feat(harness): Codex and Muse /resume pickers, pi's folder trust prompt and opencode's update prompt on the phone

[GGGODLIN]

Codex's and Muse's /resume session picker and pi's folder trust prompt now lift as cards with their own keys, and opencode's Update Available prompt now refuses a reply. Before, the phone offered only Escape on the Codex picker, showed no card over the Muse picker or the pi prompt and kept the composer open, and read the composer under opencode's prompt as ready, where a reply's Enter confirms the update. One commit each.

Commit	Agent	What went wrong	The fix
feat(harness) session pickers	Codex 0.159.3, Muse 1.4.8	/resume paints a Resume a previous session picker that no reader recognised	One reader for the shape both agents paint (title, the highlighted session behind › in Codex or ⟩ at column 0 in Muse, a footer of <key> <verb> hints) lifts a menu with Up, Down, Resume (Enter) and Exit (Escape). ctrl+a archive and ctrl+c exit stay keyboard-only
feat(harness) pi trust	pi 1.2.0	In an untrusted folder with project resources, pi fills the screen with Trust project folder? and five unnumbered options under a → pointer; the question reader declines it for want of numbers	The prompt's footer plan goes through parsePiFooter (ADR 0098): each option is a pointer walk then Enter (ADR 0080), Escape is Cancel, an unknown label refuses
fix(opencode)	opencode 1.18.34	Update Available … esc with Skip Confirm, Confirm highlighted, has the pickers' title row but no Search field, so pickerOverlayUp missed it	confirmDialogUp (a title row ending in esc, and within six rows a Confirm ending in the esc hint's column) is read beside pickerOverlayUp by hasComposer, composerPrompt and modalOnScreen, so the reply is refused and the unread-dialog card offers Escape

Change outline

Two new readers and the files that call them:

web/src/lib/harness/
  session-picker.ts     new: the shared /resume picker reader; each adapter passes its pointer and region signature
  codex/index.ts        lifts the picker through session-picker.ts
  muse/index.ts         lifts the picker through session-picker.ts
  pi/trust.ts           new: pi's trust prompt as a walked trust card
  pi/index.ts           lifts it; modalOnScreen counts the prompt
  walk-pairs.ts         registers the trust prompt's walk pair
  opencode/chrome.ts    confirmDialogUp beside pickerOverlayUp

Reviewer guide

• Start: web/src/lib/harness/session-picker.ts.
• Then: pi/trust.ts, then confirmDialogUp in opencode/chrome.ts.
• Validate: codex.test.ts, muse.test.ts, pi.test.ts, opencode.test.ts and unread-dialog.test.ts, over the seven captures below.
• Focus: a card offers only keys the screen prints (Enter, Escape, the arrows), and a screen that is not exactly one of these shapes keeps the composer refused.

Validation beyond the suites

These ran on the fork build that carries these commits along with the fork's other changes, not on this branch over main alone. Each was a throwaway Herdr session with throwaway config directories, each tap sent the way the phone sends it, on 2026-10-15:

• Codex and Muse: the picker lifted, Down changed the signature, Exit returned a ready composer, Resume resumed a session.
• pi: Trust (this session only) went on and wrote no trust.json; Cancel went on untrusted; Trust wrote trust.json and the next launch showed no prompt.
• opencode: on relaunch the prompt read as an unread dialog with the composer refused, and Escape dismissed it to a ready composer. Enter was never pressed.

Captures. Seven new ones, each with its fixtures README row: codex--resume-picker.txt and -moved.txt, muse--resume-picker.txt and -moved.txt, pi--trust-prompt.txt and -moved.txt, oc--update-available.txt. The pi and opencode folder paths became invented sandbox paths of the same width, and in the opencode capture the model and provider labels were renamed mini demo host.

Before and after, from the playground's PaneRouter in a PhoneFrame at 390 px with its sample pane, main on the left and this branch on the right. No bridge is running there, so the cards' keys are inert and pi's card says "Reconnect to answer". For Codex and Muse the shot uses a copy of the capture with its run of blank rows folded to one, so the list and the keys fit on one screen.

Base branch — see CONTRIBUTING.md:

• Opened against main — there is one line of development, and main is it

Checks

• On this branch (macOS): bun run typecheck at the root and in web/ exited 0; bun run lint exited 0; bun test ./bridge ./cli ./scripts 8539 pass, 70 skip, 0 fail; cd web && bun run test 416 of 416 files, 26321 tests pass. With each commit's fix taken out and only its tests left, on main 8629ecb: 9 failures for the session pickers, 7 for pi's trust prompt, 3 for opencode's update prompt. Not run: cd web && bun run e2e, the Windows suites, and a live agent run on this branch over main alone.
• CHANGELOG: fork PR, so no entry. If lines help:
  • - **Codex's and Muse's `/resume` session picker gets phone buttons.** Up, Down, Resume and Exit, where the phone used to offer Escape only on Codex and nothing on Muse.
  • - **pi's folder trust prompt gets phone buttons.** Each option is walked to and confirmed, Escape cancels; before, the composer stayed open over the prompt.
  • - **opencode's Update Available prompt refuses a reply from the phone.** The composer under it read as ready, so a reply's Enter would have confirmed the update; the card now offers Escape.

[AltanS]

Thanks @GGGODLIN, this lands in 1.22.0. Your three commits are kept with their hashes, and the changelog credits you. On top I labelled your seven captures for the screen corpus, moved Codex's 0.162 resume-search capture into the picker's menu list because it now lifts, and widened the opencode update prompt's title-to-button window so a narrower pane that wraps its body still refuses a reply.