ ')
-      expect(transport.sendInput).not.toHaveBeenCalled()
-
-      capturedDataCallback.current?.('\x1b]777;orca-shell-ready\x07user@remote $ ')
-      for (const fn of pendingTimeouts.splice(0)) {
-        fn()
-      }
-
-      expect(createdTransportOptions[0]).toEqual(
-        expect.objectContaining({ startupCommandDelivery: 'shell-ready' })
-      )
-      expect(transport.sendInput).toHaveBeenCalledWith("claude 'say test'\r")
-    } finally {
-      globalThis.setTimeout = originalSetTimeout
+  it('delegates ordinary SSH startup delivery to the provider without a renderer duplicate', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const capturedDataCallback: { current: ((data: string) => void) | null } = { current: null }
+    const transport = createMockTransport('pty-id')
+    transport.connect.mockImplementation(async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
+      capturedDataCallback.current = callbacks.onData ?? null
+      return 'pty-ssh-1'
+    })
+    transportFactoryQueue.push(transport)
+    mockStoreState = {
+      ...mockStoreState,
+      tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
+      repos: [{ id: 'repo1', connectionId: 'ssh-conn-1' }],
+      sshConnectionStates: new Map([['ssh-conn-1', { status: 'connected' }]])
     }
+
+    connectPanePty(
+      createPane(1) as never,
+      createManager(1) as never,
+      createDeps({ startup: { command: "claude 'say test'" } }) as never
+    )
+    await flushAsyncTicks()
+    capturedDataCallback.current?.('\x1b]777;orca-shell-ready\x07user@remote $ ')
+
+    expect(createdTransportOptions[0]).toEqual(
+      expect.objectContaining({
+        command: "claude 'say test'",
+        commandDelivery: 'provider',
+        startupCommandDelivery: 'shell-ready'
+      })
+    )
+    expect(transport.sendInput).not.toHaveBeenCalledWith("claude 'say test'\r")
   })
 
-  it('waits for the SSH shell-ready marker before sending hinted startup commands', async () => {
-    const pendingTimeouts: (() => void)[] = []
-    const originalSetTimeout = globalThis.setTimeout
-    globalThis.setTimeout = vi.fn((fn: () => void) => {
-      pendingTimeouts.push(fn)
-      return 999 as unknown as ReturnType<typeof setTimeout>
-    }) as unknown as typeof setTimeout
-
-    try {
-      const { connectPanePty } = await import('./pty-connection')
-
-      const capturedDataCallback: { current: ((data: string) => void) | null } = {
-        current: null
-      }
-      const transport = createMockTransport('pty-id')
-      transport.connect.mockImplementation(
-        async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
-          capturedDataCallback.current = callbacks.onData ?? null
-          return 'pty-ssh-1'
-        }
-      )
-      transportFactoryQueue.push(transport)
-
-      mockStoreState = {
-        ...mockStoreState,
-        tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
-        repos: [{ id: 'repo1', connectionId: 'ssh-conn-1' }],
-        // Why: startup delivery assumes a live connection; a disconnected target routes through the deferred-connect gate instead of spawning synchronously.
-        sshConnectionStates: new Map([['ssh-conn-1', { status: 'connected' }]])
-      }
-
-      const pane = createPane(1)
-      const manager = createManager(1)
-      const deps = createDeps({
-        startup: {
-          command: "codex 'linked issue context'",
-          startupCommandDelivery: 'shell-ready'
-        }
-      })
-
-      connectPanePty(pane as never, manager as never, deps as never)
-      expect(capturedDataCallback.current).not.toBeNull()
-
-      capturedDataCallback.current?.('user@remote $ ')
-      for (const fn of pendingTimeouts.splice(0)) {
-        fn()
-      }
-      expect(transport.sendInput).not.toHaveBeenCalled()
-
-      capturedDataCallback.current?.('\x1b]777;orca-shell-ready\x07user@remote $ ')
-      for (const fn of pendingTimeouts.splice(0)) {
-        fn()
-      }
-
-      expect(transport.sendInput).toHaveBeenCalledWith("codex 'linked issue context'\r")
-    } finally {
-      globalThis.setTimeout = originalSetTimeout
+  it('arms draft observation after a provider-owned SSH startup succeeds', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const capturedDataCallback: { current: ((data: string) => void) | null } = { current: null }
+    const transport = createMockTransport('pty-codex')
+    transport.connect.mockImplementation(async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
+      capturedDataCallback.current = callbacks.onData ?? null
+      return 'pty-ssh-codex'
+    })
+    transportFactoryQueue.push(transport)
+    mockStoreState = {
+      ...mockStoreState,
+      tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
+      repos: [{ id: 'repo1', connectionId: 'ssh-conn-1' }],
+      sshConnectionStates: new Map([['ssh-conn-1', { status: 'connected' }]])
     }
+    const prompt = 'https://linear.app/stably/issue/STA-4067'
+
+    connectPanePty(
+      createPane(1) as never,
+      createManager(1) as never,
+      createDeps({
+        startup: {
+          command: 'codex',
+          launchAgent: 'codex',
+          launchConfig: { agentArgs: '', agentEnv: {} },
+          launchToken: 'launch-token-ssh',
+          draftPrompt: prompt
+        }
+      }) as never
+    )
+    await flushAsyncTicks()
+    capturedDataCallback.current?.('\x1b[?2004h\x1b[2K› ')
+    await flushAsyncTicks()
+
+    expect(createdTransportOptions[0]?.commandDelivery).toBe('provider')
+    expect(transport.sendInput).not.toHaveBeenCalledWith('codex\r')
+    expect(transport.sendInputAccepted).toHaveBeenCalledWith(`\x1b[200~${prompt}\x1b[201~`)
   })
 
   it('orders a startup draft behind existing user input when Codex renders its composer', async () => {
@@ -6712,7 +6741,7 @@ describe('connectPanePty', () => {
     ).toBe(true)
   })
 
-  it('falls back for SSH shell-ready startup commands when no marker arrives', async () => {
+  it('does not fall back to renderer delivery when provider-owned SSH output has no marker', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -6763,13 +6792,14 @@ describe('connectPanePty', () => {
         fn()
       }
 
-      expect(transport.sendInput).toHaveBeenCalledWith("codex 'linked issue context'\r")
+      expect(createdTransportOptions[0]?.commandDelivery).toBe('provider')
+      expect(transport.sendInput).not.toHaveBeenCalledWith("codex 'linked issue context'\r")
     } finally {
       globalThis.setTimeout = originalSetTimeout
     }
   })
 
-  it('falls back for quiet SSH shell-ready startup commands with no output', async () => {
+  it('does not duplicate a quiet provider-owned SSH startup command', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -6821,13 +6851,14 @@ describe('connectPanePty', () => {
         fn()
       }
 
-      expect(transport.sendInput).toHaveBeenCalledWith("codex 'linked issue context'\r")
+      expect(createdTransportOptions[0]?.commandDelivery).toBe('provider')
+      expect(transport.sendInput).not.toHaveBeenCalledWith("codex 'linked issue context'\r")
     } finally {
       globalThis.setTimeout = originalSetTimeout
     }
   })
 
-  it('waits for shell-ready for SSH Codex native prefill commands without an explicit hint', async () => {
+  it('uses provider delivery for SSH Codex native prefill commands without an explicit hint', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -6875,13 +6906,16 @@ describe('connectPanePty', () => {
         fn()
       }
 
-      expect(transport.sendInput).toHaveBeenCalledWith("codex --prefill 'linked issue context'\r")
+      expect(createdTransportOptions[0]?.commandDelivery).toBe('provider')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(
+        "codex --prefill 'linked issue context'\r"
+      )
     } finally {
       globalThis.setTimeout = originalSetTimeout
     }
   })
 
-  it('uses the sequenced startup command hint for SSH shell-ready detection', async () => {
+  it('keeps sequenced SSH startup wrappers provider-owned', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -6935,7 +6969,8 @@ describe('connectPanePty', () => {
         fn()
       }
 
-      expect(transport.sendInput).toHaveBeenCalledWith(`${wrapperCommand}\r`)
+      expect(createdTransportOptions[0]?.commandDelivery).toBe('provider')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(`${wrapperCommand}\r`)
     } finally {
       globalThis.setTimeout = originalSetTimeout
     }
@@ -8215,7 +8250,7 @@ describe('connectPanePty', () => {
     expect(deps.updateTabPtyId).toHaveBeenCalledWith('tab-1', 'fresh-ssh-pty')
   })
 
-  it('submits a cold-restore resume command after SSH expired-session fallback', async () => {
+  it('delegates a cold-restore resume command after SSH expired-session fallback', async () => {
     const pendingTimeouts: (() => void)[] = []
     const originalSetTimeout = globalThis.setTimeout
     globalThis.setTimeout = vi.fn((fn: () => void) => {
@@ -8288,6 +8323,7 @@ describe('connectPanePty', () => {
         2,
         expect.objectContaining({
           command: "codex '--dangerously-bypass-approvals-and-sandbox' 'resume' 'codex-session-1'",
+          commandDelivery: 'provider',
           startupCommandDelivery: 'shell-ready',
           env: expect.objectContaining({
             ORCA_PANE_KEY: paneKey,
@@ -8298,7 +8334,7 @@ describe('connectPanePty', () => {
           })
         })
       )
-      expect(transport.sendInput).toHaveBeenCalledWith(
+      expect(transport.sendInput).not.toHaveBeenCalledWith(
         "codex '--dangerously-bypass-approvals-and-sandbox' 'resume' 'codex-session-1'\r"
       )
     } finally {
@@ -8758,7 +8794,7 @@ describe('connectPanePty', () => {
     expect(writes.join('')).not.toContain('ALT-FRAME-BODY')
   })
 
-  it('drops a live daemon alt frame until a hidden pane has a final grid', async () => {
+  it('keeps a daemon alt frame at its capture grid while the target grid is unknown', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const transport = createMockTransport('tab-pty')
     transport.connect.mockImplementation(async ({ sessionId }: { sessionId?: string }) =>
@@ -8796,7 +8832,8 @@ describe('connectPanePty', () => {
 
     const writes = (pane.terminal.write as ReturnType<typeof vi.fn>).mock.calls.map((c) => c[0])
     expect(writes.join('')).toContain('PREFIX-SCROLLBACK')
-    expect(writes.join('')).not.toContain('ALT-FRAME-BODY')
+    expect(writes.join('')).toContain('ALT-FRAME-BODY')
+    expect(writes.filter((write) => write.includes('ALT-FRAME-BODY'))).toHaveLength(1)
   })
 
   it('falls back to the merged daemon snapshot when split metadata is incomplete', async () => {
@@ -12244,14 +12281,13 @@ describe('connectPanePty', () => {
       dataCallback('startup probe output\r\n')
       expect(setHiddenRendererPty).toHaveBeenCalledWith('pty-id', true)
 
-      // The fact stays the sole 2031 responder for gate-managed PTYs.
+      // The fact records the subscription for gate-managed PTYs; it never answers it (#9993).
       factsHandler._dispatchTerminalSideEffectBatchForTest({
         ptyId: 'pty-id',
         seq: 8,
         facts: [{ kind: '2031-subscribe' }]
       })
-      expect(transport.sendInput).toHaveBeenCalledTimes(1)
-      expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
     })
 
     it('latches model restore from the out-of-band marker and restores on reveal', async () => {
@@ -12287,7 +12323,8 @@ describe('connectPanePty', () => {
       )
     })
 
-    it('answers each 2031-subscribe fact exactly once, before any hidden mark exists', async () => {
+    it('never answers a 2031-subscribe fact, hidden or visible', async () => {
+      // Regression pin (#9993): a subscribe arms future notifications, it is not a query.
       enableMainAuthority()
       const deps = createDeps({ isVisibleRef: { current: false } })
       const { transport } = await connectHiddenPane(deps)
@@ -12298,27 +12335,23 @@ describe('connectPanePty', () => {
       transportOptions.onPtySpawn?.('pty-id')
       const factsHandler = await import('./terminal-side-effect-facts-handler')
 
-      // Why: the fact can outrun the hidden mark (codex startup race) and must still reply — ownership is structural, not mark-dependent.
       factsHandler._dispatchTerminalSideEffectBatchForTest({
         ptyId: 'pty-id',
         seq: 12,
         facts: [{ kind: '2031-subscribe' }]
       })
-      expect(transport.sendInput).toHaveBeenCalledTimes(1)
-      expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
-
-      // Why: a visible gated pane still answers via the fact — the lifecycle suppresses xterm's CSI reply for gate-managed panes.
       ;(deps.isVisibleRef as { current: boolean }).current = true
       factsHandler._dispatchTerminalSideEffectBatchForTest({
         ptyId: 'pty-id',
         seq: 24,
         facts: [{ kind: '2031-subscribe' }]
       })
-      expect(transport.sendInput).toHaveBeenCalledTimes(2)
-      expect(transport.sendInput).toHaveBeenLastCalledWith('\x1b[?997;1n')
+
+      expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
+      expect(transport.sendInputImmediate).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
     })
 
-    it('registers the fact-answered 2031 subscription for later theme flips', async () => {
+    it('registers the fact-observed 2031 subscription for later theme flips', async () => {
       enableMainAuthority()
       const recordPaneMode2031Subscription = vi.fn()
       const deps = createDeps({
@@ -12338,16 +12371,16 @@ describe('connectPanePty', () => {
         facts: [{ kind: '2031-subscribe' }]
       })
 
-      expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
       // Why: without the registry write, maybePushMode2031Flip won't push CSI 997 after a theme change, so the TUI keeps a stale theme.
       expect(recordPaneMode2031Subscription).toHaveBeenCalledWith(1, 'dark')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
     })
 
     it('retires the fact-registered subscription when the TUI withdraws it', async () => {
       // The counterpart to the test above. A gated pane never sees the withdrawal bytes
-      // (main drops them) and both the chunk scanner and xterm's CSI handler are disabled
-      // for it, so this fact is the only observer that can retire the subscription. Left
-      // registered, the next theme flip pushes CSI 997 at the shell that replaced the TUI.
+      // (main drops them) and the chunk scanner is disabled for it, so this fact is the only
+      // observer that can retire the subscription. Left registered, the next theme flip
+      // pushes CSI 997 at the shell that replaced the TUI.
       enableMainAuthority()
       const paneMode2031Ref = { current: new Map<number, boolean>() }
       const paneLastThemeModeRef = { current: new Map<number, 'dark' | 'light'>() }
@@ -12356,9 +12389,9 @@ describe('connectPanePty', () => {
         paneMode2031Ref,
         paneLastThemeModeRef,
         // Exactly what use-terminal-pane-lifecycle wires up for this callback.
-        recordPaneMode2031Subscription: (paneId: number, repliedMode: 'dark' | 'light') => {
+        recordPaneMode2031Subscription: (paneId: number, subscribedMode: 'dark' | 'light') => {
           paneMode2031Ref.current.set(paneId, true)
-          paneLastThemeModeRef.current.set(paneId, repliedMode)
+          paneLastThemeModeRef.current.set(paneId, subscribedMode)
         }
       })
       await connectHiddenPane(deps)
@@ -12385,8 +12418,7 @@ describe('connectPanePty', () => {
     })
 
     it('leaves the chunk scanner silent on a gate-managed PTY', async () => {
-      // Main's '2031-subscribe' fact already answers these; a chunk-boundary reply here
-      // would answer the same subscribe a second time.
+      // Main's '2031-subscribe' fact already records these; nothing on this path replies.
       enableMainAuthority()
       const deps = createDeps({ isVisibleRef: { current: false } })
       const { transport, dataCallback } = await connectHiddenPane(deps)
@@ -12746,6 +12778,7 @@ describe('connectPanePty', () => {
         dataCallback: (data: string, meta?: { seq?: number; rawLength?: number }) => void
         getMainBufferSnapshot: ReturnType<typeof vi.fn>
         transport: MockTransport
+        deps: ReturnType<typeof createDeps>
       }> {
         enableMainAuthority()
         const deps = createDeps({ isVisibleRef: { current: true } })
@@ -12777,7 +12810,7 @@ describe('connectPanePty', () => {
           expect.any(Function)
         )
         pane.terminal.write.mockClear()
-        return { pane, dataCallback, getMainBufferSnapshot, transport }
+        return { pane, dataCallback, getMainBufferSnapshot, transport, deps }
       }
 
       function writtenData(pane: ReturnType<typeof createPane>): string {
@@ -12798,24 +12831,25 @@ describe('connectPanePty', () => {
         expect(writtenData(pane)).toContain('NEW')
       })
 
-      it('answers a 2031 subscribe on a chunk the restored snapshot drops as duplicate', async () => {
-        // Why the scan runs before reconciliation: the snapshot restore replays bytes
-        // into xterm without answering queries, so this live delivery is the only
-        // chance to reply. Dropping the chunk as a duplicate must not drop the query.
-        // Gate off so the chunk scanner (not main's fact) owns this pane's reply.
+      it('records a 2031 subscribe on a chunk the restored snapshot drops as duplicate', async () => {
+        // Why the scan runs before reconciliation: the snapshot restore replays bytes into
+        // xterm without tracking modes, so this live delivery is the only chance to observe
+        // the subscription. Dropping the chunk as a duplicate must not drop that.
+        // Gate off so the chunk scanner (not main's fact) owns this pane's registry.
         enableMainAuthority()
         mockStoreState.settings = {
           ...mockStoreState.settings,
           terminalHiddenDeliveryGate: false
         } as StoreState['settings']
-        const { pane, dataCallback, transport } = await restoreVisiblePaneToBaseline()
+        const { pane, dataCallback, transport, deps } = await restoreVisiblePaneToBaseline()
         transport.sendInput.mockClear()
 
         dataCallback(`SUB\x1b[?2031h`, { seq: 60, rawLength: 11 })
         await flushAsyncTicks(8)
 
         expect(writtenData(pane)).not.toContain('SUB')
-        expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
+        expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
+        expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
       })
 
       it('slices a partial overlap when raw and clean lengths match', async () => {
@@ -13496,7 +13530,7 @@ describe('connectPanePty', () => {
     binding.dispose()
   })
 
-  it('answers a mode 2031 subscribe once, from the raw chunk boundary', async () => {
+  it('records a mode 2031 subscribe from the raw chunk boundary without answering', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const transport = createMockTransport('pty-id')
     const capturedDataCallback: { current: ((data: string) => void) | null } = { current: null }
@@ -13526,8 +13560,8 @@ describe('connectPanePty', () => {
 
       // Why the scanner and not xterm's CSI handler: xterm batches PTY chunks into one
       // parse, so only this layer knows the chunk ended still subscribed (#9993).
-      expect(transport.sendInput).toHaveBeenCalledTimes(1)
-      expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;2n')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
+      expect(transport.sendInputImmediate).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
       // The bytes still reach xterm so the emulator tracks the mode itself.
       expect(pane.terminal.write).toHaveBeenCalledWith('\x1b[?2031h')
     } finally {
@@ -13537,12 +13571,12 @@ describe('connectPanePty', () => {
     binding.dispose()
   })
 
-  // Why these three: fish 4.7.1 enables and disables 2031 around *every* prompt with no
-  // opt-out, so back-to-back chunks each carrying a toggle are the normal case, not an edge
-  // case. Each chunk owes exactly one decision, and xterm cannot make it — it parses several
-  // chunks in one synchronous batch, so a reply deferred to the parser is either dropped or
-  // answered against a subscription a later chunk already withdrew (#9993).
-  describe('mode 2031 replies are decided per raw PTY chunk', () => {
+  // Why: fish 4.7.1 enables and disables 2031 around *every* prompt with no opt-out, so
+  // back-to-back chunks each carrying a toggle are the normal case. Subscribing is never
+  // answered (#9993) — these pin that silence plus the per-chunk subscription bookkeeping
+  // that theme-flip pushes depend on. xterm cannot do that bookkeeping: it parses several
+  // chunks in one synchronous batch and only sees the net result.
+  describe('mode 2031 subscriptions are tracked per raw PTY chunk, never answered', () => {
     async function connectVisiblePane(): Promise<{
       transport: ReturnType<typeof createMockTransport>
       deps: ReturnType<typeof createDeps>
@@ -13581,56 +13615,60 @@ describe('connectPanePty', () => {
     const replies = (transport: { sendInput: { mock: { calls: unknown[][] } } }): unknown[] =>
       transport.sendInput.mock.calls.flat().filter((arg) => String(arg).includes('997'))
 
-    it('answers a chunk that ends subscribed even when the next chunk withdraws', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
-      // Two separate PTY chunks. xterm would parse both in one batch and see only the net
-      // result; the first chunk still owes a reply.
+    it('registers a chunk that ends subscribed, then retires it when the next withdraws', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
+      // Two separate PTY chunks. xterm would parse both in one batch and see only the net result.
       emit('\x1b[?2031h')
+      expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
       emit('\x1b[?2031l')
-      expect(replies(transport)).toEqual(['\x1b[?997;2n'])
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
+      expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('answers each chunk that ends subscribed', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('re-registers a chunk that withdraws and subscribes again', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       emit('\x1b[?2031h')
       emit('\x1b[?2031l\x1b[?2031h')
-      expect(replies(transport)).toHaveLength(2)
+      expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
+      expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('stays silent when one chunk both subscribes and withdraws', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
-      // The fish prompt case: the subscription is gone before the program could read a reply.
+    it('registers nothing when one chunk both subscribes and withdraws', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
+      // The fish prompt case: the subscription is gone before the program could read anything.
       emit('\x1b[?2031h prompt \x1b[?2031l')
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
       expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('stays silent when the withdrawal is split across two chunks', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('registers nothing when the withdrawal is split across two chunks', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       emit('\x1b[?2031h prompt \x1b[?20')
-      expect(replies(transport)).toEqual([])
       emit('31l')
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
       expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('stays silent when an unrelated private mode appends a split withdrawal', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('registers nothing when an unrelated private mode appends a split withdrawal', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       emit('\x1b[?2031h prompt \x1b[?25')
-      expect(replies(transport)).toEqual([])
       emit(';2031l')
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
       expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('answers after an ambiguous tail resolves to another mode', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('registers the subscription once an ambiguous tail resolves to another mode', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       emit('\x1b[?2031h drawing \x1b[?20')
-      expect(replies(transport)).toEqual([])
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
       emit('25h')
-      expect(replies(transport)).toEqual(['\x1b[?997;2n'])
+      expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
+      expect(replies(transport)).toEqual([])
       dispose()
     })
 
@@ -13654,19 +13692,21 @@ describe('connectPanePty', () => {
       dispose()
     })
 
-    it('answers once when a TUI subscribes at the end of a fish prompt chunk', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('registers a TUI that subscribes at the end of a fish prompt chunk', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       emit(`${FISH_PROMPT_HANDOFF}\x1b[?2031h`)
-      expect(replies(transport)).toHaveLength(1)
+      expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
+      expect(replies(transport)).toEqual([])
       dispose()
     })
 
-    it('answers a subscribe whose withdrawal never arrives', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+    it('keeps a subscription whose withdrawal never arrives', async () => {
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       // A real TUI: subscribe now, unsubscribe minutes later on exit.
       emit('\x1b[?2031h')
       emit('painting the ui')
-      expect(replies(transport)).toHaveLength(1)
+      expect(deps.paneMode2031Ref.current.get(1)).toBe(true)
+      expect(replies(transport)).toEqual([])
       dispose()
     })
 
@@ -13683,7 +13723,7 @@ describe('connectPanePty', () => {
     })
 
     it('discards a half-read escape prefix when the pane swaps PTYs', async () => {
-      const { transport, emit, dispose } = await connectVisiblePane()
+      const { transport, deps, emit, dispose } = await connectVisiblePane()
       // Why: the tail is a byte range from the old stream. Splicing it onto the first
       // chunk of a replacement PTY fabricates a subscribe no program ever sent.
       transport.serializeBuffer = vi.fn().mockResolvedValue(null)
@@ -13694,12 +13734,13 @@ describe('connectPanePty', () => {
 
       emit('31h')
 
+      expect(deps.paneMode2031Ref.current.get(1)).toBeUndefined()
       expect(replies(transport)).toEqual([])
       dispose()
     })
   })
 
-  it('answers hidden Codex mode 2031 subscribes split across becoming visible', async () => {
+  it('records hidden Codex mode 2031 subscribes split across becoming visible', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const transport = createMockTransport('pty-id')
     const capturedDataCallback: { current: ((data: string) => void) | null } = { current: null }
@@ -13734,8 +13775,9 @@ describe('connectPanePty', () => {
     isVisibleRef.current = true
     capturedDataCallback.current?.('31h')
 
-    expect(transport.sendInputImmediate).toHaveBeenCalledWith('\x1b[?997;2n')
+    expect(transport.sendInputImmediate).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
     expect(paneMode2031Ref.current.get(1)).toBe(true)
+    // Seeded so the next appearance re-apply only pushes on a real color-mode flip.
     expect(paneLastThemeModeRef.current.get(1)).toBe('light')
     expect(pane.terminal.write).not.toHaveBeenCalledWith('31h', expect.any(Function))
 
@@ -14284,7 +14326,7 @@ describe('connectPanePty', () => {
       await flushAsyncTicks(20)
 
       expect(getMainBufferSnapshot).toHaveBeenCalled()
-      expect(transport.sendInput).toHaveBeenCalledWith('\x1b[?997;1n')
+      expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
       expect(pane.terminal.write).toHaveBeenCalledWith(
         expect.stringContaining('healed from snapshot'),
         expect.any(Function)
@@ -14982,7 +15024,8 @@ describe('connectPanePty', () => {
       undefined,
       { connectionId: null }
     )
-    expect(transport.sendInput).toHaveBeenCalledWith(expect.stringContaining('\x1b['))
+    // Remote gated panes record the subscription from the fact and answer nothing (#9993).
+    expect(transport.sendInput).not.toHaveBeenCalledWith(expect.stringMatching(/\?997/))
     expect(recordPaneMode2031Subscription).toHaveBeenCalledWith(1, expect.any(String))
     deps.paneMode2031Ref.current.set(1, true)
     deps.paneLastThemeModeRef.current.set(1, 'dark')
@@ -15140,6 +15183,63 @@ describe('connectPanePty', () => {
     disposable.dispose()
   })
 
+  it('preserves the painted normal buffer when a successful hidden restore has no image', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const transport = createMockTransport('remote:env-1@@terminal-1')
+    const capturedDataCallback: {
+      current: ((data: string, meta?: { seq?: number; rawLength?: number }) => void) | null
+    } = { current: null }
+    const hidden = 'x'.repeat(2 * 1024 * 1024 + 1)
+    const live = 'visible remote output\r\n'
+    transport.serializeBuffer = vi.fn()
+    transport.serializeBufferOutcome = vi.fn().mockResolvedValue({
+      availability: { kind: 'snapshot' },
+      snapshot: {
+        data: '',
+        scrollbackAnsi: '',
+        cols: 120,
+        rows: 40,
+        seq: hidden.length + live.length,
+        source: 'headless'
+      }
+    })
+    transport.connect.mockImplementation(async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
+      capturedDataCallback.current = callbacks.onData ?? null
+      return 'remote:env-1@@terminal-1'
+    })
+    transportFactoryQueue.push(transport)
+    const pane = createPane(1)
+    const deps = createDeps({ isVisibleRef: { current: false } })
+    const disposable = connectPanePty(pane as never, createManager(1) as never, deps as never)
+    await flushAsyncTicks(6)
+    const writeStart = pane.terminal.write.mock.calls.length
+
+    capturedDataCallback.current?.(hidden, { seq: hidden.length, rawLength: hidden.length })
+    ;(deps.isVisibleRef as { current: boolean }).current = true
+    capturedDataCallback.current?.(live, {
+      seq: hidden.length + live.length,
+      rawLength: live.length
+    })
+    await flushAsyncTicks(20)
+
+    const restoreWrites = pane.terminal.write.mock.calls
+      .slice(writeStart)
+      .map(([data]) => String(data))
+    const paintedFrame = Array.from({ length: 8 }, (_, index) => `painted-frame-${index + 1}`).join(
+      '\r\n'
+    )
+    const actual = await renderHeadlessTerminalState([paintedFrame, ...restoreWrites], 120, 4)
+    const expected = await renderHeadlessTerminalState(
+      [paintedFrame, ...restoreWrites.filter((data) => data === live)],
+      120,
+      4
+    )
+    expect(actual).toEqual(expected)
+    expect(transport.serializeBufferOutcome).toHaveBeenCalledTimes(1)
+    expect(transport.serializeBuffer).not.toHaveBeenCalled()
+    disposable.dispose()
+  })
+
   it('defers inactive split-pane plain hidden output restore until the pane returns', async () => {
     const { resetHiddenOutputRestoreSchedulerForTests } =
       await import('./hidden-output-restore-scheduler')
@@ -15440,9 +15540,8 @@ describe('connectPanePty', () => {
     disposable.dispose()
   })
 
-  it('pulses a skipped hidden alt frame when reveal keeps the snapshot grid', async () => {
+  it('keeps a hidden-output alt frame at the capture grid below the fit floor', async () => {
     const { connectPanePty } = await import('./pty-connection')
-    const { safeFit } = await import('@/lib/pane-manager/pane-tree-ops')
     const transport = createMockTransport('pty-id')
     let onData: ConnectCallbacks['onData']
     transport.connect.mockImplementation(async ({ callbacks }: { callbacks: ConnectCallbacks }) => {
@@ -15464,41 +15563,36 @@ describe('connectPanePty', () => {
       scrollbackAnsi: 'preserved history'
     })
     const pane = createPane(1)
-    let paneRect = createRect(0, 0)
-    pane.container.getBoundingClientRect = vi.fn(() => paneRect)
-    let xtermContainerDisplay = 'none'
-    const xtermContainer = new EventTarget() as HTMLElement
-    Object.defineProperty(xtermContainer, 'parentElement', { value: null })
-    Object.defineProperty(xtermContainer, 'ownerDocument', {
-      value: { defaultView: { getComputedStyle: () => ({ display: xtermContainerDisplay }) } }
+    pane.terminal.cols = 80
+    pane.terminal.rows = 24
+    const writes: string[] = []
+    pane.terminal.write = vi.fn((data: string, callback?: () => void) => {
+      writes.push(data)
+      callback?.()
     })
-    ;(pane as { xtermContainer?: HTMLElement }).xtermContainer = xtermContainer
+    pane.container.getBoundingClientRect = vi.fn(() => createRect(4, 3))
     const deps = createDeps({ isVisibleRef: { current: false } })
-    const disposable = connectPanePty(pane as never, createManager(1) as never, deps as never)
+    const binding = connectPanePty(pane as never, createManager(1) as never, deps as never)
     await flushAsyncTicks(6)
     onData?.(hidden, { seq: hidden.length, rawLength: hidden.length })
+    const { _dispatchPtyModelRestoreNeededForTest } = await import('./pty-model-restore-channel')
+    _dispatchPtyModelRestoreNeededForTest({
+      id: 'pty-id',
+      reason: 'hidden-drop',
+      markerSeq: hidden.length + 1
+    })
     ;(deps.isVisibleRef as { current: boolean }).current = true
-    onData?.('x', { seq: hidden.length + 1, rawLength: 1 })
+    const { requestTerminalBacklogRecovery } =
+      await import('@/lib/pane-manager/pane-terminal-output-scheduler')
+    requestTerminalBacklogRecovery(pane.terminal as never)
     await flushAsyncTicks(20)
 
-    const writes = (pane.terminal.write as ReturnType<typeof vi.fn>).mock.calls.map(
-      (call) => call[0]
-    )
-    expect(writes.join('')).not.toContain('TOO-WIDE-ALT-FRAME')
-    expect(writes.join('')).toContain('\x1b[?1004h\x1b[?25l')
+    expect(writes.join('')).toContain('TOO-WIDE-ALT-FRAME')
+    expect(writes.join('')).toContain('preserved history')
+    expect(writes.filter((write) => write.includes('TOO-WIDE-ALT-FRAME'))).toHaveLength(1)
+    expect(pane.terminal.resize).toHaveBeenCalledWith(120, 40)
     expect(transport.resize).not.toHaveBeenCalled()
-
-    xtermContainerDisplay = 'block'
-    paneRect = createRect(800, 600)
-    safeFit(pane as never)
-    await flushAsyncTicks(12)
-
-    const pulseStart = transport.resize.mock.calls.findIndex(
-      ([cols, rows]) => cols === 119 && rows === 40
-    )
-    expect(pulseStart).toBeGreaterThanOrEqual(0)
-    expect(transport.resize.mock.calls[pulseStart + 1]).toEqual([120, 40])
-    disposable.dispose()
+    binding.dispose()
   })
 
   it('drains foreground output after a renderer-sourced hidden-backlog snapshot without seq', async () => {
@@ -21395,7 +21489,6 @@ describe('connectPanePty', () => {
       alternateScreen: true,
       scrollbackAnsi: 'PARKED-SSH-SCROLLBACK\r\n'
     })
-    await parkTabForReveal('tab-1', sshPtyId)
     mockStoreState = {
       ...mockStoreState,
       tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: sshPtyId }] },
@@ -21413,6 +21506,7 @@ describe('connectPanePty', () => {
       pane as never,
       createManager(1) as never,
       createDeps({
+        mountFollowsTerminalPark: true,
         restoredLeafId: LEAF_1,
         restoredPtyIdByLeafId: { [LEAF_1]: sshPtyId }
       }) as never
@@ -21458,7 +21552,6 @@ describe('connectPanePty', () => {
     transportFactoryQueue.push(createMockTransport())
     vi.mocked(window.api.pty.getMainBufferSnapshot).mockReturnValue(snapshot.promise)
     vi.mocked(window.api.ssh.connect).mockReturnValue(sshConnect.promise)
-    await parkTabForReveal('tab-1', sshPtyId)
     mockStoreState = {
       ...mockStoreState,
       tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: sshPtyId, generation: 7 }] },
@@ -21485,6 +21578,7 @@ describe('connectPanePty', () => {
       pane as never,
       createManager(1) as never,
       createDeps({
+        mountFollowsTerminalPark: true,
         restoredLeafId: LEAF_1,
         restoredPtyIdByLeafId: { [LEAF_1]: sshPtyId }
       }) as never
@@ -21537,7 +21631,6 @@ describe('connectPanePty', () => {
       seq: 125,
       source: 'headless'
     })
-    await parkTabForReveal('tab-1', foreignPtyId)
     mockStoreState = {
       ...mockStoreState,
       tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: foreignPtyId }] },
@@ -21554,6 +21647,7 @@ describe('connectPanePty', () => {
       pane as never,
       createManager(1) as never,
       createDeps({
+        mountFollowsTerminalPark: true,
         restoredLeafId: LEAF_1,
         restoredPtyIdByLeafId: { [LEAF_1]: foreignPtyId }
       }) as never
@@ -21589,7 +21683,6 @@ describe('connectPanePty', () => {
     })
     transportFactoryQueue.push(transport)
     vi.mocked(window.api.pty.getMainBufferSnapshot).mockReturnValue(snapshot.promise)
-    await parkTabForReveal('tab-1', sshPtyId)
     mockStoreState = {
       ...mockStoreState,
       tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: sshPtyId }] },
@@ -21606,6 +21699,7 @@ describe('connectPanePty', () => {
       pane as never,
       createManager(1) as never,
       createDeps({
+        mountFollowsTerminalPark: true,
         restoredLeafId: LEAF_1,
         restoredPtyIdByLeafId: { [LEAF_1]: sshPtyId }
       }) as never
@@ -21643,7 +21737,6 @@ describe('connectPanePty', () => {
       source: 'headless'
     })
     transportFactoryQueue.push(transport)
-    await parkTabForReveal('tab-1', remotePtyId)
     mockStoreState = {
       ...mockStoreState,
       runtimeStatusByEnvironmentId: new Map([
@@ -21659,7 +21752,7 @@ describe('connectPanePty', () => {
 
     const pane = createPane(1)
     const { parseCallbacks, writes } = captureCallbackTerminalWrites(pane)
-    const deps = createDeps()
+    const deps = createDeps({ mountFollowsTerminalPark: true })
 
     connectPanePty(pane as never, createManager(1) as never, deps as never)
     for (let step = 0; step < 30; step += 1) {
@@ -21674,7 +21767,7 @@ describe('connectPanePty', () => {
     expect(transport.getPtyId).toHaveReturnedWith(remotePtyId)
   })
 
-  it('restores a local main-model snapshot after a contentless park reattach', async () => {
+  it('keeps a parked main-model alt frame at its capture grid while hidden', async () => {
     const { connectPanePty } = await import('./pty-connection')
     const localPtyId = 'global-floating-terminal@@terminal-1'
     const transport = createMockTransport(localPtyId)
@@ -21685,13 +21778,15 @@ describe('connectPanePty', () => {
     transportFactoryQueue.push(transport)
     const getMainBufferSnapshot = vi.mocked(window.api.pty.getMainBufferSnapshot)
     getMainBufferSnapshot.mockResolvedValue({
-      data: 'FLOATING-PARK-RESTORE-OK\r\n',
+      data: 'FLOATING-PARK-ALT-FRAME',
+      frameRestoreAnsi: '\x1b[?25l',
       cols: 113,
       rows: 32,
       seq: 558,
-      source: 'headless'
+      source: 'headless',
+      alternateScreen: true,
+      scrollbackAnsi: 'FLOATING-PARK-HISTORY\r\n'
     })
-    await parkTabForReveal('tab-1', localPtyId, 'global-floating-terminal')
     mockStoreState = {
       ...mockStoreState,
       tabsByWorktree: {
@@ -21709,8 +21804,10 @@ describe('connectPanePty', () => {
     }
 
     const pane = createPane(1)
+    pane.container.getBoundingClientRect = vi.fn(() => createRect(0, 0))
     const { parseCallbacks, writes } = captureCallbackTerminalWrites(pane)
     const deps = createDeps({
+      mountFollowsTerminalPark: true,
       worktreeId: 'global-floating-terminal',
       restoredLeafId: LEAF_1,
       restoredPtyIdByLeafId: { [LEAF_1]: localPtyId }
@@ -21727,7 +21824,55 @@ describe('connectPanePty', () => {
       expect.objectContaining({ sessionId: localPtyId })
     )
     expect(deps.syncPanePtyLayoutBinding).toHaveBeenCalledWith(1, localPtyId)
-    expect(writes.join('')).toContain('FLOATING-PARK-RESTORE-OK')
+    expect(writes.join('')).toContain('FLOATING-PARK-HISTORY')
+    expect(writes.join('')).toContain('FLOATING-PARK-ALT-FRAME')
+    expect(writes.filter((write) => write.includes('FLOATING-PARK-ALT-FRAME'))).toHaveLength(1)
+    expect(pane.terminal.resize).toHaveBeenCalledWith(113, 32)
+  })
+
+  it('restores a parked SSH alt frame after StrictMode watcher disposal', async () => {
+    const { connectPanePty } = await import('./pty-connection')
+    const sshPtyId = toAppSshPtyId('conn-1', 'relay-pty-static-alt')
+    const transport = createMockTransport(sshPtyId)
+    transport.connect.mockImplementation(async () => {
+      transport.getPtyId.mockReturnValue(sshPtyId)
+      return { id: sshPtyId, isReattach: true, replay: '' }
+    })
+    transportFactoryQueue.push(transport)
+    vi.mocked(window.api.pty.getMainBufferSnapshot).mockResolvedValue({
+      data: '\x1b[0m\x1b[?1049h\x1b[HSTATIC-SSH-ALT-FRAME',
+      frameRestoreAnsi: '\x1b[0m\x1b[?1049h\x1b[?6l\x1b[1;21H',
+      cols: 100,
+      rows: 30,
+      seq: 512,
+      source: 'headless',
+      alternateScreen: true,
+      scrollbackAnsi: 'PRESERVED-SSH-HISTORY\r\n'
+    })
+    mockStoreState = {
+      ...mockStoreState,
+      tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
+      repos: [{ id: 'repo1', connectionId: 'conn-1' }],
+      deferredSshReconnectTargets: ['conn-1'],
+      deferredSshSessionIdsByTabId: { 'tab-1': sshPtyId }
+    }
+
+    const pane = createPane(1)
+    const { parseCallbacks, writes } = captureCallbackTerminalWrites(pane)
+    const deps = createDeps({
+      mountFollowsTerminalPark: true,
+      restoredLeafId: LEAF_1,
+      restoredPtyIdByLeafId: { [LEAF_1]: sshPtyId }
+    })
+    connectPanePty(pane as never, createManager(1) as never, deps as never)
+    for (let step = 0; step < 30; step += 1) {
+      parseCallbacks.shift()?.()
+      await flushAsyncTicks(2)
+    }
+
+    expect(window.api.pty.getMainBufferSnapshot).toHaveBeenCalledOnce()
+    expect(writes.join('')).toContain('PRESERVED-SSH-HISTORY')
+    expect(writes.filter((write) => write.includes('STATIC-SSH-ALT-FRAME'))).toHaveLength(1)
   })
 
   it('falls back to relay replay when the SSH model snapshot stalls', async () => {
@@ -21741,9 +21886,7 @@ describe('connectPanePty', () => {
     })
     transportFactoryQueue.push(transport)
     vi.mocked(window.api.pty.getMainBufferSnapshot).mockReturnValue(new Promise(() => {}))
-    // Why parked: only a reveal remount probes main's model — the pane reads the
-    // still-live park watcher entry at connect time to tell the two apart.
-    await parkTabForReveal('tab-1', sshPtyId)
+    // Why parked: only a reveal remount probes main's model.
 
     mockStoreState = {
       ...mockStoreState,
@@ -21756,6 +21899,7 @@ describe('connectPanePty', () => {
     const pane = createPane(1)
     const { writes } = captureCallbackTerminalWrites(pane)
     const deps = createDeps({
+      mountFollowsTerminalPark: true,
       restoredLeafId: LEAF_1,
       restoredPtyIdByLeafId: { [LEAF_1]: sshPtyId }
     })
@@ -23081,6 +23225,159 @@ describe('connectPanePty', () => {
     }
   })
 
+  it('resets stale keyboard state when a batched done→working→done burst lands as one publication', async () => {
+    const restoreUserAgent = temporarilySetNavigatorUserAgent(
+      'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
+    )
+    const { connectPanePty } = await import('./pty-connection')
+    const transport = createMockTransport()
+    transportFactoryQueue.push(transport)
+
+    try {
+      const paneKey = makePaneKey('tab-1', LEAF_1)
+      const firstDoneAt = Date.now()
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'done',
+        prompt: 'first turn',
+        updatedAt: firstDoneAt,
+        stateStartedAt: firstDoneAt,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: [{ state: 'working', prompt: 'first turn', startedAt: firstDoneAt - 5_000 }]
+      }
+      const pane = createPane(1)
+      const manager = createManager(1)
+      const deps = createDeps()
+
+      connectPanePty(pane as never, manager as never, deps as never)
+      expect(pane.terminal.write).not.toHaveBeenCalled()
+
+      // The burst's intermediate `working` never publishes, so the entry stays `done` end-to-end;
+      // only the stateHistory row proves a second turn ran and re-armed the kitty protocol.
+      const secondDoneAt = firstDoneAt + 10_000
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'done',
+        prompt: 'second turn',
+        updatedAt: secondDoneAt,
+        stateStartedAt: secondDoneAt,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: [
+          { state: 'working', prompt: 'first turn', startedAt: firstDoneAt - 5_000 },
+          { state: 'done', prompt: 'first turn', startedAt: firstDoneAt },
+          { state: 'working', prompt: 'second turn', startedAt: secondDoneAt - 2_000 }
+        ]
+      }
+      notifyStoreSubscribers()
+
+      expect(pane.terminal.write).toHaveBeenCalledWith(
+        `${RESET_TERMINAL_CURSOR_STYLE}${RESET_KITTY_KEYBOARD_PROTOCOL}`,
+        expect.any(Function)
+      )
+    } finally {
+      restoreUserAgent()
+    }
+  })
+
+  it('resets stale keyboard state when a batched burst ends on working after a completed turn', async () => {
+    const restoreUserAgent = temporarilySetNavigatorUserAgent(
+      'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
+    )
+    const { connectPanePty } = await import('./pty-connection')
+    const transport = createMockTransport()
+    transportFactoryQueue.push(transport)
+
+    try {
+      const paneKey = makePaneKey('tab-1', LEAF_1)
+      const startedAt = Date.now()
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'working',
+        prompt: 'ship it',
+        updatedAt: startedAt,
+        stateStartedAt: startedAt,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: []
+      }
+      const pane = createPane(1)
+      const manager = createManager(1)
+      const deps = createDeps()
+
+      connectPanePty(pane as never, manager as never, deps as never)
+      notifyStoreSubscribers()
+      expect(pane.terminal.write).not.toHaveBeenCalled()
+
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'working',
+        prompt: 'follow-up',
+        updatedAt: startedAt + 8_000,
+        stateStartedAt: startedAt + 8_000,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: [
+          { state: 'working', prompt: 'ship it', startedAt },
+          { state: 'done', prompt: 'ship it', startedAt: startedAt + 4_000 }
+        ]
+      }
+      notifyStoreSubscribers()
+
+      expect(pane.terminal.write).toHaveBeenCalledWith(
+        `${RESET_TERMINAL_CURSOR_STYLE}${RESET_KITTY_KEYBOARD_PROTOCOL}`,
+        expect.any(Function)
+      )
+    } finally {
+      restoreUserAgent()
+    }
+  })
+
+  it('keeps native Windows same-turn done repaints from re-resetting keyboard state', async () => {
+    const restoreUserAgent = temporarilySetNavigatorUserAgent(
+      'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
+    )
+    const { connectPanePty } = await import('./pty-connection')
+    const transport = createMockTransport()
+    transportFactoryQueue.push(transport)
+
+    try {
+      const paneKey = makePaneKey('tab-1', LEAF_1)
+      const doneAt = Date.now()
+      const pane = createPane(1)
+      const manager = createManager(1)
+      const deps = createDeps()
+
+      connectPanePty(pane as never, manager as never, deps as never)
+
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'done',
+        prompt: 'ship it',
+        updatedAt: doneAt,
+        stateStartedAt: doneAt,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: []
+      }
+      notifyStoreSubscribers()
+      const writesAfterDone = (pane.terminal.write as ReturnType<typeof vi.fn>).mock.calls.length
+
+      mockStoreState.agentStatusByPaneKey[paneKey] = {
+        state: 'done',
+        prompt: 'ship it',
+        updatedAt: doneAt + 1_000,
+        stateStartedAt: doneAt,
+        agentType: 'codex',
+        paneKey,
+        stateHistory: []
+      }
+      notifyStoreSubscribers()
+
+      expect((pane.terminal.write as ReturnType<typeof vi.fn>).mock.calls.length).toBe(
+        writesAfterDone
+      )
+    } finally {
+      restoreUserAgent()
+    }
+  })
+
   it('drops native Windows Codex focus reports while a history resume is idle', async () => {
     const restoreUserAgent = temporarilySetNavigatorUserAgent(
       'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
diff --git a/src/renderer/src/components/terminal-pane/pty-connection.ts b/src/renderer/src/components/terminal-pane/pty-connection.ts
index 8c32b1e1984..6c5d86d11de 100644
--- a/src/renderer/src/components/terminal-pane/pty-connection.ts
+++ b/src/renderer/src/components/terminal-pane/pty-connection.ts
@@ -17,6 +17,7 @@ import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
 import { isEphemeralSetupTerminalWorktreeId } from '../../../../shared/ephemeral-setup-terminal-worktree-id'
 import { TERMINAL_PAIRED_PARKING_RUNTIME_CAPABILITY } from '../../../../shared/protocol-version'
 import { TerminalKittyKeyboardModeTracker } from '../../../../shared/terminal-kitty-keyboard-mode-tracker'
+import { parseTerminalKittyKeyboardFlags } from '../../../../shared/terminal-kitty-keyboard-flags'
 import { isRuntimeOwnedSshTargetId, parseExecutionHostId } from '../../../../shared/execution-host'
 import { createTerminalZeroDimensionsMessage } from '../../../../shared/terminal-zero-dimensions-diagnostic'
 import { isWorktreeRemovalFenceError } from '../../../../shared/worktree-removal-fence-error'
@@ -36,7 +37,7 @@ import {
 } from '@/lib/pane-manager/terminal-delivery-credit'
 import { serializeWithAbsoluteCursor } from '../../../../shared/terminal-serialize-absolute-cursor'
 import { isTerminalQueryReply } from '../../../../shared/terminal-query-reply'
-import type { PtyBufferSnapshot, PtyConnectResult } from './pty-transport'
+import type { PtyBufferSnapshot, PtyConnectResult, PtyReplayDataMeta } from './pty-transport'
 import type { IpcPtyTransportOptions, PtyTransportRecoveryState } from './pty-transport-types'
 import { createIpcPtyTransport } from './pty-transport'
 import { createRemoteRuntimePtyTransport } from './remote-runtime-pty-transport'
@@ -127,11 +128,9 @@ import {
   RESET_TERMINAL_CURSOR_STYLE
 } from '../../../../shared/terminal-mode-reset-profiles'
 import { buildFreshShellViewportBlankingSequence } from './terminal-restored-viewport'
-import { createShellReadyMarkerScanState, scanForShellReadyMarker } from './shell-ready-marker-scan'
 import { getSystemPrefersDark } from '@/lib/terminal-theme'
 import {
   INITIAL_MODE_2031_REPLY_SCAN_STATE,
-  mode2031SequenceFor,
   resolveTerminalColorSchemeMode,
   scanMode2031ReplyDecision
 } from '../../../../shared/terminal-color-scheme-protocol'
@@ -280,7 +279,6 @@ import {
   setCommandCodeDoneSettleExecutor
 } from './command-code-done-settle'
 import { canCommandCodeOutputOwnPane } from './command-code-output-ownership'
-import { isTerminalTabParked } from './terminal-parked-watcher-registry'
 import {
   getExecutionHostIdForWorktree,
   getSettingsForWorktreeRuntimeOwner
@@ -345,7 +343,6 @@ const SSH_SESSION_EXPIRED_ERROR = 'SSH_SESSION_EXPIRED'
 const DIRECT_SSH_PANE_RETRY_SETTLEMENT_TIMEOUT_MS = 31_000
 const REMOTE_PTY_ID_PREFIX = 'remote:'
 const PTY_CONNECT_DIAG_LIMIT = 200
-const SSH_SHELL_READY_STARTUP_FALLBACK_MS = 1500
 const MANUAL_AGENT_COMMAND_MAX_CHARS = 4096
 const STARTUP_DRAFT_PASTE_QUIET_MS = 1500
 // Why: the notice deliberately omits the rejected path — saved cwds can
@@ -529,11 +526,10 @@ const e2eTerminalHiddenSnapshotOverrides = new Map<string, E2eTerminalHiddenSnap
 
 // Why: the per-chunk hidden-skip grammar is deleted (Phase 6) — hidden bytes
 // either never reach the renderer (delivery gate) or ride the background
-// scheduler queue. Only the mode-2031 fact-reply counter still has a producer.
+// scheduler queue.
 type E2eTerminalPtyOutputDebugSnapshot = {
   hiddenRendererSkipCount: number
   hiddenRendererSkippedChars: number
-  hiddenRendererMode2031ReplyCount: number
 }
 
 type E2eTerminalPtyOutputDebugApi = {
@@ -566,14 +562,12 @@ type ColdRestoreAgentResumeStartup = PendingStartupCommand & {
 
 const e2eTerminalPtyOutputDebugState: E2eTerminalPtyOutputDebugSnapshot = {
   hiddenRendererSkipCount: 0,
-  hiddenRendererSkippedChars: 0,
-  hiddenRendererMode2031ReplyCount: 0
+  hiddenRendererSkippedChars: 0
 }
 
 function resetE2eTerminalPtyOutputDebug(): void {
   e2eTerminalPtyOutputDebugState.hiddenRendererSkipCount = 0
   e2eTerminalPtyOutputDebugState.hiddenRendererSkippedChars = 0
-  e2eTerminalPtyOutputDebugState.hiddenRendererMode2031ReplyCount = 0
 }
 
 function exposeE2eTerminalPtyOutputDebug(): void {
@@ -596,14 +590,6 @@ function recordHiddenRendererSkip(chars: number): void {
   e2eTerminalPtyOutputDebugState.hiddenRendererSkippedChars += chars
 }
 
-function recordHiddenMode2031Reply(): void {
-  if (!e2eConfig.exposeStore) {
-    return
-  }
-  exposeE2eTerminalPtyOutputDebug()
-  e2eTerminalPtyOutputDebugState.hiddenRendererMode2031ReplyCount += 1
-}
-
 function exposeE2eTerminalPtyDataInjection(): void {
   if (!e2eConfig.exposeStore || typeof window === 'undefined') {
     return
@@ -1093,6 +1079,25 @@ function isSetupSplitGeometryReady(
   )
 }
 
+/** Start time of the newest completed turn, counting turns already folded into history.
+ *  Why: batched publications coalesce done→working→done into a single store notification,
+ *  so the done EDGE survives only in stateHistory; comparing `state` alone misses it. */
+function resolveLatestAgentDoneStartedAt(entry: AgentStatusEntry | undefined): number | undefined {
+  if (!entry) {
+    return undefined
+  }
+  if (entry.state === 'done') {
+    return entry.stateStartedAt
+  }
+  const history = entry.stateHistory ?? []
+  for (let index = history.length - 1; index >= 0; index -= 1) {
+    if (history[index].state === 'done') {
+      return history[index].startedAt
+    }
+  }
+  return undefined
+}
+
 /**
  * Establishes a binding between a terminal pane and its corresponding PTY stream,
  * managing input, output, title synchronization, and agent status tracking.
@@ -1107,10 +1112,7 @@ export function connectPanePty(
   // settles after remount must not remount its already-replaced successor.
   const terminalRecoveryGeneration = captureTerminalPaneRecoveryGeneration(deps.tabId)
   const terminalRecoveryInstance = registerTerminalPaneRecoveryInstance(deps.tabId)
-  // Why sampled here: the host disposes this tab's park watcher in the effect
-  // that follows this mount, so connect time is the only moment a pane can tell
-  // a reveal remount from an in-place reattach.
-  let mountFollowsTerminalPark = isTerminalTabParked(deps.tabId)
+  let mountFollowsTerminalPark = deps.mountFollowsTerminalPark
   let authoritativeReattachGeneration = 0
   exposeE2eTerminalPtyOutputDebug()
   let disposed = false
@@ -1133,7 +1135,6 @@ export function connectPanePty(
   let cleanupStartupDraftPasteTimers = (): void => {}
   let unregisterE2ePtyDataInjection = (): void => {}
   let startupInjectTimer: ReturnType<typeof setTimeout> | null = null
-  let sshShellReadyFallbackTimer: ReturnType<typeof setTimeout> | null = null
   let agentTaskCompleteNotificationGraceTimer: ReturnType<typeof setTimeout> | null = null
   let agentTaskCompleteNotificationMaxTimer: ReturnType<typeof setTimeout> | null = null
   let agentTaskCompleteStatusUnsubscribe: (() => void) | null = null
@@ -3610,10 +3611,10 @@ export function connectPanePty(
   const shouldApplyNativeWindowsRewriteRefresh = isNativeWindowsConpty
   const shouldApplyWindowsRendererUnicodeRefresh = CLIENT_PLATFORM === 'win32'
   const shouldProtectNativeWindowsSynchronizedOutput = isNativeWindowsConpty
-  let lastAgentStatusState = state.agentStatusByPaneKey[cacheKey]?.state
   let unsubscribeWindowsDoneTerminalModeReset: (() => void) | null = null
   if (isNativeWindowsConpty) {
     const initialAgentStatus = state.agentStatusByPaneKey[cacheKey]
+    let lastAgentDoneStartedAt = resolveLatestAgentDoneStartedAt(initialAgentStatus)
     if (
       !initialAgentStatus &&
       paneStartup?.telemetry?.launch_source === 'sidebar' &&
@@ -3632,13 +3633,18 @@ export function connectPanePty(
       const nextAgentStatusState = nextAgentStatus?.state
       if (nextAgentStatusState === 'done') {
         setFocusReportSuppressionForAgentCompletion(undefined, nextAgentStatus.agentType)
-        if (lastAgentStatusState !== 'done') {
-          queueAgentIdleTerminalModeReset()
-        }
       } else if (nextAgentStatusState) {
         suppressNativeWindowsIdleCodexFocusReports = false
       }
-      lastAgentStatusState = nextAgentStatusState
+      const nextAgentDoneStartedAt = resolveLatestAgentDoneStartedAt(nextAgentStatus)
+      // Why: a NEW completed turn — same-state `done` pings keep stateStartedAt, so they no-op.
+      if (
+        nextAgentDoneStartedAt !== undefined &&
+        nextAgentDoneStartedAt !== lastAgentDoneStartedAt
+      ) {
+        queueAgentIdleTerminalModeReset()
+      }
+      lastAgentDoneStartedAt = nextAgentDoneStartedAt
     })
   }
 
@@ -3721,13 +3727,13 @@ export function connectPanePty(
   })
   // Why: Phase-4 hidden-delivery gate — only meaningful under main authority
   // (renderer byte parsers need bytes otherwise). Decided once at pane
-  // creation: it picks the mode-2031 answer path (fact reply vs byte scan),
-  // which must have exactly one owner.
+  // creation: it picks which path records a mode-2031 subscription (main's
+  // fact vs the byte scan), which must have exactly one owner.
   const hiddenDeliveryGateActive =
     mainSideEffectAuthority && isRendererHiddenPtyDeliveryGateEnabled(state.settings)
   // Why: structural per-PTY gate predicate (authority on + gate on + bytes
   // transit local main, which implies snapshot-backed). Shared by the hidden
-  // mark sync and mode-2031 reply ownership so reply ownership can never
+  // mark sync and mode-2031 subscription recording so the recorder can never
   // disagree with what main may drop — and never depends on the racy hidden
   // mark (a fact can outrun the pty:data task that sets it).
   const isHiddenDeliveryGateManagedPty = (ptyId: string | null): ptyId is string =>
@@ -3747,6 +3753,8 @@ export function connectPanePty(
         onDone: scheduleCommandCodeOutputDoneStatus
       })
   const shouldDeliverStartupViaTerminalPaste = paneStartup?.delivery === 'terminal-paste'
+  const shouldUseProviderSshStartupDelivery =
+    Boolean(connectionId) && !shouldDeliverStartupViaTerminalPaste
   const hadExistingPaneTransportAtConnect = deps.paneTransportsRef.current.size > 0
   let lastTerminalInputAt = Number.NEGATIVE_INFINITY
   let hasReceivedPtyOutput = false
@@ -3800,6 +3808,7 @@ export function connectPanePty(
     env: paneEnv,
     ...(paneStartup?.envToDelete ? { envToDelete: paneStartup.envToDelete } : {}),
     command: shouldDeliverStartupViaTerminalPaste ? undefined : paneStartup?.command,
+    ...(shouldUseProviderSshStartupDelivery ? { commandDelivery: 'provider' as const } : {}),
     startupCommandDelivery: shouldDeliverStartupViaTerminalPaste
       ? undefined
       : connectionId && paneStartup?.command
@@ -3878,13 +3887,10 @@ export function connectPanePty(
   // desktop silent while the elected mobile xterm owns query replies.
   const sendDesktopQueryReplyImmediate = (data: string): boolean =>
     canSendDesktopQueryReply() && transport.sendInputImmediate(data)
-  // Why (gate mode only): for gate-managed PTYs this fact is the SOLE 2031
-  // responder — visible, hidden, marked or not. Conditioning the reply on the
-  // hidden mark double-fired (mark set + bytes delivered live via interest →
-  // fact AND xterm both replied) or dropped the reply entirely (fact outran
-  // the pty:data task that set the mark). The xterm-side CSI reply and the
-  // skipped-byte scan are disabled for these panes (same structural
-  // predicate), so exactly one reply goes out.
+  // Why (gate mode only): gate-managed PTYs never see the subscribe bytes, so this fact is
+  // their only cue to record the subscription — without the registry entry a later theme
+  // flip never pushes the CSI 997 update and the TUI keeps a stale theme after reveal.
+  // Record-only: a subscribe is not a query (see observeLiveMode2031Chunk, #9993).
   const handleHiddenMode2031SubscribeFact = (): void => {
     const ptyId = transport.getPtyId()
     if (disposed || (!isHiddenDeliveryGateManagedPty(ptyId) && remoteOutputGatedPtyId !== ptyId)) {
@@ -3894,22 +3900,14 @@ export function connectPanePty(
       useAppStore.getState().settings,
       getSystemPrefersDark()
     )
-    // Why immediate: a mode-2031 query reply must beat the remote input debounce
-    // or it can miss the querying program's read window (#7329).
-    sendDesktopQueryReplyImmediate(mode2031SequenceFor(mode))
-    // Why: register the subscription exactly like the xterm CSI handler
-    // would — without the registry entry, later theme flips never push the
-    // CSI 997 update and the TUI keeps a stale theme after reveal.
     deps.recordPaneMode2031Subscription?.(pane.id, mode)
-    recordHiddenMode2031Reply()
   }
   // Why (gate mode only): the counterpart to the subscribe fact. These panes never
-  // receive the withdrawal bytes — main drops them before delivery — and both the
-  // chunk scanner and the xterm CSI handler are disabled for them, so this fact is
-  // the ONLY observer that can retire the subscription. Without it a TUI that exits
-  // while hidden leaves paneMode2031 set, and the next theme flip pushes CSI 997
-  // into the shell that replaced it (#9993 via maybePushMode2031Flip). No reply is
-  // sent: a withdrawal is not a query.
+  // receive the withdrawal bytes — main drops them before delivery — and the chunk
+  // scanner is disabled for them, so this fact is the ONLY observer that can retire
+  // the subscription. Without it a TUI that exits while hidden leaves paneMode2031
+  // set, and the next theme flip pushes CSI 997 into the shell that replaced it
+  // (#9993 via maybePushMode2031Flip).
   const handleHiddenMode2031UnsubscribeFact = (): void => {
     const ptyId = transport.getPtyId()
     if (disposed || (!isHiddenDeliveryGateManagedPty(ptyId) && remoteOutputGatedPtyId !== ptyId)) {
@@ -4749,12 +4747,21 @@ export function connectPanePty(
                 : serializeWithAbsoluteCursor(pane.serializeAddon, pane.terminal, {
                     scrollback: opts?.scrollbackRows
                   })
+            const orderedSeq = rendererOrderedPtyId === ptyId ? rendererOrderedSeq : null
+            // Why snapshotFlags and not `flags`: this pane may itself have
+            // consumed an old-host snapshot that proved nothing, and its
+            // conservative `0` fallback must not be republished downstream as
+            // a host-proven inactive protocol.
+            const provenKittyFlags = kittyKeyboardModes.hasProvenBaseline
+              ? kittyKeyboardModes.snapshotFlags
+              : undefined
             return {
               data,
               cols: pane.terminal.cols,
               rows: pane.terminal.rows,
-              ...(rendererOrderedPtyId === ptyId && rendererOrderedSeq !== null
-                ? { seq: rendererOrderedSeq }
+              ...(orderedSeq !== null ? { seq: orderedSeq } : {}),
+              ...(orderedSeq !== null && provenKittyFlags !== undefined
+                ? { kittyKeyboardFlags: provenKittyFlags }
                 : {})
             }
           } catch {
@@ -4819,51 +4826,13 @@ export function connectPanePty(
         .catch(() => {})
     }
 
-    // Why: for ordinary local startup commands, the local PTY provider already
-    // writes via the shell-ready barrier. terminal-paste and SSH startup
-    // commands stay renderer-delivered so xterm/relay can apply their handling.
-    let pendingStartupCommand: PendingStartupCommand | null =
-      shouldDeliverStartupViaTerminalPaste || connectionId
-        ? paneStartup?.command
-          ? { command: paneStartup.command }
-          : null
+    // Why: local and ordinary SSH startup commands are provider-owned so delivery
+    // survives renderer replacement. Only explicit terminal-paste stays renderer-owned.
+    let pendingStartupCommand: PendingStartupCommand | null = shouldDeliverStartupViaTerminalPaste
+      ? paneStartup?.command
+        ? { command: paneStartup.command }
         : null
-    // Why: every renderer-delivered SSH command needs the relay's readiness marker;
-    // the existing fallback preserves shells that cannot emit it.
-    const shouldWaitForSshShellReady =
-      Boolean(connectionId) &&
-      Boolean(pendingStartupCommand) &&
-      !shouldDeliverStartupViaTerminalPaste
-    let sshShellReadyMarkerScan = shouldWaitForSshShellReady
-      ? createShellReadyMarkerScanState()
       : null
-    let sshStartupShellReady = !shouldWaitForSshShellReady
-    const armSshStartupShellReady = (): void => {
-      if (!connectionId || !pendingStartupCommand || shouldDeliverStartupViaTerminalPaste) {
-        return
-      }
-      if (startupInjectTimer !== null) {
-        clearTimeout(startupInjectTimer)
-        startupInjectTimer = null
-      }
-      if (sshShellReadyFallbackTimer !== null) {
-        clearTimeout(sshShellReadyFallbackTimer)
-        sshShellReadyFallbackTimer = null
-      }
-      sshShellReadyMarkerScan = createShellReadyMarkerScanState()
-      sshStartupShellReady = false
-    }
-    const markSshStartupShellReady = (): void => {
-      if (sshStartupShellReady) {
-        return
-      }
-      sshStartupShellReady = true
-      if (sshShellReadyFallbackTimer !== null) {
-        clearTimeout(sshShellReadyFallbackTimer)
-        sshShellReadyFallbackTimer = null
-      }
-      schedulePendingStartupCommandDelivery()
-    }
     const startupDraftReadyScanner = ownsStartupDraftPaste
       ? createDraftPasteReadyScanner(
           startupDraftAgentConfig?.draftPasteReadySignal ?? 'render-quiet-after-bracketed-paste'
@@ -5169,18 +5138,6 @@ export function connectPanePty(
       if (!startup) {
         return
       }
-      if (!sshStartupShellReady) {
-        if (sshShellReadyFallbackTimer === null) {
-          // Why: some SSH shells cannot emit Orca's ready marker. Prefer the
-          // marker when available, but fall back to the old renderer delivery
-          // behavior instead of dropping the startup command forever.
-          sshShellReadyFallbackTimer = setTimeout(() => {
-            sshShellReadyFallbackTimer = null
-            markSshStartupShellReady()
-          }, SSH_SHELL_READY_STARTUP_FALLBACK_MS)
-        }
-        return
-      }
       if (startupInjectTimer !== null) {
         clearTimeout(startupInjectTimer)
       }
@@ -5281,12 +5238,6 @@ export function connectPanePty(
       // a restart-in-place would leak the old TUI's flags into a fresh shell.
       kittyKeyboardModes.reset()
       prepareFreshShellViewportForSpawn(options)
-      if (connectionId && startupOverride?.command) {
-        // Why: SSH providers use `command` only as spawn metadata; the renderer
-        // must still submit the resume command to the fresh remote shell.
-        pendingStartupCommand = { command: startupOverride.command }
-      }
-      armSshStartupShellReady()
       const coldRestoreOverride =
         startupOverride && 'launchConfig' in startupOverride
           ? (startupOverride as ColdRestoreAgentResumeStartup)
@@ -5309,6 +5260,9 @@ export function connectPanePty(
         cols,
         rows,
         ...(startupOverride?.command ? { command: startupOverride.command } : {}),
+        ...(connectionId && startupOverride?.command && !shouldDeliverStartupViaTerminalPaste
+          ? { commandDelivery: 'provider' as const }
+          : {}),
         ...(connectionId && startupOverride?.command
           ? { startupCommandDelivery: 'shell-ready' as const }
           : {}),
@@ -5438,6 +5392,12 @@ export function connectPanePty(
             void window.api.pty.clearPendingPaneSerializer(cacheKey, gen).catch(() => {})
           }
           if (resolvedPtyId && connectionId) {
+            if (
+              shouldUseProviderSshStartupDelivery &&
+              (startupOverride?.command || paneStartup?.command)
+            ) {
+              armStartupDraftReadinessObservation()
+            }
             schedulePendingStartupCommandDelivery()
           }
           finishReattachLiveDataDeferral(Boolean(resolvedPtyId), outputCallbacks.generation)
@@ -5646,6 +5606,8 @@ export function connectPanePty(
       generation: number
       streamGeneration: number
       pendingEscapeTailAnsi?: string
+      kittyKeyboardFlags?: number
+      snapshotSeq?: number
     }
 
     let pendingReplayData: PendingReplayData | null = null
@@ -5699,7 +5661,7 @@ export function connectPanePty(
         // negotiation; the mirror must re-arm from them after a reload. Replay
         // semantics: relay reconnects redeliver the same window, so pushes
         // apply as sets to keep the mirrored stack from accumulating frames.
-        kittyKeyboardModes.scanReplay(data)
+        applySnapshotKittyKeyboardModes(data, payload)
         await writeReplayDataAsync(data)
         if (!isCurrentPayload()) {
           continue
@@ -5775,7 +5737,7 @@ export function connectPanePty(
     }
     const replayDataCallback = (
       data: string,
-      meta: { clearBeforeReplay?: boolean; pendingEscapeTailAnsi?: string } = {},
+      meta: PtyReplayDataMeta = {},
       streamGeneration = transportStreamGeneration
     ): void => {
       pendingReplayData = {
@@ -5784,7 +5746,15 @@ export function connectPanePty(
         ptyId: transport.getPtyId(),
         generation: (replayPayloadGeneration += 1),
         streamGeneration,
-        ...(meta.pendingEscapeTailAnsi ? { pendingEscapeTailAnsi: meta.pendingEscapeTailAnsi } : {})
+        ...(meta.pendingEscapeTailAnsi
+          ? { pendingEscapeTailAnsi: meta.pendingEscapeTailAnsi }
+          : {}),
+        ...(meta.kittyKeyboardFlags !== undefined && meta.snapshotSeq !== undefined
+          ? {
+              kittyKeyboardFlags: meta.kittyKeyboardFlags,
+              snapshotSeq: meta.snapshotSeq
+            }
+          : {})
       }
       scheduleReplayDataDrain()
     }
@@ -5811,15 +5781,17 @@ export function connectPanePty(
               reportRemoteRendererSerializerReady()
             }
           },
+          onStreamRecovered: (): void => {
+            if (isCurrent()) {
+              markHiddenOutputRestoreNeeded()
+            }
+          },
           onData: (data: string, meta?: PtyDataMeta): void => {
             if (isCurrent()) {
               dataCallback(data, meta, generation)
             }
           },
-          onReplayData: (
-            data: string,
-            meta?: { clearBeforeReplay?: boolean; pendingEscapeTailAnsi?: string }
-          ): void => {
+          onReplayData: (data: string, meta?: PtyReplayDataMeta): void => {
             if (isCurrent()) {
               replayDataCallback(data, meta, generation)
             }
@@ -6351,14 +6323,14 @@ export function connectPanePty(
       }
     }
 
+    // Why record-only: DECSET 2031 subscribes to future color changes, it is not a query —
+    // the protocol's query is `CSI ?996n`. fish arms 2031 for the ~1ms it paints a prompt, so
+    // any reply lands after the withdrawal and paints `?997;1n` as literal text (#9993).
     // Why here and not in xterm's CSI handler: xterm batches several PTY chunks into one
-    // synchronous parse, so a handler cannot tell where a chunk ended. fish enables and
-    // disables 2031 around every prompt, so answering a subscribe the same chunk withdraws
-    // pushes `?997;1n` into the prompt or a child's stdin as literal text (#9993). One raw
-    // chunk in, one order-aware decision out.
+    // synchronous parse, so a handler cannot tell where a chunk ended. One raw chunk in,
+    // one order-aware final state out.
     function observeLiveMode2031Chunk(data: string): void {
-      // Main's '2031-subscribe' fact is the sole responder for gate-managed PTYs; a second
-      // reply from here would answer one subscribe twice.
+      // Gate-managed PTYs never see these bytes; main's '2031-subscribe' fact records them.
       if (isHiddenDeliveryGateManagedPty(transport.getPtyId())) {
         return
       }
@@ -6372,13 +6344,13 @@ export function connectPanePty(
         return
       }
       const settings = useAppStore.getState().settings
-      const mode = resolveTerminalColorSchemeMode(settings, getSystemPrefersDark())
-      // Why immediate: the reply must land inside the program's read window, and hidden
-      // snapshot-backed panes skip xterm.write for PTY bytes entirely.
+      // Why seed the mode: maybePushMode2031Flip only pushes on a change, so an unseeded
+      // subscription would read as a flip on the next unrelated appearance re-apply.
       deps.paneMode2031Ref.current.set(pane.id, true)
-      sendDesktopQueryReplyImmediate(mode2031SequenceFor(mode))
-      deps.paneLastThemeModeRef.current.set(pane.id, mode)
-      recordHiddenMode2031Reply()
+      deps.paneLastThemeModeRef.current.set(
+        pane.id,
+        resolveTerminalColorSchemeMode(settings, getSystemPrefersDark())
+      )
     }
 
     // Why installed here: the handler observes CSI 3 J inside xterm's parse, so a
@@ -6792,6 +6764,43 @@ export function connectPanePty(
       }
     }
 
+    /**
+     * Apply an authoritative snapshot to the pane's kitty mirror in the order:
+     * unproven reset, replay-semantics scan of the snapshot
+     * bytes (so screen selection lands first), then the owner's proven flags.
+     *
+     * Why the reset only happens when the owner proved something: an old host
+     * omits the field, and downgrading a mirror that is already tracking live
+     * output would lose correct state instead of preserving it.
+     */
+    function applySnapshotKittyKeyboardModes(
+      snapshotData: string,
+      snapshot: { kittyKeyboardFlags?: number; snapshotSeq?: number }
+    ): void {
+      const proven =
+        snapshot.snapshotSeq === undefined
+          ? undefined
+          : parseTerminalKittyKeyboardFlags(snapshot.kittyKeyboardFlags)
+      if (proven === undefined) {
+        // Why the demotion: a mirror grounded in this PTY's stream keeps its
+        // state, but a constructor-fresh tracker (window reload) holds a
+        // known-zero that was never proven for the reattached PTY — demote it
+        // so the serializer cannot republish it downstream as host-proven
+        // inactive.
+        if (!kittyKeyboardModes.hasProvenBaseline) {
+          kittyKeyboardModes.resetForSnapshot()
+        }
+        kittyKeyboardModes.scanReplay(snapshotData)
+        return
+      }
+      kittyKeyboardModes.resetForSnapshot()
+      kittyKeyboardModes.scanReplay(snapshotData)
+      kittyKeyboardModes.restoreSnapshotFlags(proven)
+      // Why in the same critical section: without the baseline a quiet pane
+      // could not publish a coherent snapshot until unrelated output arrived.
+      recordRendererOrderedSeq({ seq: snapshot.snapshotSeq })
+    }
+
     function recordRendererOrderedSeq(meta?: Pick<PtyDataMeta, 'seq'>): void {
       if (typeof meta?.seq !== 'number') {
         return
@@ -7208,6 +7217,7 @@ export function connectPanePty(
       alternateScreen?: boolean
       scrollbackAnsi?: string
       pendingEscapeTailAnsi?: string
+      kittyKeyboardFlags?: number
     }): Promise<void> {
       const restorePtyId = transport.getPtyId()
       const restoreGeneration = hiddenOutputRestoreGeneration
@@ -7258,19 +7268,29 @@ export function connectPanePty(
                 suppressStructuralReplayPtyResize = false
               }
             }
+            // Why here and not from the writes below: the mirror tracks what the
+            // APPLICATION negotiated, so it must see the snapshot's own bytes
+            // before adopting the flags main proved for this boundary.
+            applySnapshotKittyKeyboardModes(`${snapshot.scrollbackAnsi ?? ''}${snapshot.data}`, {
+              kittyKeyboardFlags: snapshot.kittyKeyboardFlags,
+              snapshotSeq: snapshot.seq
+            })
             // Why shared: the SSH reattach model paint inlines the same
             // choreography (coordinator nesting would deadlock there); one
             // builder keeps the alt-screen branches from drifting.
             skippedAltFrame =
               snapshot.alternateScreen === true &&
               snapshot.frameRestoreAnsi !== undefined &&
-              shouldSkipAltFrameForWidthMismatch(snapshot.cols, readProposedTerminalCols(pane), {
-                skipIfTargetUnknown: true
-              })
-            for (const replayChunk of buildMainModelSnapshotReplayWrites(snapshot, {
-              skipAltFrame: skippedAltFrame
-            })) {
-              writeReplayData(replayChunk)
+              shouldSkipAltFrameForWidthMismatch(snapshot.cols, readProposedTerminalCols(pane))
+            // Why: an imageless success is not proof the pane is empty; normal replay clears screen and scrollback.
+            const snapshotCarriesNoImage =
+              snapshot.alternateScreen !== true && snapshot.data === '' && !snapshot.scrollbackAnsi
+            if (!snapshotCarriesNoImage) {
+              for (const replayChunk of buildMainModelSnapshotReplayWrites(snapshot, {
+                skipAltFrame: skippedAltFrame
+              })) {
+                writeReplayData(replayChunk)
+              }
             }
             // Why: live agents own ?25l/?1004h; a forced ?1004l here would silence focus events until restart (agents enable focus reporting only at startup).
             writeReplayData(
@@ -7660,13 +7680,6 @@ export function connectPanePty(
         // Why: output is the agent-start signal that ends the relaxed no-evidence process-scan cadence (a starting agent always prints).
         agentCompletionCoordinator.observeOutputActivity()
       }
-      if (sshShellReadyMarkerScan) {
-        const scanned = scanForShellReadyMarker(sshShellReadyMarkerScan, data)
-        if (scanned.matched) {
-          markSshStartupShellReady()
-        }
-        data = scanned.output
-      }
       observeStartupDraftPasteReadiness(data)
       resetHiddenOutputRestoreIfPtyChanged()
       observeLiveMode2031Chunk(data)
@@ -7981,7 +7994,10 @@ export function connectPanePty(
                   suppressStructuralReplayPtyResize = false
                 }
               }
-              kittyKeyboardModes.scanReplay(modelData)
+              applySnapshotKittyKeyboardModes(modelData, {
+                kittyKeyboardFlags: snapshot.kittyKeyboardFlags,
+                snapshotSeq: snapshot.seq
+              })
               // Why keep a too-wide frame: preconnect SSH has no live repaint owner or post-restore fit.
               for (const replayChunk of buildMainModelSnapshotReplayWrites(snapshot)) {
                 writeReplayData(replayChunk)
@@ -8202,7 +8218,10 @@ export function connectPanePty(
           }
           writeReplayData('\x1b[2J\x1b[3J\x1b[H')
           // Why: re-arm the kitty keyboard mirror from the snapshot preamble so Option chords keep their encoding after a window reload.
-          kittyKeyboardModes.scanReplay(daemonSnapshotReplay)
+          applySnapshotKittyKeyboardModes(daemonSnapshotReplay, {
+            kittyKeyboardFlags: connectResult.snapshotKittyKeyboardFlags,
+            snapshotSeq: connectResult.snapshotSeq
+          })
           // A narrower fit clips the fixed-grid alt frame; drop it and let SIGWINCH repaint.
           // A dead-owner restore keeps history plus its restored-session treatment;
           // a frozen foreign-width frame would look live when no owner remains.
@@ -8211,8 +8230,7 @@ export function connectPanePty(
             typeof snapshotFrameRestoreAnsi === 'string' &&
             shouldSkipAltFrameForWidthMismatch(
               connectResult.snapshotCols,
-              readProposedTerminalCols(pane),
-              { skipIfTargetUnknown: true }
+              readProposedTerminalCols(pane)
             )
           writeReplayData(
             daemonAltFrameSkippable
@@ -8270,7 +8288,10 @@ export function connectPanePty(
                 suppressStructuralReplayPtyResize = false
               }
             }
-            kittyKeyboardModes.scanReplay(modelData)
+            applySnapshotKittyKeyboardModes(modelData, {
+              kittyKeyboardFlags: modelSnapshot.kittyKeyboardFlags,
+              snapshotSeq: modelSnapshot.seq
+            })
             // Why shared: park+reveal of an alt-screen TUI needs the same
             // ?1049l/?1049h rebuild as applyMainBufferSnapshot (main strips
             // the ?1049h marker when splitting scrollbackAnsi) — inlined here
@@ -8278,10 +8299,7 @@ export function connectPanePty(
             for (const replayChunk of buildMainModelSnapshotReplayWrites(modelSnapshot, {
               skipAltFrame: shouldSkipAltFrameForWidthMismatch(
                 modelCols,
-                readProposedTerminalCols(pane),
-                {
-                  skipIfTargetUnknown: true
-                }
+                readProposedTerminalCols(pane)
               )
             })) {
               writeReplayData(replayChunk)
@@ -8309,6 +8327,11 @@ export function connectPanePty(
             // Relay replay may overlap xterm's pre-disconnect content; clear first to avoid duplication.
             writeReplayData('\x1b[2J\x1b[3J\x1b[H')
             // Why: raw relay replay may contain the app's own kitty pushes; re-arm with set semantics so redelivery can't grow the stack.
+            // A constructor-fresh mirror (window reload) first demotes to unproven:
+            // the replay window proves nothing about negotiations that predate it.
+            if (!kittyKeyboardModes.hasProvenBaseline) {
+              kittyKeyboardModes.resetForSnapshot()
+            }
             kittyKeyboardModes.scanReplay(connectResult.replay)
             writeReplayData(connectResult.replay)
             writeReplayData(
@@ -9337,10 +9360,6 @@ export function connectPanePty(
         clearTimeout(startupInjectTimer)
         startupInjectTimer = null
       }
-      if (sshShellReadyFallbackTimer !== null) {
-        clearTimeout(sshShellReadyFallbackTimer)
-        sshShellReadyFallbackTimer = null
-      }
       cleanupStartupDraftPasteTimers()
       releaseUnattemptedStartupDraftPasteDelivery()
       unregisterAgentHookTerminalLifecycle()
diff --git a/src/renderer/src/components/terminal-pane/pty-input-write-queue.test.ts b/src/renderer/src/components/terminal-pane/pty-input-write-queue.test.ts
index f7d0812f616..251eb04b91c 100644
--- a/src/renderer/src/components/terminal-pane/pty-input-write-queue.test.ts
+++ b/src/renderer/src/components/terminal-pane/pty-input-write-queue.test.ts
@@ -469,7 +469,8 @@ describe('pty input write queue', () => {
   })
 
   it('dual mode-2031 enqueues through the real queue never paint 997 under host echo-safe write', async () => {
-    // Issue path: xterm onData + mode-2031 scan each enqueue mode2031SequenceFor.
+    // Two 997s can still coalesce in one write: a fast theme flip, or an old client that
+    // still answers 2031 subscribes (#9993 made this host silent, mixed versions have not).
     // Drive the real write queue → host intercept (extract + answerLiveQueryReply)
     // → ingress echo strip, and assert no `997;1n` emission at the confirm prompt.
     vi.useFakeTimers()
diff --git a/src/renderer/src/components/terminal-pane/pty-transport-types.ts b/src/renderer/src/components/terminal-pane/pty-transport-types.ts
index d0c20224e5a..1ba841bd823 100644
--- a/src/renderer/src/components/terminal-pane/pty-transport-types.ts
+++ b/src/renderer/src/components/terminal-pane/pty-transport-types.ts
@@ -41,6 +41,21 @@ export type PtyBufferSnapshot = {
    *  before post-snapshot live chunks — so the continuation completes it
    *  exactly as live instead of rendering literal (Bug E / #7329). */
   pendingEscapeTailAnsi?: string
+  /** Effective kitty flags the owner of this image proved at `seq`. Absent
+   *  means unknown; never rewrite that silence into a known `0`. */
+  kittyKeyboardFlags?: number
+}
+
+/** Metadata for one authoritative replay payload. */
+export type PtyReplayDataMeta = {
+  clearBeforeReplay?: boolean
+  pendingEscapeTailAnsi?: string
+  /** Kitty flags the snapshot's owner PROVED at `snapshotSeq`. Absent means
+   *  unknown; the pane tracker must stay unproven rather than assume zero. */
+  kittyKeyboardFlags?: number
+  /** The boundary `kittyKeyboardFlags` describes, recorded as the renderer's
+   *  ordered high-water so a quiet pane can still publish a coherent snapshot. */
+  snapshotSeq?: number
 }
 
 export type LocalPtySessionMetadata = {
@@ -67,6 +82,11 @@ export type PtyConnectResult = {
   snapshotFrameAnsi?: string
   /** Live state to append when omitting `snapshotFrameAnsi`. */
   snapshotFrameRestoreAnsi?: string
+  /** Kitty keyboard flags the daemon snapshot proved, paired with the renderer-
+   *  domain `snapshotSeq` main reconciled for the same attach boundary. Absent
+   *  means unknown, never a proven inactive protocol. */
+  snapshotKittyKeyboardFlags?: number
+  snapshotSeq?: number
   isAlternateScreen?: boolean
   sessionExpired?: boolean
   coldRestore?: { scrollback: string; cwd: string; cols?: number; rows?: number }
@@ -84,12 +104,12 @@ type PtyCallbacks = {
   /** Called before an adopted PTY can publish buffered/live bytes. */
   onReattachDetermined?: () => void
   onConnect?: () => void
+  /** A stream re-established after loss carries only new bytes, so the pane must
+   *  re-pull the host's retained buffer or an idle/exited pane paints nothing. */
+  onStreamRecovered?: () => void
   onDisconnect?: () => void
   onData?: (data: string, meta?: PtyDataMeta) => void
-  onReplayData?: (
-    data: string,
-    meta?: { clearBeforeReplay?: boolean; pendingEscapeTailAnsi?: string }
-  ) => void
+  onReplayData?: (data: string, meta?: PtyReplayDataMeta) => void
   onStatus?: (shell: string) => void
   onError?: (message: string, errors?: string[]) => void
   onExit?: (code: number) => void
@@ -124,6 +144,7 @@ export type PtyTransport = {
      *  Ignored by remote-runtime transports (not gate-markable). */
     initiallyHidden?: boolean
     command?: string
+    commandDelivery?: 'renderer' | 'provider'
     env?: Record<string, string>
     envToDelete?: string[]
     launchConfig?: SleepingAgentLaunchConfig
@@ -204,6 +225,7 @@ export type IpcPtyTransportOptions = {
   env?: Record<string, string>
   envToDelete?: string[]
   command?: string
+  commandDelivery?: 'renderer' | 'provider'
   launchConfig?: SleepingAgentLaunchConfig
   resumeProviderSession?: AgentProviderSessionMetadata
   agentPrompt?: string
diff --git a/src/renderer/src/components/terminal-pane/pty-transport.test.ts b/src/renderer/src/components/terminal-pane/pty-transport.test.ts
index 14ff327146e..a86b0c6bd1e 100644
--- a/src/renderer/src/components/terminal-pane/pty-transport.test.ts
+++ b/src/renderer/src/components/terminal-pane/pty-transport.test.ts
@@ -9,6 +9,7 @@ import {
   encodeTerminalStreamText
 } from '../../../../shared/terminal-stream-protocol'
 import { createTerminalSessionStateSaveFailureMessage } from '../../../../shared/terminal-session-state-save-failure'
+import { TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY } from '../../../../shared/protocol-version'
 import {
   TERMINAL_INPUT_CHUNK_MAX_BYTES,
   TERMINAL_INPUT_MAX_BYTES
@@ -96,6 +97,24 @@ describe('createIpcPtyTransport', () => {
     transport.disconnect()
   })
 
+  it('threads provider command ownership through the spawn IPC', async () => {
+    const { createIpcPtyTransport } = await import('./pty-transport')
+    const transport = createIpcPtyTransport({
+      command: 'printf ready',
+      commandDelivery: 'provider'
+    })
+
+    await transport.connect({ url: '', callbacks: {} })
+
+    expect(window.api.pty.spawn).toHaveBeenCalledWith(
+      expect.objectContaining({
+        command: 'printf ready',
+        commandDelivery: 'provider'
+      })
+    )
+    transport.disconnect()
+  })
+
   it('routes a rejected daemon write to the owning transport recovery callback', async () => {
     const { createIpcPtyTransport } = await import('./pty-transport')
     const recovery = vi.fn()
@@ -2494,7 +2513,10 @@ describe('createRemoteRuntimePtyTransport', () => {
             result: {
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: [
+                'agent-session.host-authority.v1',
+                TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY
+              ]
             },
             _meta: { runtimeId: 'runtime-remote' }
           }
@@ -2593,12 +2615,14 @@ describe('createRemoteRuntimePtyTransport', () => {
         worktree: 'id:repo1::/remote/wt',
         clientMutationId: expect.any(String),
         command: 'claude',
-        env: { ORCA_TAB_ID: 'tab-1' },
+        env: { ORCA_TAB_ID: 'tab-1', ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         tabId: 'tab-1',
         leafId: '11111111-1111-4111-8111-111111111111',
         focus: false,
         presentation: 'background'
       },
+      expectedEnvironmentPairingRevision: undefined,
       timeoutMs: 15_000
     })
     expect(runtimeSubscribe).toHaveBeenCalledWith(
@@ -2650,20 +2674,34 @@ describe('createRemoteRuntimePtyTransport', () => {
   })
 
   it('reports a host stable-pane adoption as reattach without fresh-spawn ownership', async () => {
-    runtimeCall.mockResolvedValue({
-      id: 'rpc-create',
-      ok: true,
-      result: {
-        terminal: {
-          handle: 'term-original',
-          worktreeId: 'repo1::/remote/wt',
-          title: 'Original',
-          surface: 'background',
-          isReattach: true
-        }
-      },
-      _meta: { runtimeId: 'runtime-remote' }
-    })
+    runtimeCall.mockImplementation(async (args: { method?: string }) =>
+      args.method === 'status.get'
+        ? {
+            id: 'rpc-status',
+            ok: true,
+            result: {
+              runtimeId: 'runtime-remote',
+              runtimeProtocolVersion: 3,
+              minCompatibleRuntimeClientVersion: 2,
+              capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY]
+            },
+            _meta: { runtimeId: 'runtime-remote' }
+          }
+        : {
+            id: 'rpc-create',
+            ok: true,
+            result: {
+              terminal: {
+                handle: 'term-original',
+                worktreeId: 'repo1::/remote/wt',
+                title: 'Original',
+                surface: 'background',
+                isReattach: true
+              }
+            },
+            _meta: { runtimeId: 'runtime-remote' }
+          }
+    )
     const onPtySpawn = vi.fn()
     const onReattachDetermined = vi.fn()
     const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
@@ -2791,6 +2829,7 @@ describe('createRemoteRuntimePtyTransport', () => {
         },
         presentation: 'background'
       },
+      expectedEnvironmentPairingRevision: undefined,
       timeoutMs: 15_000
     })
     expect(runtimeCall).not.toHaveBeenCalledWith(
@@ -2816,9 +2855,13 @@ describe('createRemoteRuntimePtyTransport', () => {
             id: 'rpc-status',
             ok: true,
             result: {
+              runtimeId: 'runtime-remote',
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: [
+                'agent-session.host-authority.v1',
+                TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY
+              ]
             }
           }
     )
@@ -2864,6 +2907,7 @@ describe('createRemoteRuntimePtyTransport', () => {
         },
         presentation: 'background'
       },
+      expectedEnvironmentPairingRevision: undefined,
       timeoutMs: 15_000
     })
     expect(runtimeCall).not.toHaveBeenCalledWith(
diff --git a/src/renderer/src/components/terminal-pane/pty-transport.ts b/src/renderer/src/components/terminal-pane/pty-transport.ts
index 3198281df9b..9eddfae0155 100644
--- a/src/renderer/src/components/terminal-pane/pty-transport.ts
+++ b/src/renderer/src/components/terminal-pane/pty-transport.ts
@@ -66,6 +66,7 @@ export type {
   LocalPtySessionMetadata,
   PtyBufferSnapshot,
   PtyConnectResult,
+  PtyReplayDataMeta,
   PtyTransport
 } from './pty-transport-types'
 export { extractLastOscTitle } from '../../../../shared/agent-detection'
@@ -104,6 +105,9 @@ type ProcessPtyOutputOptions = {
   clearBeforeReplay?: boolean
   // Why: a mid-escape tail; the replay consumer writes it LAST (after the post-replay reset) so the next live chunk completes it, not renders it literally (#7329).
   pendingEscapeTailAnsi?: string
+  /** Kitty flags the snapshot owner proved at `snapshotSeq`. */
+  kittyKeyboardFlags?: number
+  snapshotSeq?: number
 }
 
 type PendingPtySideEffect = {
@@ -496,7 +500,13 @@ export function createPtyOutputProcessor({
         ...(options.clearBeforeReplay === false ? { clearBeforeReplay: false } : {}),
         ...(options.pendingEscapeTailAnsi
           ? { pendingEscapeTailAnsi: options.pendingEscapeTailAnsi }
-          : {})
+          : {}),
+        // Why forwarded together: the flags are only valid for the boundary the
+        // image describes, so they never travel without their sequence.
+        ...(options.kittyKeyboardFlags !== undefined
+          ? { kittyKeyboardFlags: options.kittyKeyboardFlags }
+          : {}),
+        ...(options.snapshotSeq !== undefined ? { snapshotSeq: options.snapshotSeq } : {})
       }
       // Why: preserve the bare-data call shape when there's no replay metadata, so eager-buffer replay (which passes none) is unchanged.
       if (Object.keys(replayMeta).length > 0) {
@@ -550,6 +560,7 @@ export function createIpcPtyTransport(opts: IpcPtyTransportOptions = {}): PtyTra
     env,
     envToDelete,
     command,
+    commandDelivery,
     launchConfig,
     resumeProviderSession,
     launchToken,
@@ -809,6 +820,9 @@ export function createIpcPtyTransport(opts: IpcPtyTransportOptions = {}): PtyTra
             ? { envToDelete: options.envToDelete ?? envToDelete }
             : {}),
           command: options.command ?? command,
+          ...((options.commandDelivery ?? commandDelivery)
+            ? { commandDelivery: options.commandDelivery ?? commandDelivery }
+            : {}),
           ...((options.launchConfig ?? launchConfig)
             ? { launchConfig: options.launchConfig ?? launchConfig }
             : {}),
diff --git a/src/renderer/src/components/terminal-pane/remote-hidden-output-restore-outcomes.test.ts b/src/renderer/src/components/terminal-pane/remote-hidden-output-restore-outcomes.test.ts
index 0c9b286703c..0e98202aab3 100644
--- a/src/renderer/src/components/terminal-pane/remote-hidden-output-restore-outcomes.test.ts
+++ b/src/renderer/src/components/terminal-pane/remote-hidden-output-restore-outcomes.test.ts
@@ -32,6 +32,7 @@ function leafIdForPane(paneId: number): string {
 type ConnectCallbacks = {
   onReattachDetermined?: () => void
   onConnect?: () => void
+  onStreamRecovered?: () => void
   onData?: (
     data: string,
     meta?: { seq?: number; rawLength?: number; background?: boolean; droppedOutput?: boolean }
@@ -379,6 +380,7 @@ type RemotePaneDrive = {
   disposable: { dispose: () => void }
   deliver: (data: string, seq: number) => void
   setOutputPaused: (paused: boolean) => void
+  recoverStream: () => void
   writtenChunks: () => string[]
 }
 
@@ -396,9 +398,11 @@ async function connectHiddenRemoteAgentPane(
   const capturedOutputPauseCallback: {
     current: ((paused: boolean, supported: boolean) => void) | null
   } = { current: null }
+  const capturedStreamRecoveredCallback: { current: (() => void) | null } = { current: null }
   transport.connect.mockImplementation(async ({ callbacks }: { callbacks?: ConnectCallbacks }) => {
     capturedDataCallback.current = callbacks?.onData ?? null
     capturedOutputPauseCallback.current = callbacks?.onOutputPauseChanged ?? null
+    capturedStreamRecoveredCallback.current = callbacks?.onStreamRecovered ?? null
     return REMOTE_PTY_ID
   })
   transportFactoryQueue.push(transport)
@@ -415,6 +419,7 @@ async function connectHiddenRemoteAgentPane(
     disposable,
     deliver: (data, seq) => capturedDataCallback.current?.(data, { seq, rawLength: data.length }),
     setOutputPaused: (paused) => capturedOutputPauseCallback.current?.(paused, true),
+    recoverStream: () => capturedStreamRecoveredCallback.current?.(),
     writtenChunks: () => pane.terminal.write.mock.calls.map(([data]) => String(data))
   }
 }
@@ -618,6 +623,24 @@ describe('remote hidden-output restore outcomes', () => {
     resetAgentStartupDelayedDeliveryForTests()
   })
 
+  it('[modern] repaints a recovered visible pane from the retained host buffer', async () => {
+    const serializeBuffer = vi.fn()
+    const serializeBufferOutcome = vi.fn().mockResolvedValue({
+      availability: { kind: 'snapshot' },
+      snapshot: HOST_SNAPSHOT
+    })
+    const drive = await connectHiddenRemoteAgentPane(serializeBuffer, serializeBufferOutcome)
+    ;(drive.deps.isVisibleRef as { current: boolean }).current = true
+
+    drive.recoverStream()
+    await flushAsyncTicks(20)
+
+    expect(serializeBufferOutcome).toHaveBeenCalledTimes(1)
+    expect(drive.writtenChunks().join('')).toContain(HOST_SNAPSHOT_MARKER)
+    expect(serializeBuffer).not.toHaveBeenCalled()
+    drive.disposable.dispose()
+  })
+
   it('[modern] accepts an empty snapshot as successful recovery without a loss banner', async () => {
     const serializeBuffer = vi.fn()
     const serializeBufferOutcome = vi.fn().mockResolvedValue({
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.test.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.test.ts
index 0292d0b1749..c160188f64d 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.test.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.test.ts
@@ -14,7 +14,12 @@ import {
   TERMINAL_INPUT_MAX_BYTES
 } from '../../../../shared/terminal-input'
 import { CLIPBOARD_TEXT_MEASURE_YIELD_CODE_UNITS } from '../../../../shared/clipboard-text'
-import { TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY } from '../../../../shared/protocol-version'
+import {
+  MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+  RUNTIME_PROTOCOL_VERSION,
+  TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+  TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY
+} from '../../../../shared/protocol-version'
 
 describe('createRemoteRuntimePtyTransport', () => {
   const runtimeCall = vi.fn()
@@ -113,6 +118,19 @@ describe('createRemoteRuntimePtyTransport', () => {
     }
   }
 
+  function currentRuntimeStatus(capabilities: string[] = []): unknown {
+    return {
+      ok: true,
+      result: {
+        runtimeId: 'runtime-1',
+        graphStatus: 'ready',
+        runtimeProtocolVersion: RUNTIME_PROTOCOL_VERSION,
+        minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+        capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY, ...capabilities]
+      }
+    }
+  }
+
   function emitOutput(streamId: number, data: string): void {
     subscriptionCallbacks?.onBinary?.(
       encodeTerminalStreamFrame({
@@ -187,6 +205,18 @@ describe('createRemoteRuntimePtyTransport', () => {
     subscriptionSendBinary.mockReset()
     refreshSessionTabsSnapshot.mockClear()
     runtimeCall.mockImplementation(async (request: { method: string; params?: unknown }) => {
+      if (request.method === 'status.get') {
+        return {
+          ok: true,
+          result: {
+            runtimeId: 'runtime-1',
+            graphStatus: 'ready',
+            runtimeProtocolVersion: RUNTIME_PROTOCOL_VERSION,
+            minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+            capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY]
+          }
+        }
+      }
       if (request.method === 'session.tabs.activate') {
         const params = request.params as { tabId: string; leafId?: string }
         const resolvedLeafId = params.leafId ?? 'pane:1'
@@ -541,10 +571,7 @@ describe('createRemoteRuntimePtyTransport', () => {
     let createCalls = 0
     runtimeCall.mockImplementation(async (args: { method: string; params?: unknown }) => {
       if (args.method === 'status.get') {
-        return {
-          ok: true,
-          result: { capabilities: [TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY] }
-        }
+        return currentRuntimeStatus([TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY])
       }
       if (args.method === 'terminal.create') {
         createCalls += 1
@@ -592,13 +619,14 @@ describe('createRemoteRuntimePtyTransport', () => {
     try {
       const startedAt = Date.now()
       let createCalls = 0
+      let statusCalls = 0
       runtimeCall.mockImplementation(async (args: { method: string }) => {
         if (args.method === 'status.get') {
-          vi.setSystemTime(startedAt + 59_000)
-          return {
-            ok: true,
-            result: { capabilities: [TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY] }
+          statusCalls += 1
+          if (statusCalls > 1) {
+            vi.setSystemTime(startedAt + 59_000)
           }
+          return currentRuntimeStatus([TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY])
         }
         if (args.method === 'terminal.create') {
           createCalls += 1
@@ -632,7 +660,7 @@ describe('createRemoteRuntimePtyTransport', () => {
   it('does not retry an unknown create outcome against an older runtime', async () => {
     runtimeCall.mockImplementation(async (args: { method: string }) => {
       if (args.method === 'status.get') {
-        return { ok: true, result: { capabilities: [] } }
+        return currentRuntimeStatus()
       }
       throw Object.assign(new Error('Timed out waiting for the remote Orca runtime.'), {
         code: 'runtime_timeout'
@@ -653,12 +681,16 @@ describe('createRemoteRuntimePtyTransport', () => {
   })
 
   it('surfaces an authoritative capability-probe failure after an unknown create outcome', async () => {
+    let statusCalls = 0
     runtimeCall.mockImplementation(async (args: { method: string }) => {
-      if (args.method === 'status.get') {
+      if (args.method === 'status.get' && ++statusCalls > 1) {
         throw Object.assign(new Error('Remote runtime pairing credentials expired.'), {
           code: 'unauthorized'
         })
       }
+      if (args.method === 'status.get') {
+        return currentRuntimeStatus([TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY])
+      }
       throw Object.assign(new Error('Timed out waiting for the remote Orca runtime.'), {
         code: 'runtime_timeout'
       })
@@ -694,10 +726,7 @@ describe('createRemoteRuntimePtyTransport', () => {
               }, args.timeoutMs)
             })
           }
-          return {
-            ok: true,
-            result: { capabilities: [TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY] }
-          }
+          return currentRuntimeStatus([TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY])
         }
         if (args.method === 'terminal.create' && reachable) {
           return { ok: true, result: { terminal: { handle: 'terminal-recovered' } } }
@@ -763,9 +792,10 @@ describe('createRemoteRuntimePtyTransport', () => {
           return {
             ok: true,
             result: {
+              runtimeId: 'runtime-1',
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
             }
           }
         }
@@ -813,9 +843,65 @@ describe('createRemoteRuntimePtyTransport', () => {
         .filter((args) => args.method === 'terminal.createAgentSession')
       expect(allCreates.every((args) => args.params?.clientOperationId === operationId)).toBe(true)
       expect(runtimeCall.mock.calls.some(([args]) => args.method === 'terminal.create')).toBe(false)
-      expect(runtimeCall.mock.calls.filter(([args]) => args.method === 'status.get')).toHaveLength(
-        1
+      expect(
+        runtimeCall.mock.calls.filter(([args]) => args.method === 'status.get').length
+      ).toBeGreaterThan(1)
+      transport.destroy?.()
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('refuses structured replay after an in-place host downgrade', async () => {
+    vi.useFakeTimers()
+    try {
+      let statusCalls = 0
+      const onError = vi.fn()
+      runtimeCall.mockImplementation(async (args: { method: string }) => {
+        if (args.method === 'status.get') {
+          statusCalls += 1
+          return {
+            ok: true,
+            result: {
+              runtimeId: 'runtime-1',
+              runtimeProtocolVersion: 3,
+              minCompatibleRuntimeClientVersion: 2,
+              capabilities:
+                statusCalls === 1
+                  ? ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
+                  : ['agent-session.host-authority.v1']
+            }
+          }
+        }
+        if (args.method === 'terminal.createAgentSession') {
+          throw Object.assign(new Error('Timed out waiting for the remote Orca runtime.'), {
+            code: 'runtime_timeout'
+          })
+        }
+        return { ok: true, result: {} }
+      })
+      const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+      const transport = createRemoteRuntimePtyTransport('env-1', {
+        worktreeId: 'wt-1',
+        tabId: 'tab-1',
+        leafId: 'pane:1',
+        launchAgent: 'codex'
+      })
+
+      const connect = transport.connect({ url: '', callbacks: { onError } })
+      await vi.advanceTimersByTimeAsync(250)
+      await connect
+
+      expect(onError).toHaveBeenCalledWith(
+        expect.stringContaining('no fallback launch was attempted')
       )
+      expect(
+        runtimeCall.mock.calls.filter(([args]) => args.method === 'terminal.createAgentSession')
+      ).toHaveLength(1)
+      expect(runtimeCall.mock.calls.filter(([args]) => args.method === 'status.get')).toHaveLength(
+        2
+      )
+      expect(runtimeCall.mock.calls.some(([args]) => args.method === 'terminal.create')).toBe(false)
       transport.destroy?.()
     } finally {
       vi.useRealTimers()
@@ -3855,6 +3941,9 @@ describe('createRemoteRuntimePtyTransport', () => {
   it('closes a remote terminal created after the pane was destroyed', async () => {
     let resolveCreate: (value: unknown) => void = () => {}
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return new Promise((resolve) => {
           resolveCreate = resolve
@@ -3870,6 +3959,11 @@ describe('createRemoteRuntimePtyTransport', () => {
     })
 
     const connect = transport.connect({ url: '', callbacks: {} })
+    await vi.waitFor(() =>
+      expect(runtimeCall).toHaveBeenCalledWith(
+        expect.objectContaining({ method: 'terminal.create' })
+      )
+    )
     transport.destroy?.()
     resolveCreate({ ok: true, result: { terminal: { handle: 'terminal-late' } } })
     await connect
@@ -3878,13 +3972,17 @@ describe('createRemoteRuntimePtyTransport', () => {
       selector: 'env-1',
       method: 'terminal.close',
       params: { terminal: 'terminal-late' },
-      timeoutMs: 15_000
+      timeoutMs: 15_000,
+      expectedEnvironmentPairingRevision: undefined
     })
   })
 
   it('cannot let a stale create completion replace a newer attached terminal', async () => {
     let resolveCreate: (value: unknown) => void = () => {}
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return new Promise((resolve) => {
           resolveCreate = resolve
@@ -3900,6 +3998,11 @@ describe('createRemoteRuntimePtyTransport', () => {
     })
 
     const connect = transport.connect({ url: '', callbacks: {} })
+    await vi.waitFor(() =>
+      expect(runtimeCall).toHaveBeenCalledWith(
+        expect.objectContaining({ method: 'terminal.create' })
+      )
+    )
     transport.attach({ existingPtyId: 'remote:env-2@@terminal-attached', callbacks: {} })
     resolveCreate({ ok: true, result: { terminal: { handle: 'terminal-late' } } })
     await connect
@@ -3910,7 +4013,8 @@ describe('createRemoteRuntimePtyTransport', () => {
       selector: 'env-1',
       method: 'terminal.close',
       params: { terminal: 'terminal-late' },
-      timeoutMs: 15_000
+      timeoutMs: 15_000,
+      expectedEnvironmentPairingRevision: undefined
     })
     transport.destroy?.()
   })
@@ -3924,7 +4028,7 @@ describe('createRemoteRuntimePtyTransport', () => {
           result: {
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         })
       }
@@ -3974,7 +4078,7 @@ describe('createRemoteRuntimePtyTransport', () => {
           result: {
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         })
       }
@@ -4089,7 +4193,7 @@ describe('createRemoteRuntimePtyTransport', () => {
         method: 'terminal.create',
         params: expect.objectContaining({
           command: "codex 'linked issue context'",
-          envToDelete: ['CODEX_HOME', 'ORCA_CODEX_HOME'],
+          envToDelete: ['CODEX_HOME', 'ORCA_CODEX_HOME', 'ORCA_ENABLE_GIT_ATTRIBUTION'],
           startupCommandDelivery: 'shell-ready',
           terminalColorQueryReplies: { foreground: '#ffffff', background: '#282c34' }
         })
@@ -4105,7 +4209,11 @@ describe('createRemoteRuntimePtyTransport', () => {
             result: {
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1', 'agent-session.omp-resume-path.v1']
+              capabilities: [
+                'agent-session.host-authority.v1',
+                'agent-session.omp-resume-path.v1',
+                'terminal.attribution-removed.v1'
+              ]
             }
           }
         : { ok: true, result: { terminal: { handle: 'terminal-1' } } }
@@ -4169,7 +4277,7 @@ describe('createRemoteRuntimePtyTransport', () => {
             result: {
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
             }
           }
         : {
@@ -4219,9 +4327,10 @@ describe('createRemoteRuntimePtyTransport', () => {
         ? {
             ok: true,
             result: {
+              runtimeId: 'runtime-1',
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: []
+              capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY]
             }
           }
         : { ok: true, result: { terminal: { handle: 'terminal-legacy' } } }
@@ -4257,7 +4366,12 @@ describe('createRemoteRuntimePtyTransport', () => {
         worktree: 'id:wt-1',
         clientMutationId: expect.any(String),
         command: "codex '--model' 'gpt-5' 'resume' 'session-1'",
-        env: { CODEX_PROFILE: 'captured', ORCA_AGENT_LAUNCH_TOKEN: 'fresh-token' },
+        env: {
+          CODEX_PROFILE: 'captured',
+          ORCA_AGENT_LAUNCH_TOKEN: 'fresh-token',
+          ORCA_ATTRIBUTION_BYPASS: '1'
+        },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         launchConfig: {
           agentArgs: '--model gpt-5',
           agentEnv: { CODEX_PROFILE: 'captured' }
@@ -4269,7 +4383,9 @@ describe('createRemoteRuntimePtyTransport', () => {
         focus: false,
         presentation: 'background'
       },
-      timeoutMs: 15_000
+      timeoutMs: 15_000,
+      expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'runtime-1'
     })
     expect(runtimeCall).not.toHaveBeenCalledWith(
       expect.objectContaining({ method: 'terminal.createAgentSession' })
@@ -5054,6 +5170,91 @@ describe('createRemoteRuntimePtyTransport', () => {
     transport.destroy?.()
   })
 
+  it('re-arms the retained-buffer restore when a recovery subscribe replays no snapshot', async () => {
+    const { createRemoteRuntimePtyTransport } = await import('./remote-runtime-pty-transport')
+    const onReplayData = vi.fn()
+    const onStreamRecovered = vi.fn()
+    const onConnect = vi.fn()
+    const transport = createRemoteRuntimePtyTransport('env-1', {
+      worktreeId: 'wt-1',
+      tabId: 'tab-1',
+      leafId: 'pane:1'
+    })
+
+    await transport.connect({
+      url: '',
+      callbacks: { onReplayData, onStreamRecovered, onConnect }
+    })
+    await vi.waitFor(() => expect(subscriptionSendBinary).toHaveBeenCalled())
+    const firstStreamId = latestSubscribePayload().streamId
+    emitSnapshot(firstStreamId, 'INITIAL_SNAPSHOT')
+    subscriptionCallbacks?.onResponse({
+      ok: true,
+      result: {
+        type: 'subscribed',
+        streamId: firstStreamId,
+        capabilities: { outputPause: 1 }
+      }
+    })
+    await vi.waitFor(() => expect(onConnect).toHaveBeenCalledTimes(1))
+    // The first subscribe already carries the host snapshot; re-arming there would cost
+    // every pane a redundant restore request on open.
+    expect(onStreamRecovered).not.toHaveBeenCalled()
+
+    subscriptionCallbacks?.onClose?.()
+    await vi.waitFor(() => expect(runtimeSubscribe).toHaveBeenCalledTimes(2))
+    await vi.waitFor(() =>
+      expect(
+        subscriptionSendBinary.mock.calls
+          .map((call) => decodeTerminalStreamFrame(call[0]))
+          .filter((frame) => frame?.opcode === TerminalStreamOpcode.Subscribe)
+      ).toHaveLength(2)
+    )
+    const reconnectStreamId = latestSubscribePayload().streamId
+    // An exited-but-preserved pane has nothing to push and will never emit live bytes,
+    // so without the re-arm the pane stays blank until a visibility flip.
+    emitSnapshot(reconnectStreamId, '')
+    subscriptionCallbacks?.onResponse({
+      ok: true,
+      result: {
+        type: 'subscribed',
+        streamId: reconnectStreamId,
+        capabilities: { outputPause: 1 }
+      }
+    })
+
+    await vi.waitFor(() => expect(onStreamRecovered).toHaveBeenCalledTimes(1))
+    expect(onReplayData.mock.calls.map((call) => call[0])).toEqual(['INITIAL_SNAPSHOT'])
+
+    subscriptionCallbacks?.onClose?.()
+    await vi.waitFor(() => expect(runtimeSubscribe).toHaveBeenCalledTimes(3))
+    await vi.waitFor(() =>
+      expect(
+        subscriptionSendBinary.mock.calls
+          .map((call) => decodeTerminalStreamFrame(call[0]))
+          .filter((frame) => frame?.opcode === TerminalStreamOpcode.Subscribe)
+      ).toHaveLength(3)
+    )
+    const populatedReconnectStreamId = latestSubscribePayload().streamId
+    emitSnapshot(populatedReconnectStreamId, 'RECOVERY_SNAPSHOT')
+    subscriptionCallbacks?.onResponse({
+      ok: true,
+      result: {
+        type: 'subscribed',
+        streamId: populatedReconnectStreamId,
+        capabilities: { outputPause: 1 }
+      }
+    })
+
+    await vi.waitFor(() => expect(onConnect).toHaveBeenCalledTimes(3))
+    expect(onStreamRecovered).toHaveBeenCalledTimes(1)
+    expect(onReplayData.mock.calls.map((call) => call[0])).toEqual([
+      'INITIAL_SNAPSHOT',
+      'RECOVERY_SNAPSHOT'
+    ])
+    transport.destroy?.()
+  })
+
   it('backs off before retrying a capacity-rejected terminal stream', async () => {
     vi.useFakeTimers()
     try {
@@ -5601,6 +5802,9 @@ describe('createRemoteRuntimePtyTransport', () => {
 
   it('returns runtime acceptance for acknowledged terminal input', async () => {
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
       }
@@ -5640,6 +5844,9 @@ describe('createRemoteRuntimePtyTransport', () => {
     vi.useFakeTimers()
     try {
       runtimeCall.mockImplementation((args) => {
+        if (args.method === 'status.get') {
+          return Promise.resolve(currentRuntimeStatus())
+        }
         if (args.method === 'terminal.create') {
           return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
         }
@@ -5685,6 +5892,9 @@ describe('createRemoteRuntimePtyTransport', () => {
 
   it('returns false when acknowledged terminal input is rejected by the runtime', async () => {
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
       }
@@ -5710,6 +5920,9 @@ describe('createRemoteRuntimePtyTransport', () => {
 
   it('splits large acknowledged remote input before terminal.send RPCs', async () => {
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
       }
@@ -5749,6 +5962,9 @@ describe('createRemoteRuntimePtyTransport', () => {
     vi.useFakeTimers()
     try {
       runtimeCall.mockImplementation((args) => {
+        if (args.method === 'status.get') {
+          return Promise.resolve(currentRuntimeStatus())
+        }
         if (args.method === 'terminal.create') {
           return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
         }
@@ -5798,6 +6014,9 @@ describe('createRemoteRuntimePtyTransport', () => {
     const firstChunk = 'x'.repeat(TERMINAL_INPUT_CHUNK_MAX_BYTES)
     const rejectedChunk = `tail${'y'.repeat(TERMINAL_INPUT_CHUNK_MAX_BYTES - 4)}`
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
       }
@@ -5836,6 +6055,9 @@ describe('createRemoteRuntimePtyTransport', () => {
 
   it('rejects oversized acknowledged remote input before runtime RPCs', async () => {
     runtimeCall.mockImplementation((args) => {
+      if (args.method === 'status.get') {
+        return Promise.resolve(currentRuntimeStatus())
+      }
       if (args.method === 'terminal.create') {
         return Promise.resolve({ ok: true, result: { terminal: { handle: 'terminal-1' } } })
       }
diff --git a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
index d34bd384511..35189447c57 100644
--- a/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
+++ b/src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
@@ -20,8 +20,11 @@ import type {
   RuntimeTerminalSend
 } from '../../../../shared/runtime-types'
 import {
+  AGENT_SESSION_HOST_AUTHORITY_RUNTIME_CAPABILITY,
   AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY,
-  TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY
+  TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+  TERMINAL_CREATE_IDEMPOTENCY_RUNTIME_CAPABILITY,
+  type RuntimeCapability
 } from '../../../../shared/protocol-version'
 import {
   isTerminalInputTooLargeWithDeferredMeasurement,
@@ -34,7 +37,11 @@ import type {
   PtyTransportRecoveryState
 } from './pty-transport-types'
 import { createPtyOutputProcessor } from './pty-transport'
-import { RuntimeRpcCallError, unwrapRuntimeRpcResult } from '../../runtime/runtime-rpc-client'
+import {
+  RuntimeRpcCallError,
+  unwrapRuntimeRpcResult,
+  type LiveRuntimeEnvironmentAuthority
+} from '../../runtime/runtime-rpc-client'
 import {
   getRemoteRuntimePtyEnvironmentId,
   getRemoteRuntimeTerminalHandle,
@@ -83,6 +90,10 @@ import {
   ptyShutdownLifecycleHandlers
 } from './pty-shutdown-data-suspension'
 import { getRuntimeEnvironmentRevision } from '@/runtime/runtime-environment-revision'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../../shared/legacy-terminal-attribution-env'
 
 const REMOTE_TERMINAL_INPUT_FLUSH_MS = 8
 const REMOTE_TERMINAL_VIEWPORT_FLUSH_MS = 33
@@ -92,6 +103,8 @@ const HOST_SESSION_ATTACH_TIMEOUT_MS = 15_000
 const HOST_SESSION_INVENTORY_MAX_WINDOWS_PER_RECOVERY = 2
 const HOST_SESSION_SAME_HANDLE_END_REUSE_LIMIT = 2
 const TERMINAL_CREATE_RETRY_DELAYS_MS = [250, 500, 1000, 2000, 4000, 8000, 15_000, 30_000] as const
+const AGENT_SESSION_REPLAY_UPDATE_REQUIRED_MESSAGE =
+  'Remote agent recovery requires the same updated Orca server that accepted the launch. Update the workspace host and try again; no fallback launch was attempted.'
 
 type HostHandleReplacementPolicy = 'reuse' | 'prefer-replacement' | 'require-replacement'
 
@@ -358,6 +371,7 @@ export function createRemoteRuntimePtyTransport(
   // Why: reconnect retries must replay one host operation instead of creating
   // another fresh agent when the first response was lost.
   const agentCreateOperation = createAgentSessionCreateOperation()
+  let agentSessionCreateAuthority: LiveRuntimeEnvironmentAuthority | null = null
   const outputProcessor = createPtyOutputProcessor({
     onTitleChange,
     onBell,
@@ -852,14 +866,16 @@ export function createRemoteRuntimePtyTransport(
     environmentId: string,
     method: string,
     params?: unknown,
-    timeoutMs = 15_000
+    timeoutMs = 15_000,
+    expectedRuntimeId?: string
   ): Promise<TResult> {
     const response = await window.api.runtimeEnvironments.call({
       selector: environmentId,
       method,
       params,
       timeoutMs,
-      expectedEnvironmentPairingRevision: runtimeEnvironmentPairingRevision
+      expectedEnvironmentPairingRevision: runtimeEnvironmentPairingRevision,
+      ...(expectedRuntimeId ? { expectedRuntimeId } : {})
     })
     return unwrapRuntimeRpcResult(response as RuntimeRpcResponse<TResult>)
   }
@@ -908,7 +924,8 @@ export function createRemoteRuntimePtyTransport(
       reconcileExisting: boolean
     ) => Promise<RemoteAgentSessionLaunchResult>,
     environmentId: string,
-    expectedLifecycleEpoch: number
+    expectedLifecycleEpoch: number,
+    beforeReplay?: (timeoutMs: number) => Promise<void>
   ): Promise<RemoteAgentSessionLaunchResult | null> {
     let retryAttempt = 0
     // Structured operations already carry their replay proof; ordinary terminal.create
@@ -993,6 +1010,9 @@ export function createRemoteRuntimePtyTransport(
         break
       }
       try {
+        if (reconcileExisting) {
+          await beforeReplay?.(Math.min(5_000, createRemainingMs ?? 5_000))
+        }
         return await invoke(Math.min(15_000, createRemainingMs ?? 15_000), reconcileExisting)
       } catch (error) {
         lastError = error
@@ -1735,6 +1755,7 @@ export function createRemoteRuntimePtyTransport(
     setAttachmentReady(false)
     let transportClosed = false
     let subscriptionAttached = false
+    let subscriptionSnapshotHadContent = false
     // Why: viewport handed to subscribe; a resize during the round-trip falls back to the refresh-only one-shot RPC, replayed through the stream below once current.
     const subscribedViewport = desiredViewport
     const isCurrentSubscription = (): boolean =>
@@ -1760,6 +1781,7 @@ export function createRemoteRuntimePtyTransport(
         onSnapshot: (data, meta) => {
           // Why: an empty snapshot can still carry a pending mid-escape tail that must replay so the next live chunk completes it.
           if ((data || meta?.pendingEscapeTailAnsi) && isCurrentSubscription()) {
+            subscriptionSnapshotHadContent = true
             if (subscribedPtyId && bufferPtyShutdownReplayData(subscribedPtyId, data)) {
               return
             }
@@ -1768,6 +1790,14 @@ export function createRemoteRuntimePtyTransport(
               suppressAttentionEvents: true,
               ...(meta?.pendingEscapeTailAnsi
                 ? { pendingEscapeTailAnsi: meta.pendingEscapeTailAnsi }
+                : {}),
+              // Why both or neither: the host's flags describe this image's own
+              // boundary, so an unsequenced snapshot proves nothing.
+              ...(meta?.kittyKeyboardFlags !== undefined && meta.seq !== undefined
+                ? {
+                    kittyKeyboardFlags: meta.kittyKeyboardFlags,
+                    snapshotSeq: meta.seq
+                  }
                 : {})
             })
           }
@@ -1798,6 +1828,12 @@ export function createRemoteRuntimePtyTransport(
           markRecoveryHealthy()
           emitRecoveryState()
           storedCallbacks.onConnect?.()
+          // Why: a recovery subscribe replays nothing when the host's push snapshot is
+          // empty (idle or exited pane), so ask for the retained buffer instead of
+          // waiting for bytes that an exited process will never send.
+          if (expectedRecoveryEpoch !== undefined && !subscriptionSnapshotHadContent) {
+            storedCallbacks.onStreamRecovered?.()
+          }
           storedCallbacks.onStatus?.('shell')
         },
         onEnd: () => {
@@ -1959,8 +1995,10 @@ export function createRemoteRuntimePtyTransport(
         const commandToSend = options.command ?? command
         const startupCommandDeliveryToSend =
           options.startupCommandDelivery ?? startupCommandDelivery
-        const envToSend = options.env ?? env
-        const envToDeleteToSend = options.envToDelete ?? envToDelete
+        const envToSend = withLegacyTerminalAttributionDisabledEnv(options.env ?? env)
+        const envToDeleteToSend = addLegacyTerminalAttributionDisableRequest(
+          options.envToDelete ?? envToDelete
+        )
         const launchConfigToSend = options.launchConfig ?? launchConfig
         const resumeProviderSessionToSend = options.resumeProviderSession ?? resumeProviderSession
         const launchTokenToSend = options.launchToken ?? launchToken
@@ -1988,7 +2026,7 @@ export function createRemoteRuntimePtyTransport(
           presentation: 'background' as const,
           ...(activate === true ? { activate: true } : {})
         }
-        const legacyCreate = () =>
+        const legacyCreate = ({ authority }: { authority: LiveRuntimeEnvironmentAuthority }) =>
           createWithUnknownOutcomeRecovery(
             'terminal',
             (timeoutMs, reconcileExisting) =>
@@ -1999,13 +2037,49 @@ export function createRemoteRuntimePtyTransport(
                   ...legacyCreateParams,
                   ...(reconcileExisting ? { reconcileExisting: true } : {})
                 },
-                timeoutMs
+                timeoutMs,
+                authority.runtimeId
               ),
             createEnvironmentId,
             connectLifecycleEpoch
           )
-        const hostAuthorityCreate = () =>
-          createWithUnknownOutcomeRecovery(
+        const requiredAgentSessionCapabilities: readonly RuntimeCapability[] =
+          resumeProviderSessionToSend && launchAgentToSend === 'omp'
+            ? [AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY]
+            : []
+        const revalidateAgentSessionReplay = async (
+          timeoutMs: number,
+          authority: LiveRuntimeEnvironmentAuthority
+        ): Promise<void> => {
+          const status = await callRuntimeForEnvironment<RuntimeStatus>(
+            createEnvironmentId,
+            'status.get',
+            undefined,
+            timeoutMs,
+            authority.runtimeId
+          )
+          const requiredCapabilities = [
+            AGENT_SESSION_HOST_AUTHORITY_RUNTIME_CAPABILITY,
+            TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+            ...requiredAgentSessionCapabilities
+          ]
+          const capabilities = Array.isArray(status.capabilities) ? status.capabilities : []
+          if (
+            status.runtimeId !== authority.runtimeId ||
+            requiredCapabilities.some((capability) => !capabilities.includes(capability))
+          ) {
+            throw new Error(AGENT_SESSION_REPLAY_UPDATE_REQUIRED_MESSAGE)
+          }
+        }
+        const hostAuthorityCreate = (authority: LiveRuntimeEnvironmentAuthority) => {
+          if (
+            agentSessionCreateAuthority &&
+            agentSessionCreateAuthority.runtimeId !== authority.runtimeId
+          ) {
+            throw new Error(AGENT_SESSION_REPLAY_UPDATE_REQUIRED_MESSAGE)
+          }
+          agentSessionCreateAuthority ??= authority
+          return createWithUnknownOutcomeRecovery(
             'agent-session',
             (timeoutMs) =>
               resumeProviderSessionToSend
@@ -2027,7 +2101,8 @@ export function createRemoteRuntimePtyTransport(
                       placement: { tabId, leafId },
                       presentation: 'background'
                     },
-                    timeoutMs
+                    timeoutMs,
+                    authority.runtimeId
                   )
                 : callRuntimeForEnvironment<RuntimeCreateAgentSessionResult>(
                     createEnvironmentId,
@@ -2049,23 +2124,37 @@ export function createRemoteRuntimePtyTransport(
                       },
                       agentCreateOperation.clientOperationId
                     ),
-                    timeoutMs
+                    timeoutMs,
+                    authority.runtimeId
                   ),
             createEnvironmentId,
-            connectLifecycleEpoch
+            connectLifecycleEpoch,
+            (timeoutMs) => revalidateAgentSessionReplay(timeoutMs, authority)
           )
+        }
         const created = launchAgentToSend
           ? agentSessionRequiresHostAuthorityReplay
-            ? await hostAuthorityCreate()
+            ? agentSessionCreateAuthority
+              ? await hostAuthorityCreate(agentSessionCreateAuthority)
+              : await runRemoteAgentSessionLaunch<RemoteAgentSessionLaunchResult | null>({
+                  environmentId: createEnvironmentId,
+                  expectedEnvironmentPairingRevision: runtimeEnvironmentPairingRevision,
+                  hostAuthority: hostAuthorityCreate,
+                  requiredHostAuthorityCapabilities: requiredAgentSessionCapabilities,
+                  legacy: legacyCreate
+                })
             : await runRemoteAgentSessionLaunch<RemoteAgentSessionLaunchResult | null>({
                 environmentId: createEnvironmentId,
+                expectedEnvironmentPairingRevision: runtimeEnvironmentPairingRevision,
                 hostAuthority: hostAuthorityCreate,
-                ...(resumeProviderSessionToSend && launchAgentToSend === 'omp'
-                  ? { hostAuthorityCapability: AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY }
-                  : {}),
+                requiredHostAuthorityCapabilities: requiredAgentSessionCapabilities,
                 legacy: legacyCreate
               })
-          : await legacyCreate()
+          : await runRemoteAgentSessionLaunch<RemoteAgentSessionLaunchResult | null>({
+              environmentId: createEnvironmentId,
+              expectedEnvironmentPairingRevision: runtimeEnvironmentPairingRevision,
+              legacy: legacyCreate
+            })
         if (!created) {
           if (!destroyed && lifecycleEpoch === connectLifecycleEpoch) {
             connecting = false
@@ -2141,13 +2230,21 @@ export function createRemoteRuntimePtyTransport(
         if (!destroyed && lifecycleEpoch === connectLifecycleEpoch) {
           connecting = false
           const message = runtimeTerminalErrorMessage(error)
+          const recoverable = isRecoverableRemoteRuntimeConnectionError(
+            toRemoteRuntimeClientErrorLike(error)
+          )
           if (isRemoteTerminalGoneMessage(message)) {
             recovery.cancel()
             handleRemoteTerminalError(error)
           } else if (
-            isRecoverableRemoteRuntimeConnectionError(toRemoteRuntimeClientErrorLike(error))
+            recoverable ||
+            terminalCreateNeedsReconciliation ||
+            agentSessionRequiresHostAuthorityReplay
           ) {
             recovery.markDisconnected()
+            if (!recoverable) {
+              surfaceErrorMessage(message)
+            }
           } else {
             recovery.cancel()
             emitRecoveryState()
diff --git a/src/renderer/src/components/terminal-pane/terminal-agent-session-fork.ts b/src/renderer/src/components/terminal-pane/terminal-agent-session-fork.ts
index 1b7c36a0a1f..959b4a9a7e4 100644
--- a/src/renderer/src/components/terminal-pane/terminal-agent-session-fork.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-agent-session-fork.ts
@@ -36,9 +36,7 @@ function buildForkWorkspaceName(sourceName: string): string {
 }
 
 function resolveTuiAgent(value: string | null | undefined): TuiAgent | null {
-  return value && Object.prototype.hasOwnProperty.call(TUI_AGENT_CONFIG, value)
-    ? (value as TuiAgent)
-    : null
+  return value && Object.hasOwn(TUI_AGENT_CONFIG, value) ? (value as TuiAgent) : null
 }
 
 function getUsableForkBase(
diff --git a/src/renderer/src/components/terminal-pane/terminal-cold-park-verdict-loop.test.tsx b/src/renderer/src/components/terminal-pane/terminal-cold-park-verdict-loop.test.tsx
index 9a97a10745b..08fadd307fe 100644
--- a/src/renderer/src/components/terminal-pane/terminal-cold-park-verdict-loop.test.tsx
+++ b/src/renderer/src/components/terminal-pane/terminal-cold-park-verdict-loop.test.tsx
@@ -154,6 +154,7 @@ function OverlayHost(): React.JSX.Element | null {
     terminalTabs,
     assignments: EMPTY_ASSIGNMENTS,
     isWorktreeActive: false,
+    activeTerminalTabId: null,
     coldParkTerminalPanes: false,
     shouldMeasureHiddenWorktree: false,
     activityTerminalPortals: EMPTY_PORTALS,
diff --git a/src/renderer/src/components/terminal-pane/terminal-hidden-delivery-gate.ts b/src/renderer/src/components/terminal-pane/terminal-hidden-delivery-gate.ts
index 367c42afe78..0950b05508e 100644
--- a/src/renderer/src/components/terminal-pane/terminal-hidden-delivery-gate.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-hidden-delivery-gate.ts
@@ -4,7 +4,7 @@
  * The gate only operates when main holds side-effect authority for the PTY
  * (see isMainTerminalSideEffectAuthorityForPty) AND the gate-specific kill
  * switch is on. Callers decide once at pane/watcher creation — the decision
- * picks which mode-2031 responder is registered (byte sidecar vs fact reply),
+ * picks which observer records mode-2031 subscriptions (byte scan vs fact),
  * so it must never flip per chunk.
  */
 import type { GlobalSettings } from '../../../../shared/types'
diff --git a/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.test.ts b/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.test.ts
index 823ce3dd867..a93c28ddc01 100644
--- a/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.test.ts
@@ -585,6 +585,43 @@ describe('selectColdParkedTerminalTabs', () => {
     expect(selected).toEqual(new Set())
   })
 
+  // Why: view switches stamp every tab together, so UUID order cannot express recency.
+  it('resolves an identical-hiddenSinceMs tie by activation order, not by tab id', () => {
+    const hiddenSinceMs = nowMs - TERMINAL_TAB_HOT_RETAIN_MS
+    const selected = selectColdParkedTerminalTabs({
+      worktreeId: 'wt-1',
+      terminalTabs: [
+        { ...localTab('tab-aaa', hiddenSinceMs), lastActivatedSeq: 1 },
+        { ...localTab('tab-zzz', hiddenSinceMs), lastActivatedSeq: 2 }
+      ],
+      pendingStartupByTabId: {},
+      parkingEnabled: true,
+      nowMs,
+      hotRetainLimit: 0
+    })
+
+    expect(selected).toEqual(new Set(['tab-aaa']))
+  })
+
+  // Why: the cap and exemption must share one recency ranking.
+  it('keeps the most recently activated tab warm when the cap evicts a tie', () => {
+    const hiddenSinceMs = nowMs - TERMINAL_TAB_HOT_RETAIN_MS + 1
+    const selected = selectColdParkedTerminalTabs({
+      worktreeId: 'wt-1',
+      terminalTabs: [
+        { ...localTab('tab-aaa', hiddenSinceMs), lastActivatedSeq: 1 },
+        { ...localTab('tab-bbb', hiddenSinceMs), lastActivatedSeq: 3 },
+        { ...localTab('tab-ccc', hiddenSinceMs), lastActivatedSeq: 2 }
+      ],
+      pendingStartupByTabId: {},
+      parkingEnabled: true,
+      nowMs,
+      hotRetainLimit: 2
+    })
+
+    expect(selected).toEqual(new Set(['tab-aaa']))
+  })
+
   it('selects nothing when the settings kill switch disables parking', () => {
     const selected = selectColdParkedTerminalTabs({
       worktreeId: 'wt-1',
diff --git a/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.ts b/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.ts
index 2aab92ac592..2efcff11f4d 100644
--- a/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-hidden-view-parking.ts
@@ -49,6 +49,8 @@ export type TerminalTabColdParkCandidate = ColdParkableTerminalTab & {
   isVisible: boolean
   hasActivityTerminalPortal: boolean
   hiddenSinceMs: number | null
+  /** Higher means activated more recently; breaks same-pass hidden-time ties. */
+  lastActivatedSeq?: number
 }
 
 function getPendingActivationSpawnCount(value: boolean | number | undefined): number {
@@ -198,21 +200,33 @@ export function canParkTerminalTabRenderer(args: {
   return isParkRestorableTerminalPty(tab.ptyId, args.worktreeId, args.restorePolicy)
 }
 
-export type ColdParkRetainCandidate = { id: string; hiddenSinceMs: number }
+export type ColdParkRetainCandidate = {
+  id: string
+  hiddenSinceMs: number
+  lastActivatedSeq?: number
+}
+
+// Why: a view switch stamps every owned tab at once, so activation order must
+// break the routine hidden-time tie before the deterministic UUID fallback.
+function compareColdParkRecencyDesc(
+  a: ColdParkRetainCandidate,
+  b: ColdParkRetainCandidate
+): number {
+  if (a.hiddenSinceMs !== b.hiddenSinceMs) {
+    return b.hiddenSinceMs - a.hiddenSinceMs
+  }
+  const activationDelta = (b.lastActivatedSeq ?? -1) - (a.lastActivatedSeq ?? -1)
+  return activationDelta === 0 ? a.id.localeCompare(b.id) : activationDelta
+}
 
 // Why: the single most-recently-hidden candidate is the view the user just
 // switched away from; keeping it warm regardless of the TTL or cap means
 // switching back after any absence (a meeting, coffee) is always instant, the
-// remount cost users actually notice. Ties break by id for determinism.
+// remount cost users actually notice.
 function selectLastActiveRetainedId(candidates: ColdParkRetainCandidate[]): string | null {
   let lastActive: ColdParkRetainCandidate | null = null
   for (const candidate of candidates) {
-    if (
-      lastActive === null ||
-      candidate.hiddenSinceMs > lastActive.hiddenSinceMs ||
-      (candidate.hiddenSinceMs === lastActive.hiddenSinceMs &&
-        candidate.id.localeCompare(lastActive.id) < 0)
-    ) {
+    if (lastActive === null || compareColdParkRecencyDesc(candidate, lastActive) < 0) {
       lastActive = candidate
     }
   }
@@ -221,8 +235,7 @@ function selectLastActiveRetainedId(candidates: ColdParkRetainCandidate[]): stri
 
 // Why: hot-retain keeps the most recently hidden ids warm up to the limit;
 // ids hidden past hotRetainMs or beyond the limit cold-park. The last-active
-// id is exempt from both so returning to it never pays a remount. Ties sort by
-// id so the selection is deterministic.
+// id is exempt from both so returning to it never pays a remount.
 export function selectIdsBeyondHotRetain(
   candidates: ColdParkRetainCandidate[],
   args: { nowMs: number; hotRetainMs: number; hotRetainLimit: number }
@@ -240,10 +253,7 @@ export function selectIdsBeyondHotRetain(
       retainedCandidates.push(candidate)
     }
   }
-  retainedCandidates.sort((a, b) => {
-    const recencyDelta = b.hiddenSinceMs - a.hiddenSinceMs
-    return recencyDelta === 0 ? a.id.localeCompare(b.id) : recencyDelta
-  })
+  retainedCandidates.sort(compareColdParkRecencyDesc)
   // Why: the last-active id already holds one slot in the warm working set, so
   // the cap counts it out — the remaining candidates fill hotRetainLimit-1.
   const remainingLimit = lastActiveId === null ? args.hotRetainLimit : args.hotRetainLimit - 1
@@ -322,7 +332,11 @@ export function selectColdParkedTerminalTabs(
     ) {
       continue
     }
-    candidates.push({ id: tab.id, hiddenSinceMs: tab.hiddenSinceMs })
+    candidates.push({
+      id: tab.id,
+      hiddenSinceMs: tab.hiddenSinceMs,
+      lastActivatedSeq: tab.lastActivatedSeq
+    })
   }
   return selectIdsBeyondHotRetain(candidates, {
     nowMs: args.nowMs,
diff --git a/src/renderer/src/components/terminal-pane/terminal-ime-kitty-commit-encoding.ts b/src/renderer/src/components/terminal-pane/terminal-ime-kitty-commit-encoding.ts
index c47b77f53fa..df4d015fb6b 100644
--- a/src/renderer/src/components/terminal-pane/terminal-ime-kitty-commit-encoding.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-ime-kitty-commit-encoding.ts
@@ -10,12 +10,17 @@ import { KittyKeyboard } from '@xterm/xterm/src/common/input/KittyKeyboard'
  */
 const KITTY_REPORT_ALL_KEYS_AS_ESCAPE_CODES = 0b1000
 
+/** `report_event_types`. The only flag that makes a printable press owe a release. */
+const KITTY_REPORT_EVENT_TYPES = 0b0010
+
 /**
- * `KittyKeyboardEventType.PRESS` / `.REPEAT`. Inlined because the upstream enum is a
- * `const enum`, which does not survive an import across module boundaries.
+ * `KittyKeyboardEventType.PRESS` / `.REPEAT` / `.RELEASE`. Inlined because the
+ * upstream enum is a `const enum`, which does not survive an import across
+ * module boundaries.
  */
 const KITTY_EVENT_TYPE_PRESS = 1
 const KITTY_EVENT_TYPE_REPEAT = 2
+const KITTY_EVENT_TYPE_RELEASE = 3
 
 const kittyKeyboardEncoder = new KittyKeyboard()
 
@@ -28,17 +33,70 @@ export type ImeCommitKeyPress = {
   repeat?: boolean
 }
 
+/**
+ * The matching physical release, read from the actual `keyup`.
+ *
+ * Why not reuse the press's fields: macOS lets Shift come up first, and the
+ * browser then reports the printable keyup with the UNSHIFTED `key` and
+ * `shiftKey: false`. Encoding that release from the press's shifted fields
+ * would report a modifier the app no longer holds.
+ */
+export type ImeReleaseKeyEvent = {
+  key: string
+  code?: string
+  shiftKey: boolean
+  ctrlKey?: boolean
+  altKey?: boolean
+  metaKey?: boolean
+}
+
+/**
+ * Opaque proof that a delivered press/repeat owes a release report, carrying
+ * the flags read at commit time. Only `encodeImeReleaseForKitty` interprets it:
+ * the forwarder must never re-test event-type bits or rebuild CSI-u itself.
+ */
+export type ImeCommitReleaseObligation = { readonly flags: number }
+
+export type ImeCommitKittyEncoding = {
+  /** CSI-u press/repeat report, or null when the commit goes out as raw text. */
+  report: string | null
+  /** Non-null when the commit-time flags requested press/repeat/release events. */
+  release: ImeCommitReleaseObligation | null
+}
+
+function evaluateKittyReport(
+  press: { key: string; code?: string; shiftKey: boolean },
+  modifiers: { ctrlKey?: boolean; altKey?: boolean; metaKey?: boolean },
+  kittyKeyboardFlags: number,
+  eventType: number
+): string | null {
+  const encoded = kittyKeyboardEncoder.evaluate(
+    {
+      type: eventType === KITTY_EVENT_TYPE_RELEASE ? 'keyup' : 'keydown',
+      key: press.key,
+      code: press.code ?? '',
+      keyCode: 0,
+      shiftKey: press.shiftKey,
+      altKey: modifiers.altKey === true,
+      ctrlKey: modifiers.ctrlKey === true,
+      metaKey: modifiers.metaKey === true
+    },
+    kittyKeyboardFlags,
+    eventType
+  )
+  return encoded.key ?? null
+}
+
 /**
  * A pane that negotiated bit 3 asked for every printable key as a CSI-u report,
  * so writing IME-committed text raw hands it the legacy byte stream it declined.
  * Re-encode the press that produced the commit instead.
  *
- * The gate is bit 3 ALONE. "Kitty is active" and `flags !== 0` are both wrong:
- * a pane negotiating only disambiguation or event types still expects printable
- * keys as text, and encoding there would drop every substituted character.
- *
- * Returns null when the commit should be written raw, which is every case except
- * bit 3.
+ * The gate is bit 3 ALONE for the press. "Kitty is active" and `flags !== 0` are
+ * both wrong: a pane negotiating only disambiguation or event types still
+ * expects printable keys as text, and encoding there would drop every
+ * substituted character. Bit 1 (`report_event_types`) is independent — it makes
+ * even a raw-text commit owe exactly one release report.
  *
  * Known limit: the report carries the *physical* key's codepoint, not the
  * committed glyph — bit 3 is the app declaring it does not want text, and bit 4
@@ -46,31 +104,65 @@ export type ImeCommitKeyPress = {
  * derives that text field from the same `key` it derives the keycode from, so
  * carrying the committed glyph under bit 4 needs an encoder change, not a flag.
  */
-export function encodeImeCommitAsKittyReport(
+export function encodeImeCommitForKitty(
   press: ImeCommitKeyPress | null,
   kittyKeyboardFlags: number
+): ImeCommitKittyEncoding {
+  if (!press) {
+    return { report: null, release: null }
+  }
+  const report =
+    (kittyKeyboardFlags & KITTY_REPORT_ALL_KEYS_AS_ESCAPE_CODES) === 0
+      ? null
+      : evaluateKittyReport(
+          press,
+          // Why: the forwarder only claims presses with no control chord, so the
+          // modifier fields are known-false rather than read from a live event.
+          {},
+          kittyKeyboardFlags,
+          // Why: a held key emits repeated keydowns, and the protocol reports those as REPEAT.
+          // Defaulting them all to PRESS would make one held key look like N separate strikes to
+          // an app that counts presses or filters repeats.
+          press.repeat === true ? KITTY_EVENT_TYPE_REPEAT : KITTY_EVENT_TYPE_PRESS
+        )
+  return {
+    report,
+    release:
+      (kittyKeyboardFlags & KITTY_REPORT_EVENT_TYPES) === 0 ? null : { flags: kittyKeyboardFlags }
+  }
+}
+
+/**
+ * Resolve a press's release obligation against the physical `keyup` that
+ * actually settled it. Returns null when no release report is owed anymore.
+ */
+export function encodeImeReleaseForKitty(
+  obligation: ImeCommitReleaseObligation,
+  release: ImeReleaseKeyEvent,
+  context: {
+    /** The claimed press's identity, for keyups whose `key` an input source rewrote. */
+    press?: { key: string; code?: string }
+    /** The pane's flags at RELEASE time, deciding whether a release is still wanted. */
+    currentKittyKeyboardFlags: number
+  }
 ): string | null {
-  if ((kittyKeyboardFlags & KITTY_REPORT_ALL_KEYS_AS_ESCAPE_CODES) === 0 || !press) {
+  // Why the current-flags gate: the app can pop kitty mode between commit and
+  // keyup (a TUI quitting on the pressed key). xterm suppresses releases the
+  // moment `report_event_types` is gone — match it so the successor process
+  // never receives CSI-u bytes it did not negotiate. The report itself still
+  // encodes under the commit-time flags so the press/release pair stays
+  // consistent.
+  if ((context.currentKittyKeyboardFlags & KITTY_REPORT_EVENT_TYPES) === 0) {
     return null
   }
-  // Why: the forwarder only claims presses with no control chord, so the
-  // modifier fields are known-false rather than read from a live event.
-  const encoded = kittyKeyboardEncoder.evaluate(
-    {
-      type: 'keydown',
-      key: press.key,
-      code: press.code ?? '',
-      keyCode: 0,
-      shiftKey: press.shiftKey,
-      altKey: false,
-      ctrlKey: false,
-      metaKey: false
-    },
-    kittyKeyboardFlags,
-    // Why: a held key emits repeated keydowns, and the protocol reports those as REPEAT.
-    // Defaulting them all to PRESS would make one held key look like N separate strikes to
-    // an app that counts presses or filters repeats.
-    press.repeat === true ? KITTY_EVENT_TYPE_REPEAT : KITTY_EVENT_TYPE_PRESS
-  )
-  return encoded.key ?? null
+  // Why the key fallback: an input source can rewrite the keyup's `key`
+  // ('Process' after a source switch mid-hold) while `code` still matches the
+  // press; xterm's evaluate finds no encodable key there and would silently
+  // drop the release, leaving the app with the key held forever. The keyup's
+  // own single-char `key` wins (Shift-up-first correctly reports unshifted).
+  const releaseKey =
+    release.key.length === 1 || context.press === undefined
+      ? release
+      : { ...release, key: context.press.key, code: context.press.code ?? release.code }
+  return evaluateKittyReport(releaseKey, release, obligation.flags, KITTY_EVENT_TYPE_RELEASE)
 }
diff --git a/src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.ts b/src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.ts
index 5594bcb3cbe..525a8d2b12a 100644
--- a/src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-ime-linux-candidate-state.ts
@@ -118,7 +118,7 @@ function isPlainAsciiDigitKey(event: XtermBypassEvent): boolean {
 /** Tracks legacy desktop Linux IME candidate-selection event sequences. */
 export function createTerminalImeLinuxCandidateState(
   now: () => number = () => Date.now(),
-  pendingPlainLetterKeydownsByCode: Set<string> = new Set()
+  pendingPlainLetterKeydownsByCode = new Set<string>()
 ): TerminalImeLinuxCandidateState {
   let candidateDigitUntil = 0
 
diff --git a/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.test.ts b/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.test.ts
index 2894df2e2be..ef758edf22a 100644
--- a/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.test.ts
@@ -180,10 +180,10 @@ describe('installTerminalImeNativeTextForwarder', () => {
       )
       dispatchInsertText(textarea, 'á')
 
-      // The keypress is what must be suppressed (it would double-send the ASCII 'a').
-      // The keyup is not: 'á' reached the pty, so the app is owed the matching release.
+      // The keypress must be suppressed (it would double-send the ASCII 'a'), and so must the
+      // keyup — the forwarder owns the whole claimed lifecycle and emits any owed release itself.
       expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: 'a', code: 'KeyA' }))).toBe(
-        false
+        true
       )
       expect(sendInput).toHaveBeenCalledExactlyOnceWith('á')
     })
@@ -273,13 +273,15 @@ describe('installTerminalImeNativeTextForwarder', () => {
     })
 
     // An app that negotiated kitty `report_event_types` expects a release for every press it
-    // received. The claim now takes every printable keydown, so swallowing the keyup
-    // unconditionally would drop the release for ordinary typing and leave keys stuck down.
-    it('lets the keyup through once the press has reached the pty, so its release still fires', () => {
+    // received, but xterm's own kitty state is defensively reset while the application tracker
+    // stays active — so the forwarder keeps the keyup and encodes the release from the flags it
+    // read at commit time rather than delegating either decision to xterm.
+    it('keeps the keyup inside the forwarder once the press has reached the pty', () => {
       const { forwarder, sendInput } = install()
       expect(forwarder.claimKeyEvent(keyEvent({ key: ',' }))).toBe(true)
       dispatchInsertText(textarea, '，')
-      expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: ',' }))).toBe(false)
+      expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: ',' }))).toBe(true)
+      // Flags default to 0 here: no event types negotiated, so no release is owed.
       expect(sendInput).toHaveBeenCalledExactlyOnceWith('，')
     })
 
@@ -292,6 +294,35 @@ describe('installTerminalImeNativeTextForwarder', () => {
       expect(sendInput).not.toHaveBeenCalled()
     })
 
+    it('keeps the claim armed across a bare modifier keydown before the commit lands', () => {
+      // Fast typing: ',' is pressed and released, then Shift goes down for the
+      // NEXT character while the text system is still delivering '，'.
+      const { forwarder, sendInput } = install()
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',' }))).toBe(true)
+      expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: ',' }))).toBe(true)
+      expect(
+        forwarder.claimKeyEvent(keyEvent({ key: 'Shift', code: 'ShiftLeft', shiftKey: true }))
+      ).toBe(false)
+      dispatchInsertText(textarea, '，')
+      expect(sendInput).toHaveBeenCalledExactlyOnceWith('，')
+    })
+
+    it('lets a chorded keyup reach xterm after a fresh chorded press of the same key', () => {
+      const { forwarder, sendInput } = install()
+      // A claimed press whose input never arrived and whose keyup was swallowed
+      // elsewhere leaves a tombstone behind.
+      expect(forwarder.claimKeyEvent(keyEvent({ key: 'n', code: 'KeyN' }))).toBe(true)
+      expect(forwarder.claimKeyEvent(keyEvent({ key: 'x', code: 'KeyX' }))).toBe(true)
+      // Ctrl+N is xterm's press; its keyup must not be eaten by the stale tombstone.
+      expect(forwarder.claimKeyEvent(keyEvent({ key: 'n', code: 'KeyN', ctrlKey: true }))).toBe(
+        false
+      )
+      expect(
+        forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: 'n', code: 'KeyN', ctrlKey: true }))
+      ).toBe(false)
+      expect(sendInput).not.toHaveBeenCalled()
+    })
+
     it('releases the claim on blur', () => {
       const { forwarder, sendInput } = install()
       forwarder.claimKeyEvent(keyEvent({ key: ',' }))
@@ -396,6 +427,55 @@ describe('installTerminalImeNativeTextForwarder', () => {
       expect(sendInput).not.toHaveBeenCalled()
     })
 
+    it('emits the owed release before a same-key re-claim when the input event never came', () => {
+      const { forwarder, sendInput } = installWithFlags(() => 0b1010)
+      // The first press delivers and owes a release.
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',' }))).toBe(true)
+      dispatchInsertText(textarea, '，')
+      // An auto-repeat claim whose text the input source swallows absorbs the
+      // eventual keyup; the next fresh press must settle that owed release
+      // instead of deleting the record that holds it.
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',', repeat: true }))).toBe(true)
+      expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: ',' }))).toBe(true)
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',' }))).toBe(true)
+      expect(sendInput.mock.calls.map((call) => call[0])).toEqual(['\x1b[44u', '\x1b[44;1:3u'])
+    })
+
+    it('settles an owed release before a fresh same-key press after a lost keyup', () => {
+      const { forwarder, sendInput } = installWithFlags(() => 0b1010)
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',', code: 'Comma' }))).toBe(true)
+      dispatchInsertText(textarea, '，')
+
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',', code: 'Comma' }))).toBe(true)
+      expect(sendInput.mock.calls.map((call) => call[0])).toEqual(['\x1b[44u', '\x1b[44;1:3u'])
+    })
+
+    it('suppresses the owed release when the app popped kitty mode before the keyup', () => {
+      // A TUI that quits on the pressed key pops its negotiation before the
+      // keyup; a CSI-u release would land in the successor shell as junk.
+      let flags = 0b1010
+      const { forwarder, sendInput } = installWithFlags(() => flags)
+      expect(forwarder.claimKeyEvent(keyEvent({ key: 'q', code: 'KeyQ' }))).toBe(true)
+      dispatchInsertText(textarea, 'q')
+      flags = 0
+      expect(forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: 'q', code: 'KeyQ' }))).toBe(
+        true
+      )
+      expect(sendInput).toHaveBeenCalledExactlyOnceWith('\x1b[113u')
+    })
+
+    it('encodes the release from the press when an input source rewrote the keyup key', () => {
+      const { forwarder, sendInput } = installWithFlags(() => 0b1010)
+      expect(forwarder.claimKeyEvent(keyEvent({ key: ',' }))).toBe(true)
+      dispatchInsertText(textarea, '，')
+      // Chromium reports 'Process' for IME-owned keys after a source switch
+      // mid-hold; `code` still identifies the physical press.
+      expect(
+        forwarder.claimKeyEvent(keyEvent({ type: 'keyup', key: 'Process', code: 'Comma' }))
+      ).toBe(true)
+      expect(sendInput.mock.calls.map((call) => call[0])).toEqual(['\x1b[44u', '\x1b[44;1:3u'])
+    })
+
     it('writes the commit raw when the caller tracks no flags at all', () => {
       // The preview bridge installs the forwarder with no pane to negotiate with.
       const sendInput = vi.fn()
diff --git a/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.ts b/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.ts
index c200e3c04e7..e077a5df3d9 100644
--- a/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-ime-native-text-forwarder.ts
@@ -1,5 +1,10 @@
 import type { IDisposable } from '@xterm/xterm'
-import { encodeImeCommitAsKittyReport } from './terminal-ime-kitty-commit-encoding'
+import {
+  encodeImeCommitForKitty,
+  encodeImeReleaseForKitty,
+  type ImeCommitReleaseObligation,
+  type ImeReleaseKeyEvent
+} from './terminal-ime-kitty-commit-encoding'
 
 // Why: a plain printable keydown never produces terminal bytes. Bytes for
 // printable characters come only from the `input` event, which on macOS *is*
@@ -18,6 +23,38 @@ type ClaimedKeyPress = {
   repeat?: boolean
 }
 
+/** A claimed press waiting for its `insertText`, plus an early keyup if one already landed. */
+type PendingCommit = {
+  press: ClaimedKeyPress
+  /** Non-null when `keyup` preceded `insertText` — an order some macOS IMEs use. */
+  keyup: ImeReleaseKeyEvent | null
+}
+
+/**
+ * What a claimed physical key still owes once its commit settled. A non-null
+ * `obligation` is an encoder-owned release report; a null one is a tombstone
+ * that only keeps the matching keyup away from xterm for a press the app
+ * never received.
+ */
+type ClaimedKeyRecord = {
+  key: string
+  code?: string
+  obligation: ImeCommitReleaseObligation | null
+}
+
+// Bare modifier keydowns produce no terminal bytes and legitimately interleave
+// between a claimed press and its commit (Shift pressed for the NEXT character
+// before the text system delivers this one's `insertText`).
+const MODIFIER_KEYDOWN_KEYS = new Set([
+  'Shift',
+  'Control',
+  'Alt',
+  'Meta',
+  'CapsLock',
+  'AltGraph',
+  'Fn'
+])
+
 export type ImeNativeTextKeyEvent = {
   type: string
   key: string
@@ -76,13 +113,21 @@ function isNativeTextKeydown(event: ImeNativeTextKeyEvent, compositionActive: bo
   )
 }
 
-function matchesClaimedPress(event: ImeNativeTextKeyEvent, claimedPress: ClaimedKeyPress): boolean {
+function matchesClaimedPress(
+  event: ImeNativeTextKeyEvent,
+  claimedPress: { key: string; code?: string }
+): boolean {
   if (event.code && claimedPress.code) {
     return event.code === claimedPress.code
   }
   return event.key === claimedPress.key
 }
 
+/** Different held keys coexist, so records are keyed by physical identity. */
+function claimedKeyId(press: { key: string; code?: string }): string {
+  return press.code ?? press.key
+}
+
 export function installTerminalImeNativeTextForwarder(args: {
   terminalElement: HTMLElement | null | undefined
   isComposing: () => boolean
@@ -102,11 +147,64 @@ export function installTerminalImeNativeTextForwarder(args: {
   }
 
   const terminalElement = args.terminalElement
-  let pendingForward = false
   let compositionTransactionPending = false
-  let claimedPress: ClaimedKeyPress | null = null
-  /** Whether the claimed press actually reached the pty, which decides if its release does. */
-  let forwardedPressBytes = false
+  let pendingCommit: PendingCommit | null = null
+  // Why keyed rather than a single slot: rollover and auto-repeat can leave one
+  // key still held while the next one commits, and each held key owes its own
+  // single release.
+  const claimedKeyRecords = new Map<string, ClaimedKeyRecord>()
+
+  const findClaimedRecordId = (event: ImeNativeTextKeyEvent): string | null => {
+    const direct = claimedKeyId(event)
+    if (claimedKeyRecords.has(direct)) {
+      return direct
+    }
+    for (const [id, record] of claimedKeyRecords) {
+      if (matchesClaimedPress(event, record)) {
+        return id
+      }
+    }
+    return null
+  }
+
+  /** Emits at most one release for a claimed press; xterm emits none for it. */
+  const settleRelease = (recordId: string, release: ImeReleaseKeyEvent): void => {
+    const record = claimedKeyRecords.get(recordId)
+    claimedKeyRecords.delete(recordId)
+    if (!record?.obligation) {
+      return
+    }
+    const report = encodeImeReleaseForKitty(record.obligation, release, {
+      press: { key: record.key, code: record.code },
+      currentKittyKeyboardFlags: args.getKittyKeyboardFlags?.() ?? 0
+    })
+    if (report) {
+      args.sendInput(report)
+    }
+  }
+
+  /**
+   * Move a claimed press out of awaiting-commit state. A fresh obligation is
+   * upserted; a repeat or cancellation that produced none must not erase one an
+   * earlier delivered press already owed.
+   */
+  const settleCommit = (
+    commit: PendingCommit,
+    obligation: ImeCommitReleaseObligation | null
+  ): void => {
+    const recordId = claimedKeyId(commit.press)
+    const existing = claimedKeyRecords.get(recordId)
+    if (obligation || !existing) {
+      claimedKeyRecords.set(recordId, {
+        key: commit.press.key,
+        code: commit.press.code,
+        obligation: obligation ?? existing?.obligation ?? null
+      })
+    }
+    if (commit.keyup) {
+      settleRelease(recordId, commit.keyup)
+    }
+  }
 
   const markCompositionTransactionAccepted = (): void => {
     compositionTransactionPending = true
@@ -118,44 +216,85 @@ export function installTerminalImeNativeTextForwarder(args: {
 
   const claimKeyEvent = (event: ImeNativeTextKeyEvent): boolean => {
     if (event.type === 'keydown') {
+      if (pendingCommit && matchesClaimedPress(event, pendingCommit.press)) {
+        // The same key pressed again while its claim still awaits `input`:
+        // settle first so an absorbed early keyup's owed release is emitted
+        // rather than silently overwritten.
+        settleCommit(pendingCommit, null)
+        pendingCommit = null
+      } else if (pendingCommit && !MODIFIER_KEYDOWN_KEYS.has(event.key)) {
+        // Why: retiring here is also what drops a stale claim whose input event
+        // never arrived (the input source swallowed the key) — no timer needed.
+        // It leaves a tombstone so the stale press's keyup still cannot reach
+        // xterm, which never saw its keydown. Bare modifier keydowns are
+        // exempt: they precede a still-inbound commit during fast typing and
+        // must not retire the claim it belongs to.
+        settleCommit(pendingCommit, null)
+        pendingCommit = null
+      }
+      if (event.repeat !== true) {
+        // Why: a fresh same-key press proves the prior press ended; settle its owed release first.
+        const staleRecordId = findClaimedRecordId(event)
+        if (staleRecordId !== null) {
+          settleRelease(staleRecordId, {
+            key: event.key,
+            code: event.code,
+            shiftKey: event.shiftKey === true,
+            ctrlKey: event.ctrlKey,
+            altKey: event.altKey,
+            metaKey: event.metaKey
+          })
+        }
+      }
       if (!isNativeTextKeydown(event, args.isComposing())) {
         return false
       }
-      // Why: re-arming here is also what drops a stale claim whose input event
-      // never arrived (the input source swallowed the key) — no timer needed.
-      pendingForward = true
-      forwardedPressBytes = false
-      claimedPress = {
-        key: event.key,
-        code: event.code,
-        shiftKey: event.shiftKey === true,
-        repeat: event.repeat === true
+      pendingCommit = {
+        press: {
+          key: event.key,
+          code: event.code,
+          shiftKey: event.shiftKey === true,
+          repeat: event.repeat === true
+        },
+        keyup: null
       }
       return true
     }
-    if (!claimedPress) {
-      return false
-    }
-    if (event.ctrlKey || event.altKey || event.metaKey || event.isComposing === true) {
-      return false
-    }
     if (event.type === 'keyup') {
-      if (!matchesClaimedPress(event, claimedPress)) {
+      if (pendingCommit && matchesClaimedPress(event, pendingCommit.press)) {
+        // Copy the release's own fields: the commit has not happened yet, and
+        // the encoder needs the modifier state as of the actual release.
+        pendingCommit.keyup = {
+          key: event.key,
+          code: event.code,
+          shiftKey: event.shiftKey === true,
+          ctrlKey: event.ctrlKey,
+          altKey: event.altKey,
+          metaKey: event.metaKey
+        }
+        return true
+      }
+      const recordId = findClaimedRecordId(event)
+      if (recordId === null) {
         return false
       }
-      const pressReachedThePty = forwardedPressBytes
-      claimedPress = null
-      forwardedPressBytes = false
-      // Why: a release report describes a press the app received. Suppress it only when
-      // this press put nothing on the wire — swallowed by the input source, or owned by a
-      // composition transaction. Suppressing unconditionally would drop the kitty release
-      // for ordinary typing, because the structural claim takes every printable keydown
-      // rather than the short punctuation list the previous design claimed.
-      return !pressReachedThePty
+      // Why the forwarder owns this instead of returning false: xterm's kitty
+      // state is defensively reset while the application tracker stays active,
+      // so delegating the release would either lose it or emit it under flags
+      // the app never negotiated.
+      settleRelease(recordId, {
+        key: event.key,
+        code: event.code,
+        shiftKey: event.shiftKey === true,
+        ctrlKey: event.ctrlKey,
+        altKey: event.altKey,
+        metaKey: event.metaKey
+      })
+      return true
     }
     // Keep the keydown's armed state but still bypass xterm so it does not
     // double-send printable text before our input forward runs.
-    return event.type === 'keypress'
+    return event.type === 'keypress' && pendingCommit !== null
   }
 
   const forwardCommittedText = (event: Event): void => {
@@ -165,24 +304,33 @@ export function installTerminalImeNativeTextForwarder(args: {
     // Why: an accepted composition transaction already owns its commit; letting
     // it through here would send the text a second time.
     if (compositionTransactionPending && event.inputType === 'insertText') {
-      pendingForward = false
+      if (pendingCommit) {
+        settleCommit(pendingCommit, null)
+        pendingCommit = null
+      }
       event.stopImmediatePropagation()
       return
     }
-    if (!pendingForward) {
+    const commit = pendingCommit
+    if (!commit) {
       return
     }
-    pendingForward = false
+    pendingCommit = null
     if (event.inputType !== 'insertText') {
+      // A non-text input takes the press over; it delivered nothing, so only the
+      // keyup suppression survives.
+      settleCommit(commit, null)
       return
     }
     if (event.data) {
-      const kittyReport = encodeImeCommitAsKittyReport(
-        claimedPress,
-        args.getKittyKeyboardFlags?.() ?? 0
-      )
-      args.sendInput(kittyReport ?? event.data)
-      forwardedPressBytes = true
+      // Read the mutable flags EXACTLY once, here: kitty state can change
+      // between keydown and commit, and the release must describe the same
+      // negotiation the press was encoded under.
+      const encoding = encodeImeCommitForKitty(commit.press, args.getKittyKeyboardFlags?.() ?? 0)
+      args.sendInput(encoding.report ?? event.data)
+      settleCommit(commit, encoding.release)
+    } else {
+      settleCommit(commit, null)
     }
     event.stopImmediatePropagation()
     // Clear the helper textarea so the committed text doesn't accumulate.
@@ -191,11 +339,13 @@ export function installTerminalImeNativeTextForwarder(args: {
     }
   }
 
+  // Blur and disposal drop every record without synthesizing bytes: the app
+  // stops receiving this element's keys entirely, so an invented release would
+  // describe a press it can no longer correlate.
   const cancelPending = (): void => {
-    pendingForward = false
-    forwardedPressBytes = false
     compositionTransactionPending = false
-    claimedPress = null
+    pendingCommit = null
+    claimedKeyRecords.clear()
   }
 
   terminalElement.addEventListener(
diff --git a/src/renderer/src/components/terminal-pane/terminal-ime-substituted-text-commit.test.ts b/src/renderer/src/components/terminal-pane/terminal-ime-substituted-text-commit.test.ts
index 267c7a61093..d23d2858eb6 100644
--- a/src/renderer/src/components/terminal-pane/terminal-ime-substituted-text-commit.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-ime-substituted-text-commit.test.ts
@@ -195,10 +195,8 @@ describe('input-source text substitution reaches the terminal', () => {
   describe.each([
     ['none', 0],
     ['disambiguate', 1],
-    ['event types', 2],
     ['alternate keys', 4],
     ['disambiguate + alternate keys', 5],
-    ['disambiguate + event types + alternate keys', 7],
     // Bit 4 asks for associated text, which only decorates a report bit 3 would already have
     // produced — on its own it does not turn a printable key into one.
     ['associated text', 16]
@@ -208,13 +206,23 @@ describe('input-source text substitution reaches the terminal', () => {
     })
   })
 
+  // Bit 1 (`report_event_types`) is orthogonal to bit 3: the press stays raw substituted text,
+  // but the app asked to be told when the key came back up, and the forwarder owns that keyup.
+  describe.each([
+    ['event types', 2],
+    ['disambiguate + event types + alternate keys', 7]
+  ])('with kitty flags %s (%d) negotiated', (_name, flags) => {
+    it('sends the substituted character raw followed by one CSI-u release', () => {
+      expect(type([COMMA], flags)).toBe('，\x1b[44;1:3u')
+    })
+  })
+
   // Bit 3 is `report_all_keys_as_escape_codes`: the app asked for every printable key as a CSI-u
   // report, so committing raw UTF-8 hands it a byte stream it declined. Re-encode the press that
   // produced the commit. This is not CJK-specific — it is every printable key in such a pane.
   describe.each([
     ['all keys as escape codes', 8],
-    ['all keys + disambiguate', 9],
-    ['all keys + disambiguate + event types + alternate keys', 15]
+    ['all keys + disambiguate', 9]
   ])('with kitty flags %s (%d) negotiated', (_name, flags) => {
     it('sends a CSI-u report for the physical key instead of the substituted character', () => {
       // `,` is the physical Comma key; U+002C is 44. The committed `，` is deliberately absent —
@@ -224,6 +232,10 @@ describe('input-source text substitution reaches the terminal', () => {
     })
   })
 
+  it('pairs the CSI-u press with exactly one release when event types are also negotiated', () => {
+    expect(type([COMMA], 15)).toBe('\x1b[44u\x1b[44;1:3u')
+  })
+
   it('reports the physical key as the associated text under bit 3 + bit 4, not the substitution', () => {
     // Pins the limit named in terminal-ime-kitty-commit-encoding.ts: bit 4 is where the committed
     // glyph U+FF0C (65292) would ride, and 44 shows up in that slot instead. Closing that needs the
diff --git a/src/renderer/src/components/terminal-pane/terminal-layout-leaf-detach.ts b/src/renderer/src/components/terminal-pane/terminal-layout-leaf-detach.ts
index d43702057f1..7ca537b014d 100644
--- a/src/renderer/src/components/terminal-pane/terminal-layout-leaf-detach.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-layout-leaf-detach.ts
@@ -44,7 +44,7 @@ function omitLeafRecord(
   source: Record<string, string> | undefined,
   leafId: string
 ): Record<string, string> | undefined {
-  if (!source || !Object.prototype.hasOwnProperty.call(source, leafId)) {
+  if (!source || !Object.hasOwn(source, leafId)) {
     return source
   }
   const next = { ...source }
diff --git a/src/renderer/src/components/terminal-pane/terminal-layout-leaf-ids.ts b/src/renderer/src/components/terminal-pane/terminal-layout-leaf-ids.ts
index bd780e89495..9f21c39056b 100644
--- a/src/renderer/src/components/terminal-pane/terminal-layout-leaf-ids.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-layout-leaf-ids.ts
@@ -51,7 +51,7 @@ function remapLeafRecord(
 
 function collectLeafCounts(
   node: TerminalPaneLayoutNode,
-  counts: Map<string, number> = new Map()
+  counts = new Map<string, number>()
 ): Map<string, number> {
   if (node.type === 'leaf') {
     counts.set(node.leafId, (counts.get(node.leafId) ?? 0) + 1)
@@ -73,7 +73,7 @@ function hasLeafPtyBinding(
   ptyIdsByLeafId: Record<string, string> | undefined,
   leafId: string
 ): boolean {
-  return ptyIdsByLeafId ? Object.prototype.hasOwnProperty.call(ptyIdsByLeafId, leafId) : false
+  return ptyIdsByLeafId ? Object.hasOwn(ptyIdsByLeafId, leafId) : false
 }
 
 export function resolveRootlessTerminalLayoutLeafId(
diff --git a/src/renderer/src/components/terminal-pane/terminal-layout-pty-ownership.ts b/src/renderer/src/components/terminal-pane/terminal-layout-pty-ownership.ts
index f0742328240..4c44c3e6ead 100644
--- a/src/renderer/src/components/terminal-pane/terminal-layout-pty-ownership.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-layout-pty-ownership.ts
@@ -105,7 +105,7 @@ function coalesceLeafRecord(
       continue
     }
     const retainedLeafId = resolveRetainedLeafId(removedLeafId, retainedLeafIdByRemovedLeafId)
-    if (!Object.prototype.hasOwnProperty.call(retained, retainedLeafId)) {
+    if (!Object.hasOwn(retained, retainedLeafId)) {
       retained[retainedLeafId] = value
     }
   }
@@ -113,7 +113,7 @@ function coalesceLeafRecord(
 }
 
 function hasLeafRecordValue(source: Record<string, string> | undefined, leafId: string): boolean {
-  return Boolean(source && Object.prototype.hasOwnProperty.call(source, leafId))
+  return Boolean(source && Object.hasOwn(source, leafId))
 }
 
 function coalesceScrollbackRecords(
@@ -225,7 +225,7 @@ function resolveOwnedActiveLeafId(
   ptyIdsByLeafId: Record<string, string> | undefined
 ): string | null {
   const hasBinding = (leafId: string): boolean =>
-    Boolean(ptyIdsByLeafId && Object.prototype.hasOwnProperty.call(ptyIdsByLeafId, leafId))
+    Boolean(ptyIdsByLeafId && Object.hasOwn(ptyIdsByLeafId, leafId))
   if (rootLeafIds.length === 0) {
     const boundLeafIds = Object.keys(ptyIdsByLeafId ?? {})
     if (activeLeafId) {
diff --git a/src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts b/src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts
index 5535e7bde9f..8350ec17fec 100644
--- a/src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-link-action-routing.test.ts
@@ -1,5 +1,8 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { registerHttpLinkStoreAccessor } from '@/lib/http-link-routing'
+import {
+  registerHttpLinkStoreAccessor,
+  registerRuntimeHttpLinkBrowserOpener
+} from '@/lib/http-link-routing'
 import {
   closeTerminalLinkActionRequest,
   requestTerminalLinkAction,
@@ -12,6 +15,7 @@ import { handleTerminalHttpLink } from './terminal-url-link-hit-testing'
 const openUrl = vi.fn()
 const createBrowserTab = vi.fn()
 const setActiveWorktree = vi.fn()
+const openRuntimeBrowserTab = vi.fn(() => Promise.resolve())
 
 function plainEvent(): MouseEvent {
   return {
@@ -44,9 +48,11 @@ beforeEach(() => {
     setActiveWorktree,
     createBrowserTab
   }))
+  registerRuntimeHttpLinkBrowserOpener(openRuntimeBrowserTab)
 })
 
 afterEach(() => {
+  registerRuntimeHttpLinkBrowserOpener(null)
   vi.clearAllMocks()
   vi.unstubAllGlobals()
 })
@@ -181,6 +187,28 @@ describe('terminal link action routing', () => {
     expect(request.mock.calls[0][0].alternate).toBeUndefined()
   })
 
+  it('routes an explicit Orca Browser action to the owning runtime', () => {
+    const request = vi.fn()
+
+    handleTerminalHttpLink('https://example.com/path', plainEvent(), {
+      worktreeId: 'wt-1',
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' },
+      linkActionContext: actionContext(request),
+      actionDestinations: { primary: 'system', alternate: 'orca' }
+    })
+
+    request.mock.calls[0][0].primary.run()
+    expect(openUrl).toHaveBeenCalledWith('https://example.com/path')
+    request.mock.calls[0][0].alternate.run()
+    expect(openRuntimeBrowserTab).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: 'https://example.com/path',
+      intent: { kind: 'url' },
+      expectedRuntimeEnvironmentId: 'env-1'
+    })
+    expect(createBrowserTab).not.toHaveBeenCalled()
+  })
+
   it('uses Shift+modifier for the alternate local destination', () => {
     const event = { ...plainEvent(), metaKey: true, shiftKey: true }
 
@@ -195,6 +223,19 @@ describe('terminal link action routing', () => {
     expect(openUrl).not.toHaveBeenCalled()
   })
 
+  it('keeps Shift+modifier on the only capability-backed destination', () => {
+    const event = { ...plainEvent(), metaKey: true, shiftKey: true }
+
+    handleTerminalHttpLink('https://example.com/path', event, {
+      worktreeId: 'wt-1',
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' },
+      actionDestinations: { primary: 'system' }
+    })
+
+    expect(openUrl).toHaveBeenCalledWith('https://example.com/path')
+    expect(openRuntimeBrowserTab).not.toHaveBeenCalled()
+  })
+
   it('exposes the actual hidden OSC 8 destination', () => {
     const request = vi.fn()
     const destination = 'https://example.com'
diff --git a/src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts b/src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts
index 801eec81c98..514f36aad6d 100644
--- a/src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-link-open-hints.test.ts
@@ -1,5 +1,9 @@
 import { afterEach, describe, expect, it, vi } from 'vitest'
-import { getTerminalUrlOpenHint, terminalUrlOpenHintOptionsFor } from './terminal-link-open-hints'
+import {
+  getTerminalUrlOpenHint,
+  terminalHttpLinkActionDestinationsFor,
+  terminalUrlOpenHintOptionsFor
+} from './terminal-link-open-hints'
 
 function stubPlatform(isMac: boolean): void {
   vi.stubGlobal('navigator', { userAgent: isMac ? 'Mac OS X' : 'Windows NT 10.0' })
@@ -138,4 +142,42 @@ describe('terminalUrlOpenHintOptionsFor', () => {
     expect(options.modifierInverts).toBe(true)
     expect(getTerminalUrlOpenHint(options)).toContain('to open in Orca')
   })
+
+  it('keeps inversion for a runtime pane when its host can open an Orca browser', () => {
+    const options = terminalUrlOpenHintOptionsFor(
+      {
+        openLinksInApp: false,
+        openLinksInAppModifierInverts: true
+      },
+      { kind: 'runtime', runtimeEnvironmentId: 'env-1' },
+      true
+    )
+
+    expect(options.modifierInverts).toBe(true)
+  })
+})
+
+describe('terminalHttpLinkActionDestinationsFor', () => {
+  it('offers both destinations for a capable runtime and follows the preference', () => {
+    const owner = { kind: 'runtime', runtimeEnvironmentId: 'env-1' } as const
+
+    expect(terminalHttpLinkActionDestinationsFor({ openLinksInApp: true }, owner, true)).toEqual({
+      primary: 'orca',
+      alternate: 'system'
+    })
+    expect(terminalHttpLinkActionDestinationsFor({ openLinksInApp: false }, owner, true)).toEqual({
+      primary: 'system',
+      alternate: 'orca'
+    })
+  })
+
+  it.each([
+    ['incapable runtime', { kind: 'runtime', runtimeEnvironmentId: 'env-1' } as const],
+    ['SSH', { kind: 'ssh', connectionId: 'ssh-1' } as const],
+    ['unknown owner', { kind: 'unknown' } as const]
+  ])('offers only the system browser for an %s', (_label, owner) => {
+    expect(terminalHttpLinkActionDestinationsFor({ openLinksInApp: true }, owner, false)).toEqual({
+      primary: 'system'
+    })
+  })
 })
diff --git a/src/renderer/src/components/terminal-pane/terminal-link-open-hints.ts b/src/renderer/src/components/terminal-pane/terminal-link-open-hints.ts
index e1a5f4ff81f..7820f28341f 100644
--- a/src/renderer/src/components/terminal-pane/terminal-link-open-hints.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-link-open-hints.ts
@@ -1,4 +1,5 @@
 import type { HttpLinkSourceOwner } from '@/lib/http-link-routing'
+import type { TerminalHttpLinkActionDestinations } from './terminal-url-link-hit-testing'
 
 export function isMacPlatform(): boolean {
   return navigator.userAgent.includes('Mac')
@@ -36,10 +37,22 @@ export type TerminalUrlOpenHintOptions = {
   showActions?: boolean
 }
 
-// Why: openHttpLink only routes to Orca when the source is local, so a remote pane
-// pins every link to the system browser and inverting cannot reach Orca there. The
-// clicked pane's owner decides that, not the global active runtime — a workspace-bound
-// remote pane is remote even when no runtime is globally active.
+export function terminalHttpLinkActionDestinationsFor(
+  settings: { openLinksInApp?: boolean } | null | undefined,
+  sourceOwner: HttpLinkSourceOwner,
+  canOpenRuntimeBrowser: boolean
+): TerminalHttpLinkActionDestinations {
+  const canOpenInOrca =
+    sourceOwner.kind === 'local' || (sourceOwner.kind === 'runtime' && canOpenRuntimeBrowser)
+  if (!canOpenInOrca) {
+    return { primary: 'system' }
+  }
+  return settings?.openLinksInApp === true
+    ? { primary: 'orca', alternate: 'system' }
+    : { primary: 'system', alternate: 'orca' }
+}
+
+// Why: only a capability-verified runtime can advertise the in-app destination.
 export function terminalUrlOpenHintOptionsFor(
   settings:
     | {
@@ -49,14 +62,15 @@ export function terminalUrlOpenHintOptionsFor(
       }
     | null
     | undefined,
-  sourceOwner?: HttpLinkSourceOwner
+  sourceOwner?: HttpLinkSourceOwner,
+  canOpenRuntimeBrowser = false
 ): TerminalUrlOpenHintOptions {
-  const sourceIsLocal = sourceOwner
-    ? sourceOwner.kind === 'local'
+  const sourceCanOpenInOrca = sourceOwner
+    ? sourceOwner.kind === 'local' || (sourceOwner.kind === 'runtime' && canOpenRuntimeBrowser)
     : !settings?.activeRuntimeEnvironmentId?.trim()
   return {
     openLinksInApp: settings?.openLinksInApp === true,
-    modifierInverts: settings?.openLinksInAppModifierInverts === true && sourceIsLocal
+    modifierInverts: settings?.openLinksInAppModifierInverts === true && sourceCanOpenInOrca
   }
 }
 
diff --git a/src/renderer/src/components/terminal-pane/terminal-parked-pty-watcher.ts b/src/renderer/src/components/terminal-pane/terminal-parked-pty-watcher.ts
index 4c091456e32..fb0bf470004 100644
--- a/src/renderer/src/components/terminal-pane/terminal-parked-pty-watcher.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-parked-pty-watcher.ts
@@ -1,5 +1,5 @@
 import { isTerminalLeafId } from '../../../../shared/stable-pane-id'
-import { isRemoteRuntimePtyId, sendRuntimePtyInput } from '@/runtime/runtime-terminal-inspection'
+import { isRemoteRuntimePtyId } from '@/runtime/runtime-terminal-inspection'
 import { useAppStore } from '@/store'
 import { closeTerminalTab } from '../terminal/terminal-tab-actions'
 import { startParkedTerminalByteWatcher } from './parked-terminal-byte-watcher'
@@ -82,10 +82,7 @@ export function startParkedPtyWatcher(args: {
     paneId: pane.paneId,
     drivesTabTitle: pane.drivesTabTitle,
     ...(initialTitle !== undefined ? { initialTitle } : {}),
-    ...(restoreTitleOnRegister ? { restoreTitleOnRegister: true } : {}),
-    sendInput: (data) => {
-      sendRuntimePtyInput(useAppStore.getState().settings, ptyId, data)
-    }
+    ...(restoreTitleOnRegister ? { restoreTitleOnRegister: true } : {})
   })
   const unsubscribeExit = isRemoteRuntimePtyId(ptyId)
     ? () => {}
diff --git a/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.test.ts b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.test.ts
index 2e9b3a52ef2..a129f033176 100644
--- a/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-parked-tab-watchers.test.ts
@@ -206,14 +206,6 @@ describe('terminal-parked-tab-watchers', () => {
     expect(startedWatchers[0].options.restoreTitleOnRegister).toBe(true)
   })
 
-  it('routes watcher sendInput to window.api.pty.write for the watched PTY', () => {
-    capturePanes([{ ptyId: PTY_ID, paneId: 1, leafId: LEAF_ID, drivesTabTitle: true }])
-    syncParked()
-
-    startedWatchers[0].options.sendInput('\x1b[?2031;1$y')
-    expect(ptyWrite).toHaveBeenCalledWith(PTY_ID, '\x1b[?2031;1$y')
-  })
-
   it('skips legacy non-UUID leaf ids instead of throwing in makePaneKey', () => {
     capturePanes([
       { ptyId: PTY_ID, paneId: 1, leafId: 'legacy-leaf-1', drivesTabTitle: true },
diff --git a/src/renderer/src/components/terminal-pane/terminal-parked-watcher-registry.ts b/src/renderer/src/components/terminal-pane/terminal-parked-watcher-registry.ts
index 1f4b522040a..b2fb9b3de07 100644
--- a/src/renderer/src/components/terminal-pane/terminal-parked-watcher-registry.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-parked-watcher-registry.ts
@@ -58,10 +58,10 @@ export function terminalWatcherLiveWorkspaceIds(workspaceIds: Iterable<string>):
 }
 
 /**
- * Whether this tab is parked right now — the reveal remount's own mount effect
- * runs before the host effect that disposes the watcher (child effects first),
- * so a pane reading this at connect time can tell a park-reveal from an
- * in-place reattach. Empty entries are pinned-close tombstones, not live parks.
+ * Whether this tab is parked right now — the reveal remount renders before the
+ * host effect that disposes the watcher, so a pane reading this at render time
+ * can tell a park-reveal from an in-place reattach. Empty entries are
+ * pinned-close tombstones, not live parks.
  */
 export function isTerminalTabParked(tabId: string): boolean {
   return (parkedWatchersByTabId.get(tabId)?.disposersByPtyId.size ?? 0) > 0
diff --git a/src/renderer/src/components/terminal-pane/terminal-paste-diagnostics.ts b/src/renderer/src/components/terminal-pane/terminal-paste-diagnostics.ts
index b32decb98ff..9c89536db50 100644
--- a/src/renderer/src/components/terminal-pane/terminal-paste-diagnostics.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-paste-diagnostics.ts
@@ -29,7 +29,7 @@ export function createRedactedPasteExecutionDiagnostic({
   chunksWritten: number
   durationMs: number
   plan: TerminalPastePlan
-  reason?: TerminalPasteExecutionReason | string
+  reason?: TerminalPasteExecutionReason | (string & {})
   status: TerminalPasteExecutionResult['status']
 }): string {
   return [
diff --git a/src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts b/src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts
index 0113ea31a3d..01896238c05 100644
--- a/src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-runtime-host-link-routing.test.ts
@@ -1,6 +1,9 @@
 import type { IBufferLine, Terminal } from '@xterm/xterm'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { registerHttpLinkStoreAccessor } from '@/lib/http-link-routing'
+import {
+  registerHttpLinkStoreAccessor,
+  registerRuntimeHttpLinkBrowserOpener
+} from '@/lib/http-link-routing'
 import { handleOscLink } from './terminal-osc-link-routing'
 import { handleTerminalWebLinkClick } from './terminal-web-link-click'
 import { installHttpLinkClickFallback } from './terminal-url-link-hit-testing'
@@ -12,6 +15,7 @@ const ROWS = 24
 const openUrlMock = vi.fn()
 const setActiveWorktreeMock = vi.fn()
 const createBrowserTabMock = vi.fn()
+const openRuntimeBrowserTabMock = vi.fn(() => Promise.resolve())
 const runtimeSourceOwner = { kind: 'runtime', runtimeEnvironmentId: 'env-1' } as const
 const sshSourceOwner = { kind: 'ssh', connectionId: 'ssh-1' } as const
 
@@ -104,26 +108,34 @@ beforeEach(() => {
     setActiveWorktree: setActiveWorktreeMock,
     createBrowserTab: createBrowserTabMock
   }))
+  registerRuntimeHttpLinkBrowserOpener(openRuntimeBrowserTabMock)
 })
 
 afterEach(() => {
+  registerRuntimeHttpLinkBrowserOpener(null)
   vi.unstubAllGlobals()
 })
 
 describe('terminal HTTP links on a runtime-hosted pane', () => {
   const baseDeps = { worktreeId: 'wt-1', worktreePath: '/tmp', startupCwd: '/tmp' }
 
-  it('sends an OSC 8 hyperlink to the system browser', () => {
+  it('opens an OSC 8 hyperlink on the owning runtime', () => {
     expect(handleOscLink(URL, clickEvent(), { ...baseDeps, sourceOwner: runtimeSourceOwner })).toBe(
       true
     )
 
-    expect(openUrlMock).toHaveBeenCalledWith(URL)
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: URL,
+      intent: { kind: 'url' },
+      expectedRuntimeEnvironmentId: 'env-1'
+    })
+    expect(openUrlMock).not.toHaveBeenCalled()
     expect(createBrowserTabMock).not.toHaveBeenCalled()
     expect(setActiveWorktreeMock).not.toHaveBeenCalled()
   })
 
-  it('sends a WebLinksAddon click to the system browser', () => {
+  it('opens a WebLinksAddon click on the owning runtime', () => {
     const { terminal } = makeTerminal()
 
     expect(
@@ -134,11 +146,14 @@ describe('terminal HTTP links on a runtime-hosted pane', () => {
       })
     ).toBe(true)
 
-    expect(openUrlMock).toHaveBeenCalledWith(URL)
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith(
+      expect.objectContaining({ expectedRuntimeEnvironmentId: 'env-1', url: URL })
+    )
+    expect(openUrlMock).not.toHaveBeenCalled()
     expect(createBrowserTabMock).not.toHaveBeenCalled()
   })
 
-  it('sends a click-fallback activation to the system browser', () => {
+  it('opens a click-fallback activation on the owning runtime', () => {
     const { terminal, registrations } = makeTerminal()
     const disposable = installHttpLinkClickFallback(terminal, {
       worktreeId: 'wt-1',
@@ -149,12 +164,15 @@ describe('terminal HTTP links on a runtime-hosted pane', () => {
       ([name, _listener, options]) => name === 'mouseup' && options === undefined
     )?.[1](clickEvent())
 
-    expect(openUrlMock).toHaveBeenCalledWith(URL)
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith(
+      expect.objectContaining({ expectedRuntimeEnvironmentId: 'env-1', url: URL })
+    )
+    expect(openUrlMock).not.toHaveBeenCalled()
     expect(createBrowserTabMock).not.toHaveBeenCalled()
     disposable.dispose()
   })
 
-  it('never prompts for the in-app routing preference it could not honor', () => {
+  it('uses the persisted routing preference without prompting again', () => {
     const requestOpenLinksInAppPreference = vi.fn(() => Promise.resolve(true))
 
     handleOscLink(URL, clickEvent(), {
@@ -164,7 +182,8 @@ describe('terminal HTTP links on a runtime-hosted pane', () => {
     })
 
     expect(requestOpenLinksInAppPreference).not.toHaveBeenCalled()
-    expect(openUrlMock).toHaveBeenCalledWith(URL)
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledOnce()
+    expect(openUrlMock).not.toHaveBeenCalled()
   })
 })
 
diff --git a/src/renderer/src/components/terminal-pane/terminal-side-effect-facts-handler.ts b/src/renderer/src/components/terminal-pane/terminal-side-effect-facts-handler.ts
index 546af83987b..578a4147375 100644
--- a/src/renderer/src/components/terminal-pane/terminal-side-effect-facts-handler.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-side-effect-facts-handler.ts
@@ -86,8 +86,8 @@ export type TerminalSideEffectFactConsumerCallbacks = {
   onCommandCodeWorking?: (prompt: string) => void
   onCommandCodeDone?: (prompt: string) => void
   /** DECSET 2031 subscribe observed by main's tracker. Registered only by
-   *  hidden-delivery-gated consumers (their bytes never arrive); the theme
-   *  reply is sent renderer-side — query authority stays with the view. */
+   *  hidden-delivery-gated consumers (their bytes never arrive); it records the
+   *  subscription for later theme-flip pushes, it does not answer. */
   onMode2031Subscribe?: () => void
   /** DECSET 2031 withdrawal observed by main's tracker. Clears the pane's
    *  subscription registry so later theme flips stop pushing CSI 997. */
diff --git a/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.test.ts b/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.test.ts
index 9a3aa6621c5..042f6bed3d8 100644
--- a/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.test.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.test.ts
@@ -89,18 +89,35 @@ describe('shouldSkipAltFrameForWidthMismatch', () => {
     expect(shouldSkipAltFrameForWidthMismatch(Number.NaN, 128)).toBe(false)
     expect(shouldSkipAltFrameForWidthMismatch(Number.POSITIVE_INFINITY, 128)).toBe(false)
   })
-
-  it('can conservatively skip a live frame until a hidden pane has a final grid', () => {
-    expect(shouldSkipAltFrameForWidthMismatch(135, undefined, { skipIfTargetUnknown: true })).toBe(
-      true
-    )
-    expect(
-      shouldSkipAltFrameForWidthMismatch(undefined, undefined, { skipIfTargetUnknown: true })
-    ).toBe(false)
-  })
 })
 
 describe('buildMainModelSnapshotReplayWrites alt-frame skip', () => {
+  it('restores the exact capture-grid alt frame while the target grid is unknown', async () => {
+    const terminal = new Terminal({ cols: 12, rows: 5, scrollback: 20 })
+    const snapshot = {
+      data: '\x1b[1;1HTOP---------\x1b[2;1HMIDDLE------\x1b[3;1HBOTTOM------',
+      frameRestoreAnsi: '\x1b[?25l',
+      alternateScreen: true,
+      scrollbackAnsi: 'history'
+    }
+
+    try {
+      const skipAltFrame = shouldSkipAltFrameForWidthMismatch(12, undefined)
+      for (const chunk of buildMainModelSnapshotReplayWrites(snapshot, { skipAltFrame })) {
+        await writeTerminal(terminal, chunk)
+      }
+
+      expect(
+        Array.from({ length: 3 }, (_, row) =>
+          terminal.buffer.active.getLine(row)?.translateToString(true)
+        )
+      ).toEqual(['TOP---------', 'MIDDLE------', 'BOTTOM------'])
+      expect(terminal.buffer.normal.getLine(0)?.translateToString(true)).toBe('history')
+    } finally {
+      terminal.dispose()
+    }
+  })
+
   it('keeps normal history and a clean alt grid through the real resize path', async () => {
     const terminal = new Terminal({ cols: 12, rows: 5, scrollback: 20 })
     const snapshot = {
diff --git a/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.ts b/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.ts
index 643ca0de925..aa41ff6d645 100644
--- a/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-snapshot-replay-paint.ts
@@ -35,8 +35,8 @@ export function resolvePositiveTerminalDimensions(
  * The column count the post-replay fit will land on. Why not terminal.cols: a
  * pane that has not been fitted yet still reads xterm's 80-column default, so
  * comparing against it would drop frames whose width actually matches the
- * container. Returns undefined when the pane cannot be measured; callers with
- * a repaint owner can clear and defer, while offline preconnect paint cannot.
+ * container. Returns undefined when the pane cannot be measured, so replay can
+ * retain the frame at its capture grid until a final fit exists.
  */
 export function readProposedTerminalCols(pane: ManagedPane): number | undefined {
   return readProposedPaneFitDimensions(pane)?.cols
@@ -44,15 +44,14 @@ export function readProposedTerminalCols(pane: ManagedPane): number | undefined
 
 export function shouldSkipAltFrameForWidthMismatch(
   snapshotCols: number | undefined,
-  targetCols: number | undefined,
-  options: { skipIfTargetUnknown?: boolean } = {}
+  targetCols: number | undefined
 ): boolean {
   if (typeof snapshotCols !== 'number' || !Number.isFinite(snapshotCols) || snapshotCols <= 0) {
     return false
   }
   if (typeof targetCols !== 'number' || !Number.isFinite(targetCols) || targetCols <= 0) {
-    // A hidden pane has no final grid; its live app can repaint after the deferred fit.
-    return options.skipIfTargetUnknown === true
+    // Keep the frame at its capture grid until a real fit can replace that grid.
+    return false
   }
   // Fixed-grid alt rows clip at narrower columns; normal history remains reflowable.
   return snapshotCols > targetCols
diff --git a/src/renderer/src/components/terminal-pane/terminal-tab-activation-order.ts b/src/renderer/src/components/terminal-pane/terminal-tab-activation-order.ts
new file mode 100644
index 00000000000..2f4096b1142
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/terminal-tab-activation-order.ts
@@ -0,0 +1,35 @@
+/** Ranks tabs hidden in the same pass by the user's activation order. */
+export type TerminalTabActivationOrder = {
+  recordActiveTabId(activeTabId: string | null): void
+  getActivationSeq(tabId: string): number | undefined
+  retainTabIds(liveTabIds: ReadonlySet<string>): void
+}
+
+export function createTerminalTabActivationOrder(): TerminalTabActivationOrder {
+  const activationSeqByTabId = new Map<string, number>()
+  let previousActiveTabId: string | null = null
+  let nextActivationSeq = 0
+
+  return {
+    recordActiveTabId(activeTabId) {
+      if (activeTabId !== null && activeTabId !== previousActiveTabId) {
+        activationSeqByTabId.set(activeTabId, nextActivationSeq)
+        nextActivationSeq += 1
+      }
+      previousActiveTabId = activeTabId
+    },
+    getActivationSeq(tabId) {
+      return activationSeqByTabId.get(tabId)
+    },
+    retainTabIds(liveTabIds) {
+      if (previousActiveTabId !== null && !liveTabIds.has(previousActiveTabId)) {
+        previousActiveTabId = null
+      }
+      for (const tabId of Array.from(activationSeqByTabId.keys())) {
+        if (!liveTabIds.has(tabId)) {
+          activationSeqByTabId.delete(tabId)
+        }
+      }
+    }
+  }
+}
diff --git a/src/renderer/src/components/terminal-pane/terminal-tab-park-candidates.ts b/src/renderer/src/components/terminal-pane/terminal-tab-park-candidates.ts
new file mode 100644
index 00000000000..cb0e357b280
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/terminal-tab-park-candidates.ts
@@ -0,0 +1,43 @@
+/** Builds the stateful per-tab cold-park candidate list. */
+import type { TerminalTab } from '../../../../shared/types'
+import type { TerminalTabColdParkCandidate } from './terminal-hidden-view-parking'
+import type { TerminalTabActivationOrder } from './terminal-tab-activation-order'
+
+export function buildTerminalTabColdParkCandidates(args: {
+  terminalTabs: readonly TerminalTab[]
+  assignments: ReadonlyMap<string, { isActiveInGroup: boolean }>
+  isWorktreeActive: boolean
+  activeTerminalTabId: string | null
+  portalTabIds: ReadonlySet<string>
+  shouldMeasureHiddenWorktree: boolean
+  hiddenSinceByTabId: Map<string, number>
+  activationOrder: TerminalTabActivationOrder
+  nowMs: number
+}): TerminalTabColdParkCandidate[] {
+  args.activationOrder.recordActiveTabId(args.isWorktreeActive ? args.activeTerminalTabId : null)
+  const visibleTabIds = new Set<string>()
+  for (const terminalTab of args.terminalTabs) {
+    if (args.isWorktreeActive && args.assignments.get(terminalTab.id)?.isActiveInGroup === true) {
+      visibleTabIds.add(terminalTab.id)
+    }
+  }
+  return args.terminalTabs.map((terminalTab) => {
+    const isVisible = visibleTabIds.has(terminalTab.id)
+    const hasActivityTerminalPortal = args.portalTabIds.has(terminalTab.id)
+    // Why: measure probes need mounted panes without restarting the park clock.
+    if (isVisible || hasActivityTerminalPortal) {
+      args.hiddenSinceByTabId.delete(terminalTab.id)
+    } else if (!args.shouldMeasureHiddenWorktree && !args.hiddenSinceByTabId.has(terminalTab.id)) {
+      args.hiddenSinceByTabId.set(terminalTab.id, args.nowMs)
+    }
+    return {
+      id: terminalTab.id,
+      ptyId: terminalTab.ptyId,
+      pendingActivationSpawn: terminalTab.pendingActivationSpawn,
+      isVisible,
+      hasActivityTerminalPortal,
+      hiddenSinceMs: args.hiddenSinceByTabId.get(terminalTab.id) ?? null,
+      lastActivatedSeq: args.activationOrder.getActivationSeq(terminalTab.id)
+    }
+  })
+}
diff --git a/src/renderer/src/components/terminal-pane/terminal-url-link-hit-testing.ts b/src/renderer/src/components/terminal-pane/terminal-url-link-hit-testing.ts
index 98824d140f4..fad5301c804 100644
--- a/src/renderer/src/components/terminal-pane/terminal-url-link-hit-testing.ts
+++ b/src/renderer/src/components/terminal-pane/terminal-url-link-hit-testing.ts
@@ -72,7 +72,7 @@ export function handleTerminalHttpLink(
 ): boolean {
   if (isTerminalHttpLinkActivation(event)) {
     const forceDestination = event?.shiftKey
-      ? deps.actionDestinations?.alternate
+      ? (deps.actionDestinations?.alternate ?? deps.actionDestinations?.primary)
       : deps.actionDestinations?.primary
     openTerminalHttpLink(url, {
       ...deps,
@@ -273,11 +273,11 @@ function rangeContainsBufferPosition(
 }
 
 export function openTerminalHttpLink(url: string, deps: UrlLinkHitTestDeps): void {
-  // Why: Orca browser tabs are local-only, so a link clicked in a runtime-hosted
-  // pane must be classified by its pane's host, not the global active runtime.
+  // Why: pane ownership beats the global active runtime for both local and remote routes.
   const sourceOwner = deps.sourceOwner ?? { kind: 'local' }
   if (deps.forceDestination) {
     openHttpLink(url, {
+      allowRuntimeInApp: true,
       worktreeId: deps.worktreeId,
       forceInApp: deps.forceDestination === 'orca',
       forceSystemBrowser: deps.forceDestination === 'system',
@@ -288,16 +288,20 @@ export function openTerminalHttpLink(url: string, deps: UrlLinkHitTestDeps): voi
   if (deps.modifierHeld) {
     // Why: the modifier states a destination outright, so it also skips the
     // one-time routing prompt; openHttpLink resolves which destination it means.
-    openHttpLink(url, { worktreeId: deps.worktreeId, modifierHeld: true, sourceOwner })
+    openHttpLink(url, {
+      allowRuntimeInApp: true,
+      worktreeId: deps.worktreeId,
+      modifierHeld: true,
+      sourceOwner
+    })
     return
   }
 
-  // Why: a runtime-hosted link can only reach the system browser, so prompting
-  // would persist an in-app preference this click cannot honor.
+  // Why: remote panes use the persisted routing preference and never prompt the viewing client.
   const preferenceDecision =
     sourceOwner.kind === 'local' ? deps.requestOpenLinksInAppPreference?.(url) : null
   if (preferenceDecision === null || preferenceDecision === undefined) {
-    openHttpLink(url, { worktreeId: deps.worktreeId, sourceOwner })
+    openHttpLink(url, { allowRuntimeInApp: true, worktreeId: deps.worktreeId, sourceOwner })
     return
   }
 
@@ -307,12 +311,18 @@ export function openTerminalHttpLink(url: string, deps: UrlLinkHitTestDeps): voi
   void Promise.resolve(preferenceDecision)
     .then((openInOrca) => {
       openHttpLink(url, {
+        allowRuntimeInApp: true,
         worktreeId: deps.worktreeId,
         forceSystemBrowser: !openInOrca,
         sourceOwner
       })
     })
     .catch(() => {
-      openHttpLink(url, { worktreeId: deps.worktreeId, forceSystemBrowser: true, sourceOwner })
+      openHttpLink(url, {
+        allowRuntimeInApp: true,
+        worktreeId: deps.worktreeId,
+        forceSystemBrowser: true,
+        sourceOwner
+      })
     })
 }
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-global-effects.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-global-effects.ts
index f9a6e544193..9e9a63a94f2 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-global-effects.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-global-effects.ts
@@ -168,18 +168,18 @@ export function useTerminalPaneGlobalEffects({
       hiddenReasonRef.current = null
       applyPendingFollowOutputRequests()
       return
-    } else {
-      const hiddenState = hideTerminalVisibility({
-        manager,
-        wasVisible,
-        wasWorktreeActive,
-        isWorktreeActive,
-        hasCompletedVisibleResume: hasCompletedVisibleResumeRef.current,
-        captureViewportPositions
-      })
-      renderingSuspendedByVisibilityRef.current = hiddenState.renderingSuspended
-      hiddenReasonRef.current = hiddenState.hiddenReason
     }
+    const hiddenState = hideTerminalVisibility({
+      manager,
+      wasVisible,
+      wasWorktreeActive,
+      isWorktreeActive,
+      hasCompletedVisibleResume: hasCompletedVisibleResumeRef.current,
+      captureViewportPositions
+    })
+    renderingSuspendedByVisibilityRef.current = hiddenState.renderingSuspended
+    hiddenReasonRef.current = hiddenState.hiddenReason
+
     wasVisibleRef.current = false
     wasWorktreeActiveRef.current = isWorktreeActive
     // eslint-disable-next-line react-hooks/exhaustive-deps
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.test.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.test.ts
index 74e53a0b6be..bc0582ca9fe 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.test.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.test.ts
@@ -9,6 +9,7 @@ import {
   resolvePaneLinkCwd,
   resolvePaneSeedCwd,
   resolveQueuedInitialCwd,
+  replayLayoutWithOneShotParkIntent,
   resetTerminalKeyboardProtocolAfterInterrupt,
   retireMountedTerminalPaneSurface,
   shouldDetachPaneTransportOnUnmount,
@@ -248,6 +249,35 @@ describe('splitPaneWithOneShotStartup', () => {
   })
 })
 
+describe('replayLayoutWithOneShotParkIntent', () => {
+  it('exposes park intent to replayed panes and clears it before later splits', () => {
+    const deps = { mountFollowsTerminalPark: true }
+    const observedByReplayedPane: boolean[] = []
+
+    const restored = replayLayoutWithOneShotParkIntent(deps, () => {
+      observedByReplayedPane.push(deps.mountFollowsTerminalPark)
+      return 'restored-panes'
+    })
+
+    expect(restored).toBe('restored-panes')
+    expect(observedByReplayedPane).toEqual([true])
+    // A split after replay reads the same deps object, so it must see ordinary reconnect semantics.
+    expect(deps.mountFollowsTerminalPark).toBe(false)
+  })
+
+  it('clears park intent even when layout replay throws', () => {
+    const deps = { mountFollowsTerminalPark: true }
+
+    expect(() =>
+      replayLayoutWithOneShotParkIntent(deps, () => {
+        throw new Error('replay failed')
+      })
+    ).toThrow('replay failed')
+
+    expect(deps.mountFollowsTerminalPark).toBe(false)
+  })
+})
+
 describe('applyTerminalScrollbackRowsToMountedPanes', () => {
   it('updates mounted pane xterm scrollback options only when needed', () => {
     const firstOptions = { scrollback: 1_000 }
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.ts b/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.ts
index 4e23a47538e..31928913df5 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-pane-lifecycle.ts
@@ -32,7 +32,10 @@ import {
   getTerminalUrlOpenHint,
   installFilePathLinkClickFallback
 } from './terminal-link-handlers'
-import { terminalUrlOpenHintOptionsFor } from './terminal-link-open-hints'
+import {
+  terminalHttpLinkActionDestinationsFor,
+  terminalUrlOpenHintOptionsFor
+} from './terminal-link-open-hints'
 import { createTerminalHandleLinkProvider } from './terminal-handle-links'
 import type { LinkHandlerDeps } from './terminal-link-handlers'
 import { handleOscLink } from './terminal-osc-link-routing'
@@ -53,6 +56,7 @@ import {
   type HttpLinkSourceOwner
 } from '@/lib/http-link-routing'
 import { resolveTerminalHttpLinkSourceOwner } from './terminal-http-link-source-owner'
+import { canOpenWorkspaceBrowserTabOnRuntime } from '@/lib/workspace-browser-tab-open'
 import type {
   GlobalSettings,
   SetupSplitDirection,
@@ -126,6 +130,7 @@ import { markTerminalPinnedViewport } from '@/lib/pane-manager/terminal-scroll-i
 import { syncTerminalScrollIntentSoon } from '@/lib/pane-manager/terminal-scroll-intent-settle'
 import { registerRuntimeTerminalTab, scheduleRuntimeGraphSync } from '@/runtime/sync-runtime-graph'
 import { captureParkedTerminalPaneCandidates } from './terminal-parked-tab-watchers'
+import { useTerminalParkMountIntent } from './use-terminal-park-mount-intent'
 import { e2eConfig } from '@/lib/e2e-config'
 import {
   PRIMARY_SELECTION_MAX_LENGTH,
@@ -479,6 +484,19 @@ export function splitPaneWithOneShotStartup<TPane>(
   }
 }
 
+/** Scopes `deps.mountFollowsTerminalPark` to the restored-layout replay. */
+export function replayLayoutWithOneShotParkIntent<TRestored>(
+  deps: { mountFollowsTerminalPark: boolean },
+  replayLayout: () => TRestored
+): TRestored {
+  // Why: only panes reconstructed by this replay belong to the park reveal; later splits must use ordinary reconnect semantics.
+  try {
+    return replayLayout()
+  } finally {
+    deps.mountFollowsTerminalPark = false
+  }
+}
+
 export function shouldDetachPaneTransportOnUnmount(args: {
   tabStillExists: boolean
   tabId: string
@@ -661,6 +679,7 @@ export function useTerminalPaneLifecycle({
   const systemPrefersDarkRef = useRef(systemPrefersDark)
   systemPrefersDarkRef.current = systemPrefersDark
   const previousVisibleForReconcileRef = useRef<TerminalPaneVisibilitySnapshot | null>(null)
+  const mountFollowsTerminalPark = useTerminalParkMountIntent(tabId)
   const linkProviderDisposablesRef = useRef(new Map<number, IDisposable>())
   const terminalHandleLinkDisposablesRef = useRef(new Map<number, IDisposable>())
   const linkifierClickPrimingDisposablesRef = useRef(new Map<number, IDisposable>())
@@ -742,15 +761,24 @@ export function useTerminalPaneLifecycle({
       resolvePaneLinkCwd(paneCwdRef.current, paneId, startupCwd)
     const getHttpLinkSourceOwnerForPane = (paneId: number) =>
       resolveTerminalHttpLinkSourceOwner(paneTransportsRef.current.get(paneId))
+    const canOpenRuntimeBrowserForPane = (paneId: number): boolean => {
+      const sourceOwner = getHttpLinkSourceOwnerForPane(paneId)
+      return (
+        sourceOwner.kind === 'runtime' &&
+        canOpenWorkspaceBrowserTabOnRuntime(
+          useAppStore.getState(),
+          worktreeId,
+          sourceOwner.runtimeEnvironmentId
+        )
+      )
+    }
     const getHttpLinkActionDestinations = (paneId: number): TerminalHttpLinkActionDestinations => {
       const sourceOwner = getHttpLinkSourceOwnerForPane(paneId)
-      if (sourceOwner.kind !== 'local') {
-        return { primary: 'system' }
-      }
-      const options = terminalUrlOpenHintOptionsFor(settingsRef.current, sourceOwner)
-      return options.openLinksInApp
-        ? { primary: 'orca', alternate: 'system' }
-        : { primary: 'system', alternate: 'orca' }
+      return terminalHttpLinkActionDestinationsFor(
+        settingsRef.current,
+        sourceOwner,
+        canOpenRuntimeBrowserForPane(paneId)
+      )
     }
     const getLinkActionContext = (paneId: number): TerminalLinkActionContext | null => {
       if (settingsRef.current?.terminalLinkActionPopoverEnabled === false) {
@@ -841,6 +869,7 @@ export function useTerminalPaneLifecycle({
       worktreeId,
       cwd: startupCwd,
       startup: startupWithSetupSplitWait,
+      mountFollowsTerminalPark,
       paneTransportsRef,
       paneMode2031Ref,
       paneKittyKeyboardModesRef,
@@ -879,10 +908,10 @@ export function useTerminalPaneLifecycle({
         }
         suppression.handlePtyInput(data, forward)
       },
-      // Why: record the main-answered 2031 subscribe in the CSI handler's registries, else theme flips never push CSI 997.
-      recordPaneMode2031Subscription: (paneId: number, repliedMode: 'dark' | 'light') => {
+      // Why: record the fact-observed 2031 subscribe in the pane registries, else theme flips never push CSI 997.
+      recordPaneMode2031Subscription: (paneId: number, subscribedMode: 'dark' | 'light') => {
         paneMode2031Ref.current.set(paneId, true)
-        paneLastThemeModeRef.current.set(paneId, repliedMode)
+        paneLastThemeModeRef.current.set(paneId, subscribedMode)
       },
       restoredPtyIdByLeafId: initialLayoutRef.current.ptyIdsByLeafId ?? {}
     }
@@ -901,7 +930,8 @@ export function useTerminalPaneLifecycle({
       getTerminalUrlOpenHint({
         ...terminalUrlOpenHintOptionsFor(
           settingsRef.current,
-          getHttpLinkSourceOwnerForPane(paneId)
+          getHttpLinkSourceOwnerForPane(paneId),
+          canOpenRuntimeBrowserForPane(paneId)
         ),
         showActions: settingsRef.current?.terminalLinkActionPopoverEnabled !== false
       })
@@ -1561,7 +1591,9 @@ export function useTerminalPaneLifecycle({
       window.__paneManagers = window.__paneManagers ?? new Map()
       window.__paneManagers.set(tabId, manager)
     }
-    const restoredPaneByLeafId = replayTerminalLayout(manager, initialLayoutRef.current, isActive)
+    const restoredPaneByLeafId = replayLayoutWithOneShotParkIntent(ptyDeps, () =>
+      replayTerminalLayout(manager, initialLayoutRef.current, isActive)
+    )
 
     const restoredBuffers = initialLayoutRef.current.buffersByLeafId
     restoreScrollbackBuffers(
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.react185.test.tsx b/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.react185.test.tsx
new file mode 100644
index 00000000000..7ab3ac8ae30
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.react185.test.tsx
@@ -0,0 +1,76 @@
+/** @vitest-environment happy-dom */
+import { StrictMode, act, useEffect } from 'react'
+import { createRoot } from 'react-dom/client'
+import { afterEach, describe, expect, it } from 'vitest'
+import { disposeParkedTabWatchers, parkedWatchersByTabId } from './terminal-parked-watcher-registry'
+import { useTerminalParkMountIntent } from './use-terminal-park-mount-intent'
+
+;(globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true
+
+const TAB_ID = 'strict-park-reveal'
+const observations: boolean[] = []
+
+function Child(): null {
+  const mountFollowsTerminalPark = useTerminalParkMountIntent(TAB_ID)
+  useEffect(() => {
+    observations.push(mountFollowsTerminalPark)
+  }, [mountFollowsTerminalPark])
+  return null
+}
+
+function Parent() {
+  useEffect(() => {
+    disposeParkedTabWatchers(TAB_ID)
+  }, [])
+  return <Child />
+}
+
+function parkTab(): void {
+  parkedWatchersByTabId.set(TAB_ID, {
+    worktreeId: 'wt-1',
+    tabPtyId: 'pty-1',
+    paneIdByPtyId: new Map([['pty-1', 1]]),
+    disposersByPtyId: new Map([['pty-1', () => {}]])
+  })
+}
+
+afterEach(() => {
+  observations.length = 0
+  disposeParkedTabWatchers(TAB_ID)
+})
+
+describe('useTerminalParkMountIntent', () => {
+  it('survives StrictMode effect replay after the parent disposes the watcher', () => {
+    parkTab()
+    const container = document.createElement('div')
+    const root = createRoot(container)
+
+    act(() => {
+      root.render(
+        <StrictMode>
+          <Parent />
+        </StrictMode>
+      )
+    })
+
+    expect(observations).toEqual([true, true])
+    act(() => root.unmount())
+  })
+
+  // Why: the lifecycle effect re-runs on cwd changes for the same component
+  // instance, so intent cached per instance would resupply a stale park reveal.
+  it('re-reads park intent when the same instance re-renders after disposal', () => {
+    parkTab()
+    const container = document.createElement('div')
+    const root = createRoot(container)
+
+    act(() => root.render(<Child />))
+    expect(observations).toEqual([true])
+
+    disposeParkedTabWatchers(TAB_ID)
+    act(() => root.render(<Child />))
+
+    expect(observations).toEqual([true, false])
+    act(() => root.unmount())
+  })
+})
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.ts b/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.ts
new file mode 100644
index 00000000000..dba51fcc8ea
--- /dev/null
+++ b/src/renderer/src/components/terminal-pane/use-terminal-park-mount-intent.ts
@@ -0,0 +1,9 @@
+import { isTerminalTabParked } from './terminal-parked-watcher-registry'
+
+// Why render time: the host effect that disposes the watcher runs after every
+// child render, so reading here — not at connect time — is what lets a reveal
+// remount still see the park. Caching it per instance would instead resupply a
+// stale reveal on later same-instance effect re-runs (cwd change).
+export function useTerminalParkMountIntent(tabId: string): boolean {
+  return isTerminalTabParked(tabId)
+}
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.test.ts b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.test.ts
index 2e1c97c5450..783ff7af574 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.test.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.test.ts
@@ -74,6 +74,7 @@ function hookArgs(shouldMeasureHiddenWorktree: boolean) {
     terminalTabs: [terminalTab('tab-1'), terminalTab('tab-2')],
     assignments: new Map<string, { groupId: string; isActiveInGroup: boolean }>(),
     isWorktreeActive: false,
+    activeTerminalTabId: null as string | null,
     coldParkTerminalPanes: false,
     shouldMeasureHiddenWorktree,
     activityTerminalPortals: [],
@@ -97,6 +98,86 @@ describe('useTerminalTabColdParking measure-clock contract', () => {
     mocks.storeState.runtimeStatusByEnvironmentId = new Map()
   })
 
+  // Why: leaving a worktree gives every tab the same hidden time.
+  it('exempts the tab the worktree was left on when every tab hides in one pass', () => {
+    const assignments = new Map([
+      ['tab-1', { groupId: 'group-1', isActiveInGroup: false }],
+      ['tab-2', { groupId: 'group-1', isActiveInGroup: true }]
+    ])
+    const { result, rerender } = renderHook(
+      (args: ReturnType<typeof hookArgs> & { isWorktreeActive: boolean }) =>
+        useTerminalTabColdParking(args),
+      {
+        initialProps: {
+          ...hookArgs(false),
+          assignments,
+          isWorktreeActive: true,
+          activeTerminalTabId: 'tab-2'
+        }
+      }
+    )
+    expect(result.current.size).toBe(0)
+
+    act(() => {
+      rerender({
+        ...hookArgs(false),
+        assignments,
+        isWorktreeActive: false,
+        activeTerminalTabId: 'tab-2'
+      })
+    })
+    act(() => {
+      vi.advanceTimersByTime(TERMINAL_TAB_HOT_RETAIN_MS + 1)
+    })
+
+    expect(result.current).toEqual(new Set(['tab-1']))
+  })
+
+  it('records focused split changes when the visible tab set does not change', () => {
+    const assignments = new Map([
+      ['tab-1', { groupId: 'group-1', isActiveInGroup: true }],
+      ['tab-2', { groupId: 'group-2', isActiveInGroup: true }]
+    ])
+    const { result, rerender } = renderHook(
+      (
+        args: ReturnType<typeof hookArgs> & {
+          activeTerminalTabId: string | null
+          isWorktreeActive: boolean
+        }
+      ) => useTerminalTabColdParking(args),
+      {
+        initialProps: {
+          ...hookArgs(false),
+          assignments,
+          isWorktreeActive: true,
+          activeTerminalTabId: 'tab-1'
+        }
+      }
+    )
+
+    act(() => {
+      rerender({
+        ...hookArgs(false),
+        assignments,
+        isWorktreeActive: true,
+        activeTerminalTabId: 'tab-2'
+      })
+    })
+    act(() => {
+      rerender({
+        ...hookArgs(false),
+        assignments,
+        isWorktreeActive: false,
+        activeTerminalTabId: 'tab-2'
+      })
+    })
+    act(() => {
+      vi.advanceTimersByTime(TERMINAL_TAB_HOT_RETAIN_MS + 1)
+    })
+
+    expect(result.current).toEqual(new Set(['tab-1']))
+  })
+
   it('parks paired-runtime tabs only when their exact host advertises restore', () => {
     const environmentId = 'paired-env'
     const remoteArgs = {
diff --git a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
index f33023c9499..94df8daf738 100644
--- a/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
+++ b/src/renderer/src/components/terminal-pane/use-terminal-tab-cold-parking.ts
@@ -17,8 +17,7 @@ import { getTerminalTabColdParkRecheckDelayMs } from './terminal-cold-park-reche
 import {
   TERMINAL_TAB_COLD_PARK_DELAY_MS,
   selectPairedRuntimeParkingEnvironmentIds,
-  selectColdParkedTerminalTabs,
-  type TerminalTabColdParkCandidate
+  selectColdParkedTerminalTabs
 } from './terminal-hidden-view-parking'
 import {
   recordParkVerdictFlips,
@@ -32,6 +31,8 @@ import {
 } from './terminal-eviction-exempt-tabs'
 import { selectSleepingRecordParkExemptTabIds } from './sleeping-record-park-exemption'
 import { canWatcherCoverParkedTerminalTab } from './terminal-parked-tab-watchers'
+import { createTerminalTabActivationOrder } from './terminal-tab-activation-order'
+import { buildTerminalTabColdParkCandidates } from './terminal-tab-park-candidates'
 import {
   getTerminalParkingAssignmentsKey,
   getTerminalParkingInputsKey,
@@ -62,6 +63,7 @@ export function useTerminalTabColdParking(args: {
   terminalTabs: readonly TerminalTab[]
   assignments: ReadonlyMap<string, TerminalOverlayTabAssignment>
   isWorktreeActive: boolean
+  activeTerminalTabId: string | null
   /** Worktree-level park verdict from Terminal.tsx. */
   coldParkTerminalPanes: boolean
   /** Retention-budget force-park (C1 slice B): unlike ordinary parks, the
@@ -81,6 +83,7 @@ export function useTerminalTabColdParking(args: {
     terminalTabs,
     assignments,
     isWorktreeActive,
+    activeTerminalTabId,
     coldParkTerminalPanes,
     isForceParked = false,
     shouldMeasureHiddenWorktree,
@@ -115,6 +118,8 @@ export function useTerminalTabColdParking(args: {
     [sleepingAgentSessionsByPaneKey, worktreeId]
   )
   const terminalTabHiddenSinceRef = useRef(new Map<string, number>())
+  // Why: view switches hide every tab at once, so the park clock cannot rank them.
+  const terminalTabActivationOrderRef = useRef(createTerminalTabActivationOrder())
   // Why (shared measure-clock contract with Terminal.tsx): tab hiddenSince
   // survives a background-measure window so per-tab park deadlines stay in
   // sync with the worktree retention/TTL clock, and a post-measure cool-down
@@ -161,6 +166,7 @@ export function useTerminalTabColdParking(args: {
         terminalTabHiddenSinceRef.current.delete(tabId)
       }
     }
+    terminalTabActivationOrderRef.current.retainTabIds(currentTerminalTabIds)
 
     // Why: measure end starts the re-park cool-down (worktree measure-clock
     // contract) — hiddenSince is preserved through the window, so without the
@@ -180,30 +186,16 @@ export function useTerminalTabColdParking(args: {
       measureParkCooldownUntilRef.current = null
     }
 
-    const candidates: TerminalTabColdParkCandidate[] = terminalTabs.map((terminalTab) => {
-      const assignment = assignments.get(terminalTab.id)
-      const isVisible = Boolean(isWorktreeActive && assignment && assignment.isActiveInGroup)
-      const hasActivityTerminalPortal = portalTabIds.has(terminalTab.id)
-      // Why measuring preserves the clock: the startup probe still needs
-      // mounted panes (selection + render veto below), but deleting
-      // hiddenSince would restart the hysteresis AND desync per-tab deadlines
-      // from the worktree retention/TTL clock on every ~3s probe.
-      if (isVisible || hasActivityTerminalPortal) {
-        terminalTabHiddenSinceRef.current.delete(terminalTab.id)
-      } else if (
-        !shouldMeasureHiddenWorktree &&
-        !terminalTabHiddenSinceRef.current.has(terminalTab.id)
-      ) {
-        terminalTabHiddenSinceRef.current.set(terminalTab.id, nowMs)
-      }
-      return {
-        id: terminalTab.id,
-        ptyId: terminalTab.ptyId,
-        pendingActivationSpawn: terminalTab.pendingActivationSpawn,
-        isVisible,
-        hasActivityTerminalPortal,
-        hiddenSinceMs: terminalTabHiddenSinceRef.current.get(terminalTab.id) ?? null
-      }
+    const candidates = buildTerminalTabColdParkCandidates({
+      terminalTabs,
+      assignments,
+      isWorktreeActive,
+      activeTerminalTabId,
+      portalTabIds,
+      shouldMeasureHiddenWorktree,
+      hiddenSinceByTabId: terminalTabHiddenSinceRef.current,
+      activationOrder: terminalTabActivationOrderRef.current,
+      nowMs
     })
 
     const nextColdParkedTerminalTabIds = selectColdParkedTerminalTabs({
@@ -259,6 +251,7 @@ export function useTerminalTabColdParking(args: {
     // eslint-disable-next-line react-hooks/exhaustive-deps -- semantic keys own the tab and assignment dependencies.
   }, [
     activityTerminalPortals,
+    activeTerminalTabId,
     isWorktreeActive,
     pendingStartupByTabId,
     runtimeStatusByEnvironmentId,
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAdvancedSection.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAdvancedSection.tsx
index d49be9c9616..af196b2c628 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAdvancedSection.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAdvancedSection.tsx
@@ -7,6 +7,7 @@ import { Button } from '@/components/ui/button'
 import { cn } from '@/lib/utils'
 import { translate } from '@/i18n/i18n'
 import { TerminalQuickCommandAppendEnterSwitch } from './TerminalQuickCommandAppendEnterSwitch'
+import { TerminalQuickCommandCollapsibleRow } from './TerminalQuickCommandCollapsibleRow'
 import { TerminalQuickCommandScopeField } from './TerminalQuickCommandScopeField'
 
 type TerminalQuickCommandAdvancedSectionProps = {
@@ -50,42 +51,26 @@ export function TerminalQuickCommandAdvancedSection({
         <ChevronDown className={cn('size-4 transition-transform', advancedOpen && 'rotate-180')} />
       </Button>
 
-      <div
-        className={cn(
-          'grid overflow-hidden transition-[grid-template-rows] duration-200 ease-out',
-          advancedOpen ? 'grid-rows-[1fr]' : 'grid-rows-[0fr]'
-        )}
-        aria-hidden={!advancedOpen}
-      >
-        <div className="min-h-0">
-          <div
-            className={cn(
-              'space-y-4 px-1 pt-1 pb-1 transition-[opacity,transform] duration-150 ease-out',
-              advancedOpen
-                ? 'translate-y-0 opacity-100 delay-200'
-                : '-translate-y-1 opacity-0 delay-0'
-            )}
-          >
-            {!isTerminalAgentQuickCommand(draft) ? (
-              <TerminalQuickCommandAppendEnterSwitch
-                appendEnter={draft.appendEnter}
-                onToggle={toggleAppendEnter}
-              />
-            ) : null}
-            <TerminalQuickCommandScopeField
-              repos={repos}
-              selectedScope={selectedScope}
-              selectedRepoId={selectedRepoId}
-              selectedRepoMissing={selectedRepoMissing}
-              lastRepoScopeId={lastRepoScopeIdRef.current}
-              rememberRepoScopeId={(repoId) => {
-                lastRepoScopeIdRef.current = repoId
-              }}
-              setDraft={setDraft}
-            />
-          </div>
-        </div>
-      </div>
+      <TerminalQuickCommandCollapsibleRow open={advancedOpen} className="space-y-4 px-1 pt-2 pb-1">
+        <TerminalQuickCommandScopeField
+          repos={repos}
+          selectedScope={selectedScope}
+          selectedRepoId={selectedRepoId}
+          selectedRepoMissing={selectedRepoMissing}
+          lastRepoScopeId={lastRepoScopeIdRef.current}
+          rememberRepoScopeId={(repoId) => {
+            lastRepoScopeIdRef.current = repoId
+          }}
+          setDraft={setDraft}
+        />
+        {!isTerminalAgentQuickCommand(draft) ? (
+          <TerminalQuickCommandAppendEnterSwitch
+            appendEnter={draft.appendEnter}
+            disabled={!advancedOpen}
+            onToggle={toggleAppendEnter}
+          />
+        ) : null}
+      </TerminalQuickCommandCollapsibleRow>
     </div>
   )
 }
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAppendEnterSwitch.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAppendEnterSwitch.tsx
index 4450562729e..73f69ebf5d8 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAppendEnterSwitch.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandAppendEnterSwitch.tsx
@@ -3,11 +3,13 @@ import { Switch } from '@/components/ui/switch'
 type TerminalQuickCommandAppendEnterSwitchProps = {
   appendEnter: boolean
   onToggle: () => void
+  disabled?: boolean
 }
 
 export function TerminalQuickCommandAppendEnterSwitch({
   appendEnter,
-  onToggle
+  onToggle,
+  disabled = false
 }: TerminalQuickCommandAppendEnterSwitchProps): React.JSX.Element {
   return (
     <div className="flex items-start justify-between gap-4">
@@ -27,6 +29,7 @@ export function TerminalQuickCommandAppendEnterSwitch({
       </div>
       <Switch
         checked={appendEnter}
+        disabled={disabled}
         aria-label={translate(
           'auto.components.terminal.quick.commands.TerminalQuickCommandAppendEnterSwitch.e4e5fed3b3',
           'Toggle append Enter'
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandCollapsibleRow.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandCollapsibleRow.tsx
new file mode 100644
index 00000000000..ab09a287b6a
--- /dev/null
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandCollapsibleRow.tsx
@@ -0,0 +1,38 @@
+import type { ReactNode } from 'react'
+import { cn } from '@/lib/utils'
+
+type TerminalQuickCommandCollapsibleRowProps = {
+  open: boolean
+  className?: string
+  children: ReactNode
+}
+
+/** Why: switching action adds/removes fields; animating the rows keeps the
+ *  dialog from snapping between content heights. */
+export function TerminalQuickCommandCollapsibleRow({
+  open,
+  className,
+  children
+}: TerminalQuickCommandCollapsibleRowProps): React.JSX.Element {
+  return (
+    <div
+      className={cn(
+        'grid overflow-hidden transition-[grid-template-rows] duration-200 ease-out',
+        open ? 'grid-rows-[1fr]' : 'grid-rows-[0fr]'
+      )}
+      aria-hidden={!open}
+    >
+      <div className="min-h-0">
+        <div
+          className={cn(
+            'transition-[opacity,transform] duration-150 ease-out',
+            open ? 'translate-y-0 opacity-100 delay-200' : '-translate-y-1 opacity-0 delay-0',
+            className
+          )}
+        >
+          {children}
+        </div>
+      </div>
+    </div>
+  )
+}
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandContentSection.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandContentSection.tsx
index 34035a6233f..19967b0daba 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandContentSection.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandContentSection.tsx
@@ -12,9 +12,11 @@ import {
   SelectTrigger,
   SelectValue
 } from '@/components/ui/select'
+import { Textarea } from '@/components/ui/textarea'
 import { AgentIcon } from '@/lib/agent-catalog'
 import { cn } from '@/lib/utils'
 import { translate } from '@/i18n/i18n'
+import { TerminalQuickCommandCollapsibleRow } from './TerminalQuickCommandCollapsibleRow'
 import { getTerminalQuickCommandAgentOptions } from './terminal-quick-command-agent-options'
 import type { TerminalQuickCommandDialogDraftMemory } from './terminal-quick-command-dialog-draft'
 
@@ -37,85 +39,66 @@ export function TerminalQuickCommandContentSection({
 }: TerminalQuickCommandContentSectionProps): React.JSX.Element {
   return (
     <div>
-      {/* Why: action changes add/remove agent-only fields; animating rows here
-          keeps the fixed dialog from snapping between content heights. */}
-      <div
-        className={cn(
-          'grid overflow-hidden transition-[grid-template-rows] duration-200 ease-out',
-          isAgentAction ? 'grid-rows-[1fr]' : 'grid-rows-[0fr]'
-        )}
-        aria-hidden={!isAgentAction}
-      >
-        <div className="min-h-0">
-          <div
-            className={cn(
-              'space-y-2 px-1 pt-1 pb-4 transition-[opacity,transform] duration-150 ease-out',
-              isAgentAction
-                ? 'translate-y-0 opacity-100 delay-200'
-                : '-translate-y-1 opacity-0 delay-0'
-            )}
-          >
-            <Label>
-              {translate(
-                'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.0adba8fa0c',
-                'Agent'
+      <TerminalQuickCommandCollapsibleRow open={isAgentAction} className="space-y-2 px-1 pt-1 pb-4">
+        <Label>
+          {translate(
+            'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.0adba8fa0c',
+            'Agent'
+          )}
+        </Label>
+        <Select
+          value={selectedAgent}
+          disabled={!isAgentAction}
+          onValueChange={(agent) => {
+            const nextAgent = agent as TuiAgent
+            draftMemoryRef.current = {
+              ...draftMemoryRef.current,
+              agent: nextAgent
+            }
+            setDraft((current) =>
+              isTerminalAgentQuickCommand(current) ? { ...current, agent: nextAgent } : current
+            )
+          }}
+        >
+          <SelectTrigger>
+            <SelectValue
+              placeholder={translate(
+                'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.346d409ab2',
+                'Choose agent'
               )}
-            </Label>
-            <Select
-              value={selectedAgent}
-              disabled={!isAgentAction}
-              onValueChange={(agent) => {
-                const nextAgent = agent as TuiAgent
-                draftMemoryRef.current = {
-                  ...draftMemoryRef.current,
-                  agent: nextAgent
-                }
-                setDraft((current) =>
-                  isTerminalAgentQuickCommand(current) ? { ...current, agent: nextAgent } : current
-                )
-              }}
-            >
-              <SelectTrigger>
-                <SelectValue
-                  placeholder={translate(
-                    'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.346d409ab2',
-                    'Choose agent'
-                  )}
-                />
-              </SelectTrigger>
-              <SelectContent
-                position="popper"
-                side="bottom"
-                align="start"
-                sideOffset={4}
-                className="max-h-[min(20rem,var(--radix-select-content-available-height))] w-[--radix-select-trigger-width]"
-              >
-                {QUICK_COMMAND_AGENT_OPTIONS.map((entry) => {
-                  const supported = supportsTerminalAgentQuickCommand(entry.id)
-                  return (
-                    <SelectItem key={entry.id} value={entry.id} disabled={!supported}>
-                      <span className="flex min-w-0 items-center gap-2">
-                        <AgentIcon agent={entry.id} size={16} />
-                        <span className="flex min-w-0 flex-col">
-                          <span className="truncate">{entry.label}</span>
-                          {!supported ? (
-                            <span className="truncate text-xs text-muted-foreground">
-                              {translate(
-                                'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.026cfb232a',
-                                'Does not support prompt commands'
-                              )}
-                            </span>
-                          ) : null}
+            />
+          </SelectTrigger>
+          <SelectContent
+            position="popper"
+            side="bottom"
+            align="start"
+            sideOffset={4}
+            className="max-h-[min(20rem,var(--radix-select-content-available-height))] w-[--radix-select-trigger-width]"
+          >
+            {QUICK_COMMAND_AGENT_OPTIONS.map((entry) => {
+              const supported = supportsTerminalAgentQuickCommand(entry.id)
+              return (
+                <SelectItem key={entry.id} value={entry.id} disabled={!supported}>
+                  <span className="flex min-w-0 items-center gap-2">
+                    <AgentIcon agent={entry.id} size={16} />
+                    <span className="flex min-w-0 flex-col">
+                      <span className="truncate">{entry.label}</span>
+                      {!supported ? (
+                        <span className="truncate text-xs text-muted-foreground">
+                          {translate(
+                            'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.026cfb232a',
+                            'Does not support prompt commands'
+                          )}
                         </span>
-                      </span>
-                    </SelectItem>
-                  )
-                })}
-              </SelectContent>
-            </Select>
-          </div>
-        </div>
-      </div>
+                      ) : null}
+                    </span>
+                  </span>
+                </SelectItem>
+              )
+            })}
+          </SelectContent>
+        </Select>
+      </TerminalQuickCommandCollapsibleRow>
 
       <div className="space-y-2">
         <Label>
@@ -129,7 +112,7 @@ export function TerminalQuickCommandContentSection({
                 'Command Text'
               )}
         </Label>
-        <textarea
+        <Textarea
           value={isTerminalAgentQuickCommand(draft) ? draft.prompt : draft.command}
           onChange={(event) => {
             const text = event.target.value
@@ -159,44 +142,31 @@ export function TerminalQuickCommandContentSection({
                   'npm run dev'
                 )
           }
-          rows={4}
+          rows={8}
+          spellCheck={isAgentAction}
           className={cn(
-            'min-h-24 w-full resize-y rounded-md border border-input bg-transparent px-3 py-2 text-sm shadow-xs outline-none transition-[color,box-shadow] focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50',
+            'max-h-[40vh] min-h-40 resize-y text-sm leading-relaxed',
             !isAgentAction && 'font-mono'
           )}
         />
       </div>
 
-      <div
-        className={cn(
-          'grid overflow-hidden transition-[grid-template-rows] duration-200 ease-out',
-          isAgentAction ? 'grid-rows-[1fr]' : 'grid-rows-[0fr]'
-        )}
-        aria-hidden={!isAgentAction}
+      <TerminalQuickCommandCollapsibleRow
+        open={isAgentAction}
+        className="px-1 pt-2 text-xs text-muted-foreground"
       >
-        <div className="min-h-0">
-          <p
-            className={cn(
-              'px-1 pt-2 text-xs text-muted-foreground transition-[opacity,transform] duration-150 ease-out',
-              isAgentAction
-                ? 'translate-y-0 opacity-100 delay-200'
-                : '-translate-y-1 opacity-0 delay-0'
-            )}
-          >
-            {translate(
-              'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.e604bd40d6',
-              'Supports skills, file paths, and built-in commands like'
-            )}{' '}
-            <code className="rounded bg-muted px-1 font-mono text-[11px]">
-              {translate(
-                'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.97e96cc027',
-                '/goal'
-              )}
-            </code>
-            .
-          </p>
-        </div>
-      </div>
+        {translate(
+          'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.e604bd40d6',
+          'Supports skills, file paths, and built-in commands like'
+        )}{' '}
+        <code className="rounded bg-muted px-1 font-mono text-[11px]">
+          {translate(
+            'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.97e96cc027',
+            '/goal'
+          )}
+        </code>
+        .
+      </TerminalQuickCommandCollapsibleRow>
     </div>
   )
 }
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
index 493eb755bd6..1c9c615d72d 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialog.tsx
@@ -40,6 +40,9 @@ type TerminalQuickCommandDialogProps = {
   mode: TerminalQuickCommandDialogMode
   command: TerminalQuickCommand
   repos?: readonly Pick<Repo, 'id' | 'displayName' | 'path' | 'badgeColor'>[]
+  /** Settings has no ambient workspace to imply scope from, so it opens the
+   *  Advanced section up front. In-workspace entry points leave it collapsed. */
+  defaultAdvancedOpen?: boolean
   onOpenChange: (open: boolean) => void
   onSave: (command: TerminalQuickCommand) => void
 }
@@ -63,6 +66,7 @@ export function TerminalQuickCommandDialog({
   mode,
   command,
   repos = EMPTY_REPOS,
+  defaultAdvancedOpen = false,
   onOpenChange,
   onSave
 }: TerminalQuickCommandDialogProps): React.JSX.Element {
@@ -76,7 +80,7 @@ export function TerminalQuickCommandDialog({
   const lastRepoScopeIdRef = useRef<string | null>(
     initialScope.type === 'repo' ? initialScope.repoId : null
   )
-  const [advancedOpen, setAdvancedOpen] = useState(false)
+  const [advancedOpen, setAdvancedOpen] = useState(defaultAdvancedOpen)
   const selectedAction = getTerminalQuickCommandAction(draft)
   const selectedScope = getTerminalQuickCommandScope(draft)
   const isAgentAction = isTerminalAgentQuickCommand(draft)
@@ -95,7 +99,7 @@ export function TerminalQuickCommandDialog({
     draftMemoryRef.current = createTerminalQuickCommandDialogDraftMemory(command, fallbackAgent)
     const commandScope = getTerminalQuickCommandScope(command)
     lastRepoScopeIdRef.current = commandScope.type === 'repo' ? commandScope.repoId : null
-    setAdvancedOpen(false)
+    setAdvancedOpen(defaultAdvancedOpen)
     setDraft({ ...command })
   }
 
@@ -164,9 +168,12 @@ export function TerminalQuickCommandDialog({
 
   return (
     <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="max-w-md sm:max-w-md" showCloseButton={false}>
+      <DialogContent
+        className="max-h-[min(88vh,54rem)] grid-rows-[auto_minmax(0,1fr)_auto] sm:max-w-xl"
+        showCloseButton={false}
+      >
         <DialogHeader>
-          <DialogTitle className="text-sm">
+          <DialogTitle>
             {mode === 'edit'
               ? translate(
                   'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.f9b184fc16',
@@ -177,7 +184,7 @@ export function TerminalQuickCommandDialog({
                   'Add Quick Command'
                 )}
           </DialogTitle>
-          <DialogDescription className="text-xs">
+          <DialogDescription>
             {translate(
               'auto.components.terminal.quick.commands.TerminalQuickCommandDialog.ed04233b3e',
               'Save terminal commands or agent prompts for quick access.'
@@ -185,8 +192,11 @@ export function TerminalQuickCommandDialog({
           </DialogDescription>
         </DialogHeader>
 
+        {/* Why -mx-3/px-3: overflow clips at the padding box, so the padding has
+            to cover the widest negative margin inside (Advanced's -ml-2) plus a
+            focus ring. The matching negative margin keeps children aligned. */}
         <div
-          className="space-y-4"
+          className="-mx-3 min-h-0 space-y-4 overflow-y-auto px-3 py-1 scrollbar-sleek"
           onKeyDown={(event) => {
             if (isScreenSubmitShortcut(event) && canSave) {
               event.preventDefault()
diff --git a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialogFooter.tsx b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialogFooter.tsx
index 6bcd65fd7b7..d2f98bef2c7 100644
--- a/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialogFooter.tsx
+++ b/src/renderer/src/components/terminal-quick-commands/TerminalQuickCommandDialogFooter.tsx
@@ -1,5 +1,7 @@
 import { Button } from '@/components/ui/button'
 import { DialogFooter } from '@/components/ui/dialog'
+import { ShortcutKeyCombo } from '@/components/ShortcutKeyCombo'
+import { getScreenSubmitModifierLabel } from '@/lib/screen-submit-shortcut'
 import { translate } from '@/i18n/i18n'
 
 type TerminalQuickCommandDialogFooterProps = {
@@ -16,7 +18,7 @@ export function TerminalQuickCommandDialogFooter({
   onSave
 }: TerminalQuickCommandDialogFooterProps): React.JSX.Element {
   return (
-    <DialogFooter>
+    <DialogFooter className="sm:items-center">
       <Button type="button" variant="outline" onClick={onCancel}>
         {translate(
           'auto.components.terminal.quick.commands.TerminalQuickCommandDialogFooter.28370f16b9',
@@ -37,7 +39,11 @@ export function TerminalQuickCommandDialogFooter({
           'auto.components.terminal.quick.commands.TerminalQuickCommandDialogFooter.2e2b958dfc',
           'Save'
         )}
-        <span className="ml-1 text-[10px] opacity-60">{submitShortcutLabel}</span>
+        <ShortcutKeyCombo
+          keys={[getScreenSubmitModifierLabel(), 'Enter']}
+          className="ml-1"
+          keyCapClassName="border-primary-foreground/25 bg-primary-foreground/15 text-primary-foreground/80 shadow-none"
+        />
       </Button>
     </DialogFooter>
   )
diff --git a/src/renderer/src/components/ui/textarea.tsx b/src/renderer/src/components/ui/textarea.tsx
new file mode 100644
index 00000000000..5e78f5555ef
--- /dev/null
+++ b/src/renderer/src/components/ui/textarea.tsx
@@ -0,0 +1,28 @@
+import * as React from 'react'
+
+import { cn } from '@/lib/utils'
+
+const Textarea = React.forwardRef<HTMLTextAreaElement, React.ComponentProps<'textarea'>>(
+  ({ className, ...props }, ref) => {
+    return (
+      <textarea
+        ref={ref}
+        data-slot="textarea"
+        // Why scrollbar-sleek here: a textarea scrolls without an overflow class,
+        // so it escapes the scrollbar lint rule and paints Chromium's default
+        // light scrollbar on dark surfaces.
+        className={cn(
+          'scrollbar-sleek min-h-16 w-full min-w-0 rounded-md border border-input bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none placeholder:text-muted-foreground/60 disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm dark:bg-input/30',
+          'focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50',
+          'aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40',
+          className
+        )}
+        {...props}
+      />
+    )
+  }
+)
+
+Textarea.displayName = 'Textarea'
+
+export { Textarea }
diff --git a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-background-removal.ts b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-background-removal.ts
index 4c686fb28c7..2384e4749b7 100644
--- a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-background-removal.ts
+++ b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-background-removal.ts
@@ -289,7 +289,7 @@ function reportLateWorkspaceCleanupResult(
 
 function removeArrayEntry<T>(entries: T[], entry: T): void {
   const index = entries.indexOf(entry)
-  if (index >= 0) {
+  if (index !== -1) {
     entries.splice(index, 1)
   }
 }
diff --git a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-post-batch-late-settlement.ts b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-post-batch-late-settlement.ts
index 6239da304b2..280aabd6790 100644
--- a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-post-batch-late-settlement.ts
+++ b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-post-batch-late-settlement.ts
@@ -253,7 +253,7 @@ function releaseSettledPostBatchState(state: PostBatchLateSettlementState): void
 
 function removeArrayEntry<T>(entries: T[], entry: T): void {
   const index = entries.indexOf(entry)
-  if (index >= 0) {
+  if (index !== -1) {
     entries.splice(index, 1)
   }
 }
diff --git a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-skipped-ancestor-reclassification.ts b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-skipped-ancestor-reclassification.ts
index e2bfd7a4c3c..cb301b557e2 100644
--- a/src/renderer/src/components/workspace-cleanup/workspace-cleanup-skipped-ancestor-reclassification.ts
+++ b/src/renderer/src/components/workspace-cleanup/workspace-cleanup-skipped-ancestor-reclassification.ts
@@ -65,7 +65,7 @@ export function reclassifySkippedWorkspaceCleanupAncestors({
 
 function removeArrayEntry<T>(entries: T[], entry: T): void {
   const index = entries.indexOf(entry)
-  if (index >= 0) {
+  if (index !== -1) {
     entries.splice(index, 1)
   }
 }
diff --git a/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.test.tsx b/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.test.tsx
new file mode 100644
index 00000000000..524707485f6
--- /dev/null
+++ b/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.test.tsx
@@ -0,0 +1,59 @@
+// @vitest-environment happy-dom
+
+import { useRef } from 'react'
+import { cleanup, render, screen } from '@testing-library/react'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { WorkspaceEmojiSuggestionPopover } from './WorkspaceEmojiSuggestionPopover'
+import type { WorkspaceEmojiSuggestion } from '@/lib/workspace-emoji-shortcodes'
+
+Element.prototype.scrollIntoView ??= () => {}
+
+const SUGGESTIONS: WorkspaceEmojiSuggestion[] = [
+  { shortcode: 'smile', emoji: '😄' },
+  { shortcode: 'smiley', emoji: '😃' },
+  { shortcode: 'smirk', emoji: '😏' }
+]
+
+function PopoverHarness({ commandValue }: { commandValue: string }): React.JSX.Element {
+  const anchorRef = useRef<HTMLInputElement>(null)
+
+  return (
+    <div>
+      <input ref={anchorRef} aria-label="Workspace name" readOnly value=":smi" />
+      <WorkspaceEmojiSuggestionPopover
+        anchorRef={anchorRef}
+        commandValue={commandValue}
+        heading="Emoji"
+        onCommandValueChange={() => {}}
+        onOpenChange={() => {}}
+        onSelect={() => {}}
+        open
+        suggestions={SUGGESTIONS}
+      />
+    </div>
+  )
+}
+
+describe('WorkspaceEmojiSuggestionPopover', () => {
+  let scrollIntoView: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    scrollIntoView = vi.spyOn(Element.prototype, 'scrollIntoView').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    scrollIntoView.mockRestore()
+    cleanup()
+  })
+
+  it('scrolls the externally selected suggestion into view', async () => {
+    const { rerender } = render(<PopoverHarness commandValue="emoji:smile" />)
+    await screen.findByText(':smirk:')
+    scrollIntoView.mockClear()
+
+    rerender(<PopoverHarness commandValue="emoji:smirk" />)
+
+    const scrolled = scrollIntoView.mock.instances as unknown as Element[]
+    expect(scrolled.some((node) => node.getAttribute('data-value') === 'emoji:smirk')).toBe(true)
+  })
+})
diff --git a/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.tsx b/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.tsx
index 7497f080a75..b54c6fcb205 100644
--- a/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.tsx
+++ b/src/renderer/src/components/workspace-emoji/WorkspaceEmojiSuggestionPopover.tsx
@@ -1,4 +1,4 @@
-import type { ComponentProps, RefObject } from 'react'
+import { useEffect, useRef, type ComponentProps, type RefObject } from 'react'
 import { Command, CommandGroup, CommandItem, CommandList } from '@/components/ui/command'
 import { Popover, PopoverAnchor, PopoverContent } from '@/components/ui/popover'
 import { cn } from '@/lib/utils'
@@ -31,6 +31,28 @@ export function WorkspaceEmojiSuggestionPopover({
   side = 'top',
   suggestions
 }: WorkspaceEmojiSuggestionPopoverProps): React.JSX.Element {
+  const listRef = useRef<HTMLDivElement>(null)
+
+  // cmdk only auto-scrolls when it owns the arrow keys; here selection is driven from the input.
+  useEffect(() => {
+    if (!open || !commandValue) {
+      return
+    }
+    const item = Array.from(
+      listRef.current?.querySelectorAll<HTMLElement>('[cmdk-item=""]') ?? []
+    ).find((node) => node.getAttribute('data-value') === commandValue)
+    if (!item) {
+      return
+    }
+    if (item.parentElement?.firstElementChild === item) {
+      item
+        .closest('[cmdk-group=""]')
+        ?.querySelector('[cmdk-group-heading=""]')
+        ?.scrollIntoView({ block: 'nearest' })
+    }
+    item.scrollIntoView({ block: 'nearest' })
+  }, [commandValue, open, suggestions])
+
   return (
     <Popover open={open} onOpenChange={onOpenChange}>
       <PopoverAnchor virtualRef={anchorRef as RefObject<HTMLInputElement>} />
@@ -64,7 +86,7 @@ export function WorkspaceEmojiSuggestionPopover({
           shouldFilter={false}
           className="bg-transparent"
         >
-          <CommandList className="!max-h-none min-h-0 flex-1 scrollbar-sleek">
+          <CommandList ref={listRef} className="!max-h-none min-h-0 flex-1 scrollbar-sleek">
             <CommandGroup heading={heading} className="p-1">
               {suggestions.map((suggestion) => (
                 <CommandItem
diff --git a/src/renderer/src/components/worktree-jump-palette-source-context-boundary.test.ts b/src/renderer/src/components/worktree-jump-palette-source-context-boundary.test.ts
index 31bdaf65d5e..788e9e8d871 100644
--- a/src/renderer/src/components/worktree-jump-palette-source-context-boundary.test.ts
+++ b/src/renderer/src/components/worktree-jump-palette-source-context-boundary.test.ts
@@ -13,15 +13,15 @@ function sourceBetween(startPattern: string, endPattern: string): string {
 }
 
 describe('WorktreeJumpPalette source-context boundaries', () => {
-  it('defers pasted GitHub URL resolution to the composer so cross-project detection runs', () => {
-    // Why: pasting a cross-project URL must surface the same "Switch project?"
-    // prompt as Cmd+N. The palette hands the raw URL to the composer's name
-    // field instead of pre-resolving it against an arbitrary repo, which
-    // silently linked cross-project items to the wrong project.
+  it('attaches a resolved GitHub URL entity and leaves GitLab/Jira as raw URLs', () => {
+    // Why: GitHub create reuses the Cmd+J preview (lookup lives in the effect,
+    // not Case 1). GitLab/Jira still hand the raw URL to the composer.
     const githubLinkSection = sourceBetween(
-      '// Case 1: user pasted a GH issue/PR URL.',
+      '// Case 1: user pasted a GH/GitLab/Jira URL.',
       '// Case 2: user typed a raw issue number.'
     )
+    expect(githubLinkSection).toContain('linkedWorkItem')
+    expect(githubLinkSection).toContain('initialGitHubWorkItem: item')
     expect(githubLinkSection).toContain('prefilledName: trimmed')
     expect(githubLinkSection).not.toContain('lookupGitHubWorkItemByOwnerRepoForSource')
   })
diff --git a/src/renderer/src/hooks/direct-ssh-host-hydration.test.ts b/src/renderer/src/hooks/direct-ssh-host-hydration.test.ts
index 71d29e256e6..3f8a00813eb 100644
--- a/src/renderer/src/hooks/direct-ssh-host-hydration.test.ts
+++ b/src/renderer/src/hooks/direct-ssh-host-hydration.test.ts
@@ -3,7 +3,7 @@ import { afterEach, describe, expect, it, vi } from 'vitest'
 import type { HostLineageSnapshot } from '../../../shared/host-lineage-contract'
 import type { HostRepoCatalogSnapshot } from '../../../shared/host-repo-catalog-contract'
 import type { DirectSshAuthority, SshProviderEpoch } from '../../../shared/ssh-types'
-import type { Repo } from '../../../shared/types'
+import type { Repo, WorktreeLineage, WorkspaceLineage } from '../../../shared/types'
 import { folderWorkspaceKey, worktreeWorkspaceKey } from '../../../shared/workspace-scope'
 import type { AppState } from '../store/types'
 import { createDirectSshHostHydration } from './direct-ssh-host-hydration'
@@ -40,6 +40,34 @@ function state(overrides: Record<string, unknown> = {}): AppState {
   } as unknown as AppState
 }
 
+function productionLineage(worktreeId: string, parentWorktreeId: string): WorktreeLineage {
+  return {
+    worktreeId,
+    worktreeInstanceId: `${worktreeId}-instance`,
+    parentWorktreeId,
+    parentWorktreeInstanceId: `${parentWorktreeId}-instance`,
+    origin: 'orchestration',
+    capture: { source: 'orchestration-context', confidence: 'explicit' },
+    taskId: 'task-1',
+    coordinatorHandle: 'coord-1',
+    createdAt: 1
+  }
+}
+
+function productionWorkspaceLineage(childId: string, parentId: string): WorkspaceLineage {
+  return {
+    childWorkspaceKey: worktreeWorkspaceKey(childId),
+    childInstanceId: `${childId}-instance`,
+    parentWorkspaceKey: worktreeWorkspaceKey(parentId),
+    parentInstanceId: `${parentId}-instance`,
+    origin: 'orchestration',
+    capture: { source: 'orchestration-context', confidence: 'explicit' },
+    taskId: 'task-1',
+    coordinatorHandle: 'coord-1',
+    createdAt: 1
+  }
+}
+
 function hostSnapshot(
   owner: DirectSshAuthority,
   repos: ReturnType<typeof repo>[]
@@ -341,6 +369,79 @@ describe('createDirectSshHostHydration', () => {
     })
   })
 
+  it('keeps lineage map identity for a cloned no-op host snapshot', async () => {
+    const owner = authority()
+    const hostLineage = productionLineage('a::/work', 'a::/parent')
+    const foreignLineage = productionLineage('b::/work', 'b::/parent')
+    const hostWorkspace = productionWorkspaceLineage('a::/work', 'a::/parent')
+    const foreignWorkspace = productionWorkspaceLineage('b::/work', 'b::/parent')
+    const store = createStore<AppState>(() =>
+      state({
+        repos: [repo('a', 'target-a'), repo('b', 'target-b')],
+        worktreesByRepo: {
+          a: [{ id: 'a::/work', repoId: 'a', hostId: 'ssh:target-a' }],
+          b: [{ id: 'b::/work', repoId: 'b', hostId: 'ssh:target-b' }]
+        },
+        worktreeLineageById: {
+          'a::/work': hostLineage,
+          'b::/work': foreignLineage
+        },
+        workspaceLineageByChildKey: {
+          [worktreeWorkspaceKey('a::/work')]: hostWorkspace,
+          [worktreeWorkspaceKey('b::/work')]: foreignWorkspace
+        }
+      })
+    )
+    const snapshot: HostLineageSnapshot = {
+      authoritative: true,
+      authority: {
+        kind: 'direct-ssh',
+        executionHostId: 'ssh:target-a',
+        ...owner
+      },
+      worktreeLineageById: {
+        'a::/work': hostLineage
+      },
+      workspaceLineageByChildKey: {
+        [worktreeWorkspaceKey('a::/work')]: hostWorkspace
+      }
+    }
+    let publications = 0
+    store.subscribe(() => {
+      publications += 1
+    })
+    const hydration = createDirectSshHostHydration({
+      store,
+      listRepos: vi.fn(),
+      listLineage: vi.fn(async () => structuredClone(snapshot)),
+      isCurrentAuthority: () => true
+    })
+    const beforeLineage = store.getState().worktreeLineageById
+    const beforeWorkspace = store.getState().workspaceLineageByChildKey
+
+    await expect(
+      hydration.readHostScopedLineage({
+        ...owner,
+        catalogRevision: 0,
+        repoRefs: [{ repoId: 'a', executionHostId: 'ssh:target-a' }],
+        authorityRequirement: 'required',
+        reason: 'reconnect'
+      })
+    ).resolves.toBe('complete')
+
+    expect(store.getState().worktreeLineageById).toBe(beforeLineage)
+    expect(store.getState().workspaceLineageByChildKey).toBe(beforeWorkspace)
+    expect(store.getState().worktreeLineageById['a::/work']).toBe(hostLineage)
+    expect(store.getState().worktreeLineageById['b::/work']).toBe(foreignLineage)
+    expect(store.getState().workspaceLineageByChildKey[worktreeWorkspaceKey('a::/work')]).toBe(
+      hostWorkspace
+    )
+    expect(store.getState().workspaceLineageByChildKey[worktreeWorkspaceKey('b::/work')]).toBe(
+      foreignWorkspace
+    )
+    expect(publications).toBe(0)
+  })
+
   it('rejects lineage captured before a newer same-authority catalog revision', async () => {
     const owner = authority()
     const store = createStore<AppState>(() =>
diff --git a/src/renderer/src/hooks/direct-ssh-host-hydration.ts b/src/renderer/src/hooks/direct-ssh-host-hydration.ts
index d3a5a2bc366..069b3b3d323 100644
--- a/src/renderer/src/hooks/direct-ssh-host-hydration.ts
+++ b/src/renderer/src/hooks/direct-ssh-host-hydration.ts
@@ -5,6 +5,7 @@ import type { HostRepoCatalogSnapshot } from '../../../shared/host-repo-catalog-
 import type { DirectSshAuthority } from '../../../shared/ssh-types'
 import { isWorkspaceKey } from '../../../shared/workspace-scope'
 import type { AppState } from '../store/types'
+import { reuseEqualRecordMap } from '../store/slices/repo-identity-reconcile'
 import type {
   DirectSshLineageOutcome,
   DirectSshPreparationInput,
@@ -71,6 +72,20 @@ function mergeExactHostCatalog(state: AppState, snapshot: HostRepoCatalogSnapsho
   }
 }
 
+// Why: the host owns every in-scope key, so drop the stale in-scope rows, overlay the snapshot's,
+// and leave out-of-scope hosts alone. Reusing equal rows keeps a cloned no-op read from republishing.
+function overlayHostScopedLineage<T>(
+  previous: Readonly<Record<string, T>>,
+  incoming: Readonly<Record<string, T>>,
+  isHostScoped: (key: string) => boolean
+): Readonly<Record<string, T>> {
+  const next: Record<string, T> = Object.fromEntries([
+    ...Object.entries(previous).filter(([key]) => !isHostScoped(key)),
+    ...Object.entries(incoming).filter(([key]) => isHostScoped(key))
+  ])
+  return reuseEqualRecordMap(previous, next)
+}
+
 function mergeExactHostLineage(
   state: AppState,
   snapshot: Extract<HostLineageSnapshot, { authoritative: true }>,
@@ -78,38 +93,23 @@ function mergeExactHostLineage(
   catalogRevision: number
 ): AppState {
   const scope = directSshHostHydrationScope(state, authority, catalogRevision)
-  const worktreeLineageById = Object.fromEntries(
-    Object.entries(state.worktreeLineageById).filter(
-      ([worktreeId]) => !scope.gitWorktreeIds.has(worktreeId)
-    )
+  const worktreeLineageById = overlayHostScopedLineage(
+    state.worktreeLineageById,
+    snapshot.worktreeLineageById,
+    (worktreeId) => scope.gitWorktreeIds.has(worktreeId)
   )
-  const workspaceLineageByChildKey = Object.fromEntries(
-    Object.entries(state.workspaceLineageByChildKey).filter(
-      ([childKey]) => !isWorkspaceKey(childKey) || !scope.lineageWorkspaceKeys.has(childKey)
-    )
+  const workspaceLineageByChildKey = overlayHostScopedLineage(
+    state.workspaceLineageByChildKey,
+    snapshot.workspaceLineageByChildKey,
+    (childKey) => isWorkspaceKey(childKey) && scope.lineageWorkspaceKeys.has(childKey)
   )
-  const incomingWorktreeLineage = Object.fromEntries(
-    Object.entries(snapshot.worktreeLineageById).filter(([worktreeId]) =>
-      scope.gitWorktreeIds.has(worktreeId)
-    )
-  )
-  const incomingWorkspaceLineage = Object.fromEntries(
-    Object.entries(snapshot.workspaceLineageByChildKey).filter(
-      ([workspaceKey]) =>
-        isWorkspaceKey(workspaceKey) && scope.lineageWorkspaceKeys.has(workspaceKey)
-    )
-  )
-  return {
-    ...state,
-    worktreeLineageById: {
-      ...worktreeLineageById,
-      ...incomingWorktreeLineage
-    },
-    workspaceLineageByChildKey: {
-      ...workspaceLineageByChildKey,
-      ...incomingWorkspaceLineage
-    }
+  if (
+    worktreeLineageById === state.worktreeLineageById &&
+    workspaceLineageByChildKey === state.workspaceLineageByChildKey
+  ) {
+    return state
   }
+  return { ...state, worktreeLineageById, workspaceLineageByChildKey }
 }
 
 export function createDirectSshHostHydration(
diff --git a/src/renderer/src/hooks/direct-ssh-reconnect-coordinator-stabilization.ts b/src/renderer/src/hooks/direct-ssh-reconnect-coordinator-stabilization.ts
index 9924e55d70b..f20ea1e4a30 100644
--- a/src/renderer/src/hooks/direct-ssh-reconnect-coordinator-stabilization.ts
+++ b/src/renderer/src/hooks/direct-ssh-reconnect-coordinator-stabilization.ts
@@ -5,7 +5,7 @@ export type DirectSshReconnectTargetState = {
   authority: DirectSshAuthority
   installedAt: number
   dampUntil: number | null
-  timer: DirectSshReconnectTimer | null
+  timer: DirectSshReconnectTimer
 }
 
 export function createDirectSshReconnectTargetState(
diff --git a/src/renderer/src/hooks/use-terminal-quick-command-hosts.ts b/src/renderer/src/hooks/use-terminal-quick-command-hosts.ts
index f8239f1dcb4..df70bb58fdc 100644
--- a/src/renderer/src/hooks/use-terminal-quick-command-hosts.ts
+++ b/src/renderer/src/hooks/use-terminal-quick-command-hosts.ts
@@ -43,11 +43,11 @@ type TerminalQuickCommandHostState = {
   remoteEnvironmentId: string | null
   remoteHostId: ExecutionHostId | null
   remoteState: RuntimeTerminalQuickCommands | undefined
-  runtimeEnvironments: PublicKnownRuntimeEnvironment[]
+  runtimeEnvironments: readonly PublicKnownRuntimeEnvironment[]
   settings: GlobalSettings | null
 }
 
-const EMPTY_RUNTIME_ENVIRONMENTS: PublicKnownRuntimeEnvironment[] = []
+const EMPTY_RUNTIME_ENVIRONMENTS: readonly PublicKnownRuntimeEnvironment[] = []
 const DISABLED_TERMINAL_QUICK_COMMAND_HOSTS: TerminalQuickCommandHost[] = []
 const DISABLED_TERMINAL_QUICK_COMMAND_HOST_STATE: TerminalQuickCommandHostState = {
   executionHostId: LOCAL_EXECUTION_HOST_ID,
diff --git a/src/renderer/src/hooks/useAgentDetectionTarget.test.ts b/src/renderer/src/hooks/useAgentDetectionTarget.test.ts
index 22ad26ae016..dd8f1b8176c 100644
--- a/src/renderer/src/hooks/useAgentDetectionTarget.test.ts
+++ b/src/renderer/src/hooks/useAgentDetectionTarget.test.ts
@@ -1,9 +1,31 @@
 import { describe, expect, it } from 'vitest'
 import type { FolderWorkspace, ProjectGroup, Repo } from '../../../shared/types'
 import { folderWorkspaceKey } from '../../../shared/workspace-scope'
-import { getAgentDetectionTargetKeyForWorktree } from './useAgentDetectionTarget'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
+import {
+  getAgentDetectionTargetKeyForWorktree,
+  parseAgentDetectionTargetKey
+} from './useAgentDetectionTarget'
 
 describe('getAgentDetectionTargetKeyForWorktree', () => {
+  it('carries explicit local Floating Workspace authority into detection', () => {
+    const state = {
+      settings: { activeRuntimeEnvironmentId: 'active-wsl-project' },
+      folderWorkspaces: [],
+      projectGroups: [],
+      repos: [],
+      worktreesByRepo: {}
+    } as Parameters<typeof getAgentDetectionTargetKeyForWorktree>[0]
+
+    const key = getAgentDetectionTargetKeyForWorktree(state, FLOATING_TERMINAL_WORKTREE_ID)
+
+    expect(parseAgentDetectionTargetKey(key)).toEqual({
+      kind: 'local',
+      worktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+      contextKey: 'host'
+    })
+  })
+
   it('uses an explicit runtime owner without scanning ambiguous child SSH repos', () => {
     let projectGroupReads = 0
     const repos: readonly Repo[] = Array.from({ length: 100 }, (_, index) => {
@@ -139,3 +161,12 @@ describe('getAgentDetectionTargetKeyForWorktree', () => {
     expect(repoIdReads).toBe(100)
   })
 })
+
+describe('parseAgentDetectionTargetKey', () => {
+  it.each(['local:missing-context', 'local:%:host'])(
+    'falls back to unscoped local detection for malformed key %s',
+    (key) => {
+      expect(parseAgentDetectionTargetKey(key)).toEqual({ kind: 'local' })
+    }
+  )
+})
diff --git a/src/renderer/src/hooks/useAgentDetectionTarget.ts b/src/renderer/src/hooks/useAgentDetectionTarget.ts
index 5f00d3100b8..f8c5787a901 100644
--- a/src/renderer/src/hooks/useAgentDetectionTarget.ts
+++ b/src/renderer/src/hooks/useAgentDetectionTarget.ts
@@ -10,9 +10,16 @@ import { getResolvedExecutionHostIdForWorktree } from '@/lib/resolved-worktree-e
 import { parseExecutionHostId } from '../../../shared/execution-host'
 import { parseWorkspaceKey } from '../../../shared/workspace-scope'
 import type { AgentDetectionTarget } from './useDetectedAgents'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 
 export const AGENT_DETECTION_LOCAL_TARGET_KEY = 'local'
 
+function getLocalAgentDetectionTargetKey(worktreeId: string): string {
+  return worktreeId === FLOATING_TERMINAL_WORKTREE_ID
+    ? `${AGENT_DETECTION_LOCAL_TARGET_KEY}:${encodeURIComponent(worktreeId)}:host`
+    : AGENT_DETECTION_LOCAL_TARGET_KEY
+}
+
 type AgentDetectionOwnerState = Parameters<typeof getConnectionIdFromState>[0] &
   WorktreeRuntimeOwnerState
 
@@ -57,7 +64,7 @@ export function getAgentDetectionTargetKeyForWorktree(
   if (executionHost?.kind === 'runtime') {
     return `runtime:${executionHost.environmentId}`
   }
-  return AGENT_DETECTION_LOCAL_TARGET_KEY
+  return getLocalAgentDetectionTargetKey(worktreeId)
 }
 
 export function parseAgentDetectionTargetKey(
@@ -69,6 +76,23 @@ export function parseAgentDetectionTargetKey(
   if (key === AGENT_DETECTION_LOCAL_TARGET_KEY) {
     return { kind: 'local' }
   }
+  if (key.startsWith(`${AGENT_DETECTION_LOCAL_TARGET_KEY}:`)) {
+    const [encodedWorktreeId, encodedContextKey] = key
+      .slice(`${AGENT_DETECTION_LOCAL_TARGET_KEY}:`.length)
+      .split(':')
+    if (!encodedWorktreeId || !encodedContextKey) {
+      return { kind: 'local' }
+    }
+    try {
+      return {
+        kind: 'local',
+        worktreeId: decodeURIComponent(encodedWorktreeId),
+        contextKey: decodeURIComponent(encodedContextKey)
+      }
+    } catch {
+      return { kind: 'local' }
+    }
+  }
   if (key.startsWith('ssh:')) {
     return { kind: 'ssh', connectionId: key.slice('ssh:'.length) }
   }
diff --git a/src/renderer/src/hooks/useAutomationDispatchEvents.test.ts b/src/renderer/src/hooks/useAutomationDispatchEvents.test.ts
index 46585b0091c..557663a8a25 100644
--- a/src/renderer/src/hooks/useAutomationDispatchEvents.test.ts
+++ b/src/renderer/src/hooks/useAutomationDispatchEvents.test.ts
@@ -5,6 +5,7 @@ const mockLaunchAgentBackgroundSession = vi.fn()
 const mockLaunchWorktreeBackgroundTerminals = vi.fn()
 const mockFindReusableAutomationSession = vi.fn()
 const mockObserveExistingAutomationSession = vi.fn()
+const mockSubmitPromptToAgentPty = vi.fn()
 const mockCreateWorktree = vi.fn()
 const mockMarkDispatchResult = vi.fn()
 const mockOnDispatchRequested = vi.fn()
@@ -14,6 +15,11 @@ const mockReleaseTerminalOwnership = vi.fn()
 const mockSshNeedsPassphrasePrompt = vi.fn()
 const mockSshGetState = vi.fn()
 const mockSshConnect = vi.fn()
+let latestStoreSubscriber: (() => void) | null = null
+const mockStoreSubscribe = vi.fn((listener: () => void) => {
+  latestStoreSubscriber = listener
+  return () => {}
+})
 
 const setupLaunch = {
   runnerScriptPath: '/tmp/setup.sh',
@@ -124,7 +130,9 @@ vi.mock('@/lib/launch-worktree-background-terminals', () => ({
   launchWorktreeBackgroundTerminals: mockLaunchWorktreeBackgroundTerminals
 }))
 
-vi.mock('@/lib/agent-paste-draft', () => ({}))
+vi.mock('@/lib/agent-paste-draft', () => ({
+  submitPromptToAgentPty: mockSubmitPromptToAgentPty
+}))
 
 vi.mock('@/lib/automation-session-reuse', () => ({
   findReusableAutomationSession: mockFindReusableAutomationSession
@@ -137,9 +145,20 @@ vi.mock('@/lib/automation-session-observer', () => ({
 vi.mock('@/components/automations/automation-run-output-snapshot', () => ({
   createAutomationRunOutputSnapshotBuffer: () => ({
     append: vi.fn(),
-    snapshot: () => ''
+    snapshot: () => null
   }),
-  selectAutomationRunOutputSnapshot: () => null
+  selectAutomationRunOutputSnapshot: (
+    assistantMessage: string | null | undefined,
+    terminalSnapshot: unknown
+  ) =>
+    assistantMessage
+      ? {
+          format: 'plain_text',
+          content: assistantMessage,
+          capturedAt: 1,
+          truncated: false
+        }
+      : terminalSnapshot
 }))
 
 vi.mock('@/i18n/i18n', () => ({
@@ -153,7 +172,7 @@ vi.mock('@/lib/browser-uuid', () => ({
 vi.mock('@/store', () => ({
   useAppStore: {
     getState: () => state,
-    subscribe: vi.fn(() => () => {})
+    subscribe: mockStoreSubscribe
   }
 }))
 
@@ -171,6 +190,7 @@ describe('useAutomationDispatchEvents setup launch', () => {
     state.projectGroups = []
     state.worktreesByRepo = {}
     state.agentStatusByPaneKey = {}
+    latestStoreSubscriber = null
     state.allWorktrees.mockReturnValue([])
     state.getKnownWorktreeById.mockReturnValue(undefined)
     mockCreateWorktree.mockResolvedValue({ worktree: createdWorktree, setup: setupLaunch })
@@ -189,6 +209,7 @@ describe('useAutomationDispatchEvents setup launch', () => {
     mockSshNeedsPassphrasePrompt.mockResolvedValue(false)
     mockSshGetState.mockResolvedValue({ status: 'connected' })
     mockSshConnect.mockResolvedValue({ status: 'connected' })
+    mockSubmitPromptToAgentPty.mockResolvedValue(true)
     vi.stubGlobal('window', {
       api: {
         automations: {
@@ -581,6 +602,132 @@ describe('useAutomationDispatchEvents setup launch', () => {
     await vi.waitFor(() => expect(mockFinalizeTerminalOwnership).toHaveBeenCalledOnce())
   })
 
+  it('persists assistant output from a batched working→done→working transition', async () => {
+    const paneKey = 'agent-tab:7c6fb4e5-3bf1-4ff4-8259-03f7ae81c40d'
+
+    await registerAndDispatch()
+    const transitionStartedAt = Date.now() + 1
+    state.agentStatusByPaneKey = {
+      [paneKey]: {
+        paneKey,
+        state: 'working',
+        prompt: 'second turn',
+        agentType: 'claude',
+        updatedAt: transitionStartedAt + 2,
+        stateStartedAt: transitionStartedAt + 2,
+        lastCompletedAssistantMessage: 'Summary.\n\nDetails.',
+        stateHistory: [
+          { state: 'working', prompt: 'first turn', startedAt: transitionStartedAt },
+          { state: 'done', prompt: 'first turn', startedAt: transitionStartedAt + 1 }
+        ]
+      }
+    }
+    if (!latestStoreSubscriber) {
+      throw new Error('agent status observer was not registered')
+    }
+    latestStoreSubscriber()
+
+    await vi.waitFor(() => expect(mockFinalizeTerminalOwnership).toHaveBeenCalledOnce())
+    expect(mockMarkDispatchResult).toHaveBeenCalledWith(
+      expect.objectContaining({
+        runId: 'run-1',
+        status: 'completed',
+        outputSnapshot: {
+          format: 'plain_text',
+          content: 'Summary.\n\nDetails.',
+          capturedAt: 1,
+          truncated: false
+        }
+      })
+    )
+  })
+
+  it('does not let later working authorize an earlier historical done on rescan', async () => {
+    const paneKey = 'agent-tab:7c6fb4e5-3bf1-4ff4-8259-03f7ae81c40d'
+    mockFindReusableAutomationSession.mockReturnValue({
+      tabId: 'agent-tab',
+      paneKey,
+      ptyId: 'agent-pty'
+    })
+    mockObserveExistingAutomationSession.mockResolvedValue(() => {})
+
+    await registerAndDispatch(makeAutomation({ reuseSession: true }))
+    const transitionStartedAt = Date.now() + 1
+    state.agentStatusByPaneKey = {
+      [paneKey]: {
+        paneKey,
+        state: 'working',
+        prompt: 'new turn',
+        agentType: 'claude',
+        updatedAt: transitionStartedAt + 1,
+        stateStartedAt: transitionStartedAt + 1,
+        stateHistory: [{ state: 'done', prompt: 'old turn', startedAt: transitionStartedAt }]
+      }
+    }
+    if (!latestStoreSubscriber) {
+      throw new Error('agent status observer was not registered')
+    }
+
+    latestStoreSubscriber()
+    latestStoreSubscriber()
+    await Promise.resolve()
+
+    expect(mockMarkDispatchResult).not.toHaveBeenCalledWith(
+      expect.objectContaining({ status: 'completed' })
+    )
+  })
+
+  // Why: transport loss, PTY exit and cap eviction all drop and recreate the live
+  // entry with an empty stateHistory. The working edge is only in the observer's
+  // own bookkeeping by then, so it must survive a zero-overlap rescan.
+  it('completes a reuse-session run when the entry is recreated with no history', async () => {
+    const paneKey = 'agent-tab:7c6fb4e5-3bf1-4ff4-8259-03f7ae81c40d'
+    mockFindReusableAutomationSession.mockReturnValue({
+      tabId: 'agent-tab',
+      paneKey,
+      ptyId: 'agent-pty'
+    })
+    mockObserveExistingAutomationSession.mockResolvedValue(() => {})
+
+    await registerAndDispatch(makeAutomation({ reuseSession: true }))
+    const workingStartedAt = Date.now() + 1
+    state.agentStatusByPaneKey = {
+      [paneKey]: {
+        paneKey,
+        state: 'working',
+        prompt: 'turn',
+        agentType: 'claude',
+        updatedAt: workingStartedAt,
+        stateStartedAt: workingStartedAt,
+        stateHistory: [{ state: 'working', prompt: 'turn', startedAt: workingStartedAt }]
+      }
+    }
+    if (!latestStoreSubscriber) {
+      throw new Error('agent status observer was not registered')
+    }
+    latestStoreSubscriber()
+    await Promise.resolve()
+
+    // The entry is dropped and recreated: same pane, now done, history gone.
+    state.agentStatusByPaneKey = {
+      [paneKey]: {
+        paneKey,
+        state: 'done',
+        prompt: 'turn',
+        agentType: 'claude',
+        updatedAt: workingStartedAt + 2,
+        stateStartedAt: workingStartedAt + 2,
+        stateHistory: []
+      }
+    }
+    latestStoreSubscriber()
+    await Promise.resolve()
+
+    expect(mockMarkDispatchResult).toHaveBeenCalledWith(
+      expect.objectContaining({ status: 'completed' })
+    )
+  })
+
   it('consumes duplicate done and zero-exit completion through one finalizer', async () => {
     let launchArgs: {
       onAgentStatus?: (payload: { state: string }) => void
diff --git a/src/renderer/src/hooks/useAutomationDispatchEvents.ts b/src/renderer/src/hooks/useAutomationDispatchEvents.ts
index f4ae2067688..a7741ec959e 100644
--- a/src/renderer/src/hooks/useAutomationDispatchEvents.ts
+++ b/src/renderer/src/hooks/useAutomationDispatchEvents.ts
@@ -32,6 +32,7 @@ import {
 } from '../../../shared/execution-host'
 import { parseWorkspaceKey } from '../../../shared/workspace-scope'
 import { getFolderWorkspaceConnectionId } from '@/lib/folder-workspace-connection'
+import type { AgentStateHistoryEntry } from '../../../shared/agent-status-types'
 
 const AUTOMATIONS_CHANGED_EVENT = 'orca:automations-changed'
 const activeReuseDispatchTabIds = new Set<string>()
@@ -54,6 +55,37 @@ function buildAutomationWorkspaceName(runTitle: string, scheduledFor: number): s
   return `auto-${slug || 'run'}-${stamp}`
 }
 
+function agentStateHistoryEntriesEqual(
+  left: AgentStateHistoryEntry,
+  right: AgentStateHistoryEntry
+): boolean {
+  return (
+    left.state === right.state &&
+    left.prompt === right.prompt &&
+    left.startedAt === right.startedAt &&
+    left.interrupted === right.interrupted
+  )
+}
+
+function getAgentStateHistoryOverlap(
+  previous: AgentStateHistoryEntry[],
+  current: AgentStateHistoryEntry[]
+): number {
+  for (let overlap = Math.min(previous.length, current.length); overlap > 0; overlap -= 1) {
+    const previousOffset = previous.length - overlap
+    if (
+      current
+        .slice(0, overlap)
+        .every((entry, index) =>
+          agentStateHistoryEntriesEqual(entry, previous[previousOffset + index])
+        )
+    ) {
+      return overlap
+    }
+  }
+  return 0
+}
+
 export function useAutomationDispatchEvents(): void {
   useEffect(() => {
     const unsubscribe = window.api.automations.onDispatchRequested(
@@ -405,12 +437,41 @@ export function useAutomationDispatchEvents(): void {
             options?: { requireWorkingAfterStart?: boolean }
           ): void => {
             let sawWorkingAfterStart = false
+            let observedStateHistory: AgentStateHistoryEntry[] = []
             const checkCurrentStatus = (): void => {
               const { agentStatusByPaneKey } = useAppStore.getState()
               for (const [paneKey, entry] of Object.entries(agentStatusByPaneKey)) {
                 if (paneKey !== targetPaneKey || entry.updatedAt < startedAfter) {
                   continue
                 }
+                const historyOverlap = getAgentStateHistoryOverlap(
+                  observedStateHistory,
+                  entry.stateHistory
+                )
+                // Why: sawWorkingAfterStart stays monotonic — a recreated entry
+                // (transport loss, PTY exit, cap eviction) arrives with an empty
+                // stateHistory, so clearing it here would strand reuseSession runs
+                // with nothing left to re-derive the working edge from.
+                for (const historicalState of entry.stateHistory.slice(historyOverlap)) {
+                  if (historicalState.startedAt < startedAfter) {
+                    continue
+                  }
+                  if (historicalState.state === 'working') {
+                    sawWorkingAfterStart = true
+                  }
+                  if (
+                    historicalState.state === 'done' &&
+                    (!options?.requireWorkingAfterStart || sawWorkingAfterStart)
+                  ) {
+                    // Why: this `done` already rolled out of the live entry, so its output
+                    // survives only in the entry-level completed slot.
+                    latestAssistantMessage =
+                      entry.lastCompletedAssistantMessage?.trim() || latestAssistantMessage
+                    handleAgentDone()
+                    return
+                  }
+                }
+                observedStateHistory = [...entry.stateHistory]
                 if (entry.state === 'working') {
                   sawWorkingAfterStart = true
                 }
diff --git a/src/renderer/src/hooks/useDetectedAgents.test.tsx b/src/renderer/src/hooks/useDetectedAgents.test.tsx
index a4f0d7f3f96..cc1c49b5b90 100644
--- a/src/renderer/src/hooks/useDetectedAgents.test.tsx
+++ b/src/renderer/src/hooks/useDetectedAgents.test.tsx
@@ -14,7 +14,11 @@ import {
   RUNTIME_PROTOCOL_VERSION
 } from '../../../shared/protocol-version'
 import { clearRuntimeCompatibilityCacheForTests } from '@/runtime/runtime-rpc-client'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 
+globalThis.IS_REACT_ACT_ENVIRONMENT = true
+
+const detectLocalAgents = vi.fn()
 const detectRemoteAgents = vi.fn()
 const refreshLocalAgents = vi.fn()
 const runtimeEnvironmentCall = vi.fn()
@@ -22,8 +26,15 @@ const initialAppState = useAppStore.getInitialState()
 const roots: Root[] = []
 let latestHookResult: UseDetectedAgentsResult | null = null
 
-function HookProbe({ target }: { target: AgentDetectionTarget | undefined }): null {
+function HookProbe({
+  target,
+  onResult
+}: {
+  target: AgentDetectionTarget | undefined
+  onResult?: (result: UseDetectedAgentsResult) => void
+}): null {
   latestHookResult = useDetectedAgents(target)
+  onResult?.(latestHookResult)
   return null
 }
 
@@ -34,13 +45,16 @@ async function flushEffects(): Promise<void> {
   })
 }
 
-async function renderProbe(target: AgentDetectionTarget | undefined): Promise<Root> {
+async function renderProbe(
+  target: AgentDetectionTarget | undefined,
+  onResult?: (result: UseDetectedAgentsResult) => void
+): Promise<Root> {
   const container = document.createElement('div')
   document.body.appendChild(container)
   const root = createRoot(container)
   roots.push(root)
   await act(async () => {
-    root.render(createElement(HookProbe, { target }))
+    root.render(createElement(HookProbe, { target, onResult }))
   })
   await flushEffects()
   return root
@@ -51,6 +65,11 @@ beforeEach(() => {
   useAppStore.setState(initialAppState, true)
   latestHookResult = null
   detectRemoteAgents.mockReset().mockResolvedValue([])
+  detectLocalAgents
+    .mockReset()
+    .mockImplementation((context) =>
+      Promise.resolve(context?.projectRuntime?.runtime.kind === 'wsl' ? ['claude'] : ['codex'])
+    )
   refreshLocalAgents.mockReset().mockResolvedValue({
     agents: [],
     addedPathSegments: [],
@@ -80,11 +99,100 @@ beforeEach(() => {
     })
   })
   globalThis.window.api = {
-    preflight: { detectRemoteAgents, refreshAgents: refreshLocalAgents },
-    runtimeEnvironments: { call: runtimeEnvironmentCall }
+    preflight: {
+      detectAgents: detectLocalAgents,
+      detectRemoteAgents,
+      refreshAgents: refreshLocalAgents
+    },
+    runtimeEnvironments: { call: runtimeEnvironmentCall },
+    platform: { get: () => ({ platform: 'win32' }) }
   } as unknown as Window['api']
 })
 
+describe('Floating Workspace authority', () => {
+  it('advertises native Windows agents beside an active WSL project', async () => {
+    const activeResult: { current: UseDetectedAgentsResult | null } = { current: null }
+    const floatingResult: { current: UseDetectedAgentsResult | null } = { current: null }
+    useAppStore.getState().clearLocalDetectedAgents()
+    useAppStore.setState({
+      activeRepoId: 'repo-wsl',
+      activeWorktreeId: 'worktree-wsl',
+      projects: [
+        {
+          id: 'repo-wsl',
+          localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' }
+        }
+      ],
+      repos: [
+        {
+          id: 'repo-wsl',
+          path: '\\\\wsl.localhost\\Ubuntu\\home\\alice\\repo',
+          displayName: 'WSL project',
+          badgeColor: '#000000',
+          addedAt: 0
+        }
+      ],
+      worktreesByRepo: {
+        'repo-wsl': [
+          {
+            id: 'worktree-wsl',
+            repoId: 'repo-wsl',
+            path: '\\\\wsl.localhost\\Ubuntu\\home\\alice\\repo',
+            displayName: 'main'
+          }
+        ]
+      }
+    } as never)
+
+    await renderProbe(
+      { kind: 'local', worktreeId: 'worktree-wsl' } as AgentDetectionTarget,
+      (result) => {
+        activeResult.current = result
+      }
+    )
+    await renderProbe(
+      {
+        kind: 'local',
+        worktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+        contextKey: 'host'
+      } as AgentDetectionTarget,
+      (result) => {
+        floatingResult.current = result
+      }
+    )
+
+    expect(activeResult.current?.detectedIds).toEqual(['claude'])
+    expect(floatingResult.current?.detectedIds).toEqual(['codex'])
+    expect(useAppStore.getState().detectedAgentIds).toEqual(['claude'])
+    const detectedContexts = detectLocalAgents.mock.calls.map(([context]) => context)
+    expect(detectedContexts).toEqual([
+      expect.objectContaining({
+        projectRuntime: expect.objectContaining({
+          runtime: expect.objectContaining({ kind: 'wsl', distro: 'Ubuntu' })
+        })
+      }),
+      undefined
+    ])
+
+    refreshLocalAgents.mockResolvedValueOnce({
+      agents: ['codex'],
+      addedPathSegments: [],
+      shellHydrationOk: true,
+      pathSource: 'process_env',
+      pathFailureReason: 'none'
+    })
+    await act(async () => {
+      await floatingResult.current?.refresh()
+    })
+    await flushEffects()
+
+    expect(activeResult.current?.detectedIds).toEqual(['claude'])
+    expect(floatingResult.current?.detectedIds).toEqual(['codex'])
+    expect(useAppStore.getState().detectedAgentIds).toEqual(['claude'])
+    expect(refreshLocalAgents).toHaveBeenLastCalledWith(undefined)
+  })
+})
+
 afterEach(async () => {
   for (const root of roots) {
     await act(async () => {
diff --git a/src/renderer/src/hooks/useDetectedAgents.ts b/src/renderer/src/hooks/useDetectedAgents.ts
index 2776f2b69da..3015e524aa4 100644
--- a/src/renderer/src/hooks/useDetectedAgents.ts
+++ b/src/renderer/src/hooks/useDetectedAgents.ts
@@ -17,7 +17,7 @@ export type UseDetectedAgentsResult = {
 }
 
 export type AgentDetectionTarget =
-  | { kind: 'local' }
+  | { kind: 'local'; worktreeId?: string | null; contextKey?: string }
   | { kind: 'ssh'; connectionId: string }
   | { kind: 'runtime'; environmentId: string }
 
@@ -65,6 +65,8 @@ export function useDetectedAgents(
       : target?.kind === 'runtime'
         ? target.environmentId
         : null
+  const localWorktreeId = target?.kind === 'local' ? target.worktreeId : undefined
+  const localContextKey = target?.kind === 'local' ? target.contextKey : undefined
   const remoteTargetKey =
     targetKind === 'ssh' && targetId
       ? `ssh:${targetId}`
@@ -82,7 +84,9 @@ export function useDetectedAgents(
     if (targetKind === 'runtime' && targetId) {
       return s.runtimeDetectedAgentIds[targetId] ?? null
     }
-    return s.detectedAgentIds
+    return localContextKey
+      ? (s.localDetectedAgentIdsByContext[localContextKey] ?? null)
+      : s.detectedAgentIds
   })
   const isLoading = useAppStore((s) => {
     if (isUnknown) {
@@ -94,7 +98,9 @@ export function useDetectedAgents(
     if (targetKind === 'runtime' && targetId) {
       return s.isDetectingRuntimeAgents[targetId] ?? false
     }
-    return s.isDetectingAgents
+    return localContextKey
+      ? (s.isDetectingLocalAgentsByContext[localContextKey] ?? false)
+      : s.isDetectingAgents
   })
   const isRefreshing = useAppStore((s) => {
     if (targetKind === 'runtime' && targetId) {
@@ -103,7 +109,12 @@ export function useDetectedAgents(
     if (targetKind === 'ssh' && targetId) {
       return s.isDetectingRemoteAgents[targetId] ?? false
     }
-    return targetKind === 'local' ? s.isRefreshingAgents : false
+    if (targetKind !== 'local') {
+      return false
+    }
+    return localContextKey
+      ? (s.isRefreshingLocalAgentsByContext[localContextKey] ?? false)
+      : s.isRefreshingAgents
   })
   const detectionFailed =
     detectedIds === null &&
@@ -126,8 +137,8 @@ export function useDetectedAgents(
     if (targetKind === 'ssh' && targetId) {
       return state.refreshRemoteDetectedAgents(targetId)
     }
-    return state.refreshDetectedAgents()
-  }, [isUnknown, targetKind, targetId])
+    return state.refreshDetectedAgents(localWorktreeId)
+  }, [isUnknown, localWorktreeId, targetKind, targetId])
 
   useEffect(() => {
     if (isUnknown) {
@@ -159,10 +170,18 @@ export function useDetectedAgents(
       }
     } else {
       if (detectedIds === null) {
-        void state.ensureDetectedAgents()
+        void state.ensureDetectedAgents(localWorktreeId)
       }
     }
-  }, [isUnknown, targetKind, targetId, remoteTargetKey, detectedIds])
+  }, [
+    isUnknown,
+    targetKind,
+    targetId,
+    remoteTargetKey,
+    detectedIds,
+    localWorktreeId,
+    localContextKey
+  ])
 
   return { detectedIds, isLoading, detectionFailed, isRefreshing, refresh }
 }
diff --git a/src/renderer/src/hooks/useEditorExternalWatch-complexity.test.ts b/src/renderer/src/hooks/useEditorExternalWatch-complexity.test.ts
new file mode 100644
index 00000000000..cfcb973d968
--- /dev/null
+++ b/src/renderer/src/hooks/useEditorExternalWatch-complexity.test.ts
@@ -0,0 +1,129 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import type * as EditorAutosaveModule from '@/components/editor/editor-autosave'
+import type * as CrossPlatformPathModule from '../../../shared/cross-platform-path'
+import type { FsChangedPayload } from '../../../shared/types'
+
+const pathOperationCounts = vi.hoisted(() => ({
+  aliasComparisons: 0,
+  normalizations: 0,
+  identities: 0
+}))
+
+vi.mock('@/store', () => ({ useAppStore: { getState: vi.fn() } }))
+vi.mock('@/components/editor/editor-autosave', async (importOriginal) => {
+  const actual = await importOriginal<typeof EditorAutosaveModule>()
+  return { ...actual, notifyEditorExternalFileChange: vi.fn() }
+})
+vi.mock('../../../shared/cross-platform-path', async (importOriginal) => {
+  type PathModuleWithIdentity = typeof CrossPlatformPathModule & {
+    getLocalWindowsWslPathIdentity?: (value: string) => unknown
+  }
+  const actual = await importOriginal<PathModuleWithIdentity>()
+  return {
+    ...actual,
+    normalizeRuntimePathForComparison: (value: string) => {
+      pathOperationCounts.normalizations++
+      return actual.normalizeRuntimePathForComparison(value)
+    },
+    areLocalWindowsWslPathAliases: (left: string, right: string) => {
+      pathOperationCounts.aliasComparisons++
+      return actual.areLocalWindowsWslPathAliases(left, right)
+    },
+    ...(actual.getLocalWindowsWslPathIdentity
+      ? {
+          getLocalWindowsWslPathIdentity: (value: string) => {
+            pathOperationCounts.identities++
+            return actual.getLocalWindowsWslPathIdentity!(value)
+          }
+        }
+      : {})
+  }
+})
+
+import { useAppStore } from '@/store'
+import {
+  getOpenFilesForExternalFileChange,
+  notifyEditorExternalFileChange
+} from '@/components/editor/editor-autosave'
+import { createExternalWatchEventHandler } from './useEditorExternalWatch'
+
+const EVENT_COUNT = 5_000
+const OPEN_FILE_COUNT = 100
+const payloadWorktreePath = '\\\\wsl.localhost\\Ubuntu\\workspace\\repo'
+
+describe('external watcher path matching complexity', () => {
+  beforeEach(() => {
+    vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout'] })
+    vi.clearAllMocks()
+    pathOperationCounts.aliasComparisons = 0
+    pathOperationCounts.normalizations = 0
+    pathOperationCounts.identities = 0
+    vi.stubGlobal('window', { dispatchEvent: vi.fn() })
+    vi.stubGlobal('navigator', { userAgent: 'Windows' })
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+    vi.unstubAllGlobals()
+  })
+
+  it('bounds a maximum-sized opposite-alias batch by events plus open files', () => {
+    const openFiles = Array.from({ length: OPEN_FILE_COUNT }, (_, index) => ({
+      id: `//wsl.localhost/Ubuntu/workspace/repo/file-${index}.ts`,
+      filePath: `//wsl.localhost/Ubuntu/workspace/repo/file-${index}.ts`,
+      relativePath: `file-${index}.ts`,
+      worktreeId: 'wt-wsl',
+      mode: 'edit' as const,
+      isDirty: false
+    }))
+    const initialOpenFiles = [
+      ...openFiles,
+      {
+        id: 'combined-diff',
+        filePath: payloadWorktreePath,
+        relativePath: '',
+        worktreeId: 'wt-wsl',
+        mode: 'diff' as const,
+        diffSource: 'combined-uncommitted' as const,
+        isDirty: false
+      }
+    ]
+    vi.mocked(useAppStore.getState).mockReturnValue({
+      openFiles: initialOpenFiles,
+      setExternalMutation: vi.fn()
+    } as never)
+    const payload: FsChangedPayload = {
+      worktreePath: payloadWorktreePath,
+      events: Array.from({ length: EVENT_COUNT }, (_, index) => ({
+        kind: 'update' as const,
+        absolutePath: `\\\\wsl.localhost\\Ubuntu\\workspace\\repo\\file-${index}.ts`
+      }))
+    }
+    const { handleFsChanged, dispose } = createExternalWatchEventHandler(() => ({
+      worktreeId: 'wt-wsl',
+      worktreePath: payload.worktreePath,
+      connectionId: undefined,
+      runtimeEnvironmentId: null,
+      allowLocalWindowsWslAliases: true
+    }))
+
+    const startedAt = process.hrtime.bigint()
+    handleFsChanged(payload)
+    const elapsedMs = Number(process.hrtime.bigint() - startedAt) / 1_000_000
+    vi.advanceTimersByTime(100)
+    expect(notifyEditorExternalFileChange).toHaveBeenCalledTimes(EVENT_COUNT)
+    // Why: a tab/store update during debounce must rebuild the index once, not rescan per event.
+    const currentOpenFiles = initialOpenFiles.map((file) => ({ ...file }))
+    for (const [notification] of vi.mocked(notifyEditorExternalFileChange).mock.calls) {
+      getOpenFilesForExternalFileChange(currentOpenFiles as never, notification)
+    }
+    const pathOperations =
+      pathOperationCounts.aliasComparisons +
+      pathOperationCounts.normalizations +
+      pathOperationCounts.identities
+
+    console.info('STA-3942 watcher oracle', { ...pathOperationCounts, pathOperations, elapsedMs })
+    expect(pathOperations).toBeLessThanOrEqual(3 * (EVENT_COUNT + initialOpenFiles.length))
+    dispose()
+  })
+})
diff --git a/src/renderer/src/hooks/useEditorExternalWatch.test.ts b/src/renderer/src/hooks/useEditorExternalWatch.test.ts
index 747babef0e1..891bbc35e4e 100644
--- a/src/renderer/src/hooks/useEditorExternalWatch.test.ts
+++ b/src/renderer/src/hooks/useEditorExternalWatch.test.ts
@@ -287,7 +287,8 @@ describe('createExternalWatchEventHandler tombstone coalescing', () => {
       filePath: 'C:\\Repo\\notes.md',
       relativePath: 'notes.md',
       mode: 'edit' as const,
-      isDirty: false
+      isDirty: false,
+      runtimeEnvironmentId: 'env-1'
     }
     vi.mocked(useAppStore.getState).mockReturnValue({
       openFiles: [file],
@@ -324,7 +325,8 @@ describe('createExternalWatchEventHandler tombstone coalescing', () => {
       filePath: '//Server/Share/Repo/notes.md',
       relativePath: 'notes.md',
       mode: 'edit' as const,
-      isDirty: false
+      isDirty: false,
+      runtimeEnvironmentId: 'env-1'
     }
     vi.mocked(useAppStore.getState).mockReturnValue({
       openFiles: [file],
diff --git a/src/renderer/src/hooks/useEditorExternalWatch.ts b/src/renderer/src/hooks/useEditorExternalWatch.ts
index 5b0236d82f7..c07f9bd25c1 100644
--- a/src/renderer/src/hooks/useEditorExternalWatch.ts
+++ b/src/renderer/src/hooks/useEditorExternalWatch.ts
@@ -2,9 +2,7 @@
 import { useEffect, useRef } from 'react'
 import { useAppStore, type AppState } from '@/store'
 import { basename, joinPath } from '@/lib/path'
-import { getExternalFileChangeRelativePath } from '@/components/right-sidebar/useFileExplorerWatch'
 import {
-  areLocalWindowsWslPathAliases,
   isWindowsAbsolutePathLike,
   normalizeRuntimePathForComparison
 } from '../../../shared/cross-platform-path'
@@ -12,9 +10,9 @@ import {
   canAutoSaveOpenFile,
   getOpenFilesForExternalFileChange,
   isExternalReloadableEditorTab,
-  isWorkingTreeCombinedDiffTab,
   notifyEditorExternalFileChange
 } from '@/components/editor/editor-autosave'
+import { indexEditorExternalWatchBatchPaths } from '@/components/editor/editor-external-watch-path-index'
 import {
   clearSelfWrite,
   getRecentSelfWrite,
@@ -87,6 +85,9 @@ type ExternalWatchNotification = {
   relativePath: string
   runtimeEnvironmentId: string | null
   allowLocalWindowsWslAliases?: true
+  indexedOpenFiles?: {
+    matches: (openFiles: OpenFile[]) => OpenFile[]
+  }
 }
 
 function localWslAliasOption(
@@ -97,26 +98,6 @@ function localWslAliasOption(
     : {}
 }
 
-function findMatchingWatchedPath(
-  watchedPaths: ReadonlyMap<string, string>,
-  filePath: string,
-  allowLocalWslAliases?: true
-): string | undefined {
-  const directMatch = watchedPaths.get(normalizeRuntimePathForComparison(filePath))
-  if (directMatch !== undefined) {
-    return directMatch
-  }
-  if (allowLocalWslAliases !== true || !isLocalWindowsDesktopClient()) {
-    return undefined
-  }
-  for (const watchedPath of watchedPaths.values()) {
-    if (areLocalWindowsWslPathAliases(filePath, watchedPath)) {
-      return watchedPath
-    }
-  }
-  return undefined
-}
-
 function isLocalHostStamp(value: string | null | undefined): boolean {
   return parseExecutionHostId(value)?.kind === 'local'
 }
@@ -525,19 +506,15 @@ export function createExternalWatchEventHandler(
       )
     }
 
-    // Why: collect create/update paths first to cancel any pending same-path delete — this absorbs the macOS atomic-write delete→create split across two payloads.
-    const createOrUpdatePaths = new Map<string, string>()
-    for (const evt of payload.events) {
-      if (evt.isDirectory === true) {
-        continue
-      }
-      if (evt.kind === 'create' || evt.kind === 'update') {
-        createOrUpdatePaths.set(
-          normalizeRuntimePathForComparison(evt.absolutePath),
-          evt.absolutePath
-        )
-      }
-    }
+    // Why: one batch index keeps local WSL alias normalization out of event×tab loops.
+    const openFilesAtStart = useAppStore.getState().openFiles
+    const batchPaths = indexEditorExternalWatchBatchPaths(payload, openFilesAtStart, {
+      worktreeId: target.worktreeId,
+      worktreePath: target.worktreePath,
+      runtimeEnvironmentId: target.runtimeEnvironmentId,
+      ...localWslAliasOption(target)
+    })
+    const createOrUpdatePaths = batchPaths.createOrUpdatePaths
     for (const createdPath of createOrUpdatePaths.keys()) {
       const key = pendingKey(target.worktreeId, target.runtimeEnvironmentId, createdPath)
       const existing = pendingDeletes.get(key)
@@ -548,25 +525,16 @@ export function createExternalWatchEventHandler(
     }
 
     // Why: mark editor tabs deleted/renamed instead of closing them so the user keeps in-memory content; a paired create means rename, a lone delete is hard.
-    // Why: snapshot openFiles once so the delete/rename helpers share a consistent view without N store reads per payload.
-    const openFilesAtStart = useAppStore.getState().openFiles
-    const deletedOpenEditorIdsRaw = collectDeletedOpenEditorIds(
-      payload,
-      target.worktreeId,
-      target.runtimeEnvironmentId,
-      openFilesAtStart,
-      target.allowLocalWindowsWslAliases
-    )
+    // Why: snapshot openFiles once so delete, rename, and update matching share one indexed view.
+    const deletedOpenEditorsRaw = batchPaths.deletedOpenEditors
     // Only pay the per-id lookup to suppress a move's own source-delete while a move is live; else the batch stays O(deletes).
-    const deletedOpenEditorIds = hasActiveEditorPathMoves()
-      ? deletedOpenEditorIdsRaw.filter((fileId) => {
-          const file = openFilesAtStart.find((f) => f.id === fileId)
-          return (
-            !file ||
+    const deletedOpenEditors = hasActiveEditorPathMoves()
+      ? deletedOpenEditorsRaw.filter(
+          ({ file }) =>
             !isActiveMoveSourcePath(target.worktreeId, target.runtimeEnvironmentId, file.filePath)
-          )
-        })
-      : deletedOpenEditorIdsRaw
+        )
+      : deletedOpenEditorsRaw
+    const deletedOpenEditorIds = deletedOpenEditors.map(({ file }) => file.id)
     // Why: correlate creates to deletes by basename to avoid mislabelling unrelated create+delete pairs as "renamed"; default to 'deleted' when we can't correlate.
     const hasPairedCreate =
       deletedOpenEditorIds.length > 0 &&
@@ -580,19 +548,9 @@ export function createExternalWatchEventHandler(
         }
       } else {
         // Why: defer the 'deleted' tombstone so a follow-up same-path create in the next payload can cancel it (macOS atomic write).
-        const deletePathByFileId = buildDeletePathByFileId(
-          payload,
-          target.worktreeId,
-          target.runtimeEnvironmentId,
-          deletedOpenEditorIds,
-          openFilesAtStart,
-          target.allowLocalWindowsWslAliases
-        )
-        for (const fileId of deletedOpenEditorIds) {
-          const absolutePath = deletePathByFileId.get(fileId)
-          if (!absolutePath) {
-            continue
-          }
+        for (const { file, normalizedDeletePath } of deletedOpenEditors) {
+          const fileId = file.id
+          const absolutePath = normalizedDeletePath
           const key = pendingKey(target.worktreeId, target.runtimeEnvironmentId, absolutePath)
           const existing = pendingDeletes.get(key)
           if (existing) {
@@ -622,61 +580,32 @@ export function createExternalWatchEventHandler(
           openFileRuntimeOwner(file) === target.runtimeEnvironmentId &&
           (file.mode === 'edit' || file.mode === 'markdown-preview') &&
           (file.externalMutation === 'deleted' || file.externalMutation === 'renamed') &&
-          findMatchingWatchedPath(
-            createOrUpdatePaths,
-            file.filePath,
-            target.allowLocalWindowsWslAliases
-          ) !== undefined
+          batchPaths.matchesCreateOrUpdate(file)
         ) {
           state.setExternalMutation(file.id, null)
         }
       }
     }
 
-    const changedFiles = new Set<string>()
+    let overflowed = false
     for (const evt of payload.events) {
       if (evt.kind === 'overflow') {
         // Why: overflow omits per-path info, so conservatively clear stale tombstones or a file that reappeared during the overrun stays struck through.
         for (const notification of getOverflowExternalReloadTargets(target)) {
           scheduleDebouncedExternalReload(notification)
         }
-        // Why: `break` not `return` — changedFiles is empty so the rest early-returns anyway, and this is more robust to code added after the loop.
+        overflowed = true
         break
       }
-
-      if (evt.kind === 'update' && evt.isDirectory === true) {
-        continue
-      }
-
-      if (evt.kind === 'delete') {
-        // Why: deletes are tombstoned above; feeding them into reload would read the ENOENT path and replace in-memory content with an error, losing the user's view.
-        continue
-      }
-
-      const relativePath = getExternalFileChangeRelativePath(
-        target.worktreePath,
-        evt.absolutePath,
-        evt.isDirectory
-      )
-      if (relativePath) {
-        changedFiles.add(relativePath)
-      }
     }
 
-    if (changedFiles.size === 0) {
+    if (overflowed || batchPaths.changes.length === 0) {
       return
     }
 
-    // Why: read openFiles once per payload to avoid N store reads on large batches; consumers skip dirty tabs so external writes don't destroy unsaved work.
-    const openFilesSnapshot = useAppStore.getState().openFiles
-    // Why: the combined "Changes" tab is per-worktree not per-path, so compute it once instead of rescanning openFiles per changed file in a large batched payload.
-    const hasCombinedDiffConsumer = openFilesSnapshot.some(
-      (f) =>
-        f.worktreeId === target.worktreeId &&
-        openFileRuntimeOwner(f) === target.runtimeEnvironmentId &&
-        isWorkingTreeCombinedDiffTab(f)
-    )
-    for (const relativePath of changedFiles) {
+    for (const change of batchPaths.changes) {
+      const relativePath = change.relativePath
+      const matching = batchPaths.matchingOpenFiles(change)
       const notification = {
         worktreeId: target.worktreeId,
         worktreePath: target.worktreePath,
@@ -684,11 +613,15 @@ export function createExternalWatchEventHandler(
         runtimeEnvironmentId: target.runtimeEnvironmentId,
         ...localWslAliasOption(target)
       }
-      const absolutePath = joinPath(notification.worktreePath, notification.relativePath)
-      const matching = getOpenFilesForExternalFileChange(openFilesSnapshot, notification)
+      Object.defineProperty(notification, 'indexedOpenFiles', {
+        value: {
+          matches: (openFiles: OpenFile[]) => batchPaths.matchingOpenFiles(change, openFiles)
+        }
+      })
+      const absolutePath = change.absolutePath
       if (matching.length === 0) {
         // Why: combined-diff tab has no in-memory content to clobber and guards its own reload, so notify it directly without self-write suppression.
-        if (hasCombinedDiffConsumer) {
+        if (batchPaths.hasCombinedDiffConsumer) {
           scheduleDebouncedExternalReload(notification)
         }
         continue
@@ -717,7 +650,7 @@ export function createExternalWatchEventHandler(
           scheduleChangedOnDiskMark(target, notification, dirtyIds)
         }
         if (dirtyMatches.length === matching.length) {
-          if (hasCombinedDiffConsumer) {
+          if (batchPaths.hasCombinedDiffConsumer) {
             scheduleDebouncedExternalReload(notification)
           }
           continue
@@ -1033,79 +966,6 @@ export function getOverflowExternalReloadTargets(
   return notifications
 }
 
-function buildDeletePathByFileId(
-  payload: FsChangedPayload,
-  worktreeId: string,
-  runtimeEnvironmentId: string | null,
-  deletedOpenEditorIds: string[],
-  openFiles: OpenFile[],
-  allowLocalWindowsWslAliases?: true
-): Map<string, string> {
-  const deletePaths = new Map<string, string>()
-  for (const evt of payload.events) {
-    if (evt.kind === 'delete') {
-      deletePaths.set(normalizeRuntimePathForComparison(evt.absolutePath), evt.absolutePath)
-    }
-  }
-  const result = new Map<string, string>()
-  if (deletePaths.size === 0) {
-    return result
-  }
-  const deletedIdSet = new Set(deletedOpenEditorIds)
-  for (const file of openFiles) {
-    if (
-      !deletedIdSet.has(file.id) ||
-      file.worktreeId !== worktreeId ||
-      openFileRuntimeOwner(file) !== runtimeEnvironmentId
-    ) {
-      continue
-    }
-    const deletePath = findMatchingWatchedPath(
-      deletePaths,
-      file.filePath,
-      allowLocalWindowsWslAliases
-    )
-    if (deletePath) {
-      result.set(file.id, normalizeRuntimePathForComparison(deletePath))
-    }
-  }
-  return result
-}
-
-function collectDeletedOpenEditorIds(
-  payload: FsChangedPayload,
-  worktreeId: string,
-  runtimeEnvironmentId: string | null,
-  openFiles: OpenFile[],
-  allowLocalWindowsWslAliases?: true
-): string[] {
-  const deletePaths = new Map<string, string>()
-  for (const evt of payload.events) {
-    if (evt.kind === 'delete') {
-      deletePaths.set(normalizeRuntimePathForComparison(evt.absolutePath), evt.absolutePath)
-    }
-  }
-  if (deletePaths.size === 0) {
-    return []
-  }
-  const result: string[] = []
-  for (const file of openFiles) {
-    if (
-      file.worktreeId !== worktreeId ||
-      openFileRuntimeOwner(file) !== runtimeEnvironmentId ||
-      (file.mode !== 'edit' && file.mode !== 'markdown-preview')
-    ) {
-      continue
-    }
-    if (
-      findMatchingWatchedPath(deletePaths, file.filePath, allowLocalWindowsWslAliases) !== undefined
-    ) {
-      result.push(file.id)
-    }
-  }
-  return result
-}
-
 /**
  * Returns true if the batched payload contains at least one file-create event
  * whose basename matches a deleted open editor file.
diff --git a/src/renderer/src/hooks/useIpcEvents.test.ts b/src/renderer/src/hooks/useIpcEvents.test.ts
index 679ac28509c..c19fe942461 100644
--- a/src/renderer/src/hooks/useIpcEvents.test.ts
+++ b/src/renderer/src/hooks/useIpcEvents.test.ts
@@ -22,11 +22,21 @@ import {
   makeWorktree,
   TEST_REPO
 } from '../store/slices/store-test-helpers'
+import type {
+  AgentStatusBatchTransaction,
+  AgentStatusBatchUpdate,
+  AgentStatusUpdate
+} from '../store/slices/agent-status'
+import type { AppState } from '../store/types'
 import type { SleepingAgentLaunchConfig } from '../../../shared/agent-session-resume'
-import type { AgentStatusClearIpcPayload } from '../../../shared/agent-status-types'
-import type { TuiAgent } from '../../../shared/types'
+import type {
+  AgentStatusClearIpcPayload,
+  MigrationUnsupportedPtyEntry
+} from '../../../shared/agent-status-types'
+import type { TerminalPaneLayoutNode, TuiAgent } from '../../../shared/types'
 import type * as CmdJRowIndexJump from '@/lib/cmd-j-row-index-jump'
 import { makePaneKey } from '../../../shared/stable-pane-id'
+import { folderWorkspaceKey } from '../../../shared/workspace-scope'
 import { YOLO_TUI_AGENT_ARGS } from '../../../shared/tui-agent-permissions'
 import {
   FLOATING_WORKSPACE_GUEST_CLOSE_EVENT,
@@ -5000,6 +5010,7 @@ describe('useIpcEvents agent status snapshot integration', () => {
     terminalHandle?: string
     launchToken?: string
     providerSession?: { key: 'session_id'; id: string }
+    providerSessionOnly?: boolean
     orchestration?: {
       taskId?: string
       dispatchId?: string
@@ -5030,11 +5041,72 @@ describe('useIpcEvents agent status snapshot integration', () => {
     driver: { kind: 'mobile'; clientId: string }
   }) => void
 
+  function applyMockAgentStatusUpdate(state: StoreLike, update: AgentStatusBatchUpdate): boolean {
+    const statuses = state.agentStatusByPaneKey as Record<
+      string,
+      | ({ agentType?: string; state?: string; updatedAt?: number } & Record<string, unknown>)
+      | undefined
+    >
+    const existing = statuses[update.paneKey]
+    const updatedAt = update.timing?.updatedAt
+    if (
+      existing?.updatedAt !== undefined &&
+      updatedAt !== undefined &&
+      updatedAt < existing.updatedAt
+    ) {
+      return false
+    }
+    const next = { ...statuses }
+    if (update.kind === 'providerSession') {
+      delete next[update.paneKey]
+    } else {
+      next[update.paneKey] = {
+        ...existing,
+        ...update.payload,
+        updatedAt,
+        providerSession: update.metadata?.providerSession
+      }
+    }
+    state.agentStatusByPaneKey = next
+    return true
+  }
+
+  function installMockAgentStatusTransaction(state: StoreLike): void {
+    state.transactAgentStatuses = <Result>(
+      operation: (transaction: AgentStatusBatchTransaction) => Result
+    ): Result => {
+      const stagedState = {
+        ...state,
+        agentStatusByPaneKey: {
+          ...(state.agentStatusByPaneKey as Record<string, unknown>)
+        }
+      }
+      const attemptedUpdates: AgentStatusBatchUpdate[] = []
+      const effects: (() => void)[] = []
+      const result = operation({
+        getState: () => stagedState as AppState,
+        apply: (update) => {
+          attemptedUpdates.push(update)
+          return applyMockAgentStatusUpdate(stagedState, update)
+        },
+        afterCommit: (effect) => effects.push(effect)
+      })
+      const setStatuses = state.setAgentStatuses as (
+        updates: readonly AgentStatusBatchUpdate[]
+      ) => readonly boolean[]
+      setStatuses(attemptedUpdates)
+      for (const effect of effects) {
+        effect()
+      }
+      return result
+    }
+  }
+
   function buildStoreState(overrides: StoreLike): StoreLike {
     // Why: copy the defensive set of getState() fields the hook touches during
     // mount so individual tests only need to override workspaceSessionReady,
     // tabsByWorktree, and setAgentStatus.
-    return {
+    const state: StoreLike = {
       setUpdateStatus: vi.fn(),
       fetchRepos: vi.fn(),
       fetchWorktrees: vi.fn(),
@@ -5064,9 +5136,12 @@ describe('useIpcEvents agent status snapshot integration', () => {
       removeSshCredentialRequest: vi.fn(),
       clearTabPtyId: vi.fn(),
       updateTabTitle: vi.fn(),
+      updateTabTitles: vi.fn(),
       runtimePaneTitlesByTabId: {},
       terminalLayoutsByTabId: {},
       agentStatusByPaneKey: {},
+      setAgentStatuses: vi.fn(() => []),
+      recordAgentProviderSession: vi.fn(),
       clearTransientAgentStatuses: vi.fn(),
       getAgentLaunchConfigForStatusMetadata: vi.fn(() => undefined),
       recentlyClosedAgentStatusTabIds: {},
@@ -5078,6 +5153,45 @@ describe('useIpcEvents agent status snapshot integration', () => {
       settings: { terminalFontSize: 13 },
       ...overrides
     }
+    if (!('updateTabTitles' in overrides)) {
+      state.updateTabTitles = vi.fn((updates: readonly { tabId: string; title: string }[]) => {
+        const updateTitle = state.updateTabTitle as AppState['updateTabTitle']
+        for (const { tabId, title } of updates) {
+          updateTitle(tabId, title)
+        }
+      })
+    }
+    if (!('setAgentStatuses' in overrides)) {
+      state.setAgentStatuses = vi.fn((updates: readonly AgentStatusBatchUpdate[]) =>
+        updates.map((update) => {
+          if (update.kind === 'providerSession') {
+            const recordProviderSession =
+              state.recordAgentProviderSession as AppState['recordAgentProviderSession']
+            recordProviderSession(
+              update.paneKey,
+              update.agent,
+              update.providerSession,
+              update.timing,
+              update.routing,
+              update.metadata
+            )
+          } else {
+            const setStatus = state.setAgentStatus as AppState['setAgentStatus']
+            setStatus(
+              update.paneKey,
+              update.payload,
+              update.terminalTitle,
+              update.timing,
+              update.routing,
+              update.metadata
+            )
+          }
+          return true
+        })
+      )
+    }
+    installMockAgentStatusTransaction(state)
+    return state
   }
 
   function buildWindowApi(args: {
@@ -5087,6 +5201,7 @@ describe('useIpcEvents agent status snapshot integration', () => {
       cb: (data: { paneKey: string; resolution: 'adopted' | 'exited' }) => void
     ) => () => void
     getSnapshot?: () => Promise<AgentStatusSetData[]>
+    getMigrationUnsupportedSnapshot?: () => Promise<MigrationUnsupportedPtyEntry[]>
     drop?: (paneKey: string) => void
     remoteWorkspace?: Record<string, unknown>
     runtime?: Record<string, unknown>
@@ -5200,6 +5315,9 @@ describe('useIpcEvents agent status snapshot integration', () => {
           onLegacyWorkerTerminalRecovery:
             args.onLegacyWorkerTerminalRecovery ?? vi.fn(() => () => {}),
           getSnapshot: args.getSnapshot ?? vi.fn(() => Promise.resolve([])),
+          ...(args.getMigrationUnsupportedSnapshot
+            ? { getMigrationUnsupportedSnapshot: args.getMigrationUnsupportedSnapshot }
+            : {}),
           drop: args.drop ?? vi.fn()
         },
         remoteWorkspace: args.remoteWorkspace
@@ -6136,6 +6254,7 @@ describe('useIpcEvents agent status snapshot integration', () => {
       tabsByWorktree: {},
       workspaceSessionReady: false
     })
+    const setAgentStatuses = vi.mocked(storeState.setAgentStatuses as AppState['setAgentStatuses'])
 
     stubReactSyncEffect()
     vi.doMock('../store', () => ({
@@ -6201,6 +6320,8 @@ describe('useIpcEvents agent status snapshot integration', () => {
     await Promise.resolve()
 
     expect(setAgentStatus).toHaveBeenCalledTimes(1)
+    expect(setAgentStatuses).toHaveBeenCalledTimes(1)
+    expect(setAgentStatuses.mock.calls[0]?.[0]).toHaveLength(1)
     expect(setAgentStatus).toHaveBeenCalledWith(
       FUTURE_PANE_KEY,
       expect.objectContaining({ state: 'working', prompt: 'p', agentType: 'claude' }),
@@ -6211,18 +6332,582 @@ describe('useIpcEvents agent status snapshot integration', () => {
     )
   })
 
+  it('applies a large snapshot with one status and two bounded title publications', async () => {
+    const paneCount = 100
+    const snapshot: AgentStatusSetData[] = []
+    const worktrees: AppState['worktreesByRepo'][string] = []
+    const tabsByWorktree: AppState['tabsByWorktree'] = {}
+    const terminalLayoutsByTabId: AppState['terminalLayoutsByTabId'] = {}
+    for (let index = 0; index < paneCount; index += 1) {
+      const worktreeId = `wt-snapshot-${index}`
+      const tabId = `tab-snapshot-${index}`
+      const leafId = `00000000-0000-4000-8000-${String(index).padStart(12, '0')}`
+      const paneKey = makePaneKey(tabId, leafId)
+      worktrees.push(makeWorktree({ id: worktreeId, repoId: TEST_REPO.id }))
+      tabsByWorktree[worktreeId] = [
+        makeTab({ id: tabId, worktreeId, title: 'Pi', ptyId: `pty-${index}` })
+      ]
+      terminalLayoutsByTabId[tabId] = {
+        root: { type: 'leaf', leafId },
+        activeLeafId: leafId,
+        expandedLeafId: null
+      }
+      snapshot.push({
+        paneKey,
+        worktreeId,
+        state: 'waiting',
+        prompt: `remote prompt ${index}`,
+        agentType: 'pi',
+        receivedAt: 1_700_000_000_000 + index,
+        stateStartedAt: 1_700_000_000_000 + index
+      })
+    }
+    let resolveSnapshot: ((entries: AgentStatusSetData[]) => void) | undefined
+    const getSnapshot = vi.fn(
+      () =>
+        new Promise<AgentStatusSetData[]>((resolve) => {
+          resolveSnapshot = resolve
+        })
+    )
+    const store = createTestStore()
+    store.setState({
+      workspaceSessionReady: true,
+      repos: [TEST_REPO],
+      worktreesByRepo: { [TEST_REPO.id]: worktrees },
+      tabsByWorktree,
+      terminalLayoutsByTabId,
+      activeWorktreeId: worktrees[0]?.id ?? null,
+      settings: {
+        ...store.getState().settings,
+        tabAutoGenerateTitle: true,
+        terminalFontSize: 13
+      }
+    } as Partial<AppState>)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: store.subscribe,
+        getState: store.getState,
+        setState: store.setState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        getSnapshot,
+        onSet: () => () => {}
+      })
+    )
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+    await Promise.resolve()
+    let relevantPublications = 0
+    const unsubscribe = store.subscribe((state, previousState) => {
+      if (
+        state.agentStatusByPaneKey !== previousState.agentStatusByPaneKey ||
+        state.tabsByWorktree !== previousState.tabsByWorktree
+      ) {
+        relevantPublications += 1
+      }
+    })
+    resolveSnapshot?.(snapshot)
+
+    await vi.waitFor(() => {
+      expect(Object.keys(store.getState().agentStatusByPaneKey)).toHaveLength(paneCount)
+      expect(store.getState().tabsByWorktree['wt-snapshot-99']?.[0]?.title).toBe(
+        'Pi - action required'
+      )
+      expect(store.getState().tabsByWorktree['wt-snapshot-99']?.[0]?.generatedTitle).toBeTruthy()
+    })
+
+    expect(relevantPublications).toBe(3)
+    unsubscribe()
+  })
+
+  it('indexes one 100-pane tab and its split tree once per snapshot', async () => {
+    const paneCount = 100
+    const tabId = 'tab-indexed-snapshot'
+    const worktreeId = 'wt-indexed-snapshot'
+    const leafIds = Array.from(
+      { length: paneCount },
+      (_, index) => `00000000-0000-4000-8001-${String(index).padStart(12, '0')}`
+    )
+    let leafIdLookupCount = 0
+    const leaves = leafIds.map((leafId) => {
+      const leaf = { type: 'leaf' } as TerminalPaneLayoutNode
+      Object.defineProperty(leaf, 'leafId', {
+        enumerable: true,
+        get: () => {
+          leafIdLookupCount += 1
+          return leafId
+        }
+      })
+      return leaf
+    })
+    const root = leaves
+      .slice(1)
+      .reduce<TerminalPaneLayoutNode>(
+        (tree, leaf) => ({ type: 'split', direction: 'vertical', first: tree, second: leaf }),
+        leaves[0]!
+      )
+    let tabIdLookupCount = 0
+    const tab = makeTab({ id: tabId, worktreeId, title: 'Workspace', ptyId: 'pty-indexed' })
+    Object.defineProperty(tab, 'id', {
+      enumerable: true,
+      get: () => {
+        tabIdLookupCount += 1
+        return tabId
+      }
+    })
+    const snapshot = leafIds.map(
+      (leafId, index): AgentStatusSetData => ({
+        paneKey: makePaneKey(tabId, leafId),
+        worktreeId,
+        state: 'working',
+        prompt: `indexed prompt ${index}`,
+        agentType: 'claude',
+        receivedAt: 1_700_000_000_000 + index,
+        stateStartedAt: 1_700_000_000_000 + index
+      })
+    )
+    let resolveSnapshot!: (entries: AgentStatusSetData[]) => void
+    const getSnapshot = vi.fn(
+      () =>
+        new Promise<AgentStatusSetData[]>((resolve) => {
+          resolveSnapshot = resolve
+        })
+    )
+    const store = createTestStore()
+    store.setState({
+      workspaceSessionReady: true,
+      repos: [TEST_REPO],
+      worktreesByRepo: {
+        [TEST_REPO.id]: [makeWorktree({ id: worktreeId, repoId: TEST_REPO.id })]
+      },
+      tabsByWorktree: { [worktreeId]: [tab] },
+      terminalLayoutsByTabId: {
+        [tabId]: {
+          root,
+          activeLeafId: leafIds[0]!,
+          expandedLeafId: null
+        }
+      },
+      setGeneratedTabTitlesFromAgentPrompts: vi.fn(),
+      settings: { ...store.getState().settings, terminalFontSize: 13 }
+    } as Partial<AppState>)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: store.subscribe,
+        getState: store.getState,
+        setState: store.setState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal('window', buildWindowApi({ getSnapshot, onSet: () => () => {} }))
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+    await Promise.resolve()
+    tabIdLookupCount = 0
+    leafIdLookupCount = 0
+    resolveSnapshot(snapshot)
+
+    await vi.waitFor(() => {
+      expect(Object.keys(store.getState().agentStatusByPaneKey)).toHaveLength(paneCount)
+    })
+    expect(tabIdLookupCount).toBe(1)
+    expect(leafIdLookupCount).toBe(paneCount)
+  })
+
+  it('indexes 100 distinct tab owners once per snapshot', async () => {
+    const paneCount = 100
+    const worktreeId = 'wt-indexed-tabs'
+    const tabs: AppState['tabsByWorktree'][string] = []
+    const snapshot: AgentStatusSetData[] = []
+    const unsupportedSnapshot: MigrationUnsupportedPtyEntry[] = []
+    let tabIdLookupCount = 0
+    for (let index = 0; index < paneCount; index += 1) {
+      const tabId = `tab-indexed-${index}`
+      const leafId = `00000000-0000-4000-8003-${String(index).padStart(12, '0')}`
+      const tab = makeTab({
+        id: tabId,
+        worktreeId,
+        title: 'Workspace',
+        ptyId: `pty-indexed-${index}`
+      })
+      Object.defineProperty(tab, 'id', {
+        enumerable: true,
+        get: () => {
+          tabIdLookupCount += 1
+          return tabId
+        }
+      })
+      tabs.push(tab)
+      snapshot.push({
+        paneKey: makePaneKey(tabId, leafId),
+        worktreeId,
+        state: 'working',
+        prompt: `indexed tab prompt ${index}`,
+        agentType: 'claude',
+        receivedAt: 1_700_000_000_500 + index,
+        stateStartedAt: 1_700_000_000_500 + index
+      })
+      unsupportedSnapshot.push({
+        ptyId: `pty-indexed-${index}`,
+        worktreeId,
+        tabId,
+        leafId,
+        paneKey: makePaneKey(tabId, leafId),
+        reason: 'legacy-numeric-pane-key',
+        source: 'local',
+        updatedAt: 1_700_000_000_500 + index
+      })
+    }
+    let resolveSnapshot!: (entries: AgentStatusSetData[]) => void
+    const getSnapshot = vi.fn(
+      () =>
+        new Promise<AgentStatusSetData[]>((resolve) => {
+          resolveSnapshot = resolve
+        })
+    )
+    let resolveUnsupportedSnapshot!: (entries: MigrationUnsupportedPtyEntry[]) => void
+    const getMigrationUnsupportedSnapshot = vi.fn(
+      () =>
+        new Promise<MigrationUnsupportedPtyEntry[]>((resolve) => {
+          resolveUnsupportedSnapshot = resolve
+        })
+    )
+    const store = createTestStore()
+    store.setState({
+      workspaceSessionReady: true,
+      repos: [TEST_REPO],
+      worktreesByRepo: {
+        [TEST_REPO.id]: [makeWorktree({ id: worktreeId, repoId: TEST_REPO.id })]
+      },
+      tabsByWorktree: { [worktreeId]: tabs },
+      terminalLayoutsByTabId: {},
+      setGeneratedTabTitlesFromAgentPrompts: vi.fn(),
+      settings: {
+        ...store.getState().settings,
+        terminalFontSize: 13,
+        tabAutoGenerateTitle: false
+      }
+    } as Partial<AppState>)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: store.subscribe,
+        getState: store.getState,
+        setState: store.setState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        getSnapshot,
+        getMigrationUnsupportedSnapshot,
+        onSet: () => () => {}
+      })
+    )
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+    await Promise.resolve()
+    tabIdLookupCount = 0
+    resolveSnapshot(snapshot)
+
+    await vi.waitFor(() => {
+      expect(Object.keys(store.getState().agentStatusByPaneKey)).toHaveLength(paneCount)
+    })
+    expect(tabIdLookupCount).toBe(paneCount)
+    expect(getMigrationUnsupportedSnapshot).toHaveBeenCalledTimes(1)
+
+    tabIdLookupCount = 0
+    resolveUnsupportedSnapshot(unsupportedSnapshot)
+    await vi.waitFor(() => {
+      expect(Object.keys(store.getState().migrationUnsupportedByPtyId)).toHaveLength(paneCount)
+    })
+    expect(tabIdLookupCount).toBe(paneCount)
+  })
+
+  it('preserves inactive, SSH, and folder routing parity in one batch', async () => {
+    type RoutingCase = {
+      tabId: string
+      leafId: string
+      ownerId: string
+      payloadWorktreeId: string
+      connectionId?: string
+      rootless?: boolean
+      expected: boolean
+    }
+    const folderId = 'folder-routing'
+    const folderKey = folderWorkspaceKey(folderId)
+    const cases: RoutingCase[] = [
+      {
+        tabId: 'tab-routing-inactive',
+        leafId: '00000000-0000-4000-8002-000000000001',
+        ownerId: 'wt-routing-local',
+        payloadWorktreeId: 'wt-routing-local',
+        rootless: true,
+        expected: true
+      },
+      {
+        tabId: 'tab-routing-ssh-match',
+        leafId: '00000000-0000-4000-8002-000000000002',
+        ownerId: 'wt-routing-ssh',
+        payloadWorktreeId: 'wt-routing-ssh',
+        connectionId: 'ssh-live',
+        expected: true
+      },
+      {
+        tabId: 'tab-routing-ssh-mismatch',
+        leafId: '00000000-0000-4000-8002-000000000003',
+        ownerId: 'wt-routing-ssh',
+        payloadWorktreeId: 'wt-routing-ssh',
+        connectionId: 'ssh-stale',
+        expected: false
+      },
+      {
+        tabId: 'tab-routing-hydrating',
+        leafId: '00000000-0000-4000-8002-000000000004',
+        ownerId: 'wt-routing-hydrating',
+        payloadWorktreeId: 'wt-routing-hydrating',
+        connectionId: 'ssh-hydrating',
+        expected: true
+      },
+      {
+        tabId: 'tab-routing-hydrating-mismatch',
+        leafId: '00000000-0000-4000-8002-000000000005',
+        ownerId: 'wt-routing-hydrating',
+        payloadWorktreeId: 'wt-routing-other',
+        connectionId: 'ssh-hydrating',
+        expected: false
+      },
+      {
+        tabId: 'tab-routing-folder',
+        leafId: '00000000-0000-4000-8002-000000000006',
+        ownerId: folderKey,
+        payloadWorktreeId: folderKey,
+        connectionId: 'ssh-folder-stale',
+        expected: true
+      }
+    ]
+    const tabsByWorktree: AppState['tabsByWorktree'] = {}
+    const terminalLayoutsByTabId: AppState['terminalLayoutsByTabId'] = {}
+    for (const entry of cases) {
+      ;(tabsByWorktree[entry.ownerId] ??= []).push(
+        makeTab({
+          id: entry.tabId,
+          worktreeId: entry.ownerId,
+          title: 'Workspace',
+          ptyId: `pty-${entry.tabId}`
+        })
+      )
+      terminalLayoutsByTabId[entry.tabId] = {
+        root: entry.rootless ? null : { type: 'leaf', leafId: entry.leafId },
+        activeLeafId: entry.rootless ? null : entry.leafId,
+        expandedLeafId: null
+      }
+    }
+    const snapshot = cases.map(
+      (entry, index): AgentStatusSetData => ({
+        paneKey: makePaneKey(entry.tabId, entry.leafId),
+        worktreeId: entry.payloadWorktreeId,
+        ...(entry.connectionId ? { connectionId: entry.connectionId } : {}),
+        state: 'working',
+        prompt: `routing case ${index}`,
+        agentType: 'claude',
+        receivedAt: 1_700_000_001_000 + index,
+        stateStartedAt: 1_700_000_001_000 + index
+      })
+    )
+    const localRepo = { ...TEST_REPO, id: 'repo-routing-local', connectionId: null }
+    const sshRepo = { ...TEST_REPO, id: 'repo-routing-ssh', connectionId: 'ssh-live' }
+    const store = createTestStore()
+    store.setState({
+      workspaceSessionReady: true,
+      repos: [localRepo, sshRepo],
+      worktreesByRepo: {
+        [localRepo.id]: [makeWorktree({ id: 'wt-routing-local', repoId: localRepo.id })],
+        [sshRepo.id]: [makeWorktree({ id: 'wt-routing-ssh', repoId: sshRepo.id })]
+      },
+      folderWorkspaces: [
+        {
+          id: folderId,
+          projectGroupId: 'group-routing',
+          name: 'Folder routing',
+          folderPath: '/folder-routing',
+          connectionId: 'ssh-folder-live',
+          linkedTask: null,
+          comment: '',
+          isArchived: false,
+          isUnread: false,
+          isPinned: false,
+          sortOrder: 0,
+          lastActivityAt: 0,
+          createdAt: 0,
+          updatedAt: 0
+        }
+      ],
+      tabsByWorktree,
+      terminalLayoutsByTabId,
+      activeWorktreeId: null,
+      settings: { ...store.getState().settings, terminalFontSize: 13 }
+    } as Partial<AppState>)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: store.subscribe,
+        getState: store.getState,
+        setState: store.setState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({ getSnapshot: vi.fn().mockResolvedValue(snapshot), onSet: () => () => {} })
+    )
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+
+    await vi.waitFor(() => {
+      expect(
+        cases
+          .filter((entry) => entry.expected)
+          .every(
+            (entry) => store.getState().agentStatusByPaneKey[makePaneKey(entry.tabId, entry.leafId)]
+          )
+      ).toBe(true)
+    })
+    for (const entry of cases) {
+      expect(
+        store.getState().agentStatusByPaneKey[makePaneKey(entry.tabId, entry.leafId)] !== undefined
+      ).toBe(entry.expected)
+    }
+  })
+
+  it('projects ordered tab titles across panes in an inactive split snapshot', async () => {
+    const tabId = 'tab-inactive-split'
+    const worktreeId = 'wt-inactive-split'
+    const waitingPaneKey = makePaneKey(tabId, '00000000-0000-4000-8000-000000000001')
+    const donePaneKey = makePaneKey(tabId, '00000000-0000-4000-8000-000000000002')
+    const getSnapshot = vi.fn().mockResolvedValue([
+      {
+        paneKey: waitingPaneKey,
+        worktreeId,
+        state: 'waiting',
+        prompt: 'waiting turn',
+        agentType: 'pi',
+        receivedAt: 1_700_000_000_000,
+        stateStartedAt: 1_700_000_000_000
+      },
+      {
+        paneKey: donePaneKey,
+        worktreeId,
+        state: 'done',
+        prompt: 'completed turn',
+        agentType: 'pi',
+        receivedAt: 1_700_000_000_001,
+        stateStartedAt: 1_700_000_000_001
+      }
+    ] satisfies AgentStatusSetData[])
+    const store = createTestStore()
+    store.setState({
+      workspaceSessionReady: true,
+      repos: [TEST_REPO],
+      worktreesByRepo: {
+        [TEST_REPO.id]: [makeWorktree({ id: worktreeId, repoId: TEST_REPO.id })]
+      },
+      tabsByWorktree: {
+        [worktreeId]: [makeTab({ id: tabId, worktreeId, title: 'My Project' })]
+      },
+      terminalLayoutsByTabId: {
+        [tabId]: {
+          root: null,
+          activeLeafId: null,
+          expandedLeafId: null,
+          ptyIdsByLeafId: {}
+        }
+      },
+      activeWorktreeId: null,
+      settings: { ...store.getState().settings, terminalFontSize: 13 }
+    } as Partial<AppState>)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: store.subscribe,
+        getState: store.getState,
+        setState: store.setState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        getSnapshot,
+        onSet: () => () => {}
+      })
+    )
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+
+    await vi.waitFor(() => {
+      expect(store.getState().agentStatusByPaneKey[waitingPaneKey]?.state).toBe('waiting')
+      expect(store.getState().agentStatusByPaneKey[donePaneKey]?.state).toBe('done')
+      expect(store.getState().tabsByWorktree[worktreeId]?.[0]?.title).toBe('Pi ready')
+    })
+  })
+
   it('applies a burst leading-edge first, then coalesces the rest into one deferred batch', async () => {
     // Why: each live status event is its own IPC task, so N events used to pay
     // N full render passes (STA-3328 mechanism 2). The leading event must stay
     // synchronous (zero added latency); followers within the burst window must
     // apply together on one later task, in arrival order.
     vi.useFakeTimers()
-    const setAgentStatus = vi.fn()
+    let storeState: StoreLike
+    let publicationCount = 0
+    const applyStatus = (paneKey: string, payload: unknown): void => {
+      storeState.agentStatusByPaneKey = {
+        ...(storeState.agentStatusByPaneKey as Record<string, unknown>),
+        [paneKey]: payload
+      }
+    }
+    const setAgentStatus = vi.fn((paneKey: string, payload: unknown) => {
+      applyStatus(paneKey, payload)
+      publicationCount += 1
+    })
+    const setAgentStatuses = vi.fn((updates: readonly AgentStatusBatchUpdate[]) => {
+      for (const update of updates) {
+        if (update.kind === 'providerSession') {
+          const next = { ...(storeState.agentStatusByPaneKey as Record<string, unknown>) }
+          delete next[update.paneKey]
+          storeState.agentStatusByPaneKey = next
+        } else {
+          applyStatus(update.paneKey, update.payload)
+        }
+      }
+      publicationCount += 1
+      return updates.map(() => true)
+    })
+    const recordAgentProviderSession = vi.fn()
     const onSetListenerRef: { current: ((data: AgentStatusSetData) => void) | null } = {
       current: null
     }
-    const storeState: StoreLike = buildStoreState({
+    storeState = buildStoreState({
       setAgentStatus,
+      setAgentStatuses,
+      recordAgentProviderSession,
       workspaceSessionReady: true,
       tabsByWorktree: {
         'wt-1': [{ id: 'tab-future', ptyId: 'pty-1', worktreeId: 'wt-1', title: 'Future Tab' }]
@@ -6235,7 +6920,6 @@ describe('useIpcEvents agent status snapshot integration', () => {
         }
       }
     })
-
     stubReactSyncEffect()
     vi.doMock('../store', () => ({
       useAppStore: {
@@ -6273,15 +6957,275 @@ describe('useIpcEvents agent status snapshot integration', () => {
 
       emit(1_700_000_000_000, 'first')
       expect(setAgentStatus).toHaveBeenCalledTimes(1)
+      expect(publicationCount).toBe(1)
 
       emit(1_700_000_000_001, 'second')
       emit(1_700_000_000_002, 'third')
+      onSetListenerRef.current({
+        paneKey: FUTURE_PANE_KEY,
+        state: 'working',
+        prompt: 'provider identity',
+        agentType: 'pi',
+        providerSession: { key: 'session_id', id: 'pi-session' },
+        providerSessionOnly: true,
+        receivedAt: 1_700_000_000_003,
+        stateStartedAt: 1_700_000_000_003
+      })
       expect(setAgentStatus).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses).not.toHaveBeenCalled()
 
       vi.advanceTimersByTime(40)
-      expect(setAgentStatus).toHaveBeenCalledTimes(3)
-      expect(setAgentStatus.mock.calls[1][1]).toEqual(expect.objectContaining({ prompt: 'second' }))
-      expect(setAgentStatus.mock.calls[2][1]).toEqual(expect.objectContaining({ prompt: 'third' }))
+      expect(setAgentStatus).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses.mock.calls[0][0]).toEqual([
+        expect.objectContaining({
+          paneKey: FUTURE_PANE_KEY,
+          payload: expect.objectContaining({ prompt: 'second' })
+        }),
+        expect.objectContaining({
+          paneKey: FUTURE_PANE_KEY,
+          payload: expect.objectContaining({ prompt: 'third' })
+        }),
+        expect.objectContaining({
+          kind: 'providerSession',
+          paneKey: FUTURE_PANE_KEY,
+          agent: 'pi',
+          providerSession: { key: 'session_id', id: 'pi-session' }
+        })
+      ])
+      expect(recordAgentProviderSession).not.toHaveBeenCalled()
+      expect(publicationCount).toBe(2)
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('keeps a live event enqueued by a synchronous batch subscriber for the next flush', async () => {
+    vi.useFakeTimers()
+    const setAgentStatus = vi.fn()
+    const onSetListenerRef: { current: ((data: AgentStatusSetData) => void) | null } = {
+      current: null
+    }
+    let reentered = false
+    const setAgentStatuses = vi.fn((updates: readonly AgentStatusUpdate[]) => {
+      if (!reentered) {
+        reentered = true
+        onSetListenerRef.current?.({
+          paneKey: FUTURE_PANE_KEY,
+          state: 'working',
+          prompt: 'reentered',
+          agentType: 'claude',
+          receivedAt: 1_700_000_000_002,
+          stateStartedAt: 1_700_000_000_002
+        })
+      }
+      return updates.map(() => true)
+    })
+    const storeState = buildStoreState({
+      setAgentStatus,
+      setAgentStatuses,
+      workspaceSessionReady: true,
+      tabsByWorktree: {
+        'wt-1': [{ id: 'tab-future', ptyId: 'pty-1', worktreeId: 'wt-1', title: 'Future Tab' }]
+      },
+      terminalLayoutsByTabId: {
+        'tab-future': {
+          root: { type: 'leaf', leafId: FUTURE_LEAF_ID },
+          activeLeafId: FUTURE_LEAF_ID,
+          expandedLeafId: null
+        }
+      }
+    })
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: vi.fn(() => () => {}),
+        getState: () => storeState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        onSet: (callback) => {
+          onSetListenerRef.current = callback
+          return () => {}
+        }
+      })
+    )
+
+    try {
+      const { useIpcEvents } = await import('./useIpcEvents')
+      useIpcEvents()
+      if (!onSetListenerRef.current) {
+        throw new Error('Expected agentStatus.onSet listener to be registered')
+      }
+
+      onSetListenerRef.current({
+        paneKey: FUTURE_PANE_KEY,
+        state: 'working',
+        prompt: 'leading',
+        agentType: 'claude',
+        receivedAt: 1_700_000_000_000,
+        stateStartedAt: 1_700_000_000_000
+      })
+      onSetListenerRef.current({
+        paneKey: FUTURE_PANE_KEY,
+        state: 'working',
+        prompt: 'queued',
+        agentType: 'claude',
+        receivedAt: 1_700_000_000_001,
+        stateStartedAt: 1_700_000_000_001
+      })
+
+      vi.advanceTimersByTime(40)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses.mock.calls[0][0][0].payload.prompt).toBe('queued')
+
+      vi.advanceTimersByTime(40)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(2)
+      expect(setAgentStatuses.mock.calls[1][0][0].payload.prompt).toBe('reentered')
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+
+  it('projects synthetic pane titles across ordered same-pane batch updates', async () => {
+    vi.useFakeTimers()
+    let storeState: StoreLike
+    const applyStatusUpdate = (update: AgentStatusUpdate): void => {
+      storeState.agentStatusByPaneKey = {
+        ...(storeState.agentStatusByPaneKey as Record<string, unknown>),
+        [update.paneKey]: {
+          ...update.payload,
+          updatedAt: update.timing?.updatedAt,
+          providerSession: update.metadata?.providerSession
+        }
+      }
+    }
+    const setAgentStatus = vi.fn(
+      (
+        paneKey: string,
+        payload: AgentStatusUpdate['payload'],
+        terminalTitle?: string,
+        timing?: AgentStatusUpdate['timing'],
+        routing?: AgentStatusUpdate['routing'],
+        metadata?: AgentStatusUpdate['metadata']
+      ) => applyStatusUpdate({ paneKey, payload, terminalTitle, timing, routing, metadata })
+    )
+    const setAgentStatuses = vi.fn((updates: readonly AgentStatusUpdate[]) => {
+      return updates.map((update) => {
+        const existing = (
+          storeState.agentStatusByPaneKey as Record<string, { updatedAt?: number } | undefined>
+        )[update.paneKey]
+        if (
+          existing?.updatedAt !== undefined &&
+          update.timing?.updatedAt !== undefined &&
+          update.timing.updatedAt < existing.updatedAt
+        ) {
+          return false
+        }
+        applyStatusUpdate(update)
+        return true
+      })
+    })
+    const updateTabTitle = vi.fn()
+    const observeAgentHookCompletionForNotification = vi.fn()
+    const onSetListenerRef: { current: ((data: AgentStatusSetData) => void) | null } = {
+      current: null
+    }
+    storeState = buildStoreState({
+      setAgentStatus,
+      setAgentStatuses,
+      updateTabTitle,
+      workspaceSessionReady: true,
+      tabsByWorktree: {
+        'wt-1': [{ id: 'tab-future', ptyId: 'pty-1', worktreeId: 'wt-1', title: 'Codex' }]
+      },
+      terminalLayoutsByTabId: {
+        'tab-future': {
+          root: { type: 'leaf', leafId: FUTURE_LEAF_ID },
+          activeLeafId: FUTURE_LEAF_ID,
+          expandedLeafId: null
+        }
+      }
+    })
+    const updateTabTitles = vi.mocked(storeState.updateTabTitles as AppState['updateTabTitles'])
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: vi.fn(() => () => {}),
+        getState: () => storeState
+      }
+    }))
+    vi.doMock('./agent-hook-completion-notifications', () => ({
+      observeAgentHookCompletionForNotification,
+      resetAgentHookCompletionNotificationCoordinators: vi.fn(),
+      syncAgentHookCompletionNotificationsForStoreUpdate: vi.fn()
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        onSet: (callback) => {
+          onSetListenerRef.current = callback
+          return () => {}
+        }
+      })
+    )
+
+    try {
+      const { useIpcEvents } = await import('./useIpcEvents')
+      useIpcEvents()
+      const onSet = onSetListenerRef.current
+      if (!onSet) {
+        throw new Error('Expected agentStatus.onSet listener to be registered')
+      }
+      const emit = (
+        receivedAt: number,
+        state: AgentStatusSetData['state'],
+        agentType?: string
+      ): void => {
+        onSet({
+          paneKey: FUTURE_PANE_KEY,
+          state,
+          prompt: state,
+          agentType,
+          receivedAt,
+          stateStartedAt: receivedAt
+        })
+      }
+
+      emit(1_700_000_000_000, 'working', 'pi')
+      emit(1_700_000_000_001, 'waiting', 'pi')
+      emit(1_700_000_000_002, 'waiting', 'pi')
+      emit(1_700_000_000_003, 'done', 'pi')
+      emit(1_700_000_000_002, 'waiting', 'pi')
+      vi.advanceTimersByTime(40)
+
+      expect(setAgentStatus).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses.mock.calls[0][0]).toEqual([
+        expect.objectContaining({
+          payload: expect.objectContaining({ agentType: 'pi', state: 'waiting' }),
+          terminalTitle: 'Pi - action required'
+        }),
+        expect.objectContaining({
+          payload: expect.objectContaining({ agentType: 'pi', state: 'waiting' }),
+          terminalTitle: 'Pi - action required'
+        }),
+        expect.objectContaining({
+          payload: expect.objectContaining({ agentType: 'pi', state: 'done' }),
+          terminalTitle: 'Pi ready'
+        })
+      ])
+      expect(setAgentStatuses.mock.results[0].value).toEqual([true, true, true])
+      expect(updateTabTitle).toHaveBeenCalledOnce()
+      expect(updateTabTitle).toHaveBeenCalledWith('tab-future', 'Pi ready')
+      expect(updateTabTitles).toHaveBeenCalledTimes(1)
+      expect(observeAgentHookCompletionForNotification).toHaveBeenCalledTimes(4)
     } finally {
       vi.useRealTimers()
     }
@@ -6290,19 +7234,32 @@ describe('useIpcEvents agent status snapshot integration', () => {
   it('preserves queued set-clear order for working removal and done retention', async () => {
     vi.useFakeTimers()
     let storeState: StoreLike
+    const applyStatusUpdate = (
+      paneKey: string,
+      payload: { state: string },
+      timing: { updatedAt?: number } | undefined
+    ): void => {
+      storeState.agentStatusByPaneKey = {
+        ...(storeState.agentStatusByPaneKey as Record<string, unknown>),
+        [paneKey]: { ...payload, updatedAt: timing?.updatedAt }
+      }
+    }
     const setAgentStatus = vi.fn(
       (
         paneKey: string,
         payload: { state: string },
         _title: unknown,
-        timing: { updatedAt: number }
+        timing: { updatedAt?: number } | undefined
       ) => {
-        storeState.agentStatusByPaneKey = {
-          ...(storeState.agentStatusByPaneKey as Record<string, unknown>),
-          [paneKey]: { ...payload, updatedAt: timing.updatedAt }
-        }
+        applyStatusUpdate(paneKey, payload, timing)
       }
     )
+    const setAgentStatuses = vi.fn((updates: readonly AgentStatusUpdate[]) => {
+      for (const update of updates) {
+        applyStatusUpdate(update.paneKey, update.payload, update.timing)
+      }
+      return updates.map(() => true)
+    })
     const removeAgentStatus = vi.fn((paneKey: string) => {
       const next = { ...(storeState.agentStatusByPaneKey as Record<string, unknown>) }
       delete next[paneKey]
@@ -6316,6 +7273,7 @@ describe('useIpcEvents agent status snapshot integration', () => {
     }
     storeState = buildStoreState({
       setAgentStatus,
+      setAgentStatuses,
       removeAgentStatus,
       workspaceSessionReady: true,
       tabsByWorktree: {
@@ -6385,23 +7343,28 @@ describe('useIpcEvents agent status snapshot integration', () => {
       expect(storeState.agentStatusByPaneKey).toEqual({})
 
       vi.advanceTimersByTime(40)
-      expect(setAgentStatus).toHaveBeenCalledTimes(2)
+      expect(setAgentStatus).toHaveBeenCalledTimes(1)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(1)
       expect(storeState.agentStatusByPaneKey).toEqual({})
 
       emit(1_700_000_000_002, 'task')
       emit(1_700_000_000_003, 'task', 'done')
-      expect(setAgentStatus).toHaveBeenCalledTimes(3)
+      expect(setAgentStatus).toHaveBeenCalledTimes(2)
 
       onClearListenerRef.current({ paneKey: FUTURE_PANE_KEY })
 
-      expect(setAgentStatus).toHaveBeenCalledTimes(4)
-      expect(setAgentStatus.mock.calls[3][1]).toEqual(expect.objectContaining({ state: 'done' }))
+      expect(setAgentStatus).toHaveBeenCalledTimes(2)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(2)
+      expect(setAgentStatuses.mock.calls[1][0][0]).toEqual(
+        expect.objectContaining({ payload: expect.objectContaining({ state: 'done' }) })
+      )
       expect(removeAgentStatus).toHaveBeenCalledTimes(1)
       expect(storeState.agentStatusByPaneKey).toEqual({
         [FUTURE_PANE_KEY]: expect.objectContaining({ state: 'done' })
       })
       vi.advanceTimersByTime(40)
-      expect(setAgentStatus).toHaveBeenCalledTimes(4)
+      expect(setAgentStatus).toHaveBeenCalledTimes(2)
+      expect(setAgentStatuses).toHaveBeenCalledTimes(2)
     } finally {
       vi.useRealTimers()
     }
@@ -6505,6 +7468,93 @@ describe('useIpcEvents agent status snapshot integration', () => {
     expect(setAgentStatusCalls).toBe(1)
   })
 
+  // Why: the pending queue is spliced before the fold, so a throwing fold would drop every
+  // buffered event permanently. Before batching the queue was only replaced after the loop,
+  // so a throw left it intact — keep that.
+  it('keeps pending statuses queued when the retry fold throws', async () => {
+    const subscribeListenerRef: { current: StoreSubscribeListener | null } = { current: null }
+    const onSetListenerRef: { current: ((data: AgentStatusSetData) => void) | null } = {
+      current: null
+    }
+    let shouldThrow = true
+    const setAgentStatuses = vi.fn((updates: readonly AgentStatusUpdate[]) => {
+      if (shouldThrow) {
+        shouldThrow = false
+        throw new Error('fold blew up')
+      }
+      return updates.map(() => true)
+    })
+    const storeState: StoreLike = buildStoreState({
+      setAgentStatus: vi.fn(),
+      setAgentStatuses,
+      workspaceSessionReady: true,
+      settings: { terminalFontSize: 13, notifications: { enabled: false } },
+      // Pane does not exist yet -> the incoming event is buffered as pending.
+      tabsByWorktree: {},
+      terminalLayoutsByTabId: {}
+    })
+    const notify = (): void => subscribeListenerRef.current?.(storeState, storeState)
+
+    stubReactSyncEffect()
+    vi.doMock('../store', () => ({
+      useAppStore: {
+        subscribe: vi.fn((listener: StoreSubscribeListener) => {
+          subscribeListenerRef.current = listener
+          return () => {
+            subscribeListenerRef.current = null
+          }
+        }),
+        getState: () => storeState
+      }
+    }))
+    stubAuxiliaryModules()
+    vi.stubGlobal(
+      'window',
+      buildWindowApi({
+        onSet: (cb) => {
+          onSetListenerRef.current = cb
+          return () => {}
+        }
+      })
+    )
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+    await Promise.resolve()
+    if (typeof onSetListenerRef.current !== 'function') {
+      throw new Error('Expected agentStatus.onSet listener to be registered')
+    }
+
+    onSetListenerRef.current({
+      paneKey: FUTURE_PANE_KEY,
+      state: 'working',
+      prompt: 'buffered',
+      agentType: 'claude',
+      receivedAt: 1_700_000_000_100,
+      stateStartedAt: 1_700_000_000_100
+    })
+
+    // Tab hydrates, so the next store update flushes the pending event — and throws.
+    storeState.tabsByWorktree = {
+      'wt-1': [{ id: 'tab-future', ptyId: 'pty-1', worktreeId: 'wt-1', title: 'Future Tab' }]
+    }
+    storeState.terminalLayoutsByTabId = {
+      'tab-future': {
+        root: { type: 'leaf', leafId: FUTURE_LEAF_ID },
+        activeLeafId: FUTURE_LEAF_ID,
+        expandedLeafId: null
+      }
+    }
+    expect(() => notify()).toThrow('fold blew up')
+
+    // The event must still be queued, so the next flush replays it.
+    notify()
+    const replayedAfterThrow = setAgentStatuses.mock.calls
+      .slice(1)
+      .flatMap((call) => call[0].map((update) => update.payload.prompt))
+    expect(replayedAfterThrow).toContain('buffered')
+  })
+
   it('applies ready push events for an unmounted inactive terminal tab', async () => {
     const setAgentStatus = vi.fn()
     const onSetListenerRef: { current: ((data: AgentStatusSetData) => void) | null } = {
@@ -7728,6 +8778,9 @@ describe('useIpcEvents agent status snapshot integration', () => {
         }
       }
     })
+    const setAgentStatusBatch = vi.mocked(
+      storeState.setAgentStatuses as AppState['setAgentStatuses']
+    )
 
     stubReactSyncEffect()
     vi.doMock('../store', () => ({
@@ -7799,6 +8852,8 @@ describe('useIpcEvents agent status snapshot integration', () => {
     subscribeListenerRef.current(storeState, previousStoreState)
 
     expect(setAgentStatus).toHaveBeenCalledTimes(2)
+    expect(setAgentStatusBatch).toHaveBeenCalledTimes(1)
+    expect(setAgentStatusBatch.mock.calls[0]?.[0]).toHaveLength(2)
     expect(setAgentStatus).toHaveBeenNthCalledWith(
       1,
       FUTURE_PANE_KEY,
@@ -9120,6 +10175,189 @@ describe('useIpcEvents agent status snapshot integration', () => {
   })
 })
 
+describe('runtime host catalog refresh on reposChanged', () => {
+  // Why: the host emits one reposChanged for project-group and folder-workspace edits
+  // too, so a repos-only refresh leaves those catalogs stale on every paired client.
+  it('refetches the runtime host project group and folder workspace catalogs', async () => {
+    vi.resetModules()
+    vi.useFakeTimers()
+    try {
+      const calls: string[] = []
+      const fetchRuntimeEnvironmentRepos = vi.fn(() => {
+        calls.push('repos')
+        return Promise.resolve([])
+      })
+      const fetchProjectGroups = vi.fn(() => {
+        calls.push('project-groups')
+        return Promise.resolve()
+      })
+      const fetchFolderWorkspaces = vi.fn(() => {
+        calls.push('folder-workspaces')
+        return Promise.resolve()
+      })
+      const state = {
+        settings: { activeRuntimeEnvironmentId: 'env-1' as string | null },
+        repos: [],
+        worktreesByRepo: {},
+        folderWorkspaces: [],
+        projectGroups: [],
+        runtimeEnvironments: [],
+        runtimeStatusByEnvironmentId: new Map(),
+        tabsByWorktree: {},
+        ptyIdsByTabId: {},
+        remountTerminalTabForRecovery: vi.fn(),
+        markEnvironmentSshStateStale: vi.fn(),
+        fetchRepos: vi.fn(() => Promise.resolve()),
+        fetchRuntimeEnvironmentRepos,
+        fetchProjectGroups,
+        fetchFolderWorkspaces,
+        fetchWorktrees: vi.fn(() => Promise.resolve()),
+        fetchWorktreeLineage: vi.fn(() => Promise.resolve())
+      }
+
+      vi.doMock('react', async () => {
+        const actual = await vi.importActual<typeof ReactModule>('react')
+        return { ...actual, useEffect: (effect: () => void | (() => void)) => void effect() }
+      })
+      vi.doMock('../store', () => ({
+        useAppStore: { subscribe: vi.fn(() => () => {}), getState: () => state }
+      }))
+      const noopListener = (): (() => void) => () => {}
+      const autoStubNamespace = new Proxy(
+        {},
+        {
+          get:
+            () =>
+            (...args: unknown[]) => {
+              if (typeof args[0] === 'function') {
+                return noopListener()
+              }
+              return new Promise(() => {})
+            }
+        }
+      )
+      let runtimeOnResponse: ((response: unknown) => void) | undefined
+      const api = new Proxy(
+        {
+          runtimeEnvironments: {
+            subscribe: async (_args: unknown, callbacks: { onResponse: (r: unknown) => void }) => {
+              runtimeOnResponse = callbacks.onResponse
+              return { unsubscribe: vi.fn(), sendBinary: vi.fn() }
+            }
+          }
+        } as Record<string, unknown>,
+        { get: (target, prop: string) => target[prop] ?? autoStubNamespace }
+      )
+      vi.stubGlobal('window', { api })
+
+      const { useIpcEvents } = await import('./useIpcEvents')
+      useIpcEvents()
+      // Seeded discovery for the connected runtime; drains the scheduler's debounce.
+      await vi.advanceTimersByTimeAsync(300)
+
+      const runtimeOwner = { runtimeEnvironmentId: 'env-1' }
+      expect(fetchProjectGroups).toHaveBeenCalledWith(runtimeOwner)
+      expect(fetchFolderWorkspaces).toHaveBeenCalledWith(runtimeOwner)
+      // Folder workspaces resolve their owning group from projectGroups, so groups must land first.
+      expect(calls).toEqual(['repos', 'project-groups', 'folder-workspaces'])
+
+      calls.length = 0
+      fetchProjectGroups.mockClear()
+      fetchFolderWorkspaces.mockClear()
+      if (!runtimeOnResponse) {
+        throw new Error('Expected runtime client event callbacks')
+      }
+      // Past the scheduler's min interval so the event schedules on the debounce alone.
+      await vi.advanceTimersByTimeAsync(5_000)
+      runtimeOnResponse({ ok: true, result: { type: 'reposChanged' } })
+      await vi.advanceTimersByTimeAsync(300)
+
+      expect(fetchProjectGroups).toHaveBeenCalledWith(runtimeOwner)
+      expect(fetchFolderWorkspaces).toHaveBeenCalledWith(runtimeOwner)
+      expect(calls).toEqual(['repos', 'project-groups', 'folder-workspaces'])
+    } finally {
+      vi.useRealTimers()
+    }
+  })
+})
+
+describe('repo catalog refresh on repos:changed', () => {
+  it('skips remote catalog RPCs when refreshing local rows under a runtime', async () => {
+    vi.resetModules()
+    let reposChangedListener: (() => void) | undefined
+    const fetchRepos = vi.fn(() => Promise.resolve())
+    const fetchProjectGroups = vi.fn(() => Promise.resolve())
+    const fetchFolderWorkspaces = vi.fn(() => Promise.resolve())
+    const remountTerminalTabForRecovery = vi.fn(() => true)
+    const state = {
+      settings: { activeRuntimeEnvironmentId: null as string | null },
+      repos: [{ id: 'repo1', connectionId: 'conn-1' }],
+      worktreesByRepo: { repo1: [{ id: 'wt-1', repoId: 'repo1' }] },
+      folderWorkspaces: [],
+      projectGroups: [],
+      tabsByWorktree: { 'wt-1': [{ id: 'tab-1', ptyId: null }] },
+      ptyIdsByTabId: {},
+      remountTerminalTabForRecovery,
+      fetchRepos,
+      fetchProjectGroups,
+      fetchFolderWorkspaces
+    }
+
+    vi.doMock('react', async () => {
+      const actual = await vi.importActual<typeof ReactModule>('react')
+      return { ...actual, useEffect: (effect: () => void | (() => void)) => void effect() }
+    })
+    vi.doMock('../store', () => ({
+      useAppStore: { subscribe: vi.fn(() => () => {}), getState: () => state }
+    }))
+    const noopListener = (): (() => void) => () => {}
+    const autoStubNamespace = new Proxy(
+      {},
+      {
+        get:
+          () =>
+          (...args: unknown[]) => {
+            if (typeof args[0] === 'function') {
+              return noopListener()
+            }
+            return new Promise(() => {})
+          }
+      }
+    )
+    const api = new Proxy(
+      {
+        repos: {
+          onChanged: (listener: () => void) => {
+            reposChangedListener = listener
+            return () => {}
+          }
+        }
+      } as Record<string, unknown>,
+      { get: (target, prop: string) => target[prop] ?? autoStubNamespace }
+    )
+    vi.stubGlobal('window', { api })
+
+    const { recordTerminalTabParkedOnUnresolvedHost, clearTerminalTabsParkedOnUnresolvedHost } =
+      await import('@/lib/parked-terminal-host-hydration')
+    clearTerminalTabsParkedOnUnresolvedHost()
+
+    const { useIpcEvents } = await import('./useIpcEvents')
+    useIpcEvents()
+    state.settings.activeRuntimeEnvironmentId = 'env-1'
+    // Why: the local-slice refresh still has to release panes that parked on an unhydrated host.
+    recordTerminalTabParkedOnUnresolvedHost('wt-1', 'tab-1')
+    reposChangedListener?.()
+    await new Promise((resolve) => setTimeout(resolve, 0))
+
+    const localOwner = { runtimeEnvironmentId: null }
+    expect(fetchRepos).toHaveBeenCalledWith(localOwner)
+    expect(fetchProjectGroups).toHaveBeenCalledWith(localOwner)
+    expect(fetchFolderWorkspaces).toHaveBeenCalledWith(localOwner)
+    expect(remountTerminalTabForRecovery).toHaveBeenCalledWith('tab-1')
+    clearTerminalTabsParkedOnUnresolvedHost()
+  })
+})
+
 describe('parked terminal recovery on repos:changed', () => {
   it('remounts a pane that parked on an unresolved host once repos hydrate', async () => {
     vi.resetModules()
diff --git a/src/renderer/src/hooks/useIpcEvents.ts b/src/renderer/src/hooks/useIpcEvents.ts
index 984a8fd833f..85fd5757722 100644
--- a/src/renderer/src/hooks/useIpcEvents.ts
+++ b/src/renderer/src/hooks/useIpcEvents.ts
@@ -128,7 +128,6 @@ import type { AppState } from '../store/types'
 import { guardPinnedTabClose, resolvePinnedTabLabel } from '../store/pinned-tab-close-guard'
 import {
   closeWebRuntimeSessionTab,
-  createWebRuntimeSessionBrowserTab,
   createWebRuntimeSessionTerminal,
   isWebRuntimeSessionActive
 } from '@/runtime/web-runtime-session'
@@ -154,9 +153,15 @@ import { shouldSuppressCodexAutoApprovalStatus } from '@/components/terminal-pan
 import { showTerminalShortcutCaptureNotification } from '@/lib/terminal-shortcut-capture-notification'
 import { resolveAgentStatusTerminalTitle } from '@/lib/agent-status-terminal-title'
 import { titleHasAgentName } from '../../../shared/agent-detection'
+import { isDecorativeAgentTitleFrameChange } from '../../../shared/agent-decorative-title-signature'
 import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
 import { resolveTerminalWorktreeRoute } from '@/lib/terminal-worktree-route'
 import { resolveAgentPaneAuthorityKey } from '@/store/slices/agent-pane-authority'
+import type {
+  AgentStatusBatchTransaction,
+  AgentStatusBatchUpdate,
+  AgentStatusUpdate
+} from '@/store/slices/agent-status'
 import { translate } from '@/i18n/i18n'
 import { redactKagiSessionToken } from '../../../shared/browser-url'
 import { closeTerminalTab } from '@/components/terminal/terminal-tab-actions'
@@ -762,6 +767,27 @@ export function useIpcEvents(): void {
       replay: boolean
     }
     type AgentStatusApplyResult = 'applied' | 'pending' | 'dropped'
+    type ProjectedAgentTabTitles = {
+      title: string | undefined
+      identityTitle: string | undefined
+    }
+    type AgentStatusBatchContext = {
+      transaction: AgentStatusBatchTransaction
+      routingIndex: AgentStatusPaneRoutingIndex
+      projectedTitlesByTabId: Map<string, ProjectedAgentTabTitles>
+      tabTitlesByTabId: Map<string, string>
+      notificationEffects: (() => void)[]
+    }
+    type AgentStatusBatchEvent = {
+      data: AgentStatusIpcPayload
+      replay?: boolean
+      retry?: boolean
+    }
+    type AgentStatusApplyOptions = {
+      replay?: boolean
+      retry?: boolean
+      batch?: AgentStatusBatchContext
+    }
     const pendingAgentStatusEvents: PendingAgentStatusEvent[] = []
     const transientClearWatermarkByConnectionId = new Map<string, number>()
     let agentStatusEffectDisposed = false
@@ -911,6 +937,11 @@ export function useIpcEvents(): void {
         // Why: project events can reveal target CRUD, but known target states already arrive by push.
         void refreshRuntimeEnvironmentSshTargetMetadata(environmentId).catch(() => {})
         const repos = await useAppStore.getState().fetchRuntimeEnvironmentRepos(environmentId)
+        // Why: the host emits one reposChanged for group/folder-workspace edits too, so those
+        // catalogs go stale without this; groups first because folder workspaces resolve owners from them.
+        const runtimeOwner = { runtimeEnvironmentId: environmentId }
+        await useAppStore.getState().fetchProjectGroups(runtimeOwner)
+        await useAppStore.getState().fetchFolderWorkspaces(runtimeOwner)
         await refreshRuntimeProjectWorktreesAndLineage(
           environmentId,
           repos,
@@ -1070,9 +1101,10 @@ export function useIpcEvents(): void {
         if (isRuntimeEnvironmentActive()) {
           // Why: the all-host sidebar shows local repos even under a runtime; refresh the local slice, keep runtime slices.
           void (async () => {
-            await state.fetchReposForAllHosts()
-            await state.fetchProjectGroupsForAllHosts()
-            await state.fetchFolderWorkspacesForAllHosts()
+            const localOwner = { runtimeEnvironmentId: null }
+            await state.fetchRepos(localOwner)
+            await state.fetchProjectGroups(localOwner)
+            await state.fetchFolderWorkspaces(localOwner)
             remountTerminalTabsAwaitingHostHydration()
           })()
           return
@@ -2147,35 +2179,23 @@ export function useIpcEvents(): void {
       window.api.ui.onNewBrowserTab(() => {
         const store = useAppStore.getState()
         if (isFloatingWorkspacePanelFocused()) {
-          void createFloatingWorkspaceBrowserTab(store)
+          void createFloatingWorkspaceBrowserTab(store).catch((error) => {
+            toast.error(error instanceof Error ? error.message : String(error))
+          })
           return
         }
         const worktreeId = store.activeWorktreeId
-        if (worktreeId) {
-          const environmentId = getWorktreeRuntimeEnvironmentId(worktreeId)
-          if (environmentId) {
-            if (!isWebRuntimeSessionActive(environmentId)) {
-              store.createBrowserTab(worktreeId, store.browserDefaultUrl ?? 'about:blank', {
-                title: translate('auto.hooks.useIpcEvents.f6300deb8b', 'New Browser Tab'),
-                focusAddressBar: true
-              })
-              return
-            }
-            void (async () => {
-              // Why: paired web tabs are host-owned; on RPC failure leave local state so the next host snapshot stays authoritative.
-              await createWebRuntimeSessionBrowserTab({
-                worktreeId,
-                environmentId,
-                url: store.browserDefaultUrl ?? 'about:blank'
-              })
-            })()
-            return
-          }
-          store.createBrowserTab(worktreeId, store.browserDefaultUrl ?? 'about:blank', {
-            title: translate('auto.hooks.useIpcEvents.f6300deb8b', 'New Browser Tab'),
-            focusAddressBar: true
-          })
+        if (!worktreeId) {
+          return
         }
+        const targetGroupId =
+          store.activeGroupIdByWorktree[worktreeId] ?? store.groupsByWorktree[worktreeId]?.[0]?.id
+        if (!targetGroupId) {
+          return
+        }
+        void store.openNewBrowserTabInActiveWorkspace(targetGroupId).catch((error) => {
+          toast.error(error instanceof Error ? error.message : String(error))
+        })
       })
     )
 
@@ -2217,7 +2237,9 @@ export function useIpcEvents(): void {
       if (!worktreeId) {
         return
       }
-      void openMobileEmulatorTab(worktreeId, { placement: 'rightSplit' })
+      void openMobileEmulatorTab(worktreeId, { placement: 'rightSplit' }).catch((error) => {
+        toast.error(error instanceof Error ? error.message : String(error))
+      })
     })
     if (unsubscribeNewSimulatorTab) {
       unsubs.push(unsubscribeNewSimulatorTab)
@@ -3072,18 +3094,25 @@ export function useIpcEvents(): void {
       isFlushingAgentStatuses = true
       try {
         const now = Date.now()
-        const remaining: PendingAgentStatusEvent[] = []
-        for (const event of pendingAgentStatusEvents) {
-          if (now - event.firstSeenAt > PENDING_AGENT_STATUS_TTL_MS) {
-            continue
-          }
-          const result = applyAgentStatus(event.data, { retry: true, replay: event.replay })
-          if (result === 'pending') {
-            remaining.push(event)
+        const candidates = pendingAgentStatusEvents
+          .splice(0)
+          .filter((event) => now - event.firstSeenAt <= PENDING_AGENT_STATUS_TTL_MS)
+        let results: AgentStatusApplyResult[]
+        try {
+          results = applyAgentStatusBatch(
+            candidates.map((event) => ({ data: event.data, replay: event.replay, retry: true }))
+          )
+        } catch (err) {
+          // Why: the queue was already spliced, so a throwing fold would drop the whole
+          // burst and strand every pane in it. Requeue ahead of newer arrivals and retry.
+          pendingAgentStatusEvents.unshift(...candidates)
+          throw err
+        }
+        for (let index = 0; index < candidates.length; index += 1) {
+          if (results[index] === 'pending') {
+            pendingAgentStatusEvents.push(candidates[index])
           }
         }
-        pendingAgentStatusEvents.length = 0
-        pendingAgentStatusEvents.push(...remaining)
         if (pendingAgentStatusEvents.length === 0 && pendingAgentStatusRetryTimer !== null) {
           globalThis.clearTimeout(pendingAgentStatusRetryTimer)
           pendingAgentStatusRetryTimer = null
@@ -3096,9 +3125,9 @@ export function useIpcEvents(): void {
 
     const applyAgentStatus = (
       data: AgentStatusIpcPayload,
-      options?: { replay?: boolean; retry?: boolean }
+      options?: AgentStatusApplyOptions
     ): AgentStatusApplyResult => {
-      const store = useAppStore.getState()
+      const store = options?.batch?.transaction.getState() ?? useAppStore.getState()
       if (!store.workspaceSessionReady) {
         return 'dropped'
       }
@@ -3131,12 +3160,25 @@ export function useIpcEvents(): void {
         identityTitle,
         repoConnectionId,
         repoConnectionResolved,
-        owningWorktreeId
-      } = resolvePaneKey(store, paneKey)
+        owningWorktreeId,
+        titleUsesTabTitle
+      } = options?.batch
+        ? resolvePaneKeyFromRoutingIndex(options.batch.routingIndex, paneKey)
+        : resolvePaneKey(store, paneKey)
+      const projectedTitles =
+        titleUsesTabTitle && ownerTabId
+          ? options?.batch?.projectedTitlesByTabId.get(ownerTabId)
+          : undefined
+      if (projectedTitles) {
+        title = projectedTitles.title
+        identityTitle = projectedTitles.identityTitle
+      }
       if (!exists && data.worktreeId && hasRuntimeBackedWorktreeAttribution(data)) {
         // Why: orchestration worker hooks may carry worktree attribution before this renderer has a tab for the pane.
         // Require runtime identity too — worktreeId-only snapshots can be stale rows from closed/remounted panes.
-        const fallbackOwnership = resolveWorktreeConnection(store, data.worktreeId)
+        const fallbackOwnership = options?.batch
+          ? resolveWorktreeConnectionFromRoutingIndex(options.batch.routingIndex, data.worktreeId)
+          : resolveWorktreeConnection(store, data.worktreeId)
         if (fallbackOwnership.worktreeExists) {
           owningWorktreeId = data.worktreeId
           repoConnectionId = fallbackOwnership.repoConnectionId
@@ -3174,7 +3216,7 @@ export function useIpcEvents(): void {
           }
         }
       }
-      // Why: drop in-flight events stamped with a dead connection's id after SSH disconnect/reconnect — see docs/design/agent-status-over-ssh.md §5.
+      // Why: drop in-flight events stamped with a dead connection's id after SSH disconnect/reconnect.
       // Why: startup snapshot replay can beat SSH repo hydration; accept when worktreeId matches the tab until repo ownership resolves.
       // Why: WSL relay stamps a `wsl:<distro>` connectionId but the pane is a local repo (ownership null); normalize so the strict check below doesn't drop it.
       const ownershipConnectionId = isWslHookRelayConnectionId(data.connectionId)
@@ -3210,18 +3252,30 @@ export function useIpcEvents(): void {
         if (!data.providerSession || data.agentType !== 'pi') {
           return 'dropped'
         }
-        store.recordAgentProviderSession(
+        const providerSessionUpdate: AgentStatusBatchUpdate = {
+          kind: 'providerSession',
           paneKey,
-          'pi',
-          data.providerSession,
-          { updatedAt: data.receivedAt },
-          {
+          agent: 'pi',
+          providerSession: data.providerSession,
+          timing: { updatedAt: data.receivedAt },
+          routing: {
             tabId: ownerTabId,
             worktreeId: data.worktreeId ?? owningWorktreeId,
             // Why: persist the WSL-normalized ownership id, not raw relay provenance; a `wsl:*` connectionId would misroute later resumes.
             ...(ownershipConnectionId !== undefined ? { connectionId: ownershipConnectionId } : {})
           },
-          data.launchToken ? { launchToken: data.launchToken } : undefined
+          metadata: data.launchToken ? { launchToken: data.launchToken } : undefined
+        }
+        if (options?.batch) {
+          return options.batch.transaction.apply(providerSessionUpdate) ? 'applied' : 'dropped'
+        }
+        store.recordAgentProviderSession(
+          providerSessionUpdate.paneKey,
+          providerSessionUpdate.agent,
+          providerSessionUpdate.providerSession,
+          providerSessionUpdate.timing,
+          providerSessionUpdate.routing,
+          providerSessionUpdate.metadata
         )
         return 'applied'
       }
@@ -3274,39 +3328,75 @@ export function useIpcEvents(): void {
       }
       const terminalTitle = resolveAgentStatusTerminalTitle(statusPayload, title)
       const statusWorktreeId = data.worktreeId ?? owningWorktreeId
-      store.setAgentStatus(
+      const update: AgentStatusUpdate = {
         paneKey,
-        statusPayloadWithProvenance,
+        payload: statusPayloadWithProvenance,
         terminalTitle,
-        {
+        timing: {
           updatedAt: data.receivedAt,
           stateStartedAt: data.stateStartedAt
         },
-        {
+        routing: {
           tabId: ownerTabId,
           worktreeId: statusWorktreeId,
           terminalHandle: data.terminalHandle,
           ...(ownershipConnectionId !== undefined ? { connectionId: ownershipConnectionId } : {})
         },
-        data.providerSession || data.launchToken
-          ? {
-              ...(data.providerSession ? { providerSession: data.providerSession } : {}),
-              ...(data.launchToken ? { launchToken: data.launchToken } : {})
+        metadata:
+          data.providerSession || data.launchToken
+            ? {
+                ...(data.providerSession ? { providerSession: data.providerSession } : {}),
+                ...(data.launchToken ? { launchToken: data.launchToken } : {})
+              }
+            : undefined
+      }
+      const applyPostCommitNotification = (): void => {
+        if (options?.replay !== true && statusWorktreeId) {
+          // Why: local Codex/Claude hooks arrive via this main-process IPC path, not the PTY OSC fallback, so task-complete notifications must observe accepted hook state here too.
+          const notificationPayload =
+            typeof data.stateStartedAt === 'number'
+              ? { ...resolvedPayload, stateStartedAt: data.stateStartedAt }
+              : resolvedPayload
+          observeAgentHookCompletionForNotification({
+            paneKey,
+            worktreeId: statusWorktreeId,
+            payload: notificationPayload
+          })
+        }
+      }
+      if (options?.batch) {
+        if (!options.batch.transaction.apply(update)) {
+          return 'dropped'
+        }
+        options.batch.notificationEffects.push(applyPostCommitNotification)
+        if (
+          terminalTitle &&
+          shouldApplyResolvedAgentTerminalTitleToTab(store, paneKey, title, terminalTitle)
+        ) {
+          const tabId = parsePaneKey(paneKey)?.tabId
+          if (tabId) {
+            options.batch.tabTitlesByTabId.set(tabId, terminalTitle)
+            if (titleUsesTabTitle) {
+              const titleChanges =
+                !title || !isDecorativeAgentTitleFrameChange(title, terminalTitle)
+              options.batch.projectedTitlesByTabId.set(tabId, {
+                title: titleChanges ? terminalTitle : title,
+                identityTitle: titleChanges ? terminalTitle : identityTitle
+              })
             }
-          : undefined
-      )
-      applyResolvedAgentTerminalTitleToTab(store, paneKey, title, terminalTitle)
-      if (options?.replay !== true && statusWorktreeId) {
-        // Why: local Codex/Claude hooks arrive via this main-process IPC path, not the PTY OSC fallback, so task-complete notifications must observe accepted hook state here too.
-        const notificationPayload =
-          typeof data.stateStartedAt === 'number'
-            ? { ...resolvedPayload, stateStartedAt: data.stateStartedAt }
-            : resolvedPayload
-        observeAgentHookCompletionForNotification({
-          paneKey,
-          worktreeId: statusWorktreeId,
-          payload: notificationPayload
-        })
+          }
+        }
+      } else {
+        store.setAgentStatus(
+          update.paneKey,
+          update.payload,
+          update.terminalTitle,
+          update.timing,
+          update.routing,
+          update.metadata
+        )
+        applyResolvedAgentTerminalTitleToTab(useAppStore.getState(), paneKey, title, terminalTitle)
+        applyPostCommitNotification()
       }
       return 'applied'
     }
@@ -3337,9 +3427,7 @@ export function useIpcEvents(): void {
           if (!current.workspaceSessionReady) {
             return
           }
-          for (const entry of entries) {
-            applyAgentStatus(entry, { replay: true })
-          }
+          applyAgentStatusBatch(entries.map((data) => ({ data, replay: true })))
           const getMigrationUnsupportedSnapshot =
             window.api.agentStatus.getMigrationUnsupportedSnapshot
           if (typeof getMigrationUnsupportedSnapshot !== 'function') {
@@ -3353,8 +3441,12 @@ export function useIpcEvents(): void {
             if (!unsupportedStore.workspaceSessionReady) {
               return
             }
+            const unsupportedRoutingIndex = createAgentStatusPaneRoutingIndex(unsupportedStore)
             for (const entry of unsupportedEntries) {
-              if (entry.paneKey && resolvePaneKey(unsupportedStore, entry.paneKey).exists) {
+              if (
+                entry.paneKey &&
+                resolvePaneKeyFromRoutingIndex(unsupportedRoutingIndex, entry.paneKey).exists
+              ) {
                 unsupportedStore.setMigrationUnsupportedPty(entry)
               }
             }
@@ -3366,19 +3458,51 @@ export function useIpcEvents(): void {
         })
     }
 
+    function applyAgentStatusBatch(
+      events: readonly AgentStatusBatchEvent[]
+    ): AgentStatusApplyResult[] {
+      if (events.length === 0) {
+        return []
+      }
+      return useAppStore.getState().transactAgentStatuses((transaction) => {
+        const batch: AgentStatusBatchContext = {
+          transaction,
+          routingIndex: createAgentStatusPaneRoutingIndex(transaction.getState()),
+          projectedTitlesByTabId: new Map(),
+          tabTitlesByTabId: new Map(),
+          notificationEffects: []
+        }
+        const results = events.map(({ data, replay, retry }) =>
+          applyAgentStatus(data, { batch, replay, retry })
+        )
+        if (batch.tabTitlesByTabId.size > 0) {
+          transaction.afterCommit(() => {
+            useAppStore
+              .getState()
+              .updateTabTitles(
+                [...batch.tabTitlesByTabId].map(([tabId, title]) => ({ tabId, title }))
+              )
+          })
+        }
+        for (const effect of batch.notificationEffects) {
+          transaction.afterCommit(effect)
+        }
+        return results
+      })
+    }
+
+    function applyLiveAgentStatusBatch(batch: readonly AgentStatusIpcPayload[]): boolean {
+      return applyAgentStatusBatch(batch.map((data) => ({ data }))).some(
+        (result) => result === 'applied'
+      )
+    }
+
     function flushLiveAgentStatusBurst(): void {
       liveAgentStatusBurstTimer = null
       lastLiveAgentStatusApplyAt = Date.now()
-      // Why: splice before applying — applyAgentStatus can synchronously
-      // re-enter the queue via subscribers, and it must not see this batch.
+      // Why: splice before publishing — synchronous Zustand subscribers can enqueue the next burst.
       const batch = liveAgentStatusBurstQueue.splice(0)
-      let anyApplied = false
-      for (const data of batch) {
-        if (applyAgentStatus(data) === 'applied') {
-          anyApplied = true
-        }
-      }
-      if (!anyApplied) {
+      if (!applyLiveAgentStatusBatch(batch)) {
         lastLiveAgentStatusApplyAt = 0
       }
     }
@@ -3395,9 +3519,7 @@ export function useIpcEvents(): void {
       }
       liveAgentStatusBurstQueue.length = 0
       liveAgentStatusBurstQueue.push(...remaining)
-      for (const queued of queuedForPane) {
-        applyAgentStatus(queued)
-      }
+      applyLiveAgentStatusBatch(queuedForPane)
     }
 
     function enqueueLiveAgentStatus(data: AgentStatusIpcPayload): void {
@@ -3716,25 +3838,194 @@ function applyResolvedAgentTerminalTitleToTab(
   previousTitle: string | undefined,
   nextTitle: string | undefined
 ): void {
-  if (!nextTitle || nextTitle === previousTitle) {
+  if (
+    !nextTitle ||
+    !shouldApplyResolvedAgentTerminalTitleToTab(store, paneKey, previousTitle, nextTitle)
+  ) {
     return
   }
   const parsed = parsePaneKey(paneKey)
   if (!parsed) {
     return
   }
-  const layout = store.terminalLayoutsByTabId?.[parsed.tabId]
-  if (layout?.root && layout.activeLeafId && layout.activeLeafId !== parsed.leafId) {
-    return
-  }
   // Why: hook completion can arrive while the pane transport is unmounted; keep the tab label synced to the resolved state title.
   store.updateTabTitle(parsed.tabId, nextTitle)
 }
 
+function shouldApplyResolvedAgentTerminalTitleToTab(
+  store: ReturnType<typeof useAppStore.getState>,
+  paneKey: string,
+  previousTitle: string | undefined,
+  nextTitle: string | undefined
+): boolean {
+  if (!nextTitle || nextTitle === previousTitle) {
+    return false
+  }
+  const parsed = parsePaneKey(paneKey)
+  if (!parsed) {
+    return false
+  }
+  const layout = store.terminalLayoutsByTabId?.[parsed.tabId]
+  if (layout?.root && layout.activeLeafId && layout.activeLeafId !== parsed.leafId) {
+    return false
+  }
+  return true
+}
+
+type AgentStatusPaneResolution = {
+  exists: boolean
+  title: string | undefined
+  identityTitle: string | undefined
+  repoConnectionId: string | null
+  repoConnectionResolved: boolean
+  owningWorktreeId: string | undefined
+  titleUsesTabTitle: boolean
+}
+
+type AgentStatusWorktreeConnectionResolution = {
+  worktreeExists: boolean
+  repoConnectionId: string | null
+  repoConnectionResolved: boolean
+}
+
+type IndexedAgentStatusTab = {
+  title: string | undefined
+  unifiedLabel: string | undefined
+  owningWorktreeId: string
+}
+
+type AgentStatusPaneRoutingIndex = {
+  tabsById: Map<string, IndexedAgentStatusTab>
+  layoutsByTabId: AppState['terminalLayoutsByTabId']
+  leafIdsByRoot: WeakMap<TerminalPaneLayoutNode, Set<string>>
+  worktreesById: ReturnType<typeof getWorktreeMapFromState>
+  reposById: ReturnType<typeof getRepoMapFromState>
+}
+
+function createUnifiedTerminalLabelIndex(
+  entries: AppState['unifiedTabsByWorktree'][string] | undefined
+): Map<string, string | undefined> {
+  const labelsByTabId = new Map<string, string | undefined>()
+  for (const entry of entries ?? []) {
+    if (entry.contentType !== 'terminal' || labelsByTabId.has(entry.entityId)) {
+      continue
+    }
+    const rawLabel = entry.label?.trim()
+    labelsByTabId.set(entry.entityId, rawLabel && rawLabel.length > 0 ? rawLabel : undefined)
+  }
+  return labelsByTabId
+}
+
+function createAgentStatusPaneRoutingIndex(
+  store: ReturnType<typeof useAppStore.getState>
+): AgentStatusPaneRoutingIndex {
+  const tabsById = new Map<string, IndexedAgentStatusTab>()
+  for (const [worktreeId, tabs] of Object.entries(store.tabsByWorktree)) {
+    const unifiedLabelsByTabId = createUnifiedTerminalLabelIndex(
+      store.unifiedTabsByWorktree?.[worktreeId]
+    )
+    for (const tab of tabs) {
+      const tabId = tab.id
+      if (!tabsById.has(tabId)) {
+        tabsById.set(tabId, {
+          title: tab.title,
+          unifiedLabel: unifiedLabelsByTabId.get(tabId),
+          owningWorktreeId: worktreeId
+        })
+      }
+    }
+  }
+  return {
+    tabsById,
+    layoutsByTabId: store.terminalLayoutsByTabId,
+    leafIdsByRoot: new WeakMap(),
+    worktreesById: getWorktreeMapFromState(store),
+    reposById: getRepoMapFromState(store)
+  }
+}
+
+function resolveWorktreeConnectionFromRoutingIndex(
+  index: AgentStatusPaneRoutingIndex,
+  worktreeId: string
+): AgentStatusWorktreeConnectionResolution {
+  const worktree = index.worktreesById.get(worktreeId)
+  if (!worktree) {
+    return { worktreeExists: false, repoConnectionId: null, repoConnectionResolved: false }
+  }
+  const repo = index.reposById.get(worktree.repoId)
+  return {
+    worktreeExists: true,
+    repoConnectionId: repo?.connectionId ?? null,
+    repoConnectionResolved: repo !== undefined
+  }
+}
+
+function resolvePaneKeyFromRoutingIndex(
+  index: AgentStatusPaneRoutingIndex,
+  paneKey: string
+): AgentStatusPaneResolution {
+  const parsed = parsePaneKey(paneKey)
+  if (!parsed) {
+    return {
+      exists: false,
+      title: undefined,
+      identityTitle: undefined,
+      repoConnectionId: null,
+      repoConnectionResolved: false,
+      owningWorktreeId: undefined,
+      titleUsesTabTitle: false
+    }
+  }
+  const { tabId, leafId } = parsed
+  const tab = index.tabsById.get(tabId)
+  if (!tab) {
+    return {
+      exists: false,
+      title: undefined,
+      identityTitle: undefined,
+      repoConnectionId: null,
+      repoConnectionResolved: false,
+      owningWorktreeId: undefined,
+      titleUsesTabTitle: false
+    }
+  }
+  const connection = resolveWorktreeConnectionFromRoutingIndex(index, tab.owningWorktreeId)
+  const layout = index.layoutsByTabId?.[tabId]
+  if (layout?.root) {
+    let leafIds = index.leafIdsByRoot.get(layout.root)
+    if (!leafIds) {
+      leafIds = new Set(collectLeafIdsInOrder(layout.root))
+      index.leafIdsByRoot.set(layout.root, leafIds)
+    }
+    if (!leafIds.has(leafId)) {
+      return {
+        exists: false,
+        title: undefined,
+        identityTitle: undefined,
+        repoConnectionId: connection.repoConnectionId,
+        repoConnectionResolved: connection.repoConnectionResolved,
+        owningWorktreeId: tab.owningWorktreeId,
+        titleUsesTabTitle: false
+      }
+    }
+  }
+  const rawPaneTitle = layout?.titlesByLeafId?.[leafId]
+  const paneTitle = rawPaneTitle && rawPaneTitle.length > 0 ? rawPaneTitle : undefined
+  return {
+    exists: true,
+    title: paneTitle ?? tab.title,
+    identityTitle: paneTitle ?? tab.unifiedLabel ?? tab.title,
+    repoConnectionId: connection.repoConnectionId,
+    repoConnectionResolved: connection.repoConnectionResolved,
+    owningWorktreeId: tab.owningWorktreeId,
+    titleUsesTabTitle: paneTitle === undefined
+  }
+}
+
 /** Resolve a paneKey (tabId:leafId) to liveness, current title, owning worktree,
  *  and the owning repo's connectionId. Used for agent-type inference and to drop
- *  status updates for torn-down tabs or dead connections
- *  (see docs/design/agent-status-over-ssh.md §5). */
+ *  status updates for torn-down tabs or dead connections (an SSH reconnect retires the
+ *  old connectionId, so events still in flight under it must not land). */
 function resolvePaneKey(
   store: ReturnType<typeof useAppStore.getState>,
   paneKey: string
@@ -3745,6 +4036,7 @@ function resolvePaneKey(
   repoConnectionId: string | null
   repoConnectionResolved: boolean
   owningWorktreeId: string | undefined
+  titleUsesTabTitle: boolean
 } {
   const parsed = parsePaneKey(paneKey)
   if (!parsed) {
@@ -3754,7 +4046,8 @@ function resolvePaneKey(
       identityTitle: undefined,
       repoConnectionId: null,
       repoConnectionResolved: false,
-      owningWorktreeId: undefined
+      owningWorktreeId: undefined,
+      titleUsesTabTitle: false
     }
   }
   const { tabId, leafId } = parsed
@@ -3800,7 +4093,8 @@ function resolvePaneKey(
       identityTitle: undefined,
       repoConnectionId,
       repoConnectionResolved,
-      owningWorktreeId
+      owningWorktreeId,
+      titleUsesTabTitle: false
     }
   }
   // Why: an empty layout snapshot from a worktree switch (tab/PTY still live) counts as missing metadata; a non-empty layout lacking the leaf still means closed.
@@ -3812,7 +4106,8 @@ function resolvePaneKey(
       identityTitle: undefined,
       repoConnectionId,
       repoConnectionResolved,
-      owningWorktreeId
+      owningWorktreeId,
+      titleUsesTabTitle: false
     }
   }
   // Why: inactive worktrees can have a durable tab and live PTY while the layout is unmounted; hook state must still land there.
@@ -3826,7 +4121,8 @@ function resolvePaneKey(
     identityTitle: paneTitle ?? unifiedTabLabel ?? tabTitle,
     repoConnectionId,
     repoConnectionResolved,
-    owningWorktreeId
+    owningWorktreeId,
+    titleUsesTabTitle: paneTitle === undefined
   }
 }
 
diff --git a/src/renderer/src/hooks/useSettingsNavigationMetadata.test.ts b/src/renderer/src/hooks/useSettingsNavigationMetadata.test.ts
index 498568d1515..6008db31856 100644
--- a/src/renderer/src/hooks/useSettingsNavigationMetadata.test.ts
+++ b/src/renderer/src/hooks/useSettingsNavigationMetadata.test.ts
@@ -128,7 +128,13 @@ describe('settings navigation metadata', () => {
   })
 
   it('keeps desktop-only Settings panes out of web metadata', () => {
-    const webIds = ids({ isWebClient: true })
+    const webSections = buildSettingsNavigationMetadata({
+      isMac: false,
+      isWindows: false,
+      isWebClient: true,
+      repos: [repo]
+    })
+    const webIds = webSections.map((section) => section.id)
 
     expect(webIds).not.toContain('browser')
     expect(webIds).not.toContain('ssh')
@@ -138,6 +144,33 @@ describe('settings navigation metadata', () => {
     expect(webIds).not.toContain('advanced')
     expect(webIds).toContain('servers')
     expect(webIds).toContain('repo-repo-1')
+    const floatingWorkspace = webSections.find((section) => section.id === 'floating-workspace')
+    expect(floatingWorkspace?.description).toBe('Global terminal and markdown tabs.')
+    expect(floatingWorkspace?.searchEntries.flatMap((entry) => entry.keywords)).not.toContain(
+      'browser'
+    )
+    const shortcuts = webSections.find((section) => section.id === 'shortcuts')
+    expect(shortcuts?.searchEntries.map((entry) => entry.title)).not.toContain('New browser tab')
+    expect(shortcuts?.searchEntries.map((entry) => entry.title)).not.toContain(
+      'New mobile emulator tab'
+    )
+  })
+
+  it('keeps the Browser shortcut searchable for a capable web runtime', () => {
+    const sections = buildSettingsNavigationMetadata({
+      isMac: false,
+      isWindows: false,
+      isWebClient: true,
+      managedBrowserCreationEnabled: true,
+      mobileEmulatorCreationEnabled: false,
+      repos: [repo]
+    })
+    const shortcutTitles = sections
+      .find((section) => section.id === 'shortcuts')
+      ?.searchEntries.map((entry) => entry.title)
+
+    expect(shortcutTitles).toContain('New browser tab')
+    expect(shortcutTitles).not.toContain('New mobile emulator tab')
   })
 
   it('does not mark installable AI capabilities as beta in the sidebar metadata', () => {
diff --git a/src/renderer/src/hooks/useSettingsNavigationMetadata.ts b/src/renderer/src/hooks/useSettingsNavigationMetadata.ts
index 364d525298b..c0c85b115ed 100644
--- a/src/renderer/src/hooks/useSettingsNavigationMetadata.ts
+++ b/src/renderer/src/hooks/useSettingsNavigationMetadata.ts
@@ -1,6 +1,7 @@
 /* oxlint-disable max-lines */
 import { useMemo } from 'react'
 import { useTranslation } from 'react-i18next'
+import { useShallow } from 'zustand/react/shallow'
 // Why: this registry mirrors the Settings sidebar in one neutral module so
 // Cmd+J and Settings visibility cannot drift. Keep it free of Settings pane UI
 // imports; the boundary is enforced by a focused architecture test.
@@ -90,6 +91,7 @@ import { useWindowsTerminalCapabilityOwnerKey } from './useWindowsTerminalCapabi
 import { getActiveRuntimeTarget } from '@/runtime/runtime-rpc-client'
 import { useLinearProviderConnected } from '@/hooks/useLinearProviderConnected'
 import { translate } from '@/i18n/i18n'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
 
 export { isWebClientLocation } from '@/lib/web-client-location'
 
@@ -124,6 +126,8 @@ export function buildSettingsNavigationMetadata({
   isLocalWindowsHost = isWindows,
   isWindowsTerminalHost = isWindows,
   isWebClient,
+  managedBrowserCreationEnabled = !isWebClient,
+  mobileEmulatorCreationEnabled = !isWebClient,
   isDev = import.meta.env.DEV,
   isLinearConnected = false,
   repos
@@ -133,6 +137,8 @@ export function buildSettingsNavigationMetadata({
   isLocalWindowsHost?: boolean
   isWindowsTerminalHost?: boolean
   isWebClient: boolean
+  managedBrowserCreationEnabled?: boolean
+  mobileEmulatorCreationEnabled?: boolean
   isDev?: boolean
   isLinearConnected?: boolean
   repos: readonly Repo[]
@@ -356,7 +362,7 @@ export function buildSettingsNavigationMetadata({
       ),
       description: translate(
         'auto.hooks.useSettingsNavigationMetadata.ab4b21b58e',
-        'Branch naming, base refs, attribution, and Git AI Author.'
+        'Branch naming, base refs, and Git AI Author.'
       ),
       icon: GitBranch,
       // Why: Git AI Author is rendered inside Git, so shared
@@ -437,12 +443,19 @@ export function buildSettingsNavigationMetadata({
     {
       id: 'floating-workspace',
       title: translate('auto.hooks.useSettingsNavigationMetadata.65b19f5bde', 'Floating Workspace'),
-      description: translate(
-        'auto.hooks.useSettingsNavigationMetadata.2d0659f6f0',
-        'Global terminal, browser, and markdown tabs.'
-      ),
+      description: showDesktopOnlySettings
+        ? translate(
+            'auto.hooks.useSettingsNavigationMetadata.2d0659f6f0',
+            'Global terminal, browser, and markdown tabs.'
+          )
+        : translate(
+            'auto.hooks.useSettingsNavigationMetadata.floatingWorkspaceWebDescription',
+            'Global terminal and markdown tabs.'
+          ),
       icon: PanelsTopLeft,
-      searchEntries: getFloatingWorkspaceSearchEntries(),
+      searchEntries: getFloatingWorkspaceSearchEntries({
+        includeBrowser: showDesktopOnlySettings
+      }),
       group: 'workflows'
     },
     {
@@ -497,7 +510,10 @@ export function buildSettingsNavigationMetadata({
         'Keyboard shortcuts for common actions.'
       ),
       icon: Keyboard,
-      searchEntries: getShortcutsPaneSearchEntries(),
+      searchEntries: getShortcutsPaneSearchEntries({
+        includeManagedBrowser: managedBrowserCreationEnabled,
+        includeMobileEmulator: mobileEmulatorCreationEnabled
+      }),
       group: 'interface'
     },
     {
@@ -669,6 +685,15 @@ export function useSettingsNavigationMetadata(): SettingsNavSection[] {
   const activeLocale = i18n.language
   const repos = useAppStore((state) => state.repos)
   const settings = useAppStore((state) => state.settings)
+  const [managedBrowserCreationEnabled, mobileEmulatorCreationEnabled] = useAppStore(
+    useShallow((state) => {
+      const policy = getClientCreationActionPolicy(state, state.activeWorktreeId)
+      return [
+        policy['managed-browser'].state === 'enabled',
+        policy['mobile-emulator'].state === 'enabled'
+      ] as const
+    })
+  )
   const isMac = isMacUserAgent()
   const isWindows = isWindowsUserAgent()
   const isWebClient = isWebClientLocation()
@@ -711,6 +736,8 @@ export function useSettingsNavigationMetadata(): SettingsNavSection[] {
         isLocalWindowsHost,
         isWindowsTerminalHost,
         isWebClient,
+        managedBrowserCreationEnabled,
+        mobileEmulatorCreationEnabled,
         isDev: import.meta.env.DEV,
         isLinearConnected,
         repos
@@ -722,6 +749,8 @@ export function useSettingsNavigationMetadata(): SettingsNavSection[] {
       isLocalWindowsHost,
       isWindowsTerminalHost,
       isWebClient,
+      managedBrowserCreationEnabled,
+      mobileEmulatorCreationEnabled,
       isLinearConnected,
       repos,
       activeLocale
diff --git a/src/renderer/src/i18n/locales/en.json b/src/renderer/src/i18n/locales/en.json
index e5778570609..9f9e46f5ab5 100644
--- a/src/renderer/src/i18n/locales/en.json
+++ b/src/renderer/src/i18n/locales/en.json
@@ -115,6 +115,13 @@
       "port": "Port",
       "pr": "PR"
     },
+    "linearIssue": {
+      "createLabel": "Create worktree from Linear issue {{value0}}: {{value1}}",
+      "pendingLabel": "Create worktree from Linear issue {{value0}}",
+      "loadingLabel": "Loading Linear issue {{value0}}",
+      "createHint": "Create worktree from Linear issue",
+      "loadingHint": "Loading Linear issue…"
+    },
     "renderCapOverflow": "{{value0}} more — scroll or keep typing to narrow",
     "filter": {
       "emptyTitle": "No results match the active filter",
@@ -141,6 +148,10 @@
       "clearProjects": "Clear projects",
       "back": "Back",
       "ariaActive": "Filter: {{value0}} active."
+    },
+    "taskUrl": {
+      "loadingHint": "Loading {{value0}}…",
+      "createHint": "Create worktree from {{value0}}"
     }
   },
   "auto": {
@@ -644,6 +655,14 @@
               "64555d0014": "No base branch found"
             }
           }
+        },
+        "browser": {
+          "tab": {
+            "open": {
+              "urlFailed": "Unable to open URL.",
+              "searchFailed": "Unable to search with {{value0}}."
+            }
+          }
         }
       },
       "worktree": {
@@ -748,7 +767,8 @@
           "import": {
             "toast": {
               "restartFallbackUnavailableNone": "None of the {{value0}} cookies could be loaded, and the restart fallback was unavailable. The previous cookies for this profile were replaced. Try the import again.",
-              "restartFallbackUnavailablePartial": "Imported {{value0}} of {{value1}} cookies. The rest could not be loaded, and the restart fallback was unavailable. Try the import again."
+              "restartFallbackUnavailablePartial": "Imported {{value0}} of {{value1}} cookies. The rest could not be loaded, and the restart fallback was unavailable. Try the import again.",
+              "googleCookiesSkipped": "Google cookies were not imported. Open a browser in Orca on {{value0}} with this profile, then sign into Google."
             }
           }
         }
@@ -859,7 +879,7 @@
         "a9fb10afca": "Terminal",
         "5235c215ca": "Choose which task providers appear in the Tasks page and sidebar.",
         "85f4fd7710": "Task Sources",
-        "ab4b21b58e": "Branch naming, base refs, attribution, and Git AI Author.",
+        "ab4b21b58e": "Branch naming, base refs, and Git AI Author.",
         "09607cb0fe": "Git & Source Control",
         "33a5e1d597": "Connect GitHub, GitLab, Linear, and source-hosting services.",
         "2b043783ef": "Integrations",
@@ -901,7 +921,8 @@
         "artifactsTitle": "Artifacts",
         "artifactsDescription": "Share HTML and Markdown files with your team and manage their public links.",
         "automationsTitle": "Automations",
-        "automationsDescription": "Schedule agent work and choose whether Automations appears in the sidebar."
+        "automationsDescription": "Schedule agent work and choose whether Automations appears in the sidebar.",
+        "floatingWorkspaceWebDescription": "Global terminal and markdown tabs."
       },
       "useAppMenuPaste": {
         "pasteTooLarge": "Paste is too large."
@@ -917,6 +938,10 @@
       }
     },
     "components": {
+      "BrowserCookieImportDisclosure": {
+        "title": "Google logins aren't imported",
+        "description": "Sign in to Google directly in Orca."
+      },
       "CodexRestartChip": {
         "a4c8e1b2f7": "Codex is still signed in as {{value0}}",
         "c72a5fb234": "Restart",
@@ -3127,7 +3152,9 @@
             "2c38630a01": "Workspace no longer exists",
             "4f0d9a71c2": "Tab no longer exists",
             "d7d496a451": "Browser page no longer exists",
-            "7726ce9970": "Mobile emulator tab no longer exists"
+            "7726ce9970": "Mobile emulator tab no longer exists",
+            "chooseAction": "Choose an action.",
+            "searchProvider": "Search {{value0}}"
           },
           "TabBarQuickCommandsButton": {
             "a2c7a33831": "Command",
@@ -4884,14 +4911,28 @@
           "bff3bdd00c": "Rename workspace",
           "8df295a78d": "Failed to rename workspace."
         },
+        "WorktreeVisibilityHelpPopover": {
+          "c41f2d7e90": "Which worktrees are hidden by default?",
+          "8db4e19a26": "This setting never hides worktrees created through Orca.",
+          "54a7c2f183": "For newly added repositories, worktrees created manually or by another tool are hidden by default to avoid unexpected sidebar clutter.",
+          "b9e0d43675": "Always show includes current and future non-Orca worktrees, including agent worktrees under .claude/worktrees/* and .gsd-workspaces/*. When it is off, use Show below to add one individually."
+        },
         "WorktreeVisibilityDialog": {
           "83a5ba8dd1": "Non-Orca worktrees",
-          "f1f71b9f02": "Import",
+          "f1f71b9f02": "Always show",
           "759371df43": "Hide",
-          "25ddf19920": "{{value0}} available to import",
+          "25ddf19920": "{{value0}} currently hidden",
           "8372e4bbd9": "{{value0}} currently shown",
           "5d02a5647f": "Hidden from sidebar",
-          "3e045d4cb8": "Shown in sidebar"
+          "3e045d4cb8": "Shown in sidebar",
+          "a3f19c07d2": "Checking…",
+          "b8d24e61f5": "Could not list this repo's worktrees.",
+          "c5e70a93b1": "Try again",
+          "7d21c5e848": "Hidden worktrees ({{value0}})",
+          "9b53f7a160": "Choose which hidden worktrees to show individually.",
+          "2f80cd4b97": "Showing…",
+          "e64b81d3a9": "Show",
+          "d40d436fc2": "Could not update worktree visibility. Try again."
         },
         "add": {
           "repo": {
@@ -6327,14 +6368,6 @@
           "808f9a726e": "No prefix will be applied"
         },
         "GitPane": {
-          "d2eede4c54": "Add Orca attribution to commits, PRs, and issues.",
-          "e02ea23a32": "Orca Attribution",
-          "e71ce09c42": "orca",
-          "b9b5771bb1": "attribution",
-          "b5f534717a": "coauthored",
-          "9838c921ed": "co-author",
-          "afada55042": "issue",
-          "b4ef5428a7": "pr",
           "895d3f70b8": "gh",
           "32dca11189": "github",
           "c4f610d057": "Current GitLab CLI REST rate-limit headers when available.",
@@ -6770,6 +6803,12 @@
           "8bfdd23a88": "Help us figure out what to build next. Orca sends anonymous counts of which features you use and where things break.",
           "afec8b03be": "ci"
         },
+        "QuickCommandsList": {
+          "noSearchMatches": "No commands match this search."
+        },
+        "QuickCommandsToolbar": {
+          "searchLabel": "Search commands"
+        },
         "QuickCommandsPane": {
           "8764c6e9e4": "Remove {{value0}}",
           "7d90fd5299": "Edit {{value0}}",
@@ -7241,7 +7280,7 @@
           "3de4bbb841": "Terminal",
           "dd72ed437a": "Choose which task providers appear in the Tasks page and sidebar.",
           "11faa2f7dd": "Task Sources",
-          "cfa34f4465": "Branch naming, base refs, attribution, and Git AI Author.",
+          "cfa34f4465": "Branch naming, base refs, and Git AI Author.",
           "70100f94c7": "Git & Source Control",
           "b07041697f": "Connect GitHub, GitLab, Linear, and source-hosting services.",
           "c9ca101a3b": "Integrations",
@@ -8627,16 +8666,8 @@
         },
         "git": {
           "search": {
-            "61eab13403": "orca",
-            "1b93c1143c": "attribution",
-            "8461c908ae": "coauthored",
-            "61f9f5d1fc": "co-author",
-            "af0a144bfb": "issue",
-            "6bdea421bb": "pr",
             "16f53f7323": "gh",
             "d088806071": "github",
-            "118c23484b": "Add Orca attribution to commits, PRs, and issues.",
-            "bc7d9f69ce": "Orca Attribution",
             "40f9b815fd": "api budget",
             "b7e52124c7": "rate limit",
             "ead733645f": "glab",
@@ -10684,7 +10715,7 @@
             "653c105ecc": "More PR actions",
             "f316a8ca2b": "No unresolved comments selected.",
             "d00ebdc402": "Resolve {{value0}} Comments With AI",
-            "ed3f79c031": "Review the prompt before starting an agent. After the prompt is delivered, Orca replies to the selected comments and resolves host threads when possible.",
+            "5eb2163b6b": "Review the prompt before starting an agent. After the prompt is delivered, Orca resolves the selected host threads and replies to comments it cannot resolve.",
             "f273f2271c": "Started the agent. Marked {{value0}} resolved, replied to {{value1}}, skipped {{value2}}, failed {{value3}}.{{value4}}",
             "aa95b81a3a": "Started the agent. Marked {{value0}} resolved, replied to {{value1}}, skipped {{value2}}, failed {{value3}}.",
             "495b2f8c4b": "Started the agent, but could not resolve or reply on the selected comments.",
@@ -10699,6 +10730,7 @@
               "branch": "Sync Branch"
             },
             "7e4b2a19c0": "Could not resolve the GitHub PR to reply on.",
+            "430f1a62d4": "Could not resolve the selected thread on the host.",
             "updateReactionFailed": "Failed to update reaction."
           },
           "CreatePullRequestDialog": {
@@ -12361,7 +12393,8 @@
             "searchJira": "Search Jira issues or paste an issue URL",
             "jiraMode": "Jira",
             "jiraSelectBindFailed": "Couldn’t link this Jira issue. Pick the matching site or reconnect Jira, then try again.",
-            "emoji": "Emoji"
+            "emoji": "Emoji",
+            "loadingLinearIssue": "Loading Linear issue…"
           },
           "ProjectCombobox": {
             "empty": "No projects match your search.",
@@ -14337,9 +14370,7 @@
           "33741dd973": "Back to runs"
         },
         "AutomationSchedulePicker": {
-          "22359b186a": "AM or PM",
           "9e677335b0": "Minute",
-          "6b802ecc99": "Hour",
           "d90981f766": "Time",
           "6b914c5fbb": "Day",
           "233b8c94b6": "Cadence",
@@ -14349,6 +14380,11 @@
           "837d902bba": "Weekly",
           "ddba78647e": "Custom cron"
         },
+        "AutomationTimeField": {
+          "39ec1383f6": "AM or PM",
+          "32a5e4e35e": "Minute",
+          "aa593eb5e2": "Hour"
+        },
         "AutomationSessionField": {
           "f3c76dce51": "Reuse",
           "c90888ee94": "Fresh",
@@ -14447,7 +14483,9 @@
           "tableStatus": "Status",
           "tableActions": "Actions",
           "newAutomation": "New Automation",
-          "rowActions": "Automation actions"
+          "rowActions": "Automation actions",
+          "tableLastRun": "Last run",
+          "noListMatches": "No automations match."
         },
         "AutomationsPageSkeleton": {
           "55527b7bcf": "Loading automations"
@@ -14541,6 +14579,14 @@
               "name": "Hourly maintenance check",
               "prompt": "Check for stuck work, stale generated files, failing validation, and anything that needs human attention. Report only actionable issues."
             }
+          },
+          "list": {
+            "last": {
+              "run": {
+                "done": "Done",
+                "failed": "Failed"
+              }
+            }
           }
         },
         "external": {
@@ -14573,6 +14619,19 @@
         },
         "AutomationListLocalRows": {
           "c92c9463c6": "Automation actions"
+        },
+        "AutomationListFilterMenu": {
+          "removeFilter": "Remove {{value0}} filter",
+          "failed": "Failed",
+          "succeeded": "Succeeded",
+          "neverRan": "Never ran",
+          "filters": "Filters",
+          "all": "All",
+          "clear": "Clear filters"
+        },
+        "AutomationListSortHeader": {
+          "sortedAscending": "{{value0}}, sorted ascending",
+          "sortedDescending": "{{value0}}, sorted descending"
         }
       },
       "agent": {
@@ -15565,7 +15624,13 @@
       "clear": "Clear search",
       "results": "{{shown}} of {{total}} shown"
     },
-    "settingsLabel": "Agent Dashboard settings"
+    "settingsLabel": "Agent Dashboard settings",
+    "host": {
+      "sshNamed": "SSH host · {{host}}",
+      "ssh": "SSH host",
+      "remoteNamed": "Remote Orca host · {{host}}",
+      "remote": "Remote Orca host"
+    }
   },
   "dashboard": {
     "sidebar": {
diff --git a/src/renderer/src/i18n/locales/es.json b/src/renderer/src/i18n/locales/es.json
index c15fdb9f7ca..46b5cea1aca 100644
--- a/src/renderer/src/i18n/locales/es.json
+++ b/src/renderer/src/i18n/locales/es.json
@@ -563,6 +563,14 @@
               "64555d0014": "No se encontró ninguna rama base"
             }
           }
+        },
+        "browser": {
+          "tab": {
+            "open": {
+              "urlFailed": "No se pudo abrir la URL.",
+              "searchFailed": "No se pudo buscar con {{value0}}."
+            }
+          }
         }
       },
       "worktree": {
@@ -778,7 +786,7 @@
         "a9fb10afca": "Terminal",
         "5235c215ca": "Elige qué proveedores de tareas aparecen en la página Tareas y en la barra lateral.",
         "85f4fd7710": "Fuentes de tareas",
-        "ab4b21b58e": "Nombres de ramas, refs base, atribución y Git AI Author.",
+        "ab4b21b58e": "Nombres de rama, refs base y Git AI Author.",
         "09607cb0fe": "Git y Source Control",
         "33a5e1d597": "Conecta GitHub, GitLab, Linear y servicios de hosting de código.",
         "2b043783ef": "Integraciones",
@@ -2991,7 +2999,9 @@
             "2c38630a01": "El espacio de trabajo ya no existe",
             "4f0d9a71c2": "La pestaña ya no existe",
             "d7d496a451": "La página del navegador ya no existe",
-            "7726ce9970": "La pestaña del emulador móvil ya no existe"
+            "7726ce9970": "La pestaña del emulador móvil ya no existe",
+            "chooseAction": "Elige una acción.",
+            "searchProvider": "Buscar con {{value0}}"
           },
           "TabBarQuickCommandsButton": {
             "a2c7a33831": "Comando",
@@ -4687,14 +4697,28 @@
           "bff3bdd00c": "Cambiar nombre del espacio de trabajo",
           "8df295a78d": "No se pudo cambiar el nombre del espacio de trabajo."
         },
+        "WorktreeVisibilityHelpPopover": {
+          "c41f2d7e90": "¿Qué worktrees se ocultan de forma predeterminada?",
+          "8db4e19a26": "Este ajuste nunca oculta los worktrees creados mediante Orca.",
+          "54a7c2f183": "En los repositorios recién añadidos, los worktrees creados manualmente o con otra herramienta se ocultan de forma predeterminada para evitar elementos inesperados en la barra lateral.",
+          "b9e0d43675": "«Mostrar siempre» incluye los worktrees ajenos a Orca actuales y futuros, incluidos los worktrees de agentes en .claude/worktrees/* y .gsd-workspaces/*. Cuando está desactivado, usa «Mostrar» abajo para añadir uno individualmente."
+        },
         "WorktreeVisibilityDialog": {
           "83a5ba8dd1": "Worktrees que no son de Orca",
-          "f1f71b9f02": "Importar",
+          "f1f71b9f02": "Mostrar siempre",
           "759371df43": "Ocultar",
-          "25ddf19920": "{{value0}} disponible para importar",
+          "25ddf19920": "{{value0}} oculto actualmente",
           "8372e4bbd9": "{{value0}} mostrado actualmente",
           "5d02a5647f": "Oculto de la barra lateral",
-          "3e045d4cb8": "Mostrado en la barra lateral"
+          "3e045d4cb8": "Mostrado en la barra lateral",
+          "a3f19c07d2": "Comprobando…",
+          "b8d24e61f5": "No se pudieron listar los worktrees de este repositorio.",
+          "c5e70a93b1": "Reintentar",
+          "7d21c5e848": "Worktrees ocultos ({{value0}})",
+          "9b53f7a160": "Elige qué worktrees ocultos mostrar de forma individual.",
+          "2f80cd4b97": "Mostrando…",
+          "e64b81d3a9": "Mostrar",
+          "d40d436fc2": "No se pudo actualizar la visibilidad de los worktrees. Inténtalo de nuevo."
         },
         "add": {
           "repo": {
@@ -5969,14 +5993,6 @@
           "808f9a726e": "No se aplicará ningún prefijo"
         },
         "GitPane": {
-          "d2eede4c54": "Agrega la atribución de Orca a commits, PR e issues.",
-          "e02ea23a32": "Atribución de Orca",
-          "e71ce09c42": "orca",
-          "b9b5771bb1": "atribución",
-          "b5f534717a": "coautor",
-          "9838c921ed": "coautor",
-          "afada55042": "issue",
-          "b4ef5428a7": "pr",
           "895d3f70b8": "gh",
           "32dca11189": "github",
           "c4f610d057": "Encabezados actuales de límite de tasa REST de GitLab CLI cuando estén disponibles.",
@@ -6865,7 +6881,7 @@
           "3de4bbb841": "Terminal",
           "dd72ed437a": "Elige qué proveedores de tareas aparecen en la página Tareas y en la barra lateral.",
           "11faa2f7dd": "Fuentes de tareas",
-          "cfa34f4465": "Nombres de rama, refs base, atribución y Git AI Author.",
+          "cfa34f4465": "Nombres de rama, refs base y Git AI Author.",
           "70100f94c7": "Git y control de código fuente",
           "b07041697f": "Conecta GitHub, GitLab, Linear y servicios de alojamiento de código fuente.",
           "c9ca101a3b": "Integraciones",
@@ -8243,16 +8259,8 @@
         },
         "git": {
           "search": {
-            "61eab13403": "orca",
-            "1b93c1143c": "atribución",
-            "8461c908ae": "coautor",
-            "61f9f5d1fc": "coautor",
-            "af0a144bfb": "issue",
-            "6bdea421bb": "PR",
             "16f53f7323": "gh",
             "d088806071": "github",
-            "118c23484b": "Agrega la atribución de Orca a commits, PR e issues.",
-            "bc7d9f69ce": "Atribución de Orca",
             "40f9b815fd": "presupuesto API",
             "b7e52124c7": "límite de tasa",
             "ead733645f": "glab",
@@ -10149,7 +10157,7 @@
             "653c105ecc": "Más acciones de PR",
             "f316a8ca2b": "No hay comentarios sin resolver seleccionados.",
             "d00ebdc402": "Resolver comentarios de {{value0}} con IA",
-            "ed3f79c031": "Revisa el prompt antes de iniciar un agente. Una vez entregado el prompt, Orca responde a los comentarios seleccionados y resuelve los hilos en el host cuando es posible.",
+            "5eb2163b6b": "Revisa el prompt antes de iniciar un agente. Una vez entregado el prompt, Orca resuelve los hilos seleccionados en el host y responde a los comentarios que no puede resolver.",
             "f273f2271c": "Agente iniciado. Marcados como resueltos: {{value0}}; respondidos: {{value1}}; omitidos: {{value2}}; con error: {{value3}}.{{value4}}",
             "aa95b81a3a": "Agente iniciado. Marcados como resueltos: {{value0}}; respondidos: {{value1}}; omitidos: {{value2}}; con error: {{value3}}.",
             "495b2f8c4b": "Agente iniciado, pero no se pudieron resolver ni responder los comentarios seleccionados.",
@@ -10163,7 +10171,8 @@
               "pending": "Syncing…",
               "branch": "Sync Branch"
             },
-            "7e4b2a19c0": "No se pudo resolver el PR de GitHub para responder."
+            "7e4b2a19c0": "No se pudo resolver el PR de GitHub para responder.",
+            "430f1a62d4": "No se pudo resolver el hilo seleccionado en el host."
           },
           "CreatePullRequestDialog": {
             "2bc1b4345e": "Cancelar",
@@ -13636,9 +13645,7 @@
           "33741dd973": "Volver a carreras"
         },
         "AutomationSchedulePicker": {
-          "22359b186a": "mañana o tarde",
           "9e677335b0": "Minuto",
-          "6b802ecc99": "Hora",
           "d90981f766": "Tiempo",
           "6b914c5fbb": "Día",
           "233b8c94b6": "Cadencia",
@@ -13648,6 +13655,11 @@
           "837d902bba": "Semanal",
           "ddba78647e": "Cron personalizado"
         },
+        "AutomationTimeField": {
+          "39ec1383f6": "mañana o tarde",
+          "32a5e4e35e": "Minuto",
+          "aa593eb5e2": "Hora"
+        },
         "AutomationSessionField": {
           "f3c76dce51": "Reutilizar",
           "c90888ee94": "Fresco",
diff --git a/src/renderer/src/i18n/locales/ja.json b/src/renderer/src/i18n/locales/ja.json
index 8263153fd02..3eb40278c60 100644
--- a/src/renderer/src/i18n/locales/ja.json
+++ b/src/renderer/src/i18n/locales/ja.json
@@ -563,6 +563,14 @@
               "64555d0014": "ベースブランチが見つかりません"
             }
           }
+        },
+        "browser": {
+          "tab": {
+            "open": {
+              "urlFailed": "URLを開けませんでした。",
+              "searchFailed": "{{value0}} で検索できませんでした。"
+            }
+          }
         }
       },
       "worktree": {
@@ -778,7 +786,7 @@
         "a9fb10afca": "ターミナル",
         "5235c215ca": "「タスク」ページとサイドバーに表示するタスクプロバイダーを選択します。",
         "85f4fd7710": "タスクソース",
-        "ab4b21b58e": "ブランチの名前、基本参照、帰属、および Git AI 作成者。",
+        "ab4b21b58e": "ブランチの名前、基本参照、および Git AI 作成者。",
         "09607cb0fe": "Git とソース管理",
         "33a5e1d597": "GitHub、GitLab、Linear、およびソースホスティングサービスを接続します。",
         "2b043783ef": "連携",
@@ -2991,7 +2999,9 @@
             "2c38630a01": "ワークスペースは存在しません",
             "4f0d9a71c2": "タブは存在しません",
             "d7d496a451": "ブラウザページは存在しません",
-            "7726ce9970": "モバイルエミュレータのタブは存在しません"
+            "7726ce9970": "モバイルエミュレータのタブは存在しません",
+            "chooseAction": "アクションを選択してください。",
+            "searchProvider": "{{value0}} で検索"
           },
           "TabBarQuickCommandsButton": {
             "a2c7a33831": "コマンド",
@@ -4668,14 +4678,28 @@
           "bff3bdd00c": "ワークスペースの名前を変更する",
           "8df295a78d": "ワークスペースの名前を変更できませんでした。"
         },
+        "WorktreeVisibilityHelpPopover": {
+          "c41f2d7e90": "デフォルトで非表示になるワークツリー",
+          "8db4e19a26": "この設定では、Orca で作成されたワークツリーが非表示になることはありません。",
+          "54a7c2f183": "新しく追加したリポジトリでは、手動または別のツールで作成したワークツリーは、意図しない項目でサイドバーが埋まらないよう、デフォルトでは非表示です。",
+          "b9e0d43675": "「常に表示」では、.claude/worktrees/* および .gsd-workspaces/* にある Agent ワークツリーを含む、Orca 以外で作成された現在および今後のワークツリーが表示されます。オフの場合は、下の「表示」を使用して個別に追加できます。"
+        },
         "WorktreeVisibilityDialog": {
           "83a5ba8dd1": "Orca 以外のワークツリー",
-          "f1f71b9f02": "インポート",
+          "f1f71b9f02": "常に表示",
           "759371df43": "非表示",
-          "25ddf19920": "{{value0}} をインポートできます",
+          "25ddf19920": "{{value0}} は現在非表示",
           "8372e4bbd9": "現在表示されている{{value0}}",
           "5d02a5647f": "サイドバーから非表示",
-          "3e045d4cb8": "サイドバーに表示"
+          "3e045d4cb8": "サイドバーに表示",
+          "a3f19c07d2": "確認中…",
+          "b8d24e61f5": "このリポジトリのワークツリーを一覧できませんでした。",
+          "c5e70a93b1": "再試行",
+          "7d21c5e848": "非表示のワークツリー（{{value0}}）",
+          "9b53f7a160": "個別にサイドバーへ表示する非表示のワークツリーを選択します。",
+          "2f80cd4b97": "表示中…",
+          "e64b81d3a9": "表示",
+          "d40d436fc2": "ワークツリーの表示設定を更新できませんでした。もう一度お試しください。"
         },
         "add": {
           "repo": {
@@ -5991,14 +6015,6 @@
           "808f9a726e": "プレフィックスは適用されません"
         },
         "GitPane": {
-          "d2eede4c54": "Orca の帰属をコミット、PR、Issue に追加します。",
-          "e02ea23a32": "Orca の帰属",
-          "e71ce09c42": "orca",
-          "b9b5771bb1": "帰属",
-          "b5f534717a": "共著",
-          "9838c921ed": "共著者",
-          "afada55042": "Issue",
-          "b4ef5428a7": "PR",
           "895d3f70b8": "gh",
           "32dca11189": "GitHub",
           "c4f610d057": "現在の GitLab CLI REST レート制限ヘッダー (利用可能な場合)。",
@@ -6887,7 +6903,7 @@
           "3de4bbb841": "ターミナル",
           "dd72ed437a": "「タスク」ページとサイドバーに表示するタスクプロバイダーを選択します。",
           "11faa2f7dd": "タスクソース",
-          "cfa34f4465": "ブランチの名前、基本参照、帰属、および Git AI 作成者。",
+          "cfa34f4465": "ブランチの名前、基本参照、および Git AI 作成者。",
           "70100f94c7": "Git とソース管理",
           "b07041697f": "GitHub、GitLab、Linear、およびソースホスティングサービスを接続します。",
           "c9ca101a3b": "連携",
@@ -8265,16 +8281,8 @@
         },
         "git": {
           "search": {
-            "61eab13403": "orca",
-            "1b93c1143c": "帰属",
-            "8461c908ae": "共著",
-            "61f9f5d1fc": "共著者",
-            "af0a144bfb": "Issue",
-            "6bdea421bb": "PR",
             "16f53f7323": "gh",
             "d088806071": "GitHub",
-            "118c23484b": "Orca の帰属をコミット、PR、Issue に追加します。",
-            "bc7d9f69ce": "Orca の帰属",
             "40f9b815fd": "APIの予算",
             "b7e52124c7": "レート制限",
             "ead733645f": "glab",
@@ -10149,7 +10157,7 @@
             "653c105ecc": "その他の PR 操作",
             "f316a8ca2b": "未解決のコメントが選択されていません。",
             "d00ebdc402": "{{value0}} のコメントを AI で解決",
-            "ed3f79c031": "Agent を開始する前にプロンプトを確認してください。プロンプトの送信後、Orca は選択したコメントに返信し、可能な場合はホスト上のスレッドを解決します。",
+            "5eb2163b6b": "Agent を開始する前にプロンプトを確認してください。プロンプトの送信後、Orca は選択したホスト上のスレッドを解決し、解決できないコメントには返信します。",
             "f273f2271c": "Agent を開始しました。{{value0}} 件を解決し、{{value1}} 件に返信し、{{value2}} 件をスキップし、{{value3}} 件の処理に失敗しました。{{value4}}",
             "aa95b81a3a": "Agent を開始しました。{{value0}} 件を解決し、{{value1}} 件に返信し、{{value2}} 件をスキップし、{{value3}} 件の処理に失敗しました。",
             "495b2f8c4b": "Agent を開始しましたが、選択したコメントの解決または返信ができませんでした。",
@@ -10163,7 +10171,8 @@
               "pending": "同期中…",
               "branch": "ブランチを同期"
             },
-            "7e4b2a19c0": "返信先の GitHub PR を特定できませんでした。"
+            "7e4b2a19c0": "返信先の GitHub PR を特定できませんでした。",
+            "430f1a62d4": "選択したスレッドをホスト上で解決できませんでした。"
           },
           "CreatePullRequestDialog": {
             "2bc1b4345e": "キャンセル",
@@ -13636,9 +13645,7 @@
           "33741dd973": "実行一覧に戻る"
         },
         "AutomationSchedulePicker": {
-          "22359b186a": "午前または午後",
           "9e677335b0": "分",
-          "6b802ecc99": "時間",
           "d90981f766": "時間",
           "6b914c5fbb": "日",
           "233b8c94b6": "ケイデンス",
@@ -13648,6 +13655,11 @@
           "837d902bba": "毎週",
           "ddba78647e": "カスタム cron"
         },
+        "AutomationTimeField": {
+          "39ec1383f6": "午前または午後",
+          "32a5e4e35e": "分",
+          "aa593eb5e2": "時間"
+        },
         "AutomationSessionField": {
           "f3c76dce51": "再利用",
           "c90888ee94": "新規",
diff --git a/src/renderer/src/i18n/locales/ko.json b/src/renderer/src/i18n/locales/ko.json
index dfdfded0bc1..0c4206bc23f 100644
--- a/src/renderer/src/i18n/locales/ko.json
+++ b/src/renderer/src/i18n/locales/ko.json
@@ -563,6 +563,14 @@
               "64555d0014": "기본 브랜치를 찾을 수 없습니다."
             }
           }
+        },
+        "browser": {
+          "tab": {
+            "open": {
+              "urlFailed": "URL을 열 수 없습니다.",
+              "searchFailed": "{{value0}}에서 검색할 수 없습니다."
+            }
+          }
         }
       },
       "worktree": {
@@ -778,7 +786,7 @@
         "a9fb10afca": "터미널",
         "5235c215ca": "작업 페이지와 사이드바에 표시할 작업 제공자를 선택합니다.",
         "85f4fd7710": "작업 소스",
-        "ab4b21b58e": "브랜치 이름 지정, 기본 참조, 속성 및 Git AI Author.",
+        "ab4b21b58e": "브랜치 이름 지정, 기본 참조 및 Git AI Author.",
         "09607cb0fe": "Git 및 소스 제어",
         "33a5e1d597": "GitHub, GitLab, Linear 및 소스 호스팅 서비스를 연결하세요.",
         "2b043783ef": "연동",
@@ -2991,7 +2999,9 @@
             "2c38630a01": "워크스페이스가 더 이상 존재하지 않습니다",
             "4f0d9a71c2": "탭이 더 이상 존재하지 않습니다",
             "d7d496a451": "브라우저 페이지가 더 이상 존재하지 않습니다",
-            "7726ce9970": "모바일 에뮬레이터 탭이 더 이상 존재하지 않습니다"
+            "7726ce9970": "모바일 에뮬레이터 탭이 더 이상 존재하지 않습니다",
+            "chooseAction": "작업을 선택하세요.",
+            "searchProvider": "{{value0}}에서 검색"
           },
           "TabBarQuickCommandsButton": {
             "a2c7a33831": "명령",
@@ -4668,14 +4678,28 @@
           "bff3bdd00c": "워크스페이스 이름 바꾸기",
           "8df295a78d": "워크스페이스 이름을 바꾸지 못했습니다."
         },
+        "WorktreeVisibilityHelpPopover": {
+          "c41f2d7e90": "기본적으로 숨겨지는 워크트리",
+          "8db4e19a26": "이 설정은 Orca에서 만든 워크트리를 숨기지 않습니다.",
+          "54a7c2f183": "새로 추가한 저장소에서는 직접 만들거나 다른 도구에서 만든 워크트리가 예기치 않은 항목으로 사이드바를 복잡하게 하지 않도록 기본적으로 숨겨집니다.",
+          "b9e0d43675": "'항상 표시'는 .claude/worktrees/* 및 .gsd-workspaces/* 아래의 에이전트 워크트리를 포함하여 현재와 앞으로 생성되는 Orca 외부 워크트리를 표시합니다. 꺼져 있을 때는 아래의 '표시'를 사용해 하나씩 추가할 수 있습니다."
+        },
         "WorktreeVisibilityDialog": {
           "83a5ba8dd1": "Orca 외부 워크트리",
-          "f1f71b9f02": "가져오기",
+          "f1f71b9f02": "항상 표시",
           "759371df43": "숨기기",
-          "25ddf19920": "{{value0}} 가져오기 가능",
+          "25ddf19920": "{{value0}} 현재 숨겨짐",
           "8372e4bbd9": "{{value0}} 현재 표시됨",
           "5d02a5647f": "사이드바에서 숨겨짐",
-          "3e045d4cb8": "사이드바에 표시됨"
+          "3e045d4cb8": "사이드바에 표시됨",
+          "a3f19c07d2": "확인 중…",
+          "b8d24e61f5": "이 저장소의 워크트리를 나열할 수 없습니다.",
+          "c5e70a93b1": "다시 시도",
+          "7d21c5e848": "숨겨진 워크트리({{value0}})",
+          "9b53f7a160": "개별적으로 사이드바에 표시할 숨겨진 워크트리를 선택하세요.",
+          "2f80cd4b97": "표시 중…",
+          "e64b81d3a9": "표시",
+          "d40d436fc2": "워크트리 표시 설정을 업데이트하지 못했습니다. 다시 시도하세요."
         },
         "add": {
           "repo": {
@@ -5954,14 +5978,6 @@
           "808f9a726e": "접두사가 적용되지 않습니다"
         },
         "GitPane": {
-          "d2eede4c54": "commits, PR 및 이슈에 Orca 속성을 추가합니다.",
-          "e02ea23a32": "Orca 표기",
-          "e71ce09c42": "orca",
-          "b9b5771bb1": "표기",
-          "b5f534717a": "공동 작성",
-          "9838c921ed": "공저자",
-          "afada55042": "이슈",
-          "b4ef5428a7": "PR",
           "895d3f70b8": "gh",
           "32dca11189": "GitHub",
           "c4f610d057": "사용 가능한 경우 현재 GitLab CLI REST 속도 제한 헤더입니다.",
@@ -6850,7 +6866,7 @@
           "3de4bbb841": "터미널",
           "dd72ed437a": "작업 페이지와 사이드바에 표시할 작업 제공자를 선택합니다.",
           "11faa2f7dd": "작업 소스",
-          "cfa34f4465": "브랜치 이름 지정, 기본 참조, 속성 및 Git AI Author.",
+          "cfa34f4465": "브랜치 이름 지정, 기본 참조 및 Git AI Author.",
           "70100f94c7": "Git 및 소스 제어",
           "b07041697f": "GitHub, GitLab, Linear 및 소스 호스팅 서비스를 연결하세요.",
           "c9ca101a3b": "연동",
@@ -8228,16 +8244,8 @@
         },
         "git": {
           "search": {
-            "61eab13403": "orca",
-            "1b93c1143c": "속성",
-            "8461c908ae": "공동 집필",
-            "61f9f5d1fc": "공저자",
-            "af0a144bfb": "이슈",
-            "6bdea421bb": "PR",
             "16f53f7323": "gh",
             "d088806071": "GitHub",
-            "118c23484b": "commits, PR 및 이슈에 Orca 속성을 추가합니다.",
-            "bc7d9f69ce": "Orca 속성",
             "40f9b815fd": "API 예산",
             "b7e52124c7": "속도 제한",
             "ead733645f": "glab",
@@ -10149,7 +10157,7 @@
             "653c105ecc": "더 많은 PR 작업",
             "f316a8ca2b": "선택한 해결되지 않은 댓글이 없습니다.",
             "d00ebdc402": "AI로 {{value0}} 댓글 해결",
-            "ed3f79c031": "에이전트를 시작하기 전에 프롬프트를 확인하세요. 프롬프트가 전달된 후 Orca가 선택한 댓글에 답글을 남기고 가능한 경우 호스트 스레드를 해결합니다.",
+            "5eb2163b6b": "에이전트를 시작하기 전에 프롬프트를 확인하세요. 프롬프트가 전달된 후 Orca가 선택한 호스트 스레드를 해결하고, 해결할 수 없는 댓글에는 답글을 남깁니다.",
             "f273f2271c": "agent를 시작했습니다. {{value0}}개 해결됨, {{value1}}개 답글, {{value2}}개 건너뜀, {{value3}}개 실패.{{value4}}",
             "aa95b81a3a": "agent를 시작했습니다. {{value0}}개 해결됨, {{value1}}개 답글, {{value2}}개 건너뜀, {{value3}}개 실패.",
             "495b2f8c4b": "agent를 시작했지만 선택한 댓글을 해결하거나 답글할 수 없습니다.",
@@ -10163,7 +10171,8 @@
               "pending": "Syncing…",
               "branch": "Sync Branch"
             },
-            "7e4b2a19c0": "답글을 게시할 GitHub PR을 확인하지 못했습니다."
+            "7e4b2a19c0": "답글을 게시할 GitHub PR을 확인하지 못했습니다.",
+            "430f1a62d4": "선택한 스레드를 호스트에서 해결하지 못했습니다."
           },
           "CreatePullRequestDialog": {
             "2bc1b4345e": "취소",
@@ -13647,9 +13656,7 @@
           "33741dd973": "실행으로 돌아가기"
         },
         "AutomationSchedulePicker": {
-          "22359b186a": "오전 또는 오후",
           "9e677335b0": "분",
-          "6b802ecc99": "시간",
           "d90981f766": "시간",
           "6b914c5fbb": "요일",
           "233b8c94b6": "반복 주기",
@@ -13659,6 +13666,11 @@
           "837d902bba": "매주",
           "ddba78647e": "사용자 지정 cron"
         },
+        "AutomationTimeField": {
+          "39ec1383f6": "오전 또는 오후",
+          "32a5e4e35e": "분",
+          "aa593eb5e2": "시간"
+        },
         "AutomationSessionField": {
           "f3c76dce51": "재사용",
           "c90888ee94": "새로 시작",
diff --git a/src/renderer/src/i18n/locales/zh.json b/src/renderer/src/i18n/locales/zh.json
index 8562437c744..1b18896713f 100644
--- a/src/renderer/src/i18n/locales/zh.json
+++ b/src/renderer/src/i18n/locales/zh.json
@@ -563,6 +563,14 @@
               "64555d0014": "未找到基础分支"
             }
           }
+        },
+        "browser": {
+          "tab": {
+            "open": {
+              "urlFailed": "无法打开网址。",
+              "searchFailed": "无法使用 {{value0}} 搜索。"
+            }
+          }
         }
       },
       "worktree": {
@@ -778,7 +786,7 @@
         "a9fb10afca": "终端",
         "5235c215ca": "选择在“任务”页面和侧栏中显示的任务提供者。",
         "85f4fd7710": "任务来源",
-        "ab4b21b58e": "分支命名、基础引用、署名和 Git AI Author。",
+        "ab4b21b58e": "分支命名、基础引用和 Git AI Author。",
         "09607cb0fe": "Git 和源代码控制",
         "33a5e1d597": "连接 GitHub、GitLab、Linear 和源托管服务。",
         "2b043783ef": "集成",
@@ -3003,7 +3011,9 @@
             "2c38630a01": "工作区已不存在",
             "4f0d9a71c2": "标签页已不存在",
             "d7d496a451": "浏览器页面已不存在",
-            "7726ce9970": "移动模拟器标签页已不存在"
+            "7726ce9970": "移动模拟器标签页已不存在",
+            "chooseAction": "请选择一项操作。",
+            "searchProvider": "使用 {{value0}} 搜索"
           },
           "TabBarQuickCommandsButton": {
             "a2c7a33831": "命令",
@@ -4680,14 +4690,28 @@
           "bff3bdd00c": "重命名工作区",
           "8df295a78d": "无法重命名工作区。"
         },
+        "WorktreeVisibilityHelpPopover": {
+          "c41f2d7e90": "哪些工作树默认隐藏？",
+          "8db4e19a26": "此设置不会隐藏通过 Orca 创建的工作树。",
+          "54a7c2f183": "对于新添加的仓库，手动或通过其他工具创建的工作树默认隐藏，以免侧边栏出现意外内容。",
+          "b9e0d43675": "“始终显示”会显示当前及以后创建的非 Orca 工作树，包括 .claude/worktrees/* 和 .gsd-workspaces/* 下的智能体工作树。关闭时，可使用下方的“显示”逐个添加。"
+        },
         "WorktreeVisibilityDialog": {
           "83a5ba8dd1": "非 Orca 工作树",
-          "f1f71b9f02": "导入",
+          "f1f71b9f02": "始终显示",
           "759371df43": "隐藏",
-          "25ddf19920": "{{value0}} 可导入",
+          "25ddf19920": "当前隐藏 {{value0}}",
           "8372e4bbd9": "当前显示 {{value0}}",
           "5d02a5647f": "从侧边栏隐藏",
-          "3e045d4cb8": "显示在侧边栏中"
+          "3e045d4cb8": "显示在侧边栏中",
+          "a3f19c07d2": "检查中…",
+          "b8d24e61f5": "无法列出此仓库的工作树。",
+          "c5e70a93b1": "重试",
+          "7d21c5e848": "已隐藏的工作树（{{value0}}）",
+          "9b53f7a160": "选择要单独显示的隐藏工作树。",
+          "2f80cd4b97": "显示中…",
+          "e64b81d3a9": "显示",
+          "d40d436fc2": "无法更新工作树可见性。请重试。"
         },
         "add": {
           "repo": {
@@ -5966,14 +5990,6 @@
           "808f9a726e": "不会应用前缀"
         },
         "GitPane": {
-          "d2eede4c54": "将 Orca 署名添加到 commits、PR 和议题。",
-          "e02ea23a32": "Orca 署名",
-          "e71ce09c42": "orca",
-          "b9b5771bb1": "署名",
-          "b5f534717a": "合着的",
-          "9838c921ed": "共同作者",
-          "afada55042": "议题",
-          "b4ef5428a7": "PR",
           "895d3f70b8": "gh",
           "32dca11189": "github",
           "c4f610d057": "当前 GitLab CLI REST 速率限制标头（如果可用）。",
@@ -6862,7 +6878,7 @@
           "3de4bbb841": "终端",
           "dd72ed437a": "选择在“任务”页面和侧栏中显示的任务提供者。",
           "11faa2f7dd": "任务来源",
-          "cfa34f4465": "分支命名、基础引用、署名和 Git AI Author。",
+          "cfa34f4465": "分支命名、基础引用和 Git AI Author。",
           "70100f94c7": "Git 和源代码控制",
           "b07041697f": "连接 GitHub、GitLab、Linear 和源托管服务。",
           "c9ca101a3b": "集成",
@@ -8240,16 +8256,8 @@
         },
         "git": {
           "search": {
-            "61eab13403": "orca",
-            "1b93c1143c": "署名",
-            "8461c908ae": "合着的",
-            "61f9f5d1fc": "共同作者",
-            "af0a144bfb": "议题",
-            "6bdea421bb": "PR",
             "16f53f7323": "gh",
             "d088806071": "GitHub",
-            "118c23484b": "将 Orca 署名添加到 commits、PR 和议题。",
-            "bc7d9f69ce": "Orca 署名",
             "40f9b815fd": "API预算",
             "b7e52124c7": "速率限制",
             "ead733645f": "光亮的",
@@ -10169,7 +10177,7 @@
             "653c105ecc": "更多 PR 操作",
             "f316a8ca2b": "未选择未解决的评论。",
             "d00ebdc402": "使用 AI 解决 {{value0}} 评论",
-            "ed3f79c031": "启动 agent 前请检查提示词。提示词送达后，Orca 会回复选中的评论，并在可能时解决主机上的讨论串。",
+            "5eb2163b6b": "启动 agent 前请检查提示词。提示词送达后，Orca 会解决选中的主机讨论串，并回复无法解决的评论。",
             "f273f2271c": "已启动智能体。已标记 {{value0}} 个为已解决，回复 {{value1}} 个，跳过 {{value2}} 个，失败 {{value3}} 个。{{value4}}",
             "aa95b81a3a": "已启动智能体。已标记 {{value0}} 个为已解决，回复 {{value1}} 个，跳过 {{value2}} 个，失败 {{value3}} 个。",
             "495b2f8c4b": "已启动智能体，但无法解决或回复选中的评论。",
@@ -10183,7 +10191,8 @@
               "pending": "Syncing…",
               "branch": "Sync Branch"
             },
-            "7e4b2a19c0": "无法确定要回复的 GitHub PR。"
+            "7e4b2a19c0": "无法确定要回复的 GitHub PR。",
+            "430f1a62d4": "无法在主机上解决选中的讨论串。"
           },
           "CreatePullRequestDialog": {
             "2bc1b4345e": "取消",
@@ -13656,9 +13665,7 @@
           "33741dd973": "返回执行"
         },
         "AutomationSchedulePicker": {
-          "22359b186a": "上午或下午",
           "9e677335b0": "分钟",
-          "6b802ecc99": "小时",
           "d90981f766": "时间",
           "6b914c5fbb": "天",
           "233b8c94b6": "节奏",
@@ -13668,6 +13675,11 @@
           "837d902bba": "每周",
           "ddba78647e": "自定义 cron"
         },
+        "AutomationTimeField": {
+          "39ec1383f6": "上午或下午",
+          "32a5e4e35e": "分钟",
+          "aa593eb5e2": "小时"
+        },
         "AutomationSessionField": {
           "f3c76dce51": "重复利用",
           "c90888ee94": "新鲜的",
diff --git a/src/renderer/src/lib/agent-hibernation-planner.ts b/src/renderer/src/lib/agent-hibernation-planner.ts
index 6920d18ed1e..f5631ffc8ed 100644
--- a/src/renderer/src/lib/agent-hibernation-planner.ts
+++ b/src/renderer/src/lib/agent-hibernation-planner.ts
@@ -267,10 +267,7 @@ export function planAgentHibernationCandidates(
     }
     if (
       runtimeLivenessRequiredWorktreeIds.has(worktreeId) &&
-      !Object.prototype.hasOwnProperty.call(
-        snapshot.runtimeLivePtyIdsByWorktreeId ?? {},
-        worktreeId
-      )
+      !Object.hasOwn(snapshot.runtimeLivePtyIdsByWorktreeId ?? {}, worktreeId)
     ) {
       continue
     }
diff --git a/src/renderer/src/lib/agent-send-title-status.test.ts b/src/renderer/src/lib/agent-send-title-status.test.ts
new file mode 100644
index 00000000000..befa6e33cb1
--- /dev/null
+++ b/src/renderer/src/lib/agent-send-title-status.test.ts
@@ -0,0 +1,35 @@
+import { describe, expect, it } from 'vitest'
+import { detectAgentSendTitleStatus } from './agent-send-title-status'
+
+describe('detectAgentSendTitleStatus', () => {
+  it.each([
+    'OC | Native session',
+    'OC | ✦ Gemini CLI',
+    'OC | ✋ review Gemini permission handling',
+    'ssh build-host | OC | Native session',
+    'user@host: ~/code | OC | Native session',
+    '▣ OC | Native session',
+    'OC |   Native session',
+    'OC |\tNative session'
+  ])('accepts OpenCode native idle title %j', (title) => {
+    expect(detectAgentSendTitleStatus(title)).toBe('idle')
+  })
+
+  it('preserves spinner working state for OpenCode', () => {
+    expect(detectAgentSendTitleStatus('⠋ OC | Native session')).toBe('working')
+    expect(detectAgentSendTitleStatus('ssh build-host | ⠋ OC | Native session')).toBe('working')
+  })
+
+  it.each(['OC |', 'OC |Native session', 'oc | Native session', 'OCTOPUS | Native session'])(
+    'rejects incomplete or lookalike OpenCode title %j',
+    (title) => {
+      expect(detectAgentSendTitleStatus(title)).toBeNull()
+    }
+  )
+
+  it('preserves non-OpenCode title behavior', () => {
+    expect(detectAgentSendTitleStatus('✦ Gemini CLI')).toBe('working')
+    expect(detectAgentSendTitleStatus('Codex ready')).toBe('idle')
+    expect(detectAgentSendTitleStatus('zsh')).toBeNull()
+  })
+})
diff --git a/src/renderer/src/lib/agent-send-title-status.ts b/src/renderer/src/lib/agent-send-title-status.ts
index 9ae50293693..4e03d70b174 100644
--- a/src/renderer/src/lib/agent-send-title-status.ts
+++ b/src/renderer/src/lib/agent-send-title-status.ts
@@ -1,4 +1,5 @@
 import type { AgentStatus } from './agent-status'
+import { isOpenCodeNativeTitle } from '../../../shared/opencode-terminal-title'
 import { classifyTitleActivity, resolveTitleActivityLabel } from '@/lib/pane-agent-evidence'
 
 const EXPLICIT_IDLE_SEND_TITLE_RE = /(^|\s)(ready|idle|done)(\s|$|[.!?])/i
@@ -24,6 +25,9 @@ export function detectAgentSendTitleStatus(title: string | null | undefined): Ag
 function isExplicitIdleSendTitle(title: string): boolean {
   return (
     EXPLICIT_IDLE_SEND_TITLE_RE.test(title) ||
+    // Why: this title-level filter exposes hookless OpenCode targets; the runtime
+    // still requires launch or foreground-process evidence before writing.
+    isOpenCodeNativeTitle(title) ||
     title.startsWith(CLAUDE_IDLE_PREFIX) ||
     title.startsWith('* ') ||
     title.includes(GEMINI_IDLE_PREFIX) ||
diff --git a/src/renderer/src/lib/agent-status.ts b/src/renderer/src/lib/agent-status.ts
index e49e3c002fa..11d966cb8bf 100644
--- a/src/renderer/src/lib/agent-status.ts
+++ b/src/renderer/src/lib/agent-status.ts
@@ -139,9 +139,7 @@ export function agentTypeToIconAgent(agentType: AgentType | null | undefined): T
   if (!agentType || agentType === 'unknown') {
     return null
   }
-  return Object.prototype.hasOwnProperty.call(ICONABLE_AGENT_TYPES, agentType)
-    ? (agentType as TuiAgent)
-    : null
+  return Object.hasOwn(ICONABLE_AGENT_TYPES, agentType) ? (agentType as TuiAgent) : null
 }
 
 // Why: shared resolver so all send paths stamp identical agent_kind on agent_prompt_sent telemetry.
diff --git a/src/renderer/src/lib/ai-vault-resume-command.ts b/src/renderer/src/lib/ai-vault-resume-command.ts
index e8d05f61140..92e826f83a9 100644
--- a/src/renderer/src/lib/ai-vault-resume-command.ts
+++ b/src/renderer/src/lib/ai-vault-resume-command.ts
@@ -241,10 +241,32 @@ function resolveAiVaultResumeShell(args: AiVaultResumeWorktreeArgs): AgentStartu
     state: args.state,
     worktreeId: args.worktreeId,
     platform,
-    isLocalSession
+    isLocalSession,
+    parsedByClientLoginShell: isLocalSession && runsOnClientLoginShell(args, platform)
   })
 }
 
+/**
+ * Whether the resume line is handed to THIS machine's login shell.
+ *
+ * Why not `isLocalSession`: that only says the session file was scanned locally
+ * (no executionHostId), which is still true when the worktree lives on an SSH
+ * or runtime host — the command then goes to that host's shell. The WSL case is
+ * caught by the platform mismatch (a WSL worktree resolves to 'linux' on win32).
+ */
+function runsOnClientLoginShell(
+  args: AiVaultResumeWorktreeArgs,
+  platform: NodeJS.Platform
+): boolean {
+  const executionHost = parseExecutionHostId(
+    getExecutionHostIdForWorktree(args.state, args.worktreeId ?? args.state.activeWorktreeId)
+  )
+  if (executionHost?.kind === 'ssh' || executionHost?.kind === 'runtime') {
+    return false
+  }
+  return platform === CLIENT_PLATFORM
+}
+
 export function getAiVaultAgentProviderSession(
   session: Pick<AiVaultSession, 'agent' | 'sessionId'> & { filePath?: string }
 ): AgentProviderSessionMetadata | null {
diff --git a/src/renderer/src/lib/ai-vault-resume-shell.test.ts b/src/renderer/src/lib/ai-vault-resume-shell.test.ts
new file mode 100644
index 00000000000..e2ab4b9a173
--- /dev/null
+++ b/src/renderer/src/lib/ai-vault-resume-shell.test.ts
@@ -0,0 +1,150 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { AppState } from '@/store/types'
+
+vi.mock('@/lib/new-workspace', () => ({
+  CLIENT_PLATFORM: 'darwin'
+}))
+
+const clientLoginShell = vi.hoisted(() => ({ value: '' }))
+
+vi.mock('@/lib/client-login-shell', () => ({
+  getClientLoginShell: () => clientLoginShell.value
+}))
+
+import { buildAiVaultResumeCopyCommandForWorktree } from './ai-vault-resume-command'
+import { resolveAiVaultResumeStartupShell } from './ai-vault-resume-shell'
+
+type ResumeShellState = Parameters<typeof buildAiVaultResumeCopyCommandForWorktree>[0]['state']
+
+function makeState(worktreeHostId?: string): ResumeShellState {
+  return {
+    activeRepoId: 'repo-1',
+    activeWorktreeId: 'repo-1::worktree-1',
+    folderWorkspaces: [],
+    projectGroups: [],
+    repos: [{ id: 'repo-1', path: '/home/alice/repo' }],
+    projects: [{ id: 'repo-1', sourceRepoIds: ['repo-1'] }],
+    settings: {
+      agentDefaultArgs: { codex: '' },
+      agentDefaultEnv: { codex: {} }
+    },
+    worktreesByRepo: {
+      'repo-1': [
+        {
+          id: 'repo-1::worktree-1',
+          repoId: 'repo-1',
+          path: '/home/alice/repo',
+          ...(worktreeHostId ? { hostId: worktreeHostId } : {})
+        }
+      ]
+    }
+  } as unknown as AppState
+}
+
+function withLoginShell<T>(shell: string, run: () => T): T {
+  clientLoginShell.value = shell
+  try {
+    return run()
+  } finally {
+    clientLoginShell.value = ''
+  }
+}
+
+describe('resolveAiVaultResumeStartupShell', () => {
+  it('reports the fish dialect for a local session under a fish login shell', () => {
+    expect(
+      withLoginShell('/opt/homebrew/bin/fish', () =>
+        resolveAiVaultResumeStartupShell({
+          state: makeState(),
+          worktreeId: 'repo-1::worktree-1',
+          platform: 'darwin',
+          isLocalSession: true,
+          parsedByClientLoginShell: true
+        })
+      )
+    ).toBe('fish')
+  })
+
+  it('stays on sh for zsh users', () => {
+    expect(
+      withLoginShell('/bin/zsh', () =>
+        resolveAiVaultResumeStartupShell({
+          state: makeState(),
+          worktreeId: 'repo-1::worktree-1',
+          platform: 'darwin',
+          isLocalSession: true,
+          parsedByClientLoginShell: true
+        })
+      )
+    ).toBe('posix')
+  })
+
+  it('stays on sh for a LOCAL session whose command a remote host parses', () => {
+    // The reachable case: a locally scanned session has no executionHostId, so
+    // isLocalSession stays true while the command is bound for an SSH host.
+    expect(
+      withLoginShell('/opt/homebrew/bin/fish', () =>
+        resolveAiVaultResumeStartupShell({
+          state: makeState(),
+          worktreeId: 'repo-1::worktree-1',
+          platform: 'linux',
+          isLocalSession: true,
+          parsedByClientLoginShell: false
+        })
+      )
+    ).toBe('posix')
+  })
+})
+
+describe('copied real-home Codex resume command', () => {
+  const session = {
+    agent: 'codex' as const,
+    sessionId: 'session one',
+    cwd: '/home/alice/repo',
+    codexHome: null
+  }
+
+  it('clears inherited Codex homes with fish syntax under a fish login shell', () => {
+    expect(
+      withLoginShell('/opt/homebrew/bin/fish', () =>
+        buildAiVaultResumeCopyCommandForWorktree({
+          state: makeState(),
+          worktreeId: 'repo-1::worktree-1',
+          session
+        })
+      )
+    ).toBe(
+      "set -e CODEX_HOME; set -e ORCA_CODEX_HOME; cd '/home/alice/repo' && codex 'resume' 'session one'"
+    )
+  })
+
+  it('keeps `unset` when a fish client targets an SSH worktree', () => {
+    // The session was scanned locally (no executionHostId), but the worktree lives
+    // on an SSH host: `set -e CODEX_HOME` would enable errexit there, not clear it.
+    expect(
+      withLoginShell('/opt/homebrew/bin/fish', () =>
+        buildAiVaultResumeCopyCommandForWorktree({
+          state: makeState('ssh:target-1'),
+          worktreeId: 'repo-1::worktree-1',
+          session
+        })
+      )
+    ).toBe(
+      "unset CODEX_HOME; unset ORCA_CODEX_HOME; cd '/home/alice/repo' && codex 'resume' 'session one'"
+    )
+  })
+
+  it('keeps `unset` for sh-family login shells', () => {
+    expect(
+      withLoginShell('/bin/bash', () =>
+        buildAiVaultResumeCopyCommandForWorktree({
+          state: makeState(),
+          worktreeId: 'repo-1::worktree-1',
+          session
+        })
+      )
+    ).toBe(
+      "unset CODEX_HOME; unset ORCA_CODEX_HOME; cd '/home/alice/repo' && codex 'resume' 'session one'"
+    )
+  })
+})
diff --git a/src/renderer/src/lib/ai-vault-resume-shell.ts b/src/renderer/src/lib/ai-vault-resume-shell.ts
index d1ab726484e..9b6214fb247 100644
--- a/src/renderer/src/lib/ai-vault-resume-shell.ts
+++ b/src/renderer/src/lib/ai-vault-resume-shell.ts
@@ -4,9 +4,11 @@ import { CLIENT_PLATFORM } from '@/lib/new-workspace'
 import { resolveLocalWindowsTerminalShellOverrideForTab } from '../../../shared/local-windows-terminal-runtime'
 import { resolveWindowsShellStartupFamily } from '../../../shared/windows-terminal-shell'
 import {
+  resolveLoginShellStartupDialect,
   resolveStartupShell,
   type AgentStartupShell
 } from '../../../shared/tui-agent-startup-shell'
+import { getClientLoginShell } from '@/lib/client-login-shell'
 import { parseWorkspaceKey } from '../../../shared/workspace-scope'
 import { parseWslUncPath } from '../../../shared/wsl-paths'
 
@@ -26,24 +28,35 @@ export function resolveAiVaultResumeStartupShell(args: {
   worktreeId?: string | null
   platform: NodeJS.Platform
   isLocalSession: boolean
+  /**
+   * True only when this machine's own login shell parses the command. A local
+   * session is NOT enough: a locally scanned session carries no executionHostId
+   * yet can target an SSH/runtime/WSL worktree, whose shell is unrelated.
+   */
+  parsedByClientLoginShell?: boolean
 }): AgentStartupShell {
-  const projectRuntime =
-    args.platform === 'win32' && args.isLocalSession
-      ? getLocalProjectExecutionRuntimeContext(args.state, args.worktreeId, CLIENT_PLATFORM)
-      : undefined
+  // Why: fish rejects `unset`, so the client's login shell decides the dialect —
+  // but only when it is the shell that reads the line; otherwise it stays sh.
+  if (args.platform !== 'win32') {
+    return args.parsedByClientLoginShell
+      ? resolveLoginShellStartupDialect(getClientLoginShell())
+      : 'posix'
+  }
+  const projectRuntime = args.isLocalSession
+    ? getLocalProjectExecutionRuntimeContext(args.state, args.worktreeId, CLIENT_PLATFORM)
+    : undefined
   const workspacePath = getAiVaultResumeWorkspacePath(
     args.state,
     args.worktreeId ?? args.state.activeWorktreeId
   )
-  const shellOverride =
-    args.platform === 'win32' && args.isLocalSession
-      ? resolveLocalWindowsTerminalShellOverrideForTab({
-          explicitShellOverride: undefined,
-          defaultWindowsShell: args.state.settings?.terminalWindowsShell,
-          isWslWorktree: Boolean(workspacePath && parseWslUncPath(workspacePath)),
-          projectRuntime
-        })
-      : undefined
+  const shellOverride = args.isLocalSession
+    ? resolveLocalWindowsTerminalShellOverrideForTab({
+        explicitShellOverride: undefined,
+        defaultWindowsShell: args.state.settings?.terminalWindowsShell,
+        isWslWorktree: Boolean(workspacePath && parseWslUncPath(workspacePath)),
+        projectRuntime
+      })
+    : undefined
   const shell = shellOverride ? resolveWindowsShellStartupFamily(shellOverride) : undefined
   return resolveStartupShell(args.platform, shell)
 }
diff --git a/src/renderer/src/lib/browser-cookie-import-toast.test.ts b/src/renderer/src/lib/browser-cookie-import-toast.test.ts
index a59c7a93f03..40f2800102e 100644
--- a/src/renderer/src/lib/browser-cookie-import-toast.test.ts
+++ b/src/renderer/src/lib/browser-cookie-import-toast.test.ts
@@ -35,7 +35,8 @@ describe('emitBrowserCookieImportToast', () => {
           failedCookies: 3
         }
       },
-      'Imported 3 cookies.'
+      'Imported 3 cookies.',
+      'Local Mac'
     )
 
     expect(warningToastMock).toHaveBeenCalledWith(
@@ -44,29 +45,67 @@ describe('emitBrowserCookieImportToast', () => {
     expect(successToastMock).not.toHaveBeenCalled()
   })
 
-  it('shows the localized partial-failure warning', () => {
-    emitBrowserCookieImportToast(
-      {
-        ...summary,
-        warning: {
-          code: 'restart-fallback-unavailable',
-          loadedCookies: 2,
-          failedCookies: 1
-        }
-      },
-      'Imported 3 cookies.'
-    )
-
-    expect(warningToastMock).toHaveBeenCalledWith(
-      'Imported 2 of 3 cookies. The rest could not be loaded, and the restart fallback was unavailable. Try the import again.'
-    )
-    expect(successToastMock).not.toHaveBeenCalled()
-  })
-
   it('shows success when the import has no warning', () => {
-    emitBrowserCookieImportToast(summary, 'Imported 3 cookies.')
+    emitBrowserCookieImportToast(summary, 'Imported 3 cookies.', 'Local Mac')
 
     expect(successToastMock).toHaveBeenCalledWith('Imported 3 cookies.')
     expect(warningToastMock).not.toHaveBeenCalled()
   })
+
+  it('shows separate host-specific Google guidance after success', () => {
+    emitBrowserCookieImportToast(
+      { ...summary, importedCookies: 2, skippedCookies: 1, googleCookiesSkipped: 1 },
+      'Imported 2 cookies.',
+      'Remote Mac'
+    )
+
+    expect(successToastMock).toHaveBeenCalledWith('Imported 2 cookies.')
+    expect(warningToastMock).toHaveBeenCalledWith(
+      'Google cookies were not imported. Open a browser in Orca on Remote Mac with this profile, then sign into Google.',
+      { duration: 12000 }
+    )
+    expect(successToastMock.mock.invocationCallOrder[0]).toBeLessThan(
+      warningToastMock.mock.invocationCallOrder[0]
+    )
+  })
+
+  it('does not infer a Google warning from generic skipped cookies', () => {
+    emitBrowserCookieImportToast(
+      { ...summary, importedCookies: 2, skippedCookies: 1 },
+      'Imported 2 cookies.',
+      'Local Mac'
+    )
+
+    expect(successToastMock).toHaveBeenCalledWith('Imported 2 cookies.')
+    expect(warningToastMock).not.toHaveBeenCalled()
+  })
+
+  it('keeps both applicable warnings when restart fallback is unavailable', () => {
+    emitBrowserCookieImportToast(
+      {
+        ...summary,
+        importedCookies: 1,
+        skippedCookies: 2,
+        googleCookiesSkipped: 1,
+        warning: {
+          code: 'restart-fallback-unavailable',
+          loadedCookies: 1,
+          failedCookies: 1
+        }
+      },
+      'Imported 1 cookie.',
+      'Remote Mac'
+    )
+
+    expect(successToastMock).not.toHaveBeenCalled()
+    expect(warningToastMock.mock.calls).toEqual([
+      [
+        'Imported 1 of 2 cookies. The rest could not be loaded, and the restart fallback was unavailable. Try the import again.'
+      ],
+      [
+        'Google cookies were not imported. Open a browser in Orca on Remote Mac with this profile, then sign into Google.',
+        { duration: 12000 }
+      ]
+    ])
+  })
 })
diff --git a/src/renderer/src/lib/browser-cookie-import-toast.ts b/src/renderer/src/lib/browser-cookie-import-toast.ts
index 4bdd031f83f..ced4c3cfdbd 100644
--- a/src/renderer/src/lib/browser-cookie-import-toast.ts
+++ b/src/renderer/src/lib/browser-cookie-import-toast.ts
@@ -24,16 +24,35 @@ function formatCookieImportWarning(warning: CookieImportWarning): string {
   }
 }
 
+function emitGoogleCookieImportWarning(
+  summary: BrowserCookieImportSummary,
+  executionHostLabel: string
+): void {
+  if (!summary.googleCookiesSkipped) {
+    return
+  }
+  toast.warning(
+    translate(
+      'auto.lib.browser.cookie.import.toast.googleCookiesSkipped',
+      'Google cookies were not imported. Open a browser in Orca on {{value0}} with this profile, then sign into Google.',
+      { value0: executionHostLabel }
+    ),
+    { duration: 12000 }
+  )
+}
+
 // Why: a degraded import returns ok:true with a warning, so every call site must route it to a
 // warning toast instead of reporting an unqualified success (#9355).
 export function emitBrowserCookieImportToast(
   summary: BrowserCookieImportSummary,
-  successMessage: string
+  successMessage: string,
+  executionHostLabel: string
 ): void {
   const warning = summary.warning
   if (warning) {
     toast.warning(formatCookieImportWarning(warning))
-    return
+  } else {
+    toast.success(successMessage)
   }
-  toast.success(successMessage)
+  emitGoogleCookieImportWarning(summary, executionHostLabel)
 }
diff --git a/src/renderer/src/lib/client-creation-action-policy.test.ts b/src/renderer/src/lib/client-creation-action-policy.test.ts
new file mode 100644
index 00000000000..b0edc2add67
--- /dev/null
+++ b/src/renderer/src/lib/client-creation-action-policy.test.ts
@@ -0,0 +1,210 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
+import type { RuntimeStatus } from '../../../shared/runtime-types'
+import { toRuntimeExecutionHostId, toSshExecutionHostId } from '../../../shared/execution-host'
+import { folderWorkspaceKey } from '../../../shared/workspace-scope'
+import {
+  FLOATING_BROWSER_UNAVAILABLE_MESSAGE,
+  LOCAL_BROWSER_UNAVAILABLE_MESSAGE,
+  MANAGED_BROWSER_UNAVAILABLE_MESSAGE,
+  MOBILE_EMULATOR_UNAVAILABLE_MESSAGE,
+  assertClientCreationActionAvailable,
+  assertManagedBrowserMaterializationAllowed,
+  getClientCreationActionPolicy,
+  resolveClientCreationActionPolicy
+} from './client-creation-action-policy'
+
+function runtimeStatus(capabilities?: string[]): RuntimeStatus {
+  return {
+    runtimeId: 'runtime-1',
+    rendererGraphEpoch: 1,
+    graphStatus: 'ready',
+    authoritativeWindowId: null,
+    liveTabCount: 0,
+    liveLeafCount: 0,
+    hostPlatform: 'darwin',
+    capabilities
+  }
+}
+
+afterEach(() => vi.unstubAllGlobals())
+
+describe('resolveClientCreationActionPolicy', () => {
+  it('preserves Electron creation behavior without negotiated runtime signals', () => {
+    expect(resolveClientCreationActionPolicy({ surface: 'electron', runtimeStatus: null })).toEqual(
+      {
+        'managed-browser': { state: 'enabled', provider: 'local-client' },
+        'mobile-emulator': { state: 'enabled', provider: 'local-client' }
+      }
+    )
+  })
+
+  it('selects the provider that the browser action path can actually consume', () => {
+    const desktopHost = runtimeStatus(['browser.screencast.v1'])
+    const npmHostWithoutDisplay = { ...runtimeStatus(), hostPlatform: 'linux' as const }
+    const npmHostWithDisplay = {
+      ...runtimeStatus(['browser.screencast.v1', 'browser.headless.v1']),
+      hostPlatform: 'linux' as const
+    }
+
+    expect(
+      resolveClientCreationActionPolicy({ surface: 'electron', runtimeStatus: desktopHost })
+    ).toEqual({
+      'managed-browser': { state: 'enabled', provider: 'paired-runtime' },
+      'mobile-emulator': { state: 'enabled', provider: 'local-client' }
+    })
+    expect(
+      resolveClientCreationActionPolicy({
+        surface: 'electron',
+        runtimeStatus: npmHostWithoutDisplay
+      })
+    ).toEqual({
+      'managed-browser': { state: 'enabled', provider: 'local-client' },
+      'mobile-emulator': { state: 'enabled', provider: 'local-client' }
+    })
+    expect(
+      resolveClientCreationActionPolicy({ surface: 'paired-web', runtimeStatus: desktopHost })
+    ).toEqual({
+      'managed-browser': { state: 'enabled', provider: 'paired-runtime' },
+      'mobile-emulator': { state: 'hidden', reason: MOBILE_EMULATOR_UNAVAILABLE_MESSAGE }
+    })
+    expect(
+      resolveClientCreationActionPolicy({
+        surface: 'paired-web',
+        runtimeStatus: npmHostWithoutDisplay
+      })
+    ).toEqual({
+      'managed-browser': { state: 'hidden', reason: MANAGED_BROWSER_UNAVAILABLE_MESSAGE },
+      'mobile-emulator': { state: 'hidden', reason: MOBILE_EMULATOR_UNAVAILABLE_MESSAGE }
+    })
+    expect(
+      resolveClientCreationActionPolicy({
+        surface: 'paired-web',
+        runtimeStatus: npmHostWithDisplay
+      })['managed-browser']
+    ).toEqual({ state: 'enabled', provider: 'paired-runtime' })
+  })
+
+  it('enables paired-web browser creation only with negotiated streaming support', () => {
+    expect(
+      resolveClientCreationActionPolicy({
+        surface: 'paired-web',
+        runtimeStatus: runtimeStatus(['browser.screencast.v1'])
+      })['managed-browser']
+    ).toEqual({ state: 'enabled', provider: 'paired-runtime' })
+
+    expect(
+      resolveClientCreationActionPolicy({
+        surface: 'paired-web',
+        runtimeStatus: runtimeStatus()
+      })['managed-browser']
+    ).toEqual({ state: 'hidden', reason: MANAGED_BROWSER_UNAVAILABLE_MESSAGE })
+  })
+
+  it('hides web-client floating browsers and mobile emulators as impossible surfaces', () => {
+    const policy = resolveClientCreationActionPolicy({
+      surface: 'paired-web',
+      runtimeStatus: runtimeStatus(['browser.screencast.v1', 'mobile.tasks.v1']),
+      floatingWorkspace: true
+    })
+
+    expect(policy['managed-browser']).toEqual({
+      state: 'hidden',
+      reason: FLOATING_BROWSER_UNAVAILABLE_MESSAGE
+    })
+    expect(policy['mobile-emulator']).toEqual({
+      state: 'hidden',
+      reason: MOBILE_EMULATOR_UNAVAILABLE_MESSAGE
+    })
+  })
+})
+
+describe('client creation action guards', () => {
+  it('fails closed for an older paired runtime and rejects local browser materialization', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const state = {
+      settings: { activeRuntimeEnvironmentId: 'runtime-1' },
+      runtimeStatusByEnvironmentId: new Map([
+        ['runtime-1', { status: runtimeStatus(), checkedAt: 1 }]
+      ])
+    }
+
+    expect(getClientCreationActionPolicy(state as never, null)['managed-browser'].state).toBe(
+      'hidden'
+    )
+    expect(() =>
+      assertClientCreationActionAvailable(state as never, null, 'managed-browser')
+    ).toThrow(MANAGED_BROWSER_UNAVAILABLE_MESSAGE)
+    expect(() => assertManagedBrowserMaterializationAllowed(state as never, null)).toThrow(
+      LOCAL_BROWSER_UNAVAILABLE_MESSAGE
+    )
+  })
+
+  it('permits host-confirmed remote browser materialization in paired web', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const state = {
+      runtimeStatusByEnvironmentId: new Map([
+        ['runtime-1', { status: runtimeStatus(['browser.screencast.v1']), checkedAt: 1 }]
+      ])
+    }
+    expect(() =>
+      assertManagedBrowserMaterializationAllowed(state as never, 'runtime-1')
+    ).not.toThrow()
+  })
+
+  it('treats the floating workspace as local even with an active capable runtime', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const state = {
+      settings: { activeRuntimeEnvironmentId: 'runtime-1' },
+      runtimeStatusByEnvironmentId: new Map([
+        ['runtime-1', { status: runtimeStatus(['browser.screencast.v1']), checkedAt: 1 }]
+      ])
+    }
+
+    expect(
+      getClientCreationActionPolicy(state as never, FLOATING_TERMINAL_WORKTREE_ID)[
+        'managed-browser'
+      ]
+    ).toEqual({ state: 'hidden', reason: FLOATING_BROWSER_UNAVAILABLE_MESSAGE })
+  })
+
+  it('uses folder and SSH workspace ownership instead of the focused runtime', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const capableStatus = runtimeStatus(['browser.screencast.v1'])
+    const state = {
+      settings: { activeRuntimeEnvironmentId: 'focused-runtime' },
+      folderWorkspaces: [
+        {
+          id: 'remote-folder',
+          projectGroupId: 'remote-group',
+          executionHostId: toRuntimeExecutionHostId('folder-owner')
+        }
+      ],
+      projectGroups: [
+        { id: 'remote-group', executionHostId: toRuntimeExecutionHostId('folder-owner') }
+      ],
+      worktreesByRepo: {
+        repo: [
+          {
+            id: 'ssh-worktree',
+            repoId: 'repo',
+            hostId: toSshExecutionHostId('ssh-owner')
+          }
+        ]
+      },
+      runtimeStatusByEnvironmentId: new Map([
+        ['folder-owner', { status: capableStatus, checkedAt: 1 }],
+        ['focused-runtime', { status: capableStatus, checkedAt: 1 }]
+      ])
+    }
+
+    expect(
+      getClientCreationActionPolicy(state as never, folderWorkspaceKey('remote-folder'))[
+        'managed-browser'
+      ]
+    ).toEqual({ state: 'enabled', provider: 'paired-runtime' })
+    expect(
+      getClientCreationActionPolicy(state as never, 'ssh-worktree')['managed-browser']
+    ).toEqual({ state: 'hidden', reason: MANAGED_BROWSER_UNAVAILABLE_MESSAGE })
+  })
+})
diff --git a/src/renderer/src/lib/client-creation-action-policy.ts b/src/renderer/src/lib/client-creation-action-policy.ts
new file mode 100644
index 00000000000..4f4b5388590
--- /dev/null
+++ b/src/renderer/src/lib/client-creation-action-policy.ts
@@ -0,0 +1,116 @@
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
+import { BROWSER_SCREENCAST_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import type { RuntimeStatus } from '../../../shared/runtime-types'
+import type { AppState } from '@/store/types'
+import { isPairedWebClientWindow } from './desktop-window-chrome'
+import { getRuntimeEnvironmentIdForWorktree } from './worktree-runtime-owner'
+
+export const MANAGED_BROWSER_UNAVAILABLE_MESSAGE =
+  "Managed browser tabs are unavailable because this web client's paired runtime does not support browser streaming."
+export const RUNTIME_BROWSER_UNAVAILABLE_MESSAGE =
+  'Managed browser tabs are unavailable because the paired runtime does not support browser streaming.'
+export const FLOATING_BROWSER_UNAVAILABLE_MESSAGE =
+  'Managed browser tabs are unavailable in the web client floating workspace.'
+export const LOCAL_BROWSER_UNAVAILABLE_MESSAGE =
+  'Managed browser tabs in the web client must be created by a capable paired runtime.'
+export const MOBILE_EMULATOR_UNAVAILABLE_MESSAGE =
+  'Mobile Emulator is unavailable in the web client.'
+
+export type ClientCreationAction = 'managed-browser' | 'mobile-emulator'
+export type ClientCreationActionProvider = 'local-client' | 'paired-runtime'
+
+export type ClientCreationActionAvailability =
+  | { state: 'enabled'; provider: ClientCreationActionProvider }
+  | { state: 'hidden'; reason: string }
+
+export type ClientCreationActionPolicy = Record<
+  ClientCreationAction,
+  ClientCreationActionAvailability
+>
+
+export function resolveClientCreationActionPolicy(args: {
+  surface: 'electron' | 'paired-web'
+  runtimeStatus: Pick<RuntimeStatus, 'capabilities' | 'hostPlatform'> | null
+  floatingWorkspace?: boolean
+}): ClientCreationActionPolicy {
+  const browserStreamingAvailable = args.runtimeStatus?.capabilities?.includes(
+    BROWSER_SCREENCAST_RUNTIME_CAPABILITY
+  )
+
+  if (args.surface === 'electron') {
+    return {
+      'managed-browser': {
+        state: 'enabled',
+        provider: browserStreamingAvailable ? 'paired-runtime' : 'local-client'
+      },
+      'mobile-emulator': { state: 'enabled', provider: 'local-client' }
+    }
+  }
+
+  return {
+    'managed-browser': args.floatingWorkspace
+      ? { state: 'hidden', reason: FLOATING_BROWSER_UNAVAILABLE_MESSAGE }
+      : browserStreamingAvailable
+        ? { state: 'enabled', provider: 'paired-runtime' }
+        : { state: 'hidden', reason: MANAGED_BROWSER_UNAVAILABLE_MESSAGE },
+    // The web preload cannot stream emulator frames, even when the host can run emulator tasks.
+    'mobile-emulator': { state: 'hidden', reason: MOBILE_EMULATOR_UNAVAILABLE_MESSAGE }
+  }
+}
+
+export function getClientCreationActionPolicy(
+  state: AppState,
+  worktreeId: string | null
+): ClientCreationActionPolicy {
+  const floatingWorkspace = worktreeId === FLOATING_TERMINAL_WORKTREE_ID
+  const runtimeEnvironmentId = floatingWorkspace
+    ? null
+    : worktreeId
+      ? getRuntimeEnvironmentIdForWorktree(state, worktreeId)
+      : (state.settings?.activeRuntimeEnvironmentId?.trim() ?? null)
+  const runtimeStatus = runtimeEnvironmentId
+    ? (state.runtimeStatusByEnvironmentId?.get(runtimeEnvironmentId)?.status ?? null)
+    : null
+
+  return resolveClientCreationActionPolicy({
+    surface: isPairedWebClientWindow() ? 'paired-web' : 'electron',
+    runtimeStatus,
+    floatingWorkspace
+  })
+}
+
+export function assertClientCreationActionAvailable(
+  state: AppState,
+  worktreeId: string | null,
+  action: ClientCreationAction
+): void {
+  const availability = getClientCreationActionPolicy(state, worktreeId)[action]
+  if (availability.state !== 'enabled') {
+    throw new Error(availability.reason)
+  }
+}
+
+export function assertRuntimeManagedBrowserCreationAvailable(
+  state: AppState,
+  runtimeEnvironmentId: string
+): void {
+  const capabilities =
+    state.runtimeStatusByEnvironmentId?.get(runtimeEnvironmentId)?.status?.capabilities
+  if (!capabilities?.includes(BROWSER_SCREENCAST_RUNTIME_CAPABILITY)) {
+    throw new Error(RUNTIME_BROWSER_UNAVAILABLE_MESSAGE)
+  }
+}
+
+export function assertManagedBrowserMaterializationAllowed(
+  state: AppState,
+  browserRuntimeEnvironmentId: string | null | undefined
+): void {
+  if (!isPairedWebClientWindow()) {
+    return
+  }
+  const runtimeEnvironmentId = browserRuntimeEnvironmentId?.trim()
+  if (!runtimeEnvironmentId) {
+    throw new Error(LOCAL_BROWSER_UNAVAILABLE_MESSAGE)
+  }
+  assertRuntimeManagedBrowserCreationAvailable(state, runtimeEnvironmentId)
+}
diff --git a/src/renderer/src/lib/client-login-shell.ts b/src/renderer/src/lib/client-login-shell.ts
new file mode 100644
index 00000000000..b0e0cca1fb8
--- /dev/null
+++ b/src/renderer/src/lib/client-login-shell.ts
@@ -0,0 +1,15 @@
+/**
+ * Login shell (`$SHELL`) of the machine running this client, or '' when
+ * unknown (web build, preload unavailable).
+ *
+ * Why: commands Orca hands the user to paste — or types into a locally
+ * spawned pane — are parsed by that shell, and fish does not share the sh
+ * grammar for every construct.
+ */
+export function getClientLoginShell(): string {
+  try {
+    return window.api?.platform?.get?.().shell ?? ''
+  } catch {
+    return ''
+  }
+}
diff --git a/src/renderer/src/lib/cmd-j-github-url-lookup.test.ts b/src/renderer/src/lib/cmd-j-github-url-lookup.test.ts
new file mode 100644
index 00000000000..82b533c859d
--- /dev/null
+++ b/src/renderer/src/lib/cmd-j-github-url-lookup.test.ts
@@ -0,0 +1,73 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { GitHubWorkItem } from '../../../shared/types'
+
+const { lookupGitHubWorkItemByOwnerRepoForSource } = vi.hoisted(() => ({
+  lookupGitHubWorkItemByOwnerRepoForSource: vi.fn()
+}))
+
+vi.mock('./github-work-item-source-lookup', () => ({
+  lookupGitHubWorkItemByOwnerRepoForSource
+}))
+
+import { lookupCmdJGitHubUrlWorkItem } from './cmd-j-github-url-lookup'
+
+const item = {
+  id: 'issue-14198',
+  type: 'issue',
+  number: 14198,
+  title: 'Agent terminals disappearing randomly',
+  state: 'open',
+  url: 'https://github.com/stablyai/orca/issues/14198',
+  labels: [],
+  updatedAt: '2026-08-12T12:00:00.000Z',
+  author: 'nwparker',
+  repoId: 'repo-1'
+} satisfies GitHubWorkItem
+
+describe('lookupCmdJGitHubUrlWorkItem', () => {
+  beforeEach(() => {
+    lookupGitHubWorkItemByOwnerRepoForSource.mockReset()
+  })
+
+  it('looks up by owner/repo and returns null without a repo or on failure', async () => {
+    const link = {
+      slug: { owner: 'stablyai', repo: 'orca', host: 'github.com' },
+      type: 'issue' as const,
+      number: 14198
+    }
+    expect(
+      await lookupCmdJGitHubUrlWorkItem({
+        link,
+        repo: null,
+        sourceContext: null
+      })
+    ).toBeNull()
+
+    lookupGitHubWorkItemByOwnerRepoForSource.mockResolvedValue(item)
+    expect(
+      await lookupCmdJGitHubUrlWorkItem({
+        link,
+        repo: { id: 'repo-1', path: '/repos/repo-1' },
+        sourceContext: null
+      })
+    ).toEqual(item)
+    expect(lookupGitHubWorkItemByOwnerRepoForSource).toHaveBeenCalledWith(
+      expect.objectContaining({
+        owner: 'stablyai',
+        repo: 'orca',
+        host: 'github.com',
+        number: 14198,
+        type: 'issue'
+      })
+    )
+
+    lookupGitHubWorkItemByOwnerRepoForSource.mockRejectedValue(new Error('offline'))
+    expect(
+      await lookupCmdJGitHubUrlWorkItem({
+        link,
+        repo: { id: 'repo-1', path: '/repos/repo-1' },
+        sourceContext: null
+      })
+    ).toBeNull()
+  })
+})
diff --git a/src/renderer/src/lib/cmd-j-github-url-lookup.ts b/src/renderer/src/lib/cmd-j-github-url-lookup.ts
new file mode 100644
index 00000000000..bbc7b0e3f10
--- /dev/null
+++ b/src/renderer/src/lib/cmd-j-github-url-lookup.ts
@@ -0,0 +1,28 @@
+import type { GitHubIssueOrPRLink } from '../../../shared/github-links'
+import type { GitHubWorkItem, Repo } from '../../../shared/types'
+import type { TaskSourceContext } from '../../../shared/task-source-context'
+import { lookupGitHubWorkItemByOwnerRepoForSource } from './github-work-item-source-lookup'
+
+export async function lookupCmdJGitHubUrlWorkItem(args: {
+  link: GitHubIssueOrPRLink
+  repo: Pick<Repo, 'id' | 'path'> | null
+  sourceContext: TaskSourceContext | null
+}): Promise<GitHubWorkItem | null> {
+  if (!args.repo) {
+    return null
+  }
+  try {
+    return await lookupGitHubWorkItemByOwnerRepoForSource({
+      repoPath: args.repo.path,
+      repoId: args.repo.id,
+      sourceContext: args.sourceContext,
+      owner: args.link.slug.owner,
+      repo: args.link.slug.repo,
+      ...(args.link.slug.host ? { host: args.link.slug.host } : {}),
+      number: args.link.number,
+      type: args.link.type
+    })
+  } catch {
+    return null
+  }
+}
diff --git a/src/renderer/src/lib/cmd-j-linear-issue-intent.test.ts b/src/renderer/src/lib/cmd-j-linear-issue-intent.test.ts
new file mode 100644
index 00000000000..124294f5e4f
--- /dev/null
+++ b/src/renderer/src/lib/cmd-j-linear-issue-intent.test.ts
@@ -0,0 +1,112 @@
+import { describe, expect, it } from 'vitest'
+import {
+  findLinearIssueWorkspaceId,
+  findLinearIssueWorkspaceLookupIds,
+  isLinearIssueUrlResolutionMatch,
+  parseLinearIssueUrlIntent
+} from '../../../shared/linear-links'
+
+describe('Cmd+J Linear issue intent', () => {
+  it('accepts canonical Linear issue URLs with optional slugs', () => {
+    expect(
+      parseLinearIssueUrlIntent(
+        'https://linear.app/stably/issue/STA-4052/agent-terminals-disappearing-randomly'
+      )
+    ).toEqual({ identifier: 'STA-4052', organizationUrlKey: 'stably' })
+    expect(
+      parseLinearIssueUrlIntent(
+        ' https://linear.app/stably/issue/sta-4084/restore-shell-integration '
+      )
+    ).toEqual({ identifier: 'STA-4084', organizationUrlKey: 'stably' })
+    expect(parseLinearIssueUrlIntent('http://linear.app/acme/issue/ENG-1')).toEqual({
+      identifier: 'ENG-1',
+      organizationUrlKey: 'acme'
+    })
+  })
+
+  it('does not classify names, bare issue keys, or ambiguous URLs as decisive intent', () => {
+    expect(parseLinearIssueUrlIntent('restore-shell-integration')).toBeNull()
+    expect(parseLinearIssueUrlIntent('STA-4084')).toBeNull()
+    expect(parseLinearIssueUrlIntent('https://linear.app/stably/team/STA/all')).toBeNull()
+    expect(
+      parseLinearIssueUrlIntent('https://linear.app.evil.test/stably/issue/STA-4084')
+    ).toBeNull()
+    expect(parseLinearIssueUrlIntent('https://linear.app/foo/bar/issue/STA-4084')).toBeNull()
+    expect(
+      parseLinearIssueUrlIntent('https://linear.app/stably/issue/STA-4084/title/activity')
+    ).toBeNull()
+    expect(
+      parseLinearIssueUrlIntent('https://linear.app/stably/issue/STA-4084%2Fnot-the-identifier')
+    ).toBeNull()
+    expect(
+      parseLinearIssueUrlIntent('https://user@linear.app/stably/issue/STA-4084/title')
+    ).toBeNull()
+  })
+
+  it('targets the workspace named by the URL before falling back to all workspaces', () => {
+    const intent = { identifier: 'STA-4084', organizationUrlKey: 'stably' }
+    const workspaces = [
+      { id: 'workspace-other', organizationUrlKey: 'other' },
+      { id: 'workspace-stably', organizationUrlKey: 'Stably' }
+    ]
+
+    expect(findLinearIssueWorkspaceId(intent, workspaces)).toBe('workspace-stably')
+    expect(findLinearIssueWorkspaceId(intent, workspaces.slice(0, 1))).toBeNull()
+    expect(findLinearIssueWorkspaceId(intent, undefined)).toBeNull()
+  })
+
+  it('includes legacy workspaces that omitted their organization URL key', () => {
+    const intent = { identifier: 'STA-4052', organizationUrlKey: 'stably' }
+
+    expect(
+      findLinearIssueWorkspaceLookupIds(intent, {
+        viewer: {
+          displayName: 'Linear User',
+          email: null,
+          organizationName: 'Saved Linear workspace'
+        },
+        activeWorkspaceId: 'legacy',
+        selectedWorkspaceId: 'legacy',
+        workspaces: [{ id: 'legacy' } as never]
+      })
+    ).toEqual(['legacy'])
+    expect(
+      findLinearIssueWorkspaceLookupIds(intent, {
+        viewer: null,
+        workspaces: [{ id: 'other-workspace', organizationUrlKey: 'other' } as never]
+      })
+    ).toEqual([])
+  })
+
+  it('rejects a lookup from a different identifier or known Linear organization', () => {
+    const intent = { identifier: 'STA-4084', organizationUrlKey: 'stably' }
+
+    expect(
+      isLinearIssueUrlResolutionMatch(intent, {
+        identifier: 'STA-4084',
+        url: 'https://linear.app/stably/issue/STA-4084/title'
+      })
+    ).toBe(true)
+    expect(
+      isLinearIssueUrlResolutionMatch(intent, {
+        identifier: 'STA-9999',
+        url: 'https://linear.app/stably/issue/STA-9999/title'
+      })
+    ).toBe(false)
+    expect(
+      isLinearIssueUrlResolutionMatch(intent, {
+        identifier: 'STA-4084',
+        url: 'https://linear.app/other/issue/STA-4084/title'
+      })
+    ).toBe(false)
+  })
+
+  it('rejects a matching identifier when the result URL has no usable organization key', () => {
+    expect(
+      isLinearIssueUrlResolutionMatch(
+        { identifier: 'STA-4084', organizationUrlKey: 'stably' },
+        { identifier: 'STA-4084', url: 'https://linear.example.test/STA-4084' }
+      )
+    ).toBe(false)
+  })
+})
diff --git a/src/renderer/src/lib/crash-diagnostics.ts b/src/renderer/src/lib/crash-diagnostics.ts
index 95c9bfe213c..78d1daa76c6 100644
--- a/src/renderer/src/lib/crash-diagnostics.ts
+++ b/src/renderer/src/lib/crash-diagnostics.ts
@@ -74,7 +74,7 @@ function disposeRendererCrashDiagnostics(): void {
   rendererSurface = 'main'
 }
 
-if (typeof import.meta !== 'undefined' && import.meta.hot) {
+if (import.meta !== undefined && import.meta.hot) {
   // Why: Vite can replace this module without a full renderer reload. Remove
   // global diagnostics hooks so dev sessions do not accumulate listeners.
   import.meta.hot.dispose(disposeRendererCrashDiagnostics)
diff --git a/src/renderer/src/lib/explicit-file-link-target.ts b/src/renderer/src/lib/explicit-file-link-target.ts
index 912119a9f70..c6188ca7518 100644
--- a/src/renderer/src/lib/explicit-file-link-target.ts
+++ b/src/renderer/src/lib/explicit-file-link-target.ts
@@ -1,14 +1,14 @@
+import {
+  parseFileLinkLocation,
+  type ParsedFileLinkLocation
+} from '../../../shared/file-link-location'
 import {
   joinAbsolutePath,
   normalizeAbsolutePath,
   resolveTildePath
 } from './terminal-path-normalization'
 
-export type ParsedExplicitFileLinkTarget = {
-  pathText: string
-  line: number | null
-  column: number | null
-}
+export type ParsedExplicitFileLinkTarget = ParsedFileLinkLocation
 
 export type ResolvedExplicitFileLinkTarget = Pick<
   ParsedExplicitFileLinkTarget,
@@ -34,15 +34,12 @@ export function parseExplicitFileLinkTarget(
   value: string,
   options: ParseExplicitFileLinkTargetOptions = {}
 ): ParsedExplicitFileLinkTarget | null {
-  const match = /^(.*?)(?::(\d+))?(?::(\d+))?$/.exec(value)
-  if (!match) {
-    return null
-  }
-  const pathText = match[1]
-  const hasLineOrColumn = Boolean(match[2] || match[3])
-  if (!pathText) {
+  const parsed = parseFileLinkLocation(value)
+  if (!parsed) {
     return null
   }
+  const { pathText, line, column } = parsed
+  const hasLineOrColumn = line !== null || column !== null
   if (/^[\\/]\s/.test(pathText)) {
     return null
   }
@@ -53,12 +50,6 @@ export function parseExplicitFileLinkTarget(
     }
   }
 
-  const line = match[2] ? Number.parseInt(match[2], 10) : null
-  const column = match[3] ? Number.parseInt(match[3], 10) : null
-  if ((line !== null && line < 1) || (column !== null && column < 1)) {
-    return null
-  }
-
   return { pathText, line, column }
 }
 
diff --git a/src/renderer/src/lib/feature-education-telemetry.ts b/src/renderer/src/lib/feature-education-telemetry.ts
index 29c07200267..d66fd213722 100644
--- a/src/renderer/src/lib/feature-education-telemetry.ts
+++ b/src/renderer/src/lib/feature-education-telemetry.ts
@@ -133,7 +133,7 @@ export function trackTerminalPaneSplit(args: {
 }
 
 export function readEmittedSetupGuideStepIds(): Set<FeatureWallSetupStepId> {
-  if (typeof globalThis.localStorage === 'undefined') {
+  if (globalThis.localStorage === undefined) {
     return new Set()
   }
   try {
@@ -150,7 +150,7 @@ export function readEmittedSetupGuideStepIds(): Set<FeatureWallSetupStepId> {
 }
 
 export function persistEmittedSetupGuideStepId(id: FeatureWallSetupStepId): void {
-  if (typeof globalThis.localStorage === 'undefined') {
+  if (globalThis.localStorage === undefined) {
     return
   }
   try {
@@ -170,7 +170,7 @@ export function reserveTerminalPaneSplitTelemetry(
   source: TerminalPaneSplitSource,
   direction: 'vertical' | 'horizontal'
 ): boolean {
-  if (typeof globalThis.localStorage === 'undefined') {
+  if (globalThis.localStorage === undefined) {
     return true
   }
   try {
diff --git a/src/renderer/src/lib/file-preview-capability-cleanup.test.ts b/src/renderer/src/lib/file-preview-capability-cleanup.test.ts
new file mode 100644
index 00000000000..1136dd16985
--- /dev/null
+++ b/src/renderer/src/lib/file-preview-capability-cleanup.test.ts
@@ -0,0 +1,91 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { openFilePreviewToSide } from './file-preview'
+
+const mocks = vi.hoisted(() => ({
+  availability: {
+    state: 'enabled' as const,
+    provider: 'paired-runtime' as const
+  } as { state: 'enabled'; provider: 'paired-runtime' } | { state: 'hidden'; reason: string },
+  closeEmptyGroup: vi.fn(),
+  createBrowserTab: vi.fn(),
+  createEmptySplitGroup: vi.fn(() => 'preview-group'),
+  createWebRuntimeSessionBrowserTab: vi.fn(),
+  toastError: vi.fn()
+}))
+
+vi.mock('sonner', () => ({ toast: { error: mocks.toastError } }))
+
+vi.mock('@/lib/client-creation-action-policy', () => ({
+  getClientCreationActionPolicy: () => ({ 'managed-browser': mocks.availability })
+}))
+
+vi.mock('@/lib/connection-context', () => ({
+  getConnectionId: () => null,
+  getConnectionIdForFile: () => null
+}))
+
+vi.mock('@/lib/connection-owner-resolution', () => ({
+  getConnectionIdForFileFromState: () => null
+}))
+
+vi.mock('@/lib/worktree-runtime-owner', () => ({
+  getRuntimeEnvironmentIdForWorktree: () => 'runtime-1'
+}))
+
+vi.mock('@/runtime/web-runtime-session', () => ({
+  createWebRuntimeSessionBrowserTab: mocks.createWebRuntimeSessionBrowserTab
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: {
+    getState: () => ({
+      closeEmptyGroup: mocks.closeEmptyGroup,
+      createBrowserTab: mocks.createBrowserTab,
+      createEmptySplitGroup: mocks.createEmptySplitGroup,
+      groupsByWorktree: {},
+      layoutByWorktree: {},
+      repos: [{ id: 'repo-1', connectionId: null }],
+      worktreesByRepo: { 'repo-1': [{ id: 'wt-1', repoId: 'repo-1' }] }
+    })
+  }
+}))
+
+describe('paired HTML side-preview capability cleanup', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.availability = { state: 'enabled', provider: 'paired-runtime' }
+    mocks.createWebRuntimeSessionBrowserTab.mockRejectedValue(new Error('capability changed'))
+  })
+
+  it('reports capability loss after preflight and removes the new split', async () => {
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'source-group'
+    })
+
+    await vi.waitFor(() =>
+      expect(mocks.toastError).toHaveBeenCalledWith('Unable to open this file in Orca Browser.')
+    )
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('reports known unavailability without creating a split', () => {
+    mocks.availability = { state: 'hidden', reason: 'streaming unavailable' }
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'source-group'
+    })
+
+    expect(mocks.toastError).toHaveBeenCalledWith('streaming unavailable')
+    expect(mocks.createEmptySplitGroup).not.toHaveBeenCalled()
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+    expect(mocks.createWebRuntimeSessionBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/lib/file-preview.test.ts b/src/renderer/src/lib/file-preview.test.ts
index bea6e40a3be..8196e5b4e05 100644
--- a/src/renderer/src/lib/file-preview.test.ts
+++ b/src/renderer/src/lib/file-preview.test.ts
@@ -1,19 +1,59 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import {
   REMOTE_FILE_BROWSER_UNSUPPORTED_MESSAGE,
+  canShowWorkspaceFileBrowserAction,
   getWorkspaceFileBrowserOpenTarget,
-  openFileInBrowserTab
+  openFileInBrowserTab,
+  openFilePreviewToSide
 } from './file-preview'
+import { folderWorkspaceKey } from '../../../shared/workspace-scope'
+
+function browserActionState(connectionId: string | null = null): never {
+  return {
+    repos: [{ id: 'repo-1', connectionId }],
+    worktreesByRepo: { 'repo-1': [{ id: 'wt-1', repoId: 'repo-1' }] }
+  } as never
+}
 
 const mocks = vi.hoisted(() => ({
+  browserAvailability: {
+    state: 'enabled' as const,
+    provider: 'local-client' as 'local-client' | 'paired-runtime'
+  } as
+    | { state: 'enabled'; provider: 'local-client' | 'paired-runtime' }
+    | { state: 'hidden'; reason: string },
+  closeEmptyGroup: vi.fn(),
   createBrowserTab: vi.fn(),
-  connectionId: null as string | null
+  createEmptySplitGroup: vi.fn(() => 'group-2'),
+  createWebRuntimeSessionBrowserTab: vi.fn(),
+  environmentId: null as string | null,
+  connectionId: null as string | null,
+  layoutByWorktree: {} as Record<string, unknown>,
+  toastError: vi.fn()
+}))
+
+vi.mock('sonner', () => ({ toast: { error: mocks.toastError } }))
+
+vi.mock('@/lib/client-creation-action-policy', () => ({
+  getClientCreationActionPolicy: () => ({ 'managed-browser': mocks.browserAvailability })
+}))
+
+vi.mock('@/lib/worktree-runtime-owner', () => ({
+  getRuntimeEnvironmentIdForWorktree: () => mocks.environmentId
+}))
+
+vi.mock('@/runtime/web-runtime-session', () => ({
+  createWebRuntimeSessionBrowserTab: mocks.createWebRuntimeSessionBrowserTab
 }))
 
 vi.mock('@/store', () => ({
   useAppStore: {
     getState: () => ({
+      closeEmptyGroup: mocks.closeEmptyGroup,
       createBrowserTab: mocks.createBrowserTab,
+      createEmptySplitGroup: mocks.createEmptySplitGroup,
+      groupsByWorktree: {},
+      layoutByWorktree: mocks.layoutByWorktree,
       repos: [{ id: 'repo-1', connectionId: mocks.connectionId }],
       worktreesByRepo: {
         'repo-1': [{ id: 'wt-1', repoId: 'repo-1' }]
@@ -24,7 +64,11 @@ vi.mock('@/store', () => ({
 
 beforeEach(() => {
   vi.clearAllMocks()
+  mocks.createWebRuntimeSessionBrowserTab.mockResolvedValue(true)
+  mocks.browserAvailability = { state: 'enabled', provider: 'local-client' }
+  mocks.environmentId = null
   mocks.connectionId = null
+  mocks.layoutByWorktree = {}
 })
 
 describe('openFileInBrowserTab', () => {
@@ -40,6 +84,171 @@ describe('openFileInBrowserTab', () => {
     })
   })
 
+  it('creates paired-runtime file browsers at the owning host', () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'enabled', provider: 'paired-runtime' }
+
+    openFileInBrowserTab({ filePath: '/srv/repo/example.html', worktreeId: 'wt-1' })
+
+    expect(mocks.createWebRuntimeSessionBrowserTab).toHaveBeenCalledWith({
+      worktreeId: 'wt-1',
+      environmentId: 'runtime-1',
+      url: 'file:///srv/repo/example.html',
+      stagedTitle: 'example.html',
+      stagedFocusAddressBar: false
+    })
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('creates paired-runtime side previews in the requested split', () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'enabled', provider: 'paired-runtime' }
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    })
+
+    expect(mocks.createWebRuntimeSessionBrowserTab).toHaveBeenCalledWith({
+      worktreeId: 'wt-1',
+      environmentId: 'runtime-1',
+      url: 'file:///srv/repo/example.html',
+      clientTargetGroupId: 'group-2',
+      clientTargetGroupCreated: true,
+      focusOnCreate: false,
+      stagedTitle: 'example.html',
+      stagedFocusAddressBar: false
+    })
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('reports a paired-runtime recovery failure without an unhandled rejection', async () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'enabled', provider: 'paired-runtime' }
+    mocks.createWebRuntimeSessionBrowserTab.mockRejectedValue(new Error('cleanup unknown'))
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    })
+
+    await vi.waitFor(() =>
+      expect(mocks.toastError).toHaveBeenCalledWith('Unable to open this file in Orca Browser.')
+    )
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not delete a split owned by an overlapping paired preview', async () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'enabled', provider: 'paired-runtime' }
+    mocks.createEmptySplitGroup.mockImplementationOnce(() => {
+      mocks.layoutByWorktree = {
+        'wt-1': {
+          type: 'split',
+          direction: 'horizontal',
+          first: { type: 'leaf', groupId: 'group-1' },
+          second: { type: 'leaf', groupId: 'group-2' }
+        }
+      }
+      return 'group-2'
+    })
+    let rejectFirst!: (error: Error) => void
+    let resolveSecond!: (created: boolean) => void
+    mocks.createWebRuntimeSessionBrowserTab
+      .mockReturnValueOnce(
+        new Promise<boolean>((_resolve, reject) => {
+          rejectFirst = reject
+        })
+      )
+      .mockReturnValueOnce(
+        new Promise<boolean>((resolve) => {
+          resolveSecond = resolve
+        })
+      )
+
+    const preview = {
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    }
+    openFilePreviewToSide(preview)
+    openFilePreviewToSide(preview)
+    expect(mocks.createWebRuntimeSessionBrowserTab).toHaveBeenNthCalledWith(
+      1,
+      expect.objectContaining({
+        clientTargetGroupId: 'group-2',
+        clientTargetGroupCreated: true
+      })
+    )
+    rejectFirst(new Error('first preview failed'))
+
+    await vi.waitFor(() => expect(mocks.toastError).toHaveBeenCalledOnce())
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+    expect(mocks.createWebRuntimeSessionBrowserTab).toHaveBeenNthCalledWith(
+      2,
+      expect.objectContaining({
+        clientTargetGroupId: 'group-2',
+        clientTargetGroupCreated: false
+      })
+    )
+
+    resolveSecond(true)
+    await vi.waitFor(() => expect(mocks.toastError).toHaveBeenCalledOnce())
+  })
+
+  it('does not send a runtime-owned file path to the Electron browser provider', () => {
+    mocks.environmentId = 'runtime-1'
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    })
+
+    expect(mocks.toastError).toHaveBeenCalledWith('Unable to open this file in Orca Browser.')
+    expect(mocks.createEmptySplitGroup).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.createWebRuntimeSessionBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('rejects unavailable paired-web previews before creating a split', () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'hidden', reason: 'streaming unavailable' }
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/srv/repo/example.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    })
+
+    expect(mocks.toastError).toHaveBeenCalledWith('streaming unavailable')
+    expect(mocks.createEmptySplitGroup).not.toHaveBeenCalled()
+    expect(mocks.createWebRuntimeSessionBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not create a side split for unsupported SSH previews', () => {
+    mocks.connectionId = 'ssh-1'
+
+    openFilePreviewToSide({
+      language: 'html',
+      filePath: '/home/alice/report.html',
+      worktreeId: 'wt-1',
+      sourceGroupId: 'group-1'
+    })
+
+    expect(mocks.toastError).toHaveBeenCalledWith(REMOTE_FILE_BROWSER_UNSUPPORTED_MESSAGE)
+    expect(mocks.createEmptySplitGroup).not.toHaveBeenCalled()
+  })
+
   it('returns unsupported for SSH worktrees without creating a local file URL tab', () => {
     mocks.connectionId = 'ssh-1'
 
@@ -57,6 +266,71 @@ describe('openFileInBrowserTab', () => {
   })
 })
 
+describe('canShowWorkspaceFileBrowserAction', () => {
+  it('hides incapable paired providers and permits capable runtime providers', () => {
+    mocks.environmentId = 'runtime-1'
+    mocks.browserAvailability = { state: 'hidden', reason: 'streaming unavailable' }
+    expect(
+      canShowWorkspaceFileBrowserAction(browserActionState(), 'wt-1', '/repo/report.html')
+    ).toBe(false)
+
+    mocks.browserAvailability = { state: 'enabled', provider: 'paired-runtime' }
+    expect(
+      canShowWorkspaceFileBrowserAction(browserActionState(), 'wt-1', '/repo/report.html')
+    ).toBe(true)
+    expect(
+      canShowWorkspaceFileBrowserAction(browserActionState('ssh-1'), 'wt-1', '/repo/report.html')
+    ).toBe(false)
+  })
+
+  it('permits local files but hides SSH paths from the local browser provider', () => {
+    expect(
+      canShowWorkspaceFileBrowserAction(browserActionState(), 'wt-1', '/repo/report.html')
+    ).toBe(true)
+    expect(
+      canShowWorkspaceFileBrowserAction(browserActionState('ssh-1'), 'wt-1', '/repo/report.html')
+    ).toBe(false)
+  })
+
+  it('resolves local and SSH files independently in a mixed folder workspace', () => {
+    const workspaceId = folderWorkspaceKey('folder-1')
+    const state = {
+      folderWorkspaces: [
+        {
+          id: 'folder-1',
+          projectGroupId: 'group-1',
+          folderPath: '/workspace'
+        }
+      ],
+      projectGroups: [{ id: 'group-1', parentGroupId: null }],
+      repos: [
+        {
+          id: 'repo-local',
+          path: '/workspace/local',
+          projectGroupId: 'group-1'
+        },
+        {
+          id: 'repo-ssh',
+          path: '/workspace/remote',
+          projectGroupId: 'group-1',
+          connectionId: 'ssh-1'
+        }
+      ],
+      worktreesByRepo: {}
+    } as never
+
+    expect(
+      canShowWorkspaceFileBrowserAction(state, workspaceId, '/workspace/local/report.html')
+    ).toBe(true)
+    expect(
+      canShowWorkspaceFileBrowserAction(state, workspaceId, '/workspace/remote/report.html')
+    ).toBe(false)
+    expect(
+      canShowWorkspaceFileBrowserAction(state, workspaceId, '/workspace/unknown/report.html')
+    ).toBe(false)
+  })
+})
+
 describe('getWorkspaceFileBrowserOpenTarget', () => {
   it('returns a reusable browser navigation target for local files', () => {
     expect(
diff --git a/src/renderer/src/lib/file-preview.ts b/src/renderer/src/lib/file-preview.ts
index fc23d680ad1..7f50873e3a8 100644
--- a/src/renderer/src/lib/file-preview.ts
+++ b/src/renderer/src/lib/file-preview.ts
@@ -1,12 +1,79 @@
 import { toast } from 'sonner'
 import { absolutePathToFileUri } from '@/components/editor/markdown-internal-links'
-import { getConnectionId } from '@/lib/connection-context'
+import { getClientCreationActionPolicy } from '@/lib/client-creation-action-policy'
+import { useCallback } from 'react'
+import { useShallow } from 'zustand/react/shallow'
+import { getConnectionIdForFile } from '@/lib/connection-context'
+import { getConnectionIdForFileFromState } from '@/lib/connection-owner-resolution'
+import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
+import { createWebRuntimeSessionBrowserTab } from '@/runtime/web-runtime-session'
 import { useAppStore } from '@/store'
+import type { AppState } from '@/store/types'
 import { findSiblingGroupId } from '@/store/slices/tabs'
 
 export type PreviewableLanguage = 'html'
 export const REMOTE_FILE_BROWSER_UNSUPPORTED_MESSAGE =
   'Open in Orca Browser is only available for local files.'
+const FILE_BROWSER_OPEN_FAILED_MESSAGE = 'Unable to open this file in Orca Browser.'
+
+type WorkspaceFileBrowserActionMode = 'local-client' | 'paired-runtime' | null
+
+function getWorkspaceFileBrowserActionMode(
+  state: AppState,
+  worktreeId: string
+): WorkspaceFileBrowserActionMode {
+  const availability = getClientCreationActionPolicy(state, worktreeId)['managed-browser']
+  if (availability.state !== 'enabled') {
+    return null
+  }
+  const environmentId = getRuntimeEnvironmentIdForWorktree(state, worktreeId)
+  return environmentId
+    ? availability.provider === 'paired-runtime'
+      ? 'paired-runtime'
+      : null
+    : 'local-client'
+}
+
+export function canShowWorkspaceFileBrowserAction(
+  state: AppState,
+  worktreeId: string,
+  filePath: string
+): boolean {
+  const mode = getWorkspaceFileBrowserActionMode(state, worktreeId)
+  return mode !== null && getConnectionIdForFileFromState(state, worktreeId, filePath) === null
+}
+
+export function useWorkspaceFileBrowserActionPredicate(
+  worktreeId: string | null
+): (filePath: string) => boolean {
+  const inputs = useAppStore(
+    useShallow((state) => ({
+      mode: worktreeId ? getWorkspaceFileBrowserActionMode(state, worktreeId) : null,
+      folderWorkspaces: state.folderWorkspaces,
+      projectGroups: state.projectGroups,
+      repos: state.repos,
+      worktreesByRepo: state.worktreesByRepo
+    }))
+  )
+  return useCallback(
+    (filePath: string) =>
+      inputs.mode !== null &&
+      getConnectionIdForFileFromState(inputs, worktreeId, filePath) === null,
+    [inputs, worktreeId]
+  )
+}
+
+function reportRemoteFileBrowserOpen(result: Promise<boolean>): void {
+  void result
+    .then((created) => {
+      if (!created) {
+        toast.error(FILE_BROWSER_OPEN_FAILED_MESSAGE)
+      }
+    })
+    .catch(() => {
+      toast.error(FILE_BROWSER_OPEN_FAILED_MESSAGE)
+    })
+}
 
 export type WorkspaceFileBrowserOpenTarget =
   | {
@@ -24,7 +91,7 @@ export function getWorkspaceFileBrowserOpenTarget(params: {
   filePath: string
   worktreeId: string
 }): WorkspaceFileBrowserOpenTarget {
-  if (getConnectionId(params.worktreeId)) {
+  if (getConnectionIdForFile(params.worktreeId, params.filePath) !== null) {
     // Why: Chromium resolves file:// URLs on the local machine. Remote files
     // need an Orca-served URL before the browser can render them correctly.
     return {
@@ -51,6 +118,30 @@ export function openFileInBrowserTab(params: {
   }
 
   const state = useAppStore.getState()
+  const browserAvailability = getClientCreationActionPolicy(state, params.worktreeId)[
+    'managed-browser'
+  ]
+  if (browserAvailability.state !== 'enabled') {
+    toast.error(browserAvailability.reason)
+    return target
+  }
+  const environmentId = getRuntimeEnvironmentIdForWorktree(state, params.worktreeId)
+  if (environmentId) {
+    if (browserAvailability.provider !== 'paired-runtime') {
+      toast.error(FILE_BROWSER_OPEN_FAILED_MESSAGE)
+      return target
+    }
+    reportRemoteFileBrowserOpen(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: params.worktreeId,
+        environmentId,
+        url: target.url,
+        stagedTitle: target.title,
+        stagedFocusAddressBar: false
+      })
+    )
+    return target
+  }
 
   state.createBrowserTab(params.worktreeId, target.url, {
     title: target.title,
@@ -79,6 +170,24 @@ export function openFilePreviewToSide(params: {
 
   const state = useAppStore.getState()
   const worktreeId = params.worktreeId
+  const target = getWorkspaceFileBrowserOpenTarget({
+    filePath: params.filePath,
+    worktreeId
+  })
+  if (target.status === 'unsupported') {
+    toast.error(target.message)
+    return
+  }
+  const browserAvailability = getClientCreationActionPolicy(state, worktreeId)['managed-browser']
+  if (browserAvailability.state !== 'enabled') {
+    toast.error(browserAvailability.reason)
+    return
+  }
+  const environmentId = getRuntimeEnvironmentIdForWorktree(state, worktreeId)
+  if (environmentId && browserAvailability.provider !== 'paired-runtime') {
+    toast.error(FILE_BROWSER_OPEN_FAILED_MESSAGE)
+    return
+  }
 
   // Resolve the group this action originated from. Prefer the caller-supplied
   // id (the tab's own group under split-pane layouts), fall back to the
@@ -105,12 +214,19 @@ export function openFilePreviewToSide(params: {
     return
   }
 
-  const target = getWorkspaceFileBrowserOpenTarget({
-    filePath: params.filePath,
-    worktreeId
-  })
-  if (target.status === 'unsupported') {
-    toast.error(target.message)
+  if (environmentId) {
+    reportRemoteFileBrowserOpen(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId,
+        environmentId,
+        url: target.url,
+        clientTargetGroupId: targetGroupId,
+        clientTargetGroupCreated: !existingSibling,
+        focusOnCreate: false,
+        stagedTitle: target.title,
+        stagedFocusAddressBar: false
+      })
+    )
     return
   }
 
diff --git a/src/renderer/src/lib/floating-workspace-tab-creation.ts b/src/renderer/src/lib/floating-workspace-tab-creation.ts
index d9b6e51b69b..58a22ad9320 100644
--- a/src/renderer/src/lib/floating-workspace-tab-creation.ts
+++ b/src/renderer/src/lib/floating-workspace-tab-creation.ts
@@ -6,6 +6,7 @@ import { detectLanguage } from './language-detect'
 import type { AppState } from '@/store/types'
 import { focusTerminalTabSurface } from './focus-terminal-tab-surface'
 import { translate } from '@/i18n/i18n'
+import { assertClientCreationActionAvailable } from './client-creation-action-policy'
 
 type FloatingWorkspaceTerminalStore = Pick<
   AppState,
@@ -38,6 +39,11 @@ export async function createFloatingWorkspaceTerminalTab(
 export async function createFloatingWorkspaceBrowserTab(
   store: FloatingWorkspaceBrowserStore
 ): Promise<BrowserTab | null> {
+  assertClientCreationActionAvailable(
+    store as AppState,
+    FLOATING_TERMINAL_WORKTREE_ID,
+    'managed-browser'
+  )
   const targetGroupId = store.activeGroupIdByWorktree[FLOATING_TERMINAL_WORKTREE_ID]
   const url = store.browserDefaultUrl ?? 'about:blank'
 
diff --git a/src/renderer/src/lib/folder-workspace-runtime-owner.ts b/src/renderer/src/lib/folder-workspace-runtime-owner.ts
index 4bf99a1b780..fce08c49302 100644
--- a/src/renderer/src/lib/folder-workspace-runtime-owner.ts
+++ b/src/renderer/src/lib/folder-workspace-runtime-owner.ts
@@ -16,7 +16,7 @@ type RuntimeExecutionHost = Extract<ParsedExecutionHost, { kind: 'runtime' }>
 export type FolderWorkspaceRuntimeOwnerState = SingleRuntimeLegacyOwnerState & {
   folderWorkspaces?: readonly Pick<
     FolderWorkspace,
-    'id' | 'projectGroupId' | 'connectionId' | 'executionHostId'
+    'id' | 'projectGroupId' | 'connectionId' | 'executionHostId' | 'diffComments'
   >[]
   projectGroups?: readonly Pick<ProjectGroup, 'id' | 'connectionId' | 'executionHostId'>[]
   restoredRuntimeHostIdByWorkspaceSessionKey?: Record<string, ExecutionHostId>
@@ -41,7 +41,10 @@ export function findFolderWorkspaceOwner(
   state: FolderWorkspaceRuntimeOwnerState,
   folderWorkspaceId: string,
   executionHostId?: ExecutionHostId
-): Pick<FolderWorkspace, 'id' | 'projectGroupId' | 'connectionId' | 'executionHostId'> | null {
+): Pick<
+  FolderWorkspace,
+  'id' | 'projectGroupId' | 'connectionId' | 'executionHostId' | 'diffComments'
+> | null {
   return findIndexedFolderWorkspaceOwner(
     state.folderWorkspaces,
     folderWorkspaceId,
diff --git a/src/renderer/src/lib/http-link-modifier-routing.test.ts b/src/renderer/src/lib/http-link-modifier-routing.test.ts
index c7da95ae4c2..fb3be988a4f 100644
--- a/src/renderer/src/lib/http-link-modifier-routing.test.ts
+++ b/src/renderer/src/lib/http-link-modifier-routing.test.ts
@@ -2,6 +2,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import {
   openHttpLink,
   registerHttpLinkStoreAccessor,
+  registerRuntimeHttpLinkBrowserOpener,
   resolveModifierRouting
 } from './http-link-routing'
 
@@ -58,6 +59,7 @@ describe('modifier routing across link source owners', () => {
   const openUrlMock = vi.fn()
   const setActiveWorktreeMock = vi.fn()
   const createBrowserTabMock = vi.fn()
+  const openRuntimeBrowserTabMock = vi.fn(() => Promise.resolve())
   const storeState = {
     settings: {} as {
       openLinksInApp?: boolean
@@ -71,10 +73,12 @@ describe('modifier routing across link source owners', () => {
   beforeEach(() => {
     vi.clearAllMocks()
     registerHttpLinkStoreAccessor(() => storeState)
+    registerRuntimeHttpLinkBrowserOpener(openRuntimeBrowserTabMock)
     vi.stubGlobal('window', { api: { shell: { openUrl: openUrlMock } } })
   })
 
   afterEach(() => {
+    registerRuntimeHttpLinkBrowserOpener(null)
     vi.unstubAllGlobals()
   })
 
@@ -92,23 +96,40 @@ describe('modifier routing across link source owners', () => {
     })
   })
 
-  it('never lets a modifier pull a runtime-owned link into Orca', () => {
-    for (const inverts of [true, false]) {
-      vi.clearAllMocks()
-      storeState.settings = {
-        openLinksInApp: false,
-        openLinksInAppModifierInverts: inverts,
-        activeRuntimeEnvironmentId: null
-      }
-
-      openHttpLink('https://example.com/', {
-        worktreeId: 'wt-1',
-        modifierHeld: true,
-        sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
-      })
-
-      expect(openUrlMock).toHaveBeenCalledWith('https://example.com/')
-      expect(createBrowserTabMock).not.toHaveBeenCalled()
+  it('lets an inverting modifier reach Orca on the owning runtime', () => {
+    storeState.settings = {
+      openLinksInApp: false,
+      openLinksInAppModifierInverts: true,
+      activeRuntimeEnvironmentId: null
     }
+
+    openHttpLink('https://example.com/', {
+      allowRuntimeInApp: true,
+      worktreeId: 'wt-1',
+      modifierHeld: true,
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
+    })
+
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith(
+      expect.objectContaining({ expectedRuntimeEnvironmentId: 'env-1' })
+    )
+    expect(openUrlMock).not.toHaveBeenCalled()
+  })
+
+  it('keeps the legacy modifier on the system browser when inversion is off', () => {
+    storeState.settings = {
+      openLinksInApp: false,
+      openLinksInAppModifierInverts: false,
+      activeRuntimeEnvironmentId: null
+    }
+
+    openHttpLink('https://example.com/', {
+      worktreeId: 'wt-1',
+      modifierHeld: true,
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
+    })
+
+    expect(openUrlMock).toHaveBeenCalledWith('https://example.com/')
+    expect(openRuntimeBrowserTabMock).not.toHaveBeenCalled()
   })
 })
diff --git a/src/renderer/src/lib/http-link-routing.test.ts b/src/renderer/src/lib/http-link-routing.test.ts
index 64991900a25..1be44f90732 100644
--- a/src/renderer/src/lib/http-link-routing.test.ts
+++ b/src/renderer/src/lib/http-link-routing.test.ts
@@ -4,13 +4,19 @@ import type { WorkspacePortScanResult } from '../../../shared/workspace-ports'
 import {
   openHttpLink,
   registerHttpLinkStoreAccessor,
+  registerRuntimeHttpLinkBrowserOpener,
   resolveLocalhostHttpLinkDisplayUrl
 } from './http-link-routing'
 
+const toastErrorMock = vi.hoisted(() => vi.fn())
+
+vi.mock('sonner', () => ({ toast: { error: toastErrorMock } }))
+
 const openUrlMock = vi.fn()
 const registerLocalhostLabelMock = vi.fn()
 const setActiveWorktreeMock = vi.fn()
 const createBrowserTabMock = vi.fn()
+const openRuntimeBrowserTabMock = vi.fn(() => Promise.resolve())
 
 const storeState = {
   settings: undefined as
@@ -42,6 +48,7 @@ beforeEach(() => {
   storeState.settings = undefined
   storeState.workspacePortScansByKey = {}
   registerHttpLinkStoreAccessor(() => storeState)
+  registerRuntimeHttpLinkBrowserOpener(openRuntimeBrowserTabMock)
   vi.stubGlobal('window', {
     api: {
       shell: {
@@ -55,6 +62,7 @@ beforeEach(() => {
 })
 
 afterEach(() => {
+  registerRuntimeHttpLinkBrowserOpener(null)
   vi.unstubAllGlobals()
 })
 
@@ -155,10 +163,11 @@ describe('openHttpLink', () => {
     expect(openUrlMock).not.toHaveBeenCalled()
   })
 
-  it('routes explicit runtime and SSH document owners to the exact system URL', () => {
+  it('routes runtime and SSH document owners to their distinct destinations', () => {
     storeState.settings = { openLinksInApp: true, localhostWorktreeLabelsEnabled: true }
 
     openHttpLink('http://localhost:5180/runtime', {
+      allowRuntimeInApp: true,
       worktreeId: 'wt-1',
       sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
     })
@@ -167,25 +176,75 @@ describe('openHttpLink', () => {
       sourceOwner: { kind: 'ssh', connectionId: 'ssh-1' }
     })
 
-    expect(openUrlMock).toHaveBeenNthCalledWith(1, 'http://localhost:5180/runtime')
-    expect(openUrlMock).toHaveBeenNthCalledWith(2, 'http://localhost:5180/ssh')
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith({
+      workspaceId: 'wt-1',
+      url: 'http://localhost:5180/runtime',
+      intent: { kind: 'url' },
+      expectedRuntimeEnvironmentId: 'env-1'
+    })
+    expect(openUrlMock).toHaveBeenCalledWith('http://localhost:5180/ssh')
     expect(createBrowserTabMock).not.toHaveBeenCalled()
     expect(registerLocalhostLabelMock).not.toHaveBeenCalled()
   })
 
   // Why: runtimes bind per workspace, so activeRuntimeEnvironmentId is commonly
   // null while a pane is remote — ownership must come from the click source.
-  it('keeps a runtime-owned link out of Orca when no runtime is globally active', () => {
+  it('uses the pane runtime owner when no runtime is globally active', () => {
     storeState.settings = { openLinksInApp: true, activeRuntimeEnvironmentId: null }
 
+    openHttpLink('https://example.com/', {
+      allowRuntimeInApp: true,
+      worktreeId: 'wt-1',
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
+    })
+
+    expect(openRuntimeBrowserTabMock).toHaveBeenCalledWith(
+      expect.objectContaining({ expectedRuntimeEnvironmentId: 'env-1' })
+    )
+    expect(openUrlMock).not.toHaveBeenCalled()
+    expect(createBrowserTabMock).not.toHaveBeenCalled()
+    expect(setActiveWorktreeMock).not.toHaveBeenCalled()
+  })
+
+  it('fails closed instead of falling back to the client system browser', async () => {
+    storeState.settings = { openLinksInApp: true }
+    openRuntimeBrowserTabMock.mockRejectedValueOnce(new Error('runtime unavailable'))
+
+    openHttpLink('https://example.com/', {
+      allowRuntimeInApp: true,
+      worktreeId: 'wt-1',
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
+    })
+
+    await vi.waitFor(() => expect(openRuntimeBrowserTabMock).toHaveBeenCalledOnce())
+    expect(openUrlMock).not.toHaveBeenCalled()
+    expect(createBrowserTabMock).not.toHaveBeenCalled()
+    expect(toastErrorMock).toHaveBeenCalledWith('runtime unavailable')
+  })
+
+  it('keeps an explicit runtime system-browser action on the viewing client', () => {
+    storeState.settings = { openLinksInApp: true }
+
+    openHttpLink('https://example.com/', {
+      worktreeId: 'wt-1',
+      forceSystemBrowser: true,
+      sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
+    })
+
+    expect(openUrlMock).toHaveBeenCalledWith('https://example.com/')
+    expect(openRuntimeBrowserTabMock).not.toHaveBeenCalled()
+  })
+
+  it('keeps generic runtime-owned document links in the system browser', () => {
+    storeState.settings = { openLinksInApp: true }
+
     openHttpLink('https://example.com/', {
       worktreeId: 'wt-1',
       sourceOwner: { kind: 'runtime', runtimeEnvironmentId: 'env-1' }
     })
 
     expect(openUrlMock).toHaveBeenCalledWith('https://example.com/')
-    expect(createBrowserTabMock).not.toHaveBeenCalled()
-    expect(setActiveWorktreeMock).not.toHaveBeenCalled()
+    expect(openRuntimeBrowserTabMock).not.toHaveBeenCalled()
   })
 
   it('labels explicit local links from the local scan instead of a merged remote port', async () => {
diff --git a/src/renderer/src/lib/http-link-routing.ts b/src/renderer/src/lib/http-link-routing.ts
index 0f010f05348..3295183d504 100644
--- a/src/renderer/src/lib/http-link-routing.ts
+++ b/src/renderer/src/lib/http-link-routing.ts
@@ -1,3 +1,4 @@
+import { translate } from '@/i18n/i18n'
 import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 import {
   parseLoopbackUrlWithPort,
@@ -5,9 +6,12 @@ import {
 } from '../../../shared/localhost-worktree-labels'
 import type { GlobalSettings } from '../../../shared/types'
 import type { WorkspacePort, WorkspacePortScanResult } from '../../../shared/workspace-ports'
+import { toast } from 'sonner'
 
 export type OpenHttpLinkOptions = {
   worktreeId?: string | null
+  /** Terminal-only opt-in for routing a runtime-owned source through its managed browser. */
+  allowRuntimeInApp?: boolean
   /** Unconditional: always use the system browser regardless of settings. */
   forceSystemBrowser?: boolean
   /** Unconditional for local sources: open inside Orca regardless of settings. */
@@ -36,13 +40,22 @@ type StoreAccessor = () => {
   setActiveWorktree: (worktreeId: string) => void
   createBrowserTab: (worktreeId: string, url: string, opts: { activate: boolean }) => unknown
   repos?: readonly LocalhostLinkRepo[]
-  projects?: LocalhostLinkProject[]
+  projects?: readonly LocalhostLinkProject[]
   worktreesByRepo?: Record<string, LocalhostLinkWorktree[]>
   allWorktrees?: () => LocalhostLinkWorktree[]
   workspacePortScan?: { result: WorkspacePortScanResult } | null
   workspacePortScansByKey?: Record<string, WorkspacePortScanResult>
 }
 
+type RuntimeHttpLinkBrowserRequest = {
+  workspaceId: string
+  url: string
+  intent: { kind: 'url' }
+  expectedRuntimeEnvironmentId: string
+}
+
+type RuntimeHttpLinkBrowserOpener = (request: RuntimeHttpLinkBrowserRequest) => Promise<void>
+
 type LocalhostLinkRepo = {
   id: string
   displayName: string
@@ -61,11 +74,18 @@ type LocalhostLinkWorktree = {
 // the break, several renderer test files that load this module first see
 // `createEditorSlice` as undefined at store/index.ts initialization.
 let storeAccessor: StoreAccessor | null = null
+let runtimeHttpLinkBrowserOpener: RuntimeHttpLinkBrowserOpener | null = null
 
 export function registerHttpLinkStoreAccessor(fn: StoreAccessor): void {
   storeAccessor = fn
 }
 
+export function registerRuntimeHttpLinkBrowserOpener(
+  fn: RuntimeHttpLinkBrowserOpener | null
+): void {
+  runtimeHttpLinkBrowserOpener = fn
+}
+
 // Scope: http(s) URLs only. file: URIs and in-worktree markdown targets are
 // owned by resolveMarkdownLinkTarget and must stay on that path — this helper
 // is only invoked on target.kind === 'external' (and for the terminal's http
@@ -93,7 +113,14 @@ export function resolveModifierRouting(
 }
 
 export function openHttpLink(url: string, opts: OpenHttpLinkOptions = {}): void {
-  const { worktreeId, forceSystemBrowser, forceInApp, modifierHeld, sourceOwner } = opts
+  const {
+    worktreeId,
+    allowRuntimeInApp,
+    forceSystemBrowser,
+    forceInApp,
+    modifierHeld,
+    sourceOwner
+  } = opts
   if (sourceOwner?.kind === 'unknown') {
     return
   }
@@ -106,14 +133,31 @@ export function openHttpLink(url: string, opts: OpenHttpLinkOptions = {}): void
     openLinksInApp,
     state?.settings?.openLinksInAppModifierInverts === true
   )
-  const routeToOrca =
-    sourceIsLocal &&
+  const wantsOrca =
     !forceSystemBrowser &&
     !modifier.wantsSystemBrowser &&
     Boolean(worktreeId) &&
     (forceInApp || openLinksInApp || modifier.wantsOrca)
 
-  if (routeToOrca && worktreeId && state) {
+  if (wantsOrca && allowRuntimeInApp && worktreeId && sourceOwner?.kind === 'runtime') {
+    if (runtimeHttpLinkBrowserOpener) {
+      void runtimeHttpLinkBrowserOpener({
+        workspaceId: worktreeId,
+        url,
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: sourceOwner.runtimeEnvironmentId
+      }).catch((error) => {
+        toast.error(
+          error instanceof Error
+            ? error.message
+            : translate('auto.lib.workspace.browser.tab.open.urlFailed', 'Unable to open URL.')
+        )
+      })
+    }
+    return
+  }
+
+  if (wantsOrca && sourceIsLocal && worktreeId && state) {
     // Why: http clicks from inside a worktree should not push a worktree-switch
     // history entry — the user isn't changing worktrees, they're opening a tab
     // in the one they're already in. activateAndRevealWorktree is reserved for
diff --git a/src/renderer/src/lib/launch-agent-background-session-remote.test.ts b/src/renderer/src/lib/launch-agent-background-session-remote.test.ts
index 6cf8e9b717d..4066f67522f 100644
--- a/src/renderer/src/lib/launch-agent-background-session-remote.test.ts
+++ b/src/renderer/src/lib/launch-agent-background-session-remote.test.ts
@@ -378,6 +378,8 @@ describe('launchAgentBackgroundSession remote runtime and SSH startup delivery',
     )
     expect(mockRuntimeEnvironmentCall).toHaveBeenCalledWith({
       selector: 'env-1',
+      expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'remote-runtime',
       method: 'terminal.createAgentSession',
       params: expect.objectContaining({
         clientOperationId: expect.stringMatching(/^\d{13}-[0-9a-f]{32}$/),
@@ -420,7 +422,7 @@ describe('launchAgentBackgroundSession remote runtime and SSH startup delivery',
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: []
+            capabilities: ['terminal.attribution-removed.v1']
           }
         })
       }
@@ -442,6 +444,7 @@ describe('launchAgentBackgroundSession remote runtime and SSH startup delivery',
 
     expect(mockRuntimeEnvironmentTransportCall).toHaveBeenCalledWith(
       expect.objectContaining({
+        expectedRuntimeId: 'old-runtime',
         method: 'terminal.create',
         params: expect.objectContaining({
           worktree: 'id:wt-1',
diff --git a/src/renderer/src/lib/launch-agent-in-new-tab.test.ts b/src/renderer/src/lib/launch-agent-in-new-tab.test.ts
index 38fb4f1d566..8515379d418 100644
--- a/src/renderer/src/lib/launch-agent-in-new-tab.test.ts
+++ b/src/renderer/src/lib/launch-agent-in-new-tab.test.ts
@@ -1,5 +1,6 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { toAppSshPtyId } from '../../../shared/ssh-pty-id'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 
 const mockCreateTab = vi.fn()
 const mockQueueTabStartupCommand = vi.fn()
@@ -185,6 +186,32 @@ describe('launchAgentInNewTab', () => {
     })
   })
 
+  it('keeps Floating Workspace authority on native Windows beside an active WSL project', async () => {
+    store.projects = [
+      {
+        id: 'repo-1',
+        localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' }
+      }
+    ]
+    const { launchAgentInNewTab } = await import('./launch-agent-in-new-tab')
+
+    const result = launchAgentInNewTab({
+      agent: 'codex',
+      worktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+      launchPlatform: 'win32'
+    })
+
+    expect(result).not.toBeNull()
+    expect(mockIsWebRuntimeSessionActive).toHaveBeenLastCalledWith(null)
+    expect(mockCreateWebRuntimeSessionTerminal).not.toHaveBeenCalled()
+    expect(mockCreateTab).toHaveBeenCalledWith(
+      FLOATING_TERMINAL_WORKTREE_ID,
+      undefined,
+      undefined,
+      { launchAgent: 'codex' }
+    )
+  })
+
   it('opens supported submit-after-ready launches in chat and seeds a launch prompt echo', async () => {
     store.settings = {
       agentCmdOverrides: {},
diff --git a/src/renderer/src/lib/linear-issue-url-lookup.test.ts b/src/renderer/src/lib/linear-issue-url-lookup.test.ts
new file mode 100644
index 00000000000..28bc918caed
--- /dev/null
+++ b/src/renderer/src/lib/linear-issue-url-lookup.test.ts
@@ -0,0 +1,148 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { LinearConnectionStatus, LinearIssue } from '../../../shared/types'
+import { lookupLinearIssueUrl } from './linear-issue-url-lookup'
+
+const intent = { identifier: 'STA-4084', organizationUrlKey: 'stably' }
+
+function issue(organizationUrlKey = 'stably'): LinearIssue {
+  return {
+    id: `${organizationUrlKey}-issue`,
+    workspaceId: `${organizationUrlKey}-workspace`,
+    workspaceName: organizationUrlKey,
+    identifier: 'STA-4084',
+    title: 'Restore shell integration',
+    url: `https://linear.app/${organizationUrlKey}/issue/STA-4084/restore-shell-integration`,
+    state: { name: 'Todo', type: 'unstarted', color: '#999999' },
+    team: { id: 'team-sta', name: 'Stably', key: 'STA' },
+    labels: [],
+    labelIds: [],
+    priority: 2,
+    updatedAt: '2026-08-12T00:00:00.000Z'
+  }
+}
+
+describe('Linear issue URL lookup', () => {
+  it('uses the known workspace named by the URL', async () => {
+    const fetchLinearIssue = vi.fn(async () => issue())
+    const readLinearStatus = vi.fn<() => Promise<LinearConnectionStatus>>()
+
+    await expect(
+      lookupLinearIssueUrl({
+        intent,
+        knownStatus: {
+          viewer: null,
+          workspaces: [{ id: 'stably-workspace', organizationUrlKey: 'stably' } as never]
+        },
+        sourceContext: null,
+        fetchLinearIssue,
+        readLinearStatus
+      })
+    ).resolves.toMatchObject({ identifier: 'STA-4084' })
+    expect(fetchLinearIssue).toHaveBeenCalledWith('STA-4084', 'stably-workspace', {
+      sourceContext: null
+    })
+    expect(readLinearStatus).not.toHaveBeenCalled()
+  })
+
+  it('refreshes status from the source owner when the known workspace is stale', async () => {
+    const fetchLinearIssue = vi.fn(async (_identifier: string, workspaceId?: string | null) =>
+      workspaceId === 'remote-stably-workspace' ? issue() : null
+    )
+
+    await expect(
+      lookupLinearIssueUrl({
+        intent,
+        knownStatus: {
+          viewer: null,
+          workspaces: [{ id: 'stale-workspace', organizationUrlKey: 'stably' } as never]
+        },
+        sourceContext: null,
+        fetchLinearIssue,
+        readLinearStatus: async () => ({
+          connected: true,
+          viewer: null,
+          workspaces: [
+            {
+              id: 'remote-stably-workspace',
+              organizationUrlKey: 'stably'
+            } as never
+          ]
+        })
+      })
+    ).resolves.toMatchObject({ workspaceId: 'stably-workspace' })
+    expect(fetchLinearIssue).toHaveBeenCalledTimes(2)
+  })
+
+  it('uses legacy viewer status when mixed versions omit the workspace list', async () => {
+    const fetchLinearIssue = vi.fn(async () => issue())
+
+    await expect(
+      lookupLinearIssueUrl({
+        intent,
+        knownStatus: {
+          viewer: {
+            displayName: 'Linear User',
+            email: null,
+            organizationName: 'Stably',
+            organizationUrlKey: 'stably'
+          },
+          activeWorkspaceId: 'legacy-workspace'
+        },
+        sourceContext: null,
+        fetchLinearIssue,
+        readLinearStatus: vi.fn()
+      })
+    ).resolves.toMatchObject({ identifier: 'STA-4084' })
+    expect(fetchLinearIssue).toHaveBeenCalledWith('STA-4084', 'legacy-workspace', {
+      sourceContext: null
+    })
+  })
+
+  it('probes a legacy workspace that omitted its organization URL key', async () => {
+    const fetchLinearIssue = vi.fn(async () => issue())
+
+    await expect(
+      lookupLinearIssueUrl({
+        intent,
+        knownStatus: {
+          viewer: {
+            displayName: 'Linear User',
+            email: null,
+            organizationName: 'Saved Linear workspace'
+          },
+          activeWorkspaceId: 'legacy',
+          selectedWorkspaceId: 'legacy',
+          workspaces: [{ id: 'legacy', organizationName: 'Saved Linear workspace' } as never]
+        },
+        sourceContext: null,
+        fetchLinearIssue,
+        readLinearStatus: vi.fn()
+      })
+    ).resolves.toMatchObject({ identifier: 'STA-4084' })
+    expect(fetchLinearIssue).toHaveBeenCalledWith('STA-4084', 'legacy', {
+      sourceContext: null
+    })
+  })
+
+  it('does not fall back to an all-workspaces lookup that can collide across organizations', async () => {
+    const fetchLinearIssue = vi.fn(async () => issue('other'))
+
+    await expect(
+      lookupLinearIssueUrl({
+        intent,
+        knownStatus: {
+          viewer: null,
+          workspaces: [{ id: 'other-workspace', organizationUrlKey: 'other' } as never]
+        },
+        sourceContext: null,
+        fetchLinearIssue,
+        readLinearStatus: async () => ({
+          connected: true,
+          viewer: null,
+          workspaces: [{ id: 'other-workspace', organizationUrlKey: 'other' } as never]
+        })
+      })
+    ).resolves.toBeNull()
+    expect(fetchLinearIssue).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/lib/linear-issue-url-lookup.ts b/src/renderer/src/lib/linear-issue-url-lookup.ts
new file mode 100644
index 00000000000..03e2a1d56f9
--- /dev/null
+++ b/src/renderer/src/lib/linear-issue-url-lookup.ts
@@ -0,0 +1,78 @@
+import { linearStatus } from '@/runtime/runtime-linear-client'
+import {
+  findLinearIssueWorkspaceLookupIds,
+  isLinearIssueUrlResolutionMatch,
+  type LinearIssueUrlIntent
+} from '../../../shared/linear-links'
+import type { LinearConnectionStatus, LinearIssue } from '../../../shared/types'
+import type { TaskSourceContext } from '../../../shared/task-source-context'
+
+type FetchLinearIssue = (
+  identifier: string,
+  workspaceId?: string | null,
+  options?: { sourceContext?: TaskSourceContext | null }
+) => Promise<LinearIssue | null>
+
+async function fetchMatchingLinearIssue(
+  intent: LinearIssueUrlIntent,
+  workspaceId: string,
+  sourceContext: TaskSourceContext | null,
+  fetchLinearIssue: FetchLinearIssue
+): Promise<LinearIssue | null> {
+  try {
+    const issue = await fetchLinearIssue(intent.identifier, workspaceId, { sourceContext })
+    return issue && isLinearIssueUrlResolutionMatch(intent, issue) ? issue : null
+  } catch {
+    return null
+  }
+}
+
+export async function lookupLinearIssueUrl({
+  intent,
+  knownStatus,
+  sourceContext,
+  fetchLinearIssue,
+  readLinearStatus = linearStatus
+}: {
+  intent: LinearIssueUrlIntent
+  knownStatus: Pick<
+    LinearConnectionStatus,
+    'workspaces' | 'viewer' | 'activeWorkspaceId' | 'selectedWorkspaceId'
+  >
+  sourceContext: TaskSourceContext | null
+  fetchLinearIssue: FetchLinearIssue
+  readLinearStatus?: (sourceContext: TaskSourceContext | null) => Promise<LinearConnectionStatus>
+}): Promise<LinearIssue | null> {
+  const triedWorkspaceIds = new Set<string>()
+  const lookupInStatus = async (
+    status: Pick<
+      LinearConnectionStatus,
+      'workspaces' | 'viewer' | 'activeWorkspaceId' | 'selectedWorkspaceId'
+    >
+  ): Promise<LinearIssue | null> => {
+    for (const workspaceId of findLinearIssueWorkspaceLookupIds(intent, status)) {
+      if (triedWorkspaceIds.has(workspaceId)) {
+        continue
+      }
+      triedWorkspaceIds.add(workspaceId)
+      const issue = await fetchMatchingLinearIssue(
+        intent,
+        workspaceId,
+        sourceContext,
+        fetchLinearIssue
+      )
+      if (issue) {
+        return issue
+      }
+    }
+    return null
+  }
+
+  const knownIssue = await lookupInStatus(knownStatus)
+  if (knownIssue) {
+    return knownIssue
+  }
+
+  const currentStatus = await readLinearStatus(sourceContext).catch(() => null)
+  return currentStatus ? lookupInStatus(currentStatus) : null
+}
diff --git a/src/renderer/src/lib/local-preflight-context.test.ts b/src/renderer/src/lib/local-preflight-context.test.ts
index 287376bb548..69d38f9ced6 100644
--- a/src/renderer/src/lib/local-preflight-context.test.ts
+++ b/src/renderer/src/lib/local-preflight-context.test.ts
@@ -1,4 +1,5 @@
 import { describe, expect, it } from 'vitest'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 import type { Repo, Worktree } from '../../../shared/types'
 import type { AppState } from '@/store/types'
 import {
@@ -474,6 +475,55 @@ describe('local preflight context', () => {
     })
   })
 
+  it('does not assign the active project runtime to the floating workspace', () => {
+    const state = {
+      ...makeState({ repoPath: 'C:\\Users\\alice\\repo', worktreePath: 'C:\\Users\\alice\\repo' }),
+      projects: [{ id: 'repo-1', localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' } }]
+    } as unknown as AppState
+
+    expect(
+      getLocalProjectExecutionRuntimeContext(state, FLOATING_TERMINAL_WORKTREE_ID, 'win32')
+    ).toBeUndefined()
+  })
+
+  it('keeps Floating on the host despite global and explicit WSL agent settings', () => {
+    const state = {
+      ...makeState({ repoPath: 'C:\\Users\\alice\\repo' }),
+      settings: {
+        terminalWindowsShell: 'wsl.exe',
+        terminalWindowsWslDistro: 'Debian',
+        localWindowsRuntimeDefault: { kind: 'wsl', distro: 'Debian' },
+        localAgentRuntime: 'wsl',
+        localAgentWslDistro: 'Ubuntu'
+      }
+    } as AppState
+
+    expect(
+      getLocalAgentPreflightContext(state, 'win32', {}, FLOATING_TERMINAL_WORKTREE_ID)
+    ).toBeUndefined()
+  })
+
+  it('keeps the active project runtime fallback for a detected-only worktree', () => {
+    const state = {
+      ...makeState({ repoPath: 'C:\\Users\\alice\\repo' }),
+      detectedWorktreesByRepo: {
+        'repo-1': {
+          repoId: 'repo-1',
+          authoritative: true,
+          source: 'git',
+          worktrees: [{ id: 'repo-1::detected', repoId: 'repo-1', path: 'C:\\detected' }]
+        }
+      },
+      projects: [{ id: 'repo-1', localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' } }]
+    } as unknown as AppState
+
+    expect(
+      getLocalProjectExecutionRuntimeContext(state, 'repo-1::detected', 'win32')
+    ).toMatchObject({
+      runtime: { kind: 'wsl', distro: 'Ubuntu', projectId: 'repo-1' }
+    })
+  })
+
   it('resolves WSL UNC worktrees to their owning distro when the project inherits host default', () => {
     const state = makeState({
       repoPath: 'C:\\Users\\alice\\repo',
diff --git a/src/renderer/src/lib/local-preflight-context.ts b/src/renderer/src/lib/local-preflight-context.ts
index ddabde956e5..28da8a3d5bd 100644
--- a/src/renderer/src/lib/local-preflight-context.ts
+++ b/src/renderer/src/lib/local-preflight-context.ts
@@ -1,4 +1,5 @@
 import type { AppState } from '@/store/types'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
 import { parseWslUncPath } from '../../../shared/wsl-paths'
 import {
   deriveGlobalWindowsRuntimeDefaultFromLegacySettings,
@@ -39,10 +40,12 @@ type LocalProjectRuntimeWslContext = {
   availableWslDistros?: readonly string[] | null
 }
 
+/** Extracts a WSL distribution name from supported UNC path forms. */
 export function getWslDistroFromPath(path?: string | null): string | null {
   return path ? (parseWslUncPath(path)?.distro ?? null) : null
 }
 
+/** Resolves the owning local project's Windows runtime for project-scoped targets. */
 export function getLocalProjectExecutionRuntimeContext(
   state: LocalProjectRuntimeState,
   worktreeId?: string | null,
@@ -53,6 +56,9 @@ export function getLocalProjectExecutionRuntimeContext(
     return undefined
   }
 
+  if (worktreeId === FLOATING_TERMINAL_WORKTREE_ID) {
+    return undefined
+  }
   const worktree = getLocalWorktree(state, worktreeId)
   const repo = getLocalRuntimeRepoForWorktree(state, worktree)
   if (!isLocalRuntimeRepo(repo) || !isLocalRuntimeWorktree(worktree)) {
@@ -163,6 +169,10 @@ export function getLocalAgentPreflightContext(
   wslContext: LocalProjectRuntimeWslContext = getCachedLocalProjectRuntimeWslContext(),
   worktreeId?: string | null
 ): LocalPreflightContext {
+  // Why: Floating owns native host authority and must not inherit any agent runtime fallback.
+  if (worktreeId === FLOATING_TERMINAL_WORKTREE_ID) {
+    return undefined
+  }
   const projectRuntime = getLocalProjectExecutionRuntimeContext(
     state,
     worktreeId,
diff --git a/src/renderer/src/lib/markdown-document-templates.ts b/src/renderer/src/lib/markdown-document-templates.ts
index 1fadcd2613f..60414d481f0 100644
--- a/src/renderer/src/lib/markdown-document-templates.ts
+++ b/src/renderer/src/lib/markdown-document-templates.ts
@@ -126,7 +126,7 @@ export function applyMarkdownTemplatePlaceholders(
   }
 
   return content.replace(/\{\{\s*([a-zA-Z][a-zA-Z0-9_-]*)\s*\}\}/g, (match, key: string) => {
-    return Object.prototype.hasOwnProperty.call(replacements, key) ? replacements[key] : match
+    return Object.hasOwn(replacements, key) ? replacements[key] : match
   })
 }
 
diff --git a/src/renderer/src/lib/native-chat-telemetry.ts b/src/renderer/src/lib/native-chat-telemetry.ts
index 0d6f96584d2..1299204b6db 100644
--- a/src/renderer/src/lib/native-chat-telemetry.ts
+++ b/src/renderer/src/lib/native-chat-telemetry.ts
@@ -15,7 +15,7 @@ import type { TuiAgent } from '../../../shared/types'
  *  the broader `AgentType` string carried by the chat view. Narrowing to the
  *  closed `agent_kind` enum (with an `'other'` fallback) happens here so call
  *  sites never need an unsound `as TuiAgent` cast. */
-export type NativeChatTelemetryAgent = TuiAgent | string | null | undefined
+export type NativeChatTelemetryAgent = TuiAgent | (string & {}) | null | undefined
 
 // `launchAgent` is optional on terminal tabs (plain shells, manually-started
 // agents) and the chat view's `AgentType` may carry a string outside the
diff --git a/src/renderer/src/lib/notes-send-agent-targets.test.ts b/src/renderer/src/lib/notes-send-agent-targets.test.ts
index e7b4178df2b..0b24234c3bf 100644
--- a/src/renderer/src/lib/notes-send-agent-targets.test.ts
+++ b/src/renderer/src/lib/notes-send-agent-targets.test.ts
@@ -653,4 +653,51 @@ describe('notes send agent targets', () => {
       })
     ])
   })
+
+  // Why: OpenCode publishes `OC | <session>` and no status word, so a hookless
+  // OpenCode pane used to be invisible in the send menu no matter how live it was.
+  it('lists a manual OpenCode pane by its native session title', () => {
+    const targets = deriveNotesSendAgentTargets(
+      state({
+        tabsByWorktree: { [WORKTREE_ID]: [tab(MANUAL_TAB_ID, { title: 'Terminal 2' })] },
+        terminalLayoutsByTabId: { [MANUAL_TAB_ID]: leafLayout(LEAF_B, 'pty-b') },
+        runtimePaneTitlesByTabId: { [MANUAL_TAB_ID]: { 1: 'OC | Ad hoc build' } }
+      }),
+      WORKTREE_ID,
+      NOW
+    )
+
+    expect(targets).toEqual([
+      {
+        paneKey: makePaneKey(MANUAL_TAB_ID, LEAF_B),
+        tabId: MANUAL_TAB_ID,
+        leafId: LEAF_B,
+        agentType: 'opencode',
+        tabTitle: 'Terminal 2',
+        status: 'eligible'
+      }
+    ])
+  })
+
+  it('promotes a stale OpenCode status row from the native title hint', () => {
+    const paneKey = makePaneKey(LAUNCH_TAB_ID, LEAF_A)
+    const targets = deriveNotesSendAgentTargets(
+      state({
+        agentStatusByPaneKey: {
+          [paneKey]: entry(paneKey, 'done', OLD_STATUS_UPDATED_AT, { agentType: 'opencode' })
+        },
+        tabsByWorktree: {
+          [WORKTREE_ID]: [tab(LAUNCH_TAB_ID, { title: 'Terminal 1', launchAgent: 'opencode' })]
+        },
+        terminalLayoutsByTabId: { [LAUNCH_TAB_ID]: leafLayout(LEAF_A, 'pty-a') },
+        runtimePaneTitlesByTabId: { [LAUNCH_TAB_ID]: { 1: 'OC | Ad hoc build' } }
+      }),
+      WORKTREE_ID,
+      NOW
+    )
+
+    expect(targets).toEqual([
+      expect.objectContaining({ paneKey, agentType: 'opencode', status: 'eligible' })
+    ])
+  })
 })
diff --git a/src/renderer/src/lib/notes-send-agent-targets.ts b/src/renderer/src/lib/notes-send-agent-targets.ts
index 163907d99fc..3c2f6d412c4 100644
--- a/src/renderer/src/lib/notes-send-agent-targets.ts
+++ b/src/renderer/src/lib/notes-send-agent-targets.ts
@@ -59,10 +59,8 @@ function detectTitleHintPaneEvidence(
  * CLIs do not have that owner bit, so their runtime title is the only pre-hook
  * signal available.
  *
- * The title hint is gated on a recognized agent title (pane or tab) — the same
- * signal isTerminalRunningAgent checks — so a freshly spawned tab is only listed
- * once the runtime would actually accept the send. Without that gate, clicking a
- * still-booting pane fails with "not a recognized agent session".
+ * The title hint gates discoverability only. The runtime independently checks
+ * current hook/process evidence before any guarded write.
  */
 export function deriveNotesSendAgentTargets(
   state: NotesSendAgentTargetState,
@@ -129,9 +127,8 @@ function deriveTitleHintAgentTarget(
   const paneTitleResolution = resolveRuntimePaneTitleLeafResolution(layout, paneTitles, leafId)
   const titleEvidence = detectTitleHintPaneEvidence(paneTitleResolution, tab.title)
   if (!titleEvidence) {
-    // Why: launchAgent is set the instant Orca spawns the tab, but the runtime
-    // only accepts a send once the pane reads as an agent; manually started
-    // CLIs need the same title proof before appearing in the send menu.
+    // Why: launch metadata predates TUI identity; require a matching current title
+    // before listing either launched or manually started panes.
     return null
   }
   const disabledReason =
diff --git a/src/renderer/src/lib/open-mobile-emulator-tab.test.ts b/src/renderer/src/lib/open-mobile-emulator-tab.test.ts
index a3d942785b1..578473b5f36 100644
--- a/src/renderer/src/lib/open-mobile-emulator-tab.test.ts
+++ b/src/renderer/src/lib/open-mobile-emulator-tab.test.ts
@@ -14,7 +14,11 @@ const mockStoreState = vi.hoisted(() => ({
   activeGroupIdByWorktree: { 'wt-1': 'group-1' } as Record<string, string>,
   groupsByWorktree: { 'wt-1': [{ id: 'group-1' }] } as Record<string, { id: string }[]>,
   unifiedTabsByWorktree: {} as Record<string, { id: string; contentType: string }[]>,
-  settings: { mobileEmulatorEnabled: true } as { mobileEmulatorEnabled?: boolean }
+  settings: { mobileEmulatorEnabled: true } as {
+    mobileEmulatorEnabled?: boolean
+    activeRuntimeEnvironmentId?: string | null
+  },
+  runtimeStatusByEnvironmentId: new Map()
 }))
 
 vi.mock('@/store', () => ({
@@ -68,6 +72,22 @@ describe('openMobileEmulatorTab', () => {
   afterEach(() => {
     cancelPendingSimulatorPaneShutdown('wt-1')
     vi.useRealTimers()
+    vi.unstubAllGlobals()
+  })
+
+  it('rejects web-client invocation before creating a tab or attaching', async () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    mockStoreState.settings = {
+      mobileEmulatorEnabled: true,
+      activeRuntimeEnvironmentId: 'runtime-1'
+    }
+
+    await expect(openMobileEmulatorTab('wt-1')).rejects.toThrow(
+      'Mobile Emulator is unavailable in the web client.'
+    )
+
+    expect(ensureSimulatorTab).not.toHaveBeenCalled()
+    expect(callRuntimeRpc).not.toHaveBeenCalled()
   })
 
   it('surfaces the simulator tab before attaching the emulator stream', async () => {
diff --git a/src/renderer/src/lib/open-mobile-emulator-tab.ts b/src/renderer/src/lib/open-mobile-emulator-tab.ts
index 45f565e0408..6991c42ef13 100644
--- a/src/renderer/src/lib/open-mobile-emulator-tab.ts
+++ b/src/renderer/src/lib/open-mobile-emulator-tab.ts
@@ -16,6 +16,7 @@ import {
   cancelPendingSimulatorPaneShutdown,
   shutdownManagedSimulatorIfNoPane
 } from './simulator-pane-shutdown-scheduler'
+import { assertClientCreationActionAvailable } from './client-creation-action-policy'
 
 type OpenMobileEmulatorTabOptions = {
   targetGroupId?: string
@@ -55,6 +56,7 @@ export async function openMobileEmulatorTab(
   options: OpenMobileEmulatorTabOptions = {}
 ): Promise<string | null> {
   const store = useAppStore.getState()
+  assertClientCreationActionAvailable(store, worktreeId, 'mobile-emulator')
   if (store.settings?.mobileEmulatorEnabled === false) {
     return null
   }
diff --git a/src/renderer/src/lib/pane-manager/pane-fit.ts b/src/renderer/src/lib/pane-manager/pane-fit.ts
index f7165c3aad6..05e71b294dc 100644
--- a/src/renderer/src/lib/pane-manager/pane-fit.ts
+++ b/src/renderer/src/lib/pane-manager/pane-fit.ts
@@ -141,6 +141,7 @@ function performSafeFit(pane: ManagedPane): boolean {
     if (shouldRestoreScroll) {
       try {
         if (resumePendingFitScrollRestoreAfterFit(pane.terminal)) {
+          // Resume consumed the pending restore; the fallbacks below must not also run.
         } else if (pinnedScrollState) {
           const state: ScrollState = pinnedScrollState
           pinnedScrollState = null
diff --git a/src/renderer/src/lib/pane-manager/pane-identity-registry.ts b/src/renderer/src/lib/pane-manager/pane-identity-registry.ts
index 0c1951e979f..709ff30ec5f 100644
--- a/src/renderer/src/lib/pane-manager/pane-identity-registry.ts
+++ b/src/renderer/src/lib/pane-manager/pane-identity-registry.ts
@@ -3,9 +3,9 @@ import { mintStablePaneId } from './mint-stable-pane-id'
 import type { ManagedPaneInternal } from './pane-manager-types'
 
 export class PaneIdentityRegistry {
-  private leafIdByNumericId: Map<number, TerminalLeafId> = new Map()
-  private numericIdByLeafId: Map<TerminalLeafId, number> = new Map()
-  private publishedPaneIds: Set<number> = new Set()
+  private leafIdByNumericId = new Map<number, TerminalLeafId>()
+  private numericIdByLeafId = new Map<TerminalLeafId, number>()
+  private publishedPaneIds = new Set<number>()
 
   claimLeafId(leafIdHint?: string): TerminalLeafId {
     if (leafIdHint && isTerminalLeafId(leafIdHint) && !this.numericIdByLeafId.has(leafIdHint)) {
diff --git a/src/renderer/src/lib/pane-manager/pane-manager.ts b/src/renderer/src/lib/pane-manager/pane-manager.ts
index fbdbe1f5afe..f6d59594d01 100644
--- a/src/renderer/src/lib/pane-manager/pane-manager.ts
+++ b/src/renderer/src/lib/pane-manager/pane-manager.ts
@@ -66,7 +66,7 @@ export type {
 
 export class PaneManager {
   private root: HTMLElement
-  private panes: Map<number, ManagedPaneInternal> = new Map()
+  private panes = new Map<number, ManagedPaneInternal>()
   private activePaneId: number | null = null
   private nextPaneId = FIRST_PANE_ID
   private options: PaneManagerOptions
diff --git a/src/renderer/src/lib/pane-manager/pane-tree-reparent-frame.test.ts b/src/renderer/src/lib/pane-manager/pane-tree-reparent-frame.test.ts
index 4dff8e4f964..caf3da45092 100644
--- a/src/renderer/src/lib/pane-manager/pane-tree-reparent-frame.test.ts
+++ b/src/renderer/src/lib/pane-manager/pane-tree-reparent-frame.test.ts
@@ -38,7 +38,7 @@ function createMockElement(className = ''): TestElement {
     },
     replaceChild: (nextChild: TestElement, oldChild: TestElement): TestElement => {
       const index = element.children.indexOf(oldChild)
-      if (index >= 0) {
+      if (index !== -1) {
         element.children[index] = nextChild
       } else {
         element.children.push(nextChild)
diff --git a/src/renderer/src/lib/pr-comment-action-state.test.ts b/src/renderer/src/lib/pr-comment-action-state.test.ts
index 48f99ab1e8c..b3038076b87 100644
--- a/src/renderer/src/lib/pr-comment-action-state.test.ts
+++ b/src/renderer/src/lib/pr-comment-action-state.test.ts
@@ -1,11 +1,11 @@
 import { describe, expect, it } from 'vitest'
 import type { PRComment } from '../../../shared/types'
-import { groupPRComments } from '../../../shared/pr-comment-groups'
+import { groupPRComments, type PRCommentGroup } from '../../../shared/pr-comment-groups'
 import {
   getPRCommentGroupActionState,
   isPRCommentGroupQueueableForAI,
   partitionPRCommentGroupsForTriage,
-  sortPRCommentGroupsForTimeline
+  sortPRCommentGroupsByRecency
 } from './pr-comment-action-state'
 
 function comment(overrides: Partial<PRComment> & { id: number }): PRComment {
@@ -19,6 +19,10 @@ function comment(overrides: Partial<PRComment> & { id: number }): PRComment {
   }
 }
 
+function bodies(groups: readonly PRCommentGroup[]): string[] {
+  return groups.map((group) => (group.kind === 'standalone' ? group.comment.body : group.root.body))
+}
+
 describe('pr-comment-action-state', () => {
   it('classifies resolved, open review threads, and conversation comments', () => {
     const groups = groupPRComments([
@@ -57,15 +61,120 @@ describe('pr-comment-action-state', () => {
       comment({ id: 1, createdAt: '2026-06-16T10:00:00Z', body: 'first' }),
       comment({ id: 2, createdAt: '2026-06-16T11:00:00Z', body: 'second' })
     ])
-    const sorted = sortPRCommentGroupsForTimeline(groups)
+    const sorted = sortPRCommentGroupsByRecency(groups)
 
     expect(sorted.map((group) => getPRCommentGroupActionState(group))).toEqual([
       'conversation',
       'conversation',
       'conversation'
     ])
-    expect(
-      sorted.map((group) => (group.kind === 'standalone' ? group.comment.body : group.root.body))
-    ).toEqual(['first', 'second', 'third'])
+    expect(bodies(sorted)).toEqual(['first', 'second', 'third'])
+  })
+
+  it('sorts each triage section newest-first for grouped mode', () => {
+    const groups = groupPRComments([
+      comment({ id: 1, createdAt: '2026-06-16T10:00:00Z', body: 'first' }),
+      comment({ id: 2, createdAt: '2026-06-16T11:00:00Z', body: 'second' }),
+      comment({
+        id: 3,
+        createdAt: '2026-06-16T09:00:00Z',
+        body: 'older open',
+        threadId: 't-open-old',
+        path: 'src/a.ts',
+        isResolved: false
+      }),
+      comment({
+        id: 4,
+        createdAt: '2026-06-16T12:00:00Z',
+        body: 'newer open',
+        threadId: 't-open-new',
+        path: 'src/b.ts',
+        isResolved: false
+      })
+    ])
+    const partitioned = partitionPRCommentGroupsForTriage(
+      sortPRCommentGroupsByRecency(groups, 'newest-first')
+    )
+
+    expect(bodies(partitioned.conversation)).toEqual(['second', 'first'])
+    expect(bodies(partitioned.open)).toEqual(['newer open', 'older open'])
+    expect(partitioned.resolved).toEqual([])
+  })
+
+  it('ranks a stale thread by its newest reply under newest-first only', () => {
+    const groups = groupPRComments([
+      comment({
+        id: 1,
+        createdAt: '2026-06-13T09:00:00Z',
+        body: 'stale root',
+        threadId: 't-stale',
+        path: 'src/a.ts',
+        isResolved: false
+      }),
+      comment({
+        id: 2,
+        createdAt: '2026-06-16T12:00:00Z',
+        body: 'fresh reply',
+        threadId: 't-stale',
+        path: 'src/a.ts',
+        isResolved: false
+      }),
+      comment({ id: 3, createdAt: '2026-06-16T11:00:00Z', body: 'newer standalone' }),
+      comment({
+        id: 4,
+        createdAt: '2026-06-14T09:00:00Z',
+        body: 'mid root',
+        threadId: 't-mid',
+        path: 'src/b.ts',
+        isResolved: false
+      }),
+      comment({
+        id: 5,
+        createdAt: '2026-06-14T10:00:00Z',
+        body: 'mid reply',
+        threadId: 't-mid',
+        path: 'src/b.ts',
+        isResolved: false
+      })
+    ])
+
+    expect(bodies(sortPRCommentGroupsByRecency(groups, 'newest-first'))).toEqual([
+      'stale root',
+      'newer standalone',
+      'mid root'
+    ])
+    expect(bodies(sortPRCommentGroupsByRecency(groups))).toEqual([
+      'stale root',
+      'mid root',
+      'newer standalone'
+    ])
+  })
+
+  it('inverts the id tiebreaker numerically when groups share a timestamp', () => {
+    const groups = groupPRComments([
+      comment({ id: 9, createdAt: '2026-06-16T12:00:00Z', body: 'batch a' }),
+      comment({ id: 10, createdAt: '2026-06-16T12:00:00Z', body: 'batch b' })
+    ])
+
+    expect(bodies(sortPRCommentGroupsByRecency(groups))).toEqual(['batch a', 'batch b'])
+    expect(bodies(sortPRCommentGroupsByRecency(groups, 'newest-first'))).toEqual([
+      'batch b',
+      'batch a'
+    ])
+  })
+
+  it('sinks groups with an unparseable timestamp to the bottom in both orders', () => {
+    const groups = groupPRComments([
+      comment({ id: 1, createdAt: '', body: 'unknown time' }),
+      comment({ id: 2, createdAt: '2026-06-16T10:00:00Z', body: 'older' }),
+      comment({ id: 3, createdAt: '2026-06-16T11:00:00Z', body: 'newer' })
+    ])
+
+    expect(bodies(sortPRCommentGroupsByRecency(groups))).toEqual(['older', 'newer', 'unknown time'])
+    expect(bodies(sortPRCommentGroupsByRecency(groups, 'newest-first'))).toEqual([
+      'newer',
+      'older',
+      'unknown time'
+    ])
   })
 })
diff --git a/src/renderer/src/lib/pr-comment-action-state.ts b/src/renderer/src/lib/pr-comment-action-state.ts
index 9073c82a86f..2207141bd06 100644
--- a/src/renderer/src/lib/pr-comment-action-state.ts
+++ b/src/renderer/src/lib/pr-comment-action-state.ts
@@ -1,8 +1,5 @@
-import {
-  getPRCommentGroupId,
-  getPRCommentGroupRoot,
-  type PRCommentGroup
-} from '../../../shared/pr-comment-groups'
+import { getPRCommentGroupRoot, type PRCommentGroup } from '../../../shared/pr-comment-groups'
+import type { PRComment } from '../../../shared/types'
 
 /** How a comment group should read in the PR sidebar triage UI. */
 export type PRCommentGroupActionState = 'open' | 'conversation' | 'resolved'
@@ -45,17 +42,58 @@ export function partitionPRCommentGroupsForTriage(groups: readonly PRCommentGrou
   return { open, conversation, resolved }
 }
 
-function groupTimelineMs(group: PRCommentGroup): number {
-  const ts = Date.parse(getPRCommentGroupRoot(group).createdAt)
-  return Number.isNaN(ts) ? 0 : ts
+/** Null when the host sent an unparseable (often empty) `createdAt`. */
+function commentMs(comment: PRComment): number | null {
+  const ts = Date.parse(comment.createdAt)
+  return Number.isNaN(ts) ? null : ts
 }
 
-export function sortPRCommentGroupsForTimeline(
-  groups: readonly PRCommentGroup[]
+function groupStartMs(group: PRCommentGroup): number | null {
+  return commentMs(getPRCommentGroupRoot(group))
+}
+
+/** Newest comment anywhere in the group, so a fresh reply refreshes an old thread. */
+function groupLatestActivityMs(group: PRCommentGroup): number | null {
+  if (group.kind !== 'thread') {
+    return commentMs(group.comment)
+  }
+  return group.replies.reduce<number | null>((latest, reply) => {
+    const ts = commentMs(reply)
+    if (ts === null) {
+      return latest
+    }
+    return latest === null ? ts : Math.max(latest, ts)
+  }, commentMs(group.root))
+}
+
+/**
+ * Orders comment groups by time. The two orders use different keys, not just opposite
+ * directions: `newest-first` ranks by last activity anywhere in the thread, while
+ * `oldest-first` ranks by when the thread started. Groups whose timestamp is unknown
+ * sort last in both orders.
+ */
+export function sortPRCommentGroupsByRecency(
+  groups: readonly PRCommentGroup[],
+  order: 'oldest-first' | 'newest-first' = 'oldest-first'
 ): PRCommentGroup[] {
-  return [...groups].sort(
-    (left, right) =>
-      groupTimelineMs(left) - groupTimelineMs(right) ||
-      getPRCommentGroupId(left).localeCompare(getPRCommentGroupId(right))
-  )
+  const newestFirst = order === 'newest-first'
+  const multiplier = newestFirst ? -1 : 1
+  const timestampOf = newestFirst ? groupLatestActivityMs : groupStartMs
+  // Why: decorate first so each group parses its dates once, not once per comparison.
+  return groups
+    .map((group) => ({ group, ts: timestampOf(group), id: getPRCommentGroupRoot(group).id }))
+    .sort((left, right) => {
+      if (left.ts === null || right.ts === null) {
+        if (left.ts !== null) {
+          return -1
+        }
+        if (right.ts !== null) {
+          return 1
+        }
+        return multiplier * (left.id - right.id)
+      }
+      // Why: ids break the ties GitHub creates by stamping a whole review batch identically.
+      return multiplier * (left.ts - right.ts || left.id - right.id)
+    })
+    .map((entry) => entry.group)
 }
diff --git a/src/renderer/src/lib/runtime-agent-background-create.ts b/src/renderer/src/lib/runtime-agent-background-create.ts
index 70915ae63d4..a6c430f172b 100644
--- a/src/renderer/src/lib/runtime-agent-background-create.ts
+++ b/src/renderer/src/lib/runtime-agent-background-create.ts
@@ -3,6 +3,11 @@ import type { StartupCommandDelivery } from '../../../shared/codex-startup-deliv
 import type { SessionOptionValue } from '../../../shared/native-chat-session-options'
 import type { RuntimeTerminalCreate } from '../../../shared/runtime-types'
 import type { TuiAgent } from '../../../shared/types'
+import { TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../shared/legacy-terminal-attribution-env'
 import {
   createAgentSessionCreateOperation,
   toAgentLaunchPreferences,
@@ -33,7 +38,8 @@ export async function createRuntimeAgentBackgroundTerminal(args: {
   const launchPreferences = toAgentLaunchPreferences(args.sessionOptions)
   return await runRemoteAgentSessionLaunch({
     environmentId: args.environmentId,
-    hostAuthority: () =>
+    requiredHostAuthorityCapabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY],
+    hostAuthority: (authority) =>
       operation.run((clientOperationId) =>
         callRuntimeRpc<{ terminal: RuntimeTerminalCreate }>(
           { kind: 'environment', environmentId: args.environmentId },
@@ -52,10 +58,14 @@ export async function createRuntimeAgentBackgroundTerminal(args: {
             },
             clientOperationId
           ),
-          { timeoutMs: 15_000 }
+          {
+            timeoutMs: 15_000,
+            expectedEnvironmentPairingRevision: authority.expectedEnvironmentPairingRevision,
+            expectedRuntimeId: authority.runtimeId
+          }
         )
       ),
-    legacy: ({ skipCompatibilityCheck }) =>
+    legacy: ({ skipCompatibilityCheck, authority }) =>
       callRuntimeRpc<{ terminal: RuntimeTerminalCreate }>(
         { kind: 'environment', environmentId: args.environmentId },
         'terminal.create',
@@ -65,7 +75,8 @@ export async function createRuntimeAgentBackgroundTerminal(args: {
           ...(args.legacy.startupCommandDelivery
             ? { startupCommandDelivery: args.legacy.startupCommandDelivery }
             : {}),
-          env: args.legacy.env,
+          env: withLegacyTerminalAttributionDisabledEnv(args.legacy.env),
+          envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
           launchConfig: args.legacy.launchConfig,
           launchToken: args.legacy.launchToken,
           launchAgent: args.agent,
@@ -74,7 +85,12 @@ export async function createRuntimeAgentBackgroundTerminal(args: {
           leafId: args.leafId,
           presentation: 'background'
         },
-        { timeoutMs: 15_000, skipCompatibilityCheck }
+        {
+          timeoutMs: 15_000,
+          skipCompatibilityCheck,
+          expectedEnvironmentPairingRevision: authority.expectedEnvironmentPairingRevision,
+          expectedRuntimeId: authority.runtimeId
+        }
       )
   })
 }
diff --git a/src/renderer/src/lib/runtime-pane-title-leaf-id.ts b/src/renderer/src/lib/runtime-pane-title-leaf-id.ts
index 0847f1e3de2..c18e752e883 100644
--- a/src/renderer/src/lib/runtime-pane-title-leaf-id.ts
+++ b/src/renderer/src/lib/runtime-pane-title-leaf-id.ts
@@ -78,7 +78,7 @@ export function resolveRuntimePaneTitleLeafResolution(
   let hasMultiplePaneTitles = false
 
   for (const runtimePaneId in titlesByPaneId) {
-    if (!Object.prototype.hasOwnProperty.call(titlesByPaneId, runtimePaneId)) {
+    if (!Object.hasOwn(titlesByPaneId, runtimePaneId)) {
       continue
     }
 
diff --git a/src/renderer/src/lib/setup-script-prompt.test.ts b/src/renderer/src/lib/setup-script-prompt.test.ts
index 70d226bc0cf..605142bc154 100644
--- a/src/renderer/src/lib/setup-script-prompt.test.ts
+++ b/src/renderer/src/lib/setup-script-prompt.test.ts
@@ -202,6 +202,59 @@ describe('setup script prompt inspection', () => {
     ).toEqual([getSetupScriptPromptDismissalKey(localIdentity)])
   })
 
+  it('reuses the input array when it is empty', () => {
+    const input: string[] = []
+    expect(
+      filterSetupScriptPromptDismissalsToValidRepos(
+        input,
+        new Set([getRepoHostIdentityForParts('repo-1', 'local')])
+      )
+    ).toBe(input)
+  })
+
+  it('reuses the input array when every dismissal is already a valid host-identity key', () => {
+    const localIdentity = getRepoHostIdentityForParts('repo-1', 'local')
+    const remoteIdentity = getRepoHostIdentityForParts('repo-2', 'ssh:host-a')
+    const input = [
+      getSetupScriptPromptDismissalKey(localIdentity),
+      getSetupScriptPromptDismissalKey(remoteIdentity)
+    ]
+    expect(
+      filterSetupScriptPromptDismissalsToValidRepos(
+        input,
+        new Set([localIdentity, remoteIdentity])
+      )
+    ).toBe(input)
+  })
+
+  it('allocates when a legacy repo-id dismissal is rewritten to a host identity', () => {
+    const localIdentity = getRepoHostIdentityForParts('repo-1', 'local')
+    const input = [getSetupScriptPromptDismissalKey('repo-1')]
+    const result = filterSetupScriptPromptDismissalsToValidRepos(input, new Set([localIdentity]))
+    expect(result).not.toBe(input)
+    expect(result).toEqual([getSetupScriptPromptDismissalKey(localIdentity)])
+  })
+
+  it('allocates when a stale dismissal is dropped', () => {
+    const localIdentity = getRepoHostIdentityForParts('repo-1', 'local')
+    const input = [
+      getSetupScriptPromptDismissalKey(localIdentity),
+      getSetupScriptPromptDismissalKey(getRepoHostIdentityForParts('gone', 'local'))
+    ]
+    const result = filterSetupScriptPromptDismissalsToValidRepos(input, new Set([localIdentity]))
+    expect(result).not.toBe(input)
+    expect(result).toEqual([getSetupScriptPromptDismissalKey(localIdentity)])
+  })
+
+  it('allocates when a duplicate valid dismissal is deduped', () => {
+    const localIdentity = getRepoHostIdentityForParts('repo-1', 'local')
+    const key = getSetupScriptPromptDismissalKey(localIdentity)
+    const input = [key, key]
+    const result = filterSetupScriptPromptDismissalsToValidRepos(input, new Set([localIdentity]))
+    expect(result).not.toBe(input)
+    expect(result).toEqual([key])
+  })
+
   it('drops a legacy repo-id dismissal when that id exists on multiple hosts', () => {
     const localIdentity = getRepoHostIdentityForParts('repo-1', 'local')
     const remoteIdentity = getRepoHostIdentityForParts('repo-1', 'runtime:windows')
diff --git a/src/renderer/src/lib/setup-script-prompt.ts b/src/renderer/src/lib/setup-script-prompt.ts
index f25b806d1ef..6adbc04b092 100644
--- a/src/renderer/src/lib/setup-script-prompt.ts
+++ b/src/renderer/src/lib/setup-script-prompt.ts
@@ -90,14 +90,25 @@ export function isSetupScriptPromptDismissed(
   return dismissedEntries.includes(getSetupScriptPromptDismissalKey(repoHostIdentity))
 }
 
+function isUnchangedDismissalList(
+  value: unknown,
+  next: readonly string[]
+): value is readonly string[] {
+  return (
+    Array.isArray(value) &&
+    value.length === next.length &&
+    value.every((entry, index) => entry === next[index])
+  )
+}
+
 export function filterSetupScriptPromptDismissalsToValidRepos(
   value: unknown,
   validRepoHostIdentities: Set<string>
-): string[] {
+): readonly string[] {
   const unambiguousIdentityByRepoId = new Map<string, string | null>()
   for (const identity of validRepoHostIdentities) {
     const separatorIndex = identity.indexOf('\0')
-    const repoId = separatorIndex >= 0 ? identity.slice(separatorIndex + 1) : identity
+    const repoId = separatorIndex !== -1 ? identity.slice(separatorIndex + 1) : identity
     unambiguousIdentityByRepoId.set(
       repoId,
       unambiguousIdentityByRepoId.has(repoId) ? null : identity
@@ -117,10 +128,18 @@ export function filterSetupScriptPromptDismissalsToValidRepos(
       }
     }
   }
+  // Why: fetchRepos / fetchRuntimeEnvironmentRepos / validateRepoScopedUi assign
+  // this into set() on every catalog refresh. SetupScriptPromptCard Object.is-
+  // subscribes to the array, so a fresh copy on a no-op prune is a guaranteed miss.
+  // Compare against the original input, not the sanitize copy — sanitize always
+  // allocates, including for [] and already-valid host-identity keys.
+  if (isUnchangedDismissalList(value, next)) {
+    return value
+  }
   return next
 }
 
-export function sanitizeSetupScriptPromptDismissals(value: unknown): string[] {
+export function sanitizeSetupScriptPromptDismissals(value: unknown): readonly string[] {
   if (!Array.isArray(value)) {
     return []
   }
diff --git a/src/renderer/src/lib/simulator-pane-shutdown-scheduler.ts b/src/renderer/src/lib/simulator-pane-shutdown-scheduler.ts
index 722f322d80a..907ccee5093 100644
--- a/src/renderer/src/lib/simulator-pane-shutdown-scheduler.ts
+++ b/src/renderer/src/lib/simulator-pane-shutdown-scheduler.ts
@@ -9,7 +9,7 @@ type SimulatorTabReference = {
 
 type SimulatorPaneShutdownOptions = {
   getTabsForWorktree?: (worktreeId: string) => SimulatorTabReference[]
-  shutdownManagedSimulator?: (worktreeId: string) => Promise<unknown> | unknown
+  shutdownManagedSimulator?: (worktreeId: string) => unknown
 }
 
 type ScheduleSimulatorPaneShutdownOptions = SimulatorPaneShutdownOptions & {
diff --git a/src/renderer/src/lib/source-control-launch-agent-selection.ts b/src/renderer/src/lib/source-control-launch-agent-selection.ts
index e8c00812590..c72098c9481 100644
--- a/src/renderer/src/lib/source-control-launch-agent-selection.ts
+++ b/src/renderer/src/lib/source-control-launch-agent-selection.ts
@@ -110,7 +110,7 @@ function hasActionOverride(
   overrides: NormalizedRepoSourceControlAiOverrides['actionOverrides'] | undefined,
   actionId: SourceControlActionId
 ): boolean {
-  return Object.prototype.hasOwnProperty.call(overrides ?? {}, actionId)
+  return Object.hasOwn(overrides ?? {}, actionId)
 }
 
 function readRecipeOverrideFields(
@@ -120,13 +120,13 @@ function readRecipeOverrideFields(
     | undefined
 ): SourceControlActionRecipeOverrideField[] {
   const fields: SourceControlActionRecipeOverrideField[] = []
-  if (Object.prototype.hasOwnProperty.call(recipe ?? {}, 'agentId')) {
+  if (Object.hasOwn(recipe ?? {}, 'agentId')) {
     fields.push('agent')
   }
-  if (Object.prototype.hasOwnProperty.call(recipe ?? {}, 'commandInputTemplate')) {
+  if (Object.hasOwn(recipe ?? {}, 'commandInputTemplate')) {
     fields.push('commandTemplate')
   }
-  if (Object.prototype.hasOwnProperty.call(recipe ?? {}, 'agentArgs')) {
+  if (Object.hasOwn(recipe ?? {}, 'agentArgs')) {
     fields.push('agentArgs')
   }
   return fields
diff --git a/src/renderer/src/lib/terminal-contrast-correction.test.ts b/src/renderer/src/lib/terminal-contrast-correction.test.ts
index 7f5cd76cbfe..2197bdf903c 100644
--- a/src/renderer/src/lib/terminal-contrast-correction.test.ts
+++ b/src/renderer/src/lib/terminal-contrast-correction.test.ts
@@ -12,7 +12,7 @@ function contrastRatio(a: string, b: string): number {
     const n = Number.parseInt(hex.replace('#', ''), 16)
     const toLinear = (channel: number): number => {
       const c = channel / 255
-      return c <= 0.03928 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4)
+      return c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4
     }
     const r = toLinear((n >> 16) & 0xff)
     const g = toLinear((n >> 8) & 0xff)
diff --git a/src/renderer/src/lib/terminal-layout-equality.ts b/src/renderer/src/lib/terminal-layout-equality.ts
index ce11907bed1..716482764e8 100644
--- a/src/renderer/src/lib/terminal-layout-equality.ts
+++ b/src/renderer/src/lib/terminal-layout-equality.ts
@@ -10,9 +10,7 @@ function sameStringRecord(
   const rightKeys = Object.keys(right)
   return (
     leftKeys.length === rightKeys.length &&
-    leftKeys.every(
-      (key) => Object.prototype.hasOwnProperty.call(right, key) && left[key] === right[key]
-    )
+    leftKeys.every((key) => Object.hasOwn(right, key) && left[key] === right[key])
   )
 }
 
diff --git a/src/renderer/src/lib/terminal-quick-command-search.ts b/src/renderer/src/lib/terminal-quick-command-search.ts
index 09027cbfd16..8530e915d07 100644
--- a/src/renderer/src/lib/terminal-quick-command-search.ts
+++ b/src/renderer/src/lib/terminal-quick-command-search.ts
@@ -93,11 +93,11 @@ function scoreCandidate(query: string, rawCandidate: string, baseScore: number):
     return baseScore + 50
   }
   const wordIndex = candidate.indexOf(` ${query}`)
-  if (wordIndex >= 0) {
+  if (wordIndex !== -1) {
     return baseScore + 100 + wordIndex
   }
   const index = candidate.indexOf(query)
-  if (index >= 0) {
+  if (index !== -1) {
     return baseScore + 200 + index
   }
   return NO_MATCH
diff --git a/src/renderer/src/lib/terminal-themes/shared.ts b/src/renderer/src/lib/terminal-themes/shared.ts
index 023213a6605..3d3ee17abba 100644
--- a/src/renderer/src/lib/terminal-themes/shared.ts
+++ b/src/renderer/src/lib/terminal-themes/shared.ts
@@ -7,7 +7,7 @@ export function mergeTerminalThemeCatalogs(
 
   for (const catalog of catalogs) {
     for (const [name, theme] of Object.entries(catalog)) {
-      if (Object.prototype.hasOwnProperty.call(merged, name)) {
+      if (Object.hasOwn(merged, name)) {
         throw new Error(`Duplicate terminal theme name: ${name}`)
       }
       merged[name] = theme
diff --git a/src/renderer/src/lib/terminal-title-contrast.ts b/src/renderer/src/lib/terminal-title-contrast.ts
index a54a4819092..38afe002ed2 100644
--- a/src/renderer/src/lib/terminal-title-contrast.ts
+++ b/src/renderer/src/lib/terminal-title-contrast.ts
@@ -183,7 +183,7 @@ function compositeRgb(foreground: RgbaColor, background: RgbaColor, alpha: numbe
 function relativeLuminance(rgb: Pick<RgbaColor, 'r' | 'g' | 'b'>): number {
   const toLinear = (channel: number): number => {
     const normalized = channel / 255
-    return normalized <= 0.03928 ? normalized / 12.92 : Math.pow((normalized + 0.055) / 1.055, 2.4)
+    return normalized <= 0.03928 ? normalized / 12.92 : ((normalized + 0.055) / 1.055) ** 2.4
   }
   return 0.2126 * toLinear(rgb.r) + 0.7152 * toLinear(rgb.g) + 0.0722 * toLinear(rgb.b)
 }
diff --git a/src/renderer/src/lib/ui-zoom.ts b/src/renderer/src/lib/ui-zoom.ts
index 7ab1a00e19f..eb1749f222c 100644
--- a/src/renderer/src/lib/ui-zoom.ts
+++ b/src/renderer/src/lib/ui-zoom.ts
@@ -6,7 +6,7 @@ const isMac = navigator.userAgent.includes('Mac')
  * and repositions the native macOS traffic lights to stay aligned.
  */
 export function applyUIZoom(level: number): void {
-  const zoomFactor = Math.pow(1.2, level)
+  const zoomFactor = 1.2 ** level
   window.api.ui.setZoomLevel(level)
   document.documentElement.style.setProperty('--ui-zoom-factor', String(zoomFactor))
   if (isMac) {
@@ -20,7 +20,7 @@ export function applyUIZoom(level: number): void {
  */
 export function syncZoomCSSVar(): void {
   const level = window.api.ui.getZoomLevel()
-  const zoomFactor = Math.pow(1.2, level)
+  const zoomFactor = 1.2 ** level
   document.documentElement.style.setProperty('--ui-zoom-factor', String(zoomFactor))
   if (isMac) {
     window.api.ui.syncTrafficLights(zoomFactor)
diff --git a/src/renderer/src/lib/use-tab-agent-opencode-native-title.test.ts b/src/renderer/src/lib/use-tab-agent-opencode-native-title.test.ts
index 0b30b90bbc1..abf724a67c1 100644
--- a/src/renderer/src/lib/use-tab-agent-opencode-native-title.test.ts
+++ b/src/renderer/src/lib/use-tab-agent-opencode-native-title.test.ts
@@ -23,7 +23,8 @@ const identityScenarios: [
 ][] = [
   ['live local', { isRemote: false }],
   ['inactive local split', { isRemote: false, siblingHookAgent: 'claude' }],
-  ['inactive SSH/tmux', { isRemote: true, title: 'tmux | OC | Greeting' }]
+  ['inactive SSH/tmux', { isRemote: true, title: 'tmux | OC | Greeting' }],
+  ['multi-token SSH wrapper', { isRemote: true, title: 'ssh build-host | OC | Greeting' }]
 ]
 
 function HookProbe({ tab }: { tab: TerminalTab }): null {
@@ -255,7 +256,6 @@ describe('OpenCode native title tab identity', () => {
     for (const title of [
       'OpenCode ready',
       'oc | Greeting',
-      'my session | OC | Greeting',
       '⠋ Fix foo | OC | Greeting',
       '✦ Gemini CLI',
       '⠋ Codex',
diff --git a/src/renderer/src/lib/window-visibility-interval.ts b/src/renderer/src/lib/window-visibility-interval.ts
index bdd250d5c16..aa1337fc095 100644
--- a/src/renderer/src/lib/window-visibility-interval.ts
+++ b/src/renderer/src/lib/window-visibility-interval.ts
@@ -3,7 +3,7 @@ export type WindowVisibilityIntervalTimer = ReturnType<typeof setInterval>
 export function isWindowVisible(): boolean {
   return (
     typeof document === 'undefined' ||
-    typeof document.visibilityState === 'undefined' ||
+    document.visibilityState === undefined ||
     document.visibilityState === 'visible'
   )
 }
diff --git a/src/renderer/src/lib/workspace-browser-tab-open.test.ts b/src/renderer/src/lib/workspace-browser-tab-open.test.ts
new file mode 100644
index 00000000000..936bed7bb2c
--- /dev/null
+++ b/src/renderer/src/lib/workspace-browser-tab-open.test.ts
@@ -0,0 +1,427 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  LOCAL_EXECUTION_HOST_ID,
+  toRuntimeExecutionHostId,
+  toSshExecutionHostId
+} from '../../../shared/execution-host'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
+import { BROWSER_SCREENCAST_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import {
+  canOpenWorkspaceBrowserTabOnRuntime,
+  openWorkspaceBrowserTab
+} from './workspace-browser-tab-open'
+
+const mocks = vi.hoisted(() => ({
+  createRemote: vi.fn(),
+  getState: vi.fn(),
+  pairedWeb: false,
+  state: {} as Record<string, unknown>
+}))
+
+vi.mock('@/store', () => ({
+  useAppStore: { getState: () => mocks.getState() }
+}))
+
+vi.mock('@/runtime/web-runtime-session', () => ({
+  createWebRuntimeSessionBrowserTab: (...args: unknown[]) => mocks.createRemote(...args)
+}))
+
+vi.mock('./desktop-window-chrome', () => ({
+  isPairedWebClientWindow: () => mocks.pairedWeb
+}))
+
+const WORKSPACE_ID = 'repo-1::/repo/worktree'
+
+function ownerState(hostId?: string, runtimeOwnerEnvironmentId?: string): Record<string, unknown> {
+  return {
+    worktreesByRepo: {
+      'repo-1': [
+        {
+          id: WORKSPACE_ID,
+          repoId: 'repo-1',
+          ...(hostId ? { hostId } : {}),
+          ...(runtimeOwnerEnvironmentId ? { runtimeOwnerEnvironmentId } : {})
+        }
+      ]
+    }
+  }
+}
+
+function browserCapableRuntime(environmentId: string): Record<string, unknown> {
+  return {
+    runtimeStatusByEnvironmentId: new Map([
+      [
+        environmentId,
+        { status: { capabilities: [BROWSER_SCREENCAST_RUNTIME_CAPABILITY] }, checkedAt: 1 }
+      ]
+    ])
+  }
+}
+
+beforeEach(() => {
+  mocks.createRemote.mockReset().mockResolvedValue(true)
+  mocks.getState.mockReset().mockImplementation(() => mocks.state)
+  mocks.pairedWeb = false
+  mocks.state = {}
+})
+
+describe('openWorkspaceBrowserTab', () => {
+  it('opens client-owned searches with a safe title and host-specific profile', async () => {
+    const createBrowserTab = vi.fn()
+    const sshHost = toSshExecutionHostId('ssh-target')
+    mocks.state = {
+      ...ownerState(sshHost),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'focused-profile',
+      defaultBrowserSessionProfileIdByHostId: { [sshHost]: 'ssh-profile' }
+    }
+
+    await openWorkspaceBrowserTab({
+      workspaceId: WORKSPACE_ID,
+      targetGroupId: 'group-1',
+      url: 'https://www.google.com/search?q=private%20query',
+      intent: { kind: 'search', engine: 'google' }
+    })
+
+    expect(createBrowserTab).toHaveBeenCalledWith(
+      WORKSPACE_ID,
+      'https://www.google.com/search?q=private%20query',
+      {
+        activate: true,
+        browserRuntimeEnvironmentId: null,
+        focusAddressBar: false,
+        sessionProfileId: 'ssh-profile',
+        targetGroupId: 'group-1',
+        title: 'Search Google'
+      }
+    )
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+  })
+
+  it('surfaces the opening workspace and titles runtime-owned URL tabs by target', async () => {
+    const createBrowserTab = vi.fn()
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    expect(canOpenWorkspaceBrowserTabOnRuntime(mocks.state as never, WORKSPACE_ID, 'hub-a')).toBe(
+      true
+    )
+
+    await openWorkspaceBrowserTab({
+      workspaceId: WORKSPACE_ID,
+      url: 'https://example.com/docs?token=secret',
+      intent: { kind: 'url' }
+    })
+
+    expect(mocks.createRemote).toHaveBeenCalledWith({
+      worktreeId: WORKSPACE_ID,
+      environmentId: 'hub-a',
+      url: 'https://example.com/docs?token=secret',
+      targetGroupId: undefined,
+      selectWorktree: true,
+      stagedTitle: 'example.com/docs',
+      stagedFocusAddressBar: false,
+      failureLogMode: 'operation-only'
+    })
+    expect(createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('fails closed when the workspace route swaps away from the pane runtime before opening', async () => {
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+    const paneRuntimeEnvironmentId = 'hub-a'
+
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-b')),
+      ...browserCapableRuntime('hub-b'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'https://example.com/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: paneRuntimeEnvironmentId
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('fails closed for a blank asserted runtime owner', async () => {
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'https://example.com/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: '   '
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('routes an asserted paired-HUB SSH owner through that runtime', async () => {
+    const sshHost = toSshExecutionHostId('ssh-target')
+    mocks.state = {
+      ...ownerState(sshHost, 'hub-a'),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    await openWorkspaceBrowserTab({
+      workspaceId: WORKSPACE_ID,
+      url: 'http://localhost:3000/',
+      intent: { kind: 'url' },
+      expectedRuntimeEnvironmentId: 'hub-a'
+    })
+
+    expect(mocks.createRemote).toHaveBeenCalledWith(
+      expect.objectContaining({ environmentId: 'hub-a', worktreeId: WORKSPACE_ID })
+    )
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not fall back to a client browser for an incapable asserted runtime', async () => {
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    expect(canOpenWorkspaceBrowserTabOnRuntime(mocks.state as never, WORKSPACE_ID, 'hub-a')).toBe(
+      false
+    )
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'https://example.com/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: 'hub-a'
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not fall back to a client browser when asserted runtime creation fails', async () => {
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+    mocks.createRemote.mockResolvedValue(false)
+
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'https://example.com/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: 'hub-a'
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).toHaveBeenCalledWith(
+      expect.objectContaining({ environmentId: 'hub-a' })
+    )
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not route an asserted floating-terminal source to either runtime or local browser', async () => {
+    const createBrowserTab = vi.fn()
+    mocks.state = {
+      activeWorktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+      activeWorkspaceExecutionHostId: toRuntimeExecutionHostId('hub-a'),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    expect(
+      canOpenWorkspaceBrowserTabOnRuntime(
+        mocks.state as never,
+        FLOATING_TERMINAL_WORKTREE_ID,
+        'hub-a'
+      )
+    ).toBe(false)
+
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: FLOATING_TERMINAL_WORKTREE_ID,
+        url: 'http://localhost:3000/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: 'hub-a'
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('keeps runtime browser actions unavailable in a paired-web floating workspace', async () => {
+    mocks.pairedWeb = true
+    mocks.state = {
+      activeWorktreeId: FLOATING_TERMINAL_WORKTREE_ID,
+      activeWorkspaceExecutionHostId: toRuntimeExecutionHostId('hub-a'),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    expect(
+      canOpenWorkspaceBrowserTabOnRuntime(
+        mocks.state as never,
+        FLOATING_TERMINAL_WORKTREE_ID,
+        'hub-a'
+      )
+    ).toBe(false)
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: FLOATING_TERMINAL_WORKTREE_ID,
+        url: 'http://localhost:3000/',
+        intent: { kind: 'url' },
+        expectedRuntimeEnvironmentId: 'hub-a'
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  // Two dev servers on one host must not share a tab title.
+  it('keeps the port in local-dev tab titles', async () => {
+    const createBrowserTab = vi.fn()
+    mocks.state = {
+      ...ownerState(LOCAL_EXECUTION_HOST_ID),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'focused-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+
+    for (const url of ['http://localhost:3000/', 'http://localhost:5173/app']) {
+      await openWorkspaceBrowserTab({ workspaceId: WORKSPACE_ID, url, intent: { kind: 'url' } })
+    }
+
+    expect(createBrowserTab.mock.calls.map((call) => call[2].title)).toEqual([
+      'localhost:3000',
+      'localhost:5173/app'
+    ])
+  })
+
+  it('uses the desktop provider when the runtime cannot stream browsers', async () => {
+    const createBrowserTab = vi.fn()
+    const sshHost = toSshExecutionHostId('ssh-target')
+    mocks.state = {
+      ...ownerState(sshHost, 'hub-a'),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'focused-profile',
+      defaultBrowserSessionProfileIdByHostId: { local: 'local-profile', [sshHost]: 'ssh-profile' }
+    }
+    mocks.createRemote.mockResolvedValue(false)
+
+    await openWorkspaceBrowserTab({
+      workspaceId: WORKSPACE_ID,
+      url: 'https://www.google.com/search?q=hooks',
+      intent: { kind: 'search', engine: 'google' }
+    })
+
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+    expect(createBrowserTab).toHaveBeenCalledWith(
+      WORKSPACE_ID,
+      'https://www.google.com/search?q=hooks',
+      expect.objectContaining({ sessionProfileId: 'ssh-profile', title: 'Search Google' })
+    )
+  })
+
+  it('does not fall back locally when the runtime create outcome is unknown', async () => {
+    const createBrowserTab = vi.fn()
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab,
+      defaultBrowserSessionProfileId: 'client-profile',
+      defaultBrowserSessionProfileIdByHostId: {}
+    }
+    mocks.createRemote.mockRejectedValue(new Error('create outcome unknown'))
+
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'https://example.com/',
+        intent: { kind: 'url' }
+      })
+    ).rejects.toThrow('Unable to open URL.')
+
+    expect(createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('fails closed for invalid targets and unresolved owners, then falls back locally', async () => {
+    const secretUrl = 'https://example.com/?q=secret-value'
+    const request = {
+      workspaceId: WORKSPACE_ID,
+      url: secretUrl,
+      intent: { kind: 'search' as const, engine: 'kagi' as const }
+    }
+    mocks.state = {}
+    await expect(
+      openWorkspaceBrowserTab({
+        workspaceId: WORKSPACE_ID,
+        url: 'file:///secret',
+        intent: { kind: 'url' }
+      })
+    ).rejects.toThrow('Unable to open URL.')
+    expect(mocks.getState).not.toHaveBeenCalled()
+
+    // The friendly copy stays query-free; the diagnosable reason rides on cause.
+    await expect(openWorkspaceBrowserTab(request)).rejects.toMatchObject({
+      message: 'Unable to search with Kagi.',
+      cause: expect.objectContaining({ message: 'no active worktree route' })
+    })
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+
+    for (const state of [
+      ownerState('not-a-host', 'hub-a'),
+      ownerState(toRuntimeExecutionHostId('hub-b'), 'hub-a')
+    ]) {
+      mocks.state = state
+      await expect(openWorkspaceBrowserTab(request)).rejects.toThrow('Unable to search with Kagi.')
+    }
+    expect(mocks.createRemote).not.toHaveBeenCalled()
+
+    mocks.state = {
+      ...ownerState(toRuntimeExecutionHostId('hub-a')),
+      ...browserCapableRuntime('hub-a'),
+      createBrowserTab: vi.fn(),
+      defaultBrowserSessionProfileId: 'focused-profile',
+      defaultBrowserSessionProfileIdByHostId: { local: 'local-profile' }
+    }
+    mocks.createRemote.mockResolvedValue(false)
+    await expect(openWorkspaceBrowserTab(request)).rejects.toThrow('Unable to search with Kagi.')
+    expect(mocks.state.createBrowserTab).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/lib/workspace-browser-tab-open.ts b/src/renderer/src/lib/workspace-browser-tab-open.ts
new file mode 100644
index 00000000000..cc6adbb5669
--- /dev/null
+++ b/src/renderer/src/lib/workspace-browser-tab-open.ts
@@ -0,0 +1,240 @@
+import { translate } from '@/i18n/i18n'
+import { createWebRuntimeSessionBrowserTab } from '@/runtime/web-runtime-session'
+import { useAppStore } from '@/store'
+import type { AppState } from '@/store/types'
+import {
+  LOCAL_EXECUTION_HOST_ID,
+  parseExecutionHostId,
+  type ExecutionHostId
+} from '../../../shared/execution-host'
+import { SEARCH_ENGINE_LABELS, type SearchEngine } from '../../../shared/browser-url'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../shared/constants'
+import { BROWSER_SCREENCAST_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import {
+  getClientCreationActionPolicy,
+  type ClientCreationActionAvailability
+} from './client-creation-action-policy'
+import { resolveWorktreeOperationRoute } from './worktree-operation-route'
+
+export type WorkspaceBrowserTabIntent = { kind: 'url' } | { kind: 'search'; engine: SearchEngine }
+
+export type OpenWorkspaceBrowserTabRequest = {
+  workspaceId: string
+  targetGroupId?: string
+  url: string
+  intent: WorkspaceBrowserTabIntent
+  expectedRuntimeEnvironmentId?: string
+}
+
+function isExpectedRuntimeBrowserRoute(
+  state: AppState,
+  availability: ClientCreationActionAvailability,
+  route: ReturnType<typeof resolveWorktreeOperationRoute>,
+  workspaceId: string,
+  expectedRuntimeEnvironmentId: string
+): boolean {
+  if (availability.state !== 'enabled' || workspaceId === FLOATING_TERMINAL_WORKTREE_ID || !route) {
+    return false
+  }
+  const expectedEnvironmentId = expectedRuntimeEnvironmentId.trim()
+  const environmentId = route.runtimeEnvironmentId?.trim() || null
+  const capabilities =
+    state.runtimeStatusByEnvironmentId?.get(expectedEnvironmentId)?.status?.capabilities
+  if (
+    environmentId !== expectedEnvironmentId ||
+    !capabilities?.includes(BROWSER_SCREENCAST_RUNTIME_CAPABILITY)
+  ) {
+    return false
+  }
+  const host = parseExecutionHostId(route.executionHostId)
+  return (
+    !route.executionHostId ||
+    Boolean(host && (host.kind !== 'runtime' || host.environmentId === environmentId))
+  )
+}
+
+export function canOpenWorkspaceBrowserTabOnRuntime(
+  state: AppState,
+  workspaceId: string,
+  expectedRuntimeEnvironmentId: string
+): boolean {
+  const availability = getClientCreationActionPolicy(state, workspaceId)['managed-browser']
+  const route = resolveWorktreeOperationRoute(state, workspaceId)
+  return isExpectedRuntimeBrowserRoute(
+    state,
+    availability,
+    route,
+    workspaceId,
+    expectedRuntimeEnvironmentId
+  )
+}
+
+// Why: concurrent URL tabs are indistinguishable under a shared "Open URL"
+// label until the page title loads; the query string stays out so a typed URL
+// does not park credentials or tokens in persisted tab state.
+function urlTabTitle(url: string): string | null {
+  try {
+    // host, not hostname: localhost:3000 and localhost:5173 are different tabs.
+    const parsed = new URL(url)
+    return `${parsed.host}${parsed.pathname === '/' ? '' : parsed.pathname}`
+  } catch {
+    return null
+  }
+}
+
+function intentPresentation(
+  intent: WorkspaceBrowserTabIntent,
+  url: string
+): {
+  error: string
+  title: string
+} {
+  if (intent.kind === 'url') {
+    return {
+      error: translate('auto.lib.workspace.browser.tab.open.urlFailed', 'Unable to open URL.'),
+      title:
+        urlTabTitle(url) ??
+        translate('auto.components.tab.bar.TabBarCreateEntry.7cdf8ee0c8', 'Open URL')
+    }
+  }
+  const engine = SEARCH_ENGINE_LABELS[intent.engine]
+  return {
+    error: translate(
+      'auto.lib.workspace.browser.tab.open.searchFailed',
+      'Unable to search with {{value0}}.',
+      { value0: engine }
+    ),
+    title: translate(
+      'auto.components.tab.bar.TabBarCreateEntry.searchProvider',
+      'Search {{value0}}',
+      { value0: engine }
+    )
+  }
+}
+
+// Why: the UI string stays friendly and query-free, but the diagnosable reason
+// rides along as `cause` so a failed open is not indistinguishable in logs.
+function openFailure(message: string, reason: string, cause?: unknown): Error {
+  // Why: callers only surface `message`, so log the reason here or a failed open
+  // leaves no trace at all. The reason alone — never `cause` — keeps the typed
+  // URL and search query out of the console.
+  console.warn(`[workspace-browser-tab-open] ${reason}`)
+  return new Error(message, {
+    cause: new Error(reason, cause === undefined ? undefined : { cause })
+  })
+}
+
+function validateTarget(url: string): boolean {
+  try {
+    const parsed = new URL(url)
+    return (parsed.protocol === 'http:' || parsed.protocol === 'https:') && !!parsed.hostname
+  } catch {
+    return false
+  }
+}
+
+function createClientBrowserTab(
+  state: AppState,
+  request: OpenWorkspaceBrowserTabRequest,
+  hostId: ExecutionHostId,
+  presentation: { error: string; title: string }
+): void {
+  try {
+    state.createBrowserTab(request.workspaceId, request.url, {
+      activate: true,
+      browserRuntimeEnvironmentId: null,
+      focusAddressBar: false,
+      sessionProfileId:
+        state.defaultBrowserSessionProfileIdByHostId[hostId] ??
+        state.defaultBrowserSessionProfileId,
+      targetGroupId: request.targetGroupId,
+      title: presentation.title
+    })
+  } catch (error) {
+    throw openFailure(presentation.error, 'client tab creation rejected', error)
+  }
+}
+
+function assertManagedBrowserEnabled(
+  availability: ClientCreationActionAvailability,
+  presentation: { error: string }
+): asserts availability is Extract<ClientCreationActionAvailability, { state: 'enabled' }> {
+  if (availability.state !== 'enabled') {
+    throw openFailure(presentation.error, availability.reason)
+  }
+}
+
+export async function openWorkspaceBrowserTab(
+  request: OpenWorkspaceBrowserTabRequest
+): Promise<void> {
+  const presentation = intentPresentation(request.intent, request.url)
+  if (!validateTarget(request.url)) {
+    throw openFailure(presentation.error, 'target is not an http(s) URL')
+  }
+  const state = useAppStore.getState()
+  const availability = getClientCreationActionPolicy(state, request.workspaceId)['managed-browser']
+  assertManagedBrowserEnabled(availability, presentation)
+  const route = resolveWorktreeOperationRoute(state, request.workspaceId)
+  if (!route) {
+    throw openFailure(presentation.error, 'no active worktree route')
+  }
+  const environmentId = route.runtimeEnvironmentId?.trim() || null
+  const expectedEnvironmentId =
+    request.expectedRuntimeEnvironmentId === undefined
+      ? null
+      : request.expectedRuntimeEnvironmentId.trim()
+  if (
+    expectedEnvironmentId !== null &&
+    !isExpectedRuntimeBrowserRoute(
+      state,
+      availability,
+      route,
+      request.workspaceId,
+      expectedEnvironmentId
+    )
+  ) {
+    throw openFailure(presentation.error, 'asserted runtime cannot provide this managed browser')
+  }
+  const host = parseExecutionHostId(route.executionHostId)
+  if (!environmentId) {
+    if (!host || host.kind === 'runtime') {
+      throw openFailure(presentation.error, `unresolved client host: ${route.executionHostId}`)
+    }
+    createClientBrowserTab(state, request, host.id, presentation)
+    return
+  }
+  if (
+    route.executionHostId &&
+    (!host || (host.kind === 'runtime' && host.environmentId !== environmentId))
+  ) {
+    throw openFailure(
+      presentation.error,
+      `host ${route.executionHostId} does not own runtime ${environmentId}`
+    )
+  }
+  if (availability.provider === 'local-client') {
+    const localHostId = host && host.kind !== 'runtime' ? host.id : LOCAL_EXECUTION_HOST_ID
+    createClientBrowserTab(state, request, localHostId, presentation)
+    return
+  }
+  let created = false
+  try {
+    created = await createWebRuntimeSessionBrowserTab({
+      worktreeId: request.workspaceId,
+      environmentId,
+      url: request.url,
+      targetGroupId: request.targetGroupId,
+      // Why: the tab is opened from this workspace's tab bar, so surface that
+      // workspace — otherwise a background worktree looks like nothing happened.
+      selectWorktree: true,
+      stagedTitle: presentation.title,
+      stagedFocusAddressBar: false,
+      failureLogMode: 'operation-only'
+    })
+  } catch (error) {
+    throw openFailure(presentation.error, 'runtime browser tab creation failed', error)
+  }
+  if (!created) {
+    throw openFailure(presentation.error, 'runtime browser tab creation was unavailable')
+  }
+}
diff --git a/src/renderer/src/lib/workspace-emoji-shortcodes.ts b/src/renderer/src/lib/workspace-emoji-shortcodes.ts
index 23feeb735e0..29e06dc74c9 100644
--- a/src/renderer/src/lib/workspace-emoji-shortcodes.ts
+++ b/src/renderer/src/lib/workspace-emoji-shortcodes.ts
@@ -25,7 +25,7 @@ const MATCH_TIER = { exact: 0, prefix: 1, wordStart: 2, substring: 3 } as const
 
 function matchTier(shortcode: string, query: string): number | null {
   const index = shortcode.indexOf(query)
-  if (index < 0) {
+  if (index === -1) {
     return null
   }
   if (index === 0) {
diff --git a/src/renderer/src/lib/workspace-port-actions.ts b/src/renderer/src/lib/workspace-port-actions.ts
index 07643a186a8..a529bc2d31b 100644
--- a/src/renderer/src/lib/workspace-port-actions.ts
+++ b/src/renderer/src/lib/workspace-port-actions.ts
@@ -1,6 +1,7 @@
 import { activateAndRevealWorktree } from '@/lib/worktree-activation'
 import type { useAppStore } from '@/store'
 import {
+  assertRuntimeEnvironmentCapability,
   callRuntimeRpc,
   RuntimeRpcCallError,
   type RuntimeClientTarget
@@ -15,6 +16,8 @@ import type {
 import type { LocalhostWorktreeLabelRoute } from '../../../shared/localhost-worktree-labels'
 import { runWorkspacePortScanForTarget } from './workspace-port-scan-client'
 import { browserUrlForPort } from './workspace-port-urls'
+import { BROWSER_SCREENCAST_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import { RUNTIME_BROWSER_UNAVAILABLE_MESSAGE } from './client-creation-action-policy'
 
 export { addressForPort } from './workspace-port-urls'
 
@@ -124,13 +127,21 @@ export async function openWorkspacePortInBrowser(args: {
   activateAndRevealWorktree(worktreeId)
   if (args.runtimeTarget.kind === 'environment') {
     try {
+      await assertRuntimeEnvironmentCapability(
+        args.runtimeTarget.environmentId,
+        BROWSER_SCREENCAST_RUNTIME_CAPABILITY,
+        RUNTIME_BROWSER_UNAVAILABLE_MESSAGE
+      )
       const remotePage = await callRuntimeRpc<{ browserPageId: string }>(
         args.runtimeTarget,
         'browser.tabCreate',
         { worktree: toRuntimeWorktreeSelector(worktreeId), url },
         { timeoutMs: 30_000 }
       )
-      const tab = args.createBrowserTab(worktreeId, url, { activate: true })
+      const tab = args.createBrowserTab(worktreeId, url, {
+        activate: true,
+        browserRuntimeEnvironmentId: args.runtimeTarget.environmentId
+      })
       if (!tab.activePageId) {
         return { ok: false, reason: 'Failed to create a browser page.' }
       }
@@ -144,8 +155,13 @@ export async function openWorkspacePortInBrowser(args: {
       return { ok: false, reason: message || 'Failed to open remote browser.' }
     }
   }
-  args.createBrowserTab(worktreeId, url, { activate: true })
-  return { ok: true }
+  try {
+    args.createBrowserTab(worktreeId, url, { activate: true })
+    return { ok: true }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error)
+    return { ok: false, reason: message || 'Failed to open browser.' }
+  }
 }
 
 export async function refreshWorkspacePortScanAfterStop(args: {
diff --git a/src/renderer/src/lib/worktree-activation-created-agent.test.ts b/src/renderer/src/lib/worktree-activation-created-agent.test.ts
index cc2af6e7d7c..e8a1ef3f052 100644
--- a/src/renderer/src/lib/worktree-activation-created-agent.test.ts
+++ b/src/renderer/src/lib/worktree-activation-created-agent.test.ts
@@ -1,5 +1,6 @@
 import { afterEach, describe, expect, it, vi } from 'vitest'
 import { getDefaultSettings } from '../../../shared/constants'
+import { TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
 import { useAppStore } from '@/store'
 import {
   activateAndRevealWorktree,
@@ -23,6 +24,35 @@ function makeWebRuntimeWorktree() {
   }
 }
 
+function makeWakeTerminalRuntimeCall(worktreeId: string) {
+  return vi.fn(async (args: { method?: string }) => {
+    if (args.method === 'status.get') {
+      return {
+        ok: true,
+        result: { capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY] }
+      }
+    }
+    if (args.method === 'session.tabs.list') {
+      return {
+        ok: true,
+        result: {
+          worktree: worktreeId,
+          publicationEpoch: 'epoch-1',
+          snapshotVersion: 1,
+          activeGroupId: null,
+          activeTabId: null,
+          activeTabType: null,
+          tabs: []
+        }
+      }
+    }
+    return {
+      ok: true,
+      result: { tab: { id: 'host-tab-1::leaf-1', leafId: 'leaf-1' } }
+    }
+  })
+}
+
 /** Activates and asserts a focusable tab appeared with no queued startup, returning its id. */
 function activateAndExpectNoRelaunch(
   worktreeId: string,
@@ -536,16 +566,7 @@ describe('activateAndRevealWorktree', () => {
 
   it('respawns a host terminal when waking a slept web workspace with dead local PTYs', async () => {
     const worktree = makeWebRuntimeWorktree()
-    const callRuntimeEnvironment = vi
-      .fn()
-      .mockResolvedValueOnce({
-        ok: true,
-        result: { repoId: worktree.repoId, worktreeId: worktree.id, activated: true }
-      })
-      .mockResolvedValueOnce({
-        ok: true,
-        result: { tabId: 'host-tab-1', terminal: 'term_host' }
-      })
+    const callRuntimeEnvironment = makeWakeTerminalRuntimeCall(worktree.id)
     ;(globalThis as { __ORCA_WEB_CLIENT__?: boolean }).__ORCA_WEB_CLIENT__ = true
     vi.stubGlobal('window', {
       api: {
@@ -612,9 +633,19 @@ describe('activateAndRevealWorktree', () => {
     })
 
     ensureWebRuntimeWorktreeTerminalAfterWake(worktree.id)
-    await new Promise((resolve) => setTimeout(resolve, 0))
+    await vi.waitFor(() => {
+      expect(callRuntimeEnvironment).toHaveBeenCalledTimes(3)
+    })
 
-    expect(callRuntimeEnvironment).toHaveBeenCalledWith(
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      1,
+      expect.objectContaining({
+        selector: 'web-runtime-1',
+        method: 'status.get'
+      })
+    )
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      2,
       expect.objectContaining({
         selector: 'web-runtime-1',
         method: 'session.tabs.createTerminal'
@@ -624,10 +655,7 @@ describe('activateAndRevealWorktree', () => {
 
   it('respawns wake terminals on the explicit owner runtime when focus changed', async () => {
     const worktree = makeWorktree()
-    const callRuntimeEnvironment = vi.fn().mockResolvedValue({
-      ok: true,
-      result: { tabId: 'host-tab-1', terminal: 'term_host' }
-    })
+    const callRuntimeEnvironment = makeWakeTerminalRuntimeCall(worktree.id)
     ;(globalThis as { __ORCA_WEB_CLIENT__?: boolean }).__ORCA_WEB_CLIENT__ = true
     vi.stubGlobal('window', {
       api: {
@@ -676,9 +704,19 @@ describe('activateAndRevealWorktree', () => {
     })
 
     ensureWebRuntimeWorktreeTerminalAfterWake(worktree.id)
-    await new Promise((resolve) => setTimeout(resolve, 0))
+    await vi.waitFor(() => {
+      expect(callRuntimeEnvironment).toHaveBeenCalledTimes(3)
+    })
 
-    expect(callRuntimeEnvironment).toHaveBeenCalledWith(
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      1,
+      expect.objectContaining({
+        selector: 'owner-runtime',
+        method: 'status.get'
+      })
+    )
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      2,
       expect.objectContaining({
         selector: 'owner-runtime',
         method: 'session.tabs.createTerminal'
diff --git a/src/renderer/src/lib/worktree-activation-empty-remote.test.ts b/src/renderer/src/lib/worktree-activation-empty-remote.test.ts
index 49f38e7aa7c..c4e2edc4907 100644
--- a/src/renderer/src/lib/worktree-activation-empty-remote.test.ts
+++ b/src/renderer/src/lib/worktree-activation-empty-remote.test.ts
@@ -1,6 +1,7 @@
 import path from 'node:path'
 import { afterEach, describe, expect, it, vi } from 'vitest'
 import { getDefaultSettings } from '../../../shared/constants'
+import { TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
 import type { Worktree } from '../../../shared/types'
 import { resetWebRuntimeWakeTerminalRespawnForTests } from '@/runtime/web-runtime-wake-terminal-respawn'
 import { resetWebSessionTabsSnapshotFreshnessForTests } from '@/runtime/web-session-tabs-sync'
@@ -48,21 +49,43 @@ function makeWorktree(): Worktree {
 describe('empty remote worktree activation', () => {
   it('creates a host terminal when waking an empty remote workspace', async () => {
     const worktree = makeWorktree()
-    const callRuntimeEnvironment = vi.fn().mockResolvedValueOnce({
-      ok: true,
-      result: {
-        tab: {
-          type: 'terminal',
-          id: 'host-tab-1::leaf-1',
-          parentTabId: 'host-tab-1',
-          leafId: 'leaf-1',
-          title: 'Terminal 1',
-          terminal: 'term_host',
-          status: 'ready',
-          isActive: true
-        },
-        publicationEpoch: 'epoch-1',
-        snapshotVersion: 1
+    const callRuntimeEnvironment = vi.fn(async (args: { method?: string }) => {
+      if (args.method === 'status.get') {
+        return {
+          ok: true,
+          result: { capabilities: [TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY] }
+        }
+      }
+      if (args.method === 'session.tabs.list') {
+        return {
+          ok: true,
+          result: {
+            worktree: worktree.id,
+            publicationEpoch: 'epoch-1',
+            snapshotVersion: 1,
+            activeGroupId: null,
+            activeTabId: null,
+            activeTabType: null,
+            tabs: []
+          }
+        }
+      }
+      return {
+        ok: true,
+        result: {
+          tab: {
+            type: 'terminal',
+            id: 'host-tab-1::leaf-1',
+            parentTabId: 'host-tab-1',
+            leafId: 'leaf-1',
+            title: 'Terminal 1',
+            terminal: 'term_host',
+            status: 'ready',
+            isActive: true
+          },
+          publicationEpoch: 'epoch-1',
+          snapshotVersion: 1
+        }
       }
     })
     ;(globalThis as { __ORCA_WEB_CLIENT__?: boolean }).__ORCA_WEB_CLIENT__ = true
@@ -100,10 +123,18 @@ describe('empty remote worktree activation', () => {
 
     ensureWebRuntimeWorktreeTerminalAfterWake(worktree.id)
     await vi.waitFor(() => {
-      expect(callRuntimeEnvironment).toHaveBeenCalled()
+      expect(callRuntimeEnvironment).toHaveBeenCalledTimes(3)
     })
 
-    expect(callRuntimeEnvironment).toHaveBeenCalledWith(
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      1,
+      expect.objectContaining({
+        selector: 'web-runtime-1',
+        method: 'status.get'
+      })
+    )
+    expect(callRuntimeEnvironment).toHaveBeenNthCalledWith(
+      2,
       expect.objectContaining({
         selector: 'web-runtime-1',
         method: 'session.tabs.createTerminal',
diff --git a/src/renderer/src/lib/worktree-palette-search.test.ts b/src/renderer/src/lib/worktree-palette-search.test.ts
index 81d549a346c..6e0fa1848f9 100644
--- a/src/renderer/src/lib/worktree-palette-search.test.ts
+++ b/src/renderer/src/lib/worktree-palette-search.test.ts
@@ -540,6 +540,75 @@ describe('worktree-palette-search', () => {
     })
   })
 
+  it('matches a pasted GitHub issue URL to the linked worktree instead of the URL text', () => {
+    const results = searchWorktrees(
+      [
+        makeWorktree({ id: 'wt-issue', linkedIssue: 14198 }),
+        makeWorktree({ id: 'wt-other', linkedIssue: 7, displayName: 'github.com' })
+      ],
+      'https://github.com/stablyai/orca/issues/14198',
+      repoMap,
+      null,
+      null
+    )
+
+    expect(results).toEqual([
+      expect.objectContaining({
+        worktreeId: 'wt-issue',
+        matchedField: 'issue',
+        supportingText: {
+          labelKind: 'issue',
+          text: 'Issue #14198',
+          matchRange: { start: 0, end: 'Issue #14198'.length }
+        }
+      })
+    ])
+  })
+
+  it('matches a pasted GitHub pull URL to the linked worktree', () => {
+    const results = searchWorktrees(
+      [
+        makeWorktree({
+          id: 'wt-pr',
+          linkedPR: 12789,
+          linkedWorkItem: {
+            provider: 'github',
+            type: 'pr',
+            number: 12789,
+            title: 'Perf',
+            url: 'https://github.com/stablyai/orca/pull/12789'
+          }
+        }),
+        makeWorktree({ id: 'wt-issue', linkedIssue: 12789 })
+      ],
+      'https://github.com/stablyai/orca/pull/12789',
+      repoMap,
+      null,
+      null
+    )
+
+    expect(results.map((result) => result.worktreeId)).toEqual(['wt-pr'])
+  })
+
+  it('matches a pasted Linear issue URL to the linked worktree', () => {
+    const results = searchWorktrees(
+      [
+        makeWorktree({
+          id: 'wt-linear',
+          linkedLinearIssue: 'STA-4052',
+          linkedLinearIssueOrganizationUrlKey: 'stably'
+        }),
+        makeWorktree({ id: 'wt-name', displayName: 'linear.app' })
+      ],
+      'https://linear.app/stably/issue/STA-4052/agent-terminals-disappearing-randomly',
+      repoMap,
+      null,
+      null
+    )
+
+    expect(results.map((result) => result.worktreeId)).toEqual(['wt-linear'])
+  })
+
   it('matches workspace ports by port number before issue and PR numbers', () => {
     const results = searchWorktrees(
       [makeWorktree({ id: 'wt-port', linkedIssue: 3000 })],
diff --git a/src/renderer/src/lib/worktree-palette-search.ts b/src/renderer/src/lib/worktree-palette-search.ts
index 074587e8aec..a2fa082456f 100644
--- a/src/renderer/src/lib/worktree-palette-search.ts
+++ b/src/renderer/src/lib/worktree-palette-search.ts
@@ -8,6 +8,10 @@ import type { Repo, Worktree } from '../../../shared/types'
 import { extractWorktreePaletteCommentSnippet } from './worktree-palette-comment-snippet'
 import { isWorktreePaletteQueryTooLarge } from './worktree-palette-query-bounds'
 import { matchWorktreePaletteReview } from './worktree-palette-review-match'
+import {
+  matchWorktreePaletteTaskUrl,
+  parseCmdJTaskSourceUrl
+} from './worktree-palette-task-url-match'
 
 export type MatchRange = { start: number; end: number }
 
@@ -88,6 +92,21 @@ export function searchWorktrees(
   const q = trimmedQuery.toLowerCase()
   const numericQuery = q.startsWith('#') ? q.slice(1) : q
   const results: PaletteSearchResult[] = []
+  const taskSourceUrl = parseCmdJTaskSourceUrl(trimmedQuery)
+  if (taskSourceUrl) {
+    for (const worktree of worktrees) {
+      const match = matchWorktreePaletteTaskUrl({
+        worktree,
+        intent: taskSourceUrl,
+        repo: repoMap.get(worktree.repoId),
+        review: checksReviewByWorktree?.get(worktree)
+      })
+      if (match) {
+        results.push(match)
+      }
+    }
+    return results
+  }
 
   // Support "repo/worktree" composite queries (e.g. "orca/main") so users can
   // narrow by repo and worktree in a single token. Worktrees are identified by
diff --git a/src/renderer/src/lib/worktree-palette-task-url-match.test.ts b/src/renderer/src/lib/worktree-palette-task-url-match.test.ts
new file mode 100644
index 00000000000..db626e590d6
--- /dev/null
+++ b/src/renderer/src/lib/worktree-palette-task-url-match.test.ts
@@ -0,0 +1,236 @@
+import { describe, expect, it } from 'vitest'
+import type { Repo, Worktree } from '../../../shared/types'
+import {
+  getCmdJTaskUrlCreatePreview,
+  matchWorktreePaletteTaskUrl,
+  parseCmdJTaskSourceUrl,
+  withResolvedCmdJGitHubPreview
+} from './worktree-palette-task-url-match'
+
+function makeWorktree(overrides: Partial<Worktree> = {}): Worktree {
+  return {
+    id: 'wt-1',
+    repoId: 'repo-1',
+    path: '/tmp/wt-1',
+    head: 'abc123',
+    branch: 'refs/heads/feature/url-match',
+    isBare: false,
+    isMainWorktree: false,
+    displayName: 'URL match',
+    comment: '',
+    linkedIssue: null,
+    linkedPR: null,
+    linkedLinearIssue: null,
+    isArchived: false,
+    isUnread: false,
+    isPinned: false,
+    sortOrder: 0,
+    lastActivityAt: 0,
+    ...overrides
+  }
+}
+
+const orcaRepo: Repo = {
+  id: 'repo-1',
+  path: '/repo/orca',
+  displayName: 'stablyai/orca',
+  badgeColor: '#22c55e',
+  addedAt: 0
+}
+
+describe('parseCmdJTaskSourceUrl', () => {
+  it('parses GitHub issue and pull URLs', () => {
+    expect(parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/issues/14198')).toEqual({
+      provider: 'github',
+      link: {
+        slug: { owner: 'stablyai', repo: 'orca', host: 'github.com' },
+        type: 'issue',
+        number: 14198
+      }
+    })
+    expect(parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/pull/12789')).toEqual({
+      provider: 'github',
+      link: {
+        slug: { owner: 'stablyai', repo: 'orca', host: 'github.com' },
+        type: 'pr',
+        number: 12789
+      }
+    })
+  })
+
+  it('parses Linear, GitLab, and Jira URLs', () => {
+    expect(
+      parseCmdJTaskSourceUrl(
+        'https://linear.app/stably/issue/STA-4052/agent-terminals-disappearing-randomly'
+      )
+    ).toEqual({
+      provider: 'linear',
+      intent: { identifier: 'STA-4052', organizationUrlKey: 'stably' }
+    })
+    expect(
+      parseCmdJTaskSourceUrl('https://gitlab.com/acme/orca/-/merge_requests/17')
+    ).toMatchObject({
+      provider: 'gitlab',
+      link: { type: 'mr', number: 17 }
+    })
+    expect(parseCmdJTaskSourceUrl('https://company.atlassian.net/browse/ORCA-123')).toEqual({
+      provider: 'jira',
+      parsed: {
+        issueKey: 'ORCA-123',
+        origin: 'https://company.atlassian.net',
+        sitePath: ''
+      }
+    })
+  })
+
+  it('does not treat names or repo homepages as task URLs', () => {
+    expect(parseCmdJTaskSourceUrl('sta-4052-agent-terminals')).toBeNull()
+    expect(parseCmdJTaskSourceUrl('https://github.com/stablyai/orca')).toBeNull()
+    expect(parseCmdJTaskSourceUrl('#14198')).toBeNull()
+  })
+})
+
+describe('matchWorktreePaletteTaskUrl', () => {
+  it('matches a GitHub issue URL to the linked worktree in the same repo', () => {
+    const intent = parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/issues/14198')
+    expect(intent).not.toBeNull()
+
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({ linkedIssue: 14198 }),
+        intent: intent!,
+        repo: orcaRepo
+      })
+    ).toMatchObject({
+      worktreeId: 'wt-1',
+      matchedField: 'issue',
+      supportingText: { labelKind: 'issue', text: 'Issue #14198' }
+    })
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({ linkedIssue: 14198 }),
+        intent: intent!,
+        repo: { ...orcaRepo, displayName: 'other/repo' }
+      })
+    ).toBeNull()
+  })
+
+  it('matches a GitHub work-item number when the stored URL is missing', () => {
+    const intent = parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/pull/12789')
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({
+          linkedWorkItem: {
+            provider: 'github',
+            type: 'pr',
+            number: 12789,
+            title: 'Perf',
+            url: ''
+          }
+        }),
+        intent: intent!,
+        repo: orcaRepo
+      })
+    ).toMatchObject({ matchedField: 'pr' })
+  })
+
+  it('matches a GitHub pull URL via the stored work-item URL', () => {
+    const intent = parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/pull/12789')
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({
+          linkedWorkItem: {
+            provider: 'github',
+            type: 'pr',
+            number: 12789,
+            title: 'Perf',
+            url: 'https://github.com/stablyai/orca/pull/12789'
+          }
+        }),
+        intent: intent!,
+        repo: { ...orcaRepo, displayName: 'Repo 1' }
+      })
+    ).toMatchObject({ matchedField: 'pr', supportingText: { text: 'PR #12789' } })
+  })
+
+  it('matches a Linear issue URL and rejects a different organization', () => {
+    const intent = parseCmdJTaskSourceUrl(
+      'https://linear.app/stably/issue/STA-4052/agent-terminals-disappearing-randomly'
+    )
+
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({
+          linkedLinearIssue: 'STA-4052',
+          linkedLinearIssueOrganizationUrlKey: 'stably'
+        }),
+        intent: intent!
+      })
+    ).toMatchObject({ supportingText: { text: 'STA-4052' } })
+    expect(
+      matchWorktreePaletteTaskUrl({
+        worktree: makeWorktree({
+          linkedLinearIssue: 'STA-4052',
+          linkedLinearIssueOrganizationUrlKey: 'other'
+        }),
+        intent: intent!
+      })
+    ).toBeNull()
+  })
+})
+
+describe('getCmdJTaskUrlCreatePreview', () => {
+  it('describes GitHub issue and pull URLs without fetching', () => {
+    expect(
+      getCmdJTaskUrlCreatePreview(
+        parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/issues/14198')!
+      )
+    ).toEqual({
+      provider: 'github',
+      identifier: '#14198',
+      subtitle: 'stablyai/orca',
+      kindLabel: 'GitHub issue',
+      createLabel: 'Create worktree from GitHub issue stablyai/orca#14198'
+    })
+    expect(
+      getCmdJTaskUrlCreatePreview(
+        parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/pull/12789')!
+      )?.kindLabel
+    ).toBe('GitHub pull request')
+    expect(
+      getCmdJTaskUrlCreatePreview(
+        parseCmdJTaskSourceUrl('https://gitlab.com/acme/orca/-/merge_requests/17')!
+      )
+    ).toMatchObject({
+      provider: 'gitlab',
+      identifier: '!17',
+      kindLabel: 'GitLab merge request'
+    })
+    expect(
+      getCmdJTaskUrlCreatePreview(
+        parseCmdJTaskSourceUrl('https://company.atlassian.net/browse/ORCA-123')!
+      )
+    ).toMatchObject({
+      provider: 'jira',
+      identifier: 'ORCA-123',
+      kindLabel: 'Jira issue'
+    })
+  })
+
+  it('replaces the GitHub subtitle with the resolved issue title', () => {
+    const preview = getCmdJTaskUrlCreatePreview(
+      parseCmdJTaskSourceUrl('https://github.com/stablyai/orca/issues/14198')!
+    )!
+    expect(
+      withResolvedCmdJGitHubPreview(preview, 'Agent terminals disappearing randomly', false)
+    ).toEqual(
+      expect.objectContaining({
+        subtitle: 'Agent terminals disappearing randomly',
+        createLabel:
+          'Create worktree from GitHub issue stablyai/orca#14198: Agent terminals disappearing randomly',
+        loading: false
+      })
+    )
+    expect(withResolvedCmdJGitHubPreview(preview, null, true).loading).toBe(true)
+  })
+})
diff --git a/src/renderer/src/lib/worktree-palette-task-url-match.ts b/src/renderer/src/lib/worktree-palette-task-url-match.ts
new file mode 100644
index 00000000000..4b4cbce5166
--- /dev/null
+++ b/src/renderer/src/lib/worktree-palette-task-url-match.ts
@@ -0,0 +1,319 @@
+import type { HostedReviewInfo } from '../../../shared/hosted-review'
+import {
+  parseGitHubIssueOrPRLink,
+  type GitHubIssueOrPRLink,
+  type RepoSlug
+} from '../../../shared/github-links'
+import { githubRepoIdentityKey } from '../../../shared/github-repository-identity-key'
+import { parseGitLabIssueOrMRLink } from '../../../shared/new-workspace/gitlab-links'
+import { parseJiraIssueUrl, type ParsedJiraIssueUrl } from '../../../shared/jira-issue-url'
+import { parseLinearIssueUrlIntent, type LinearIssueUrlIntent } from '../../../shared/linear-links'
+import type { Repo, Worktree } from '../../../shared/types'
+import { normalizeLinearIdentifier } from './linear-issue-workspace-attachment'
+import { isWorktreePaletteQueryTooLarge } from './worktree-palette-query-bounds'
+import type { PaletteSearchResult, PaletteSupportingText } from './worktree-palette-search'
+
+export type CmdJTaskSourceUrl =
+  | { provider: 'github'; link: GitHubIssueOrPRLink }
+  | { provider: 'linear'; intent: LinearIssueUrlIntent }
+  | {
+      provider: 'gitlab'
+      link: NonNullable<ReturnType<typeof parseGitLabIssueOrMRLink>>
+    }
+  | { provider: 'jira'; parsed: ParsedJiraIssueUrl }
+
+export type CmdJTaskUrlCreatePreview = {
+  provider: 'github' | 'gitlab' | 'jira'
+  identifier: string
+  subtitle: string
+  createLabel: string
+  kindLabel: string
+  loading?: boolean
+}
+
+export function withResolvedCmdJGitHubPreview(
+  preview: CmdJTaskUrlCreatePreview,
+  resolvedTitle: string | null,
+  loading: boolean
+): CmdJTaskUrlCreatePreview {
+  if (preview.provider !== 'github') {
+    return preview
+  }
+  if (resolvedTitle) {
+    return {
+      ...preview,
+      subtitle: resolvedTitle,
+      createLabel: `${preview.createLabel}: ${resolvedTitle}`,
+      loading: false
+    }
+  }
+  return loading ? { ...preview, loading: true } : preview
+}
+
+function githubIdentityKey(slug: RepoSlug): string {
+  return githubRepoIdentityKey({
+    owner: slug.owner,
+    repo: slug.repo,
+    host: slug.host?.replace(/^www\./i, '')
+  })
+}
+
+function githubLinksEqual(left: GitHubIssueOrPRLink, right: GitHubIssueOrPRLink): boolean {
+  return (
+    left.type === right.type &&
+    left.number === right.number &&
+    githubIdentityKey(left.slug) === githubIdentityKey(right.slug)
+  )
+}
+
+function parseOwnerRepoDisplayName(value: string | null | undefined): RepoSlug | null {
+  const match = /^([^/]+)\/([^/]+)$/.exec(value?.trim() ?? '')
+  if (!match) {
+    return null
+  }
+  return { owner: match[1], repo: match[2] }
+}
+
+function repoMatchesGitHubSlug(repo: Repo | undefined, slug: RepoSlug): boolean | 'unknown' {
+  if (!repo) {
+    return 'unknown'
+  }
+  const fromName = parseOwnerRepoDisplayName(repo.displayName)
+  if (fromName) {
+    return githubIdentityKey({ ...fromName, host: slug.host }) === githubIdentityKey(slug)
+  }
+  if (repo.upstream?.owner && repo.upstream.repo) {
+    return githubIdentityKey(repo.upstream) === githubIdentityKey(slug)
+  }
+  return 'unknown'
+}
+
+export function parseCmdJTaskSourceUrl(query: string): CmdJTaskSourceUrl | null {
+  const trimmed = query.trim()
+  if (!trimmed || isWorktreePaletteQueryTooLarge(trimmed)) {
+    return null
+  }
+
+  const linear = parseLinearIssueUrlIntent(trimmed)
+  if (linear) {
+    return { provider: 'linear', intent: linear }
+  }
+
+  const github = parseGitHubIssueOrPRLink(trimmed)
+  if (github) {
+    return { provider: 'github', link: github }
+  }
+
+  const gitlab = parseGitLabIssueOrMRLink(trimmed)
+  if (gitlab) {
+    return { provider: 'gitlab', link: gitlab }
+  }
+
+  const jira = parseJiraIssueUrl(trimmed)
+  if (jira) {
+    return { provider: 'jira', parsed: jira }
+  }
+
+  return null
+}
+
+export function getCmdJTaskUrlCreatePreview(
+  intent: CmdJTaskSourceUrl
+): CmdJTaskUrlCreatePreview | null {
+  if (intent.provider === 'linear') {
+    return null
+  }
+  if (intent.provider === 'github') {
+    const { slug, number, type } = intent.link
+    const repo = `${slug.owner}/${slug.repo}`
+    const kindLabel = type === 'pr' ? 'GitHub pull request' : 'GitHub issue'
+    return {
+      provider: 'github',
+      identifier: `#${number}`,
+      subtitle: repo,
+      kindLabel,
+      createLabel: `Create worktree from ${kindLabel} ${repo}#${number}`
+    }
+  }
+  if (intent.provider === 'gitlab') {
+    const { slug, number, type } = intent.link
+    const project = `${slug.host}/${slug.path}`
+    const kindLabel = type === 'mr' ? 'GitLab merge request' : 'GitLab issue'
+    const identifier = type === 'mr' ? `!${number}` : `#${number}`
+    return {
+      provider: 'gitlab',
+      identifier,
+      subtitle: project,
+      kindLabel,
+      createLabel: `Create worktree from ${kindLabel} ${project}${identifier}`
+    }
+  }
+  return {
+    provider: 'jira',
+    identifier: intent.parsed.issueKey,
+    subtitle: intent.parsed.origin.replace(/^https?:\/\//, ''),
+    kindLabel: 'Jira issue',
+    createLabel: `Create worktree from Jira issue ${intent.parsed.issueKey}`
+  }
+}
+
+function supportingText(
+  labelKind: PaletteSupportingText['labelKind'],
+  text: string
+): PaletteSupportingText {
+  return { labelKind, text, matchRange: { start: 0, end: text.length } }
+}
+
+function result(
+  worktreeId: string,
+  matchedField: PaletteSearchResult['matchedField'],
+  text: PaletteSupportingText
+): PaletteSearchResult {
+  return {
+    worktreeId,
+    matchedField,
+    displayNameRange: null,
+    branchRange: null,
+    repoRange: null,
+    supportingText: text
+  }
+}
+
+function worktreeMatchesGitHubUrl(
+  worktree: Worktree,
+  link: GitHubIssueOrPRLink,
+  repo: Repo | undefined,
+  review: HostedReviewInfo | null | undefined
+): boolean {
+  const linkedUrl = worktree.linkedWorkItem?.url
+    ? parseGitHubIssueOrPRLink(worktree.linkedWorkItem.url)
+    : null
+  if (linkedUrl && githubLinksEqual(linkedUrl, link)) {
+    return true
+  }
+
+  const reviewUrl = review?.url ? parseGitHubIssueOrPRLink(review.url) : null
+  if (reviewUrl && githubLinksEqual(reviewUrl, link)) {
+    return true
+  }
+
+  const linkedItem = worktree.linkedWorkItem
+  const linkedItemMatches =
+    linkedItem?.provider === 'github' &&
+    linkedItem.type === link.type &&
+    linkedItem.number === link.number
+  const numberMatches =
+    linkedItemMatches ||
+    (link.type === 'pr' ? worktree.linkedPR === link.number : worktree.linkedIssue === link.number)
+  if (!numberMatches) {
+    return false
+  }
+
+  return repoMatchesGitHubSlug(repo, link.slug) !== false
+}
+
+function worktreeMatchesLinearUrl(worktree: Worktree, intent: LinearIssueUrlIntent): boolean {
+  const identifier = normalizeLinearIdentifier(intent.identifier)
+  const linkedIdentifier =
+    normalizeLinearIdentifier(worktree.linkedLinearIssue) ??
+    normalizeLinearIdentifier(worktree.linkedWorkItem?.linearIdentifier)
+  if (!identifier || linkedIdentifier !== identifier) {
+    const linkedUrl = worktree.linkedWorkItem?.url
+      ? parseLinearIssueUrlIntent(worktree.linkedWorkItem.url)
+      : null
+    if (
+      !linkedUrl ||
+      linkedUrl.identifier !== intent.identifier ||
+      linkedUrl.organizationUrlKey.toLowerCase() !== intent.organizationUrlKey.toLowerCase()
+    ) {
+      return false
+    }
+  }
+
+  const worktreeOrg = worktree.linkedLinearIssueOrganizationUrlKey?.trim().toLowerCase()
+  if (worktreeOrg && worktreeOrg !== intent.organizationUrlKey.toLowerCase()) {
+    return false
+  }
+  return true
+}
+
+function worktreeMatchesGitLabUrl(
+  worktree: Worktree,
+  link: NonNullable<ReturnType<typeof parseGitLabIssueOrMRLink>>
+): boolean {
+  const linkedUrl = worktree.linkedWorkItem?.url
+    ? parseGitLabIssueOrMRLink(worktree.linkedWorkItem.url)
+    : null
+  if (
+    linkedUrl &&
+    linkedUrl.number === link.number &&
+    linkedUrl.type === link.type &&
+    linkedUrl.slug.host.toLowerCase() === link.slug.host.toLowerCase() &&
+    linkedUrl.slug.path.toLowerCase() === link.slug.path.toLowerCase()
+  ) {
+    return true
+  }
+  return link.type === 'mr'
+    ? worktree.linkedGitLabMR === link.number
+    : worktree.linkedGitLabIssue === link.number
+}
+
+function worktreeMatchesJiraUrl(worktree: Worktree, parsed: ParsedJiraIssueUrl): boolean {
+  if (worktree.linkedWorkItem?.jiraIdentifier?.toUpperCase() === parsed.issueKey) {
+    return true
+  }
+  const linkedUrl = worktree.linkedWorkItem?.url
+    ? parseJiraIssueUrl(worktree.linkedWorkItem.url)
+    : null
+  return (
+    linkedUrl !== null &&
+    linkedUrl.issueKey === parsed.issueKey &&
+    linkedUrl.origin === parsed.origin &&
+    linkedUrl.sitePath === parsed.sitePath
+  )
+}
+
+export function matchWorktreePaletteTaskUrl(args: {
+  worktree: Worktree
+  intent: CmdJTaskSourceUrl
+  repo?: Repo
+  review?: HostedReviewInfo | null
+}): PaletteSearchResult | null {
+  const { worktree, intent, repo, review } = args
+  if (intent.provider === 'github') {
+    if (!worktreeMatchesGitHubUrl(worktree, intent.link, repo, review)) {
+      return null
+    }
+    return result(
+      worktree.id,
+      intent.link.type === 'pr' ? 'pr' : 'issue',
+      supportingText(
+        intent.link.type === 'pr' ? 'pr' : 'issue',
+        `${intent.link.type === 'pr' ? 'PR' : 'Issue'} #${intent.link.number}`
+      )
+    )
+  }
+  if (intent.provider === 'linear') {
+    if (!worktreeMatchesLinearUrl(worktree, intent.intent)) {
+      return null
+    }
+    return result(worktree.id, 'issue', supportingText('issue', intent.intent.identifier))
+  }
+  if (intent.provider === 'gitlab') {
+    if (!worktreeMatchesGitLabUrl(worktree, intent.link)) {
+      return null
+    }
+    return result(
+      worktree.id,
+      intent.link.type === 'mr' ? 'pr' : 'issue',
+      supportingText(
+        intent.link.type === 'mr' ? 'mr' : 'issue',
+        `${intent.link.type === 'mr' ? 'MR' : 'Issue'} #${intent.link.number}`
+      )
+    )
+  }
+  if (!worktreeMatchesJiraUrl(worktree, intent.parsed)) {
+    return null
+  }
+  return result(worktree.id, 'issue', supportingText('issue', intent.parsed.issueKey))
+}
diff --git a/src/renderer/src/lib/worktree-runtime-owner-index.ts b/src/renderer/src/lib/worktree-runtime-owner-index.ts
index 8fc642cfddb..6a66d7e33f4 100644
--- a/src/renderer/src/lib/worktree-runtime-owner-index.ts
+++ b/src/renderer/src/lib/worktree-runtime-owner-index.ts
@@ -12,7 +12,7 @@ type DetectedWorktreeListing = { worktrees: readonly WorktreeOwnerRecord[] }
 type RepoOwnerRecord = Pick<Repo, 'id' | 'connectionId' | 'executionHostId'>
 type FolderWorkspaceOwnerRecord = Pick<
   FolderWorkspace,
-  'id' | 'projectGroupId' | 'connectionId' | 'executionHostId'
+  'id' | 'projectGroupId' | 'connectionId' | 'executionHostId' | 'diffComments'
 >
 type ProjectGroupOwnerRecord = Pick<ProjectGroup, 'id' | 'connectionId' | 'executionHostId'>
 
diff --git a/src/renderer/src/lib/worktree-status.ts b/src/renderer/src/lib/worktree-status.ts
index e12d197dda9..6f39d8c1e0b 100644
--- a/src/renderer/src/lib/worktree-status.ts
+++ b/src/renderer/src/lib/worktree-status.ts
@@ -2,7 +2,7 @@ import { resolveAgentTypeFromTerminalTitle } from '@/components/sidebar/worktree
 import { classifyTitleActivity } from '@/lib/pane-agent-evidence'
 import { tabHasLivePty } from '@/lib/tab-has-live-pty'
 import { resolveRuntimePaneTitleLeafIdFromRoot } from '@/lib/runtime-pane-title-leaf-id'
-import { containsBrailleSpinner } from '../../../shared/agent-title-core'
+import { containsAgentSpinnerGlyph } from '../../../shared/agent-title-core'
 import type {
   TerminalLayoutSnapshot,
   TerminalPaneLayoutNode,
@@ -106,7 +106,7 @@ function titleStatusIsAgentAttributable(title: string, launchAgent?: TuiAgent |
   // Why: a spinner proves activity but not identity (Claude's thinking title has no provider
   // token, #9040); the tab's launch identity supplies it, mirroring the row builder's spinner
   // fallback (#9647) so the dot and the sidebar row agree.
-  return containsBrailleSpinner(title) && Boolean(launchAgent)
+  return containsAgentSpinnerGlyph(title) && Boolean(launchAgent)
 }
 
 export function getWorktreeStatusLabel(status: WorktreeStatus): string {
diff --git a/src/renderer/src/runtime/abortable-runtime-environment-call.ts b/src/renderer/src/runtime/abortable-runtime-environment-call.ts
index 619dfc517ce..357bf1b2d08 100644
--- a/src/renderer/src/runtime/abortable-runtime-environment-call.ts
+++ b/src/renderer/src/runtime/abortable-runtime-environment-call.ts
@@ -12,7 +12,8 @@ export async function callAbortableRuntimeEnvironment(
   params: unknown,
   timeoutMs: number | undefined,
   signal: AbortSignal,
-  expectedEnvironmentPairingRevision?: number
+  expectedEnvironmentPairingRevision?: number,
+  expectedRuntimeId?: string
 ): Promise<RuntimeRpcResponse<unknown>> {
   if (signal.aborted) {
     throw createRuntimeRpcAbortError()
@@ -47,7 +48,14 @@ export async function callAbortableRuntimeEnvironment(
     signal.addEventListener('abort', onAbort, { once: true })
     void window.api.runtimeEnvironments
       .subscribe(
-        { selector: environmentId, method, params, timeoutMs, expectedEnvironmentPairingRevision },
+        {
+          selector: environmentId,
+          method,
+          params,
+          timeoutMs,
+          expectedEnvironmentPairingRevision,
+          expectedRuntimeId
+        },
         {
           onResponse: (response) => finish(() => resolve(response)),
           onError: (error) => finish(() => reject(new Error(error.message))),
diff --git a/src/renderer/src/runtime/remote-agent-session-launch.test.ts b/src/renderer/src/runtime/remote-agent-session-launch.test.ts
index 0fb6399d688..aea62019626 100644
--- a/src/renderer/src/runtime/remote-agent-session-launch.test.ts
+++ b/src/renderer/src/runtime/remote-agent-session-launch.test.ts
@@ -1,8 +1,6 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 
-const mocks = vi.hoisted(() => ({
-  supportsCapability: vi.fn()
-}))
+const mocks = vi.hoisted(() => ({ probe: vi.fn() }))
 
 vi.mock('./runtime-rpc-client', () => ({
   RuntimeRpcCallError: class RuntimeRpcCallError extends Error {
@@ -12,75 +10,110 @@ vi.mock('./runtime-rpc-client', () => ({
       this.code = response.error.code
     }
   },
-  runtimeEnvironmentSupportsCapability: mocks.supportsCapability
+  probeLiveRuntimeEnvironmentCapabilities: mocks.probe
 }))
 
 import { RuntimeRpcCallError } from './runtime-rpc-client'
 import { runRemoteAgentSessionLaunch } from './remote-agent-session-launch'
 
+const authority = {
+  runtimeId: 'runtime-1',
+  expectedEnvironmentPairingRevision: 7,
+  capabilities: [
+    'terminal.attribution-removed.v1',
+    'agent-session.host-authority.v1',
+    'agent-session.omp-resume-path.v1'
+  ]
+} as const
+
 describe('remote agent-session launch routing', () => {
   beforeEach(() => {
-    mocks.supportsCapability.mockReset()
+    mocks.probe.mockReset()
+    mocks.probe.mockResolvedValue({ supported: true, authority })
   })
 
-  it('uses host authority only when the host advertises it', async () => {
+  it('uses one live all-capability probe before host authority', async () => {
+    const hostAuthority = vi.fn().mockResolvedValue('structured')
+    const legacy = vi.fn().mockResolvedValue('legacy')
+
+    await expect(
+      runRemoteAgentSessionLaunch({
+        environmentId: 'env-1',
+        expectedEnvironmentPairingRevision: 7,
+        hostAuthority,
+        requiredHostAuthorityCapabilities: ['agent-session.omp-resume-path.v1'],
+        legacy
+      })
+    ).resolves.toBe('structured')
+
+    expect(mocks.probe).toHaveBeenCalledWith({
+      environmentId: 'env-1',
+      requiredCapabilities: [
+        'terminal.attribution-removed.v1',
+        'agent-session.host-authority.v1',
+        'agent-session.omp-resume-path.v1'
+      ],
+      timeoutMs: 15_000,
+      expectedEnvironmentPairingRevision: 7
+    })
+    expect(hostAuthority).toHaveBeenCalledWith(authority)
+    expect(legacy).not.toHaveBeenCalled()
+  })
+
+  it('uses fenced legacy when a structured-only capability is absent', async () => {
+    mocks.probe.mockResolvedValue({ supported: false, authority })
     const hostAuthority = vi.fn().mockResolvedValue('structured')
     const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockResolvedValue(true)
 
     await expect(
       runRemoteAgentSessionLaunch({
         environmentId: 'env-1',
         hostAuthority,
-        hostAuthorityCapability: 'agent-session.omp-resume-path.v1',
+        requiredHostAuthorityCapabilities: ['agent-session.omp-resume-path.v1'],
         legacy
       })
-    ).resolves.toBe('structured')
-    expect(mocks.supportsCapability).toHaveBeenCalledWith(
-      'env-1',
-      'agent-session.omp-resume-path.v1'
-    )
-    expect(hostAuthority).toHaveBeenCalledOnce()
+    ).resolves.toBe('legacy')
+
+    expect(hostAuthority).not.toHaveBeenCalled()
+    expect(legacy).toHaveBeenCalledWith({ skipCompatibilityCheck: true, authority })
+  })
+
+  it('fails closed without attribution-removal capability evidence', async () => {
+    mocks.probe.mockResolvedValue({
+      supported: false,
+      authority: { ...authority, capabilities: ['agent-session.host-authority.v1'] }
+    })
+    const legacy = vi.fn().mockResolvedValue('legacy')
+
+    await expect(
+      runRemoteAgentSessionLaunch({ environmentId: 'env-1', hostAuthority: vi.fn(), legacy })
+    ).rejects.toThrow('Update the host and try again')
     expect(legacy).not.toHaveBeenCalled()
   })
 
-  it('preserves the exact legacy path when the capability is absent', async () => {
-    const hostAuthority = vi.fn().mockResolvedValue('structured')
+  it('fails closed when the live capability probe fails', async () => {
+    mocks.probe.mockRejectedValue(
+      Object.assign(new Error('status temporarily unavailable'), { code: 'runtime_timeout' })
+    )
     const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockResolvedValue(false)
 
-    await expect(
-      runRemoteAgentSessionLaunch({ environmentId: 'env-1', hostAuthority, legacy })
-    ).resolves.toBe('legacy')
-    expect(legacy).toHaveBeenCalledOnce()
-    expect(hostAuthority).not.toHaveBeenCalled()
+    const result = expect(
+      runRemoteAgentSessionLaunch({ environmentId: 'env-1', hostAuthority: vi.fn(), legacy })
+    ).rejects
+    await result.toThrow('Update the host and try again')
+    await result.toMatchObject({ code: 'runtime_timeout' })
+    expect(legacy).not.toHaveBeenCalled()
   })
 
-  it('keeps legacy behavior when a read-only capability probe fails', async () => {
-    const hostAuthority = vi.fn().mockResolvedValue('structured')
-    const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockRejectedValue(new Error('status temporarily unavailable'))
-
-    await expect(
-      runRemoteAgentSessionLaunch({ environmentId: 'env-1', hostAuthority, legacy })
-    ).resolves.toBe('legacy')
-    expect(legacy).toHaveBeenCalledOnce()
-    expect(hostAuthority).not.toHaveBeenCalled()
-  })
-
-  it('does not bypass an incompatible runtime protocol', async () => {
+  it('preserves an incompatible runtime protocol error', async () => {
     const compatibilityError = Object.assign(new Error('runtime incompatible'), {
       code: 'runtime_compat_block'
     })
+    mocks.probe.mockRejectedValue(compatibilityError)
     const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockRejectedValue(compatibilityError)
 
     await expect(
-      runRemoteAgentSessionLaunch({
-        environmentId: 'env-1',
-        hostAuthority: vi.fn(),
-        legacy
-      })
+      runRemoteAgentSessionLaunch({ environmentId: 'env-1', hostAuthority: vi.fn(), legacy })
     ).rejects.toBe(compatibilityError)
     expect(legacy).not.toHaveBeenCalled()
   })
@@ -88,7 +121,6 @@ describe('remote agent-session launch routing', () => {
   it('never downgrades after structured dispatch has started', async () => {
     const structuredError = new Error('structured response was lost')
     const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockResolvedValue(true)
 
     await expect(
       runRemoteAgentSessionLaunch({
@@ -100,14 +132,13 @@ describe('remote agent-session launch routing', () => {
     expect(legacy).not.toHaveBeenCalled()
   })
 
-  it('uses legacy only for the host pre-side-effect lower-owner response', async () => {
-    const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockResolvedValue(true)
+  it('uses fenced legacy for the pre-side-effect lower-owner response', async () => {
     const legacyRequired = new RuntimeRpcCallError({
       id: 'request-1',
       ok: false,
       error: { code: 'agent_session_legacy_required', message: 'legacy required' }
     })
+    const legacy = vi.fn().mockResolvedValue('legacy')
 
     await expect(
       runRemoteAgentSessionLaunch({
@@ -116,17 +147,16 @@ describe('remote agent-session launch routing', () => {
         legacy
       })
     ).resolves.toBe('legacy')
-    expect(legacy).toHaveBeenCalledOnce()
+    expect(legacy).toHaveBeenCalledWith({ skipCompatibilityCheck: true, authority })
   })
 
-  it('uses legacy when a replaced old host does not recognize the structured method', async () => {
-    const legacy = vi.fn().mockResolvedValue('legacy')
-    mocks.supportsCapability.mockResolvedValue(true)
+  it('does not downgrade when a replacement host rejects the structured method', async () => {
     const methodNotFound = new RuntimeRpcCallError({
       id: 'request-1',
       ok: false,
       error: { code: 'method_not_found', message: 'Unknown method' }
     })
+    const legacy = vi.fn().mockResolvedValue('legacy')
 
     await expect(
       runRemoteAgentSessionLaunch({
@@ -134,16 +164,16 @@ describe('remote agent-session launch routing', () => {
         hostAuthority: vi.fn().mockRejectedValue(methodNotFound),
         legacy
       })
-    ).resolves.toBe('legacy')
-    expect(legacy).toHaveBeenCalledOnce()
+    ).rejects.toBe(methodNotFound)
+    expect(legacy).not.toHaveBeenCalled()
   })
 
-  it('uses legacy directly when no structured form exists', async () => {
+  it('probes and fences legacy when no structured form exists', async () => {
     const legacy = vi.fn().mockResolvedValue('legacy')
 
     await expect(runRemoteAgentSessionLaunch({ environmentId: 'env-1', legacy })).resolves.toBe(
       'legacy'
     )
-    expect(mocks.supportsCapability).not.toHaveBeenCalled()
+    expect(legacy).toHaveBeenCalledWith({ skipCompatibilityCheck: true, authority })
   })
 })
diff --git a/src/renderer/src/runtime/remote-agent-session-launch.ts b/src/renderer/src/runtime/remote-agent-session-launch.ts
index b00c6cbbdab..82c61d89ab1 100644
--- a/src/renderer/src/runtime/remote-agent-session-launch.ts
+++ b/src/renderer/src/runtime/remote-agent-session-launch.ts
@@ -1,46 +1,61 @@
 import { AGENT_SESSION_HOST_AUTHORITY_CAPABILITY } from '../../../shared/agent-session-host-authority'
-import type { RuntimeCapability } from '../../../shared/protocol-version'
-import { RuntimeRpcCallError, runtimeEnvironmentSupportsCapability } from './runtime-rpc-client'
+import {
+  TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+  type RuntimeCapability
+} from '../../../shared/protocol-version'
+import { TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE } from '../../../shared/legacy-terminal-attribution-env'
+import {
+  probeLiveRuntimeEnvironmentCapabilities,
+  RuntimeRpcCallError,
+  type LiveRuntimeEnvironmentAuthority
+} from './runtime-rpc-client'
 import { isRuntimeCompatBlockError } from './runtime-protocol-compat'
 
 export async function runRemoteAgentSessionLaunch<TResult>(args: {
   environmentId: string
-  hostAuthority?: () => Promise<TResult>
-  hostAuthorityCapability?: RuntimeCapability
-  legacy: (options: { skipCompatibilityCheck: boolean }) => Promise<TResult>
+  expectedEnvironmentPairingRevision?: number
+  hostAuthority?: (authority: LiveRuntimeEnvironmentAuthority) => Promise<TResult>
+  requiredHostAuthorityCapabilities?: readonly RuntimeCapability[]
+  legacy: (options: {
+    skipCompatibilityCheck: boolean
+    authority: LiveRuntimeEnvironmentAuthority
+  }) => Promise<TResult>
 }): Promise<TResult> {
-  if (!args.hostAuthority) {
-    return await args.legacy({ skipCompatibilityCheck: false })
-  }
-  let supported: boolean
+  const requiredCapabilities = [
+    TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+    ...(args.hostAuthority ? [AGENT_SESSION_HOST_AUTHORITY_CAPABILITY] : []),
+    ...(args.requiredHostAuthorityCapabilities ?? [])
+  ]
+  let probe: Awaited<ReturnType<typeof probeLiveRuntimeEnvironmentCapabilities>>
   try {
-    supported = await runtimeEnvironmentSupportsCapability(
-      args.environmentId,
-      args.hostAuthorityCapability ?? AGENT_SESSION_HOST_AUTHORITY_CAPABILITY
-    )
+    probe = await probeLiveRuntimeEnvironmentCapabilities({
+      environmentId: args.environmentId,
+      requiredCapabilities,
+      timeoutMs: 15_000,
+      expectedEnvironmentPairingRevision: args.expectedEnvironmentPairingRevision
+    })
   } catch (error) {
     if (isRuntimeCompatBlockError(error)) {
       throw error
     }
-    // Why: a failed read-only probe has not launched anything, so preserving
-    // the legacy path cannot duplicate an agent and keeps transient upgrades neutral.
-    return await args.legacy({ skipCompatibilityCheck: true })
+    const code = error && typeof error === 'object' ? Reflect.get(error, 'code') : undefined
+    // Why: unknown-outcome recovery still needs to classify a transient failed probe.
+    throw Object.assign(
+      new Error(TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE, { cause: error }),
+      typeof code === 'string' ? { code } : {}
+    )
   }
-  // Why: choose before invoking either path; an ambiguous structured outcome
-  // must never trigger a legacy retry that could spawn a duplicate.
-  if (!supported) {
-    return await args.legacy({ skipCompatibilityCheck: true })
+  if (!probe.authority.capabilities.includes(TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY)) {
+    throw new Error(TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE)
+  }
+  if (!args.hostAuthority || !probe.supported) {
+    return await args.legacy({ skipCompatibilityCheck: true, authority: probe.authority })
   }
   try {
-    return await args.hostAuthority()
+    return await args.hostAuthority(probe.authority)
   } catch (error) {
-    if (
-      error instanceof RuntimeRpcCallError &&
-      (error.code === 'agent_session_legacy_required' || error.code === 'method_not_found')
-    ) {
-      // Why: both responses prove no structured side effect began: the new host rejected an old
-      // lower owner before dispatch, or an old host never recognized the method.
-      return await args.legacy({ skipCompatibilityCheck: true })
+    if (error instanceof RuntimeRpcCallError && error.code === 'agent_session_legacy_required') {
+      return await args.legacy({ skipCompatibilityCheck: true, authority: probe.authority })
     }
     throw error
   }
diff --git a/src/renderer/src/runtime/remote-runtime-terminal-multiplexer.ts b/src/renderer/src/runtime/remote-runtime-terminal-multiplexer.ts
index e153c1c75cb..183838fdc2f 100644
--- a/src/renderer/src/runtime/remote-runtime-terminal-multiplexer.ts
+++ b/src/renderer/src/runtime/remote-runtime-terminal-multiplexer.ts
@@ -14,6 +14,7 @@ import {
   parseTerminalSnapshotUnavailableReason,
   type TerminalSnapshotUnavailableReason
 } from '../../../shared/terminal-snapshot-unavailability'
+import { parseTerminalKittyKeyboardFlags } from '../../../shared/terminal-kitty-keyboard-flags'
 import { e2eConfig, e2eDisableRemoteTerminalStallRecovery } from '@/lib/e2e-config'
 import { recordRendererCrashBreadcrumb } from '@/lib/crash-breadcrumb-recorder'
 import { deliverTerminalDataWithDeferredCredit } from '@/lib/pane-manager/terminal-delivery-credit'
@@ -60,7 +61,14 @@ type TerminalMultiplexEvent =
 
 export type RemoteRuntimeMultiplexedTerminalCallbacks = {
   onData: (data: string, meta?: { seq?: number; rawLength?: number; transformed?: boolean }) => void
-  onSnapshot: (data: string, meta?: { pendingEscapeTailAnsi?: string }) => void
+  onSnapshot: (
+    data: string,
+    meta?: {
+      pendingEscapeTailAnsi?: string
+      seq?: number
+      kittyKeyboardFlags?: number
+    }
+  ) => void
   onSubscribed?: () => void
   onOutputPauseCapability?: () => void
   onEnd?: () => void
@@ -84,6 +92,10 @@ export type RemoteRuntimeSnapshotImage = {
   seq?: number
   source?: 'headless' | 'renderer'
   pendingEscapeTailAnsi?: string
+  /** Effective kitty flags the HOST proved at this image's own `seq`. Absent
+   *  from any host that predates the field — the pane tracker then stays
+   *  unproven and commits raw text instead of guessing zero. */
+  kittyKeyboardFlags?: number
 }
 
 /** Transient causes the host itself reported: a request reached it and it declined to serialize now. */
@@ -197,6 +209,7 @@ type RemoteRuntimeSnapshotInfo = {
   rows?: number
   seq?: number
   source?: 'headless' | 'renderer'
+  kittyKeyboardFlags?: number
   requestId?: number
   truncated?: boolean
   unavailable?: TerminalSnapshotUnavailableReason
@@ -879,13 +892,16 @@ class RemoteRuntimeTerminalMultiplexer {
               rows: info?.rows ?? 24,
               seq: info?.seq,
               source: info?.source,
+              kittyKeyboardFlags: info?.kittyKeyboardFlags,
               pendingEscapeTailAnsi: info?.pendingEscapeTailAnsi
             }
           })
           clearPendingSnapshotRequest(stream)
         } else if (target === 'initial') {
           stream.callbacks.onSnapshot(data ?? '', {
-            pendingEscapeTailAnsi: info?.pendingEscapeTailAnsi
+            pendingEscapeTailAnsi: info?.pendingEscapeTailAnsi,
+            seq: info?.seq,
+            kittyKeyboardFlags: info?.kittyKeyboardFlags
           })
         } else if (target === 'recovery') {
           // Why: a server-pushed recovery snapshot replaces terminal state
@@ -893,7 +909,9 @@ class RemoteRuntimeTerminalMultiplexer {
           // An empty snapshot is still applied so stale dropped output does
           // not linger on a terminal the model says is blank.
           stream.callbacks.onSnapshot(`\x1b[2J\x1b[3J\x1b[H${data ?? ''}`, {
-            pendingEscapeTailAnsi: info?.pendingEscapeTailAnsi
+            pendingEscapeTailAnsi: info?.pendingEscapeTailAnsi,
+            seq: info?.seq,
+            kittyKeyboardFlags: info?.kittyKeyboardFlags
           })
         }
       } else if (matchesPendingRequest) {
@@ -1529,6 +1547,7 @@ function decodeSnapshotInfo(
     truncated?: unknown
     unavailable?: unknown
     pendingEscapeTailAnsi?: unknown
+    kittyKeyboardFlags?: unknown
   }>(payload)
   if (!raw) {
     return null
@@ -1538,6 +1557,8 @@ function decodeSnapshotInfo(
     rows: typeof raw.rows === 'number' ? raw.rows : undefined,
     seq: typeof raw.seq === 'number' ? raw.seq : undefined,
     source: raw.source === 'headless' || raw.source === 'renderer' ? raw.source : undefined,
+    // Negative, fractional, and unsafe values are treated as absent, never clamped.
+    kittyKeyboardFlags: parseTerminalKittyKeyboardFlags(raw.kittyKeyboardFlags),
     requestId: typeof raw.requestId === 'number' ? raw.requestId : undefined,
     truncated: raw.truncated === true,
     unavailable: parseTerminalSnapshotUnavailableReason(raw.unavailable),
diff --git a/src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts b/src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts
new file mode 100644
index 00000000000..08213580ea8
--- /dev/null
+++ b/src/renderer/src/runtime/remote-runtime-terminal-snapshot-kitty-flags.test.ts
@@ -0,0 +1,184 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  TerminalStreamOpcode,
+  decodeTerminalStreamFrame,
+  decodeTerminalStreamJson,
+  encodeTerminalStreamFrame,
+  encodeTerminalStreamJson,
+  encodeTerminalStreamText
+} from '../../../shared/terminal-stream-protocol'
+import {
+  getRemoteRuntimeTerminalMultiplexer,
+  resetRemoteRuntimeTerminalMultiplexersForTests,
+  type RemoteRuntimeMultiplexedTerminal
+} from './remote-runtime-terminal-multiplexer'
+import { replaceRuntimeEnvironmentRevisions } from './runtime-environment-revision'
+
+// `kittyKeyboardFlags` is an additive optional field on the existing
+// SnapshotStart frame (Rule 1 of docs/reference/remote-wire-compatibility.md).
+// An old host omits it, and absence must stay unknown rather than be laundered
+// into "the host proved kitty is inactive".
+
+type SubscribeCallbacks = {
+  onResponse: (response: unknown) => void
+  onBinary?: (bytes: Uint8Array<ArrayBufferLike>) => void
+}
+
+type SnapshotStartMeta = { requestId?: number; kittyKeyboardFlags?: unknown }
+
+class KittyFlagsServer {
+  private streamId = 0
+  /** Meta the host attaches to its next SnapshotStart, initial and requested alike. */
+  nextMeta: SnapshotStartMeta = {}
+
+  constructor(private readonly toClient: (bytes: Uint8Array<ArrayBufferLike>) => void) {}
+
+  receive(bytes: Uint8Array<ArrayBufferLike>): void {
+    const frame = decodeTerminalStreamFrame(bytes)
+    if (!frame) {
+      return
+    }
+    if (frame.opcode === TerminalStreamOpcode.Subscribe) {
+      this.streamId = decodeTerminalStreamJson<{ streamId: number }>(frame.payload)?.streamId ?? 0
+      this.sendSnapshot('INITIAL', {})
+      return
+    }
+    if (frame.opcode !== TerminalStreamOpcode.SnapshotRequest) {
+      return
+    }
+    const requestId = decodeTerminalStreamJson<{ requestId?: number }>(frame.payload)?.requestId
+    this.sendSnapshot('REQUESTED', { ...this.nextMeta, requestId })
+  }
+
+  /** A host-pushed recovery snapshot, which arrives with no requestId. */
+  pushRecovery(meta: SnapshotStartMeta): void {
+    this.sendSnapshot('RECOVERED', meta)
+  }
+
+  private sendSnapshot(data: string, meta: SnapshotStartMeta): void {
+    this.send(
+      TerminalStreamOpcode.SnapshotStart,
+      encodeTerminalStreamJson({
+        cols: 80,
+        rows: 24,
+        seq: 7,
+        ...meta
+      })
+    )
+    this.send(TerminalStreamOpcode.SnapshotChunk, encodeTerminalStreamText(data))
+    this.send(TerminalStreamOpcode.SnapshotEnd, new Uint8Array())
+  }
+
+  private send(opcode: TerminalStreamOpcode, payload: Uint8Array): void {
+    this.toClient(
+      encodeTerminalStreamFrame({
+        opcode,
+        streamId: this.streamId,
+        seq: 0,
+        payload
+      })
+    )
+  }
+}
+
+describe('SnapshotStart kitty keyboard flags', () => {
+  let server: KittyFlagsServer
+  const snapshots: {
+    data: string
+    meta?: { seq?: number; kittyKeyboardFlags?: number }
+  }[] = []
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    snapshots.length = 0
+    resetRemoteRuntimeTerminalMultiplexersForTests()
+    replaceRuntimeEnvironmentRevisions([])
+    vi.stubGlobal('window', {
+      api: {
+        runtimeEnvironments: {
+          subscribe: vi.fn(async (_args: unknown, callbacks: SubscribeCallbacks) => {
+            server = new KittyFlagsServer((bytes) => callbacks.onBinary?.(bytes))
+            queueMicrotask(() => callbacks.onResponse({ ok: true, result: { type: 'ready' } }))
+            return {
+              unsubscribe: vi.fn(),
+              sendBinary: (bytes: Uint8Array<ArrayBufferLike>) => server.receive(bytes)
+            }
+          })
+        }
+      }
+    })
+  })
+
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  async function subscribeClient(): Promise<RemoteRuntimeMultiplexedTerminal> {
+    const stream = await getRemoteRuntimeTerminalMultiplexer('env-1').subscribeTerminal({
+      terminal: 'terminal-1',
+      client: { id: 'desktop-1', type: 'desktop' },
+      callbacks: {
+        onData: () => {},
+        onSnapshot: (data, meta) => {
+          snapshots.push({ data, meta })
+        }
+      }
+    })
+    await Promise.resolve()
+    await Promise.resolve()
+    return stream
+  }
+
+  it.each([
+    ['a proven inactive protocol', 0],
+    ['proven bit-3 flags', 8]
+  ])('decodes %s into the requested snapshot result', async (_name, flags) => {
+    const stream = await subscribeClient()
+    server.nextMeta = { kittyKeyboardFlags: flags }
+
+    const outcome = await stream.serializeBufferOutcome({
+      scrollbackRows: 100
+    })
+    expect(outcome.snapshot).toMatchObject({
+      seq: 7,
+      kittyKeyboardFlags: flags
+    })
+  })
+
+  it('carries the flags and their sequence onto a host-pushed recovery snapshot', async () => {
+    await subscribeClient()
+    expect(snapshots).toHaveLength(1)
+
+    server.pushRecovery({ kittyKeyboardFlags: 8 })
+    expect(snapshots[1]?.meta).toMatchObject({ seq: 7, kittyKeyboardFlags: 8 })
+  })
+
+  it.each([
+    ['negative', -1],
+    ['fractional', 1.5],
+    ['beyond safe integers', Number.MAX_SAFE_INTEGER + 2],
+    ['a string', '8'],
+    ['null', null]
+  ])('treats %s as absent rather than clamping it', async (_name, value) => {
+    const stream = await subscribeClient()
+    server.nextMeta = { kittyKeyboardFlags: value }
+
+    const outcome = await stream.serializeBufferOutcome({
+      scrollbackRows: 100
+    })
+    expect(outcome.snapshot?.kittyKeyboardFlags).toBeUndefined()
+  })
+
+  it('accepts an old host that omits the field without coercing it to zero', async () => {
+    const stream = await subscribeClient()
+    server.nextMeta = {}
+
+    const outcome = await stream.serializeBufferOutcome({
+      scrollbackRows: 100
+    })
+    expect(outcome.availability).toEqual({ kind: 'snapshot' })
+    expect(outcome.snapshot?.data).toBe('REQUESTED')
+    expect(outcome.snapshot?.kittyKeyboardFlags).toBeUndefined()
+    expect(snapshots[0]?.meta?.kittyKeyboardFlags).toBeUndefined()
+  })
+})
diff --git a/src/renderer/src/runtime/remote-server-parity.test.ts b/src/renderer/src/runtime/remote-server-parity.test.ts
index 8e9be06da0c..41318a7248e 100644
--- a/src/renderer/src/runtime/remote-server-parity.test.ts
+++ b/src/renderer/src/runtime/remote-server-parity.test.ts
@@ -304,7 +304,13 @@ describe('parity §11: remote browser create focuses the new browser tab', () =>
   it('honors focus intent for a newly created browser session tab', () => {
     const pageId = 'browser-page-1'
     const prior = stateWithLocalTerminals([localTerminal('host-tab-1', 0, true)])
-    recordWebSessionFocusIntent({ environmentId: ENV }, WT, pageId)
+    recordWebSessionFocusIntent(
+      { environmentId: ENV },
+      WT,
+      pageId,
+      undefined,
+      toWebTerminalSurfaceTabId('host-tab-1')
+    )
     const patch = applyWebSessionTabsSnapshot(
       prior,
       makeSnapshot([{ parentTab: 'host-tab-1', leaf: LEAF_A, active: false }], {
diff --git a/src/renderer/src/runtime/runtime-environment-authority.ts b/src/renderer/src/runtime/runtime-environment-authority.ts
new file mode 100644
index 00000000000..f773941bdf3
--- /dev/null
+++ b/src/renderer/src/runtime/runtime-environment-authority.ts
@@ -0,0 +1,46 @@
+import type { RuntimeRpcResponse } from '../../../shared/runtime-rpc-envelope'
+import type { RuntimeStatus } from '../../../shared/runtime-types'
+import type { RuntimeCapability } from '../../../shared/protocol-version'
+import { callRuntimeEnvironmentWithRevision } from './runtime-rpc-environment-call'
+import { captureRuntimeEnvironmentRequestRevision } from './runtime-environment-revision'
+import { assertRuntimeStatusCompatible } from './runtime-protocol-compat'
+import { unwrapRuntimeRpcResult } from './runtime-rpc-result'
+
+export type LiveRuntimeEnvironmentAuthority = Readonly<{
+  runtimeId: string
+  expectedEnvironmentPairingRevision: number | undefined
+  capabilities: readonly RuntimeCapability[]
+}>
+
+export async function probeLiveRuntimeEnvironmentCapabilities(args: {
+  environmentId: string
+  requiredCapabilities: readonly RuntimeCapability[]
+  timeoutMs?: number
+  expectedEnvironmentPairingRevision?: number
+}): Promise<{ supported: boolean; authority: LiveRuntimeEnvironmentAuthority }> {
+  const environmentId = args.environmentId.trim()
+  const expectedEnvironmentPairingRevision = captureRuntimeEnvironmentRequestRevision(
+    environmentId,
+    args.expectedEnvironmentPairingRevision
+  )
+  const response = await callRuntimeEnvironmentWithRevision({
+    environmentId,
+    method: 'status.get',
+    params: undefined,
+    timeoutMs: args.timeoutMs,
+    expectedEnvironmentPairingRevision
+  })
+  const status = unwrapRuntimeRpcResult<RuntimeStatus>(
+    response as RuntimeRpcResponse<RuntimeStatus>
+  )
+  assertRuntimeStatusCompatible(status)
+  const capabilities = status.capabilities ?? []
+  return {
+    supported: args.requiredCapabilities.every((capability) => capabilities.includes(capability)),
+    authority: Object.freeze({
+      runtimeId: status.runtimeId,
+      expectedEnvironmentPairingRevision,
+      capabilities: Object.freeze([...capabilities])
+    })
+  }
+}
diff --git a/src/renderer/src/runtime/runtime-git-client.test.ts b/src/renderer/src/runtime/runtime-git-client.test.ts
index 36bd5d1aeb6..61d058d8f45 100644
--- a/src/renderer/src/runtime/runtime-git-client.test.ts
+++ b/src/renderer/src/runtime/runtime-git-client.test.ts
@@ -641,8 +641,7 @@ describe('runtime git client', () => {
       settings: {
         activeRuntimeEnvironmentId: 'env-1',
         commitMessageAi,
-        agentCmdOverrides,
-        enableGitHubAttribution: true
+        agentCmdOverrides
       },
       worktreeId: 'wt-1',
       worktreePath: '/repo'
@@ -655,7 +654,6 @@ describe('runtime git client', () => {
         worktree: 'id:wt-1',
         commitMessageAi,
         agentCmdOverrides,
-        enableGitHubAttribution: true,
         commitMessageDiscoveryHostKey: 'runtime:env-1'
       },
       timeoutMs: 75_000
diff --git a/src/renderer/src/runtime/runtime-git-client.ts b/src/renderer/src/runtime/runtime-git-client.ts
index f4b5931d696..48e608daf4a 100644
--- a/src/renderer/src/runtime/runtime-git-client.ts
+++ b/src/renderer/src/runtime/runtime-git-client.ts
@@ -49,12 +49,7 @@ export type RuntimePullRequestGenerationInput = {
 }
 
 type RuntimeGitSettings = Pick<GlobalSettings, 'activeRuntimeEnvironmentId'> &
-  Partial<
-    Pick<
-      GlobalSettings,
-      'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides' | 'enableGitHubAttribution'
-    >
-  >
+  Partial<Pick<GlobalSettings, 'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides'>>
 
 type RuntimeDiscoverCommitMessageModelsResult =
   | {
@@ -96,12 +91,7 @@ export type RuntimeGeneratePullRequestFieldsOverrides = RuntimeGenerateCommitMes
 function getRuntimeCommitMessageSettings(
   settings: RuntimeGitSettings | null | undefined,
   connectionId?: string
-): Partial<
-  Pick<
-    GlobalSettings,
-    'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides' | 'enableGitHubAttribution'
-  >
-> & {
+): Partial<Pick<GlobalSettings, 'commitMessageAi' | 'sourceControlAi' | 'agentCmdOverrides'>> & {
   commitMessageDiscoveryHostKey?: string
 } {
   if (!settings) {
@@ -118,9 +108,6 @@ function getRuntimeCommitMessageSettings(
     ...(settings.agentCmdOverrides !== undefined
       ? { agentCmdOverrides: settings.agentCmdOverrides }
       : {}),
-    ...(settings.enableGitHubAttribution !== undefined
-      ? { enableGitHubAttribution: settings.enableGitHubAttribution }
-      : {}),
     commitMessageDiscoveryHostKey: getCommitMessageModelDiscoveryHostKeyForScope(scope)
   }
 }
diff --git a/src/renderer/src/runtime/runtime-rpc-client-pairing-revision.test.ts b/src/renderer/src/runtime/runtime-rpc-client-pairing-revision.test.ts
index b3e4c103f4f..00995d0db6d 100644
--- a/src/renderer/src/runtime/runtime-rpc-client-pairing-revision.test.ts
+++ b/src/renderer/src/runtime/runtime-rpc-client-pairing-revision.test.ts
@@ -3,7 +3,11 @@ import {
   MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
   RUNTIME_PROTOCOL_VERSION
 } from '../../../shared/protocol-version'
-import { callRuntimeRpc, clearRuntimeCompatibilityCacheForTests } from './runtime-rpc-client'
+import {
+  callRuntimeRpc,
+  clearRuntimeCompatibilityCacheForTests,
+  probeLiveRuntimeEnvironmentCapabilities
+} from './runtime-rpc-client'
 import { replaceRuntimeEnvironmentRevisions } from './runtime-environment-revision'
 
 const runtimeEnvironmentCall = vi.fn()
@@ -62,3 +66,57 @@ it('captures the pairing revision before awaiting the compatibility probe', asyn
     expectedEnvironmentPairingRevision: 10
   })
 })
+
+it('live capability probes ignore a warm cache and pin the captured pairing revision', async () => {
+  replaceRuntimeEnvironmentRevisions([{ id: 'env-live', createdAt: 1, pairingRevision: 20 }])
+  runtimeEnvironmentCall
+    .mockResolvedValueOnce({
+      id: 'warm-status',
+      ok: true,
+      result: {
+        runtimeId: 'runtime-a',
+        graphStatus: 'ready',
+        runtimeProtocolVersion: RUNTIME_PROTOCOL_VERSION,
+        minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+        capabilities: ['terminal.attribution-removed.v1']
+      }
+    })
+    .mockResolvedValueOnce({ id: 'repo', ok: true, result: { repos: [] } })
+    .mockImplementationOnce(async () => {
+      replaceRuntimeEnvironmentRevisions([{ id: 'env-live', createdAt: 1, pairingRevision: 21 }])
+      return {
+        id: 'live-status',
+        ok: true,
+        result: {
+          runtimeId: 'runtime-b',
+          graphStatus: 'ready',
+          runtimeProtocolVersion: RUNTIME_PROTOCOL_VERSION,
+          minCompatibleRuntimeClientVersion: MIN_COMPATIBLE_RUNTIME_CLIENT_VERSION,
+          capabilities: []
+        }
+      }
+    })
+
+  await callRuntimeRpc({ kind: 'environment', environmentId: 'env-live' }, 'repo.list')
+  await expect(
+    probeLiveRuntimeEnvironmentCapabilities({
+      environmentId: 'env-live',
+      requiredCapabilities: ['terminal.attribution-removed.v1']
+    })
+  ).resolves.toEqual({
+    supported: false,
+    authority: {
+      runtimeId: 'runtime-b',
+      expectedEnvironmentPairingRevision: 20,
+      capabilities: []
+    }
+  })
+
+  expect(runtimeEnvironmentCall).toHaveBeenLastCalledWith({
+    selector: 'env-live',
+    method: 'status.get',
+    params: undefined,
+    timeoutMs: undefined,
+    expectedEnvironmentPairingRevision: 20
+  })
+})
diff --git a/src/renderer/src/runtime/runtime-rpc-client.ts b/src/renderer/src/runtime/runtime-rpc-client.ts
index 57ba17b75a0..ad79ba94f13 100644
--- a/src/renderer/src/runtime/runtime-rpc-client.ts
+++ b/src/renderer/src/runtime/runtime-rpc-client.ts
@@ -19,6 +19,8 @@ export {
   RuntimeRpcCallError,
   unwrapRuntimeRpcResult
 } from './runtime-rpc-result'
+export { probeLiveRuntimeEnvironmentCapabilities } from './runtime-environment-authority'
+export type { LiveRuntimeEnvironmentAuthority } from './runtime-environment-authority'
 
 const RUNTIME_COMPATIBILITY_CACHE_MAX = 32
 const RECENT_RUNTIME_COMPATIBILITY_FAILURE_TTL_MS = 60_000
@@ -54,6 +56,7 @@ export async function callRuntimeRpc<TResult>(
     skipCompatibilityCheck?: boolean
     signal?: AbortSignal
     expectedEnvironmentPairingRevision?: number
+    expectedRuntimeId?: string
   } = {}
 ): Promise<TResult> {
   const expectedEnvironmentPairingRevision =
@@ -88,7 +91,8 @@ export async function callRuntimeRpc<TResult>(
           params: nextParams,
           timeoutMs: options.timeoutMs,
           signal: options.signal,
-          expectedEnvironmentPairingRevision
+          expectedEnvironmentPairingRevision,
+          expectedRuntimeId: options.expectedRuntimeId
         })
   return unwrapRuntimeRpcResult<TResult>(response as RuntimeRpcResponse<TResult>)
 }
@@ -325,8 +329,7 @@ export async function assertRuntimeEnvironmentCapability(
   message: string,
   timeoutMs?: number
 ): Promise<void> {
-  const status = await getRuntimeEnvironmentStatus(environmentId, timeoutMs)
-  if (!status.capabilities?.includes(capability)) {
+  if (!(await runtimeEnvironmentSupportsCapability(environmentId, capability, timeoutMs))) {
     throw new Error(message)
   }
 }
diff --git a/src/renderer/src/runtime/runtime-rpc-environment-call.test.ts b/src/renderer/src/runtime/runtime-rpc-environment-call.test.ts
new file mode 100644
index 00000000000..3f8b8c53c5c
--- /dev/null
+++ b/src/renderer/src/runtime/runtime-rpc-environment-call.test.ts
@@ -0,0 +1,28 @@
+import { expect, it, vi } from 'vitest'
+import { callRuntimeEnvironmentWithRevision } from './runtime-rpc-environment-call'
+
+it('preserves abort semantics for runtime-fenced requests', async () => {
+  const controller = new AbortController()
+  const unsubscribe = vi.fn()
+  const call = vi.fn()
+  const subscribe = vi.fn().mockResolvedValue({ unsubscribe, sendBinary: vi.fn() })
+  vi.stubGlobal('window', { api: { runtimeEnvironments: { call, subscribe } } })
+
+  const request = callRuntimeEnvironmentWithRevision({
+    environmentId: 'env-1',
+    method: 'status.get',
+    params: undefined,
+    signal: controller.signal,
+    expectedRuntimeId: 'runtime-1'
+  })
+  await vi.waitFor(() => expect(subscribe).toHaveBeenCalled())
+  expect(subscribe).toHaveBeenCalledWith(
+    expect.objectContaining({ expectedRuntimeId: 'runtime-1' }),
+    expect.any(Object)
+  )
+  controller.abort()
+
+  await expect(request).rejects.toMatchObject({ name: 'AbortError' })
+  await vi.waitFor(() => expect(unsubscribe).toHaveBeenCalledOnce())
+  expect(call).not.toHaveBeenCalled()
+})
diff --git a/src/renderer/src/runtime/runtime-rpc-environment-call.ts b/src/renderer/src/runtime/runtime-rpc-environment-call.ts
index 5acc0fa0a85..dc5f85f8a62 100644
--- a/src/renderer/src/runtime/runtime-rpc-environment-call.ts
+++ b/src/renderer/src/runtime/runtime-rpc-environment-call.ts
@@ -7,6 +7,7 @@ export async function callRuntimeEnvironmentWithRevision(args: {
   timeoutMs?: number
   signal?: AbortSignal
   expectedEnvironmentPairingRevision?: number
+  expectedRuntimeId?: string
 }): Promise<unknown> {
   if (args.signal) {
     return callAbortableRuntimeEnvironment(
@@ -15,7 +16,8 @@ export async function callRuntimeEnvironmentWithRevision(args: {
       args.params,
       args.timeoutMs,
       args.signal,
-      args.expectedEnvironmentPairingRevision
+      args.expectedEnvironmentPairingRevision,
+      args.expectedRuntimeId
     )
   }
   return window.api.runtimeEnvironments.call({
@@ -23,6 +25,7 @@ export async function callRuntimeEnvironmentWithRevision(args: {
     method: args.method,
     params: args.params,
     timeoutMs: args.timeoutMs,
-    expectedEnvironmentPairingRevision: args.expectedEnvironmentPairingRevision
+    expectedEnvironmentPairingRevision: args.expectedEnvironmentPairingRevision,
+    expectedRuntimeId: args.expectedRuntimeId
   })
 }
diff --git a/src/renderer/src/runtime/use-runtime-session-mirror-environment-key.test.ts b/src/renderer/src/runtime/use-runtime-session-mirror-environment-key.test.ts
index c08643c7606..fc28095e136 100644
--- a/src/renderer/src/runtime/use-runtime-session-mirror-environment-key.test.ts
+++ b/src/renderer/src/runtime/use-runtime-session-mirror-environment-key.test.ts
@@ -17,6 +17,7 @@ vi.mock('@/lib/runtime-session-mirror-targets', async (importOriginal) => {
 })
 
 import { useAppStore } from '@/store'
+import type { PublicKnownRuntimeEnvironment } from '../../../shared/runtime-environments'
 import type { AppState } from '@/store/types'
 import {
   selectRuntimeSessionMirrorTargetInputs,
@@ -71,7 +72,7 @@ function seedMirrorState(): void {
       runtimeEnvironments: [
         { id: 'env-a', createdAt: 100, pairingRevision: 101 },
         { id: 'env-b', createdAt: 200, pairingRevision: 201 }
-      ] as AppState['runtimeEnvironments'],
+      ] as PublicKnownRuntimeEnvironment[],
       runtimeStatusByEnvironmentId: new Map([
         [
           'env-a',
@@ -260,7 +261,7 @@ describe('useRuntimeSessionMirrorEnvironmentKey', () => {
       useAppStore.setState({
         runtimeEnvironments: [
           { id: 'env-a', createdAt: 100, pairingRevision: 102 }
-        ] as AppState['runtimeEnvironments']
+        ] as PublicKnownRuntimeEnvironment[]
       })
     })
     expect(hook.result.current).toBe('env-a\u0001runtime-a\u00012\u0001102')
diff --git a/src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts b/src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts
new file mode 100644
index 00000000000..135fdad5925
--- /dev/null
+++ b/src/renderer/src/runtime/web-runtime-browser-capability-cleanup.test.ts
@@ -0,0 +1,82 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { createWebRuntimeSessionBrowserTab } from './web-runtime-session'
+
+const ENVIRONMENT_ID = 'runtime-1'
+const WORKTREE_ID = 'repo::/worktree'
+
+const mocks = vi.hoisted(() => ({
+  closeEmptyGroup: vi.fn(),
+  getState: vi.fn(),
+  runtimeCall: vi.fn(),
+  setState: vi.fn(),
+  subscribe: vi.fn()
+}))
+
+vi.mock('../store', () => ({
+  useAppStore: {
+    getState: mocks.getState,
+    setState: mocks.setState,
+    subscribe: mocks.subscribe
+  }
+}))
+
+vi.mock('./web-session-tabs-sync', () => ({
+  acceptReplayedWebSessionTabsSnapshot: vi.fn(),
+  applyFreshWebSessionTabsSnapshot: vi.fn(),
+  applyWebSessionTabsStorePatch: vi.fn(),
+  resolveHostSessionTabIdForWebSessionTab: vi.fn()
+}))
+
+vi.mock('@/lib/feature-education-telemetry', () => ({
+  trackTerminalPaneSplit: vi.fn()
+}))
+
+vi.mock('@/lib/worktree-runtime-owner', () => ({
+  getRuntimeEnvironmentIdForWorktree: vi.fn()
+}))
+
+vi.mock('@/lib/agent-launch-prompt-delivery', () => ({
+  deliverLaunchPromptToAgentTab: vi.fn(),
+  seedNativeChatLaunchDraftForAgentTab: vi.fn()
+}))
+
+describe('paired browser capability cleanup', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    vi.stubGlobal('window', {
+      api: { runtimeEnvironments: { call: mocks.runtimeCall } }
+    })
+  })
+
+  it.each([
+    ['absent status', new Map()],
+    [
+      'unknown capabilities',
+      new Map([[ENVIRONMENT_ID, { status: { capabilities: undefined }, checkedAt: 1 }]])
+    ],
+    [
+      'mixed-version host',
+      new Map([[ENVIRONMENT_ID, { status: { capabilities: [] }, checkedAt: 1 }]])
+    ]
+  ])('rejects %s and removes the caller-created split', async (_label, runtimeStatuses) => {
+    mocks.getState.mockReturnValue({
+      settings: { activeRuntimeEnvironmentId: ENVIRONMENT_ID },
+      runtimeStatusByEnvironmentId: runtimeStatuses,
+      closeEmptyGroup: mocks.closeEmptyGroup
+    })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        clientTargetGroupId: 'preview-group',
+        clientTargetGroupCreated: true
+      })
+    ).rejects.toThrow('does not support browser streaming')
+
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledOnce()
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledWith(WORKTREE_ID, 'preview-group')
+    expect(mocks.runtimeCall).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts b/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts
new file mode 100644
index 00000000000..51c02be9842
--- /dev/null
+++ b/src/renderer/src/runtime/web-runtime-browser-creation-e2e-fault.ts
@@ -0,0 +1,122 @@
+import type { RuntimeMobileSessionTabsResult } from '../../../shared/runtime-types'
+import { e2eConfig } from '@/lib/e2e-config'
+
+type BrowserCreationFaultSnapshot = {
+  armed: boolean
+  capabilityRejectionArmed: boolean
+  createdPageId: string | null
+  suppressedPageIds: string[]
+}
+
+type BrowserCreationFaultApi = {
+  arm: () => void
+  armCapabilityRejection: () => void
+  release: () => boolean
+  reset: () => void
+  snapshot: () => BrowserCreationFaultSnapshot
+}
+
+type BrowserCreationFaultWindow = Window & {
+  __webRuntimeBrowserCreationFault?: BrowserCreationFaultApi
+}
+
+let armed = false
+let capabilityRejectionArmed = false
+let createdPageId: string | null = null
+let failNextReconciliation = false
+let releaseCreatedPage: (() => void) | null = null
+let createdPageBarrier: Promise<void> | null = null
+const suppressedPageIds = new Set<string>()
+const MAX_SUPPRESSED_PAGE_IDS = 128
+
+function resetFault(): void {
+  releaseCreatedPage?.()
+  armed = false
+  capabilityRejectionArmed = false
+  createdPageId = null
+  failNextReconciliation = false
+  releaseCreatedPage = null
+  createdPageBarrier = null
+  suppressedPageIds.clear()
+}
+
+function exposeFaultApi(): void {
+  if (!e2eConfig.exposeStore || typeof window === 'undefined') {
+    return
+  }
+  const target = window as BrowserCreationFaultWindow
+  target.__webRuntimeBrowserCreationFault ??= {
+    arm: () => {
+      resetFault()
+      armed = true
+      createdPageBarrier = new Promise<void>((resolve) => {
+        releaseCreatedPage = resolve
+      })
+    },
+    armCapabilityRejection: () => {
+      resetFault()
+      capabilityRejectionArmed = true
+    },
+    release: () => {
+      if (!armed || !createdPageId || !releaseCreatedPage) {
+        return false
+      }
+      failNextReconciliation = true
+      const release = releaseCreatedPage
+      releaseCreatedPage = null
+      release()
+      return true
+    },
+    reset: resetFault,
+    snapshot: () => ({
+      armed,
+      capabilityRejectionArmed,
+      createdPageId,
+      suppressedPageIds: [...suppressedPageIds]
+    })
+  }
+}
+
+exposeFaultApi()
+
+export function throwIfE2eWebRuntimeBrowserCapabilityUnavailable(): void {
+  if (!e2eConfig.exposeStore || !capabilityRejectionArmed) {
+    return
+  }
+  capabilityRejectionArmed = false
+  throw new Error('E2E forced browser capability rejection')
+}
+
+export async function pauseAfterE2eWebRuntimeBrowserCreate(remotePageId: string): Promise<void> {
+  if (!e2eConfig.exposeStore || !armed || !createdPageBarrier) {
+    return
+  }
+  createdPageId = remotePageId
+  await createdPageBarrier
+}
+
+export function throwIfE2eWebRuntimeBrowserReconciliationFails(): void {
+  if (!e2eConfig.exposeStore || !failNextReconciliation) {
+    return
+  }
+  failNextReconciliation = false
+  throw new Error('E2E forced session-tabs reconciliation timeout')
+}
+
+export function suppressE2eWebRuntimeBrowserSnapshot(
+  snapshot: RuntimeMobileSessionTabsResult
+): boolean {
+  if (!e2eConfig.exposeStore || !armed) {
+    return false
+  }
+  const pageIds = snapshot.tabs.flatMap((tab) =>
+    tab.type === 'browser' && tab.browserPageId ? [tab.browserPageId] : []
+  )
+  for (const pageId of pageIds) {
+    if (suppressedPageIds.size >= MAX_SUPPRESSED_PAGE_IDS) {
+      break
+    }
+    suppressedPageIds.add(pageId)
+  }
+  return pageIds.length > 0
+}
diff --git a/src/renderer/src/runtime/web-runtime-browser-materialization.test.ts b/src/renderer/src/runtime/web-runtime-browser-materialization.test.ts
new file mode 100644
index 00000000000..1bdda2a132b
--- /dev/null
+++ b/src/renderer/src/runtime/web-runtime-browser-materialization.test.ts
@@ -0,0 +1,64 @@
+import { describe, expect, it } from 'vitest'
+import type { AppState } from '@/store/types'
+import { hasMaterializedWebRuntimeBrowserPage } from './web-runtime-browser-materialization'
+
+function state(overrides: Partial<AppState> = {}): AppState {
+  return {
+    browserTabsByWorktree: {
+      'wt-1': [{ id: 'workspace-1', worktreeId: 'wt-1', pageIds: ['page-1'] }]
+    },
+    browserPagesByWorkspace: {
+      'workspace-1': [{ id: 'page-1', workspaceId: 'workspace-1', worktreeId: 'wt-1' }]
+    },
+    remoteBrowserPageHandlesByPageId: {
+      'page-1': { environmentId: 'env-1', remotePageId: 'remote-page-1' }
+    },
+    unifiedTabsByWorktree: {
+      'wt-1': [
+        {
+          id: 'tab-1',
+          entityId: 'workspace-1',
+          contentType: 'browser',
+          groupId: 'group-1'
+        }
+      ]
+    },
+    ...overrides
+  } as AppState
+}
+
+describe('hasMaterializedWebRuntimeBrowserPage', () => {
+  it('requires the exact remote owner, client workspace, unified tab, and requested group', () => {
+    const materialized = state()
+
+    expect(
+      hasMaterializedWebRuntimeBrowserPage(
+        materialized,
+        'env-1',
+        'wt-1',
+        'remote-page-1',
+        'group-1'
+      )
+    ).toBe(true)
+    expect(
+      hasMaterializedWebRuntimeBrowserPage(
+        materialized,
+        'env-1',
+        'wt-1',
+        'remote-page-1',
+        'other-group'
+      )
+    ).toBe(false)
+    expect(
+      hasMaterializedWebRuntimeBrowserPage(
+        state({ unifiedTabsByWorktree: { 'wt-1': [] } }),
+        'env-1',
+        'wt-1',
+        'remote-page-1'
+      )
+    ).toBe(false)
+    expect(
+      hasMaterializedWebRuntimeBrowserPage(materialized, 'env-2', 'wt-1', 'remote-page-1')
+    ).toBe(false)
+  })
+})
diff --git a/src/renderer/src/runtime/web-runtime-browser-materialization.ts b/src/renderer/src/runtime/web-runtime-browser-materialization.ts
new file mode 100644
index 00000000000..434f9a579af
--- /dev/null
+++ b/src/renderer/src/runtime/web-runtime-browser-materialization.ts
@@ -0,0 +1,33 @@
+import type { AppState } from '@/store/types'
+
+type BrowserMaterializationState = Pick<
+  AppState,
+  | 'browserPagesByWorkspace'
+  | 'browserTabsByWorktree'
+  | 'remoteBrowserPageHandlesByPageId'
+  | 'unifiedTabsByWorktree'
+>
+
+export function hasMaterializedWebRuntimeBrowserPage(
+  state: BrowserMaterializationState,
+  environmentId: string,
+  worktreeId: string,
+  remotePageId: string,
+  expectedGroupId?: string
+): boolean {
+  return (state.browserTabsByWorktree[worktreeId] ?? []).some((workspace) => {
+    const hasRemotePage = (state.browserPagesByWorkspace[workspace.id] ?? []).some((page) => {
+      const handle = state.remoteBrowserPageHandlesByPageId[page.id]
+      return handle?.environmentId === environmentId && handle.remotePageId === remotePageId
+    })
+    if (!hasRemotePage) {
+      return false
+    }
+    return (state.unifiedTabsByWorktree[worktreeId] ?? []).some(
+      (tab) =>
+        tab.contentType === 'browser' &&
+        tab.entityId === workspace.id &&
+        (!expectedGroupId || tab.groupId === expectedGroupId)
+    )
+  })
+}
diff --git a/src/renderer/src/runtime/web-runtime-session.test.ts b/src/renderer/src/runtime/web-runtime-session.test.ts
index 09f6dee870b..3e64191dcab 100644
--- a/src/renderer/src/runtime/web-runtime-session.test.ts
+++ b/src/renderer/src/runtime/web-runtime-session.test.ts
@@ -34,12 +34,19 @@ import {
   resetWebAgentSessionHandoffsForTests
 } from './web-agent-session-handoff'
 import { toRuntimeExecutionHostId } from '../../../shared/execution-host'
+import {
+  isWebSessionBrowserPlacementGroupReserved,
+  resetWebSessionBrowserPlacementsForTests
+} from './web-session-browser-placement'
 
 const mocks = vi.hoisted(() => ({
   getState: vi.fn(),
   setState: vi.fn(),
+  subscribe: vi.fn(),
   setActiveWorktree: vi.fn(),
   createBrowserTab: vi.fn(),
+  closeEmptyGroup: vi.fn(),
+  moveUnifiedTabToGroup: vi.fn(),
   setRemoteBrowserPageHandle: vi.fn(),
   focusBrowserTabInWorktree: vi.fn(),
   applyFreshWebSessionTabsSnapshot: vi.fn(),
@@ -48,13 +55,18 @@ const mocks = vi.hoisted(() => ({
   trackTerminalPaneSplit: vi.fn(),
   deliverLaunchPromptToAgentTab: vi.fn(),
   seedNativeChatLaunchDraftForAgentTab: vi.fn(),
-  getRuntimeEnvironmentIdForWorktree: vi.fn()
+  getRuntimeEnvironmentIdForWorktree: vi.fn(),
+  hasMaterializedWebRuntimeBrowserPage: vi.fn(),
+  toastError: vi.fn()
 }))
 
+vi.mock('sonner', () => ({ toast: { error: mocks.toastError } }))
+
 vi.mock('../store', () => ({
   useAppStore: {
     getState: mocks.getState,
-    setState: mocks.setState
+    setState: mocks.setState,
+    subscribe: mocks.subscribe
   }
 }))
 
@@ -79,7 +91,12 @@ vi.mock('@/lib/agent-launch-prompt-delivery', () => ({
   seedNativeChatLaunchDraftForAgentTab: mocks.seedNativeChatLaunchDraftForAgentTab
 }))
 
+vi.mock('./web-runtime-browser-materialization', () => ({
+  hasMaterializedWebRuntimeBrowserPage: mocks.hasMaterializedWebRuntimeBrowserPage
+}))
+
 const ENVIRONMENT_ID = 'web-env-1'
+const SECOND_ENVIRONMENT_ID = 'web-env-2'
 const RUNTIME_EXECUTION_HOST_ID = toRuntimeExecutionHostId(ENVIRONMENT_ID)
 const WORKTREE_ID = 'repo::/worktree'
 const FOCUS_LEAF_ID = '11111111-1111-4111-8111-111111111111'
@@ -98,6 +115,21 @@ function makeSnapshot(): RuntimeMobileSessionTabsResult {
   }
 }
 
+function makeAttributionSafeStatus(capabilities: string[] = ['terminal.attribution-removed.v1']) {
+  return {
+    id: 'status',
+    ok: true,
+    result: {
+      runtimeId: 'runtime-1',
+      graphStatus: 'ready',
+      runtimeProtocolVersion: 3,
+      minCompatibleRuntimeClientVersion: 2,
+      appVersion: '1.4.181',
+      capabilities
+    }
+  }
+}
+
 describe('refreshWebRuntimeSessionTabsSnapshot', () => {
   afterEach(() => {
     resetWebAgentSessionHandoffsForTests()
@@ -249,10 +281,28 @@ describe('createWebRuntimeSessionBrowserTab', () => {
       settings: {
         activeRuntimeEnvironmentId: ENVIRONMENT_ID
       },
+      runtimeStatusByEnvironmentId: new Map([
+        [ENVIRONMENT_ID, { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }]
+      ]),
       activeWorktreeId: WORKTREE_ID,
+      activeWorkspaceExecutionHostId: RUNTIME_EXECUTION_HOST_ID,
+      activeTabType: 'editor',
+      activeTabTypeByWorktree: { [WORKTREE_ID]: 'editor' },
+      activeFileIdByWorktree: { [WORKTREE_ID]: '/worktree/index.html' },
       browserPagesByWorkspace: {},
       remoteBrowserPageHandlesByPageId: {},
+      unifiedTabsByWorktree: {
+        [WORKTREE_ID]: [
+          {
+            id: 'local-editor-tab',
+            entityId: '/worktree/index.html',
+            contentType: 'editor'
+          }
+        ]
+      },
       createBrowserTab: mocks.createBrowserTab,
+      closeEmptyGroup: mocks.closeEmptyGroup,
+      moveUnifiedTabToGroup: mocks.moveUnifiedTabToGroup,
       setRemoteBrowserPageHandle: mocks.setRemoteBrowserPageHandle,
       focusBrowserTabInWorktree: mocks.focusBrowserTabInWorktree,
       setActiveWorktree: mocks.setActiveWorktree
@@ -263,24 +313,54 @@ describe('createWebRuntimeSessionBrowserTab', () => {
         activeWorktreeId: WORKTREE_ID
       })
     })
+    mocks.subscribe.mockReturnValue(vi.fn())
     mocks.createBrowserTab.mockReturnValue({
       id: 'local-browser-workspace-1',
       activePageId: 'local-page-1',
       pageIds: ['local-page-1']
     })
+    mocks.moveUnifiedTabToGroup.mockReturnValue(true)
     mocks.applyFreshWebSessionTabsSnapshot.mockReturnValue({ state: 'after' })
     mocks.resolveHostSessionTabIdForWebSessionTab.mockReturnValue(null)
     mocks.deliverLaunchPromptToAgentTab.mockResolvedValue(true)
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockReturnValue(true)
   })
 
   afterEach(() => {
     vi.unstubAllGlobals()
     clearRuntimeCompatibilityCacheForTests()
+    resetWebSessionBrowserPlacementsForTests()
+    resetWebSessionFocusIntentForTests()
     vi.clearAllMocks()
   })
 
-  it('eagerly applies the host session snapshot after creating a remote browser tab', async () => {
+  it('rejects before RPC when the selected runtime does not advertise screencast', async () => {
+    mocks.getState.mockReturnValue({
+      settings: { activeRuntimeEnvironmentId: ENVIRONMENT_ID },
+      runtimeStatusByEnvironmentId: new Map([
+        [ENVIRONMENT_ID, { status: { capabilities: [] }, checkedAt: 1 }]
+      ])
+    })
+    const runtimeCall = vi.fn()
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID
+      })
+    ).rejects.toThrow('does not support browser streaming')
+
+    expect(runtimeCall).not.toHaveBeenCalled()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('applies an empty host snapshot without retaining delayed browser focus', async () => {
     const snapshot = makeSnapshot()
+    let resolveList!: (response: unknown) => void
+    const listResponse = new Promise((resolve) => {
+      resolveList = resolve
+    })
     const runtimeCall = vi
       .fn()
       .mockResolvedValueOnce({
@@ -288,11 +368,7 @@ describe('createWebRuntimeSessionBrowserTab', () => {
         ok: true,
         result: { browserPageId: 'remote-browser-page-1' }
       })
-      .mockResolvedValueOnce({
-        id: 'list',
-        ok: true,
-        result: snapshot
-      })
+      .mockReturnValueOnce(listResponse)
 
     vi.stubGlobal('window', {
       api: {
@@ -302,14 +378,19 @@ describe('createWebRuntimeSessionBrowserTab', () => {
       }
     })
 
-    await expect(
-      createWebRuntimeSessionBrowserTab({
-        worktreeId: WORKTREE_ID,
-        url: 'https://example.com/'
-      })
-    ).resolves.toBe(true)
+    const pendingCreate = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      url: 'https://example.com/'
+    })
 
     await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
+    expect(mocks.subscribe).toHaveBeenCalledOnce()
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toEqual({
+      hostTabId: 'remote-browser-page-1',
+      expectedCurrentLocalTabId: 'local-editor-tab'
+    })
+    resolveList({ id: 'list', ok: true, result: snapshot })
+    await expect(pendingCreate).resolves.toBe(true)
     await vi.waitFor(() => expect(mocks.applyFreshWebSessionTabsSnapshot).toHaveBeenCalledTimes(1))
 
     expect(runtimeCall).toHaveBeenNthCalledWith(1, {
@@ -339,20 +420,724 @@ describe('createWebRuntimeSessionBrowserTab', () => {
       snapshot,
       ENVIRONMENT_ID
     )
-    expect(mocks.createBrowserTab).toHaveBeenCalledWith(WORKTREE_ID, 'https://example.com/', {
-      title: 'https://example.com/',
-      focusAddressBar: true,
-      browserRuntimeEnvironmentId: ENVIRONMENT_ID
+    expect(mocks.acceptReplayedWebSessionTabsSnapshot).toHaveBeenCalledWith(
+      ENVIRONMENT_ID,
+      WORKTREE_ID
+    )
+    expect(mocks.acceptReplayedWebSessionTabsSnapshot.mock.invocationCallOrder[0]).toBeLessThan(
+      mocks.applyFreshWebSessionTabsSnapshot.mock.invocationCallOrder[0]!
+    )
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toBeNull()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it('does not let a slow browser create replace a newer browser selection', async () => {
+    let resolveCreate!: (response: unknown) => void
+    const createResponse = new Promise((resolve) => {
+      resolveCreate = resolve
     })
-    expect(mocks.setRemoteBrowserPageHandle).toHaveBeenCalledWith('local-page-1', {
+    mocks.resolveHostSessionTabIdForWebSessionTab.mockReturnValue('newer-host-browser')
+    const runtimeCall = vi.fn(async (request: { method: string }) => {
+      if (request.method === 'browser.tabCreate') {
+        return createResponse
+      }
+      if (request.method === 'session.tabs.activate') {
+        return { id: 'activate', ok: true, result: {} }
+      }
+      return { id: 'list', ok: true, result: makeSnapshot() }
+    })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const pendingCreate = createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })
+    await vi.waitFor(() =>
+      expect(
+        runtimeCall.mock.calls.some(([request]) => request.method === 'browser.tabCreate')
+      ).toBe(true)
+    )
+    await activateWebRuntimeSessionTab({
+      worktreeId: WORKTREE_ID,
+      tabId: 'newer-local-browser'
+    })
+    resolveCreate({
+      id: 'create',
+      ok: true,
+      result: { browserPageId: 'created-host-browser' }
+    })
+    await expect(pendingCreate).resolves.toBe(true)
+
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toEqual({
+      hostTabId: 'newer-host-browser'
+    })
+  })
+
+  it('does not focus a slow browser create after an editor A-B-A selection', async () => {
+    let resolveCreate!: (response: unknown) => void
+    const createResponse = new Promise((resolve) => {
+      resolveCreate = resolve
+    })
+    let state = mocks.getState()
+    let listener: ((next: typeof state, previous: typeof state) => void) | null = null
+    mocks.getState.mockImplementation(() => state)
+    mocks.subscribe.mockImplementation((nextListener) => {
+      listener = nextListener
+      return vi.fn()
+    })
+    const runtimeCall = vi.fn(async (request: { method: string }) => {
+      if (request.method === 'browser.tabCreate') {
+        return createResponse
+      }
+      return { id: 'list', ok: true, result: makeSnapshot() }
+    })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const pendingCreate = createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })
+    await vi.waitFor(() => expect(listener).not.toBeNull())
+    const editorBState = {
+      ...state,
+      activeFileIdByWorktree: { [WORKTREE_ID]: '/worktree/other.html' },
+      unifiedTabsByWorktree: {
+        [WORKTREE_ID]: [
+          ...state.unifiedTabsByWorktree[WORKTREE_ID],
+          {
+            id: 'other-editor-tab',
+            entityId: '/worktree/other.html',
+            contentType: 'editor'
+          }
+        ]
+      }
+    }
+    listener!(editorBState, state)
+    const editorAState = {
+      ...editorBState,
+      activeFileIdByWorktree: { [WORKTREE_ID]: '/worktree/index.html' }
+    }
+    listener!(editorAState, editorBState)
+    state = editorAState
+    resolveCreate({
+      id: 'create',
+      ok: true,
+      result: { browserPageId: 'created-host-browser' }
+    })
+    await expect(pendingCreate).resolves.toBe(true)
+
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toBeNull()
+  })
+
+  it('does not focus a browser after an editor A-B-A selection during reconciliation', async () => {
+    let resolveList!: (response: unknown) => void
+    const listResponse = new Promise((resolve) => {
+      resolveList = resolve
+    })
+    let state = mocks.getState()
+    let listener: ((next: typeof state, previous: typeof state) => void) | null = null
+    mocks.getState.mockImplementation(() => state)
+    mocks.subscribe.mockImplementation((nextListener) => {
+      listener = nextListener
+      return vi.fn()
+    })
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'created-host-browser' }
+      })
+      .mockReturnValueOnce(listResponse)
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const pendingCreate = createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })
+    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
+    const editorBState = {
+      ...state,
+      activeFileIdByWorktree: { [WORKTREE_ID]: '/worktree/other.html' },
+      unifiedTabsByWorktree: {
+        [WORKTREE_ID]: [
+          ...state.unifiedTabsByWorktree[WORKTREE_ID],
+          {
+            id: 'other-editor-tab',
+            entityId: '/worktree/other.html',
+            contentType: 'editor'
+          }
+        ]
+      }
+    }
+    listener!(editorBState, state)
+    const editorAState = {
+      ...editorBState,
+      activeFileIdByWorktree: { [WORKTREE_ID]: '/worktree/index.html' }
+    }
+    listener!(editorAState, editorBState)
+    state = editorAState
+    resolveList({ id: 'list', ok: true, result: makeSnapshot() })
+    await expect(pendingCreate).resolves.toBe(true)
+
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toBeNull()
+  })
+
+  it.each([
+    {
+      label: 'worktree',
+      leave: (state: Record<string, unknown>) => ({
+        ...state,
+        activeWorktreeId: 'repo::/other-worktree'
+      }),
+      returnToStart: (state: Record<string, unknown>) => ({
+        ...state,
+        activeWorktreeId: WORKTREE_ID
+      })
+    },
+    {
+      label: 'runtime owner',
+      leave: (state: Record<string, unknown>) => ({
+        ...state,
+        activeWorkspaceExecutionHostId: 'local'
+      }),
+      returnToStart: (state: Record<string, unknown>) => ({
+        ...state,
+        activeWorkspaceExecutionHostId: RUNTIME_EXECUTION_HOST_ID
+      })
+    }
+  ])(
+    'does not focus after leaving and returning to the $label during reconciliation',
+    async ({ leave, returnToStart }) => {
+      let resolveList!: (response: unknown) => void
+      const listResponse = new Promise((resolve) => {
+        resolveList = resolve
+      })
+      let state = mocks.getState()
+      let listener: ((next: typeof state, previous: typeof state) => void) | null = null
+      mocks.getState.mockImplementation(() => state)
+      mocks.subscribe.mockImplementation((nextListener) => {
+        listener = nextListener
+        return vi.fn()
+      })
+      const runtimeCall = vi
+        .fn()
+        .mockResolvedValueOnce({
+          id: 'create',
+          ok: true,
+          result: { browserPageId: 'created-host-browser' }
+        })
+        .mockReturnValueOnce(listResponse)
+      vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+      const pendingCreate = createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })
+      await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
+      const awayState = leave(state)
+      listener!(awayState, state)
+      const returnedState = returnToStart(awayState)
+      listener!(returnedState, awayState)
+      state = returnedState
+      resolveList({ id: 'list', ok: true, result: makeSnapshot() })
+      await expect(pendingCreate).resolves.toBe(true)
+
+      expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toBeNull()
+    }
+  )
+
+  it.each([
+    'remote_runtime_unavailable',
+    'runtime_timeout',
+    'invalid_runtime_response',
+    'runtime_error'
+  ])('reports a browser-create %s as ambiguous without retrying', async (code) => {
+    const runtimeCall = vi.fn().mockResolvedValue({
+      id: 'create-lost',
+      ok: false,
+      error: { code, message: 'response lost' }
+    })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID, url: 'https://example.com/' })
+    ).rejects.toThrow('did not confirm whether the browser tab was created')
+
+    expect(runtimeCall).toHaveBeenCalledOnce()
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+  })
+
+  it.each(['browser_error', 'invalid_argument', 'method_not_found'])(
+    'reports a definitive browser-create %s as a soft failure',
+    async (code) => {
+      const runtimeCall = vi.fn().mockResolvedValue({
+        id: 'create-rejected',
+        ok: false,
+        error: { code, message: 'host rejected before creation' }
+      })
+      vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+      await expect(
+        createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID, url: 'https://example.com/' })
+      ).resolves.toBe(false)
+
+      expect(runtimeCall).toHaveBeenCalledOnce()
+      expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    }
+  )
+
+  it('creates an unfocused browser while preserving its requested split', async () => {
+    mocks.getState.mockReturnValue({
+      settings: { activeRuntimeEnvironmentId: ENVIRONMENT_ID },
+      runtimeStatusByEnvironmentId: new Map([
+        [ENVIRONMENT_ID, { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }]
+      ]),
+      activeWorktreeId: WORKTREE_ID,
+      browserPagesByWorkspace: {
+        'host-browser-workspace': [
+          { id: 'host-browser-page', workspaceId: 'host-browser-workspace' }
+        ]
+      },
+      remoteBrowserPageHandlesByPageId: {
+        'host-browser-page': {
+          environmentId: ENVIRONMENT_ID,
+          remotePageId: 'remote-browser-page-1'
+        }
+      },
+      unifiedTabsByWorktree: { [WORKTREE_ID]: [] },
+      createBrowserTab: mocks.createBrowserTab,
+      closeEmptyGroup: mocks.closeEmptyGroup,
+      moveUnifiedTabToGroup: mocks.moveUnifiedTabToGroup,
+      setRemoteBrowserPageHandle: mocks.setRemoteBrowserPageHandle,
+      focusBrowserTabInWorktree: mocks.focusBrowserTabInWorktree,
+      setActiveWorktree: mocks.setActiveWorktree
+    })
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        clientTargetGroupId: 'client-preview-group',
+        focusOnCreate: false
+      })
+    ).resolves.toBe(true)
+
+    expect(runtimeCall).toHaveBeenNthCalledWith(1, {
+      selector: ENVIRONMENT_ID,
+      method: 'browser.tabCreate',
+      params: {
+        worktree: `id:${WORKTREE_ID}`,
+        url: undefined,
+        profileId: undefined,
+        activate: false,
+        waitForRegistration: false
+      },
+      timeoutMs: 15_000
+    })
+    expect(mocks.subscribe).not.toHaveBeenCalled()
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toBeNull()
+    expect(mocks.acceptReplayedWebSessionTabsSnapshot).toHaveBeenCalledWith(
+      ENVIRONMENT_ID,
+      WORKTREE_ID
+    )
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'client-preview-group'
+      })
+    ).toBe(false)
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+  })
+
+  it('releases and removes a newly-created split when host creation is ambiguous', async () => {
+    vi.stubGlobal('window', {
+      api: {
+        runtimeEnvironments: {
+          call: vi.fn().mockRejectedValue(new Error('offline'))
+        }
+      }
+    })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        clientTargetGroupId: 'client-preview-group',
+        clientTargetGroupCreated: true
+      })
+    ).rejects.toThrow('did not confirm whether the browser tab was created')
+
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledWith(WORKTREE_ID, 'client-preview-group')
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'client-preview-group'
+      })
+    ).toBe(false)
+  })
+
+  it('cleans up and reports failure when the created browser cannot reconcile', async () => {
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockReturnValue(false)
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({
+        id: 'list',
+        ok: false,
+        error: { code: 'remote_runtime_timeout', message: 'session tabs timed out' }
+      })
+      .mockResolvedValueOnce({ id: 'close', ok: true, result: { closed: true } })
+      .mockResolvedValueOnce({ id: 'list-after-close', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        clientTargetGroupId: 'client-preview-group',
+        clientTargetGroupCreated: true,
+        focusOnCreate: false
+      })
+    ).resolves.toBe(false)
+
+    expect(runtimeCall).toHaveBeenNthCalledWith(3, {
+      selector: ENVIRONMENT_ID,
+      method: 'browser.tabClose',
+      params: {
+        worktree: `id:${WORKTREE_ID}`,
+        page: 'remote-browser-page-1'
+      },
+      timeoutMs: 15_000
+    })
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledWith(WORKTREE_ID, 'client-preview-group')
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'client-preview-group'
+      })
+    ).toBe(false)
+  })
+
+  it('keeps a split reserved after ownership moves to an overlapping browser creation', async () => {
+    mocks.getState.mockReturnValue({
+      ...mocks.getState(),
+      runtimeStatusByEnvironmentId: new Map(
+        [ENVIRONMENT_ID, SECOND_ENVIRONMENT_ID].map((environmentId) => [
+          environmentId,
+          { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }
+        ])
+      )
+    })
+    let resolveFirstList!: (response: unknown) => void
+    let resolveSecondList!: (response: unknown) => void
+    const firstList = new Promise((resolve) => {
+      resolveFirstList = resolve
+    })
+    const secondList = new Promise((resolve) => {
+      resolveSecondList = resolve
+    })
+    let createCount = 0
+    let listCount = 0
+    const runtimeCall = vi.fn((request: { method: string }) => {
+      if (request.method === 'browser.tabCreate') {
+        createCount += 1
+        return Promise.resolve({
+          id: `create-${createCount}`,
+          ok: true,
+          result: { browserPageId: `remote-browser-page-${createCount}` }
+        })
+      }
+      if (request.method === 'session.tabs.list') {
+        listCount += 1
+        if (listCount === 1) {
+          return firstList
+        }
+        if (listCount === 2) {
+          return secondList
+        }
+        return Promise.resolve({ id: 'list-after-close', ok: true, result: makeSnapshot() })
+      }
+      return Promise.resolve({ id: 'close', ok: true, result: { closed: true } })
+    })
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockImplementation(
+      (_state, _environmentId, _worktreeId, remotePageId) =>
+        remotePageId === 'remote-browser-page-2'
+    )
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const first = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
       environmentId: ENVIRONMENT_ID,
-      remotePageId: 'remote-browser-page-1'
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: true,
+      focusOnCreate: false
     })
+    await vi.waitFor(() => expect(listCount).toBe(1))
+    const second = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      environmentId: SECOND_ENVIRONMENT_ID,
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: false,
+      focusOnCreate: false
+    })
+    await vi.waitFor(() => expect(createCount).toBe(2))
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'client-preview-group'
+      })
+    ).toBe(true)
+
+    resolveFirstList({
+      id: 'first-list',
+      ok: false,
+      error: { code: 'remote_runtime_timeout', message: 'first preview timed out' }
+    })
+    await vi.waitFor(() => expect(listCount).toBeGreaterThanOrEqual(2))
+    resolveSecondList({ id: 'second-list', ok: true, result: makeSnapshot() })
+    await expect(second).resolves.toBe(true)
+    await expect(first).resolves.toBe(false)
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+    expect(mocks.hasMaterializedWebRuntimeBrowserPage).toHaveBeenCalledWith(
+      expect.anything(),
+      SECOND_ENVIRONMENT_ID,
+      WORKTREE_ID,
+      'remote-browser-page-2',
+      'client-preview-group'
+    )
+  })
+
+  it('transfers empty-split cleanup when both overlapping creations fail', async () => {
+    mocks.getState.mockReturnValue({
+      ...mocks.getState(),
+      runtimeStatusByEnvironmentId: new Map(
+        [ENVIRONMENT_ID, SECOND_ENVIRONMENT_ID].map((environmentId) => [
+          environmentId,
+          { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }
+        ])
+      )
+    })
+    let rejectFirst!: (error: Error) => void
+    let rejectSecond!: (error: Error) => void
+    const runtimeCall = vi
+      .fn()
+      .mockReturnValueOnce(
+        new Promise((_resolve, reject) => {
+          rejectFirst = reject
+        })
+      )
+      .mockReturnValueOnce(
+        new Promise((_resolve, reject) => {
+          rejectSecond = reject
+        })
+      )
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const first = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      environmentId: ENVIRONMENT_ID,
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: true,
+      focusOnCreate: false
+    })
+    const second = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      environmentId: SECOND_ENVIRONMENT_ID,
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: false,
+      focusOnCreate: false
+    })
+    rejectFirst(new Error('first host offline'))
+    await expect(first).rejects.toThrow('did not confirm whether the browser tab was created')
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+
+    rejectSecond(new Error('second host offline'))
+    await expect(second).rejects.toThrow('did not confirm whether the browser tab was created')
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledOnce()
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledWith(WORKTREE_ID, 'client-preview-group')
+  })
+
+  it('rechecks split reservations after delayed host rollback', async () => {
+    mocks.getState.mockReturnValue({
+      ...mocks.getState(),
+      runtimeStatusByEnvironmentId: new Map(
+        [ENVIRONMENT_ID, SECOND_ENVIRONMENT_ID].map((environmentId) => [
+          environmentId,
+          { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }
+        ])
+      )
+    })
+    let resolveClose!: (response: unknown) => void
+    const closeResponse = new Promise((resolve) => {
+      resolveClose = resolve
+    })
+    let createCount = 0
+    let listCount = 0
+    const runtimeCall = vi.fn((request: { method: string }) => {
+      if (request.method === 'browser.tabCreate') {
+        createCount += 1
+        return Promise.resolve({
+          id: `create-${createCount}`,
+          ok: true,
+          result: { browserPageId: `remote-browser-page-${createCount}` }
+        })
+      }
+      if (request.method === 'browser.tabClose') {
+        return closeResponse
+      }
+      listCount += 1
+      return Promise.resolve(
+        listCount === 1
+          ? {
+              id: 'first-list',
+              ok: false,
+              error: { code: 'remote_runtime_timeout', message: 'first preview timed out' }
+            }
+          : { id: `list-${listCount}`, ok: true, result: makeSnapshot() }
+      )
+    })
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockImplementation(
+      (_state, _environmentId, _worktreeId, remotePageId) =>
+        remotePageId === 'remote-browser-page-2'
+    )
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    const first = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      environmentId: ENVIRONMENT_ID,
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: true,
+      focusOnCreate: false
+    })
+    await vi.waitFor(() =>
+      expect(
+        runtimeCall.mock.calls.some(([request]) => request.method === 'browser.tabClose')
+      ).toBe(true)
+    )
+    const second = createWebRuntimeSessionBrowserTab({
+      worktreeId: WORKTREE_ID,
+      environmentId: SECOND_ENVIRONMENT_ID,
+      clientTargetGroupId: 'client-preview-group',
+      clientTargetGroupCreated: false,
+      focusOnCreate: false
+    })
+    await vi.waitFor(() => expect(createCount).toBe(2))
+
+    resolveClose({ id: 'close', ok: true, result: { closed: true } })
+    await expect(second).resolves.toBe(true)
+    await expect(first).resolves.toBe(false)
+    expect(mocks.closeEmptyGroup).not.toHaveBeenCalled()
+  })
+
+  it('accepts subscription materialization when the eager reconciliation fails', async () => {
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({
+        id: 'list',
+        ok: false,
+        error: { code: 'remote_runtime_timeout', message: 'session tabs timed out' }
+      })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })).resolves.toBe(true)
+
+    expect(mocks.hasMaterializedWebRuntimeBrowserPage).toHaveBeenCalledWith(
+      expect.anything(),
+      ENVIRONMENT_ID,
+      WORKTREE_ID,
+      'remote-browser-page-1',
+      undefined
+    )
+    expect(runtimeCall).toHaveBeenCalledTimes(2)
+  })
+
+  it('reports ambiguous failure when exact host cleanup is not confirmed', async () => {
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockReturnValue(false)
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({
+        id: 'list',
+        ok: false,
+        error: { code: 'remote_runtime_timeout', message: 'session tabs timed out' }
+      })
+      .mockResolvedValueOnce({
+        id: 'close',
+        ok: false,
+        error: { code: 'remote_runtime_timeout', message: 'close timed out' }
+      })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        clientTargetGroupId: 'client-preview-group',
+        clientTargetGroupCreated: true
+      })
+    ).rejects.toThrow('could not recover the failed browser creation')
+
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    expect(mocks.closeEmptyGroup).toHaveBeenCalledWith(WORKTREE_ID, 'client-preview-group')
+  })
+
+  it('cleans up when applying the host snapshot fails before materialization', async () => {
+    mocks.hasMaterializedWebRuntimeBrowserPage.mockReturnValue(false)
+    mocks.applyFreshWebSessionTabsSnapshot.mockImplementationOnce(() => {
+      throw new Error('store reconcile failed')
+    })
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+      .mockResolvedValueOnce({ id: 'close', ok: true, result: { closed: true } })
+      .mockResolvedValueOnce({ id: 'list-after-close', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(createWebRuntimeSessionBrowserTab({ worktreeId: WORKTREE_ID })).resolves.toBe(
+      false
+    )
+
+    expect(runtimeCall.mock.calls.map(([request]) => request.method)).toEqual([
+      'browser.tabCreate',
+      'session.tabs.list',
+      'browser.tabClose',
+      'session.tabs.list'
+    ])
   })
 
   it('keeps the requested worktree selected while the browser snapshot catches up', async () => {
     const snapshot = makeSnapshot()
     const setStateResults: unknown[] = []
+    let focusState = {
+      ...mocks.getState(),
+      activeWorktreeId: 'landing',
+      activeWorkspaceExecutionHostId: 'local'
+    }
+    mocks.getState.mockImplementation(() => focusState)
+    mocks.setActiveWorktree.mockImplementation((worktreeId, executionHostId) => {
+      focusState = {
+        ...focusState,
+        activeWorktreeId: worktreeId,
+        activeWorkspaceExecutionHostId: executionHostId
+      }
+    })
     let mockState: Record<string, unknown> = { state: 'before-stage', activeWorktreeId: 'landing' }
     mocks.setState.mockImplementation((updater: (state: unknown) => unknown) => {
       const result = updater(mockState)
@@ -403,6 +1188,45 @@ describe('createWebRuntimeSessionBrowserTab', () => {
     expect(setStateResults.at(-1)).toEqual({ state: 'after' })
   })
 
+  it('does not reselect an already active browser worktree on the same runtime', async () => {
+    mocks.getState.mockReturnValue({
+      settings: { activeRuntimeEnvironmentId: ENVIRONMENT_ID },
+      runtimeStatusByEnvironmentId: new Map([
+        [ENVIRONMENT_ID, { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }]
+      ]),
+      activeWorktreeId: WORKTREE_ID,
+      activeWorkspaceExecutionHostId: RUNTIME_EXECUTION_HOST_ID,
+      browserPagesByWorkspace: {},
+      remoteBrowserPageHandlesByPageId: {},
+      unifiedTabsByWorktree: {},
+      createBrowserTab: mocks.createBrowserTab,
+      closeEmptyGroup: mocks.closeEmptyGroup,
+      moveUnifiedTabToGroup: mocks.moveUnifiedTabToGroup,
+      setRemoteBrowserPageHandle: mocks.setRemoteBrowserPageHandle,
+      focusBrowserTabInWorktree: mocks.focusBrowserTabInWorktree,
+      setActiveWorktree: mocks.setActiveWorktree
+    })
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        url: 'https://example.com/'
+      })
+    ).resolves.toBe(true)
+
+    expect(mocks.setActiveWorktree).not.toHaveBeenCalled()
+  })
+
   it('can create a browser tab without selecting the target worktree', async () => {
     const setStateResults: unknown[] = []
     mocks.setState.mockImplementation((updater: (state: unknown) => unknown) => {
@@ -451,6 +1275,9 @@ describe('createWebRuntimeSessionBrowserTab', () => {
       settings: {
         activeRuntimeEnvironmentId: ENVIRONMENT_ID
       },
+      runtimeStatusByEnvironmentId: new Map([
+        [ENVIRONMENT_ID, { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }]
+      ]),
       activeWorktreeId,
       browserPagesByWorkspace: {},
       remoteBrowserPageHandlesByPageId: {},
@@ -530,6 +1357,55 @@ describe('createWebRuntimeSessionBrowserTab', () => {
     await vi.waitFor(() => expect(mocks.applyFreshWebSessionTabsSnapshot).toHaveBeenCalledTimes(1))
     expect(mocks.setRemoteBrowserPageHandle).not.toHaveBeenCalled()
   })
+
+  it('keeps client presentation fields out of the RPC shape', async () => {
+    const runtimeCall = vi
+      .fn()
+      .mockResolvedValueOnce({
+        id: 'create',
+        ok: true,
+        result: { browserPageId: 'remote-browser-page-1' }
+      })
+      .mockResolvedValueOnce({ id: 'list', ok: true, result: makeSnapshot() })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        url: 'https://example.com/?q=private',
+        selectWorktree: false,
+        stagedTitle: 'Search Google',
+        stagedFocusAddressBar: false
+      })
+    ).resolves.toBe(true)
+
+    expect(mocks.createBrowserTab).not.toHaveBeenCalled()
+    expect(runtimeCall.mock.calls[0][0].params).not.toHaveProperty('stagedTitle')
+  })
+
+  it('can log remote browser failure without retaining downstream details', async () => {
+    const consoleWarn = vi.spyOn(console, 'warn').mockImplementation(() => undefined)
+    vi.stubGlobal('window', {
+      api: {
+        runtimeEnvironments: {
+          call: vi.fn().mockRejectedValue(new Error('failed https://example.com/?q=private'))
+        }
+      }
+    })
+
+    await expect(
+      createWebRuntimeSessionBrowserTab({
+        worktreeId: WORKTREE_ID,
+        environmentId: ENVIRONMENT_ID,
+        url: 'https://example.com/?q=private',
+        failureLogMode: 'operation-only'
+      })
+    ).rejects.toThrow('did not confirm whether the browser tab was created')
+
+    expect(consoleWarn).toHaveBeenCalledWith('[web-runtime-session] failed to create browser tab')
+    expect(JSON.stringify(consoleWarn.mock.calls)).not.toContain('private')
+  })
 })
 
 describe('createWebRuntimeSessionTerminal', () => {
@@ -572,6 +1448,7 @@ describe('createWebRuntimeSessionTerminal', () => {
     })
     const runtimeCall = vi
       .fn()
+      .mockResolvedValueOnce(makeAttributionSafeStatus())
       .mockResolvedValueOnce({
         id: 'create',
         ok: true,
@@ -592,6 +1469,43 @@ describe('createWebRuntimeSessionTerminal', () => {
     expect(selectedHosts).toEqual([RUNTIME_EXECUTION_HOST_ID])
   })
 
+  it('refuses session-tab creation when an older host drops terminal environment fields', async () => {
+    const runtimeCall = vi.fn().mockResolvedValue({
+      id: 'status',
+      ok: true,
+      result: { capabilities: ['mobile.tasks.v1'] }
+    })
+    vi.stubGlobal('window', {
+      api: { runtimeEnvironments: { call: runtimeCall } }
+    })
+
+    await expect(createWebRuntimeSessionTerminal({ worktreeId: WORKTREE_ID })).resolves.toEqual({
+      status: 'failed',
+      message:
+        'Creating terminals requires a newer workspace host that can verify safe terminal environment forwarding. Update the host and try again.'
+    })
+
+    expect(runtimeCall.mock.calls.map(([request]) => request.method)).toEqual(['status.get'])
+  })
+
+  it('returns a failed outcome when attribution cleanup exceeds the deletion limit', async () => {
+    const runtimeCall = vi.fn()
+    vi.stubGlobal('window', {
+      api: { runtimeEnvironments: { call: runtimeCall } }
+    })
+
+    await expect(
+      createWebRuntimeSessionTerminal({
+        worktreeId: WORKTREE_ID,
+        envToDelete: Array.from({ length: 32 }, (_, index) => `KEY_${index}`)
+      })
+    ).resolves.toEqual({
+      status: 'failed',
+      message: 'Terminal environment deletion limit leaves no room for attribution cleanup'
+    })
+    expect(runtimeCall).not.toHaveBeenCalled()
+  })
+
   it.each([
     { sessionKind: 'fresh' as const, activate: true },
     { sessionKind: 'fresh' as const, activate: false },
@@ -611,7 +1525,7 @@ describe('createWebRuntimeSessionTerminal', () => {
               graphStatus: 'ready',
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
             }
           }
         }
@@ -700,7 +1614,7 @@ describe('createWebRuntimeSessionTerminal', () => {
           graphStatus: 'ready',
           runtimeProtocolVersion: 3,
           minCompatibleRuntimeClientVersion: 2,
-          capabilities: ['agent-session.host-authority.v1']
+          capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
         }
       })
       .mockResolvedValueOnce({
@@ -764,6 +1678,7 @@ describe('createWebRuntimeSessionTerminal', () => {
     expect(runtimeCall).toHaveBeenNthCalledWith(2, {
       selector: ENVIRONMENT_ID,
       expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'runtime-1',
       method: 'terminal.createAgentSession',
       params: {
         clientOperationId: expect.stringMatching(/^\d{13}-[0-9a-f]{32}$/),
@@ -808,6 +1723,7 @@ describe('createWebRuntimeSessionTerminal', () => {
   it('keeps exact legacy ordering when structured creation cannot express afterTabId', async () => {
     const runtimeCall = vi
       .fn()
+      .mockResolvedValueOnce(makeAttributionSafeStatus())
       .mockResolvedValueOnce({
         id: 'legacy-create',
         ok: true,
@@ -833,8 +1749,10 @@ describe('createWebRuntimeSessionTerminal', () => {
       })
     ).resolves.toEqual({ status: 'created' })
 
-    expect(runtimeCall).toHaveBeenNthCalledWith(1, {
+    expect(runtimeCall).toHaveBeenNthCalledWith(2, {
       selector: ENVIRONMENT_ID,
+      expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'runtime-1',
       method: 'session.tabs.createTerminal',
       params: {
         worktree: `id:${WORKTREE_ID}`,
@@ -842,6 +1760,8 @@ describe('createWebRuntimeSessionTerminal', () => {
         targetGroupId: 'group-left',
         command: undefined,
         cwd: undefined,
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         startupCommandDelivery: undefined,
         agent: 'codex',
         activate: false,
@@ -851,6 +1771,7 @@ describe('createWebRuntimeSessionTerminal', () => {
       timeoutMs: 15_000
     })
     expect(runtimeCall.mock.calls.map(([request]) => request.method)).toEqual([
+      'status.get',
       'session.tabs.createTerminal',
       'session.tabs.list'
     ])
@@ -867,6 +1788,7 @@ describe('createWebRuntimeSessionTerminal', () => {
     })
     const runtimeCall = vi
       .fn()
+      .mockResolvedValueOnce(makeAttributionSafeStatus())
       .mockResolvedValueOnce({
         id: 'create-terminal',
         ok: true,
@@ -923,7 +1845,7 @@ describe('createWebRuntimeSessionTerminal', () => {
               graphStatus: 'ready',
               runtimeProtocolVersion: 3,
               minCompatibleRuntimeClientVersion: 2,
-              capabilities: ['agent-session.host-authority.v1']
+              capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
             }
           }
         }
@@ -984,7 +1906,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         }
       }
@@ -1037,7 +1959,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: []
+            capabilities: ['terminal.attribution-removed.v1']
           }
         }
       }
@@ -1068,6 +1990,8 @@ describe('createWebRuntimeSessionTerminal', () => {
 
     expect(runtimeCall).toHaveBeenNthCalledWith(2, {
       selector: ENVIRONMENT_ID,
+      expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'old-runtime',
       method: 'session.tabs.createTerminal',
       params: {
         worktree: `id:${WORKTREE_ID}`,
@@ -1075,6 +1999,8 @@ describe('createWebRuntimeSessionTerminal', () => {
         targetGroupId: 'group-left',
         command: undefined,
         cwd: undefined,
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         startupCommandDelivery: undefined,
         launchAgent: 'codex',
         activate: false,
@@ -1101,7 +2027,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: []
+            capabilities: ['terminal.attribution-removed.v1']
           }
         }
       }
@@ -1136,6 +2062,8 @@ describe('createWebRuntimeSessionTerminal', () => {
 
     expect(runtimeCall).toHaveBeenNthCalledWith(2, {
       selector: ENVIRONMENT_ID,
+      expectedEnvironmentPairingRevision: undefined,
+      expectedRuntimeId: 'old-runtime',
       method: 'session.tabs.createTerminal',
       params: {
         worktree: `id:${WORKTREE_ID}`,
@@ -1143,7 +2071,8 @@ describe('createWebRuntimeSessionTerminal', () => {
         targetGroupId: undefined,
         command: "codex resume 'session-1'",
         cwd: undefined,
-        env: { CODEX_PROFILE: 'captured' },
+        env: { CODEX_PROFILE: 'captured', ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         startupCommandDelivery: undefined,
         launchConfig: {
           agentCommand: 'codex',
@@ -1172,7 +2101,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         }
       }
@@ -1213,9 +2142,14 @@ describe('createWebRuntimeSessionTerminal', () => {
 
     expect(methods).toEqual(['status.get', 'session.tabs.createTerminal', 'session.tabs.list'])
     expect(runtimeCall.mock.calls[1]?.[0]).toMatchObject({
+      expectedRuntimeId: 'new-runtime',
       params: {
         command: "omp --resume '/custom/omp/project/session.jsonl'",
-        env: { PI_CODING_AGENT_DIR: '/custom/omp' },
+        env: {
+          PI_CODING_AGENT_DIR: '/custom/omp',
+          ORCA_ATTRIBUTION_BYPASS: '1'
+        },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         launchAgent: 'omp'
       }
     })
@@ -1232,7 +2166,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         }
       }
@@ -1294,7 +2228,7 @@ describe('createWebRuntimeSessionTerminal', () => {
             graphStatus: 'ready',
             runtimeProtocolVersion: 3,
             minCompatibleRuntimeClientVersion: 2,
-            capabilities: ['agent-session.host-authority.v1']
+            capabilities: ['agent-session.host-authority.v1', 'terminal.attribution-removed.v1']
           }
         }
       }
@@ -1353,6 +2287,7 @@ describe('moveWebRuntimeSessionTab', () => {
   })
 
   afterEach(() => {
+    resetWebSessionFocusIntentForTests()
     vi.unstubAllGlobals()
     vi.clearAllMocks()
   })
@@ -1556,6 +2491,7 @@ describe('web runtime session tab actions', () => {
   })
 
   afterEach(() => {
+    resetWebSessionFocusIntentForTests()
     vi.unstubAllGlobals()
     vi.clearAllMocks()
   })
@@ -1634,6 +2570,25 @@ describe('web runtime session tab actions', () => {
     expect(mocks.applyFreshWebSessionTabsSnapshot).toHaveBeenCalled()
   })
 
+  it('supersedes browser focus intent when a terminal is activated next', async () => {
+    mocks.resolveHostSessionTabIdForWebSessionTab.mockImplementation(
+      (_state, args: { tabId: string }) =>
+        args.tabId === 'local-browser-unified' ? 'host-browser-unified' : 'host-terminal'
+    )
+    const runtimeCall = vi.fn().mockResolvedValue({ id: 'activate', ok: true, result: {} })
+    vi.stubGlobal('window', { api: { runtimeEnvironments: { call: runtimeCall } } })
+
+    await activateWebRuntimeSessionTab({
+      worktreeId: WORKTREE_ID,
+      tabId: 'local-browser-unified'
+    })
+    await activateWebRuntimeSessionTab({ worktreeId: WORKTREE_ID, tabId: 'local-terminal' })
+
+    expect(peekWebSessionFocusIntent({ environmentId: ENVIRONMENT_ID }, WORKTREE_ID)).toEqual({
+      hostTabId: 'host-terminal'
+    })
+  })
+
   it('sends lifecycle and explicit user close reasons on the wire', async () => {
     const runtimeCall = vi
       .fn()
@@ -1903,17 +2858,25 @@ describe('splitWebRuntimeTerminal', () => {
   })
 
   it('passes telemetry source to the host split while allowing the mirrored split event to be suppressed', async () => {
-    const runtimeCall = vi.fn().mockResolvedValue({
-      id: 'split',
-      ok: true,
-      result: {
-        split: {
-          handle: 'terminal-2',
-          tabId: 'tab-1',
-          paneRuntimeId: -1
-        }
-      }
-    })
+    const runtimeCall = vi.fn(async (request: { method: string }) =>
+      request.method === 'status.get'
+        ? {
+            id: 'status',
+            ok: true,
+            result: { capabilities: ['terminal.attribution-removed.v1'] }
+          }
+        : {
+            id: 'split',
+            ok: true,
+            result: {
+              split: {
+                handle: 'terminal-2',
+                tabId: 'tab-1',
+                paneRuntimeId: -1
+              }
+            }
+          }
+    )
     vi.stubGlobal('window', {
       api: {
         runtimeEnvironments: {
@@ -1932,13 +2895,22 @@ describe('splitWebRuntimeTerminal', () => {
       consumePendingWebRuntimeSplitMirrorTelemetry('remote:web-env-1@@terminal-1', 'horizontal')
     ).toBe(true)
 
-    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(1))
-    expect(runtimeCall).toHaveBeenCalledWith({
+    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
+    expect(runtimeCall).toHaveBeenNthCalledWith(1, {
       selector: 'web-env-1',
+      expectedEnvironmentPairingRevision: undefined,
+      method: 'status.get',
+      timeoutMs: 15_000
+    })
+    expect(runtimeCall).toHaveBeenNthCalledWith(2, {
+      selector: 'web-env-1',
+      expectedEnvironmentPairingRevision: undefined,
       method: 'terminal.split',
       params: {
         terminal: 'terminal-1',
         direction: 'horizontal',
+        env: { ORCA_ATTRIBUTION_BYPASS: '1' },
+        envToDelete: ['ORCA_ENABLE_GIT_ATTRIBUTION'],
         telemetrySource: 'keyboard'
       },
       timeoutMs: 15_000
@@ -1947,11 +2919,19 @@ describe('splitWebRuntimeTerminal', () => {
 
   it('does not track rejected host split RPCs', async () => {
     const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
-    const runtimeCall = vi.fn().mockResolvedValue({
-      id: 'split',
-      ok: false,
-      error: { code: 'terminal_exited', message: 'Terminal exited' }
-    })
+    const runtimeCall = vi.fn(async (request: { method: string }) =>
+      request.method === 'status.get'
+        ? {
+            id: 'status',
+            ok: true,
+            result: { capabilities: ['terminal.attribution-removed.v1'] }
+          }
+        : {
+            id: 'split',
+            ok: false,
+            error: { code: 'terminal_exited', message: 'Terminal exited' }
+          }
+    )
     vi.stubGlobal('window', {
       api: {
         runtimeEnvironments: {
@@ -1964,23 +2944,53 @@ describe('splitWebRuntimeTerminal', () => {
       splitWebRuntimeTerminal('remote:web-env-1@@terminal-1', 'vertical', 'context_menu')
     ).toBe(true)
 
-    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(1))
+    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
     await vi.waitFor(() => expect(warnSpy).toHaveBeenCalledTimes(1))
+    expect(mocks.toastError).toHaveBeenCalledWith('Terminal exited')
     expect(mocks.trackTerminalPaneSplit).not.toHaveBeenCalled()
   })
 
-  it('ignores local panes but delegates remote runtime panes from desktop or web clients', async () => {
+  it('refuses legacy hosts because renderer-owned splits discard environment fields', async () => {
+    const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
     const runtimeCall = vi.fn().mockResolvedValue({
-      id: 'split',
+      id: 'status',
       ok: true,
-      result: {
-        split: {
-          handle: 'terminal-2',
-          tabId: 'tab-1',
-          ptyId: 'pty-2'
-        }
-      }
+      result: { appVersion: '1.4.181', capabilities: ['mobile.tasks.v1'] }
     })
+    vi.stubGlobal('window', {
+      api: { runtimeEnvironments: { call: runtimeCall } }
+    })
+
+    expect(splitWebRuntimeTerminal('remote:web-env-1@@terminal-1', 'vertical', 'keyboard')).toBe(
+      true
+    )
+
+    await vi.waitFor(() => expect(warnSpy).toHaveBeenCalledTimes(1))
+    expect(runtimeCall).toHaveBeenCalledTimes(1)
+    expect(runtimeCall).not.toHaveBeenCalledWith(
+      expect.objectContaining({ method: 'terminal.split' })
+    )
+    expect(mocks.toastError).toHaveBeenCalledWith(
+      expect.stringContaining('Update the host and try again')
+    )
+  })
+
+  it('ignores local panes but delegates remote runtime panes from desktop or web clients', async () => {
+    const runtimeCall = vi.fn(async (request: { method: string }) =>
+      request.method === 'status.get'
+        ? { id: 'status', ok: true, result: { capabilities: ['terminal.attribution-removed.v1'] } }
+        : {
+            id: 'split',
+            ok: true,
+            result: {
+              split: {
+                handle: 'terminal-2',
+                tabId: 'tab-1',
+                ptyId: 'pty-2'
+              }
+            }
+          }
+    )
     vi.stubGlobal('window', {
       api: {
         runtimeEnvironments: {
@@ -1995,7 +3005,7 @@ describe('splitWebRuntimeTerminal', () => {
       true
     )
 
-    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(1))
+    await vi.waitFor(() => expect(runtimeCall).toHaveBeenCalledTimes(2))
   })
 })
 
diff --git a/src/renderer/src/runtime/web-runtime-session.ts b/src/renderer/src/runtime/web-runtime-session.ts
index 7178aa21b5f..089ceafd53c 100644
--- a/src/renderer/src/runtime/web-runtime-session.ts
+++ b/src/renderer/src/runtime/web-runtime-session.ts
@@ -8,6 +8,7 @@ import type {
   RuntimeMobileSessionTabMoveResult,
   RuntimeMobileSessionTabsResult,
   RuntimeSessionTabCloseReason,
+  RuntimeStatus,
   RuntimeTerminalCreate,
   RuntimeTerminalClose,
   RuntimeTerminalSplit
@@ -18,7 +19,10 @@ import type {
   SleepingAgentLaunchConfig,
   AgentProviderSessionMetadata
 } from '../../../shared/agent-session-resume'
-import { AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY } from '../../../shared/protocol-version'
+import {
+  AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY,
+  TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY
+} from '../../../shared/protocol-version'
 import type {
   AgentLaunchPreferences,
   AgentPromptDelivery,
@@ -26,17 +30,22 @@ import type {
   RuntimeEnsureAgentSessionResult
 } from '../../../shared/agent-session-host-authority'
 import type { TerminalPaneLayoutNode, TuiAgent } from '../../../shared/types'
-import type { AppState } from '../store/types'
+import { createBrowserUuid } from '../lib/browser-uuid'
 import { getRuntimeEnvironmentIdForWorktree } from '../lib/worktree-runtime-owner'
 import { useAppStore } from '../store'
-import { unwrapRuntimeRpcResult } from './runtime-rpc-client'
+import { hasRuntimeRpcErrorCode, unwrapRuntimeRpcResult } from './runtime-rpc-client'
 import {
   createAgentSessionCreateOperation,
   withAgentSessionCreateOperationId
 } from './agent-session-create-operation'
 import { parseRemoteRuntimePtyId } from './runtime-terminal-stream'
 import { toRuntimeWorktreeSelector } from './runtime-worktree-selector'
-import { recordWebSessionFocusIntent } from './web-session-focus-intent'
+import {
+  clearWebSessionFocusIntentIfMatches,
+  peekWebSessionFocusIntent,
+  recordWebSessionFocusIntent,
+  resolveWebSessionVisibleTabId
+} from './web-session-focus-intent'
 import { clearWebSessionCloseIntent, recordWebSessionCloseIntent } from './web-session-close-intent'
 import {
   clearWebSessionReorderIntent,
@@ -61,6 +70,30 @@ import { translate } from '../i18n/i18n'
 import { getRuntimeEnvironmentRevision } from './runtime-environment-revision'
 import { parsePaneKey } from '../../../shared/stable-pane-id'
 import { toRuntimeExecutionHostId } from '../../../shared/execution-host'
+import {
+  claimWebSessionBrowserPlacementGroupCleanup,
+  forgetWebSessionBrowserPlacement,
+  markWebSessionBrowserPlacementGroupMaterialized,
+  moveWebSessionBrowserPlacement,
+  recordWebSessionBrowserPlacement,
+  releaseWebSessionBrowserPlacementGroup
+} from './web-session-browser-placement'
+import { assertRuntimeManagedBrowserCreationAvailable } from '../lib/client-creation-action-policy'
+import { hasMaterializedWebRuntimeBrowserPage } from './web-runtime-browser-materialization'
+import {
+  pauseAfterE2eWebRuntimeBrowserCreate,
+  throwIfE2eWebRuntimeBrowserCapabilityUnavailable,
+  throwIfE2eWebRuntimeBrowserReconciliationFails
+} from './web-runtime-browser-creation-e2e-fault'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  hostSupportsSessionTabTerminalCreateAttributionDisable,
+  hostSupportsTerminalSplitAttributionDisable,
+  SESSION_TAB_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE,
+  TERMINAL_SPLIT_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE,
+  withLegacyTerminalAttributionDisabledEnv
+} from '../../../shared/legacy-terminal-attribution-env'
+import { toast } from 'sonner'
 
 export {
   HOST_TERMINAL_SURFACE_SEPARATOR,
@@ -81,6 +114,22 @@ export type WebRuntimeTerminalCreateOutcome =
   | { status: 'created' }
   | { status: 'failed'; message: string }
 
+const DEFINITIVE_BROWSER_CREATE_FAILURE_CODES = [
+  'browser_error',
+  'capability_unsupported',
+  'invalid_argument',
+  'invalid_params',
+  'method_not_found',
+  'runtime_rpc_queue_overloaded',
+  'selector_ambiguous',
+  'selector_not_found',
+  'unauthorized'
+] as const
+
+function isDefinitiveBrowserCreateFailure(error: unknown): boolean {
+  return DEFINITIVE_BROWSER_CREATE_FAILURE_CODES.some((code) => hasRuntimeRpcErrorCode(error, code))
+}
+
 const pendingWebRuntimeSplitMirrorTelemetry = new Map<string, Set<string>>()
 const WEB_RUNTIME_SPLIT_MIRROR_SUPPRESSION_TTL_MS = 30_000
 let pendingWebRuntimeSplitMirrorTelemetryId = 0
@@ -94,6 +143,7 @@ function captureRuntimeEnvironmentCall(
   method: string
   params?: unknown
   timeoutMs?: number
+  expectedRuntimeId?: string
 }) => Promise<RuntimeRpcResponse<unknown>> {
   return (args) =>
     window.api.runtimeEnvironments.call({
@@ -228,6 +278,14 @@ async function createWebRuntimeSessionTerminalResult(
   }
   const intentOwner = captureWebSessionIntentOwner(environmentId)
   const callEnvironment = captureRuntimeEnvironmentCall(environmentId, intentOwner.pairingRevision)
+  const assertSessionTabCreateAttributionDisableSupported = async (): Promise<RuntimeStatus> => {
+    const response = await callEnvironment({ method: 'status.get', timeoutMs: 15_000 })
+    const status = unwrapRuntimeRpcResult(response as RuntimeRpcResponse<RuntimeStatus>)
+    if (!hostSupportsSessionTabTerminalCreateAttributionDisable(status)) {
+      throw new Error(SESSION_TAB_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE)
+    }
+    return status
+  }
 
   if (args.selectWorktree !== false) {
     selectWebRuntimeSessionWorktree(args.worktreeId, environmentId)
@@ -236,6 +294,8 @@ async function createWebRuntimeSessionTerminalResult(
   let createdTabId: string | undefined
   let createdLeafId: string | undefined
   try {
+    const env = withLegacyTerminalAttributionDisabledEnv(args.env)
+    const envToDelete = addLegacyTerminalAttributionDisableRequest(args.envToDelete)
     const agent = args.launchAgent ?? args.agent
     const agentArgsOverride =
       args.agentArgs !== undefined ? args.agentArgs : args.launchConfig?.agentArgs
@@ -247,7 +307,7 @@ async function createWebRuntimeSessionTerminalResult(
         ? undefined
         : args.agentSessionKind === 'resume'
           ? args.providerSession
-            ? async () =>
+            ? async (authority: { runtimeId: string }) =>
                 unwrapRuntimeRpcResult(
                   (await callEnvironment({
                     method: 'terminal.ensureAgentSession',
@@ -265,11 +325,12 @@ async function createWebRuntimeSessionTerminalResult(
                         : {}),
                       presentation: 'background'
                     },
-                    timeoutMs: 15_000
+                    timeoutMs: 15_000,
+                    expectedRuntimeId: authority.runtimeId
                   })) as RuntimeRpcResponse<RuntimeEnsureAgentSessionResult>
                 )
             : undefined
-          : async () =>
+          : async (authority: { runtimeId: string }) =>
               await createAgentSessionCreateOperation().run(async (clientOperationId) =>
                 unwrapRuntimeRpcResult(
                   (await callEnvironment({
@@ -292,7 +353,8 @@ async function createWebRuntimeSessionTerminalResult(
                       },
                       clientOperationId
                     ),
-                    timeoutMs: 15_000
+                    timeoutMs: 15_000,
+                    expectedRuntimeId: authority.runtimeId
                   })) as RuntimeRpcResponse<RuntimeCreateAgentSessionResult>
                 )
               )
@@ -300,11 +362,15 @@ async function createWebRuntimeSessionTerminalResult(
         terminal: CreatedAgentTerminalIdentity
       }>({
         environmentId,
+        expectedEnvironmentPairingRevision: intentOwner.pairingRevision,
         ...(hostAuthority ? { hostAuthority } : {}),
-        ...(args.agentSessionKind === 'resume' && agent === 'omp'
-          ? { hostAuthorityCapability: AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY }
-          : {}),
-        legacy: async () => {
+        requiredHostAuthorityCapabilities: [
+          TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
+          ...(args.agentSessionKind === 'resume' && agent === 'omp'
+            ? [AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY]
+            : [])
+        ],
+        legacy: async ({ authority }) => {
           const response = await callEnvironment({
             method: 'session.tabs.createTerminal',
             params: {
@@ -313,8 +379,8 @@ async function createWebRuntimeSessionTerminalResult(
               targetGroupId: args.targetGroupId,
               command: args.command,
               cwd: args.cwd,
-              ...(args.env ? { env: args.env } : {}),
-              ...(args.envToDelete ? { envToDelete: args.envToDelete } : {}),
+              env,
+              ...(envToDelete ? { envToDelete } : {}),
               startupCommandDelivery: args.startupCommandDelivery,
               ...(args.launchConfig ? { launchConfig: args.launchConfig } : {}),
               ...(args.launchToken ? { launchToken: args.launchToken } : {}),
@@ -326,7 +392,8 @@ async function createWebRuntimeSessionTerminalResult(
               select: args.activate !== false,
               navigation: 'caller'
             },
-            timeoutMs: 15_000
+            timeoutMs: 15_000,
+            expectedRuntimeId: authority.runtimeId
           })
           const legacyCreated = unwrapRuntimeRpcResult(
             response as RuntimeRpcResponse<RuntimeMobileSessionCreateTerminalResult>
@@ -358,6 +425,7 @@ async function createWebRuntimeSessionTerminalResult(
         })
       }
     } else {
+      const status = await assertSessionTabCreateAttributionDisableSupported()
       const response = await callEnvironment({
         method: 'session.tabs.createTerminal',
         params: {
@@ -366,8 +434,8 @@ async function createWebRuntimeSessionTerminalResult(
           targetGroupId: args.targetGroupId,
           command: args.command,
           cwd: args.cwd,
-          ...(args.env ? { env: args.env } : {}),
-          ...(args.envToDelete ? { envToDelete: args.envToDelete } : {}),
+          env,
+          ...(envToDelete ? { envToDelete } : {}),
           startupCommandDelivery: args.startupCommandDelivery,
           ...(args.launchConfig ? { launchConfig: args.launchConfig } : {}),
           ...(args.launchToken ? { launchToken: args.launchToken } : {}),
@@ -377,7 +445,8 @@ async function createWebRuntimeSessionTerminalResult(
           select: args.activate !== false,
           navigation: 'caller'
         },
-        timeoutMs: 15_000
+        timeoutMs: 15_000,
+        expectedRuntimeId: status.runtimeId
       })
       const created = unwrapRuntimeRpcResult(
         response as RuntimeRpcResponse<RuntimeMobileSessionCreateTerminalResult>
@@ -423,7 +492,13 @@ export async function createWebRuntimeSessionBrowserTab(args: {
   url?: string
   profileId?: string | null
   targetGroupId?: string
+  clientTargetGroupId?: string
+  clientTargetGroupCreated?: boolean
+  focusOnCreate?: boolean
   selectWorktree?: boolean
+  stagedTitle?: string
+  stagedFocusAddressBar?: boolean
+  failureLogMode?: 'details' | 'operation-only'
 }): Promise<boolean> {
   const environmentId =
     args.environmentId?.trim() ??
@@ -434,124 +509,267 @@ export async function createWebRuntimeSessionBrowserTab(args: {
   }
   const intentOwner = captureWebSessionIntentOwner(environmentId)
   const callEnvironment = captureRuntimeEnvironmentCall(environmentId, intentOwner.pairingRevision)
-
+  const shouldFocusOnCreate = args.focusOnCreate !== false
   const shouldSelectWorktree = args.selectWorktree !== false
-  const stagedFromWorktreeId = useAppStore.getState().activeWorktreeId
-  if (shouldSelectWorktree) {
-    selectWebRuntimeSessionWorktree(args.worktreeId, environmentId)
-  }
+  const provisionalPageId = createBrowserUuid()
+  let unsubscribeFocusGuard = (): void => {}
+  let guardedPageId = provisionalPageId
+  let createdPageId: string | null = null
+  let createAttempted = false
   try {
-    const response = await callEnvironment({
-      method: 'browser.tabCreate',
-      params: {
-        worktree: toRuntimeWorktreeSelector(args.worktreeId),
-        url: args.url,
-        profileId: args.profileId ?? undefined,
-        // Why: user clicked "New Browser Tab", so mark it active in the snapshot, else the reconcile snaps back to a terminal.
-        activate: true,
-        // Why: place the new browser in the clicked split group so the host snapshot is authoritative for it (no left-snap).
-        ...(args.targetGroupId ? { targetGroupId: args.targetGroupId } : {}),
-        // Why: web clients need the local tab now; waiting for host webview registration makes the workspace appear to close.
-        waitForRegistration: false
-      },
-      timeoutMs: 15_000
-    })
-    const created = unwrapRuntimeRpcResult(response as RuntimeRpcResponse<BrowserTabCreateResult>)
-    // Why: record focus intent (tab id === browserPageId on a headless host) so the reconcile follows to the new browser tab.
-    if (matchesWebSessionIntentOwner(intentOwner)) {
-      recordWebSessionFocusIntent(intentOwner, args.worktreeId, created.browserPageId)
+    throwIfE2eWebRuntimeBrowserCapabilityUnavailable()
+    assertRuntimeManagedBrowserCreationAvailable(useAppStore.getState(), environmentId)
+    if (args.clientTargetGroupId) {
+      recordWebSessionBrowserPlacement({
+        environmentId,
+        worktreeId: args.worktreeId,
+        remotePageId: provisionalPageId,
+        groupId: args.clientTargetGroupId,
+        callerCreatedGroup: args.clientTargetGroupCreated
+      })
     }
-    stageWebRuntimeBrowserTab({
+    if (shouldSelectWorktree) {
+      selectWebRuntimeSessionBrowserWorktree(args.worktreeId, environmentId)
+    }
+    const initialFocusState = shouldFocusOnCreate ? useAppStore.getState() : null
+    const expectedActiveWorktreeId = initialFocusState?.activeWorktreeId
+    const expectedActiveWorkspaceExecutionHostId = initialFocusState?.activeWorkspaceExecutionHostId
+    const expectedCurrentLocalTabId = initialFocusState
+      ? resolveWebSessionVisibleTabId(initialFocusState, args.worktreeId)
+      : null
+    if (shouldFocusOnCreate && matchesWebSessionIntentOwner(intentOwner)) {
+      recordWebSessionFocusIntent(
+        intentOwner,
+        args.worktreeId,
+        provisionalPageId,
+        undefined,
+        expectedCurrentLocalTabId
+      )
+      unsubscribeFocusGuard = useAppStore.subscribe((state, previousState) => {
+        if (
+          state.activeBrowserTabIdByWorktree === previousState.activeBrowserTabIdByWorktree &&
+          state.activeFileIdByWorktree === previousState.activeFileIdByWorktree &&
+          state.activeTabIdByWorktree === previousState.activeTabIdByWorktree &&
+          state.activeTabType === previousState.activeTabType &&
+          state.activeTabTypeByWorktree === previousState.activeTabTypeByWorktree &&
+          state.activeWorktreeId === previousState.activeWorktreeId &&
+          state.activeWorkspaceExecutionHostId === previousState.activeWorkspaceExecutionHostId &&
+          state.unifiedTabsByWorktree === previousState.unifiedTabsByWorktree
+        ) {
+          return
+        }
+        if (
+          state.activeWorktreeId === expectedActiveWorktreeId &&
+          state.activeWorkspaceExecutionHostId === expectedActiveWorkspaceExecutionHostId &&
+          resolveWebSessionVisibleTabId(state, args.worktreeId) === expectedCurrentLocalTabId
+        ) {
+          return
+        }
+        clearWebSessionFocusIntentIfMatches(intentOwner, args.worktreeId, guardedPageId)
+        unsubscribeFocusGuard()
+      })
+    }
+    createAttempted = true
+    const created = unwrapRuntimeRpcResult(
+      (await callEnvironment({
+        method: 'browser.tabCreate',
+        params: {
+          worktree: toRuntimeWorktreeSelector(args.worktreeId),
+          url: args.url,
+          profileId: args.profileId ?? undefined,
+          activate: shouldFocusOnCreate,
+          // Why: place the new browser in the clicked split group so the host snapshot is authoritative for it (no left-snap).
+          ...(args.targetGroupId ? { targetGroupId: args.targetGroupId } : {}),
+          // Why: web clients need the local tab now; waiting for host webview registration makes the workspace appear to close.
+          waitForRegistration: false
+        },
+        timeoutMs: 15_000
+      })) as RuntimeRpcResponse<BrowserTabCreateResult>
+    )
+    createdPageId = created.browserPageId
+    await pauseAfterE2eWebRuntimeBrowserCreate(created.browserPageId)
+    if (created.browserPageId !== provisionalPageId) {
+      moveWebSessionBrowserPlacement({
+        environmentId,
+        worktreeId: args.worktreeId,
+        fromRemotePageId: provisionalPageId,
+        toRemotePageId: created.browserPageId
+      })
+      const focusIntent = shouldFocusOnCreate
+        ? peekWebSessionFocusIntent(intentOwner, args.worktreeId)
+        : null
+      if (focusIntent?.hostTabId === provisionalPageId) {
+        recordWebSessionFocusIntent(
+          intentOwner,
+          args.worktreeId,
+          created.browserPageId,
+          undefined,
+          focusIntent.expectedCurrentLocalTabId
+        )
+      }
+      guardedPageId = created.browserPageId
+    }
+    try {
+      await refreshWebRuntimeSessionTabsSnapshot(environmentId, args.worktreeId, {
+        expectedEnvironmentPairingRevision: intentOwner.pairingRevision,
+        acceptCurrentSnapshot: true,
+        afterCurrentInFlight: true,
+        errorMode: 'throw'
+      })
+    } catch (error) {
+      if (
+        !hasMaterializedWebRuntimeBrowserPage(
+          useAppStore.getState(),
+          environmentId,
+          args.worktreeId,
+          created.browserPageId,
+          args.clientTargetGroupId ?? args.targetGroupId
+        )
+      ) {
+        throw error
+      }
+    }
+    if (
+      !hasMaterializedWebRuntimeBrowserPage(
+        useAppStore.getState(),
+        environmentId,
+        args.worktreeId,
+        created.browserPageId,
+        args.clientTargetGroupId ?? args.targetGroupId
+      )
+    ) {
+      throw new Error('The created browser tab did not materialize in the client.')
+    }
+    const remainingFocusIntent = shouldFocusOnCreate
+      ? peekWebSessionFocusIntent(intentOwner, args.worktreeId)
+      : null
+    if (
+      remainingFocusIntent?.hostTabId === guardedPageId &&
+      remainingFocusIntent.expectedCurrentLocalTabId === expectedCurrentLocalTabId
+    ) {
+      clearWebSessionFocusIntentIfMatches(intentOwner, args.worktreeId, guardedPageId)
+    }
+    unsubscribeFocusGuard()
+    if (args.clientTargetGroupId) {
+      markWebSessionBrowserPlacementGroupMaterialized({
+        worktreeId: args.worktreeId,
+        groupId: args.clientTargetGroupId
+      })
+    }
+    forgetWebSessionBrowserPlacement({
       environmentId,
       worktreeId: args.worktreeId,
-      remotePageId: created.browserPageId,
-      url: args.url,
-      targetGroupId: args.targetGroupId,
-      restoreFocus:
-        shouldSelectWorktree &&
-        (stagedFromWorktreeId === args.worktreeId ||
-          useAppStore.getState().activeWorktreeId === args.worktreeId)
-    })
-    void refreshWebRuntimeSessionTabsSnapshot(environmentId, args.worktreeId, {
-      expectedEnvironmentPairingRevision: intentOwner.pairingRevision
+      remotePageId: guardedPageId
     })
     return true
   } catch (error) {
-    console.warn(
-      '[web-runtime-session] failed to create browser tab:',
-      error instanceof Error ? error.message : String(error)
-    )
+    unsubscribeFocusGuard()
+    let recoveryError: unknown = null
+    const createOutcomeUnknown = !createdPageId && !isDefinitiveBrowserCreateFailure(error)
+    const ownsClientGroupCleanup = args.clientTargetGroupId
+      ? releaseWebSessionBrowserPlacementGroup({
+          environmentId,
+          worktreeId: args.worktreeId,
+          remotePageId: guardedPageId,
+          groupId: args.clientTargetGroupId,
+          callerCreatedGroup: args.clientTargetGroupCreated === true
+        })
+      : false
+    if (!args.clientTargetGroupId) {
+      forgetWebSessionBrowserPlacement({
+        environmentId,
+        worktreeId: args.worktreeId,
+        remotePageId: guardedPageId
+      })
+    }
+    if (createdPageId) {
+      try {
+        const closeResult = unwrapRuntimeRpcResult(
+          (await callEnvironment({
+            method: 'browser.tabClose',
+            params: {
+              worktree: toRuntimeWorktreeSelector(args.worktreeId),
+              page: createdPageId
+            },
+            timeoutMs: 15_000
+          })) as RuntimeRpcResponse<{ closed: boolean }>
+        )
+        if (!closeResult.closed) {
+          throw new Error('The paired runtime did not close the unreconciled browser tab.')
+        }
+        await refreshWebRuntimeSessionTabsSnapshot(environmentId, args.worktreeId, {
+          expectedEnvironmentPairingRevision: intentOwner.pairingRevision,
+          afterCurrentInFlight: true,
+          errorMode: 'throw'
+        })
+        if (
+          hasMaterializedWebRuntimeBrowserPage(
+            useAppStore.getState(),
+            environmentId,
+            args.worktreeId,
+            createdPageId
+          )
+        ) {
+          throw new Error('The closed browser tab remained materialized in the client.')
+        }
+      } catch (cleanupError) {
+        recoveryError = cleanupError
+        console.warn(
+          '[web-runtime-session] failed to clean up unreconciled browser tab:',
+          cleanupError instanceof Error ? cleanupError.message : String(cleanupError)
+        )
+      }
+    }
+    if (shouldFocusOnCreate) {
+      clearWebSessionFocusIntentIfMatches(intentOwner, args.worktreeId, guardedPageId)
+    }
+    if (
+      args.clientTargetGroupId &&
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: args.worktreeId,
+        groupId: args.clientTargetGroupId,
+        ownsGroupCleanup: ownsClientGroupCleanup
+      })
+    ) {
+      useAppStore.getState().closeEmptyGroup(args.worktreeId, args.clientTargetGroupId)
+    }
+    if (args.failureLogMode === 'operation-only') {
+      console.warn('[web-runtime-session] failed to create browser tab')
+    } else {
+      console.warn(
+        '[web-runtime-session] failed to create browser tab:',
+        error instanceof Error ? error.message : String(error)
+      )
+    }
+    if (recoveryError) {
+      throw new Error('The paired runtime could not recover the failed browser creation.', {
+        cause: recoveryError
+      })
+    }
+    if (!createAttempted) {
+      throw error
+    }
+    if (createOutcomeUnknown) {
+      throw new Error('The paired runtime did not confirm whether the browser tab was created.', {
+        cause: error
+      })
+    }
     return false
   }
 }
 
-function stageWebRuntimeBrowserTab(args: {
-  environmentId: string
-  worktreeId: string
-  remotePageId: string
-  url?: string
-  targetGroupId?: string
-  restoreFocus?: boolean
-}): void {
-  const remotePageId = args.remotePageId.trim()
-  if (!remotePageId) {
-    return
-  }
-
-  const existing = findLocalBrowserPageForRemotePage(
-    useAppStore.getState(),
-    args.environmentId,
-    remotePageId
-  )
-  if (args.restoreFocus !== false) {
-    selectWebRuntimeSessionWorktree(args.worktreeId, args.environmentId)
-  }
-
-  if (existing) {
-    if (args.restoreFocus !== false) {
-      useAppStore
-        .getState()
-        .focusBrowserTabInWorktree(args.worktreeId, existing.pageId, { surfacePane: true })
-    }
-    return
-  }
-
-  const url = args.url?.trim() || 'about:blank'
-  // Why: the snapshot can arrive after React renders a fallback; stage the handle now so the worktree stays selected.
-  const browserTab = useAppStore.getState().createBrowserTab(args.worktreeId, url, {
-    title: url === 'about:blank' ? 'New Browser Tab' : url,
-    focusAddressBar: true,
-    browserRuntimeEnvironmentId: args.environmentId,
-    targetGroupId: args.targetGroupId
-  })
-  const pageId = browserTab.activePageId ?? browserTab.pageIds?.[0] ?? null
-  if (!pageId) {
-    return
-  }
-  useAppStore.getState().setRemoteBrowserPageHandle(pageId, {
-    environmentId: args.environmentId,
-    remotePageId
-  })
-}
-
 function selectWebRuntimeSessionWorktree(worktreeId: string, environmentId: string): void {
   useAppStore.getState().setActiveWorktree(worktreeId, toRuntimeExecutionHostId(environmentId))
 }
 
-function findLocalBrowserPageForRemotePage(
-  state: AppState,
-  environmentId: string,
-  remotePageId: string
-): { pageId: string } | null {
-  for (const pages of Object.values(state.browserPagesByWorkspace)) {
-    for (const page of pages) {
-      const handle = state.remoteBrowserPageHandlesByPageId[page.id]
-      if (handle?.environmentId === environmentId && handle.remotePageId === remotePageId) {
-        return { pageId: page.id }
-      }
-    }
+function selectWebRuntimeSessionBrowserWorktree(worktreeId: string, environmentId: string): void {
+  const state = useAppStore.getState()
+  if (
+    state.activeWorktreeId !== worktreeId ||
+    state.activeWorkspaceExecutionHostId !== toRuntimeExecutionHostId(environmentId)
+  ) {
+    state.setActiveWorktree(worktreeId, toRuntimeExecutionHostId(environmentId))
   }
-  return null
 }
 
 export async function refreshWebRuntimeSessionTabsSnapshot(
@@ -565,6 +783,8 @@ export async function refreshWebRuntimeSessionTabsSnapshot(
       hostTabId: string
       hostTerminalHandle: string
     }
+    afterCurrentInFlight?: boolean
+    errorMode?: 'warn' | 'throw'
   } = {}
 ): Promise<void> {
   const expectedEnvironmentPairingRevision =
@@ -580,9 +800,13 @@ export async function refreshWebRuntimeSessionTabsSnapshot(
       // re-accept its current version after the exact provisional handoff is known.
       acceptReplayedWebSessionTabsSnapshot(environmentId, worktreeId)
     }
-    const listSessionTabs = options.confirmAgentSessionHandoff
-      ? listRemoteRuntimeSessionTabsAfterCurrentInFlight
-      : listRemoteRuntimeSessionTabsDeduped
+    const listSessionTabs =
+      options.confirmAgentSessionHandoff || options.afterCurrentInFlight
+        ? listRemoteRuntimeSessionTabsAfterCurrentInFlight
+        : listRemoteRuntimeSessionTabsDeduped
+    if (options.afterCurrentInFlight) {
+      throwIfE2eWebRuntimeBrowserReconciliationFails()
+    }
     const snapshot = await listSessionTabs({
       environmentId,
       worktreeId,
@@ -620,6 +844,9 @@ export async function refreshWebRuntimeSessionTabsSnapshot(
       return patch === state ? state : patch
     })
   } catch (error) {
+    if (options.errorMode === 'throw') {
+      throw error
+    }
     // Why: host creation already succeeded; the long-lived session.tabs subscription catches up if this eager refresh fails.
     console.warn(
       '[web-runtime-session] failed to refresh session-tabs snapshot:',
@@ -862,6 +1089,7 @@ async function callWebRuntimeSessionTabMethod(
   const intentOwner = captureWebSessionIntentOwner(environmentId)
   const callEnvironment = captureRuntimeEnvironmentCall(environmentId, intentOwner.pairingRevision)
   const closeIntentTabIds = new Set<string>()
+  let activationHostTabId: string | null = null
 
   const isClose = method === 'session.tabs.close'
   const isLifecycleClose = isClose && args.reason !== 'user'
@@ -897,6 +1125,9 @@ async function callWebRuntimeSessionTabMethod(
       // Why: suppress until the host confirms removal, else an in-flight pre-close snapshot flashes the tab back.
       closeIntentTabIds.add(hostTabId)
       recordWebSessionCloseIntent(intentOwner, args.worktreeId, hostTabId, Date.now())
+    } else {
+      activationHostTabId = hostTabId
+      recordWebSessionFocusIntent(intentOwner, args.worktreeId, hostTabId)
     }
     const response = await callEnvironment({
       // Why: old hosts cannot route this additive method, so a generation
@@ -945,6 +1176,9 @@ async function callWebRuntimeSessionTabMethod(
     }
     return true
   } catch (error) {
+    if (activationHostTabId) {
+      clearWebSessionFocusIntentIfMatches(intentOwner, args.worktreeId, activationHostTabId)
+    }
     for (const hostTabId of closeIntentTabIds) {
       clearWebSessionCloseIntent(intentOwner, args.worktreeId, hostTabId)
     }
@@ -984,26 +1218,37 @@ export function splitWebRuntimeTerminal(
     direction,
     pendingMirrorSuppressionId
   )
-  void window.api.runtimeEnvironments
-    .call({
-      selector: environmentId,
-      method: 'terminal.split',
-      params: {
-        terminal: remote.handle,
-        direction,
-        telemetrySource
-      },
-      timeoutMs: 15_000
+  const callEnvironment = captureRuntimeEnvironmentCall(environmentId)
+  void callEnvironment({
+    method: 'status.get',
+    timeoutMs: 15_000
+  })
+    .then((response) => {
+      const status = unwrapRuntimeRpcResult(response as RuntimeRpcResponse<RuntimeStatus>)
+      if (!hostSupportsTerminalSplitAttributionDisable(status)) {
+        throw new Error(TERMINAL_SPLIT_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE)
+      }
+      return callEnvironment({
+        method: 'terminal.split',
+        params: {
+          terminal: remote.handle,
+          direction,
+          env: withLegacyTerminalAttributionDisabledEnv(undefined),
+          envToDelete: addLegacyTerminalAttributionDisableRequest(undefined),
+          telemetrySource
+        },
+        timeoutMs: 15_000,
+        expectedRuntimeId: status.runtimeId
+      })
     })
     .then((response) => {
       unwrapRuntimeRpcResult(response as RuntimeRpcResponse<{ split: RuntimeTerminalSplit }>)
     })
     .catch((error) => {
       releasePendingMirrorSuppression()
-      console.warn(
-        '[web-runtime-session] failed to split terminal:',
-        error instanceof Error ? error.message : String(error)
-      )
+      const message = error instanceof Error ? error.message : String(error)
+      toast.error(message)
+      console.warn('[web-runtime-session] failed to split terminal:', message)
     })
   return true
 }
diff --git a/src/renderer/src/runtime/web-session-browser-placement.test.ts b/src/renderer/src/runtime/web-session-browser-placement.test.ts
new file mode 100644
index 00000000000..ea5719b92c6
--- /dev/null
+++ b/src/renderer/src/runtime/web-session-browser-placement.test.ts
@@ -0,0 +1,370 @@
+import { afterEach, describe, expect, it } from 'vitest'
+import {
+  claimWebSessionBrowserPlacementGroupCleanup,
+  clearWebSessionBrowserPlacementsForEnvironment,
+  clearWebSessionBrowserPlacementsForWorktree,
+  forgetWebSessionBrowserPlacement,
+  isWebSessionBrowserPlacementGroupReserved,
+  peekWebSessionBrowserPlacementGroup,
+  recordWebSessionBrowserPlacement,
+  releaseWebSessionBrowserPlacementGroup,
+  resetWebSessionBrowserPlacementsForTests,
+  takeWebSessionBrowserPlacementGroup
+} from './web-session-browser-placement'
+
+const ENVIRONMENT_ID = 'environment-1'
+const WORKTREE_ID = 'worktree-1'
+
+afterEach(resetWebSessionBrowserPlacementsForTests)
+
+describe('web session browser placement', () => {
+  it('keeps a shared target group reserved until every pending page settles', () => {
+    for (const remotePageId of ['page-1', 'page-2']) {
+      recordWebSessionBrowserPlacement({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId,
+        groupId: 'preview-group'
+      })
+    }
+
+    forgetWebSessionBrowserPlacement({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1'
+    })
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group'
+      })
+    ).toBe(true)
+
+    forgetWebSessionBrowserPlacement({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-2'
+    })
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group'
+      })
+    ).toBe(false)
+  })
+
+  it('transfers caller-created group cleanup to the last failed reservation', () => {
+    recordWebSessionBrowserPlacement({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1',
+      groupId: 'preview-group',
+      callerCreatedGroup: true
+    })
+    recordWebSessionBrowserPlacement({
+      environmentId: 'environment-2',
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-2',
+      groupId: 'preview-group'
+    })
+
+    const creatorOwnsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1',
+      groupId: 'preview-group',
+      callerCreatedGroup: true
+    })
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: creatorOwnsCleanup
+      })
+    ).toBe(false)
+    const followerOwnsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: 'environment-2',
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-2',
+      groupId: 'preview-group',
+      callerCreatedGroup: false
+    })
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: followerOwnsCleanup
+      })
+    ).toBe(true)
+  })
+
+  it('retains transferred cleanup when one overlapping environment clears', () => {
+    for (const [environmentId, remotePageId, callerCreatedGroup] of [
+      [ENVIRONMENT_ID, 'page-1', true],
+      ['environment-2', 'page-2', false],
+      ['environment-3', 'page-3', false]
+    ] as const) {
+      recordWebSessionBrowserPlacement({
+        environmentId,
+        worktreeId: WORKTREE_ID,
+        remotePageId,
+        groupId: 'preview-group',
+        callerCreatedGroup
+      })
+    }
+    const ownsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1',
+      groupId: 'preview-group',
+      callerCreatedGroup: true
+    })
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: ownsCleanup
+      })
+    ).toBe(false)
+
+    clearWebSessionBrowserPlacementsForEnvironment('environment-2')
+    const remainingOwnsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: 'environment-3',
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-3',
+      groupId: 'preview-group',
+      callerCreatedGroup: false
+    })
+    expect(remainingOwnsCleanup).toBe(true)
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: remainingOwnsCleanup
+      })
+    ).toBe(false)
+    const clearedEnvironmentOwnsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: 'environment-2',
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-2',
+      groupId: 'preview-group',
+      callerCreatedGroup: false
+    })
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: clearedEnvironmentOwnsCleanup
+      })
+    ).toBe(true)
+  })
+
+  it('retains transferred cleanup through snapshot placement lookup', () => {
+    recordWebSessionBrowserPlacement({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1',
+      groupId: 'preview-group',
+      callerCreatedGroup: true
+    })
+    recordWebSessionBrowserPlacement({
+      environmentId: 'environment-2',
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-2',
+      groupId: 'preview-group'
+    })
+    const ownsCleanup = releaseWebSessionBrowserPlacementGroup({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-1',
+      groupId: 'preview-group',
+      callerCreatedGroup: true
+    })
+    expect(
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: ownsCleanup
+      })
+    ).toBe(false)
+
+    expect(
+      peekWebSessionBrowserPlacementGroup({
+        environmentId: 'environment-2',
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-2'
+      })
+    ).toBe('preview-group')
+    expect(
+      releaseWebSessionBrowserPlacementGroup({
+        environmentId: 'environment-2',
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-2',
+        groupId: 'preview-group',
+        callerCreatedGroup: false
+      })
+    ).toBe(true)
+  })
+
+  it.each(['environment', 'worktree'] as const)(
+    'retains transferred cleanup through %s teardown',
+    (scope) => {
+      recordWebSessionBrowserPlacement({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-1',
+        groupId: 'preview-group',
+        callerCreatedGroup: true
+      })
+      recordWebSessionBrowserPlacement({
+        environmentId: 'environment-2',
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-2',
+        groupId: 'preview-group'
+      })
+      const ownsCleanup = releaseWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-1',
+        groupId: 'preview-group',
+        callerCreatedGroup: true
+      })
+      claimWebSessionBrowserPlacementGroupCleanup({
+        worktreeId: WORKTREE_ID,
+        groupId: 'preview-group',
+        ownsGroupCleanup: ownsCleanup
+      })
+
+      if (scope === 'environment') {
+        clearWebSessionBrowserPlacementsForEnvironment('environment-2')
+      } else {
+        clearWebSessionBrowserPlacementsForWorktree('environment-2', WORKTREE_ID)
+      }
+
+      expect(
+        releaseWebSessionBrowserPlacementGroup({
+          environmentId: 'environment-2',
+          worktreeId: WORKTREE_ID,
+          remotePageId: 'page-2',
+          groupId: 'preview-group',
+          callerCreatedGroup: false
+        })
+      ).toBe(true)
+    }
+  )
+
+  it('bounds pending page placements', () => {
+    for (let index = 0; index < 128; index += 1) {
+      recordWebSessionBrowserPlacement({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: `page-${index}`,
+        groupId: `group-${index}`
+      })
+    }
+
+    expect(() =>
+      recordWebSessionBrowserPlacement({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-128',
+        groupId: 'group-128'
+      })
+    ).toThrow('Too many paired browser placements are pending')
+
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-0'
+      })
+    ).toBe('group-0')
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'group-0'
+      })
+    ).toBe(false)
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-128'
+      })
+    ).toBeUndefined()
+  })
+
+  it('refreshes existing entries at capacity without evicting another placement', () => {
+    for (let index = 0; index < 128; index += 1) {
+      recordWebSessionBrowserPlacement({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: `page-${index}`,
+        groupId: `group-${index}`
+      })
+    }
+
+    recordWebSessionBrowserPlacement({
+      environmentId: ENVIRONMENT_ID,
+      worktreeId: WORKTREE_ID,
+      remotePageId: 'page-127',
+      groupId: 'group-127'
+    })
+
+    expect(
+      isWebSessionBrowserPlacementGroupReserved({
+        worktreeId: WORKTREE_ID,
+        groupId: 'group-0'
+      })
+    ).toBe(true)
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-0'
+      })
+    ).toBe('group-0')
+  })
+
+  it('clears only the requested worktree or environment', () => {
+    for (const [environmentId, worktreeId, suffix] of [
+      [ENVIRONMENT_ID, WORKTREE_ID, 'target'],
+      [ENVIRONMENT_ID, 'worktree-2', 'sibling'],
+      ['environment-2', WORKTREE_ID, 'other-environment']
+    ] as const) {
+      recordWebSessionBrowserPlacement({
+        environmentId,
+        worktreeId,
+        remotePageId: `page-${suffix}`,
+        groupId: `group-${suffix}`
+      })
+    }
+
+    clearWebSessionBrowserPlacementsForWorktree(ENVIRONMENT_ID, WORKTREE_ID)
+
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-target'
+      })
+    ).toBeUndefined()
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENVIRONMENT_ID,
+        worktreeId: 'worktree-2',
+        remotePageId: 'page-sibling'
+      })
+    ).toBe('group-sibling')
+
+    clearWebSessionBrowserPlacementsForEnvironment('environment-2')
+
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: 'environment-2',
+        worktreeId: WORKTREE_ID,
+        remotePageId: 'page-other-environment'
+      })
+    ).toBeUndefined()
+  })
+})
diff --git a/src/renderer/src/runtime/web-session-browser-placement.ts b/src/renderer/src/runtime/web-session-browser-placement.ts
new file mode 100644
index 00000000000..4e027a5b205
--- /dev/null
+++ b/src/renderer/src/runtime/web-session-browser-placement.ts
@@ -0,0 +1,213 @@
+type PendingBrowserPlacement = {
+  groupId: string
+  ownsGroupCleanup: boolean
+}
+
+const placementByPendingPage = new Map<string, PendingBrowserPlacement>()
+const materializedGroupKeys = new Set<string>()
+const pendingCleanupClaimsByGroup = new Map<string, number>()
+const MAX_PENDING_PLACEMENTS = 128
+
+function pageKey(environmentId: string, worktreeId: string, remotePageId: string): string {
+  return `${environmentId}\0${worktreeId}\0${remotePageId}`
+}
+
+function worktreePrefix(environmentId: string, worktreeId: string): string {
+  return `${environmentId}\0${worktreeId}\0`
+}
+
+function worktreeGroupKey(worktreeId: string, groupId: string): string {
+  return `${worktreeId}\0${groupId}`
+}
+
+function hasPlacementForGroup(worktreeId: string, groupId: string): boolean {
+  const worktreeMarker = `\0${worktreeId}\0`
+  for (const [key, placement] of placementByPendingPage) {
+    if (key.includes(worktreeMarker) && placement.groupId === groupId) {
+      return true
+    }
+  }
+  return false
+}
+
+function forgetSettledMaterializedGroup(worktreeId: string, groupId: string): void {
+  const key = worktreeGroupKey(worktreeId, groupId)
+  if (!hasPlacementForGroup(worktreeId, groupId) && !pendingCleanupClaimsByGroup.has(key)) {
+    materializedGroupKeys.delete(key)
+  }
+}
+
+export function recordWebSessionBrowserPlacement(args: {
+  environmentId: string
+  worktreeId: string
+  remotePageId: string
+  groupId: string
+  callerCreatedGroup?: boolean
+}): void {
+  const key = pageKey(args.environmentId, args.worktreeId, args.remotePageId)
+  const existing = placementByPendingPage.get(key)
+  if (!existing && placementByPendingPage.size >= MAX_PENDING_PLACEMENTS) {
+    throw new Error('Too many paired browser placements are pending.')
+  }
+  placementByPendingPage.set(key, {
+    groupId: args.groupId,
+    ownsGroupCleanup: args.callerCreatedGroup === true || existing?.ownsGroupCleanup === true
+  })
+}
+
+export function moveWebSessionBrowserPlacement(args: {
+  environmentId: string
+  worktreeId: string
+  fromRemotePageId: string
+  toRemotePageId: string
+}): void {
+  const fromKey = pageKey(args.environmentId, args.worktreeId, args.fromRemotePageId)
+  const placement = placementByPendingPage.get(fromKey)
+  placementByPendingPage.delete(fromKey)
+  if (placement) {
+    recordWebSessionBrowserPlacement({
+      environmentId: args.environmentId,
+      worktreeId: args.worktreeId,
+      remotePageId: args.toRemotePageId,
+      groupId: placement.groupId,
+      callerCreatedGroup: placement.ownsGroupCleanup
+    })
+  }
+}
+
+export function forgetWebSessionBrowserPlacement(args: {
+  environmentId: string
+  worktreeId: string
+  remotePageId: string
+}): void {
+  const key = pageKey(args.environmentId, args.worktreeId, args.remotePageId)
+  const placement = placementByPendingPage.get(key)
+  placementByPendingPage.delete(key)
+  if (placement) {
+    forgetSettledMaterializedGroup(args.worktreeId, placement.groupId)
+  }
+}
+
+export function takeWebSessionBrowserPlacementGroup(args: {
+  environmentId: string
+  worktreeId: string
+  remotePageId: string
+}): string | undefined {
+  const key = pageKey(args.environmentId, args.worktreeId, args.remotePageId)
+  const placement = placementByPendingPage.get(key)
+  placementByPendingPage.delete(key)
+  if (placement) {
+    forgetSettledMaterializedGroup(args.worktreeId, placement.groupId)
+  }
+  return placement?.groupId
+}
+
+export function peekWebSessionBrowserPlacementGroup(args: {
+  environmentId: string
+  worktreeId: string
+  remotePageId: string
+}): string | undefined {
+  return placementByPendingPage.get(pageKey(args.environmentId, args.worktreeId, args.remotePageId))
+    ?.groupId
+}
+
+export function isWebSessionBrowserPlacementGroupReserved(args: {
+  worktreeId: string
+  groupId: string
+}): boolean {
+  const worktreeMarker = `\0${args.worktreeId}\0`
+  for (const [key, placement] of placementByPendingPage) {
+    if (key.includes(worktreeMarker) && placement.groupId === args.groupId) {
+      return true
+    }
+  }
+  return false
+}
+
+export function releaseWebSessionBrowserPlacementGroup(args: {
+  environmentId: string
+  worktreeId: string
+  remotePageId: string
+  groupId: string
+  callerCreatedGroup: boolean
+}): boolean {
+  const key = pageKey(args.environmentId, args.worktreeId, args.remotePageId)
+  const placement = placementByPendingPage.get(key)
+  const groupId = placement?.groupId ?? args.groupId
+  const groupKey = worktreeGroupKey(args.worktreeId, groupId)
+  const materialized = materializedGroupKeys.has(groupKey)
+  placementByPendingPage.delete(key)
+  const ownsCleanup =
+    !materialized && (args.callerCreatedGroup || placement?.ownsGroupCleanup === true)
+  if (ownsCleanup) {
+    pendingCleanupClaimsByGroup.set(groupKey, (pendingCleanupClaimsByGroup.get(groupKey) ?? 0) + 1)
+  }
+  forgetSettledMaterializedGroup(args.worktreeId, groupId)
+  return ownsCleanup
+}
+
+export function markWebSessionBrowserPlacementGroupMaterialized(args: {
+  worktreeId: string
+  groupId: string
+}): void {
+  if (hasPlacementForGroup(args.worktreeId, args.groupId)) {
+    materializedGroupKeys.add(worktreeGroupKey(args.worktreeId, args.groupId))
+  }
+}
+
+export function claimWebSessionBrowserPlacementGroupCleanup(args: {
+  worktreeId: string
+  groupId: string
+  ownsGroupCleanup: boolean
+}): boolean {
+  if (!args.ownsGroupCleanup) {
+    return false
+  }
+  const groupKey = worktreeGroupKey(args.worktreeId, args.groupId)
+  const pendingClaims = pendingCleanupClaimsByGroup.get(groupKey) ?? 0
+  if (pendingClaims <= 1) {
+    pendingCleanupClaimsByGroup.delete(groupKey)
+  } else {
+    pendingCleanupClaimsByGroup.set(groupKey, pendingClaims - 1)
+  }
+  if (materializedGroupKeys.has(groupKey)) {
+    forgetSettledMaterializedGroup(args.worktreeId, args.groupId)
+    return false
+  }
+  const worktreeMarker = `\0${args.worktreeId}\0`
+  let transferred = false
+  for (const [key, placement] of placementByPendingPage) {
+    if (key.includes(worktreeMarker) && placement.groupId === args.groupId) {
+      placementByPendingPage.set(key, { ...placement, ownsGroupCleanup: true })
+      transferred = true
+    }
+  }
+  return !transferred
+}
+
+export function clearWebSessionBrowserPlacementsForWorktree(
+  environmentId: string,
+  worktreeId: string
+): void {
+  const prefix = worktreePrefix(environmentId, worktreeId)
+  for (const key of placementByPendingPage.keys()) {
+    if (key.startsWith(prefix) && !placementByPendingPage.get(key)?.ownsGroupCleanup) {
+      placementByPendingPage.delete(key)
+    }
+  }
+}
+
+export function clearWebSessionBrowserPlacementsForEnvironment(environmentId: string): void {
+  const prefix = `${environmentId}\0`
+  for (const key of placementByPendingPage.keys()) {
+    if (key.startsWith(prefix) && !placementByPendingPage.get(key)?.ownsGroupCleanup) {
+      placementByPendingPage.delete(key)
+    }
+  }
+}
+
+export function resetWebSessionBrowserPlacementsForTests(): void {
+  placementByPendingPage.clear()
+  materializedGroupKeys.clear()
+  pendingCleanupClaimsByGroup.clear()
+}
diff --git a/src/renderer/src/runtime/web-session-focus-intent.ts b/src/renderer/src/runtime/web-session-focus-intent.ts
index 8ed33b8d15e..e185250372f 100644
--- a/src/renderer/src/runtime/web-session-focus-intent.ts
+++ b/src/renderer/src/runtime/web-session-focus-intent.ts
@@ -10,14 +10,50 @@
 // snapshots, unlike a transient per-snapshot flag).
 
 import { webSessionIntentOwnerKey, type WebSessionIntentOwner } from './web-session-intent-owner'
+import type { AppState } from '../store/types'
 
 export type WebSessionFocusIntent = {
   hostTabId: string
   leafId?: string
+  expectedCurrentLocalTabId?: string | null
 }
 
 const pendingFocusByOwnerAndWorktree = new Map<string, WebSessionFocusIntent>()
 
+type WebSessionVisibleTabState = Pick<
+  AppState,
+  | 'activeBrowserTabIdByWorktree'
+  | 'activeFileIdByWorktree'
+  | 'activeTabIdByWorktree'
+  | 'activeTabType'
+  | 'activeTabTypeByWorktree'
+  | 'activeWorktreeId'
+  | 'unifiedTabsByWorktree'
+>
+
+export function resolveWebSessionVisibleTabId(
+  state: WebSessionVisibleTabState,
+  worktreeId: string,
+  tabs = state.unifiedTabsByWorktree?.[worktreeId] ?? []
+): string | null {
+  const currentType =
+    state.activeTabTypeByWorktree?.[worktreeId] ??
+    (state.activeWorktreeId === worktreeId ? state.activeTabType : null)
+  if (currentType === 'terminal') {
+    const tabId = state.activeTabIdByWorktree?.[worktreeId]
+    return tabId && tabs.some((tab) => tab.id === tabId) ? tabId : null
+  }
+  const entityId =
+    currentType === 'browser'
+      ? state.activeBrowserTabIdByWorktree?.[worktreeId]
+      : currentType === 'editor'
+        ? state.activeFileIdByWorktree?.[worktreeId]
+        : null
+  return (
+    tabs.find((tab) => tab.contentType === currentType && tab.entityId === entityId)?.id ?? null
+  )
+}
+
 function focusIntentPartitionKey(owner: WebSessionIntentOwner, worktreeId: string): string {
   return `${webSessionIntentOwnerKey(owner)}\0${worktreeId}`
 }
@@ -26,7 +62,8 @@ export function recordWebSessionFocusIntent(
   owner: WebSessionIntentOwner,
   worktreeId: string,
   hostTabId: string,
-  leafId?: string
+  leafId?: string,
+  expectedCurrentLocalTabId?: string | null
 ): void {
   const trimmed = hostTabId.trim()
   if (!worktreeId || !trimmed) {
@@ -35,7 +72,8 @@ export function recordWebSessionFocusIntent(
   const trimmedLeafId = leafId?.trim()
   pendingFocusByOwnerAndWorktree.set(focusIntentPartitionKey(owner, worktreeId), {
     hostTabId: trimmed,
-    ...(trimmedLeafId ? { leafId: trimmedLeafId } : {})
+    ...(trimmedLeafId ? { leafId: trimmedLeafId } : {}),
+    ...(expectedCurrentLocalTabId !== undefined ? { expectedCurrentLocalTabId } : {})
   })
 }
 
@@ -50,6 +88,17 @@ export function clearWebSessionFocusIntent(owner: WebSessionIntentOwner, worktre
   pendingFocusByOwnerAndWorktree.delete(focusIntentPartitionKey(owner, worktreeId))
 }
 
+export function clearWebSessionFocusIntentIfMatches(
+  owner: WebSessionIntentOwner,
+  worktreeId: string,
+  hostTabId: string
+): void {
+  const key = focusIntentPartitionKey(owner, worktreeId)
+  if (pendingFocusByOwnerAndWorktree.get(key)?.hostTabId === hostTabId) {
+    pendingFocusByOwnerAndWorktree.delete(key)
+  }
+}
+
 export function clearWebSessionFocusIntentsForOwner(owner: WebSessionIntentOwner): void {
   const prefix = `${webSessionIntentOwnerKey(owner)}\0`
   for (const key of pendingFocusByOwnerAndWorktree.keys()) {
diff --git a/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx b/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
index 5b05ba2536d..693dcbb823b 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
+++ b/src/renderer/src/runtime/web-session-tabs-sync-visibility-collision.test.tsx
@@ -38,6 +38,7 @@ vi.mock('./web-runtime-session', async (importOriginal) => {
 })
 
 import { useAppStore } from '@/store'
+import type { PublicKnownRuntimeEnvironment } from '../../../shared/runtime-environments'
 import type { AppState } from '@/store/types'
 import { replaceRuntimeEnvironmentRevisions } from './runtime-environment-revision'
 import { toRemoteRuntimePtyId } from './runtime-terminal-stream'
@@ -221,7 +222,7 @@ function seedRemoteMirrorState(): void {
   const runtimeEnvironments = [
     { id: ENV_A, createdAt: 100, pairingRevision: REVISION_A },
     { id: ENV_B, createdAt: 200, pairingRevision: REVISION_B }
-  ] as AppState['runtimeEnvironments']
+  ] as PublicKnownRuntimeEnvironment[]
   replaceRuntimeEnvironmentRevisions(runtimeEnvironments)
   useAppStore.setState(
     {
diff --git a/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx b/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
index 5885e536bcc..19be26009de 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
+++ b/src/renderer/src/runtime/web-session-tabs-sync-window-visibility.test.tsx
@@ -37,6 +37,7 @@ vi.mock('./web-runtime-session', async (importOriginal) => {
 })
 
 import { useAppStore } from '@/store'
+import type { PublicKnownRuntimeEnvironment } from '../../../shared/runtime-environments'
 import type { AppState } from '@/store/types'
 import { replaceRuntimeEnvironmentRevisions } from './runtime-environment-revision'
 import {
@@ -179,7 +180,7 @@ function seedRemoteMirrorState(): void {
   const runtimeEnvironments = [
     { id: ENV_A, createdAt: 100, pairingRevision: REVISION_A },
     { id: ENV_B, createdAt: 200, pairingRevision: REVISION_B }
-  ] as AppState['runtimeEnvironments']
+  ] as PublicKnownRuntimeEnvironment[]
   replaceRuntimeEnvironmentRevisions(runtimeEnvironments)
   useAppStore.setState(
     {
diff --git a/src/renderer/src/runtime/web-session-tabs-sync.test.ts b/src/renderer/src/runtime/web-session-tabs-sync.test.ts
index 4d94c99e728..e830e027208 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync.test.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync.test.ts
@@ -20,13 +20,24 @@ import {
   recordWebSessionReorderIntent,
   resetWebSessionReorderIntentForTests
 } from './web-session-reorder-intent'
-import type { BrowserPage, BrowserWorkspace, Tab, TerminalTab } from '../../../shared/types'
+import type {
+  BrowserPage,
+  BrowserWorkspace,
+  Tab,
+  TabGroupLayoutNode,
+  TerminalTab
+} from '../../../shared/types'
 import type { OpenFile } from '../store/slices/editor'
 import {
   confirmWebAgentSessionHandoffAfterCreate,
   recordWebAgentSessionHandoff,
   resetWebAgentSessionHandoffsForTests
 } from './web-agent-session-handoff'
+import {
+  moveWebSessionBrowserPlacement,
+  recordWebSessionBrowserPlacement,
+  takeWebSessionBrowserPlacementGroup
+} from './web-session-browser-placement'
 import {
   _getWebSessionTabsTrackingCountsForTest,
   acceptReplayedWebSessionTabsSnapshot,
@@ -58,6 +69,16 @@ const SECOND_LEAF_ID = '22222222-2222-4222-8222-222222222222'
 const THIRD_LEAF_ID = '33333333-3333-4333-8333-333333333333'
 const HOST_SURFACE_ID = `host-tab-1::${LEAF_ID}`
 
+function layoutHasGroup(layout: TabGroupLayoutNode | undefined, groupId: string): boolean {
+  if (!layout) {
+    return false
+  }
+  if (layout.type === 'leaf') {
+    return layout.groupId === groupId
+  }
+  return layoutHasGroup(layout.first, groupId) || layoutHasGroup(layout.second, groupId)
+}
+
 function makeState(overrides: Partial<WebSessionTabsSyncState> = {}): WebSessionTabsSyncState {
   return {
     activeBrowserTabId: null,
@@ -2300,6 +2321,64 @@ describe('applyWebSessionTabsSnapshot', () => {
     expect(patch.sortEpoch).toBe((initialState.sortEpoch ?? 0) + 1)
   })
 
+  it('bumps sort epoch when a mirrored same-state done update becomes a completion', () => {
+    const hostPaneKey = makePaneKey('host-tab-1', LEAF_ID)
+    const initialSnapshot = makeSnapshot([
+      {
+        type: 'terminal',
+        id: HOST_SURFACE_ID,
+        title: 'Codex',
+        parentTabId: 'host-tab-1',
+        leafId: LEAF_ID,
+        isActive: true,
+        status: 'ready',
+        terminal: 'terminal-1',
+        agentStatus: {
+          state: 'done',
+          prompt: 'same prompt',
+          updatedAt: NOW - 1_000,
+          stateStartedAt: NOW - 2_000,
+          agentType: 'codex',
+          paneKey: hostPaneKey,
+          stateHistory: [],
+          interrupted: true
+        }
+      }
+    ])
+    const initialPatch = applyWebSessionTabsSnapshot(
+      makeState(),
+      initialSnapshot,
+      ENV,
+      NOW
+    ) as Partial<WebSessionTabsSyncState>
+    const initialState = { ...makeState(), ...initialPatch }
+
+    const patch = applyWebSessionTabsSnapshot(
+      initialState,
+      {
+        ...initialSnapshot,
+        snapshotVersion: 2,
+        tabs: initialSnapshot.tabs.map((tab) =>
+          tab.type === 'terminal' && tab.agentStatus
+            ? {
+                ...tab,
+                agentStatus: {
+                  ...tab.agentStatus,
+                  updatedAt: NOW,
+                  interrupted: undefined
+                }
+              }
+            : tab
+        )
+      },
+      ENV,
+      NOW
+    ) as Partial<WebSessionTabsSyncState>
+
+    expect(patch.agentStatusEpoch).toBe((initialState.agentStatusEpoch ?? 0) + 1)
+    expect(patch.sortEpoch).toBe((initialState.sortEpoch ?? 0) + 1)
+  })
+
   it('hydrates multiple initial host snapshots in one merged patch', () => {
     const secondWorktree = 'repo::/other-worktree'
     const patch = applyWebSessionTabsSnapshots(
@@ -2954,7 +3033,7 @@ describe('applyWebSessionTabsSnapshot', () => {
       NOW
     ) as Partial<WebSessionTabsSyncState>
 
-    expect(Object.prototype.hasOwnProperty.call(patch, 'openFiles')).toBe(false)
+    expect(Object.hasOwn(patch, 'openFiles')).toBe(false)
     expect(state.openFiles).toEqual([unchanged])
   })
 
@@ -3286,6 +3365,191 @@ describe('applyWebSessionTabsSnapshot', () => {
     expect(followed.groupsByWorktree?.[WT]?.[0]?.activeTabId).toBe(agentTabId)
   })
 
+  it('does not let stale browser intent override a newer terminal selection', () => {
+    const terminalId = toWebTerminalSurfaceTabId('host-terminal')
+    const terminalTab: Tab = {
+      id: terminalId,
+      entityId: terminalId,
+      groupId: 'host-group-1',
+      worktreeId: WT,
+      contentType: 'terminal',
+      label: 'shell',
+      customLabel: null,
+      color: null,
+      sortOrder: 0,
+      createdAt: NOW,
+      isPreview: false,
+      isPinned: false
+    }
+    recordWebSessionFocusIntent(
+      { environmentId: ENV },
+      WT,
+      'host-browser',
+      undefined,
+      'previous-local-tab'
+    )
+
+    const patch = applyWebSessionTabsSnapshot(
+      makeState({
+        activeTabId: terminalId,
+        activeTabIdByWorktree: { [WT]: terminalId },
+        activeTabType: 'terminal',
+        activeTabTypeByWorktree: { [WT]: 'terminal' },
+        tabsByWorktree: {
+          [WT]: [
+            {
+              id: terminalId,
+              ptyId: 'remote:web-env-1@@terminal-1',
+              worktreeId: WT,
+              title: 'shell',
+              customTitle: null,
+              color: null,
+              sortOrder: 0,
+              createdAt: NOW
+            }
+          ]
+        },
+        unifiedTabsByWorktree: { [WT]: [terminalTab] },
+        groupsByWorktree: {
+          [WT]: [
+            {
+              id: 'host-group-1',
+              worktreeId: WT,
+              activeTabId: terminalId,
+              tabOrder: [terminalId],
+              recentTabIds: [terminalId]
+            }
+          ]
+        }
+      }),
+      makeSnapshot(
+        [
+          {
+            type: 'terminal',
+            id: `host-terminal::${LEAF_ID}`,
+            title: 'shell',
+            parentTabId: 'host-terminal',
+            leafId: LEAF_ID,
+            isActive: false,
+            status: 'ready',
+            terminal: 'terminal-1'
+          },
+          {
+            type: 'browser',
+            id: 'host-browser',
+            title: 'Preview',
+            browserWorkspaceId: 'host-browser-workspace',
+            browserPageId: 'host-browser-page',
+            url: 'file:///repo/index.html',
+            loading: false,
+            canGoBack: false,
+            canGoForward: false,
+            isActive: true
+          }
+        ],
+        { activeTabId: 'host-browser', activeTabType: 'browser' }
+      ),
+      ENV,
+      NOW + 1
+    ) as Partial<WebSessionTabsSyncState>
+
+    expect(patch.activeTabType).toBeUndefined()
+    expect(patch.activeTabIdByWorktree?.[WT]).toBeUndefined()
+    expect(patch.groupsByWorktree?.[WT]?.[0]?.activeTabId).toBe(terminalId)
+  })
+
+  it('does not let stale browser intent override a newer editor selection', () => {
+    const fileId = '/repo/index.html'
+    const editorTab: Tab = {
+      id: 'local-editor',
+      entityId: fileId,
+      groupId: 'host-group-1',
+      worktreeId: WT,
+      contentType: 'editor',
+      label: 'index.html',
+      customLabel: null,
+      color: null,
+      sortOrder: 0,
+      createdAt: NOW,
+      isPreview: false,
+      isPinned: false
+    }
+    recordWebSessionFocusIntent(
+      { environmentId: ENV },
+      WT,
+      'host-browser',
+      undefined,
+      'previous-local-tab'
+    )
+
+    const patch = applyWebSessionTabsSnapshot(
+      makeState({
+        activeFileId: fileId,
+        activeFileIdByWorktree: { [WT]: fileId },
+        activeTabType: 'editor',
+        activeTabTypeByWorktree: { [WT]: 'editor' },
+        openFiles: [
+          {
+            id: fileId,
+            filePath: fileId,
+            relativePath: 'index.html',
+            worktreeId: WT,
+            language: 'html',
+            isDirty: false,
+            runtimeEnvironmentId: ENV,
+            mode: 'edit',
+            mirroredFromRuntimeSession: true
+          } as OpenFile
+        ],
+        unifiedTabsByWorktree: { [WT]: [editorTab] },
+        groupsByWorktree: {
+          [WT]: [
+            {
+              id: 'host-group-1',
+              worktreeId: WT,
+              activeTabId: editorTab.id,
+              tabOrder: [editorTab.id],
+              recentTabIds: [editorTab.id]
+            }
+          ]
+        }
+      }),
+      makeSnapshot(
+        [
+          {
+            type: 'file',
+            id: 'host-editor',
+            title: 'index.html',
+            filePath: fileId,
+            relativePath: 'index.html',
+            language: 'html',
+            isDirty: false,
+            isActive: false
+          },
+          {
+            type: 'browser',
+            id: 'host-browser',
+            title: 'Preview',
+            browserWorkspaceId: 'host-browser-workspace',
+            browserPageId: 'host-browser-page',
+            url: 'file:///repo/index.html',
+            loading: false,
+            canGoBack: false,
+            canGoForward: false,
+            isActive: true
+          }
+        ],
+        { activeTabId: 'host-browser', activeTabType: 'browser' }
+      ),
+      ENV,
+      NOW + 1
+    ) as Partial<WebSessionTabsSyncState>
+
+    expect(patch.activeTabType).toBeUndefined()
+    expect(patch.activeFileIdByWorktree?.[WT]).toBeUndefined()
+    expect(patch.groupsByWorktree?.[WT]?.[0]?.activeTabId).toBe('host-editor')
+  })
+
   it('focuses a caller-created terminal even when an older host leaves it inactive', () => {
     const existingTabId = toWebTerminalSurfaceTabId('host-tab-1')
     const newTabId = toWebTerminalSurfaceTabId('host-tab-2')
@@ -3853,6 +4117,316 @@ describe('applyWebSessionTabsSnapshot', () => {
     expect(patch.layoutByWorktree).toBeUndefined()
   })
 
+  it('keeps one remote browser in its client-owned side-preview group', () => {
+    const editorGroupId = 'client-editor-group'
+    const previewGroupId = 'client-preview-group'
+    recordWebSessionBrowserPlacement({
+      environmentId: ENV,
+      worktreeId: WT,
+      remotePageId: 'host-browser-page',
+      groupId: previewGroupId
+    })
+
+    const patch = applyWebSessionTabsSnapshot(
+      makeState({
+        groupsByWorktree: {
+          [WT]: [
+            {
+              id: editorGroupId,
+              worktreeId: WT,
+              activeTabId: 'local-editor',
+              tabOrder: ['local-editor']
+            },
+            {
+              id: previewGroupId,
+              worktreeId: WT,
+              activeTabId: null,
+              tabOrder: []
+            }
+          ]
+        },
+        layoutByWorktree: {
+          [WT]: {
+            type: 'split',
+            direction: 'horizontal',
+            first: { type: 'leaf', groupId: editorGroupId },
+            second: { type: 'leaf', groupId: previewGroupId },
+            ratio: 0.5
+          }
+        },
+        unifiedTabsByWorktree: {
+          [WT]: [
+            {
+              id: 'local-editor',
+              worktreeId: WT,
+              groupId: editorGroupId,
+              contentType: 'editor',
+              entityId: 'local-file',
+              label: 'example.html',
+              sortOrder: 0,
+              createdAt: NOW,
+              isPreview: false,
+              isPinned: false,
+              customLabel: null,
+              color: null
+            }
+          ]
+        }
+      }),
+      makeSnapshot(
+        [
+          {
+            type: 'browser',
+            id: 'host-browser-tab',
+            title: 'example.html',
+            browserWorkspaceId: 'host-browser-workspace',
+            browserPageId: 'host-browser-page',
+            url: 'file:///srv/repo/example.html',
+            loading: false,
+            canGoBack: false,
+            canGoForward: false,
+            isActive: true
+          }
+        ],
+        { activeTabId: 'host-browser-tab', activeTabType: 'browser' }
+      ),
+      ENV,
+      NOW
+    ) as Partial<WebSessionTabsSyncState>
+
+    const browserTab = patch.unifiedTabsByWorktree?.[WT]?.find(
+      (tab) => tab.contentType === 'browser'
+    )
+    expect(browserTab).toMatchObject({ id: 'host-browser-tab', groupId: previewGroupId })
+    expect(
+      patch.groupsByWorktree?.[WT]?.find((group) => group.id === previewGroupId)
+    ).toMatchObject({ activeTabId: 'host-browser-tab', tabOrder: ['host-browser-tab'] })
+    expect(patch.groupsByWorktree?.[WT]?.find((group) => group.id === editorGroupId)).toMatchObject(
+      { activeTabId: 'local-editor', tabOrder: ['local-editor'] }
+    )
+    expect(patch.browserTabsByWorktree?.[WT]).toHaveLength(1)
+  })
+
+  it('replays a pre-response browser snapshot after canonical placement and focus are known', () => {
+    const editorGroupId = 'client-editor-group'
+    const previewGroupId = 'client-preview-group'
+    const editorFileId = '/srv/repo/example.html'
+    const editorTab: Tab = {
+      id: 'host-editor',
+      worktreeId: WT,
+      groupId: editorGroupId,
+      contentType: 'editor',
+      entityId: editorFileId,
+      label: 'example.html',
+      sortOrder: 0,
+      createdAt: NOW,
+      isPreview: false,
+      isPinned: false,
+      customLabel: null,
+      color: null
+    }
+    const state = makeState({
+      activeFileId: editorFileId,
+      activeFileIdByWorktree: { [WT]: editorFileId },
+      activeTabType: 'editor',
+      activeTabTypeByWorktree: { [WT]: 'editor' },
+      activeGroupIdByWorktree: { [WT]: editorGroupId },
+      groupsByWorktree: {
+        [WT]: [
+          {
+            id: editorGroupId,
+            worktreeId: WT,
+            activeTabId: editorTab.id,
+            tabOrder: [editorTab.id]
+          },
+          {
+            id: previewGroupId,
+            worktreeId: WT,
+            activeTabId: null,
+            tabOrder: []
+          }
+        ]
+      },
+      layoutByWorktree: {
+        [WT]: {
+          type: 'split',
+          direction: 'horizontal',
+          first: { type: 'leaf', groupId: editorGroupId },
+          second: { type: 'leaf', groupId: previewGroupId },
+          ratio: 0.5
+        }
+      },
+      unifiedTabsByWorktree: { [WT]: [editorTab] }
+    })
+    const snapshot = makeSnapshot(
+      [
+        {
+          type: 'file',
+          id: 'host-editor',
+          title: 'example.html',
+          filePath: editorFileId,
+          relativePath: 'example.html',
+          language: 'html',
+          isDirty: false,
+          isActive: false
+        },
+        {
+          type: 'browser',
+          id: 'host-browser-tab',
+          title: 'example.html',
+          browserWorkspaceId: 'host-browser-workspace',
+          browserPageId: 'host-browser-page',
+          url: 'file:///srv/repo/example.html',
+          loading: false,
+          canGoBack: false,
+          canGoForward: false,
+          isActive: true
+        }
+      ],
+      { activeTabId: 'host-browser-tab', activeTabType: 'browser' }
+    )
+    recordWebSessionBrowserPlacement({
+      environmentId: ENV,
+      worktreeId: WT,
+      remotePageId: 'provisional-browser-page',
+      groupId: previewGroupId
+    })
+
+    const subscriptionPatch = applyFreshWebSessionTabsSnapshot(state, snapshot, ENV, NOW)
+    const afterSubscription = {
+      ...state,
+      ...(subscriptionPatch as Partial<WebSessionTabsSyncState>)
+    }
+    expect(afterSubscription.activeTabType).toBe('editor')
+    expect(
+      afterSubscription.unifiedTabsByWorktree[WT]?.find((tab) => tab.contentType === 'browser')
+        ?.groupId
+    ).not.toBe(previewGroupId)
+
+    moveWebSessionBrowserPlacement({
+      environmentId: ENV,
+      worktreeId: WT,
+      fromRemotePageId: 'provisional-browser-page',
+      toRemotePageId: 'host-browser-page'
+    })
+    recordWebSessionFocusIntent(
+      { environmentId: ENV },
+      WT,
+      'host-browser-page',
+      undefined,
+      editorTab.id
+    )
+    acceptReplayedWebSessionTabsSnapshot(ENV, WT)
+    const replayPatch = applyFreshWebSessionTabsSnapshot(
+      afterSubscription,
+      snapshot,
+      ENV,
+      NOW + 1
+    ) as Partial<WebSessionTabsSyncState>
+    const afterReplay = { ...afterSubscription, ...replayPatch }
+
+    expect(
+      afterReplay.unifiedTabsByWorktree[WT]?.find((tab) => tab.contentType === 'browser')
+    ).toMatchObject({ id: 'host-browser-tab', groupId: previewGroupId })
+    expect(
+      afterReplay.groupsByWorktree[WT]?.find((group) => group.id === previewGroupId)
+    ).toMatchObject({ activeTabId: 'host-browser-tab', tabOrder: ['host-browser-tab'] })
+    expect(afterReplay.activeBrowserTabIdByWorktree[WT]).toBe('host-browser-workspace')
+    expect(afterReplay.activeTabTypeByWorktree[WT]).toBe('browser')
+  })
+
+  it('keeps a reserved side-preview split across a pre-publication snapshot', () => {
+    const editorGroupId = 'client-editor-group'
+    const previewGroupId = 'client-preview-group'
+    const initialLayout: TabGroupLayoutNode = {
+      type: 'split',
+      direction: 'horizontal',
+      first: { type: 'leaf', groupId: editorGroupId },
+      second: { type: 'leaf', groupId: previewGroupId },
+      ratio: 0.5
+    }
+    recordWebSessionBrowserPlacement({
+      environmentId: ENV,
+      worktreeId: WT,
+      remotePageId: 'pending-browser-page',
+      groupId: previewGroupId
+    })
+
+    const patch = applyWebSessionTabsSnapshot(
+      makeState({
+        groupsByWorktree: {
+          [WT]: [
+            {
+              id: editorGroupId,
+              worktreeId: WT,
+              activeTabId: 'local-editor',
+              tabOrder: ['local-editor']
+            },
+            {
+              id: previewGroupId,
+              worktreeId: WT,
+              activeTabId: null,
+              tabOrder: []
+            }
+          ]
+        },
+        layoutByWorktree: { [WT]: initialLayout },
+        unifiedTabsByWorktree: {
+          [WT]: [
+            {
+              id: 'local-editor',
+              worktreeId: WT,
+              groupId: editorGroupId,
+              contentType: 'editor',
+              entityId: 'local-file',
+              label: 'example.html',
+              sortOrder: 0,
+              createdAt: NOW,
+              isPreview: false,
+              isPinned: false,
+              customLabel: null,
+              color: null
+            }
+          ]
+        }
+      }),
+      makeSnapshot([], {
+        activeTabType: null,
+        tabGroups: [{ id: editorGroupId, activeTabId: null, tabOrder: [], recentTabIds: [] }],
+        tabGroupLayout: { type: 'leaf', groupId: editorGroupId }
+      }),
+      ENV,
+      NOW
+    ) as Partial<WebSessionTabsSyncState>
+
+    expect(patch.groupsByWorktree?.[WT]?.map((group) => group.id)).toContain(previewGroupId)
+    expect(layoutHasGroup(patch.layoutByWorktree?.[WT] ?? initialLayout, previewGroupId)).toBe(true)
+  })
+
+  it('forgets client browser placement after the host removes the page', () => {
+    recordWebSessionBrowserPlacement({
+      environmentId: ENV,
+      worktreeId: WT,
+      remotePageId: 'host-browser-page',
+      groupId: 'client-preview-group'
+    })
+    takeWebSessionBrowserPlacementGroup({
+      environmentId: ENV,
+      worktreeId: WT,
+      remotePageId: 'host-browser-page'
+    })
+
+    applyWebSessionTabsSnapshot(makeState(), makeSnapshot([]), ENV, NOW)
+
+    expect(
+      takeWebSessionBrowserPlacementGroup({
+        environmentId: ENV,
+        worktreeId: WT,
+        remotePageId: 'host-browser-page'
+      })
+    ).toBeUndefined()
+  })
+
   it('creates a rendered web layout group when stale group records do not include it', () => {
     const visibleGroupId = 'visible-web-group'
     const hostOnlyGroupId = 'host-group-1'
@@ -3938,7 +4512,7 @@ describe('applyWebSessionTabsSnapshot', () => {
     const unifiedTab: Tab = {
       id: 'local-browser-unified',
       entityId: workspace.id,
-      groupId: 'host-group-1',
+      groupId: 'client-moved-group',
       worktreeId: WT,
       contentType: 'browser',
       label: 'New Tab',
@@ -3961,7 +4535,7 @@ describe('applyWebSessionTabsSnapshot', () => {
         groupsByWorktree: {
           [WT]: [
             {
-              id: 'host-group-1',
+              id: 'client-moved-group',
               worktreeId: WT,
               activeTabId: unifiedTab.id,
               tabOrder: [unifiedTab.id],
@@ -4006,6 +4580,7 @@ describe('applyWebSessionTabsSnapshot', () => {
         title: 'Example Domain'
       }
     ])
+    expect(patch.unifiedTabsByWorktree?.[WT]?.[0]?.groupId).toBe('client-moved-group')
     // Absent key, not a missing handle: the seeded { ENV, 'host-browser-page' } handle matched.
     expect(patch.remoteBrowserPageHandlesByPageId).toBeUndefined()
     expect(patch.unifiedTabsByWorktree?.[WT]?.map((tab) => tab.id)).toEqual([
diff --git a/src/renderer/src/runtime/web-session-tabs-sync.ts b/src/renderer/src/runtime/web-session-tabs-sync.ts
index 174a239ac5a..8de495919d7 100644
--- a/src/renderer/src/runtime/web-session-tabs-sync.ts
+++ b/src/renderer/src/runtime/web-session-tabs-sync.ts
@@ -8,6 +8,7 @@ import {
   AGENT_STATUS_STALE_AFTER_MS,
   type AgentStatusEntry
 } from '../../../shared/agent-status-types'
+import { agentEntryCompletionAt } from '../../../shared/agent-completion-time'
 import { agentProviderSessionsEqual } from '../../../shared/agent-session-resume'
 import type {
   RuntimeMobileSessionTabsResult,
@@ -53,7 +54,8 @@ import { toRuntimeWorktreeSelector } from './runtime-worktree-selector'
 import {
   clearWebSessionFocusIntent,
   clearWebSessionFocusIntentsForOwner,
-  peekWebSessionFocusIntent
+  peekWebSessionFocusIntent,
+  resolveWebSessionVisibleTabId
 } from './web-session-focus-intent'
 import {
   clearWebSessionCloseIntentsForOwner,
@@ -89,6 +91,14 @@ import {
   installWindowVisibilitySubscriptionParking,
   type WindowVisibilitySubscriptionSpec
 } from './window-visibility-subscription-parking'
+import {
+  clearWebSessionBrowserPlacementsForEnvironment,
+  clearWebSessionBrowserPlacementsForWorktree,
+  isWebSessionBrowserPlacementGroupReserved,
+  peekWebSessionBrowserPlacementGroup,
+  resetWebSessionBrowserPlacementsForTests
+} from './web-session-browser-placement'
+import { suppressE2eWebRuntimeBrowserSnapshot } from './web-runtime-browser-creation-e2e-fault'
 
 const WEB_SESSION_GROUP_PREFIX = 'web-session-tabs:'
 export const WEB_SESSION_TABS_VISIBILITY_RESUME_STAGGER_MS = 100
@@ -169,6 +179,7 @@ type MirroredBrowserTab = {
   remotePageId: string
   unifiedTab: Tab
   hostTabId: string
+  clientGroupId?: string
 }
 
 type MirroredEditorTab = {
@@ -632,6 +643,7 @@ export function resetWebSessionTabsSnapshotFreshnessForTests(): void {
   lastHostTerminalTabCountByWorktree.clear()
   hostSessionTabIdByLocalKey.clear()
   hostSessionTabMappingKeysByEnvironmentAndWorktree.clear()
+  resetWebSessionBrowserPlacementsForTests()
 }
 
 export function _getWebSessionTabsTrackingCountsForTest(): {
@@ -674,6 +686,7 @@ function clearWebSessionTabsTrackingForWorktree(environmentId: string, worktreeI
   clearWebSessionCloseIntentsForWorktree({ environmentId }, worktreeId)
   clearWebAgentSessionHandoffsForWorktree(environmentId, worktreeId)
   clearHostSessionTabIdMappings(environmentId, worktreeId)
+  clearWebSessionBrowserPlacementsForWorktree(environmentId, worktreeId)
 }
 
 export function clearWebSessionTabsTrackingForEnvironment(environmentId: string): void {
@@ -727,6 +740,7 @@ export function clearWebSessionTabsTrackingForEnvironment(environmentId: string)
     hostSessionTabMappingKeysByEnvironmentAndWorktree.delete(trimmedEnvironmentId)
   }
   clearWebAgentSessionHandoffsForEnvironment(trimmedEnvironmentId)
+  clearWebSessionBrowserPlacementsForEnvironment(trimmedEnvironmentId)
   clearAllWebRuntimeWakeTerminalRespawn()
 }
 
@@ -1278,12 +1292,17 @@ function buildMirroredAgentStatusPatch(
       existing?.worktreeId !== entry.worktreeId || existing?.tabId !== entry.tabId
     const entryFreshnessChanged =
       !!existing && isAgentStatusFresh(existing, now) !== isAgentStatusFresh(entry, now)
+    const doneAttentionChanged =
+      existing?.state === 'done' &&
+      entry.state === 'done' &&
+      agentEntryCompletionAt(existing) !== agentEntryCompletionAt(entry)
     const entrySortRelevantChange =
       !existing ||
       existing.state !== entry.state ||
       !isAgentStatusFresh(existing, now) ||
       entryFreshnessChanged ||
       entryAttributionChanged ||
+      doneAttentionChanged ||
       isMirroredCommandCodeTurnBump(existing, entry)
     aggregateRelevantChange = aggregateRelevantChange || entrySortRelevantChange
     sortRelevantChange = sortRelevantChange || entrySortRelevantChange
@@ -1488,6 +1507,10 @@ function buildMirroredBrowserTabs(
   sortOffset: number,
   now: number
 ): MirroredBrowserTab[] {
+  const renderedGroupIds = collectLayoutGroupIds(state.layoutByWorktree[snapshot.worktree])
+  const clientGroupIds = new Set(
+    (state.groupsByWorktree[snapshot.worktree] ?? []).map((group) => group.id)
+  )
   return snapshot.tabs.filter(isReadyBrowserTab).map((tab, index) => {
     const existing = findBrowserWorkspaceForRemotePage(
       state,
@@ -1498,7 +1521,22 @@ function buildMirroredBrowserTabs(
     const workspaceId = existing?.workspace.id ?? tab.browserWorkspaceId
     const pageId = existing?.page.id ?? tab.browserPageId
     const createdAt = existing?.page.createdAt ?? now + sortOffset + index
-    const groupId = hostGroupIdByTabId.get(tab.id) ?? fallbackGroupId
+    const recordedClientGroupId = peekWebSessionBrowserPlacementGroup({
+      environmentId,
+      worktreeId: snapshot.worktree,
+      remotePageId: tab.browserPageId
+    })
+    const hostGroupId = hostGroupIdByTabId.get(tab.id) ?? fallbackGroupId
+    const existingClientGroupId =
+      existing?.unifiedTab?.groupId !== hostGroupId ? existing?.unifiedTab?.groupId : undefined
+    const preferredClientGroupId = recordedClientGroupId ?? existingClientGroupId
+    const clientGroupId =
+      preferredClientGroupId &&
+      clientGroupIds.has(preferredClientGroupId) &&
+      (renderedGroupIds.size === 0 || renderedGroupIds.has(preferredClientGroupId))
+        ? preferredClientGroupId
+        : undefined
+    const groupId = clientGroupId ?? hostGroupId
     const title = tab.title.trim() || 'Browser'
     const nextPage: BrowserPage = {
       id: pageId,
@@ -1540,7 +1578,8 @@ function buildMirroredBrowserTabs(
       certificateFailure: tab.certificateFailure ?? null,
       remotePageId: tab.browserPageId,
       unifiedTab: buildBrowserUnifiedTab(workspace, tab, existing?.unifiedTab ?? null, groupId),
-      hostTabId: tab.id
+      hostTabId: tab.id,
+      ...(clientGroupId ? { clientGroupId } : {})
     }
   })
 }
@@ -1730,6 +1769,46 @@ function updateHostSessionTabIdMappings(args: {
   }
 }
 
+function retainClientPlacedMirroredTabs(args: {
+  groups: readonly TabGroup[]
+  mirroredUnifiedIds: ReadonlySet<string>
+  validUnifiedTabIds: ReadonlySet<string>
+  clientGroupIdByLocalTabId: ReadonlyMap<string, string>
+  nextActiveUnifiedTabId: string | null
+}): TabGroup[] {
+  return args.groups.map((group) => {
+    const retainedTabOrder = group.tabOrder.filter(
+      (tabId) =>
+        args.validUnifiedTabIds.has(tabId) &&
+        (!args.mirroredUnifiedIds.has(tabId) ||
+          args.clientGroupIdByLocalTabId.get(tabId) === group.id)
+    )
+    const placedTabIds = [...args.clientGroupIdByLocalTabId]
+      .filter(
+        ([tabId, groupId]) =>
+          groupId === group.id &&
+          args.validUnifiedTabIds.has(tabId) &&
+          !retainedTabOrder.includes(tabId)
+      )
+      .map(([tabId]) => tabId)
+    const tabOrder = [...retainedTabOrder, ...placedTabIds]
+    const activeTabId =
+      args.nextActiveUnifiedTabId && tabOrder.includes(args.nextActiveUnifiedTabId)
+        ? args.nextActiveUnifiedTabId
+        : group.activeTabId && tabOrder.includes(group.activeTabId)
+          ? group.activeTabId
+          : (tabOrder[0] ?? null)
+    return {
+      ...group,
+      tabOrder,
+      activeTabId,
+      recentTabIds: activeTabId
+        ? pushRecentTabId(sanitizeRecentTabIds(group.recentTabIds, tabOrder), activeTabId)
+        : []
+    }
+  })
+}
+
 function buildMirroredHostGroups({
   currentGroups,
   hostGroups,
@@ -1739,7 +1818,8 @@ function buildMirroredHostGroups({
   now,
   validUnifiedTabIds,
   environmentId,
-  worktreeId
+  worktreeId,
+  clientGroupIdByLocalTabId
 }: {
   currentGroups: readonly TabGroup[]
   hostGroups: readonly RuntimeMobileSessionTabGroup[]
@@ -1750,16 +1830,14 @@ function buildMirroredHostGroups({
   validUnifiedTabIds: ReadonlySet<string>
   environmentId: string
   worktreeId: string
+  clientGroupIdByLocalTabId: ReadonlyMap<string, string>
 }): TabGroup[] | null {
-  const strippedGroups = currentGroups.map((group) => {
-    const tabOrder = group.tabOrder.filter(
-      (tabId) => validUnifiedTabIds.has(tabId) && !mirroredUnifiedIds.has(tabId)
-    )
-    return {
-      ...group,
-      tabOrder,
-      recentTabIds: sanitizeRecentTabIds(group.recentTabIds, tabOrder)
-    }
+  const strippedGroups = retainClientPlacedMirroredTabs({
+    groups: currentGroups,
+    mirroredUnifiedIds,
+    validUnifiedTabIds,
+    clientGroupIdByLocalTabId,
+    nextActiveUnifiedTabId
   })
   const groupsById = new Map(strippedGroups.map((group) => [group.id, group]))
   const orderedGroups: TabGroup[] = []
@@ -1769,7 +1847,12 @@ function buildMirroredHostGroups({
     const existing = groupsById.get(hostGroup.id)
     const localHostOrder = hostGroup.tabOrder
       .map((tabId) => hostToLocalTabId.get(tabId))
-      .filter((tabId): tabId is string => tabId !== undefined && validUnifiedTabIds.has(tabId))
+      .filter(
+        (tabId): tabId is string =>
+          tabId !== undefined &&
+          validUnifiedTabIds.has(tabId) &&
+          !clientGroupIdByLocalTabId.has(tabId)
+      )
     const hostTabOrder = [
       ...(existing?.tabOrder.filter((tabId) => !localHostOrder.includes(tabId)) ?? []),
       ...localHostOrder
@@ -1811,7 +1894,11 @@ function buildMirroredHostGroups({
   }
 
   for (const group of strippedGroups) {
-    if (!seen.has(group.id) && group.tabOrder.length > 0) {
+    if (
+      !seen.has(group.id) &&
+      (group.tabOrder.length > 0 ||
+        isWebSessionBrowserPlacementGroupReserved({ worktreeId, groupId: group.id }))
+    ) {
       orderedGroups.push(group)
     }
   }
@@ -2225,42 +2312,6 @@ function toVisibleTabType(tab: Tab): WebSessionTabsSyncState['activeTabType'] {
   return 'editor'
 }
 
-function findCurrentVisibleUnifiedTabId(args: {
-  state: WebSessionTabsSyncState
-  worktreeId: string
-  nextUnifiedTabs: readonly Tab[] | null
-}): string | null {
-  const { state, worktreeId, nextUnifiedTabs } = args
-  if (!nextUnifiedTabs) {
-    return null
-  }
-  const currentVisibleType =
-    state.activeTabTypeByWorktree[worktreeId] ??
-    (state.activeWorktreeId === worktreeId ? state.activeTabType : null)
-  if (currentVisibleType === 'terminal') {
-    const terminalTabId = state.activeTabIdByWorktree[worktreeId]
-    return terminalTabId && nextUnifiedTabs.some((tab) => tab.id === terminalTabId)
-      ? terminalTabId
-      : null
-  }
-  if (currentVisibleType === 'browser') {
-    const browserWorkspaceId = state.activeBrowserTabIdByWorktree[worktreeId]
-    return (
-      nextUnifiedTabs.find(
-        (tab) => tab.contentType === 'browser' && tab.entityId === browserWorkspaceId
-      )?.id ?? null
-    )
-  }
-  if (currentVisibleType === 'editor') {
-    const fileId = state.activeFileIdByWorktree[worktreeId]
-    return (
-      nextUnifiedTabs.find((tab) => tab.contentType === 'editor' && tab.entityId === fileId)?.id ??
-      null
-    )
-  }
-  return null
-}
-
 function applyWebSessionTabsSnapshotWithContext(
   state: WebSessionTabsSyncState,
   rawSnapshot: RuntimeMobileSessionTabsResult,
@@ -2268,6 +2319,9 @@ function applyWebSessionTabsSnapshotWithContext(
   now = Date.now(),
   batchContext?: WebSessionTabsBatchContext
 ): WebSessionTabsSyncState | Partial<WebSessionTabsSyncState> {
+  if (suppressE2eWebRuntimeBrowserSnapshot(rawSnapshot)) {
+    return state
+  }
   const worktreeId = rawSnapshot.worktree
   if (worktreeId === FLOATING_TERMINAL_WORKTREE_ID) {
     return state
@@ -2300,7 +2354,7 @@ function applyWebSessionTabsSnapshotWithContext(
   // Why: only a caller-recorded create intent may focus its arriving tab; unsolicited server-active must not steal focus (#5435).
   const focusIntent = peekWebSessionFocusIntent({ environmentId }, worktreeId)
   const focusIntentHostTabId = focusIntent?.hostTabId ?? null
-  const callerFocusIntentTab =
+  const matchingFocusIntentTab =
     focusIntentHostTabId === null
       ? null
       : focusIntent?.leafId
@@ -2316,13 +2370,21 @@ function applyWebSessionTabsSnapshotWithContext(
               (tab.type === 'terminal' && tab.parentTabId === focusIntentHostTabId) ||
               (tab.type === 'browser' && tab.browserPageId === focusIntentHostTabId)
           ) ?? null)
+  const expectedCurrentLocalTabId = focusIntent?.expectedCurrentLocalTabId
+  const currentVisibleLocalTabId = resolveWebSessionVisibleTabId(state, worktreeId)
+  const callerFocusIntentTab =
+    matchingFocusIntentTab &&
+    (expectedCurrentLocalTabId === undefined ||
+      expectedCurrentLocalTabId === currentVisibleLocalTabId)
+      ? matchingFocusIntentTab
+      : null
   const followIntentTab =
     snapshot.navigationIntent === 'follow'
       ? (snapshot.tabs.find((tab) => tab.id === snapshot.activeTabId) ?? null)
       : null
   const navigationIntentTab = callerFocusIntentTab ?? followIntentTab
   const honorSnapshotActiveFocus = navigationIntentTab !== null
-  if (callerFocusIntentTab) {
+  if (matchingFocusIntentTab) {
     clearWebSessionFocusIntent({ environmentId }, worktreeId)
   }
   const currentTerminalTabs = state.tabsByWorktree[worktreeId] ?? []
@@ -2640,11 +2702,11 @@ function applyWebSessionTabsSnapshotWithContext(
       ? (activeMirroredEditorFileId ?? mirroredEditorTabs[0]?.file.id)
       : mirroredEditorTabs[0]?.file.id) ??
     null
-  const currentVisibleUnifiedTabId = findCurrentVisibleUnifiedTabId({
+  const currentVisibleUnifiedTabId = resolveWebSessionVisibleTabId(
     state,
     worktreeId,
-    nextUnifiedTabs
-  })
+    nextUnifiedTabs ?? []
+  )
   // Why: a client-initiated activation also drives the visible unified tab, overriding the sticky current-visible tab.
   const intentUnifiedTabId = honorSnapshotActiveFocus
     ? navigationIntentTab?.type === 'browser'
@@ -2686,6 +2748,11 @@ function applyWebSessionTabsSnapshotWithContext(
   })
 
   const currentGroups = state.groupsByWorktree[worktreeId] ?? []
+  const clientGroupIdByLocalTabId = new Map(
+    mirroredBrowserTabs.flatMap((entry) =>
+      entry.clientGroupId ? [[entry.unifiedTab.id, entry.clientGroupId]] : []
+    )
+  )
   const nextGroups = (() => {
     if (!nextUnifiedTabs || nextUnifiedTabs.length === 0) {
       return null
@@ -2700,21 +2767,17 @@ function applyWebSessionTabsSnapshotWithContext(
         now,
         validUnifiedTabIds,
         environmentId,
-        worktreeId
+        worktreeId,
+        clientGroupIdByLocalTabId
       })
     }
-    const strippedGroups = currentGroups.map((group) => ({
-      ...group,
-      tabOrder: group.tabOrder.filter(
-        (tabId) => validUnifiedTabIds.has(tabId) && !mirroredUnifiedIds.has(tabId)
-      ),
-      recentTabIds: sanitizeRecentTabIds(
-        group.recentTabIds,
-        group.tabOrder.filter(
-          (tabId) => validUnifiedTabIds.has(tabId) && !mirroredUnifiedIds.has(tabId)
-        )
-      )
-    }))
+    const strippedGroups = retainClientPlacedMirroredTabs({
+      groups: currentGroups,
+      mirroredUnifiedIds,
+      validUnifiedTabIds,
+      clientGroupIdByLocalTabId,
+      nextActiveUnifiedTabId
+    })
     const target = strippedGroups.find((group) => group.id === targetGroupId) ?? {
       id: targetGroupId,
       worktreeId,
@@ -2724,7 +2787,9 @@ function applyWebSessionTabsSnapshotWithContext(
     }
     const targetOrder = [
       ...target.tabOrder.filter((tabId) => validUnifiedTabIds.has(tabId)),
-      ...mirroredUnifiedTabs.map((tab) => tab.id)
+      ...mirroredUnifiedTabs
+        .filter((tab) => !clientGroupIdByLocalTabId.has(tab.id))
+        .map((tab) => tab.id)
     ]
     const targetActiveTabId =
       nextActiveUnifiedTabId && targetOrder.includes(nextActiveUnifiedTabId)
@@ -2744,7 +2809,15 @@ function applyWebSessionTabsSnapshotWithContext(
     const merged = strippedGroups.some((group) => group.id === targetGroupId)
       ? strippedGroups.map((group) => (group.id === targetGroupId ? updatedTarget : group))
       : [...strippedGroups, updatedTarget]
-    return merged.filter((group) => group.id === targetGroupId || group.tabOrder.length > 0)
+    return merged.filter(
+      (group) =>
+        group.id === targetGroupId ||
+        group.tabOrder.length > 0 ||
+        isWebSessionBrowserPlacementGroupReserved({
+          worktreeId,
+          groupId: group.id
+        })
+    )
   })()
 
   const nextTabBarOrder = (() => {
@@ -3350,8 +3423,7 @@ export function applyWebSessionTabsStorePatch(
   let mirroredAgentStatusChanged = false
   useAppStore.setState((state) => {
     const patch = buildPatch(state)
-    mirroredAgentStatusChanged =
-      patch !== state && Object.prototype.hasOwnProperty.call(patch, 'agentStatusByPaneKey')
+    mirroredAgentStatusChanged = patch !== state && Object.hasOwn(patch, 'agentStatusByPaneKey')
     return patch
   })
   // Why: paired-web snapshots bypass setAgentStatus, so arm the stale-boundary timer explicitly like local hook events do.
diff --git a/src/renderer/src/store/index.ts b/src/renderer/src/store/index.ts
index 11355fb8ac6..3fd5b308585 100644
--- a/src/renderer/src/store/index.ts
+++ b/src/renderer/src/store/index.ts
@@ -47,7 +47,10 @@ import { createRemoteServerUpdatesSlice } from './slices/remote-server-updates'
 import { createTerminalQuickCommandHostsSlice } from './slices/terminal-quick-command-hosts'
 import { e2eConfig } from '@/lib/e2e-config'
 import type { createWebRuntimeSessionTerminal } from '@/runtime/web-runtime-session'
-import { registerHttpLinkStoreAccessor } from '@/lib/http-link-routing'
+import {
+  registerHttpLinkStoreAccessor,
+  registerRuntimeHttpLinkBrowserOpener
+} from '@/lib/http-link-routing'
 import { installStoreListenerCensus } from './store-listener-census'
 import {
   registerRendererMemoryProfileContributor,
@@ -106,6 +109,10 @@ export const useAppStore = create<AppState>()((...a) => {
 })
 
 registerHttpLinkStoreAccessor(() => useAppStore.getState())
+registerRuntimeHttpLinkBrowserOpener(async (request) => {
+  const { openWorkspaceBrowserTab } = await import('@/lib/workspace-browser-tab-open')
+  await openWorkspaceBrowserTab(request)
+})
 
 // Why: names the fattest store slices in renderer_memory_highwater breadcrumbs
 // so OOM crash reports identify what grew without a local repro.
diff --git a/src/renderer/src/store/running-terminal-close-confirm.ts b/src/renderer/src/store/running-terminal-close-confirm.ts
index 618d30c98c5..88db03a5d38 100644
--- a/src/renderer/src/store/running-terminal-close-confirm.ts
+++ b/src/renderer/src/store/running-terminal-close-confirm.ts
@@ -83,7 +83,7 @@ export const useRunningTerminalCloseConfirmStore = create<RunningTerminalCloseCo
       const queuedIndex = queuedRequests.findIndex(
         (queued) => queued.terminalTabId === request.terminalTabId
       )
-      if (queuedIndex >= 0) {
+      if (queuedIndex !== -1) {
         queuedRequests[queuedIndex] = mergeRequests(queuedRequests[queuedIndex]!, request)
         return
       }
diff --git a/src/renderer/src/store/slices/agent-status-batch.test.ts b/src/renderer/src/store/slices/agent-status-batch.test.ts
new file mode 100644
index 00000000000..5504f4d463e
--- /dev/null
+++ b/src/renderer/src/store/slices/agent-status-batch.test.ts
@@ -0,0 +1,506 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  type AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import type { AppState } from '../types'
+import {
+  MAX_LIVE_AGENT_STATUSES,
+  type AgentStatusBatchUpdate,
+  type RetainedAgentEntry
+} from './agent-status'
+import type { GeneratedTabTitleUpdate } from './terminal-tab-title-batch'
+import { createTestStore, makeTab } from './store-test-helpers'
+
+const BASE_TIME = 2_000_000
+const FIRST_PANE = 'tab-1:11111111-1111-4111-8111-111111111111'
+const SECOND_PANE = 'tab-1:22222222-2222-4222-8222-222222222222'
+const PROVIDER_SESSION = {
+  key: 'session_id' as const,
+  id: 'pi-session-1',
+  transcriptPath: '/tmp/pi-session-1.jsonl'
+}
+
+function flushMicrotasks(): Promise<void> {
+  return new Promise((resolve) => queueMicrotask(resolve))
+}
+
+function seedBatchStore() {
+  const store = createTestStore()
+  const tab = makeTab({ id: 'tab-1', worktreeId: 'wt-1', title: 'pi' })
+  const retainedEntry: AgentStatusEntry = {
+    paneKey: FIRST_PANE,
+    state: 'done',
+    prompt: 'old turn',
+    agentType: 'pi',
+    updatedAt: BASE_TIME - 100,
+    stateStartedAt: BASE_TIME - 200,
+    stateHistory: []
+  }
+  const retained: RetainedAgentEntry = {
+    entry: retainedEntry,
+    worktreeId: 'wt-1',
+    tab,
+    agentType: 'pi',
+    startedAt: BASE_TIME - 200
+  }
+  store.setState({
+    tabsByWorktree: { 'wt-1': [tab] },
+    retainedAgentsByPaneKey: { [FIRST_PANE]: retained },
+    retentionSuppressedPaneKeys: { [FIRST_PANE]: true },
+    refreshGitHubForWorktreeIfStale: vi.fn().mockResolvedValue(undefined)
+  } as Partial<AppState>)
+  return store
+}
+
+function makeUpdates(): AgentStatusBatchUpdate[] {
+  return [
+    {
+      paneKey: FIRST_PANE,
+      payload: { state: 'working', prompt: 'first turn', agentType: 'pi' },
+      terminalTitle: 'Pi',
+      timing: { updatedAt: BASE_TIME, stateStartedAt: BASE_TIME },
+      routing: { tabId: 'tab-1', worktreeId: 'wt-1', terminalHandle: 'pty-1' },
+      metadata: { providerSession: PROVIDER_SESSION }
+    },
+    {
+      paneKey: FIRST_PANE,
+      payload: {
+        state: 'waiting',
+        prompt: 'first turn',
+        agentType: 'pi',
+        toolName: 'AskUserQuestion'
+      },
+      timing: { updatedAt: BASE_TIME + 1, stateStartedAt: BASE_TIME + 1 }
+    },
+    {
+      paneKey: FIRST_PANE,
+      payload: {
+        state: 'done',
+        prompt: 'first turn',
+        agentType: 'pi',
+        lastAssistantMessage: 'Finished.'
+      },
+      timing: { updatedAt: BASE_TIME + 2, stateStartedAt: BASE_TIME + 2 }
+    },
+    {
+      paneKey: FIRST_PANE,
+      payload: { state: 'working', prompt: 'second turn', agentType: 'pi' },
+      timing: { updatedAt: BASE_TIME + 3, stateStartedAt: BASE_TIME + 3 }
+    },
+    {
+      paneKey: FIRST_PANE,
+      payload: { state: 'done', prompt: 'late first turn', agentType: 'pi' },
+      timing: { updatedAt: BASE_TIME + 2, stateStartedAt: BASE_TIME + 2 }
+    },
+    {
+      kind: 'providerSession',
+      paneKey: SECOND_PANE,
+      agent: 'pi',
+      providerSession: PROVIDER_SESSION,
+      timing: { updatedAt: BASE_TIME + 4 },
+      routing: { tabId: 'tab-1', worktreeId: 'wt-1' }
+    },
+    {
+      paneKey: SECOND_PANE,
+      payload: { state: 'working', prompt: 'provider turn', agentType: 'pi' },
+      timing: { updatedAt: BASE_TIME + 5, stateStartedAt: BASE_TIME + 5 },
+      routing: { tabId: 'tab-1', worktreeId: 'wt-1' },
+      metadata: { providerSession: PROVIDER_SESSION }
+    }
+  ]
+}
+
+function selectBatchState(state: AppState) {
+  return {
+    agentStatusByPaneKey: state.agentStatusByPaneKey,
+    retainedAgentsByPaneKey: state.retainedAgentsByPaneKey,
+    sleepingAgentSessionsByPaneKey: state.sleepingAgentSessionsByPaneKey,
+    agentLaunchConfigByPaneKey: state.agentLaunchConfigByPaneKey,
+    migrationUnsupportedByPtyId: state.migrationUnsupportedByPtyId,
+    retentionSuppressedPaneKeys: state.retentionSuppressedPaneKeys,
+    agentStatusEpoch: state.agentStatusEpoch,
+    sortEpoch: state.sortEpoch
+  }
+}
+
+describe('setAgentStatuses', () => {
+  afterEach(() => {
+    vi.restoreAllMocks()
+    vi.useRealTimers()
+  })
+
+  it('matches sequential updates across repeated panes and provider-session records', async () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(BASE_TIME + 10)
+    const sequentialStore = seedBatchStore()
+    const batchStore = seedBatchStore()
+    const sequentialTitleGeneration = vi.fn()
+    const batchTitleGeneration = vi.fn()
+    const batchTitleGenerationBulk = vi.fn((updates: readonly GeneratedTabTitleUpdate[]) => {
+      for (const update of updates) {
+        if (update.options) {
+          batchTitleGeneration(update.paneKey, update.prompt, update.options)
+        } else {
+          batchTitleGeneration(update.paneKey, update.prompt)
+        }
+      }
+    })
+    sequentialStore.setState({
+      setGeneratedTabTitleFromAgentPrompt: sequentialTitleGeneration
+    } as Partial<AppState>)
+    batchStore.setState({
+      setGeneratedTabTitlesFromAgentPrompts: batchTitleGenerationBulk
+    } as Partial<AppState>)
+    const updates = makeUpdates()
+
+    for (const update of updates) {
+      if (update.kind === 'providerSession') {
+        sequentialStore
+          .getState()
+          .recordAgentProviderSession(
+            update.paneKey,
+            update.agent,
+            update.providerSession,
+            update.timing,
+            update.routing,
+            update.metadata
+          )
+      } else {
+        sequentialStore
+          .getState()
+          .setAgentStatus(
+            update.paneKey,
+            update.payload,
+            update.terminalTitle,
+            update.timing,
+            update.routing,
+            update.metadata
+          )
+      }
+    }
+    const outcomes = batchStore.getState().setAgentStatuses(updates)
+
+    expect(outcomes).toEqual([true, true, true, true, false, true, true])
+    expect(selectBatchState(batchStore.getState())).toEqual(
+      selectBatchState(sequentialStore.getState())
+    )
+    expect(
+      batchStore.getState().agentStatusByPaneKey[FIRST_PANE].stateHistory.at(-1)
+    ).toMatchObject({ state: 'done' })
+    // The swallowed `done`'s output survives on the entry, not on the history row.
+    expect(
+      batchStore.getState().agentStatusByPaneKey[FIRST_PANE].lastCompletedAssistantMessage
+    ).toBe('Finished.')
+    expect(batchTitleGeneration.mock.calls).toEqual(sequentialTitleGeneration.mock.calls)
+    expect(batchTitleGeneration).toHaveBeenCalledTimes(5)
+    expect(batchTitleGenerationBulk).toHaveBeenCalledOnce()
+    await flushMicrotasks()
+    expect(batchStore.getState().refreshGitHubForWorktreeIfStale).toHaveBeenCalledTimes(1)
+    expect(sequentialStore.getState().refreshGitHubForWorktreeIfStale).toHaveBeenCalledTimes(1)
+
+    vi.advanceTimersByTime(AGENT_STATUS_STALE_AFTER_MS + 1)
+    expect(selectBatchState(batchStore.getState())).toEqual(
+      selectBatchState(sequentialStore.getState())
+    )
+  })
+
+  it('publishes once and reports skipped ordered updates', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(BASE_TIME + 10)
+    const store = seedBatchStore()
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+
+    const outcomes = store.getState().setAgentStatuses(makeUpdates())
+
+    expect(outcomes).toEqual([true, true, true, true, false, true, true])
+    expect(publications).toBe(1)
+    expect(store.getState().setAgentStatuses([])).toEqual([])
+    expect(publications).toBe(1)
+    unsubscribe()
+  })
+
+  it('coalesces 100 generated tab titles into one post-status publication', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(BASE_TIME + 10)
+    const store = createTestStore()
+    const paneCount = 100
+    const tabsByWorktree = Object.fromEntries(
+      Array.from({ length: paneCount }, (_, index) => {
+        const worktreeId = `wt-${index}`
+        return [worktreeId, [makeTab({ id: `tab-${index}`, worktreeId })]]
+      })
+    )
+    store.setState({
+      settings: { ...store.getState().settings, tabAutoGenerateTitle: true },
+      tabsByWorktree
+    } as Partial<AppState>)
+    const updates: AgentStatusBatchUpdate[] = Array.from({ length: paneCount }, (_, index) => ({
+      paneKey: `tab-${index}:11111111-1111-4111-8111-111111111111`,
+      payload: {
+        state: 'working',
+        prompt: `Refactor remote startup module ${index}`,
+        agentType: 'pi'
+      },
+      timing: { updatedAt: BASE_TIME + index, stateStartedAt: BASE_TIME + index },
+      routing: { tabId: `tab-${index}`, worktreeId: `wt-${index}` }
+    }))
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+
+    const outcomes = store.getState().setAgentStatuses(updates)
+
+    unsubscribe()
+    expect(outcomes).toEqual(Array(paneCount).fill(true))
+    expect(publications).toBe(2)
+    expect(store.getState().tabsByWorktree['wt-99']?.[0]?.generatedTitle).toBe(
+      'Refactor remote startup module 99'
+    )
+  })
+
+  it('coalesces batch freshness requests while preserving standalone scheduling', async () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(BASE_TIME + 10)
+    const store = seedBatchStore()
+    const queueMicrotaskSpy = vi.spyOn(globalThis, 'queueMicrotask')
+    const workingUpdate = (updatedAt: number, prompt: string): AgentStatusBatchUpdate => ({
+      paneKey: FIRST_PANE,
+      payload: { state: 'working', prompt, agentType: 'pi' },
+      timing: { updatedAt, stateStartedAt: updatedAt },
+      routing: { tabId: 'tab-1', worktreeId: 'wt-1' }
+    })
+
+    const outcomes = store
+      .getState()
+      .setAgentStatuses([
+        workingUpdate(BASE_TIME, 'first'),
+        workingUpdate(BASE_TIME + 1, 'second'),
+        workingUpdate(BASE_TIME + 2, 'third'),
+        workingUpdate(BASE_TIME + 1, 'stale')
+      ])
+
+    expect(outcomes).toEqual([true, true, true, false])
+    expect(queueMicrotaskSpy).toHaveBeenCalledTimes(1)
+
+    queueMicrotaskSpy.mockClear()
+    store
+      .getState()
+      .setAgentStatus(
+        FIRST_PANE,
+        { state: 'working', prompt: 'standalone', agentType: 'pi' },
+        undefined,
+        { updatedAt: BASE_TIME + 3, stateStartedAt: BASE_TIME + 3 },
+        { tabId: 'tab-1', worktreeId: 'wt-1' }
+      )
+    store
+      .getState()
+      .setAgentStatus(
+        FIRST_PANE,
+        { state: 'working', prompt: 'standalone stale', agentType: 'pi' },
+        undefined,
+        { updatedAt: BASE_TIME + 2, stateStartedAt: BASE_TIME + 2 },
+        { tabId: 'tab-1', worktreeId: 'wt-1' }
+      )
+
+    expect(queueMicrotaskSpy).toHaveBeenCalledTimes(2)
+    await flushMicrotasks()
+  })
+
+  it('shares freshness across nested folds but isolates synchronous reentrant transactions', async () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(BASE_TIME + 10)
+    const store = seedBatchStore()
+    const queueMicrotaskSpy = vi.spyOn(globalThis, 'queueMicrotask')
+    const update = (paneKey: string, updatedAt: number): AgentStatusBatchUpdate => ({
+      paneKey,
+      payload: { state: 'working', prompt: paneKey, agentType: 'pi' },
+      timing: { updatedAt, stateStartedAt: updatedAt },
+      routing: { tabId: 'tab-1', worktreeId: 'wt-1' }
+    })
+    let publications = 0
+    const unsubscribeNested = store.subscribe(() => {
+      publications += 1
+    })
+
+    const nestedOutcomes = store
+      .getState()
+      .transactAgentStatuses((transaction) => [
+        transaction.apply(update(FIRST_PANE, BASE_TIME)),
+        store
+          .getState()
+          .transactAgentStatuses((nestedTransaction) =>
+            nestedTransaction.apply(update(SECOND_PANE, BASE_TIME + 1))
+          )
+      ])
+
+    expect(nestedOutcomes).toEqual([true, true])
+    expect(publications).toBe(1)
+    expect(queueMicrotaskSpy).toHaveBeenCalledTimes(1)
+    unsubscribeNested()
+
+    queueMicrotaskSpy.mockClear()
+    let reentered = false
+    const unsubscribeReentrant = store.subscribe(() => {
+      publications += 1
+      if (!reentered) {
+        reentered = true
+        store.getState().setAgentStatuses([update(SECOND_PANE, BASE_TIME + 3)])
+      }
+    })
+
+    store.getState().setAgentStatuses([update(FIRST_PANE, BASE_TIME + 2)])
+
+    expect(publications).toBe(3)
+    expect(queueMicrotaskSpy).toHaveBeenCalledTimes(2)
+    expect(store.getState().agentStatusByPaneKey[FIRST_PANE]?.updatedAt).toBe(BASE_TIME + 2)
+    expect(store.getState().agentStatusByPaneKey[SECOND_PANE]?.updatedAt).toBe(BASE_TIME + 3)
+    unsubscribeReentrant()
+    await flushMicrotasks()
+  })
+
+  it('exposes cap evictions to later updates in the same transaction', () => {
+    const store = seedBatchStore()
+    const firstPane = 'orphan-tab:orphan-0'
+    const entries = Object.fromEntries(
+      Array.from({ length: MAX_LIVE_AGENT_STATUSES }, (_, index) => {
+        const paneKey = `orphan-tab:orphan-${index}`
+        return [
+          paneKey,
+          {
+            paneKey,
+            state: 'working',
+            prompt: 'old turn',
+            agentType: 'pi',
+            updatedAt: BASE_TIME,
+            stateStartedAt: BASE_TIME,
+            stateHistory: []
+          } satisfies AgentStatusEntry
+        ]
+      })
+    )
+    store.setState({ agentStatusByPaneKey: entries } as Partial<AppState>)
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+
+    const outcomes = store.getState().transactAgentStatuses((transaction) => {
+      const added = transaction.apply({
+        paneKey: 'orphan-tab:new-pane',
+        payload: { state: 'working', prompt: 'new turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME + 1, stateStartedAt: BASE_TIME + 1 }
+      })
+      expect(transaction.getState().agentStatusByPaneKey[firstPane]).toBeUndefined()
+      const completed = transaction.apply({
+        paneKey: firstPane,
+        payload: { state: 'done', prompt: 'different agent', agentType: 'claude' },
+        timing: { updatedAt: BASE_TIME + 2, stateStartedAt: BASE_TIME + 2 }
+      })
+      return [added, completed]
+    })
+
+    expect(outcomes).toEqual([true, true])
+    expect(store.getState().agentStatusByPaneKey[firstPane]).toMatchObject({
+      agentType: 'claude',
+      state: 'done'
+    })
+    expect(publications).toBe(1)
+    unsubscribe()
+  })
+
+  it('preserves a store write that bypassed the transaction instead of reverting it', () => {
+    const store = seedBatchStore()
+
+    const outcome = store.getState().transactAgentStatuses((transaction) => {
+      const applied = transaction.apply({
+        paneKey: FIRST_PANE,
+        payload: { state: 'working', prompt: 'first turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME, stateStartedAt: BASE_TIME }
+      })
+      // Any slice action reached through get() writes straight to the real store — a
+      // REPLACE commit of the fold's snapshot would silently revert it.
+      store.setState({ worktreesByRepo: { 'repo-late': [] } } as Partial<AppState>)
+      return applied
+    })
+
+    expect(outcome).toBe(true)
+    expect(store.getState().worktreesByRepo).toEqual({ 'repo-late': [] })
+    expect(store.getState().agentStatusByPaneKey[FIRST_PANE]).toMatchObject({ state: 'working' })
+  })
+
+  it('keeps one completed-turn message per entry instead of one per history row', () => {
+    const store = seedBatchStore()
+    const turns: AgentStatusBatchUpdate[] = []
+    for (let turn = 0; turn < 5; turn += 1) {
+      turns.push({
+        paneKey: FIRST_PANE,
+        payload: { state: 'working', prompt: `turn ${turn}`, agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME + turn * 2, stateStartedAt: BASE_TIME + turn * 2 }
+      })
+      turns.push({
+        paneKey: FIRST_PANE,
+        payload: {
+          state: 'done',
+          prompt: `turn ${turn}`,
+          agentType: 'pi',
+          lastAssistantMessage: `output ${turn}`
+        },
+        timing: { updatedAt: BASE_TIME + turn * 2 + 1, stateStartedAt: BASE_TIME + turn * 2 + 1 }
+      })
+    }
+    store.getState().setAgentStatuses(turns)
+
+    const entry = store.getState().agentStatusByPaneKey[FIRST_PANE]
+    expect(entry.stateHistory.length).toBeGreaterThan(1)
+    expect(entry.stateHistory.some((row) => 'lastAssistantMessage' in row)).toBe(false)
+    // Only the newest done that rolled into history is retained, so memory is O(1) per pane.
+    expect(entry.lastCompletedAssistantMessage).toBe('output 3')
+    expect(entry.lastAssistantMessage).toBe('output 4')
+  })
+
+  it('clears the completed-turn message when a done carried no assistant output', () => {
+    const store = seedBatchStore()
+    store.getState().setAgentStatuses([
+      {
+        paneKey: FIRST_PANE,
+        payload: { state: 'working', prompt: 'first turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME, stateStartedAt: BASE_TIME }
+      },
+      {
+        paneKey: FIRST_PANE,
+        payload: {
+          state: 'done',
+          prompt: 'first turn',
+          agentType: 'pi',
+          lastAssistantMessage: 'Finished.'
+        },
+        timing: { updatedAt: BASE_TIME + 1, stateStartedAt: BASE_TIME + 1 }
+      },
+      {
+        paneKey: FIRST_PANE,
+        payload: { state: 'working', prompt: 'second turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME + 2, stateStartedAt: BASE_TIME + 2 }
+      },
+      {
+        paneKey: FIRST_PANE,
+        payload: { state: 'done', prompt: 'second turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME + 3, stateStartedAt: BASE_TIME + 3 }
+      },
+      {
+        paneKey: FIRST_PANE,
+        payload: { state: 'working', prompt: 'third turn', agentType: 'pi' },
+        timing: { updatedAt: BASE_TIME + 4, stateStartedAt: BASE_TIME + 4 }
+      }
+    ])
+
+    // The second turn finished silently; leaking turn one's output would misreport the run.
+    expect(
+      store.getState().agentStatusByPaneKey[FIRST_PANE].lastCompletedAssistantMessage
+    ).toBeUndefined()
+  })
+})
diff --git a/src/renderer/src/store/slices/agent-status-freshness-scheduler.test.ts b/src/renderer/src/store/slices/agent-status-freshness-scheduler.test.ts
new file mode 100644
index 00000000000..93d49d79404
--- /dev/null
+++ b/src/renderer/src/store/slices/agent-status-freshness-scheduler.test.ts
@@ -0,0 +1,139 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import {
+  AGENT_STATUS_STALE_AFTER_MS,
+  type AgentStatusEntry
+} from '../../../../shared/agent-status-types'
+import { createFreshnessScheduler } from './agent-status-freshness-scheduler'
+
+const NOW = new Date('2026-04-09T12:00:00.000Z').getTime()
+
+function doneEntry(overrides: Partial<AgentStatusEntry> = {}): AgentStatusEntry {
+  return {
+    paneKey: 'tab-1:11111111-1111-4111-8111-111111111111',
+    state: 'done',
+    prompt: '',
+    updatedAt: NOW,
+    stateStartedAt: NOW,
+    stateHistory: [],
+    agentType: 'claude',
+    ...overrides
+  }
+}
+
+function setup(entries: AgentStatusEntry[]) {
+  const bumpEpochs = vi.fn()
+  const scheduler = createFreshnessScheduler({ getEntries: () => entries, bumpEpochs })
+  return { bumpEpochs, scheduler }
+}
+
+describe('freshness scheduler completion deadlines', () => {
+  afterEach(() => {
+    vi.useRealTimers()
+  })
+
+  it('wakes at the completion deadline even while the hook row stays fresh', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    // Completion is 25m old; same-state `done` writes have kept updatedAt at now.
+    const completedAt = NOW - 25 * 60_000
+    const { bumpEpochs, scheduler } = setup([
+      doneEntry({ stateStartedAt: completedAt, updatedAt: NOW })
+    ])
+
+    scheduler.schedule()
+    vi.advanceTimersByTime(completedAt + AGENT_STATUS_STALE_AFTER_MS - NOW)
+    expect(bumpEpochs).not.toHaveBeenCalled()
+
+    vi.advanceTimersByTime(1)
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+
+    scheduler.dispose()
+  })
+
+  it('keeps the strict-expiry wake armed when rescheduled exactly at the boundary', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    const { bumpEpochs, scheduler } = setup([
+      doneEntry({
+        stateStartedAt: NOW - AGENT_STATUS_STALE_AFTER_MS,
+        updatedAt: NOW
+      })
+    ])
+
+    scheduler.schedule()
+    vi.advanceTimersByTime(1)
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+
+    scheduler.dispose()
+  })
+
+  it('does not lose a completion deadline when an overdue timer is rescheduled after sleep', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    const completedAt = NOW - 25 * 60_000
+    const entries = [doneEntry({ stateStartedAt: completedAt, updatedAt: NOW })]
+    const { bumpEpochs, scheduler } = setup(entries)
+
+    scheduler.schedule()
+    vi.setSystemTime(completedAt + AGENT_STATUS_STALE_AFTER_MS + 1)
+    entries[0] = doneEntry({ stateStartedAt: completedAt, updatedAt: Date.now() })
+    scheduler.schedule()
+
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+    scheduler.schedule()
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+    scheduler.dispose()
+  })
+
+  it('does not rearm an expired completion deadline in a zero-delay loop', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    const completedAt = NOW - 25 * 60_000
+    const { bumpEpochs, scheduler } = setup([
+      doneEntry({ stateStartedAt: completedAt, updatedAt: NOW })
+    ])
+
+    scheduler.schedule()
+    // Past both the completion deadline and the hook-freshness deadline.
+    vi.advanceTimersByTime(AGENT_STATUS_STALE_AFTER_MS + 60_000)
+
+    // One bump for the completion boundary, one for hook freshness — never a spin.
+    expect(bumpEpochs).toHaveBeenCalledTimes(2)
+    expect(vi.getTimerCount()).toBe(0)
+
+    scheduler.dispose()
+  })
+
+  it('ignores completions that cannot demand attention', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    const completedAt = NOW - 25 * 60_000
+    const { bumpEpochs, scheduler } = setup([
+      doneEntry({ stateStartedAt: completedAt, updatedAt: NOW, interrupted: true })
+    ])
+
+    scheduler.schedule()
+    vi.advanceTimersByTime(completedAt + AGENT_STATUS_STALE_AFTER_MS - NOW + 1)
+    expect(bumpEpochs).not.toHaveBeenCalled()
+
+    // Only the hook-freshness deadline remains.
+    vi.advanceTimersByTime(AGENT_STATUS_STALE_AFTER_MS)
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+
+    scheduler.dispose()
+  })
+
+  it('still arms hook freshness for a working entry', () => {
+    vi.useFakeTimers()
+    vi.setSystemTime(NOW)
+    const { bumpEpochs, scheduler } = setup([
+      doneEntry({ state: 'working', stateStartedAt: NOW, updatedAt: NOW })
+    ])
+
+    scheduler.schedule()
+    vi.advanceTimersByTime(AGENT_STATUS_STALE_AFTER_MS + 1)
+    expect(bumpEpochs).toHaveBeenCalledTimes(1)
+
+    scheduler.dispose()
+  })
+})
diff --git a/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts b/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
index 628529dd007..93c3e54fee1 100644
--- a/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
+++ b/src/renderer/src/store/slices/agent-status-freshness-scheduler.ts
@@ -1,3 +1,4 @@
+import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import type { AgentStatusEntry } from '../../../../shared/agent-status-types'
 import { AGENT_STATUS_STALE_AFTER_MS } from '../../../../shared/agent-status-types'
 
@@ -21,6 +22,7 @@ export function createFreshnessScheduler(deps: FreshnessSchedulerDeps): Freshnes
   // `dispose()` in teardown — otherwise a real 30-minute setTimeout leaks
   // into the test process.
   let timer: ReturnType<typeof setTimeout> | null = null
+  let lastCheckedAt: number | null = null
 
   const clear = (): void => {
     if (timer !== null) {
@@ -33,10 +35,12 @@ export function createFreshnessScheduler(deps: FreshnessSchedulerDeps): Freshnes
     clear()
     const entries = deps.getEntries()
     if (entries.length === 0) {
+      lastCheckedAt = null
       return
     }
     const now = Date.now()
     let nextExpiryAt = Number.POSITIVE_INFINITY
+    let crossedCompletionDeadline = false
     // Why: skip entries already past the stale boundary — they each contribute
     // exactly one epoch bump at crossing, and rescheduling on them would spin
     // the timer forever because the bump doesn't clear them from the map
@@ -47,9 +51,29 @@ export function createFreshnessScheduler(deps: FreshnessSchedulerDeps): Freshnes
     // freshness-aware selectors can decay them immediately on that render.
     for (const entry of entries) {
       const expiryAt = entry.updatedAt + AGENT_STATUS_STALE_AFTER_MS
-      if (expiryAt > now) {
+      if (expiryAt >= now) {
         nextExpiryAt = Math.min(nextExpiryAt, expiryAt)
       }
+      // Completion and hook freshness have independent expiry times.
+      const completedAt = agentEntryCompletionAt(entry)
+      if (completedAt !== null) {
+        const completionExpiryAt = completedAt + AGENT_STATUS_STALE_AFTER_MS
+        // Detect a missed completion expiry before a same-state update extends hook freshness.
+        if (
+          lastCheckedAt !== null &&
+          completionExpiryAt >= lastCheckedAt &&
+          completionExpiryAt < now
+        ) {
+          crossedCompletionDeadline = true
+        }
+        if (completionExpiryAt >= now) {
+          nextExpiryAt = Math.min(nextExpiryAt, completionExpiryAt)
+        }
+      }
+    }
+    lastCheckedAt = now
+    if (crossedCompletionDeadline) {
+      deps.bumpEpochs()
     }
     if (!Number.isFinite(nextExpiryAt)) {
       return
@@ -62,6 +86,7 @@ export function createFreshnessScheduler(deps: FreshnessSchedulerDeps): Freshnes
     timer = setTimeout(() => {
       timer = null
       deps.bumpEpochs()
+      lastCheckedAt = Date.now()
       schedule()
     }, delayMs)
   }
diff --git a/src/renderer/src/store/slices/agent-status.test.ts b/src/renderer/src/store/slices/agent-status.test.ts
index 6965ca8bbb2..d937c3af53b 100644
--- a/src/renderer/src/store/slices/agent-status.test.ts
+++ b/src/renderer/src/store/slices/agent-status.test.ts
@@ -805,6 +805,29 @@ describe('agent status tool + assistant fields', () => {
     expect(store.getState().sortEpoch).toBe(firstSortEpoch)
   })
 
+  it('bumps sort epoch when a same-state done update changes completion eligibility', () => {
+    vi.useFakeTimers()
+    const store = createTestStore()
+    store
+      .getState()
+      .setAgentStatus(
+        'tab-1:1',
+        { state: 'done', prompt: 'p1', agentType: 'claude', interrupted: true },
+        'claude',
+        { updatedAt: 1_000, stateStartedAt: 1_000 }
+      )
+    const firstSortEpoch = store.getState().sortEpoch
+
+    store
+      .getState()
+      .setAgentStatus('tab-1:1', { state: 'done', prompt: 'p1', agentType: 'claude' }, 'claude', {
+        updatedAt: 2_000,
+        stateStartedAt: 1_000
+      })
+
+    expect(store.getState().sortEpoch).toBe(firstSortEpoch + 1)
+  })
+
   it('bumps global epochs when a stale same-state entry refreshes', () => {
     vi.useFakeTimers()
     const store = createTestStore()
diff --git a/src/renderer/src/store/slices/agent-status.ts b/src/renderer/src/store/slices/agent-status.ts
index 271ab70829a..0f1ebf66e08 100644
--- a/src/renderer/src/store/slices/agent-status.ts
+++ b/src/renderer/src/store/slices/agent-status.ts
@@ -26,6 +26,7 @@ import {
   shouldSuppressInheritedTerminalStatus
 } from '../../../../shared/agent-status-identity'
 import { isCommandCodeNewTurnWhileWorking } from '../../../../shared/command-code-turn-boundary'
+import { agentEntryCompletionAt } from '../../../../shared/agent-completion-time'
 import type { TerminalPaneLayoutNode, TerminalTab } from '../../../../shared/types'
 import {
   getRepoExecutionHostId,
@@ -46,6 +47,7 @@ import {
   transferAgentPaneAuthorityAlias
 } from './agent-pane-authority'
 import { createFreshnessScheduler } from './agent-status-freshness-scheduler'
+import type { GeneratedTabTitleUpdate } from './terminal-tab-title-batch'
 
 /** Snapshot of a finished/vanished agent status entry, kept so the dashboard and sidebar hover
  *  keep showing the completion until the user clicks the worktree. `worktreeId` is stamped at
@@ -106,6 +108,65 @@ type AgentLaunchConfigRegistryEntry = {
   identity: AgentLaunchConfigRegistrationMetadata
 }
 
+export type AgentStatusPayload = ParsedAgentStatusPayload & {
+  orchestration?: AgentStatusOrchestrationContext
+  promptInteractionKey?: string
+  restoredUnconfirmed?: boolean
+}
+
+export type AgentStatusTiming = { updatedAt?: number; stateStartedAt?: number }
+
+export type AgentStatusRouting = {
+  tabId?: string
+  worktreeId?: string
+  terminalHandle?: string
+  connectionId?: string | null
+}
+
+export type AgentStatusMetadata = {
+  providerSession?: AgentProviderSessionMetadata
+  launchConfig?: SleepingAgentLaunchConfig
+  launchToken?: string
+}
+
+export type AgentStatusUpdate = {
+  kind?: 'status'
+  paneKey: string
+  payload: AgentStatusPayload
+  terminalTitle?: string
+  timing?: AgentStatusTiming
+  routing?: AgentStatusRouting
+  metadata?: AgentStatusMetadata
+}
+
+export type AgentProviderSessionTiming = { updatedAt?: number }
+
+export type AgentProviderSessionRouting = {
+  tabId?: string
+  worktreeId?: string
+  connectionId?: string | null
+}
+
+export type AgentProviderSessionRecordMetadata = { launchToken?: string }
+
+export type AgentProviderSessionUpdate = {
+  kind: 'providerSession'
+  paneKey: string
+  agent: ResumableTuiAgent
+  providerSession: AgentProviderSessionMetadata
+  timing?: AgentProviderSessionTiming
+  routing?: AgentProviderSessionRouting
+  metadata?: AgentProviderSessionRecordMetadata
+}
+
+export type AgentStatusBatchUpdate = AgentStatusUpdate | AgentProviderSessionUpdate
+
+export type AgentStatusBatchTransaction = {
+  getState: () => AppState
+  apply: (update: AgentStatusBatchUpdate) => boolean
+  afterCommit: (effect: () => void) => void
+}
+
 export type AgentStatusSlice = {
   /** Explicit agent status entries keyed by `${tabId}:${leafId}`; real-time only, not persisted. */
   agentStatusByPaneKey: Record<string, AgentStatusEntry>
@@ -152,34 +213,30 @@ export type AgentStatusSlice = {
   /** Update or insert an agent status entry from a status payload. */
   setAgentStatus: (
     paneKey: string,
-    payload: ParsedAgentStatusPayload & {
-      orchestration?: AgentStatusOrchestrationContext
-      promptInteractionKey?: string
-      restoredUnconfirmed?: boolean
-    },
+    payload: AgentStatusPayload,
     terminalTitle?: string,
-    timing?: { updatedAt?: number; stateStartedAt?: number },
-    routing?: {
-      tabId?: string
-      worktreeId?: string
-      terminalHandle?: string
-      connectionId?: string | null
-    },
-    metadata?: {
-      providerSession?: AgentProviderSessionMetadata
-      launchConfig?: SleepingAgentLaunchConfig
-      launchToken?: string
-    }
+    timing?: AgentStatusTiming,
+    routing?: AgentStatusRouting,
+    metadata?: AgentStatusMetadata
   ) => void
 
+  /** Apply ordered status updates as one status publication (generated titles and tab
+   *  titles still publish after it — three total, not 2N). */
+  setAgentStatuses: (updates: readonly AgentStatusBatchUpdate[]) => boolean[]
+
+  /** Fold caller-derived updates against exact staged state, committing one status publication. */
+  transactAgentStatuses: <Result>(
+    operation: (transaction: AgentStatusBatchTransaction) => Result
+  ) => Result
+
   /** Record resume identity without creating a visible turn-status row. */
   recordAgentProviderSession: (
     paneKey: string,
     agent: ResumableTuiAgent,
     providerSession: AgentProviderSessionMetadata,
-    timing?: { updatedAt?: number },
-    routing?: { tabId?: string; worktreeId?: string; connectionId?: string | null },
-    metadata?: { launchToken?: string }
+    timing?: AgentProviderSessionTiming,
+    routing?: AgentProviderSessionRouting,
+    metadata?: AgentProviderSessionRecordMetadata
   ) => void
 
   registerAgentLaunchConfig: (
@@ -1211,10 +1268,143 @@ function collectWorktreeIdsForConnection(state: AppState, connectionId: string):
   return onConnection
 }
 
+/** Slices that only the fold touched, so the batch commits as a MERGE.
+ *  Why: the fold runs against a snapshot taken at transaction start. Committing that
+ *  snapshot wholesale (zustand REPLACE) would silently revert any write that landed on
+ *  the real store meanwhile — and it can, because a batched action reaching another
+ *  slice's setter through `get()` bypasses the shadowed `set` entirely
+ *  (setRuntimeAgentOrchestrationByPaneKey → setGeneratedTabTitleFromAgentPrompt does this).
+ *  A merge keeps the single publication while confining conflicts to keys this fold wrote. */
+function buildAgentStatusBatchPatch(
+  initialState: AppState,
+  nextState: AppState
+): Partial<AppState> {
+  const patch: Record<string, unknown> = {}
+  for (const key of Object.keys(nextState) as (keyof AppState)[]) {
+    if (!Object.is(nextState[key], initialState[key])) {
+      patch[key as string] = nextState[key]
+    }
+  }
+  return patch as Partial<AppState>
+}
+
 export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusSlice> = (
-  set,
-  get
+  storeSet,
+  storeGet
 ) => {
+  type AgentStatusStateUpdate =
+    | AppState
+    | Partial<AppState>
+    | ((state: AppState) => AppState | Partial<AppState>)
+
+  let batchedAgentStatusState: AppState | null = null
+  let batchedAgentStatusEffects: (() => void)[] | null = null
+  let batchedGeneratedTabTitleUpdates: GeneratedTabTitleUpdate[] | null = null
+  let batchedAgentStatusFreshnessRequested = false
+  const get = (): AppState => batchedAgentStatusState ?? storeGet()
+  // Deliberately narrower than zustand's `set`: no `replace` parameter, so no call site in
+  // this slice can compile into a REPLACE the batch commit is unable to express.
+  const set = (update: AgentStatusStateUpdate): void => {
+    if (batchedAgentStatusState === null) {
+      storeSet(update, false)
+      return
+    }
+    const nextState = typeof update === 'function' ? update(batchedAgentStatusState) : update
+    if (Object.is(nextState, batchedAgentStatusState)) {
+      return
+    }
+    batchedAgentStatusState = Object.assign({}, batchedAgentStatusState, nextState)
+  }
+  const runAfterAgentStatusCommit = (effect: () => void): void => {
+    if (batchedAgentStatusEffects) {
+      batchedAgentStatusEffects.push(effect)
+      return
+    }
+    effect()
+  }
+  const applyGeneratedTabTitleUpdate = (update: GeneratedTabTitleUpdate): void => {
+    if (batchedGeneratedTabTitleUpdates) {
+      batchedGeneratedTabTitleUpdates.push(update)
+      return
+    }
+    if (update.options) {
+      get().setGeneratedTabTitleFromAgentPrompt(update.paneKey, update.prompt, update.options)
+    } else {
+      get().setGeneratedTabTitleFromAgentPrompt(update.paneKey, update.prompt)
+    }
+  }
+  const applyBatchedAgentStatusUpdate = (update: AgentStatusBatchUpdate): boolean => {
+    const stateBeforeUpdate = batchedAgentStatusState
+    if (!stateBeforeUpdate) {
+      return false
+    }
+    if (update.kind === 'providerSession') {
+      get().recordAgentProviderSession(
+        update.paneKey,
+        update.agent,
+        update.providerSession,
+        update.timing,
+        update.routing,
+        update.metadata
+      )
+    } else {
+      get().setAgentStatus(
+        update.paneKey,
+        update.payload,
+        update.terminalTitle,
+        update.timing,
+        update.routing,
+        update.metadata
+      )
+    }
+    return batchedAgentStatusState !== stateBeforeUpdate
+  }
+  const batchTransaction: AgentStatusBatchTransaction = {
+    getState: get,
+    apply: applyBatchedAgentStatusUpdate,
+    afterCommit: runAfterAgentStatusCommit
+  }
+  const transactAgentStatuses = <Result>(
+    operation: (transaction: AgentStatusBatchTransaction) => Result
+  ): Result => {
+    if (batchedAgentStatusState) {
+      return operation(batchTransaction)
+    }
+    const initialState = storeGet()
+    batchedAgentStatusState = initialState
+    batchedAgentStatusEffects = []
+    batchedGeneratedTabTitleUpdates = []
+    try {
+      const result = operation(batchTransaction)
+      const nextState = batchedAgentStatusState
+      const effects = batchedAgentStatusEffects
+      const generatedTabTitleUpdates = batchedGeneratedTabTitleUpdates
+      const freshnessRequested = batchedAgentStatusFreshnessRequested
+      batchedAgentStatusState = null
+      batchedAgentStatusEffects = null
+      batchedGeneratedTabTitleUpdates = null
+      batchedAgentStatusFreshnessRequested = false
+      if (nextState !== initialState) {
+        storeSet(buildAgentStatusBatchPatch(initialState, nextState), false)
+      }
+      if (generatedTabTitleUpdates.length > 0) {
+        storeGet().setGeneratedTabTitlesFromAgentPrompts(generatedTabTitleUpdates)
+      }
+      if (freshnessRequested) {
+        queueMicrotask(() => freshness.schedule())
+      }
+      for (const effect of effects) {
+        effect()
+      }
+      return result
+    } finally {
+      batchedAgentStatusState = null
+      batchedAgentStatusEffects = null
+      batchedGeneratedTabTitleUpdates = null
+      batchedAgentStatusFreshnessRequested = false
+    }
+  }
+
   // Why: scheduler is process-lifetime-scoped (no dispose) because the store is a
   // module-level singleton with no teardown lifecycle anywhere in the codebase.
   const freshness = createFreshnessScheduler({
@@ -1228,6 +1418,13 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
       }))
     }
   })
+  const requestAgentStatusFreshness = (acceptedInBatch: boolean): void => {
+    if (batchedAgentStatusState !== null) {
+      batchedAgentStatusFreshnessRequested ||= acceptedInBatch
+      return
+    }
+    queueMicrotask(() => freshness.schedule())
+  }
 
   const clearSleepingAgentSessionsByPaneKey = (paneKeys: readonly string[]): void => {
     if (paneKeys.length === 0) {
@@ -1706,7 +1903,7 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
         }
       })
       if (removedLiveStatus) {
-        queueMicrotask(() => freshness.schedule())
+        requestAgentStatusFreshness(true)
       }
     },
 
@@ -1745,6 +1942,10 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
         // must push that completion into history, or the finished timestamp and unread badge
         // lose the turn the moment the flag overwrites the live entry.
         let history: AgentStateHistoryEntry[] = existing?.stateHistory ?? []
+        // Why: a batched burst can fold a whole done→working turn into one publication, so a
+        // completion-reactive subscriber never sees `lastAssistantMessage` while state is `done`.
+        // One slot per entry, not one per history row — 20 transcripts per live status OOMs (#9872).
+        let lastCompletedAssistantMessage = existing?.lastCompletedAssistantMessage
         const boundaryLandsOnRealDone =
           existing?.state === 'done' &&
           existing.sessionBoundary !== true &&
@@ -1769,6 +1970,11 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
           if (history.length > AGENT_STATE_HISTORY_MAX) {
             history = history.slice(history.length - AGENT_STATE_HISTORY_MAX)
           }
+          if (existing.state === 'done') {
+            // The push above just moved this completion out of the live entry; a done that
+            // carried no message must clear the slot, or a stale prior turn leaks forward.
+            lastCompletedAssistantMessage = existing.lastAssistantMessage
+          }
         }
 
         const identity = resolveAgentStatusIdentity({
@@ -1933,6 +2139,7 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
           // card; parseAgentStatusPayload clears it on tool/state change.
           interactivePrompt: payload.interactivePrompt,
           lastAssistantMessage: payload.lastAssistantMessage,
+          ...(lastCompletedAssistantMessage ? { lastCompletedAssistantMessage } : {}),
           // Why: reused panes can start non-orchestrated work; only final done rows keep the
           // previous lineage fallback so completed children stay grouped.
           orchestration,
@@ -1982,13 +2189,18 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
           !!existing &&
           existing.state === payload.state &&
           entry.stateStartedAt !== existing.stateStartedAt
+        const sameStateDoneAttentionChanged =
+          existing?.state === 'done' &&
+          entry.state === 'done' &&
+          agentEntryCompletionAt(existing) !== agentEntryCompletionAt(entry)
         const sortRelevantChange =
           !existing ||
           existing.state !== payload.state ||
           !wasFresh ||
           attributionChanged ||
           commandCodeNewTurn ||
-          sameStateStateStartedAtChanged
+          sameStateStateStartedAtChanged ||
+          sameStateDoneAttentionChanged
         const doneRetentionFieldsChanged =
           existing?.state === 'done' &&
           entry.state === 'done' &&
@@ -2157,15 +2369,19 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
             ? getAgentRowGeneratedTitleText(entryForGeneratedTitle)
             : entryForGeneratedTitle.prompt
         if (shouldReplaceGeneratedTitle) {
-          get().setGeneratedTabTitleFromAgentPrompt(paneKey, generatedTitlePrompt, {
-            replaceExistingGeneratedTitle: true
+          applyGeneratedTabTitleUpdate({
+            paneKey,
+            prompt: generatedTitlePrompt,
+            options: {
+              replaceExistingGeneratedTitle: true
+            }
           })
         } else {
-          get().setGeneratedTabTitleFromAgentPrompt(paneKey, generatedTitlePrompt)
+          applyGeneratedTabTitleUpdate({ paneKey, prompt: generatedTitlePrompt })
         }
       }
-      // Why: schedule via queueMicrotask after set so the timer reads the updated map without re-entering the store during set.
-      queueMicrotask(() => freshness.schedule())
+      // Why: batches coalesce accepted updates; standalone calls keep their existing deferred scheduling.
+      requestAgentStatusFreshness(generatedTitleEntry.current !== null)
       if (completionRefreshWorktreeId) {
         const worktreeId = completionRefreshWorktreeId
         // Why: agents can create a PR via `gh pr create`, bypassing Orca's flow and leaving a stale "no PR" cache entry in place.
@@ -2173,6 +2389,13 @@ export const createAgentStatusSlice: StateCreator<AppState, [], [], AgentStatusS
       }
     },
 
+    setAgentStatuses: (updates) =>
+      updates.length === 0
+        ? []
+        : transactAgentStatuses((transaction) => updates.map(transaction.apply)),
+
+    transactAgentStatuses,
+
     setMigrationUnsupportedPty: (entry) => {
       set((s) => {
         const existing = s.migrationUnsupportedByPtyId[entry.ptyId]
diff --git a/src/renderer/src/store/slices/browser.test.ts b/src/renderer/src/store/slices/browser.test.ts
index c760b37a655..5239a5537ab 100644
--- a/src/renderer/src/store/slices/browser.test.ts
+++ b/src/renderer/src/store/slices/browser.test.ts
@@ -1,5 +1,5 @@
 /* eslint-disable max-lines -- Why: browser slice behavior shares one mocked store harness; splitting only the tests would duplicate more setup than it saves. */
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { create } from 'zustand'
 import { createBrowserSlice, isLocalBrowserPageOwner } from './browser'
 import type { AppState } from '../types'
@@ -10,6 +10,7 @@ import {
 import { GRAB_BUDGET, type BrowserPageAnnotation } from '../../../../shared/browser-grab-types'
 import { clearRuntimeCompatibilityCacheForTests } from '../../runtime/runtime-rpc-client'
 import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
+import { getExecutionHostLabel } from '../../../../shared/execution-host'
 
 const createWebRuntimeSessionBrowserTabMock = vi.hoisted(() => vi.fn())
 const runtimeEnvironmentCall = vi.fn()
@@ -66,6 +67,18 @@ function settingsWithRuntime(id: string): AppState['settings'] {
   return { activeRuntimeEnvironmentId: id } as AppState['settings']
 }
 
+function runtimeStatuses(capabilities: string[]): AppState['runtimeStatusByEnvironmentId'] {
+  return new Map([
+    [
+      'env-1',
+      {
+        status: { capabilities },
+        checkedAt: 1
+      }
+    ]
+  ]) as AppState['runtimeStatusByEnvironmentId']
+}
+
 function seedUnifiedBrowserTab(
   store: ReturnType<typeof createTestStore>,
   entityId: string,
@@ -164,6 +177,21 @@ describe('createBrowserSlice annotations', () => {
     expect(store.getState().recordFeatureInteraction).toHaveBeenCalledWith('browser-tab-created')
   })
 
+  it('opens a local sign-in tab with the imported browser profile', async () => {
+    const store = createTestStore()
+
+    await expect(
+      store
+        .getState()
+        .openBrowserProfileTabInActiveWorkspace('https://accounts.google.com/', 'profile-1')
+    ).resolves.toBe(true)
+
+    expect(store.getState().browserTabsByWorktree['wt-1']?.[0]).toMatchObject({
+      url: 'https://accounts.google.com/',
+      sessionProfileId: 'profile-1'
+    })
+  })
+
   it('clears page annotations when the browser page URL changes', () => {
     const store = createTestStore()
     const tab = store.getState().createBrowserTab('wt-1', 'https://example.com')
@@ -533,6 +561,35 @@ describe('createBrowserSlice runtime guard', () => {
     runtimeEnvironmentCall.mockResolvedValue({ id: 'rpc-1', ok: true, result: {} })
   })
 
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  it('rejects direct client-local materialization in the web client', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const store = createTestStore()
+
+    expect(() => store.getState().createBrowserTab('wt-1', 'about:blank')).toThrow(
+      'must be created by a capable paired runtime'
+    )
+    expect(store.getState().browserTabsByWorktree['wt-1']).toBeUndefined()
+    expect(store.getState().createUnifiedTab).not.toHaveBeenCalled()
+  })
+
+  it('rejects direct remote materialization without the provider capability', () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const store = createTestStore()
+    store.setState({ runtimeStatusByEnvironmentId: runtimeStatuses([]) })
+
+    expect(() =>
+      store.getState().createBrowserTab('wt-1', 'about:blank', {
+        browserRuntimeEnvironmentId: 'env-1'
+      })
+    ).toThrow('paired runtime does not support browser streaming')
+    expect(store.getState().browserTabsByWorktree['wt-1']).toBeUndefined()
+    expect(store.getState().createUnifiedTab).not.toHaveBeenCalled()
+  })
+
   it('fetches browser profiles from the active runtime environment', async () => {
     const store = createTestStore()
     runtimeEnvironmentCall.mockResolvedValueOnce({
@@ -786,7 +843,10 @@ describe('createBrowserSlice runtime guard', () => {
       })
     })
     const store = createTestStore()
-    store.setState({ browserSessionHostIdOverride: 'runtime:windows-2' })
+    store.setState({
+      browserSessionHostIdOverride: 'runtime:windows-2',
+      runtimeEnvironments: [{ id: 'windows-2', name: 'Windows Server' }] as never
+    })
 
     const importing = store
       .getState()
@@ -805,7 +865,12 @@ describe('createBrowserSlice runtime guard', () => {
       _meta: { runtimeId: 'runtime-windows' }
     })
 
-    await expect(importing).resolves.toMatchObject({ ok: true, profileId: 'windows-profile' })
+    await expect(importing).resolves.toMatchObject({
+      ok: true,
+      profileId: 'windows-profile',
+      executionHostId: 'runtime:windows-2',
+      executionHostLabel: 'Windows Server'
+    })
     expect(store.getState().browserSessionHostIdOverride).toBe('runtime:linux-3')
     expect(store.getState().browserSessionImportState).toBeNull()
     expect(runtimeEnvironmentCall.mock.calls).toHaveLength(callsBeforeCompletion)
@@ -941,6 +1006,7 @@ describe('createBrowserSlice runtime guard', () => {
     store.setState({
       activeWorktreeId: 'wt-remote',
       settings: { activeRuntimeEnvironmentId: null } as AppState['settings'],
+      runtimeStatusByEnvironmentId: runtimeStatuses(['browser.screencast.v1']),
       browserDefaultUrl: 'about:blank',
       repos: [
         {
@@ -991,15 +1057,12 @@ describe('createBrowserSlice runtime guard', () => {
     expect(store.getState().recordFeatureInteraction).toHaveBeenCalledWith('browser-tab-created')
   })
 
-  it('does not create a local fallback tab when remote browser creation fails', async () => {
+  it('uses the desktop client browser when a remote npm host cannot stream', async () => {
     const store = createTestStore()
-    // Why: a remote-owned workspace must stay remote-owned. If the remote host
-    // cannot create the page, we must NOT silently open a local desktop tab —
-    // that produces confusing split ownership (issue #5321 UX requirement).
-    createWebRuntimeSessionBrowserTabMock.mockResolvedValueOnce(false)
     store.setState({
       activeWorktreeId: 'wt-remote',
-      settings: { activeRuntimeEnvironmentId: 'env-1' } as AppState['settings'],
+      settings: settingsWithRuntime('env-1'),
+      runtimeStatusByEnvironmentId: runtimeStatuses([]),
       worktreesByRepo: {
         'repo-1': [
           {
@@ -1014,6 +1077,39 @@ describe('createBrowserSlice runtime guard', () => {
 
     await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
 
+    expect(createWebRuntimeSessionBrowserTabMock).not.toHaveBeenCalled()
+    const tab = store.getState().browserTabsByWorktree['wt-remote']?.[0]
+    const page = tab ? store.getState().browserPagesByWorkspace[tab.id]?.[0] : undefined
+    expect(page?.browserRuntimeEnvironmentId).toBeNull()
+    expect(store.getState().createUnifiedTab).toHaveBeenCalled()
+  })
+
+  it('does not create a local fallback tab when remote browser creation fails', async () => {
+    const store = createTestStore()
+    // Why: a remote-owned workspace must stay remote-owned. If the remote host
+    // cannot create the page, we must NOT silently open a local desktop tab —
+    // that produces confusing split ownership (issue #5321 UX requirement).
+    createWebRuntimeSessionBrowserTabMock.mockResolvedValueOnce(false)
+    store.setState({
+      activeWorktreeId: 'wt-remote',
+      settings: { activeRuntimeEnvironmentId: 'env-1' } as AppState['settings'],
+      runtimeStatusByEnvironmentId: runtimeStatuses(['browser.screencast.v1']),
+      worktreesByRepo: {
+        'repo-1': [
+          {
+            id: 'wt-remote',
+            repoId: 'repo-1',
+            hostId: 'local',
+            runtimeOwnerEnvironmentId: 'env-1'
+          } as never
+        ]
+      }
+    })
+
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      'The paired runtime could not create a managed browser tab.'
+    )
+
     expect(createWebRuntimeSessionBrowserTabMock).toHaveBeenCalledWith({
       worktreeId: 'wt-remote',
       environmentId: 'env-1',
@@ -1028,12 +1124,12 @@ describe('createBrowserSlice runtime guard', () => {
     )
   })
 
-  it('does not create a local fallback tab when remote browser creation throws', async () => {
+  it('opens a remote sign-in tab with the imported browser profile', async () => {
     const store = createTestStore()
-    createWebRuntimeSessionBrowserTabMock.mockRejectedValueOnce(new Error('remote down'))
     store.setState({
       activeWorktreeId: 'wt-remote',
       settings: { activeRuntimeEnvironmentId: 'env-1' } as AppState['settings'],
+      runtimeStatusByEnvironmentId: runtimeStatuses(['browser.screencast.v1']),
       worktreesByRepo: {
         'repo-1': [
           {
@@ -1046,7 +1142,103 @@ describe('createBrowserSlice runtime guard', () => {
       }
     })
 
-    await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
+    await expect(
+      store
+        .getState()
+        .openBrowserProfileTabInActiveWorkspace('https://accounts.google.com/', 'profile-1')
+    ).resolves.toBe(true)
+
+    expect(createWebRuntimeSessionBrowserTabMock).toHaveBeenCalledWith({
+      worktreeId: 'wt-remote',
+      environmentId: 'env-1',
+      url: 'https://accounts.google.com/',
+      profileId: 'profile-1'
+    })
+    expect(store.getState().browserTabsByWorktree['wt-remote']).toBeUndefined()
+  })
+
+  it('opens a local desktop sign-in tab when the remote host cannot stream browsers', async () => {
+    const store = createTestStore()
+    store.setState({
+      activeWorktreeId: 'wt-remote',
+      settings: settingsWithRuntime('env-1'),
+      runtimeStatusByEnvironmentId: runtimeStatuses([]),
+      worktreesByRepo: {
+        'repo-1': [
+          {
+            id: 'wt-remote',
+            repoId: 'repo-1',
+            hostId: 'local',
+            runtimeOwnerEnvironmentId: 'env-1'
+          } as never
+        ]
+      }
+    })
+
+    await expect(
+      store
+        .getState()
+        .openBrowserProfileTabInActiveWorkspace('https://accounts.google.com/', 'profile-1')
+    ).resolves.toBe(true)
+
+    expect(createWebRuntimeSessionBrowserTabMock).not.toHaveBeenCalled()
+    expect(store.getState().browserTabsByWorktree['wt-remote']?.[0]).toMatchObject({
+      url: 'https://accounts.google.com/',
+      sessionProfileId: 'profile-1'
+    })
+  })
+
+  it('rejects a paired-web sign-in tab when the remote host cannot stream browsers', async () => {
+    vi.stubGlobal('__ORCA_WEB_CLIENT__', true)
+    const store = createTestStore()
+    store.setState({
+      activeWorktreeId: 'wt-remote',
+      settings: settingsWithRuntime('env-1'),
+      runtimeStatusByEnvironmentId: runtimeStatuses([]),
+      worktreesByRepo: {
+        'repo-1': [
+          {
+            id: 'wt-remote',
+            repoId: 'repo-1',
+            hostId: 'local',
+            runtimeOwnerEnvironmentId: 'env-1'
+          } as never
+        ]
+      }
+    })
+
+    await expect(
+      store
+        .getState()
+        .openBrowserProfileTabInActiveWorkspace('https://accounts.google.com/', 'profile-1')
+    ).resolves.toBe(false)
+
+    expect(createWebRuntimeSessionBrowserTabMock).not.toHaveBeenCalled()
+    expect(store.getState().browserTabsByWorktree['wt-remote']).toBeUndefined()
+  })
+
+  it('does not create a local fallback tab when remote browser creation throws', async () => {
+    const store = createTestStore()
+    createWebRuntimeSessionBrowserTabMock.mockRejectedValueOnce(new Error('remote down'))
+    store.setState({
+      activeWorktreeId: 'wt-remote',
+      settings: { activeRuntimeEnvironmentId: 'env-1' } as AppState['settings'],
+      runtimeStatusByEnvironmentId: runtimeStatuses(['browser.screencast.v1']),
+      worktreesByRepo: {
+        'repo-1': [
+          {
+            id: 'wt-remote',
+            repoId: 'repo-1',
+            hostId: 'local',
+            runtimeOwnerEnvironmentId: 'env-1'
+          } as never
+        ]
+      }
+    })
+
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      'remote down'
+    )
 
     expect(store.getState().browserTabsByWorktree['wt-remote']).toBeUndefined()
     expect(store.getState().createUnifiedTab).not.toHaveBeenCalled()
@@ -1059,13 +1251,51 @@ describe('createBrowserSlice runtime guard', () => {
     const result = await store.getState().importCookiesToProfile('default')
 
     expect(mockApi.browser.sessionImportCookies).not.toHaveBeenCalled()
-    expect(result.ok).toBe(false)
+    expect(result).toMatchObject({
+      ok: false,
+      executionHostId: 'runtime:env-1',
+      executionHostLabel: 'env-1'
+    })
     expect(store.getState().browserSessionImportState).toMatchObject({
       profileId: 'default',
       status: 'error'
     })
   })
 
+  it('retains the host display label used by browser settings', async () => {
+    const store = createTestStore()
+    store.setState({
+      settings: {
+        ...settingsWithRuntime('env-1')!,
+        hostSettingOverrides: {
+          'runtime:env-1': { displayLabel: 'Production Browser Host' }
+        }
+      },
+      runtimeEnvironments: [{ id: 'env-1', name: 'Remote Mac' }] as never
+    })
+
+    const result = await store.getState().importCookiesToProfile('default')
+
+    expect(result.executionHostLabel).toBe('Production Browser Host')
+  })
+
+  it('retains the local execution host for a successful browser import', async () => {
+    mockApi.browser.sessionImportFromBrowser.mockResolvedValueOnce({
+      ok: true,
+      profileId: 'default',
+      summary: { totalCookies: 2, importedCookies: 2, skippedCookies: 0, domains: [] }
+    })
+    const store = createTestStore()
+
+    const result = await store.getState().importCookiesFromBrowser('default', 'chrome', 'Default')
+
+    expect(result).toMatchObject({
+      ok: true,
+      executionHostId: 'local',
+      executionHostLabel: getExecutionHostLabel('local')
+    })
+  })
+
   it('uses local browser IPC when no runtime environment is active', async () => {
     const store = createTestStore()
     mockApi.browser.sessionListProfiles.mockResolvedValueOnce([
diff --git a/src/renderer/src/store/slices/browser.ts b/src/renderer/src/store/slices/browser.ts
index 78a7a31b358..6f3c739308a 100644
--- a/src/renderer/src/store/slices/browser.ts
+++ b/src/renderer/src/store/slices/browser.ts
@@ -44,12 +44,14 @@ import type {
 import { createBrowserUuid } from '@/lib/browser-uuid'
 import { translate } from '@/i18n/i18n'
 import {
+  getExecutionHostLabel,
   getSettingsFocusedExecutionHostId,
   LOCAL_EXECUTION_HOST_ID,
   parseExecutionHostId,
   toRuntimeExecutionHostId,
   type ExecutionHostId
 } from '../../../../shared/execution-host'
+import { getHostSettingOverride } from '../../../../shared/host-setting-overrides'
 import {
   getExecutionHostIdForWorktree,
   getRuntimeEnvironmentIdForWorktree
@@ -59,6 +61,10 @@ import {
   type WorkspaceSessionHydrationOptions
 } from '@/lib/workspace-session-hydration-keys'
 import { buildValidWorktreeIdsForSessionHydration } from './degraded-repo-worktree-validity'
+import {
+  assertManagedBrowserMaterializationAllowed,
+  getClientCreationActionPolicy
+} from '@/lib/client-creation-action-policy'
 
 type CreateBrowserTabOptions = {
   activate?: boolean
@@ -117,6 +123,19 @@ export type RemoteBrowserPageHandle = {
   remotePageId: string
 }
 
+export type BrowserCookieImportExecutionResult = BrowserCookieImportResult & {
+  executionHostId: ExecutionHostId
+  executionHostLabel: string
+}
+
+function retainCookieImportExecutionHost(
+  result: BrowserCookieImportResult,
+  executionHostId: ExecutionHostId,
+  executionHostLabel: string
+): BrowserCookieImportExecutionResult {
+  return { ...result, executionHostId, executionHostLabel }
+}
+
 export type BrowserSlice = {
   browserTabsByWorktree: Record<string, BrowserWorkspace[]>
   browserPagesByWorkspace: Record<string, BrowserPage[]>
@@ -135,6 +154,7 @@ export type BrowserSlice = {
     options?: CreateBrowserTabOptions
   ) => BrowserWorkspace
   openNewBrowserTabInActiveWorkspace: (groupId: string) => Promise<void>
+  openBrowserProfileTabInActiveWorkspace: (url: string, profileId: string) => Promise<boolean>
   closeBrowserTab: (tabId: string) => void
   shutdownWorktreeBrowsers: (worktreeId: string) => Promise<void>
   reopenClosedBrowserTab: (worktreeId: string) => BrowserWorkspace | null
@@ -200,7 +220,7 @@ export type BrowserSlice = {
     options?: BrowserSessionProfileCreateOptions
   ) => Promise<BrowserSessionProfile | null>
   deleteBrowserSessionProfile: (profileId: string) => Promise<boolean>
-  importCookiesToProfile: (profileId: string) => Promise<BrowserCookieImportResult>
+  importCookiesToProfile: (profileId: string) => Promise<BrowserCookieImportExecutionResult>
   clearBrowserSessionImportState: () => void
   detectedBrowsers: {
     family: string
@@ -214,7 +234,7 @@ export type BrowserSlice = {
     profileId: string,
     browserFamily: string,
     browserProfile?: string
-  ) => Promise<BrowserCookieImportResult>
+  ) => Promise<BrowserCookieImportExecutionResult>
   clearDefaultSessionCookies: () => Promise<boolean>
   browserUrlHistory: BrowserHistoryEntry[]
   addBrowserHistoryEntry: (url: string, title: string) => void
@@ -253,6 +273,23 @@ function getBrowserSettingsHostId(
   return state.browserSessionHostIdOverride ?? getSettingsFocusedExecutionHostId(state.settings)
 }
 
+function getBrowserSettingsHostLabel(state: AppState, hostId: ExecutionHostId): string {
+  const override = getHostSettingOverride(state.settings, hostId, 'displayLabel')
+  if (override) {
+    return override
+  }
+  const parsed = parseExecutionHostId(hostId)
+  if (parsed?.kind === 'runtime') {
+    const name = state.runtimeEnvironments
+      ?.find((environment) => environment.id === parsed.environmentId)
+      ?.name.trim()
+    if (name) {
+      return name
+    }
+  }
+  return getExecutionHostLabel(hostId)
+}
+
 function getBrowserSettingsRuntimeEnvironmentId(
   state: Pick<AppState, 'browserSessionHostIdOverride' | 'settings'>
 ): string | null {
@@ -560,6 +597,7 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
   },
 
   createBrowserTab: (worktreeId, url, options) => {
+    assertManagedBrowserMaterializationAllowed(get(), options?.browserRuntimeEnvironmentId)
     const workspaceId = createBrowserUuid()
     const page = buildBrowserPage(
       workspaceId,
@@ -675,9 +713,16 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
     if (!worktreeId) {
       return
     }
+    const browserAvailability = getClientCreationActionPolicy(state, worktreeId)['managed-browser']
+    if (browserAvailability.state !== 'enabled') {
+      throw new Error(browserAvailability.reason)
+    }
     const defaultUrl = state.browserDefaultUrl ?? 'about:blank'
     const runtimeEnvironmentId = getRuntimeEnvironmentIdForWorktree(state, worktreeId)
-    if (runtimeEnvironmentId) {
+    if (browserAvailability.provider === 'paired-runtime') {
+      if (!runtimeEnvironmentId) {
+        throw new Error('The paired runtime browser provider is unavailable.')
+      }
       const { createWebRuntimeSessionBrowserTab } = await import('@/runtime/web-runtime-session')
       try {
         const created = await createWebRuntimeSessionBrowserTab({
@@ -696,16 +741,57 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           '[browser] remote browser tab creation failed:',
           error instanceof Error ? error.message : String(error)
         )
+        throw error
       }
-      return
+      throw new Error('The paired runtime could not create a managed browser tab.')
     }
     get().createBrowserTab(worktreeId, defaultUrl, {
       title: translate('auto.store.slices.browser.d175274b6d', 'New Browser Tab'),
       focusAddressBar: true,
+      ...(runtimeEnvironmentId ? { browserRuntimeEnvironmentId: null } : {}),
       targetGroupId: groupId
     })
     get().recordFeatureInteraction('browser-tab-created')
   },
+
+  openBrowserProfileTabInActiveWorkspace: async (url, profileId) => {
+    const state = get()
+    const worktreeId = state.activeWorktreeId
+    if (!worktreeId) {
+      return false
+    }
+    const browserAvailability = getClientCreationActionPolicy(state, worktreeId)['managed-browser']
+    if (browserAvailability.state !== 'enabled') {
+      return false
+    }
+    const runtimeEnvironmentId = getRuntimeEnvironmentIdForWorktree(state, worktreeId)
+    if (browserAvailability.provider === 'paired-runtime') {
+      if (!runtimeEnvironmentId) {
+        return false
+      }
+      const { createWebRuntimeSessionBrowserTab } = await import('@/runtime/web-runtime-session')
+      try {
+        return await createWebRuntimeSessionBrowserTab({
+          worktreeId,
+          environmentId: runtimeEnvironmentId,
+          url,
+          profileId
+        })
+      } catch (error) {
+        console.warn(
+          '[browser] remote profile tab creation failed:',
+          error instanceof Error ? error.message : String(error)
+        )
+        return false
+      }
+    }
+    get().createBrowserTab(worktreeId, url, {
+      activate: true,
+      sessionProfileId: profileId,
+      ...(runtimeEnvironmentId ? { browserRuntimeEnvironmentId: null } : {})
+    })
+    return true
+  },
   closeBrowserTab: (tabId) => {
     let remotePagesToClose: { worktreeId: string; handle: RemoteBrowserPageHandle }[] = []
     set((s) => {
@@ -938,7 +1024,7 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
     if (activePageId) {
       const restoredPages = get().browserPagesByWorkspace[restored.id] ?? []
       const activePageIndex = pages.findIndex((orig) => orig.id === activePageId)
-      const targetPage = activePageIndex >= 0 ? restoredPages[activePageIndex] : null
+      const targetPage = activePageIndex !== -1 ? restoredPages[activePageIndex] : null
       if (targetPage && targetPage.id !== restoredPages[0]?.id) {
         get().setActiveBrowserPage(restored.id, targetPage.id)
       }
@@ -1955,8 +2041,10 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
   },
 
   importCookiesToProfile: async (profileId) => {
-    const hostId = getBrowserSettingsHostId(get())
-    if (getBrowserSettingsRuntimeEnvironmentId(get())) {
+    const initialState = get()
+    const hostId = getBrowserSettingsHostId(initialState)
+    const executionHostLabel = getBrowserSettingsHostLabel(initialState, hostId)
+    if (getBrowserSettingsRuntimeEnvironmentId(initialState)) {
       const reason = translate(
         'auto.store.slices.browser.remoteCookieImportUnavailable',
         'Manual cookie file import is unavailable while a remote runtime is active.'
@@ -1969,7 +2057,11 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           error: reason
         })
       )
-      return { ok: false as const, reason }
+      return retainCookieImportExecutionHost(
+        { ok: false as const, reason },
+        hostId,
+        executionHostLabel
+      )
     }
     set((state) =>
       browserImportStateForHostUpdate(state, hostId, {
@@ -2008,7 +2100,7 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           })
         )
       }
-      return result
+      return retainCookieImportExecutionHost(result, hostId, executionHostLabel)
     } catch (err) {
       const reason = String((err as Error)?.message ?? err)
       set((state) =>
@@ -2019,7 +2111,11 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           error: reason
         })
       )
-      return { ok: false as const, reason }
+      return retainCookieImportExecutionHost(
+        { ok: false as const, reason },
+        hostId,
+        executionHostLabel
+      )
     }
   },
 
@@ -2077,8 +2173,10 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
   },
 
   importCookiesFromBrowser: async (profileId, browserFamily, browserProfile?) => {
-    const hostId = getBrowserSettingsHostId(get())
-    const runtimeEnvironmentId = getBrowserSettingsRuntimeEnvironmentId(get())
+    const initialState = get()
+    const hostId = getBrowserSettingsHostId(initialState)
+    const executionHostLabel = getBrowserSettingsHostLabel(initialState, hostId)
+    const runtimeEnvironmentId = getBrowserSettingsRuntimeEnvironmentId(initialState)
     if (runtimeEnvironmentId) {
       set((state) =>
         browserImportStateForHostUpdate(state, hostId, {
@@ -2119,7 +2217,7 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
             })
           )
         }
-        return result
+        return retainCookieImportExecutionHost(result, hostId, executionHostLabel)
       } catch (err) {
         const reason = String((err as Error)?.message ?? err)
         set((state) =>
@@ -2130,7 +2228,11 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
             error: reason
           })
         )
-        return { ok: false as const, reason }
+        return retainCookieImportExecutionHost(
+          { ok: false as const, reason },
+          hostId,
+          executionHostLabel
+        )
       }
     }
     set((state) =>
@@ -2172,7 +2274,7 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           })
         )
       }
-      return result
+      return retainCookieImportExecutionHost(result, hostId, executionHostLabel)
     } catch (err) {
       const reason = String((err as Error)?.message ?? err)
       set((state) =>
@@ -2183,7 +2285,11 @@ export const createBrowserSlice: StateCreator<AppState, [], [], BrowserSlice> =
           error: reason
         })
       )
-      return { ok: false as const, reason }
+      return retainCookieImportExecutionHost(
+        { ok: false as const, reason },
+        hostId,
+        executionHostLabel
+      )
     }
   },
 
diff --git a/src/renderer/src/store/slices/cmd-j-create-actions.test.ts b/src/renderer/src/store/slices/cmd-j-create-actions.test.ts
index abf1904cc19..c8bf6abc690 100644
--- a/src/renderer/src/store/slices/cmd-j-create-actions.test.ts
+++ b/src/renderer/src/store/slices/cmd-j-create-actions.test.ts
@@ -3,6 +3,10 @@ import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
 import { folderWorkspaceKey } from '../../../../shared/workspace-scope'
 import type { AppState } from '../types'
 import { createTestStore, makeWorktree, seedStore, TEST_REPO } from './store-test-helpers'
+import {
+  FLOATING_BROWSER_UNAVAILABLE_MESSAGE,
+  MANAGED_BROWSER_UNAVAILABLE_MESSAGE
+} from '@/lib/client-creation-action-policy'
 
 const createWebRuntimeSessionBrowserTabMock = vi.hoisted(() => vi.fn())
 const createWebRuntimeSessionTerminalMock = vi.hoisted(() => vi.fn())
@@ -23,10 +27,19 @@ vi.mock('@/lib/web-client-location', () => ({
 
 const pairedWebFlag = globalThis as { __ORCA_WEB_CLIENT__?: boolean }
 
+function browserCapableRuntimeStatus(
+  environmentId: string
+): AppState['runtimeStatusByEnvironmentId'] {
+  return new Map([
+    [environmentId, { status: { capabilities: ['browser.screencast.v1'] }, checkedAt: 1 }]
+  ]) as AppState['runtimeStatusByEnvironmentId']
+}
+
 function seedActiveWorkspace(store: ReturnType<typeof createTestStore>): void {
   seedStore(store, {
     activeWorktreeId: 'wt-1',
     settings: { activeRuntimeEnvironmentId: 'runtime-1' } as AppState['settings'],
+    runtimeStatusByEnvironmentId: browserCapableRuntimeStatus('runtime-1'),
     worktreesByRepo: {
       [TEST_REPO.id]: [
         makeWorktree({
@@ -55,7 +68,7 @@ describe('Cmd+J lifted creation actions', () => {
     delete pairedWebFlag.__ORCA_WEB_CLIENT__
   })
 
-  it('does not fall back to a local browser tab when paired-web creation fails', async () => {
+  it('rejects without a local browser fallback when paired-web creation fails', async () => {
     // Why: a remote-owned workspace must stay remote-owned. If the remote host
     // cannot create the page, we must NOT silently open a local desktop tab —
     // that produces confusing split ownership (issue #5321). Mirrors the
@@ -64,7 +77,9 @@ describe('Cmd+J lifted creation actions', () => {
     const store = createTestStore()
     seedActiveWorkspace(store)
 
-    await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      'The paired runtime could not create a managed browser tab.'
+    )
 
     expect(createWebRuntimeSessionBrowserTabMock).toHaveBeenCalledWith({
       worktreeId: 'wt-1',
@@ -75,7 +90,7 @@ describe('Cmd+J lifted creation actions', () => {
     expect(store.getState().browserTabsByWorktree['wt-1'] ?? []).toEqual([])
   })
 
-  it('routes browser tab creation to the explicit owner runtime when another runtime is focused', async () => {
+  it('routes browser creation to the owner runtime without a local fallback', async () => {
     createWebRuntimeSessionBrowserTabMock.mockResolvedValue(false)
     const store = createTestStore()
     seedActiveWorkspace(store)
@@ -91,10 +106,13 @@ describe('Cmd+J lifted creation actions', () => {
           })
         ]
       },
-      settings: { activeRuntimeEnvironmentId: 'focused-runtime' } as AppState['settings']
+      settings: { activeRuntimeEnvironmentId: 'focused-runtime' } as AppState['settings'],
+      runtimeStatusByEnvironmentId: browserCapableRuntimeStatus('owner-runtime')
     })
 
-    await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      'The paired runtime could not create a managed browser tab.'
+    )
 
     expect(createWebRuntimeSessionBrowserTabMock).toHaveBeenCalledWith({
       worktreeId: 'wt-1',
@@ -106,7 +124,7 @@ describe('Cmd+J lifted creation actions', () => {
     expect(store.getState().browserTabsByWorktree['wt-1'] ?? []).toEqual([])
   })
 
-  it('creates a local browser tab for explicitly local workspaces while a runtime is focused', async () => {
+  it('rejects local browser tabs for explicitly local paired-web workspaces', async () => {
     createWebRuntimeSessionBrowserTabMock.mockResolvedValue(false)
     const store = createTestStore()
     seedActiveWorkspace(store)
@@ -118,13 +136,15 @@ describe('Cmd+J lifted creation actions', () => {
       settings: { activeRuntimeEnvironmentId: 'focused-runtime' } as AppState['settings']
     })
 
-    await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      MANAGED_BROWSER_UNAVAILABLE_MESSAGE
+    )
 
     expect(createWebRuntimeSessionBrowserTabMock).not.toHaveBeenCalled()
-    expect(store.getState().browserTabsByWorktree['wt-1'] ?? []).toHaveLength(1)
+    expect(store.getState().browserTabsByWorktree['wt-1'] ?? []).toEqual([])
   })
 
-  it('creates local browser and terminal tabs for the synthetic floating workspace while a runtime is focused', async () => {
+  it('rejects floating browsers while preserving floating terminal creation', async () => {
     createWebRuntimeSessionBrowserTabMock.mockResolvedValue(false)
     createWebRuntimeSessionTerminalMock.mockResolvedValue(false)
     const store = createTestStore()
@@ -144,14 +164,14 @@ describe('Cmd+J lifted creation actions', () => {
       activeGroupIdByWorktree: { [FLOATING_TERMINAL_WORKTREE_ID]: 'group-1' }
     })
 
-    await store.getState().openNewBrowserTabInActiveWorkspace('group-1')
+    await expect(store.getState().openNewBrowserTabInActiveWorkspace('group-1')).rejects.toThrow(
+      FLOATING_BROWSER_UNAVAILABLE_MESSAGE
+    )
     await store.getState().openNewTerminalTabInActiveWorkspace('group-1')
 
     expect(createWebRuntimeSessionBrowserTabMock).not.toHaveBeenCalled()
     expect(createWebRuntimeSessionTerminalMock).not.toHaveBeenCalled()
-    expect(
-      store.getState().browserTabsByWorktree[FLOATING_TERMINAL_WORKTREE_ID] ?? []
-    ).toHaveLength(1)
+    expect(store.getState().browserTabsByWorktree[FLOATING_TERMINAL_WORKTREE_ID] ?? []).toEqual([])
     expect(store.getState().tabsByWorktree[FLOATING_TERMINAL_WORKTREE_ID] ?? []).toHaveLength(1)
   })
 
diff --git a/src/renderer/src/store/slices/detected-agents.test.ts b/src/renderer/src/store/slices/detected-agents.test.ts
index c4776039e13..f85b5977960 100644
--- a/src/renderer/src/store/slices/detected-agents.test.ts
+++ b/src/renderer/src/store/slices/detected-agents.test.ts
@@ -12,6 +12,7 @@ import {
   RUNTIME_PROTOCOL_VERSION
 } from '../../../../shared/protocol-version'
 import { clearRuntimeCompatibilityCacheForTests } from '@/runtime/runtime-rpc-client'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
 
 const detectAgents = vi.fn()
 const refreshAgents = vi.fn()
@@ -139,6 +140,59 @@ describe('createDetectedAgentsSlice WSL context', () => {
     })
   })
 
+  it('publishes a Floating-first host probe to a later ordinary local caller', async () => {
+    let resolveDetection: (agents: string[]) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((resolve) => {
+        resolveDetection = resolve
+      })
+    )
+    const store = createTestStore()
+
+    const floating = store.getState().ensureDetectedAgents(FLOATING_TERMINAL_WORKTREE_ID)
+    const ordinary = store.getState().ensureDetectedAgents()
+
+    expect(detectAgents).toHaveBeenCalledTimes(1)
+    expect(store.getState().isDetectingAgents).toBe(true)
+    resolveDetection(['codex'])
+    await expect(Promise.all([floating, ordinary])).resolves.toEqual([['codex'], ['codex']])
+    expect(store.getState().detectedAgentIds).toEqual(['codex'])
+    expect(store.getState().isDetectingAgents).toBe(false)
+  })
+
+  it('restores the legacy inventory when returning to a cached local context', async () => {
+    detectAgents.mockImplementation(async (context) =>
+      context?.projectRuntime?.runtime.kind === 'wsl' ? ['claude'] : ['codex']
+    )
+    const store = createTestStore({
+      repos: [makeRepo({ id: 'repo-1', path: '\\\\wsl.localhost\\Ubuntu\\home\\alice\\repo' })],
+      activeRepoId: 'repo-1',
+      activeWorktreeId: null
+    })
+
+    await store.getState().ensureDetectedAgents()
+    store.setState({ activeRepoId: null })
+    await store.getState().ensureDetectedAgents()
+    store.setState({ activeRepoId: 'repo-1' })
+
+    await expect(store.getState().ensureDetectedAgents()).resolves.toEqual(['claude'])
+    expect(detectAgents).toHaveBeenCalledTimes(2)
+    expect(store.getState().detectedAgentIds).toEqual(['claude'])
+  })
+
+  it('retries a local context after a transient detection failure', async () => {
+    detectAgents
+      .mockRejectedValueOnce(new Error('cold-start timeout'))
+      .mockResolvedValueOnce(['codex'])
+    const store = createTestStore()
+
+    await expect(store.getState().ensureDetectedAgents()).resolves.toEqual([])
+    await expect(store.getState().ensureDetectedAgents()).resolves.toEqual(['codex'])
+
+    expect(detectAgents).toHaveBeenCalledTimes(2)
+    expect(store.getState().detectedAgentIds).toEqual(['codex'])
+  })
+
   it('refreshes local agents inside the active WSL repo distro when no worktree is selected', async () => {
     const store = createTestStore({
       repos: [makeRepo({ id: 'repo-1', path: '\\\\wsl$\\Debian\\home\\alice\\repo' })],
diff --git a/src/renderer/src/store/slices/detected-agents.ts b/src/renderer/src/store/slices/detected-agents.ts
index e3a4f4947a0..87e34b712ff 100644
--- a/src/renderer/src/store/slices/detected-agents.ts
+++ b/src/renderer/src/store/slices/detected-agents.ts
@@ -1,30 +1,10 @@
 import type { StateCreator } from 'zustand'
 import type { AppState } from '../types'
-import type { PathSource, ShellHydrationFailureReason, TuiAgent } from '../../../../shared/types'
-import {
-  getLocalAgentPreflightContext,
-  localPreflightContextKey
-} from '@/lib/local-preflight-context'
-
-export type DetectedAgentsSlice = {
-  detectedAgentIds: TuiAgent[] | null
-  isDetectingAgents: boolean
-  isRefreshingAgents: boolean
-  /** Telemetry classification of the most recent refreshAgents() run. `null`
-   *  before the first refresh resolves. Read by the wizard at agent-pick time
-   *  to attach `path_source` / `path_failure_reason` to `onboarding_agent_picked`
-   *  — see docs/agent-on-path-detection.md. */
-  pathSource: PathSource | null
-  pathFailureReason: ShellHydrationFailureReason | null
-  /** Runs `preflight.detectAgents` once per session. Subsequent callers reuse
-   *  the in-flight promise so every surface sees the same result. */
-  ensureDetectedAgents: (worktreeId?: string | null) => Promise<TuiAgent[]>
-  /** Re-runs `preflight.refreshAgents` (re-reads shell PATH). Concurrent callers
-   *  receive the same pending promise; store fields update once on resolve so
-   *  every subscribed surface re-renders in the same tick. */
-  refreshDetectedAgents: () => Promise<TuiAgent[]>
-  clearLocalDetectedAgents: () => void
+import type { TuiAgent } from '../../../../shared/types'
+import { createLocalDetectedAgentState } from './local-detected-agent-state'
+import type { LocalDetectedAgentState } from './local-detected-agent-store-state'
 
+export type DetectedAgentsSlice = LocalDetectedAgentState & {
   // Why: remote worktrees need per-connection agent detection. The local
   // detectedAgentIds field is connection-unaware, so remote state lives in a
   // separate map keyed by SSH connectionId.
@@ -41,10 +21,6 @@ export type DetectedAgentsSlice = {
 
 // Why: these are module-scoped (not in the store) so we can deduplicate
 // concurrent callers without storing a Promise in Zustand state.
-let detectPromise: { key: string; promise: Promise<TuiAgent[]> } | null = null
-let refreshPromise: { key: string; promise: Promise<TuiAgent[]> } | null = null
-let detectedContextKey: string | null = null
-let localDetectionGeneration = 0
 const remoteDetectPromises = new Map<string, Promise<TuiAgent[]>>()
 const remoteRefreshPromises = new Map<string, Promise<TuiAgent[]>>()
 
@@ -54,119 +30,10 @@ export function _getRemoteDetectPromiseCountForTest(): number {
 
 export const createDetectedAgentsSlice: StateCreator<AppState, [], [], DetectedAgentsSlice> = (
   set,
-  get
+  get,
+  store
 ) => ({
-  detectedAgentIds: null,
-  isDetectingAgents: false,
-  isRefreshingAgents: false,
-  pathSource: null,
-  pathFailureReason: null,
-
-  ensureDetectedAgents: (worktreeId) => {
-    const context = getLocalAgentPreflightContext(get(), undefined, undefined, worktreeId)
-    const contextKey = localPreflightContextKey(context)
-    const existing = get().detectedAgentIds
-    if (existing && detectedContextKey === contextKey) {
-      return Promise.resolve(existing)
-    }
-    if (detectPromise?.key === contextKey) {
-      return detectPromise.promise
-    }
-    const contextChanged = detectedContextKey !== contextKey
-    set({
-      detectedAgentIds: contextChanged ? null : get().detectedAgentIds,
-      isDetectingAgents: true
-    })
-    const requestGeneration = localDetectionGeneration
-    const pending = window.api.preflight
-      .detectAgents(context)
-      .then((ids) => {
-        const typed = ids as TuiAgent[]
-        if (requestGeneration === localDetectionGeneration) {
-          set({ detectedAgentIds: typed, isDetectingAgents: false })
-          detectedContextKey = contextKey
-        }
-        return typed
-      })
-      .catch(() => {
-        // Why: allow a retry on the next call if detection blew up (IPC timeout
-        // during cold start). Do not cache the failure or show stale context.
-        if (requestGeneration === localDetectionGeneration) {
-          detectPromise = null
-          set({
-            detectedAgentIds: contextChanged ? [] : get().detectedAgentIds,
-            isDetectingAgents: false
-          })
-        }
-        return [] as TuiAgent[]
-      })
-    detectPromise = { key: contextKey, promise: pending }
-    return pending
-  },
-
-  refreshDetectedAgents: () => {
-    const context = getLocalAgentPreflightContext(get())
-    const contextKey = localPreflightContextKey(context)
-    if (refreshPromise?.key === contextKey) {
-      return refreshPromise.promise
-    }
-    const contextChanged = detectedContextKey !== contextKey
-    set({
-      detectedAgentIds: contextChanged ? null : get().detectedAgentIds,
-      isRefreshingAgents: true
-    })
-    const requestGeneration = localDetectionGeneration
-    const pending = window.api.preflight
-      .refreshAgents(context)
-      .then((result) => {
-        const typed = result.agents as TuiAgent[]
-        if (requestGeneration === localDetectionGeneration) {
-          set({
-            detectedAgentIds: typed,
-            isRefreshingAgents: false,
-            pathSource: result.pathSource,
-            pathFailureReason: result.pathFailureReason
-          })
-          // Why: once refresh has run, treat its result as the current detection
-          // snapshot so `ensureDetectedAgents` short-circuits.
-          detectedContextKey = contextKey
-          detectPromise = { key: contextKey, promise: Promise.resolve(typed) }
-        }
-        return typed
-      })
-      .catch(() => {
-        const fallback = contextChanged ? [] : (get().detectedAgentIds ?? [])
-        if (requestGeneration === localDetectionGeneration) {
-          set({
-            detectedAgentIds: fallback,
-            isRefreshingAgents: false
-          })
-        }
-        return fallback
-      })
-      .finally(() => {
-        if (refreshPromise?.promise === pending) {
-          refreshPromise = null
-        }
-      })
-    refreshPromise = { key: contextKey, promise: pending }
-    return pending
-  },
-
-  clearLocalDetectedAgents: () => {
-    localDetectionGeneration += 1
-    detectPromise = null
-    refreshPromise = null
-    detectedContextKey = null
-    set({
-      detectedAgentIds: null,
-      isDetectingAgents: false,
-      isRefreshingAgents: false,
-      pathSource: null,
-      pathFailureReason: null
-    })
-  },
-
+  ...createLocalDetectedAgentState(set, get, store),
   remoteDetectedAgentIds: {},
   isDetectingRemoteAgents: {},
 
diff --git a/src/renderer/src/store/slices/diffComments.test.ts b/src/renderer/src/store/slices/diffComments.test.ts
index f39d5df37d8..4b5612f19b3 100644
--- a/src/renderer/src/store/slices/diffComments.test.ts
+++ b/src/renderer/src/store/slices/diffComments.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
 import type { DiffComment, Worktree } from '../../../../shared/types'
 import {
   createCompatibleRuntimeStatusResponseIfNeeded,
@@ -661,3 +661,83 @@ describe('bulk clear diff comments', () => {
     errSpy.mockRestore()
   })
 })
+
+describe('worktree diff comment rollback convergence', () => {
+  let errSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    clearRuntimeCompatibilityCacheForTests()
+    runtimeEnvironmentTransportCall.mockReset()
+    runtimeEnvironmentTransportCall.mockImplementation((args: RuntimeEnvironmentCallRequest) => {
+      return createCompatibleRuntimeStatusResponseIfNeeded(args) ?? runtimeEnvironmentCall(args)
+    })
+    updateMeta.mockResolvedValue({})
+    runtimeEnvironmentCall.mockResolvedValue({
+      id: 'rpc-1',
+      ok: true,
+      result: { ok: true },
+      _meta: { runtimeId: 'remote-runtime' }
+    })
+    errSpy = vi.spyOn(console, 'error').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    errSpy.mockRestore()
+  })
+
+  function addNote(store: ReturnType<typeof createTestStore>, body: string, lineNumber: number) {
+    return store.getState().addDiffComment({
+      worktreeId: WT,
+      filePath: 'src/foo.ts',
+      lineNumber,
+      body,
+      side: 'modified'
+    })
+  }
+
+  it('converges to the pre-burst list when two consecutive writes fail', async () => {
+    const store = createTestStore()
+    const comments = [makeComment({ id: 'c1' })]
+    seed(store, comments)
+    updateMeta.mockRejectedValue(new Error('disk full'))
+
+    await expect(Promise.all([addNote(store, 'A', 11), addNote(store, 'B', 12)])).resolves.toEqual([
+      null,
+      null
+    ])
+    expect(updateMeta).toHaveBeenCalledTimes(2)
+    expect(store.getState().getDiffComments(WT)).toBe(comments)
+  })
+
+  it('converges a mixed-mutator failing burst and still reports the delete failure', async () => {
+    const store = createTestStore()
+    const comments = [makeComment({ id: 'c1' }), makeComment({ id: 'c2' })]
+    seed(store, comments)
+    updateMeta.mockRejectedValue(new Error('disk full'))
+
+    const removed = store.getState().deleteDiffComment(WT, 'c1')
+    const marked = store.getState().markDiffCommentsSent(WT, ['c2'], 3000)
+
+    // Why: deleteDiffComment has no boolean contract, so its absent return must not hide the failure.
+    await expect(removed).resolves.toBeUndefined()
+    await expect(marked).resolves.toBe(false)
+    expect(store.getState().getDiffComments(WT)).toBe(comments)
+    expect(errSpy).toHaveBeenCalled()
+  })
+
+  it('converges on the runtime branch when two consecutive writes fail', async () => {
+    const store = createTestStore()
+    store.setState({ settings: { activeRuntimeEnvironmentId: 'env-1' } as never })
+    const comments = [makeComment({ id: 'c1' })]
+    seed(store, comments, { hostId: 'local', runtimeOwnerEnvironmentId: 'env-1' })
+    runtimeEnvironmentCall.mockRejectedValue(new Error('runtime unreachable'))
+
+    await expect(Promise.all([addNote(store, 'A', 11), addNote(store, 'B', 12)])).resolves.toEqual([
+      null,
+      null
+    ])
+    expect(updateMeta).not.toHaveBeenCalled()
+    expect(store.getState().getDiffComments(WT)).toBe(comments)
+  })
+})
diff --git a/src/renderer/src/store/slices/diffComments.ts b/src/renderer/src/store/slices/diffComments.ts
index 1154fd649b5..2bf3b18ceec 100644
--- a/src/renderer/src/store/slices/diffComments.ts
+++ b/src/renderer/src/store/slices/diffComments.ts
@@ -1,12 +1,18 @@
 /* eslint-disable max-lines -- Why: keeps note mutation, rollback, persistence ordering, and sent-state transitions under shared queue/rollback invariants. */
 import type { StateCreator } from 'zustand'
 import type { AppState } from '../types'
-import type { DiffComment, Worktree } from '../../../../shared/types'
+import type { DiffComment, FolderWorkspace, Worktree } from '../../../../shared/types'
 import { findWorktreeById, getRepoIdFromWorktreeId } from './worktree-helpers'
 import { callRuntimeRpc, getActiveRuntimeTarget } from '../../runtime/runtime-rpc-client'
 import { toRuntimeWorktreeSelector } from '../../runtime/runtime-worktree-selector'
 import { createBrowserUuid } from '@/lib/browser-uuid'
 import { getRuntimeEnvironmentIdForWorktree } from '@/lib/worktree-runtime-owner'
+import {
+  findFolderWorkspaceOwner,
+  getExecutionHostIdForFolderWorkspace,
+  getRuntimeEnvironmentIdForFolderWorkspace
+} from '@/lib/folder-workspace-runtime-owner'
+import { parseWorkspaceKey } from '../../../../shared/workspace-scope'
 
 export type DiffCommentsSlice = {
   getDiffComments: (worktreeId: string | null | undefined) => DiffComment[]
@@ -89,10 +95,41 @@ function deliverySnapshotMatches(
 const EMPTY_COMMENTS: readonly DiffComment[] = Object.freeze([])
 
 async function persist(
+  state: AppState,
   settings: AppState['settings'],
   worktreeId: string,
-  diffComments: DiffComment[]
+  diffComments: DiffComment[],
+  folderExecutionHostId?: ReturnType<typeof getExecutionHostIdForFolderWorkspace>
 ): Promise<void> {
+  const scope = parseWorkspaceKey(worktreeId)
+  if (scope?.type === 'folder') {
+    const executionHostId =
+      folderExecutionHostId ?? getExecutionHostIdForFolderWorkspace(state, scope.folderWorkspaceId)
+    const runtimeEnvironmentId = getRuntimeEnvironmentIdForFolderWorkspace(
+      state,
+      scope.folderWorkspaceId,
+      executionHostId
+    )
+    const target = getActiveRuntimeTarget({ activeRuntimeEnvironmentId: runtimeEnvironmentId })
+    const updated =
+      target.kind === 'local'
+        ? await window.api.folderWorkspaces.update({
+            folderWorkspaceId: scope.folderWorkspaceId,
+            updates: { diffComments }
+          })
+        : (
+            await callRuntimeRpc<{ folderWorkspace: FolderWorkspace | null }>(
+              target,
+              'folderWorkspace.update',
+              { folderWorkspaceId: scope.folderWorkspaceId, updates: { diffComments } },
+              { timeoutMs: 15_000 }
+            )
+          ).folderWorkspace
+    if (!updated?.diffComments) {
+      throw new Error('Failed to persist folder workspace review notes')
+    }
+    return
+  }
   const target = getActiveRuntimeTarget(settings)
   if (target.kind === 'local') {
     await window.api.worktrees.updateMeta({
@@ -117,42 +154,160 @@ function settingsForWorktreeOwner(state: AppState, worktreeId: string): AppState
 }
 
 // Why: IPC writes aren't ordered, so serialize per worktree to stop an older snapshot from overwriting a newer one on disk.
-const persistQueueByWorktree: Map<string, Promise<void>> = new Map()
+const persistQueueByWorktree = new Map<string, Promise<void>>()
+
+// Why: rollback must converge to what actually reached disk; in a burst of failed writes each mutation's own predecessor is stale.
+const lastPersistedByQueue = new Map<string, DiffComment[] | undefined>()
+
+// Why: the floor is only valid across an unbroken mutation chain; this is how an out-of-band replacement mid-burst is detected.
+const lastMutationNextByQueue = new Map<string, DiffComment[]>()
+
+// Why: bumped on every re-seed, so an in-flight write can tell whether the floor it captured is still the current one.
+const floorSeedEpochByQueue = new Map<string, number>()
+
+type CommentMutation = {
+  previous: DiffComment[] | undefined
+  next: DiffComment[]
+  folderExecutionHostId?: ReturnType<typeof getExecutionHostIdForFolderWorkspace>
+}
+
+// Why: one key for the queue and both bookkeeping maps, so they can never drift apart.
+function persistQueueKey(
+  worktreeId: string,
+  folderExecutionHostId?: ReturnType<typeof getExecutionHostIdForFolderWorkspace>
+): string {
+  return folderExecutionHostId ? `${folderExecutionHostId}\0${worktreeId}` : worktreeId
+}
 
 // Why: chain each write onto the prior promise so writes land in call order; both then handlers keep the chain alive past a failure.
-// Why: queued work reads the latest list at dequeue time, and the returned promise settles for THIS write so callers can roll back.
-function enqueuePersist(worktreeId: string, get: () => AppState): Promise<void> {
-  const prior = persistQueueByWorktree.get(worktreeId) ?? Promise.resolve()
+// Why: queued work reads the latest list at dequeue time, and the returned promise settles for THIS write.
+// Why: this promise rejects only after this write's rollback has been applied — callers must not roll back themselves.
+function enqueuePersist(
+  set: Parameters<StateCreator<AppState, [], [], DiffCommentsSlice>>[0],
+  worktreeId: string,
+  get: () => AppState,
+  mutation: CommentMutation
+): Promise<void> {
+  const folderExecutionHostId = mutation.folderExecutionHostId
+  const queueKey = persistQueueKey(worktreeId, folderExecutionHostId)
+  const prior = persistQueueByWorktree.get(queueKey) ?? Promise.resolve()
+  // Why: an idle queue means disk still holds the pre-mutation list, so that list is this burst's rollback floor.
+  // Why: a `previous` that isn't the last mutation's `next` means something outside the mutators replaced the list
+  //      (hydration, folderWorkspaces refresh, remote push), so the old floor predates that state and must be re-seeded.
+  // Why: seed before the queue entry below, or `has` is always true and the floor is never seeded.
+  const chainBroken = lastMutationNextByQueue.get(queueKey) !== mutation.previous
+  if (!persistQueueByWorktree.has(queueKey) || chainBroken) {
+    lastPersistedByQueue.set(queueKey, mutation.previous)
+    floorSeedEpochByQueue.set(queueKey, (floorSeedEpochByQueue.get(queueKey) ?? 0) + 1)
+  }
+  lastMutationNextByQueue.set(queueKey, mutation.next)
   const run = async (): Promise<void> => {
-    const repoId = getRepoIdFromWorktreeId(worktreeId)
-    const repoList = get().worktreesByRepo[repoId]
-    const target = repoList?.find((w) => w.id === worktreeId)
-    const latest = (target?.diffComments ?? []).map(normalizeDiffComment)
-    await persist(settingsForWorktreeOwner(get(), worktreeId), worktreeId, latest)
+    // Why: capture at dequeue time, alongside `stateList` — an epoch read at enqueue time would bar every write
+    //      that straddles a chain break from recording a floor its coalesced payload already carries.
+    const seedEpoch = floorSeedEpochByQueue.get(queueKey)
+    // Why: the state-side array, not the normalized copy sent to disk — restoring the same instance keeps
+    //      `getDiffComments` identity stable instead of churning selectors.
+    let stateList: DiffComment[] | undefined
+    try {
+      const scope = parseWorkspaceKey(worktreeId)
+      if (scope?.type === 'folder') {
+        const state = get()
+        const folderWorkspace = findFolderWorkspaceOwner(
+          state,
+          scope.folderWorkspaceId,
+          folderExecutionHostId
+        )
+        stateList = folderWorkspace?.diffComments
+        await persist(
+          state,
+          state.settings,
+          worktreeId,
+          (stateList ?? []).map(normalizeDiffComment),
+          folderExecutionHostId
+        )
+      } else {
+        const repoId = getRepoIdFromWorktreeId(worktreeId)
+        const target = get().worktreesByRepo[repoId]?.find((w) => w.id === worktreeId)
+        stateList = target?.diffComments
+        const state = get()
+        await persist(
+          state,
+          settingsForWorktreeOwner(state, worktreeId),
+          worktreeId,
+          (stateList ?? []).map(normalizeDiffComment)
+        )
+      }
+    } catch (err) {
+      // Why: converge to what actually landed; rollback's identity guard no-ops when a later mutation owns the array.
+      // Why: `has()`, not `get() ?? …` — an absent entry and a legitimately-`undefined` floor are different things.
+      const floor = lastPersistedByQueue.has(queueKey)
+        ? lastPersistedByQueue.get(queueKey)
+        : mutation.previous
+      rollback(set, worktreeId, floor, mutation.next, folderExecutionHostId)
+      throw err
+    }
+    // Why: a chain break re-seeded the floor to an out-of-band replacement while this write was awaiting, so the
+    //      list captured before the await predates it and must not be reinstated as the floor.
+    if (floorSeedEpochByQueue.get(queueKey) === seedEpoch) {
+      lastPersistedByQueue.set(queueKey, stateList)
+    }
   }
   const next = prior.then(run, run)
-  persistQueueByWorktree.set(worktreeId, next)
+  persistQueueByWorktree.set(queueKey, next)
   // Why: clear the queue entry only if still the tail, so later enqueues chain onto the real in-flight promise.
   // Why: then(cleanup, cleanup) not finally, so a rejection is consumed here rather than re-thrown as unhandledRejection.
   const cleanup = (): void => {
-    if (persistQueueByWorktree.get(worktreeId) === next) {
-      persistQueueByWorktree.delete(worktreeId)
+    if (persistQueueByWorktree.get(queueKey) === next) {
+      persistQueueByWorktree.delete(queueKey)
+      // Why: tail-guarded only; a mid-burst delete would strand the remaining writes of the burst without a floor.
+      lastPersistedByQueue.delete(queueKey)
+      lastMutationNextByQueue.delete(queueKey)
+      floorSeedEpochByQueue.delete(queueKey)
     }
   }
   next.then(cleanup, cleanup)
   return next
 }
 
+// Why: best-effort telemetry runs only after the note is on disk, so a throw here must not report a failed save.
+function recordReviewNoteInteraction(get: () => AppState): void {
+  try {
+    get().recordFeatureInteraction?.('review-notes')
+  } catch (err) {
+    console.error('Failed to record review-notes interaction:', err)
+  }
+}
+
 // Why: derive the next list inside the `set` updater so concurrent writes can't clobber each other via a stale closure.
 function mutateComments(
   set: Parameters<StateCreator<AppState, [], [], DiffCommentsSlice>>[0],
   worktreeId: string,
   mutate: (existing: DiffComment[]) => DiffComment[] | null
-): { previous: DiffComment[] | undefined; next: DiffComment[] } | null {
+): CommentMutation | null {
   const repoId = getRepoIdFromWorktreeId(worktreeId)
   let previous: DiffComment[] | undefined
   let next: DiffComment[] | null = null
+  let folderExecutionHostId: ReturnType<typeof getExecutionHostIdForFolderWorkspace> | undefined
   set((s) => {
+    const scope = parseWorkspaceKey(worktreeId)
+    if (scope?.type === 'folder') {
+      const target = findFolderWorkspaceOwner(s, scope.folderWorkspaceId)
+      if (!target) {
+        return {}
+      }
+      folderExecutionHostId = getExecutionHostIdForFolderWorkspace(s, scope.folderWorkspaceId)
+      previous = target.diffComments
+      const computed = mutate(previous ?? [])
+      if (computed === null) {
+        return {}
+      }
+      next = computed
+      return {
+        folderWorkspaces: s.folderWorkspaces.map((workspace) =>
+          workspace === target ? { ...workspace, diffComments: computed } : workspace
+        )
+      }
+    }
     const repoList = s.worktreesByRepo[repoId]
     if (!repoList) {
       return {}
@@ -175,7 +330,7 @@ function mutateComments(
   if (next === null) {
     return null
   }
-  return { previous, next }
+  return { previous, next, folderExecutionHostId }
 }
 
 // Why: on IPC-write failure, roll back optimistic state so the renderer matches disk (identity-guarded below).
@@ -183,10 +338,23 @@ function rollback(
   set: Parameters<StateCreator<AppState, [], [], DiffCommentsSlice>>[0],
   worktreeId: string,
   previous: DiffComment[] | undefined,
-  expectedCurrent: DiffComment[]
+  expectedCurrent: DiffComment[],
+  folderExecutionHostId?: ReturnType<typeof getExecutionHostIdForFolderWorkspace>
 ): void {
   const repoId = getRepoIdFromWorktreeId(worktreeId)
   set((s) => {
+    const scope = parseWorkspaceKey(worktreeId)
+    if (scope?.type === 'folder') {
+      const target = findFolderWorkspaceOwner(s, scope.folderWorkspaceId, folderExecutionHostId)
+      if (!target || target.diffComments !== expectedCurrent) {
+        return {}
+      }
+      return {
+        folderWorkspaces: s.folderWorkspaces.map((workspace) =>
+          workspace === target ? { ...workspace, diffComments: previous } : workspace
+        )
+      }
+    }
     const repoList = s.worktreesByRepo[repoId]
     if (!repoList) {
       return {}
@@ -216,7 +384,11 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
     if (!worktreeId) {
       return EMPTY_COMMENTS as DiffComment[]
     }
-    const worktree = findWorktreeById(get().worktreesByRepo, worktreeId)
+    const scope = parseWorkspaceKey(worktreeId)
+    const worktree =
+      scope?.type === 'folder'
+        ? findFolderWorkspaceOwner(get(), scope.folderWorkspaceId)
+        : findWorktreeById(get().worktreesByRepo, worktreeId)
     if (!worktree?.diffComments) {
       // Why: cast the frozen sentinel to the mutable return type; runtime freeze makes accidental mutation throw.
       return EMPTY_COMMENTS as DiffComment[]
@@ -236,15 +408,13 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
     }
     try {
       // Why: serialize through the per-worktree queue so concurrent writes can't land on disk out of call order.
-      await enqueuePersist(input.worktreeId, get)
-      get().recordFeatureInteraction?.('review-notes')
-      return comment
+      await enqueuePersist(set, input.worktreeId, get, result)
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      // Why: rollback's identity guard no-ops if a later mutation already replaced the list, so a newer write can't be lost.
-      rollback(set, input.worktreeId, result.previous, result.next)
       return null
     }
+    recordReviewNoteInteraction(get)
+    return comment
   },
 
   updateDiffComment: async (worktreeId, commentId, body) => {
@@ -255,10 +425,7 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
     }
 
     // Why: distinguish "comment missing" (false; keep draft, likely edit-while-deleted) from "body unchanged" (true; close editor) before mutating.
-    const repoId = getRepoIdFromWorktreeId(worktreeId)
-    const repoList = get().worktreesByRepo[repoId]
-    const target = repoList?.find((w) => w.id === worktreeId)
-    const existing = target?.diffComments ?? []
+    const existing = get().getDiffComments(worktreeId)
     const existingIdx = existing.findIndex((c) => c.id === commentId)
     if (existingIdx === -1) {
       return false
@@ -285,11 +452,10 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
       return true
     }
     try {
-      await enqueuePersist(worktreeId, get)
+      await enqueuePersist(set, worktreeId, get, result)
       return true
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
       return false
     }
   },
@@ -311,14 +477,13 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
       return true
     }
     try {
-      await enqueuePersist(worktreeId, get)
-      get().recordFeatureInteraction?.('review-notes')
-      return true
+      await enqueuePersist(set, worktreeId, get, result)
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
       return false
     }
+    recordReviewNoteInteraction(get)
+    return true
   },
 
   markDiffCommentsSent: async (worktreeId, commentIds, sentAt = Date.now()) => {
@@ -341,14 +506,13 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
       return true
     }
     try {
-      await enqueuePersist(worktreeId, get)
-      get().recordFeatureInteraction?.('review-notes')
-      return true
+      await enqueuePersist(set, worktreeId, get, result)
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
       return false
     }
+    recordReviewNoteInteraction(get)
+    return true
   },
 
   deleteDiffComment: async (worktreeId, commentId) => {
@@ -361,10 +525,9 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
     }
     try {
       // Why: serialize through the per-worktree queue so concurrent writes can't land out of call order.
-      await enqueuePersist(worktreeId, get)
+      await enqueuePersist(set, worktreeId, get, result)
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
     }
   },
 
@@ -376,11 +539,10 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
       return true
     }
     try {
-      await enqueuePersist(worktreeId, get)
+      await enqueuePersist(set, worktreeId, get, result)
       return true
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
       return false
     }
   },
@@ -394,11 +556,10 @@ export const createDiffCommentsSlice: StateCreator<AppState, [], [], DiffComment
       return true
     }
     try {
-      await enqueuePersist(worktreeId, get)
+      await enqueuePersist(set, worktreeId, get, result)
       return true
     } catch (err) {
       console.error('Failed to persist diff comments:', err)
-      rollback(set, worktreeId, result.previous, result.next)
       return false
     }
   }
diff --git a/src/renderer/src/store/slices/editor.ts b/src/renderer/src/store/slices/editor.ts
index ba0685b54f8..4b2efe9516a 100644
--- a/src/renderer/src/store/slices/editor.ts
+++ b/src/renderer/src/store/slices/editor.ts
@@ -4163,7 +4163,7 @@ export const createEditorSlice: StateCreator<AppState, [], [], EditorSlice> = (s
   // Why: session-local conflict tracking (Resolved-locally) lives only in the renderer; main returns raw git status, so the renderer owns conflictStatusSource.
   setGitStatus: (worktreeId, status) =>
     set((s) => {
-      const hadStatusEntry = Object.prototype.hasOwnProperty.call(s.gitStatusByWorktree, worktreeId)
+      const hadStatusEntry = Object.hasOwn(s.gitStatusByWorktree, worktreeId)
       const prevEntries = s.gitStatusByWorktree[worktreeId] ?? []
       const prevOperation = s.gitConflictOperationByWorktree[worktreeId] ?? 'unknown'
       const currentTracked = { ...s.trackedConflictPathsByWorktree[worktreeId] }
diff --git a/src/renderer/src/store/slices/folder-workspace-diff-comments.test.ts b/src/renderer/src/store/slices/folder-workspace-diff-comments.test.ts
new file mode 100644
index 00000000000..b03015ec98d
--- /dev/null
+++ b/src/renderer/src/store/slices/folder-workspace-diff-comments.test.ts
@@ -0,0 +1,634 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { create } from 'zustand'
+import type { AppState } from '../types'
+import type { DiffComment, FolderWorkspace, ProjectGroup } from '../../../../shared/types'
+import { folderWorkspaceKey } from '../../../../shared/workspace-scope'
+import {
+  createCompatibleRuntimeStatusResponseIfNeeded,
+  type RuntimeEnvironmentCallRequest
+} from '../../runtime/runtime-compatibility-test-fixture'
+import { clearRuntimeCompatibilityCacheForTests } from '../../runtime/runtime-rpc-client'
+import { createDiffCommentsSlice } from './diffComments'
+
+const runtimeEnvironmentCall = vi.fn()
+const runtimeEnvironmentTransportCall = vi.fn()
+const folderWorkspacesUpdate = vi.fn()
+
+globalThis.window = {
+  api: {
+    folderWorkspaces: { update: folderWorkspacesUpdate },
+    runtimeEnvironments: { call: runtimeEnvironmentTransportCall }
+  }
+} as never
+
+function createTestStore() {
+  return create<AppState>()((...args) => {
+    const slice = createDiffCommentsSlice(...args)
+    return {
+      ...slice,
+      settings: null,
+      activeWorktreeId: null,
+      activeWorkspaceExecutionHostId: null,
+      folderWorkspaces: [],
+      projectGroups: [],
+      runtimeEnvironments: [],
+      restoredRuntimeHostIdByWorkspaceSessionKey: {},
+      worktreesByRepo: {}
+    } as unknown as AppState
+  })
+}
+
+function makeFolderWorkspace(overrides: Partial<FolderWorkspace> = {}): FolderWorkspace {
+  return {
+    id: 'folder-1',
+    projectGroupId: 'group-1',
+    folderPath: '/workspace',
+    executionHostId: 'local',
+    diffComments: [],
+    ...overrides
+  } as FolderWorkspace
+}
+
+function seedLocalFolderWorkspace(store: ReturnType<typeof createTestStore>): FolderWorkspace {
+  const folderWorkspace = makeFolderWorkspace()
+  const projectGroup = {
+    id: folderWorkspace.projectGroupId,
+    parentPath: '/workspace',
+    executionHostId: 'local'
+  } as ProjectGroup
+  store.setState({
+    activeWorktreeId: folderWorkspaceKey(folderWorkspace.id),
+    activeWorkspaceExecutionHostId: 'local',
+    projectGroups: [projectGroup],
+    folderWorkspaces: [folderWorkspace]
+  })
+  return folderWorkspace
+}
+
+function addNote(
+  store: ReturnType<typeof createTestStore>,
+  workspaceKey: string,
+  body: string,
+  lineNumber = 1
+): Promise<DiffComment | null> {
+  return store.getState().addDiffComment({
+    worktreeId: workspaceKey,
+    filePath: 'README.md',
+    source: 'markdown',
+    lineNumber,
+    body,
+    side: 'modified'
+  })
+}
+
+function bodies(store: ReturnType<typeof createTestStore>, workspaceKey: string): string[] {
+  return store
+    .getState()
+    .getDiffComments(workspaceKey)
+    .map((comment) => comment.body)
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  clearRuntimeCompatibilityCacheForTests()
+  runtimeEnvironmentTransportCall.mockImplementation((args: RuntimeEnvironmentCallRequest) => {
+    return createCompatibleRuntimeStatusResponseIfNeeded(args) ?? runtimeEnvironmentCall(args)
+  })
+})
+
+describe('folder workspace diff comments', () => {
+  it('adds and persists a review note', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => ({
+      ...folderWorkspace,
+      ...updates
+    }))
+
+    const saved = await store.getState().addDiffComment({
+      worktreeId: folderWorkspaceKey(folderWorkspace.id),
+      filePath: 'README.md',
+      source: 'markdown',
+      lineNumber: 1,
+      body: 'folder note',
+      side: 'modified'
+    })
+
+    expect(saved).toEqual(expect.objectContaining({ body: 'folder note' }))
+    expect(store.getState().getDiffComments(folderWorkspaceKey(folderWorkspace.id))).toEqual([
+      expect.objectContaining({ body: 'folder note' })
+    ])
+    expect(folderWorkspacesUpdate).toHaveBeenCalledWith({
+      folderWorkspaceId: folderWorkspace.id,
+      updates: { diffComments: [expect.objectContaining({ body: 'folder note' })] }
+    })
+  })
+
+  it('preserves a second note while the first write is in flight', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    let releaseFirstWrite: (() => void) | undefined
+    const firstWrite = new Promise<void>((resolve) => {
+      releaseFirstWrite = resolve
+    })
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => {
+      if (folderWorkspacesUpdate.mock.calls.length === 1) {
+        await firstWrite
+      }
+      return { ...folderWorkspace, ...updates }
+    })
+
+    const addFirst = store.getState().addDiffComment({
+      worktreeId: folderWorkspaceKey(folderWorkspace.id),
+      filePath: 'README.md',
+      source: 'markdown',
+      lineNumber: 1,
+      body: 'first note',
+      side: 'modified'
+    })
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(1))
+    const addSecond = store.getState().addDiffComment({
+      worktreeId: folderWorkspaceKey(folderWorkspace.id),
+      filePath: 'README.md',
+      source: 'markdown',
+      lineNumber: 2,
+      body: 'second note',
+      side: 'modified'
+    })
+    releaseFirstWrite?.()
+
+    await Promise.all([addFirst, addSecond])
+    expect(store.getState().getDiffComments(folderWorkspaceKey(folderWorkspace.id))).toEqual([
+      expect.objectContaining({ body: 'first note' }),
+      expect.objectContaining({ body: 'second note' })
+    ])
+    expect(folderWorkspacesUpdate).toHaveBeenLastCalledWith({
+      folderWorkspaceId: folderWorkspace.id,
+      updates: {
+        diffComments: [
+          expect.objectContaining({ body: 'first note' }),
+          expect.objectContaining({ body: 'second note' })
+        ]
+      }
+    })
+  })
+
+  it('keeps same-id writes scoped to their original hosts', async () => {
+    const store = createTestStore()
+    const workspaceId = 'shared-folder-id'
+    const workspaceKey = folderWorkspaceKey(workspaceId)
+    const localWorkspace = makeFolderWorkspace({
+      id: workspaceId,
+      projectGroupId: 'local-group',
+      folderPath: '/workspace/local'
+    })
+    const runtimeWorkspace = makeFolderWorkspace({
+      id: workspaceId,
+      projectGroupId: 'runtime-group',
+      folderPath: '/workspace/runtime',
+      executionHostId: 'runtime:env-owner'
+    })
+    let resolveLocal!: () => void
+    folderWorkspacesUpdate.mockImplementation(
+      ({ updates }) =>
+        new Promise<FolderWorkspace>((resolve) => {
+          resolveLocal = () => resolve({ ...localWorkspace, ...updates })
+        })
+    )
+    runtimeEnvironmentCall.mockImplementation(async (args: RuntimeEnvironmentCallRequest) => ({
+      id: 'rpc-folder-update',
+      ok: true,
+      result: {
+        folderWorkspace: {
+          ...runtimeWorkspace,
+          ...(
+            args as RuntimeEnvironmentCallRequest & {
+              params: { updates?: Partial<FolderWorkspace> }
+            }
+          ).params.updates
+        }
+      },
+      _meta: { runtimeId: 'remote-runtime' }
+    }))
+    store.setState({
+      activeWorktreeId: workspaceKey,
+      activeWorkspaceExecutionHostId: 'local',
+      folderWorkspaces: [localWorkspace, runtimeWorkspace]
+    })
+
+    const localAdd = store.getState().addDiffComment({
+      worktreeId: workspaceKey,
+      filePath: 'LOCAL.md',
+      source: 'markdown',
+      lineNumber: 1,
+      body: 'local note',
+      side: 'modified'
+    })
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledOnce())
+
+    store.setState({ activeWorkspaceExecutionHostId: 'runtime:env-owner' })
+    const runtimeAdd = store.getState().addDiffComment({
+      worktreeId: workspaceKey,
+      filePath: 'REMOTE.md',
+      source: 'markdown',
+      lineNumber: 1,
+      body: 'runtime note',
+      side: 'modified'
+    })
+    await vi.waitFor(() =>
+      expect(runtimeEnvironmentCall).toHaveBeenCalledWith(
+        expect.objectContaining({
+          selector: 'env-owner',
+          method: 'folderWorkspace.update',
+          params: expect.objectContaining({
+            updates: {
+              diffComments: [expect.objectContaining({ body: 'runtime note' })]
+            }
+          })
+        })
+      )
+    )
+
+    store.setState({ activeWorkspaceExecutionHostId: 'local' })
+    resolveLocal()
+    await expect(Promise.all([localAdd, runtimeAdd])).resolves.toEqual([
+      expect.objectContaining({ body: 'local note' }),
+      expect.objectContaining({ body: 'runtime note' })
+    ])
+    expect(store.getState().getDiffComments(workspaceKey)).toEqual([
+      expect.objectContaining({ body: 'local note' })
+    ])
+    store.setState({ activeWorkspaceExecutionHostId: 'runtime:env-owner' })
+    expect(store.getState().getDiffComments(workspaceKey)).toEqual([
+      expect.objectContaining({ body: 'runtime note' })
+    ])
+  })
+})
+
+describe('folder workspace diff comment rollback convergence', () => {
+  let errSpy: ReturnType<typeof vi.spyOn>
+
+  beforeEach(() => {
+    errSpy = vi.spyOn(console, 'error').mockImplementation(() => {})
+  })
+
+  afterEach(() => {
+    errSpy.mockRestore()
+  })
+
+  it('converges to disk when two consecutive writes fail', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    let rejectFirst!: (err: Error) => void
+    folderWorkspacesUpdate.mockImplementation(() => {
+      if (folderWorkspacesUpdate.mock.calls.length === 1) {
+        return new Promise((_resolve, reject) => {
+          rejectFirst = reject
+        })
+      }
+      return Promise.reject(new Error('disk full'))
+    })
+
+    const addA = addNote(store, key, 'note A', 1)
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(1))
+    const addB = addNote(store, key, 'note B', 2)
+    rejectFirst(new Error('disk full'))
+
+    await expect(Promise.all([addA, addB])).resolves.toEqual([null, null])
+    expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(2)
+    expect(store.getState().getDiffComments(key)).toEqual([])
+  })
+
+  it('converges across three failing writes', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(() => Promise.reject(new Error('disk full')))
+
+    const adds = [
+      addNote(store, key, 'A', 1),
+      addNote(store, key, 'B', 2),
+      addNote(store, key, 'C', 3)
+    ]
+
+    await expect(Promise.all(adds)).resolves.toEqual([null, null, null])
+    expect(store.getState().getDiffComments(key)).toEqual([])
+  })
+
+  it('keeps a durably saved note when a coalesced write succeeds before a later failure', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => {
+      if (folderWorkspacesUpdate.mock.calls.length > 1) {
+        throw new Error('disk full')
+      }
+      return { ...folderWorkspace, ...updates }
+    })
+
+    // Why: both mutations land before the first write dequeues, so write 1 coalesces and persists [A,B].
+    const addA = addNote(store, key, 'note A', 1)
+    const addB = addNote(store, key, 'note B', 2)
+
+    await Promise.all([addA, addB])
+    expect(folderWorkspacesUpdate).toHaveBeenNthCalledWith(1, {
+      folderWorkspaceId: folderWorkspace.id,
+      updates: {
+        diffComments: [
+          expect.objectContaining({ body: 'note A' }),
+          expect.objectContaining({ body: 'note B' })
+        ]
+      }
+    })
+    expect(bodies(store, key)).toEqual(['note A', 'note B'])
+  })
+
+  it('converges to the partially-written list when only the first write landed', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    let releaseFirst!: () => void
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => {
+      if (folderWorkspacesUpdate.mock.calls.length === 1) {
+        await new Promise<void>((resolve) => {
+          releaseFirst = resolve
+        })
+        return { ...folderWorkspace, ...updates }
+      }
+      throw new Error('disk full')
+    })
+
+    const addA = addNote(store, key, 'note A', 1)
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(1))
+    const addB = addNote(store, key, 'note B', 2)
+    releaseFirst()
+
+    await Promise.all([addA, addB])
+    // Why: write 1 persisted only [A], so [A] is the floor B's failure converges to.
+    expect(bodies(store, key)).toEqual(['note A'])
+  })
+
+  it('seeds a fresh floor for the burst after a failed burst', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(() => Promise.reject(new Error('disk full')))
+    await Promise.all([addNote(store, key, 'A', 1), addNote(store, key, 'B', 2)])
+    expect(store.getState().getDiffComments(key)).toEqual([])
+
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => ({
+      ...folderWorkspace,
+      ...updates
+    }))
+    await addNote(store, key, 'C', 3)
+
+    expect(bodies(store, key)).toEqual(['C'])
+    expect(folderWorkspacesUpdate).toHaveBeenLastCalledWith({
+      folderWorkspaceId: folderWorkspace.id,
+      updates: { diffComments: [expect.objectContaining({ body: 'C' })] }
+    })
+  })
+
+  it('rolls back to the list the queue drained on, not a stale burst floor', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(() => Promise.reject(new Error('disk full')))
+    await Promise.all([addNote(store, key, 'A', 1), addNote(store, key, 'B', 2)])
+
+    // Why: the drained queue must not carry its floor into the next burst.
+    const hydrated = [
+      {
+        id: 'h1',
+        worktreeId: key,
+        filePath: 'README.md',
+        lineNumber: 9,
+        body: 'hydrated',
+        createdAt: 1,
+        side: 'modified'
+      } as DiffComment
+    ]
+    store.setState({ folderWorkspaces: [{ ...folderWorkspace, diffComments: hydrated }] })
+
+    await addNote(store, key, 'D', 4)
+
+    expect(store.getState().getDiffComments(key)).toBe(hydrated)
+  })
+
+  it('keeps an out-of-band replacement when a later mutation in the same burst fails', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    let rejectFirst!: (err: Error) => void
+    folderWorkspacesUpdate.mockImplementation(() => {
+      if (folderWorkspacesUpdate.mock.calls.length === 1) {
+        return new Promise((_resolve, reject) => {
+          rejectFirst = reject
+        })
+      }
+      return Promise.reject(new Error('disk full'))
+    })
+
+    const addA = addNote(store, key, 'note A', 1)
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(1))
+    const hydrated = [
+      {
+        id: 'h1',
+        worktreeId: key,
+        filePath: 'README.md',
+        lineNumber: 9,
+        body: 'hydrated',
+        createdAt: 1,
+        side: 'modified'
+      } as DiffComment
+    ]
+    store.setState({ folderWorkspaces: [{ ...folderWorkspace, diffComments: hydrated }] })
+    const addE = addNote(store, key, 'note E', 2)
+    rejectFirst(new Error('disk full'))
+
+    await Promise.all([addA, addE])
+    expect(bodies(store, key)).toEqual(['hydrated'])
+  })
+
+  it('keeps an out-of-band replacement when the in-flight write succeeds', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    let releaseFirst!: () => void
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => {
+      if (folderWorkspacesUpdate.mock.calls.length === 1) {
+        await new Promise<void>((resolve) => {
+          releaseFirst = resolve
+        })
+        return { ...folderWorkspace, ...updates }
+      }
+      throw new Error('disk full')
+    })
+
+    const addA = addNote(store, key, 'note A', 1)
+    await vi.waitFor(() => expect(folderWorkspacesUpdate).toHaveBeenCalledTimes(1))
+    const hydrated = [
+      {
+        id: 'h1',
+        worktreeId: key,
+        filePath: 'README.md',
+        lineNumber: 9,
+        body: 'hydrated',
+        createdAt: 1,
+        side: 'modified'
+      } as DiffComment
+    ]
+    store.setState({ folderWorkspaces: [{ ...folderWorkspace, diffComments: hydrated }] })
+    // Why: the chain break re-seeds the floor to `hydrated`; A's success must not restore its pre-replacement capture.
+    const addE = addNote(store, key, 'note E', 2)
+    releaseFirst()
+
+    await Promise.all([addA, addE])
+    expect(bodies(store, key)).toEqual(['hydrated'])
+  })
+
+  it('keeps a successful write that straddles a chain break as the floor', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => {
+      if (folderWorkspacesUpdate.mock.calls.length > 1) {
+        throw new Error('disk full')
+      }
+      return { ...folderWorkspace, ...updates }
+    })
+
+    // Why: no await, so the replacement + E land before A dequeues — A's payload already carries `hydrated`.
+    const addA = addNote(store, key, 'note A', 1)
+    const hydrated = [
+      {
+        id: 'h1',
+        worktreeId: key,
+        filePath: 'README.md',
+        lineNumber: 9,
+        body: 'hydrated',
+        createdAt: 1,
+        side: 'modified'
+      } as DiffComment
+    ]
+    store.setState({ folderWorkspaces: [{ ...folderWorkspace, diffComments: hydrated }] })
+    const addE = addNote(store, key, 'note E', 2)
+
+    await Promise.all([addA, addE])
+    // Why: write #1 put ['hydrated', 'note E'] on disk, so E's failure must not roll back past it.
+    expect(bodies(store, key)).toEqual(['hydrated', 'note E'])
+    expect(folderWorkspacesUpdate.mock.calls[0][0].updates.diffComments).toEqual([
+      expect.objectContaining({ body: 'hydrated' }),
+      expect.objectContaining({ body: 'note E' })
+    ])
+  })
+
+  it('rolls back when the write throws before reaching persist', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    // Why: a malformed entry makes normalizeDiffComment throw inside run, before persist is ever called.
+    const malformed = [null as unknown as DiffComment]
+    store.setState({ folderWorkspaces: [{ ...folderWorkspace, diffComments: malformed }] })
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => ({
+      ...folderWorkspace,
+      ...updates
+    }))
+
+    await expect(addNote(store, key, 'note A', 1)).resolves.toBeNull()
+    expect(store.getState().getDiffComments(key)).toBe(malformed)
+    expect(folderWorkspacesUpdate).not.toHaveBeenCalled()
+    expect(errSpy).toHaveBeenCalled()
+  })
+
+  it('reports success when recordFeatureInteraction throws after a successful write', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    folderWorkspacesUpdate.mockImplementation(async ({ updates }) => ({
+      ...folderWorkspace,
+      ...updates
+    }))
+    store.setState({
+      recordFeatureInteraction: () => {
+        throw new Error('telemetry down')
+      }
+    } as never)
+
+    await expect(addNote(store, key, 'note A', 1)).resolves.toEqual(
+      expect.objectContaining({ body: 'note A' })
+    )
+    expect(bodies(store, key)).toEqual(['note A'])
+  })
+
+  it('converges to the floor when persist rejects after the host may have written', async () => {
+    const store = createTestStore()
+    const folderWorkspace = seedLocalFolderWorkspace(store)
+    const key = folderWorkspaceKey(folderWorkspace.id)
+    // Why: pins today's contract for the missing-diffComments throw; STA-4062 owns read-back.
+    folderWorkspacesUpdate.mockImplementation(async () => ({}))
+
+    await expect(addNote(store, key, 'note A', 1)).resolves.toBeNull()
+    expect(store.getState().getDiffComments(key)).toEqual([])
+  })
+
+  it('converges on the runtime branch when two consecutive writes fail', async () => {
+    const store = createTestStore()
+    const runtimeWorkspace = makeFolderWorkspace({ executionHostId: 'runtime:env-owner' })
+    const key = folderWorkspaceKey(runtimeWorkspace.id)
+    store.setState({
+      activeWorktreeId: key,
+      activeWorkspaceExecutionHostId: 'runtime:env-owner',
+      folderWorkspaces: [runtimeWorkspace]
+    })
+    runtimeEnvironmentCall.mockRejectedValue(new Error('runtime unreachable'))
+
+    await expect(
+      Promise.all([addNote(store, key, 'A', 1), addNote(store, key, 'B', 2)])
+    ).resolves.toEqual([null, null])
+    expect(store.getState().getDiffComments(key)).toEqual([])
+    expect(folderWorkspacesUpdate).not.toHaveBeenCalled()
+  })
+
+  it('keeps a failing burst scoped to its own execution host', async () => {
+    const store = createTestStore()
+    const workspaceId = 'shared-folder-id'
+    const key = folderWorkspaceKey(workspaceId)
+    const localWorkspace = makeFolderWorkspace({ id: workspaceId, projectGroupId: 'local-group' })
+    const runtimeWorkspace = makeFolderWorkspace({
+      id: workspaceId,
+      projectGroupId: 'runtime-group',
+      executionHostId: 'runtime:env-owner'
+    })
+    store.setState({
+      activeWorktreeId: key,
+      activeWorkspaceExecutionHostId: 'runtime:env-owner',
+      folderWorkspaces: [localWorkspace, runtimeWorkspace]
+    })
+    runtimeEnvironmentCall.mockImplementation(async (args: RuntimeEnvironmentCallRequest) => ({
+      id: 'rpc-folder-update',
+      ok: true,
+      result: {
+        folderWorkspace: {
+          ...runtimeWorkspace,
+          ...(
+            args as RuntimeEnvironmentCallRequest & {
+              params: { updates?: Partial<FolderWorkspace> }
+            }
+          ).params.updates
+        }
+      },
+      _meta: { runtimeId: 'remote-runtime' }
+    }))
+    folderWorkspacesUpdate.mockImplementation(() => Promise.reject(new Error('disk full')))
+
+    await addNote(store, key, 'runtime note', 1)
+    store.setState({ activeWorkspaceExecutionHostId: 'local' })
+    await Promise.all([addNote(store, key, 'local A', 2), addNote(store, key, 'local B', 3)])
+
+    expect(store.getState().getDiffComments(key)).toEqual([])
+    store.setState({ activeWorkspaceExecutionHostId: 'runtime:env-owner' })
+    expect(bodies(store, key)).toEqual(['runtime note'])
+  })
+})
diff --git a/src/renderer/src/store/slices/github.test.ts b/src/renderer/src/store/slices/github.test.ts
index 5e5b0d61ccb..dfcd76ec5d1 100644
--- a/src/renderer/src/store/slices/github.test.ts
+++ b/src/renderer/src/store/slices/github.test.ts
@@ -6300,6 +6300,151 @@ describe('createGitHubSlice.refreshGitHubForWorktree', () => {
   })
 })
 
+describe('createGitHubSlice.fetchWorkItems cache identity', () => {
+  const nestedSources = {
+    issues: { owner: 'acme', repo: 'widgets' },
+    prs: { owner: 'acme', repo: 'widgets' },
+    originCandidate: { owner: 'acme', repo: 'widgets' },
+    upstreamCandidate: { owner: 'acme-upstream', repo: 'widgets' }
+  }
+
+  function makeNestedWorkItem(
+    overrides: Partial<GitHubWorkItem> & Pick<GitHubWorkItem, 'id' | 'number' | 'title'>
+  ): Omit<GitHubWorkItem, 'repoId'> {
+    return {
+      type: 'pr',
+      state: 'open',
+      url: `https://github.com/acme/widgets/pull/${overrides.number}`,
+      labels: ['bug', 'needs-review'],
+      updatedAt: '2026-05-22T00:00:00Z',
+      author: 'octocat',
+      authorAvatarUrl: 'https://avatars.example/octocat.png',
+      branchName: 'feature/nested',
+      baseRefName: 'main',
+      headSha: 'abc123def456',
+      prRepo: { owner: 'acme', repo: 'widgets', host: 'github.com' },
+      additions: 12,
+      deletions: 3,
+      changedFiles: 2,
+      reviewDecision: 'REVIEW_REQUIRED',
+      reviewRequests: [
+        { login: 'reviewer', name: 'Reviewer', avatarUrl: 'https://avatars.example/reviewer.png' }
+      ],
+      latestReviews: [
+        { login: 'reviewer', state: 'COMMENTED', avatarUrl: 'https://avatars.example/reviewer.png' }
+      ],
+      assignees: [
+        { login: 'assignee', name: 'Assignee', avatarUrl: 'https://avatars.example/assignee.png' }
+      ],
+      checksSummary: {
+        state: 'pending',
+        total: 4,
+        passed: 1,
+        failed: 0,
+        pending: 3,
+        neutral: 0
+      },
+      mergeable: 'MERGEABLE',
+      ...overrides
+    }
+  }
+
+  beforeEach(() => {
+    vi.clearAllMocks()
+    resetRemoteRuntimeMocks()
+  })
+
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
+  it('reuses the cache map, entry, and nested rows on a no-op force refetch', async () => {
+    const store = createTestStore()
+    const items = [
+      makeNestedWorkItem({ id: 'pr:42', number: 42, title: 'First nested PR' }),
+      makeNestedWorkItem({ id: 'pr:43', number: 43, title: 'Second nested PR' })
+    ]
+    mockApi.gh.listWorkItems.mockImplementation(() =>
+      Promise.resolve({
+        items: structuredClone(items),
+        sources: structuredClone(nestedSources)
+      })
+    )
+
+    let now = 1_700_000_000_000
+    vi.spyOn(Date, 'now').mockImplementation(() => now)
+
+    await store.getState().fetchWorkItems('repo-id', '/repo', 24, '')
+    const cacheKey = workItemsCacheKey('repo-id', 24, '')
+    const previousCache = store.getState().workItemsCache
+    const previousEntry = previousCache[cacheKey]
+    const previousRows = previousEntry?.data
+    expect(previousRows).toHaveLength(2)
+    expect(previousRows?.[0]?.labels).toEqual(['bug', 'needs-review'])
+    expect(previousRows?.[0]?.assignees?.[0]?.login).toBe('assignee')
+    expect(previousRows?.[0]?.reviewRequests?.[0]?.login).toBe('reviewer')
+    expect(previousRows?.[0]?.prRepo).toEqual({
+      owner: 'acme',
+      repo: 'widgets',
+      host: 'github.com'
+    })
+    expect(previousRows?.[0]?.checksSummary?.state).toBe('pending')
+
+    now += 5_000
+    await store.getState().fetchWorkItems('repo-id', '/repo', 24, '', { force: true })
+
+    const nextCache = store.getState().workItemsCache
+    const nextEntry = nextCache[cacheKey]
+    expect(nextCache).toBe(previousCache)
+    expect(nextEntry).toBe(previousEntry)
+    expect(nextEntry?.data).toBe(previousRows)
+    expect(nextEntry?.data?.[0]).toBe(previousRows?.[0])
+    expect(nextEntry?.data?.[1]).toBe(previousRows?.[1])
+    expect(nextEntry?.sources).toBe(previousEntry?.sources)
+    expect(nextEntry?.fetchedAt).toBe(now)
+    expect(nextEntry?.fetchedAt).toBeGreaterThan(1_700_000_000_000)
+  })
+
+  it('writes a new entry when a nested reviewRequests login changes but reuses the sibling row', async () => {
+    const store = createTestStore()
+    const first = makeNestedWorkItem({ id: 'pr:42', number: 42, title: 'First nested PR' })
+    const second = makeNestedWorkItem({ id: 'pr:43', number: 43, title: 'Second nested PR' })
+    mockApi.gh.listWorkItems.mockResolvedValueOnce({
+      items: structuredClone([first, second]),
+      sources: structuredClone(nestedSources)
+    })
+
+    await store.getState().fetchWorkItems('repo-id', '/repo', 24, '')
+    const cacheKey = workItemsCacheKey('repo-id', 24, '')
+    const previousCache = store.getState().workItemsCache
+    const previousEntry = previousCache[cacheKey]
+    const previousRows = previousEntry?.data
+    expect(previousRows).toHaveLength(2)
+
+    const changedFirst = structuredClone(first)
+    const nextReviewer = changedFirst.reviewRequests?.[0]
+    if (nextReviewer) {
+      nextReviewer.login = 'reviewer-updated'
+    }
+    mockApi.gh.listWorkItems.mockResolvedValueOnce({
+      items: [changedFirst, structuredClone(second)],
+      sources: structuredClone(nestedSources)
+    })
+
+    await store.getState().fetchWorkItems('repo-id', '/repo', 24, '', { force: true })
+
+    const nextCache = store.getState().workItemsCache
+    const nextEntry = nextCache[cacheKey]
+    expect(nextCache).not.toBe(previousCache)
+    expect(nextEntry).not.toBe(previousEntry)
+    expect(nextEntry?.data).not.toBe(previousRows)
+    expect(nextEntry?.data?.[0]).not.toBe(previousRows?.[0])
+    expect(nextEntry?.data?.[0]?.reviewRequests?.[0]?.login).toBe('reviewer-updated')
+    expect(nextEntry?.data?.[1]).toBe(previousRows?.[1])
+    expect(nextEntry?.sources).toBe(previousEntry?.sources)
+  })
+})
+
 describe('createGitHubSlice.fetchWorkItems source/error envelope', () => {
   beforeEach(() => {
     vi.clearAllMocks()
diff --git a/src/renderer/src/store/slices/github.ts b/src/renderer/src/store/slices/github.ts
index 7ab87e09731..24501bc23e9 100644
--- a/src/renderer/src/store/slices/github.ts
+++ b/src/renderer/src/store/slices/github.ts
@@ -78,6 +78,7 @@ import { normalizeGitHubPRForBranchOutcome } from '../../../../shared/github-pr-
 import { restoreReactionOnSubject, setReactionOnSubject } from '@/lib/pr-comment-reactions'
 import { withGitHubCheckDetailsTimeout } from '@/runtime/github-check-details-timeout'
 import { getGitHubRepoLookupIndex } from './github-repo-lookup-index'
+import { areValuesEqual, reconcileCatalogRows } from './repo-identity-reconcile'
 
 // ─── ProjectV2 cache types ────────────────────────────────────────────
 // Why: separate from CacheEntry<T> — project-view has a single GraphQL source (no issue/PR fallback) and a distinct error union.
@@ -684,7 +685,7 @@ type InflightChecks = {
 const inflightChecksRequests = new Map<string, InflightChecks>()
 const inflightCommentsRequests = new Map<string, Promise<PRComment[]>>()
 type InflightWorkItems = {
-  promise: Promise<GitHubWorkItem[]>
+  promise: Promise<readonly GitHubWorkItem[]>
   force: boolean
   noCache: boolean
   requireComplete: boolean
@@ -1852,7 +1853,7 @@ export type GitHubSlice = {
   prRefreshStates: Record<string, PRRefreshState>
   prVisibleRefreshGeneration: number
   // Why: keyed by repoId + limit + query so same-path repos on different SSH targets don't share results.
-  workItemsCache: Record<string, CacheEntry<GitHubWorkItem[]>>
+  workItemsCache: Record<string, CacheEntry<readonly GitHubWorkItem[]>>
   fetchPRForBranch: (
     repoPath: string,
     branch: string,
@@ -1950,7 +1951,7 @@ export type GitHubSlice = {
     query: string,
     repoPath?: string,
     sourceContext?: TaskSourceContext | null
-  ) => GitHubWorkItem[] | null
+  ) => readonly GitHubWorkItem[] | null
   /** Returns a thin view (sources + error, never items) so it stays a cheap selector without dragging the whole work-item array through the equality check. */
   getWorkItemsSourcesAndError: (
     repoId: string,
@@ -1973,7 +1974,7 @@ export type GitHubSlice = {
     limit: number,
     query: string,
     options?: FetchOptions
-  ) => Promise<GitHubWorkItem[]>
+  ) => Promise<readonly GitHubWorkItem[]>
   /**
    * Fan out one work-item query across repos; partial failures don't reject — a repo with no cached fallback increments `failedCount`, but one served stale cache on rejection isn't counted.
    * `githubUnavailable`: every selected GitHub source refresh failed because GitHub was unreachable (5xx/network/rate-limit), even if stale cache remains — lets the caller attribute the stale/empty list.
@@ -2657,7 +2658,13 @@ export const createGitHubSlice: StateCreator<AppState, [], [], GitHubSlice> = (s
     return null
   },
 
-  fetchWorkItems: async (repoId, repoPath, limit, query, options): Promise<GitHubWorkItem[]> => {
+  fetchWorkItems: async (
+    repoId,
+    repoPath,
+    limit,
+    query,
+    options
+  ): Promise<readonly GitHubWorkItem[]> => {
     if (isGitHubWorkItemsQueryTooLarge(query)) {
       return []
     }
@@ -2739,15 +2746,56 @@ export const createGitHubSlice: StateCreator<AppState, [], [], GitHubSlice> = (s
         if (get().workItemsInvalidationNonce !== requestInvalidationNonce) {
           return items
         }
-        set((s) => ({
-          workItemsCache: withBoundedCacheEntry(s.workItemsCache, key, {
-            data: items,
-            fetchedAt: Date.now(),
-            sources: envelope.sources,
-            ...(errorForCache ? { error: errorForCache } : {}),
-            ...(envelope.issueSourceFellBack ? { issueSourceFellBack: true } : {})
-          })
-        }))
+        // Why: TaskPage useShallow-selects cache entry refs. A new { ...entry, fetchedAt }
+        // still remaps every visible row. IPC structuredClone rebuilds nested records, so
+        // data === previous.data never holds — reconcile structurally, then either mutate
+        // fetchedAt in place or write one entry that keeps unchanged row/meta refs.
+        set((s) => {
+          const previousEntry = s.workItemsCache[key]
+          const previousData = previousEntry?.data ?? []
+          const reconciled = reconcileCatalogRows(
+            previousData,
+            items,
+            (row) => `${row.repoId}\0${row.id}`
+          )
+          const nextFellBack = envelope.issueSourceFellBack ? true : undefined
+          const sourcesUnchanged = areValuesEqual(previousEntry?.sources, envelope.sources)
+          const errorUnchanged = areValuesEqual(previousEntry?.error, errorForCache)
+          const fellBackUnchanged = previousEntry?.issueSourceFellBack === nextFellBack
+          if (
+            previousEntry &&
+            reconciled === previousData &&
+            sourcesUnchanged &&
+            errorUnchanged &&
+            fellBackUnchanged
+          ) {
+            previousEntry.fetchedAt = Date.now()
+            return {}
+          }
+          const previousSources = previousEntry?.sources
+          const previousError = previousEntry?.error
+          return {
+            workItemsCache: withBoundedCacheEntry(s.workItemsCache, key, {
+              // Why: `reconciled` already is `previousEntry.data` when nothing changed —
+              // reconcileCatalogRows returns the previous array on a structural match.
+              data: reconciled,
+              fetchedAt: Date.now(),
+              sources:
+                sourcesUnchanged && previousSources !== undefined
+                  ? previousSources
+                  : envelope.sources,
+              ...(errorForCache
+                ? {
+                    error:
+                      errorUnchanged && previousError !== undefined
+                        ? previousError
+                        : errorForCache
+                  }
+                : {}),
+              ...(nextFellBack ? { issueSourceFellBack: true } : {})
+            })
+          }
+        })
         return items
       } catch (err) {
         // Why: rethrow but keep the stale cache entry so the UI still renders while the user retries.
@@ -4706,7 +4754,7 @@ export const createGitHubSlice: StateCreator<AppState, [], [], GitHubSlice> = (s
     set((s) => {
       const prefix = `${repoId}::`
       const legacyPrefix = `${repoPath}::`
-      const next: Record<string, CacheEntry<GitHubWorkItem[]>> = {}
+      const next: Record<string, CacheEntry<readonly GitHubWorkItem[]>> = {}
       for (const [key, entry] of Object.entries(s.workItemsCache)) {
         if (!key.startsWith(prefix) && !key.startsWith(legacyPrefix)) {
           next[key] = entry
diff --git a/src/renderer/src/store/slices/local-agent-context-eviction.ts b/src/renderer/src/store/slices/local-agent-context-eviction.ts
new file mode 100644
index 00000000000..92f25c1d336
--- /dev/null
+++ b/src/renderer/src/store/slices/local-agent-context-eviction.ts
@@ -0,0 +1,118 @@
+import type { AppState } from '../types'
+
+type LocalAgentContextState = Pick<
+  AppState,
+  | 'detectedAgentIds'
+  | 'isDetectingAgents'
+  | 'isRefreshingAgents'
+  | 'localDetectedAgentIdsByContext'
+  | 'isDetectingLocalAgentsByContext'
+  | 'isRefreshingLocalAgentsByContext'
+  | 'pathSource'
+  | 'pathFailureReason'
+>
+
+export type LocalAgentContextEviction = {
+  removedContextKeys: ReadonlySet<string>
+  detectedContextKey: string | null
+  legacyDetectContextKey: string | null
+  legacyRefreshContextKey: string | null
+  statePatch: Partial<LocalAgentContextState>
+}
+
+export function removeLocalAgentContextEntries<T>(
+  entries: Record<string, T>,
+  contextKeys: ReadonlySet<string>
+): Record<string, T> {
+  let filtered = entries
+  for (const contextKey of contextKeys) {
+    if (!(contextKey in filtered)) {
+      continue
+    }
+    if (filtered === entries) {
+      filtered = { ...entries }
+    }
+    delete filtered[contextKey]
+  }
+  return filtered
+}
+
+export function removeLocalAgentContextEntry<T>(entries: Record<string, T>, contextKey: string) {
+  return removeLocalAgentContextEntries(entries, new Set([contextKey]))
+}
+
+export function getLocalAgentContextEviction(args: {
+  projectIds: readonly string[]
+  state: LocalAgentContextState
+  internalContextKeys: Iterable<string>
+  detectedContextKey: string | null
+  legacyDetectContextKey: string | null
+  legacyRefreshContextKey: string | null
+}): LocalAgentContextEviction | null {
+  const prefixes = args.projectIds
+    .map((projectId) => projectId.trim())
+    .filter(Boolean)
+    .map((projectId) => `${projectId}:`)
+  if (prefixes.length === 0) {
+    return null
+  }
+  const contextKeys = new Set([
+    ...Object.keys(args.state.localDetectedAgentIdsByContext),
+    ...Object.keys(args.state.isDetectingLocalAgentsByContext),
+    ...Object.keys(args.state.isRefreshingLocalAgentsByContext),
+    ...args.internalContextKeys
+  ])
+  const removedContextKeys = new Set(
+    [...contextKeys].filter((contextKey) =>
+      prefixes.some((prefix) => contextKey.startsWith(prefix))
+    )
+  )
+  if (removedContextKeys.size === 0) {
+    return null
+  }
+  const clearDetected = Boolean(
+    (args.detectedContextKey && removedContextKeys.has(args.detectedContextKey)) ||
+    (args.legacyDetectContextKey && removedContextKeys.has(args.legacyDetectContextKey))
+  )
+  const clearRefreshing = Boolean(
+    args.legacyRefreshContextKey && removedContextKeys.has(args.legacyRefreshContextKey)
+  )
+  return {
+    removedContextKeys,
+    detectedContextKey:
+      args.detectedContextKey && removedContextKeys.has(args.detectedContextKey)
+        ? null
+        : args.detectedContextKey,
+    legacyDetectContextKey:
+      args.legacyDetectContextKey && removedContextKeys.has(args.legacyDetectContextKey)
+        ? null
+        : args.legacyDetectContextKey,
+    legacyRefreshContextKey:
+      args.legacyRefreshContextKey && removedContextKeys.has(args.legacyRefreshContextKey)
+        ? null
+        : args.legacyRefreshContextKey,
+    statePatch: {
+      ...(clearDetected
+        ? {
+            detectedAgentIds: null,
+            isDetectingAgents: false,
+            pathSource: null,
+            pathFailureReason: null
+          }
+        : {}),
+      ...(clearRefreshing ? { isRefreshingAgents: false } : {}),
+      localDetectedAgentIdsByContext: removeLocalAgentContextEntries(
+        args.state.localDetectedAgentIdsByContext,
+        removedContextKeys
+      ),
+      isDetectingLocalAgentsByContext: removeLocalAgentContextEntries(
+        args.state.isDetectingLocalAgentsByContext,
+        removedContextKeys
+      ),
+      isRefreshingLocalAgentsByContext: removeLocalAgentContextEntries(
+        args.state.isRefreshingLocalAgentsByContext,
+        removedContextKeys
+      )
+    }
+  }
+}
diff --git a/src/renderer/src/store/slices/local-agent-legacy-loading.ts b/src/renderer/src/store/slices/local-agent-legacy-loading.ts
new file mode 100644
index 00000000000..18e99768003
--- /dev/null
+++ b/src/renderer/src/store/slices/local-agent-legacy-loading.ts
@@ -0,0 +1,43 @@
+import type { AppState } from '../types'
+import { removeLocalAgentContextEntry } from './local-agent-context-eviction'
+
+type LocalAgentLegacyLoadingState = Pick<
+  AppState,
+  'detectedAgentIds' | 'isDetectingAgents' | 'isRefreshingAgents'
+>
+
+type LocalAgentLegacyLoadingPatch = Partial<LocalAgentLegacyLoadingState>
+
+export function getLegacyLoadingPatch(
+  state: LocalAgentLegacyLoadingState,
+  contextMatches: boolean,
+  phase: 'detect' | 'refresh'
+): LocalAgentLegacyLoadingPatch | null {
+  const detectedAgentIds = contextMatches ? state.detectedAgentIds : null
+  const alreadyLoading = phase === 'detect' ? state.isDetectingAgents : state.isRefreshingAgents
+  if (state.detectedAgentIds === detectedAgentIds && alreadyLoading) {
+    return null
+  }
+  return phase === 'detect'
+    ? { detectedAgentIds, isDetectingAgents: true }
+    : { detectedAgentIds, isRefreshingAgents: true }
+}
+
+export function getSupersededDetectPatch(
+  state: LocalAgentLegacyLoadingState & Pick<AppState, 'isDetectingLocalAgentsByContext'>,
+  contextKey: string,
+  supersedesDetect: boolean,
+  clearsLegacyDetect: boolean
+): Partial<AppState> {
+  return {
+    ...(clearsLegacyDetect ? { isDetectingAgents: false } : {}),
+    ...(supersedesDetect
+      ? {
+          isDetectingLocalAgentsByContext: removeLocalAgentContextEntry(
+            state.isDetectingLocalAgentsByContext,
+            contextKey
+          )
+        }
+      : {})
+  }
+}
diff --git a/src/renderer/src/store/slices/local-detected-agent-state.test.ts b/src/renderer/src/store/slices/local-detected-agent-state.test.ts
new file mode 100644
index 00000000000..77303b8bc89
--- /dev/null
+++ b/src/renderer/src/store/slices/local-detected-agent-state.test.ts
@@ -0,0 +1,222 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { create } from 'zustand'
+import type { AppState } from '../types'
+import type { Repo } from '../../../../shared/types'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
+import { createDetectedAgentsSlice } from './detected-agents'
+
+const detectAgents = vi.fn()
+const refreshAgents = vi.fn()
+
+globalThis.window = {
+  api: {
+    preflight: { detectAgents, refreshAgents },
+    platform: { get: () => ({ platform: 'win32' }) }
+  } as unknown as Window['api']
+} as Window & typeof globalThis
+
+function makeRepo(id: string): Repo {
+  return {
+    id,
+    path: `C:\\${id}`,
+    displayName: id,
+    badgeColor: '#000000',
+    addedAt: 0
+  }
+}
+
+function createTestStore(repos: Repo[]) {
+  const store = create<AppState>()(
+    (...args) => createDetectedAgentsSlice(...args) as unknown as AppState
+  )
+  store.setState({
+    repos,
+    projects: [],
+    worktreesByRepo: {},
+    activeRepoId: repos[0]?.id ?? null,
+    activeWorktreeId: null
+  } as Partial<AppState>)
+  return store
+}
+
+describe('local detected agent context lifecycle', () => {
+  beforeEach(() => {
+    detectAgents.mockReset().mockResolvedValue(['claude'])
+    refreshAgents.mockReset().mockResolvedValue({
+      agents: ['codex'],
+      pathSource: 'process_env',
+      pathFailureReason: 'none'
+    })
+  })
+
+  it('deduplicates Floating-first callers without cached or settlement broadcast fanout', async () => {
+    let resolveDetection: (agents: string[]) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((resolve) => {
+        resolveDetection = resolve
+      })
+    )
+    const store = createTestStore([])
+    let broadcasts = 0
+    const unsubscribe = store.subscribe(() => {
+      broadcasts += 1
+    })
+
+    const floating = store.getState().ensureDetectedAgents(FLOATING_TERMINAL_WORKTREE_ID)
+    const ordinary = store.getState().ensureDetectedAgents()
+    const joinedOrdinary = store.getState().ensureDetectedAgents()
+
+    expect(detectAgents).toHaveBeenCalledTimes(1)
+    expect(ordinary).toBe(floating)
+    expect(joinedOrdinary).toBe(floating)
+    broadcasts = 0
+    resolveDetection(['codex'])
+    await Promise.all([floating, ordinary, joinedOrdinary])
+    expect(broadcasts).toBe(1)
+
+    broadcasts = 0
+    await store.getState().ensureDetectedAgents()
+    await store.getState().ensureDetectedAgents()
+    expect(broadcasts).toBe(0)
+    unsubscribe()
+  })
+
+  it('evicts removed project contexts without retaining settled loading entries', async () => {
+    const repo1 = makeRepo('repo-1')
+    const repo2 = makeRepo('repo-2')
+    const store = createTestStore([repo1, repo2])
+
+    await store.getState().ensureDetectedAgents()
+    store.setState({ activeRepoId: 'repo-2' })
+    await store.getState().ensureDetectedAgents()
+
+    expect(Object.keys(store.getState().localDetectedAgentIdsByContext)).toEqual([
+      'repo-1:windows-host',
+      'repo-2:windows-host'
+    ])
+    expect(store.getState().isDetectingLocalAgentsByContext).toEqual({})
+    expect(store.getState().isRefreshingLocalAgentsByContext).toEqual({})
+
+    store.setState({ repos: [repo2] })
+    store.getState().clearLocalDetectedAgentContextsForProjects(['repo-1'])
+
+    expect(store.getState().localDetectedAgentIdsByContext).toEqual({
+      'repo-2:windows-host': ['claude']
+    })
+
+    store.setState({ repos: [repo1, repo2], activeRepoId: 'repo-1' })
+    await expect(store.getState().ensureDetectedAgents()).resolves.toEqual(['claude'])
+    expect(detectAgents).toHaveBeenCalledTimes(3)
+  })
+
+  it('does not restore a project context cleared while detection is in flight', async () => {
+    let resolveDetection: (agents: string[]) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((resolve) => {
+        resolveDetection = resolve
+      })
+    )
+    const store = createTestStore([makeRepo('repo-1')])
+
+    const pending = store.getState().ensureDetectedAgents()
+    store.getState().clearLocalDetectedAgentContextsForProjects(['repo-1'])
+    resolveDetection(['claude'])
+
+    await expect(pending).resolves.toEqual(['claude'])
+    expect(store.getState().localDetectedAgentIdsByContext).toEqual({})
+    expect(store.getState().isDetectingLocalAgentsByContext).toEqual({})
+    expect(store.getState().detectedAgentIds).toBeNull()
+  })
+
+  it('does not let an older detect overwrite a successful refresh', async () => {
+    let resolveDetection: (agents: string[]) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((resolve) => {
+        resolveDetection = resolve
+      })
+    )
+    const store = createTestStore([])
+
+    const detect = store.getState().ensureDetectedAgents()
+    await expect(store.getState().refreshDetectedAgents()).resolves.toEqual(['codex'])
+    resolveDetection(['claude'])
+    await expect(detect).resolves.toEqual(['claude'])
+
+    expect(store.getState().detectedAgentIds).toEqual(['codex'])
+    expect(store.getState().localDetectedAgentIdsByContext.host).toEqual(['codex'])
+    expect(store.getState().isDetectingAgents).toBe(false)
+    expect(store.getState().isDetectingLocalAgentsByContext).toEqual({})
+  })
+
+  it('does not let an older failed detect erase a successful refresh', async () => {
+    let rejectDetection: (error: Error) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((_resolve, reject) => {
+        rejectDetection = reject
+      })
+    )
+    const store = createTestStore([])
+
+    const detect = store.getState().ensureDetectedAgents()
+    await expect(store.getState().refreshDetectedAgents()).resolves.toEqual(['codex'])
+    rejectDetection(new Error('older detect failed'))
+    await expect(detect).resolves.toEqual([])
+
+    expect(store.getState().detectedAgentIds).toEqual(['codex'])
+    expect(store.getState().localDetectedAgentIdsByContext.host).toEqual(['codex'])
+    await expect(store.getState().ensureDetectedAgents()).resolves.toEqual(['codex'])
+    expect(detectAgents).toHaveBeenCalledTimes(1)
+  })
+
+  it('joins an authoritative refresh instead of starting a later detect', async () => {
+    let resolveRefresh: (result: {
+      agents: string[]
+      pathSource: string
+      pathFailureReason: string
+    }) => void = () => {}
+    refreshAgents.mockReturnValueOnce(
+      new Promise((resolve) => {
+        resolveRefresh = resolve
+      })
+    )
+    const store = createTestStore([])
+
+    const refresh = store.getState().refreshDetectedAgents()
+    const ensure = store.getState().ensureDetectedAgents()
+    expect(ensure).toBe(refresh)
+    expect(detectAgents).not.toHaveBeenCalled()
+
+    resolveRefresh({
+      agents: ['codex'],
+      pathSource: 'process_env',
+      pathFailureReason: 'none'
+    })
+    await expect(Promise.all([refresh, ensure])).resolves.toEqual([['codex'], ['codex']])
+    expect(store.getState().detectedAgentIds).toEqual(['codex'])
+    expect(store.getState().localDetectedAgentIdsByContext.host).toEqual(['codex'])
+  })
+
+  it('retries after an authoritative refresh fails without a usable cache', async () => {
+    let resolveDetection: (agents: string[]) => void = () => {}
+    detectAgents.mockReturnValueOnce(
+      new Promise<string[]>((resolve) => {
+        resolveDetection = resolve
+      })
+    )
+    refreshAgents.mockRejectedValueOnce(new Error('transient refresh failure'))
+    const store = createTestStore([])
+
+    const supersededDetect = store.getState().ensureDetectedAgents(FLOATING_TERMINAL_WORKTREE_ID)
+    await expect(
+      store.getState().refreshDetectedAgents(FLOATING_TERMINAL_WORKTREE_ID)
+    ).resolves.toEqual([])
+    resolveDetection(['stale'])
+    await expect(supersededDetect).resolves.toEqual(['stale'])
+
+    await expect(
+      store.getState().ensureDetectedAgents(FLOATING_TERMINAL_WORKTREE_ID)
+    ).resolves.toEqual(['claude'])
+    expect(detectAgents).toHaveBeenCalledTimes(2)
+    expect(store.getState().localDetectedAgentIdsByContext.host).toEqual(['claude'])
+  })
+})
diff --git a/src/renderer/src/store/slices/local-detected-agent-state.ts b/src/renderer/src/store/slices/local-detected-agent-state.ts
new file mode 100644
index 00000000000..43b39ff5980
--- /dev/null
+++ b/src/renderer/src/store/slices/local-detected-agent-state.ts
@@ -0,0 +1,302 @@
+import type { StateCreator } from 'zustand'
+import type { AppState } from '../types'
+import type { TuiAgent } from '../../../../shared/types'
+import { FLOATING_TERMINAL_WORKTREE_ID } from '../../../../shared/constants'
+import {
+  getLocalAgentPreflightContext,
+  localPreflightContextKey
+} from '@/lib/local-preflight-context'
+import * as contextEviction from './local-agent-context-eviction'
+import { getLegacyLoadingPatch, getSupersededDetectPatch } from './local-agent-legacy-loading'
+import { createEmptyLocalDetectedAgentState } from './local-detected-agent-store-state'
+import type { LocalDetectedAgentState } from './local-detected-agent-store-state'
+
+type LocalDetectedAgentStateCreator = StateCreator<AppState, [], [], LocalDetectedAgentState>
+
+export const createLocalDetectedAgentState: LocalDetectedAgentStateCreator = (set, get) => {
+  const detectPromises = new Map<string, Promise<TuiAgent[]>>()
+  const refreshPromises = new Map<string, Promise<TuiAgent[]>>()
+  const failedDetectContextKeys = new Set<string>()
+  let detectedContextKey: string | null = null
+  let legacyDetectContextKey: string | null = null
+  let legacyRefreshContextKey: string | null = null
+  let localDetectionGeneration = 0
+
+  return {
+    ...createEmptyLocalDetectedAgentState(),
+
+    ensureDetectedAgents: (worktreeId) => {
+      const isFloating = worktreeId === FLOATING_TERMINAL_WORKTREE_ID
+      const context = getLocalAgentPreflightContext(get(), undefined, undefined, worktreeId)
+      const contextKey = localPreflightContextKey(context)
+      const existing = get().localDetectedAgentIdsByContext[contextKey]
+      const inflightRefresh = refreshPromises.get(contextKey)
+      if (inflightRefresh) {
+        if (!isFloating) {
+          legacyRefreshContextKey = contextKey
+        }
+        return inflightRefresh
+      }
+      if (existing != null && !failedDetectContextKeys.has(contextKey)) {
+        if (!isFloating) {
+          detectedContextKey = contextKey
+          const state = get()
+          if (state.detectedAgentIds !== existing || state.isDetectingAgents) {
+            set({ detectedAgentIds: existing, isDetectingAgents: false })
+          }
+        }
+        return Promise.resolve(existing)
+      }
+      const requestGeneration = localDetectionGeneration
+      const exposeInflightToLegacy = (): void => {
+        if (!isFloating) {
+          legacyDetectContextKey = contextKey
+        }
+        if (isFloating) {
+          return
+        }
+        const state = get()
+        const patch = getLegacyLoadingPatch(state, detectedContextKey === contextKey, 'detect')
+        if (patch) {
+          set(patch)
+        }
+      }
+      const inflight = detectPromises.get(contextKey)
+      if (inflight) {
+        exposeInflightToLegacy()
+        return inflight
+      }
+      if (!isFloating) {
+        legacyDetectContextKey = contextKey
+      }
+      set((state) => ({
+        ...(isFloating
+          ? {}
+          : (getLegacyLoadingPatch(state, detectedContextKey === contextKey, 'detect') ?? {})),
+        localDetectedAgentIdsByContext: {
+          ...state.localDetectedAgentIdsByContext,
+          [contextKey]: existing ?? null
+        },
+        isDetectingLocalAgentsByContext: {
+          ...state.isDetectingLocalAgentsByContext,
+          [contextKey]: true
+        }
+      }))
+      const pending = window.api.preflight
+        .detectAgents(context)
+        .then((ids) => {
+          const typed = ids as TuiAgent[]
+          if (
+            requestGeneration === localDetectionGeneration &&
+            detectPromises.get(contextKey) === pending
+          ) {
+            failedDetectContextKeys.delete(contextKey)
+            const exposeToLegacy = legacyDetectContextKey === contextKey
+            if (exposeToLegacy) {
+              legacyDetectContextKey = null
+              detectedContextKey = contextKey
+            }
+            set((state) => ({
+              ...(exposeToLegacy ? { detectedAgentIds: typed, isDetectingAgents: false } : {}),
+              localDetectedAgentIdsByContext: {
+                ...state.localDetectedAgentIdsByContext,
+                [contextKey]: typed
+              },
+              isDetectingLocalAgentsByContext: contextEviction.removeLocalAgentContextEntry(
+                state.isDetectingLocalAgentsByContext,
+                contextKey
+              )
+            }))
+          }
+          return typed
+        })
+        .catch(() => {
+          if (
+            requestGeneration === localDetectionGeneration &&
+            detectPromises.get(contextKey) === pending
+          ) {
+            failedDetectContextKeys.add(contextKey)
+            const exposeToLegacy = legacyDetectContextKey === contextKey
+            if (exposeToLegacy) {
+              legacyDetectContextKey = null
+            }
+            set((state) => ({
+              ...(exposeToLegacy ? { detectedAgentIds: [], isDetectingAgents: false } : {}),
+              localDetectedAgentIdsByContext: {
+                ...state.localDetectedAgentIdsByContext,
+                [contextKey]: []
+              },
+              isDetectingLocalAgentsByContext: contextEviction.removeLocalAgentContextEntry(
+                state.isDetectingLocalAgentsByContext,
+                contextKey
+              )
+            }))
+          }
+          return [] as TuiAgent[]
+        })
+        .finally(() => {
+          if (detectPromises.get(contextKey) === pending) {
+            detectPromises.delete(contextKey)
+          }
+        })
+      detectPromises.set(contextKey, pending)
+      return pending
+    },
+
+    refreshDetectedAgents: (worktreeId) => {
+      const isFloating = worktreeId === FLOATING_TERMINAL_WORKTREE_ID
+      const context = getLocalAgentPreflightContext(get(), undefined, undefined, worktreeId)
+      const contextKey = localPreflightContextKey(context)
+      const cached = get().localDetectedAgentIdsByContext[contextKey]
+      const hadUsableCache = cached != null && !failedDetectContextKeys.has(contextKey)
+      const requestGeneration = localDetectionGeneration
+      const exposeInflightToLegacy = (): void => {
+        if (!isFloating) {
+          legacyRefreshContextKey = contextKey
+        }
+        if (isFloating) {
+          return
+        }
+        const state = get()
+        const patch = getLegacyLoadingPatch(state, detectedContextKey === contextKey, 'refresh')
+        if (patch) {
+          set(patch)
+        }
+      }
+      const inflight = refreshPromises.get(contextKey)
+      if (inflight) {
+        exposeInflightToLegacy()
+        return inflight
+      }
+      if (!isFloating) {
+        legacyRefreshContextKey = contextKey
+      }
+      const supersedesDetect = detectPromises.delete(contextKey)
+      const clearsLegacyDetect = legacyDetectContextKey === contextKey
+      if (clearsLegacyDetect) {
+        legacyDetectContextKey = null
+      }
+      set((state) => ({
+        ...(isFloating
+          ? {}
+          : (getLegacyLoadingPatch(state, detectedContextKey === contextKey, 'refresh') ?? {})),
+        ...getSupersededDetectPatch(state, contextKey, supersedesDetect, clearsLegacyDetect),
+        isRefreshingLocalAgentsByContext: {
+          ...state.isRefreshingLocalAgentsByContext,
+          [contextKey]: true
+        }
+      }))
+      const pending = window.api.preflight
+        .refreshAgents(context)
+        .then((result) => {
+          const typed = result.agents as TuiAgent[]
+          if (
+            requestGeneration === localDetectionGeneration &&
+            refreshPromises.get(contextKey) === pending
+          ) {
+            failedDetectContextKeys.delete(contextKey)
+            const exposeToLegacy = legacyRefreshContextKey === contextKey
+            if (exposeToLegacy) {
+              legacyRefreshContextKey = null
+              detectedContextKey = contextKey
+            }
+            set((state) => ({
+              ...(exposeToLegacy
+                ? {
+                    detectedAgentIds: typed,
+                    isRefreshingAgents: false,
+                    pathSource: result.pathSource,
+                    pathFailureReason: result.pathFailureReason
+                  }
+                : {}),
+              localDetectedAgentIdsByContext: {
+                ...state.localDetectedAgentIdsByContext,
+                [contextKey]: typed
+              },
+              isRefreshingLocalAgentsByContext: contextEviction.removeLocalAgentContextEntry(
+                state.isRefreshingLocalAgentsByContext,
+                contextKey
+              )
+            }))
+          }
+          return typed
+        })
+        .catch(() => {
+          const fallback = isFloating
+            ? (get().localDetectedAgentIdsByContext[contextKey] ?? [])
+            : detectedContextKey !== contextKey
+              ? []
+              : (get().detectedAgentIds ?? [])
+          if (
+            requestGeneration === localDetectionGeneration &&
+            refreshPromises.get(contextKey) === pending
+          ) {
+            if (!hadUsableCache) {
+              failedDetectContextKeys.add(contextKey)
+            }
+            const exposeToLegacy = legacyRefreshContextKey === contextKey
+            if (exposeToLegacy) {
+              legacyRefreshContextKey = null
+            }
+            set((state) => ({
+              ...(exposeToLegacy ? { detectedAgentIds: fallback, isRefreshingAgents: false } : {}),
+              localDetectedAgentIdsByContext: {
+                ...state.localDetectedAgentIdsByContext,
+                [contextKey]: fallback
+              },
+              isRefreshingLocalAgentsByContext: contextEviction.removeLocalAgentContextEntry(
+                state.isRefreshingLocalAgentsByContext,
+                contextKey
+              )
+            }))
+          }
+          return fallback
+        })
+        .finally(() => {
+          if (refreshPromises.get(contextKey) === pending) {
+            refreshPromises.delete(contextKey)
+          }
+        })
+      refreshPromises.set(contextKey, pending)
+      return pending
+    },
+
+    clearLocalDetectedAgentContextsForProjects: (projectIds) => {
+      const eviction = contextEviction.getLocalAgentContextEviction({
+        projectIds,
+        state: get(),
+        internalContextKeys: [
+          ...detectPromises.keys(),
+          ...refreshPromises.keys(),
+          ...failedDetectContextKeys
+        ],
+        detectedContextKey,
+        legacyDetectContextKey,
+        legacyRefreshContextKey
+      })
+      if (!eviction) {
+        return
+      }
+      for (const contextKey of eviction.removedContextKeys) {
+        detectPromises.delete(contextKey)
+        refreshPromises.delete(contextKey)
+        failedDetectContextKeys.delete(contextKey)
+      }
+      detectedContextKey = eviction.detectedContextKey
+      legacyDetectContextKey = eviction.legacyDetectContextKey
+      legacyRefreshContextKey = eviction.legacyRefreshContextKey
+      set(eviction.statePatch)
+    },
+
+    clearLocalDetectedAgents: () => {
+      localDetectionGeneration += 1
+      detectPromises.clear()
+      refreshPromises.clear()
+      failedDetectContextKeys.clear()
+      detectedContextKey = null
+      legacyDetectContextKey = null
+      legacyRefreshContextKey = null
+      set(createEmptyLocalDetectedAgentState())
+    }
+  }
+}
diff --git a/src/renderer/src/store/slices/local-detected-agent-store-state.ts b/src/renderer/src/store/slices/local-detected-agent-store-state.ts
new file mode 100644
index 00000000000..c961bb5114f
--- /dev/null
+++ b/src/renderer/src/store/slices/local-detected-agent-store-state.ts
@@ -0,0 +1,40 @@
+import type { AppState } from '../types'
+import type { PathSource, ShellHydrationFailureReason, TuiAgent } from '../../../../shared/types'
+
+export type LocalDetectedAgentState = {
+  detectedAgentIds: TuiAgent[] | null
+  isDetectingAgents: boolean
+  isRefreshingAgents: boolean
+  localDetectedAgentIdsByContext: Record<string, TuiAgent[] | null>
+  isDetectingLocalAgentsByContext: Record<string, boolean>
+  isRefreshingLocalAgentsByContext: Record<string, boolean>
+  pathSource: PathSource | null
+  pathFailureReason: ShellHydrationFailureReason | null
+  ensureDetectedAgents: (worktreeId?: string | null) => Promise<TuiAgent[]>
+  refreshDetectedAgents: (worktreeId?: string | null) => Promise<TuiAgent[]>
+  clearLocalDetectedAgentContextsForProjects: (projectIds: readonly string[]) => void
+  clearLocalDetectedAgents: () => void
+}
+
+export function createEmptyLocalDetectedAgentState(): Pick<
+  AppState,
+  | 'detectedAgentIds'
+  | 'isDetectingAgents'
+  | 'isRefreshingAgents'
+  | 'localDetectedAgentIdsByContext'
+  | 'isDetectingLocalAgentsByContext'
+  | 'isRefreshingLocalAgentsByContext'
+  | 'pathSource'
+  | 'pathFailureReason'
+> {
+  return {
+    detectedAgentIds: null,
+    isDetectingAgents: false,
+    isRefreshingAgents: false,
+    localDetectedAgentIdsByContext: {},
+    isDetectingLocalAgentsByContext: {},
+    isRefreshingLocalAgentsByContext: {},
+    pathSource: null,
+    pathFailureReason: null
+  }
+}
diff --git a/src/renderer/src/store/slices/repo-filter-selection.ts b/src/renderer/src/store/slices/repo-filter-selection.ts
new file mode 100644
index 00000000000..65ae6d344a8
--- /dev/null
+++ b/src/renderer/src/store/slices/repo-filter-selection.ts
@@ -0,0 +1,10 @@
+// Why: catalog refreshes re-filter this on every fetch; six identity-sensitive subscribers
+// (App.tsx at the root among them) re-render on a new array even when nothing was pruned.
+export function retainValidFilterRepoIds(
+  filterRepoIds: readonly string[],
+  validRepoIds: ReadonlySet<string>
+): readonly string[] {
+  return filterRepoIds.every((repoId) => validRepoIds.has(repoId))
+    ? filterRepoIds
+    : filterRepoIds.filter((repoId) => validRepoIds.has(repoId))
+}
diff --git a/src/renderer/src/store/slices/repo-host-identity.ts b/src/renderer/src/store/slices/repo-host-identity.ts
index be1c2255621..f21da2b153a 100644
--- a/src/renderer/src/store/slices/repo-host-identity.ts
+++ b/src/renderer/src/store/slices/repo-host-identity.ts
@@ -29,7 +29,7 @@ export function findRepoForHost<T extends RepoIdentityParts>(
   repos: readonly T[],
   repoId: string,
   options: {
-    hostId?: ExecutionHostId | string | null
+    hostId?: ExecutionHostId | (string & {}) | null
     settings?: Pick<GlobalSettings, 'activeRuntimeEnvironmentId'> | null
   } = {}
 ): T | null {
diff --git a/src/renderer/src/store/slices/repo-identity-reconcile.test.ts b/src/renderer/src/store/slices/repo-identity-reconcile.test.ts
index dda221e18b0..ecc1fa7d59e 100644
--- a/src/renderer/src/store/slices/repo-identity-reconcile.test.ts
+++ b/src/renderer/src/store/slices/repo-identity-reconcile.test.ts
@@ -1,7 +1,7 @@
 import { describe, expect, it } from 'vitest'
 import fs from 'node:fs'
 import type { Repo } from '../../../../shared/types'
-import { reconcileFetchedRepos } from './repo-identity-reconcile'
+import { reconcileFetchedRepos, reuseEqualRecordMap } from './repo-identity-reconcile'
 
 function makeRepo(id: string, overrides: Partial<Repo> = {}): Repo {
   return { id, path: `/${id}`, displayName: id, badgeColor: '#000', addedAt: 1, ...overrides }
@@ -123,3 +123,54 @@ describe('reconcileFetchedRepos', () => {
     expect(source).not.toMatch(/previous\.find|next\.find|findIndex/)
   })
 })
+
+describe('reuseEqualRecordMap', () => {
+  const row = (value: string): { value: string; nested: { tags: string[] } } => ({
+    value,
+    nested: { tags: [value, 'shared'] }
+  })
+
+  it('returns the previous map when every key holds an equal value', () => {
+    const previous = { a: row('a'), b: row('b') }
+    expect(reuseEqualRecordMap(previous, { a: row('a'), b: row('b') })).toBe(previous)
+  })
+
+  it('reuses the previous entry for structurally equal nested values', () => {
+    const previous = { a: row('a'), b: row('b') }
+    const result = reuseEqualRecordMap(previous, { a: row('a'), b: row('changed') })
+    expect(result).not.toBe(previous)
+    expect(result.a).toBe(previous.a)
+    expect(result.b).toEqual(row('changed'))
+  })
+
+  it('returns a new map when a value changed', () => {
+    const previous = { a: row('a') }
+    const result = reuseEqualRecordMap(previous, { a: row('changed') })
+    expect(result).not.toBe(previous)
+    expect(result.a).toEqual(row('changed'))
+  })
+
+  it('returns a new map when a key is added', () => {
+    const previous = { a: row('a') }
+    const result = reuseEqualRecordMap(previous, { a: row('a'), b: row('b') })
+    expect(result).not.toBe(previous)
+    expect(result.a).toBe(previous.a)
+    expect(Object.keys(result)).toEqual(['a', 'b'])
+  })
+
+  it('returns a new map when a key is removed', () => {
+    const previous = { a: row('a'), b: row('b') }
+    const result = reuseEqualRecordMap(previous, { a: row('a') })
+    expect(result).not.toBe(previous)
+    expect(Object.keys(result)).toEqual(['a'])
+  })
+
+  it('returns a new map when a key is swapped for a same-count replacement', () => {
+    // Why: equal key counts alone must not read as unchanged — the replacement key misses the
+    // previous lookup, which is why no second pass over the previous keys is needed.
+    const previous = { a: row('a'), b: row('b') }
+    const result = reuseEqualRecordMap(previous, { a: row('a'), c: row('b') })
+    expect(result).not.toBe(previous)
+    expect(Object.keys(result)).toEqual(['a', 'c'])
+  })
+})
diff --git a/src/renderer/src/store/slices/repo-identity-reconcile.ts b/src/renderer/src/store/slices/repo-identity-reconcile.ts
index 9212313f0c7..db59e619d97 100644
--- a/src/renderer/src/store/slices/repo-identity-reconcile.ts
+++ b/src/renderer/src/store/slices/repo-identity-reconcile.ts
@@ -12,7 +12,7 @@ import { getRepoHostIdentity } from './repo-host-identity'
 // arrays). IPC structured-clone rebuilds those every fetch, and main's hydrateRepo always
 // reconstructs hookSettings — so a reference compare reports every repo as changed and no repo
 // ever reconciles. Compare nested plain values structurally; they are small sanitized records.
-function areValuesEqual(a: unknown, b: unknown): boolean {
+export function areValuesEqual(a: unknown, b: unknown): boolean {
   if (a === b) {
     return true
   }
@@ -28,9 +28,11 @@ function areValuesEqual(a: unknown, b: unknown): boolean {
     )
   }
   // Why: only plain records are safe to walk — anything exotic falls back to reference equality.
+  const aPrototype = Object.getPrototypeOf(a)
+  const bPrototype = Object.getPrototypeOf(b)
   if (
-    Object.getPrototypeOf(a) !== Object.prototype ||
-    Object.getPrototypeOf(b) !== Object.prototype
+    (aPrototype !== Object.prototype && aPrototype !== null) ||
+    (bPrototype !== Object.prototype && bPrototype !== null)
   ) {
     return false
   }
@@ -41,47 +43,64 @@ function areValuesEqual(a: unknown, b: unknown): boolean {
     return false
   }
   return keys.every(
-    (key) =>
-      Object.prototype.hasOwnProperty.call(bRecord, key) &&
-      areValuesEqual(aRecord[key], bRecord[key])
+    (key) => Object.hasOwn(bRecord, key) && areValuesEqual(aRecord[key], bRecord[key])
   )
 }
 
-function areReposEqual(a: Repo, b: Repo): boolean {
-  if (a === b) {
-    return true
-  }
-  const keys = Object.keys(a) as (keyof Repo)[]
-  if (keys.length !== Object.keys(b).length) {
-    return false
-  }
-  for (const key of keys) {
-    if (!Object.prototype.hasOwnProperty.call(b, key)) {
-      return false
-    }
-    if (!areValuesEqual(a[key], b[key])) {
-      return false
-    }
-  }
-  return true
-}
-
-export function reconcileFetchedRepos(
-  previous: readonly Repo[],
-  next: readonly Repo[]
-): readonly Repo[] {
-  const previousById = new Map(previous.map((repo) => [getRepoHostIdentity(repo), repo]))
+/**
+ * Reuses equal rows from `previous` — and the whole array when nothing moved — so a refetch that
+ * changed nothing leaves identity-keyed memos and store subscribers untouched. `getIdentity` must
+ * be the key the producing merge already dedups by, so it is unique within `next`.
+ */
+export function reconcileCatalogRows<T>(
+  previous: readonly T[],
+  next: readonly T[],
+  getIdentity: (row: T) => string
+): readonly T[] {
+  const previousByIdentity = new Map(previous.map((row) => [getIdentity(row), row]))
   let identical = next.length === previous.length
-  const reconciled = next.map((repo, index) => {
-    const existing = previousById.get(getRepoHostIdentity(repo))
-    if (existing && areReposEqual(existing, repo)) {
+  const reconciled = next.map((row, index) => {
+    const existing = previousByIdentity.get(getIdentity(row))
+    if (existing !== undefined && areValuesEqual(existing, row)) {
       if (existing !== previous[index]) {
         identical = false
       }
       return existing
     }
     identical = false
-    return repo
+    return row
   })
   return identical ? previous : reconciled
 }
+
+export function reconcileFetchedRepos(
+  previous: readonly Repo[],
+  next: readonly Repo[]
+): readonly Repo[] {
+  return reconcileCatalogRows(previous, next, getRepoHostIdentity)
+}
+
+/**
+ * Reuses equal record values from `previous` — and the whole map when nothing
+ * changed — so a cloned no-op refresh leaves Object.is subscribers untouched.
+ */
+export function reuseEqualRecordMap<T>(
+  previous: Readonly<Record<string, T>>,
+  next: Readonly<Record<string, T>>
+): Readonly<Record<string, T>> {
+  const nextKeys = Object.keys(next)
+  // Why: a matching key count plus every `next` key resolving to an equal `previous` entry below
+  // means the key sets match, so a removed key always lands as either a count or a lookup miss.
+  let identical = nextKeys.length === Object.keys(previous).length
+  const reconciled: Record<string, T> = {}
+  for (const key of nextKeys) {
+    const existing = Object.hasOwn(previous, key) ? previous[key] : undefined
+    if (existing !== undefined && areValuesEqual(existing, next[key])) {
+      reconciled[key] = existing
+      continue
+    }
+    identical = false
+    reconciled[key] = next[key]
+  }
+  return identical ? previous : reconciled
+}
diff --git a/src/renderer/src/store/slices/repos-all-hosts-generation.test.ts b/src/renderer/src/store/slices/repos-all-hosts-generation.test.ts
index 24e2c770dce..1aa9ed76072 100644
--- a/src/renderer/src/store/slices/repos-all-hosts-generation.test.ts
+++ b/src/renderer/src/store/slices/repos-all-hosts-generation.test.ts
@@ -147,6 +147,86 @@ describe('fetchReposForAllHosts generation', () => {
     expect(store.getState().repos.map((repo) => repo.id)).toEqual(['local-repo', 'remote-repo'])
   })
 
+  it('keeps an in-flight all-host remote result across a newer local refresh', async () => {
+    let resolveRemote!: (value: unknown) => void
+    let markRemoteStarted!: () => void
+    const remote = new Promise((resolve) => {
+      resolveRemote = resolve
+    })
+    const remoteStarted = new Promise<void>((resolve) => {
+      markRemoteStarted = resolve
+    })
+    runtimeEnvironmentCall.mockImplementation((args: RuntimeEnvironmentCallRequest) => {
+      if (args.method === 'repo.list') {
+        markRemoteStarted()
+        return remote
+      }
+      return {
+        id: 'rpc-other',
+        ok: true,
+        result: { projects: [], setups: [] },
+        _meta: { runtimeId: 'runtime-remote' }
+      }
+    })
+    const store = createTestStore()
+
+    const allHosts = store.getState().fetchReposForAllHosts()
+    await remoteStarted
+    await store.getState().fetchRepos({ runtimeEnvironmentId: null })
+    resolveRemote({
+      id: 'rpc-repo-list',
+      ok: true,
+      result: { repos: [remoteRepo] },
+      _meta: { runtimeId: 'runtime-remote' }
+    })
+    await allHosts
+
+    expect(store.getState().repos.map((repo) => repo.id)).toEqual(['local-repo', 'remote-repo'])
+  })
+
+  it('starts all-host remote loads after a newer local refresh replaces its local result', async () => {
+    let resolveOlderLocal!: (repos: Repo[]) => void
+    let resolveRemote!: (value: unknown) => void
+    let markRemoteStarted!: () => void
+    const olderLocal = new Promise<Repo[]>((resolve) => {
+      resolveOlderLocal = resolve
+    })
+    const remote = new Promise((resolve) => {
+      resolveRemote = resolve
+    })
+    const remoteStarted = new Promise<void>((resolve) => {
+      markRemoteStarted = resolve
+    })
+    reposList.mockReturnValueOnce(olderLocal)
+    runtimeEnvironmentCall.mockImplementation((args: RuntimeEnvironmentCallRequest) => {
+      if (args.method === 'repo.list') {
+        markRemoteStarted()
+        return remote
+      }
+      return {
+        id: 'rpc-other',
+        ok: true,
+        result: { projects: [], setups: [] },
+        _meta: { runtimeId: 'runtime-remote' }
+      }
+    })
+    const store = createTestStore()
+
+    const allHosts = store.getState().fetchReposForAllHosts()
+    await store.getState().fetchRepos({ runtimeEnvironmentId: null })
+    resolveOlderLocal([localRepo])
+    await remoteStarted
+    resolveRemote({
+      id: 'rpc-repo-list',
+      ok: true,
+      result: { repos: [remoteRepo] },
+      _meta: { runtimeId: 'runtime-remote' }
+    })
+    await allHosts
+
+    expect(store.getState().repos.map((repo) => repo.id)).toEqual(['local-repo', 'remote-repo'])
+  })
+
   it('keeps a newer Connect-flow catalog when an older all-host response resolves last', async () => {
     let resolveOlder!: (value: unknown) => void
     let markOlderStarted!: () => void
diff --git a/src/renderer/src/store/slices/repos-paired-runtime-add.test.ts b/src/renderer/src/store/slices/repos-paired-runtime-add.test.ts
new file mode 100644
index 00000000000..4e0f4cae622
--- /dev/null
+++ b/src/renderer/src/store/slices/repos-paired-runtime-add.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it, vi } from 'vitest'
+import { createTestStore } from './store-test-helpers'
+import {
+  installReposRuntimeRoutingHarness,
+  remoteRepo,
+  reposAdd,
+  reposPickFolder,
+  runtimeEnvironmentCall
+} from './repos-runtime-routing-fixture'
+
+vi.mock('sonner', () => ({
+  toast: {
+    error: vi.fn(),
+    info: vi.fn(),
+    success: vi.fn(),
+    warning: vi.fn()
+  }
+}))
+
+installReposRuntimeRoutingHarness()
+
+describe('paired runtime repo add routing', () => {
+  it('submits the selected host path to repo.add without native filesystem calls', async () => {
+    runtimeEnvironmentCall.mockResolvedValue({
+      id: 'rpc-paired-add',
+      ok: true,
+      result: { repo: remoteRepo },
+      _meta: { runtimeId: 'runtime-remote' }
+    })
+    const store = createTestStore()
+
+    await store.getState().addRepoPath('/srv/paired-project', 'folder', {
+      runtimeEnvironmentId: 'paired-host'
+    })
+
+    expect(runtimeEnvironmentCall).toHaveBeenCalledWith({
+      selector: 'paired-host',
+      method: 'repo.add',
+      params: { path: '/srv/paired-project', kind: 'folder' },
+      timeoutMs: 15_000
+    })
+    expect(reposAdd).not.toHaveBeenCalled()
+    expect(reposPickFolder).not.toHaveBeenCalled()
+  })
+})
diff --git a/src/renderer/src/store/slices/repos-project-runtime.test.ts b/src/renderer/src/store/slices/repos-project-runtime.test.ts
index f007158d31b..ba61fd6a552 100644
--- a/src/renderer/src/store/slices/repos-project-runtime.test.ts
+++ b/src/renderer/src/store/slices/repos-project-runtime.test.ts
@@ -266,6 +266,35 @@ describe('repo slice project runtime updates', () => {
     expect(projectsUpdate).not.toHaveBeenCalled()
   })
 
+  // Why: a host whose repos carry no `addedAt` projects createdAt 0, which means unknown, not
+  // epoch. Merging it with the host that does know the timestamp must keep the real one.
+  it('prefers a known createdAt over an unknown 0 when merging the same project id', async () => {
+    const project: Project = {
+      id: 'github:stablyai/orca',
+      displayName: 'Orca',
+      badgeColor: '#000',
+      sourceRepoIds: ['remote-repo'],
+      createdAt: 0,
+      updatedAt: 0
+    }
+    projectsUpdate.mockResolvedValue({
+      ...project,
+      sourceRepoIds: ['local-repo'],
+      createdAt: 100,
+      updatedAt: 100,
+      localWindowsRuntimePreference: { kind: 'windows-host' }
+    })
+    const store = createTestStore()
+    store.setState({ projects: [project] })
+
+    await store.getState().updateProject(project.id, {
+      localWindowsRuntimePreference: { kind: 'windows-host' }
+    })
+
+    expect(store.getState().projects[0]?.createdAt).toBe(100)
+    expect(store.getState().projects[0]?.updatedAt).toBe(100)
+  })
+
   it('preserves shared project source repos when updating local runtime preferences', async () => {
     const project: Project = {
       id: 'github:stablyai/orca',
diff --git a/src/renderer/src/store/slices/repos-refresh-identity.test.ts b/src/renderer/src/store/slices/repos-refresh-identity.test.ts
new file mode 100644
index 00000000000..193bd045ede
--- /dev/null
+++ b/src/renderer/src/store/slices/repos-refresh-identity.test.ts
@@ -0,0 +1,438 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import type { Project, Repo } from '../../../../shared/types'
+import { getSetupScriptPromptDismissalKey } from '../../lib/setup-script-prompt'
+import { getRepoHostIdentityForParts } from './repo-host-identity'
+import { createTestStore } from './store-test-helpers'
+
+// Why: every field here is load-bearing. A scalar-only repo reconciles even when the structural
+// compare is broken, which is exactly how an earlier version of this work shipped green and inert.
+// addedAt is non-zero on this fixture so the default case still exercises a real timestamp;
+// dedicated tests below cover addedAt 0 / omitted without restamping Date.now().
+const repo: Repo = {
+  id: 'repo-1',
+  path: '/repo-1',
+  displayName: 'Repo 1',
+  badgeColor: '#000000',
+  addedAt: 1_700_000_000_000,
+  executionHostId: 'local',
+  kind: 'git',
+  repoIcon: { type: 'lucide', name: 'Box' },
+  upstream: { owner: 'upstream-owner', repo: 'repo-1', host: 'github.com' },
+  gitRemoteIdentity: {
+    canonicalKey: 'github.com/octocat/repo-1',
+    remoteName: 'origin',
+    remoteUrl: 'git@github.com:octocat/repo-1.git'
+  },
+  hookSettings: { mode: 'auto', scripts: { setup: 'echo hi', archive: '' } },
+  symlinkPaths: ['.env', 'node_modules'],
+  importedExternalWorktreePaths: []
+}
+
+const secondRepo: Repo = {
+  ...repo,
+  id: 'repo-2',
+  path: '/repo-2',
+  displayName: 'Repo 2',
+  addedAt: 1_700_000_001_000,
+  upstream: { owner: 'upstream-owner', repo: 'repo-2', host: 'github.com' },
+  gitRemoteIdentity: {
+    canonicalKey: 'github.com/octocat/repo-2',
+    remoteName: 'origin',
+    remoteUrl: 'git@github.com:octocat/repo-2.git'
+  }
+}
+
+const reposList = vi.fn()
+const projectsList = vi.fn()
+const listHostSetups = vi.fn()
+
+// Why: catalogs arrive over IPC, so every fetch must hand back freshly allocated objects —
+// otherwise identity would match by accident and prove nothing.
+function clone<T>(value: T): T {
+  return structuredClone(value)
+}
+
+function mockRepos(...rows: readonly (Repo | Omit<Repo, 'addedAt'>)[]): void {
+  reposList.mockImplementation(async () => rows.map(clone))
+}
+
+function omitAddedAt(row: Repo): Omit<Repo, 'addedAt'> {
+  const { addedAt: _addedAt, ...rest } = row
+  return rest
+}
+
+beforeEach(() => {
+  reposList.mockReset()
+  projectsList.mockReset()
+  listHostSetups.mockReset()
+  mockRepos(repo)
+  projectsList.mockImplementation(async () => [])
+  listHostSetups.mockImplementation(async () => [])
+
+  vi.stubGlobal('window', {
+    api: {
+      repos: { list: reposList },
+      projects: { list: projectsList, listHostSetups }
+    },
+    dispatchEvent: vi.fn()
+  })
+})
+
+describe('repo catalog refresh identity', () => {
+  it('keeps the projects and host setups arrays and entries across a no-op refetch', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+    const setups = store.getState().projectHostSetups
+    expect(projects).toHaveLength(1)
+    expect(setups).toHaveLength(1)
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).toBe(projects)
+    expect(store.getState().projects[0]).toBe(projects[0])
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+  })
+
+  it('lets a nested hookSettings change through', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+
+    mockRepos({ ...repo, hookSettings: { mode: 'override', scripts: { setup: '', archive: '' } } })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projectHostSetups).not.toBe(setups)
+    expect(store.getState().projectHostSetups[0]?.hookSettings?.mode).toBe('override')
+  })
+
+  it('lets a displayName change through on projects', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+
+    mockRepos({ ...repo, displayName: 'Renamed' })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).not.toBe(projects)
+    expect(store.getState().projects[0]?.displayName).toBe('Renamed')
+  })
+
+  it('lets an array-field change through', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const repos = store.getState().repos
+
+    mockRepos({ ...repo, symlinkPaths: ['.env'] })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().repos).not.toBe(repos)
+    expect(store.getState().repos[0]?.symlinkPaths).toEqual(['.env'])
+  })
+
+  it('lets a nested gitRemoteIdentity change through', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+
+    mockRepos({
+      ...repo,
+      gitRemoteIdentity: { ...repo.gitRemoteIdentity!, remoteName: 'upstream' }
+    })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).not.toBe(projects)
+    expect(store.getState().projects[0]?.gitRemoteIdentity?.remoteName).toBe('upstream')
+  })
+
+  it('treats clearing localWindowsRuntimePreference as a change', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projectId = store.getState().projects[0]!.id
+    const withPreference: Project = {
+      ...store.getState().projects[0]!,
+      localWindowsRuntimePreference: { kind: 'wsl', distro: 'Ubuntu' }
+    }
+    store.setState({ projects: [withPreference] })
+
+    await store.getState().fetchRepos()
+
+    // Why: a local-host refresh is authoritative; an absent key must not read as unchanged.
+    expect(store.getState().projects[0]).not.toBe(withPreference)
+    expect(store.getState().projects[0]?.id).toBe(projectId)
+    expect(store.getState().projects[0]?.localWindowsRuntimePreference).toBeUndefined()
+  })
+
+  it('reuses an unchanged setup element while a sibling changes', async () => {
+    mockRepos(repo, secondRepo)
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+    expect(setups).toHaveLength(2)
+
+    mockRepos(repo, { ...secondRepo, displayName: 'Repo 2 renamed' })
+    await store.getState().fetchRepos()
+
+    const next = store.getState().projectHostSetups
+    expect(next).not.toBe(setups)
+    expect(next[0]).toBe(setups[0])
+    expect(next[1]).not.toBe(setups[1])
+  })
+
+  it('does not reuse a setup that moved to a different execution host', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+    expect(setups[0]?.hostId).toBe('local')
+
+    // Why: the repo-derived fallback sets setup.id = repo.id, so the same id on a second host is
+    // the case that would silently splice the wrong host's routing metadata into the row.
+    mockRepos({ ...repo, executionHostId: 'ssh:host-a', connectionId: 'host-a' })
+    await store.getState().fetchRepos()
+
+    const next = store.getState().projectHostSetups
+    expect(next[0]).not.toBe(setups[0])
+    expect(next[0]?.hostId).toBe('ssh:host-a')
+  })
+
+  it('reconciles both setups when one repo id exists on two hosts', async () => {
+    // Why: the repo-derived fallback sets setup.id = repo.id, so these two setups share an id and
+    // differ only by host. Keying the reconcile on setup.id instead of the owner key collapses them
+    // onto one slot and one of the two churns on every refresh.
+    const sshRepo: Repo = { ...repo, executionHostId: 'ssh:host-a', connectionId: 'host-a' }
+    mockRepos(repo, sshRepo)
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+    expect(setups).toHaveLength(2)
+    expect(new Set(setups.map((setup) => setup.id)).size).toBe(1)
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+    expect(store.getState().projectHostSetups[1]).toBe(setups[1])
+  })
+
+  it('drops a project and its setup when its repo disappears', async () => {
+    mockRepos(repo, secondRepo)
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+
+    mockRepos(repo)
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).not.toBe(projects)
+    expect(store.getState().projects).toHaveLength(1)
+    expect(store.getState().projectHostSetups).toHaveLength(1)
+  })
+
+  it('adds a project and its setup when a repo appears', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+
+    mockRepos(repo, secondRepo)
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).not.toBe(projects)
+    expect(store.getState().projects).toHaveLength(2)
+    expect(store.getState().projectHostSetups).toHaveLength(2)
+  })
+
+  it('keeps catalog identity when repo.addedAt is 0', async () => {
+    mockRepos({ ...repo, addedAt: 0 })
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+    const setups = store.getState().projectHostSetups
+    expect(projects).toHaveLength(1)
+    expect(setups).toHaveLength(1)
+    expect(projects[0]?.createdAt).toBe(0)
+    expect(setups[0]?.createdAt).toBe(0)
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).toBe(projects)
+    expect(store.getState().projects[0]).toBe(projects[0])
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+  })
+
+  it('keeps catalog identity when repo.addedAt is omitted', async () => {
+    mockRepos(omitAddedAt(repo))
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+    const setups = store.getState().projectHostSetups
+    expect(projects).toHaveLength(1)
+    expect(setups).toHaveLength(1)
+    expect(projects[0]?.createdAt).toBe(0)
+    expect(setups[0]?.createdAt).toBe(0)
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projects).toBe(projects)
+    expect(store.getState().projects[0]).toBe(projects[0])
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+  })
+
+  it('lets a nested hookSettings change through when repo.addedAt is 0', async () => {
+    mockRepos({ ...repo, addedAt: 0 })
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+
+    mockRepos({
+      ...repo,
+      addedAt: 0,
+      hookSettings: { mode: 'override', scripts: { setup: '', archive: '' } }
+    })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().projectHostSetups).not.toBe(setups)
+    expect(store.getState().projectHostSetups[0]).not.toBe(setups[0])
+    expect(store.getState().projectHostSetups[0]?.hookSettings?.mode).toBe('override')
+  })
+})
+
+describe('repo filter identity across catalog refreshes', () => {
+  it('keeps the filterRepoIds array when a refetch prunes nothing', async () => {
+    const store = createTestStore()
+    store.setState({ filterRepoIds: [repo.id] })
+    const first = store.getState().filterRepoIds
+
+    await store.getState().fetchRepos()
+
+    // Why: App.tsx at the root and five sidebar consumers select this array by identity.
+    expect(store.getState().filterRepoIds).toBe(first)
+  })
+
+  it('still prunes a filtered repo id that no longer exists', async () => {
+    const store = createTestStore()
+    store.setState({ filterRepoIds: [repo.id, 'gone'] })
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().filterRepoIds).toEqual([repo.id])
+  })
+
+  it('prunes only the vanished id and reallocates', async () => {
+    mockRepos(repo)
+    const store = createTestStore()
+    store.setState({ filterRepoIds: [repo.id, secondRepo.id] })
+    const first = store.getState().filterRepoIds
+
+    await store.getState().fetchRepos()
+
+    expect(store.getState().filterRepoIds).toEqual([repo.id])
+    expect(store.getState().filterRepoIds).not.toBe(first)
+  })
+
+  it('keeps a filtered id whose repo merely moved to another host', async () => {
+    const store = createTestStore()
+    store.setState({ filterRepoIds: [repo.id] })
+    const first = store.getState().filterRepoIds
+
+    // Why: the filter is keyed on repo id, not host identity — a rehomed repo is not pruned.
+    mockRepos({ ...repo, executionHostId: 'ssh:host-a', connectionId: 'host-a' })
+    await store.getState().fetchRepos()
+
+    expect(store.getState().filterRepoIds).toBe(first)
+  })
+})
+describe('setup-script dismissal identity across catalog refreshes', () => {
+  it('keeps the dismissal array when a refetch prunes nothing', async () => {
+    const store = createTestStore()
+    store.setState({
+      setupScriptPromptDismissedRepoIds: [
+        getSetupScriptPromptDismissalKey(getRepoHostIdentityForParts(repo.id, 'local'))
+      ]
+    })
+    const first = store.getState().setupScriptPromptDismissedRepoIds
+
+    await store.getState().fetchRepos()
+
+    // Why: SetupScriptPromptCard Object.is-subscribes to this array. A no-op
+    // catalog refresh must not allocate just because the helper rebuilt next.
+    expect(store.getState().setupScriptPromptDismissedRepoIds).toBe(first)
+  })
+})
+
+describe('SSH readoption catalog identity', () => {
+  it('keeps projects and host setups across a no-op recordSshRepoReadoptions([])', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const before = store.getState()
+    const projects = before.projects
+    const setups = before.projectHostSetups
+    expect(projects).toHaveLength(1)
+    expect(setups).toHaveLength(1)
+
+    store.getState().recordSshRepoReadoptions([])
+
+    // Why: the empty-in/empty-pending call must hand the state object back untouched, or the
+    // freshly allocated pendingSshRepoReadoptions alone would wake every store subscriber.
+    expect(store.getState()).toBe(before)
+    expect(store.getState().pendingSshRepoReadoptions).toBe(before.pendingSshRepoReadoptions)
+    expect(store.getState().projects).toBe(projects)
+    expect(store.getState().projects[0]).toBe(projects[0])
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+  })
+
+  it('keeps catalog identity for a pending-only readoption while pending updates', async () => {
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const projects = store.getState().projects
+    const setups = store.getState().projectHostSetups
+    const readoption = { oldTargetId: 'ssh-old', newTargetId: 'ssh-new', repoIds: [repo.id] }
+
+    store.getState().recordSshRepoReadoptions([readoption])
+
+    expect(store.getState().pendingSshRepoReadoptions).toEqual([readoption])
+    expect(store.getState().projects).toBe(projects)
+    expect(store.getState().projects[0]).toBe(projects[0])
+    expect(store.getState().projectHostSetups).toBe(setups)
+    expect(store.getState().projectHostSetups[0]).toBe(setups[0])
+  })
+
+  it('replaces the moved setup on a real prune/rehome', async () => {
+    const oldHostRepo: Repo = {
+      ...repo,
+      connectionId: 'ssh-old',
+      executionHostId: 'ssh:ssh-old'
+    }
+    const newHostRepo: Repo = {
+      ...repo,
+      connectionId: 'ssh-new',
+      executionHostId: 'ssh:ssh-new'
+    }
+    mockRepos(oldHostRepo, newHostRepo)
+    const store = createTestStore()
+    await store.getState().fetchRepos()
+    const setups = store.getState().projectHostSetups
+    expect(setups).toHaveLength(2)
+    const oldSetup = setups.find((setup) => setup.hostId === 'ssh:ssh-old')
+    const newSetup = setups.find((setup) => setup.hostId === 'ssh:ssh-new')
+    expect(oldSetup).toBeDefined()
+    expect(newSetup).toBeDefined()
+
+    store.getState().recordSshRepoReadoptions([
+      { oldTargetId: 'ssh-old', newTargetId: 'ssh-new', repoIds: [repo.id] }
+    ])
+
+    const next = store.getState().projectHostSetups
+    expect(next).not.toBe(setups)
+    expect(next).toHaveLength(1)
+    expect(next[0]).not.toBe(oldSetup)
+    expect(next[0]?.hostId).toBe('ssh:ssh-new')
+    expect(store.getState().repos).toHaveLength(1)
+    expect(store.getState().repos[0]?.executionHostId).toBe('ssh:ssh-new')
+    expect(store.getState().pendingSshRepoReadoptions).toEqual([])
+  })
+})
+
diff --git a/src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts b/src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts
index 15ca69fda3c..69bebba9240 100644
--- a/src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts
+++ b/src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts
@@ -50,7 +50,11 @@ function seedTwoProjects(store: ReturnType<typeof createTestStore>): void {
     groupsByWorktree: { [W1]: [], [W2]: [] },
     browserTabsByWorktree: { [W1]: [], [W2]: [] },
     gitStatusHugeByWorktree: { [W1]: { limit: 1000 }, [W2]: { limit: 2000 } },
-    everActivatedWorktreeIds: new Set([W1, W2])
+    everActivatedWorktreeIds: new Set([W1, W2]),
+    localDetectedAgentIdsByContext: {
+      'repo-1:windows-host': ['claude'],
+      'repo-2:windows-host': ['codex']
+    }
   })
 }
 
@@ -68,6 +72,7 @@ describe('removeProject purges per-worktree state (leak regression)', () => {
     expect(s.browserTabsByWorktree[W1]).toBeUndefined()
     expect(s.gitStatusHugeByWorktree[W1]).toBeUndefined()
     expect(s.everActivatedWorktreeIds.has(W1)).toBe(false)
+    expect(s.localDetectedAgentIdsByContext['repo-1:windows-host']).toBeUndefined()
   })
 
   it('keeps per-worktree state for projects that are NOT removed', async () => {
@@ -83,5 +88,6 @@ describe('removeProject purges per-worktree state (leak regression)', () => {
     expect(s.browserTabsByWorktree[W2]).toBeDefined()
     expect(s.gitStatusHugeByWorktree[W2]).toEqual({ limit: 2000 })
     expect(s.everActivatedWorktreeIds.has(W2)).toBe(true)
+    expect(s.localDetectedAgentIdsByContext['repo-2:windows-host']).toEqual(['codex'])
   })
 })
diff --git a/src/renderer/src/store/slices/repos.ts b/src/renderer/src/store/slices/repos.ts
index 39b9edd20e1..4020b199b04 100644
--- a/src/renderer/src/store/slices/repos.ts
+++ b/src/renderer/src/store/slices/repos.ts
@@ -25,6 +25,8 @@ import type {
 } from '../../../../shared/types'
 import {
   getProjectIdentityKey,
+  mergeCatalogCreatedAt,
+  mergeCatalogUpdatedAt,
   projectHostSetupProjectionFromRepos,
   type ProjectHostSetupProjection
 } from '../../../../shared/project-host-setup-projection'
@@ -47,7 +49,12 @@ import { getProjectGroupSubtreeIds } from '../../../../shared/project-groups'
 import { isPathInsideOrEqual } from '../../../../shared/cross-platform-path'
 import { getRepoIdFromWorktreeId } from '../../../../shared/worktree-id'
 import { selectProjectGroupRemovalTargets } from './project-group-removal-targets'
-import { reconcileFetchedRepos } from './repo-identity-reconcile'
+import {
+  areValuesEqual,
+  reconcileCatalogRows,
+  reconcileFetchedRepos
+} from './repo-identity-reconcile'
+import { retainValidFilterRepoIds } from './repo-filter-selection'
 import {
   mergeSshRepoReadoptions,
   reconcileReadoptedSshRepoRows,
@@ -132,6 +139,7 @@ export type RepoUpdate = Partial<
     | 'externalWorktreeVisibilityPromptDismissedAt'
     | 'externalWorktreeInboxBaselinePaths'
     | 'importedExternalWorktreePaths'
+    | 'agentWorktreeVisibility'
     | 'projectGroupId'
     | 'projectGroupOrder'
   >
@@ -160,6 +168,7 @@ type FolderWorkspaceUpdates = Partial<
     | 'pendingFirstAgentMessageRename'
     | 'firstAgentMessageRenameError'
     | 'lastActivityAt'
+    | 'diffComments'
   >
 >
 
@@ -554,8 +563,10 @@ function mergeProjectCompatibilityProject(base: Project, overlay: Project): Proj
     ...overlay,
     // Why: all-host startup fetches hosts separately; one host's record must not erase repo ownership learned from another host with the same id.
     sourceRepoIds: [...new Set([...base.sourceRepoIds, ...overlay.sourceRepoIds])],
-    createdAt: Math.min(base.createdAt, overlay.createdAt),
-    updatedAt: Math.max(base.updatedAt, overlay.updatedAt)
+    // Why not plain min/max: a host whose repos carry no `addedAt` projects 0, and 0 means
+    // unknown, not epoch — it must not win over the real timestamp the other host knows.
+    createdAt: mergeCatalogCreatedAt(base.createdAt, overlay.createdAt),
+    updatedAt: mergeCatalogUpdatedAt(base.updatedAt, overlay.updatedAt)
   }
   if (localWindowsRuntimePreference === undefined) {
     delete project.localWindowsRuntimePreference
@@ -790,6 +801,81 @@ function getExplicitProjectHostIds(
   return hostIds
 }
 
+function indexProjectHostSetupsByProjectId(
+  setups: readonly ProjectHostSetup[]
+): Map<string, ProjectHostSetup[]> {
+  const setupsByProjectId = new Map<string, ProjectHostSetup[]>()
+  for (const setup of setups) {
+    const existing = setupsByProjectId.get(setup.projectId)
+    if (existing) {
+      existing.push(setup)
+    } else {
+      setupsByProjectId.set(setup.projectId, [setup])
+    }
+  }
+  return setupsByProjectId
+}
+
+function getProjectSourceRepos(
+  project: Project,
+  reposById: ReadonlyMap<string, readonly Repo[]>
+): Repo[] {
+  const sourceRepos: Repo[] = []
+  for (const repoId of project.sourceRepoIds) {
+    for (const repo of reposById.get(repoId) ?? []) {
+      sourceRepos.push(repo)
+    }
+  }
+  return sourceRepos
+}
+
+// Why: the host-id resolvers rescan every setup and repo per project; feeding them the project's own slices keeps a catalog refresh linear.
+function createProjectHostIdIndex(
+  setups: readonly ProjectHostSetup[],
+  reposById: ReadonlyMap<string, readonly Repo[]>,
+  resolveHostIds: (
+    project: Project,
+    setups: readonly ProjectHostSetup[],
+    repos: readonly Repo[]
+  ) => Set<string>
+): (project: Project) => ReadonlySet<string> {
+  const noSetups: readonly ProjectHostSetup[] = []
+  const hostIdsByProject = new Map<Project, ReadonlySet<string>>()
+  let setupsByProjectId: Map<string, ProjectHostSetup[]> | null = null
+  return (project) => {
+    const cached = hostIdsByProject.get(project)
+    if (cached) {
+      return cached
+    }
+    setupsByProjectId ??= indexProjectHostSetupsByProjectId(setups)
+    const hostIds = resolveHostIds(
+      project,
+      setupsByProjectId.get(project.id) ?? noSetups,
+      getProjectSourceRepos(project, reposById)
+    )
+    hostIdsByProject.set(project, hostIds)
+    return hostIds
+  }
+}
+
+// Why: mergePreviousProjectMetadata scans the whole catalog's repo key set; a view holding only this pair's repos keeps that scan per-project.
+function restrictReposToProjectPair(
+  previous: Project,
+  current: Project,
+  reposById: ReadonlyMap<string, readonly Repo[]>
+): Map<string, readonly Repo[]> {
+  const restricted = new Map<string, readonly Repo[]>()
+  for (const project of [previous, current]) {
+    for (const repoId of project.sourceRepoIds) {
+      const matches = reposById.get(repoId)
+      if (matches) {
+        restricted.set(repoId, matches)
+      }
+    }
+  }
+  return restricted
+}
+
 function mergeFetchedProjectCompatibilityForHost({
   previous,
   fetched,
@@ -817,80 +903,78 @@ function mergeFetchedProjectCompatibilityForHost({
   const previousProjectById = new Map(previous.projects.map((project) => [project.id, project]))
   const reposById = getReposById(repos)
   const currentRepoIds = new Set(repos.map((repo) => repo.id))
-  const projectHasHost = (project: Project, setups: readonly ProjectHostSetup[]): boolean =>
-    getProjectHostIds(project, setups, repos).has(hostId)
-  const projectHasCurrentOwnerOutsideHost = (project: Project): boolean =>
-    [...getExplicitProjectHostIds(project, projectHostSetups, repos)].some(
-      (ownerHostId) => ownerHostId !== hostId
-    )
+  const fetchedProjectHostIds = createProjectHostIdIndex(
+    fetched.projectHostSetups,
+    reposById,
+    getProjectHostIds
+  )
+  const previousProjectHostIds = createProjectHostIdIndex(
+    previous.projectHostSetups,
+    reposById,
+    getProjectHostIds
+  )
+  const currentProjectOwnerHostIds = createProjectHostIdIndex(
+    projectHostSetups,
+    reposById,
+    getExplicitProjectHostIds
+  )
+  const projectHasCurrentOwnerOutsideHost = (project: Project): boolean => {
+    for (const ownerHostId of currentProjectOwnerHostIds(project)) {
+      if (ownerHostId !== hostId) {
+        return true
+      }
+    }
+    return false
+  }
   const fetchedProjects = fetched.projects
     .filter((project) => {
       const previousProject = previousProjectById.get(project.id)
       // Why: repo-derived compatibility projects include every host; a one-host refresh should only reconcile or prune that host's ownership.
       return (
-        projectHasHost(project, fetched.projectHostSetups) ||
-        (previousProject ? projectHasHost(previousProject, previous.projectHostSetups) : false)
+        fetchedProjectHostIds(project).has(hostId) ||
+        (previousProject ? previousProjectHostIds(previousProject).has(hostId) : false)
       )
     })
     .map((project) => {
       const previousProject = previousProjectById.get(project.id)
       return previousProject
-        ? mergePreviousProjectMetadata(previousProject, project, reposById, hostId)
+        ? mergePreviousProjectMetadata(
+            previousProject,
+            project,
+            restrictReposToProjectPair(previousProject, project, reposById),
+            hostId
+          )
         : projectWithCurrentSourceRepoIds(project, currentRepoIds)
     })
   const fetchedProjectIds = new Set(fetchedProjects.map((project) => project.id))
   const preservedProjects = previous.projects.filter(
     (project) =>
       !fetchedProjectIds.has(project.id) &&
-      (!getProjectHostIds(project, previous.projectHostSetups, repos).has(hostId) ||
-        projectHasCurrentOwnerOutsideHost(project))
+      (!previousProjectHostIds(project).has(hostId) || projectHasCurrentOwnerOutsideHost(project))
   )
+  // Why: both merges always allocate (sourceRepoIds is rebuilt per project, and fetched setups
+  // arrive freshly cloned over IPC), so reconcile against `previous` to recover identity when a
+  // refresh changed nothing. Each key is what the producing merge already dedups by.
   return {
-    projects: mergeProjectCompatibilityProjects(
-      preservedProjects.map((project) => {
-        const sourceRepoIds = getSourceRepoIdsOutsideHost(project, reposById, hostId)
-        return sourceRepoIds.length === project.sourceRepoIds.length
-          ? project
-          : { ...project, sourceRepoIds }
-      }),
-      fetchedProjects
+    projects: reconcileCatalogRows(
+      previous.projects,
+      mergeProjectCompatibilityProjects(
+        preservedProjects.map((project) => {
+          const sourceRepoIds = getSourceRepoIdsOutsideHost(project, reposById, hostId)
+          return sourceRepoIds.length === project.sourceRepoIds.length
+            ? project
+            : { ...project, sourceRepoIds }
+        }),
+        fetchedProjects
+      ),
+      (project) => project.id
     ),
-    projectHostSetups
-  }
-}
-
-function isPlainCatalogObject(value: unknown): value is Record<string, unknown> {
-  if (typeof value !== 'object' || value === null) {
-    return false
-  }
-  const prototype = Object.getPrototypeOf(value)
-  return prototype === Object.prototype || prototype === null
-}
-
-// Why: catalog fetches rebuild every entry from IPC, so identity alone never matches;
-// structural equality is what lets an unchanged refetch stay a no-op.
-function areCatalogEntriesEqual(a: unknown, b: unknown): boolean {
-  if (a === b) {
-    return true
-  }
-  if (Array.isArray(a) || Array.isArray(b)) {
-    return (
-      Array.isArray(a) &&
-      Array.isArray(b) &&
-      a.length === b.length &&
-      a.every((entry, index) => areCatalogEntriesEqual(entry, b[index]))
+    projectHostSetups: reconcileCatalogRows(
+      previous.projectHostSetups,
+      projectHostSetups,
+      getProjectHostSetupOwnerKey
     )
   }
-  if (!isPlainCatalogObject(a) || !isPlainCatalogObject(b)) {
-    return false
-  }
-  const keys = Object.keys(a)
-  if (keys.length !== Object.keys(b).length) {
-    return false
-  }
-  return keys.every(
-    (key) => Object.prototype.hasOwnProperty.call(b, key) && areCatalogEntriesEqual(a[key], b[key])
-  )
 }
 
 // Why: returning `base` unchanged keeps referential-equality selectors quiet, so a
@@ -912,7 +996,7 @@ function mergeByIdentity<T>(
       changed = true
       continue
     }
-    if (areCatalogEntriesEqual(merged[index], entry)) {
+    if (areValuesEqual(merged[index], entry)) {
       continue
     }
     merged[index] = entry
@@ -1203,7 +1287,7 @@ function filterSetupsForPrunedRepoRows(
   setups: readonly ProjectHostSetup[],
   mergedRepos: readonly Repo[],
   reconciledRepos: readonly Repo[]
-): ProjectHostSetup[] {
+): readonly ProjectHostSetup[] {
   const survivingOwners = new Set(
     reconciledRepos.map((repo) => `${getRepoExecutionHostId(repo)}:${repo.id}`)
   )
@@ -1212,12 +1296,15 @@ function filterSetupsForPrunedRepoRows(
       .filter((repo) => !survivingOwners.has(`${getRepoExecutionHostId(repo)}:${repo.id}`))
       .map((repo) => `${getRepoExecutionHostId(repo)}:${repo.id}`)
   )
+  // Why: this result feeds the compat merge as `previous`, so an unconditional copy would discard
+  // the identity that merge is about to try to preserve.
   if (prunedOwners.size === 0) {
-    return [...setups]
+    return setups
   }
-  return setups.filter(
+  const filtered = setups.filter(
     (setup) => !setup.repoId || !prunedOwners.has(`${setup.hostId}:${setup.repoId}`)
   )
+  return filtered.length === setups.length ? setups : filtered
 }
 
 function reconcileReadoptedSshWorktreeState(
@@ -1690,16 +1777,16 @@ function getFolderWorkspacePathStatusRequestSnapshotForRead(
 
 export type RepoSlice = {
   repos: readonly Repo[]
-  projects: Project[]
-  projectHostSetups: ProjectHostSetup[]
+  projects: readonly Project[]
+  projectHostSetups: readonly ProjectHostSetup[]
   projectGroups: readonly ProjectGroup[]
   folderWorkspaces: readonly FolderWorkspace[]
   folderWorkspacePathStatuses: Record<string, FolderWorkspacePathStatusCacheEntry>
   activeRepoId: string | null
   // Monotonic sequence so overlapping catalog fetches can drop stale same-host results (#7020).
   reposFetchGeneration: number
-  pendingSshRepoReadoptions: SshRepoReadoption[]
-  recordSshRepoReadoptions: (readoptions: SshRepoReadoption[]) => void
+  pendingSshRepoReadoptions: readonly SshRepoReadoption[]
+  recordSshRepoReadoptions: (readoptions: readonly SshRepoReadoption[]) => void
   fetchRepos: (options?: RuntimeCatalogFetchOptions) => Promise<void>
   fetchReposForAllHosts: (options?: AllHostCatalogFetchOptions) => Promise<void>
   awaitLocalRepoCatalogSettlement: () => Promise<void>
@@ -1921,6 +2008,10 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
 
   recordSshRepoReadoptions: (readoptions) =>
     set((s) => {
+      // Why: SshPane importConfig() often reports [] on every Manage-pane open.
+      if (readoptions.length === 0 && s.pendingSshRepoReadoptions.length === 0) {
+        return s
+      }
       const pendingSshRepoReadoptions = mergeSshRepoReadoptions(
         s.pendingSshRepoReadoptions,
         readoptions
@@ -1928,19 +2019,35 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
       const reconciliation = reconcileReadoptedSshRepoRows(s.repos, pendingSshRepoReadoptions)
       const repos = reconciliation.repos
       const worktreeState = reconcileReadoptedSshWorktreeState(s, pendingSshRepoReadoptions)
-      const projectHostSetups = filterSetupsForPrunedRepoRows(s.projectHostSetups, s.repos, repos)
+      const remainingSetups = filterSetupsForPrunedRepoRows(s.projectHostSetups, s.repos, repos)
       const compatibility = mergeProjectHostSetupCompatibility(
         projectCompatibilityFromRepos(repos),
         {
           projects: s.projects,
-          setups: projectHostSetups
+          setups: remainingSetups
         }
       )
+      // Why: mergeProjectHostSetupCompatibility always allocates; a no-op readoption
+      // must not churn catalog identity. This write is all-repos, not host-scoped,
+      // so it cannot go through mergeFetchedProjectCompatibilityForHost. Reconcile
+      // hands the store arrays straight back when nothing moved, so writing them
+      // unconditionally still leaves identity-keyed selectors untouched.
+      const projects = reconcileCatalogRows(
+        s.projects,
+        compatibility.projects,
+        (project) => project.id
+      )
+      const projectHostSetups = reconcileCatalogRows(
+        s.projectHostSetups,
+        compatibility.projectHostSetups,
+        getProjectHostSetupOwnerKey
+      )
       return {
         repos,
         pendingSshRepoReadoptions: reconciliation.pendingReadoptions,
         ...worktreeState,
-        ...compatibility
+        projects,
+        projectHostSetups
       }
     }),
 
@@ -2006,7 +2113,7 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
             ? {}
             : { folderWorkspacePathStatuses: {} }),
           activeRepoId: s.activeRepoId && validRepoIds.has(s.activeRepoId) ? s.activeRepoId : null,
-          filterRepoIds: s.filterRepoIds.filter((projectId) => validRepoIds.has(projectId)),
+          filterRepoIds: retainValidFilterRepoIds(s.filterRepoIds, validRepoIds),
           setupScriptPromptDismissedRepoIds: filterSetupScriptPromptDismissalsToValidRepos(
             s.setupScriptPromptDismissedRepoIds,
             validRepoHostIdentities
@@ -2090,7 +2197,7 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
           ...reconcileReadoptedSshWorktreeState(s, s.pendingSshRepoReadoptions),
           ...mergedProjectCompatibility,
           activeRepoId: s.activeRepoId && validRepoIds.has(s.activeRepoId) ? s.activeRepoId : null,
-          filterRepoIds: s.filterRepoIds.filter((projectId) => validRepoIds.has(projectId)),
+          filterRepoIds: retainValidFilterRepoIds(s.filterRepoIds, validRepoIds),
           setupScriptPromptDismissedRepoIds: filterSetupScriptPromptDismissalsToValidRepos(
             s.setupScriptPromptDismissedRepoIds,
             validRepoHostIdentities
@@ -2172,7 +2279,7 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
         const validRepoHostIdentities = new Set(s.repos.map(getRepoHostIdentity))
         return {
           activeRepoId: s.activeRepoId && validRepoIds.has(s.activeRepoId) ? s.activeRepoId : null,
-          filterRepoIds: s.filterRepoIds.filter((projectId) => validRepoIds.has(projectId)),
+          filterRepoIds: retainValidFilterRepoIds(s.filterRepoIds, validRepoIds),
           setupScriptPromptDismissedRepoIds: filterSetupScriptPromptDismissalsToValidRepos(
             s.setupScriptPromptDismissedRepoIds,
             validRepoHostIdentities
@@ -2194,10 +2301,8 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
     }
     // Why: startup hydration needs the newest local catalog, not unreachable remote hosts.
     settleLocalCatalog(localCatalogOutcome)
-    if (
-      get().reposFetchGeneration !== generation &&
-      !isLatestRepoCatalogGeneration(get, LOCAL_EXECUTION_HOST_ID, generation)
-    ) {
+    // Why: a newer local-only refresh must not cancel this load's unrelated remote catalogs.
+    if (latestAllHostRepoCatalogGenerationByStore.get(get) !== generation) {
       return
     }
     if (options?.remoteHosts === 'skip') {
@@ -2705,6 +2810,20 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
         })
         return false
       }
+      if (updates.diffComments !== undefined && updated.diffComments === undefined) {
+        // Why: older paired runtimes strip this optional field; reconcile instead of showing an unsaved note.
+        await reconcileFailedFolderWorkspaceUpdate({
+          target,
+          folderWorkspaceId,
+          updateIdentity,
+          ownerHostId,
+          ticket: updateTicket,
+          coordinator: folderWorkspaceUpdates,
+          set,
+          get
+        })
+        return false
+      }
       const latestFields = folderWorkspaceUpdates.latestFields(updateIdentity, updateTicket)
       const catalogChanged = folderWorkspaceUpdates.catalogChanged(updateIdentity, updateTicket)
       if (latestFields.length > 0) {
@@ -3424,6 +3543,15 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
 
       // Kill PTYs for all worktrees belonging to this repo
       const worktreeIds = getKnownRepoWorktreeIds(get(), projectId, ownerHostId)
+      const localAgentContextProjectIds =
+        ownerHostId === LOCAL_EXECUTION_HOST_ID
+          ? [
+              projectId,
+              ...(get().worktreesByRepo[projectId] ?? [])
+                .filter((worktree) => worktreeBelongsToHost(worktree, ownerHostId))
+                .flatMap((worktree) => (worktree.projectId ? [worktree.projectId] : []))
+            ]
+          : []
       const killedTabIds = new Set<string>()
       if (target.kind === 'environment') {
         await Promise.allSettled(
@@ -3451,6 +3579,7 @@ export const createRepoSlice: StateCreator<AppState, [], [], RepoSlice> = (set,
 
       // Why: use the canonical per-worktree purge to evict all worktree-scoped maps (hand-deletion leaked most); runs before the set() below so it still sees tabsByWorktree.
       get().purgeWorktreeTerminalState(worktreeIds)
+      get().clearLocalDetectedAgentContextsForProjects(localAgentContextProjectIds)
 
       set((s) => {
         const nextWorktrees = { ...s.worktreesByRepo }
diff --git a/src/renderer/src/store/slices/runtime-pane-title-sort-epoch.test.ts b/src/renderer/src/store/slices/runtime-pane-title-sort-epoch.test.ts
index b6c10e014ed..4c917c15a27 100644
--- a/src/renderer/src/store/slices/runtime-pane-title-sort-epoch.test.ts
+++ b/src/renderer/src/store/slices/runtime-pane-title-sort-epoch.test.ts
@@ -226,6 +226,42 @@ describe('runtimePaneTitle → sortEpoch', () => {
     expect(publications).toBe(tabCount * 2)
   })
 
+  it('publishes a bulk tab-title update once across worktrees', () => {
+    const store = createTestStore()
+    const tabCount = 20
+    const worktrees = Array.from({ length: tabCount }, (_, index) =>
+      makeWorktree({ id: `wt-${index}`, repoId: 'repo1', path: `/path/wt-${index}` })
+    )
+    seedStore(store, {
+      worktreesByRepo: { repo1: worktrees },
+      tabsByWorktree: Object.fromEntries(
+        worktrees.map((worktree, index) => [
+          worktree.id,
+          [makeTab({ id: `tab-${index}`, worktreeId: worktree.id })]
+        ])
+      )
+    })
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+
+    store.getState().updateTabTitles(
+      worktrees.map((_, index) => ({
+        tabId: `tab-${index}`,
+        title: `Codex ready ${index}`
+      }))
+    )
+
+    unsubscribe()
+    expect(publications).toBe(1)
+    for (let index = 0; index < tabCount; index += 1) {
+      expect(store.getState().tabsByWorktree[`wt-${index}`]?.[0]?.title).toBe(
+        `Codex ready ${index}`
+      )
+    }
+  })
+
   it('does not enumerate terminal tabs when only the spinner frame changes', () => {
     const store = createTestStore()
     seedStore(store, {
diff --git a/src/renderer/src/store/slices/runtime-status-catalog-identity.test.ts b/src/renderer/src/store/slices/runtime-status-catalog-identity.test.ts
new file mode 100644
index 00000000000..17615ba40bc
--- /dev/null
+++ b/src/renderer/src/store/slices/runtime-status-catalog-identity.test.ts
@@ -0,0 +1,179 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import {
+  redactRuntimeEnvironment,
+  type KnownRuntimeEnvironment
+} from '../../../../shared/runtime-environments'
+import type { RuntimeStatus } from '../../../../shared/runtime-types'
+import {
+  clearRuntimeEnvironmentConnectionGenerationsForTests,
+  getRuntimeEnvironmentConnectionGeneration
+} from './runtime-status'
+import { createTestStore } from './store-test-helpers'
+
+vi.mock('sonner', () => ({
+  toast: { warning: vi.fn(), dismiss: vi.fn() }
+}))
+
+// Why: production rows carry nested endpoints. A scalar-only fixture reconciles even
+// when the walker is broken, which is how a redact-only or Object.is fix stays green.
+const pairingRevision = 1_700_000_000_000
+const knownEndpoint: KnownRuntimeEnvironment['endpoints'][number] = {
+  id: 'ws-a',
+  kind: 'websocket',
+  label: 'WebSocket',
+  endpoint: 'wss://box.example:8787',
+  deviceToken: 'device-token-a',
+  publicKeyB64: 'public-key-a'
+}
+const knownEnvironment: KnownRuntimeEnvironment = {
+  id: 'env-a',
+  name: 'Dev Box',
+  createdAt: pairingRevision,
+  updatedAt: pairingRevision,
+  pairingRevision,
+  lastUsedAt: 1_700_000_100_000,
+  runtimeId: 'runtime-a',
+  source: 'manual',
+  endpoints: [knownEndpoint],
+  preferredEndpointId: 'ws-a'
+}
+
+function cloneRedactedCatalog(
+  environment: KnownRuntimeEnvironment = knownEnvironment
+): ReturnType<typeof redactRuntimeEnvironment>[] {
+  return structuredClone([redactRuntimeEnvironment(environment)])
+}
+
+function makeStatus(): RuntimeStatus {
+  return {
+    runtimeId: 'rt',
+    rendererGraphEpoch: 0,
+    graphStatus: 'ready',
+    authoritativeWindowId: null,
+    liveTabCount: 0,
+    liveLeafCount: 0,
+    runtimeProtocolVersion: 3,
+    minCompatibleRuntimeClientVersion: 3
+  }
+}
+
+beforeEach(() => {
+  clearRuntimeEnvironmentConnectionGenerationsForTests()
+  vi.stubGlobal('window', { api: {}, dispatchEvent: vi.fn() })
+})
+
+afterEach(() => {
+  vi.unstubAllGlobals()
+})
+
+describe('setRuntimeEnvironments catalog identity', () => {
+  it('keeps the array, row, and endpoints across independently cloned no-op lists', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+    const previous = store.getState().runtimeEnvironments
+    const second = cloneRedactedCatalog()
+    expect(second).not.toBe(previous)
+    expect(second[0]).not.toBe(previous[0])
+    expect(second[0]?.endpoints).not.toBe(previous[0]?.endpoints)
+
+    store.getState().setRuntimeEnvironments(second)
+    const next = store.getState().runtimeEnvironments
+
+    expect(next).toBe(previous)
+    expect(next[0]).toBe(previous[0])
+    expect(next[0]?.endpoints).toBe(previous[0]?.endpoints)
+  })
+
+  it('keeps the same empty array across two empty lists', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments([])
+    const empty = store.getState().runtimeEnvironments
+
+    store.getState().setRuntimeEnvironments([])
+
+    expect(store.getState().runtimeEnvironments).toBe(empty)
+    expect(empty).toEqual([])
+  })
+
+  it('flips catalog hydrated and settled on the first write', () => {
+    const store = createTestStore()
+    expect(store.getState().runtimeEnvironmentCatalogHydrated).toBe(false)
+    expect(store.getState().runtimeEnvironmentCatalogSettled).toBe(false)
+
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+
+    expect(store.getState().runtimeEnvironmentCatalogHydrated).toBe(true)
+    expect(store.getState().runtimeEnvironmentCatalogSettled).toBe(true)
+  })
+
+  it('allocates a new row when a public name changes', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+    const previous = store.getState().runtimeEnvironments
+
+    store
+      .getState()
+      .setRuntimeEnvironments(cloneRedactedCatalog({ ...knownEnvironment, name: 'Lab' }))
+
+    const next = store.getState().runtimeEnvironments
+    expect(next).not.toBe(previous)
+    expect(next[0]).not.toBe(previous[0])
+    expect(next[0]?.name).toBe('Lab')
+  })
+
+  it('allocates a new row when an endpoint URL changes', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+    const previous = store.getState().runtimeEnvironments
+
+    store.getState().setRuntimeEnvironments(
+      cloneRedactedCatalog({
+        ...knownEnvironment,
+        endpoints: [{ ...knownEndpoint, endpoint: 'wss://box.example:9999' }]
+      })
+    )
+
+    const next = store.getState().runtimeEnvironments
+    expect(next).not.toBe(previous)
+    expect(next[0]).not.toBe(previous[0])
+    expect(next[0]?.endpoints).not.toBe(previous[0]?.endpoints)
+    expect(next[0]?.endpoints[0]?.endpoint).toBe('wss://box.example:9999')
+  })
+
+  it('allocates a new row when lastUsedAt or updatedAt changes', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+    const previous = store.getState().runtimeEnvironments
+
+    store.getState().setRuntimeEnvironments(
+      cloneRedactedCatalog({
+        ...knownEnvironment,
+        lastUsedAt: 1_700_000_200_000,
+        updatedAt: 1_700_000_200_000
+      })
+    )
+
+    const next = store.getState().runtimeEnvironments
+    expect(next).not.toBe(previous)
+    expect(next[0]).not.toBe(previous[0])
+    expect(next[0]?.lastUsedAt).toBe(1_700_000_200_000)
+    expect(next[0]?.updatedAt).toBe(1_700_000_200_000)
+  })
+
+  it('still drops status and advances generation on a pairingRevision change', () => {
+    const store = createTestStore()
+    store.getState().setRuntimeEnvironments(cloneRedactedCatalog())
+    store.getState().setRuntimeEnvironmentStatus('env-a', { status: makeStatus(), checkedAt: 1 })
+    const before = getRuntimeEnvironmentConnectionGeneration('env-a')
+
+    store
+      .getState()
+      .setRuntimeEnvironments(
+        cloneRedactedCatalog({ ...knownEnvironment, pairingRevision: pairingRevision + 1 })
+      )
+
+    expect(store.getState().runtimeStatusByEnvironmentId.has('env-a')).toBe(false)
+    expect(getRuntimeEnvironmentConnectionGeneration('env-a')).toBe(before + 1)
+    expect(store.getState().runtimeEnvironments[0]?.pairingRevision).toBe(pairingRevision + 1)
+  })
+})
diff --git a/src/renderer/src/store/slices/runtime-status-hydration.ts b/src/renderer/src/store/slices/runtime-status-hydration.ts
index b8555a38d41..f1ff08d486f 100644
--- a/src/renderer/src/store/slices/runtime-status-hydration.ts
+++ b/src/renderer/src/store/slices/runtime-status-hydration.ts
@@ -19,14 +19,14 @@ export function resetRuntimeCatalogListingForTests(): void {
 
 type RuntimeStatusHydrationDependencies = {
   listEnvironments: () => Promise<PublicKnownRuntimeEnvironment[]>
-  getCurrentEnvironments: () => PublicKnownRuntimeEnvironment[]
-  publishEnvironments: (environments: PublicKnownRuntimeEnvironment[]) => void
+  getCurrentEnvironments: () => readonly PublicKnownRuntimeEnvironment[]
+  publishEnvironments: (environments: readonly PublicKnownRuntimeEnvironment[]) => void
   refreshEnvironmentStatus: (environmentId: string) => Promise<boolean>
   markCatalogSettled: () => void
 }
 
 function environmentRevisions(
-  environments: PublicKnownRuntimeEnvironment[]
+  environments: readonly PublicKnownRuntimeEnvironment[]
 ): ReadonlyMap<string, number> {
   return new Map(
     environments.map((environment) => [
@@ -37,7 +37,7 @@ function environmentRevisions(
 }
 
 function revisionsMatch(
-  environments: PublicKnownRuntimeEnvironment[],
+  environments: readonly PublicKnownRuntimeEnvironment[],
   expected: ReadonlyMap<string, number>
 ): boolean {
   const current = environmentRevisions(environments)
diff --git a/src/renderer/src/store/slices/runtime-status.test.ts b/src/renderer/src/store/slices/runtime-status.test.ts
index afdadb266a9..d2bc9f86af9 100644
--- a/src/renderer/src/store/slices/runtime-status.test.ts
+++ b/src/renderer/src/store/slices/runtime-status.test.ts
@@ -799,7 +799,7 @@ describe('runtime-status slice', () => {
 
     expect(list).toHaveBeenCalledTimes(2)
     expect(getStatus).toHaveBeenCalledTimes(2)
-    expect(publications).toBe(4)
+    expect(publications).toBe(3)
     expect(store.getState().runtimeStatusByEnvironmentId.get('env-a')?.status?.runtimeId).toBe(
       'runtime-2'
     )
diff --git a/src/renderer/src/store/slices/runtime-status.ts b/src/renderer/src/store/slices/runtime-status.ts
index a5bd778273a..1ca61372710 100644
--- a/src/renderer/src/store/slices/runtime-status.ts
+++ b/src/renderer/src/store/slices/runtime-status.ts
@@ -13,6 +13,7 @@ import {
   dismissRuntimeDisconnectedToast,
   showRuntimeDisconnectedToast
 } from './runtime-environment-disconnect-toast'
+import { reconcileCatalogRows } from './repo-identity-reconcile'
 import { createRuntimeStatusHydration } from './runtime-status-hydration'
 import { refreshRuntimeEnvironmentStatus } from './runtime-status-refresh'
 
@@ -31,7 +32,7 @@ export type RuntimeEnvironmentStatus = {
 export type RuntimeStatusSlice = {
   /** Saved remote Orca servers. Host pickers use this to show user-chosen names
    * instead of opaque runtime ids. */
-  runtimeEnvironments: PublicKnownRuntimeEnvironment[]
+  runtimeEnvironments: readonly PublicKnownRuntimeEnvironment[]
   /** True only after the saved-runtime catalog has loaded successfully. Gates
    * fail-closed host routing, so a failed read must NOT flip it. */
   runtimeEnvironmentCatalogHydrated: boolean
@@ -51,7 +52,7 @@ export type RuntimeStatusSlice = {
   removedRuntimeEnvironmentIds: ReadonlySet<string>
   /** Replaces the saved-environment list, trims stale status entries, and
    * retires state owned by any environment that just left the saved list. */
-  setRuntimeEnvironments: (environments: PublicKnownRuntimeEnvironment[]) => void
+  setRuntimeEnvironments: (environments: readonly PublicKnownRuntimeEnvironment[]) => void
   /** Merges one environment's status. Replaces the prior entry for that id. */
   setRuntimeEnvironmentStatus: (
     environmentId: string,
@@ -151,8 +152,25 @@ export const createRuntimeStatusSlice: StateCreator<AppState, [], [], RuntimeSta
           removedChanged = true
         }
       }
+      // Why: list()/hydrate always allocate (IPC structuredClone + redact remaps
+      // endpoints[]). Reuse equal rows so Object.is subscribers don't miss 100%.
+      const reconciled = reconcileCatalogRows(
+        s.runtimeEnvironments,
+        environments,
+        (environment) => environment.id
+      )
+      const catalogUnchanged = reconciled === s.runtimeEnvironments
+      if (
+        catalogUnchanged &&
+        s.runtimeEnvironmentCatalogHydrated &&
+        s.runtimeEnvironmentCatalogSettled &&
+        !statusesChanged &&
+        !removedChanged
+      ) {
+        return s
+      }
       return {
-        runtimeEnvironments: environments,
+        runtimeEnvironments: catalogUnchanged ? s.runtimeEnvironments : reconciled,
         runtimeEnvironmentCatalogHydrated: true,
         runtimeEnvironmentCatalogSettled: true,
         ...(statusesChanged ? { runtimeStatusByEnvironmentId: nextStatuses } : {}),
diff --git a/src/renderer/src/store/slices/ssh-target-cleanup.ts b/src/renderer/src/store/slices/ssh-target-cleanup.ts
index ba2f5211efc..43707fa86d6 100644
--- a/src/renderer/src/store/slices/ssh-target-cleanup.ts
+++ b/src/renderer/src/store/slices/ssh-target-cleanup.ts
@@ -200,10 +200,7 @@ export function buildRemovedSshTargetCleanupPatch(
   const nextTransientClearedConnections = {
     ...state.transientClearedAgentStatusConnectionIds
   }
-  const removedTransientClearBlock = Object.prototype.hasOwnProperty.call(
-    nextTransientClearedConnections,
-    targetId
-  )
+  const removedTransientClearBlock = Object.hasOwn(nextTransientClearedConnections, targetId)
   delete nextTransientClearedConnections[targetId]
   const nextConnectionStates = new Map(state.sshConnectionStates)
   const removedConnectionState = nextConnectionStates.delete(targetId)
@@ -211,18 +208,9 @@ export function buildRemovedSshTargetCleanupPatch(
   const removedLabel = nextLabels.delete(targetId)
   const nextHydrated = new Set(state.remoteWorkspaceHydratedTargetIds)
   const removedHydrated = nextHydrated.delete(targetId)
-  const removedSyncStatus = Object.prototype.hasOwnProperty.call(
-    state.remoteWorkspaceSyncStatusByTargetId,
-    targetId
-  )
-  const removedPortForwards = Object.prototype.hasOwnProperty.call(
-    state.portForwardsByConnection,
-    targetId
-  )
-  const removedDetectedPorts = Object.prototype.hasOwnProperty.call(
-    state.detectedPortsByConnection,
-    targetId
-  )
+  const removedSyncStatus = Object.hasOwn(state.remoteWorkspaceSyncStatusByTargetId, targetId)
+  const removedPortForwards = Object.hasOwn(state.portForwardsByConnection, targetId)
+  const removedDetectedPorts = Object.hasOwn(state.detectedPortsByConnection, targetId)
   const nextSyncStatus = { ...state.remoteWorkspaceSyncStatusByTargetId }
   delete nextSyncStatus[targetId]
   const nextPortForwards = { ...state.portForwardsByConnection }
diff --git a/src/renderer/src/store/slices/superseded-ssh-repo-rows.ts b/src/renderer/src/store/slices/superseded-ssh-repo-rows.ts
index 4b20cfa6edf..c18e0f6e5af 100644
--- a/src/renderer/src/store/slices/superseded-ssh-repo-rows.ts
+++ b/src/renderer/src/store/slices/superseded-ssh-repo-rows.ts
@@ -4,7 +4,7 @@ import { getRepoExecutionHostId, toSshExecutionHostId } from '../../../../shared
 
 export type SshRepoReconciliation = {
   repos: readonly Repo[]
-  pendingReadoptions: SshRepoReadoption[]
+  pendingReadoptions: readonly SshRepoReadoption[]
 }
 
 function repoBelongsToTarget(repo: Repo, targetId: string): boolean {
@@ -69,7 +69,7 @@ export function reconcileReadoptedSshRepoRows(
 export function mergeSshRepoReadoptions(
   pending: readonly SshRepoReadoption[],
   incoming: readonly SshRepoReadoption[]
-): SshRepoReadoption[] {
+): readonly SshRepoReadoption[] {
   const repoIdsByMigration = new Map<string, Set<string>>()
   for (const readoption of [...pending, ...incoming]) {
     const key = `${readoption.oldTargetId}\0${readoption.newTargetId}`
diff --git a/src/renderer/src/store/slices/terminal-tab-title-batch.test.ts b/src/renderer/src/store/slices/terminal-tab-title-batch.test.ts
new file mode 100644
index 00000000000..3a7a1b525ae
--- /dev/null
+++ b/src/renderer/src/store/slices/terminal-tab-title-batch.test.ts
@@ -0,0 +1,266 @@
+import { describe, expect, it, vi } from 'vitest'
+import { getDefaultSettings } from '../../../../shared/constants'
+import { makePaneKey } from '../../../../shared/stable-pane-id'
+
+vi.mock('sonner', () => ({ toast: { info: vi.fn(), success: vi.fn(), error: vi.fn() } }))
+vi.mock('@/runtime/sync-runtime-graph', () => ({ scheduleRuntimeGraphSync: vi.fn() }))
+vi.mock('@/components/terminal-pane/pty-transport', () => ({
+  registerEagerPtyBuffer: vi.fn(),
+  ensurePtyDispatcher: vi.fn(),
+  unregisterPtyDataHandlers: vi.fn()
+}))
+vi.mock('@/components/terminal-pane/shutdown-buffer-captures', () => ({
+  shutdownBufferCaptures: vi.fn()
+}))
+
+// @ts-expect-error -- minimal preload API stub for the slice's IPC writes
+globalThis.window = { api: {} }
+
+import {
+  createTestStore,
+  makeTab,
+  makeUnifiedTab,
+  makeWorktree,
+  seedStore
+} from './store-test-helpers'
+import type { GeneratedTabTitleUpdate } from './terminal-tab-title-batch'
+
+const LEAF_ID = '11111111-1111-4111-8111-111111111111'
+
+function makeScaleState(count: number) {
+  let idReads = 0
+  const worktrees = Array.from({ length: count }, (_, index) =>
+    makeWorktree({ id: `wt-${index}`, repoId: 'repo1' })
+  )
+  const tabsByWorktree = Object.fromEntries(
+    worktrees.map((worktree, index) => {
+      const tab = makeTab({ id: `tab-${index}`, worktreeId: worktree.id })
+      const id = tab.id
+      Object.defineProperty(tab, 'id', {
+        configurable: true,
+        enumerable: true,
+        get() {
+          idReads += 1
+          return id
+        }
+      })
+      return [worktree.id, [tab]]
+    })
+  )
+  const unifiedTabsByWorktree = Object.fromEntries(
+    worktrees.map((worktree, index) => [
+      worktree.id,
+      [makeUnifiedTab({ id: `tab-${index}`, worktreeId: worktree.id, groupId: 'group-1' })]
+    ])
+  )
+  return {
+    getIdReads: () => idReads,
+    resetIdReads: () => {
+      idReads = 0
+    },
+    tabsByWorktree,
+    unifiedTabsByWorktree,
+    worktrees
+  }
+}
+
+describe('terminal tab title batches', () => {
+  it('updates 100 owners with one publication and a linear owner-index pass', () => {
+    const store = createTestStore()
+    const fixture = makeScaleState(101)
+    seedStore(store, {
+      worktreesByRepo: { repo1: fixture.worktrees },
+      tabsByWorktree: fixture.tabsByWorktree,
+      unifiedTabsByWorktree: fixture.unifiedTabsByWorktree
+    })
+    const untouchedTabs = fixture.tabsByWorktree['wt-100']
+    const baselineSortEpoch = store.getState().sortEpoch
+    fixture.resetIdReads()
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+
+    store.getState().updateTabTitles(
+      Array.from({ length: 100 }, (_, index) => ({
+        tabId: `tab-${index}`,
+        title: `Remote agent ${index}`
+      }))
+    )
+
+    unsubscribe()
+    expect(publications).toBe(1)
+    expect(fixture.getIdReads()).toBeLessThanOrEqual(305)
+    expect(store.getState().tabsByWorktree['wt-100']).toBe(untouchedTabs)
+    expect(store.getState().sortEpoch).toBe(baselineSortEpoch + 100)
+    for (let index = 0; index < 100; index += 1) {
+      expect(store.getState().tabsByWorktree[`wt-${index}`]?.[0]?.title).toBe(
+        `Remote agent ${index}`
+      )
+    }
+  })
+
+  it('preserves ordered duplicate updates and last-owner duplicate-id routing', () => {
+    const store = createTestStore()
+    seedStore(store, {
+      tabsByWorktree: {
+        first: [makeTab({ id: 'duplicate-tab', worktreeId: 'first', title: 'First owner' })],
+        second: [makeTab({ id: 'duplicate-tab', worktreeId: 'second', title: 'Second owner' })]
+      }
+    })
+
+    store.getState().updateTabTitles([
+      { tabId: 'duplicate-tab', title: 'Intermediate' },
+      { tabId: 'duplicate-tab', title: 'Final' }
+    ])
+
+    expect(store.getState().tabsByWorktree.first?.[0]?.title).toBe('First owner')
+    expect(store.getState().tabsByWorktree.second?.[0]?.title).toBe('Final')
+  })
+
+  it('updates every same-owner backing duplicate but only the first unified row', () => {
+    const store = createTestStore()
+    seedStore(store, {
+      settings: { ...getDefaultSettings('/tmp'), tabAutoGenerateTitle: true },
+      tabsByWorktree: {
+        owner: [
+          makeTab({ id: 'duplicate-tab', worktreeId: 'owner', title: 'First backing' }),
+          makeTab({ id: 'duplicate-tab', worktreeId: 'owner', title: 'Second backing' })
+        ]
+      },
+      unifiedTabsByWorktree: {
+        owner: [
+          makeUnifiedTab({
+            id: 'duplicate-tab',
+            worktreeId: 'owner',
+            groupId: 'group-1',
+            label: 'First visible'
+          }),
+          makeUnifiedTab({
+            id: 'duplicate-tab',
+            worktreeId: 'owner',
+            groupId: 'group-2',
+            label: 'Second visible'
+          })
+        ]
+      }
+    })
+
+    store.getState().updateTabTitles([{ tabId: 'duplicate-tab', title: 'Final live title' }])
+    store.getState().setGeneratedTabTitlesFromAgentPrompts([
+      {
+        paneKey: makePaneKey('duplicate-tab', LEAF_ID),
+        prompt: 'Generated duplicate title for remote startup'
+      }
+    ])
+
+    expect(store.getState().tabsByWorktree.owner?.map((tab) => tab.title)).toEqual([
+      'Final live title',
+      'Final live title'
+    ])
+    expect(store.getState().tabsByWorktree.owner?.map((tab) => tab.generatedTitle)).toEqual([
+      'Generated duplicate title for remote',
+      'Generated duplicate title for remote'
+    ])
+    expect(store.getState().unifiedTabsByWorktree.owner?.map((tab) => tab.label)).toEqual([
+      'Final live title',
+      'Second visible'
+    ])
+    expect(store.getState().unifiedTabsByWorktree.owner?.map((tab) => tab.generatedLabel)).toEqual([
+      'Generated duplicate title for remote',
+      undefined
+    ])
+  })
+
+  it('matches sequential live and generated title semantics in event order', () => {
+    const sequentialStore = createTestStore()
+    const batchStore = createTestStore()
+    const fixture = {
+      settings: { ...getDefaultSettings('/tmp'), tabAutoGenerateTitle: true },
+      tabsByWorktree: {
+        owner: [makeTab({ id: 'tab-1', worktreeId: 'owner', title: 'Terminal 1' })]
+      },
+      unifiedTabsByWorktree: {
+        owner: [makeUnifiedTab({ id: 'tab-1', worktreeId: 'owner', groupId: 'group-1' })]
+      }
+    }
+    seedStore(sequentialStore, structuredClone(fixture))
+    seedStore(batchStore, structuredClone(fixture))
+    const liveUpdates = [
+      { tabId: 'tab-1', title: 'Codex' },
+      { tabId: 'tab-1', title: '⠋ Codex is thinking' },
+      { tabId: 'tab-1', title: '⠙ Codex is thinking' },
+      { tabId: 'tab-1', title: '' },
+      { tabId: 'tab-1', title: 'Final stable title' }
+    ]
+    const generatedUpdates = [
+      { paneKey: makePaneKey('tab-1', LEAF_ID), prompt: 'First generated title wins here' },
+      { paneKey: makePaneKey('tab-1', LEAF_ID), prompt: 'Ignored later generated title' },
+      {
+        paneKey: makePaneKey('tab-1', LEAF_ID),
+        prompt: 'Forced replacement generated title',
+        options: { replaceExistingGeneratedTitle: true }
+      }
+    ]
+
+    for (const update of liveUpdates) {
+      sequentialStore.getState().updateTabTitle(update.tabId, update.title)
+    }
+    for (const update of generatedUpdates) {
+      sequentialStore
+        .getState()
+        .setGeneratedTabTitleFromAgentPrompt(update.paneKey, update.prompt, update.options)
+    }
+    batchStore.getState().updateTabTitles(liveUpdates)
+    batchStore.getState().setGeneratedTabTitlesFromAgentPrompts(generatedUpdates)
+
+    expect(batchStore.getState().tabsByWorktree).toEqual(sequentialStore.getState().tabsByWorktree)
+    expect(batchStore.getState().unifiedTabsByWorktree).toEqual(
+      sequentialStore.getState().unifiedTabsByWorktree
+    )
+    expect(batchStore.getState().sortEpoch).toBe(sequentialStore.getState().sortEpoch)
+  })
+
+  it('coalesces generated titles while preserving first-write and replacement semantics', () => {
+    const store = createTestStore()
+    const fixture = makeScaleState(100)
+    seedStore(store, {
+      settings: { ...getDefaultSettings('/tmp'), tabAutoGenerateTitle: true },
+      worktreesByRepo: { repo1: fixture.worktrees },
+      tabsByWorktree: fixture.tabsByWorktree,
+      unifiedTabsByWorktree: fixture.unifiedTabsByWorktree
+    })
+    fixture.resetIdReads()
+    let publications = 0
+    const unsubscribe = store.subscribe(() => {
+      publications += 1
+    })
+    const updates: GeneratedTabTitleUpdate[] = Array.from({ length: 100 }, (_, index) => ({
+      paneKey: makePaneKey(`tab-${index}`, LEAF_ID),
+      prompt: `Refactor remote module ${index} for startup performance`
+    }))
+    updates.push(
+      {
+        paneKey: makePaneKey('tab-0', LEAF_ID),
+        prompt: 'This later prompt must not replace the first generated title'
+      },
+      {
+        paneKey: makePaneKey('tab-0', LEAF_ID),
+        prompt: 'Replacement title for a newer dispatch',
+        options: { replaceExistingGeneratedTitle: true }
+      }
+    )
+
+    store.getState().setGeneratedTabTitlesFromAgentPrompts(updates)
+
+    unsubscribe()
+    expect(publications).toBe(1)
+    expect(fixture.getIdReads()).toBeLessThanOrEqual(305)
+    expect(store.getState().tabsByWorktree['wt-0']?.[0]?.generatedTitle).toBe(
+      'Replacement title for a newer dispatch'
+    )
+    expect(store.getState().tabsByWorktree['wt-99']?.[0]?.generatedTitle).toBe(
+      'Refactor remote module 99 for startup'
+    )
+  })
+})
diff --git a/src/renderer/src/store/slices/terminal-tab-title-batch.ts b/src/renderer/src/store/slices/terminal-tab-title-batch.ts
new file mode 100644
index 00000000000..21701f3bd9d
--- /dev/null
+++ b/src/renderer/src/store/slices/terminal-tab-title-batch.ts
@@ -0,0 +1,242 @@
+import { deriveGeneratedTabTitle } from '../../../../shared/agent-tab-title'
+import { isDecorativeAgentTitleFrameChange } from '../../../../shared/agent-decorative-title-signature'
+import { parseLegacyNumericPaneKey, parsePaneKey } from '../../../../shared/stable-pane-id'
+import type { Tab, TerminalTab } from '../../../../shared/types'
+import type { AppState } from '../types'
+
+export type TerminalTabTitleUpdate = { tabId: string; title: string }
+
+export type GeneratedTabTitleUpdate = {
+  paneKey: string
+  prompt: string
+  options?: { replaceExistingGeneratedTitle?: boolean }
+}
+
+type TitleState = Pick<
+  AppState,
+  'activeWorktreeId' | 'settings' | 'sortEpoch' | 'tabsByWorktree' | 'unifiedTabsByWorktree'
+>
+
+type TitlePatch = Partial<Pick<AppState, 'sortEpoch' | 'tabsByWorktree' | 'unifiedTabsByWorktree'>>
+
+type TitleUpdateResult = {
+  patch: TitlePatch | null
+  runtimeGraphChanged: boolean
+}
+
+type OwnerStage = {
+  tabs: TerminalTab[]
+  tabsChanged: boolean
+  tabIndexesById: Map<string, number[]>
+  unifiedTabs: Tab[]
+  unifiedTabsChanged: boolean
+  unifiedIndexByTabId: Map<string, number>
+}
+
+function getFallbackTabTitle(tab: TerminalTab): string {
+  return (
+    tab.customTitle?.trim() ||
+    tab.quickCommandLabel?.trim() ||
+    tab.defaultTitle?.trim() ||
+    tab.title ||
+    'Terminal 1'
+  )
+}
+
+function getTabIdFromPaneKey(paneKey: string): string | null {
+  return parsePaneKey(paneKey)?.tabId ?? parseLegacyNumericPaneKey(paneKey)?.tabId ?? null
+}
+
+function buildOwnerIndex(tabsByWorktree: TitleState['tabsByWorktree']): Map<string, string> {
+  const ownerByTabId = new Map<string, string>()
+  for (const [worktreeId, tabs] of Object.entries(tabsByWorktree)) {
+    for (const tab of tabs) {
+      ownerByTabId.set(tab.id, worktreeId)
+    }
+  }
+  return ownerByTabId
+}
+
+function getOwnerStage(
+  state: TitleState,
+  stages: Map<string, OwnerStage>,
+  worktreeId: string
+): OwnerStage {
+  const existing = stages.get(worktreeId)
+  if (existing) {
+    return existing
+  }
+  const tabs = state.tabsByWorktree[worktreeId] ?? []
+  const unifiedTabs = state.unifiedTabsByWorktree[worktreeId] ?? []
+  const tabIndexesById = new Map<string, number[]>()
+  for (let index = 0; index < tabs.length; index += 1) {
+    const tabId = tabs[index].id
+    const indexes = tabIndexesById.get(tabId)
+    if (indexes) {
+      indexes.push(index)
+    } else {
+      tabIndexesById.set(tabId, [index])
+    }
+  }
+  const unifiedIndexByTabId = new Map<string, number>()
+  for (let index = 0; index < unifiedTabs.length; index += 1) {
+    const tab = unifiedTabs[index]
+    if (tab.contentType === 'terminal' && !unifiedIndexByTabId.has(tab.entityId)) {
+      unifiedIndexByTabId.set(tab.entityId, index)
+    }
+  }
+  const stage: OwnerStage = {
+    tabs,
+    tabsChanged: false,
+    tabIndexesById,
+    unifiedTabs,
+    unifiedTabsChanged: false,
+    unifiedIndexByTabId
+  }
+  stages.set(worktreeId, stage)
+  return stage
+}
+
+function updateStageTabs(
+  stage: OwnerStage,
+  indexes: readonly number[],
+  update: (tab: TerminalTab) => TerminalTab
+): void {
+  if (!stage.tabsChanged) {
+    stage.tabs = [...stage.tabs]
+    stage.tabsChanged = true
+  }
+  for (const index of indexes) {
+    stage.tabs[index] = update(stage.tabs[index])
+  }
+}
+
+function updateStageUnifiedLabel(
+  stage: OwnerStage,
+  tabId: string,
+  key: 'generatedLabel' | 'label',
+  value: string
+): void {
+  const index = stage.unifiedIndexByTabId.get(tabId)
+  if (index === undefined || stage.unifiedTabs[index]?.[key] === value) {
+    return
+  }
+  if (!stage.unifiedTabsChanged) {
+    stage.unifiedTabs = [...stage.unifiedTabs]
+    stage.unifiedTabsChanged = true
+  }
+  stage.unifiedTabs[index] = { ...stage.unifiedTabs[index], [key]: value }
+}
+
+function finishTitleStages(
+  state: TitleState,
+  stages: Map<string, OwnerStage>,
+  sortEpochIncrement = 0
+): TitleUpdateResult {
+  const tabsChanged = [...stages.values()].some((stage) => stage.tabsChanged)
+  const unifiedTabsChanged = [...stages.values()].some((stage) => stage.unifiedTabsChanged)
+  if (!tabsChanged && !unifiedTabsChanged) {
+    return { patch: null, runtimeGraphChanged: false }
+  }
+  const patch: TitlePatch = {}
+  if (tabsChanged) {
+    patch.tabsByWorktree = { ...state.tabsByWorktree }
+  }
+  if (unifiedTabsChanged) {
+    patch.unifiedTabsByWorktree = { ...state.unifiedTabsByWorktree }
+  }
+  for (const [worktreeId, stage] of stages) {
+    if (stage.tabsChanged) {
+      patch.tabsByWorktree![worktreeId] = stage.tabs
+    }
+    if (stage.unifiedTabsChanged) {
+      patch.unifiedTabsByWorktree![worktreeId] = stage.unifiedTabs
+    }
+  }
+  if (sortEpochIncrement > 0) {
+    patch.sortEpoch = state.sortEpoch + sortEpochIncrement
+  }
+  return { patch, runtimeGraphChanged: tabsChanged }
+}
+
+export function applyTerminalTabTitleUpdates(
+  state: TitleState,
+  updates: readonly TerminalTabTitleUpdate[],
+  ownerByTabId = buildOwnerIndex(state.tabsByWorktree)
+): TitleUpdateResult {
+  const stages = new Map<string, OwnerStage>()
+  let sortEpochIncrement = 0
+  for (const { tabId, title } of updates) {
+    const ownerWorktreeId = ownerByTabId.get(tabId)
+    if (!ownerWorktreeId) {
+      continue
+    }
+    const stage = getOwnerStage(state, stages, ownerWorktreeId)
+    const tabIndexes = stage.tabIndexesById.get(tabId)
+    const currentTab = tabIndexes ? stage.tabs[tabIndexes[0]] : undefined
+    if (!currentTab || !tabIndexes) {
+      continue
+    }
+    const nextTitle = title.trim() || getFallbackTabTitle(currentTab)
+    if (isDecorativeAgentTitleFrameChange(currentTab.title, nextTitle)) {
+      updateStageUnifiedLabel(stage, tabId, 'label', currentTab.title)
+      continue
+    }
+    updateStageUnifiedLabel(stage, tabId, 'label', nextTitle)
+    if (currentTab.title === nextTitle) {
+      continue
+    }
+    updateStageTabs(stage, tabIndexes, (tab) => ({
+      ...tab,
+      title: nextTitle,
+      defaultTitle:
+        tab.defaultTitle ??
+        (/^Terminal \d+$/.test(tab.title) ? tab.title : undefined) ??
+        (/^Terminal \d+$/.test(nextTitle) ? nextTitle : undefined)
+    }))
+    if (ownerWorktreeId !== state.activeWorktreeId) {
+      sortEpochIncrement += 1
+    }
+  }
+  return finishTitleStages(state, stages, sortEpochIncrement)
+}
+
+export function applyGeneratedTabTitleUpdates(
+  state: TitleState,
+  updates: readonly GeneratedTabTitleUpdate[],
+  ownerByTabId = buildOwnerIndex(state.tabsByWorktree)
+): TitleUpdateResult {
+  if (state.settings?.tabAutoGenerateTitle !== true) {
+    return { patch: null, runtimeGraphChanged: false }
+  }
+  const stages = new Map<string, OwnerStage>()
+  for (const { paneKey, prompt, options } of updates) {
+    const tabId = getTabIdFromPaneKey(paneKey)
+    const ownerWorktreeId = tabId ? ownerByTabId.get(tabId) : undefined
+    if (!tabId || !ownerWorktreeId || prompt.length === 0) {
+      continue
+    }
+    const stage = getOwnerStage(state, stages, ownerWorktreeId)
+    const tabIndexes = stage.tabIndexesById.get(tabId)
+    const currentTab = tabIndexes ? stage.tabs[tabIndexes[0]] : undefined
+    if (
+      !currentTab ||
+      !tabIndexes ||
+      currentTab.customTitle?.trim() ||
+      currentTab.quickCommandLabel?.trim()
+    ) {
+      continue
+    }
+    const existingGeneratedTitle = currentTab.generatedTitle?.trim()
+    if (existingGeneratedTitle && options?.replaceExistingGeneratedTitle !== true) {
+      continue
+    }
+    const generatedTitle = deriveGeneratedTabTitle(prompt)
+    if (!generatedTitle || existingGeneratedTitle === generatedTitle) {
+      continue
+    }
+    updateStageTabs(stage, tabIndexes, (tab) => ({ ...tab, generatedTitle }))
+    updateStageUnifiedLabel(stage, tabId, 'generatedLabel', generatedTitle)
+  }
+  return finishTitleStages(state, stages)
+}
diff --git a/src/renderer/src/store/slices/terminals.ts b/src/renderer/src/store/slices/terminals.ts
index 89fc0657479..c644b6db241 100644
--- a/src/renderer/src/store/slices/terminals.ts
+++ b/src/renderer/src/store/slices/terminals.ts
@@ -28,7 +28,6 @@ import {
   parseWorkspaceKey,
   worktreeWorkspaceKey
 } from '../../../../shared/workspace-scope'
-import { deriveGeneratedTabTitle } from '../../../../shared/agent-tab-title'
 import { isDecorativeAgentTitleFrameChange } from '../../../../shared/agent-decorative-title-signature'
 import {
   isTerminalLeafId,
@@ -72,6 +71,12 @@ import { isClaudeAgent } from '@/lib/agent-status'
 import { recordTerminalInputActivity } from '@/lib/terminal-input-activity-coalescing'
 import { classifyTitleActivity } from '@/lib/pane-agent-evidence'
 import { buildOrphanTerminalCleanupPatch, getOrphanTerminalIds } from './terminal-orphan-helpers'
+import {
+  applyGeneratedTabTitleUpdates,
+  applyTerminalTabTitleUpdates,
+  type GeneratedTabTitleUpdate,
+  type TerminalTabTitleUpdate
+} from './terminal-tab-title-batch'
 import {
   dedupeTabOrder,
   ensureGroup,
@@ -227,16 +232,6 @@ function consumePendingActivationSpawn(
   return count === 2 ? true : count - 1
 }
 
-function getFallbackTabTitle(tab: TerminalTab, index?: number): string {
-  return (
-    tab.customTitle?.trim() ||
-    tab.quickCommandLabel?.trim() ||
-    tab.defaultTitle?.trim() ||
-    tab.title ||
-    `Terminal ${(index ?? 0) + 1}`
-  )
-}
-
 function getPathDisplayName(path: string, fallback: string): string {
   const normalized = path.trim().replace(/[\\/]+$/g, '')
   const basename = normalized.split(/[\\/]/).findLast(Boolean)?.trim()
@@ -339,36 +334,6 @@ function getTerminalTabOwnerWorktreeId(
   return terminalTabOwnerCache.get(tabId) ?? null
 }
 
-function updateUnifiedTerminalLabel(
-  unifiedTabs: Tab[],
-  terminalTabId: string,
-  label: string
-): Tab[] | null {
-  const unifiedIndex = unifiedTabs.findIndex(
-    (entry) => entry.contentType === 'terminal' && entry.entityId === terminalTabId
-  )
-  if (unifiedIndex === -1 || unifiedTabs[unifiedIndex]?.label === label) {
-    return null
-  }
-  return unifiedTabs.map((entry, index) => (index === unifiedIndex ? { ...entry, label } : entry))
-}
-
-function updateUnifiedTerminalGeneratedLabel(
-  unifiedTabs: Tab[],
-  terminalTabId: string,
-  generatedLabel: string
-): Tab[] | null {
-  const unifiedIndex = unifiedTabs.findIndex(
-    (entry) => entry.contentType === 'terminal' && entry.entityId === terminalTabId
-  )
-  if (unifiedIndex === -1 || unifiedTabs[unifiedIndex]?.generatedLabel === generatedLabel) {
-    return null
-  }
-  return unifiedTabs.map((entry, index) =>
-    index === unifiedIndex ? { ...entry, generatedLabel } : entry
-  )
-}
-
 function getTabIdFromPaneKey(paneKey: string): string | null {
   return parsePaneKey(paneKey)?.tabId ?? parseLegacyNumericPaneKey(paneKey)?.tabId ?? null
 }
@@ -690,12 +655,14 @@ export type TerminalSlice = {
   setActiveTab: (tabId: string) => void
   setActiveTabForWorktree: (worktreeId: string, tabId: string) => void
   updateTabTitle: (tabId: string, title: string) => void
+  updateTabTitles: (updates: readonly TerminalTabTitleUpdate[]) => void
   setAiVaultTabTitle: (tabId: string, aiVaultTitle: AiVaultSessionTitle | null) => void
   setGeneratedTabTitleFromAgentPrompt: (
     paneKey: string,
     prompt: string,
     options?: { replaceExistingGeneratedTitle?: boolean }
   ) => void
+  setGeneratedTabTitlesFromAgentPrompts: (updates: readonly GeneratedTabTitleUpdate[]) => void
   clearTabLaunchAgent: (tabId: string) => void
   setRuntimePaneTitle: (tabId: string, paneId: number, title: string) => void
   clearRuntimePaneTitle: (tabId: string, paneId: number) => void
@@ -2002,77 +1969,29 @@ export const createTerminalSlice: StateCreator<AppState, [], [], TerminalSlice>
   },
 
   updateTabTitle: (tabId, title) => {
-    set((s) => {
-      // Why: update only the owner to preserve selector equality for background worktrees.
-      const ownerWorktreeId = getTerminalTabOwnerWorktreeId(s.tabsByWorktree, tabId)
-      if (!ownerWorktreeId) {
-        return s
+    set((state) => {
+      const ownerWorktreeId = getTerminalTabOwnerWorktreeId(state.tabsByWorktree, tabId)
+      const ownerByTabId = ownerWorktreeId
+        ? new Map([[tabId, ownerWorktreeId]])
+        : new Map<string, string>()
+      const result = applyTerminalTabTitleUpdates(state, [{ tabId, title }], ownerByTabId)
+      if (result.runtimeGraphChanged) {
+        scheduleRuntimeGraphSync()
       }
-      const tabs = s.tabsByWorktree[ownerWorktreeId] ?? []
-      const tabIndex = tabs.findIndex((t) => t.id === tabId)
-      const currentTab = tabs[tabIndex]
-      if (!currentTab) {
-        return s
+      return result.patch ?? state
+    })
+  },
+
+  updateTabTitles: (updates) => {
+    if (updates.length === 0) {
+      return
+    }
+    set((state) => {
+      const result = applyTerminalTabTitleUpdates(state, updates)
+      if (result.runtimeGraphChanged) {
+        scheduleRuntimeGraphSync()
       }
-      const nextTitle = title.trim() || getFallbackTabTitle(currentTab)
-      const currentUnifiedTabs = s.unifiedTabsByWorktree[ownerWorktreeId] ?? []
-      if (isDecorativeAgentTitleFrameChange(currentTab.title, nextTitle)) {
-        const unifiedTabsWithCurrentLabel = updateUnifiedTerminalLabel(
-          currentUnifiedTabs,
-          tabId,
-          currentTab.title
-        )
-        return unifiedTabsWithCurrentLabel
-          ? {
-              unifiedTabsByWorktree: {
-                ...s.unifiedTabsByWorktree,
-                [ownerWorktreeId]: unifiedTabsWithCurrentLabel
-              }
-            }
-          : s
-      }
-      const unifiedTabsWithUpdatedLabel = updateUnifiedTerminalLabel(
-        currentUnifiedTabs,
-        tabId,
-        nextTitle
-      )
-      if (currentTab.title === nextTitle) {
-        return unifiedTabsWithUpdatedLabel
-          ? {
-              unifiedTabsByWorktree: {
-                ...s.unifiedTabsByWorktree,
-                [ownerWorktreeId]: unifiedTabsWithUpdatedLabel
-              }
-            }
-          : s
-      }
-      const ownerTabs = tabs.map((tab) =>
-        tab.id === tabId
-          ? {
-              ...tab,
-              // Why: PTYs can briefly emit an empty title as an agent exits; keep the stable fallback instead of a blank tab.
-              title: nextTitle,
-              defaultTitle:
-                tab.defaultTitle ??
-                (/^Terminal \d+$/.test(tab.title) ? tab.title : undefined) ??
-                (/^Terminal \d+$/.test(nextTitle) ? nextTitle : undefined)
-            }
-          : tab
-      )
-      scheduleRuntimeGraphSync()
-      const nextTabsByWorktree = { ...s.tabsByWorktree, [ownerWorktreeId]: ownerTabs }
-      // Why: title changes affect sorting, except active-worktree remount side effects.
-      const isActive = ownerWorktreeId === s.activeWorktreeId
-      const nextState: Partial<AppState> = isActive
-        ? { tabsByWorktree: nextTabsByWorktree }
-        : { tabsByWorktree: nextTabsByWorktree, sortEpoch: s.sortEpoch + 1 }
-      if (unifiedTabsWithUpdatedLabel) {
-        nextState.unifiedTabsByWorktree = {
-          ...s.unifiedTabsByWorktree,
-          [ownerWorktreeId]: unifiedTabsWithUpdatedLabel
-        }
-      }
-      return nextState
+      return result.patch ?? state
     })
   },
 
@@ -2109,18 +2028,16 @@ export const createTerminalSlice: StateCreator<AppState, [], [], TerminalSlice>
 
   setGeneratedTabTitleFromAgentPrompt: (paneKey, prompt, options) => {
     // Why: setAgentStatus is high-frequency; skip derive/set unless the feature is on and this tab still needs a (re)generated title.
-    if (get().settings?.tabAutoGenerateTitle !== true) {
-      return
-    }
+    const state = get()
     const tabId = getTabIdFromPaneKey(paneKey)
-    if (!tabId || prompt.length === 0) {
+    if (!tabId || prompt.length === 0 || state.settings?.tabAutoGenerateTitle !== true) {
       return
     }
-    const ownerWorktreeId = getTerminalTabOwnerWorktreeId(get().tabsByWorktree, tabId)
+    const ownerWorktreeId = getTerminalTabOwnerWorktreeId(state.tabsByWorktree, tabId)
     if (!ownerWorktreeId) {
       return
     }
-    const tabs = get().tabsByWorktree[ownerWorktreeId] ?? []
+    const tabs = state.tabsByWorktree[ownerWorktreeId] ?? []
     const currentTab = tabs.find((tab) => tab.id === tabId)
     if (!currentTab || currentTab.customTitle?.trim() || currentTab.quickCommandLabel?.trim()) {
       return
@@ -2129,57 +2046,29 @@ export const createTerminalSlice: StateCreator<AppState, [], [], TerminalSlice>
     if (existingGeneratedTitle && options?.replaceExistingGeneratedTitle !== true) {
       return
     }
-    const generatedTitle = deriveGeneratedTabTitle(prompt)
-    if (!generatedTitle || existingGeneratedTitle === generatedTitle) {
+    set((latestState) => {
+      const result = applyGeneratedTabTitleUpdates(
+        latestState,
+        [{ paneKey, prompt, options }],
+        new Map([[tabId, ownerWorktreeId]])
+      )
+      if (result.runtimeGraphChanged) {
+        scheduleRuntimeGraphSync()
+      }
+      return result.patch ?? latestState
+    })
+  },
+
+  setGeneratedTabTitlesFromAgentPrompts: (updates) => {
+    if (updates.length === 0) {
       return
     }
-    set((s) => {
-      const ownerTabsForWrite = s.tabsByWorktree[ownerWorktreeId]
-      if (!ownerTabsForWrite) {
-        return s
-      }
-      const tabIndex = ownerTabsForWrite.findIndex((tab) => tab.id === tabId)
-      const tabForWrite = ownerTabsForWrite[tabIndex]
-      // Why: re-check inside set so concurrent renames / setting flips win.
-      if (
-        !tabForWrite ||
-        s.settings?.tabAutoGenerateTitle !== true ||
-        tabForWrite.customTitle?.trim() ||
-        tabForWrite.quickCommandLabel?.trim()
-      ) {
-        return s
-      }
-      const latestGeneratedTitle = tabForWrite.generatedTitle?.trim()
-      if (
-        latestGeneratedTitle &&
-        (latestGeneratedTitle === generatedTitle || options?.replaceExistingGeneratedTitle !== true)
-      ) {
-        return s
-      }
-      const ownerTabs = ownerTabsForWrite.map((tab) =>
-        tab.id === tabId ? { ...tab, generatedTitle } : tab
-      )
-      const currentUnifiedTabs = s.unifiedTabsByWorktree[ownerWorktreeId] ?? []
-      const unifiedTabsWithGeneratedLabel = updateUnifiedTerminalGeneratedLabel(
-        currentUnifiedTabs,
-        tabId,
-        generatedTitle
-      )
-      scheduleRuntimeGraphSync()
-      return {
-        tabsByWorktree: {
-          ...s.tabsByWorktree,
-          [ownerWorktreeId]: ownerTabs
-        },
-        ...(unifiedTabsWithGeneratedLabel
-          ? {
-              unifiedTabsByWorktree: {
-                ...s.unifiedTabsByWorktree,
-                [ownerWorktreeId]: unifiedTabsWithGeneratedLabel
-              }
-            }
-          : {})
+    set((state) => {
+      const result = applyGeneratedTabTitleUpdates(state, updates)
+      if (result.runtimeGraphChanged) {
+        scheduleRuntimeGraphSync()
       }
+      return result.patch ?? state
     })
   },
 
diff --git a/src/renderer/src/store/slices/ui.ts b/src/renderer/src/store/slices/ui.ts
index 80833efb05c..b4879cd8ecf 100644
--- a/src/renderer/src/store/slices/ui.ts
+++ b/src/renderer/src/store/slices/ui.ts
@@ -854,7 +854,7 @@ export type UISlice = {
   ) => void
   markOrcaHookRepoAlwaysTrusted: (repoId: string) => void
   clearOrcaHookTrustForRepo: (repoId: string) => void
-  setupScriptPromptDismissedRepoIds: string[]
+  setupScriptPromptDismissedRepoIds: readonly string[]
   dismissSetupScriptPrompt: (repoHostIdentity: string) => void
   setupGuideSidebarDismissed: boolean
   setSetupGuideSidebarDismissed: (dismissed: boolean) => void
@@ -905,8 +905,8 @@ export type UISlice = {
   showDotfilesByWorktree: Record<string, boolean>
   setShowDotfilesForWorktree: (worktreeId: string, showDotfiles: boolean) => void
   toggleShowDotfilesForWorktree: (worktreeId: string) => void
-  filterRepoIds: string[]
-  setFilterRepoIds: (ids: string[]) => void
+  filterRepoIds: readonly string[]
+  setFilterRepoIds: (ids: readonly string[]) => void
   collapsedGroups: Set<string>
   toggleCollapsedGroup: (key: string) => void
   worktreeCardProperties: WorktreeCardProperty[]
diff --git a/src/renderer/src/store/slices/worktree-helpers.ts b/src/renderer/src/store/slices/worktree-helpers.ts
index ea3ad4bb92f..c2980357ee8 100644
--- a/src/renderer/src/store/slices/worktree-helpers.ts
+++ b/src/renderer/src/store/slices/worktree-helpers.ts
@@ -89,8 +89,8 @@ export type ActiveWorktreeStateTransition = (state: AppState) => {
 export type WorktreeSlice = {
   worktreesByRepo: Record<string, Worktree[]>
   detectedWorktreesByRepo: Record<string, DetectedWorktreeListResult>
-  worktreeLineageById: Record<string, WorktreeLineage>
-  workspaceLineageByChildKey: Record<WorkspaceKey, WorkspaceLineage>
+  worktreeLineageById: Readonly<Record<string, WorktreeLineage>>
+  workspaceLineageByChildKey: Readonly<Record<WorkspaceKey, WorkspaceLineage>>
   activeWorktreeId: string | null
   activeWorkspaceKey: WorkspaceKey | null
   activeWorkspaceExecutionHostId: ExecutionHostId | null
@@ -393,9 +393,7 @@ export function withoutErasedRequiredWorktreeFields(
   updates: Partial<WorktreeMeta>
 ): Partial<WorktreeMeta> {
   const erased = Object.keys(ERASURE_PROTECTED_KEYS).filter(
-    (key) =>
-      updates[key as keyof WorktreeMeta] === undefined &&
-      Object.prototype.hasOwnProperty.call(updates, key)
+    (key) => updates[key as keyof WorktreeMeta] === undefined && Object.hasOwn(updates, key)
   )
   if (erased.length === 0) {
     return updates
diff --git a/src/renderer/src/store/slices/worktree-nav-history.ts b/src/renderer/src/store/slices/worktree-nav-history.ts
index 5a72d3d0530..1582e649017 100644
--- a/src/renderer/src/store/slices/worktree-nav-history.ts
+++ b/src/renderer/src/store/slices/worktree-nav-history.ts
@@ -43,7 +43,7 @@ export type WorktreeNavHistoryTaskDetailEntry =
 export type WorktreeNavHistoryViewEntry =
   | WorktreeNavHistorySimpleViewEntry
   | WorktreeNavHistoryTaskDetailEntry
-export type WorktreeNavHistoryEntry = string | WorktreeNavHistoryViewEntry
+export type WorktreeNavHistoryEntry = (string & {}) | WorktreeNavHistoryViewEntry
 
 export type WorktreeNavHistorySlice = {
   // Linear history, oldest -> newest.
diff --git a/src/renderer/src/store/slices/worktrees.test.ts b/src/renderer/src/store/slices/worktrees.test.ts
index 5ebe9a06116..6077204ba51 100644
--- a/src/renderer/src/store/slices/worktrees.test.ts
+++ b/src/renderer/src/store/slices/worktrees.test.ts
@@ -3187,6 +3187,71 @@ describe('fetchWorktrees', () => {
     expect(store.getState().sortEpoch).toBe(7)
   })
 
+  it('keeps remote lineage map identity when a cloned payload is unchanged', async () => {
+    const store = createTestStore()
+    const worktree = makeWorktree({
+      id: 'repo1::/remote/wt1',
+      repoId: 'repo1',
+      path: '/remote/wt1',
+      branch: 'refs/heads/remote',
+      hostId: 'runtime:env-1'
+    })
+    const lineage = makeLineage({
+      worktreeId: worktree.id,
+      parentWorktreeId: 'repo1::/remote/parent',
+      capture: { source: 'orchestration-context', confidence: 'explicit' },
+      taskId: 'task-42',
+      coordinatorHandle: 'coord-1'
+    })
+    const workspaceLineage = makeWorkspaceLineage({
+      childWorkspaceKey: worktreeWorkspaceKey(worktree.id),
+      parentWorkspaceKey: worktreeWorkspaceKey(lineage.parentWorktreeId),
+      childInstanceId: lineage.worktreeInstanceId,
+      parentInstanceId: lineage.parentWorktreeInstanceId,
+      origin: lineage.origin,
+      capture: lineage.capture,
+      taskId: lineage.taskId,
+      coordinatorHandle: lineage.coordinatorHandle,
+      createdAt: lineage.createdAt
+    })
+    const detected = makeDetectedResult('repo1', [worktree])
+    store.setState({
+      settings: { activeRuntimeEnvironmentId: 'env-1' } as never,
+      worktreesByRepo: { repo1: [worktree] },
+      detectedWorktreesByRepo: { repo1: detected },
+      worktreeLineageById: { [lineage.worktreeId]: lineage },
+      workspaceLineageByChildKey: {
+        [workspaceLineage.childWorkspaceKey]: workspaceLineage
+      },
+      sortEpoch: 7
+    } as Partial<AppState>)
+    runtimeEnvironmentCall.mockImplementation(({ method }: RuntimeEnvironmentCallRequest) => {
+      const result =
+        method === 'worktree.lineageList'
+          ? structuredClone({
+              lineage: { [lineage.worktreeId]: lineage },
+              workspaceLineage: { [workspaceLineage.childWorkspaceKey]: workspaceLineage }
+            })
+          : structuredClone(detected)
+      return Promise.resolve({
+        id: 'rpc-1',
+        ok: true,
+        result,
+        _meta: { runtimeId: 'runtime-remote' }
+      })
+    })
+    const before = store.getState()
+
+    await store.getState().fetchWorktrees('repo1')
+
+    expect(store.getState().worktreeLineageById).toBe(before.worktreeLineageById)
+    expect(store.getState().workspaceLineageByChildKey).toBe(before.workspaceLineageByChildKey)
+    expect(store.getState().worktreeLineageById[lineage.worktreeId]).toBe(lineage)
+    expect(store.getState().workspaceLineageByChildKey[workspaceLineage.childWorkspaceKey]).toBe(
+      workspaceLineage
+    )
+  })
+
   it('defers remote lineage when a caller owns the final host refresh', async () => {
     const store = createTestStore()
     const worktree = makeWorktree({
@@ -3319,6 +3384,135 @@ describe('worktree lineage state', () => {
     })
   })
 
+  it('keeps lineage map and entry identity across a cloned no-op refresh', async () => {
+    const lineage = makeLineage({
+      capture: { source: 'orchestration-context', confidence: 'explicit' },
+      taskId: 'task-42',
+      coordinatorHandle: 'coord-1'
+    })
+    const workspaceLineage = makeWorkspaceLineage({
+      childWorkspaceKey: worktreeWorkspaceKey(lineage.worktreeId),
+      parentWorkspaceKey: worktreeWorkspaceKey(lineage.parentWorktreeId),
+      childInstanceId: lineage.worktreeInstanceId,
+      parentInstanceId: lineage.parentWorktreeInstanceId,
+      origin: lineage.origin,
+      capture: lineage.capture,
+      taskId: lineage.taskId,
+      coordinatorHandle: lineage.coordinatorHandle,
+      createdAt: lineage.createdAt
+    })
+    const store = createLocalLineageTestStore(lineage)
+    const payload = {
+      lineage: { [lineage.worktreeId]: lineage },
+      workspaceLineage: { [workspaceLineage.childWorkspaceKey]: workspaceLineage }
+    }
+    mockApi.worktrees.listLineage.mockImplementation(async () => structuredClone(payload))
+
+    await store.getState().fetchWorktreeLineage()
+    const afterFirst = store.getState()
+    const lineageById = afterFirst.worktreeLineageById
+    const workspaceByKey = afterFirst.workspaceLineageByChildKey
+    const lineageEntry = lineageById[lineage.worktreeId]
+    const workspaceEntry = workspaceByKey[workspaceLineage.childWorkspaceKey]
+    expect(lineageEntry).toEqual(lineage)
+    expect(lineageEntry).not.toBe(lineage)
+    const subscriber = vi.fn()
+    const unsubscribe = store.subscribe(subscriber)
+
+    await store.getState().fetchWorktreeLineage()
+    unsubscribe()
+
+    expect(store.getState().worktreeLineageById).toBe(lineageById)
+    expect(store.getState().workspaceLineageByChildKey).toBe(workspaceByKey)
+    expect(store.getState().worktreeLineageById[lineage.worktreeId]).toBe(lineageEntry)
+    expect(store.getState().workspaceLineageByChildKey[workspaceLineage.childWorkspaceKey]).toBe(
+      workspaceEntry
+    )
+    expect(subscriber).not.toHaveBeenCalled()
+    expect(mockApi.worktrees.listLineage).toHaveBeenCalledTimes(2)
+  })
+
+  it('preserves other-host lineage row identity across a cloned same-host refresh', async () => {
+    const store = createTestStore()
+    const localWorktree = makeWorktree({
+      id: 'repo1::/local/child',
+      repoId: 'repo1',
+      hostId: LOCAL_EXECUTION_HOST_ID
+    })
+    const sshWorktree = makeWorktree({
+      id: 'repo2::/ssh/child',
+      repoId: 'repo2',
+      hostId: 'ssh:ssh-1'
+    })
+    const localLineage = makeLineage({
+      worktreeId: localWorktree.id,
+      parentWorktreeId: 'repo1::/local/parent',
+      capture: { source: 'orchestration-context', confidence: 'explicit' },
+      taskId: 'task-local',
+      coordinatorHandle: 'coord-local'
+    })
+    const sshLineage = makeLineage({
+      worktreeId: sshWorktree.id,
+      parentWorktreeId: 'repo2::/ssh/parent',
+      capture: { source: 'cwd-context', confidence: 'inferred' },
+      taskId: 'task-ssh',
+      coordinatorHandle: 'coord-ssh'
+    })
+    const localWorkspace = makeWorkspaceLineage({
+      childWorkspaceKey: worktreeWorkspaceKey(localWorktree.id),
+      parentWorkspaceKey: worktreeWorkspaceKey(localLineage.parentWorktreeId),
+      childInstanceId: localLineage.worktreeInstanceId,
+      parentInstanceId: localLineage.parentWorktreeInstanceId,
+      origin: localLineage.origin,
+      capture: localLineage.capture,
+      taskId: localLineage.taskId,
+      coordinatorHandle: localLineage.coordinatorHandle
+    })
+    const sshWorkspace = makeWorkspaceLineage({
+      childWorkspaceKey: worktreeWorkspaceKey(sshWorktree.id),
+      parentWorkspaceKey: worktreeWorkspaceKey(sshLineage.parentWorktreeId),
+      childInstanceId: sshLineage.worktreeInstanceId,
+      parentInstanceId: sshLineage.parentWorktreeInstanceId,
+      origin: sshLineage.origin,
+      capture: sshLineage.capture,
+      taskId: sshLineage.taskId,
+      coordinatorHandle: sshLineage.coordinatorHandle
+    })
+    store.setState({
+      worktreesByRepo: {
+        repo1: [localWorktree],
+        repo2: [sshWorktree]
+      },
+      worktreeLineageById: {
+        [localWorktree.id]: localLineage,
+        [sshWorktree.id]: sshLineage
+      },
+      workspaceLineageByChildKey: {
+        [localWorkspace.childWorkspaceKey]: localWorkspace,
+        [sshWorkspace.childWorkspaceKey]: sshWorkspace
+      }
+    } as Partial<AppState>)
+    const payload = {
+      lineage: { [localWorktree.id]: localLineage },
+      workspaceLineage: { [localWorkspace.childWorkspaceKey]: localWorkspace }
+    }
+    mockApi.worktrees.listLineage.mockImplementation(async () => structuredClone(payload))
+    const before = store.getState()
+
+    await store.getState().fetchWorktreeLineage()
+
+    expect(store.getState().worktreeLineageById).toBe(before.worktreeLineageById)
+    expect(store.getState().workspaceLineageByChildKey).toBe(before.workspaceLineageByChildKey)
+    expect(store.getState().worktreeLineageById[localWorktree.id]).toBe(localLineage)
+    expect(store.getState().worktreeLineageById[sshWorktree.id]).toBe(sshLineage)
+    expect(store.getState().workspaceLineageByChildKey[localWorkspace.childWorkspaceKey]).toBe(
+      localWorkspace
+    )
+    expect(store.getState().workspaceLineageByChildKey[sshWorkspace.childWorkspaceKey]).toBe(
+      sshWorkspace
+    )
+  })
+
   it('clears workspace lineage on successful old-shape lineage refresh', async () => {
     const store = createTestStore()
     const lineage = makeLineage()
diff --git a/src/renderer/src/store/slices/worktrees.ts b/src/renderer/src/store/slices/worktrees.ts
index 706fa02de2f..00e421cb7df 100644
--- a/src/renderer/src/store/slices/worktrees.ts
+++ b/src/renderer/src/store/slices/worktrees.ts
@@ -133,6 +133,7 @@ import type {
 import type { DirectSshAuthority } from '../../../../shared/ssh-types'
 import { findIndexedWorktreeOwnerForHost } from '@/lib/worktree-runtime-owner-index'
 import { catalogRowsEqual, reuseEqualCatalogRows } from './worktree-catalog-reconciliation'
+import { reuseEqualRecordMap } from './repo-identity-reconcile'
 export type { WorktreeSlice, WorktreeDeleteState } from './worktree-helpers'
 
 // Why: old runtime servers only have `worktree.list`; preserve the large-list UI hydration parity used before `worktree.detectedList` existed.
@@ -861,6 +862,7 @@ function getFolderWorkspaceMetaUpdates(
     | 'createdWithAgent'
     | 'pendingFirstAgentMessageRename'
     | 'firstAgentMessageRenameError'
+    | 'diffComments'
   >
 > {
   const next: Partial<
@@ -878,6 +880,7 @@ function getFolderWorkspaceMetaUpdates(
       | 'createdWithAgent'
       | 'pendingFirstAgentMessageRename'
       | 'firstAgentMessageRenameError'
+      | 'diffComments'
     >
   > = {}
   if (updates.displayName !== undefined) {
@@ -919,6 +922,9 @@ function getFolderWorkspaceMetaUpdates(
   if (updates.firstAgentMessageRenameError !== undefined) {
     next.firstAgentMessageRenameError = updates.firstAgentMessageRenameError
   }
+  if (updates.diffComments !== undefined) {
+    next.diffComments = updates.diffComments
+  }
   return next
 }
 
@@ -1385,8 +1391,8 @@ async function listWorktreeLineageForRuntime(
   settings: AppState['settings'],
   options: BackgroundRuntimeRefreshOptions = {}
 ): Promise<{
-  worktreeLineageById: Record<string, WorktreeLineage>
-  workspaceLineageByChildKey: Record<string, WorkspaceLineage>
+  worktreeLineageById: Readonly<Record<string, WorktreeLineage>>
+  workspaceLineageByChildKey: Readonly<Record<string, WorkspaceLineage>>
 }> {
   const target = getActiveRuntimeTarget(settings)
   type LineageListResponse = {
@@ -1394,8 +1400,7 @@ async function listWorktreeLineageForRuntime(
     workspaceLineage?: Record<string, WorkspaceLineage>
   }
   const normalizeLineageResponse = (value: Record<string, WorktreeLineage> | LineageListResponse) =>
-    Object.prototype.hasOwnProperty.call(value, 'lineage') ||
-    Object.prototype.hasOwnProperty.call(value, 'workspaceLineage')
+    Object.hasOwn(value, 'lineage') || Object.hasOwn(value, 'workspaceLineage')
       ? {
           worktreeLineageById: (value as LineageListResponse).lineage ?? {},
           workspaceLineageByChildKey: (value as LineageListResponse).workspaceLineage ?? {}
@@ -1566,21 +1571,38 @@ function applyWorktreeLineageUpdate(
   })
 }
 
+function applyHostLineageRefresh(
+  set: Parameters<StateCreator<AppState>>[0],
+  hostId: ExecutionHostId,
+  lineage: {
+    worktreeLineageById: Readonly<Record<string, WorktreeLineage>>
+    workspaceLineageByChildKey: Readonly<Record<string, WorkspaceLineage>>
+  }
+): void {
+  set((s) => {
+    const worktreeLineageById = mergeLineageForHost(s, hostId, lineage.worktreeLineageById)
+    const workspaceLineageByChildKey = mergeWorkspaceLineageForHost(
+      s,
+      hostId,
+      lineage.workspaceLineageByChildKey
+    )
+    if (
+      worktreeLineageById === s.worktreeLineageById &&
+      workspaceLineageByChildKey === s.workspaceLineageByChildKey
+    ) {
+      return s
+    }
+    return { worktreeLineageById, workspaceLineageByChildKey }
+  })
+}
+
 async function refreshWorktreeLineageForSettings(
   settings: AppState['settings'],
   set: Parameters<StateCreator<AppState>>[0],
   options: BackgroundRuntimeRefreshOptions = {}
 ): Promise<void> {
   const lineage = await listWorktreeLineageForRuntime(settings, options)
-  const hostId = getSettingsFocusedExecutionHostId(settings)
-  set((s) => ({
-    worktreeLineageById: mergeLineageForHost(s, hostId, lineage.worktreeLineageById),
-    workspaceLineageByChildKey: mergeWorkspaceLineageForHost(
-      s,
-      hostId,
-      lineage.workspaceLineageByChildKey
-    )
-  }))
+  applyHostLineageRefresh(set, getSettingsFocusedExecutionHostId(settings), lineage)
 }
 
 async function refreshRemoteWorktreeLineageBestEffort(
@@ -1594,15 +1616,7 @@ async function refreshRemoteWorktreeLineageBestEffort(
     const lineage = await listWorktreeLineageForRuntime(settings, {
       reuseRecentCompatibilityFailure: true
     })
-    const hostId = getSettingsFocusedExecutionHostId(settings)
-    set((s) => ({
-      worktreeLineageById: mergeLineageForHost(s, hostId, lineage.worktreeLineageById),
-      workspaceLineageByChildKey: mergeWorkspaceLineageForHost(
-        s,
-        hostId,
-        lineage.workspaceLineageByChildKey
-      )
-    }))
+    applyHostLineageRefresh(set, getSettingsFocusedExecutionHostId(settings), lineage)
   } catch (err) {
     // Why: lineage is supplemental, so a remote timeout here must not discard a successful worktree refresh.
     console.error('Failed to fetch worktree lineage:', err)
@@ -1634,15 +1648,18 @@ function mergeLineageForHost(
     'repos' | 'settings' | 'worktreesByRepo' | 'detectedWorktreesByRepo' | 'worktreeLineageById'
   >,
   hostId: ExecutionHostId,
-  lineage: Record<string, WorktreeLineage>
-): Record<string, WorktreeLineage> {
+  lineage: Readonly<Record<string, WorktreeLineage>>
+): Readonly<Record<string, WorktreeLineage>> {
   const next: Record<string, WorktreeLineage> = {}
   for (const [worktreeId, existing] of Object.entries(state.worktreeLineageById)) {
     if (getWorktreeHostId(state, worktreeId) !== hostId) {
       next[worktreeId] = existing
     }
   }
-  return { ...next, ...lineage }
+  for (const [worktreeId, incoming] of Object.entries(lineage)) {
+    next[worktreeId] = incoming
+  }
+  return reuseEqualRecordMap(state.worktreeLineageById, next)
 }
 
 function mergeWorkspaceLineageForHost(
@@ -1655,8 +1672,8 @@ function mergeWorkspaceLineageForHost(
     | 'workspaceLineageByChildKey'
   >,
   hostId: ExecutionHostId,
-  lineage: Record<string, WorkspaceLineage>
-): Record<string, WorkspaceLineage> {
+  lineage: Readonly<Record<string, WorkspaceLineage>>
+): Readonly<Record<string, WorkspaceLineage>> {
   const next: Record<string, WorkspaceLineage> = {}
   for (const [childKey, existing] of Object.entries(state.workspaceLineageByChildKey)) {
     const childScope = parseWorkspaceKey(existing.childWorkspaceKey)
@@ -1667,7 +1684,10 @@ function mergeWorkspaceLineageForHost(
       next[childKey] = existing
     }
   }
-  return { ...next, ...lineage }
+  for (const [childKey, incoming] of Object.entries(lineage)) {
+    next[childKey] = incoming
+  }
+  return reuseEqualRecordMap(state.workspaceLineageByChildKey, next)
 }
 
 async function persistWorktreeMeta(
@@ -2144,15 +2164,11 @@ function getHostedReviewLinkForMetaRefresh(
   existingWorktree: Worktree | undefined,
   key: HostedReviewLinkKey
 ): number | null {
-  return Object.prototype.hasOwnProperty.call(updates, key)
-    ? (updates[key] ?? null)
-    : (existingWorktree?.[key] ?? null)
+  return Object.hasOwn(updates, key) ? (updates[key] ?? null) : (existingWorktree?.[key] ?? null)
 }
 
 function hasExplicitPushTargetClear(updates: Partial<WorktreeMeta>): boolean {
-  return (
-    Object.prototype.hasOwnProperty.call(updates, 'pushTarget') && updates.pushTarget === undefined
-  )
+  return Object.hasOwn(updates, 'pushTarget') && updates.pushTarget === undefined
 }
 
 type RuntimeWorktreeMetaUpdates = Omit<Partial<WorktreeMeta>, 'pushTarget'> & {
@@ -5557,7 +5573,7 @@ export const createWorktreeSlice: StateCreator<AppState, [], [], WorktreeSlice>
     set((s) => {
       for (const [worktreeId, tabs] of Object.entries(s.tabsByWorktree)) {
         const index = tabs.findIndex((tab) => tab.id === tabId)
-        if (index < 0) {
+        if (index === -1) {
           continue
         }
         const tab = tabs[index]
@@ -6080,7 +6096,7 @@ export const createWorktreeSlice: StateCreator<AppState, [], [], WorktreeSlice>
       const reposChanged = survivingRepos.length !== s.repos.length
 
       // Why: a repoId-less setup on the removed host can still split a surviving project group, so drop every setup it owns.
-      const survivingSetups: AppState['projectHostSetups'] = []
+      const survivingSetups: ProjectHostSetup[] = []
       for (const setup of s.projectHostSetups) {
         if (isRemovedRuntimeHostId(setup.hostId, removed)) {
           if (setup.repoId) {
diff --git a/src/renderer/src/store/worktree-diff-comments-selector.test.ts b/src/renderer/src/store/worktree-diff-comments-selector.test.ts
index 0f6ceb5d99e..db45edec6b3 100644
--- a/src/renderer/src/store/worktree-diff-comments-selector.test.ts
+++ b/src/renderer/src/store/worktree-diff-comments-selector.test.ts
@@ -1,11 +1,12 @@
 import { describe, expect, it } from 'vitest'
-import type { DiffComment, Worktree } from '../../../shared/types'
+import type { DiffComment, FolderWorkspace, Worktree } from '../../../shared/types'
 import type { AppState } from './types'
 import {
   selectWorktreeDiffComments,
   selectWorktreeDiffCommentsOrEmpty
 } from './worktree-diff-comments-selector'
 import { getIndexedWorktreeById } from './worktree-repo-index'
+import { folderWorkspaceKey } from '../../../shared/workspace-scope'
 
 function makeComment(id: string): DiffComment {
   return {
@@ -84,4 +85,25 @@ describe('selectWorktreeDiffComments', () => {
       selectWorktreeDiffCommentsOrEmpty({ worktreesByRepo: next }, undefined)
     )
   })
+
+  it('reads review notes from a folder workspace', () => {
+    const comments = [makeComment('folder-comment')]
+    const folderWorkspace = {
+      id: 'folder-1',
+      executionHostId: 'local',
+      diffComments: comments
+    } as FolderWorkspace
+
+    expect(
+      selectWorktreeDiffComments(
+        {
+          worktreesByRepo: {},
+          activeWorktreeId: folderWorkspaceKey(folderWorkspace.id),
+          activeWorkspaceExecutionHostId: 'local',
+          folderWorkspaces: [folderWorkspace]
+        },
+        folderWorkspaceKey(folderWorkspace.id)
+      )
+    ).toBe(comments)
+  })
 })
diff --git a/src/renderer/src/store/worktree-diff-comments-selector.ts b/src/renderer/src/store/worktree-diff-comments-selector.ts
index c91ef64bc06..31e6edfa9ee 100644
--- a/src/renderer/src/store/worktree-diff-comments-selector.ts
+++ b/src/renderer/src/store/worktree-diff-comments-selector.ts
@@ -1,23 +1,43 @@
 import type { DiffComment } from '../../../shared/types'
 import type { AppState } from './types'
 import { getIndexedWorktreeById } from './worktree-repo-index'
+import { findFolderWorkspaceOwner } from '@/lib/folder-workspace-runtime-owner'
+import { parseWorkspaceKey } from '../../../shared/workspace-scope'
 
 const EMPTY_DIFF_COMMENTS = Object.freeze([]) as unknown as DiffComment[]
 
+type DiffCommentSelectorState = Pick<AppState, 'worktreesByRepo'> &
+  Partial<
+    Pick<
+      AppState,
+      | 'activeWorkspaceExecutionHostId'
+      | 'activeWorktreeId'
+      | 'folderWorkspaces'
+      | 'projectGroups'
+      | 'restoredRuntimeHostIdByWorkspaceSessionKey'
+      | 'runtimeEnvironments'
+      | 'settings'
+    >
+  >
+
 export function selectWorktreeDiffComments(
-  state: Pick<AppState, 'worktreesByRepo'>,
+  state: DiffCommentSelectorState,
   worktreeId: string | null | undefined
 ): DiffComment[] | undefined {
   if (!worktreeId) {
     return undefined
   }
+  const scope = parseWorkspaceKey(worktreeId)
+  if (scope?.type === 'folder') {
+    return findFolderWorkspaceOwner(state, scope.folderWorkspaceId)?.diffComments
+  }
   // Why: mounted Monaco and diff surfaces rerun this selector on every store
   // write, so share the immutable-snapshot index instead of rescanning all worktrees.
   return getIndexedWorktreeById(state.worktreesByRepo, worktreeId)?.diffComments
 }
 
 export function selectWorktreeDiffCommentsOrEmpty(
-  state: Pick<AppState, 'worktreesByRepo'>,
+  state: Parameters<typeof selectWorktreeDiffComments>[0],
   worktreeId: string | null | undefined
 ): DiffComment[] {
   return selectWorktreeDiffComments(state, worktreeId) ?? EMPTY_DIFF_COMMENTS
diff --git a/src/renderer/src/web/web-clipboard-copy-fallback.test.ts b/src/renderer/src/web/web-clipboard-copy-fallback.test.ts
index e6242c11ae4..28e9f1dc4dd 100644
--- a/src/renderer/src/web/web-clipboard-copy-fallback.test.ts
+++ b/src/renderer/src/web/web-clipboard-copy-fallback.test.ts
@@ -44,7 +44,7 @@ function createFakeDocument(options?: FakeDocOptions) {
     removeEventListener: vi.fn((type: string, listener: (event: unknown) => void) => {
       if (type === 'copy') {
         const index = listeners.indexOf(listener)
-        if (index >= 0) {
+        if (index !== -1) {
           listeners.splice(index, 1)
         }
       }
diff --git a/src/renderer/src/web/web-preload-api.ts b/src/renderer/src/web/web-preload-api.ts
index d9e45d991fe..766ac4a5a97 100644
--- a/src/renderer/src/web/web-preload-api.ts
+++ b/src/renderer/src/web/web-preload-api.ts
@@ -1082,7 +1082,7 @@ function removeConflictingWebOverrides(
     const conflictingOverrides = new Set<KeybindingActionId>()
     for (const conflict of conflicts) {
       for (const actionId of conflict.actionIds) {
-        if (Object.prototype.hasOwnProperty.call(next, actionId)) {
+        if (Object.hasOwn(next, actionId)) {
           conflictingOverrides.add(actionId)
         }
       }
@@ -1871,8 +1871,7 @@ function createWorktreesApi(): NonNullable<Partial<PreloadApi>['worktrees']> {
       }),
     updateMeta: async ({ worktreeId, updates }) => {
       const rpcUpdates =
-        Object.prototype.hasOwnProperty.call(updates, 'pushTarget') &&
-        updates.pushTarget === undefined
+        Object.hasOwn(updates, 'pushTarget') && updates.pushTarget === undefined
           ? { ...updates, pushTarget: null }
           : updates
       const owned = await callRuntimeResultWithOwner<{ worktree: Worktree }>('worktree.set', {
diff --git a/src/shared/agent-completion-time.ts b/src/shared/agent-completion-time.ts
new file mode 100644
index 00000000000..4b7ea78c430
--- /dev/null
+++ b/src/shared/agent-completion-time.ts
@@ -0,0 +1,43 @@
+import type { AgentStateHistoryEntry, AgentStatusEntry } from './agent-status-types'
+
+/** The subset of a hook entry a completion time is derived from. */
+export type AgentCompletionSource = Pick<
+  AgentStatusEntry,
+  'state' | 'stateStartedAt' | 'stateHistory' | 'interrupted' | 'sessionBoundary'
+>
+
+function mostRecentCompletedTurnInHistory(
+  history: readonly AgentStateHistoryEntry[] | undefined
+): number | null {
+  let max = 0
+  for (const row of history ?? []) {
+    if (
+      row.state === 'done' &&
+      row.interrupted !== true &&
+      Number.isFinite(row.startedAt) &&
+      row.startedAt > max
+    ) {
+      max = row.startedAt
+    }
+  }
+  return max > 0 ? max : null
+}
+
+/**
+ * When the entry's agent last actually COMPLETED a turn, or null when nothing qualifies.
+ * One clock for both the displayed completion age and Smart Sort's Done eligibility, so a row
+ * can't rank as freshly done while showing an age past the staleness threshold.
+ *
+ * A completion is only:
+ *   - a non-interrupted `done` (its `stateStartedAt` — unmoved by same-state tool/prompt pings); or
+ *   - for a session-boundary `done` (connected idle, not a turn), the real completion it displaced.
+ */
+export function agentEntryCompletionAt(entry: AgentCompletionSource): number | null {
+  if (entry.state !== 'done' || entry.interrupted === true) {
+    return null
+  }
+  if (entry.sessionBoundary === true) {
+    return mostRecentCompletedTurnInHistory(entry.stateHistory)
+  }
+  return Number.isFinite(entry.stateStartedAt) ? entry.stateStartedAt : null
+}
diff --git a/src/shared/agent-decorative-title-signature.ts b/src/shared/agent-decorative-title-signature.ts
index 29f1a65e6a2..317a744d098 100644
--- a/src/shared/agent-decorative-title-signature.ts
+++ b/src/shared/agent-decorative-title-signature.ts
@@ -27,7 +27,10 @@ function normalizeDecorativeAgentTitleText(title: string): string {
   let pendingWhitespace = false
   for (let index = 0; index < title.length; index += 1) {
     const code = title.charCodeAt(index)
-    if (normalized.length === 0 && (isDecorativeTitleWhitespace(code) || isBrailleSpinner(code))) {
+    if (
+      normalized.length === 0 &&
+      (isDecorativeTitleWhitespace(code) || isSpinnerFrameGlyph(code))
+    ) {
       continue
     }
     if (isDecorativeTitleWhitespace(code)) {
@@ -43,8 +46,9 @@ function normalizeDecorativeAgentTitleText(title: string): string {
   return normalized
 }
 
-function isBrailleSpinner(code: number): boolean {
-  return code >= 0x2800 && code <= 0x28ff
+// Why: braille (most agents) plus quarter circles (Claude Code 2.1.228+, #13889).
+function isSpinnerFrameGlyph(code: number): boolean {
+  return (code >= 0x2800 && code <= 0x28ff) || (code >= 0x25d0 && code <= 0x25d3)
 }
 
 function isDecorativeTitleWhitespace(code: number): boolean {
diff --git a/src/shared/agent-detection.test.ts b/src/shared/agent-detection.test.ts
index 53ab82f1fbc..14ee33eb7a8 100644
--- a/src/shared/agent-detection.test.ts
+++ b/src/shared/agent-detection.test.ts
@@ -101,6 +101,55 @@ describe('MiMo title detection', () => {
   )
 })
 
+describe('OpenCode native title detection', () => {
+  // Why: `OC | …` names no agent token, so title-derived display and target surfaces
+  // previously dropped OpenCode panes. Runtime sends corroborate the title separately.
+  it.each(['OC | Implement the Kitty IME preview', 'tmux | OC | Implement the Kitty IME preview'])(
+    'classifies the native session title %j as title-derived idle OpenCode',
+    (title) => {
+      expect(getAgentLabel(title)).toBe('OpenCode')
+      expect(detectAgentStatusFromTitle(title)).toBe('idle')
+    }
+  )
+
+  // Why: a spinner glyph is the one status decoration OpenCode adds to the marker, and
+  // its gate runs before the marker's, so an animating frame still reads working (#8940).
+  it('reads a spinner-decorated native frame as working', () => {
+    const title = 'OC | ⠋ ask claude about this'
+    expect(getAgentLabel(title)).toBe('OpenCode')
+    expect(detectAgentStatusFromTitle(title)).toBe('working')
+  })
+
+  it.each(['OC | ✦ Gemini CLI', 'OC | ✋ review Gemini permission handling'])(
+    'does not let a Gemini glyph in OpenCode session text override identity for %j',
+    (title) => {
+      expect(getAgentLabel(title)).toBe('OpenCode')
+      expect(detectAgentStatusFromTitle(title)).toBe('idle')
+    }
+  )
+
+  // Why: the text after the marker is OpenCode's generated session summary — subject
+  // matter, not status. Routing it through the keyword gates would let an ordinary task
+  // name ("stop the flaky test") park a live pane in working/permission forever, so the
+  // marker asserts presence only. Do not "fix" these into keyword-derived statuses.
+  it.each([
+    'OC | ready to review',
+    'OC | permission prompt keeps reappearing',
+    'OC | waiting on the flaky test',
+    'OC | stop the suite from running'
+  ])('keeps the status word inside the session summary %j inert', (title) => {
+    expect(getAgentLabel(title)).toBe('OpenCode')
+    expect(detectAgentStatusFromTitle(title)).toBe('idle')
+  })
+
+  it.each(['OC |', 'OC|Build', 'oc | lowercase lookalike', 'OCTOPUS | build'])(
+    'does not treat the lookalike title %j as an agent',
+    (title) => {
+      expect(detectAgentStatusFromTitle(title)).toBeNull()
+    }
+  )
+})
+
 describe('Pi-compatible title detection', () => {
   it.each([
     ['\u280b OMP', 'OMP', 'working'],
diff --git a/src/shared/agent-detection.ts b/src/shared/agent-detection.ts
index a2e419c4ff3..c603914b450 100644
--- a/src/shared/agent-detection.ts
+++ b/src/shared/agent-detection.ts
@@ -25,6 +25,7 @@ export {
   clearWorkingIndicators,
   createAgentStatusTracker,
   detectAgentStatusFromTitle,
+  isQuarterCircleSpinnerOnlyAgentTitle,
   normalizeTerminalTitle
 } from './agent-title-status'
 
diff --git a/src/shared/agent-hook-listener.test.ts b/src/shared/agent-hook-listener.test.ts
index 298e7a55c79..9d30dc8a844 100644
--- a/src/shared/agent-hook-listener.test.ts
+++ b/src/shared/agent-hook-listener.test.ts
@@ -801,7 +801,7 @@ describe('shared agent-hook-listener', () => {
     expect(tool?.payload.interactivePrompt).toBeUndefined()
   })
 
-  it('keeps OMP ask_user_question behavior on Pi-compatible events', () => {
+  it('maps OMP ask to blocked without publishing a native prompt', () => {
     const tool = normalizeHookPayload(
       state,
       'omp',
@@ -812,8 +812,8 @@ describe('shared agent-hook-listener', () => {
         env: 'production',
         version: '1',
         payload: {
-          hook_event_name: 'tool_call',
-          tool_name: 'ask_user_question',
+          hook_event_name: 'tool_execution_start',
+          tool_name: 'ask',
           tool_input: {
             questions: [
               {
@@ -827,9 +827,9 @@ describe('shared agent-hook-listener', () => {
       'production'
     )
     expect(tool?.payload).toMatchObject({
-      state: 'working',
+      state: 'blocked',
       agentType: 'omp',
-      toolName: 'ask_user_question'
+      toolName: 'ask'
     })
     expect(tool?.payload.interactivePrompt).toBeUndefined()
   })
diff --git a/src/shared/agent-hook-listener.ts b/src/shared/agent-hook-listener.ts
index 44032c03b24..d7b7422db93 100644
--- a/src/shared/agent-hook-listener.ts
+++ b/src/shared/agent-hook-listener.ts
@@ -1,6 +1,6 @@
 /* eslint-disable max-lines -- Why: canonical transport-agnostic listener; parser, normalizer, per-CLI extractors, and endpoint writer share invariants that must not drift between Orca's main process and the relay. */
 
-// Why: extracted from src/main/agent-hooks/server.ts so the relay can host the pipeline without Electron (Node builtins only). See docs/design/agent-status-over-ssh.md §3.
+// Why: extracted from src/main/agent-hooks/server.ts so the relay can host the same pipeline without Electron — this file must stay on Node builtins and other shared/ modules, or the relay bundle breaks.
 import type { IncomingMessage } from 'node:http'
 import { createHash, randomUUID } from 'node:crypto'
 import { homedir } from 'node:os'
@@ -323,7 +323,8 @@ export type AgentHookEventPayload = {
   launchToken?: string
   tabId?: string
   worktreeId?: string
-  /** SSH connection the event arrived on, or null for local (only ingestRemote stamps it; the HTTP path can't know the mux). See docs/design/agent-status-over-ssh.md §5. */
+  /** SSH connection the event arrived on, or null for local. Only `ingestRemote` can stamp it — the loopback HTTP path has no mux identity — and receivers key off it to drop
+   *  in-flight events from a superseded connection after an SSH reconnect. */
   connectionId: string | null
   /** True when the event carried prompt text directly, not the listener's cached prompt from an earlier event in the pane. */
   hasExplicitPrompt?: boolean
@@ -842,7 +843,7 @@ function readString(record: Record<string, unknown>, key: string): string | unde
 }
 
 function hasOwnField(record: Record<string, unknown>, key: string): boolean {
-  return Object.prototype.hasOwnProperty.call(record, key)
+  return Object.hasOwn(record, key)
 }
 
 function hasAnyOwnField(record: Record<string, unknown>, keys: readonly string[]): boolean {
@@ -3846,13 +3847,14 @@ function normalizePiCompatibleEvent(
     return null
   }
 
-  // Why: gate on the event's own tool_name (not a merged snapshot) so a stale cached ask_user_question can't re-enter blocked.
-  const isPiAskUserQuestion =
-    agentType === 'pi' &&
-    isAskUserQuestionTool(readString(hookPayload, 'tool_name')) &&
+  // Why: gate on the event's own tool_name so a stale cached question can't re-enter blocked.
+  const toolName = readString(hookPayload, 'tool_name')
+  const isPiCompatibleAsk =
+    ((agentType === 'pi' && isAskUserQuestionTool(toolName)) ||
+      (agentType === 'omp' && toolName === 'ask')) &&
     (eventName === 'tool_call' || eventName === 'tool_execution_start')
 
-  const stateName = isPiAskUserQuestion
+  const stateName = isPiCompatibleAsk
     ? 'blocked'
     : eventName === 'before_agent_start' ||
         eventName === 'agent_start' ||
@@ -4361,7 +4363,6 @@ export function normalizeHookPayload(
       break
   }
 
-  // Why: connectionId is null here; ingestRemote stamps it from mux identity on receive. See docs/design/agent-status-over-ssh.md §5.
   const providerSessionOnly =
     (source === 'pi' || source === 'prime-agent') &&
     eventName === 'session_start' &&
@@ -4379,6 +4380,7 @@ export function normalizeHookPayload(
         launchToken,
         tabId,
         worktreeId,
+        // Why: normalization is transport-agnostic — only ingestRemote knows the mux identity to stamp here.
         connectionId: null,
         hasExplicitPrompt:
           source === 'amp'
diff --git a/src/shared/agent-hook-relay.ts b/src/shared/agent-hook-relay.ts
index f71e384b3be..f14db403804 100644
--- a/src/shared/agent-hook-relay.ts
+++ b/src/shared/agent-hook-relay.ts
@@ -8,7 +8,7 @@
 // the renderer-bound IPC + installer contract; this module is the wire envelope
 // between Orca's main process and the remote relay.
 //
-// Per the design doc:
+// Invariants both ends rely on:
 // - The relay normalizes; Orca routes. The envelope's `payload` field has
 //   already been through `normalizeHookPayload` (which calls
 //   `parseAgentStatusPayload` → `normalizeAgentStatusObject`) on the relay
@@ -194,8 +194,9 @@ export function restoreShedStatusFields(
 }
 
 /** JSON-RPC request method Orca issues after `--connect` reattach to ask the
- *  relay to replay its per-paneKey last-payload cache. See §5 Path 3 of the
- *  design doc for the race that ruled out push-on-`setWrite`. */
+ *  relay to replay its per-paneKey last-payload cache. Pull, not push: a relay
+ *  that pushed on `setWrite` can emit before Orca has wired its `agent.hook`
+ *  handler, and those notifications are dropped silently. */
 export const AGENT_HOOK_REQUEST_REPLAY_METHOD = 'agent_hook.requestReplay' as const
 
 /** JSON-RPC request method Orca issues at session-ready to ship the
diff --git a/src/shared/agent-resume-argv-drop.ts b/src/shared/agent-resume-argv-drop.ts
index ae393d0897e..df8c16aae4f 100644
--- a/src/shared/agent-resume-argv-drop.ts
+++ b/src/shared/agent-resume-argv-drop.ts
@@ -37,6 +37,9 @@ function stripSuffix(command: string, suffix: string): string | null {
  * Remove the resume argv `buildAgentResumeStartupPlan` appended, leaving the plain
  * agent launch. Main uses this when it cannot verify which account owns the session,
  * so the pane starts fresh instead of resuming under whichever account is selected.
+ * Codex-only in practice: claude resume commands may carry the selector before a
+ * `--` terminator (agent-resume-launch-command.ts), which this trailing-suffix
+ * strip would report as `unrecognized`.
  */
 export function dropAgentResumeArgvFromCommand(args: {
   command: string
diff --git a/src/shared/agent-resume-launch-command.test.ts b/src/shared/agent-resume-launch-command.test.ts
new file mode 100644
index 00000000000..5bf4797472b
--- /dev/null
+++ b/src/shared/agent-resume-launch-command.test.ts
@@ -0,0 +1,580 @@
+import { describe, expect, it } from 'vitest'
+import { buildClaudeResumeLaunchCommand } from './agent-resume-launch-command'
+import { buildAgentResumeStartupPlan, buildAgentStartupPlan } from './tui-agent-startup'
+import { tokenizeStartupCommand, type AgentStartupShell } from './tui-agent-startup-shell'
+
+const SESSION_ID = 'claude-session-1'
+const RESUME = ['--resume', SESSION_ID] as const
+const providerSession = { key: 'session_id', id: SESSION_ID } as const
+
+const SHELLS: { platform: NodeJS.Platform; shell: AgentStartupShell }[] = [
+  { platform: 'linux', shell: 'posix' },
+  { platform: 'darwin', shell: 'posix' },
+  { platform: 'win32', shell: 'powershell' },
+  { platform: 'win32', shell: 'cmd' }
+]
+
+/** Independent selector oracle — deliberately NOT the implementation's own
+ * predicate, so a regression that shrinks the stripped set cannot also blind
+ * this assertion. */
+function isSelectorShapedToken(token: string): boolean {
+  return (
+    ['--resume', '--continue', '-r', '-c'].includes(token) ||
+    ['--resume=', '--continue=', '-r=', '-c='].some((prefix) => token.startsWith(prefix))
+  )
+}
+
+/** Tokenizes a launch command and asserts exactly one identity-bearing resume. */
+function expectSingleAuthoritativeResume(command: string, shell: AgentStartupShell): void {
+  const tokenized = tokenizeStartupCommand(command, shell)
+  expect(tokenized.ok).toBe(true)
+  if (!tokenized.ok) {
+    return
+  }
+  const selectors = tokenized.tokens.filter(isSelectorShapedToken)
+  expect(selectors).toEqual(['--resume'])
+  const index = tokenized.tokens.indexOf('--resume')
+  expect(tokenized.tokens[index + 1]).toBe(SESSION_ID)
+}
+
+describe('buildClaudeResumeLaunchCommand', () => {
+  it.each(SHELLS)('appends the authoritative selector to a plain base ($shell)', ({ shell }) => {
+    const command = buildClaudeResumeLaunchCommand('claude', RESUME, shell)
+    expectSingleAuthoritativeResume(command, shell)
+    expect(command.startsWith('claude ')).toBe(true)
+  })
+
+  it.each(SHELLS)('strips a bare persisted --resume picker default ($shell)', ({ shell }) => {
+    const base = shell === 'cmd' ? 'claude "--resume"' : "claude '--resume'"
+    const command = buildClaudeResumeLaunchCommand(base, RESUME, shell)
+    expectSingleAuthoritativeResume(command, shell)
+  })
+
+  it.each([
+    'claude --resume stale-session',
+    'claude --resume=stale-session',
+    'claude -r stale-session',
+    'claude -r=stale-session',
+    'claude --resume= --model sonnet',
+    'claude --continue',
+    'claude -c',
+    'claude --continue=1',
+    'claude -c=1',
+    'claude --resume stale -r older --continue -c'
+  ])('replaces stale selectors in %s', (base) => {
+    const command = buildClaudeResumeLaunchCommand(base, RESUME, 'posix')
+    expectSingleAuthoritativeResume(command, 'posix')
+  })
+
+  it('keeps surviving options when stripping selectors', () => {
+    expect(
+      buildClaudeResumeLaunchCommand('claude --resume stale --model sonnet', RESUME, 'posix')
+    ).toBe(`claude --model sonnet '--resume' '${SESSION_ID}'`)
+  })
+
+  it('never mistakes a dash-leading option value for a selector', () => {
+    expect(buildClaudeResumeLaunchCommand('claude --model -recent', RESUME, 'posix')).toBe(
+      `claude --model -recent '--resume' '${SESSION_ID}'`
+    )
+    expect(
+      buildClaudeResumeLaunchCommand('claude --append-system-prompt -rules-here', RESUME, 'posix')
+    ).toBe(`claude --append-system-prompt -rules-here '--resume' '${SESSION_ID}'`)
+    expect(buildClaudeResumeLaunchCommand('claude --agent -reviewer', RESUME, 'posix')).toBe(
+      `claude --agent -reviewer '--resume' '${SESSION_ID}'`
+    )
+    expect(buildClaudeResumeLaunchCommand('claude --plugin-url -remote.zip', RESUME, 'posix')).toBe(
+      `claude --plugin-url -remote.zip '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('leaves the ambiguous joined -r<id> form alone (degrades to pre-guard behavior)', () => {
+    expect(buildClaudeResumeLaunchCommand('claude -rstale-session', RESUME, 'posix')).toBe(
+      `claude -rstale-session '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('leaves wrapper commands untouched and appends at the end', () => {
+    expect(buildClaudeResumeLaunchCommand('bash -c claude', RESUME, 'posix')).toBe(
+      `bash -c claude '--resume' '${SESSION_ID}'`
+    )
+    expect(buildClaudeResumeLaunchCommand('mise exec -- claude', RESUME, 'posix')).toBe(
+      `mise exec -- claude '--resume' '${SESSION_ID}'`
+    )
+    expect(buildClaudeResumeLaunchCommand('sudo -u dev -- claude', RESUME, 'posix')).toBe(
+      `sudo -u dev -- claude '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('strips selectors that follow claude after a wrapper terminator', () => {
+    expect(
+      buildClaudeResumeLaunchCommand("mise exec -- claude '--resume' stale", RESUME, 'posix')
+    ).toBe(`mise exec -- claude '--resume' '${SESSION_ID}'`)
+  })
+
+  it('fails open for claude outside command position (wrapper without --)', () => {
+    // Why: npx/bunx-style passthrough cannot be told apart from an argument
+    // that merely names claude, so the guard defers to append-only behavior.
+    expect(buildClaudeResumeLaunchCommand("npx claude '--resume'", RESUME, 'posix')).toBe(
+      `npx claude '--resume' '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('never mistakes a claude-suffixed argument for the executable', () => {
+    expect(
+      buildClaudeResumeLaunchCommand(
+        'ssh -i ~/.ssh/claude devbox -- claude --resume OLD',
+        RESUME,
+        'posix'
+      )
+    ).toBe(`ssh -i ~/.ssh/claude devbox -- claude '--resume' '${SESSION_ID}'`)
+    expect(
+      buildClaudeResumeLaunchCommand(
+        'mise exec --cd /Users/me/src/claude -- claude --resume OLD',
+        RESUME,
+        'posix'
+      )
+    ).toBe(`mise exec --cd /Users/me/src/claude -- claude '--resume' '${SESSION_ID}'`)
+    // No claude in command position at all: wrapper flags stay untouched.
+    expect(
+      buildClaudeResumeLaunchCommand(
+        'nix develop /Users/me/src/claude -c claude --resume OLD',
+        RESUME,
+        'posix'
+      )
+    ).toBe(`nix develop /Users/me/src/claude -c claude --resume OLD '--resume' '${SESSION_ID}'`)
+  })
+
+  it.each(['claude "\\--resume" old', 'claude "\\-r" old', 'claude --model "\\--resume"'])(
+    'fails open on a double-quoted backslash the shell keeps literal: %s',
+    (base) => {
+      expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+        `${base} '--resume' '${SESSION_ID}'`
+      )
+    }
+  )
+
+  it('still strips when a double-quoted backslash is shell-consumed', () => {
+    expect(
+      buildClaudeResumeLaunchCommand('claude --model "a\\"b" --resume old', RESUME, 'posix')
+    ).toBe(`claude --model "a\\"b" '--resume' '${SESSION_ID}'`)
+  })
+
+  it.each([
+    'claude "--resu\\\nme" --resume stale',
+    "claude $'-c' --resume stale",
+    "claude $'--resu\\x6de' --resume stale"
+  ])('fails open when an escape hides a selector from the tokenizer: %s', (base) => {
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it.each([
+    'claude --resume old --append-system-prompt "spend under 5$"',
+    'claude --resume old --note x$',
+    'claude --resume old --note "a$"'
+  ])('still strips when a $ is not an expansion opener: %s', (base) => {
+    const command = buildClaudeResumeLaunchCommand(base, RESUME, 'posix')
+    expect(command).not.toContain('--resume old')
+    expectSingleAuthoritativeResume(command, 'posix')
+  })
+
+  it.each(['claude a^" --resume ^"b', 'claude ^"x --resume^" --resume old'])(
+    'fails open when a cmd caret escapes a quote: %s',
+    (base) => {
+      // cmd strips the caret and the child's parser reads a bare quote
+      // delimiter, so the tokenizer's word boundaries stop matching argv.
+      expect(buildClaudeResumeLaunchCommand(base, RESUME, 'cmd')).toBe(
+        `${base} "--resume" "${SESSION_ID}"`
+      )
+    }
+  )
+
+  it.each(['claude --resume (Get-Content id.txt)', 'claude --hook { npm -c run } --resume old'])(
+    'fails open on bare powershell evaluation syntax: %s',
+    (base) => {
+      expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+        `${base} '--resume' '${SESSION_ID}'`
+      )
+    }
+  )
+
+  it.each([
+    'claude "-`r" foo --model x',
+    'claude "-`u{72}" oldid --resume x',
+    'claude -`r foo --model x',
+    'claude --resum`e stale --model x'
+  ])('fails open on powershell escape sequences, quoted or bare: %s', (base) => {
+    // PowerShell expands these in bare arguments too, so the tokenizer's
+    // token value is not what argv receives.
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on a token-leading powershell backtick before whitespace', () => {
+    // PowerShell drops the backtick AND the whitespace, emitting no token,
+    // so the tokenizer's extra token would shift the locator.
+    const base = 'claude --resume ` \t"q"'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on the powershell stop-parsing token', () => {
+    // After a bare --%, PowerShell hands the rest of the line to the child
+    // literally, so an appended quoted selector would arrive as literal bytes.
+    const base = 'claude --% --resume stale --model sonnet'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('still strips when --% is quoted or on cmd, where it is an ordinary token', () => {
+    expect(
+      buildClaudeResumeLaunchCommand('claude "--%" --resume stale', RESUME, 'powershell')
+    ).toBe(`claude "--%" '--resume' '${SESSION_ID}'`)
+    expect(buildClaudeResumeLaunchCommand('claude --% --resume stale', RESUME, 'cmd')).toBe(
+      `claude --% "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it('still strips with parens safely inside quotes on powershell', () => {
+    expect(
+      buildClaudeResumeLaunchCommand(
+        'claude --allowedTools "Bash(git:*)" --resume old',
+        RESUME,
+        'powershell'
+      )
+    ).toBe(`claude --allowedTools "Bash(git:*)" '--resume' '${SESSION_ID}'`)
+  })
+
+  it.each([
+    'claude "--add-dir" "C:\\a\\" "--" "--out" "D:\\x\\"',
+    'claude --add-dir "C:\\repo\\" --resume old'
+  ])('fails open when a cmd backslash run makes a quote literal: %s', (base) => {
+    // An odd run of backslashes makes the quote a literal byte to the child's
+    // CommandLineToArgvW parser, so tokenizer boundaries stop matching argv.
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'cmd')).toBe(
+      `${base} "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it.each([
+    'claude --add-dir "C:\\Users\\me\\repo" --resume old',
+    'claude --add-dir "C:\\Program Files (x86)\\x" --resume old'
+  ])('still strips for ordinary quoted windows paths: %s', (base) => {
+    const command = buildClaudeResumeLaunchCommand(base, RESUME, 'cmd')
+    expect(command).not.toContain('--resume old')
+    expectSingleAuthoritativeResume(command, 'cmd')
+  })
+
+  it('fails open when a cmd caret escapes a real argument separator', () => {
+    // cmd strips ^ before the child re-splits on the bare space, so the
+    // tokenizer's merged token would drop the user's second argument.
+    const base = 'claude --resume a^ b --model x'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'cmd')).toBe(
+      `${base} "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it.each([
+    ['claude --resume old \\', 'posix' as const],
+    ['claude --resume old `', 'powershell' as const],
+    ['claude --resume old ^', 'cmd' as const]
+  ])('fails open on a trailing unpaired escape: %s', (base, shell) => {
+    // A dangling escape would swallow the separator before the appended
+    // selector, so claude would receive no exact --resume at all.
+    const quoted = shell === 'cmd' ? `"--resume" "${SESSION_ID}"` : `'--resume' '${SESSION_ID}'`
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, shell)).toBe(`${base} ${quoted}`)
+  })
+
+  it('fails open on a windows escaped line continuation', () => {
+    const powershellBase = 'claude --resume stale `\n--resume hidden'
+    expect(buildClaudeResumeLaunchCommand(powershellBase, RESUME, 'powershell')).toBe(
+      `${powershellBase} '--resume' '${SESSION_ID}'`
+    )
+    const cmdBase = 'claude --resume stale ^\n--resume hidden'
+    expect(buildClaudeResumeLaunchCommand(cmdBase, RESUME, 'cmd')).toBe(
+      `${cmdBase} "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it('fails open on a posix line continuation hiding a selector', () => {
+    const base = 'claude --model x \\\n--resume old'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on escape characters the windows shells keep literal', () => {
+    // cmd keeps ^ literal inside double quotes; PowerShell keeps ` literal
+    // inside single quotes, so these tokens are not really selectors.
+    expect(buildClaudeResumeLaunchCommand('claude "-^-resume" old', RESUME, 'cmd')).toBe(
+      `claude "-^-resume" old "--resume" "${SESSION_ID}"`
+    )
+    expect(buildClaudeResumeLaunchCommand("claude '-`-resume' old", RESUME, 'powershell')).toBe(
+      `claude '-\`-resume' old '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on an unclosed expansion opened before claude', () => {
+    const base = '$(x; npx -- claude --resume stale)'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open when the executable token itself is unmodelable', () => {
+    // cmd has no single-quote syntax, so 'claude' is not the claude executable.
+    expect(buildClaudeResumeLaunchCommand("'claude' --resume old", RESUME, 'cmd')).toBe(
+      `'claude' --resume old "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it.each(['cmd', 'powershell'] as const)(
+    'fails open on a posix-style assignment prefix under %s',
+    (shell) => {
+      // NAME=value prefixes are posix-only syntax; on Windows shells that
+      // token is a bogus executable, so nothing may be spliced.
+      const base = "FOO='bar' claude --resume old"
+      const quoted = shell === 'cmd' ? `"--resume" "${SESSION_ID}"` : `'--resume' '${SESSION_ID}'`
+      expect(buildClaudeResumeLaunchCommand(base, RESUME, shell)).toBe(`${base} ${quoted}`)
+    }
+  )
+
+  it('preserves an env-assignment or path prefix byte for byte', () => {
+    expect(
+      buildClaudeResumeLaunchCommand('FOO="$HOME/x" ~/bin/claude \'--resume\'', RESUME, 'posix')
+    ).toBe(`FOO="$HOME/x" ~/bin/claude '--resume' '${SESSION_ID}'`)
+  })
+
+  it('recognizes Windows claude executable spellings', () => {
+    expect(buildClaudeResumeLaunchCommand('C:\\tools\\claude.CMD "--resume"', RESUME, 'cmd')).toBe(
+      `C:\\tools\\claude.CMD "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it("inserts the selector before claude's own -- terminator", () => {
+    expect(
+      buildClaudeResumeLaunchCommand('claude --resume stale -- positional', RESUME, 'posix')
+    ).toBe(`claude '--resume' '${SESSION_ID}' -- positional`)
+  })
+
+  it('fails open when the base cannot be tokenized', () => {
+    expect(buildClaudeResumeLaunchCommand('claude "unterminated', RESUME, 'posix')).toBe(
+      `claude "unterminated '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open when no claude executable token exists', () => {
+    expect(buildClaudeResumeLaunchCommand('my-agent-wrapper --resume', RESUME, 'posix')).toBe(
+      `my-agent-wrapper --resume '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it.each([
+    'claude -c && echo done',
+    'claude --resume stale; echo hi',
+    'claude --resume stale;echo hi',
+    'claude -c | tee /tmp/log',
+    'claude --resume stale 2>/tmp/x.log',
+    'claude --resume stale\n--verbose',
+    'claude --resume stale # note'
+  ])('fails open when the base chains shell syntax after claude: %s', (base) => {
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it.each([
+    'claude --resume old "y"; echo hi',
+    "claude --resume old 'y'; echo hi",
+    'claude --resume old --model "sonnet"&&echo hi',
+    'claude --resume old "y"| tee /tmp/x',
+    'claude --resume old \\"; echo hi'
+  ])('fails open when shell syntax hides behind partial quoting: %s', (base) => {
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on escape-adjacent operators in windows shells', () => {
+    const powershellBase = 'claude --resume old `x; echo hi'
+    expect(buildClaudeResumeLaunchCommand(powershellBase, RESUME, 'powershell')).toBe(
+      `${powershellBase} '--resume' '${SESSION_ID}'`
+    )
+    const cmdBase = 'claude --resume old ^x& echo hi'
+    expect(buildClaudeResumeLaunchCommand(cmdBase, RESUME, 'cmd')).toBe(
+      `${cmdBase} "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it.each([
+    'claude --resume $(cat sid.txt)',
+    'claude --resume=$(cat sid.txt)',
+    'claude --resume `cat sid.txt`',
+    'claude --resume ${SID:-a b}'
+  ])('fails open on unquoted multi-token shell expansions: %s', (base) => {
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it.each([
+    'claude --resume "`cat "a b"`"',
+    'claude --model "$(pick "x -c y")"',
+    'claude --model "$(f "x --resume y")"',
+    'claude --resume "$(cat "$HOME/My Sessions/id")"'
+  ])('fails open on expansions nested inside double quotes: %s', (base) => {
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'posix')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on a powershell double-quoted subexpression', () => {
+    const base = 'claude --model "$(pick "x -c y")"'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('fails open on a powershell subexpression locator', () => {
+    const base = 'claude --resume $(Get-Content sid.txt)'
+    expect(buildClaudeResumeLaunchCommand(base, RESUME, 'powershell')).toBe(
+      `${base} '--resume' '${SESSION_ID}'`
+    )
+  })
+
+  it('never walks the separator backoff into an escaped-space token', () => {
+    expect(
+      buildClaudeResumeLaunchCommand(
+        'claude --append-system-prompt Be\\ nice\\  --resume OLD',
+        RESUME,
+        'posix'
+      )
+    ).toBe(`claude --append-system-prompt Be\\ nice\\  '--resume' '${SESSION_ID}'`)
+  })
+
+  it('fails open when cmd operators hide in single quotes', () => {
+    // cmd.exe has no single-quote syntax, so '&' is a live command separator.
+    expect(buildClaudeResumeLaunchCommand("claude '&' --resume=old-session", RESUME, 'cmd')).toBe(
+      `claude '&' --resume=old-session "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it('fails open on cmd single-quoted literals that merely look like selectors', () => {
+    // cmd passes the quotes through, so these are junk positionals for
+    // claude, not real selectors or terminators.
+    expect(buildClaudeResumeLaunchCommand("claude '--resume' old", RESUME, 'cmd')).toBe(
+      `claude '--resume' old "--resume" "${SESSION_ID}"`
+    )
+    expect(buildClaudeResumeLaunchCommand("claude '--' --resume old", RESUME, 'cmd')).toBe(
+      `claude '--' --resume old "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it('still strips next to a caret-escaped literal ampersand on cmd', () => {
+    // ^& is an inactive, literal & in cmd, so the guard may keep working.
+    expect(buildClaudeResumeLaunchCommand('claude --resume old ^&', RESUME, 'cmd')).toBe(
+      `claude ^& "--resume" "${SESSION_ID}"`
+    )
+  })
+
+  it('still strips when operators are safely quoted', () => {
+    expect(
+      buildClaudeResumeLaunchCommand(
+        "claude --append-system-prompt 'use && wisely' --resume stale",
+        RESUME,
+        'posix'
+      )
+    ).toBe(`claude --append-system-prompt 'use && wisely' '--resume' '${SESSION_ID}'`)
+  })
+
+  it('recognizes claude behind the PowerShell call operator', () => {
+    expect(buildClaudeResumeLaunchCommand("& claude '--resume'", RESUME, 'powershell')).toBe(
+      `& claude '--resume' '${SESSION_ID}'`
+    )
+    expect(
+      buildClaudeResumeLaunchCommand(
+        "& 'C:\\Program Files\\claude\\claude.exe' --resume old",
+        RESUME,
+        'powershell'
+      )
+    ).toBe(`& 'C:\\Program Files\\claude\\claude.exe' '--resume' '${SESSION_ID}'`)
+  })
+})
+
+describe('buildAgentResumeStartupPlan claude selector guard', () => {
+  it.each(SHELLS)(
+    'emits one identity-bearing resume for a persisted bare selector ($platform/$shell)',
+    ({ platform, shell }) => {
+      const initial = buildAgentStartupPlan({
+        agent: 'claude',
+        prompt: '',
+        cmdOverrides: {},
+        agentArgs: '--resume',
+        platform,
+        shell,
+        allowEmptyPromptLaunch: true
+      })
+      expect(initial).not.toBeNull()
+      const restored = buildAgentResumeStartupPlan({
+        agent: 'claude',
+        providerSession,
+        cmdOverrides: {},
+        agentArgs: initial?.launchConfig.agentArgs,
+        agentCommand: initial?.launchConfig.agentCommand,
+        platform,
+        shell
+      })
+      expect(restored).not.toBeNull()
+      expectSingleAuthoritativeResume(restored?.launchCommand ?? '', shell)
+    }
+  )
+
+  it('emits one identity-bearing resume when only default args carry a stale id', () => {
+    const restored = buildAgentResumeStartupPlan({
+      agent: 'claude',
+      providerSession,
+      cmdOverrides: {},
+      agentArgs: '--resume stale-session --model sonnet',
+      platform: 'linux'
+    })
+    expect(restored?.launchCommand).toBe(`claude '--model' 'sonnet' '--resume' '${SESSION_ID}'`)
+  })
+
+  it('still launches exotic custom commands that the tokenizer rejects', () => {
+    const restored = buildAgentResumeStartupPlan({
+      agent: 'claude',
+      providerSession,
+      cmdOverrides: {},
+      agentCommand: 'claude --model $(cat ~/.claude-model) "unterminated',
+      platform: 'darwin'
+    })
+    expect(restored).not.toBeNull()
+    expect(restored?.launchCommand.endsWith(`'--resume' '${SESSION_ID}'`)).toBe(true)
+  })
+
+  it('does not change other agents', () => {
+    const restored = buildAgentResumeStartupPlan({
+      agent: 'gemini',
+      providerSession,
+      cmdOverrides: {},
+      agentArgs: '--resume',
+      platform: 'linux'
+    })
+    expect(restored?.launchCommand).toBe(`gemini '--resume' '--resume' '${SESSION_ID}'`)
+  })
+
+  it('persists the original base command unchanged', () => {
+    const restored = buildAgentResumeStartupPlan({
+      agent: 'claude',
+      providerSession,
+      cmdOverrides: {},
+      agentCommand: "claude '--resume'",
+      platform: 'linux'
+    })
+    expect(restored?.launchConfig.agentCommand).toBe("claude '--resume'")
+  })
+})
diff --git a/src/shared/agent-resume-launch-command.ts b/src/shared/agent-resume-launch-command.ts
new file mode 100644
index 00000000000..1093735d266
--- /dev/null
+++ b/src/shared/agent-resume-launch-command.ts
@@ -0,0 +1,168 @@
+import type { ResumableTuiAgent } from './agent-session-resume'
+import {
+  quoteStartupArg,
+  tokenizeStartupCommand,
+  type AgentStartupShell
+} from './tui-agent-startup-shell'
+
+function isClaudeResumeSelector(token: string): boolean {
+  if (token === '--resume' || token.startsWith('--resume=')) {
+    return true
+  }
+  if (token === '--continue' || token.startsWith('--continue=')) {
+    return true
+  }
+  // Why: the joined -r<id> form is deliberately NOT matched — any `-r…` token
+  // is ambiguous with another option's dash-leading value (`--agent -review`),
+  // and no arity table can keep up with the CLI. Only exact selector shapes
+  // are stripped; a persisted joined form degrades to pre-guard behavior.
+  return token === '-r' || token.startsWith('-r=') || token === '-c' || token.startsWith('-c=')
+}
+
+function isClaudeExecutableToken(token: string): boolean {
+  const base = token.split(/[\\/]/).pop() ?? ''
+  return /^claude(\.(exe|cmd|bat|ps1))?$/i.test(base)
+}
+
+/** Accepts a claude token only in command position — index 0, right after a
+ * wrapper's `--`, behind PowerShell's `&` call operator, or preceded solely by
+ * NAME=value assignments — so an argument that merely ends in /claude (an ssh
+ * key, a project dir) can never be mistaken for the executable. */
+function findClaudeExecutableIndex(tokens: readonly string[], shell: AgentStartupShell): number {
+  let commandPosition = true
+  for (let i = 0; i < tokens.length; i += 1) {
+    const token = tokens[i]
+    if (commandPosition) {
+      if (isClaudeExecutableToken(token)) {
+        return i
+      }
+      if (
+        // Why: `NAME=value cmd` is posix-only syntax; on cmd/PowerShell such a
+        // token is just a bogus executable name, not a prefix to skip.
+        (shell === 'posix' && /^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) ||
+        (shell === 'powershell' && token === '&' && i === 0)
+      ) {
+        continue
+      }
+      commandPosition = false
+    }
+    if (token === '--') {
+      commandPosition = true
+    }
+  }
+  return -1
+}
+
+/** Joins the resolved base command with the agent's resume argv. Claude goes
+ * through the selector guard below; other agents keep plain appending. */
+export function buildAgentResumeLaunchCommand(
+  agent: ResumableTuiAgent,
+  baseCommand: string,
+  resumeArgv: readonly string[],
+  shell: AgentStartupShell
+): string {
+  const argv = resumeArgv.slice(1)
+  if (agent === 'claude') {
+    return buildClaudeResumeLaunchCommand(baseCommand, argv, shell)
+  }
+  const resumeArgs = argv.map((arg) => quoteStartupArg(arg, shell)).join(' ')
+  return resumeArgs ? `${baseCommand} ${resumeArgs}` : baseCommand
+}
+
+/** Builds the Claude cold-restore launch command: strips any resume/continue
+ * selector the user's persisted command carries and appends exactly one
+ * authoritative selector, so a stale or bare selector can never compete with
+ * the provider session id (#12982).
+ *
+ * Fails open by design: when the base command cannot be tokenized, or no
+ * claude executable token can be located (wrapper commands like
+ * `bash -c claude`), the base is left byte-for-byte untouched and the
+ * selector is appended, which is the pre-guard behavior. Bytes outside
+ * removed selector tokens are always preserved verbatim — the base is
+ * spliced by source span, never re-quoted. */
+export function buildClaudeResumeLaunchCommand(
+  baseCommand: string,
+  resumeArgs: readonly string[],
+  shell: AgentStartupShell
+): string {
+  const quotedResume = resumeArgs.map((arg) => quoteStartupArg(arg, shell)).join(' ')
+  if (!quotedResume) {
+    return baseCommand
+  }
+  const appended = `${baseCommand} ${quotedResume}`
+  const tokenized = tokenizeStartupCommand(baseCommand, shell)
+  if (!tokenized.ok) {
+    return appended
+  }
+  const { tokens, spans } = tokenized
+  const claudeIndex = findClaudeExecutableIndex(tokens, shell)
+  if (claudeIndex === -1) {
+    return appended
+  }
+  // Why: any token the tokenizer cannot model for this shell — an operator,
+  // comment, expansion, or cmd single-quoted region — means the splice could
+  // cut live syntax or misread a literal as a selector. The whole base must
+  // be modelable, including the executable itself; only PowerShell's leading
+  // call operator is a known-safe divergent token.
+  for (let i = 0; i <= tokens.length; i += 1) {
+    const gapStart = i === 0 ? 0 : spans[i - 1].end
+    const gapEnd = i === tokens.length ? baseCommand.length : spans[i].start
+    if (!/^[ \t]*$/.test(baseCommand.slice(gapStart, gapEnd))) {
+      return appended
+    }
+    if (i === tokens.length) {
+      break
+    }
+    // Why: a bare `--%` makes PowerShell pass the rest of the line to the
+    // child literally, so appended quoting would arrive as literal bytes. A
+    // quoted `--%` can also stop parsing, but only before a parameter token,
+    // where the base is already mangled with or without the guard.
+    if (shell === 'powershell' && baseCommand.slice(spans[i].start, spans[i].end) === '--%') {
+      return appended
+    }
+    if (spans[i].divergesFromShell) {
+      const isCallOperator = shell === 'powershell' && i === 0 && tokens[i] === '&'
+      if (!isCallOperator) {
+        return appended
+      }
+    }
+  }
+  const cuts: { start: number; end: number }[] = []
+  let terminatorStart: number | null = null
+  for (let i = claudeIndex + 1; i < tokens.length; i += 1) {
+    const token = tokens[i]
+    if (token === '--') {
+      // Why: claude is the executable here, so `--` is claude's own
+      // terminator; the selector must stay in option position before it.
+      // Span-splice equivalent of insertBeforeTerminator in
+      // tui-agent-launch-command.ts, which re-quotes and cannot be reused.
+      terminatorStart = spans[i].start
+      break
+    }
+    if (!isClaudeResumeSelector(token)) {
+      continue
+    }
+    // Why: absorb the separator before the selector, but never cross into the
+    // previous token, whose span can end with an escaped-space byte.
+    let start = spans[i].start
+    while (start > spans[i - 1].end && ' \t'.includes(baseCommand[start - 1])) {
+      start -= 1
+    }
+    let end = spans[i].end
+    const next = tokens[i + 1]
+    if ((token === '--resume' || token === '-r') && next !== undefined && !next.startsWith('-')) {
+      // A stale session locator rides along with its selector.
+      end = spans[i + 1].end
+      i += 1
+    }
+    cuts.push({ start, end })
+  }
+  let result = baseCommand
+  if (terminatorStart !== null) {
+    result = `${result.slice(0, terminatorStart)}${quotedResume} ${result.slice(terminatorStart)}`
+  }
+  for (let i = cuts.length - 1; i >= 0; i -= 1) {
+    result = `${result.slice(0, cuts[i].start)}${result.slice(cuts[i].end)}`
+  }
+  return terminatorStart !== null ? result : `${result} ${quotedResume}`
+}
diff --git a/src/shared/agent-status-types.ts b/src/shared/agent-status-types.ts
index 9f08791eec3..80ce1a4f823 100644
--- a/src/shared/agent-status-types.ts
+++ b/src/shared/agent-status-types.ts
@@ -44,7 +44,9 @@ export type AgentType = WellKnownAgentType | (string & {})
 
 /** A snapshot of a previous agent state, used to render activity blocks.
  *  Why: intentionally narrower than AgentStatusEntry — tool/assistant context is
- *  per-turn, not meaningful on a historical snapshot, and would bloat memory. */
+ *  per-turn, not meaningful on a historical snapshot, and would bloat memory.
+ *  Coalesced-turn output lives in AgentStatusEntry.lastCompletedAssistantMessage,
+ *  one copy per pane, so it can't multiply by AGENT_STATE_HISTORY_MAX. */
 export type AgentStateHistoryEntry = {
   state: AgentStatusState
   prompt: string
@@ -124,6 +126,10 @@ export type AgentStatusEntry = {
   interactivePrompt?: string
   /** Most recent assistant message preview, when the hook carried one. */
   lastAssistantMessage?: string
+  /** Output of the newest completed (non-boundary) turn, kept across the next `working`.
+   *  Why: batched publications can fold a whole done→working turn into one notification,
+   *  so `lastAssistantMessage` is already cleared by the time a subscriber observes it. */
+  lastCompletedAssistantMessage?: string
   /** True when this `done` was reached via interrupt, not normal completion
    *  (agent-reported or Orca's guarded fallback). Undefined otherwise. */
   interrupted?: boolean
@@ -226,7 +232,7 @@ export type AgentStatusIpcPayload = ParsedAgentStatusPayload & {
   tabId?: string
   worktreeId?: string
   /** Identifies the SSH connection the event arrived on, or null for local.
-   *  Only the remote-ingest path (`ingestRemote`) can stamp it; the HTTP path always sets null. See docs/design/agent-status-over-ssh.md §5. */
+   *  Only the remote-ingest path (`ingestRemote`) can stamp it from mux identity; the HTTP path has no mux and always sets null. */
   connectionId: string | null
   /** Timestamp (ms) when the hook server received this latest status event. */
   receivedAt: number
diff --git a/src/shared/agent-title-core.ts b/src/shared/agent-title-core.ts
index 83dcc12bf92..c96121b432c 100644
--- a/src/shared/agent-title-core.ts
+++ b/src/shared/agent-title-core.ts
@@ -47,6 +47,11 @@ export const CURSOR_NATIVE_TITLE_LOWER = 'cursor agent'
 // eslint-disable-next-line no-control-regex -- intentional unicode range
 export const BRAILLE_SPINNER_RE = /[\u2800-\u28ff]/g
 
+// Why: Claude Code 2.1.228 swapped its busy title spinner from braille to
+// quarter circles (#13889), which read as "no agent" and looked like an exit.
+// Reserve the whole quarter-circle block so a later frame addition cannot regress this.
+export const QUARTER_CIRCLE_SPINNER_RE = /[\u25d0-\u25d3]/g
+
 export function isGeminiTerminalTitle(title: string): boolean {
   // Why: Gemini OSC glyphs are stronger evidence than any cwd/session text.
   if (
@@ -83,6 +88,25 @@ export function containsBrailleSpinner(title: string): boolean {
   return false
 }
 
+export function containsQuarterCircleSpinner(title: string): boolean {
+  for (const char of title) {
+    const codePoint = char.codePointAt(0)
+    if (codePoint !== undefined && codePoint >= 0x25d0 && codePoint <= 0x25d3) {
+      return true
+    }
+  }
+  return false
+}
+
+/**
+ * Any spinner frame glyph an agent animates its OSC title with. Use this for
+ * generic "something is running" checks; agent-specific frame shapes (Grok,
+ * Pi, synthetic Cursor) stay pinned to their own glyph set.
+ */
+export function containsAgentSpinnerGlyph(title: string): boolean {
+  return containsBrailleSpinner(title) || containsQuarterCircleSpinner(title)
+}
+
 export function containsLegacyAgentName(title: string): boolean {
   return titleHasAnyLegacyAgentName(title)
 }
diff --git a/src/shared/agent-title-decoration.ts b/src/shared/agent-title-decoration.ts
index bc05badf8aa..47a6db679e7 100644
--- a/src/shared/agent-title-decoration.ts
+++ b/src/shared/agent-title-decoration.ts
@@ -1,11 +1,11 @@
 // Leading status decorations that coding agents prepend to their OSC title —
-// Claude's '✳', Gemini's glyphs (✦ ⏲ ◇ ✋), braille spinners, and Claude's
-// '. '/'* ' working/idle prefixes. Once the tab bar shows the provider icon,
-// this leading glyph reads as a redundant second icon, so strip it from the
-// displayed title. Scoped to titles we already know belong to an agent.
+// Claude's '✳', Gemini's glyphs (✦ ⏲ ◇ ✋), braille and quarter-circle spinners,
+// and Claude's '. '/'* ' working/idle prefixes. Once the tab bar shows the
+// provider icon, this leading glyph reads as a redundant second icon, so strip
+// it from the displayed title. Scoped to titles we already know belong to an agent.
 const LEADING_AGENT_TITLE_DECORATION_RE =
   // eslint-disable-next-line no-control-regex -- intentional unicode status-glyph ranges
-  /^(?:[✳✦⏲◇✋⠀-⣿]+|[.*]\s)\s*/
+  /^(?:[✳✦⏲◇✋⠀-⣿◐-◓]+|[.*]\s)\s*/
 
 export function stripLeadingAgentTitleDecorationOrEmpty(title: string): string {
   return title.replace(LEADING_AGENT_TITLE_DECORATION_RE, '').trimStart()
diff --git a/src/shared/agent-title-identity.ts b/src/shared/agent-title-identity.ts
index af86de1667d..cdfc6946777 100644
--- a/src/shared/agent-title-identity.ts
+++ b/src/shared/agent-title-identity.ts
@@ -3,7 +3,7 @@ import {
   CLAUDE_IDLE,
   DROID_AGENT_NAME_RE,
   HERMES_AGENT_NAME_RE,
-  containsBrailleSpinner,
+  containsAgentSpinnerGlyph,
   isClaudeManagementTitle,
   isCursorAgentTitle,
   isGeminiTerminalTitle,
@@ -31,7 +31,7 @@ export function isClaudeAgent(title: string): boolean {
   if (title.startsWith('. ') || title.startsWith('* ')) {
     return true
   }
-  if (containsBrailleSpinner(title)) {
+  if (containsAgentSpinnerGlyph(title)) {
     // Why: named non-Claude agents carry braille spinners too. Gate Cursor by its
     // identity title, not the token, so a Claude title mentioning a cursor stays Claude.
     return !isCursorAgentTitle(title) && !lower.includes('openclaude')
diff --git a/src/shared/agent-title-status.ts b/src/shared/agent-title-status.ts
index 09ffc07a677..5c13bb56e95 100644
--- a/src/shared/agent-title-status.ts
+++ b/src/shared/agent-title-status.ts
@@ -9,12 +9,14 @@ import {
   GEMINI_SILENT_WORKING,
   GEMINI_WORKING,
   HERMES_AGENT_NAME_RE,
+  QUARTER_CIRCLE_SPINNER_RE,
   STRONG_IDLE_KEYWORDS_RE,
   STRONG_WORKING_KEYWORDS_RE,
   STRONG_WORKING_KEYWORDS_RE_GLOBAL,
   containsAgentName,
+  containsAgentSpinnerGlyph,
   containsAny,
-  containsBrailleSpinner,
+  containsQuarterCircleSpinner,
   containsLegacyAgentName,
   isClaudeManagementTitle,
   isGeminiTerminalTitle,
@@ -22,6 +24,7 @@ import {
   isPiTerminalTitle
 } from './agent-title-core'
 import type { AgentStatus } from './agent-title-core'
+import { isOpenCodeNativeTitle } from './opencode-terminal-title'
 import { getPiCompatibleSyntheticAgentStatus } from './pi-compatible-synthetic-title'
 import { isGrokRotatingWorkingTitle } from './terminal-title-agent-type'
 
@@ -34,6 +37,7 @@ export function clearWorkingIndicators(title: string): string {
   cleaned = cleaned.replace(GEMINI_WORKING, '')
   cleaned = cleaned.replace(GEMINI_SILENT_WORKING, '')
   cleaned = cleaned.replace(BRAILLE_SPINNER_RE, '')
+  cleaned = cleaned.replace(QUARTER_CIRCLE_SPINNER_RE, '')
   if (cleaned.startsWith('. ')) {
     cleaned = cleaned.slice(2)
   }
@@ -158,6 +162,10 @@ export function detectAgentStatusFromTitle(title: string): AgentStatus | null {
     return null
   }
 
+  if (isOpenCodeNativeTitle(title)) {
+    return containsAgentSpinnerGlyph(title) ? 'working' : 'idle'
+  }
+
   if (title.includes(GEMINI_PERMISSION)) {
     return 'permission'
   }
@@ -181,10 +189,9 @@ export function detectAgentStatusFromTitle(title: string): AgentStatus | null {
   if (isPiTerminalTitle(title)) {
     return 'idle'
   }
-  if (containsBrailleSpinner(title)) {
+  if (containsAgentSpinnerGlyph(title)) {
     return 'working'
   }
-
   const hasDroidAgentName = DROID_AGENT_NAME_RE.test(title)
   const hasHermesAgentName = HERMES_AGENT_NAME_RE.test(title)
   const hasAgyAgentName = AGY_AGENT_NAME_RE.test(title)
@@ -217,3 +224,15 @@ export function detectAgentStatusFromTitle(title: string): AgentStatus | null {
 
   return 'idle'
 }
+
+/**
+ * True when a quarter-circle spinner frame is the only agent evidence a title carries.
+ * Any TUI animates those glyphs, so they prove activity, not identity — callers that
+ * authorize writes into the pane need independent evidence (STA-4028, regression #13925).
+ */
+export function isQuarterCircleSpinnerOnlyAgentTitle(title: string | null | undefined): boolean {
+  if (!title || !containsQuarterCircleSpinner(title)) {
+    return false
+  }
+  return detectAgentStatusFromTitle(title.replace(QUARTER_CIRCLE_SPINNER_RE, '').trim()) === null
+}
diff --git a/src/shared/ai-vault-resume-command.ts b/src/shared/ai-vault-resume-command.ts
index 17dd6ba7c66..13c33b8145e 100644
--- a/src/shared/ai-vault-resume-command.ts
+++ b/src/shared/ai-vault-resume-command.ts
@@ -4,6 +4,7 @@
 import { TUI_AGENT_CONFIG } from './tui-agent-config'
 import {
   commandSeparator,
+  isPosixStartupShell,
   quoteStartupArg,
   type AgentStartupShell
 } from './tui-agent-startup-shell'
@@ -98,7 +99,7 @@ function buildResumeShellCommandForShell(args: {
   shell: Exclude<AgentStartupShell, 'cmd'>
 }): string {
   const { cwd, codexHome, shell } = args
-  if (shell === 'posix') {
+  if (isPosixStartupShell(shell)) {
     // Why: git-bash on a Windows host runs a POSIX shell, so reuse the same
     // inline-env + `cd '<cwd>'` prefix as the non-Windows path.
     const envPrefix = codexHome ? `CODEX_HOME=${quoteStartupArg(codexHome, shell)} ` : ''
diff --git a/src/shared/automation-schedules.ts b/src/shared/automation-schedules.ts
index e41ba3ac028..d8a93499287 100644
--- a/src/shared/automation-schedules.ts
+++ b/src/shared/automation-schedules.ts
@@ -301,7 +301,7 @@ export function parseAutomationRrule(rrule: string): {
   }
   const dayCode = rule.byDay[0]
   const dayOfWeek = DAY_CODES.indexOf(dayCode as (typeof DAY_CODES)[number])
-  if (dayOfWeek < 0) {
+  if (dayOfWeek === -1) {
     throw new Error('Invalid recurrence day.')
   }
   return {
diff --git a/src/shared/browser-page-zoom.ts b/src/shared/browser-page-zoom.ts
index 28997ebab4a..83a23d90752 100644
--- a/src/shared/browser-page-zoom.ts
+++ b/src/shared/browser-page-zoom.ts
@@ -23,7 +23,7 @@ export function normalizeBrowserPageZoomLevel(value: unknown): number {
 export function browserPageZoomLevelToPercent(level: number): number {
   // Why: Electron zoom levels are exponential; show the same percentage users
   // expect from Chromium browser zoom controls.
-  return Math.round(100 * Math.pow(1.2, normalizeBrowserPageZoomLevel(level)))
+  return Math.round(100 * 1.2 ** normalizeBrowserPageZoomLevel(level))
 }
 
 export function nextBrowserPageZoomLevel(
diff --git a/src/shared/browser-url.test.ts b/src/shared/browser-url.test.ts
index 4a246355fea..27437766867 100644
--- a/src/shared/browser-url.test.ts
+++ b/src/shared/browser-url.test.ts
@@ -222,6 +222,21 @@ describe('browser-url helpers', () => {
     expect(buildSearchUrl('hello world', 'kagi')).toBe('https://kagi.com/search?q=hello%20world')
   })
 
+  it('encodes Unicode, reserved characters, and emoji for every search engine', () => {
+    const query = 'snow 雪 &?# 😀'
+    const encoded = 'snow%20%E9%9B%AA%20%26%3F%23%20%F0%9F%98%80'
+    for (const engine of ['google', 'duckduckgo', 'bing', 'kagi'] as const) {
+      expect(buildSearchUrl(query, engine)).toContain(encoded)
+    }
+  })
+
+  it('replaces unmatched surrogates without changing valid pairs', () => {
+    expect(buildSearchUrl('\ud800a\udc00😀', 'google')).toBe(
+      'https://www.google.com/search?q=%EF%BF%BDa%EF%BF%BD%F0%9F%98%80'
+    )
+    expect(buildSearchUrl('\ud800', 'google')).toBe('https://www.google.com/search?q=%EF%BF%BD')
+  })
+
   it('uses a Kagi private session link when configured', () => {
     const sessionLink = 'https://kagi.com/search?token=secret&q=%s#ignored'
     expect(normalizeKagiSessionLink(sessionLink)).toBe('https://kagi.com/search?token=secret')
diff --git a/src/shared/browser-url.ts b/src/shared/browser-url.ts
index 7eb2ca6ebe1..f0583a8b1ab 100644
--- a/src/shared/browser-url.ts
+++ b/src/shared/browser-url.ts
@@ -223,7 +223,7 @@ export function buildSearchUrl(
       return sessionSearchUrl
     }
   }
-  return `${SEARCH_ENGINE_URLS[engine]}${encodeURIComponent(query)}`
+  return `${SEARCH_ENGINE_URLS[engine]}${encodeURIComponent(query.toWellFormed())}`
 }
 
 export function looksLikeSearchQuery(input: string): boolean {
diff --git a/src/shared/commit-message-prompt.test.ts b/src/shared/commit-message-prompt.test.ts
index 407b604f76d..ba2a975190f 100644
--- a/src/shared/commit-message-prompt.test.ts
+++ b/src/shared/commit-message-prompt.test.ts
@@ -250,27 +250,67 @@ describe('excerptAgentFailureOutput', () => {
 describe('tokenizeCustomCommandTemplate', () => {
   it('splits on whitespace', () => {
     const r = tokenizeCustomCommandTemplate('claude -p')
-    expect(r).toEqual({ ok: true, tokens: ['claude', '-p'] })
+    expect(r).toEqual({ ok: true, tokens: ['claude', '-p'], spans: expect.any(Array) })
   })
 
   it('groups double-quoted segments with spaces', () => {
     const r = tokenizeCustomCommandTemplate('claude --msg "hello world"')
-    expect(r).toEqual({ ok: true, tokens: ['claude', '--msg', 'hello world'] })
+    expect(r).toEqual({
+      ok: true,
+      tokens: ['claude', '--msg', 'hello world'],
+      spans: expect.any(Array)
+    })
   })
 
   it('groups single-quoted segments verbatim', () => {
     const r = tokenizeCustomCommandTemplate(`agent --json '{"k":"v"}'`)
-    expect(r).toEqual({ ok: true, tokens: ['agent', '--json', '{"k":"v"}'] })
+    expect(r).toEqual({
+      ok: true,
+      tokens: ['agent', '--json', '{"k":"v"}'],
+      spans: expect.any(Array)
+    })
   })
 
   it('honors backslash escapes inside double quotes', () => {
     const r = tokenizeCustomCommandTemplate('claude --msg "she said \\"hi\\""')
-    expect(r).toEqual({ ok: true, tokens: ['claude', '--msg', 'she said "hi"'] })
+    expect(r).toEqual({
+      ok: true,
+      tokens: ['claude', '--msg', 'she said "hi"'],
+      spans: expect.any(Array)
+    })
   })
 
   it('keeps adjacent quoted/unquoted regions in one token (a"b"c → abc)', () => {
     const r = tokenizeCustomCommandTemplate('foo a"b"c')
-    expect(r).toEqual({ ok: true, tokens: ['foo', 'abc'] })
+    expect(r).toEqual({ ok: true, tokens: ['foo', 'abc'], spans: expect.any(Array) })
+  })
+
+  it('always reports one span per token', () => {
+    for (const source of ['claude -p', 'claude --msg "hello world"', 'foo a"b"c', '   \t  ']) {
+      const r = tokenizeCustomCommandTemplate(source)
+      expect(r.ok && r.spans.length).toBe(r.ok && r.tokens.length)
+    }
+  })
+
+  it('reports source spans covering each raw token including quotes', () => {
+    const source = 'claude --msg "hello world"'
+    const r = tokenizeCustomCommandTemplate(source)
+    expect(r).toEqual({
+      ok: true,
+      tokens: ['claude', '--msg', 'hello world'],
+      spans: [
+        { start: 0, end: 6, divergesFromShell: false },
+        { start: 7, end: 12, divergesFromShell: false },
+        { start: 13, end: 26, divergesFromShell: false }
+      ]
+    })
+    if (r.ok) {
+      expect(r.spans.map(({ start, end }) => source.slice(start, end))).toEqual([
+        'claude',
+        '--msg',
+        '"hello world"'
+      ])
+    }
   })
 
   it('returns an error for an unclosed quote', () => {
@@ -283,7 +323,7 @@ describe('tokenizeCustomCommandTemplate', () => {
 
   it('returns an empty token list for whitespace-only input', () => {
     const r = tokenizeCustomCommandTemplate('   \t  ')
-    expect(r).toEqual({ ok: true, tokens: [] })
+    expect(r).toEqual({ ok: true, tokens: [], spans: [] })
   })
 })
 
diff --git a/src/shared/commit-message-prompt.ts b/src/shared/commit-message-prompt.ts
index 4a034d2d53f..efd42f36e5a 100644
--- a/src/shared/commit-message-prompt.ts
+++ b/src/shared/commit-message-prompt.ts
@@ -9,7 +9,7 @@ Rules:
 - First line: imperative mood, <= 72 chars, no trailing period.
 - Optional body: blank line, then wrapped at 72 chars explaining WHY.
 - Output ONLY the commit message - no preamble, no code fences, no quotes.
-- Do not include "Co-authored-by" trailers - Orca appends them after generation when configured.
+- Do not include "Co-authored-by" or other git trailers.
 
 Staged diff:
 \`\`\`diff
@@ -131,8 +131,16 @@ export function truncateDiffForPrompt(
 
 export const CUSTOM_PROMPT_PLACEHOLDER = '{prompt}'
 
+/** Source range of a token: [start, end) offsets into the original string.
+ * `divergesFromShell` marks a token this tokenizer cannot model faithfully for
+ * the target shell: an unquoted operator (`;&|<>`), a word-leading `#`
+ * comment, an expansion opener whose body can span tokens (backtick, `$(`,
+ * `${`, quoted or not), or a cmd single-quoted region (cmd has no
+ * single-quote syntax). Not recoverable from the token value alone. */
+export type CommandTokenSpan = { start: number; end: number; divergesFromShell: boolean }
+
 export type TokenizeCustomCommandResult =
-  | { ok: true; tokens: string[] }
+  | { ok: true; tokens: string[]; spans: CommandTokenSpan[] }
   | { ok: false; error: string }
 
 // Why: deliberately POSIX-shell-style only for *grouping* (single + double
@@ -143,8 +151,11 @@ export type TokenizeCustomCommandResult =
 // surface we don't need.
 export function tokenizeCustomCommandTemplate(template: string): TokenizeCustomCommandResult {
   const tokens: string[] = []
+  const spans: CommandTokenSpan[] = []
   let current = ''
   let inToken = false
+  let tokenStart = 0
+  let divergesFromShell = false
   let quote: '"' | "'" | null = null
   let i = 0
 
@@ -152,10 +163,17 @@ export function tokenizeCustomCommandTemplate(template: string): TokenizeCustomC
     const ch = template[i]
     if (quote) {
       if (ch === '\\' && quote === '"' && i + 1 < template.length) {
+        // Why: inside double quotes the shell only consumes the backslash
+        // before these; elsewhere it stays a literal byte this tokenizer drops.
+        divergesFromShell ||= !'$`"\\'.includes(template[i + 1])
         current += template[i + 1]
         i += 2
         continue
       }
+      // Why: a `"` inside $(…) or `…` re-opens a nested quoting context in the
+      // real shell, so this tokenizer's word boundaries stop matching it.
+      divergesFromShell ||=
+        quote === '"' && (ch === '`' || (ch === '$' && '({'.includes(template[i + 1] ?? '\0')))
       if (ch === quote) {
         quote = null
         i++
@@ -171,13 +189,22 @@ export function tokenizeCustomCommandTemplate(template: string): TokenizeCustomC
 
     if (ch === '"' || ch === "'") {
       quote = ch
+      if (!inToken) {
+        tokenStart = i
+      }
       inToken = true
       i++
       continue
     }
 
     if (ch === '\\' && i + 1 < template.length) {
+      // Why: an unquoted line continuation joins words the shell splits, so a
+      // selector can hide inside the joined token and skip the gap check.
+      divergesFromShell ||= template[i + 1] === '\n'
       current += template[i + 1]
+      if (!inToken) {
+        tokenStart = i
+      }
       inToken = true
       i += 2
       continue
@@ -186,13 +213,25 @@ export function tokenizeCustomCommandTemplate(template: string): TokenizeCustomC
     if (/\s/.test(ch)) {
       if (inToken) {
         tokens.push(current)
+        spans.push({ start: tokenStart, end: i, divergesFromShell })
         current = ''
         inToken = false
+        divergesFromShell = false
       }
       i++
       continue
     }
 
+    if (!inToken) {
+      tokenStart = i
+    }
+    // Why: a trailing unpaired escape swallows whatever a consumer appends
+    // after the base, so the base is not safe to build on.
+    divergesFromShell ||= ch === '\\' && i + 1 >= template.length
+    divergesFromShell ||=
+      ';&|<>`'.includes(ch) ||
+      (ch === '#' && !inToken) ||
+      (ch === '$' && '({\'"'.includes(template[i + 1] ?? '\0'))
     current += ch
     inToken = true
     i++
@@ -203,8 +242,9 @@ export function tokenizeCustomCommandTemplate(template: string): TokenizeCustomC
   }
   if (inToken) {
     tokens.push(current)
+    spans.push({ start: tokenStart, end: template.length, divergesFromShell })
   }
-  return { ok: true, tokens }
+  return { ok: true, tokens, spans }
 }
 
 export type CustomCommandPlan =
diff --git a/src/shared/constants.ts b/src/shared/constants.ts
index 8da7cb5b9d1..a01a778d2dd 100644
--- a/src/shared/constants.ts
+++ b/src/shared/constants.ts
@@ -182,7 +182,6 @@ export function getDefaultSettings(homedir: string): GlobalSettings {
     autoRenameBranchFromWorkDefaultedOn: true,
     branchPrefix: 'git-username',
     branchPrefixCustom: '',
-    enableGitHubAttribution: false,
     theme: 'system',
     leftSidebarAppearanceMode: 'default',
     leftSidebarTintColor: DEFAULT_LEFT_SIDEBAR_TINT_COLOR,
diff --git a/src/shared/cross-platform-path.ts b/src/shared/cross-platform-path.ts
index becf29236bb..aad0981c3a1 100644
--- a/src/shared/cross-platform-path.ts
+++ b/src/shared/cross-platform-path.ts
@@ -57,18 +57,30 @@ export function normalizeRuntimePathForComparison(rawValue: string): string {
 }
 
 export function areLocalWindowsWslPathAliases(left: string, right: string): boolean {
-  const leftWslPath = parseWslUncPath(left)
-  const rightWslPath = parseWslUncPath(right)
-  if (!leftWslPath && !rightWslPath) {
-    return false
+  const leftIdentity = getLocalWindowsWslPathIdentity(left)
+  const rightIdentity = getLocalWindowsWslPathIdentity(right)
+  return (
+    (leftIdentity.isWslUnc || rightIdentity.isWslUnc) &&
+    leftIdentity.aliasComparisonPath === rightIdentity.aliasComparisonPath
+  )
+}
+
+export type LocalWindowsWslPathIdentity = {
+  normalizedPath: string
+  aliasComparisonPath: string
+  isWslUnc: boolean
+}
+
+export function getLocalWindowsWslPathIdentity(value: string): LocalWindowsWslPathIdentity {
+  const wslPath = parseWslUncPath(value)
+  const normalizedPath = normalizeRuntimePathForComparison(value)
+  return {
+    normalizedPath,
+    aliasComparisonPath: wslPath
+      ? normalizeRuntimePathForComparison(toWindowsWslPath(wslPath.linuxPath, wslPath.distro))
+      : normalizedPath,
+    isWslUnc: wslPath !== null
   }
-  const normalize = (value: string): string => {
-    const wslPath = parseWslUncPath(value)
-    return normalizeRuntimePathForComparison(
-      wslPath ? toWindowsWslPath(wslPath.linuxPath, wslPath.distro) : value
-    )
-  }
-  return normalize(left) === normalize(right)
 }
 
 export function isRuntimePathAbsolute(
diff --git a/src/shared/dashboard-snapshot.ts b/src/shared/dashboard-snapshot.ts
index 9367393118e..cd59983ae25 100644
--- a/src/shared/dashboard-snapshot.ts
+++ b/src/shared/dashboard-snapshot.ts
@@ -65,6 +65,8 @@ export type DashboardWorkspace = {
   parentWorktreeId?: string
   hostKind: DashboardCardHostKind
   executionHostId: ExecutionHostId
+  /** Friendly saved-host name for compact host tooltips. */
+  hostLabel?: string
   workspaceKind: DashboardCardWorkspaceKind
   workspaceStatusId?: string
   workspaceStatusLabel?: string
@@ -103,6 +105,8 @@ export type DashboardCard = {
   hostKind?: DashboardCardHostKind
   /** Exact owner used by in-window workspace actions when IDs collide across hosts. */
   executionHostId?: ExecutionHostId
+  /** Friendly saved-host name for compact host tooltips. */
+  hostLabel?: string
   /** Folder workspaces share the ring hierarchy without pretending to be git worktrees. */
   workspaceKind?: DashboardCardWorkspaceKind
   workspaceStatusId?: string
diff --git a/src/shared/diff-comment-schema.ts b/src/shared/diff-comment-schema.ts
new file mode 100644
index 00000000000..369dda682c6
--- /dev/null
+++ b/src/shared/diff-comment-schema.ts
@@ -0,0 +1,19 @@
+import { z } from 'zod'
+
+export const DiffCommentSchema = z.object({
+  id: z.string(),
+  worktreeId: z.string(),
+  filePath: z.string(),
+  source: z.enum(['diff', 'markdown']).optional(),
+  selectedText: z.string().optional(),
+  startLine: z.number().int().positive().optional(),
+  lineNumber: z.number().int().positive(),
+  body: z.string(),
+  createdAt: z.number().finite(),
+  updatedAt: z.number().finite().optional(),
+  sentAt: z.number().finite().optional(),
+  scope: z.enum(['unstaged', 'staged', 'branch']).optional(),
+  oldPath: z.string().optional(),
+  diffIdentity: z.string().optional(),
+  side: z.literal('modified')
+})
diff --git a/src/shared/external-worktree-inbox.test.ts b/src/shared/external-worktree-inbox.test.ts
index 34bfadd7f66..b9a72f62f8c 100644
--- a/src/shared/external-worktree-inbox.test.ts
+++ b/src/shared/external-worktree-inbox.test.ts
@@ -9,8 +9,10 @@ import type {
 } from './types'
 import {
   getHiddenExternalWorktrees,
+  getHiddenImportableExternalWorktrees,
   getNewExternalWorktreeInboxWorktrees,
   getVisibleExternalWorktrees,
+  getVisibleNonOrcaWorktrees,
   mergeExternalWorktreeInboxPaths,
   shouldOfferNewExternalWorktreeInbox
 } from './external-worktree-inbox'
@@ -74,7 +76,6 @@ function makeSettings(): GlobalSettings {
     localBaseRefSuggestionDismissed: false,
     branchPrefix: 'none',
     branchPrefixCustom: '',
-    enableGitHubAttribution: false,
     theme: 'system',
     appFontFamily: 'Geist',
     editorAutoSave: false,
@@ -172,6 +173,41 @@ describe('external worktree inbox', () => {
     })
 
     expect(getVisibleExternalWorktrees(detectedResult([visible, scratch]))).toEqual([visible])
+    expect(getVisibleNonOrcaWorktrees(detectedResult([visible, scratch]))).toEqual([
+      visible,
+      scratch
+    ])
+  })
+
+  it('lists hidden agent scratch among importable worktrees so recovery stays reachable', () => {
+    // Why: the visibility toggle can never reveal scratch (#9388), so if no list
+    // offers it for per-path import, a hidden scratch worktree is lost for good (#10324).
+    const hiddenScratch = detectedWorktree({
+      id: 'hidden-scratch',
+      path: '/repo/.claude/worktrees/scratch-1',
+      ownership: 'agent-scratch'
+    })
+    const hiddenExternal = detectedWorktree({ id: 'hidden-external' })
+    const detected = detectedResult([
+      hiddenScratch,
+      hiddenExternal,
+      detectedWorktree({ id: 'visible-scratch', ownership: 'agent-scratch', visible: true }),
+      detectedWorktree({ id: 'orca-managed', ownership: 'orca-managed' }),
+      detectedWorktree({ id: 'checked-out', selectedCheckout: true })
+    ])
+
+    expect(getHiddenImportableExternalWorktrees(detected)).toEqual([hiddenScratch, hiddenExternal])
+    // Why: scratch stays out of discovery counts even though the dialog controls it.
+    expect(getHiddenExternalWorktrees(detected)).toEqual([hiddenExternal])
+  })
+
+  it('offers no importable worktrees from a non-authoritative snapshot', () => {
+    const scratch = detectedWorktree({ id: 'scratch', ownership: 'agent-scratch' })
+
+    expect(
+      getHiddenImportableExternalWorktrees({ ...detectedResult([scratch]), authoritative: false })
+    ).toEqual([])
+    expect(getHiddenImportableExternalWorktrees(undefined)).toEqual([])
   })
 
   it('offers metadata-free nested Orca workspace worktrees through the inbox', () => {
diff --git a/src/shared/external-worktree-inbox.ts b/src/shared/external-worktree-inbox.ts
index 56aea01ff8b..c42a1249bd7 100644
--- a/src/shared/external-worktree-inbox.ts
+++ b/src/shared/external-worktree-inbox.ts
@@ -55,8 +55,7 @@ export function getVisibleExternalWorktrees(
 }
 
 function isUserFacingExternalWorktree(worktree: DetectedWorktree): boolean {
-  // Why: an explicit scratch import may be visible, but agent plumbing must
-  // stay outside repo-wide discovery and visibility controls (#9388).
+  // Why: agent plumbing stays outside the discovery inbox even when its separate visibility policy shows it.
   return (
     !worktree.selectedCheckout &&
     worktree.ownership !== 'orca-managed' &&
@@ -64,6 +63,34 @@ function isUserFacingExternalWorktree(worktree: DetectedWorktree): boolean {
   )
 }
 
+// Why: per-path recovery remains available while either repo visibility policy is off.
+function isImportableExternalWorktree(worktree: DetectedWorktree): boolean {
+  return !worktree.selectedCheckout && worktree.ownership !== 'orca-managed'
+}
+
+export function getHiddenImportableExternalWorktrees(
+  detected: DetectedWorktreeListResult | undefined
+): DetectedWorktree[] {
+  if (detected?.authoritative !== true) {
+    return []
+  }
+  return detected.worktrees.filter(
+    (worktree) => !worktree.visible && isImportableExternalWorktree(worktree)
+  )
+}
+
+export function getVisibleNonOrcaWorktrees(
+  detected: DetectedWorktreeListResult | undefined
+): DetectedWorktree[] {
+  if (detected?.authoritative !== true) {
+    return []
+  }
+  return detected.worktrees.filter(
+    (worktree) =>
+      worktree.visible && !worktree.selectedCheckout && worktree.ownership !== 'orca-managed'
+  )
+}
+
 export function isExternalWorktreeDiscoverySuppressed(
   repo: Pick<Repo, 'externalWorktreeDiscoverySuppressedAt'>
 ): boolean {
diff --git a/src/shared/external-worktree-visibility.ts b/src/shared/external-worktree-visibility.ts
index be5d24a524c..fc4af8c1681 100644
--- a/src/shared/external-worktree-visibility.ts
+++ b/src/shared/external-worktree-visibility.ts
@@ -30,7 +30,7 @@ export function getExternalWorktreeParentPath(worktreePath: string | undefined):
     return `//${parts.slice(0, -1).join('/')}`
   }
   const lastSeparatorIndex = normalized.lastIndexOf('/')
-  if (lastSeparatorIndex < 0) {
+  if (lastSeparatorIndex === -1) {
     return UNKNOWN_EXTERNAL_WORKTREE_PARENT_PATH
   }
   if (lastSeparatorIndex === 0) {
@@ -67,3 +67,10 @@ export function effectiveExternalWorktreeVisibility(
   }
   return isLegacyRepoForVisibility ? 'show' : 'hide'
 }
+
+export function effectiveAgentWorktreeVisibility(
+  repo: Pick<Repo, 'agentWorktreeVisibility'>
+): ExternalWorktreeVisibility {
+  // Why: scratch worktrees have always defaulted hidden, including for legacy repos.
+  return repo.agentWorktreeVisibility === 'show' ? 'show' : 'hide'
+}
diff --git a/src/shared/file-link-location.test.ts b/src/shared/file-link-location.test.ts
new file mode 100644
index 00000000000..3239b4f367c
--- /dev/null
+++ b/src/shared/file-link-location.test.ts
@@ -0,0 +1,31 @@
+import { describe, expect, it } from 'vitest'
+import { parseFileLinkLocation } from './file-link-location'
+
+describe('parseFileLinkLocation', () => {
+  it('parses agent-style line and column suffixes', () => {
+    expect(parseFileLinkLocation('src/main.ts:12:4')).toEqual({
+      pathText: 'src/main.ts',
+      line: 12,
+      column: 4
+    })
+    expect(parseFileLinkLocation('src/main.ts')).toEqual({
+      pathText: 'src/main.ts',
+      line: null,
+      column: null
+    })
+  })
+
+  it('preserves Windows drive colons', () => {
+    expect(parseFileLinkLocation(String.raw`C:\repo\src\main.ts:12`)).toEqual({
+      pathText: String.raw`C:\repo\src\main.ts`,
+      line: 12,
+      column: null
+    })
+  })
+
+  it('rejects empty paths and zero locations', () => {
+    expect(parseFileLinkLocation('')).toBeNull()
+    expect(parseFileLinkLocation('src/main.ts:0')).toBeNull()
+    expect(parseFileLinkLocation('src/main.ts:12:0')).toBeNull()
+  })
+})
diff --git a/src/shared/file-link-location.ts b/src/shared/file-link-location.ts
new file mode 100644
index 00000000000..1450f130338
--- /dev/null
+++ b/src/shared/file-link-location.ts
@@ -0,0 +1,19 @@
+export type ParsedFileLinkLocation = {
+  pathText: string
+  line: number | null
+  column: number | null
+}
+
+export function parseFileLinkLocation(value: string): ParsedFileLinkLocation | null {
+  const match = /^(.*?)(?::(\d+))?(?::(\d+))?$/.exec(value)
+  const pathText = match?.[1]
+  if (!pathText) {
+    return null
+  }
+  const line = match[2] ? Number.parseInt(match[2], 10) : null
+  const column = match[3] ? Number.parseInt(match[3], 10) : null
+  if ((line !== null && line < 1) || (column !== null && column < 1)) {
+    return null
+  }
+  return { pathText, line, column }
+}
diff --git a/src/shared/fish-binary-requirement.test.ts b/src/shared/fish-binary-requirement.test.ts
new file mode 100644
index 00000000000..e4d57bbf9e4
--- /dev/null
+++ b/src/shared/fish-binary-requirement.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it } from 'vitest'
+import {
+  fishRequirementViolation,
+  REQUIRE_FISH_ENV_VAR,
+  resolveFishBinary,
+  type FishBinaryLookup
+} from './fish-binary-requirement'
+
+const FOUND: FishBinaryLookup = { available: true, path: '/usr/bin/fish', majorVersion: 4 }
+const MISSING: FishBinaryLookup = {
+  available: false,
+  path: null,
+  majorVersion: 0,
+  reason: 'no fish binary on PATH'
+}
+
+describe('fishRequirementViolation', () => {
+  it('lets a missing fish skip when the requirement is not set', () => {
+    expect(fishRequirementViolation(MISSING, {})).toBeNull()
+    expect(fishRequirementViolation(MISSING, { [REQUIRE_FISH_ENV_VAR]: '0' })).toBeNull()
+  })
+
+  // The #9993 guard is CI's only end-to-end coverage; a skip there is a silent gap.
+  it('reports a violation naming the reason when CI requires fish and it is absent', () => {
+    const violation = fishRequirementViolation(MISSING, { [REQUIRE_FISH_ENV_VAR]: '1' })
+    expect(violation).toContain(REQUIRE_FISH_ENV_VAR)
+    expect(violation).toContain('no fish binary on PATH')
+  })
+
+  it('reports no violation when fish is present, requirement set or not', () => {
+    expect(fishRequirementViolation(FOUND, { [REQUIRE_FISH_ENV_VAR]: '1' })).toBeNull()
+    expect(fishRequirementViolation(FOUND, {})).toBeNull()
+  })
+})
+
+describe('resolveFishBinary', () => {
+  it('treats an installed fish below the floor as unavailable, with the version in the reason', () => {
+    const lookup = resolveFishBinary(Number.MAX_SAFE_INTEGER)
+    if (lookup.available) {
+      throw new Error('no fish can satisfy an unreachable version floor')
+    }
+    // Only when a fish is actually installed does the reason describe a version.
+    if (lookup.majorVersion > 0) {
+      expect(lookup.reason).toContain(`fish ${Number.MAX_SAFE_INTEGER}+ required`)
+    }
+  })
+
+  it('never reports a path on Windows', () => {
+    if (process.platform !== 'win32') {
+      return
+    }
+    expect(resolveFishBinary().path).toBeNull()
+  })
+})
diff --git a/src/shared/fish-binary-requirement.ts b/src/shared/fish-binary-requirement.ts
new file mode 100644
index 00000000000..9045433956d
--- /dev/null
+++ b/src/shared/fish-binary-requirement.ts
@@ -0,0 +1,65 @@
+import { spawnSync } from 'node:child_process'
+
+/**
+ * Locates the fish binary live shell tests run against, and decides how strict
+ * they are about finding one.
+ *
+ * Why the strictness is configurable: on a developer machine without fish these
+ * suites must skip, but the `shell contracts` CI job is a required check whose
+ * fish lane is the only end-to-end guard for #9993. There, a skip would report
+ * green with nothing exercised, so ORCA_REQUIRE_FISH=1 turns it into a failure.
+ */
+const FISH_CANDIDATES = ['fish', '/opt/homebrew/bin/fish', '/usr/local/bin/fish'] as const
+
+/** Env var CI sets to make a missing or too-old fish fail instead of skip. */
+export const REQUIRE_FISH_ENV_VAR = 'ORCA_REQUIRE_FISH'
+
+export type FishBinaryLookup =
+  | { available: true; path: string; majorVersion: number }
+  | { available: false; path: null; majorVersion: number; reason: string }
+
+export function resolveFishBinary(minMajorVersion = 1): FishBinaryLookup {
+  if (process.platform === 'win32') {
+    return {
+      available: false,
+      path: null,
+      majorVersion: 0,
+      reason: 'fish is not supported on Windows'
+    }
+  }
+
+  for (const path of FISH_CANDIDATES) {
+    const probe = spawnSync(path, ['--version'], { encoding: 'utf8' })
+    if (probe.status !== 0) {
+      continue
+    }
+    const majorVersion = Number(/version (\d+)/.exec(probe.stdout ?? '')?.[1] ?? '0')
+    if (majorVersion < minMajorVersion) {
+      return {
+        available: false,
+        path: null,
+        majorVersion,
+        reason: `fish ${minMajorVersion}+ required, found ${probe.stdout?.trim() || 'an unknown version'} at ${path}`
+      }
+    }
+    return { available: true, path, majorVersion }
+  }
+
+  return { available: false, path: null, majorVersion: 0, reason: 'no fish binary on PATH' }
+}
+
+/**
+ * The message to fail with when CI demanded fish and did not get it, else null.
+ *
+ * Assert this in a test that always runs, so the requirement cannot vanish with
+ * the suite it guards.
+ */
+export function fishRequirementViolation(
+  lookup: FishBinaryLookup,
+  env: NodeJS.ProcessEnv = process.env
+): string | null {
+  if (lookup.available || env[REQUIRE_FISH_ENV_VAR] !== '1') {
+    return null
+  }
+  return `${REQUIRE_FISH_ENV_VAR}=1 but the live fish tests would skip: ${lookup.reason}`
+}
diff --git a/src/shared/folder-workspace-worktree.ts b/src/shared/folder-workspace-worktree.ts
index 61000b2e53f..3bc62acb41f 100644
--- a/src/shared/folder-workspace-worktree.ts
+++ b/src/shared/folder-workspace-worktree.ts
@@ -40,6 +40,7 @@ export function folderWorkspaceToWorktree(folderWorkspace: FolderWorkspace): Wor
     pendingFirstAgentMessageRename: folderWorkspace.pendingFirstAgentMessageRename,
     firstAgentMessageRenameError: folderWorkspace.firstAgentMessageRenameError,
     workspaceStatus: folderWorkspace.workspaceStatus,
+    diffComments: folderWorkspace.diffComments,
     path: folderWorkspace.folderPath,
     head: '',
     branch: '',
diff --git a/src/shared/folder-workspaces.ts b/src/shared/folder-workspaces.ts
index 89f12d4477b..e5badf0d8d6 100644
--- a/src/shared/folder-workspaces.ts
+++ b/src/shared/folder-workspaces.ts
@@ -103,7 +103,10 @@ export function normalizeFolderWorkspaces(
       createdAt:
         typeof raw.createdAt === 'number' && Number.isFinite(raw.createdAt) ? raw.createdAt : now,
       updatedAt:
-        typeof raw.updatedAt === 'number' && Number.isFinite(raw.updatedAt) ? raw.updatedAt : now
+        typeof raw.updatedAt === 'number' && Number.isFinite(raw.updatedAt) ? raw.updatedAt : now,
+      // Legacy read: unreleased #14112 builds wrote notes inline. Canonical home is
+      // PersistedState.folderWorkspaceDiffComments.
+      ...(Array.isArray(raw.diffComments) ? { diffComments: raw.diffComments } : {})
     })
   }
   return workspaces.sort(
diff --git a/src/shared/gitlab-types.ts b/src/shared/gitlab-types.ts
index 703085fb8a2..c9f2a0fffba 100644
--- a/src/shared/gitlab-types.ts
+++ b/src/shared/gitlab-types.ts
@@ -215,7 +215,7 @@ export type GitLabTodo = {
   id: number
   /** Free-form GitLab action name, e.g. 'assigned', 'mentioned', 'build_failed', 'review_requested'. */
   actionName: string
-  targetType: GitLabTodoTargetType | string
+  targetType: GitLabTodoTargetType | (string & {})
   /** iid for MR/Issue targets; absent for Commit/Note targets where the identifier is a SHA or note ID. */
   targetIid: number | null
   targetTitle: string
diff --git a/src/shared/hermes-startup-query.ts b/src/shared/hermes-startup-query.ts
index 60e2705073f..a120305e1ee 100644
--- a/src/shared/hermes-startup-query.ts
+++ b/src/shared/hermes-startup-query.ts
@@ -1,6 +1,7 @@
 import { encodePowerShellCommand } from './powershell-command-encoding'
 import {
   buildShellCommandFromArgv,
+  isPosixStartupShell,
   quoteStartupArg,
   tokenizeStartupCommand,
   type AgentStartupShell
@@ -114,7 +115,7 @@ function normalizeHermesArgv(
     assignmentCount += 1
   }
   if (assignmentCount > 0) {
-    if (shell !== 'posix') {
+    if (!isPosixStartupShell(shell)) {
       return null
     }
     commandPrefix = ['env', ...commandPrefix]
@@ -139,7 +140,7 @@ function normalizeHermesArgv(
 }
 
 function buildQueryCommand(argv: string[], shell: AgentStartupShell): string {
-  if (shell !== 'posix') {
+  if (!isPosixStartupShell(shell)) {
     const invocation = buildShellCommandFromArgv(argv, 'powershell').replace(
       quoteStartupArg(QUERY_ARG_PLACEHOLDER, 'powershell'),
       `"--query=$${POWERSHELL_NATIVE_QUERY_VARIABLE}"`
diff --git a/src/shared/jira-types.ts b/src/shared/jira-types.ts
index ad8e84ecbad..6adaa966ead 100644
--- a/src/shared/jira-types.ts
+++ b/src/shared/jira-types.ts
@@ -19,7 +19,7 @@ export type JiraViewer = {
   avatarUrl?: string
 }
 
-export type JiraSiteSelection = string | 'all'
+export type JiraSiteSelection = (string & {}) | 'all'
 
 export type JiraConnectionStatus = {
   connected: boolean
diff --git a/src/shared/legacy-terminal-attribution-env.test.ts b/src/shared/legacy-terminal-attribution-env.test.ts
new file mode 100644
index 00000000000..1bb84cc5f96
--- /dev/null
+++ b/src/shared/legacy-terminal-attribution-env.test.ts
@@ -0,0 +1,99 @@
+import { describe, expect, it } from 'vitest'
+import {
+  addLegacyTerminalAttributionDisableRequest,
+  hostSupportsSessionTabTerminalCreateAttributionDisable,
+  hostSupportsTerminalCreateAttributionDisable,
+  hostSupportsTerminalSplitAttributionDisable,
+  LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY,
+  LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY,
+  withLegacyTerminalAttributionDisabledEnv
+} from './legacy-terminal-attribution-env'
+
+describe('legacy terminal attribution environment', () => {
+  it('adds the inert old-host gate once', () => {
+    expect(addLegacyTerminalAttributionDisableRequest(['CODEX_HOME'])).toEqual([
+      'CODEX_HOME',
+      LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY
+    ])
+    expect(
+      addLegacyTerminalAttributionDisableRequest([LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY])
+    ).toEqual([LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY])
+  })
+
+  it('fails instead of dropping a caller deletion at the wire limit', () => {
+    const full = Array.from({ length: 32 }, (_, index) => `KEY_${index}`)
+    expect(() => addLegacyTerminalAttributionDisableRequest(full)).toThrow(
+      'Terminal environment deletion limit'
+    )
+  })
+
+  it('adds the wrapper bypass without mutating caller env', () => {
+    const env = { CODEX_HOME: '/tmp/codex' }
+    expect(withLegacyTerminalAttributionDisabledEnv(env)).toEqual({
+      CODEX_HOME: '/tmp/codex',
+      [LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY]: '1'
+    })
+    expect(env).toEqual({ CODEX_HOME: '/tmp/codex' })
+  })
+
+  it('accepts only split hosts that removed attribution for every pane owner', () => {
+    expect(hostSupportsTerminalSplitAttributionDisable({ appVersion: '1.4.18' })).toBe(false)
+    expect(hostSupportsTerminalSplitAttributionDisable({ appVersion: '1.4.19' })).toBe(false)
+    expect(hostSupportsTerminalSplitAttributionDisable({ appVersion: 'v1.4.181' })).toBe(false)
+    expect(hostSupportsTerminalSplitAttributionDisable({ capabilities: ['mobile.tasks.v1'] })).toBe(
+      false
+    )
+    expect(
+      hostSupportsTerminalSplitAttributionDisable({
+        capabilities: ['terminal.attribution-removed.v1']
+      })
+    ).toBe(true)
+  })
+
+  it('accepts only capability-proven terminal creation hosts', () => {
+    expect(hostSupportsSessionTabTerminalCreateAttributionDisable({ appVersion: '1.4.89' })).toBe(
+      false
+    )
+    expect(hostSupportsSessionTabTerminalCreateAttributionDisable({ appVersion: '1.4.90' })).toBe(
+      false
+    )
+    expect(
+      hostSupportsSessionTabTerminalCreateAttributionDisable({ appVersion: 'not-semver' })
+    ).toBe(false)
+    expect(
+      hostSupportsSessionTabTerminalCreateAttributionDisable({
+        capabilities: ['workspace-run-context.v1']
+      })
+    ).toBe(false)
+    expect(
+      hostSupportsSessionTabTerminalCreateAttributionDisable({
+        capabilities: ['terminal.quick-commands.v1']
+      })
+    ).toBe(false)
+  })
+
+  it('accepts capability-proven current hosts regardless of development version', () => {
+    const status = {
+      appVersion: '0.0.0-dev',
+      capabilities: ['terminal.attribution-removed.v1']
+    }
+    expect(hostSupportsTerminalSplitAttributionDisable(status)).toBe(true)
+    expect(hostSupportsTerminalCreateAttributionDisable(status)).toBe(true)
+    expect(hostSupportsSessionTabTerminalCreateAttributionDisable(status)).toBe(true)
+  })
+
+  it('fails closed for malformed host status fields', () => {
+    expect(
+      hostSupportsSessionTabTerminalCreateAttributionDisable({
+        appVersion: 1.49,
+        capabilities: 'terminal.attribution-removed.v1'
+      })
+    ).toBe(false)
+    expect(
+      hostSupportsTerminalSplitAttributionDisable({
+        appVersion: {},
+        capabilities: ['terminal.attribution-removed.v1', 1]
+      })
+    ).toBe(false)
+  })
+})
diff --git a/src/shared/legacy-terminal-attribution-env.ts b/src/shared/legacy-terminal-attribution-env.ts
new file mode 100644
index 00000000000..5237280a486
--- /dev/null
+++ b/src/shared/legacy-terminal-attribution-env.ts
@@ -0,0 +1,68 @@
+import { TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY } from './protocol-version'
+
+export const LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY = 'ORCA_ENABLE_GIT_ATTRIBUTION'
+export const LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY = 'ORCA_ATTRIBUTION_BYPASS'
+export const TERMINAL_SPLIT_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE =
+  'Terminal splitting requires an updated workspace host that can verify attribution removal for every pane owner. Update the host and try again.'
+export const TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE =
+  'Creating terminals requires an updated workspace host that can verify attribution removal. Update the host and try again.'
+export const MOBILE_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE =
+  'Creating terminals from Orca Mobile requires a newer workspace host that can verify safe terminal environment forwarding. Update the host and try again.'
+export const SESSION_TAB_TERMINAL_CREATE_ATTRIBUTION_UPDATE_REQUIRED_MESSAGE =
+  'Creating terminals requires a newer workspace host that can verify safe terminal environment forwarding. Update the host and try again.'
+const MAX_TERMINAL_ENV_DELETION_KEYS = 32
+
+type TerminalAttributionHostStatus = {
+  appVersion?: string
+  capabilities?: string[]
+}
+
+function readTerminalAttributionHostStatus(value: unknown): TerminalAttributionHostStatus {
+  if (!value || typeof value !== 'object') {
+    return {}
+  }
+  const appVersion = Reflect.get(value, 'appVersion')
+  const capabilities = Reflect.get(value, 'capabilities')
+  return {
+    ...(typeof appVersion === 'string' ? { appVersion } : {}),
+    ...(Array.isArray(capabilities) && capabilities.every((entry) => typeof entry === 'string')
+      ? { capabilities }
+      : {})
+  }
+}
+
+export function hostSupportsTerminalSplitAttributionDisable(value: unknown): boolean {
+  const status = readTerminalAttributionHostStatus(value)
+  // Why: only removal-capable hosts cover both runtime- and renderer-owned split targets.
+  return status.capabilities?.includes(TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY) === true
+}
+
+export function hostSupportsTerminalCreateAttributionDisable(value: unknown): boolean {
+  const status = readTerminalAttributionHostStatus(value)
+  return status.capabilities?.includes(TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY) === true
+}
+
+export function hostSupportsSessionTabTerminalCreateAttributionDisable(value: unknown): boolean {
+  const status = readTerminalAttributionHostStatus(value)
+  return status.capabilities?.includes(TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY) === true
+}
+
+export function withLegacyTerminalAttributionDisabledEnv(
+  env: Record<string, string> | undefined
+): Record<string, string> {
+  return { ...env, [LEGACY_TERMINAL_ATTRIBUTION_BYPASS_ENV_KEY]: '1' }
+}
+
+export function addLegacyTerminalAttributionDisableRequest(
+  envToDelete: readonly string[] | undefined
+): string[] | undefined {
+  const deduplicated = [...new Set(envToDelete ?? [])]
+  const gateIndex = deduplicated.indexOf(LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY)
+  if (gateIndex !== -1) {
+    deduplicated.splice(gateIndex, 1)
+  }
+  if (deduplicated.length >= MAX_TERMINAL_ENV_DELETION_KEYS) {
+    throw new Error('Terminal environment deletion limit leaves no room for attribution cleanup')
+  }
+  return [...deduplicated, LEGACY_TERMINAL_ATTRIBUTION_ENABLE_ENV_KEY]
+}
diff --git a/src/shared/linear-agent-access.ts b/src/shared/linear-agent-access.ts
index 2ffa17cb406..69169268767 100644
--- a/src/shared/linear-agent-access.ts
+++ b/src/shared/linear-agent-access.ts
@@ -115,13 +115,13 @@ export type LinearIssueListRequest = {
   filter?: LinearIssueListFilter
   teamInput?: string
   limit?: number
-  workspaceId?: string | 'all'
+  workspaceId?: (string & {}) | 'all'
 }
 
 export type LinearProjectListRequest = {
   query?: string
   limit?: number
-  workspaceId?: string | 'all'
+  workspaceId?: (string & {}) | 'all'
 }
 
 export type LinearStatusSetRequest = LinearWriteTargetRequest & {
diff --git a/src/shared/linear-agent-result-types.ts b/src/shared/linear-agent-result-types.ts
index e986460007b..ae04c842d4d 100644
--- a/src/shared/linear-agent-result-types.ts
+++ b/src/shared/linear-agent-result-types.ts
@@ -144,7 +144,7 @@ export type LinearSearchResult = {
   issues: LinearSearchIssueSummary[]
   meta: {
     query: string
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
     limit: number
     returned: number
     limitReached: boolean
@@ -178,7 +178,7 @@ export type LinearTeamSummary = {
 export type LinearTeamListResult = {
   teams: LinearTeamSummary[]
   meta: {
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
     returned: number
     partial: boolean
     workspaceErrors: {
@@ -211,7 +211,7 @@ export type LinearIssueListResult = {
   issues: LinearSearchIssueSummary[]
   meta: {
     filter: LinearIssueListFilter
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
     team?: LinearTeamSummary
     limit: number
     returned: number
@@ -242,7 +242,7 @@ export type LinearProjectListResult = {
   projects: LinearAgentProjectSummary[]
   meta: {
     query?: string
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
     limit: number
     returned: number
     hasMore: boolean
diff --git a/src/shared/linear-issue-view-resume-state.ts b/src/shared/linear-issue-view-resume-state.ts
index 11fbb967570..82c03f87c2e 100644
--- a/src/shared/linear-issue-view-resume-state.ts
+++ b/src/shared/linear-issue-view-resume-state.ts
@@ -173,9 +173,7 @@ export function selectLinearWorkspaceIssueFilter(
   if (!workspaceId) {
     return emptyLinearIssueAttributeFilter()
   }
-  const filter = Object.prototype.hasOwnProperty.call(filters, workspaceId)
-    ? filters[workspaceId]
-    : undefined
+  const filter = Object.hasOwn(filters, workspaceId) ? filters[workspaceId] : undefined
   return filter ? canonicalizeLinearIssueAttributeFilter(filter) : emptyLinearIssueAttributeFilter()
 }
 
diff --git a/src/shared/linear-links.ts b/src/shared/linear-links.ts
index 0f1db592736..bcbb7180e36 100644
--- a/src/shared/linear-links.ts
+++ b/src/shared/linear-links.ts
@@ -1,3 +1,5 @@
+import type { LinearConnectionStatus, LinearIssue, LinearWorkspace } from './types'
+
 export function buildLinearTeamUrl(args: {
   organizationUrlKey?: string | null
   teamKey?: string | null
@@ -56,6 +58,11 @@ export type ParsedLinearIssueInput = {
   organizationUrlKey?: string
 }
 
+export type LinearIssueUrlIntent = {
+  identifier: string
+  organizationUrlKey: string
+}
+
 export type LinearIssueLinkUpdates = {
   linkedLinearIssue: string | null
   linkedLinearIssueWorkspaceId: string | null
@@ -88,7 +95,7 @@ export function parseLinearIssueInput(input: string): ParsedLinearIssueInput | n
     const parts = parsed.pathname.split('/').filter(Boolean)
     const issueIndex = parts.indexOf('issue')
     const organizationUrlKey = parts[0]
-    const rawIdentifier = issueIndex >= 0 ? parts[issueIndex + 1] : undefined
+    const rawIdentifier = issueIndex !== -1 ? parts[issueIndex + 1] : undefined
     if (!organizationUrlKey || !rawIdentifier) {
       return null
     }
@@ -105,6 +112,122 @@ export function parseLinearIssueInput(input: string): ParsedLinearIssueInput | n
   }
 }
 
+export function parseLinearIssueUrlIntent(input: string): LinearIssueUrlIntent | null {
+  const trimmed = input.trim()
+  try {
+    const url = new URL(trimmed)
+    const pathMatch = /^\/([^/]+)\/issue\/([^/]+)(?:\/[^/]+)?\/?$/.exec(url.pathname)
+    if (
+      (url.protocol !== 'https:' && url.protocol !== 'http:') ||
+      url.host !== 'linear.app' ||
+      url.username !== '' ||
+      url.password !== '' ||
+      !pathMatch
+    ) {
+      return null
+    }
+    const organizationUrlKey = decodeURIComponent(pathMatch[1])
+    const identifier = decodeURIComponent(pathMatch[2])
+    if (
+      !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(organizationUrlKey) ||
+      !LINEAR_IDENTIFIER_PATTERN.test(identifier)
+    ) {
+      return null
+    }
+    return { identifier: identifier.toUpperCase(), organizationUrlKey }
+  } catch {
+    return null
+  }
+}
+
+export function findLinearIssueWorkspaceId(
+  intent: LinearIssueUrlIntent,
+  workspaces: readonly Pick<LinearWorkspace, 'id' | 'organizationUrlKey'>[] | undefined
+): string | null {
+  const organizationUrlKey = intent.organizationUrlKey.toLowerCase()
+  return (
+    workspaces?.find(
+      (workspace) => workspace.organizationUrlKey?.toLowerCase() === organizationUrlKey
+    )?.id ?? null
+  )
+}
+
+export function findLinearIssueWorkspaceIdFromStatus(
+  intent: LinearIssueUrlIntent,
+  status: Pick<
+    LinearConnectionStatus,
+    'workspaces' | 'viewer' | 'activeWorkspaceId' | 'selectedWorkspaceId'
+  >
+): string | null {
+  const workspaceId = findLinearIssueWorkspaceId(intent, status.workspaces)
+  if (workspaceId) {
+    return workspaceId
+  }
+  if (
+    status.viewer?.organizationUrlKey?.toLowerCase() !== intent.organizationUrlKey.toLowerCase()
+  ) {
+    return null
+  }
+  const selectedWorkspaceId =
+    status.selectedWorkspaceId && status.selectedWorkspaceId !== 'all'
+      ? status.selectedWorkspaceId
+      : null
+  return selectedWorkspaceId ?? status.activeWorkspaceId ?? null
+}
+
+export function findLinearIssueWorkspaceLookupIds(
+  intent: LinearIssueUrlIntent,
+  status: Pick<
+    LinearConnectionStatus,
+    'workspaces' | 'viewer' | 'activeWorkspaceId' | 'selectedWorkspaceId'
+  >
+): string[] {
+  const ids: string[] = []
+  const seen = new Set<string>()
+  const push = (id: string | null | undefined): void => {
+    if (!id || id === 'all' || seen.has(id)) {
+      return
+    }
+    seen.add(id)
+    ids.push(id)
+  }
+
+  push(findLinearIssueWorkspaceIdFromStatus(intent, status))
+
+  // Why: saved API-key workspaces often omit organizationUrlKey. Probe those
+  // unknown-org workspaces and accept only an issue whose URL matches the org.
+  for (const workspace of status.workspaces ?? []) {
+    if (!workspace.organizationUrlKey) {
+      push(workspace.id)
+    }
+  }
+
+  if (!status.viewer?.organizationUrlKey && (status.workspaces?.length ?? 0) === 0) {
+    const selectedWorkspaceId =
+      status.selectedWorkspaceId && status.selectedWorkspaceId !== 'all'
+        ? status.selectedWorkspaceId
+        : null
+    push(selectedWorkspaceId)
+    push(status.activeWorkspaceId)
+  }
+
+  return ids
+}
+
+export function isLinearIssueUrlResolutionMatch(
+  intent: LinearIssueUrlIntent,
+  issue: Pick<LinearIssue, 'identifier' | 'url'>
+): boolean {
+  if (issue.identifier.toUpperCase() !== intent.identifier.toUpperCase()) {
+    return false
+  }
+  const issueOrganizationUrlKey = getLinearOrganizationUrlKeyFromIssueUrl(issue.url)
+  return (
+    issueOrganizationUrlKey !== null &&
+    issueOrganizationUrlKey.toLowerCase() === intent.organizationUrlKey.toLowerCase()
+  )
+}
+
 export const LINEAR_ISSUE_LINK_CLEARED: LinearIssueLinkUpdates = {
   linkedLinearIssue: null,
   linkedLinearIssueWorkspaceId: null,
diff --git a/src/shared/linear-mcp-issue-list.ts b/src/shared/linear-mcp-issue-list.ts
index c668c848aef..6955eef16ab 100644
--- a/src/shared/linear-mcp-issue-list.ts
+++ b/src/shared/linear-mcp-issue-list.ts
@@ -19,7 +19,7 @@ export type LinearMcpIssueListRequest = {
   createdAt?: string
   updatedAt?: string
   includeArchived?: boolean
-  workspaceId?: string | 'all'
+  workspaceId?: (string & {}) | 'all'
 }
 
 export type LinearMcpIssueListResult = {
@@ -30,7 +30,7 @@ export type LinearMcpIssueListResult = {
     hasMore: boolean
     nextCursor?: string
     orderBy: 'createdAt' | 'updatedAt'
-    workspaceId?: string | 'all'
+    workspaceId?: (string & {}) | 'all'
     partial: boolean
     workspaceErrors: {
       workspace: LinearWorkspaceCandidate
diff --git a/src/shared/mcp-config.ts b/src/shared/mcp-config.ts
index 0cc0ce60d3b..09fbc6d3865 100644
--- a/src/shared/mcp-config.ts
+++ b/src/shared/mcp-config.ts
@@ -165,7 +165,7 @@ export function inspectMcpConfigContent(
 function collectMcpServerEntries(rawServers: Record<string, unknown>): [string, unknown][] | null {
   const entries: [string, unknown][] = []
   for (const name in rawServers) {
-    if (!Object.prototype.hasOwnProperty.call(rawServers, name)) {
+    if (!Object.hasOwn(rawServers, name)) {
       continue
     }
     if (
diff --git a/src/shared/mcp-server-inspection.ts b/src/shared/mcp-server-inspection.ts
index ab7a79cf40b..a475ff413e8 100644
--- a/src/shared/mcp-server-inspection.ts
+++ b/src/shared/mcp-server-inspection.ts
@@ -66,7 +66,7 @@ function inspectMcpEnv(env: unknown): BoundedEnv {
   const masked: Record<string, string> = {}
   let fields = 0
   for (const key in env) {
-    if (!Object.prototype.hasOwnProperty.call(env, key)) {
+    if (!Object.hasOwn(env, key)) {
       continue
     }
     fields += 1
diff --git a/src/shared/native-chat-image-transcript-markers.ts b/src/shared/native-chat-image-transcript-markers.ts
index a55f0c9c272..34c2e9ae32d 100644
--- a/src/shared/native-chat-image-transcript-markers.ts
+++ b/src/shared/native-chat-image-transcript-markers.ts
@@ -21,7 +21,7 @@ function stripImagePromptMarkersFromFirstText(
   blocks: readonly NativeChatBlock[]
 ): NativeChatBlock[] {
   const textIndex = blocks.findIndex(isTextBlock)
-  if (textIndex < 0) {
+  if (textIndex === -1) {
     return blocks as NativeChatBlock[]
   }
   const block = blocks[textIndex]
diff --git a/src/shared/native-chat-session-option-commands.ts b/src/shared/native-chat-session-option-commands.ts
index 6fb5095be8d..e4efd5efdf9 100644
--- a/src/shared/native-chat-session-option-commands.ts
+++ b/src/shared/native-chat-session-option-commands.ts
@@ -22,7 +22,7 @@ export function parseBuiltSessionOptionCommand(
   const marker = '__orca_session_option_value__'
   const template = build(marker)
   const markerIndex = template.indexOf(marker)
-  if (markerIndex < 0) {
+  if (markerIndex === -1) {
     return null
   }
   const prefix = template.slice(0, markerIndex)
diff --git a/src/shared/native-chat-tool-summary.ts b/src/shared/native-chat-tool-summary.ts
index 3f71d997e15..a048e16da0e 100644
--- a/src/shared/native-chat-tool-summary.ts
+++ b/src/shared/native-chat-tool-summary.ts
@@ -283,7 +283,7 @@ function boundedPreviewValue(value: unknown, depth: number, seen: WeakSet<object
   const result: Record<string, unknown> = {}
   let count = 0
   for (const key in value) {
-    if (!Object.prototype.hasOwnProperty.call(value, key)) {
+    if (!Object.hasOwn(value, key)) {
       continue
     }
     if (count >= MAX_PREVIEW_COLLECTION_ITEMS) {
diff --git a/src/shared/new-workspace/smart-workspace-linear-intent.ts b/src/shared/new-workspace/smart-workspace-linear-intent.ts
new file mode 100644
index 00000000000..0995cdd9cb9
--- /dev/null
+++ b/src/shared/new-workspace/smart-workspace-linear-intent.ts
@@ -0,0 +1,69 @@
+import type { LinearIssue } from '../types'
+import {
+  parseLinearIssueInput,
+  parseLinearIssueUrlIntent,
+  type LinearIssueUrlIntent,
+  type ParsedLinearIssueInput
+} from '../linear-links'
+import { isSmartWorkspaceSourceQueryWithinLimit } from './smart-workspace-source-query'
+
+type SmartWorkspaceLinearMode = 'smart' | 'linear' | (string & {})
+
+export function parseBoundedSmartWorkspaceLinearIssueInput(
+  value: string
+): ParsedLinearIssueInput | null {
+  if (!isSmartWorkspaceSourceQueryWithinLimit(value)) {
+    return null
+  }
+  const parsed = parseLinearIssueInput(value)
+  if (!parsed?.organizationUrlKey) {
+    return parsed
+  }
+  return parseLinearIssueUrlIntent(value)
+}
+
+export function parseBoundedSmartWorkspaceLinearIssueUrlIntent(
+  value: string
+): LinearIssueUrlIntent | null {
+  return isSmartWorkspaceSourceQueryWithinLimit(value) ? parseLinearIssueUrlIntent(value) : null
+}
+
+export function getSmartWorkspaceLinearSearchQuery(value: string): string {
+  const trimmed = value.trim()
+  return parseBoundedSmartWorkspaceLinearIssueInput(trimmed)?.identifier ?? trimmed
+}
+
+export function isSmartWorkspaceLinearIssueIntentMatch(
+  intent: ParsedLinearIssueInput,
+  issue: Pick<LinearIssue, 'identifier' | 'url'>
+): boolean {
+  if (issue.identifier.toUpperCase() !== intent.identifier.toUpperCase()) {
+    return false
+  }
+  if (!intent.organizationUrlKey) {
+    return true
+  }
+  const issueInput = parseLinearIssueUrlIntent(issue.url)
+  return issueInput?.organizationUrlKey?.toLowerCase() === intent.organizationUrlKey.toLowerCase()
+}
+
+export function prioritizeSmartWorkspaceLinearIssueResults(
+  value: string,
+  issues: readonly LinearIssue[]
+): LinearIssue[] {
+  const intent = parseBoundedSmartWorkspaceLinearIssueInput(value)
+  if (!intent) {
+    return issues.slice()
+  }
+  return [
+    ...issues.filter((issue) => isSmartWorkspaceLinearIssueIntentMatch(intent, issue)),
+    ...issues.filter((issue) => !isSmartWorkspaceLinearIssueIntentMatch(intent, issue))
+  ]
+}
+
+export function isBlockingLinearUrlIntent(mode: SmartWorkspaceLinearMode, value: string): boolean {
+  if (mode !== 'smart' && mode !== 'linear') {
+    return false
+  }
+  return parseBoundedSmartWorkspaceLinearIssueUrlIntent(value) !== null
+}
diff --git a/src/shared/new-workspace/smart-workspace-source-query.ts b/src/shared/new-workspace/smart-workspace-source-query.ts
new file mode 100644
index 00000000000..5a5a9633f75
--- /dev/null
+++ b/src/shared/new-workspace/smart-workspace-source-query.ts
@@ -0,0 +1,10 @@
+import { isClipboardTextByteLengthOverLimit } from '../clipboard-text'
+
+export const SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES = 2048
+
+export function isSmartWorkspaceSourceQueryWithinLimit(
+  query: string,
+  maxBytes = SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES
+): boolean {
+  return !isClipboardTextByteLengthOverLimit(query, maxBytes)
+}
diff --git a/src/shared/new-workspace/smart-workspace-source-results.ts b/src/shared/new-workspace/smart-workspace-source-results.ts
index 73c39adae8c..e17a4029d8e 100644
--- a/src/shared/new-workspace/smart-workspace-source-results.ts
+++ b/src/shared/new-workspace/smart-workspace-source-results.ts
@@ -6,13 +6,20 @@ import type {
   LinearCollectionResult,
   LinearIssue
 } from '../types'
-import { isClipboardTextByteLengthOverLimit } from '../clipboard-text'
 import { JIRA_ISSUE_KEY_PATTERN, parseJiraIssueUrl } from '../jira-issue-url'
+import {
+  isSmartWorkspaceLinearIssueIntentMatch,
+  parseBoundedSmartWorkspaceLinearIssueUrlIntent
+} from './smart-workspace-linear-intent'
+import { isSmartWorkspaceSourceQueryWithinLimit } from './smart-workspace-source-query'
+
+export {
+  SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES,
+  isSmartWorkspaceSourceQueryWithinLimit
+} from './smart-workspace-source-query'
 
 export type SmartNameMode = 'smart' | 'github' | 'gitlab' | 'branches' | 'linear' | 'jira' | 'text'
 
-export const SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES = 2048
-
 export type SmartWorkspaceSourceRow =
   | { kind: 'use-name'; value: string; name: string }
   | { kind: 'create-branch'; value: string; name: string }
@@ -38,13 +45,6 @@ export function getSmartWorkspaceEmptyHint(mode: SmartNameMode): string {
   return EMPTY_HINT_BY_MODE[mode]
 }
 
-export function isSmartWorkspaceSourceQueryWithinLimit(
-  query: string,
-  maxBytes = SMART_WORKSPACE_SOURCE_QUERY_MAX_BYTES
-): boolean {
-  return !isClipboardTextByteLengthOverLimit(query, maxBytes)
-}
-
 export function buildJiraIssueSearchJql(query: string): string | null {
   const trimmed = query.trim()
   if (!trimmed || !isSmartWorkspaceSourceQueryWithinLimit(trimmed)) {
@@ -195,6 +195,7 @@ export function buildSmartWorkspaceSourceRows({
   jiraIssues = [],
   linearAvailable,
   linearIssues,
+  linearUrlIntentOwnsResults = false,
   mode,
   resultLimit,
   value
@@ -208,6 +209,7 @@ export function buildSmartWorkspaceSourceRows({
   jiraIssues?: JiraIssue[]
   linearAvailable: boolean
   linearIssues: LinearIssueSourceInput
+  linearUrlIntentOwnsResults?: boolean
   mode: SmartNameMode
   resultLimit: number
   value: string
@@ -221,6 +223,32 @@ export function buildSmartWorkspaceSourceRows({
   }
   const trimmed = value.trim()
   const nextRows: SmartWorkspaceSourceRow[] = []
+  const resolvedLinearIssues = Array.isArray(linearIssues)
+    ? linearIssues
+    : Array.isArray(linearIssues?.items)
+      ? linearIssues.items
+      : []
+  const linearUrlIntent = parseBoundedSmartWorkspaceLinearIssueUrlIntent(trimmed)
+  if (
+    linearUrlIntentOwnsResults &&
+    linearAvailable &&
+    linearUrlIntent &&
+    (mode === 'smart' || mode === 'linear')
+  ) {
+    const linearRows = resolvedLinearIssues
+      .filter((issue) => isSmartWorkspaceLinearIssueIntentMatch(linearUrlIntent, issue))
+      .map((issue) => ({
+        kind: 'linear' as const,
+        value: `linear-${issue.id}`,
+        issue
+      }))
+      .slice(0, resultLimit)
+    // Why: keep "use as workspace name" available; sourceIntent focuses the issue.
+    if (trimmed && mode === 'smart') {
+      return [{ kind: 'use-name' as const, value: 'use-name', name: trimmed }, ...linearRows]
+    }
+    return linearRows
+  }
   if (trimmed && mode === 'smart') {
     // Why: stable cmdk value — embedding the query remounted the row every keystroke.
     nextRows.push({ kind: 'use-name', value: 'use-name', name: trimmed })
@@ -266,11 +294,6 @@ export function buildSmartWorkspaceSourceRows({
   if (linearAvailable && (mode === 'smart' || mode === 'linear')) {
     // Why: mixed-version runtime responses may briefly carry the paginated
     // collection shape into this render path; rendering must stay recoverable.
-    const resolvedLinearIssues = Array.isArray(linearIssues)
-      ? linearIssues
-      : Array.isArray(linearIssues?.items)
-        ? linearIssues.items
-        : []
     nextRows.push(
       ...resolvedLinearIssues.map((issue) => ({
         kind: 'linear' as const,
diff --git a/src/shared/opencode-terminal-title.test.ts b/src/shared/opencode-terminal-title.test.ts
index f1cb825e8cd..35bb339f797 100644
--- a/src/shared/opencode-terminal-title.test.ts
+++ b/src/shared/opencode-terminal-title.test.ts
@@ -4,20 +4,30 @@ import { isMeaningfulOpenCodeTerminalTitle, isOpenCodeNativeTitle } from './open
 describe('OpenCode terminal titles', () => {
   it('recognizes native session titles', () => {
     expect(isMeaningfulOpenCodeTerminalTitle('OC | Native Stable Session')).toBe(true)
-    expect(isMeaningfulOpenCodeTerminalTitle('  OC|Session  ')).toBe(true)
+    expect(isMeaningfulOpenCodeTerminalTitle('  OC | Session  ')).toBe(true)
     expect(isOpenCodeNativeTitle('OC | Understand about the plugin')).toBe(true)
     expect(isOpenCodeNativeTitle('tmux | OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('ssh build-host | OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('user@host: ~/code | OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('▣ OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('⠋ OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('ssh build-host | ⠋ OC | ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('OC |   ses_123')).toBe(true)
+    expect(isOpenCodeNativeTitle('OC |\tses_123')).toBe(true)
   })
 
   it('rejects generic, incomplete, embedded, and lookalike titles', () => {
     expect(isMeaningfulOpenCodeTerminalTitle('OpenCode')).toBe(false)
     expect(isMeaningfulOpenCodeTerminalTitle('OpenCode ready')).toBe(false)
     expect(isMeaningfulOpenCodeTerminalTitle('OC |')).toBe(false)
+    // Why: the native marker always spaces its separator; `OC|x` is another tool's
+    // pipe-delimited title, so accepting it would make a non-OpenCode pane a send target.
+    expect(isMeaningfulOpenCodeTerminalTitle('OC|Session')).toBe(false)
+    expect(isMeaningfulOpenCodeTerminalTitle('OC |Session')).toBe(false)
     expect(isMeaningfulOpenCodeTerminalTitle(undefined)).toBe(false)
     // Why: lowercase is not OpenCode's native marker; avoid "oc |" cwd/task noise.
     expect(isOpenCodeNativeTitle('oc | Understand about the plugin')).toBe(false)
     // Why: mid-title OC must not steal another agent's braille/task frame.
     expect(isOpenCodeNativeTitle('⠋ Fix foo | OC | bar')).toBe(false)
-    expect(isOpenCodeNativeTitle('my session | OC | task')).toBe(false)
   })
 })
diff --git a/src/shared/opencode-terminal-title.ts b/src/shared/opencode-terminal-title.ts
index 01d3d3819ae..c45cc9fd49c 100644
--- a/src/shared/opencode-terminal-title.ts
+++ b/src/shared/opencode-terminal-title.ts
@@ -1,12 +1,10 @@
-// Why: OpenCode abbreviates native OSC session titles as `OC | <task>` (no
-// agent-name token). Optional single-token multiplexer prefix covers SSH/tmux
-// frames like `tmux | OC | …`. Case-sensitive `OC` avoids ordinary lowercase
-// "oc" lookalikes; require non-whitespace after the marker so bare `OC |` is not
-// identity. Used for both display-title preservation and tab-agent identity.
-const OPENCODE_NATIVE_TITLE_RE = /^(?:[^|\s]+ \| )?OC\s*\|\s*\S/u
+// Why: wrappers may prepend an SSH/tmux label, and OpenCode may prepend one
+// status glyph. A spinner-led task from another agent must not become a wrapper.
+const OPENCODE_NATIVE_TITLE_RE =
+  /^\s*(?:(?![▣\u2800-\u28ff])[^|]+? \| )?(?:[▣\u2800-\u28ff] )?OC \|[ \t]+\S/u
 
 export function isOpenCodeNativeTitle(title: string | null | undefined): boolean {
-  return OPENCODE_NATIVE_TITLE_RE.test(title?.trim() ?? '')
+  return title ? OPENCODE_NATIVE_TITLE_RE.test(title) : false
 }
 
 export function isMeaningfulOpenCodeTerminalTitle(title: string | null | undefined): boolean {
diff --git a/src/shared/orca-attribution.ts b/src/shared/orca-attribution.ts
deleted file mode 100644
index ce81dcffb4e..00000000000
--- a/src/shared/orca-attribution.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-// Why: single source of truth for the commit trailer Orca appends when the
-// "Orca Attribution" toggle (`enableGitHubAttribution`) is on. Used by both
-// the terminal git/gh shim and the AI commit-message generator so the two
-// code paths agree on the exact string.
-
-export const ORCA_GIT_COMMIT_TRAILER = 'Co-authored-by: Orca <help@stably.ai>'
diff --git a/src/shared/persisted-ui-equality.ts b/src/shared/persisted-ui-equality.ts
index b82320737c9..701359c487d 100644
--- a/src/shared/persisted-ui-equality.ts
+++ b/src/shared/persisted-ui-equality.ts
@@ -36,7 +36,7 @@ export function persistedUIValuesEqual(left: unknown, right: unknown): boolean {
 
   for (const key of leftKeys) {
     if (
-      !Object.prototype.hasOwnProperty.call(rightRecord, key) ||
+      !Object.hasOwn(rightRecord, key) ||
       !persistedUIValuesEqual(leftRecord[key], rightRecord[key])
     ) {
       return false
diff --git a/src/shared/project-host-setup-projection.test.ts b/src/shared/project-host-setup-projection.test.ts
index 606eebdc73f..c7573c50784 100644
--- a/src/shared/project-host-setup-projection.test.ts
+++ b/src/shared/project-host-setup-projection.test.ts
@@ -19,6 +19,75 @@ function repo(overrides: Partial<Repo> & Pick<Repo, 'id' | 'path' | 'displayName
 }
 
 describe('project host setup projection', () => {
+  it('keeps timestamps stable when addedAt is 0 across different now values', () => {
+    const target = repo({
+      id: 'repo-1',
+      path: '/Users/alice/orca',
+      displayName: 'orca',
+      addedAt: 0
+    })
+    const first = projectHostSetupProjectionFromRepos([target], 1_000)
+    const second = projectHostSetupProjectionFromRepos([target], 9_999)
+
+    expect(first.projects[0]?.createdAt).toBe(0)
+    expect(first.projects[0]?.updatedAt).toBe(0)
+    expect(first.setups[0]?.createdAt).toBe(0)
+    expect(second.projects[0]?.createdAt).toBe(first.projects[0]?.createdAt)
+    expect(second.projects[0]?.updatedAt).toBe(first.projects[0]?.updatedAt)
+    expect(second.setups[0]?.createdAt).toBe(first.setups[0]?.createdAt)
+    expect(second.setups[0]?.updatedAt).toBe(first.setups[0]?.updatedAt)
+  })
+
+  // Why both orders: repo order comes from disk/host enumeration, so it must not decide the
+  // project's timestamps. The accumulator carries 0 when the *first* sibling is the unknown one.
+  const timestampedSibling = repo({
+    id: 'local-repo',
+    path: '/Users/alice/orca',
+    displayName: 'Orca',
+    addedAt: 100,
+    upstream: { owner: 'StablyAI', repo: 'Orca' }
+  })
+  const unknownSibling = repo({
+    id: 'remote-repo',
+    path: '/home/alice/orca',
+    displayName: 'orca',
+    addedAt: 0,
+    connectionId: 'gpu-vm',
+    upstream: { owner: 'stablyai', repo: 'orca' }
+  })
+
+  it('does not wipe a persisted createdAt when a sibling repo has addedAt 0', () => {
+    const projection = projectHostSetupProjectionFromRepos([timestampedSibling, unknownSibling])
+
+    expect(projection.projects).toHaveLength(1)
+    expect(projection.projects[0]?.createdAt).toBe(100)
+    expect(projection.projects[0]?.updatedAt).toBe(100)
+  })
+
+  it('does not wipe a persisted createdAt when the addedAt 0 sibling comes first', () => {
+    const projection = projectHostSetupProjectionFromRepos([unknownSibling, timestampedSibling])
+
+    expect(projection.projects).toHaveLength(1)
+    expect(projection.projects[0]?.createdAt).toBe(100)
+    expect(projection.projects[0]?.updatedAt).toBe(100)
+  })
+
+  it('keeps per-repo setup timestamps independent of sibling order', () => {
+    for (const repos of [
+      [timestampedSibling, unknownSibling],
+      [unknownSibling, timestampedSibling]
+    ]) {
+      const { setups } = projectHostSetupProjectionFromRepos(repos)
+      const timestamped = setups.find((setup) => setup.repoId === 'local-repo')
+      const unknown = setups.find((setup) => setup.repoId === 'remote-repo')
+      expect(timestamped?.createdAt).toBe(100)
+      expect(timestamped?.updatedAt).toBe(100)
+      // Setups are per repo and never merged, so the unknown one keeps its own 0 either way.
+      expect(unknown?.createdAt).toBe(0)
+      expect(unknown?.updatedAt).toBe(0)
+    }
+  })
+
   it('projects a legacy local repo into one project and one ready local setup', () => {
     const projection = projectHostSetupProjectionFromRepos(
       [repo({ id: 'repo-1', path: '/Users/alice/orca', displayName: 'orca' })],
diff --git a/src/shared/project-host-setup-projection.ts b/src/shared/project-host-setup-projection.ts
index c0c129d643a..00719497740 100644
--- a/src/shared/project-host-setup-projection.ts
+++ b/src/shared/project-host-setup-projection.ts
@@ -13,8 +13,8 @@ type ProjectAccumulator = {
 }
 
 export type ProjectHostSetupProjection = {
-  projects: Project[]
-  setups: ProjectHostSetup[]
+  projects: readonly Project[]
+  setups: readonly ProjectHostSetup[]
 }
 
 function getProjectProviderIdentity(
@@ -205,9 +205,43 @@ function parseGitHubRemoteUrl(remoteUrl: string | undefined): ProjectProviderIde
   }
 }
 
-function createProjectFromRepo(repo: Repo, now: number): Project {
+// Why: `addedAt || now` restamps Date.now() when addedAt is 0 / absent / NaN, so every
+// projection looks dirty and reconcileCatalogRows never reuses the project or setup.
+function catalogTimestampFromAddedAt(addedAt: number): number {
+  return Number.isFinite(addedAt) ? addedAt : 0
+}
+
+// Why: 0 / absent / NaN means "the repo predates timestamped catalog rows", not epoch. Keeping
+// it out of min()/max() stops one unknown sibling from wiping a real timestamp — and unlike the
+// old `|| now` fallback it stays order-independent, so both merge orders agree.
+function knownCatalogTimestamp(value: number): number | undefined {
+  return Number.isFinite(value) && value !== 0 ? value : undefined
+}
+
+/** Oldest of two catalog `createdAt` values, treating 0/NaN on either side as unknown. */
+export function mergeCatalogCreatedAt(left: number, right: number): number {
+  const known = knownCatalogTimestamp(left)
+  const other = knownCatalogTimestamp(right)
+  if (known === undefined || other === undefined) {
+    return known ?? other ?? 0
+  }
+  return Math.min(known, other)
+}
+
+/** Newest of two catalog `updatedAt` values, treating 0/NaN on either side as unknown. */
+export function mergeCatalogUpdatedAt(left: number, right: number): number {
+  const known = knownCatalogTimestamp(left)
+  const other = knownCatalogTimestamp(right)
+  if (known === undefined || other === undefined) {
+    return known ?? other ?? 0
+  }
+  return Math.max(known, other)
+}
+
+function createProjectFromRepo(repo: Repo): Project {
   const identity = getProjectProviderIdentity(repo)
   const gitRemoteIdentity = getProjectGitRemoteIdentity(repo)
+  const addedAt = catalogTimestampFromAddedAt(repo.addedAt)
   return {
     id: getProjectId(repo),
     displayName: repo.displayName,
@@ -217,8 +251,8 @@ function createProjectFromRepo(repo: Repo, now: number): Project {
     ...(identity ? { providerIdentity: identity } : {}),
     ...(gitRemoteIdentity ? { gitRemoteIdentity } : {}),
     sourceRepoIds: [repo.id],
-    createdAt: repo.addedAt || now,
-    updatedAt: repo.addedAt || now
+    createdAt: addedAt,
+    updatedAt: addedAt
   }
 }
 
@@ -226,17 +260,20 @@ function mergeProjectRepo(project: Project, repo: Repo): Project {
   const sourceRepoIds = project.sourceRepoIds.includes(repo.id)
     ? project.sourceRepoIds
     : [...project.sourceRepoIds, repo.id]
+  // Why unknown-aware on both sides: the accumulator itself carries 0 when the first repo of the
+  // project had no addedAt, so a plain min() would let repo order decide the project's createdAt.
+  const addedAt = catalogTimestampFromAddedAt(repo.addedAt)
   return {
     ...project,
     sourceRepoIds,
-    createdAt: Math.min(project.createdAt, repo.addedAt || project.createdAt),
-    updatedAt: Math.max(project.updatedAt, repo.addedAt || project.updatedAt)
+    createdAt: mergeCatalogCreatedAt(project.createdAt, addedAt),
+    updatedAt: mergeCatalogUpdatedAt(project.updatedAt, addedAt)
   }
 }
 
-function createSetupFromRepo(repo: Repo, projectId: string, now: number): ProjectHostSetup {
+function createSetupFromRepo(repo: Repo, projectId: string): ProjectHostSetup {
   const hostId = getRepoExecutionHostId(repo)
-  const createdAt = repo.addedAt || now
+  const createdAt = catalogTimestampFromAddedAt(repo.addedAt)
   const setupMethod = repo.projectHostSetupMethod ?? 'legacy-repo'
   return {
     id: repo.id,
@@ -261,7 +298,7 @@ function createSetupFromRepo(repo: Repo, projectId: string, now: number): Projec
 
 export function projectHostSetupProjectionFromRepos(
   repos: readonly Repo[],
-  now = Date.now()
+  _now?: number
 ): ProjectHostSetupProjection {
   const projectById = new Map<string, ProjectAccumulator>()
   const setups: ProjectHostSetup[] = []
@@ -271,8 +308,8 @@ export function projectHostSetupProjectionFromRepos(
     const existing = projectById.get(projectId)
     const project = existing
       ? mergeProjectRepo(existing.project, repo)
-      : createProjectFromRepo(repo, now)
-    const setup = createSetupFromRepo(repo, projectId, now)
+      : createProjectFromRepo(repo)
+    const setup = createSetupFromRepo(repo, projectId)
     projectById.set(projectId, {
       project
     })
@@ -288,7 +325,7 @@ export function projectHostSetupProjectionFromRepos(
 export function getProjectHostSetupsForProject(
   setups: readonly ProjectHostSetup[],
   projectId: string
-): ProjectHostSetup[] {
+): readonly ProjectHostSetup[] {
   return setups.filter((setup) => setup.projectId === projectId)
 }
 
diff --git a/src/shared/protocol-version.ts b/src/shared/protocol-version.ts
index f1818b901c3..28a89f9814b 100644
--- a/src/shared/protocol-version.ts
+++ b/src/shared/protocol-version.ts
@@ -32,9 +32,12 @@ export const REMOTE_RUNTIME_SHARED_CONTROL_CAPABILITY = 'remote-runtime.shared-c
 export const ORCHESTRATION_FEDERATION_RUNTIME_CAPABILITY = 'orchestration.federation.v1' as const
 export const ORCHESTRATION_FEDERATION_CONTROL_MAIL_RUNTIME_CAPABILITY =
   'orchestration.federation-control-mail.v1' as const
+export const ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY =
+  'orchestration.federation-lifecycle-settlement.v1' as const
 export const ORCHESTRATION_WORKER_LAUNCH_PREFERENCES_RUNTIME_CAPABILITY =
   'orchestration.worker-launch-preferences.v1' as const
 export const ORCHESTRATION_FEDERATION_CONTROL_MAIL_PROTOCOL_VERSION = 2 as const
+export const ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_PROTOCOL_VERSION = 3 as const
 export const ORCHESTRATION_CONTRACT_VERSION = 1 as const
 export const ORCHESTRATION_CONTRACT_RUNTIME_CAPABILITY = 'orchestration.contract.v1' as const
 export const FOLDER_WORKSPACE_PATH_STATUS_RUNTIME_CAPABILITY =
@@ -51,6 +54,7 @@ export const AI_VAULT_SESSION_TITLES_RUNTIME_CAPABILITY = 'aiVault.session-title
 // offscreen backend). Advertised only when that backend is actually available, so
 // clients never fall back to a local desktop browser tab for a remote-owned page.
 export const BROWSER_HEADLESS_RUNTIME_CAPABILITY = 'browser.headless.v1' as const
+export const BROWSER_SCREENCAST_RUNTIME_CAPABILITY = 'browser.screencast.v1' as const
 export const BROWSER_CERTIFICATE_TRUST_RUNTIME_CAPABILITY = 'browser.certificate-trust.v1' as const
 // Why: hosts without this strip terminal.send's inputKind (zod object drops
 // unknown keys), so a mobile xterm query reply would land as ordinary
@@ -80,6 +84,9 @@ export const AGENT_SESSION_HOST_AUTHORITY_RUNTIME_CAPABILITY =
   'agent-session.host-authority.v1' as const
 export const AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY =
   'agent-session.omp-resume-path.v1' as const
+// Why: old host-authority launches cannot accept env deletions and may still inject attribution.
+export const TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY =
+  'terminal.attribution-removed.v1' as const
 // Why: older runtimes strip mutation owner fields, so clients must fence writes before RPC.
 export const FILE_MUTATION_OWNERSHIP_RUNTIME_CAPABILITY = 'files.mutation-ownership.v1' as const
 export const FILE_MUTATION_OWNERSHIP_UPDATE_REQUIRED_MESSAGE =
@@ -91,9 +98,10 @@ export const RUNTIME_CAPABILITIES = [
   REMOTE_RUNTIME_SHARED_CONTROL_CAPABILITY,
   ORCHESTRATION_FEDERATION_RUNTIME_CAPABILITY,
   ORCHESTRATION_FEDERATION_CONTROL_MAIL_RUNTIME_CAPABILITY,
+  ORCHESTRATION_FEDERATION_LIFECYCLE_SETTLEMENT_RUNTIME_CAPABILITY,
   ORCHESTRATION_WORKER_LAUNCH_PREFERENCES_RUNTIME_CAPABILITY,
   ORCHESTRATION_CONTRACT_RUNTIME_CAPABILITY,
-  'browser.screencast.v1',
+  BROWSER_SCREENCAST_RUNTIME_CAPABILITY,
   'terminal.binary-stream.v1',
   'terminal.multiplex.v1',
   'workspace-ports.v1',
@@ -116,6 +124,7 @@ export const RUNTIME_CAPABILITIES = [
   REMOTE_SERVER_UPDATE_CAPABILITY,
   AGENT_SESSION_HOST_AUTHORITY_RUNTIME_CAPABILITY,
   AGENT_SESSION_OMP_RESUME_PATH_RUNTIME_CAPABILITY,
+  TERMINAL_ATTRIBUTION_REMOVED_RUNTIME_CAPABILITY,
   FILE_MUTATION_OWNERSHIP_RUNTIME_CAPABILITY,
   ACCOUNT_IMPORT_RUNTIME_CAPABILITY,
   CODEX_RESET_CREDIT_RUNTIME_CAPABILITY
diff --git a/src/shared/pty-slave-line-discipline-echo.test.ts b/src/shared/pty-slave-line-discipline-echo.test.ts
index 4f6c3994a85..c5538f2328c 100644
--- a/src/shared/pty-slave-line-discipline-echo.test.ts
+++ b/src/shared/pty-slave-line-discipline-echo.test.ts
@@ -3,7 +3,11 @@ import { describe, expect, it, vi, beforeEach } from 'vitest'
 const execFileMock = vi.hoisted(() => vi.fn())
 vi.mock('node:child_process', () => ({ execFile: execFileMock }))
 
-import { createPtySlaveEchoProbe, readPtySlavePath } from './pty-slave-line-discipline-echo'
+import {
+  createPtySlaveEchoProbe,
+  createPtySlaveLineEditorProbe,
+  readPtySlavePath
+} from './pty-slave-line-discipline-echo'
 
 /** Replies to the next stty call with the given output, or an error when `output` is null. */
 function answerStty(output: string | null): void {
@@ -14,6 +18,7 @@ function answerStty(output: string | null): void {
 
 const COOKED = 'speed 38400 baud;\nlflags: icanon isig iexten echo echoe echok echoctl\n'
 const RAW = 'speed 38400 baud;\nlflags: -icanon -isig -iexten -echo -echoe -echok -echoctl\n'
+const LINE_EDITOR = `${RAW}cchars: lnext = <undef>; min = 1; time = 0;\n`
 
 beforeEach(() => {
   execFileMock.mockReset()
@@ -132,3 +137,21 @@ describe('createPtySlaveEchoProbe', () => {
     expect(execFileMock.mock.calls[1]?.[1]).toEqual(['-a', '-F', '/dev/pts/3'])
   })
 })
+
+describe('createPtySlaveLineEditorProbe', () => {
+  it('requires raw quiet mode with the line editor disabling literal-next', async () => {
+    const probe = createPtySlaveLineEditorProbe('/dev/ttys048', 'darwin')
+    answerStty(LINE_EDITOR)
+    await expect(probe?.()).resolves.toBe('line-editor')
+    answerStty(`${RAW}cchars: lnext = ^V; min = 1; time = 0;\n`)
+    await expect(probe?.()).resolves.toBe('other')
+    answerStty(COOKED)
+    await expect(probe?.()).resolves.toBe('other')
+  })
+
+  it('fails closed when the terminal state is incomplete', async () => {
+    const probe = createPtySlaveLineEditorProbe('/dev/ttys048', 'darwin')
+    answerStty('lflags: -echo\ncchars: lnext = <undef>;\n')
+    await expect(probe?.()).resolves.toBe('unknown')
+  })
+})
diff --git a/src/shared/pty-slave-line-discipline-echo.ts b/src/shared/pty-slave-line-discipline-echo.ts
index 3f515066450..1eb6bfde3c9 100644
--- a/src/shared/pty-slave-line-discipline-echo.ts
+++ b/src/shared/pty-slave-line-discipline-echo.ts
@@ -10,10 +10,16 @@ export type PtySlaveLineDisciplineEcho = 'echoing' | 'quiet' | 'unknown'
 
 export type PtySlaveEchoProbe = () => Promise<PtySlaveLineDisciplineEcho>
 
+export type PtySlaveLineEditorState = 'line-editor' | 'other' | 'unknown'
+
+export type PtySlaveLineEditorProbe = () => Promise<PtySlaveLineEditorState>
+
 const STTY_TIMEOUT_MS = 2_000
 // `stty -a` prints the lflags as a space-separated list where a disabled flag is
 // prefixed with `-`, so `echo` and `-echo` are the two tokens that matter.
 const ECHO_FLAG = /(?:^|\s)(-?)echo(?:\s|$)/
+const ICANON_FLAG = /(?:^|\s)(-?)icanon(?:\s|$)/
+const LNEXT_UNDEFINED = /(?:^|[;\s])lnext\s*=\s*<undef>(?:;|\s|$)/
 
 function sttyArgs(ptsName: string, platform: NodeJS.Platform): readonly string[] {
   // BSD/macOS take `-f`; Linux (GNU coreutils) takes `-F`.
@@ -30,7 +36,18 @@ function parseEchoFlag(sttyOutput: string): PtySlaveLineDisciplineEcho {
   return match[1] === '-' ? 'quiet' : 'echoing'
 }
 
-type SttyProbeResult = { state: PtySlaveLineDisciplineEcho; permanent: boolean }
+function parseLineEditorState(sttyOutput: string): PtySlaveLineEditorState {
+  const echo = ECHO_FLAG.exec(sttyOutput)
+  const icanon = ICANON_FLAG.exec(sttyOutput)
+  if (!echo || !icanon) {
+    return 'unknown'
+  }
+  return echo[1] === '-' && icanon[1] === '-' && LNEXT_UNDEFINED.test(sttyOutput)
+    ? 'line-editor'
+    : 'other'
+}
+
+type SttyProbeResult = { stdout: string | null; permanent: boolean }
 
 /**
  * A spawn that never ran (`stty` absent) or a device that answered non-zero (reaped,
@@ -54,8 +71,8 @@ function runStty(ptsName: string, platform: NodeJS.Platform): Promise<SttyProbeR
       (error, stdout) => {
         resolve(
           error
-            ? { state: 'unknown', permanent: isPermanentSttyFailure(error) }
-            : { state: parseEchoFlag(stdout), permanent: false }
+            ? { stdout: null, permanent: isPermanentSttyFailure(error) }
+            : { stdout, permanent: false }
         )
       }
     )
@@ -83,6 +100,21 @@ export function createPtySlaveEchoProbe(
   ptsName: string | undefined,
   platform: NodeJS.Platform = process.platform
 ): PtySlaveEchoProbe | undefined {
+  return createSttyProbe(ptsName, platform, parseEchoFlag)
+}
+
+export function createPtySlaveLineEditorProbe(
+  ptsName: string | undefined,
+  platform: NodeJS.Platform = process.platform
+): PtySlaveLineEditorProbe | undefined {
+  return createSttyProbe(ptsName, platform, parseLineEditorState)
+}
+
+function createSttyProbe<T extends string>(
+  ptsName: string | undefined,
+  platform: NodeJS.Platform,
+  parse: (output: string) => T | 'unknown'
+): (() => Promise<T | 'unknown'>) | undefined {
   if (platform === 'win32' || !ptsName) {
     return undefined
   }
@@ -101,6 +133,6 @@ export function createPtySlaveEchoProbe(
     })
     const result = await inFlight
     unavailable = result.permanent
-    return result.state
+    return result.stdout === null ? 'unknown' : parse(result.stdout)
   }
 }
diff --git a/src/shared/remote-runtime-client.test.ts b/src/shared/remote-runtime-client.test.ts
index 9ead47f4067..4c3bfba011e 100644
--- a/src/shared/remote-runtime-client.test.ts
+++ b/src/shared/remote-runtime-client.test.ts
@@ -35,6 +35,25 @@ afterEach(async () => {
 })
 
 describe('subscribeRemoteRuntimeRequest', () => {
+  it('serializes the expected runtime fence on subscription requests', async () => {
+    const server = await createSubscriptionServer()
+    const subscription = await subscribeRemoteRuntimeRequest(
+      server.pairing,
+      'terminal.subscribe',
+      {},
+      1000,
+      { onResponse: vi.fn(), onError: vi.fn() },
+      undefined,
+      { expectedRuntimeId: 'runtime-1' }
+    )
+
+    await expect(server.nextRequest).resolves.toMatchObject({
+      method: 'terminal.subscribe',
+      expectedRuntimeId: 'runtime-1'
+    })
+    subscription.close()
+  })
+
   it('includes WebSocket close details when subscription admission is rejected', async () => {
     const server = await createClosingServer(1013, 'Maximum connections reached')
 
@@ -335,6 +354,7 @@ async function createSubscriptionServer(
   pairing: PairingOffer
   nextBinary: Promise<Uint8Array>
   nextAuth: Promise<unknown>
+  nextRequest: Promise<Record<string, unknown>>
 }> {
   const serverKeyPair = generateKeyPair()
   let resolveBinary: (bytes: Uint8Array) => void = () => {}
@@ -345,6 +365,10 @@ async function createSubscriptionServer(
   const nextAuth = new Promise<unknown>((resolve) => {
     resolveAuth = resolve
   })
+  let resolveRequest: (request: Record<string, unknown>) => void = () => {}
+  const nextRequest = new Promise<Record<string, unknown>>((resolve) => {
+    resolveRequest = resolve
+  })
   const wss = new WebSocketServer({ port: 0, autoPong: options.disableAutoPong !== true })
   servers.push(wss)
 
@@ -386,7 +410,8 @@ async function createSubscriptionServer(
         return
       }
 
-      const request = JSON.parse(plaintext) as { id: string }
+      const request = JSON.parse(plaintext) as { id: string } & Record<string, unknown>
+      resolveRequest(request)
       sendEncrypted(ws, sharedKey, {
         id: request.id,
         ok: true,
@@ -419,7 +444,7 @@ async function createSubscriptionServer(
   if (!pairing) {
     throw new Error('Failed to create test pairing')
   }
-  return { pairing, nextBinary, nextAuth }
+  return { pairing, nextBinary, nextAuth, nextRequest }
 }
 
 function sendEncrypted(ws: WebSocket, sharedKey: Uint8Array, message: unknown): void {
diff --git a/src/shared/remote-runtime-client.ts b/src/shared/remote-runtime-client.ts
index f147ed4e7bb..3b308724b57 100644
--- a/src/shared/remote-runtime-client.ts
+++ b/src/shared/remote-runtime-client.ts
@@ -144,16 +144,12 @@ async function sendRemoteRuntimeRequestOnSocket<TResult>(
   })
   const pendingRequest = {
     preparedRequest: prepareRemoteRuntimeRequest(new Map(), () =>
-      serializeRemoteRuntimePayload({
-        id: requestId,
+      serializeRemoteRuntimeRpcRequest({
+        requestId,
         deviceToken: pairing.deviceToken,
         method,
         params,
-        orchestrationCapability: envelope?.orchestrationCapability,
-        orchestrationContractVersion: envelope?.orchestrationContractVersion,
-        orchestrationRequestId: envelope?.orchestrationRequestId,
-        compatibilityInvocationId: envelope?.compatibilityInvocationId,
-        orchestrationCompatibilityEvidence: envelope?.orchestrationCompatibilityEvidence
+        envelope
       })
     )
   }
@@ -501,14 +497,16 @@ export async function subscribeRemoteRuntimeRequest<TResult>(
   params: unknown,
   timeoutMs: number,
   callbacks: RemoteRuntimeSubscriptionCallbacks<TResult>,
-  livenessOptions?: RemoteRuntimeSocketLivenessOptions
+  livenessOptions?: RemoteRuntimeSocketLivenessOptions,
+  envelope?: RuntimeOrchestrationEnvelope
 ): Promise<RemoteRuntimeSubscription> {
   const requestId = randomUUID()
   const serializedRequest = serializeRemoteRuntimeRpcRequest({
     requestId,
     deviceToken: pairing.deviceToken,
     method,
-    params
+    params,
+    envelope
   })
   const serializedAuth = serializeRemoteRuntimePayload({
     type: 'e2ee_auth',
diff --git a/src/shared/remote-runtime-memory-limits.ts b/src/shared/remote-runtime-memory-limits.ts
index 8152f58ef66..8b5ce04cc56 100644
--- a/src/shared/remote-runtime-memory-limits.ts
+++ b/src/shared/remote-runtime-memory-limits.ts
@@ -3,6 +3,7 @@ import {
   stringifyJsonWithinByteLimit
 } from './node-bounded-json-stringify'
 import { RemoteRuntimeClientError } from './remote-runtime-client-error'
+import type { RuntimeOrchestrationEnvelope } from './runtime-rpc-envelope'
 
 export const REMOTE_RUNTIME_MAX_OUTBOUND_JSON_BYTES = 4 * 1024 * 1024
 export const REMOTE_RUNTIME_MAX_WEBSOCKET_FRAME_BYTES = 8 * 1024 * 1024 + 64
@@ -63,12 +64,19 @@ export function serializeRemoteRuntimeRpcRequest(args: {
   deviceToken: string
   method: string
   params: unknown
+  envelope?: RuntimeOrchestrationEnvelope
 }): string {
   return serializeRemoteRuntimePayload({
     id: args.requestId,
     deviceToken: args.deviceToken,
     method: args.method,
-    params: args.params
+    params: args.params,
+    expectedRuntimeId: args.envelope?.expectedRuntimeId,
+    orchestrationCapability: args.envelope?.orchestrationCapability,
+    orchestrationContractVersion: args.envelope?.orchestrationContractVersion,
+    orchestrationRequestId: args.envelope?.orchestrationRequestId,
+    compatibilityInvocationId: args.envelope?.compatibilityInvocationId,
+    orchestrationCompatibilityEvidence: args.envelope?.orchestrationCompatibilityEvidence
   })
 }
 
diff --git a/src/shared/remote-runtime-shared-control-admission.ts b/src/shared/remote-runtime-shared-control-admission.ts
index e526ba1bb95..f6638ed7f63 100644
--- a/src/shared/remote-runtime-shared-control-admission.ts
+++ b/src/shared/remote-runtime-shared-control-admission.ts
@@ -12,6 +12,7 @@ export function admitSharedControlSubscription(args: {
   deviceToken: string
   method: string
   params: unknown
+  expectedRuntimeId?: string
 }): number {
   if (args.subscriptions.size >= REMOTE_RUNTIME_MAX_SUBSCRIPTIONS) {
     throw new RemoteRuntimeClientError(
@@ -33,12 +34,18 @@ export function admitSharedControlSubscription(args: {
   return retainedParamsBytes
 }
 
-function serializeRequest(args: { deviceToken: string; method: string; params: unknown }): void {
+function serializeRequest(args: {
+  deviceToken: string
+  method: string
+  params: unknown
+  expectedRuntimeId?: string
+}): void {
   serializeRemoteRuntimeRpcRequest({
     requestId: '00000000-0000-4000-8000-000000000000',
     deviceToken: args.deviceToken,
     method: args.method,
-    params: args.params
+    params: args.params,
+    envelope: { expectedRuntimeId: args.expectedRuntimeId }
   })
 }
 
diff --git a/src/shared/remote-runtime-shared-control-connection.test.ts b/src/shared/remote-runtime-shared-control-connection.test.ts
index 66a57a92e52..f85b1d8fa6b 100644
--- a/src/shared/remote-runtime-shared-control-connection.test.ts
+++ b/src/shared/remote-runtime-shared-control-connection.test.ts
@@ -78,6 +78,37 @@ describe('RemoteRuntimeSharedControlConnection', () => {
     connection.close()
   })
 
+  it('preserves orchestration authority fields on shared-control requests', async () => {
+    const server = await createServer()
+    const connection = new RemoteRuntimeSharedControlConnection(server.pairing)
+    const envelope = {
+      orchestrationCapability: 'capability',
+      orchestrationContractVersion: 1,
+      orchestrationRequestId: 'request-1',
+      compatibilityInvocationId: 'compatibility-1',
+      orchestrationCompatibilityEvidence: {
+        terminalHandle: 'term-1',
+        paneKey: 'pane-1',
+        launchToken: 'launch-1'
+      },
+      id: 'forged-id',
+      deviceToken: 'forged-token',
+      method: 'orchestration.federationAck',
+      params: { dispatchId: 'forged-dispatch' }
+    }
+
+    await connection.request('orchestration.federationPull', {}, 1000, envelope)
+
+    expect(server.requests).toContainEqual({
+      ...envelope,
+      id: expect.any(String),
+      deviceToken: 'device-token',
+      method: 'orchestration.federationPull',
+      params: {}
+    })
+    connection.close()
+  })
+
   it('does not expose a binary sender on the shared control protocol surface', () => {
     expect('sendSharedControlEncryptedBinary' in sharedControlProtocol).toBe(false)
   })
diff --git a/src/shared/remote-runtime-shared-control-connection.ts b/src/shared/remote-runtime-shared-control-connection.ts
index 524b6697931..93925ccf15e 100644
--- a/src/shared/remote-runtime-shared-control-connection.ts
+++ b/src/shared/remote-runtime-shared-control-connection.ts
@@ -1,6 +1,5 @@
 import WebSocket from 'ws'
 import type { PairingOffer } from './pairing'
-import type { RuntimeRpcResponse } from './runtime-rpc-envelope'
 import type { RemoteRuntimeClientError } from './remote-runtime-client-error'
 import { remoteRuntimeUnavailableError } from './remote-runtime-request-frames'
 import { openSharedControlSocket } from './remote-runtime-shared-control-open'
@@ -38,7 +37,7 @@ export class RemoteRuntimeSharedControlConnection {
   private sharedKey: Uint8Array | null = null
   private socketCleanup: (() => void) | null = null
   private readonly reconnect = new SharedControlReconnectScheduler()
-  private readonly readyStableReset: SharedControlReadyStableResetTimer
+  private readonly stableReset: SharedControlReadyStableResetTimer
   private intentionallyClosed = false
   private lastConnectedAt: number | null = null
   private lastClose: { code: number; reason: string } | null = null
@@ -52,28 +51,28 @@ export class RemoteRuntimeSharedControlConnection {
 
   constructor(
     private readonly pairing: PairingOffer,
-    private readonly options: {
+    private readonly opts: {
       environmentId?: string
       reconnectStableResetMs?: number
       liveness?: RemoteRuntimeSocketLivenessOptions
     } = {}
   ) {
-    this.readyStableReset = new SharedControlReadyStableResetTimer(
-      options.reconnectStableResetMs ?? 30_000
-    )
+    this.stableReset = new SharedControlReadyStableResetTimer(opts.reconnectStableResetMs ?? 30_000)
   }
 
   request<TResult>(
     method: string,
     params: unknown,
-    timeoutMs: number
-  ): Promise<RuntimeRpcResponse<TResult>> {
-    return requestSharedControl({
+    timeoutMs: number,
+    envelope?: Parameters<typeof requestSharedControl>[0]['envelope']
+  ): ReturnType<typeof requestSharedControl<TResult>> {
+    return requestSharedControl<TResult>({
       pendingRequests: this.pendingRequests,
       deviceToken: this.pairing.deviceToken,
       method,
       params,
       timeoutMs,
+      envelope,
       ensureReady: () => this.ensureReadyWithTimeout(timeoutMs),
       send: (requestId) => this.sendRequest(requestId),
       retireRequestId: (requestId) => this.retiredRequestIds.retire(requestId)
@@ -84,13 +83,15 @@ export class RemoteRuntimeSharedControlConnection {
     method: string,
     params: unknown,
     timeoutMs: number,
-    callbacks: SharedControlSubscriptionCallbacks<TResult>
+    callbacks: SharedControlSubscriptionCallbacks<TResult>,
+    expectedRuntimeId?: string
   ): Promise<RemoteRuntimeSharedSubscription> {
     return startSharedControlSubscription({
       subscriptions: this.subscriptions,
       deviceToken: this.pairing.deviceToken,
       method,
       params,
+      expectedRuntimeId,
       callbacks,
       ensureReady: () => this.ensureReadyWithTimeout(timeoutMs),
       sendSubscription: (subscription) => this.sendSubscription(subscription),
@@ -181,7 +182,7 @@ export class RemoteRuntimeSharedControlConnection {
       onError: (error) => this.handleSocketClosed(error, socketGeneration),
       onTextFrame: (frame) => this.handleTextFrame(frame, socketGeneration),
       liveness: {
-        options: this.options.liveness,
+        options: this.opts.liveness,
         onDead: (error) => this.handleSocketClosed(error, socketGeneration)
       }
     })
@@ -203,7 +204,7 @@ export class RemoteRuntimeSharedControlConnection {
       frame,
       state: this.state,
       sharedKey: this.sharedKey,
-      environmentId: this.options.environmentId,
+      environmentId: this.opts.environmentId,
       deviceToken: this.pairing.deviceToken,
       pendingRequests: this.pendingRequests,
       subscriptions: this.subscriptions,
@@ -216,7 +217,7 @@ export class RemoteRuntimeSharedControlConnection {
       sendEncrypted: (payload) => this.sendEncrypted(payload),
       markReady: () => {
         this.lastConnectedAt = Date.now()
-        this.readyStableReset.schedule({
+        this.stableReset.schedule({
           getState: () => this.state,
           getSocket: () => this.ws,
           reset: () => this.reconnect.resetAttempt()
@@ -300,7 +301,7 @@ export class RemoteRuntimeSharedControlConnection {
 
   private closeSocket(error?: Error, preserveReadyWaitersAndPendingRequests = false): void {
     closeSharedControlSocket({
-      environmentId: this.options.environmentId,
+      environmentId: this.opts.environmentId,
       state: this.state,
       pendingRequests: this.pendingRequests,
       subscriptions: this.subscriptions,
@@ -310,7 +311,7 @@ export class RemoteRuntimeSharedControlConnection {
       ws: this.ws,
       error,
       preserveReadyWaitersAndPendingRequests,
-      clearReadyStableTimer: () => this.readyStableReset.clear()
+      clearReadyStableTimer: () => this.stableReset.clear()
     })
     this.ws = this.sharedKey = null
     this.socketCleanup = null
diff --git a/src/shared/remote-runtime-shared-control-ready.ts b/src/shared/remote-runtime-shared-control-ready.ts
index 23461245d0d..9d0a92c500c 100644
--- a/src/shared/remote-runtime-shared-control-ready.ts
+++ b/src/shared/remote-runtime-shared-control-ready.ts
@@ -37,7 +37,7 @@ export function waitForSharedControlReadyWithTimeout(args: {
       }
       settled = true
       const index = args.readyWaiters.indexOf(waiter)
-      if (index >= 0) {
+      if (index !== -1) {
         args.readyWaiters.splice(index, 1)
       }
       reject(remoteRuntimeUnavailableError())
@@ -65,7 +65,7 @@ export function waitForSharedControlReadyWithTimeout(args: {
       args.open()
     } catch (error) {
       const index = args.readyWaiters.indexOf(waiter)
-      if (index >= 0) {
+      if (index !== -1) {
         args.readyWaiters.splice(index, 1)
       }
       waiter.reject(error instanceof Error ? error : remoteRuntimeUnavailableError(String(error)))
diff --git a/src/shared/remote-runtime-shared-control-requests.ts b/src/shared/remote-runtime-shared-control-requests.ts
index 8379e53da91..5c55c3d11b6 100644
--- a/src/shared/remote-runtime-shared-control-requests.ts
+++ b/src/shared/remote-runtime-shared-control-requests.ts
@@ -6,7 +6,7 @@ import {
   type RemoteRuntimePreparedRequest
 } from './remote-runtime-prepared-request-admission'
 import { remoteRuntimeTimeoutError } from './remote-runtime-request-frames'
-import type { RuntimeRpcResponse } from './runtime-rpc-envelope'
+import type { RuntimeOrchestrationEnvelope, RuntimeRpcResponse } from './runtime-rpc-envelope'
 import { toRemoteRuntimeClientError } from './remote-runtime-shared-control-protocol'
 import { rejectSharedControlPendingRequest } from './remote-runtime-shared-control-state'
 import type { SharedControlPendingRequest } from './remote-runtime-shared-control-types'
@@ -19,6 +19,7 @@ export function requestSharedControl<TResult>(args: {
   method: string
   params: unknown
   timeoutMs: number
+  envelope?: RuntimeOrchestrationEnvelope
   ensureReady: () => Promise<void>
   send: (requestId: string) => void
   retireRequestId?: (requestId: string) => void
@@ -35,7 +36,8 @@ export function requestSharedControl<TResult>(args: {
         requestId,
         deviceToken: args.deviceToken,
         method: args.method,
-        params: args.params
+        params: args.params,
+        envelope: args.envelope
       })
     )
   } catch (error) {
diff --git a/src/shared/remote-runtime-shared-control-send.ts b/src/shared/remote-runtime-shared-control-send.ts
index 2a7ff16cfa5..1862751cd6b 100644
--- a/src/shared/remote-runtime-shared-control-send.ts
+++ b/src/shared/remote-runtime-shared-control-send.ts
@@ -36,7 +36,8 @@ export function sendSharedControlSubscription(args: {
       id: args.subscription.requestId,
       deviceToken: args.deviceToken,
       method: args.subscription.method,
-      params: args.subscription.params
+      params: args.subscription.params,
+      expectedRuntimeId: args.subscription.expectedRuntimeId
     })
   ) {
     args.subscription.sent = true
diff --git a/src/shared/remote-runtime-shared-control-subscription-start.ts b/src/shared/remote-runtime-shared-control-subscription-start.ts
index 2b22aaabc5b..1cc4a91a5a8 100644
--- a/src/shared/remote-runtime-shared-control-subscription-start.ts
+++ b/src/shared/remote-runtime-shared-control-subscription-start.ts
@@ -14,6 +14,7 @@ export async function startSharedControlSubscription<TResult>(args: {
   deviceToken: string
   method: string
   params: unknown
+  expectedRuntimeId?: string
   callbacks: SharedControlSubscriptionCallbacks<TResult>
   ensureReady: () => Promise<void>
   sendSubscription: (subscription: SharedControlLogicalSubscription<unknown>) => void
@@ -23,13 +24,15 @@ export async function startSharedControlSubscription<TResult>(args: {
     subscriptions: args.subscriptions,
     deviceToken: args.deviceToken,
     method: args.method,
-    params: args.params
+    params: args.params,
+    expectedRuntimeId: args.expectedRuntimeId
   })
   const requestId = randomUUID()
   const subscription = createSharedControlSubscription({
     requestId,
     method: args.method,
     params: args.params,
+    expectedRuntimeId: args.expectedRuntimeId,
     retainedParamsBytes,
     callbacks: args.callbacks
   })
diff --git a/src/shared/remote-runtime-shared-control-subscriptions.test.ts b/src/shared/remote-runtime-shared-control-subscriptions.test.ts
index de5d5718b55..b61b2eff34e 100644
--- a/src/shared/remote-runtime-shared-control-subscriptions.test.ts
+++ b/src/shared/remote-runtime-shared-control-subscriptions.test.ts
@@ -1,5 +1,6 @@
 import { describe, expect, it, vi } from 'vitest'
 import type { RuntimeRpcResponse } from './runtime-rpc-envelope'
+import { sendSharedControlSubscription } from './remote-runtime-shared-control-send'
 import {
   closeSharedControlLogicalSubscription,
   createSharedControlSubscription,
@@ -33,6 +34,39 @@ function okResponse(subscriptionId: string): RuntimeRpcResponse<unknown> {
 }
 
 describe('closeSharedControlLogicalSubscription — replay-window leak', () => {
+  it('preserves the runtime fence when reconnect replay resends a subscription', () => {
+    const subscriptions = new Map<string, SharedControlLogicalSubscription<unknown>>()
+    const subscription = createSharedControlSubscription({
+      requestId: 'req-fenced',
+      method: 'runtime.clientEvents.subscribe',
+      params: null,
+      expectedRuntimeId: 'runtime-1',
+      retainedParamsBytes: 0,
+      callbacks: { onResponse: vi.fn(), onError: vi.fn() }
+    })
+    subscriptions.set(subscription.requestId, subscription)
+    const payloads: unknown[] = []
+    const send = (current: SharedControlLogicalSubscription<unknown>): void =>
+      sendSharedControlSubscription({
+        subscriptions,
+        subscription: current,
+        deviceToken: 'device-token',
+        send: (payload) => {
+          payloads.push(payload)
+          return true
+        }
+      })
+
+    send(subscription)
+    replaySharedControlSubscriptions({ subscriptions, send })
+
+    expect(payloads).toHaveLength(2)
+    expect(payloads).toEqual([
+      expect.objectContaining({ expectedRuntimeId: 'runtime-1' }),
+      expect.objectContaining({ expectedRuntimeId: 'runtime-1' })
+    ])
+  })
+
   it('sends the unsubscribe when closed after an established subscribe replay completes', () => {
     const { subscriptions, subscription } = makeSubscriptions()
     // First establishment: server assigned a concrete subscription id.
diff --git a/src/shared/remote-runtime-shared-control-subscriptions.ts b/src/shared/remote-runtime-shared-control-subscriptions.ts
index 4a93076d23f..92da86bcd5d 100644
--- a/src/shared/remote-runtime-shared-control-subscriptions.ts
+++ b/src/shared/remote-runtime-shared-control-subscriptions.ts
@@ -14,6 +14,7 @@ export function createSharedControlSubscription<TResult>(args: {
   requestId: string
   method: string
   params: unknown
+  expectedRuntimeId?: string
   retainedParamsBytes: number
   callbacks: SharedControlSubscriptionCallbacks<TResult>
 }): SharedControlLogicalSubscription<TResult> {
@@ -21,6 +22,7 @@ export function createSharedControlSubscription<TResult>(args: {
     requestId: args.requestId,
     method: args.method,
     params: args.params,
+    expectedRuntimeId: args.expectedRuntimeId,
     retainedParamsBytes: args.retainedParamsBytes,
     callbacks: args.callbacks,
     sent: false,
diff --git a/src/shared/remote-runtime-shared-control-types.ts b/src/shared/remote-runtime-shared-control-types.ts
index c6e55134762..592fdc47168 100644
--- a/src/shared/remote-runtime-shared-control-types.ts
+++ b/src/shared/remote-runtime-shared-control-types.ts
@@ -33,6 +33,7 @@ export type SharedControlLogicalSubscription<TResult = unknown> = {
   requestId: string
   method: string
   params: unknown
+  expectedRuntimeId?: string
   retainedParamsBytes: number
   callbacks: SharedControlSubscriptionCallbacks<TResult>
   sent: boolean
diff --git a/src/shared/repro-13889-claude-quarter-circle-busy-title.test.ts b/src/shared/repro-13889-claude-quarter-circle-busy-title.test.ts
new file mode 100644
index 00000000000..6156489a567
--- /dev/null
+++ b/src/shared/repro-13889-claude-quarter-circle-busy-title.test.ts
@@ -0,0 +1,99 @@
+import { describe, expect, it } from 'vitest'
+
+import {
+  clearWorkingIndicators,
+  createAgentStatusTracker,
+  detectAgentStatusFromTitle,
+  getAgentLabel,
+  isClaudeAgent
+} from './agent-detection'
+import { isDecorativeAgentTitleFrameChange } from './agent-decorative-title-signature'
+import { stripLeadingAgentTitleDecoration } from './agent-title-decoration'
+import { resolveExplicitTerminalTitleAgentType } from './terminal-title-agent-type'
+
+// Titles captured from real `claude` binaries running the same one-line prompt.
+// 2.1.228 swapped the busy spinner from braille to quarter circles, which read as
+// "no agent" and made the tracker report a confirmed exit mid-turn (#13889).
+const BUSY_2_1_227 = ['⠂ Claude Code', '⠐ Claude Code', '⠂ Say hi in one word'] as const
+const BUSY_2_1_228 = ['◐ Claude Code', '◑ Claude Code', '◑ Say hi in one word'] as const
+
+const CAPTURED_2_1_228_TURN = [
+  '✳ Claude Code',
+  '◐ Claude Code',
+  '◑ Claude Code',
+  '◑ Say hi in one word',
+  '◐ Say hi in one word',
+  '✳ Say hi in one word'
+] as const
+
+function trackTurn(titles: readonly string[]): string[] {
+  const events: string[] = []
+  const tracker = createAgentStatusTracker(
+    () => events.push('idle'),
+    () => events.push('working'),
+    () => events.push('exited')
+  )
+  for (const title of titles) {
+    tracker.handleTitle(title)
+  }
+  return events
+}
+
+describe('Claude Code quarter-circle busy titles (#13889)', () => {
+  it('reports working for every quarter-circle spinner frame', () => {
+    for (const title of ['◐ Claude Code', '◑ Claude Code', '◒ Claude Code', '◓ Claude Code']) {
+      expect(detectAgentStatusFromTitle(title)).toBe('working')
+    }
+  })
+
+  it('reports working when the busy title carries task text instead of the agent name', () => {
+    // Why: the summary-bearing frame has no "claude" token, so it previously fell
+    // through to null — the value the tracker reads as an exit.
+    expect(detectAgentStatusFromTitle('◐ Say hi in one word')).toBe('working')
+  })
+
+  it('keeps Claude identity while busy', () => {
+    for (const title of BUSY_2_1_228) {
+      expect(isClaudeAgent(title)).toBe(true)
+      expect(getAgentLabel(title)).toBe('Claude Code')
+    }
+  })
+
+  it('matches 2.1.227 status and identity frame for frame', () => {
+    BUSY_2_1_228.forEach((title, index) => {
+      const braille = BUSY_2_1_227[index]
+      expect(detectAgentStatusFromTitle(title)).toBe(detectAgentStatusFromTitle(braille))
+      expect(getAgentLabel(title)).toBe(getAgentLabel(braille))
+      expect(resolveExplicitTerminalTitleAgentType(title)).toBe(
+        resolveExplicitTerminalTitleAgentType(braille)
+      )
+    })
+  })
+
+  it('never confirms an agent exit across a real 2.1.228 turn', () => {
+    const events = trackTurn(CAPTURED_2_1_228_TURN)
+    expect(events).not.toContain('exited')
+    expect(events).toEqual(['working', 'idle'])
+  })
+
+  it('tracks the 2.1.228 turn exactly like the 2.1.227 turn', () => {
+    const brailleTurn = CAPTURED_2_1_228_TURN.map((title) =>
+      title.replace('◐', '⠂').replace('◑', '⠐')
+    )
+    expect(trackTurn(CAPTURED_2_1_228_TURN)).toEqual(trackTurn(brailleTurn))
+  })
+
+  it('strips the spinner from stale exit titles and displayed labels', () => {
+    expect(clearWorkingIndicators('◐ Say hi in one word')).toBe('Say hi in one word')
+    expect(stripLeadingAgentTitleDecoration('◐ Claude Code')).toBe('Claude Code')
+  })
+
+  it('treats a spinner tick as decoration, not a title change', () => {
+    expect(isDecorativeAgentTitleFrameChange('◐ Say hi', '◑ Say hi')).toBe(true)
+  })
+
+  it('does not claim Gemini’s ◇ idle glyph, which neighbors the spinner block', () => {
+    expect(detectAgentStatusFromTitle('◇ Gemini CLI')).toBe('idle')
+    expect(getAgentLabel('◇ Gemini CLI')).toBe('Gemini CLI')
+  })
+})
diff --git a/src/shared/runtime-rpc-envelope.ts b/src/shared/runtime-rpc-envelope.ts
index d407de72cb9..38cbc4659b1 100644
--- a/src/shared/runtime-rpc-envelope.ts
+++ b/src/shared/runtime-rpc-envelope.ts
@@ -76,6 +76,8 @@ export type RuntimeRpcFailure = {
 export type RuntimeRpcResponse<TResult> = RuntimeRpcSuccess<TResult> | RuntimeRpcFailure
 
 export type RuntimeOrchestrationEnvelope = {
+  /** Reject before dispatch when the request reaches a replacement runtime. */
+  expectedRuntimeId?: string
   orchestrationCapability?: string
   orchestrationContractVersion?: number
   orchestrationRequestId?: string
diff --git a/src/shared/runtime-types.ts b/src/shared/runtime-types.ts
index af02b02e484..079a416749a 100644
--- a/src/shared/runtime-types.ts
+++ b/src/shared/runtime-types.ts
@@ -404,12 +404,19 @@ export type RuntimeTerminalPathOpenTarget =
       provider: 'local' | 'ssh'
       absolutePath: string
       grantId: string
+      /** Present when the exact-path grant permits preview/read but not mutation. */
+      readOnly?: true
     }
   | {
       kind: 'unsupported'
       reason: string
     }
 
+export type RuntimeNativeChatFileContext = {
+  tabId: string
+  sessionId: string
+}
+
 /** Result of resolving a file path tapped in the mobile terminal against the
  *  selected or sibling workspace root (+ optional cwd). relativePath is null
  *  when no workspace on the same execution host owns the path. */
diff --git a/src/shared/secure-file-fsync-flags.test.ts b/src/shared/secure-file-fsync-flags.test.ts
new file mode 100644
index 00000000000..15505151aef
--- /dev/null
+++ b/src/shared/secure-file-fsync-flags.test.ts
@@ -0,0 +1,89 @@
+import { chmodSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
+import type * as NodeFs from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { afterEach, describe, expect, it, vi } from 'vitest'
+
+const openedPaths = vi.hoisted(
+  () => [] as { path: string; flags: string | number; ownerWritable: boolean }[]
+)
+
+vi.mock('node:fs', async () => {
+  const actual = await vi.importActual<typeof NodeFs>('node:fs')
+  return {
+    ...actual,
+    openSync: (path: NodeFs.PathLike, flags: string | number, mode?: NodeFs.Mode) => {
+      openedPaths.push({
+        path: String(path),
+        flags,
+        ownerWritable: Boolean(actual.statSync(path).mode & 0o200)
+      })
+      return actual.openSync(path, flags, mode)
+    }
+  }
+})
+
+import {
+  bestEffortFsyncDirectorySync,
+  fsyncFileSync,
+  writeDurableSecureJsonFile
+} from './secure-file'
+
+const createdPaths: string[] = []
+
+afterEach(() => {
+  openedPaths.length = 0
+  for (const path of createdPaths.splice(0)) {
+    rmSync(path, { recursive: true, force: true })
+  }
+})
+
+describe('secure file fsync flags', () => {
+  const windowsIt = process.platform === 'win32' ? it : it.skip
+  windowsIt('opens files read/write before fsync on Windows', () => {
+    const directory = mkdtempSync(join(tmpdir(), 'orca-file-fsync-'))
+    createdPaths.push(directory)
+    const path = join(directory, 'record.json')
+    writeFileSync(path, '{}')
+
+    fsyncFileSync(path)
+
+    expect(openedPaths).toMatchObject([{ path, flags: 'r+' }])
+  })
+
+  const posixIt = process.platform === 'win32' ? it.skip : it
+  posixIt('fsyncs files without owner-write permission', () => {
+    const directory = mkdtempSync(join(tmpdir(), 'orca-file-fsync-read-only-'))
+    createdPaths.push(directory)
+    const path = join(directory, 'record.json')
+    writeFileSync(path, '{}')
+    chmodSync(path, 0o400)
+
+    expect(() => fsyncFileSync(path)).not.toThrow()
+    expect(openedPaths).toEqual([{ path, flags: 'r', ownerWritable: false }])
+  })
+
+  posixIt('durably writes when umask removes owner-write from the temporary file', () => {
+    const directory = mkdtempSync(join(tmpdir(), 'orca-durable-file-fsync-read-only-'))
+    createdPaths.push(directory)
+    const path = join(directory, 'record.json')
+    const originalUmask = process.umask(0o200)
+
+    try {
+      expect(() => writeDurableSecureJsonFile(path, { ok: true })).not.toThrow()
+    } finally {
+      process.umask(originalUmask)
+    }
+
+    expect(openedPaths[0]).toMatchObject({ flags: 'r', ownerWritable: false })
+  })
+
+  posixIt('opens directories read-only before fsync', () => {
+    const directory = mkdtempSync(join(tmpdir(), 'orca-directory-fsync-'))
+    createdPaths.push(directory)
+
+    bestEffortFsyncDirectorySync(directory)
+
+    expect(openedPaths).toMatchObject([{ path: directory, flags: 'r' }])
+  })
+})
diff --git a/src/shared/secure-file.ts b/src/shared/secure-file.ts
index e3c38c70e09..639630c7c65 100644
--- a/src/shared/secure-file.ts
+++ b/src/shared/secure-file.ts
@@ -133,8 +133,8 @@ export function writeSecureFile(
   }
 }
 
-export function fsyncFileSync(path: string): void {
-  const descriptor = openSync(path, 'r')
+function fsyncPathSync(path: string, flags: 'r' | 'r+'): void {
+  const descriptor = openSync(path, flags)
   try {
     fsyncSync(descriptor)
   } finally {
@@ -142,12 +142,17 @@ export function fsyncFileSync(path: string): void {
   }
 }
 
+export function fsyncFileSync(path: string): void {
+  // FlushFileBuffers requires a write-capable handle on Windows.
+  fsyncPathSync(path, process.platform === 'win32' ? 'r+' : 'r')
+}
+
 export function bestEffortFsyncDirectorySync(directory: string): void {
   if (process.platform === 'win32') {
     return
   }
   try {
-    fsyncFileSync(directory)
+    fsyncPathSync(directory, 'r')
   } catch (error) {
     if (
       error instanceof Error &&
diff --git a/src/shared/setup-script-import-codex-environment.ts b/src/shared/setup-script-import-codex-environment.ts
index 77a8e48296d..d684d197497 100644
--- a/src/shared/setup-script-import-codex-environment.ts
+++ b/src/shared/setup-script-import-codex-environment.ts
@@ -136,7 +136,7 @@ function parseTomlMultilineString(
       remainder = lines[index]
     }
     const closeIndex = remainder.indexOf(delimiter)
-    if (closeIndex >= 0) {
+    if (closeIndex !== -1) {
       if (!oversized && !append(remainder.slice(0, closeIndex))) {
         oversized = true
       }
diff --git a/src/shared/setup-script-imports.ts b/src/shared/setup-script-imports.ts
index 5aa698d13d1..5c37b99dab0 100644
--- a/src/shared/setup-script-imports.ts
+++ b/src/shared/setup-script-imports.ts
@@ -186,7 +186,7 @@ function resolveSupersetScriptValue(
   }
 
   for (const field in localRecord) {
-    if (!Object.prototype.hasOwnProperty.call(localRecord, field)) {
+    if (!Object.hasOwn(localRecord, field)) {
       continue
     }
     if (field !== 'before' && field !== 'after') {
@@ -283,7 +283,7 @@ function collectUnsupportedCmuxCommandFields(
   const supportedFields = new Set(['name', 'title', 'description', 'keywords', 'command'])
   const unsupportedFields: string[] = []
   for (const field in command) {
-    if (!Object.prototype.hasOwnProperty.call(command, field)) {
+    if (!Object.hasOwn(command, field)) {
       continue
     }
     if (!supportedFields.has(field)) {
diff --git a/src/shared/shell-process-readiness.test.ts b/src/shared/shell-process-readiness.test.ts
new file mode 100644
index 00000000000..9c3abad9783
--- /dev/null
+++ b/src/shared/shell-process-readiness.test.ts
@@ -0,0 +1,73 @@
+import { mkdir, mkdtemp, rm, symlink } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { basename, dirname, join } from 'node:path'
+import { describe, expect, it } from 'vitest'
+import { parseDarwinExecutablePath, resolveShellExecutablePath } from './shell-process-readiness'
+
+describe('shell process readiness', () => {
+  it('extracts the primary text image from macOS lsof output', () => {
+    expect(parseDarwinExecutablePath('p42\nftxt\nn/bin/zsh\nftxt\nn/usr/lib/zsh/zle.so\n')).toBe(
+      '/bin/zsh'
+    )
+  })
+
+  it.skipIf(process.platform === 'win32')(
+    'resolves bare shell commands through the spawn PATH',
+    async () => {
+      const root = await mkdtemp(join(tmpdir(), 'orca-shell-path-'))
+      const link = join(root, 'shell-name')
+      await symlink(process.execPath, link)
+      try {
+        await expect(resolveShellExecutablePath('shell-name', dirname(root), root)).resolves.toBe(
+          await resolveShellExecutablePath(process.execPath, dirname(root), root)
+        )
+      } finally {
+        await rm(root, { recursive: true, force: true })
+      }
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'uses the POSIX exec default when PATH is unset',
+    async () => {
+      await expect(resolveShellExecutablePath('sh', process.cwd(), undefined)).resolves.toBe(
+        await resolveShellExecutablePath('/bin/sh', process.cwd(), '')
+      )
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'resolves relative shell paths against the PTY cwd',
+    async () => {
+      const root = await mkdtemp(join(tmpdir(), 'orca-relative-shell-'))
+      const bin = join(root, 'bin')
+      await symlink(dirname(process.execPath), bin)
+      try {
+        await expect(
+          resolveShellExecutablePath(`./bin/${basename(process.execPath)}`, root, '')
+        ).resolves.toBe(await resolveShellExecutablePath(process.execPath, root, ''))
+      } finally {
+        await rm(root, { recursive: true, force: true })
+      }
+    }
+  )
+
+  it.skipIf(process.platform === 'win32')(
+    'skips searchable directories that shadow a later PATH executable',
+    async () => {
+      const root = await mkdtemp(join(tmpdir(), 'orca-shadowed-shell-'))
+      const first = join(root, 'first')
+      const second = join(root, 'second')
+      await mkdir(join(first, 'shell-name'), { recursive: true })
+      await mkdir(second)
+      await symlink(process.execPath, join(second, 'shell-name'))
+      try {
+        await expect(
+          resolveShellExecutablePath('shell-name', root, `${first}:${second}`)
+        ).resolves.toBe(await resolveShellExecutablePath(process.execPath, root, ''))
+      } finally {
+        await rm(root, { recursive: true, force: true })
+      }
+    }
+  )
+})
diff --git a/src/shared/shell-process-readiness.ts b/src/shared/shell-process-readiness.ts
new file mode 100644
index 00000000000..2a631dcd82e
--- /dev/null
+++ b/src/shared/shell-process-readiness.ts
@@ -0,0 +1,80 @@
+import { execFile as execFileCallback } from 'node:child_process'
+import { constants } from 'node:fs'
+import { access, readlink, realpath, stat } from 'node:fs/promises'
+import { delimiter, isAbsolute, resolve } from 'node:path'
+import { promisify } from 'node:util'
+
+const execFile = promisify(execFileCallback)
+const PROCESS_READINESS_TIMEOUT_MS = 3000
+const DEFAULT_POSIX_EXEC_PATH = '/usr/bin:/bin'
+
+export type ShellProcessReadiness = {
+  executablePath: string
+  foreground: boolean
+}
+
+export function parseDarwinExecutablePath(stdout: string): string | null {
+  const lines = stdout.split(/\r?\n/)
+  const textIndex = lines.indexOf('ftxt')
+  const pathLine = textIndex === -1 ? undefined : lines[textIndex + 1]
+  return pathLine?.startsWith('n') ? pathLine.slice(1) : null
+}
+
+async function readExecutablePath(pid: number): Promise<string | null> {
+  if (process.platform === 'linux') {
+    return readlink(`/proc/${pid}/exe`)
+  }
+  if (process.platform !== 'darwin') {
+    return null
+  }
+  const { stdout } = await execFile(
+    '/usr/sbin/lsof',
+    ['-a', '-p', String(pid), '-d', 'txt', '-Fn'],
+    {
+      encoding: 'utf8',
+      timeout: PROCESS_READINESS_TIMEOUT_MS
+    }
+  )
+  return parseDarwinExecutablePath(stdout)
+}
+
+export async function readShellProcessReadiness(
+  pid: number
+): Promise<ShellProcessReadiness | null> {
+  const [executablePath, { stdout }] = await Promise.all([
+    readExecutablePath(pid),
+    execFile('ps', ['-p', String(pid), '-o', 'stat='], {
+      encoding: 'utf8',
+      timeout: PROCESS_READINESS_TIMEOUT_MS
+    })
+  ])
+  const status = stdout.trim()
+  return status && executablePath
+    ? { executablePath: await realpath(executablePath), foreground: status.includes('+') }
+    : null
+}
+
+export async function resolveShellExecutablePath(
+  shellPath: string,
+  cwd: string,
+  pathEnv: string | undefined
+): Promise<string | null> {
+  const candidates = shellPath.includes('/')
+    ? [isAbsolute(shellPath) ? shellPath : resolve(cwd, shellPath)]
+    : (
+        pathEnv ??
+        (process.platform === 'win32' ? (process.env.PATH ?? '') : DEFAULT_POSIX_EXEC_PATH)
+      )
+        .split(delimiter)
+        .map((entry) => resolve(isAbsolute(entry) ? entry : resolve(cwd, entry), shellPath))
+  for (const candidate of candidates) {
+    try {
+      await access(candidate, constants.X_OK)
+      const canonicalPath = await realpath(candidate)
+      if ((await stat(canonicalPath)).isFile()) {
+        return canonicalPath
+      }
+    } catch {}
+  }
+  return null
+}
diff --git a/src/shared/source-control-ai-actions.ts b/src/shared/source-control-ai-actions.ts
index 8b1a8acb636..19dc70aa652 100644
--- a/src/shared/source-control-ai-actions.ts
+++ b/src/shared/source-control-ai-actions.ts
@@ -195,7 +195,7 @@ export function renderSourceControlActionCommandTemplate(
       // Why: placeholder names may start with letters or underscores.
       // Why: only own keys are real variables; inherited Object.prototype names
       // (e.g. `constructor`) must stay visible instead of rendering their value.
-      if (!Object.prototype.hasOwnProperty.call(variables, name)) {
+      if (!Object.hasOwn(variables, name)) {
         return match
       }
       const value = variables[name]
diff --git a/src/shared/source-control-ai.ts b/src/shared/source-control-ai.ts
index 2ca3541916a..7445ee5b874 100644
--- a/src/shared/source-control-ai.ts
+++ b/src/shared/source-control-ai.ts
@@ -194,7 +194,7 @@ function normalizeOperationRecord<T>(
   }
   const normalized: Partial<Record<SourceControlAiOperation, T>> = {}
   for (const operation of SOURCE_CONTROL_AI_OPERATIONS) {
-    if (!Object.prototype.hasOwnProperty.call(value, operation)) {
+    if (!Object.hasOwn(value, operation)) {
       continue
     }
     const normalizedValue = normalizeValue(value[operation])
@@ -214,7 +214,7 @@ function normalizeActionRecord<T>(
   }
   const normalized: Partial<Record<SourceControlActionId, T>> = {}
   for (const actionId of SOURCE_CONTROL_ACTION_IDS) {
-    if (!Object.prototype.hasOwnProperty.call(value, actionId)) {
+    if (!Object.hasOwn(value, actionId)) {
       continue
     }
     const normalizedValue = normalizeValue(value[actionId])
@@ -388,7 +388,7 @@ function legacyPromptFromCommandTemplate(
 function hasActionAgentRecipe(recipe: {
   agentId?: TuiAgent | CustomAgentId | null
 }): recipe is { agentId: TuiAgent | CustomAgentId | null } {
-  return Object.prototype.hasOwnProperty.call(recipe, 'agentId')
+  return Object.hasOwn(recipe, 'agentId')
 }
 
 function legacyCommitMessageCoreChanges(
@@ -541,7 +541,7 @@ function mergeLegacyModelSelectionDelta<T>(
   let changed = false
   const keys = new Set([...Object.keys(legacy ?? {}), ...Object.keys(projected ?? {})])
   for (const key of keys) {
-    const legacyHasKey = Object.prototype.hasOwnProperty.call(legacy ?? {}, key)
+    const legacyHasKey = Object.hasOwn(legacy ?? {}, key)
     const legacyValue = legacy?.[key]
     if (JSON.stringify(projected?.[key]) === JSON.stringify(legacyValue)) {
       continue
@@ -994,7 +994,7 @@ function hasOwnInstruction(
   instructions: Partial<Record<SourceControlAiOperation, string | null>> | null | undefined,
   operation: SourceControlAiOperation
 ): boolean {
-  return Object.prototype.hasOwnProperty.call(instructions ?? {}, operation)
+  return Object.hasOwn(instructions ?? {}, operation)
 }
 
 function readRepoInstructionOverride(
diff --git a/src/shared/startup-command-submission.test.ts b/src/shared/startup-command-submission.test.ts
index 1006e63aa05..e25ee4c4105 100644
--- a/src/shared/startup-command-submission.test.ts
+++ b/src/shared/startup-command-submission.test.ts
@@ -1,5 +1,8 @@
 import { describe, expect, it } from 'vitest'
-import { buildStartupCommandSubmission } from './startup-command-submission'
+import {
+  buildStartupCommandSubmission,
+  isBracketedPasteSafeShell
+} from './startup-command-submission'
 
 describe('buildStartupCommandSubmission', () => {
   it('appends the submit byte to a single-line command unchanged', () => {
@@ -44,3 +47,22 @@ describe('buildStartupCommandSubmission', () => {
     ).toBe(`${command}\n`)
   })
 })
+
+describe('isBracketedPasteSafeShell', () => {
+  it('always trusts bash and zsh', () => {
+    for (const shellName of ['bash', 'zsh', 'BASH']) {
+      expect(isBracketedPasteSafeShell({ shellName, waitsForShellReady: false })).toBe(true)
+    }
+  })
+
+  it('trusts fish only behind the shell-ready barrier', () => {
+    expect(isBracketedPasteSafeShell({ shellName: 'fish', waitsForShellReady: true })).toBe(true)
+    expect(isBracketedPasteSafeShell({ shellName: 'fish', waitsForShellReady: false })).toBe(false)
+  })
+
+  it('rejects shells with no known bracketed-paste line editor', () => {
+    for (const shellName of ['sh', 'dash', 'nu', 'powershell.exe', '']) {
+      expect(isBracketedPasteSafeShell({ shellName, waitsForShellReady: true })).toBe(false)
+    }
+  })
+})
diff --git a/src/shared/startup-command-submission.ts b/src/shared/startup-command-submission.ts
index 7d97f59a271..33d84cd82b2 100644
--- a/src/shared/startup-command-submission.ts
+++ b/src/shared/startup-command-submission.ts
@@ -23,11 +23,33 @@ export type StartupCommandSubmissionOptions = {
    *  byte on `command` is preserved as-is. */
   submit: string
   /** Whether the target line editor has bracketed-paste mode active (Orca's
-   *  wrapped bash/zsh). Only wrap multiline payloads when true — a shell without
-   *  bracketed paste would echo the ESC[200~ markers as literal garbage. */
+   *  wrapped bash/zsh/fish). Only wrap multiline payloads when true — a shell
+   *  without bracketed paste would echo the ESC[200~ markers as literal garbage. */
   bracketedPasteSafe: boolean
 }
 
+/**
+ * Whether a spawned POSIX shell will read a bracketed-paste payload as one
+ * multiline command.
+ *
+ * Why fish needs the ready barrier: bash readline and zsh zle interpret the
+ * ESC[200~ wrapper out of their buffered input, but fish consumes bytes during
+ * its startup terminal-query handshake, so a payload written before its reader
+ * is up lands as literal `200~` text and the command never runs (verified
+ * against fish 4.7). Waiting for the shell-ready barrier is what makes fish
+ * paste-safe, and it is what the daemon and relay backends already require.
+ */
+export function isBracketedPasteSafeShell(args: {
+  shellName: string
+  waitsForShellReady: boolean
+}): boolean {
+  const name = args.shellName.toLowerCase()
+  if (name === 'bash' || name === 'zsh') {
+    return true
+  }
+  return name === 'fish' && args.waitsForShellReady
+}
+
 export function buildStartupCommandSubmission(
   command: string,
   { submit, bracketedPasteSafe }: StartupCommandSubmissionOptions
diff --git a/src/shared/terminal-file-link-conformance.ts b/src/shared/terminal-file-link-conformance.ts
index ec2ea0b9c64..d74af87eab2 100644
--- a/src/shared/terminal-file-link-conformance.ts
+++ b/src/shared/terminal-file-link-conformance.ts
@@ -13,7 +13,7 @@ export type TerminalFileLinkTapConformanceCase = {
 
 export function columnForTerminalFileLinkTap(testCase: TerminalFileLinkTapConformanceCase): number {
   const column = testCase.lineText.indexOf(testCase.tapText)
-  if (column < 0) {
+  if (column === -1) {
     throw new Error(`Tap text "${testCase.tapText}" not found in "${testCase.lineText}"`)
   }
   return column
diff --git a/src/shared/terminal-kitty-keyboard-flags.ts b/src/shared/terminal-kitty-keyboard-flags.ts
new file mode 100644
index 00000000000..c8c7fb735ed
--- /dev/null
+++ b/src/shared/terminal-kitty-keyboard-flags.ts
@@ -0,0 +1,13 @@
+/**
+ * Boundary validation for the optional `kittyKeyboardFlags` snapshot field
+ * shared by Electron IPC, remote JSON decoding, and tracker restore.
+ *
+ * Absent means the snapshot owner could not PROVE the state — an old remote
+ * host, an unsequenced renderer serializer, or a source with no mode metadata.
+ * That is not the same fact as a proven inactive protocol, so an unparseable
+ * value returns `undefined` rather than clamping or coercing to `0`; laundering
+ * it into known zero would make Preview commit raw text against a bit-3 TUI.
+ */
+export function parseTerminalKittyKeyboardFlags(value: unknown): number | undefined {
+  return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined
+}
diff --git a/src/shared/terminal-kitty-keyboard-mode-tracker.test.ts b/src/shared/terminal-kitty-keyboard-mode-tracker.test.ts
index 9ad2cb4d77a..57bd58abe21 100644
--- a/src/shared/terminal-kitty-keyboard-mode-tracker.test.ts
+++ b/src/shared/terminal-kitty-keyboard-mode-tracker.test.ts
@@ -147,4 +147,151 @@ describe('TerminalKittyKeyboardModeTracker', () => {
     ranAndExited.scanReplay('\x1b[>1uoutput\x1b[<u')
     expect(ranAndExited.flags).toBe(0)
   })
+
+  // `flags` is the conservative input fallback and `snapshotFlags` is
+  // the provable fact. Collapsing them lets a snapshot that carried no kitty
+  // metadata be republished downstream as "the host proved kitty is inactive",
+  // which is exactly how a Preview on a bit-3 TUI ends up sending legacy text.
+  describe('snapshot provenance', () => {
+    it("separates a fresh PTY's known zero from a snapshot's unproven zero", () => {
+      const fresh = new TerminalKittyKeyboardModeTracker()
+      expect(fresh.flags).toBe(0)
+      expect(fresh.snapshotFlags).toBe(0)
+
+      fresh.resetForSnapshot()
+      expect(fresh.flags).toBe(0)
+      expect(fresh.snapshotFlags).toBeUndefined()
+    })
+
+    it('restores known 0 and known 8 onto the active screen', () => {
+      const inactive = new TerminalKittyKeyboardModeTracker()
+      inactive.resetForSnapshot()
+      inactive.restoreSnapshotFlags(0)
+      expect(inactive.snapshotFlags).toBe(0)
+
+      const negotiated = new TerminalKittyKeyboardModeTracker()
+      negotiated.resetForSnapshot()
+      negotiated.restoreSnapshotFlags(8)
+      expect(negotiated.flags).toBe(8)
+      expect(negotiated.snapshotFlags).toBe(8)
+    })
+
+    it('ignores values that are not non-negative safe integers', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.resetForSnapshot()
+      for (const invalid of [-1, 1.5, Number.NaN, Number.MAX_SAFE_INTEGER + 2]) {
+        tracker.restoreSnapshotFlags(invalid)
+        expect(tracker.snapshotFlags).toBeUndefined()
+      }
+    })
+
+    it('re-proves state on an absolute set but not on a relative update', () => {
+      const relative = new TerminalKittyKeyboardModeTracker()
+      relative.resetForSnapshot()
+      relative.scan('\x1b[=8;2u')
+      expect(relative.flags).toBe(8)
+      // An OR against an unproven baseline cannot prove the result.
+      expect(relative.snapshotFlags).toBeUndefined()
+
+      const absolute = new TerminalKittyKeyboardModeTracker()
+      absolute.resetForSnapshot()
+      absolute.scan('\x1b[=8;1u')
+      expect(absolute.snapshotFlags).toBe(8)
+    })
+
+    it('degrades to unknown on a pop that reaches past omitted push history', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.resetForSnapshot()
+      tracker.restoreSnapshotFlags(8)
+      tracker.scan('\x1b[<u')
+      // The frame under the restored one was never captured, so zero is a guess.
+      expect(tracker.flags).toBe(0)
+      expect(tracker.snapshotFlags).toBeUndefined()
+    })
+
+    it('keeps a live push/pop pair proven when its baseline was proven', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.resetForSnapshot()
+      tracker.restoreSnapshotFlags(0)
+      tracker.scan('\x1b[>8u')
+      expect(tracker.snapshotFlags).toBe(8)
+      tracker.scan('\x1b[<u')
+      expect(tracker.snapshotFlags).toBe(0)
+    })
+
+    it('degrades to unknown on a pop that empties the stack over a nonzero frame', () => {
+      // The app's own emulator still holds pre-snapshot frames, so ITS pop
+      // restores the pushed 8 while the mirror's exhausted stack forces 0 —
+      // the forced zero must not be published as proven.
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.resetForSnapshot()
+      tracker.restoreSnapshotFlags(8)
+      tracker.scan('\x1b[>2u\x1b[<u')
+      expect(tracker.flags).toBe(0)
+      expect(tracker.snapshotFlags).toBeUndefined()
+    })
+
+    it('moves the known bit with the numeric slot across screen switches', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.resetForSnapshot()
+      tracker.restoreSnapshotFlags(8)
+      // The alternate screen's saved slot was never captured.
+      tracker.scan('\x1b[?1049h')
+      expect(tracker.snapshotFlags).toBeUndefined()
+      tracker.scan('\x1b[?1049l')
+      expect(tracker.snapshotFlags).toBe(8)
+    })
+
+    it('re-proves everything on RIS and DECSTR', () => {
+      const ris = new TerminalKittyKeyboardModeTracker()
+      ris.resetForSnapshot()
+      ris.scan('\x1bc')
+      expect(ris.snapshotFlags).toBe(0)
+
+      const softReset = new TerminalKittyKeyboardModeTracker()
+      softReset.resetForSnapshot()
+      softReset.restoreSnapshotFlags(8)
+      softReset.scan('\x1b[!p')
+      expect(softReset.snapshotFlags).toBe(0)
+    })
+  })
+
+  // A constructor-fresh tracker reports known-zero, which is only true for a
+  // PTY it watches from spawn. Grounding lets snapshot appliers refuse to
+  // preserve or carry that default for a pre-existing PTY.
+  describe('baseline grounding', () => {
+    it('starts ungrounded and grounds on an explicit fresh-PTY reset', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      expect(tracker.hasProvenBaseline).toBe(false)
+      tracker.reset()
+      expect(tracker.hasProvenBaseline).toBe(true)
+    })
+
+    it('is not grounded by plain output, only by absolute kitty evidence', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.scan('plain output\x1b[31mcolored\x1b[0m')
+      expect(tracker.hasProvenBaseline).toBe(false)
+      tracker.scan('\x1b[>8u')
+      expect(tracker.hasProvenBaseline).toBe(true)
+    })
+
+    it('grounds on a proven snapshot restore but not on the snapshot reset', () => {
+      const tracker = new TerminalKittyKeyboardModeTracker()
+      tracker.reset()
+      tracker.resetForSnapshot()
+      expect(tracker.hasProvenBaseline).toBe(false)
+      tracker.restoreSnapshotFlags(8)
+      expect(tracker.hasProvenBaseline).toBe(true)
+    })
+
+    it('grounds on RIS and DECSTR arriving in the stream', () => {
+      const ris = new TerminalKittyKeyboardModeTracker()
+      ris.scan('\x1bc')
+      expect(ris.hasProvenBaseline).toBe(true)
+
+      const softReset = new TerminalKittyKeyboardModeTracker()
+      softReset.scan('\x1b[!p')
+      expect(softReset.hasProvenBaseline).toBe(true)
+    })
+  })
 })
diff --git a/src/shared/terminal-kitty-keyboard-mode-tracker.ts b/src/shared/terminal-kitty-keyboard-mode-tracker.ts
index 2b501a2c9ff..cae87067973 100644
--- a/src/shared/terminal-kitty-keyboard-mode-tracker.ts
+++ b/src/shared/terminal-kitty-keyboard-mode-tracker.ts
@@ -1,3 +1,5 @@
+import { parseTerminalKittyKeyboardFlags } from './terminal-kitty-keyboard-flags'
+
 // Why: PTY/SSH chunks can split an escape sequence before its final byte.
 // Keep parser state far beyond normal sequence lengths while bounding memory.
 const KITTY_SCAN_TAIL_LIMIT = 4096
@@ -6,6 +8,9 @@ const KITTY_SCAN_TAIL_LIMIT = 4096
 // mirrored stacks unboundedly while the renderer's own stacks stay at 16.
 const KITTY_STACK_LIMIT = 16
 
+/** A pushed flags slot plus whether the value it will restore was ever proven. */
+type KittyStackFrame = { flags: number; known: boolean }
+
 /**
  * Mirrors the kitty keyboard protocol flag state (CSI > u push, CSI < u pop,
  * CSI = u set) by scanning the raw PTY output stream, replicating xterm's
@@ -27,16 +32,50 @@ export class TerminalKittyKeyboardModeTracker {
   private currentFlags = 0
   private mainFlags = 0
   private altFlags = 0
-  private mainStack: number[] = []
-  private altStack: number[] = []
+  private currentKnown = true
+  private mainKnown = true
+  private altKnown = true
+  private mainStack: KittyStackFrame[] = []
+  private altStack: KittyStackFrame[] = []
+  /** False once a snapshot replaced state whose push history was never observed. */
+  private mainStackComplete = true
+  private altStackComplete = true
   private alternateScreenActive = false
   private alternateScreenSwitchObserved = false
+  // Why: a constructor-fresh tracker reports known-inactive, which is correct
+  // for a PTY it watches from spawn but was never proven for a pre-existing
+  // one. Grounding flips on evidence only: an explicit fresh-PTY reset, a
+  // proven snapshot restore, or scanned bytes that state flags absolutely.
+  private baselineProven = false
 
-  /** Current effective kitty keyboard flags (0 = protocol inactive). */
+  /**
+   * Current effective kitty keyboard flags. `0` doubles as the conservative
+   * input fallback while the state is unknown — read `snapshotFlags` instead
+   * when the caller must distinguish "proven inactive" from "unproven".
+   */
   get flags(): number {
     return this.currentFlags
   }
 
+  /**
+   * Active screen's proven flags, absent when unknown: after snapshots without
+   * Kitty metadata, or transitions needing uncarried push history. Serializers
+   * publish this, never `flags` — silence must not become a proven zero.
+   */
+  get snapshotFlags(): number | undefined {
+    return this.currentKnown ? this.currentFlags : undefined
+  }
+
+  /**
+   * True once this tracker's knownness is grounded in evidence for the PTY it
+   * mirrors. Consumers use it to refuse to preserve (or carry) a constructor
+   * default across a snapshot that proves nothing — the fresh known-zero must
+   * not be laundered into a host-proven inactive protocol.
+   */
+  get hasProvenBaseline(): boolean {
+    return this.baselineProven
+  }
+
   get isAlternateScreen(): boolean {
     return this.alternateScreenActive
   }
@@ -45,17 +84,57 @@ export class TerminalKittyKeyboardModeTracker {
     return this.alternateScreenSwitchObserved
   }
 
+  /** Full reset to a fresh PTY: known-inactive on both screens. */
   reset(): void {
+    this.baselineProven = true
     this.scanTail = ''
     this.currentFlags = 0
     this.mainFlags = 0
     this.altFlags = 0
+    this.currentKnown = true
+    this.mainKnown = true
+    this.altKnown = true
     this.mainStack = []
     this.altStack = []
+    this.mainStackComplete = true
+    this.altStackComplete = true
     this.alternateScreenActive = false
     this.alternateScreenSwitchObserved = false
   }
 
+  /**
+   * Start applying a replacement or historical snapshot. Production snapshot
+   * ANSI deliberately omits kitty pushes, so scanning it can never recover a
+   * negotiation that predates the capture: keep `0` as the input fallback but
+   * mark both screens and their stacks unproven until `restoreSnapshotFlags`
+   * or explicit application output proves them again.
+   */
+  resetForSnapshot(): void {
+    this.reset()
+    this.baselineProven = false
+    this.currentKnown = false
+    this.mainKnown = false
+    this.altKnown = false
+    this.mainStackComplete = false
+    this.altStackComplete = false
+  }
+
+  /**
+   * Adopt the effective flags the snapshot owner proved at the snapshot's own
+   * sequence boundary. Only the ACTIVE screen becomes known — the inactive
+   * screen's slot and both push stacks stay unproven because current snapshot
+   * authorities expose neither.
+   */
+  restoreSnapshotFlags(flags: number): void {
+    const parsed = parseTerminalKittyKeyboardFlags(flags)
+    if (parsed === undefined) {
+      return
+    }
+    this.currentFlags = parsed
+    this.currentKnown = true
+    this.baselineProven = true
+  }
+
   scan(data: string): void {
     this.scanInternal(data, false)
   }
@@ -106,11 +185,17 @@ export class TerminalKittyKeyboardModeTracker {
     // Why: xterm's DECSTR (CSI ! p) wipes kitty flags and stacks for both
     // screens via coreService.reset but does not switch buffers — mirror that
     // so a soft-resetting TUI stops receiving kitty-encoded Option chords.
+    this.baselineProven = true
     this.currentFlags = 0
     this.mainFlags = 0
     this.altFlags = 0
+    this.currentKnown = true
+    this.mainKnown = true
+    this.altKnown = true
     this.mainStack = []
     this.altStack = []
+    this.mainStackComplete = true
+    this.altStackComplete = true
   }
 
   private applyScreenSwitch(params: string, enabled: boolean): void {
@@ -123,13 +208,19 @@ export class TerminalKittyKeyboardModeTracker {
       // Why: xterm swaps the current flags with the inactive screen's slot on
       // every 47/1047/1049 transition, without an already-active guard —
       // mirror it exactly so this state matches what the renderer encodes.
+      // Why the known bit rides the numeric slot: a screen whose flags were
+      // never proven must not become proven just by being swapped in.
       if (enabled) {
         this.mainFlags = this.currentFlags
+        this.mainKnown = this.currentKnown
         this.currentFlags = this.altFlags
+        this.currentKnown = this.altKnown
         this.alternateScreenActive = true
       } else {
         this.altFlags = this.currentFlags
+        this.altKnown = this.currentKnown
         this.currentFlags = this.mainFlags
+        this.currentKnown = this.mainKnown
         this.alternateScreenActive = false
       }
     }
@@ -143,26 +234,54 @@ export class TerminalKittyKeyboardModeTracker {
         if (stack.length >= KITTY_STACK_LIMIT) {
           stack.shift()
         }
-        stack.push(this.currentFlags)
+        stack.push({ flags: this.currentFlags, known: this.currentKnown })
       }
+      // A push states the new effective flags absolutely, so they are proven
+      // even when the value it displaced was not.
       this.currentFlags = parsed[0] || 0
+      this.currentKnown = true
+      this.baselineProven = true
       return
     }
     if (prefix === '<') {
       const count = Math.max(1, parsed[0] || 1)
-      for (let i = 0; i < count && stack.length > 0; i++) {
-        this.currentFlags = stack.pop() as number
+      let lastPopped: KittyStackFrame | null = null
+      for (let i = 0; i < count; i++) {
+        const frame = stack.pop()
+        if (!frame) {
+          lastPopped = null
+          break
+        }
+        lastPopped = frame
+        this.currentFlags = frame.flags
+        this.currentKnown = frame.known
       }
       if (stack.length === 0) {
+        // Why: xterm zeroes an exhausted stack even over a just-popped value.
+        // With complete history that matches the app's emulator exactly, but a
+        // mirror whose stack omits pre-snapshot pushes empties EARLIER than
+        // the app's — its forced zero is only proven when the popped frame
+        // itself proves 0 (the app restores that same value whatever sits
+        // below it); landing at empty on any other frame, or past it, proves
+        // nothing about the older history.
         this.currentFlags = 0
+        const stackComplete = this.alternateScreenActive
+          ? this.altStackComplete
+          : this.mainStackComplete
+        this.currentKnown =
+          stackComplete || (lastPopped !== null && lastPopped.known && lastPopped.flags === 0)
       }
       return
     }
     const flags = parsed[0] || 0
     const mode = parsed.length > 1 && parsed[1] ? parsed[1] : 1
     if (mode === 1) {
+      // An absolute set re-proves the active screen regardless of its baseline.
       this.currentFlags = flags
+      this.currentKnown = true
+      this.baselineProven = true
     } else if (mode === 2) {
+      // Relative updates only preserve knowledge; they cannot create it.
       this.currentFlags |= flags
     } else if (mode === 3) {
       this.currentFlags &= ~flags
diff --git a/src/shared/terminal-mode-2031-final-state.test.ts b/src/shared/terminal-mode-2031-final-state.test.ts
index b8e04d9f1c0..7e2f8b0cce3 100644
--- a/src/shared/terminal-mode-2031-final-state.test.ts
+++ b/src/shared/terminal-mode-2031-final-state.test.ts
@@ -4,13 +4,19 @@
 // subscription the shell has already dropped, and the reply lands as literal
 // text at the prompt or in a child's stdin (#9993).
 import { describe, expect, it } from 'vitest'
-import { scanMode2031Sequences } from './terminal-color-scheme-protocol'
+import {
+  INITIAL_MODE_2031_REPLY_SCAN_STATE,
+  scanMode2031ReplyDecision,
+  scanMode2031Sequences,
+  type Mode2031ReplyDecision
+} from './terminal-color-scheme-protocol'
 import {
   createTerminalTitleTracker,
   type TerminalTitleTrackerCallbacks
 } from './terminal-output-side-effects'
 
 const ESC = '\x1b'
+const BEL = '\x07'
 
 // A fish prompt cycle: subscribe, paint the prompt, hand the tty to the child.
 const FISH_PROMPT_HANDOFF = `${ESC}[?2031h${ESC}[0m~/orca ${ESC}[32m❯${ESC}[0m ${ESC}[?2031l`
@@ -131,3 +137,73 @@ describe('DECSET 2031 replies follow the chunk-final state (#9993)', () => {
     expect(recorded.subscribes).toBe(1)
   })
 })
+
+/**
+ * Real chunk boundaries captured from fish 4.7.1 over node-pty
+ * (tests/tools/fish-mode2031-repro/capture-fish-mode2031-trace.mjs). One prompt-accept:
+ * arm 2031 while painting the prompt, echo the typed line, withdraw 2031, exec the command.
+ * Measured gap between chunks 1 and 4 in that trace: 0.57ms — shorter than a renderer IPC hop.
+ */
+const FISH_PROMPT_ACCEPT_CHUNKS: readonly string[] = [
+  // 1. Prompt setup: capability probes plus the 2031 arm. Ends SUBSCRIBED.
+  `${ESC}]0;~/orca${BEL}${ESC}[m${ESC}]11;?${ESC}\\${ESC}[6n${ESC}[0c${ESC}[?2004h${ESC}[?2031h${ESC}[>4;1m${ESC}=`,
+  // 2. The prompt itself.
+  `${ESC}]133;A;click_events=1${BEL}~/orca ❯ ${ESC}]133;B${BEL}${ESC}[K\r${ESC}[9C`,
+  // 3. Echo of the typed command.
+  `npx${ESC}[12C -y${ESC}[15C`,
+  // 4. Accept: fish withdraws 2031 before handing the tty over. Ends UNSUBSCRIBED.
+  `${ESC}[?2004l${ESC}[?2031l${ESC}[>4;0m${ESC}>\r${ESC}[15C`,
+  // 5. The command is now running and owns the tty — any reply from chunk 1 lands HERE.
+  `${ESC}[m${ESC}]133;C;cmdline_url=npx${BEL}`
+]
+
+function trackerRecordingBothFacts(): {
+  facts: string[]
+  tracker: ReturnType<typeof createTerminalTitleTracker>
+} {
+  const facts: string[] = []
+  return {
+    facts,
+    tracker: createTerminalTitleTracker({
+      onMode2031Subscribe: () => facts.push('2031-subscribe'),
+      onMode2031Unsubscribe: () => facts.push('2031-unsubscribe')
+    })
+  }
+}
+
+describe('a fish prompt-accept burst is tracked, never answered (#9993)', () => {
+  it('yields registry transitions only — subscribe then unsubscribe, two chunks apart', () => {
+    let state = INITIAL_MODE_2031_REPLY_SCAN_STATE
+    const decisions: Mode2031ReplyDecision[] = FISH_PROMPT_ACCEPT_CHUNKS.map((chunk) => {
+      const result = scanMode2031ReplyDecision(state, chunk)
+      state = result.state
+      return result.decision
+    })
+
+    expect(decisions).toEqual(['subscribed', null, null, 'unsubscribed', null])
+    // The subscription is already retired one chunk before the command starts, so a reply
+    // queued on the 'subscribed' decision cannot reach fish — only the child that replaced it.
+    expect(decisions.indexOf('unsubscribed')).toBeLessThan(FISH_PROMPT_ACCEPT_CHUNKS.length - 1)
+  })
+
+  it('still emits both side-effect facts so the subscription registry stays truthful', () => {
+    const recorded = trackerRecordingBothFacts()
+
+    for (const chunk of FISH_PROMPT_ACCEPT_CHUNKS) {
+      recorded.tracker.handleChunk(chunk)
+    }
+
+    // Facts survive the fix: maybePushMode2031Flip needs them to know who is listening.
+    expect(recorded.facts).toEqual(['2031-subscribe', '2031-unsubscribe'])
+  })
+
+  it('contains no color-scheme query, so silence is the whole correct answer', () => {
+    const burst = FISH_PROMPT_ACCEPT_CHUNKS.join('')
+
+    // Verified over a full real session: fish never sends the protocol's query (`CSI ?996n`).
+    // It only ever subscribes, so there is nothing here that a `CSI ?997;Nn` could be a reply to.
+    expect(burst).toContain(`${ESC}[?2031h`)
+    expect(burst).not.toContain('996')
+    expect(burst).not.toContain('997')
+  })
+})
diff --git a/src/shared/terminal-output-side-effects.ts b/src/shared/terminal-output-side-effects.ts
index 31f7df27edf..d8b39e954e1 100644
--- a/src/shared/terminal-output-side-effects.ts
+++ b/src/shared/terminal-output-side-effects.ts
@@ -67,7 +67,7 @@ export type TerminalTitleTrackerCallbacks = {
   onPrLink?: (link: TerminalGitHubPRLink) => void
   /**
    * Fired per chunk containing a DECSET 2031 subscribe (chunk-boundary-safe): lets
-   * hidden-delivery-gated renderer views answer the color-scheme query without byte access.
+   * hidden-delivery-gated renderer views track the subscription without byte access.
    */
   onMode2031Subscribe?: () => void
   /**
diff --git a/src/shared/terminal-preview.ts b/src/shared/terminal-preview.ts
index 41bd7e638d5..0ca380fe8e9 100644
--- a/src/shared/terminal-preview.ts
+++ b/src/shared/terminal-preview.ts
@@ -5,12 +5,27 @@ export type TerminalPreviewSnapshot = {
   seq?: number
   scrollbackAnsi?: string
   pendingEscapeTailAnsi?: string
+  /** Effective kitty keyboard flags the snapshot owner proved at this same
+   *  `seq` boundary. Absent means unknown — Preview then keeps its tracker
+   *  unproven and commits raw text rather than guessing zero. */
+  kittyKeyboardFlags?: number
+}
+
+/**
+ * How the renderer must apply one buffered chunk. `live` is a proven
+ * post-snapshot suffix, so kitty pushes advance the stack; `replay` is
+ * redelivery that may repeat the application's one-time push, so it applies
+ * idempotently (see TerminalKittyKeyboardModeTracker.scanReplay).
+ */
+export type TerminalPreviewReplayChunk = {
+  data: string
+  mode: 'live' | 'replay'
 }
 
 export type TerminalPreviewConnectResult = {
   snapshot: TerminalPreviewSnapshot | null
   /** Live bytes captured while the snapshot was being serialized. */
-  replay: string[]
+  replay: TerminalPreviewReplayChunk[]
   /** Snapshot acquisition overflowed twice; refresh without blanking the existing view. */
   resyncRequired?: boolean
 }
diff --git a/src/shared/terminal-query-reply.ts b/src/shared/terminal-query-reply.ts
index 8e25905447a..e83f0dbcc94 100644
--- a/src/shared/terminal-query-reply.ts
+++ b/src/shared/terminal-query-reply.ts
@@ -92,8 +92,9 @@ function cookedEchoSafeReplyEnd(data: string, start: number): number {
 }
 
 /**
- * If `data` is entirely one or more consecutive cooked-echo-risk replies
- * (e.g. repeated `?997;1n` coalesced by the input write queue), return each reply.
+ * If `data` is entirely one or more consecutive cooked-echo-risk replies, return each
+ * reply. Repeats still arrive coalesced from a rapid theme flip or an older client that
+ * answers 2031 subscribes (this host stopped — #9993), so peel them individually.
  * Mixed payloads (reply + keystroke) return null so hosts fall through to raw write.
  */
 export function extractOnlyCookedEchoSafeQueryReplies(data: string): string[] | null {
diff --git a/src/shared/terminal-reply-query-scan.test.ts b/src/shared/terminal-reply-query-scan.test.ts
index 2a94eaad63d..a29ab3c98da 100644
--- a/src/shared/terminal-reply-query-scan.test.ts
+++ b/src/shared/terminal-reply-query-scan.test.ts
@@ -3,6 +3,24 @@ import {
   EMPTY_TERMINAL_REPLY_QUERY_SCAN_STATE,
   scanTerminalReplyQuerySequences
 } from './terminal-reply-query-scan'
+import {
+  INITIAL_MODE_2031_REPLY_SCAN_STATE,
+  scanMode2031ReplyDecision
+} from './terminal-color-scheme-protocol'
+
+/** Exactly what terminal.ts's subscribe path concatenates into the replay push. */
+function replayDataFor(chunks: readonly string[]): string {
+  let state = EMPTY_TERMINAL_REPLY_QUERY_SCAN_STATE
+  let seq = 0
+  let replay = ''
+  for (const chunk of chunks) {
+    const scan = scanTerminalReplyQuerySequences(chunk, seq, state)
+    state = scan.state
+    seq += chunk.length
+    replay += scan.queries.map((query) => query.data).join('')
+  }
+  return replay
+}
 
 describe('terminal reply query scan', () => {
   it('records reply-eliciting queries with their output high-water sequence', () => {
@@ -39,3 +57,56 @@ describe('terminal reply query scan', () => {
     expect(second.queries).toEqual([])
   })
 })
+
+// A late-attaching remote/mobile client is handed these sequences because the scrollback
+// snapshot it also receives carries no control bytes. Carrying the 2031 arm without its
+// withdraw made the client register a subscription the TUI had already retired, and the
+// remote renderer then pushed CSI ?997;Nn into the shell on the next theme flip (#9993).
+describe('replayed DECSET 2031 state matches the TUI final state (#9993)', () => {
+  it('carries the withdraw alongside the arm', () => {
+    const result = scanTerminalReplyQuerySequences(
+      '\x1b[?2031h\x1b[6nprompt$ \x1b[?2031l',
+      0,
+      EMPTY_TERMINAL_REPLY_QUERY_SCAN_STATE
+    )
+
+    expect(result.queries).toEqual([
+      { data: '\x1b[?2031h', startSeq: 0, endSeq: 8 },
+      { data: '\x1b[6n', startSeq: 8, endSeq: 12 },
+      { data: '\x1b[?2031l', startSeq: 20, endSeq: 28 }
+    ])
+  })
+
+  it('leaves a fish prompt-accept replay UNSUBSCRIBED, as fish actually is', () => {
+    // fish arms 2031 while painting the prompt and withdraws it before exec'ing the command.
+    const replay = replayDataFor([
+      '\x1b[?2004h\x1b[?2031h',
+      '~/orca ❯ ',
+      '\x1b[?2004l\x1b[?2031l',
+      'npx running now'
+    ])
+
+    expect(replay).toBe('\x1b[?2031h\x1b[?2031l')
+    expect(scanMode2031ReplyDecision(INITIAL_MODE_2031_REPLY_SCAN_STATE, replay).decision).toBe(
+      'unsubscribed'
+    )
+  })
+
+  it('leaves a still-armed TUI SUBSCRIBED so it keeps receiving theme flips', () => {
+    const replay = replayDataFor(['\x1b[?2031h', 'a TUI that stays subscribed'])
+
+    expect(replay).toBe('\x1b[?2031h')
+    expect(scanMode2031ReplyDecision(INITIAL_MODE_2031_REPLY_SCAN_STATE, replay).decision).toBe(
+      'subscribed'
+    )
+  })
+
+  it('resolves a rearm after a withdraw to the last toggle, in byte order', () => {
+    const replay = replayDataFor(['\x1b[?2031h', 'x\x1b[?2031l', 'y\x1b[?2031h'])
+
+    expect(replay).toBe('\x1b[?2031h\x1b[?2031l\x1b[?2031h')
+    expect(scanMode2031ReplyDecision(INITIAL_MODE_2031_REPLY_SCAN_STATE, replay).decision).toBe(
+      'subscribed'
+    )
+  })
+})
diff --git a/src/shared/terminal-reply-query-scan.ts b/src/shared/terminal-reply-query-scan.ts
index 434d37041d7..1a0d14741d2 100644
--- a/src/shared/terminal-reply-query-scan.ts
+++ b/src/shared/terminal-reply-query-scan.ts
@@ -24,7 +24,18 @@ export const EMPTY_TERMINAL_REPLY_QUERY_SCAN_STATE: TerminalReplyQueryScanState
   pendingStartSeq: null
 }
 
-function isReplyElicitingCsi(sequence: string): boolean {
+/**
+ * Sequences worth replaying to a late-attaching view, because a scrollback snapshot
+ * carries only rendered cells and drops the control bytes that produced them.
+ *
+ * Most entries are reply-eliciting queries the attaching emulator must answer once.
+ * The DECSET/DECRST 2031 pair is different: since #9993 nothing answers the subscribe,
+ * but a remote renderer derives its color-scheme subscription registry from these very
+ * bytes (pty-connection observeLiveMode2031Chunk), so both toggles must be carried —
+ * an arm without its withdraw would leave the client subscribed for a TUI that already
+ * retired the subscription, and fish rearms/withdraws on every prompt.
+ */
+function isReplayableCsi(sequence: string): boolean {
   if (DEVICE_ATTRIBUTES_QUERY_RE.test(sequence)) {
     return true
   }
@@ -41,7 +52,10 @@ function isReplyElicitingCsi(sequence: string): boolean {
     sequence === '\x1b[16t' ||
     sequence === '\x1b[18t' ||
     sequence === '\x1b[?u' ||
-    sequence === '\x1b[?2031h'
+    sequence === '\x1b[?2031h' ||
+    // Why paired with the arm above, exact-form only: replaying a combined DECRST such as
+    // `CSI ?2004;2031l` would also toggle unrelated modes in the attaching emulator.
+    sequence === '\x1b[?2031l'
   )
 }
 
@@ -81,7 +95,7 @@ export function scanTerminalReplyQuerySequences(
     if (input.startsWith(`${ESC}[`, candidateIndex)) {
       endIndex = findCsiFinalByteIndex(input, candidateIndex + 2)
       if (endIndex !== -1) {
-        matches = isReplyElicitingCsi(input.slice(candidateIndex, endIndex + 1))
+        matches = isReplayableCsi(input.slice(candidateIndex, endIndex + 1))
       }
     } else if (input.startsWith(`${ESC}]`, candidateIndex)) {
       const osc = parseTerminalOscColorQuery(input, candidateIndex)
diff --git a/src/shared/terminal-side-effect-facts.ts b/src/shared/terminal-side-effect-facts.ts
index d9c4ce6e46a..47c416aff5d 100644
--- a/src/shared/terminal-side-effect-facts.ts
+++ b/src/shared/terminal-side-effect-facts.ts
@@ -30,9 +30,8 @@ export type TerminalSideEffectFact =
   | { kind: 'command-code-working'; prompt: string }
   | { kind: 'command-code-done'; prompt: string }
   /** DECSET 2031 color-scheme subscribe observed in the byte stream. Emitted
-   *  so hidden-delivery-gated views (whose bytes never arrive) can still send
-   *  the theme reply — the reply stays renderer-side because query authority
-   *  belongs to the view (model/view contract invariant 6). */
+   *  so hidden-delivery-gated views (whose bytes never arrive) can still record
+   *  the subscription and push later theme flips; subscribing is never answered. */
   | { kind: '2031-subscribe' }
   /** DECSET 2031 withdrawal observed in the byte stream. Gated views never see
    *  these bytes, so without this fact their subscription registry goes stale
diff --git a/src/shared/terminal-title-agent-type.test.ts b/src/shared/terminal-title-agent-type.test.ts
index d20d03b5b6d..ed7203f5af3 100644
--- a/src/shared/terminal-title-agent-type.test.ts
+++ b/src/shared/terminal-title-agent-type.test.ts
@@ -64,7 +64,7 @@ describe('resolveExplicitTerminalTitleAgentType', () => {
     expect(getSharedAgentLabel('OC | Compare Codex and Claude')).toBe('OpenCode')
     expect(getSharedAgentLabel('OC | ✦ Gemini CLI')).toBe('OpenCode')
     expect(resolveExplicitTerminalTitleAgentType('tmux | OC | ses_123')).toBe('opencode')
-    expect(resolveExplicitTerminalTitleAgentType('OC|compact-session')).toBe('opencode')
+    expect(resolveExplicitTerminalTitleAgentType('OC|compact-session')).toBeNull()
     expect(resolveExplicitTerminalTitleAgentType('oc | Understand about the plugin')).toBeNull()
   })
 
diff --git a/src/shared/terminal-title-agent-type.ts b/src/shared/terminal-title-agent-type.ts
index 7e38a227f34..0952d96e63f 100644
--- a/src/shared/terminal-title-agent-type.ts
+++ b/src/shared/terminal-title-agent-type.ts
@@ -4,7 +4,7 @@ import {
   HERMES_AGENT_NAME_RE,
   titleHasAgentName
 } from './agent-name-token-match'
-import { isCursorAgentTitle } from './agent-title-core'
+import { containsAgentSpinnerGlyph, isCursorAgentTitle } from './agent-title-core'
 import { stripLeadingAgentTitleDecorationOrEmpty } from './agent-title-decoration'
 import { isOpenCodeNativeTitle } from './opencode-terminal-title'
 import { getWrapperTitleSegments } from './terminal-title-wrapper-segments'
@@ -96,7 +96,7 @@ export function isClaudeAgent(title: string): boolean {
   if (title.startsWith('. ') || title.startsWith('* ')) {
     return true
   }
-  if (containsBrailleSpinner(title)) {
+  if (containsAgentSpinnerGlyph(title)) {
     // Why: named non-Claude agents carry braille spinners too. Gate Cursor by its
     // identity title, not the token, so a Claude title mentioning a cursor stays Claude.
     return !isCursorAgentTitle(title) && !lower.includes('openclaude')
@@ -231,7 +231,7 @@ const TITLE_LABEL_TO_AGENT: Partial<Record<string, TuiAgent>> = {
 
 function hasGenericClaudeStatusPrefix(title: string): boolean {
   return (
-    containsBrailleSpinner(title) ||
+    containsAgentSpinnerGlyph(title) ||
     title.startsWith('✳ ') ||
     title === '✳' ||
     title.startsWith('. ') ||
diff --git a/src/shared/text-search.ts b/src/shared/text-search.ts
index d3d9b40226a..780164372cb 100644
--- a/src/shared/text-search.ts
+++ b/src/shared/text-search.ts
@@ -393,7 +393,7 @@ export function ingestGitGrepLine(
   const secondNullIdx = rest.indexOf('\0')
   let lineNumberText: string
   let lineContent: string
-  if (secondNullIdx >= 0) {
+  if (secondNullIdx !== -1) {
     lineNumberText = rest.substring(0, secondNullIdx)
     lineContent = rest.substring(secondNullIdx + 1).replace(/\n$/, '')
   } else {
diff --git a/src/shared/tui-agent-config.ts b/src/shared/tui-agent-config.ts
index 06d490342ba..3437e44e560 100644
--- a/src/shared/tui-agent-config.ts
+++ b/src/shared/tui-agent-config.ts
@@ -331,7 +331,7 @@ export const TUI_AGENT_CONFIG: Record<TuiAgent, TuiAgentConfig> = {
 }
 
 export function isTuiAgent(value: unknown): value is TuiAgent {
-  return typeof value === 'string' && Object.prototype.hasOwnProperty.call(TUI_AGENT_CONFIG, value)
+  return typeof value === 'string' && Object.hasOwn(TUI_AGENT_CONFIG, value)
 }
 
 export function getTuiAgentDetectCommands(config: TuiAgentConfig): string[] {
diff --git a/src/shared/tui-agent-launch-command.ts b/src/shared/tui-agent-launch-command.ts
index 3ce20571f4e..c45ac67bd19 100644
--- a/src/shared/tui-agent-launch-command.ts
+++ b/src/shared/tui-agent-launch-command.ts
@@ -43,7 +43,7 @@ export function resolveAgentLaunchCommand(args: {
   }
   const trailingTokens = args.agentArgs?.trim()
     ? tokenizeStartupCommand(args.agentArgs.trim(), args.shell)
-    : { ok: true as const, tokens: [] }
+    : { ok: true as const, tokens: [], spans: [] }
   if (!trailingTokens.ok) {
     return { ok: false, error: `CLI arguments are invalid: ${trailingTokens.error}` }
   }
diff --git a/src/shared/tui-agent-launch-defaults.ts b/src/shared/tui-agent-launch-defaults.ts
index 94ca6e103a1..f0f5d3e8bd1 100644
--- a/src/shared/tui-agent-launch-defaults.ts
+++ b/src/shared/tui-agent-launch-defaults.ts
@@ -85,7 +85,7 @@ export function resolveTuiAgentLaunchArgs(
 ): string {
   if (
     configuredArgs &&
-    Object.prototype.hasOwnProperty.call(configuredArgs, agent) &&
+    Object.hasOwn(configuredArgs, agent) &&
     typeof configuredArgs[agent] === 'string'
   ) {
     return configuredArgs[agent] ?? ''
@@ -97,7 +97,7 @@ export function resolveTuiAgentLaunchEnv(
   agent: TuiAgent,
   configuredEnv: Partial<Record<TuiAgent, Record<string, string>>> | null | undefined
 ): Record<string, string> {
-  if (configuredEnv && Object.prototype.hasOwnProperty.call(configuredEnv, agent)) {
+  if (configuredEnv && Object.hasOwn(configuredEnv, agent)) {
     return { ...configuredEnv[agent] }
   }
   return getTuiAgentDefaultEnv(agent)
diff --git a/src/shared/tui-agent-startup-shell.test.ts b/src/shared/tui-agent-startup-shell.test.ts
new file mode 100644
index 00000000000..2d155063462
--- /dev/null
+++ b/src/shared/tui-agent-startup-shell.test.ts
@@ -0,0 +1,114 @@
+import { describe, expect, it } from 'vitest'
+import {
+  buildShellCommandFromArgv,
+  clearEnvCommand,
+  commandSeparator,
+  isPosixStartupShell,
+  quoteStartupArg,
+  resolveLoginShellStartupDialect,
+  tokenizeStartupCommand
+} from './tui-agent-startup-shell'
+import { buildAgentDraftLaunchPlan } from './tui-agent-startup'
+
+function expectSpansCoverTokens(source: string, shell: 'powershell' | 'cmd'): string[] {
+  const result = tokenizeStartupCommand(source, shell)
+  expect(result.ok).toBe(true)
+  if (!result.ok) {
+    return []
+  }
+  expect(result.spans).toHaveLength(result.tokens.length)
+  let previousEnd = 0
+  for (const [index, { start, end }] of result.spans.entries()) {
+    expect(start).toBeGreaterThanOrEqual(previousEnd)
+    expect(end).toBeGreaterThan(start)
+    // Every raw span must re-tokenize to exactly its own token.
+    const slice = tokenizeStartupCommand(source.slice(start, end), shell)
+    expect(slice.ok && slice.tokens).toEqual([result.tokens[index]])
+    previousEnd = end
+  }
+  return result.spans.map(({ start, end }) => source.slice(start, end))
+}
+
+describe('tokenizeStartupCommand spans (windows shells)', () => {
+  it('covers plain and quoted tokens on powershell', () => {
+    const source = "claude --msg 'hello world'"
+    const result = tokenizeStartupCommand(source, 'powershell')
+    expect(result).toEqual({
+      ok: true,
+      tokens: ['claude', '--msg', 'hello world'],
+      spans: [
+        { start: 0, end: 6, divergesFromShell: false },
+        { start: 7, end: 12, divergesFromShell: false },
+        { start: 13, end: 26, divergesFromShell: false }
+      ]
+    })
+  })
+
+  it('starts a span at a token-leading escape character', () => {
+    expect(expectSpansCoverTokens('claude ^&literal next', 'cmd')).toEqual([
+      'claude',
+      '^&literal',
+      'next'
+    ])
+    expect(expectSpansCoverTokens('claude `x tail', 'powershell')).toEqual(['claude', '`x', 'tail'])
+  })
+
+  it('spans a powershell doubled-quote token as one raw range', () => {
+    expect(expectSpansCoverTokens("claude 'a''b' end", 'powershell')).toEqual([
+      'claude',
+      "'a''b'",
+      'end'
+    ])
+  })
+
+  it('spans a token opened by a quote at end of input', () => {
+    expect(expectSpansCoverTokens('claude ""', 'cmd')).toEqual(['claude', '""'])
+  })
+})
+
+describe('fish startup shell dialect', () => {
+  it('clears variables with fish syntax instead of the sh `unset` fish rejects', () => {
+    expect(clearEnvCommand('CODEX_HOME', 'fish')).toBe('set -e CODEX_HOME')
+    expect(clearEnvCommand('CODEX_HOME', 'posix')).toBe('unset CODEX_HOME')
+    expect(clearEnvCommand('CODEX_HOME', 'cmd')).toBe('set "CODEX_HOME="')
+    expect(clearEnvCommand('CODEX_HOME', 'powershell')).toBe(
+      'Remove-Item Env:CODEX_HOME -ErrorAction SilentlyContinue'
+    )
+  })
+
+  it('shares POSIX quoting, tokenizing and chaining', () => {
+    expect(quoteStartupArg("it's", 'fish')).toBe(quoteStartupArg("it's", 'posix'))
+    expect(buildShellCommandFromArgv(['codex', 'resume', 'a b'], 'fish')).toBe(
+      buildShellCommandFromArgv(['codex', 'resume', 'a b'], 'posix')
+    )
+    expect(tokenizeStartupCommand('codex --arg "a b"', 'fish')).toEqual(
+      tokenizeStartupCommand('codex --arg "a b"', 'posix')
+    )
+    expect(commandSeparator('fish')).toBe('; ')
+    expect(isPosixStartupShell('fish')).toBe(true)
+  })
+
+  it('maps login shell paths to their dialect', () => {
+    expect(resolveLoginShellStartupDialect('/opt/homebrew/bin/fish')).toBe('fish')
+    expect(resolveLoginShellStartupDialect('/usr/local/bin/FISH')).toBe('fish')
+    expect(resolveLoginShellStartupDialect('/bin/zsh')).toBe('posix')
+    expect(resolveLoginShellStartupDialect('/bin/bash')).toBe('posix')
+    expect(resolveLoginShellStartupDialect('')).toBe('posix')
+    expect(resolveLoginShellStartupDialect(undefined)).toBe('posix')
+  })
+
+  // Contract-only: no POSIX caller threads a shell into buildAgentDraftLaunchPlan yet
+  // (`selectedRepoStartupShell` is Windows-only), so fish users still get `unset` here.
+  it('clears an agent draft prefill variable with fish syntax', () => {
+    const plan = buildAgentDraftLaunchPlan({
+      agent: 'pi',
+      draft: 'hello',
+      cmdOverrides: {},
+      platform: 'darwin',
+      shell: 'fish'
+    })
+
+    expect(plan?.launchCommand).toBe('pi; set -e ORCA_PI_PREFILL')
+    expect(plan?.env?.ORCA_PI_PREFILL).toBe('hello')
+  })
+})
diff --git a/src/shared/tui-agent-startup-shell.ts b/src/shared/tui-agent-startup-shell.ts
index 8bdb5465845..ef23b837e0b 100644
--- a/src/shared/tui-agent-startup-shell.ts
+++ b/src/shared/tui-agent-startup-shell.ts
@@ -1,28 +1,95 @@
-import { tokenizeCustomCommandTemplate } from './commit-message-prompt'
+import { tokenizeCustomCommandTemplate, type CommandTokenSpan } from './commit-message-prompt'
 
-export type AgentStartupShell = 'posix' | 'powershell' | 'cmd'
+// Why: fish shares POSIX word splitting, quoting and `;` chaining, so it is a
+// separate dialect only where its grammar actually diverges (env clearing).
+export type AgentStartupShell = 'posix' | 'fish' | 'powershell' | 'cmd'
 
-export type StartupCommandTokens = { ok: true; tokens: string[] } | { ok: false; error: string }
+type WindowsStartupShell = Extract<AgentStartupShell, 'powershell' | 'cmd'>
+
+/** True for shells parsed with POSIX quoting/word rules (sh family + fish). */
+export function isPosixStartupShell(shell: AgentStartupShell): boolean {
+  return shell === 'posix' || shell === 'fish'
+}
+
+function isWindowsStartupShell(shell: AgentStartupShell): shell is WindowsStartupShell {
+  return shell === 'powershell' || shell === 'cmd'
+}
+
+/** Maps a POSIX login-shell path (`$SHELL`) to the dialect that parses queued commands. */
+export function resolveLoginShellStartupDialect(
+  loginShell: string | null | undefined
+): AgentStartupShell {
+  const basename = loginShell?.trim().replaceAll('\\', '/').split('/').pop()?.toLowerCase() ?? ''
+  return basename === 'fish' ? 'fish' : 'posix'
+}
+
+export type StartupCommandTokens =
+  | { ok: true; tokens: string[]; spans: CommandTokenSpan[] }
+  | { ok: false; error: string }
+
+/** True when an odd run of backslashes precedes this quote, which makes it a
+ * literal byte to the child's CommandLineToArgvW parser rather than a
+ * delimiter — so cmd's word boundaries stop matching this tokenizer's. */
+function hasOddBackslashRun(value: string, quoteIndex: number): boolean {
+  let backslashes = 0
+  while (value[quoteIndex - 1 - backslashes] === '\\') {
+    backslashes += 1
+  }
+  return backslashes % 2 === 1
+}
 
 function tokenizeWindowsStartupCommand(
   value: string,
-  shell: Exclude<AgentStartupShell, 'posix'>
+  shell: WindowsStartupShell
 ): StartupCommandTokens {
   const tokens: string[] = []
+  const spans: CommandTokenSpan[] = []
   let token = ''
+  let tokenStart = 0
+  let divergesFromShell = false
   let quote: "'" | '"' | null = null
   let tokenStarted = false
   for (let index = 0; index < value.length; index += 1) {
     const char = value[index]
     const escape = shell === 'cmd' ? '^' : '`'
     if (char === escape && index + 1 < value.length) {
+      // Why: cmd strips `^` and hands the bare byte to the child's parser,
+      // which re-splits on whitespace and reopens a quote, and keeps the caret
+      // literal inside double quotes — either way the token stops matching
+      // argv. PowerShell folds the backtick into the token except for LF line
+      // continuations, verbatim single quotes, escape sequences, and a
+      // token-leading backtick before whitespace, which it drops entirely.
+      // A bare CR is treated as unmodelable rather than folded: pwsh 7 keeps
+      // it in the token, Windows PowerShell 5.1 is unverified, and failing
+      // open there costs nothing.
+      divergesFromShell ||=
+        (shell === 'cmd' ? /[\s"]/.test(value[index + 1]) : /[\n\r]/.test(value[index + 1])) ||
+        (shell === 'cmd' && quote === '"') ||
+        (shell === 'powershell' && quote === "'") ||
+        // A token-leading backtick before whitespace is dropped with the
+        // whitespace, emitting no token at all rather than the one built here.
+        (shell === 'powershell' && !tokenStarted && /\s/.test(value[index + 1])) ||
+        // PowerShell expands these escape sequences in quoted AND bare
+        // arguments, so the token value this branch builds is not argv's.
+        (shell === 'powershell' && '0abefnrtuv'.includes(value[index + 1]))
       token += value[index + 1]
+      if (!tokenStarted) {
+        tokenStart = index
+      }
       tokenStarted = true
       index += 1
       continue
     }
     if (quote) {
+      // Why: see the posix tokenizer — a `"` inside $(…) re-opens a nested
+      // quoting context that this tokenizer does not model.
+      divergesFromShell ||=
+        shell === 'powershell' &&
+        quote === '"' &&
+        char === '$' &&
+        (value[index + 1] === '(' || value[index + 1] === '{')
       if (char === quote) {
+        divergesFromShell ||= shell === 'cmd' && char === '"' && hasOddBackslashRun(value, index)
         if (shell === 'powershell' && quote === "'" && value[index + 1] === "'") {
           token += "'"
           index += 1
@@ -36,15 +103,39 @@ function tokenizeWindowsStartupCommand(
       continue
     }
     if (char === "'" || char === '"') {
+      divergesFromShell ||= shell === 'cmd' && char === '"' && hasOddBackslashRun(value, index)
       quote = char
+      // Why: cmd.exe has no single-quote syntax, so this tokenizer's grouping
+      // of a single-quoted region diverges from what cmd actually parses;
+      // flag the token so consumers treat it as unmodelable.
+      divergesFromShell ||= shell === 'cmd' && char === "'"
+      if (!tokenStarted) {
+        tokenStart = index
+      }
       tokenStarted = true
     } else if (/\s/.test(char)) {
       if (tokenStarted) {
         tokens.push(token)
+        spans.push({ start: tokenStart, end: index, divergesFromShell })
         token = ''
         tokenStarted = false
+        divergesFromShell = false
       }
     } else {
+      if (!tokenStarted) {
+        tokenStart = index
+      }
+      // Why: see the posix tokenizer — a trailing unpaired escape would
+      // swallow the separator before anything appended to the base.
+      divergesFromShell ||= char === escape && index + 1 >= value.length
+      divergesFromShell ||=
+        ';&|<>'.includes(char) ||
+        (shell === 'powershell' &&
+          // Why: bare (…) is evaluated and {…} is a script block in argument
+          // position, so both are live syntax the span splice cannot model.
+          ('(){}'.includes(char) ||
+            (char === '#' && !tokenStarted) ||
+            (char === '$' && (value[index + 1] === '(' || value[index + 1] === '{'))))
       token += char
       tokenStarted = true
     }
@@ -54,17 +145,18 @@ function tokenizeWindowsStartupCommand(
   }
   if (tokenStarted) {
     tokens.push(token)
+    spans.push({ start: tokenStart, end: value.length, divergesFromShell })
   }
-  return { ok: true, tokens }
+  return { ok: true, tokens, spans }
 }
 
 export function tokenizeStartupCommand(
   value: string,
   shell: AgentStartupShell
 ): StartupCommandTokens {
-  return shell === 'posix'
-    ? tokenizeCustomCommandTemplate(value)
-    : tokenizeWindowsStartupCommand(value, shell)
+  return isWindowsStartupShell(shell)
+    ? tokenizeWindowsStartupCommand(value, shell)
+    : tokenizeCustomCommandTemplate(value)
 }
 
 export function resolveStartupShell(
@@ -102,6 +194,11 @@ export function clearEnvCommand(name: string, shell: AgentStartupShell): string
   if (shell === 'cmd') {
     return `set "${name}="`
   }
+  // Why: fish has no `unset`; the sh spelling errors out and silently leaves
+  // the variable exported (e.g. an account-routed CODEX_HOME survives).
+  if (shell === 'fish') {
+    return `set -e ${name}`
+  }
   return `unset ${name}`
 }
 
diff --git a/src/shared/tui-agent-startup.ts b/src/shared/tui-agent-startup.ts
index 27d4b40ac8d..4cef246ccdb 100644
--- a/src/shared/tui-agent-startup.ts
+++ b/src/shared/tui-agent-startup.ts
@@ -20,6 +20,7 @@ import { inlineAgentDraftFitsPlatform } from './agent-draft-platform-limit'
 import type { TuiAgent } from './types'
 import type { SessionOptionValue } from './native-chat-session-options'
 import { resolveAgentLaunchCommand } from './tui-agent-launch-command'
+import { buildAgentResumeLaunchCommand } from './agent-resume-launch-command'
 
 export type AgentStartupPlan = {
   agent: TuiAgent
@@ -222,14 +223,9 @@ export function buildAgentResumeStartupPlan(args: {
     ...args,
     agentCommand: baseCommand.command
   })
-  const resumeArgs = argv
-    .slice(1)
-    .map((arg) => quoteStartupArg(arg, shell))
-    .join(' ')
-  const launchCommand = resumeArgs ? `${baseCommand.command} ${resumeArgs}` : baseCommand.command
   return {
     agent: args.agent,
-    launchCommand,
+    launchCommand: buildAgentResumeLaunchCommand(args.agent, baseCommand.command, argv, shell),
     expectedProcess: config.expectedProcess,
     followupPrompt: null,
     launchConfig,
diff --git a/src/shared/types.ts b/src/shared/types.ts
index 0f7a6685f9a..4d9a2e9b810 100644
--- a/src/shared/types.ts
+++ b/src/shared/types.ts
@@ -289,6 +289,8 @@ export type Repo = {
   externalWorktreeInboxBaselinePaths?: string[]
   /** External worktree paths explicitly imported while global visibility stays hide. */
   importedExternalWorktreePaths?: string[]
+  /** Opt-in repo policy for coding-agent scratch worktrees; absent means hide. */
+  agentWorktreeVisibility?: ExternalWorktreeVisibility
   /** User permanently opted out of the new-external-worktree inbox for this repo. */
   externalWorktreeDiscoverySuppressedAt?: number
   /** Paths (relative to the primary checkout) that should be APFS clone-copied
@@ -357,6 +359,7 @@ export type FolderWorkspace = {
   lastActivityAt: number
   createdAt: number
   updatedAt: number
+  diffComments?: DiffComment[]
 }
 
 export type WorkspaceLinkedItem = {
@@ -1079,6 +1082,7 @@ export type BrowserCookieImportSummary = {
   totalCookies: number
   importedCookies: number
   skippedCookies: number
+  googleCookiesSkipped?: number
   domains: string[]
   warning?: {
     code: 'restart-fallback-unavailable'
@@ -1497,8 +1501,8 @@ export type PRCheckJob = {
 
 export type PRCheckRunDetails = {
   name: string
-  status: PRCheckDetail['status'] | string | null
-  conclusion: PRCheckDetail['conclusion'] | string | null
+  status: PRCheckDetail['status'] | (string & {}) | null
+  conclusion: PRCheckDetail['conclusion'] | (string & {}) | null
   url: string | null
   detailsUrl: string | null
   startedAt: string | null
@@ -1749,7 +1753,7 @@ export type LinearWorkspace = LinearViewer & {
   credentialRevision?: number
 }
 
-export type LinearWorkspaceSelection = string | 'all'
+export type LinearWorkspaceSelection = (string & {}) | 'all'
 export type LinearWorkspaceSelector = LinearWorkspaceSelection | undefined
 export type LinearConcreteWorkspaceId = string
 
@@ -2795,7 +2799,6 @@ export type GlobalSettings = {
   autoRenameBranchFromWorkDefaultedOn?: boolean
   branchPrefix: BranchPrefixStrategy
   branchPrefixCustom: string
-  enableGitHubAttribution: boolean
   theme: 'system' | 'dark' | 'light'
   /** Controls the left sidebar surface without changing terminal brightness. */
   leftSidebarAppearanceMode: LeftSidebarAppearanceMode
@@ -3691,6 +3694,14 @@ export type PersistedState = {
   projectHostSetups: ProjectHostSetup[]
   projectGroups: ProjectGroup[]
   folderWorkspaces: FolderWorkspace[]
+  /** Folder-workspace review notes, keyed by FolderWorkspace.id. Top-level, NOT nested in
+   *  folderWorkspaces[]: normalizeFolderWorkspaces rebuilds each record field-by-field, so an
+   *  older build drops nested fields, while unknown top-level keys round-trip untouched.
+   *
+   *  WRITE-ONLY PROJECTION. FolderWorkspace.diffComments is the single in-memory home; load()
+   *  hydrates from this key and then deletes it from Store state, and buildStateToSave() is the
+   *  only producer of it. Never read Store.state.folderWorkspaceDiffComments outside load(). */
+  folderWorkspaceDiffComments?: Record<string, DiffComment[]>
   /** Sparse-checkout presets keyed by repoId. */
   sparsePresetsByRepo: Record<string, SparsePreset[]>
   /** Per paired device last tab selection by worktree; keeps mobile navigation across host restarts. */
diff --git a/src/shared/workspace-session-schema.sleeping-agent.test.ts b/src/shared/workspace-session-schema.sleeping-agent.test.ts
index 9f58d453969..16f499ac7d5 100644
--- a/src/shared/workspace-session-schema.sleeping-agent.test.ts
+++ b/src/shared/workspace-session-schema.sleeping-agent.test.ts
@@ -219,12 +219,9 @@ describe('parseWorkspaceSession sleeping agents', () => {
 
     expect(result.ok).toBe(true)
     if (result.ok) {
-      expect(
-        Object.prototype.hasOwnProperty.call(
-          result.value.sleepingAgentSessionsByPaneKey ?? {},
-          '__proto__'
-        )
-      ).toBe(false)
+      expect(Object.hasOwn(result.value.sleepingAgentSessionsByPaneKey ?? {}, '__proto__')).toBe(
+        false
+      )
       const record = result.value.sleepingAgentSessionsByPaneKey?.['tab1:pane-1']
       expect(record?.agent).toBe('codex')
       expect(record?.launchConfig).toBeUndefined()
diff --git a/src/shared/worktree-ownership.test.ts b/src/shared/worktree-ownership.test.ts
index 1697b654d5a..f4e5fe23206 100644
--- a/src/shared/worktree-ownership.test.ts
+++ b/src/shared/worktree-ownership.test.ts
@@ -80,7 +80,6 @@ function makeSettings(overrides: Partial<GlobalSettings> = {}): GlobalSettings {
     localBaseRefSuggestionDismissed: false,
     branchPrefix: 'none',
     branchPrefixCustom: '',
-    enableGitHubAttribution: false,
     theme: 'system',
     appFontFamily: 'Geist',
     editorAutoSave: false,
@@ -477,7 +476,7 @@ describe('agent scratch worktrees', () => {
     ).toBe('orca-managed')
   })
 
-  it('hides agent scratch even when the repo shows non-Orca worktrees', () => {
+  it('keeps agent scratch hidden by default for new and legacy repos', () => {
     for (const repo of [
       makeRepo({ externalWorktreeVisibility: 'show' }),
       makeRepo({ addedAt: EXTERNAL_WORKTREE_VISIBILITY_ROLLOUT_AT - 1 })
@@ -494,6 +493,25 @@ describe('agent scratch worktrees', () => {
     }
   })
 
+  it('shows agent scratch when its repo policy is enabled', () => {
+    const repo = makeRepo({
+      externalWorktreeVisibility: 'hide',
+      agentWorktreeVisibility: 'show'
+    })
+    const settings = makeSettings()
+
+    for (const path of [scratchPath, '/repos/app/.gsd-workspaces/phase-1']) {
+      const detected = toDetectedWorktree({
+        repo,
+        settings,
+        worktree: makeWorktree({ path, isMainWorktree: false }),
+        knownOrcaLayouts: buildKnownOrcaWorkspaceLayouts(settings, repo)
+      })
+
+      expect(detected).toMatchObject({ ownership: 'agent-scratch', visible: true })
+    }
+  })
+
   it('still shows agent scratch for the selected checkout or an explicit import', () => {
     const repo = makeRepo({
       externalWorktreeVisibility: 'hide',
diff --git a/src/shared/worktree-ownership.ts b/src/shared/worktree-ownership.ts
index a14523c4d8f..a5260b4adc5 100644
--- a/src/shared/worktree-ownership.ts
+++ b/src/shared/worktree-ownership.ts
@@ -13,6 +13,7 @@ import {
 } from './agent-scratch-worktrees'
 import { isExplicitlyImportedExternalWorktreePath } from './external-worktree-inbox'
 import {
+  effectiveAgentWorktreeVisibility,
   effectiveExternalWorktreeVisibility,
   isLegacyRepoForExternalWorktreeVisibility
 } from './external-worktree-visibility'
@@ -27,6 +28,7 @@ import type {
 } from './types'
 
 export {
+  effectiveAgentWorktreeVisibility,
   effectiveExternalWorktreeVisibility,
   EXTERNAL_WORKTREE_VISIBILITY_ROLLOUT_AT,
   isLegacyRepoForExternalWorktreeVisibility
@@ -221,10 +223,8 @@ export function shouldShowWorktree(args: {
   ) {
     return true
   }
-  // Why: agent scratch stays hidden even when the repo shows non-Orca
-  // worktrees; only an explicit import or selected checkout reveals it.
   if (args.ownership === 'agent-scratch') {
-    return false
+    return effectiveAgentWorktreeVisibility(args.repo) === 'show'
   }
   if (args.ownership === 'unknown-legacy' && args.isLegacyRepoForVisibility) {
     return true
diff --git a/tests/e2e/artificial-opencode-hidden-pressure-scenario.ts b/tests/e2e/artificial-opencode-hidden-pressure-scenario.ts
index ca19daf7395..f65bbeea84a 100644
--- a/tests/e2e/artificial-opencode-hidden-pressure-scenario.ts
+++ b/tests/e2e/artificial-opencode-hidden-pressure-scenario.ts
@@ -54,10 +54,8 @@ type HiddenPressureDeps<TMeasurement, TDebug, TScheduler, TMainPressure, TAckGat
   writeInteractivePromptScript: (scriptPath: string, runId: string) => void
 }
 
-// Why: the renderer hidden-skip counters are gone with the skip grammar —
-// withheld hidden output is observed via main's delivery-drop counters only.
 type HiddenPressureDebug = {
-  hiddenRendererMode2031ReplyCount: number
+  hiddenRendererSkipCount: number
 }
 
 type HiddenPressureMeasurement = {
diff --git a/tests/e2e/artificial-opencode-revisit-pressure-scenario.ts b/tests/e2e/artificial-opencode-revisit-pressure-scenario.ts
index 48643b8d8de..c4300fe7cb5 100644
--- a/tests/e2e/artificial-opencode-revisit-pressure-scenario.ts
+++ b/tests/e2e/artificial-opencode-revisit-pressure-scenario.ts
@@ -27,9 +27,7 @@ type RevisitPressureMeasurement = {
   maxTimerDriftMs: number
 }
 
-// Why: the renderer hidden-skip counters were deleted with the skip grammar;
-// only the mode-2031 fact-reply counter still exists renderer-side.
-type RevisitPressureDebug = { hiddenRendererMode2031ReplyCount: number }
+type RevisitPressureDebug = { hiddenRendererSkipCount: number }
 
 type RevisitPressureSchedulerSnapshot = {
   peakQueuedChars: number
diff --git a/tests/e2e/artificial-opencode-terminal-load.spec.ts b/tests/e2e/artificial-opencode-terminal-load.spec.ts
index 3e857d3258f..0a3e1570769 100644
--- a/tests/e2e/artificial-opencode-terminal-load.spec.ts
+++ b/tests/e2e/artificial-opencode-terminal-load.spec.ts
@@ -56,11 +56,8 @@ type SyntheticOpenCodeWindow = Window & {
   }
 }
 
-// Why: the renderer hidden-skip grammar is deleted — hidden bytes are dropped
-// in main (gate) or ride the background queue. Only the mode-2031 fact-reply
-// counter still has a renderer-side producer.
 type TerminalPtyOutputDebugSnapshot = {
-  hiddenRendererMode2031ReplyCount: number
+  hiddenRendererSkipCount: number
 }
 
 type TerminalOutputSchedulerDebugSnapshot = {
@@ -373,7 +370,7 @@ function annotateTypingMeasurement(
   mainPressure: MainPtyPressureDebugSnapshot | null = null,
   ackGate: TerminalPtyAckGateSnapshot | null = null
 ): void {
-  const mode2031Summary = debug ? ` mode2031Replies=${debug.hiddenRendererMode2031ReplyCount}` : ''
+  const hiddenSkipSummary = debug ? ` hiddenRendererSkips=${debug.hiddenRendererSkipCount}` : ''
   const schedulerSummary = scheduler
     ? ` deferredForegroundEnqueue=${scheduler.deferredForegroundEnqueueCount} deferredForegroundWrite=${scheduler.deferredForegroundWriteCount} scheduledDrains=${scheduler.scheduledDrainCount} rendererQueuedTerminals=${scheduler.queuedTerminalCount} rendererQueuedChars=${scheduler.queuedChars} rendererPeakQueuedTerminals=${scheduler.peakQueuedTerminalCount} rendererPeakQueuedChars=${scheduler.peakQueuedChars} rendererPeakQueuedCharsByTerminal=${scheduler.peakQueuedCharsByTerminal} rendererDroppedBacklogs=${scheduler.droppedBacklogCount}`
     : ''
@@ -391,7 +388,7 @@ function annotateTypingMeasurement(
       1
     )}ms maxTimerDrift=${measurement.maxTimerDriftMs.toFixed(1)}ms samples=${measurement.latencies
       .map((value) => value.toFixed(1))
-      .join(',')}${mode2031Summary}${schedulerSummary}${mainPressureSummary}${ackGateSummary}`
+      .join(',')}${hiddenSkipSummary}${schedulerSummary}${mainPressureSummary}${ackGateSummary}`
   })
 }
 
diff --git a/tests/e2e/browser-fedcm-fallback.spec.ts b/tests/e2e/browser-fedcm-fallback.spec.ts
new file mode 100644
index 00000000000..c782bfed5a6
--- /dev/null
+++ b/tests/e2e/browser-fedcm-fallback.spec.ts
@@ -0,0 +1,139 @@
+import { createServer, type Server } from 'node:http'
+import type { AddressInfo } from 'node:net'
+import { test, expect } from './helpers/orca-app'
+import { ensureTerminalVisible, getActiveWorktreeId } from './helpers/store'
+
+async function closeServer(server: Server): Promise<void> {
+  await new Promise<void>((resolve, reject) => {
+    server.close((error) => (error ? reject(error) : resolve()))
+  })
+}
+
+async function startFedCmFallbackServer(): Promise<{
+  url: string
+  close: () => Promise<void>
+}> {
+  const server = createServer((request, response) => {
+    const origin = `http://127.0.0.1:${(server.address() as AddressInfo).port}`
+    const pathname = new URL(request.url ?? '/', origin).pathname
+    response.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' })
+    if (pathname === '/popup') {
+      response.end(
+        '<!doctype html><html><head><title>Popup fallback</title></head><body>Popup fallback<script>window.opener?.postMessage("popup-opener-live", window.location.origin)</script></body></html>'
+      )
+      return
+    }
+    response.end(`
+      <!doctype html>
+      <html>
+        <head><title>FedCM fallback oracle</title></head>
+        <body>
+          <output id="capabilities"></output>
+          <button id="sign-in">Sign in</button>
+          <output id="path">pending</output>
+          <script>
+            const hasIdentityCredential = 'IdentityCredential' in window
+            const hasIdentityProvider = 'IdentityProvider' in window
+            window.popupMessages = []
+            window.addEventListener('message', (event) => {
+              window.popupMessages.push(event.data)
+            })
+            document.querySelector('#capabilities').textContent = JSON.stringify({
+              hasIdentityCredential,
+              hasIdentityProvider
+            })
+            document.querySelector('#sign-in').addEventListener('click', () => {
+              if (hasIdentityCredential && hasIdentityProvider) {
+                document.querySelector('#path').textContent = 'fedcm-selected'
+                return
+              }
+              const popup = window.open('/popup', 'google-auth', 'width=480,height=640')
+              document.querySelector('#path').textContent = popup ? 'popup-live' : 'popup-blocked'
+            })
+          </script>
+        </body>
+      </html>
+    `)
+  })
+  await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve))
+  const port = (server.address() as AddressInfo).port
+  return { url: `http://127.0.0.1:${port}/`, close: () => closeServer(server) }
+}
+
+test('embedded browser omits unusable FedCM and reaches the popup fallback', async ({
+  electronApp,
+  orcaPage
+}) => {
+  const server = await startFedCmFallbackServer()
+  try {
+    await ensureTerminalVisible(orcaPage)
+    const worktreeId = await getActiveWorktreeId(orcaPage)
+    expect(worktreeId).not.toBeNull()
+    const browserTabId = await orcaPage.evaluate(
+      ({ targetWorktreeId, url }) => {
+        const tab = window.__store!.getState().createBrowserTab(targetWorktreeId!, url, {
+          title: 'FedCM fallback oracle',
+          activate: true
+        })
+        return tab.id
+      },
+      { targetWorktreeId: worktreeId, url: server.url }
+    )
+    const readGuest = async <T>(expression: string): Promise<T> =>
+      orcaPage.evaluate(
+        async ({ targetBrowserTabId, script }) => {
+          const slot = document.querySelector(
+            `[data-browser-overlay-tab-id="${targetBrowserTabId}"]`
+          )
+          const webview = slot?.querySelector('webview') as Electron.WebviewTag | null
+          if (!webview) {
+            throw new Error(`Missing webview for browser tab ${targetBrowserTabId}`)
+          }
+          return (await webview.executeJavaScript(script)) as T
+        },
+        { targetBrowserTabId: browserTabId, script: expression }
+      )
+
+    await expect
+      .poll(() => readGuest<string>('document.title'), { timeout: 10_000 })
+      .toBe('FedCM fallback oracle')
+    const capabilities = await readGuest<{
+      hasIdentityCredential: boolean
+      hasIdentityProvider: boolean
+    }>('JSON.parse(document.querySelector("#capabilities").textContent)')
+    expect.soft(capabilities).toEqual({
+      hasIdentityCredential: false,
+      hasIdentityProvider: false
+    })
+
+    await readGuest<void>('document.querySelector("#sign-in").click()')
+    const path = await readGuest<string>('document.querySelector("#path").textContent')
+    expect.soft(path).toBe('popup-live')
+    await expect
+      .poll(() =>
+        electronApp.evaluate(async ({ webContents }) => {
+          const popup = webContents.getAllWebContents().find((contents) => {
+            return contents.getURL().endsWith('/popup')
+          })
+          if (!popup) {
+            return null
+          }
+          return {
+            openerLive: await popup.executeJavaScript('Boolean(window.opener)'),
+            title: await popup.executeJavaScript('document.title'),
+            url: popup.getURL()
+          }
+        })
+      )
+      .toEqual({
+        openerLive: true,
+        title: 'Popup fallback',
+        url: `${server.url}popup`
+      })
+    await expect
+      .poll(() => readGuest<string[]>('window.popupMessages'))
+      .toEqual(['popup-opener-live'])
+  } finally {
+    await server.close()
+  }
+})
diff --git a/tests/e2e/chinese-ime-chat-input-repro.spec.ts b/tests/e2e/chinese-ime-chat-input-repro.spec.ts
index 8c57b8e6a9f..9c72e8cdd4d 100644
--- a/tests/e2e/chinese-ime-chat-input-repro.spec.ts
+++ b/tests/e2e/chinese-ime-chat-input-repro.spec.ts
@@ -305,7 +305,7 @@ async function readPromptState(page: Page): Promise<TerminalPromptState | null>
     .filter((value): value is string => value !== null)
   const promptIndex = content.lastIndexOf(PROMPT)
   const liveLine =
-    promptIndex >= 0 ? (content.slice(promptIndex + PROMPT.length).split(/\r?\n/)[0] ?? '') : ''
+    promptIndex !== -1 ? (content.slice(promptIndex + PROMPT.length).split(/\r?\n/)[0] ?? '') : ''
   return {
     model: liveLine.trimEnd(),
     cursor: Array.from(liveLine.trimEnd()).length,
diff --git a/tests/e2e/codex-composer-echo-latency-probe.ts b/tests/e2e/codex-composer-echo-latency-probe.ts
index 9fc9cabf2c7..c49d98d3708 100644
--- a/tests/e2e/codex-composer-echo-latency-probe.ts
+++ b/tests/e2e/codex-composer-echo-latency-probe.ts
@@ -112,7 +112,7 @@ export async function installCodexEchoLatencyProbe(page: Page, target: string):
     const observeRender = (): void => {
       renderEvents += 1
       const paintedAt = performance.now()
-      for (const entry of awaitingRender.splice(0, awaitingRender.length)) {
+      for (const entry of awaitingRender.splice(0)) {
         entry.sample.keyToRenderMs = paintedAt - entry.startedAt
       }
     }
diff --git a/tests/e2e/cross-version-wire/cross-version-terminal-wire.unit.test.ts b/tests/e2e/cross-version-wire/cross-version-terminal-wire.unit.test.ts
index e49e0be3ecb..1eba41b7fef 100644
--- a/tests/e2e/cross-version-wire/cross-version-terminal-wire.unit.test.ts
+++ b/tests/e2e/cross-version-wire/cross-version-terminal-wire.unit.test.ts
@@ -1,5 +1,5 @@
 import { afterEach, beforeAll, describe, expect, it } from 'vitest'
-import { resolveBaselineReleaseRef } from './release-checkout'
+import { resolveBaselineReleaseRef, selectLatestStableReleaseTag } from './release-checkout'
 import {
   JOURNEY_INPUTS,
   JOURNEY_STEPS,
@@ -92,6 +92,18 @@ function expectWireCompatible(record: JourneyRecord): void {
 }
 
 describe('cross-version remote terminal wire', () => {
+  it('ignores legacy, mobile, and prerelease tags when selecting the baseline', () => {
+    expect(
+      selectLatestStableReleaseTag([
+        'v799',
+        'mobile-v9.0.0',
+        'v1.4.177-rc.3',
+        'v1.4.175',
+        'v1.4.176'
+      ])
+    ).toBe('v1.4.176')
+  })
+
   it(
     'skews current code against a real published release',
     () => {
diff --git a/tests/e2e/cross-version-wire/release-checkout.ts b/tests/e2e/cross-version-wire/release-checkout.ts
index 205885a5e87..069375f4c18 100644
--- a/tests/e2e/cross-version-wire/release-checkout.ts
+++ b/tests/e2e/cross-version-wire/release-checkout.ts
@@ -21,6 +21,7 @@ const CHECKOUT_FORMAT = 1
 const ARCHIVE_PATHS = ['src/main', 'src/shared', 'src/preload', 'src/renderer', 'src/types']
 
 const BASELINE_REF_ENV = 'ORCA_CROSS_VERSION_BASELINE_REF'
+const STABLE_DESKTOP_RELEASE_TAG = /^v\d+\.\d+\.\d+$/
 
 export type ReleaseCheckout = {
   /** The ref as requested, e.g. `v1.4.169`. */
@@ -61,7 +62,7 @@ function compareReleaseTags(a: string, b: string): number {
 
 /**
  * The version point the harness pairs current code against. An explicit
- * {@link BASELINE_REF_ENV} wins; otherwise the newest non-prerelease `v*` tag.
+ * {@link BASELINE_REF_ENV} wins; otherwise the newest stable desktop release tag.
  *
  * Throws rather than skipping: a cross-version lane that quietly runs nothing is
  * the exact failure this harness exists to prevent.
@@ -80,11 +81,10 @@ export function resolveBaselineReleaseRef(): string {
         `Run it inside a git checkout, or pin a ref with ${BASELINE_REF_ENV}.`
     )
   }
-  const releases = tags.filter((tag) => !tag.includes('-')).sort(compareReleaseTags)
-  const latest = releases.at(-1)
+  const latest = selectLatestStableReleaseTag(tags)
   if (!latest) {
     throw new Error(
-      `Cross-version harness found no release tags matching v[0-9]* (saw ${tags.length} tag(s) total). ` +
+      `Cross-version harness found no stable desktop release tags matching vX.Y.Z (saw ${tags.length} tag(s) total). ` +
         'CI checkouts default to a shallow clone with no tags: use `actions/checkout` with `fetch-depth: 0`, ' +
         `or pin a ref with ${BASELINE_REF_ENV}.`
     )
@@ -92,6 +92,15 @@ export function resolveBaselineReleaseRef(): string {
   return latest
 }
 
+export function selectLatestStableReleaseTag(tags: string[]): string | null {
+  return (
+    tags
+      .filter((tag) => STABLE_DESKTOP_RELEASE_TAG.test(tag))
+      .sort(compareReleaseTags)
+      .at(-1) ?? null
+  )
+}
+
 function resolveCommit(ref: string): string {
   try {
     return git(['rev-parse', `${ref}^{commit}`])
diff --git a/tests/e2e/fixtures/daemon-generation-legacy-close-client.ts b/tests/e2e/fixtures/daemon-generation-legacy-close-client.ts
index b9bbb621597..730ebbeffc9 100644
--- a/tests/e2e/fixtures/daemon-generation-legacy-close-client.ts
+++ b/tests/e2e/fixtures/daemon-generation-legacy-close-client.ts
@@ -62,7 +62,7 @@ const OBSERVER = {
 
 function readConfig(): FixtureConfig {
   const configIndex = process.argv.indexOf('--config')
-  const configPath = configIndex >= 0 ? process.argv[configIndex + 1] : undefined
+  const configPath = configIndex !== -1 ? process.argv[configIndex + 1] : undefined
   if (!configPath) {
     throw new Error('Legacy close client requires --config <path>')
   }
diff --git a/tests/e2e/fixtures/daemon-generation-reconnect-client.ts b/tests/e2e/fixtures/daemon-generation-reconnect-client.ts
index 28c0a6686a7..6bd163cc474 100644
--- a/tests/e2e/fixtures/daemon-generation-reconnect-client.ts
+++ b/tests/e2e/fixtures/daemon-generation-reconnect-client.ts
@@ -41,7 +41,7 @@ const MAX_OUTPUT_CHARS = 32_768
 
 function readConfig(): ClientConfig {
   const configIndex = process.argv.indexOf('--config')
-  const configPath = configIndex >= 0 ? process.argv[configIndex + 1] : undefined
+  const configPath = configIndex !== -1 ? process.argv[configIndex + 1] : undefined
   if (!configPath) {
     throw new Error('Reconnect client requires --config <path>')
   }
diff --git a/tests/e2e/fixtures/visible-tui-scroll-fixture.cjs b/tests/e2e/fixtures/visible-tui-scroll-fixture.cjs
index 3702ad21a9f..63b7683916a 100644
--- a/tests/e2e/fixtures/visible-tui-scroll-fixture.cjs
+++ b/tests/e2e/fixtures/visible-tui-scroll-fixture.cjs
@@ -12,7 +12,7 @@ const MOUSE_REPORT_PATTERN = new RegExp(`${ESC}\\[<(64|65);\\d+;\\d+M`, 'g')
 //                  at 120 reports/s) instead of minimal rows.
 const args = process.argv.slice(2)
 const logIndex = args.indexOf('--log')
-const LOG_PATH = logIndex >= 0 ? args[logIndex + 1] : null
+const LOG_PATH = logIndex !== -1 ? args[logIndex + 1] : null
 const HEAVY_FRAMES = args.includes('--heavy')
 
 let offset = 0
diff --git a/tests/e2e/git-history-tooltip-wrap.spec.ts b/tests/e2e/git-history-tooltip-wrap.spec.ts
new file mode 100644
index 00000000000..6a8c4f5895b
--- /dev/null
+++ b/tests/e2e/git-history-tooltip-wrap.spec.ts
@@ -0,0 +1,144 @@
+import { execFileSync } from 'node:child_process'
+import { rmSync } from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { expect, test } from './helpers/orca-app'
+import { waitForSessionReady } from './helpers/store'
+import { openSourceControlForWorktree } from './helpers/worktree-registration'
+
+const subject = 'brew-install: source shared brew context before resolving prefixes'
+const reportedLine = 'Sources bin/lib/brew-context.sh, mirroring the brew-install update:'
+const conventionalLine = 'Keep this conventional commit-message body line intact through column 72'
+const unbrokenLine = `https://example.com/${'commit-message-segment-'.repeat(8)}`
+const commitMessage = `${subject}
+
+${reportedLine}
+${conventionalLine}
+${unbrokenLine}
+the resolved prefix list now feeds both the cask audit and the formula
+path checks, so a missing context aborts before any network call runs.
+
+Verified by running the full tap audit locally with both prefixes set.`
+
+function createCommitWorktree(repoPath: string): { branchName: string; worktreePath: string } {
+  const suffix = `${Date.now()}-${Math.random().toString(16).slice(2)}`
+  const branchName = `e2e-tooltip-wrap-${suffix}`
+  const worktreePath = path.join(os.tmpdir(), branchName)
+  execFileSync('git', ['worktree', 'add', worktreePath, '-b', branchName], {
+    cwd: repoPath,
+    stdio: 'pipe'
+  })
+  return { branchName, worktreePath }
+}
+
+async function cleanupCommitWorktree(
+  repoPath: string,
+  worktreePath: string,
+  branchName: string
+): Promise<void> {
+  try {
+    execFileSync('git', ['worktree', 'remove', '--force', worktreePath], {
+      cwd: repoPath,
+      stdio: 'pipe'
+    })
+  } catch {
+    rmSync(worktreePath, { recursive: true, force: true })
+    execFileSync('git', ['worktree', 'prune'], { cwd: repoPath, stdio: 'pipe' })
+  }
+  execFileSync('git', ['branch', '-D', branchName], { cwd: repoPath, stdio: 'pipe' })
+}
+
+test('keeps conventional commit-message lines intact in the history tooltip', async ({
+  orcaPage,
+  testRepoPath,
+  registerPostElectronShutdownCleanup
+}) => {
+  const fixture = createCommitWorktree(testRepoPath)
+  registerPostElectronShutdownCleanup(() =>
+    cleanupCommitWorktree(testRepoPath, fixture.worktreePath, fixture.branchName)
+  )
+  execFileSync('git', ['commit', '--allow-empty', '--file', '-'], {
+    cwd: fixture.worktreePath,
+    input: commitMessage,
+    stdio: ['pipe', 'pipe', 'pipe']
+  })
+
+  await orcaPage.setViewportSize({ width: 1440, height: 900 })
+  await waitForSessionReady(orcaPage)
+  await openSourceControlForWorktree(orcaPage, testRepoPath, fixture.worktreePath)
+
+  const commitsToggle = orcaPage.getByRole('button', { name: /Commits/ })
+  await expect(commitsToggle).toBeVisible()
+  await commitsToggle.click()
+
+  const row = orcaPage.getByTestId('git-history-row').filter({ hasText: subject })
+  await expect(row).toBeVisible({ timeout: 10_000 })
+  const trigger = row.locator('[data-slot="tooltip-trigger"]').filter({ hasText: subject })
+  await trigger.hover({ position: { x: 20, y: 10 } })
+  await trigger.hover({ position: { x: 40, y: 10 } })
+
+  const tooltip = orcaPage
+    .locator('[data-slot="tooltip-content"]')
+    .filter({ hasText: reportedLine })
+  await expect(tooltip).toBeVisible()
+  await expect(tooltip).toContainText(commitMessage)
+  await orcaPage.evaluate(async () => {
+    await document.fonts.ready
+  })
+
+  const layout = await tooltip.evaluate(
+    (element, targetLines) => {
+      const walker = document.createTreeWalker(element, NodeFilter.SHOW_TEXT)
+      let textNode: Text | null = null
+      while (walker.nextNode()) {
+        const candidate = walker.currentNode as Text
+        if (targetLines.every((line) => candidate.data.includes(line))) {
+          textNode = candidate
+          break
+        }
+      }
+      if (!textNode) {
+        throw new Error('Commit message text node was not found in the tooltip')
+      }
+
+      const visualLineCounts = targetLines.map((targetLine) => {
+        const start = textNode.data.indexOf(targetLine)
+        const range = document.createRange()
+        range.setStart(textNode, start)
+        range.setEnd(textNode, start + targetLine.length)
+        const rectTops = Array.from(range.getClientRects())
+          .filter((rect) => rect.width > 0.5)
+          .map((rect) => rect.top)
+        const visualLineTops = rectTops.reduce<number[]>((tops, top) => {
+          if (!tops.some((existing) => Math.abs(existing - top) < 2)) {
+            tops.push(top)
+          }
+          return tops
+        }, [])
+        return visualLineTops.length
+      })
+
+      const style = getComputedStyle(element)
+      const tooltipRect = element.getBoundingClientRect()
+      return {
+        visualLineCounts,
+        tooltipLeft: tooltipRect.left,
+        tooltipRight: tooltipRect.right,
+        tooltipWidth: tooltipRect.width,
+        viewportWidth: window.innerWidth,
+        overflowContained: element.scrollWidth <= element.clientWidth,
+        textWrap: style.textWrap,
+        whiteSpace: style.whiteSpace
+      }
+    },
+    [reportedLine, conventionalLine]
+  )
+
+  expect(layout.whiteSpace).toBe('pre-wrap')
+  expect(layout.tooltipWidth).toBeGreaterThan(0)
+  expect(layout.tooltipLeft).toBeGreaterThanOrEqual(0)
+  expect(layout.tooltipRight).toBeLessThanOrEqual(layout.viewportWidth)
+  expect(layout.visualLineCounts).toEqual([1, 1])
+  expect(layout.overflowContained).toBe(true)
+  expect(layout.textWrap).toBe('wrap')
+})
diff --git a/tests/e2e/golden-posix-fresh-startup.spec.ts b/tests/e2e/golden-posix-fresh-startup.spec.ts
new file mode 100644
index 00000000000..ba30f550498
--- /dev/null
+++ b/tests/e2e/golden-posix-fresh-startup.spec.ts
@@ -0,0 +1,15 @@
+import { expect, test } from './helpers/orca-app'
+
+test.skip(process.platform === 'win32', 'POSIX fresh-startup golden; Windows has its own suite')
+
+test.describe('POSIX fresh startup golden', () => {
+  test.use({ dismissOnboarding: false, seedTestRepo: false })
+
+  test('fresh profile reaches onboarding normally @posix-profile-index-golden', async ({
+    orcaPage
+  }) => {
+    await expect(orcaPage.getByRole('heading', { name: /Pick your default agent/i })).toBeVisible({
+      timeout: 30_000
+    })
+  })
+})
diff --git a/tests/e2e/golden-posix-profile-index-fsync.spec.ts b/tests/e2e/golden-posix-profile-index-fsync.spec.ts
new file mode 100644
index 00000000000..d3d34d6743d
--- /dev/null
+++ b/tests/e2e/golden-posix-profile-index-fsync.spec.ts
@@ -0,0 +1,45 @@
+import { readFileSync, rmSync, statSync } from 'node:fs'
+import path from 'node:path'
+import { expect, test } from './helpers/orca-app'
+
+test.use({ seedTestRepo: false })
+test.skip(process.platform === 'win32', 'Restrictive-umask fsync regression is POSIX-only')
+
+test('recreates a fresh profile index on disk with a restrictive umask @posix-profile-index-golden', async ({
+  electronApp,
+  orcaPage
+}) => {
+  const userDataDir = await electronApp.evaluate(({ app }) => app.getPath('userData'))
+  const indexPath = path.join(userDataDir, 'orca-profile-index.json')
+  // Why: the index tmp file is written with 0o666 & ~umask, so a umask that clears
+  // owner-write is what made the pre-fix fsync open(path, 'r+') fail with EACCES.
+  const originalUmask = await electronApp.evaluate(() => process.umask(0o200))
+
+  try {
+    rmSync(indexPath, { force: true })
+    rmSync(`${indexPath}.bak`, { force: true })
+    // Why: orcaProfiles:list reads the index from disk on every call and rebuilds
+    // it when missing, so this drives the real create + fsync + rename path.
+    const listed = await orcaPage.evaluate(async () => {
+      const result = await window.api.orcaProfiles.list()
+      window.__store!.getState().openSettingsPage()
+      return result
+    })
+    expect(listed.profiles.length).toBeGreaterThan(0)
+
+    // The rebuilt index must be on disk and complete — a cached in-memory list is
+    // not proof that the restrictive-umask write survived fsync.
+    const persisted = JSON.parse(readFileSync(indexPath, 'utf-8'))
+    expect(persisted.activeProfileId).toBe(listed.activeProfileId)
+    expect(persisted.profiles.map((profile: { id: string }) => profile.id)).toEqual(
+      listed.profiles.map((profile) => profile.id)
+    )
+    // Owner-write cleared proves the file was created under the restrictive umask
+    // rather than left over from startup's normal-umask write.
+    expect(statSync(indexPath).mode & 0o200).toBe(0)
+  } finally {
+    await electronApp.evaluate((_electron, umask) => process.umask(umask), originalUmask)
+  }
+
+  await expect(orcaPage.getByPlaceholder('Search settings')).toBeVisible()
+})
diff --git a/tests/e2e/golden-windows-fresh-startup.spec.ts b/tests/e2e/golden-windows-fresh-startup.spec.ts
new file mode 100644
index 00000000000..f153f765dcd
--- /dev/null
+++ b/tests/e2e/golden-windows-fresh-startup.spec.ts
@@ -0,0 +1,12 @@
+import { expect, test } from './helpers/orca-app'
+
+test.use({ dismissOnboarding: false, seedTestRepo: false })
+test.skip(process.platform !== 'win32', 'Fresh-profile fsync regression is Windows-only')
+
+test('fresh Windows profile reaches onboarding @windows-fresh-startup-golden', async ({
+  orcaPage
+}) => {
+  await expect(orcaPage.getByRole('heading', { name: /Pick your default agent/i })).toBeVisible({
+    timeout: 30_000
+  })
+})
diff --git a/tests/e2e/helpers/completed-worker-retirement-fixture.ts b/tests/e2e/helpers/completed-worker-retirement-fixture.ts
index d1211234258..564f52e2f5f 100644
--- a/tests/e2e/helpers/completed-worker-retirement-fixture.ts
+++ b/tests/e2e/helpers/completed-worker-retirement-fixture.ts
@@ -86,7 +86,7 @@ export function readCompletedWorkerLedger(): LifecycleEvent[] {
   }
   const contents = readFileSync(lifecycleLedgerPath, 'utf8')
   const lastCompleteLine = contents.lastIndexOf('\n')
-  if (lastCompleteLine < 0) {
+  if (lastCompleteLine === -1) {
     return []
   }
   return contents
diff --git a/tests/e2e/helpers/docker-ssh-relay-target.ts b/tests/e2e/helpers/docker-ssh-relay-target.ts
index 6c6f75dfc75..aa61f163aae 100644
--- a/tests/e2e/helpers/docker-ssh-relay-target.ts
+++ b/tests/e2e/helpers/docker-ssh-relay-target.ts
@@ -45,6 +45,21 @@ export function execDockerSshRelayTargetCommand(
   })
 }
 
+export function execDockerSshRelayTargetControlCommand(
+  target: DockerSshRelayTarget,
+  command: string
+): string {
+  return run('docker', [
+    'exec',
+    target.containerName,
+    'bash',
+    '--noprofile',
+    '--norc',
+    '-c',
+    command
+  ])
+}
+
 function sshArgs(target: DockerSshRelayTarget, command: string): string[] {
   return [
     '-i',
diff --git a/tests/e2e/helpers/orca-app.ts b/tests/e2e/helpers/orca-app.ts
index b083e37f36d..434a3297df3 100644
--- a/tests/e2e/helpers/orca-app.ts
+++ b/tests/e2e/helpers/orca-app.ts
@@ -252,6 +252,7 @@ export const test = base.extend<OrcaTestFixtures, OrcaWorkerFixtures>({
         ...(headful ? { ORCA_E2E_HEADFUL: '1' } : { ORCA_E2E_HEADLESS: '1' })
       }
     })
+    forwardElectronProcessLogs(app, testInfo)
     try {
       const resolvedHome = await app.evaluate(({ app }) => app.getPath('home'))
       assertElectronResolvedIsolatedHome(resolvedHome, homeIsolation)
@@ -261,7 +262,6 @@ export const test = base.extend<OrcaTestFixtures, OrcaWorkerFixtures>({
       await removeUserDataDirAfterShutdown(userDataDir)
       throw error
     }
-    forwardElectronProcessLogs(app, testInfo)
     await provideFixture(app)
     // Why: the Playwright close promise can settle before all Electron and PTY
     // descendants are gone in CI; worker teardown then hangs on open handles.
diff --git a/tests/e2e/helpers/startup-exec-readiness-oracle.ts b/tests/e2e/helpers/startup-exec-readiness-oracle.ts
new file mode 100644
index 00000000000..48b2928ed6d
--- /dev/null
+++ b/tests/e2e/helpers/startup-exec-readiness-oracle.ts
@@ -0,0 +1,274 @@
+import { rmSync, writeFileSync } from 'node:fs'
+import path from 'node:path'
+import type { Page } from '@stablyai/playwright-test'
+import type {
+  RuntimeTerminalListResult,
+  RuntimeTerminalRead,
+  RuntimeTerminalShow
+} from '../../../src/shared/runtime-types'
+import { toWebTerminalSurfaceTabId } from '../../../src/shared/terminal-surface-id'
+import { expect } from './orca-app'
+import { getTerminalContent, waitForActivePanePtyId } from './terminal'
+
+const RECOVERY_DEADLINE_MS = 8_000
+
+export type StartupExecTerminal = {
+  hostPtyId: string
+  panePtyId: string
+  parentTabId: string
+  startupMarker: string
+  tabId: string
+  terminal: string
+  worktreeId: string
+}
+
+export type BashExecProfileBarrier = {
+  releasePath: string
+  startedPath: string
+}
+
+const BASH_EXEC_LINE = 'exec -a figterm-sta4067 /bin/bash --noprofile --norc -l -i'
+const ZSH_EXEC_LINE = 'exec -a figterm-sta4067 /bin/zsh -o noglobalrcs -l -i'
+
+function execProfileContents(
+  runId: string,
+  execLine: string,
+  barrier?: BashExecProfileBarrier
+): string {
+  const guard = `ORCA_STA4067_EXEC_${runId.replaceAll(/[^A-Za-z0-9_]/g, '_')}`
+  const barrierScript = barrier
+    ? [
+        `: > ${shellQuote(barrier.startedPath)}`,
+        `while [[ ! -e ${shellQuote(barrier.releasePath)} ]]; do sleep 0.02; done`
+      ].join('\n  ')
+    : ''
+  return `if [[ -z "\${${guard}:-}" ]]; then
+  export ${guard}=1
+  ${barrierScript}
+  ${execLine}
+fi
+`
+}
+
+export function bashExecProfileContents(runId: string, barrier?: BashExecProfileBarrier): string {
+  return execProfileContents(runId, BASH_EXEC_LINE, barrier)
+}
+
+export function zshExecProfileContents(runId: string, barrier?: BashExecProfileBarrier): string {
+  return execProfileContents(runId, ZSH_EXEC_LINE, barrier)
+}
+
+function shellQuote(value: string): string {
+  return `'${value.replaceAll("'", `'\\''`)}'`
+}
+
+function splitMarker(marker: string): [string, string] {
+  const midpoint = Math.floor(marker.length / 2)
+  return [marker.slice(0, midpoint), marker.slice(midpoint)]
+}
+
+function markerCommand(marker: string): string {
+  const [left, right] = splitMarker(marker)
+  return `printf '%s%s\\n' ${shellQuote(left)} ${shellQuote(right)}`
+}
+
+function count(text: string, marker: string): number {
+  return text.split(marker).length - 1
+}
+
+async function expectSingleOwningPty(
+  page: Page,
+  worktreeId: string,
+  tabId: string,
+  terminal: string,
+  ptyId: string
+): Promise<void> {
+  const listed = await callStartupExecRuntime<RuntimeTerminalListResult>(page, 'terminal.list', {
+    worktree: `id:${worktreeId}`,
+    requireFreshPtyLiveness: true
+  })
+  expect(
+    listed.terminals
+      .filter((candidate) => candidate.tabId === tabId)
+      .map((candidate) => ({ handle: candidate.handle, ptyId: candidate.ptyId }))
+  ).toEqual([{ handle: terminal, ptyId }])
+}
+
+export async function callStartupExecRuntime<TResult>(
+  page: Page,
+  method: string,
+  params: unknown
+): Promise<TResult> {
+  return page.evaluate(
+    async ({ method, params }) => {
+      const response = await window.api.runtime.call({ method, params })
+      if (!response.ok) {
+        throw new Error(`${response.error.code}: ${response.error.message}`)
+      }
+      return response.result
+    },
+    { method, params }
+  ) as Promise<TResult>
+}
+
+export function installBashExecProfile(
+  homePath: string,
+  runId: string,
+  barrier?: BashExecProfileBarrier
+): () => void {
+  const profilePath = path.join(homePath, '.bash_profile')
+  writeFileSync(profilePath, bashExecProfileContents(runId, barrier))
+  return () => rmSync(profilePath, { force: true })
+}
+
+export function installZshExecProfile(
+  homePath: string,
+  runId: string,
+  barrier?: BashExecProfileBarrier
+): () => void {
+  const profilePath = path.join(homePath, '.zprofile')
+  writeFileSync(profilePath, zshExecProfileContents(runId, barrier))
+  return () => rmSync(profilePath, { force: true })
+}
+
+export async function createStartupExecTerminal(
+  page: Page,
+  worktreeId: string,
+  runId: string,
+  ledgerPath: string,
+  tabIdNamespace: 'owning-client' | 'paired-client',
+  shell: '/bin/bash' | '/bin/zsh' = '/bin/bash',
+  shellEnv: Record<string, string> = {}
+): Promise<StartupExecTerminal> {
+  const startupMarker = `STA4067_STARTUP_READY_${runId}`
+  const command = [
+    `printf '%s|%s\\n' "$$" "$(tty)" > ${shellQuote(ledgerPath)}`,
+    markerCommand(startupMarker)
+  ].join('; ')
+  const created = await callStartupExecRuntime<{
+    tab: { parentTabId: string; terminal: string | null }
+  }>(page, 'session.tabs.createTerminal', {
+    worktree: `id:${worktreeId}`,
+    command,
+    env: { ...shellEnv, SHELL: shell },
+    startupCommandDelivery: 'shell-ready',
+    activate: false,
+    select: false,
+    navigation: 'caller'
+  })
+  if (!created.tab.terminal) {
+    throw new Error('Startup-exec terminal did not publish an authoritative handle')
+  }
+  const terminal = created.tab.terminal
+  const tabId =
+    tabIdNamespace === 'paired-client'
+      ? toWebTerminalSurfaceTabId(created.tab.parentTabId)
+      : created.tab.parentTabId
+  await page.evaluate((id) => window.__store?.getState().setActiveWorktree(id), worktreeId)
+  const tab = page.locator(`[data-testid="sortable-tab"][data-tab-id="${tabId}"]`)
+  await expect(tab).toBeVisible({ timeout: 30_000 })
+  await tab.click()
+  await expect(tab).toHaveAttribute('data-active', 'true')
+  const panePtyId = await waitForActivePanePtyId(page, 30_000)
+  const shown = await callStartupExecRuntime<{ terminal: RuntimeTerminalShow }>(
+    page,
+    'terminal.show',
+    { terminal }
+  )
+  if (!shown.terminal.ptyId) {
+    throw new Error('Startup-exec terminal has no owning PTY identity')
+  }
+  await expectSingleOwningPty(
+    page,
+    worktreeId,
+    created.tab.parentTabId,
+    terminal,
+    shown.terminal.ptyId
+  )
+  return {
+    hostPtyId: shown.terminal.ptyId,
+    panePtyId,
+    parentTabId: created.tab.parentTabId,
+    startupMarker,
+    tabId,
+    terminal,
+    worktreeId
+  }
+}
+
+async function readTerminal(page: Page, terminal: string): Promise<RuntimeTerminalRead> {
+  return (
+    await callStartupExecRuntime<{ terminal: RuntimeTerminalRead }>(page, 'terminal.read', {
+      terminal
+    })
+  ).terminal
+}
+
+export async function expectStartupExecRecovery(
+  page: Page,
+  created: StartupExecTerminal,
+  runId: string
+): Promise<void> {
+  await expect
+    .poll(() => readTerminal(page, created.terminal), { timeout: RECOVERY_DEADLINE_MS })
+    .toMatchObject({
+      tail: expect.arrayContaining([expect.stringContaining(created.startupMarker)])
+    })
+  await expect
+    .poll(() => getTerminalContent(page), { timeout: RECOVERY_DEADLINE_MS })
+    .toContain(created.startupMarker)
+  const painted = await getTerminalContent(page)
+  expect(count(painted, created.startupMarker)).toBe(1)
+
+  const authoritative = await readTerminal(page, created.terminal)
+  expect(authoritative.status).toBe('running')
+  expect(count(authoritative.tail.join('\n'), created.startupMarker)).toBe(1)
+  const shown = await callStartupExecRuntime<{ terminal: RuntimeTerminalShow }>(
+    page,
+    'terminal.show',
+    { terminal: created.terminal }
+  )
+  expect(shown.terminal).toMatchObject({
+    connected: true,
+    ptyId: created.hostPtyId,
+    writable: true
+  })
+  await expectSingleOwningPty(
+    page,
+    created.worktreeId,
+    created.parentTabId,
+    created.terminal,
+    created.hostPtyId
+  )
+
+  const inputMarker = `STA4067_FIRST_INPUT_${runId}`
+  const textarea = page.locator('.xterm-helper-textarea:visible').first()
+  await textarea.focus()
+  await page.keyboard.type(markerCommand(inputMarker))
+  await page.keyboard.press('Enter')
+  await expect
+    .poll(() => getTerminalContent(page), { timeout: RECOVERY_DEADLINE_MS })
+    .toContain(inputMarker)
+  expect(count(await getTerminalContent(page), inputMarker)).toBe(1)
+  expect(count((await readTerminal(page, created.terminal)).tail.join('\n'), inputMarker)).toBe(1)
+  expect(await waitForActivePanePtyId(page, 30_000)).toBe(created.panePtyId)
+}
+
+export async function expectStartupCommandQueuedByCompatibilityFallback(
+  page: Page,
+  created: StartupExecTerminal
+): Promise<void> {
+  const [commandEchoMarker] = splitMarker(created.startupMarker)
+  await expect
+    .poll(() => readTerminal(page, created.terminal), { timeout: RECOVERY_DEADLINE_MS })
+    .toMatchObject({ tail: expect.arrayContaining([expect.stringContaining(commandEchoMarker)]) })
+  expect(
+    count((await readTerminal(page, created.terminal)).tail.join('\n'), commandEchoMarker)
+  ).toBe(1)
+}
+
+export async function closeStartupExecTerminal(page: Page, terminal: string | null): Promise<void> {
+  if (terminal) {
+    await callStartupExecRuntime(page, 'terminal.closeTab', { terminal }).catch(() => undefined)
+  }
+}
diff --git a/tests/e2e/korean-ime-terminal-shift-enter-commit.spec.ts b/tests/e2e/korean-ime-terminal-shift-enter-commit.spec.ts
index 208e79a8928..1ddfd56adb4 100644
--- a/tests/e2e/korean-ime-terminal-shift-enter-commit.spec.ts
+++ b/tests/e2e/korean-ime-terminal-shift-enter-commit.spec.ts
@@ -339,7 +339,7 @@ async function dispatchPlainEnter(session: CDPSession): Promise<void> {
 async function readPromptLine(page: Page): Promise<string> {
   const content = stripTerminalControls(await getTerminalContent(page, 20_000))
   const promptIndex = content.lastIndexOf(PROMPT)
-  if (promptIndex < 0) {
+  if (promptIndex === -1) {
     return ''
   }
   return (content.slice(promptIndex + PROMPT.length).split(/\r?\n/)[0] ?? '').trimEnd()
diff --git a/tests/e2e/linear-url-workspace-entry.spec.ts b/tests/e2e/linear-url-workspace-entry.spec.ts
new file mode 100644
index 00000000000..ccdf1d00c4a
--- /dev/null
+++ b/tests/e2e/linear-url-workspace-entry.spec.ts
@@ -0,0 +1,230 @@
+import type { ElectronApplication, Page } from '@stablyai/playwright-test'
+import { test, expect } from './helpers/orca-app'
+import { waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+import type { LinearIssue } from '../../src/shared/types'
+
+const LINEAR_URL =
+  'https://linear.app/stably/issue/STA-4084/restore-osc-133-shell-integration-when-an-exec-in-user-rc-files-strips'
+const EXPECTED_WORKSPACE_NAME = 'sta-4084-restore-osc-133-shell-integration-when'
+
+const LINEAR_ISSUE: LinearIssue = {
+  id: 'linear-sta-4084',
+  workspaceId: 'workspace-1',
+  workspaceName: 'Stably',
+  identifier: 'STA-4084',
+  title: 'Restore OSC 133 shell integration when an exec in user rc files strips',
+  branchName: 'sta-4084-restore-osc-133-shell-integration',
+  url: LINEAR_URL,
+  state: { name: 'Todo', type: 'unstarted', color: '#999999' },
+  team: { id: 'team-sta', name: 'Stably', key: 'STA' },
+  labels: [],
+  labelIds: [],
+  priority: 2,
+  estimate: null,
+  updatedAt: '2026-08-12T00:00:00.000Z'
+}
+
+function pasteChord(): string {
+  return process.platform === 'darwin' ? 'Meta+V' : 'Control+V'
+}
+
+async function installLinearFixture(
+  page: Page,
+  issue: LinearIssue | null = LINEAR_ISSUE,
+  lookupDelayMs: number | null = 150
+): Promise<void> {
+  await page.evaluate(
+    ({ resolvedIssue, lookupDelayMs }) => {
+      Reflect.deleteProperty(window, '__orcaTestReleaseLinearLookup')
+      const store = window.__store
+      if (!store) {
+        throw new Error('window.__store is not available')
+      }
+      store.setState({
+        linearStatus: {
+          connected: true,
+          viewer: null,
+          activeWorkspaceId: 'workspace-other',
+          selectedWorkspaceId: 'workspace-other',
+          workspaces: [
+            {
+              id: 'workspace-other',
+              displayName: 'Other User',
+              email: null,
+              organizationId: 'organization-other',
+              organizationName: 'Other',
+              organizationUrlKey: 'other'
+            },
+            {
+              id: 'workspace-1',
+              displayName: 'Stably User',
+              email: null,
+              organizationId: 'organization-stably',
+              organizationName: 'Stably',
+              organizationUrlKey: 'stably'
+            }
+          ]
+        },
+        linearStatusChecked: true,
+        checkLinearConnection: async () => {},
+        searchLinearIssues: async () => [],
+        listLinearIssues: async () => ({ items: [] }),
+        fetchLinearIssue: async (_identifier: string, workspaceId?: string | null) => {
+          await (lookupDelayMs === null
+            ? new Promise<void>((resolve) => {
+                Reflect.set(window, '__orcaTestReleaseLinearLookup', resolve)
+              })
+            : new Promise<void>((resolve) => window.setTimeout(resolve, lookupDelayMs)))
+          return resolvedIssue && workspaceId === resolvedIssue.workspaceId ? resolvedIssue : null
+        }
+      })
+    },
+    { resolvedIssue: issue, lookupDelayMs }
+  )
+}
+
+async function releaseHeldLinearLookup(page: Page): Promise<void> {
+  await page.evaluate(() => {
+    const release = Reflect.get(window, '__orcaTestReleaseLinearLookup')
+    if (typeof release !== 'function') {
+      throw new Error('Linear lookup is not held')
+    }
+    Reflect.deleteProperty(window, '__orcaTestReleaseLinearLookup')
+    release()
+  })
+}
+
+async function pasteLinearUrl(page: Page, input: ReturnType<Page['locator']>): Promise<void> {
+  await page.evaluate((text) => window.api.ui.writeClipboardText(text), LINEAR_URL)
+  await input.focus()
+  await page.keyboard.press(pasteChord())
+}
+
+async function openJumpPalette(electronApp: ElectronApplication): Promise<void> {
+  // Headless Playwright keys bypass Electron's before-input-event shortcut path.
+  await electronApp.evaluate(({ BrowserWindow }) => {
+    BrowserWindow.getAllWindows()[0]?.webContents.send('ui:toggleWorktreePalette')
+  })
+}
+
+test.describe('Linear URL workspace entry', () => {
+  test.beforeEach(async ({ orcaPage }) => {
+    await waitForSessionReady(orcaPage)
+    await waitForActiveWorktree(orcaPage)
+    await installLinearFixture(orcaPage)
+  })
+
+  test('pasting into the composer selects the Linear issue without ArrowDown', async ({
+    orcaPage
+  }, testInfo) => {
+    await installLinearFixture(orcaPage, LINEAR_ISSUE, null)
+    await orcaPage.getByRole('button', { name: 'New workspace', exact: true }).click()
+    const dialog = orcaPage.getByRole('dialog', { name: /Create (Workspace|Worktree)/i })
+    const input = dialog.locator('[data-workspace-name-input="true"]')
+    await expect(input).toBeVisible()
+
+    await pasteLinearUrl(orcaPage, input)
+    await expect
+      .poll(() =>
+        orcaPage.evaluate(
+          () => typeof Reflect.get(window, '__orcaTestReleaseLinearLookup') === 'function'
+        )
+      )
+      .toBe(true)
+    await input.press('Enter')
+    await expect(input).toHaveValue(LINEAR_URL)
+    await expect(dialog.locator('[data-workspace-source-pill="true"]')).toHaveCount(0)
+    await releaseHeldLinearLookup(orcaPage)
+
+    const issueRow = orcaPage.getByRole('option', {
+      name: `${LINEAR_ISSUE.identifier} ${LINEAR_ISSUE.title}`,
+      exact: true
+    })
+    const useNameRow = orcaPage.getByRole('option', {
+      name: `Use "${LINEAR_URL}" as workspace name`,
+      exact: true
+    })
+    await expect(useNameRow).toBeVisible()
+    await expect(useNameRow).not.toHaveAttribute('data-selected', 'true')
+    await expect(issueRow).toContainText(LINEAR_ISSUE.title)
+    await expect(issueRow).toHaveAttribute('data-selected', 'true')
+    await testInfo.attach('linear-url-smart-entry-selected.png', {
+      body: await dialog.screenshot(),
+      contentType: 'image/png'
+    })
+
+    await input.press('Enter')
+    const sourcePill = dialog.locator('[data-workspace-source-pill="true"]')
+    await expect(sourcePill).toContainText(LINEAR_ISSUE.title)
+    await expect(dialog.getByPlaceholder('Workspace name')).toHaveValue(EXPECTED_WORKSPACE_NAME)
+    await expect(dialog.getByRole('button', { name: /Create (Workspace|Worktree)/i })).toBeEnabled()
+    await testInfo.attach('linear-url-smart-entry-composer.png', {
+      body: await dialog.screenshot(),
+      contentType: 'image/png'
+    })
+  })
+
+  test('a Linear URL lookup miss falls back to an arbitrary workspace name', async ({
+    orcaPage
+  }) => {
+    await installLinearFixture(orcaPage, null)
+    await orcaPage.getByRole('button', { name: 'New workspace', exact: true }).click()
+    const dialog = orcaPage.getByRole('dialog', { name: /Create (Workspace|Worktree)/i })
+    const input = dialog.locator('[data-workspace-name-input="true"]')
+
+    await pasteLinearUrl(orcaPage, input)
+    const useNameRow = orcaPage.getByRole('option', {
+      name: `Use "${LINEAR_URL}" as workspace name`,
+      exact: true
+    })
+    await expect(useNameRow).toHaveAttribute('data-selected', 'true')
+    await expect(input).not.toHaveAttribute('aria-busy', 'true')
+
+    await input.press('Enter')
+    await expect(input).toHaveValue(LINEAR_URL)
+    await expect(dialog.locator('[data-workspace-source-pill="true"]')).toHaveCount(0)
+    const suggestions = dialog.locator('[data-workspace-source-suggestions="true"]')
+    if (await suggestions.isVisible()) {
+      await input.press('Escape')
+    }
+    await expect(input).not.toHaveAttribute('aria-busy', 'true')
+    await input.press('Enter')
+    await expect(dialog.locator('[data-agent-combobox-root="true"][role="combobox"]')).toBeFocused()
+  })
+
+  test('pasting into Cmd+J previews the Linear issue and opens the linked composer', async ({
+    electronApp,
+    orcaPage
+  }, testInfo) => {
+    await openJumpPalette(electronApp)
+    const palette = orcaPage.getByRole('dialog', { name: 'Jump to...' })
+    const input = palette.getByPlaceholder(
+      'Search chats, terminals, worktrees, settings, and actions...'
+    )
+    await expect(input).toBeVisible()
+
+    await pasteLinearUrl(orcaPage, input)
+
+    const preview = palette.locator(
+      '[data-cmd-j-linear-issue-preview="true"][data-cmd-j-linear-issue-state="resolved"]'
+    )
+    await expect(preview).toContainText(LINEAR_ISSUE.identifier)
+    await expect(preview).toContainText(LINEAR_ISSUE.title)
+    await expect(preview).toHaveAttribute('data-selected', 'true')
+    await testInfo.attach('linear-url-cmd-j-preview.png', {
+      body: await palette.screenshot(),
+      contentType: 'image/png'
+    })
+
+    await input.press('Enter')
+    const dialog = orcaPage.getByRole('dialog', { name: /Create (Workspace|Worktree)/i })
+    const sourcePill = dialog.locator('[data-workspace-source-pill="true"]')
+    await expect(sourcePill).toContainText(LINEAR_ISSUE.title)
+    await expect(dialog.getByPlaceholder('Workspace name')).toHaveValue(EXPECTED_WORKSPACE_NAME)
+    await expect(dialog.getByRole('button', { name: /Create (Workspace|Worktree)/i })).toBeEnabled()
+    await testInfo.attach('linear-url-cmd-j-composer.png', {
+      body: await dialog.screenshot(),
+      contentType: 'image/png'
+    })
+  })
+})
diff --git a/tests/e2e/multi-client-navigation-isolation.spec.ts b/tests/e2e/multi-client-navigation-isolation.spec.ts
index 399ae5d963f..2c1018a75fa 100644
--- a/tests/e2e/multi-client-navigation-isolation.spec.ts
+++ b/tests/e2e/multi-client-navigation-isolation.spec.ts
@@ -1,5 +1,7 @@
 import { execFileSync } from 'node:child_process'
 import { randomUUID } from 'node:crypto'
+import { mkdtempSync, rmSync } from 'node:fs'
+import os from 'node:os'
 import path from 'node:path'
 import type { ElectronApplication, Page } from '@stablyai/playwright-test'
 import { test, expect } from './helpers/orca-app'
@@ -176,3 +178,98 @@ test('keeps two paired browser clients and the host on independent worktrees', a
     await clientA?.close()
   }
 })
+
+test('shows only provider-backed creation actions in paired web', async ({
+  electronApp,
+  orcaPage
+}, testInfo) => {
+  const visibleWorktreeId = await orcaPage.evaluate(
+    () => window.__store?.getState().activeWorktreeId
+  )
+  if (!visibleWorktreeId) {
+    throw new Error('Host worktree was not active before paired web validation')
+  }
+
+  const offer = await createPairingOffer(orcaPage)
+  const client = await openPairedClient(electronApp, offer, visibleWorktreeId)
+  try {
+    await selectWorktree(client, visibleWorktreeId)
+    await expect
+      .poll(() =>
+        client.evaluate(() => {
+          const state = window.__store?.getState()
+          const worktree = state
+            ?.allWorktrees()
+            .find((candidate) => candidate.id === state.activeWorktreeId)
+          const environmentId = worktree?.runtimeOwnerEnvironmentId
+          return environmentId
+            ? state.runtimeStatusByEnvironmentId
+                .get(environmentId)
+                ?.status.capabilities?.includes('browser.screencast.v1') === true
+            : false
+        })
+      )
+      .toBe(true)
+
+    await client.getByRole('button', { name: 'New tab' }).first().click()
+    await expect(client.getByRole('menuitem', { name: /New Terminal/i })).toBeVisible()
+    await expect(client.getByRole('menuitem', { name: /New Browser Tab/i })).toBeVisible()
+    await expect(client.getByRole('menuitem', { name: /New Markdown/i })).toBeVisible()
+    await expect(client.getByRole('menuitem', { name: /Mobile Emulator/i })).toHaveCount(0)
+
+    const screenshotPath = testInfo.outputPath('paired-web-provider-backed-create-menu.png')
+    await client.screenshot({ path: screenshotPath })
+    await testInfo.attach('paired-web-provider-backed-create-menu', {
+      path: screenshotPath,
+      contentType: 'image/png'
+    })
+  } finally {
+    await client.close()
+  }
+})
+
+test('routes Add Project folder browsing through the paired host', async ({
+  electronApp,
+  orcaPage,
+  registerPostElectronShutdownCleanup
+}) => {
+  const hostFolder = mkdtempSync(path.join(os.tmpdir(), 'orca-paired-web-folder-'))
+  const folderName = path.basename(hostFolder)
+  registerPostElectronShutdownCleanup(async () => {
+    rmSync(hostFolder, { recursive: true, force: true })
+  })
+  const visibleWorktreeId = await orcaPage.evaluate(
+    () => window.__store?.getState().activeWorktreeId
+  )
+  if (!visibleWorktreeId) {
+    throw new Error('Host worktree was not active before paired web validation')
+  }
+
+  const offer = await createPairingOffer(orcaPage)
+  const client = await openPairedClient(electronApp, offer, visibleWorktreeId)
+  try {
+    await client
+      .getByRole('button', { name: /Add Project/i })
+      .first()
+      .click()
+    const addDialog = client.getByRole('dialog', { name: /Add a project/i })
+    await expect(addDialog).toBeVisible()
+    await expect(addDialog).not.toContainText('Local Mac')
+
+    await addDialog.getByRole('button', { name: /Browse folder/i }).click()
+    const browser = client.getByRole('dialog', { name: /Browse host filesystem/i })
+    await expect(browser).toBeVisible()
+    await expect(browser.getByRole('button', { name: /Select folder/i })).toBeVisible()
+    await browser.getByRole('button', { name: /^Cancel$/i }).click()
+
+    const manualPathDialog = client.getByRole('dialog', { name: /Open host project/i })
+    await manualPathDialog.locator('#server-project-path').fill(hostFolder)
+    await manualPathDialog.getByRole('button', { name: /Open as Folder/i }).click()
+    await expect(manualPathDialog).toBeHidden({ timeout: 30_000 })
+    await expect(
+      client.locator('[data-worktree-sidebar]').getByText(folderName, { exact: true }).first()
+    ).toBeVisible({ timeout: 30_000 })
+  } finally {
+    await client.close()
+  }
+})
diff --git a/tests/e2e/orchestration-worker-settlement-release-cli.spec.ts b/tests/e2e/orchestration-worker-settlement-release-cli.spec.ts
new file mode 100644
index 00000000000..33ea97e13b0
--- /dev/null
+++ b/tests/e2e/orchestration-worker-settlement-release-cli.spec.ts
@@ -0,0 +1,290 @@
+import { spawnSync } from 'node:child_process'
+import { chmodSync, existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { test as base, expect } from './helpers/orca-app'
+import { waitForActivePaneHookDescriptor, waitForActivePanePtyId } from './helpers/terminal'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+import { RuntimeClient } from '../../src/cli/runtime-client'
+import Database from '../../src/main/sqlite/sync-database'
+import type { RuntimeTerminalListResult, RuntimeTerminalRead } from '../../src/shared/runtime-types'
+
+const fakeCliDir = mkdtempSync(path.join(os.tmpdir(), 'orca-e2e-settlement-release-'))
+const cliLedgerPath = path.join(fakeCliDir, 'cli.jsonl')
+const cliEntry = path.join(process.cwd(), 'out', 'cli', 'index.js')
+const fakeCodexSource = `
+const { appendFileSync } = require('node:fs')
+const { spawnSync } = require('node:child_process')
+let capability = null
+let acknowledged = false
+process.stdout.write('\\u001b]0;Codex Ready\\u0007OpenAI Codex\\nmodel: e2e\\ndirectory: e2e\\n')
+process.stdin.on('data', (chunk) => {
+  const input = chunk.toString()
+  capability ||= input.match(/--dispatch-capability (dcap_[A-Za-z0-9_-]+)/)?.[1] || null
+  if (!acknowledged && input.includes('\\r')) {
+    acknowledged = true
+    process.stdout.write('ACK\\n')
+  }
+  const encoded = input.match(/ORCA_E2E_WORKER_DONE:([A-Za-z0-9+/=]+)/)?.[1]
+  if (!encoded || !capability) return
+  const request = JSON.parse(Buffer.from(encoded, 'base64').toString('utf8'))
+  const args = [
+    'orchestration', 'send',
+    '--from', request.mismatch ? 'term_foreign' : process.env.ORCA_TERMINAL_HANDLE,
+    '--dispatch-capability', capability,
+    '--to', request.coordinator,
+    '--type', 'worker_done',
+    '--subject', request.mismatch ? 'wrong sender' : 'completed',
+    '--body', 'Compiled CLI E2E worker completion.',
+    '--task-id', request.taskId,
+    '--dispatch-id', request.dispatchId,
+    '--outcome', 'succeeded',
+    '--json'
+  ]
+  const result = spawnSync(process.execPath, [process.env.ORCA_E2E_CLI_ENTRY, ...args], {
+    env: process.env,
+    encoding: 'utf8'
+  })
+  appendFileSync(
+    process.env.ORCA_E2E_CLI_LEDGER,
+    JSON.stringify({ mismatch: request.mismatch, args, status: result.status, stdout: result.stdout, stderr: result.stderr }) + '\\n'
+  )
+})
+process.stdin.resume()
+setInterval(() => {}, 60_000)
+`
+
+if (process.platform === 'win32') {
+  writeFileSync(path.join(fakeCliDir, 'fake-codex.js'), fakeCodexSource)
+  writeFileSync(
+    path.join(fakeCliDir, 'codex.cmd'),
+    '@echo off\r\nnode "%~dp0\\fake-codex.js" %*\r\n'
+  )
+} else {
+  const executable = path.join(fakeCliDir, 'codex')
+  writeFileSync(executable, `#!/usr/bin/env node\n${fakeCodexSource}`)
+  chmodSync(executable, 0o755)
+}
+
+const test = base.extend({
+  launchEnv: [
+    {
+      PATH: `${fakeCliDir}${path.delimiter}${process.env.PATH ?? ''}`,
+      ORCA_E2E_CLI_ENTRY: cliEntry,
+      ORCA_E2E_CLI_LEDGER: cliLedgerPath
+    },
+    { option: true }
+  ]
+})
+
+type CliLedgerEntry = {
+  mismatch: boolean
+  status: number
+  stdout: string
+  stderr: string
+}
+
+function readCliLedger(): CliLedgerEntry[] {
+  if (!existsSync(cliLedgerPath)) {
+    return []
+  }
+  return readFileSync(cliLedgerPath, 'utf8')
+    .split(/\r?\n/)
+    .filter(Boolean)
+    .map((line) => JSON.parse(line) as CliLedgerEntry)
+}
+
+function invokeCompiledCli(userDataDir: string, args: string[]) {
+  return spawnSync(process.execPath, [cliEntry, ...args], {
+    env: { ...process.env, ORCA_USER_DATA_PATH: userDataDir, ORCA_DEV_CLI_INVOCATION: '1' },
+    encoding: 'utf8'
+  })
+}
+
+function encodeWorkerDone(input: {
+  coordinator: string
+  taskId: string
+  dispatchId: string
+  mismatch: boolean
+}): string {
+  return Buffer.from(JSON.stringify(input)).toString('base64')
+}
+
+test.afterAll(() => {
+  rmSync(fakeCliDir, { recursive: true, force: true })
+})
+
+test('compiled CLI rejects false completion then reconciles the dead retained worker', async ({
+  orcaPage,
+  electronApp
+}) => {
+  test.setTimeout(180_000)
+  rmSync(cliLedgerPath, { force: true })
+  await waitForSessionReady(orcaPage)
+  const worktreeId = await waitForActiveWorktree(orcaPage)
+  await ensureTerminalVisible(orcaPage)
+  await waitForActivePanePtyId(orcaPage)
+  const coordinatorPane = await waitForActivePaneHookDescriptor(orcaPage)
+  const userDataDir = await electronApp.evaluate(({ app }) => app.getPath('userData'))
+  const client = new RuntimeClient(userDataDir, 30_000, null, null)
+  const coordinator = await client.call<{ terminal: { handle: string } }>('terminal.resolvePane', {
+    paneKey: coordinatorPane.paneKey
+  })
+  const run = await client.call<{ run: { id: string } }>('orchestration.runCreate', {
+    objective: 'Compiled CLI settlement and release E2E',
+    from: coordinator.result.terminal.handle
+  })
+  const task = await client.call<{ task: { id: string } }>('orchestration.taskCreate', {
+    spec: 'Respond ACK and await the completion marker.',
+    run: run.result.run.id,
+    callerTerminalHandle: coordinator.result.terminal.handle
+  })
+  const coordinatorTerminal = await client.call<{ terminal: { worktreeId: string } }>(
+    'terminal.show',
+    { terminal: coordinator.result.terminal.handle }
+  )
+  await expect
+    .poll(async () => {
+      const listed = await client.call<{ worktrees: { id: string }[] }>('worktree.list', {})
+      return listed.result.worktrees.some(
+        (worktree) => worktree.id === coordinatorTerminal.result.terminal.worktreeId
+      )
+    })
+    .toBe(true)
+  const started = await client.call<{ effects: { kind: string; role?: string; id?: string }[] }>(
+    'orchestration.workerStart',
+    {
+      task: task.result.task.id,
+      from: coordinator.result.terminal.handle,
+      agent: 'codex',
+      timeoutMs: 15_000
+    }
+  )
+  const workerHandle = started.result.effects.find(
+    (effect) => effect.kind === 'terminal' && effect.role === 'agent'
+  )?.id
+  expect(workerHandle).toBeTruthy()
+
+  let worker = (
+    await client.call<RuntimeTerminalListResult>('terminal.list')
+  ).result.terminals.find((terminal) => terminal.handle === workerHandle)
+  await expect
+    .poll(async () => {
+      const listed = await client.call<RuntimeTerminalListResult>('terminal.list')
+      worker = listed.result.terminals.find((terminal) => terminal.handle === workerHandle)
+      if (!worker) {
+        return ''
+      }
+      const read = await client.call<{ terminal: RuntimeTerminalRead }>('terminal.read', {
+        terminal: worker.handle,
+        limit: 200
+      })
+      return read.result.terminal.tail.join('\n')
+    })
+    .toContain('ACK')
+  const dispatch = await client.call<{ dispatch: { id: string; status: string } | null }>(
+    'orchestration.dispatchShow',
+    { task: task.result.task.id }
+  )
+  expect(dispatch.result.dispatch?.status).toBe('dispatched')
+
+  const baseMarker = {
+    coordinator: coordinator.result.terminal.handle,
+    taskId: task.result.task.id,
+    dispatchId: dispatch.result.dispatch!.id
+  }
+  await client.call('terminal.send', {
+    terminal: workerHandle,
+    text: `ORCA_E2E_WORKER_DONE:${encodeWorkerDone({ ...baseMarker, mismatch: true })}`,
+    enter: true
+  })
+  await expect.poll(() => readCliLedger()).toHaveLength(1)
+  const rejected = readCliLedger()[0]!
+  expect.soft(rejected.status).not.toBe(0)
+  expect.soft(JSON.parse(rejected.stdout)).toMatchObject({
+    ok: false,
+    error: { code: 'dispatch_capability_invalid' }
+  })
+  const stillDispatched = await client.call<{ dispatch: { status: string } | null }>(
+    'orchestration.dispatchShow',
+    { task: task.result.task.id }
+  )
+  expect(stillDispatched.result.dispatch?.status).toBe('dispatched')
+
+  await client.call('terminal.send', {
+    terminal: workerHandle,
+    text: `ORCA_E2E_WORKER_DONE:${encodeWorkerDone({ ...baseMarker, mismatch: false })}`,
+    enter: true
+  })
+  await expect.poll(() => readCliLedger()).toHaveLength(2)
+  const completed = readCliLedger()[1]!
+  expect(completed.status).toBe(0)
+  expect.soft(JSON.parse(completed.stdout)).toMatchObject({
+    ok: true,
+    result: { lifecycle: { action: 'completed' } }
+  })
+  await expect
+    .poll(async () => {
+      const current = await client.call<{ dispatch: { status: string } | null }>(
+        'orchestration.dispatchShow',
+        { task: task.result.task.id }
+      )
+      return current.result.dispatch?.status
+    })
+    .toBe('completed')
+
+  await client.call('terminal.close', { terminal: workerHandle })
+  await expect
+    .poll(async () => {
+      const listed = await client.call<RuntimeTerminalListResult>('terminal.list')
+      return listed.result.terminals.some((terminal) => terminal.handle === workerHandle)
+    })
+    .toBe(false)
+  const db = new Database(path.join(userDataDir, 'orchestration.db'))
+  try {
+    db.prepare(
+      `UPDATE worker_terminal_resources
+       SET ownership_state = 'external', release_state = 'retained',
+           retained_reason = 'external_terminal'
+       WHERE owner_dispatch_id = ?`
+    ).run(dispatch.result.dispatch!.id)
+  } finally {
+    db.close()
+  }
+
+  const released = invokeCompiledCli(userDataDir, [
+    'orchestration',
+    'worker-release',
+    '--dispatch',
+    dispatch.result.dispatch!.id,
+    '--json'
+  ])
+  expect(released.status).toBe(0)
+  expect.soft(JSON.parse(released.stdout)).toMatchObject({
+    ok: true,
+    result: { state: 'released', processAction: 'none' }
+  })
+  const verified = new Database(path.join(userDataDir, 'orchestration.db'))
+  try {
+    expect
+      .soft(
+        verified
+          .prepare(
+            `SELECT ownership_state, release_state
+           FROM worker_terminal_resources WHERE owner_dispatch_id = ?`
+          )
+          .get(dispatch.result.dispatch!.id)
+      )
+      .toEqual({ ownership_state: 'released', release_state: 'released' })
+  } finally {
+    verified.close()
+  }
+  const coordinatorStillLive = await client.call<RuntimeTerminalListResult>('terminal.list', {
+    worktree: `id:${worktreeId}`
+  })
+  expect(
+    coordinatorStillLive.result.terminals.some(
+      (terminal) => terminal.handle === coordinator.result.terminal.handle
+    )
+  ).toBe(true)
+})
diff --git a/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts b/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts
new file mode 100644
index 00000000000..1e8de3f5287
--- /dev/null
+++ b/tests/e2e/paired-browser-creation-reconciliation-failure.spec.ts
@@ -0,0 +1,394 @@
+import { writeFileSync } from 'node:fs'
+import path from 'node:path'
+import type { Page, TestInfo } from '@stablyai/playwright-test'
+import { RuntimeClient } from '../../src/cli/runtime/client'
+import type { RuntimeMobileSessionTabsResult } from '../../src/shared/runtime-types'
+import { expect, test } from './helpers/orca-app'
+import { openFileExplorer } from './helpers/file-explorer'
+import {
+  launchHeadlessPairedRuntimeHost,
+  type HeadlessPairedRuntimeHost
+} from './helpers/headless-paired-runtime-host'
+import {
+  createRuntimeDesktopPairingOffer,
+  launchPairedElectronClient,
+  type PairedElectronClient,
+  type RuntimeDesktopPairingOffer
+} from './helpers/paired-electron-client'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+
+const FIXTURE_NAME = 'paired-browser-reconcile-failure.html'
+
+type FaultSnapshot = {
+  armed: boolean
+  capabilityRejectionArmed: boolean
+  createdPageId: string | null
+  suppressedPageIds: string[]
+}
+
+type FaultWindow = Window & {
+  __webRuntimeBrowserCreationFault?: {
+    arm: () => void
+    armCapabilityRejection: () => void
+    release: () => boolean
+    reset: () => void
+    snapshot: () => FaultSnapshot
+  }
+}
+
+type ClientTabState = {
+  browserTabIds: string[]
+  browserWorkspaceIds: string[]
+  editorTabIds: string[]
+  groupIds: string[]
+  terminalTabIds: string[]
+}
+
+async function readHostTabs(
+  hostClient: RuntimeClient,
+  repoPath: string
+): Promise<RuntimeMobileSessionTabsResult> {
+  const response = await hostClient.call<RuntimeMobileSessionTabsResult>('session.tabs.list', {
+    worktree: `path:${repoPath}`
+  })
+  return response.result
+}
+
+async function readClientTabs(page: Page, worktreeId: string): Promise<ClientTabState> {
+  return page.evaluate((targetWorktreeId) => {
+    const state = window.__store?.getState()
+    if (!state) {
+      throw new Error('Paired client store unavailable')
+    }
+    const unifiedTabs = state.unifiedTabsByWorktree[targetWorktreeId] ?? []
+    return {
+      browserTabIds: unifiedTabs
+        .filter((tab) => tab.contentType === 'browser')
+        .map((tab) => tab.id),
+      browserWorkspaceIds: (state.browserTabsByWorktree[targetWorktreeId] ?? []).map(
+        (workspace) => workspace.id
+      ),
+      editorTabIds: unifiedTabs.filter((tab) => tab.contentType === 'editor').map((tab) => tab.id),
+      groupIds: (state.groupsByWorktree[targetWorktreeId] ?? []).map((group) => group.id),
+      terminalTabIds: unifiedTabs
+        .filter((tab) => tab.contentType === 'terminal')
+        .map((tab) => tab.id)
+    }
+  }, worktreeId)
+}
+
+async function runReconciliationFailureJourney(args: {
+  hostClient: RuntimeClient
+  offer: RuntimeDesktopPairingOffer
+  repoPath: string
+  testInfo: TestInfo
+  topology: 'headed' | 'headless'
+}): Promise<void> {
+  let client: PairedElectronClient | null = null
+  try {
+    client = await launchPairedElectronClient(
+      args.offer,
+      args.testInfo,
+      `${args.topology} browser reconciliation failure`
+    )
+    await client.app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0]?.show())
+    const page = client.page
+    const worktreeId = await expect
+      .poll(
+        () =>
+          page.evaluate((repoPath) => {
+            const state = window.__store?.getState()
+            return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+          }, args.repoPath),
+        { timeout: 60_000, message: 'paired client never received the host worktree' }
+      )
+      .not.toBeNull()
+      .then(() =>
+        page.evaluate((repoPath) => {
+          const state = window.__store?.getState()
+          return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+        }, args.repoPath)
+      )
+    if (!worktreeId) {
+      throw new Error('Paired client worktree disappeared after discovery')
+    }
+    await page.evaluate(
+      ({ environmentId, worktreeId }) => {
+        window.__store?.getState().setActiveWorktree(worktreeId, `runtime:${environmentId}`)
+      },
+      { environmentId: client.environmentId, worktreeId }
+    )
+    await expect
+      .poll(() => readClientTabs(page, worktreeId), {
+        timeout: 60_000,
+        message: 'paired client did not materialize the host terminal'
+      })
+      .toMatchObject({ terminalTabIds: expect.arrayContaining([expect.any(String)]) })
+
+    await openFileExplorer(page)
+    const fixtureRow = page.locator('[data-file-explorer-row]').filter({ hasText: FIXTURE_NAME })
+    await expect(fixtureRow).toBeVisible({ timeout: 30_000 })
+    await fixtureRow.click()
+    const openPreviewToSide = page.getByRole('button', { name: 'Open Preview to the Side' })
+    await expect(openPreviewToSide).toBeVisible({ timeout: 30_000 })
+    const baselineClient = await readClientTabs(page, worktreeId)
+    expect(baselineClient.editorTabIds).not.toHaveLength(0)
+    expect(baselineClient.terminalTabIds).not.toHaveLength(0)
+    const baselineHost = await readHostTabs(args.hostClient, args.repoPath)
+    const baselineHostBrowserIds = baselineHost.tabs
+      .filter((tab) => tab.type === 'browser')
+      .map((tab) => tab.browserPageId)
+
+    await page.evaluate(() => {
+      const fault = (window as FaultWindow).__webRuntimeBrowserCreationFault
+      if (!fault) {
+        throw new Error('Browser reconciliation E2E fault seam unavailable')
+      }
+      fault.arm()
+    })
+    await openPreviewToSide.click()
+
+    const faultSnapshot = await expect
+      .poll(
+        () =>
+          page.evaluate(
+            () => (window as FaultWindow).__webRuntimeBrowserCreationFault?.snapshot() ?? null
+          ),
+        { timeout: 30_000, message: 'host browser creation never reached the held fault seam' }
+      )
+      .toMatchObject({ armed: true, createdPageId: expect.any(String) })
+      .then(() =>
+        page.evaluate(
+          () => (window as FaultWindow).__webRuntimeBrowserCreationFault?.snapshot() ?? null
+        )
+      )
+    const createdPageId = faultSnapshot?.createdPageId
+    if (!createdPageId) {
+      throw new Error('Held browser creation did not expose its exact host page id')
+    }
+
+    const heldHost = await readHostTabs(args.hostClient, args.repoPath)
+    expect(
+      heldHost.tabs.some((tab) => tab.type === 'browser' && tab.browserPageId === createdPageId)
+    ).toBe(true)
+    const heldClient = await readClientTabs(page, worktreeId)
+    expect(heldClient.browserTabIds).toEqual(baselineClient.browserTabIds)
+    expect(heldClient.browserWorkspaceIds).toEqual(baselineClient.browserWorkspaceIds)
+    expect(heldClient.editorTabIds).toEqual(baselineClient.editorTabIds)
+    expect(heldClient.terminalTabIds).toEqual(baselineClient.terminalTabIds)
+    expect(heldClient.groupIds).toHaveLength(baselineClient.groupIds.length + 1)
+
+    await page.screenshot({
+      path: args.testInfo.outputPath(`${args.topology}-browser-reconciliation-held.png`),
+      fullPage: true
+    })
+    expect(
+      await page.evaluate(
+        () => (window as FaultWindow).__webRuntimeBrowserCreationFault?.release() ?? false
+      )
+    ).toBe(true)
+
+    await expect(page.getByText('Unable to open this file in Orca Browser.')).toBeVisible({
+      timeout: 30_000
+    })
+    await expect
+      .poll(
+        async () => {
+          const snapshot = await readHostTabs(args.hostClient, args.repoPath)
+          return snapshot.tabs.some(
+            (tab) => tab.type === 'browser' && tab.browserPageId === createdPageId
+          )
+        },
+        { timeout: 30_000, message: 'rollback did not close the exact host browser page' }
+      )
+      .toBe(false)
+    const settledClient = await expect
+      .poll(() => readClientTabs(page, worktreeId), {
+        timeout: 30_000,
+        message: 'client split and browser state did not settle after rollback'
+      })
+      .toMatchObject({
+        browserTabIds: baselineClient.browserTabIds,
+        browserWorkspaceIds: baselineClient.browserWorkspaceIds,
+        editorTabIds: baselineClient.editorTabIds,
+        groupIds: baselineClient.groupIds,
+        terminalTabIds: baselineClient.terminalTabIds
+      })
+      .then(() => readClientTabs(page, worktreeId))
+    expect(settledClient).toEqual(baselineClient)
+    expect(
+      (await readHostTabs(args.hostClient, args.repoPath)).tabs
+        .filter((tab) => tab.type === 'browser')
+        .map((tab) => tab.browserPageId)
+    ).toEqual(baselineHostBrowserIds)
+    await page.evaluate(() => (window as FaultWindow).__webRuntimeBrowserCreationFault?.reset())
+  } finally {
+    await client?.dispose()
+  }
+}
+
+async function runCapabilityFailureJourney(args: {
+  hostClient: RuntimeClient
+  offer: RuntimeDesktopPairingOffer
+  repoPath: string
+  testInfo: TestInfo
+  topology: 'headed' | 'headless'
+}): Promise<void> {
+  let client: PairedElectronClient | null = null
+  try {
+    client = await launchPairedElectronClient(
+      args.offer,
+      args.testInfo,
+      `${args.topology} browser capability failure`
+    )
+    await client.app.evaluate(({ BrowserWindow }) => BrowserWindow.getAllWindows()[0]?.show())
+    const page = client.page
+    const worktreeId = await expect
+      .poll(
+        () =>
+          page.evaluate((repoPath) => {
+            const state = window.__store?.getState()
+            return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+          }, args.repoPath),
+        { timeout: 60_000, message: 'paired client never received the host worktree' }
+      )
+      .not.toBeNull()
+      .then(() =>
+        page.evaluate((repoPath) => {
+          const state = window.__store?.getState()
+          return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+        }, args.repoPath)
+      )
+    if (!worktreeId) {
+      throw new Error('Paired client worktree disappeared after discovery')
+    }
+    await page.evaluate(
+      ({ environmentId, worktreeId }) => {
+        window.__store?.getState().setActiveWorktree(worktreeId, `runtime:${environmentId}`)
+      },
+      { environmentId: client.environmentId, worktreeId }
+    )
+    await expect
+      .poll(() => readClientTabs(page, worktreeId), {
+        timeout: 60_000,
+        message: 'paired client did not materialize the host terminal'
+      })
+      .toMatchObject({ terminalTabIds: expect.arrayContaining([expect.any(String)]) })
+
+    await openFileExplorer(page)
+    const fixtureRow = page.locator('[data-file-explorer-row]').filter({ hasText: FIXTURE_NAME })
+    await expect(fixtureRow).toBeVisible({ timeout: 30_000 })
+    await fixtureRow.click()
+    const openPreviewToSide = page.getByRole('button', { name: 'Open Preview to the Side' })
+    await expect(openPreviewToSide).toBeVisible({ timeout: 30_000 })
+    const baselineClient = await readClientTabs(page, worktreeId)
+    const baselineHost = await readHostTabs(args.hostClient, args.repoPath)
+
+    await page.evaluate(() => {
+      const fault = (window as FaultWindow).__webRuntimeBrowserCreationFault
+      if (!fault) {
+        throw new Error('Browser capability E2E fault seam unavailable')
+      }
+      fault.armCapabilityRejection()
+    })
+    await openPreviewToSide.click()
+
+    await expect(page.getByText('Unable to open this file in Orca Browser.')).toBeVisible({
+      timeout: 30_000
+    })
+    await expect
+      .poll(() => readClientTabs(page, worktreeId), {
+        timeout: 30_000,
+        message: 'client split state did not settle after capability rejection'
+      })
+      .toEqual(baselineClient)
+    expect(await readHostTabs(args.hostClient, args.repoPath)).toEqual(baselineHost)
+    await page.screenshot({
+      path: args.testInfo.outputPath(`${args.topology}-browser-capability-rejected.png`),
+      fullPage: true
+    })
+    await page.evaluate(() => (window as FaultWindow).__webRuntimeBrowserCreationFault?.reset())
+  } finally {
+    await client?.dispose()
+  }
+}
+
+test('rolls back a headed-host browser when client reconciliation times out @headful', async ({
+  electronApp,
+  orcaPage,
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(300_000)
+  writeFileSync(
+    path.join(testRepoPath, FIXTURE_NAME),
+    '<!doctype html><html><body><h1>browser reconciliation fault</h1></body></html>\n'
+  )
+  await waitForSessionReady(orcaPage)
+  await waitForActiveWorktree(orcaPage)
+  await ensureTerminalVisible(orcaPage)
+  const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+  const userDataDir = await electronApp.evaluate(({ app }) => app.getPath('userData'))
+  await runReconciliationFailureJourney({
+    hostClient: new RuntimeClient(userDataDir, 5_000),
+    offer,
+    repoPath: testRepoPath,
+    testInfo,
+    topology: 'headed'
+  })
+})
+
+test('cleans up a headed-host preview when capability rejects after preflight @headful', async ({
+  electronApp,
+  orcaPage,
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(300_000)
+  writeFileSync(
+    path.join(testRepoPath, FIXTURE_NAME),
+    '<!doctype html><html><body><h1>browser capability fault</h1></body></html>\n'
+  )
+  await waitForSessionReady(orcaPage)
+  await waitForActiveWorktree(orcaPage)
+  await ensureTerminalVisible(orcaPage)
+  const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+  const userDataDir = await electronApp.evaluate(({ app }) => app.getPath('userData'))
+  await runCapabilityFailureJourney({
+    hostClient: new RuntimeClient(userDataDir, 5_000),
+    offer,
+    repoPath: testRepoPath,
+    testInfo,
+    topology: 'headed'
+  })
+})
+
+test('keeps browser failure cleanup on a headless host', async ({ testRepoPath }, testInfo) => {
+  test.setTimeout(300_000)
+  writeFileSync(
+    path.join(testRepoPath, FIXTURE_NAME),
+    '<!doctype html><html><body><h1>headless capability fault</h1></body></html>\n'
+  )
+  const host: HeadlessPairedRuntimeHost = await launchHeadlessPairedRuntimeHost()
+  try {
+    await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
+    await host.client.call('terminal.create', {
+      worktree: `path:${testRepoPath}`,
+      title: 'Browser failure cleanup canary'
+    })
+    await runReconciliationFailureJourney({
+      hostClient: host.client,
+      offer: host.offer,
+      repoPath: testRepoPath,
+      testInfo,
+      topology: 'headless'
+    })
+    await runCapabilityFailureJourney({
+      hostClient: host.client,
+      offer: host.offer,
+      repoPath: testRepoPath,
+      testInfo,
+      topology: 'headless'
+    })
+  } finally {
+    await host.dispose()
+  }
+})
diff --git a/tests/e2e/paired-remote-browser-link-open-routing.spec.ts b/tests/e2e/paired-remote-browser-link-open-routing.spec.ts
new file mode 100644
index 00000000000..6da4965703e
--- /dev/null
+++ b/tests/e2e/paired-remote-browser-link-open-routing.spec.ts
@@ -0,0 +1,310 @@
+import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http'
+import type { AddressInfo } from 'node:net'
+import type { Page } from '@stablyai/playwright-test'
+import { LOCAL_EXECUTION_HOST_ID } from '../../src/shared/execution-host'
+import {
+  launchHeadlessPairedRuntimeHost,
+  type HeadlessPairedRuntimeHost
+} from './helpers/headless-paired-runtime-host'
+import { expect, test } from './helpers/orca-app'
+import {
+  launchPairedElectronClient,
+  type PairedElectronClient
+} from './helpers/paired-electron-client'
+
+// The link is a dev-server URL, so a client-local fallback would silently load a *different
+// machine's* server while looking successful.
+
+const PANE_PATH = '/remote-pane'
+const LINK_PATH = '/remote-link-target'
+const LINK_MARKER = 'remote link target'
+
+type LinkFixtureServer = {
+  close: () => Promise<void>
+  linkLoadCount: () => number
+  linkUrl: string
+  paneUrl: string
+}
+
+async function startLinkFixtureServer(): Promise<LinkFixtureServer> {
+  let linkLoadCount = 0
+  const server: Server = createServer((request: IncomingMessage, response: ServerResponse) => {
+    const requestPath = request.url ?? '/'
+    if (requestPath.startsWith(LINK_PATH)) {
+      linkLoadCount += 1
+      response.writeHead(200, {
+        'cache-control': 'no-store',
+        'content-type': 'text/html; charset=utf-8'
+      })
+      response.end(`<!doctype html><html><body><h1>${LINK_MARKER}</h1></body></html>`)
+      return
+    }
+    if (requestPath.startsWith(PANE_PATH)) {
+      response.writeHead(200, {
+        'cache-control': 'no-store',
+        'content-type': 'text/html; charset=utf-8'
+      })
+      // Why the viewport-filling anchor: the context menu reads the link with
+      // elementFromPoint over the screencast, so covering the viewport keeps the test off
+      // screencast coordinate mapping — any right-click lands on the link.
+      response.end(
+        `<!doctype html><html><body style="margin:0"><a href="${LINK_PATH}" style="position:fixed;inset:0;display:block;background:#fff;color:#000;font:24px sans-serif">open me</a></body></html>`
+      )
+      return
+    }
+    response.writeHead(404, { 'content-type': 'text/plain' })
+    response.end('not found')
+  })
+  await new Promise<void>((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(0, '127.0.0.1', () => {
+      server.off('error', reject)
+      resolve()
+    })
+  })
+  const { port } = server.address() as AddressInfo
+  const origin = `http://127.0.0.1:${port}`
+  return {
+    close: () =>
+      new Promise<void>((resolve, reject) => {
+        // Keep-alive sockets from either browser would otherwise hold the close open.
+        server.closeAllConnections()
+        server.close((error) => (error ? reject(error) : resolve()))
+      }),
+    linkLoadCount: () => linkLoadCount,
+    linkUrl: `${origin}${LINK_PATH}`,
+    paneUrl: `${origin}${PANE_PATH}`
+  }
+}
+
+/** Asked over the host's own connection, not proxied through the client under test. */
+async function readHostBrowserUrls(
+  host: HeadlessPairedRuntimeHost,
+  worktreeId: string
+): Promise<string[]> {
+  const response = await host.client.call<{ tabs: { type: string; url?: string }[] }>(
+    'session.tabs.list',
+    { worktree: `id:${worktreeId}` },
+    { timeoutMs: 15_000 }
+  )
+  return response.result.tabs.filter((tab) => tab.type === 'browser').map((tab) => tab.url ?? '')
+}
+
+/** A remote pane is a screencast image; a <webview> means the page really loaded on this machine. */
+async function readLocalBrowserViewUrls(page: Page): Promise<string[]> {
+  return page.evaluate(() =>
+    Array.from(document.querySelectorAll('webview')).map(
+      (view) => (view as HTMLElement & { src?: string }).src || view.getAttribute('src') || ''
+    )
+  )
+}
+
+async function readRemotePaneUrls(page: Page, worktreeId: string): Promise<string[]> {
+  return page.evaluate((worktreeId) => {
+    const state = window.__store?.getState()
+    const workspaces = state?.browserTabsByWorktree[worktreeId] ?? []
+    return workspaces
+      .flatMap((workspace) => state?.browserPagesByWorkspace[workspace.id] ?? [])
+      .filter(
+        (browserPage) => state?.remoteBrowserPageHandlesByPageId[browserPage.id]?.environmentId
+      )
+      .map((browserPage) => browserPage.url)
+  }, worktreeId)
+}
+
+/** The client mirrors host browser tabs on its own; this finds the mirrored page for one URL. */
+async function findMirroredPage(
+  page: Page,
+  worktreeId: string,
+  url: string
+): Promise<{ handleEnvironmentId: string | null; pageId: string } | null> {
+  return page.evaluate(
+    ({ url, worktreeId }) => {
+      const state = window.__store?.getState()
+      for (const workspace of state?.browserTabsByWorktree[worktreeId] ?? []) {
+        for (const browserPage of state?.browserPagesByWorkspace[workspace.id] ?? []) {
+          if (browserPage.url.startsWith(url)) {
+            return {
+              handleEnvironmentId:
+                state?.remoteBrowserPageHandlesByPageId[browserPage.id]?.environmentId ?? null,
+              pageId: browserPage.id
+            }
+          }
+        }
+      }
+      return null
+    },
+    { url, worktreeId }
+  )
+}
+
+async function focusMirroredPage(page: Page, worktreeId: string, pageId: string): Promise<void> {
+  await page.evaluate(
+    ({ pageId, worktreeId }) => {
+      window.__store?.getState().focusBrowserTabInWorktree(worktreeId, pageId, {
+        surfacePane: true
+      })
+    },
+    { pageId, worktreeId }
+  )
+}
+
+type LinkOpenOutcome = 'opened on this machine' | 'pending' | 'refused'
+
+async function readLinkOpenOutcome(page: Page, linkUrl: string): Promise<LinkOpenOutcome> {
+  if ((await readLocalBrowserViewUrls(page)).some((url) => url.startsWith(linkUrl))) {
+    return 'opened on this machine'
+  }
+  const notice = page.getByTestId('remote-browser-stream-error')
+  const text = (await notice.count()) > 0 ? ((await notice.first().textContent()) ?? '') : ''
+  return text.includes('Unable to open URL.') ? 'refused' : 'pending'
+}
+
+async function openLinkFromRemotePaneContextMenu(page: Page): Promise<void> {
+  const remoteFrame = page.locator('[data-testid="remote-browser-frame"]:visible').first()
+  await expect(remoteFrame).toBeVisible({ timeout: 60_000 })
+  await remoteFrame.click({ button: 'right', position: { x: 60, y: 60 }, force: true })
+  await expect(page.getByTestId('remote-browser-context-menu')).toBeVisible({ timeout: 30_000 })
+  // The item only renders once the remote hit-test resolves an anchor, so this wait is the
+  // wait for the link lookup itself.
+  const openInOrca = page.getByRole('menuitem', { name: 'Open Link In Orca Browser' })
+  await expect(openInOrca).toBeVisible({ timeout: 30_000 })
+  await openInOrca.click()
+}
+
+test('opens a remote pane link on the pane runtime and refuses to fall back to the client', async ({
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(300_000)
+  const fixture = await startLinkFixtureServer()
+  const host: HeadlessPairedRuntimeHost = await launchHeadlessPairedRuntimeHost()
+  let client: PairedElectronClient | null = null
+
+  try {
+    await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
+    client = await launchPairedElectronClient(host.offer, testInfo, 'Remote browser link routing')
+    const page = client.page
+    const environmentId = client.environmentId
+
+    await expect
+      .poll(() => page.evaluate(() => window.__store?.getState().allWorktrees().length ?? 0), {
+        timeout: 60_000,
+        message: 'paired client never saw a host worktree'
+      })
+      .toBeGreaterThan(0)
+    const worktreeId = await page.evaluate(
+      () => window.__store?.getState().allWorktrees()[0]?.id ?? null
+    )
+    if (!worktreeId) {
+      throw new Error('paired client did not receive the host worktree')
+    }
+
+    // The workspace runs on the paired runtime, the way it does when the user picks that host.
+    await page.evaluate(
+      ({ environmentId, worktreeId }) => {
+        window.__store?.getState().setActiveWorktree(worktreeId, `runtime:${environmentId}`)
+      },
+      { environmentId, worktreeId }
+    )
+
+    // The host opens the page on itself: this is the "remote server" whose links must stay remote.
+    await host.client.call(
+      'browser.tabCreate',
+      { worktree: `id:${worktreeId}`, url: fixture.paneUrl, activate: true },
+      { timeoutMs: 30_000 }
+    )
+    await expect
+      .poll(() => findMirroredPage(page, worktreeId, fixture.paneUrl), {
+        timeout: 60_000,
+        message: 'the client never mirrored the host browser page'
+      })
+      .not.toBeNull()
+    const pane = await findMirroredPage(page, worktreeId, fixture.paneUrl)
+    if (!pane) {
+      throw new Error('mirrored host browser page disappeared')
+    }
+    expect(pane.handleEnvironmentId).toBe(environmentId)
+    await focusMirroredPage(page, worktreeId, pane.pageId)
+    const paneCountBeforeOpen = await page.getByTestId('remote-browser-pane').count()
+
+    // Act 1: the healthy path must land on the runtime, end to end.
+    await openLinkFromRemotePaneContextMenu(page)
+
+    await expect
+      .poll(
+        async () =>
+          (await readHostBrowserUrls(host, worktreeId)).filter((url) =>
+            url.startsWith(fixture.linkUrl)
+          ).length,
+        { timeout: 60_000, message: 'the link never opened as a browser tab on the host runtime' }
+      )
+      .toBe(1)
+    // The host's browser really fetched it; a tab record alone would not prove a load.
+    expect(fixture.linkLoadCount()).toBeGreaterThan(0)
+    // One more remote pane, and still nothing rendered by this machine's own browser.
+    await expect(page.getByTestId('remote-browser-pane')).toHaveCount(paneCountBeforeOpen + 1, {
+      timeout: 60_000
+    })
+    expect(await readRemotePaneUrls(page, worktreeId)).toContainEqual(
+      expect.stringContaining(fixture.linkUrl)
+    )
+    expect(await readLocalBrowserViewUrls(page)).toHaveLength(0)
+
+    // Drop every tab except the pane's, so the second act drives the pane it started with.
+    await page.evaluate(
+      ({ paneUrl, worktreeId }) => {
+        const state = window.__store?.getState()
+        for (const workspace of state?.browserTabsByWorktree[worktreeId] ?? []) {
+          const pages = state?.browserPagesByWorkspace[workspace.id] ?? []
+          if (!pages.some((browserPage) => browserPage.url.startsWith(paneUrl))) {
+            state?.closeBrowserTab(workspace.id)
+          }
+        }
+      },
+      { paneUrl: fixture.paneUrl, worktreeId }
+    )
+    await expect(page.getByTestId('remote-browser-pane')).toHaveCount(paneCountBeforeOpen, {
+      timeout: 60_000
+    })
+
+    // Act 2: the user moves this workspace onto their own machine while the runtime's page is
+    // still on screen. Opening the link must fail in the pane, not load the runtime's dev server
+    // here — the client has no business serving a page for a workspace it does not run.
+    await page.evaluate(
+      ({ localHostId, worktreeId }) => {
+        window.__store?.getState().setActiveWorktree(worktreeId, localHostId)
+      },
+      { localHostId: LOCAL_EXECUTION_HOST_ID, worktreeId }
+    )
+    await focusMirroredPage(page, worktreeId, pane.pageId)
+    const hostUrlsBefore = await readHostBrowserUrls(host, worktreeId)
+    const linkLoadsBefore = fixture.linkLoadCount()
+
+    await openLinkFromRemotePaneContextMenu(page)
+
+    // Wait for the click to produce an outcome — refusal or a local page — so the assertion below
+    // reports which one happened instead of racing past a fallback that lands a moment later.
+    await expect
+      .poll(() => readLinkOpenOutcome(page, fixture.linkUrl), {
+        timeout: 30_000,
+        message: 'the link open produced neither a refusal nor a page'
+      })
+      .not.toBe('pending')
+    expect(await readLinkOpenOutcome(page, fixture.linkUrl)).toBe('refused')
+
+    // The workspace must still be the local one, or the refusal above proved nothing.
+    expect(
+      await page.evaluate(() => window.__store?.getState().activeWorkspaceExecutionHostId ?? null)
+    ).toBe(LOCAL_EXECUTION_HOST_ID)
+    // Nothing rendered here, nothing new on the host, and nobody fetched the link anywhere.
+    expect(await readLocalBrowserViewUrls(page)).toHaveLength(0)
+    expect(await readHostBrowserUrls(host, worktreeId)).toEqual(hostUrlsBefore)
+    expect(fixture.linkLoadCount()).toBe(linkLoadsBefore)
+  } finally {
+    if (client) {
+      await client.dispose()
+    }
+    await host.dispose()
+    await fixture.close()
+  }
+})
diff --git a/tests/e2e/paired-remote-html-browser-focus.spec.ts b/tests/e2e/paired-remote-html-browser-focus.spec.ts
new file mode 100644
index 00000000000..5a70fa10465
--- /dev/null
+++ b/tests/e2e/paired-remote-html-browser-focus.spec.ts
@@ -0,0 +1,460 @@
+import { writeFileSync } from 'node:fs'
+import path from 'node:path'
+import { expect, test } from './helpers/orca-app'
+import { openFileExplorer } from './helpers/file-explorer'
+import {
+  createRuntimeDesktopPairingOffer,
+  launchPairedElectronClient,
+  type PairedElectronClient
+} from './helpers/paired-electron-client'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+
+const FIXTURE_NAME = 'paired-html-focus.html'
+
+test('keeps remote HTML preview placement and focuses it only after a click', async ({
+  orcaPage,
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(240_000)
+  writeFileSync(
+    path.join(testRepoPath, FIXTURE_NAME),
+    '<!doctype html><html><body><h1>paired html focus</h1></body></html>\n'
+  )
+  await waitForSessionReady(orcaPage)
+  await waitForActiveWorktree(orcaPage)
+  await ensureTerminalVisible(orcaPage)
+
+  const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+  let client: PairedElectronClient | null = null
+  try {
+    client = await launchPairedElectronClient(offer, testInfo, 'Remote HTML focus')
+    const page = client.page
+    const worktreeId = await expect
+      .poll(
+        () =>
+          page.evaluate((repoPath) => {
+            const state = window.__store?.getState()
+            return state
+              ? (state.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null)
+              : null
+          }, testRepoPath),
+        { timeout: 60_000, message: 'paired client never received the host worktree' }
+      )
+      .not.toBeNull()
+      .then(() =>
+        page.evaluate((repoPath) => {
+          const state = window.__store?.getState()
+          return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+        }, testRepoPath)
+      )
+    if (!worktreeId) {
+      throw new Error('paired client worktree disappeared after discovery')
+    }
+    await page.evaluate(
+      ({ environmentId, worktreeId }) => {
+        window.__store?.getState().setActiveWorktree(worktreeId, `runtime:${environmentId}`)
+      },
+      { environmentId: client.environmentId, worktreeId }
+    )
+    await openFileExplorer(page)
+    const fixtureRow = page.locator('[data-file-explorer-row]').filter({ hasText: FIXTURE_NAME })
+    await expect(fixtureRow).toBeVisible({ timeout: 30_000 })
+    await fixtureRow.click()
+    const openPreviewToSide = page.getByRole('button', { name: 'Open Preview to the Side' })
+    await expect(openPreviewToSide).toBeVisible({ timeout: 30_000 })
+    const sourceEditor = await page.evaluate((targetWorktreeId) => {
+      const state = window.__store?.getState()
+      const groupId = state?.activeGroupIdByWorktree[targetWorktreeId]
+      const group = (state?.groupsByWorktree[targetWorktreeId] ?? []).find(
+        (candidate) => candidate.id === groupId
+      )
+      const tab = (state?.unifiedTabsByWorktree[targetWorktreeId] ?? []).find(
+        (candidate) => candidate.id === group?.activeTabId && candidate.contentType === 'editor'
+      )
+      return groupId && tab ? { groupId, tabId: tab.id } : null
+    }, worktreeId)
+    if (!sourceEditor) {
+      throw new Error('paired client editor had no source identity before side preview')
+    }
+    const sourceGroupId = sourceEditor.groupId
+    const browserBaseline = await page.evaluate(
+      async ({ environmentId, worktreeId }) => {
+        const state = window.__store?.getState()
+        const response = await window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'session.tabs.list',
+          params: { worktree: `id:${worktreeId}` },
+          timeoutMs: 15_000
+        })
+        return {
+          clientUnified: (state?.unifiedTabsByWorktree[worktreeId] ?? []).filter(
+            (tab) => tab.contentType === 'browser'
+          ).length,
+          clientWorkspaces: (state?.browserTabsByWorktree[worktreeId] ?? []).length,
+          host: response.ok
+            ? response.result.tabs.filter((tab) => tab.type === 'browser').length
+            : -1
+        }
+      },
+      { environmentId: client.environmentId, worktreeId }
+    )
+    await openPreviewToSide.click()
+
+    await expect
+      .poll(
+        () =>
+          page.evaluate(
+            async ({ environmentId, fixtureName, worktreeId }) => {
+              const state = window.__store?.getState()
+              if (!state) {
+                return null
+              }
+              const browser = (state.browserTabsByWorktree[worktreeId] ?? []).find((tab) =>
+                tab.url.endsWith(`/${fixtureName}`)
+              )
+              const browserPage = browser
+                ? (state.browserPagesByWorkspace[browser.id] ?? [])[0]
+                : null
+              const handle = browserPage
+                ? state.remoteBrowserPageHandlesByPageId[browserPage.id]
+                : null
+              const response = await window.api.runtimeEnvironments.call({
+                selector: environmentId,
+                method: 'session.tabs.list',
+                params: { worktree: `id:${worktreeId}` },
+                timeoutMs: 15_000
+              })
+              const hostHasHtml =
+                response.ok &&
+                response.result.tabs.some(
+                  (tab) => tab.type === 'browser' && tab.url.endsWith(`/${fixtureName}`)
+                )
+              return {
+                browserRuntimeEnvironmentId: browserPage?.browserRuntimeEnvironmentId ?? null,
+                handleEnvironmentId: handle?.environmentId ?? null,
+                handleRemotePageId: handle?.remotePageId ?? null,
+                hostHasHtml
+              }
+            },
+            { environmentId: client!.environmentId, fixtureName: FIXTURE_NAME, worktreeId }
+          ),
+        { timeout: 60_000, message: 'remote HTML browser ownership never converged' }
+      )
+      .toMatchObject({
+        browserRuntimeEnvironmentId: client.environmentId,
+        handleEnvironmentId: client.environmentId,
+        hostHasHtml: true
+      })
+    const htmlTabInventory = await page.evaluate(
+      async ({ environmentId, fixtureName, worktreeId }) => {
+        const state = window.__store?.getState()
+        const response = await window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'session.tabs.list',
+          params: { worktree: `id:${worktreeId}` },
+          timeoutMs: 15_000
+        })
+        const clientWorkspaceIds = (state?.browserTabsByWorktree[worktreeId] ?? [])
+          .filter((tab) => tab.url.endsWith(`/${fixtureName}`))
+          .map((tab) => tab.id)
+        return {
+          clientWorkspaceIds,
+          clientUnifiedTabs: (state?.unifiedTabsByWorktree[worktreeId] ?? [])
+            .filter(
+              (tab) => tab.contentType === 'browser' && clientWorkspaceIds.includes(tab.entityId)
+            )
+            .map((tab) => ({ groupId: tab.groupId, id: tab.id })),
+          hostTabIds: response.ok
+            ? response.result.tabs
+                .filter((tab) => tab.type === 'browser' && tab.url.endsWith(`/${fixtureName}`))
+                .map((tab) => tab.id)
+            : [],
+          hostTabGroups: response.ok ? (response.result.tabGroups ?? []) : [],
+          totalClientUnified: (state?.unifiedTabsByWorktree[worktreeId] ?? []).filter(
+            (tab) => tab.contentType === 'browser'
+          ).length,
+          totalClientWorkspaces: (state?.browserTabsByWorktree[worktreeId] ?? []).length,
+          totalHost: response.ok
+            ? response.result.tabs.filter((tab) => tab.type === 'browser').length
+            : -1
+        }
+      },
+      { environmentId: client.environmentId, fixtureName: FIXTURE_NAME, worktreeId }
+    )
+    expect(htmlTabInventory.clientWorkspaceIds).toHaveLength(1)
+    expect(htmlTabInventory.clientUnifiedTabs).toHaveLength(1)
+    expect(htmlTabInventory.hostTabIds).toHaveLength(1)
+    expect(htmlTabInventory.totalClientUnified).toBe(browserBaseline.clientUnified + 1)
+    expect(htmlTabInventory.totalClientWorkspaces).toBe(browserBaseline.clientWorkspaces + 1)
+    expect(htmlTabInventory.totalHost).toBe(browserBaseline.host + 1)
+    expect(htmlTabInventory.clientUnifiedTabs[0]?.groupId).not.toBe(sourceGroupId)
+    expect(
+      htmlTabInventory.hostTabGroups.some(
+        (group) => group.id === htmlTabInventory.clientUnifiedTabs[0]?.groupId
+      )
+    ).toBe(false)
+    const hostBrowserGroupId = htmlTabInventory.hostTabGroups.find((group) =>
+      group.tabOrder.includes(htmlTabInventory.hostTabIds[0]!)
+    )?.id
+    expect(hostBrowserGroupId).toBeTruthy()
+    await expect(page.locator(`[data-tab-group-body-id="${sourceGroupId}"]`)).toBeVisible()
+    await expect(
+      page.locator(`[data-tab-group-body-id="${htmlTabInventory.clientUnifiedTabs[0]!.groupId}"]`)
+    ).toBeVisible()
+    await expect(page.getByTestId('remote-browser-frame')).toBeVisible({ timeout: 60_000 })
+
+    const previewFocus = await page.evaluate(
+      ({ sourceGroupId, sourceTabId, worktreeId: targetWorktreeId }) => {
+        const state = window.__store?.getState()
+        const activeGroup = (state?.groupsByWorktree[targetWorktreeId] ?? []).find(
+          (group) => group.id === state?.activeGroupIdByWorktree[targetWorktreeId]
+        )
+        return {
+          activeGroupId: activeGroup?.id ?? null,
+          activeTabId: activeGroup?.activeTabId ?? null,
+          activeTabType: state?.activeTabTypeByWorktree[targetWorktreeId] ?? null,
+          sourceGroupId,
+          sourceTabId
+        }
+      },
+      { sourceGroupId, sourceTabId: sourceEditor.tabId, worktreeId }
+    )
+    expect(previewFocus).toEqual({
+      activeGroupId: sourceGroupId,
+      activeTabId: sourceEditor.tabId,
+      activeTabType: 'editor',
+      sourceGroupId,
+      sourceTabId: sourceEditor.tabId
+    })
+
+    const tabIds = await page.evaluate(
+      ({ fixtureName, worktreeId: targetWorktreeId }) => {
+        const state = window.__store?.getState()
+        if (!state) {
+          return null
+        }
+        const terminalId = state.tabsByWorktree[targetWorktreeId]?.[0]?.id ?? null
+        const browserId = (state.browserTabsByWorktree[targetWorktreeId] ?? []).find((tab) =>
+          tab.url.endsWith(`/${fixtureName}`)
+        )?.id
+        return terminalId && browserId ? { browserId, terminalId } : null
+      },
+      { fixtureName: FIXTURE_NAME, worktreeId }
+    )
+    if (!tabIds) {
+      throw new Error('paired client did not retain both terminal and HTML browser tabs')
+    }
+    await page.locator(`[data-tab-id="${tabIds.terminalId}"]`).click()
+    await expect
+      .poll(
+        () =>
+          page.evaluate((targetWorktreeId) => {
+            const state = window.__store?.getState()
+            return state?.activeTabTypeByWorktree[targetWorktreeId] ?? null
+          }, worktreeId),
+        { message: 'terminal tab never became active before the browser click' }
+      )
+      .toBe('terminal')
+    await expect
+      .poll(
+        () =>
+          page.evaluate(
+            async ({ environmentId, worktreeId }) => {
+              const response = await window.api.runtimeEnvironments.call({
+                selector: environmentId,
+                method: 'session.tabs.list',
+                params: { worktree: `id:${worktreeId}` },
+                timeoutMs: 15_000
+              })
+              if (!response.ok) {
+                return false
+              }
+              return (
+                response.result.tabs.find((tab) => tab.id === response.result.activeTabId)?.type ===
+                'terminal'
+              )
+            },
+            { environmentId: client.environmentId, worktreeId }
+          ),
+        { timeout: 30_000, message: 'host never accepted terminal activation' }
+      )
+      .toBe(true)
+    const hostBrowserTab = await page.evaluate(
+      async ({ environmentId, fixtureName, worktreeId }) => {
+        const response = await window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'session.tabs.list',
+          params: { worktree: `id:${worktreeId}` },
+          timeoutMs: 15_000
+        })
+        const tab = response.ok
+          ? response.result.tabs.find(
+              (candidate) =>
+                candidate.type === 'browser' && candidate.url.endsWith(`/${fixtureName}`)
+            )
+          : null
+        return tab?.type === 'browser' ? { browserPageId: tab.browserPageId, id: tab.id } : null
+      },
+      { environmentId: client.environmentId, fixtureName: FIXTURE_NAME, worktreeId }
+    )
+    if (!hostBrowserTab?.browserPageId) {
+      throw new Error('host HTML browser tab disappeared before activation')
+    }
+    const clientRemotePageId = await page.evaluate(
+      ({ fixtureName, worktreeId }) => {
+        const state = window.__store?.getState()
+        const workspace = (state?.browserTabsByWorktree[worktreeId] ?? []).find((tab) =>
+          tab.url.endsWith(`/${fixtureName}`)
+        )
+        const browserPage = workspace
+          ? (state?.browserPagesByWorkspace[workspace.id] ?? [])[0]
+          : null
+        return browserPage
+          ? (state?.remoteBrowserPageHandlesByPageId[browserPage.id]?.remotePageId ?? null)
+          : null
+      },
+      { fixtureName: FIXTURE_NAME, worktreeId }
+    )
+    expect(clientRemotePageId).toBe(hostBrowserTab.browserPageId)
+    const content = await page.evaluate(
+      async ({ browserPageId, environmentId, worktreeId }) =>
+        window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'browser.eval',
+          params: {
+            worktree: `id:${worktreeId}`,
+            page: browserPageId,
+            expression: 'document.querySelector("h1")?.textContent'
+          },
+          timeoutMs: 15_000
+        }),
+      {
+        browserPageId: hostBrowserTab.browserPageId,
+        environmentId: client.environmentId,
+        worktreeId
+      }
+    )
+    expect(content).toMatchObject({ ok: true, result: { result: 'paired html focus' } })
+    await expect
+      .poll(
+        () =>
+          page.evaluate(
+            ({ browserTabId, environmentId }) => {
+              const state = window.__store?.getState()
+              return (state?.browserPagesByWorkspace[browserTabId] ?? []).some((browserPage) => {
+                const handle = state?.remoteBrowserPageHandlesByPageId[browserPage.id]
+                return (
+                  handle?.environmentId === environmentId ||
+                  browserPage.browserRuntimeEnvironmentId === environmentId
+                )
+              })
+            },
+            { browserTabId: tabIds.browserId, environmentId: client.environmentId }
+          ),
+        { timeout: 30_000, message: 'client lost remote browser ownership before activation' }
+      )
+      .toBe(true)
+    await page.locator(`[data-tab-id="${tabIds.browserId}"]`).click()
+
+    await expect
+      .poll(
+        () =>
+          page.evaluate(
+            async ({ environmentId, fixtureName, worktreeId }) => {
+              const state = window.__store?.getState()
+              if (!state) {
+                return null
+              }
+              const response = await window.api.runtimeEnvironments.call({
+                selector: environmentId,
+                method: 'session.tabs.list',
+                params: { worktree: `id:${worktreeId}` },
+                timeoutMs: 15_000
+              })
+              const activeGroup = (state.groupsByWorktree[worktreeId] ?? []).find(
+                (group) => group.id === state.activeGroupIdByWorktree[worktreeId]
+              )
+              const activeUnified = (state.unifiedTabsByWorktree[worktreeId] ?? []).find(
+                (tab) => tab.id === activeGroup?.activeTabId
+              )
+              const hostActive = response.ok
+                ? response.result.tabs.find((tab) => tab.id === response.result.activeTabId)
+                : null
+              return {
+                activeGroupType: activeUnified?.contentType ?? null,
+                activeTabType: state.activeTabTypeByWorktree[worktreeId] ?? null,
+                hostActiveHtml:
+                  hostActive?.type === 'browser' && hostActive.url.endsWith(`/${fixtureName}`)
+              }
+            },
+            { environmentId: client!.environmentId, fixtureName: FIXTURE_NAME, worktreeId }
+          ),
+        { timeout: 30_000, message: 'browser click did not remain authoritative' }
+      )
+      .toEqual({ activeGroupType: 'browser', activeTabType: 'browser', hostActiveHtml: true })
+    await expect(page.getByTestId('remote-browser-frame')).toBeVisible()
+
+    const browserTab = page.locator(`[data-tab-id="${tabIds.browserId}"]`)
+    await browserTab.click({ button: 'right' })
+    await page.getByRole('menuitem', { name: 'Close', exact: true }).click()
+    await expect
+      .poll(
+        () =>
+          page.evaluate(
+            async ({
+              environmentId,
+              hostTabId,
+              sourceGroupId,
+              unifiedTabId,
+              workspaceId,
+              worktreeId
+            }) => {
+              const state = window.__store?.getState()
+              const response = await window.api.runtimeEnvironments.call({
+                selector: environmentId,
+                method: 'session.tabs.list',
+                params: { worktree: `id:${worktreeId}` },
+                timeoutMs: 15_000
+              })
+              return {
+                clientUnifiedPresent: (state?.unifiedTabsByWorktree[worktreeId] ?? []).some(
+                  (tab) => tab.id === unifiedTabId
+                ),
+                clientWorkspacePresent: (state?.browserTabsByWorktree[worktreeId] ?? []).some(
+                  (tab) => tab.id === workspaceId
+                ),
+                hostTabPresent: response.ok
+                  ? response.result.tabs.some((tab) => tab.id === hostTabId)
+                  : true,
+                sourceGroupPresent: (state?.groupsByWorktree[worktreeId] ?? []).some(
+                  (group) => group.id === sourceGroupId
+                )
+              }
+            },
+            {
+              environmentId: client!.environmentId,
+              hostTabId: hostBrowserTab.id,
+              sourceGroupId,
+              unifiedTabId: htmlTabInventory.clientUnifiedTabs[0]!.id,
+              workspaceId: htmlTabInventory.clientWorkspaceIds[0]!,
+              worktreeId
+            }
+          ),
+        { timeout: 30_000, message: 'remote HTML browser close did not converge cleanly' }
+      )
+      .toEqual({
+        clientUnifiedPresent: false,
+        clientWorkspacePresent: false,
+        hostTabPresent: false,
+        sourceGroupPresent: true
+      })
+    await expect(browserTab).toHaveCount(0)
+    await expect(page.locator(`[data-tab-id="${tabIds.terminalId}"]`)).toBeVisible()
+    await expect(page.locator(`[data-tab-id="${sourceEditor.tabId}"]`)).toBeVisible()
+    await expect(
+      page.locator(`[data-tab-group-body-id="${sourceGroupId}"] .monaco-editor`)
+    ).toBeVisible()
+  } finally {
+    await client?.dispose()
+  }
+})
diff --git a/tests/e2e/paired-remote-terminal-browser-link.spec.ts b/tests/e2e/paired-remote-terminal-browser-link.spec.ts
new file mode 100644
index 00000000000..44d0d3484f1
--- /dev/null
+++ b/tests/e2e/paired-remote-terminal-browser-link.spec.ts
@@ -0,0 +1,368 @@
+import { createServer, type Server } from 'node:http'
+import type { AddressInfo } from 'node:net'
+import type { Page } from '@stablyai/playwright-test'
+import { expect, test } from './helpers/orca-app'
+import {
+  createRuntimeDesktopPairingOffer,
+  launchPairedElectronClient,
+  type PairedElectronClient
+} from './helpers/paired-electron-client'
+import {
+  readPanelNavigationObserver,
+  startPanelNavigationObserver,
+  stopPanelNavigationObserver
+} from './helpers/plugin-panel-navigation-observer'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+import {
+  execInTerminal,
+  waitForActivePanePtyId,
+  waitForActiveTerminalManager,
+  waitForTerminalOutput
+} from './helpers/terminal'
+
+const PAGE_MARKER = 'remote terminal browser owner'
+const TERMINAL_MARKER = 'remote-terminal-still-live-after-browser-close'
+
+async function readTabInventory(
+  page: Page,
+  environmentId: string,
+  worktreeId: string
+): Promise<{
+  clientBrowserWorkspaces: number
+  clientBrowserTabs: number
+  clientTerminalTabs: number
+  hostBrowserTabs: number
+  hostTerminalTabs: number
+}> {
+  return page.evaluate(
+    async ({ environmentId, worktreeId }) => {
+      const state = window.__store?.getState()
+      const response = await window.api.runtimeEnvironments.call({
+        selector: environmentId,
+        method: 'session.tabs.list',
+        params: { worktree: `id:${worktreeId}` },
+        timeoutMs: 15_000
+      })
+      return {
+        clientBrowserWorkspaces: (state?.browserTabsByWorktree[worktreeId] ?? []).length,
+        clientBrowserTabs: (state?.unifiedTabsByWorktree[worktreeId] ?? []).filter(
+          (tab) => tab.contentType === 'browser'
+        ).length,
+        clientTerminalTabs: (state?.tabsByWorktree[worktreeId] ?? []).length,
+        hostBrowserTabs: response.ok
+          ? response.result.tabs.filter((tab) => tab.type === 'browser').length
+          : -1,
+        hostTerminalTabs: response.ok
+          ? response.result.tabs.filter((tab) => tab.type === 'terminal').length
+          : -1
+      }
+    },
+    { environmentId, worktreeId }
+  )
+}
+
+async function startPageServer(): Promise<{ server: Server; url: string }> {
+  const server = createServer((_request, response) => {
+    response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' })
+    response.end(`<!doctype html><html><body><h1>${PAGE_MARKER}</h1></body></html>`)
+  })
+  await new Promise<void>((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(0, '127.0.0.1', () => {
+      server.off('error', reject)
+      resolve()
+    })
+  })
+  const address = server.address() as AddressInfo
+  return { server, url: `http://127.0.0.1:${address.port}/remote-terminal` }
+}
+
+async function closePageServer(server: Server): Promise<void> {
+  await new Promise<void>((resolve, reject) => {
+    server.close((error) => (error ? reject(error) : resolve()))
+  })
+}
+
+async function findTerminalLinkTarget(page: Page, link: string): Promise<{ x: number; y: number }> {
+  return page.evaluate((targetLink) => {
+    const state = window.__store?.getState()
+    const worktreeId = state?.activeWorktreeId
+    const tabId = worktreeId ? state?.activeTabIdByWorktree?.[worktreeId] : null
+    const manager = tabId ? window.__paneManagers?.get(tabId) : null
+    const pane = manager?.getActivePane?.() ?? manager?.getPanes?.()[0] ?? null
+    const screen = pane?.terminal.element?.querySelector<HTMLElement>('.xterm-screen') ?? null
+    if (!pane || !screen) {
+      throw new Error('paired terminal screen unavailable')
+    }
+    const buffer = pane.terminal.buffer.active
+    for (let row = 0; row < pane.terminal.rows; row += 1) {
+      const text = buffer.getLine(buffer.viewportY + row)?.translateToString(false) ?? ''
+      const column = text.indexOf(targetLink)
+      if (column === -1) {
+        continue
+      }
+      const cell = pane.terminal.dimensions?.css.cell
+      if (!cell?.width || !cell.height) {
+        throw new Error('paired terminal cell dimensions unavailable')
+      }
+      const rect = screen.getBoundingClientRect()
+      return {
+        x: rect.left + (column + targetLink.length / 2) * cell.width,
+        y: rect.top + (row + 0.5) * cell.height
+      }
+    }
+    throw new Error('paired terminal link unavailable')
+  }, link)
+}
+
+function remoteTerminalHandle(ptyId: string): string {
+  const separator = ptyId.indexOf('@@')
+  if (!ptyId.startsWith('remote:') || separator === -1) {
+    throw new Error(`Expected runtime-owned PTY id, received ${ptyId}`)
+  }
+  return decodeURIComponent(ptyId.slice(separator + 2))
+}
+
+test('opens a paired-runtime terminal link on its owning host', async ({
+  orcaPage,
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(240_000)
+  const fixture = await startPageServer()
+  let client: PairedElectronClient | null = null
+  let observerActive = false
+  try {
+    await waitForSessionReady(orcaPage)
+    await waitForActiveWorktree(orcaPage)
+    await ensureTerminalVisible(orcaPage)
+    await waitForActiveTerminalManager(orcaPage)
+    const hostPtyId = await waitForActivePanePtyId(orcaPage)
+    await execInTerminal(orcaPage, hostPtyId, `printf '%s\\n' ${JSON.stringify(fixture.url)}`)
+    await waitForTerminalOutput(orcaPage, fixture.url)
+
+    const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+    client = await launchPairedElectronClient(offer, testInfo, 'Remote terminal browser link')
+    const page = client.page
+    const worktreeId = await expect
+      .poll(
+        () =>
+          page.evaluate((repoPath) => {
+            const state = window.__store?.getState()
+            return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+          }, testRepoPath),
+        { timeout: 60_000, message: 'paired client never received the host worktree' }
+      )
+      .not.toBeNull()
+      .then(() =>
+        page.evaluate((repoPath) => {
+          const state = window.__store?.getState()
+          return state?.allWorktrees().find((worktree) => worktree.path === repoPath)?.id ?? null
+        }, testRepoPath)
+      )
+    if (!worktreeId) {
+      throw new Error('paired client worktree disappeared after discovery')
+    }
+    await page.evaluate(
+      async ({ environmentId, worktreeId }) => {
+        const state = window.__store?.getState()
+        state?.setActiveWorktree(worktreeId, `runtime:${environmentId}`)
+        await state?.updateSettings({
+          openLinksInApp: true,
+          terminalLinkActionPopoverEnabled: true
+        })
+      },
+      { environmentId: client.environmentId, worktreeId }
+    )
+    await ensureTerminalVisible(page, 30_000)
+    await waitForActiveTerminalManager(page, 30_000)
+    await waitForTerminalOutput(page, fixture.url, 30_000)
+    const clientPtyId = await waitForActivePanePtyId(page, 30_000)
+    expect(clientPtyId.startsWith(`remote:${client.environmentId}@@`)).toBe(true)
+
+    const baseline = await readTabInventory(page, client.environmentId, worktreeId)
+    await startPanelNavigationObserver(client.app, page.url())
+    observerActive = true
+
+    const target = await findTerminalLinkTarget(page, fixture.url)
+    await page.mouse.move(target.x, target.y)
+    await expect(page.locator('.xterm-hover')).toHaveCount(1)
+    await page.mouse.click(target.x, target.y)
+    const actionPopover = page.locator('[data-terminal-link-action-popover]')
+    await expect(actionPopover).toBeVisible()
+    await expect(actionPopover.locator('[data-terminal-link-destination]')).toHaveText(fixture.url)
+    await expect(
+      actionPopover.getByRole('button').filter({ hasText: 'System Browser' })
+    ).toBeVisible()
+    const orcaBrowserAction = actionPopover.getByRole('button').filter({ hasText: 'Orca Browser' })
+    await expect(orcaBrowserAction).toBeVisible()
+    await orcaBrowserAction.click()
+
+    const identity = await expect
+      .poll(
+        () =>
+          page.evaluate(
+            async ({ environmentId, url, worktreeId }) => {
+              const state = window.__store?.getState()
+              const workspace = (state?.browserTabsByWorktree[worktreeId] ?? []).find(
+                (tab) => tab.url === url
+              )
+              const browserPage = workspace
+                ? (state?.browserPagesByWorkspace[workspace.id] ?? [])[0]
+                : null
+              const handle = browserPage
+                ? state?.remoteBrowserPageHandlesByPageId[browserPage.id]
+                : null
+              const response = await window.api.runtimeEnvironments.call({
+                selector: environmentId,
+                method: 'session.tabs.list',
+                params: { worktree: `id:${worktreeId}` },
+                timeoutMs: 15_000
+              })
+              const hostTab = response.ok
+                ? response.result.tabs.find((tab) => tab.type === 'browser' && tab.url === url)
+                : null
+              return workspace && browserPage && handle && hostTab?.type === 'browser'
+                ? {
+                    clientPageId: browserPage.id,
+                    clientRuntimeId: browserPage.browserRuntimeEnvironmentId,
+                    clientWorkspaceId: workspace.id,
+                    hostPageId: hostTab.browserPageId,
+                    hostTabId: hostTab.id,
+                    remoteEnvironmentId: handle.environmentId,
+                    remotePageId: handle.remotePageId
+                  }
+                : null
+            },
+            { environmentId: client!.environmentId, url: fixture.url, worktreeId }
+          ),
+        { timeout: 60_000, message: 'terminal link never became one host-owned browser tab' }
+      )
+      .not.toBeNull()
+      .then(() =>
+        page.evaluate(
+          async ({ environmentId, url, worktreeId }) => {
+            const state = window.__store!.getState()
+            const workspace = state.browserTabsByWorktree[worktreeId]!.find(
+              (tab) => tab.url === url
+            )!
+            const browserPage = state.browserPagesByWorkspace[workspace.id]![0]!
+            const handle = state.remoteBrowserPageHandlesByPageId[browserPage.id]!
+            const response = await window.api.runtimeEnvironments.call({
+              selector: environmentId,
+              method: 'session.tabs.list',
+              params: { worktree: `id:${worktreeId}` },
+              timeoutMs: 15_000
+            })
+            if (!response.ok) {
+              throw new Error('host tab inventory unavailable')
+            }
+            const hostTab = response.result.tabs.find(
+              (tab) => tab.type === 'browser' && tab.url === url
+            )!
+            return {
+              clientPageId: browserPage.id,
+              clientRuntimeId: browserPage.browserRuntimeEnvironmentId,
+              clientWorkspaceId: workspace.id,
+              hostPageId: hostTab.type === 'browser' ? hostTab.browserPageId : null,
+              hostTabId: hostTab.id,
+              remoteEnvironmentId: handle.environmentId,
+              remotePageId: handle.remotePageId
+            }
+          },
+          { environmentId: client!.environmentId, url: fixture.url, worktreeId }
+        )
+      )
+
+    expect(identity.clientRuntimeId).toBe(client.environmentId)
+    expect(identity.remoteEnvironmentId).toBe(client.environmentId)
+    expect(identity.remotePageId).toBe(identity.hostPageId)
+    const finalInventory = await readTabInventory(page, client.environmentId, worktreeId)
+    expect(finalInventory).toEqual({
+      clientBrowserWorkspaces: baseline.clientBrowserWorkspaces + 1,
+      clientBrowserTabs: baseline.clientBrowserTabs + 1,
+      clientTerminalTabs: baseline.clientTerminalTabs,
+      hostBrowserTabs: baseline.hostBrowserTabs + 1,
+      hostTerminalTabs: baseline.hostTerminalTabs
+    })
+    expect((await readPanelNavigationObserver(client.app)).externalUrls).toEqual([])
+
+    const content = await page.evaluate(
+      async ({ browserPageId, environmentId, worktreeId }) =>
+        window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'browser.eval',
+          params: {
+            worktree: `id:${worktreeId}`,
+            page: browserPageId,
+            expression: 'document.querySelector("h1")?.textContent'
+          },
+          timeoutMs: 15_000
+        }),
+      {
+        browserPageId: identity.hostPageId!,
+        environmentId: client.environmentId,
+        worktreeId
+      }
+    )
+    expect(content).toMatchObject({ ok: true, result: { result: PAGE_MARKER } })
+
+    const browserTab = page.locator(`[data-tab-id="${identity.clientWorkspaceId}"]`)
+    await browserTab.click()
+    await expect
+      .poll(() =>
+        page.evaluate((worktreeId) => {
+          const state = window.__store?.getState()
+          return {
+            browserWorkspaceId: state?.activeBrowserTabIdByWorktree[worktreeId] ?? null,
+            tabType: state?.activeTabTypeByWorktree[worktreeId] ?? null
+          }
+        }, worktreeId)
+      )
+      .toEqual({ browserWorkspaceId: identity.clientWorkspaceId, tabType: 'browser' })
+    await expect(
+      page.locator(`[data-browser-overlay-tab-id="${identity.clientWorkspaceId}"]`)
+    ).toHaveCSS('opacity', '1')
+
+    await browserTab.hover()
+    await browserTab.locator('button').click()
+    await expect
+      .poll(() => readTabInventory(page, client!.environmentId, worktreeId), {
+        timeout: 30_000,
+        message: 'host and client browser inventories did not return to baseline'
+      })
+      .toEqual(baseline)
+
+    await ensureTerminalVisible(page, 30_000)
+    await waitForActiveTerminalManager(page, 30_000)
+    expect(await waitForActivePanePtyId(page, 30_000)).toBe(clientPtyId)
+    const send = await page.evaluate(
+      async ({ environmentId, terminal, text }) =>
+        window.api.runtimeEnvironments.call({
+          selector: environmentId,
+          method: 'terminal.send',
+          params: {
+            terminal,
+            text,
+            enter: true,
+            client: { id: 'remote-browser-close-e2e', type: 'desktop' }
+          },
+          timeoutMs: 15_000
+        }),
+      {
+        environmentId: client.environmentId,
+        terminal: remoteTerminalHandle(clientPtyId),
+        text: `printf '%s\\n' ${JSON.stringify(TERMINAL_MARKER)}`
+      }
+    )
+    expect(send).toMatchObject({ ok: true, result: { send: { accepted: true } } })
+    await waitForTerminalOutput(page, TERMINAL_MARKER, 30_000)
+    expect(await readTabInventory(page, client.environmentId, worktreeId)).toEqual(baseline)
+    expect((await readPanelNavigationObserver(client.app)).externalUrls).toEqual([])
+  } finally {
+    if (observerActive && client) {
+      await stopPanelNavigationObserver(client.app).catch(() => undefined)
+    }
+    await client?.dispose()
+    await closePageServer(fixture.server)
+  }
+})
diff --git a/tests/e2e/paired-startup-exec-readiness.spec.ts b/tests/e2e/paired-startup-exec-readiness.spec.ts
new file mode 100644
index 00000000000..cd96de038ce
--- /dev/null
+++ b/tests/e2e/paired-startup-exec-readiness.spec.ts
@@ -0,0 +1,184 @@
+import { existsSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import path from 'node:path'
+import type { Page } from '@stablyai/playwright-test'
+import { expect, test } from './helpers/orca-app'
+import { launchHeadlessPairedRuntimeHost } from './helpers/headless-paired-runtime-host'
+import {
+  createRuntimeDesktopPairingOffer,
+  launchPairedWebClient
+} from './helpers/paired-electron-client'
+import {
+  callStartupExecRuntime,
+  closeStartupExecTerminal,
+  createStartupExecTerminal,
+  expectStartupExecRecovery,
+  installZshExecProfile
+} from './helpers/startup-exec-readiness-oracle'
+
+test.skip(process.platform === 'win32', 'Paired startup-exec readiness uses POSIX shells.')
+
+async function waitForWorktree(page: Page, id: string): Promise<void> {
+  await expect
+    .poll(
+      () =>
+        page.evaluate(
+          (worktreeId) =>
+            window.__store
+              ?.getState()
+              .allWorktrees()
+              .some((candidate) => candidate.id === worktreeId),
+          id
+        ),
+      { timeout: 30_000 }
+    )
+    .toBe(true)
+  await expect
+    .poll(
+      async () => {
+        const listed = await callStartupExecRuntime<{ worktrees: { id: string }[] }>(
+          page,
+          'worktree.list',
+          {}
+        )
+        return listed.worktrees.some((candidate) => candidate.id === id)
+      },
+      { timeout: 30_000 }
+    )
+    .toBe(true)
+}
+
+function expectLedger(ledgerPath: string): void {
+  const [pid, tty] = readFileSync(ledgerPath, 'utf8').trim().split('|')
+  expect(Number(pid)).toBeGreaterThan(1)
+  expect(tty).toMatch(/^\/dev\//)
+}
+
+async function releaseExecBarrier(
+  startedPath: string,
+  releasePath: string,
+  ledgerPath: string
+): Promise<void> {
+  await expect
+    .poll(
+      () =>
+        existsSync(startedPath)
+          ? 'started'
+          : existsSync(ledgerPath)
+            ? readFileSync(ledgerPath, 'utf8').trim()
+            : 'pending',
+      { timeout: 30_000 }
+    )
+    .toBe('started')
+  expect(existsSync(ledgerPath)).toBe(false)
+  writeFileSync(releasePath, '')
+}
+
+function cleanupExecBarrier(startedPath: string, releasePath: string): void {
+  rmSync(startedPath, { force: true })
+  rmSync(releasePath, { force: true })
+}
+
+test('recovers startup exec through a headed paired desktop owner @headful', async ({
+  electronApp,
+  orcaPage
+}) => {
+  test.setTimeout(90_000)
+  const runId = `headed_${Date.now()}`
+  const homePath = await electronApp.evaluate(({ app }) => app.getPath('home'))
+  const ledgerPath = path.join(homePath, `.sta4067-${runId}.ledger`)
+  const startedPath = path.join(homePath, `.sta4067-${runId}.started`)
+  const releasePath = path.join(homePath, `.sta4067-${runId}.release`)
+  const removeProfile = installZshExecProfile(homePath, runId, { releasePath, startedPath })
+  const worktreeId = await orcaPage.evaluate(() => window.__store?.getState().activeWorktreeId)
+  if (!worktreeId) {
+    throw new Error('Headed owner has no active worktree')
+  }
+  const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+  const client = await launchPairedWebClient(electronApp, offer)
+  let terminal: string | null = null
+  try {
+    await waitForWorktree(client.page, worktreeId)
+    const created = await createStartupExecTerminal(
+      client.page,
+      worktreeId,
+      runId,
+      ledgerPath,
+      'paired-client',
+      '/bin/zsh',
+      { ORCA_ORIG_ZDOTDIR: homePath, ORCA_ZSHENV_SOURCE_DIR: homePath }
+    )
+    terminal = created.terminal
+    await releaseExecBarrier(startedPath, releasePath, ledgerPath)
+    await expectStartupExecRecovery(client.page, created, runId)
+    expectLedger(ledgerPath)
+  } finally {
+    await closeStartupExecTerminal(orcaPage, terminal)
+    await client.dispose()
+    removeProfile()
+    cleanupExecBarrier(startedPath, releasePath)
+  }
+})
+
+test('recovers the same startup exec through an isolated headless orca serve', async ({
+  testRepoPath
+}) => {
+  test.setTimeout(120_000)
+  const runId = `headless_${Date.now()}`
+  const host = await launchHeadlessPairedRuntimeHost()
+  let terminal: string | null = null
+  let removeProfile: (() => void) | undefined
+  let client: Awaited<ReturnType<typeof launchPairedWebClient>> | undefined
+  let startedPath = ''
+  let releasePath = ''
+  try {
+    const homePath = await host.app.evaluate(({ app }) => app.getPath('home'))
+    const ledgerPath = path.join(homePath, `.sta4067-${runId}.ledger`)
+    startedPath = path.join(homePath, `.sta4067-${runId}.started`)
+    releasePath = path.join(homePath, `.sta4067-${runId}.release`)
+    removeProfile = installZshExecProfile(homePath, runId, { releasePath, startedPath })
+    client = await launchPairedWebClient(host.app, host.offer, { waitForWorkspace: false })
+    await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
+    await client.page.locator('[data-worktree-sidebar]').waitFor({
+      state: 'visible',
+      timeout: 30_000
+    })
+    await expect
+      .poll(
+        () => client.page.evaluate(() => window.__store?.getState().allWorktrees()[0]?.id ?? null),
+        { timeout: 30_000 }
+      )
+      .not.toBeNull()
+    const worktreeId = await client.page.evaluate(
+      () => window.__store?.getState().allWorktrees()[0]?.id ?? null
+    )
+    if (!worktreeId) {
+      throw new Error('Headless owner did not publish its worktree')
+    }
+    const created = await createStartupExecTerminal(
+      client.page,
+      worktreeId,
+      runId,
+      ledgerPath,
+      'paired-client',
+      '/bin/zsh',
+      { ORCA_ORIG_ZDOTDIR: homePath, ORCA_ZSHENV_SOURCE_DIR: homePath }
+    )
+    terminal = created.terminal
+    await releaseExecBarrier(startedPath, releasePath, ledgerPath)
+    await expectStartupExecRecovery(client.page, created, runId)
+    expectLedger(ledgerPath)
+  } finally {
+    try {
+      if (client) {
+        await closeStartupExecTerminal(client.page, terminal)
+        await client.dispose()
+      }
+      removeProfile?.()
+      if (startedPath) {
+        cleanupExecBarrier(startedPath, releasePath)
+      }
+    } finally {
+      await host.dispose()
+    }
+  }
+})
diff --git a/tests/e2e/paired-web-add-project-unavailable-host.spec.ts b/tests/e2e/paired-web-add-project-unavailable-host.spec.ts
new file mode 100644
index 00000000000..771feffdde7
--- /dev/null
+++ b/tests/e2e/paired-web-add-project-unavailable-host.spec.ts
@@ -0,0 +1,158 @@
+import type { ElectronApplication, Page, TestInfo } from '@stablyai/playwright-test'
+import { expect, test } from './helpers/orca-app'
+import {
+  launchHeadlessPairedRuntimeHost,
+  type HeadlessPairedRuntimeHost
+} from './helpers/headless-paired-runtime-host'
+import {
+  createRuntimeDesktopPairingOffer,
+  launchPairedWebClient,
+  type PairedWebClient,
+  type RuntimeDesktopPairingOffer
+} from './helpers/paired-electron-client'
+import { waitForSessionReady } from './helpers/store'
+
+test.skip(
+  process.env.ORCA_E2E_WEB_CLIENT !== '1',
+  'Run with ORCA_E2E_WEB_CLIENT=1 so the paired web client is built'
+)
+
+type HostHealth = 'blocked' | 'disconnected'
+
+async function setOnlyRuntimeHostHealth(page: Page, health: HostHealth): Promise<string> {
+  return page.evaluate((nextHealth) => {
+    const store = window.__store
+    if (!store) {
+      throw new Error('Paired web client store unavailable')
+    }
+    const state = store.getState()
+    const environment = state.runtimeEnvironments[0]
+    if (!environment) {
+      throw new Error('Paired web client has no configured runtime')
+    }
+    const current = state.runtimeStatusByEnvironmentId.get(environment.id)
+    if (nextHealth === 'blocked' && !current?.status) {
+      throw new Error('Paired web runtime status unavailable for compatibility fault')
+    }
+    store.setState({
+      runtimeStatusByEnvironmentId: new Map(state.runtimeStatusByEnvironmentId).set(
+        environment.id,
+        nextHealth === 'blocked'
+          ? {
+              ...current,
+              checkedAt: Date.now(),
+              status: {
+                ...current!.status!,
+                protocolVersion: 0,
+                runtimeProtocolVersion: 0
+              }
+            }
+          : { ...current, checkedAt: Date.now(), status: null }
+      )
+    })
+    return environment.name
+  }, health)
+}
+
+async function assertCreationActionsDisabled(args: {
+  health: HostHealth
+  hostName: string
+  page: Page
+  testInfo: TestInfo
+  topology: 'headed' | 'headless'
+}): Promise<void> {
+  await args.page
+    .getByRole('button', { name: /Add Project/i })
+    .first()
+    .click()
+  const dialog = args.page.getByRole('dialog', { name: /Add a project/i })
+  await expect(dialog).toBeVisible()
+  const hostPicker = dialog.getByRole('combobox')
+  await expect(hostPicker).toContainText(args.hostName)
+  await expect(hostPicker).toContainText(
+    args.health === 'blocked' ? 'Update needed' : 'Disconnected'
+  )
+  await expect(dialog.getByRole('button', { name: /Browse folder|Browse host/i })).toBeDisabled()
+  await expect(dialog.getByRole('button', { name: /Clone from URL/i })).toBeDisabled()
+  await expect(dialog.getByRole('button', { name: /Create new project/i })).toBeDisabled()
+
+  await hostPicker.click()
+  const hostOption = args.page
+    .locator('[cmdk-item][aria-disabled="true"]')
+    .filter({ hasText: args.hostName })
+  await expect(hostOption).toHaveAttribute('aria-disabled', 'true')
+  await expect(hostOption).toContainText(args.health === 'blocked' ? 'Update Orca' : 'Disconnected')
+  await args.page.keyboard.press('Escape')
+  await args.page.screenshot({
+    path: args.testInfo.outputPath(`${args.topology}-paired-web-add-project-${args.health}.png`),
+    fullPage: true
+  })
+  await dialog.getByRole('button', { name: 'Close' }).click()
+  await expect(dialog).toBeHidden()
+}
+
+async function runUnavailableHostJourney(args: {
+  app: ElectronApplication
+  offer: RuntimeDesktopPairingOffer
+  testInfo: TestInfo
+  topology: 'headed' | 'headless'
+}): Promise<void> {
+  let client: PairedWebClient | null = null
+  try {
+    client = await launchPairedWebClient(args.app, args.offer)
+    await args.app.evaluate(({ BrowserWindow }) => {
+      BrowserWindow.getAllWindows().forEach((window) => window.show())
+    })
+    const hostName = await setOnlyRuntimeHostHealth(client.page, 'blocked')
+    await assertCreationActionsDisabled({
+      health: 'blocked',
+      hostName,
+      page: client.page,
+      testInfo: args.testInfo,
+      topology: args.topology
+    })
+    expect(await setOnlyRuntimeHostHealth(client.page, 'disconnected')).toBe(hostName)
+    await assertCreationActionsDisabled({
+      health: 'disconnected',
+      hostName,
+      page: client.page,
+      testInfo: args.testInfo,
+      topology: args.topology
+    })
+  } finally {
+    await client?.dispose()
+  }
+}
+
+test('disables paired-web Add Project for a blocked or unavailable headed host @headful', async ({
+  electronApp,
+  orcaPage
+}, testInfo) => {
+  test.setTimeout(240_000)
+  await waitForSessionReady(orcaPage)
+  const offer = await createRuntimeDesktopPairingOffer(orcaPage)
+  await runUnavailableHostJourney({
+    app: electronApp,
+    offer,
+    testInfo,
+    topology: 'headed'
+  })
+})
+
+test('keeps paired-web Add Project disabled for a headless unavailable host', async ({
+  testRepoPath
+}, testInfo) => {
+  test.setTimeout(240_000)
+  const host: HeadlessPairedRuntimeHost = await launchHeadlessPairedRuntimeHost()
+  try {
+    await host.client.call('repo.add', { path: testRepoPath, kind: 'git' })
+    await runUnavailableHostJourney({
+      app: host.app,
+      offer: host.offer,
+      testInfo,
+      topology: 'headless'
+    })
+  } finally {
+    await host.dispose()
+  }
+})
diff --git a/tests/e2e/remote-agent-session-focus-authority.spec.ts b/tests/e2e/remote-agent-session-focus-authority.spec.ts
index 2b007fddd98..4fb4c3e7ae8 100644
--- a/tests/e2e/remote-agent-session-focus-authority.spec.ts
+++ b/tests/e2e/remote-agent-session-focus-authority.spec.ts
@@ -140,7 +140,7 @@ async function readRenderedTabOrder(page: Page): Promise<string[]> {
 
 function expectImmediatelyAfter(order: string[], predecessor: string, created: string): void {
   const predecessorIndex = order.indexOf(predecessor)
-  if (predecessorIndex < 0) {
+  if (predecessorIndex === -1) {
     throw new Error(
       `placement predecessor ${predecessor} missing before ${created}: ${JSON.stringify(order)}`
     )
diff --git a/tests/e2e/ssh-startup-exec-readiness.spec.ts b/tests/e2e/ssh-startup-exec-readiness.spec.ts
new file mode 100644
index 00000000000..e77c9afd67f
--- /dev/null
+++ b/tests/e2e/ssh-startup-exec-readiness.spec.ts
@@ -0,0 +1,111 @@
+import { expect, test } from './helpers/orca-app'
+import {
+  connectDockerSshRelayTarget,
+  reconnectDockerSshRelayTarget
+} from './helpers/docker-ssh-relay-connection'
+import {
+  cleanupDockerSshRelayTarget,
+  execDockerSshRelayTargetControlCommand,
+  startDockerSshRelayTarget,
+  type DockerSshRelayTarget,
+  writeDockerSshRelayTargetFile
+} from './helpers/docker-ssh-relay-target'
+import {
+  bashExecProfileContents,
+  closeStartupExecTerminal,
+  createStartupExecTerminal,
+  expectStartupCommandQueuedByCompatibilityFallback,
+  expectStartupExecRecovery
+} from './helpers/startup-exec-readiness-oracle'
+import { ensureTerminalVisible, waitForActiveWorktree, waitForSessionReady } from './helpers/store'
+import { waitForActiveTerminalManager } from './helpers/terminal'
+
+const RUN_DOCKER_SSH = process.env.ORCA_E2E_SSH_DOCKER === '1'
+
+test.describe('startup exec readiness over live SSH', () => {
+  test.skip(!RUN_DOCKER_SSH, 'Set ORCA_E2E_SSH_DOCKER=1 to run Docker-backed SSH E2E.')
+  test.skip(process.platform === 'win32', 'Docker SSH E2E uses POSIX ssh tooling.')
+
+  test('survives an SSH reconnect while the replacement shell is not ready @headful', async ({
+    orcaPage
+  }, testInfo) => {
+    test.setTimeout(150_000)
+    const runId = `ssh_${Date.now()}`
+    const startedPath = `/tmp/sta4067-${runId}.started`
+    const releasePath = `/tmp/sta4067-${runId}.release`
+    const ledgerPath = `/tmp/sta4067-${runId}.ledger`
+    let target: DockerSshRelayTarget | null = null
+    let terminal: string | null = null
+    try {
+      target = startDockerSshRelayTarget(testInfo)
+      await waitForSessionReady(orcaPage)
+      await waitForActiveWorktree(orcaPage)
+      const remote = await connectDockerSshRelayTarget(orcaPage, target, {
+        relayGracePeriodSeconds: 15
+      })
+      await ensureTerminalVisible(orcaPage, 45_000)
+      await waitForActiveTerminalManager(orcaPage, 60_000)
+      writeDockerSshRelayTargetFile(
+        target,
+        '/root/.bash_profile',
+        bashExecProfileContents(runId, { releasePath, startedPath })
+      )
+      const created = await createStartupExecTerminal(
+        orcaPage,
+        remote.worktreeId,
+        runId,
+        ledgerPath,
+        'owning-client'
+      )
+      terminal = created.terminal
+      await expect
+        .poll(
+          () =>
+            execDockerSshRelayTargetControlCommand(
+              target!,
+              `if test -e '${startedPath}'; then echo ready; else echo pending; fi`
+            ),
+          { timeout: 30_000 }
+        )
+        .toBe('ready')
+      await expectStartupCommandQueuedByCompatibilityFallback(orcaPage, created)
+      expect(
+        execDockerSshRelayTargetControlCommand(
+          target,
+          `if test ! -e '${ledgerPath}'; then echo pending; else cat '${ledgerPath}'; fi`
+        )
+      ).toBe('pending')
+
+      await reconnectDockerSshRelayTarget(orcaPage, remote.targetId)
+      execDockerSshRelayTargetControlCommand(target, `: > '${releasePath}'`)
+      await expect
+        .poll(
+          () =>
+            execDockerSshRelayTargetControlCommand(
+              target!,
+              `if test -e '${ledgerPath}'; then cat '${ledgerPath}'; else echo pending; fi`
+            ),
+          { timeout: 8_000 }
+        )
+        .toMatch(/^[0-9]+\|\/dev\/pts\/[0-9]+$/)
+      await expectStartupExecRecovery(orcaPage, created, runId)
+
+      const [pidText, tty] = execDockerSshRelayTargetControlCommand(
+        target,
+        `cat '${ledgerPath}'`
+      ).split('|')
+      const pid = Number(pidText)
+      expect(pid).toBeGreaterThan(1)
+      expect(tty).toMatch(/^\/dev\/pts\/[0-9]+$/)
+      expect(execDockerSshRelayTargetControlCommand(target, `readlink '/proc/${pid}/exe'`)).toMatch(
+        /\/bash$/
+      )
+      expect(
+        execDockerSshRelayTargetControlCommand(target, `ps -o tpgid= -p '${pid}' | tr -d ' '`)
+      ).toBe(String(pid))
+    } finally {
+      await closeStartupExecTerminal(orcaPage, terminal)
+      cleanupDockerSshRelayTarget(target)
+    }
+  })
+})
diff --git a/tests/e2e/terminal-hidden-tui-visual-restore.spec.ts b/tests/e2e/terminal-hidden-tui-visual-restore.spec.ts
index 96476cb0cd2..a78f4e81fa1 100644
--- a/tests/e2e/terminal-hidden-tui-visual-restore.spec.ts
+++ b/tests/e2e/terminal-hidden-tui-visual-restore.spec.ts
@@ -28,7 +28,7 @@ type HiddenTuiWindow = Window & {
   __terminalPtyOutputDebug?: {
     reset: () => void
     snapshot: () => {
-      hiddenRendererMode2031ReplyCount: number
+      hiddenRendererSkipCount: number
     }
   }
 }
diff --git a/tests/e2e/terminal-link-hover-after-worktree-return.spec.ts b/tests/e2e/terminal-link-hover-after-worktree-return.spec.ts
index 70912388cba..ee5ebe81079 100644
--- a/tests/e2e/terminal-link-hover-after-worktree-return.spec.ts
+++ b/tests/e2e/terminal-link-hover-after-worktree-return.spec.ts
@@ -56,7 +56,7 @@ async function locateHoverProbe(page: Page, needle: string): Promise<HoverProbe>
         continue
       }
       const idx = line.translateToString(true).indexOf(needle)
-      if (idx >= 0) {
+      if (idx !== -1) {
         hit = { row, col: idx }
         break
       }
diff --git a/tests/e2e/terminal-paste-ownership.spec.ts b/tests/e2e/terminal-paste-ownership.spec.ts
index 5df66cbce04..56c65a139aa 100644
--- a/tests/e2e/terminal-paste-ownership.spec.ts
+++ b/tests/e2e/terminal-paste-ownership.spec.ts
@@ -114,7 +114,7 @@ async function rightClickActiveTerminalSurface(page: Page): Promise<void> {
 
 async function installClipboardReadTerminalBlurRepro(app: ElectronApplication): Promise<void> {
   await app.evaluate(({ BrowserWindow, ipcMain }) => {
-    type ClipboardReadHandler = (event: unknown, ...args: unknown[]) => Promise<unknown> | unknown
+    type ClipboardReadHandler = (event: unknown, ...args: unknown[]) => unknown
     const global = globalThis as unknown as {
       __orcaOriginalClipboardReadTextHandler?: ClipboardReadHandler
     }
@@ -152,7 +152,7 @@ async function installClipboardReadTerminalBlurRepro(app: ElectronApplication):
 
 async function restoreClipboardReadTerminalBlurRepro(app: ElectronApplication): Promise<void> {
   await app.evaluate(({ ipcMain }) => {
-    type ClipboardReadHandler = (event: unknown, ...args: unknown[]) => Promise<unknown> | unknown
+    type ClipboardReadHandler = (event: unknown, ...args: unknown[]) => unknown
     const global = globalThis as unknown as {
       __orcaOriginalClipboardReadTextHandler?: ClipboardReadHandler
     }
diff --git a/tests/e2e/terminal-tab-switch-visual-restore.spec.ts b/tests/e2e/terminal-tab-switch-visual-restore.spec.ts
index 4f0d2a5df11..938dc852179 100644
--- a/tests/e2e/terminal-tab-switch-visual-restore.spec.ts
+++ b/tests/e2e/terminal-tab-switch-visual-restore.spec.ts
@@ -60,7 +60,6 @@ type SchedulerDebugWindow = Window & {
 type HiddenOutputDebugSnapshot = {
   hiddenRendererSkipCount: number
   hiddenRendererSkippedChars: number
-  hiddenRendererMode2031ReplyCount: number
 }
 
 type HiddenOutputRecoveryWindow = Window & {
diff --git a/tests/e2e/worktree-card-downward-drag.spec.ts b/tests/e2e/worktree-card-downward-drag.spec.ts
new file mode 100644
index 00000000000..b5cb685a4a6
--- /dev/null
+++ b/tests/e2e/worktree-card-downward-drag.spec.ts
@@ -0,0 +1,278 @@
+import path from 'node:path'
+import type { Page } from '@stablyai/playwright-test'
+import { test, expect } from './helpers/orca-app'
+import { waitForSessionReady } from './helpers/store'
+
+const SYNTHETIC_COUNT = 60
+
+type PreviewOffsetSample = {
+  worktreeId: string
+  targetOffset: number
+  renderedOffset: number
+}
+
+async function seedVirtualizedManualWorktrees(page: Page): Promise<{
+  sourceId: string
+  nextId: string
+  idPrefix: string
+}> {
+  const repo = await page.evaluate(() => {
+    const store = window.__store
+    if (!store) {
+      throw new Error('window.__store is not available')
+    }
+    const state = store.getState()
+    const repo = state.repos[0]
+    if (!repo) {
+      throw new Error('Expected a seeded e2e repo')
+    }
+    return { id: repo.id, path: repo.path }
+  })
+  const now = Date.now()
+  const syntheticWorktrees = Array.from({ length: SYNTHETIC_COUNT }, (_, index) => {
+    const suffix = String(index).padStart(2, '0')
+    const worktreePath = path.join(repo.path, '..', `downward-drag-${suffix}`)
+    return {
+      id: `${repo.id}::downward-drag-${suffix}`,
+      instanceId: `downward-drag-${suffix}`,
+      repoId: repo.id,
+      path: worktreePath,
+      displayName: `Downward drag ${suffix}`,
+      comment: '',
+      linkedIssue: null,
+      linkedPR: null,
+      linkedLinearIssue: null,
+      isArchived: false,
+      isUnread: false,
+      isPinned: false,
+      sortOrder: 100_000 - index,
+      manualOrder: 100_000 - index,
+      lastActivityAt: now - index,
+      head: '0000000000000000000000000000000000000000',
+      branch: `downward-drag-${suffix}`,
+      isBare: false,
+      isMainWorktree: false
+    }
+  })
+  await page.evaluate(
+    ({ repoId, worktrees }) => {
+      const store = window.__store
+      if (!store) {
+        throw new Error('window.__store is not available')
+      }
+      const state = store.getState()
+      const seededWorktrees = (state.worktreesByRepo[repoId] ?? []).map((worktree, index) => ({
+        ...worktree,
+        manualOrder: -1_000 - index
+      }))
+
+      store.setState({
+        groupBy: 'none',
+        sortBy: 'manual',
+        showActiveOnly: false,
+        showSleepingWorkspaces: true,
+        hideDefaultBranchWorkspace: false,
+        filterRepoIds: [],
+        sidebarOpen: true,
+        worktreesByRepo: {
+          ...state.worktreesByRepo,
+          [repoId]: [...worktrees, ...seededWorktrees]
+        },
+        updateWorktreesMeta: async (updatesByWorktreeId) => {
+          store.setState((current) => ({
+            sortEpoch: current.sortEpoch + 1,
+            worktreesByRepo: Object.fromEntries(
+              Object.entries(current.worktreesByRepo).map(([repoId, worktrees]) => [
+                repoId,
+                worktrees.map((worktree) => ({
+                  ...worktree,
+                  ...updatesByWorktreeId.get(worktree.id)
+                }))
+              ])
+            )
+          }))
+        }
+      })
+    },
+    { repoId: repo.id, worktrees: syntheticWorktrees }
+  )
+  const sourceId = syntheticWorktrees[0]!.id
+  return {
+    sourceId,
+    nextId: syntheticWorktrees[1]!.id,
+    idPrefix: sourceId.slice(0, -2)
+  }
+}
+
+async function sampleMountedPreviewOffsets(
+  page: Page,
+  sourceId: string
+): Promise<PreviewOffsetSample[][]> {
+  return page.evaluate(async (draggedId) => {
+    const scroller = document.querySelector<HTMLElement>('[data-worktree-sidebar]')
+    if (!scroller) {
+      throw new Error('Worktree sidebar is not available')
+    }
+    const samples: PreviewOffsetSample[][] = []
+    for (let frame = 0; frame < 20; frame++) {
+      await new Promise<void>((resolve) => requestAnimationFrame(() => resolve()))
+      if (document.querySelector(`[data-worktree-drag-id=${JSON.stringify(draggedId)}]`)) {
+        continue
+      }
+      const frameSamples = [
+        ...document.querySelectorAll<HTMLElement>('[data-worktree-virtual-row]')
+      ].flatMap((row) => {
+        const rowRect = row.getBoundingClientRect()
+        const scrollerRect = scroller.getBoundingClientRect()
+        if (rowRect.bottom <= scrollerRect.top || rowRect.top >= scrollerRect.bottom) {
+          return []
+        }
+        const worktree = row.querySelector<HTMLElement>('[data-worktree-drag-id]')
+        const worktreeId = worktree?.getAttribute('data-worktree-drag-id')
+        const rowStart = Number(row.dataset.worktreeVirtualRowStart)
+        const matches = [...row.style.transform.matchAll(/translateY\((-?[\d.]+)px\)/g)]
+        const targetOffset = Number(matches[1]?.[1] ?? 0)
+        const renderedTop = new DOMMatrixReadOnly(getComputedStyle(row).transform).m42
+        const renderedOffset = renderedTop - rowStart
+        return worktreeId &&
+          Number.isFinite(rowStart) &&
+          Number.isFinite(targetOffset) &&
+          Number.isFinite(renderedOffset)
+          ? [{ worktreeId, targetOffset, renderedOffset }]
+          : []
+      })
+      if (frameSamples.length > 0) {
+        samples.push(frameSamples)
+      }
+    }
+    return samples
+  }, sourceId)
+}
+
+test('dragging a virtualized worktree downward keeps rows stable', async ({ orcaPage }) => {
+  await waitForSessionReady(orcaPage)
+  await orcaPage.setViewportSize({ width: 1_000, height: 620 })
+  const { sourceId, nextId, idPrefix } = await seedVirtualizedManualWorktrees(orcaPage)
+  const scroller = orcaPage.locator('[data-worktree-sidebar]')
+  const source = orcaPage.locator(
+    `[data-worktree-sidebar] [data-worktree-id=${JSON.stringify(sourceId)}]`
+  )
+  await scroller.evaluate((element) => {
+    element.scrollTop = 0
+    element.dispatchEvent(new Event('scroll', { bubbles: true }))
+  })
+  await expect(source).toBeVisible()
+
+  const sourceBox = await source.evaluate((element) => {
+    const rect = element.getBoundingClientRect()
+    return { x: rect.left, y: rect.top, width: rect.width, height: rect.height }
+  })
+  const nextSource = orcaPage.locator(
+    `[data-worktree-sidebar] [data-worktree-id=${JSON.stringify(nextId)}]`
+  )
+  const sourceStride = await nextSource.evaluate(
+    (element, sourceTop) => element.getBoundingClientRect().top - sourceTop,
+    sourceBox.y
+  )
+  expect(Number.isFinite(sourceStride)).toBe(true)
+  expect(sourceStride).toBeGreaterThan(1)
+  const scrollerBox = await scroller.evaluate((element) => {
+    const rect = element.getBoundingClientRect()
+    return { x: rect.left, y: rect.top, width: rect.width, height: rect.height }
+  })
+
+  await orcaPage.mouse.move(sourceBox.x + sourceBox.width / 2, sourceBox.y + sourceBox.height / 2)
+  await orcaPage.mouse.down()
+  try {
+    const edgeX = scrollerBox.x + 2
+    const edgeY = scrollerBox.y + scrollerBox.height - 8
+    // Keep the pointer in the edge zone while the renderer advances autoscroll.
+    for (let step = 0; step < 12; step++) {
+      await orcaPage.mouse.move(edgeX, edgeY, { steps: 2 })
+      if ((await source.count()) === 0) {
+        break
+      }
+      await orcaPage.waitForTimeout(100)
+    }
+    if ((await source.count()) > 0) {
+      for (let step = 0; step < 8 && (await source.count()) > 0; step++) {
+        await scroller.evaluate((element) => {
+          element.scrollTop = Math.min(
+            element.scrollHeight,
+            element.scrollTop + element.clientHeight
+          )
+          element.dispatchEvent(new Event('scroll', { bubbles: true }))
+        })
+        await orcaPage.waitForTimeout(100)
+      }
+    }
+    await expect
+      .poll(() => source.count(), {
+        timeout: 10_000,
+        message: 'Downward autoscroll did not virtualize the dragged source row'
+      })
+      .toBe(0)
+
+    const samples = await sampleMountedPreviewOffsets(orcaPage, sourceId)
+    expect(samples.length).toBeGreaterThan(0)
+    const observationsById = new Map<string, PreviewOffsetSample[]>()
+    for (const sample of samples.flat()) {
+      const distanceFromValidTarget = Math.min(
+        Math.abs(sample.targetOffset),
+        Math.abs(sample.targetOffset + sourceStride)
+      )
+      expect(distanceFromValidTarget).toBeLessThanOrEqual(1)
+      expect(sample.renderedOffset).toBeGreaterThanOrEqual(-sourceStride - 2)
+      expect(sample.renderedOffset).toBeLessThanOrEqual(2)
+      const observations = observationsById.get(sample.worktreeId) ?? []
+      observations.push(sample)
+      observationsById.set(sample.worktreeId, observations)
+    }
+
+    const recurrentRows = [...observationsById.values()].filter(
+      (observations) => observations.length > 1
+    )
+    expect(recurrentRows.length).toBeGreaterThan(0)
+    expect(
+      recurrentRows.some((observations) =>
+        observations.some((sample) => sample.renderedOffset <= -sourceStride * 0.8)
+      )
+    ).toBe(true)
+    for (const observations of recurrentRows) {
+      let renderedReversal = 0
+      for (let index = 1; index < observations.length; index++) {
+        renderedReversal += Math.max(
+          0,
+          observations[index]!.renderedOffset - observations[index - 1]!.renderedOffset
+        )
+      }
+      expect(renderedReversal).toBeLessThanOrEqual(sourceStride)
+    }
+  } finally {
+    await orcaPage.mouse.up()
+  }
+
+  await expect(orcaPage.locator('[data-worktree-sidebar-drag-preview="true"]')).toHaveCount(0)
+  await expect(orcaPage.locator('html')).not.toHaveAttribute(
+    'data-worktree-sidebar-pointer-dragging'
+  )
+  await scroller.evaluate((element) => {
+    element.scrollTop = 0
+    element.dispatchEvent(new Event('scroll', { bubbles: true }))
+  })
+  await expect
+    .poll(
+      () =>
+        scroller
+          .locator('[role="option"]')
+          .evaluateAll(
+            (options, prefix) =>
+              options
+                .map((option) => option.getAttribute('data-worktree-id'))
+                .find((worktreeId) => worktreeId?.startsWith(prefix)) ?? null,
+            idPrefix
+          ),
+      { message: 'The downward drop did not move the source away from the first slot' }
+    )
+    .toBe(nextId)
+})
diff --git a/tests/tools/fish-mode2031-repro/capture-fish-mode2031-trace.mjs b/tests/tools/fish-mode2031-repro/capture-fish-mode2031-trace.mjs
new file mode 100644
index 00000000000..1b2cbcae38c
--- /dev/null
+++ b/tests/tools/fish-mode2031-repro/capture-fish-mode2031-trace.mjs
@@ -0,0 +1,398 @@
+#!/usr/bin/env node
+/**
+ * Ground-truth repro harness for issue #9993: color-scheme (CSI ?997;1n) replies
+ * leaking into a child process' stdin under fish.
+ *
+ * Simulates Orca's terminal pipeline around a REAL fish shell:
+ *   node-pty  ->  scanMode2031ReplyDecision() (the real scanner from
+ *                 src/shared/terminal-color-scheme-protocol.ts)
+ *             ->  reply `CSI ?997;1n` written back to the PTY, optionally after
+ *                 a delay that models the renderer IPC round-trip.
+ *
+ * Requires Node >= 22.18 (native TypeScript type stripping) so the real .ts
+ * scanner can be imported without a build step.
+ *
+ * Usage:
+ *   node tests/tools/fish-mode2031-repro/capture-fish-mode2031-trace.mjs [options]
+ *
+ *   --delay=<ms>        reply delay; 0 = synchronous in-process (default 0)
+ *   --shell=<path>      fish binary (default /opt/homebrew/bin/fish)
+ *   --user-config       use the caller's real fish config (Tide etc.) instead of
+ *                       an isolated minimal config
+ *   --prompt-cmd        add an external command substitution to fish_prompt, so
+ *                       the prompt itself forces extra tty handoffs
+ *   --no-probes         do NOT answer DA1/DA2/CPR/XTVERSION/OSC 10/11 (fish then
+ *                       stalls 10s on its DA1 wait)
+ *   --accept-delay=<ms> gap between typing the command and pressing Enter (300)
+ *   --paste             send command + Enter in a single write (paste-like)
+ *   --no-reply          never answer 2031 (control run)
+ *   --json              append a machine-readable summary
+ */
+
+import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { createRequire } from 'node:module'
+
+const require = createRequire(import.meta.url)
+const REPO_ROOT = path.resolve(import.meta.dirname, '../../..')
+
+const pty = require(path.join(REPO_ROOT, 'node_modules/node-pty'))
+const { INITIAL_MODE_2031_REPLY_SCAN_STATE, mode2031SequenceFor, scanMode2031ReplyDecision } =
+  await import(path.join(REPO_ROOT, 'src/shared/terminal-color-scheme-protocol.ts'))
+
+// ---------------------------------------------------------------- args
+
+const argv = process.argv.slice(2)
+const flag = (name) => argv.includes(`--${name}`)
+const opt = (name, fallback) => {
+  const hit = argv.find((a) => a.startsWith(`--${name}=`))
+  return hit === undefined ? fallback : hit.slice(name.length + 3)
+}
+
+const REPLY_DELAY_MS = Number(opt('delay', '0'))
+const SHELL = opt('shell', '/opt/homebrew/bin/fish')
+const USE_USER_CONFIG = flag('user-config')
+const ANSWER_PROBES = !flag('no-probes')
+const REPLY_ENABLED = !flag('no-reply')
+const EMIT_JSON = flag('json')
+const ACCEPT_DELAY_MS = Number(opt('accept-delay', '300'))
+const PASTE = flag('paste')
+const PROMPT_CMD = flag('prompt-cmd')
+const TYPEAHEAD = flag('typeahead')
+const TYPEAHEAD_AT_MS = Number(opt('typeahead-at', '150'))
+const SETTLE_MS = Number(opt('settle', '400'))
+
+const PROMPT_MARK = 'HARNESS> '
+const CHILD_CMD = `python3 -c 'import sys; d=sys.stdin.readline(); print("GOT:", repr(d))'`
+
+// ---------------------------------------------------------------- tracing
+
+const t0 = process.hrtime.bigint()
+const ms = () => Number(process.hrtime.bigint() - t0) / 1e6
+const stamp = () => ms().toFixed(3).padStart(10, ' ')
+
+const trace = []
+function log(dir, label, detail) {
+  const line = `[${stamp()}ms] ${dir.padEnd(12)} ${label}${detail ? ` ${detail}` : ''}`
+  trace.push(line)
+  console.log(line)
+}
+
+function esc(s) {
+  let out = ''
+  for (const ch of s) {
+    const c = ch.codePointAt(0)
+    if (ch === '\x1b') {
+      out += '\\e'
+    } else if (ch === '\n') {
+      out += '\\n'
+    } else if (ch === '\r') {
+      out += '\\r'
+    } else if (ch === '\t') {
+      out += '\\t'
+    } else if (c < 0x20 || c === 0x7f) {
+      out += `\\x${c.toString(16).padStart(2, '0')}`
+    } else if (c === 0x9b) {
+      out += '\\x9b'
+    } else {
+      out += ch
+    }
+  }
+  return out
+}
+
+const CHUNK_PRINT_CAP = 1200
+function escCapped(s) {
+  const e = esc(s)
+  return e.length > CHUNK_PRINT_CAP
+    ? `${e.slice(0, CHUNK_PRINT_CAP)}…<+${e.length - CHUNK_PRINT_CAP} esc-chars>`
+    : e
+}
+
+// ---------------------------------------------------------------- fish config
+
+let configHome = null
+const env = { ...process.env, TERM: 'xterm-256color', COLORTERM: 'truecolor', LANG: 'en_US.UTF-8' }
+delete env.FISH_HISTORY
+if (!USE_USER_CONFIG) {
+  configHome = mkdtempSync(path.join(tmpdir(), 'fish-2031-'))
+  mkdirSync(path.join(configHome, 'fish'), { recursive: true })
+  // Plain prompt: no Tide, no async prompt machinery. fish core still toggles
+  // DEC 2031 in tty_handoff.rs regardless of the prompt.
+  const promptBody = PROMPT_CMD
+    ? `set -l __x (/bin/echo -n ok); printf '${PROMPT_MARK}'`
+    : `printf '${PROMPT_MARK}'`
+  writeFileSync(
+    path.join(configHome, 'fish/config.fish'),
+    [
+      'set -g fish_greeting ""',
+      `function fish_prompt; ${promptBody}; end`,
+      'function fish_right_prompt; end',
+      ''
+    ].join('\n')
+  )
+  env.XDG_CONFIG_HOME = configHome
+  env.XDG_DATA_HOME = path.join(configHome, 'data')
+}
+
+// ---------------------------------------------------------------- pty
+
+log(
+  'HARNESS',
+  'config',
+  JSON.stringify({
+    shell: SHELL,
+    replyDelayMs: REPLY_DELAY_MS,
+    acceptDelayMs: ACCEPT_DELAY_MS,
+    paste: PASTE,
+    promptCmd: PROMPT_CMD,
+    replyEnabled: REPLY_ENABLED,
+    userConfig: USE_USER_CONFIG,
+    answerProbes: ANSWER_PROBES,
+    xdgConfigHome: configHome
+  })
+)
+
+const term = pty.spawn(SHELL, ['-l', '-i'], {
+  name: 'xterm-256color',
+  cols: 120,
+  rows: 30,
+  cwd: REPO_ROOT,
+  env
+})
+
+let scanState = INITIAL_MODE_2031_REPLY_SCAN_STATE
+let all = ''
+let replyCount = 0
+const replyEvents = []
+const decisionEvents = []
+let phase = 'boot'
+let chunkSeq = 0
+let lastDecision = null
+let staleReplyCount = 0
+
+function ptyWrite(bytes, label) {
+  log('HARNESS->PTY', label, `"${esc(bytes)}"`)
+  term.write(bytes)
+}
+
+function sendMode2031Reply(reason) {
+  replyCount += 1
+  // Stale = the scanner has already seen fish's `CSI ?2031l` (tty handed to a child)
+  // by the time this reply actually reaches the PTY. That reply lands in the child's stdin.
+  const stale = lastDecision === 'unsubscribed'
+  if (stale) {
+    staleReplyCount += 1
+  }
+  replyEvents.push({ at: ms(), phase, reason, delayMs: REPLY_DELAY_MS, stale })
+  ptyWrite(
+    mode2031SequenceFor('dark'),
+    `reply#${replyCount} CSI ?997;1n (${reason}, phase=${phase}${stale ? ', STALE: fish already sent ?2031l' : ''})`
+  )
+}
+
+// Modest emulation of the other terminal replies fish may probe for.
+function answerProbes(data) {
+  if (!ANSWER_PROBES) {
+    return
+  }
+  // oxlint-disable no-control-regex -- terminal escape sequences require control chars
+  if (/\x1b\[(?:0)?c/.test(data)) {
+    ptyWrite('\x1b[?62;4;6;22c', 'probe reply DA1')
+  }
+  if (/\x1b\[>(?:0)?c/.test(data)) {
+    ptyWrite('\x1b[>1;95;0c', 'probe reply DA2')
+  }
+  if (/\x1b\[(?:6n)/.test(data)) {
+    ptyWrite('\x1b[1;1R', 'probe reply CPR')
+  }
+  if (/\x1b\[>q/.test(data)) {
+    ptyWrite('\x1bP>|orca-harness(1)\x1b\\', 'probe reply XTVERSION')
+  }
+  if (/\x1b\]10;\?/.test(data)) {
+    ptyWrite('\x1b]10;rgb:ffff/ffff/ffff\x1b\\', 'probe reply OSC 10')
+  }
+  if (/\x1b\]11;\?/.test(data)) {
+    ptyWrite('\x1b]11;rgb:1e1e/1e1e/1e1e\x1b\\', 'probe reply OSC 11')
+  }
+  // oxlint-enable no-control-regex
+}
+
+term.onData((data) => {
+  const seq = ++chunkSeq
+  all += data
+  // oxlint-disable-next-line no-control-regex -- terminal escape sequences require control chars
+  const mode2031ToggleRe = /\x1b\[\?([0-9;]+)([hl])/g
+  const toggles = [...data.matchAll(mode2031ToggleRe)]
+    .filter((m) => m[1].split(';').some((p) => Number(p) === 2031))
+    .map((m) => `?2031${m[2]}`)
+  log(
+    'PTY->SCANNER',
+    `chunk#${seq} len=${data.length}${toggles.length ? ` toggles=[${toggles.join(',')}]` : ''}`,
+    `"${escCapped(data)}"`
+  )
+
+  const before = scanState
+  const result = scanMode2031ReplyDecision(scanState, data)
+  scanState = result.state
+  if (result.decision || before.pendingSubscribe !== scanState.pendingSubscribe || scanState.tail) {
+    log(
+      'SCANNER',
+      `chunk#${seq} decision=${result.decision ?? 'null'}`,
+      `state={tail:"${esc(scanState.tail)}",pendingSubscribe:${scanState.pendingSubscribe}}`
+    )
+  }
+  if (result.decision) {
+    lastDecision = result.decision
+    decisionEvents.push({ at: ms(), seq, decision: result.decision, phase })
+  }
+
+  if (REPLY_ENABLED && result.decision === 'subscribed') {
+    if (REPLY_DELAY_MS <= 0) {
+      sendMode2031Reply(`chunk#${seq} sync`)
+    } else {
+      setTimeout(() => sendMode2031Reply(`chunk#${seq} +${REPLY_DELAY_MS}ms`), REPLY_DELAY_MS)
+    }
+  }
+  answerProbes(data)
+})
+
+let exitInfo = null
+term.onExit((e) => {
+  exitInfo = e
+  log('PTY', 'exit', JSON.stringify(e))
+})
+
+// ---------------------------------------------------------------- driving
+
+const sleep = (n) => new Promise((r) => setTimeout(r, n))
+async function waitFor(pred, timeoutMs, what) {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    if (pred()) {
+      return true
+    }
+    await sleep(10)
+  }
+  log('HARNESS', 'TIMEOUT', `waiting for ${what}`)
+  return false
+}
+
+const countPrompts = () => all.split(PROMPT_MARK).length - 1
+
+try {
+  phase = 'boot'
+  await waitFor(() => all.includes(PROMPT_MARK), 15000, 'first prompt')
+  await sleep(SETTLE_MS)
+
+  let promptsBeforeAccept
+  let repliesBeforeAccept
+  let decisionsBeforeAccept
+  let outLenBeforeAccept
+
+  if (TYPEAHEAD) {
+    // Most realistic leak window: queue the command while an external command
+    // still owns the tty. fish redraws the prompt (`CSI ?2031h`) and consumes the
+    // buffered line in the same breath, so the handoff to the child happens
+    // sub-millisecond after the subscribe.
+    phase = 'pre-command'
+    log('HARNESS', 'MARK', '--- running `sleep 0.4` so the next line is typed ahead ---')
+    ptyWrite('sleep 0.4\r', 'pre-command')
+    await sleep(TYPEAHEAD_AT_MS)
+
+    promptsBeforeAccept = countPrompts()
+    repliesBeforeAccept = replyCount
+    decisionsBeforeAccept = decisionEvents.length
+    outLenBeforeAccept = all.length
+
+    phase = 'prompt-accept'
+    log('HARNESS', 'MARK', '--- type-ahead: command + Enter while sleep still owns the tty ---')
+    ptyWrite(`${CHILD_CMD}\r`, 'typeahead command + Enter')
+  } else if (PASTE) {
+    promptsBeforeAccept = countPrompts()
+    repliesBeforeAccept = replyCount
+    decisionsBeforeAccept = decisionEvents.length
+    outLenBeforeAccept = all.length
+    phase = 'prompt-accept'
+    log('HARNESS', 'MARK', '--- pasting command + Enter in one write (prompt-accept) ---')
+    ptyWrite(`${CHILD_CMD}\r`, 'paste command + Enter')
+  } else {
+    phase = 'type-command'
+    log('HARNESS', 'MARK', '--- typing child command (no Enter yet) ---')
+    ptyWrite(CHILD_CMD, 'type command')
+    await sleep(ACCEPT_DELAY_MS)
+
+    promptsBeforeAccept = countPrompts()
+    repliesBeforeAccept = replyCount
+    decisionsBeforeAccept = decisionEvents.length
+    outLenBeforeAccept = all.length
+
+    phase = 'prompt-accept'
+    log('HARNESS', 'MARK', '--- pressing Enter (prompt-accept -> tty handoff to child) ---')
+    ptyWrite('\r', 'Enter')
+  }
+  await sleep(1200)
+
+  const repliesDuringAccept = replyCount - repliesBeforeAccept
+  const decisionsDuringAccept = decisionEvents.length - decisionsBeforeAccept
+
+  phase = 'child-stdin'
+  log('HARNESS', 'MARK', '--- typing hello + Enter into the child ---')
+  ptyWrite('hello\r', 'child stdin')
+  await sleep(1500)
+
+  phase = 'teardown'
+  // python's repr renders ESC as the 4 literal chars \x1b, so match on the printed form.
+  const gotLine = (all.slice(outLenBeforeAccept).match(/GOT: '[^\r\n]*/) ?? [])[0] ?? null
+  log('HARNESS', 'RESULT GOT-line', gotLine === null ? '<none captured>' : `"${esc(gotLine)}"`)
+  const leaked = gotLine !== null && /\\x1b|\\033|\\u001b/.test(gotLine)
+  const leaked997 = gotLine !== null && gotLine.includes('997;1n')
+  log('HARNESS', 'RESULT leaked-escape-bytes-into-stdin', String(leaked))
+  log('HARNESS', 'RESULT leaked-CSI-997-1n-into-stdin', String(leaked997))
+  log(
+    'HARNESS',
+    'RESULT replies',
+    JSON.stringify({
+      total: replyCount,
+      duringPromptAccept: repliesDuringAccept,
+      decisionsDuringPromptAccept: decisionsDuringAccept,
+      staleReplies: staleReplyCount,
+      promptsBeforeAccept
+    })
+  )
+
+  ptyWrite('exit\r', 'exit')
+  await waitFor(() => exitInfo !== null, 3000, 'shell exit')
+  try {
+    term.kill()
+  } catch {}
+
+  if (EMIT_JSON) {
+    console.log(
+      `\n__JSON__${JSON.stringify({
+        delayMs: REPLY_DELAY_MS,
+        mode: TYPEAHEAD ? 'typeahead' : PASTE ? 'paste' : 'typed',
+        acceptDelayMs: ACCEPT_DELAY_MS,
+        promptCmd: PROMPT_CMD,
+        replyEnabled: REPLY_ENABLED,
+        userConfig: USE_USER_CONFIG,
+        answerProbes: ANSWER_PROBES,
+        gotLine,
+        leaked,
+        leaked997,
+        totalReplies: replyCount,
+        staleReplies: staleReplyCount,
+        repliesDuringPromptAccept: repliesDuringAccept,
+        decisions: decisionEvents,
+        replies: replyEvents
+      })}`
+    )
+  }
+} finally {
+  if (configHome) {
+    rmSync(configHome, { recursive: true, force: true })
+  }
+}
+
+process.exit(0)
diff --git a/tests/tools/google-signin-ua-probe.cjs b/tests/tools/google-signin-ua-probe.cjs
index 4fe50a2c122..7adf06bb7a0 100644
--- a/tests/tools/google-signin-ua-probe.cjs
+++ b/tests/tools/google-signin-ua-probe.cjs
@@ -9,13 +9,27 @@ const MODES = new Set([
   'electron-auth',
   'electron-fixed',
   'firefox-auth',
-  'firefox-fixed'
+  'firefox-fixed',
+  // Replicates the SHIPPED app exactly (setupClientHintsOverride +
+  // applyGoogleAuthUserAgent): Firefox UA is written to the WebContents on auth
+  // navs and to the request header only for auth-host URLs; every other request
+  // keeps whatever UA the WebContents carries. Logs incoming vs outgoing
+  // identity for ALL requests to expose cross-host mismatches during the flow.
+  'app-current',
+  // Same, but with the STA-3811 fix: the header layer strips client hints on any
+  // request already carrying the Firefox auth UA, regardless of destination host.
+  'app-fixed'
 ])
 const mode = process.argv.find((arg) => arg.startsWith('--mode='))?.slice('--mode='.length)
 if (!mode || !MODES.has(mode)) {
   throw new Error(`Expected --mode=${[...MODES].join('|')}`)
 }
 
+const headless = process.argv.includes('--headless')
+const exitAfterMs = Number(
+  process.argv.find((arg) => arg.startsWith('--exit-after-ms='))?.slice('--exit-after-ms='.length)
+)
+
 const profileRoot = mkdtempSync(join(tmpdir(), `orca-google-signin-${mode}-`))
 const partition = `persist:google-signin-${mode}`
 app.setPath('userData', profileRoot)
@@ -58,6 +72,30 @@ function safeUrl(rawUrl) {
   }
 }
 
+function hostOf(rawUrl) {
+  try {
+    return new URL(rawUrl).hostname.toLowerCase()
+  } catch {
+    return '<invalid>'
+  }
+}
+
+// A Firefox UA paired with any sec-ch-ua header is the cross-host tell we hunt:
+// real Firefox emits no client hints, so the two surfaces contradict each other.
+function detectUaHintMismatch(headers) {
+  const ua = headers['user-agent'] || ''
+  const isFirefox = /Firefox\/\d/.test(ua) && !/Chrome\//.test(ua)
+  const hasHints = Object.keys(headers).some((key) => key.startsWith('sec-ch-ua'))
+  if (isFirefox && hasHints) {
+    return 'firefox-ua-with-chrome-hints'
+  }
+  const isChrome = /Chrome\/\d/.test(ua)
+  if (isChrome && !hasHints) {
+    return 'chrome-ua-without-hints'
+  }
+  return null
+}
+
 function setHeader(headers, name, value) {
   const existing = Object.keys(headers).find((key) => key.toLowerCase() === name.toLowerCase())
   headers[existing ?? name] = value
@@ -126,8 +164,47 @@ app.whenReady().then(async () => {
   identities.cleaned = cleanElectronUserAgent(identities.native)
   browserSession.setUserAgent(identityForUrl('about:blank', identities))
 
+  const isAppMode = mode === 'app-current' || mode === 'app-fixed'
+
   browserSession.webRequest.onBeforeSendHeaders({ urls: ['https://*/*'] }, (details, callback) => {
     const headers = details.requestHeaders
+    const incoming = relevantHeaders(headers)
+
+    if (isAppMode) {
+      // Mirror setupClientHintsOverride: only auth-host URLs get the Firefox UA
+      // header + hint strip; every other request keeps its incoming UA (which is
+      // the WebContents UA — Firefox while the auth document is on screen).
+      if (isGoogleAuthUrl(details.url)) {
+        setHeader(headers, 'user-agent', identities.firefox)
+        removeClientHints(headers)
+      } else {
+        const currentUa = incoming['user-agent']
+        // STA-3811 fix: a request already carrying the Firefox auth UA came from
+        // the auth document; real Firefox sends no client hints, so strip them
+        // instead of rewriting to Chrome — keeping UA and hints one story.
+        if (mode === 'app-fixed' && currentUa === identities.firefox) {
+          removeClientHints(headers)
+        } else {
+          // Real setupClientHintsOverride builds Chrome hints once from the
+          // session's cleaned UA (a closure), never from the per-request UA.
+          applyChromeClientHints(headers, identities.cleaned)
+        }
+      }
+      const outgoing = relevantHeaders(headers)
+      const uaMismatch = detectUaHintMismatch(outgoing)
+      log('request', {
+        url: safeUrl(details.url),
+        host: hostOf(details.url),
+        resourceType: details.resourceType,
+        isAuthHost: isGoogleAuthUrl(details.url),
+        incoming,
+        outgoing,
+        uaHintMismatch: uaMismatch
+      })
+      callback({ requestHeaders: headers })
+      return
+    }
+
     const identity = identityForUrl(details.url, identities)
     setHeader(headers, 'user-agent', identity)
     if (identity === identities.firefox) {
@@ -144,8 +221,15 @@ app.whenReady().then(async () => {
     callback({ requestHeaders: headers })
   })
 
+  if (Number.isFinite(exitAfterMs) && exitAfterMs > 0) {
+    setTimeout(() => {
+      log('exit', { reason: 'timeout', exitAfterMs })
+      app.quit()
+    }, exitAfterMs)
+  }
+
   const window = new BrowserWindow({
-    show: true,
+    show: !headless,
     title: `Google sign-in UA probe: ${mode}`,
     width: 980,
     height: 840,
@@ -161,6 +245,24 @@ app.whenReady().then(async () => {
     if (!isMainFrame) {
       return
     }
+    if (isAppMode) {
+      // Mirror applyGoogleAuthUserAgent: Firefox UA on auth navs, restore the
+      // cleaned session UA otherwise. This WebContents UA is what leaks onto
+      // cross-host subresource requests while the auth document is on screen.
+      const current = window.webContents.getUserAgent()
+      if (isGoogleAuthUrl(url)) {
+        if (current !== identities.firefox) {
+          window.webContents.setUserAgent(identities.firefox)
+        }
+      } else if (current === identities.firefox) {
+        window.webContents.setUserAgent(identities.cleaned)
+      }
+      log('main-frame-navigation', {
+        url: safeUrl(url),
+        appliedUserAgent: window.webContents.getUserAgent()
+      })
+      return
+    }
     const identity = identityForUrl(url, identities)
     if (window.webContents.getUserAgent() !== identity) {
       window.webContents.setUserAgent(identity)
diff --git a/tests/tools/win-crash-survival-e2e/cli-args.mjs b/tests/tools/win-crash-survival-e2e/cli-args.mjs
index 2a289d7893e..e3533342e4d 100644
--- a/tests/tools/win-crash-survival-e2e/cli-args.mjs
+++ b/tests/tools/win-crash-survival-e2e/cli-args.mjs
@@ -119,7 +119,7 @@ function validateArgShape(argv) {
 
 function takeValue(argv, flag) {
   const idx = argv.indexOf(flag)
-  if (idx < 0) {
+  if (idx === -1) {
     return undefined
   }
   const value = argv[idx + 1]
diff --git a/tests/tools/win-update-e2e/cli-args.mjs b/tests/tools/win-update-e2e/cli-args.mjs
index 510bac5a899..d6310e8d159 100644
--- a/tests/tools/win-update-e2e/cli-args.mjs
+++ b/tests/tools/win-update-e2e/cli-args.mjs
@@ -190,7 +190,7 @@ function validate(opts, installDirFlagPresent) {
 
 function takeValue(argv, flag) {
   const idx = argv.indexOf(flag)
-  if (idx < 0) {
+  if (idx === -1) {
     return undefined
   }
   const value = argv[idx + 1]
diff --git a/tests/tools/win-update-e2e/daemon-processes.mjs b/tests/tools/win-update-e2e/daemon-processes.mjs
index f7d43cc9b44..d292c0f24b8 100644
--- a/tests/tools/win-update-e2e/daemon-processes.mjs
+++ b/tests/tools/win-update-e2e/daemon-processes.mjs
@@ -148,7 +148,7 @@ function normalizeArray(raw) {
 
 function parseUserDataArg(argv) {
   const idx = argv.indexOf('--user-data')
-  return idx >= 0 && argv[idx + 1] ? argv[idx + 1] : defaultUserDataDir()
+  return idx !== -1 && argv[idx + 1] ? argv[idx + 1] : defaultUserDataDir()
 }
 
 function runStandalone(argv) {
@@ -161,7 +161,7 @@ function runStandalone(argv) {
   console.log(JSON.stringify(pidFiles, null, 2))
 
   const scopeIdx = argv.indexOf('--scope')
-  const scope = scopeIdx >= 0 && argv[scopeIdx + 1] ? argv[scopeIdx + 1] : ''
+  const scope = scopeIdx !== -1 && argv[scopeIdx + 1] ? argv[scopeIdx + 1] : ''
   const processes = findDaemonProcesses(scope)
   console.log(
     `[daemon-processes] live daemon processes${scope ? ` scoped to "${scope}"` : ''} (${processes.length}):`