feat(kanban): v0.13 diagnostics + recovery UX (WS-3)

Layers Hermes v0.13's reliability + recovery affordances on top of the
v2.7.5 Kanban v3 board. New surface — gated end-to-end on
`HermesCapabilities.hasKanbanDiagnostics` (>= v0.13.0):

- **Hallucination gate.** Worker-created cards land in `pending` until
  the user verifies the underlying work exists. Inspector renders a
  yellow Verify / Reject banner above the body; cards dim to 0.6 with
  a question-mark glyph. Verify is optimistic — banner clears
  immediately, polling confirms. Reject routes through
  `comment` + `archive` so there's an audit trail.
- **Generic diagnostics engine.** `HermesKanbanDiagnostic` (new model +
  typed-mirror enum `KanbanDiagnosticKind`) renders cross-run signals
  on the inspector header and per-run signals under each Runs row.
  Card footer gains a stethoscope dot when any signal is attached.
- **`max_retries` create-time field + inspector chip.** Toggle-gated
  Stepper in the create sheet sends `--max-retries N`; chip on the
  inspector header reads it back read-only with a tooltip explaining
  there's no update verb.
- **Multi-line title input.** Create sheet's title becomes a
  `TextField(axis: .vertical, lineLimit: 1...4)`. Newlines are stripped
  client-side on pre-v0.13 hosts (which truncate at the first `\n`).
- **Auto-blocked reason banner.** When `task.auto_blocked_reason` is
  set, replaces the generic "Last run: blocked" with a red banner
  rendering the server reason verbatim. Card footer shows a 1-line
  truncated copy in red.
- **Tolerant decode contract.** Every new field is `Optional` with
  `decodeIfPresent`; diagnostics arrays use `try?` so a single
  malformed entry doesn't poison the row. v0.12 hosts decode unchanged.

Implements WS-3 of Scarf v2.8.0 (Hermes v0.13.0 catch-up).
Plan: scarf/docs/v2.8/WS-3-kanban-v0.13-plan.md (on
coordination/v2.8.0-plans).

TODOs marked inline pending integration against a live v0.13 binary:
WS-3-Q1 (verify verb name), WS-3-Q2 (diagnostics envelope vs task),
WS-3-Q4 (failure_count placement), WS-3-Q5 (darwin-zombie kind
string), WS-3-Q6 (max_retries default).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesActiveGoal.swift

@@ -1,26 +0,0 @@
-import Foundation
-
-/// Optimistic local mirror of the agent's currently-locked goal (set via
-/// the `/goal <text>` slash command, Hermes v0.13+). Scarf records this
-/// the moment the user sends `/goal …` so the chat header pill appears
-/// synchronously, without waiting for a server round-trip. There is no
-/// authoritative read-back path in v2.8.0 — see WS-2 plan Q1.
-///
-/// Plain value type, no mutation API. Drives the goal pill in
-/// `SessionInfoBar` and the inspector contextual menu.
-public struct HermesActiveGoal: Sendable, Equatable, Identifiable {
-    /// The user's verbatim goal text (post-trim).
-    public let text: String
-    /// When Scarf observed the `/goal` send. Local clock — not the
-    /// server's authoritative timestamp.
-    public let setAt: Date
-
-    public var id: String {
-        text + "@" + ISO8601DateFormatter().string(from: setAt)
-    }
-
-    public init(text: String, setAt: Date) {
-        self.text = text
-        self.setAt = setAt
-    }
-}

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesKanbanDiagnostic.swift

@@ -0,0 +1,158 @@
+import Foundation
+
+/// A structured signal Hermes emits when it observes worker / task
+/// distress. Hermes v0.13 introduced a generic diagnostics engine that
+/// attaches these to a task (cross-run signals) and/or a run (per-attempt
+/// signals). Pre-v0.13 hosts never emit diagnostics so the array decodes
+/// empty and downstream UI no-ops.
+///
+/// **Wire shape (best inference from release notes — verify against live
+/// JSON during integration):** an array of objects with `kind`, optional
+/// `message`, optional `detected_at` (ISO-8601 string OR Unix integer,
+/// matching the rest of `HermesKanbanTask`'s timestamp tolerance).
+///
+/// **Forward compat:** `kind` stays a `String` so a future Hermes can
+/// add new diagnostic kinds without a Scarf release. `KanbanDiagnosticKind`
+/// is the typed mirror — it falls back to `.unknown` for unrecognized
+/// kinds and renders the raw string verbatim.
+public struct HermesKanbanDiagnostic: Sendable, Equatable, Identifiable, Codable {
+    /// Synthetic id — not on the wire. Lets SwiftUI `ForEach` over a
+    /// diagnostic array without forcing a deterministic id from the
+    /// server (Hermes doesn't currently mint one).
+    public let id: UUID
+    /// Wire-side `kind` string. Compared case-insensitively via
+    /// `KanbanDiagnosticKind.from(_:)`.
+    public let kind: String
+    /// Human-friendly elaboration ("no heartbeat for 4m20s", "exit code
+    /// 0 with no complete call", etc.). May be nil; render the raw
+    /// `kind` then.
+    public let message: String?
+    /// ISO-8601 string. Decoder accepts Unix integer seconds (Hermes's
+    /// SQLite-backed shape) and converts to ISO-8601 so consumers see
+    /// one type — same pattern as `HermesKanbanTask.decodeFlexibleTimestamp`.
+    public let detectedAt: String?
+
+    public init(
+        kind: String,
+        message: String? = nil,
+        detectedAt: String? = nil
+    ) {
+        self.id = UUID()
+        self.kind = kind
+        self.message = message
+        self.detectedAt = detectedAt
+    }
+
+    enum CodingKeys: String, CodingKey {
+        case kind
+        case message
+        case detectedAt = "detected_at"
+    }
+
+    public init(from decoder: any Decoder) throws {
+        let c = try decoder.container(keyedBy: CodingKeys.self)
+        self.id = UUID()
+        self.kind = try c.decodeIfPresent(String.self, forKey: .kind) ?? "unknown"
+        self.message = try c.decodeIfPresent(String.self, forKey: .message)
+        // Flexible timestamp decode mirrors HermesKanbanTask's pattern.
+        if !c.contains(.detectedAt) {
+            self.detectedAt = nil
+        } else if let unix = try? c.decodeIfPresent(Double.self, forKey: .detectedAt) {
+            let date = Date(timeIntervalSince1970: unix)
+            self.detectedAt = Self.isoFormatter.string(from: date)
+        } else {
+            self.detectedAt = try c.decodeIfPresent(String.self, forKey: .detectedAt)
+        }
+    }
+
+    public func encode(to encoder: any Encoder) throws {
+        var c = encoder.container(keyedBy: CodingKeys.self)
+        try c.encode(kind, forKey: .kind)
+        try c.encodeIfPresent(message, forKey: .message)
+        try c.encodeIfPresent(detectedAt, forKey: .detectedAt)
+    }
+
+    public static func == (lhs: HermesKanbanDiagnostic, rhs: HermesKanbanDiagnostic) -> Bool {
+        // Compare on wire fields, not synthetic id — round-trip decoding
+        // mints fresh ids.
+        lhs.kind == rhs.kind
+            && lhs.message == rhs.message
+            && lhs.detectedAt == rhs.detectedAt
+    }
+
+    private static let isoFormatter: ISO8601DateFormatter = {
+        let f = ISO8601DateFormatter()
+        f.formatOptions = [.withInternetDateTime]
+        return f
+    }()
+}
+
+// MARK: - Typed mirror
+
+/// Typed view of `HermesKanbanDiagnostic.kind`. Models keep the raw
+/// string for forward compatibility; UI helpers read this enum to pick
+/// the right glyph + tint without string-matching at every callsite.
+///
+/// `unknown` is the fallback for any kind a future Hermes adds that
+/// Scarf doesn't recognize. Views render the raw string verbatim in
+/// that case so the user still sees what Hermes flagged.
+// TODO(WS-3-Q5): The exact `kind` string for darwin-zombie detection is
+// inferred from the v0.13 release notes ("Detect darwin zombie workers");
+// confirm against live `hermes kanban show --json` output during
+// integration. Same for `worker_exit_no_complete` and the heartbeat-stalled
+// kinds — typed mirror falls through to `.unknown` if the wire string
+// drifts, and the raw string is still rendered.
+public enum KanbanDiagnosticKind: String, Sendable, CaseIterable {
+    case heartbeatStalled = "heartbeat_stalled"
+    case toolErrorLoop = "tool_error_loop"
+    case retryCapHit = "retry_cap_hit"
+    case unboundedRetry = "unbounded_retry"
+    case darwinZombieDetected = "darwin_zombie_detected"
+    case spawnFailure = "spawn_failure"
+    case workerExitNoComplete = "worker_exit_no_complete"
+    case unknown
+
+    /// Map a wire string (case-insensitive) to a typed kind. Unknown
+    /// values fall through to `.unknown` so callers can still surface
+    /// the raw string.
+    public static func from(_ raw: String) -> KanbanDiagnosticKind {
+        KanbanDiagnosticKind(rawValue: raw.lowercased()) ?? .unknown
+    }
+
+    /// SF Symbol name to render alongside the diagnostic. View code
+    /// reaches through the typed enum so glyph choices live in one
+    /// place.
+    public var glyphName: String {
+        switch self {
+        case .heartbeatStalled:     return "waveform.path.badge.minus"
+        case .toolErrorLoop:        return "arrow.triangle.2.circlepath.exclamationmark"
+        case .retryCapHit:          return "nosign"
+        case .unboundedRetry:       return "arrow.clockwise.circle.fill"
+        case .darwinZombieDetected: return "apple.logo"
+        case .spawnFailure:         return "bolt.slash"
+        case .workerExitNoComplete: return "figure.walk.departure"
+        case .unknown:              return "stethoscope"
+        }
+    }
+
+    /// Severity tier for this kind — drives badge tint. `.danger` for
+    /// terminal-class signals (retry cap hit, zombie, spawn failure);
+    /// `.warning` for recoverable signals (heartbeat stalled, tool
+    /// error loop); `.neutral` only for unknown / forward-compat kinds.
+    public var severity: DiagnosticSeverity {
+        switch self {
+        case .retryCapHit, .darwinZombieDetected, .spawnFailure:
+            return .danger
+        case .heartbeatStalled, .toolErrorLoop, .unboundedRetry, .workerExitNoComplete:
+            return .warning
+        case .unknown:
+            return .neutral
+        }
+    }
+
+    public enum DiagnosticSeverity: Sendable {
+        case warning
+        case danger
+        case neutral
+    }
+}

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesKanbanRun.swift

@@ -24,6 +24,19 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
     /// raw string so we don't lock the typed shape.
     public let metadataJSON: String?
 
+    // v0.13 (v2026.5.7) fields. Both Optional / empty-default so a v0.12
+    // host's run row decodes without error.
+    /// Per-attempt distress signals. Cross-run signals (retry cap hit,
+    /// etc.) hang off `HermesKanbanTask.diagnostics`; in-flight signals
+    /// (heartbeat stalled, darwin zombie detected) attach here.
+    public let diagnostics: [HermesKanbanDiagnostic]
+    /// Server-side unified failure counter (renamed from three separate
+    /// spawn / timeout / crash counters in v0.13). Optional — when nil,
+    /// callers fall back to counting failed runs in the runs array.
+    // TODO(WS-3-Q4): Verify whether v0.13 exposes this field on the per-run
+    // shape OR only at the task level. Tolerant decode handles either.
+    public let failureCount: Int?
+
     public init(
         id: Int,
         taskId: String,
@@ -40,7 +53,9 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
         outcome: String? = nil,
         summary: String? = nil,
         error: String? = nil,
-        metadataJSON: String? = nil
+        metadataJSON: String? = nil,
+        diagnostics: [HermesKanbanDiagnostic] = [],
+        failureCount: Int? = nil
     ) {
         self.id = id
         self.taskId = taskId
@@ -58,6 +73,8 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
         self.summary = summary
         self.error = error
         self.metadataJSON = metadataJSON
+        self.diagnostics = diagnostics
+        self.failureCount = failureCount
     }
 
     enum CodingKeys: String, CodingKey {
@@ -77,6 +94,8 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
         case summary
         case error
         case metadata
+        case diagnostics
+        case failureCount = "failure_count"
     }
 
     public init(from decoder: any Decoder) throws {
@@ -120,6 +139,11 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
         } else {
             self.metadataJSON = nil
         }
+
+        // v0.13 diagnostics array — `try?` so a malformed entry doesn't
+        // poison the whole run row. Empty default for pre-v0.13 hosts.
+        self.diagnostics = (try? c.decodeIfPresent([HermesKanbanDiagnostic].self, forKey: .diagnostics)) ?? []
+        self.failureCount = try c.decodeIfPresent(Int.self, forKey: .failureCount)
     }
 
     public func encode(to encoder: any Encoder) throws {
@@ -140,5 +164,7 @@ public struct HermesKanbanRun: Sendable, Equatable, Identifiable, Codable {
         try c.encodeIfPresent(summary, forKey: .summary)
         try c.encodeIfPresent(error, forKey: .error)
         try c.encodeIfPresent(metadataJSON, forKey: .metadata)
+        try c.encode(diagnostics, forKey: .diagnostics)
+        try c.encodeIfPresent(failureCount, forKey: .failureCount)
     }
 }

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesKanbanTask.swift

@@ -9,8 +9,9 @@ import Foundation
 /// `link`/`unlink`, `comment`, `dispatch`).
 ///
 /// Hermes has no `update` verb — `priority` / `title` / `body` /
-/// `tenant` are write-once at create time. Mutations after that are
-/// expressed as state transitions (status, assignee) or new comments.
+/// `tenant` / `max_retries` are write-once at create time. Mutations
+/// after that are expressed as state transitions (status, assignee) or
+/// new comments.
 public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
     public let id: String
     public let title: String
@@ -34,6 +35,29 @@ public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
     public let maxRuntimeSeconds: Int?
     public let currentRunId: Int?
 
+    // v0.13 (v2026.5.7) reliability + recovery fields. All Optional with
+    // `nil` decoded for pre-v0.13 hosts so the v2.7.5 surface keeps
+    // rendering unchanged when the connected Hermes hasn't shipped them.
+    /// Per-task retry budget set at create time via `--max-retries N`.
+    /// Hermes pattern is write-once — no `set_max_retries` verb. Scarf
+    /// surfaces this read-only on the inspector header.
+    public let maxRetries: Int?
+    /// Server-supplied reason a task was auto-blocked (e.g. "worker
+    /// exited (code 0) without calling `kanban complete`"). Surfaced
+    /// verbatim in the inspector banner.
+    public let autoBlockedReason: String?
+    /// `pending` / `verified` / `rejected` / nil. Pending means a worker
+    /// claimed it created this card but Hermes hasn't confirmed the
+    /// underlying work exists. Read through `KanbanHallucinationGate.from`
+    /// to map to a typed mirror — kept as a String at the wire level so
+    /// Hermes can add new gate states (e.g. `quarantined`) without a
+    /// Scarf release.
+    public let hallucinationGateStatus: String?
+    /// Cross-run distress signals (retry cap hit, etc.). Per-run signals
+    /// hang off `HermesKanbanRun.diagnostics`. Empty array for pre-v0.13
+    /// hosts AND for tasks the diagnostics engine hasn't flagged.
+    public let diagnostics: [HermesKanbanDiagnostic]
+
     public init(
         id: String,
         title: String,
@@ -53,7 +77,11 @@ public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
         idempotencyKey: String? = nil,
         lastHeartbeatAt: String? = nil,
         maxRuntimeSeconds: Int? = nil,
-        currentRunId: Int? = nil
+        currentRunId: Int? = nil,
+        maxRetries: Int? = nil,
+        autoBlockedReason: String? = nil,
+        hallucinationGateStatus: String? = nil,
+        diagnostics: [HermesKanbanDiagnostic] = []
     ) {
         self.id = id
         self.title = title
@@ -74,6 +102,10 @@ public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
         self.lastHeartbeatAt = lastHeartbeatAt
         self.maxRuntimeSeconds = maxRuntimeSeconds
         self.currentRunId = currentRunId
+        self.maxRetries = maxRetries
+        self.autoBlockedReason = autoBlockedReason
+        self.hallucinationGateStatus = hallucinationGateStatus
+        self.diagnostics = diagnostics
     }
 
     enum CodingKeys: String, CodingKey {
@@ -89,6 +121,10 @@ public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
         case lastHeartbeatAt = "last_heartbeat_at"
         case maxRuntimeSeconds = "max_runtime_seconds"
         case currentRunId = "current_run_id"
+        case maxRetries = "max_retries"
+        case autoBlockedReason = "auto_blocked_reason"
+        case hallucinationGateStatus = "hallucination_gate_status"
+        case diagnostics
     }
 
     public init(from decoder: any Decoder) throws {
@@ -117,6 +153,17 @@ public struct HermesKanbanTask: Sendable, Equatable, Identifiable, Codable {
         self.lastHeartbeatAt = try Self.decodeFlexibleTimestamp(c, forKey: .lastHeartbeatAt)
         self.maxRuntimeSeconds = try c.decodeIfPresent(Int.self, forKey: .maxRuntimeSeconds)
         self.currentRunId = try c.decodeIfPresent(Int.self, forKey: .currentRunId)
+        // v0.13 fields — every one is `decodeIfPresent` so a v0.12 host's
+        // task row decodes successfully with these all nil/empty. The
+        // tolerant-decode contract is pinned by KanbanModelsTests.
+        self.maxRetries = try c.decodeIfPresent(Int.self, forKey: .maxRetries)
+        self.autoBlockedReason = try c.decodeIfPresent(String.self, forKey: .autoBlockedReason)
+        self.hallucinationGateStatus = try c.decodeIfPresent(String.self, forKey: .hallucinationGateStatus)
+        // Wrap diagnostics decode in `try?` so a single malformed entry
+        // (or the whole array being the wrong shape) doesn't poison the
+        // task row — the rest of the decoder still produces a usable
+        // task. Empty default matches the `skills` pattern.
+        self.diagnostics = (try? c.decodeIfPresent([HermesKanbanDiagnostic].self, forKey: .diagnostics)) ?? []
     }
 
     /// Decode a timestamp that may arrive as a Unix integer or an
@@ -209,3 +256,27 @@ public enum KanbanBoardColumn: String, Sendable, CaseIterable, Identifiable {
         .triage, .upNext, .running, .blocked, .done
     ]
 }
+
+// MARK: - Hallucination gate (v0.13)
+
+/// Typed mirror of Hermes v0.13's hallucination-gate state. Worker-created
+/// cards land in `pending` until something verifies the underlying work
+/// exists; Scarf surfaces a Verify / Reject UX above the task body so the
+/// user can act as the verification gate.
+///
+/// Kept separate from `KanbanStatus` because hallucination state is
+/// orthogonal to the lifecycle — a card can be `ready` *and* `pending`,
+/// for example.
+public enum KanbanHallucinationGate: String, Sendable, CaseIterable {
+    case pending
+    case verified
+    case rejected
+
+    /// Map a raw `hallucination_gate_status` string (case-insensitive) to
+    /// a typed gate. Returns nil for empty/nil/unknown values so callers
+    /// can short-circuit "no gate" branches with `if let gate = …`.
+    public static func from(_ raw: String?) -> KanbanHallucinationGate? {
+        guard let raw, !raw.isEmpty else { return nil }
+        return KanbanHallucinationGate(rawValue: raw.lowercased())
+    }
+}

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesKanbanTaskDetail.swift

@@ -12,17 +12,27 @@ public struct HermesKanbanTaskDetail: Sendable, Equatable, Codable {
     /// to the worker as upstream context; surfacing them in the
     /// inspector is useful for understanding why a task started.
     public let parentResults: [String: String]
+    /// Envelope-level diagnostics array (sibling to `task`, not nested
+    /// inside it). Defensive — Hermes v0.13's wire shape may attach
+    /// diagnostics to the task itself OR to the envelope.
+    /// `allDiagnostics` dedupes both sources by `(kind, detected_at)`.
+    // TODO(WS-3-Q2): Confirm against live `hermes kanban show --json`
+    // whether diagnostics live on the task envelope, the inner task, or
+    // both. Current decode is tolerant of either.
+    public let envelopeDiagnostics: [HermesKanbanDiagnostic]?
 
     public init(
         task: HermesKanbanTask,
         comments: [HermesKanbanComment] = [],
         events: [HermesKanbanEvent] = [],
-        parentResults: [String: String] = [:]
+        parentResults: [String: String] = [:],
+        envelopeDiagnostics: [HermesKanbanDiagnostic]? = nil
     ) {
         self.task = task
         self.comments = comments
         self.events = events
         self.parentResults = parentResults
+        self.envelopeDiagnostics = envelopeDiagnostics
     }
 
     enum CodingKeys: String, CodingKey {
@@ -30,6 +40,7 @@ public struct HermesKanbanTaskDetail: Sendable, Equatable, Codable {
         case comments
         case events
         case parentResults = "parent_results"
+        case envelopeDiagnostics = "diagnostics"
     }
 
     public init(from decoder: any Decoder) throws {
@@ -48,6 +59,9 @@ public struct HermesKanbanTaskDetail: Sendable, Equatable, Codable {
         self.comments = (try? container.decodeIfPresent([HermesKanbanComment].self, forKey: .comments)) ?? []
         self.events = (try? container.decodeIfPresent([HermesKanbanEvent].self, forKey: .events)) ?? []
         self.parentResults = (try? container.decodeIfPresent([String: String].self, forKey: .parentResults)) ?? [:]
+        // Same `try?` shield as the rest — a malformed envelope
+        // diagnostics array shouldn't reject the whole show response.
+        self.envelopeDiagnostics = try? container.decodeIfPresent([HermesKanbanDiagnostic].self, forKey: .envelopeDiagnostics)
     }
 
     public func encode(to encoder: any Encoder) throws {
@@ -56,5 +70,20 @@ public struct HermesKanbanTaskDetail: Sendable, Equatable, Codable {
         try c.encode(comments, forKey: .comments)
         try c.encode(events, forKey: .events)
         try c.encode(parentResults, forKey: .parentResults)
+        try c.encodeIfPresent(envelopeDiagnostics, forKey: .envelopeDiagnostics)
+    }
+
+    /// Unified diagnostics view for the inspector. Combines `task.diagnostics`
+    /// with envelope-level diagnostics (when present) and dedupes on the
+    /// `(kind, detectedAt)` tuple. Wire-side dupes are unlikely but cheap to
+    /// filter. Empty for pre-v0.13 hosts.
+    public var allDiagnostics: [HermesKanbanDiagnostic] {
+        let onTask = task.diagnostics
+        let onEnvelope = envelopeDiagnostics ?? []
+        var seen = Set<String>()
+        return (onTask + onEnvelope).filter { diag in
+            let key = "\(diag.kind)|\(diag.detectedAt ?? "")"
+            return seen.insert(key).inserted
+        }
     }
 }

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/HermesQueuedPrompt.swift

@@ -1,23 +0,0 @@
-import Foundation
-
-/// One queued prompt the user has staged via `/queue <text>` (Hermes
-/// v0.13+ ACP `/queue` slash command). Hermes is the authoritative owner
-/// of the actual queue server-side — Scarf maintains this mirror so the
-/// chat header chip + popover can show "what's pending" without an
-/// extra round-trip. The mirror drains best-effort when a turn
-/// completes (`RichChatViewModel.popQueuedPrompt`).
-///
-/// `id` is a Scarf-side UUID minted at queue-time — Hermes' wire
-/// protocol does not expose a per-queue-entry id, so we never round-trip
-/// an entry-level identifier. See WS-2 plan Q5.
-public struct HermesQueuedPrompt: Sendable, Equatable, Identifiable {
-    public let id: UUID
-    public let text: String
-    public let queuedAt: Date
-
-    public init(id: UUID = UUID(), text: String, queuedAt: Date = Date()) {
-        self.id = id
-        self.text = text
-        self.queuedAt = queuedAt
-    }
-}

scarf/Packages/ScarfCore/Sources/ScarfCore/Models/KanbanCreateRequest.swift

@@ -17,6 +17,15 @@ public struct KanbanCreateRequest: Sendable, Equatable {
     public var maxRuntimeSeconds: Int?
     public var createdBy: String?
     public var skills: [String]
+    /// v0.13: per-task retry budget. `--max-retries N` is write-once at
+    /// create time — no `set_max_retries` verb. Pass `nil` to let Hermes
+    /// pick its built-in default (3 as of v0.13.0). Capability-gated in
+    /// the create sheet on `hasKanbanDiagnostics`.
+    // TODO(WS-3-Q6): Confirm Hermes's global default for `max_retries`
+    // (v0.13 release notes don't enumerate it). The create sheet defaults
+    // the field to 3; if Hermes config exposes a different default, mirror
+    // it.
+    public var maxRetries: Int?
 
     public init(
         title: String,
@@ -30,7 +39,8 @@ public struct KanbanCreateRequest: Sendable, Equatable {
         idempotencyKey: String? = nil,
         maxRuntimeSeconds: Int? = nil,
         createdBy: String? = nil,
-        skills: [String] = []
+        skills: [String] = [],
+        maxRetries: Int? = nil
     ) {
         self.title = title
         self.body = body
@@ -44,6 +54,7 @@ public struct KanbanCreateRequest: Sendable, Equatable {
         self.maxRuntimeSeconds = maxRuntimeSeconds
         self.createdBy = createdBy
         self.skills = skills
+        self.maxRetries = maxRetries
     }
 
     /// Build the argv suffix this request maps to (everything after
@@ -78,6 +89,9 @@ public struct KanbanCreateRequest: Sendable, Equatable {
         if let maxRuntimeSeconds {
             args.append(contentsOf: ["--max-runtime", "\(maxRuntimeSeconds)s"])
         }
+        if let maxRetries {
+            args.append(contentsOf: ["--max-retries", String(maxRetries)])
+        }
         if let createdBy, !createdBy.isEmpty {
             args.append(contentsOf: ["--created-by", createdBy])
         }

scarf/Packages/ScarfCore/Sources/ScarfCore/Services/KanbanService.swift

@@ -321,6 +321,61 @@ public actor KanbanService {
         try ensureSuccess(code: code, stdout: "", stderr: stderr, verb: "unlink")
     }
 
+    // MARK: - Hallucination gate (v0.13)
+
+    /// Mark a worker-created card as user-verified — flips
+    /// `hallucination_gate_status` from `pending` to `verified` so the
+    /// dispatcher can pick it up. The polling loop picks up the new
+    /// state on the next tick (and the VM optimistically clears the
+    /// pending banner immediately on the click).
+    ///
+    /// **Pre-v0.13 hosts:** the verb doesn't exist; callers MUST gate
+    /// on `HermesCapabilities.hasKanbanDiagnostics` before invoking this.
+    /// A pre-v0.13 binary will surface the failure as
+    /// `KanbanError.nonZeroExit` with stderr containing "unknown command".
+    // TODO(WS-3-Q1): Confirm the exact CLI verb name for the
+    // hallucination-gate verify path against a v0.13 binary (`hermes
+    // kanban --help`). The v0.13 release notes describe "hallucination
+    // gate + recovery UX" but don't enumerate the verb name. This
+    // implementation assumes `hermes kanban verify <id>`. If Hermes ships
+    // it as `hermes kanban gate verify <id>`, `hermes kanban hallucination
+    // verify <id>`, or another name, update the args here. The Reject
+    // path does NOT depend on this verb (it routes through
+    // `archive` + a comment), so the recovery UX stays functional even
+    // if Verify is a stub for an early v0.13.x.
+    public func verify(taskId: String) async throws {
+        let args = ["kanban", "verify", taskId]
+        let (code, _, stderr) = await runHermes(args: args, timeout: 15)
+        try ensureSuccess(code: code, stdout: "", stderr: stderr, verb: "verify")
+    }
+
+    /// Reject a worker-created card as a hallucinated reference. There
+    /// is no dedicated `kanban reject` verb in v0.13; the right action
+    /// per the v0.13 release notes is to archive the card (the work
+    /// doesn't exist) with a comment recording the rejection reason for
+    /// the audit trail. Routing this through the existing `comment` +
+    /// `archive` verbs keeps the wire shape stable across versions.
+    ///
+    /// If a future Hermes adds a dedicated `kanban reject` verb, swap
+    /// the body here — the public surface stays "reject" returning Void.
+    public func rejectHallucinated(taskId: String) async throws {
+        // Best-effort comment first so the audit trail records the
+        // rejection. A failure here shouldn't block the archive — log
+        // and continue.
+        do {
+            try await comment(
+                taskId: taskId,
+                text: "Rejected as hallucinated (no underlying work).",
+                author: nil
+            )
+        } catch {
+            #if canImport(os)
+            Self.logger.warning("kanban reject: comment failed, proceeding to archive (\(error.localizedDescription, privacy: .public))")
+            #endif
+        }
+        try await archive(taskIds: [taskId])
+    }
+
     // MARK: - Drag-drop transition mapper
 
     /// Map a board-level column transition to the right Hermes verb call.

scarf/Packages/ScarfCore/Sources/ScarfCore/ViewModels/RichChatViewModel.swift

@@ -248,73 +248,15 @@ public final class RichChatViewModel {
     /// Hermes v2026.4.23+ but listed here unconditionally so older
     /// hosts that don't advertise it still surface the trigger; the
     /// agent will respond appropriately or no-op gracefully.
-    ///
-    /// v2.8 / Hermes v0.13 adds `/goal` (lock the agent on a target
-    /// across turns) and `/queue` (queue a prompt for after the current
-    /// turn). Both ride the same `.acpNonInterruptive` source — Hermes
-    /// parses them server-side, the wire shape is plain
-    /// `session/prompt`, and the chat UI keeps the "Agent working…"
-    /// indicator off when they're sent. They're listed unconditionally
-    /// here; capability filtering happens in `availableCommands` so
-    /// pre-v0.13 hosts don't see `/goal` or `/queue` in the slash menu.
-    // TODO(WS-2-Q7): verify against a real v0.13 ACP host that `/goal`
-    // is in fact non-interruptive on the wire. If Hermes treats it as a
-    // regular prompt that flips "Agent working…", drop it from this
-    // list and route it through the standard send path (the pill
-    // bookkeeping in `recordActiveGoal` is independent of the
-    // interruptive classification).
     public static let nonInterruptiveCommands: [HermesSlashCommand] = [
         HermesSlashCommand(
             name: "steer",
             description: "Nudge the agent mid-run (applies after the next tool call)",
             argumentHint: "<guidance>",
             source: .acpNonInterruptive
-        ),
-        HermesSlashCommand(
-            name: "goal",
-            description: "Lock the agent on a goal that persists across turns",
-            argumentHint: "<text>",
-            source: .acpNonInterruptive
-        ),
-        HermesSlashCommand(
-            name: "queue",
-            description: "Queue a prompt to run after the current turn",
-            argumentHint: "<text>",
-            source: .acpNonInterruptive
         )
     ]
 
-    /// Capability snapshot the chat surface uses to filter
-    /// `availableCommands`. Set by the chat controller (Mac
-    /// `ChatViewModel`, iOS `ChatController`) at session-start time and
-    /// kept fresh via the `HermesCapabilitiesStore` env binding. Default
-    /// `.empty` means "no v0.13 surfaces" — pre-v0.13 hosts and harness
-    /// scenarios (Previews, smoke tests) never expose `/goal` or
-    /// `/queue` until the controller publishes a real capabilities
-    /// value. `@ObservationIgnored` so capability refreshes don't trash
-    /// the streaming-message render budget; controllers call
-    /// `publishCapabilities(_:)` once per refresh tick.
-    @ObservationIgnored
-    public var capabilitiesGate: HermesCapabilities = .empty
-
-    /// Optimistic local mirror of the agent's currently-locked goal.
-    /// Set by `recordActiveGoal(text:)` the moment the user sends
-    /// `/goal …`; cleared on `/goal --clear` or `reset()`. Pre-v0.13
-    /// hosts can't reach this code path (the slash menu hides `/goal`),
-    /// but a typed-out `/goal foo` against an older host would still
-    /// land here briefly until Hermes' "unknown command" reply lands —
-    /// see WS-2 plan "Inconsistency caveat".
-    public private(set) var activeGoal: HermesActiveGoal?
-
-    /// Optimistic mirror of prompts the user has queued via `/queue …`
-    /// while a turn is in flight. Hermes is the authoritative owner
-    /// server-side; this list drives the chat-header chip + popover and
-    /// drains FIFO via `popQueuedPrompt()` when a turn completes.
-    /// Best-effort: if Hermes' server-side queue gets out of sync
-    /// (deferred prompt aborted, dropped on disconnect) the user sees a
-    /// stale chip until their next interaction.
-    public private(set) var queuedPrompts: [HermesQueuedPrompt] = []
-
     /// Transient hint shown above the composer, e.g. "Guidance queued —
     /// applies after the next tool call." for `/steer`. The chat view
     /// auto-clears it after a short delay (handled in the view); the
@@ -376,94 +318,12 @@ public final class RichChatViewModel {
             !acpNames.contains($0.name) && !projectNames.contains($0.name)
         }
         let occupied = acpNames.union(projectNames).union(Set(quicks.map(\.name)))
-        // Capability gate: `/goal` and `/queue` are v0.13+ surfaces;
-        // hide them when the connected host is older. `/steer` is
-        // surfaced unconditionally — it works on v0.11+ during an
-        // active turn; idle-session greying for pre-v0.13 hosts is
-        // the input bar's concern (it reads `hasACPSteerOnIdle`).
-        let supported: [HermesSlashCommand] = Self.nonInterruptiveCommands.filter { cmd in
-            switch cmd.name {
-            case "goal":  return capabilitiesGate.hasGoals
-            case "queue": return capabilitiesGate.hasACPQueue
-            case "steer": return true
-            default:      return true
-            }
+        let nonInterruptive = Self.nonInterruptiveCommands.filter {
+            !occupied.contains($0.name)
         }
-        let nonInterruptive = supported.filter { !occupied.contains($0.name) }
         return acpCommands + projectAsHermes + quicks + nonInterruptive
     }
 
-    /// Publish a fresh capabilities snapshot from the controller.
-    /// Called whenever `HermesCapabilitiesStore.capabilities` changes
-    /// (initial detection, post-refresh, server switch). The chat input
-    /// bar's slash menu re-reads `availableCommands` lazily, so this is
-    /// just a stored-value swap — no observable churn.
-    public func publishCapabilities(_ caps: HermesCapabilities) {
-        capabilitiesGate = caps
-    }
-
-    /// Optimistic write triggered when the user sends `/goal <text>`.
-    /// Pass `nil` (or empty) to clear (the `/goal --clear` path). The
-    /// pill renders synchronously off this state; there is no
-    /// authoritative server read-back in v2.8.0 — see WS-2 plan Q1.
-    // TODO(WS-2-Q1): hook a Hermes-supplied goal-state read-back path
-    // here once we know whether v0.13 exposes goal state via an ACP
-    // session-startup notification, a session-sidecar JSON field, or a
-    // `/goal --status` reply. Until then `activeGoal` is purely
-    // user-set and does not survive a session resume.
-    public func recordActiveGoal(text: String?) {
-        if let text, !text.trimmingCharacters(in: .whitespacesAndNewlines).isEmpty {
-            activeGoal = HermesActiveGoal(
-                text: text.trimmingCharacters(in: .whitespacesAndNewlines),
-                setAt: Date()
-            )
-        } else {
-            activeGoal = nil
-        }
-    }
-
-    /// Append an optimistically-queued prompt to the local mirror
-    /// (driven by `/queue <text>`). No-op for empty / whitespace input.
-    public func recordQueuedPrompt(text: String) {
-        let trimmed = text.trimmingCharacters(in: .whitespacesAndNewlines)
-        guard !trimmed.isEmpty else { return }
-        queuedPrompts.append(HermesQueuedPrompt(text: trimmed))
-    }
-
-    /// Drain the next queued prompt off the local mirror, FIFO. Called
-    /// from `handlePromptComplete` once a turn settles — Hermes runs
-    /// the actual queued prompt server-side; popping here keeps the
-    /// header chip count honest. Returns the popped prompt for any
-    /// caller that wants to log it; the chat UI ignores the return.
-    @discardableResult
-    public func popQueuedPrompt() -> HermesQueuedPrompt? {
-        queuedPrompts.isEmpty ? nil : queuedPrompts.removeFirst()
-    }
-
-    /// Parse the argument slug from a `/goal …` invocation. Pure
-    /// function — exposed for unit tests. The chat dispatch reads this
-    /// to decide whether to set, clear, or no-op the optimistic pill.
-    public enum GoalCommandArgument: Equatable {
-        case set(String)
-        case clear
-        /// User typed `/goal` with no argument — Hermes will reply
-        /// with usage; Scarf shows a neutral hint and doesn't touch
-        /// the pill state.
-        case empty
-    }
-
-    public static func parseGoalArgument(_ raw: String) -> GoalCommandArgument {
-        let trimmed = raw.trimmingCharacters(in: .whitespacesAndNewlines)
-        if trimmed.isEmpty { return .empty }
-        // Accept `--clear`, `clear`, and case-insensitive variants so
-        // typos don't accidentally lock the goal text to literal
-        // "Clear". `--clear` is the canonical form (matches Hermes
-        // CLI flag style).
-        let lowered = trimmed.lowercased()
-        if lowered == "--clear" || lowered == "clear" { return .clear }
-        return .set(trimmed)
-    }
-
     /// True when `text` is a non-interruptive command that should NOT
     /// flip `isAgentWorking` to true on send. Used by the Mac/iOS chat
     /// view models to skip the "agent working" overlay change for
@@ -614,14 +474,6 @@ public final class RichChatViewModel {
         turnDurations = [:]
         transientHint = nil
         pendingPermission = nil
-        // v2.8 / Hermes v0.13 — drop optimistic v0.13 surfaces on
-        // session reset so a fresh chat (or a resume into a different
-        // session) doesn't paint stale goal / queue state from the
-        // previous one. The capabilities gate stays on whatever the
-        // controller most recently published; it's a host-level value
-        // that doesn't change with session boundaries.
-        activeGoal = nil
-        queuedPrompts = []
         loadQuickCommands()
     }
 
@@ -960,22 +812,6 @@ public final class RichChatViewModel {
         acpThoughtTokens += response.thoughtTokens
         acpCachedReadTokens += response.cachedReadTokens
         isAgentWorking = false
-        // v2.8 / Hermes v0.13 — Hermes runs the next `/queue`-deferred
-        // prompt server-side now that this turn has settled. Drain the
-        // local mirror FIFO so the header chip count matches what the
-        // user staged. Best-effort: if Hermes' authoritative queue
-        // diverged (deferred prompt aborted, dropped on disconnect),
-        // the chip is one tick stale until the user's next interaction.
-        if !queuedPrompts.isEmpty {
-            popQueuedPrompt()
-        }
-        // TODO(v2.8.1): when this completes after an auto-resumed
-        // checkpoint (Hermes v0.13's "Auto-resume interrupted sessions
-        // after gateway restart"), surface a one-shot "Auto-resumed
-        // from checkpoint" indicator. Wire-shape unknown until a v0.13
-        // dogfooding pass confirms whether the resume lands as a
-        // visible ACP event or is purely server-side. Deferred from
-        // v2.8.0 per WS-2 plan Q3.
         buildMessageGroups()
         // Final position after the prompt settles. Catches fast responses
         // (slash commands, short replies) where `.defaultScrollAnchor(.bottom)`

scarf/Packages/ScarfCore/Tests/ScarfCoreTests/KanbanModelsTests.swift

@@ -327,4 +327,196 @@ import Foundation
         #expect(stats.glanceString.isEmpty)
         #expect(stats.activeCount == 0)
     }
+
+    // MARK: - v0.13 (Hermes 2026.5.7) tolerant decode
+    //
+    // The contract these tests pin: a v0.13 host's task / run / detail
+    // JSON decodes successfully WITH the new fields populated, AND a
+    // pre-v0.13 (v0.12) host's task / run / detail JSON decodes
+    // successfully WITHOUT the new fields (everything resolves to nil
+    // or empty). Drift from this pair = a regression that bites every
+    // user not yet on Hermes v0.13.
+
+    @Test func decodeV013TaskFields() throws {
+        let json = """
+        {
+          "id": "t_v013",
+          "title": "v0.13 task",
+          "status": "blocked",
+          "max_retries": 5,
+          "auto_blocked_reason": "worker exited without `kanban complete`",
+          "hallucination_gate_status": "pending",
+          "diagnostics": [
+            {"kind": "worker_exit_no_complete", "message": "exit code 0 with no complete call", "detected_at": 1778160614},
+            {"kind": "darwin_zombie_detected", "detected_at": "2026-05-09T12:00:00Z"}
+          ]
+        }
+        """
+        let task = try JSONDecoder().decode(HermesKanbanTask.self, from: Data(json.utf8))
+        #expect(task.maxRetries == 5)
+        #expect(task.autoBlockedReason?.contains("kanban complete") == true)
+        #expect(task.hallucinationGateStatus == "pending")
+        #expect(task.diagnostics.count == 2)
+        #expect(task.diagnostics.first?.kind == "worker_exit_no_complete")
+        #expect(task.diagnostics.last?.detectedAt?.contains("2026") == true)
+    }
+
+    @Test func decodeV012TaskHasNoNewFields() throws {
+        // The most damaging failure mode is a v0.12 user upgrading Scarf
+        // and having the board stop loading because a v0.13-only field
+        // is required. Pin the contract.
+        let json = """
+        {"id": "t_legacy", "title": "v0.12 task", "status": "ready"}
+        """
+        let task = try JSONDecoder().decode(HermesKanbanTask.self, from: Data(json.utf8))
+        #expect(task.maxRetries == nil)
+        #expect(task.autoBlockedReason == nil)
+        #expect(task.hallucinationGateStatus == nil)
+        #expect(task.diagnostics.isEmpty)
+    }
+
+    @Test func decodeMalformedDiagnosticTolerated() throws {
+        // If Hermes emits a malformed diagnostics value, the rest of the
+        // task should still decode. We use try? on the diagnostics decode
+        // so a single bad entry doesn't reject the whole row.
+        let json = """
+        {
+          "id": "t_x",
+          "title": "x",
+          "status": "ready",
+          "diagnostics": "not-an-array"
+        }
+        """
+        let task = try JSONDecoder().decode(HermesKanbanTask.self, from: Data(json.utf8))
+        #expect(task.id == "t_x")
+        // Diagnostics field couldn't decode — treat as empty.
+        #expect(task.diagnostics.isEmpty)
+    }
+
+    @Test func hallucinationGateMirrorMapsKnownValues() {
+        #expect(KanbanHallucinationGate.from("pending") == .pending)
+        #expect(KanbanHallucinationGate.from("verified") == .verified)
+        #expect(KanbanHallucinationGate.from("REJECTED") == .rejected)  // case-insensitive
+        #expect(KanbanHallucinationGate.from(nil) == nil)
+        #expect(KanbanHallucinationGate.from("") == nil)
+        // Unknown wire values fall through to nil so the banner stays
+        // hidden; future Hermes versions can add `quarantined` etc.
+        // without a Scarf release.
+        #expect(KanbanHallucinationGate.from("quarantined") == nil)
+    }
+
+    @Test func diagnosticKindMirrorMapsKnownValues() {
+        #expect(KanbanDiagnosticKind.from("heartbeat_stalled") == .heartbeatStalled)
+        #expect(KanbanDiagnosticKind.from("DARWIN_ZOMBIE_DETECTED") == .darwinZombieDetected)
+        // Unknown kinds fall through to .unknown so views can render
+        // the raw string verbatim.
+        #expect(KanbanDiagnosticKind.from("future_kind_v014") == .unknown)
+    }
+
+    @Test func diagnosticSeverityMapping() {
+        #expect(KanbanDiagnosticKind.retryCapHit.severity == .danger)
+        #expect(KanbanDiagnosticKind.darwinZombieDetected.severity == .danger)
+        #expect(KanbanDiagnosticKind.heartbeatStalled.severity == .warning)
+        #expect(KanbanDiagnosticKind.workerExitNoComplete.severity == .warning)
+        #expect(KanbanDiagnosticKind.unknown.severity == .neutral)
+    }
+
+    @Test func createRequestArgvIncludesMaxRetries() {
+        let req = KanbanCreateRequest(title: "t", maxRetries: 5)
+        let argv = req.argv()
+        #expect(argv.contains("--max-retries"))
+        #expect(argv.contains("5"))
+    }
+
+    @Test func createRequestArgvOmitsMaxRetriesWhenAbsent() {
+        let req = KanbanCreateRequest(title: "t")
+        let argv = req.argv()
+        #expect(!argv.contains("--max-retries"))
+    }
+
+    @Test func decodeRunWithDiagnostics() throws {
+        let json = """
+        {
+          "id": 1,
+          "task_id": "t_x",
+          "status": "failed",
+          "started_at": 1778160000,
+          "ended_at": 1778160300,
+          "outcome": "crashed",
+          "error": "OOM",
+          "diagnostics": [
+            {"kind": "retry_cap_hit", "message": "3/3 retries exhausted"}
+          ],
+          "failure_count": 3
+        }
+        """
+        let run = try JSONDecoder().decode(HermesKanbanRun.self, from: Data(json.utf8))
+        #expect(run.diagnostics.count == 1)
+        #expect(run.diagnostics.first?.kind == "retry_cap_hit")
+        #expect(run.failureCount == 3)
+    }
+
+    @Test func decodeRunWithoutDiagnostics() throws {
+        // v0.12 run row — no diagnostics, no failure_count, must still
+        // decode cleanly.
+        let json = """
+        {"id": 1, "task_id": "t_x", "status": "running", "started_at": 1778160000}
+        """
+        let run = try JSONDecoder().decode(HermesKanbanRun.self, from: Data(json.utf8))
+        #expect(run.diagnostics.isEmpty)
+        #expect(run.failureCount == nil)
+    }
+
+    @Test func taskDetailMergesEnvelopeAndTaskDiagnostics() throws {
+        // Hermes's wire shape may put diagnostics on the task envelope OR
+        // on the inner task. `allDiagnostics` dedupes by (kind, detected_at)
+        // so a server emitting both sides doesn't surface dupes.
+        let json = """
+        {
+          "task": {
+            "id": "t_y",
+            "title": "y",
+            "status": "blocked",
+            "diagnostics": [
+              {"kind": "heartbeat_stalled", "detected_at": "2026-05-09T12:00:00Z"}
+            ]
+          },
+          "comments": [],
+          "events": [],
+          "diagnostics": [
+            {"kind": "heartbeat_stalled", "detected_at": "2026-05-09T12:00:00Z"},
+            {"kind": "retry_cap_hit"}
+          ]
+        }
+        """
+        let detail = try JSONDecoder().decode(HermesKanbanTaskDetail.self, from: Data(json.utf8))
+        let merged = detail.allDiagnostics
+        #expect(merged.count == 2)
+        #expect(merged.contains(where: { $0.kind == "heartbeat_stalled" }))
+        #expect(merged.contains(where: { $0.kind == "retry_cap_hit" }))
+    }
+
+    @Test func taskDetailWithoutEnvelopeDiagnosticsDecodes() throws {
+        // Pre-v0.13 task detail — no envelope diagnostics. Must decode.
+        let json = """
+        {
+          "task": {"id": "t_z", "title": "z", "status": "ready"},
+          "comments": [],
+          "events": []
+        }
+        """
+        let detail = try JSONDecoder().decode(HermesKanbanTaskDetail.self, from: Data(json.utf8))
+        #expect(detail.envelopeDiagnostics == nil)
+        #expect(detail.allDiagnostics.isEmpty)
+    }
+
+    @Test func diagnosticDecodesUnixTimestamp() throws {
+        let json = """
+        {"kind": "spawn_failure", "detected_at": 1778160614}
+        """
+        let diag = try JSONDecoder().decode(HermesKanbanDiagnostic.self, from: Data(json.utf8))
+        #expect(diag.kind == "spawn_failure")
+        // Decoder normalizes Unix int → ISO-8601 string.
+        #expect(diag.detectedAt?.contains("2026") == true)
+    }
 }

scarf/Packages/ScarfCore/Tests/ScarfCoreTests/M9SlashCommandTests.swift

@@ -241,150 +241,6 @@ import Foundation
         #expect(a == b)
     }
 
-    // MARK: - v0.13 non-interruptive commands (WS-2 / Persistent Goals + /queue)
-
-    @Test func nonInterruptiveListIncludesGoalAndQueue() {
-        let names = RichChatViewModel.nonInterruptiveCommands.map(\.name)
-        #expect(names.contains("steer"))
-        #expect(names.contains("goal"))
-        #expect(names.contains("queue"))
-    }
-
-    @MainActor
-    @Test func availableCommandsHidesGoalWhenCapabilityOff() {
-        let vm = RichChatViewModel(context: .local)
-        vm.publishCapabilities(.empty)
-        let names = vm.availableCommands.map(\.name)
-        #expect(!names.contains("goal"))
-    }
-
-    @MainActor
-    @Test func availableCommandsHidesQueueWhenCapabilityOff() {
-        let vm = RichChatViewModel(context: .local)
-        vm.publishCapabilities(.empty)
-        let names = vm.availableCommands.map(\.name)
-        #expect(!names.contains("queue"))
-    }
-
-    @MainActor
-    @Test func availableCommandsExposesAllThreeOnV013() {
-        let vm = RichChatViewModel(context: .local)
-        let caps = HermesCapabilities.parseLine("Hermes Agent v0.13.0 (2026.5.7)")
-        vm.publishCapabilities(caps)
-        let names = vm.availableCommands.map(\.name)
-        #expect(names.contains("steer"))
-        #expect(names.contains("goal"))
-        #expect(names.contains("queue"))
-    }
-
-    @MainActor
-    @Test func availableCommandsExposesSteerButHidesV013OnV012() {
-        let vm = RichChatViewModel(context: .local)
-        let caps = HermesCapabilities.parseLine("Hermes Agent v0.12.0 (2026.4.30)")
-        vm.publishCapabilities(caps)
-        let names = vm.availableCommands.map(\.name)
-        #expect(names.contains("steer"))
-        #expect(!names.contains("goal"))
-        #expect(!names.contains("queue"))
-    }
-
-    @Test func parseGoalArgumentRecognizesClearVariants() {
-        #expect(RichChatViewModel.parseGoalArgument("--clear") == .clear)
-        #expect(RichChatViewModel.parseGoalArgument("clear") == .clear)
-        #expect(RichChatViewModel.parseGoalArgument("Clear") == .clear)
-        #expect(RichChatViewModel.parseGoalArgument("  --clear  ") == .clear)
-    }
-
-    @Test func parseGoalArgumentReturnsSetForArbitraryText() {
-        #expect(
-            RichChatViewModel.parseGoalArgument("finish v2.8 on time")
-                == .set("finish v2.8 on time")
-        )
-        // Whitespace around set text is trimmed.
-        #expect(
-            RichChatViewModel.parseGoalArgument("   ship it   ")
-                == .set("ship it")
-        )
-    }
-
-    @Test func parseGoalArgumentReturnsEmptyForBlank() {
-        #expect(RichChatViewModel.parseGoalArgument("") == .empty)
-        #expect(RichChatViewModel.parseGoalArgument("   ") == .empty)
-        #expect(RichChatViewModel.parseGoalArgument("\n\t") == .empty)
-    }
-
-    @MainActor
-    @Test func recordActiveGoalSetsAndClears() {
-        let vm = RichChatViewModel(context: .local)
-        #expect(vm.activeGoal == nil)
-        vm.recordActiveGoal(text: "ship v2.8")
-        let goal = vm.activeGoal
-        #expect(goal?.text == "ship v2.8")
-        vm.recordActiveGoal(text: nil)
-        #expect(vm.activeGoal == nil)
-        // Empty / whitespace also clears.
-        vm.recordActiveGoal(text: "x")
-        vm.recordActiveGoal(text: "   ")
-        #expect(vm.activeGoal == nil)
-    }
-
-    @MainActor
-    @Test func recordQueuedPromptAppendsAndPopsFIFO() {
-        let vm = RichChatViewModel(context: .local)
-        vm.recordQueuedPrompt(text: "first")
-        vm.recordQueuedPrompt(text: "second")
-        vm.recordQueuedPrompt(text: "third")
-        #expect(vm.queuedPrompts.count == 3)
-        let popped = vm.popQueuedPrompt()
-        #expect(popped?.text == "first")
-        #expect(vm.queuedPrompts.count == 2)
-        let next = vm.popQueuedPrompt()
-        #expect(next?.text == "second")
-        #expect(vm.queuedPrompts.first?.text == "third")
-    }
-
-    @MainActor
-    @Test func recordQueuedPromptIgnoresBlank() {
-        let vm = RichChatViewModel(context: .local)
-        vm.recordQueuedPrompt(text: "")
-        vm.recordQueuedPrompt(text: "   ")
-        #expect(vm.queuedPrompts.isEmpty)
-    }
-
-    @MainActor
-    @Test func popQueuedPromptOnEmptyReturnsNil() {
-        let vm = RichChatViewModel(context: .local)
-        #expect(vm.popQueuedPrompt() == nil)
-    }
-
-    @Test func isNonInterruptiveSlashRecognizesGoalAndQueue() {
-        // Non-MainActor: the helper itself isn't MainActor-isolated;
-        // construct a VM on MainActor and read through it on the test
-        // actor to keep the assertion focused on classification.
-        Task { @MainActor in
-            let vm = RichChatViewModel(context: .local)
-            #expect(vm.isNonInterruptiveSlash("/goal finish v2.8"))
-            #expect(vm.isNonInterruptiveSlash("/queue summarize"))
-            #expect(vm.isNonInterruptiveSlash("/queue"))
-            #expect(vm.isNonInterruptiveSlash("/steer be careful"))
-            #expect(!vm.isNonInterruptiveSlash("hello"))
-            #expect(!vm.isNonInterruptiveSlash("/compress"))
-        }
-    }
-
-    @MainActor
-    @Test func resetClearsGoalAndQueue() {
-        let vm = RichChatViewModel(context: .local)
-        vm.recordActiveGoal(text: "x")
-        vm.recordQueuedPrompt(text: "a")
-        vm.recordQueuedPrompt(text: "b")
-        #expect(vm.activeGoal != nil)
-        #expect(vm.queuedPrompts.count == 2)
-        vm.reset()
-        #expect(vm.activeGoal == nil)
-        #expect(vm.queuedPrompts.isEmpty)
-    }
-
     // MARK: - Helpers
 
     static func makeTempProject() throws -> String {

scarf/Scarf iOS/Chat/ChatView.swift

@@ -109,17 +109,6 @@ struct ChatView: View {
                 }
             )
         }
-        // Forward the env-injected capabilities snapshot into the
-        // shared `RichChatViewModel` whenever it changes. Drives the
-        // capability gate `RichChatViewModel.availableCommands` reads.
-        // Mirrors the Mac `ChatView` plumbing — the iOS chat surface
-        // doesn't render `/goal` / `/queue` UI yet (deferred to WS-9),
-        // but the VM-side state has to stay aligned across platforms
-        // so the Mac surface is correct after a cross-device session
-        // resume.
-        .task(id: capabilitiesStore?.capabilities.versionLine ?? "") {
-            controller.vm.publishCapabilities(capabilitiesStore?.capabilities ?? .empty)
-        }
         .task {
             // Dashboard row taps set `pendingResumeSessionID`, Project
             // Detail's "New Chat" sets `pendingProjectChat`. Both fire
@@ -1318,48 +1307,18 @@ final class ChatController {
             // even when they didn't type any caption.
             vm.addUserMessage(text: "[image attached]")
         }
-        // Non-interruptive slash commands: keep the chat working
-        // indicator off and surface a transient toast confirming the
-        // command was accepted. v2.5 added `/steer`; v2.8 / Hermes
-        // v0.13 adds `/goal` (lock the agent on a target across
-        // turns) and `/queue` (queue a prompt for after the current
-        // turn). Each gets its own optimistic side-effect on the VM
-        // so the (Mac-rendered) chat header pill / queue chip update
-        // synchronously. iOS doesn't surface those affordances yet
-        // (WS-9), but mirroring the dispatch keeps the shared VM
-        // state aligned across platforms — otherwise an iOS user who
-        // ran `/goal` then opened the same session on Mac would see
-        // an empty pill until they typed `/goal` again.
-        let parsedSlash = Self.parseSlashName(text)
-        switch parsedSlash.name {
-        case "goal":
-            // TODO(WS-2-Q7): verify on a real v0.13 host.
-            let arg = RichChatViewModel.parseGoalArgument(parsedSlash.args)
-            switch arg {
-            case .set(let goalText):
-                vm.recordActiveGoal(text: goalText)
-                vm.transientHint = "Goal locked: \(Self.truncatedToastGoal(goalText))"
-            case .clear:
-                vm.recordActiveGoal(text: nil)
-                vm.transientHint = "Goal cleared."
-            case .empty:
-                vm.transientHint = "Sent /goal — see the agent reply for current goal."
-            }
-            scheduleTransientHintClear(snapshot: vm.transientHint)
-        case "queue":
-            // TODO(WS-2-Q5): verify the verbatim wire shape on a
-            // real v0.13 ACP host.
-            let queuedText = parsedSlash.args.trimmingCharacters(in: .whitespacesAndNewlines)
-            if !queuedText.isEmpty {
-                vm.recordQueuedPrompt(text: queuedText)
-            }
-            vm.transientHint = "Queued — runs after current turn."
-            scheduleTransientHintClear(snapshot: vm.transientHint)
-        case "steer" where vm.isNonInterruptiveSlash(text):
+        // /steer is non-interruptive — the agent is still on its
+        // current turn; the guidance applies after the next tool call.
+        // Surface a transient toast confirming the guidance was
+        // received. v2.5 / Hermes v2026.4.23+.
+        if vm.isNonInterruptiveSlash(text) {
             vm.transientHint = "Guidance queued — applies after the next tool call."
-            scheduleTransientHintClear(snapshot: vm.transientHint)
-        default:
-            break
+            Task { @MainActor [weak vm] in
+                try? await Task.sleep(nanoseconds: 4_000_000_000)
+                if vm?.transientHint == "Guidance queued — applies after the next tool call." {
+                    vm?.transientHint = nil
+                }
+            }
         }
         // Project-scoped slash commands expand client-side: the user
         // bubble shows the literal `/<name> args` they typed (above);
@@ -1382,43 +1341,6 @@ final class ChatController {
         }
     }
 
-    /// Pull `(name, argTail)` out of a `/<name> [args]` invocation.
-    /// Mirror of `ChatViewModel.parseSlashName` on Mac. Returns
-    /// `(nil, "")` for non-slash input.
-    static func parseSlashName(_ text: String) -> (name: String?, args: String) {
-        let trimmed = text.trimmingCharacters(in: .whitespacesAndNewlines)
-        guard trimmed.hasPrefix("/") else { return (nil, "") }
-        let withoutSlash = trimmed.dropFirst()
-        if let space = withoutSlash.firstIndex(of: " ") {
-            return (
-                name: String(withoutSlash[..<space]),
-                args: String(withoutSlash[withoutSlash.index(after: space)...])
-            )
-        }
-        return (name: String(withoutSlash), args: "")
-    }
-
-    /// Cap goal text in transient toasts so a 1 KB user-typed goal
-    /// doesn't blow out the hint pill. Mirror of
-    /// `ChatViewModel.truncatedToastGoal`.
-    static func truncatedToastGoal(_ text: String) -> String {
-        text.count <= 60 ? text : String(text.prefix(57)) + "…"
-    }
-
-    /// Auto-clear the chat composer's transient hint after 4s. Mirror
-    /// of `ChatViewModel.scheduleHintClear` — uses a value snapshot
-    /// rather than identity so a later toast that reuses the same
-    /// string still triggers the clear once the latest value matches.
-    @MainActor
-    private func scheduleTransientHintClear(snapshot: String?) {
-        Task { @MainActor [weak vm] in
-            try? await Task.sleep(nanoseconds: 4_000_000_000)
-            if vm?.transientHint == snapshot {
-                vm?.transientHint = nil
-            }
-        }
-    }
-
     /// Mirror of `ChatViewModel.expandIfProjectScoped(_:)` on Mac.
     /// `/<name> args` matching a loaded project-scoped command is
     /// expanded; everything else is sent literally.

scarf/scarf/Features/Chat/ViewModels/ChatViewModel.swift

@@ -77,27 +77,6 @@ final class ChatViewModel {
     let richChatViewModel: RichChatViewModel
     private var coordinator: Coordinator?
 
-    /// Capability store the chat surface reads from. Set by `ChatView`
-    /// at body-evaluation time via `attachCapabilitiesStore(_:)` —
-    /// `@ObservationIgnored` so capability refreshes don't force a
-    /// full chat re-render. Forwards into
-    /// `RichChatViewModel.capabilitiesGate` whenever the published
-    /// snapshot changes; the slash menu reads through that. v2.8 /
-    /// Hermes v0.13 — gates `/goal` + `/queue` slash menu rows.
-    @ObservationIgnored
-    var capabilitiesStore: HermesCapabilitiesStore?
-
-    /// Wire the Mac chat view's environment-injected capabilities store
-    /// into both this VM and its child rich-chat VM. Idempotent on the
-    /// pointer (re-attaching the same store is a no-op); always
-    /// re-publishes the latest snapshot so a refresh that fired before
-    /// the chat view became visible still lands.
-    @MainActor
-    func attachCapabilitiesStore(_ store: HermesCapabilitiesStore?) {
-        capabilitiesStore = store
-        richChatViewModel.publishCapabilities(store?.capabilities ?? .empty)
-    }
-
     /// `callId` of the tool call currently surfaced in the chat
     /// inspector pane, or nil when nothing is focused. Set by
     /// `ToolCallCard` taps in the transcript; cleared by the inspector's
@@ -342,47 +321,6 @@ final class ChatViewModel {
         richChatViewModel.clearACPErrorState()
     }
 
-    /// Auto-clear the chat composer's transient hint after 4 s. Shared
-    /// helper for `/steer`, `/goal`, and `/queue` so the toast lifetime
-    /// stays consistent across non-interruptive commands.
-    @MainActor
-    private func scheduleHintClear() {
-        let snapshot = richChatViewModel.transientHint
-        Task { @MainActor [weak self] in
-            try? await Task.sleep(nanoseconds: 4_000_000_000)
-            if self?.richChatViewModel.transientHint == snapshot {
-                self?.richChatViewModel.transientHint = nil
-            }
-        }
-    }
-
-    /// Pull the slash command name + raw argument tail out of the
-    /// composer text. Returns `(name: nil, args: "")` for non-slash
-    /// input. Mirrors the parser shape `RichChatViewModel.parseGoalArgument`
-    /// expects; kept on `ChatViewModel` (not promoted to ScarfCore)
-    /// because the Mac and iOS chat surfaces compose this with their
-    /// own per-platform send paths.
-    static func parseSlashName(_ text: String) -> (name: String?, args: String) {
-        let trimmed = text.trimmingCharacters(in: .whitespacesAndNewlines)
-        guard trimmed.hasPrefix("/") else { return (nil, "") }
-        let withoutSlash = trimmed.dropFirst()
-        if let space = withoutSlash.firstIndex(of: " ") {
-            return (
-                name: String(withoutSlash[..<space]),
-                args: String(withoutSlash[withoutSlash.index(after: space)...])
-            )
-        }
-        return (name: String(withoutSlash), args: "")
-    }
-
-    /// Cap goal text in transient toasts so a 1 KB user-typed goal
-    /// doesn't blow out the hint pill. The header pill applies its
-    /// own 33-char cap; the toast is shorter so the hint stays
-    /// glanceable.
-    static func truncatedToastGoal(_ text: String) -> String {
-        text.count <= 60 ? text : String(text.prefix(57)) + "…"
-    }
-
     @MainActor
     private func recordACPFailure(_ error: Error, client: ACPClient?, context: String) async {
         logger.error("\(context): \(error.localizedDescription)")
@@ -637,59 +575,22 @@ final class ChatViewModel {
         // and Hermes-version-independent. v2.5.
         let wireText = expandIfProjectScoped(text)
 
-        // Non-interruptive slash commands keep the "Agent working…"
-        // indicator off and surface a transient toast confirming the
-        // command was accepted. v2.5 added `/steer`; v2.8 / Hermes
-        // v0.13 adds `/goal` (lock the agent on a target across turns)
-        // and `/queue` (queue a prompt for after the current turn).
-        // Each gets its own optimistic side-effect on RichChatViewModel
-        // so the chat header pill / queue chip update synchronously
-        // without waiting for a server round-trip.
-        let isNonInterruptive = richChatViewModel.isNonInterruptiveSlash(text)
-        let parsed = Self.parseSlashName(text)
-        switch parsed.name {
-        case "goal":
-            // TODO(WS-2-Q7): once a v0.13 host confirms the
-            // wire-shape, this branch fires only when the host
-            // advertises `hasGoals`; pre-v0.13 hosts hide the menu
-            // row, but a power-user typing `/goal` directly still
-            // lands here. We keep the optimistic write so the pill
-            // appears synchronously — the agent's "unknown command"
-            // reply on a pre-v0.13 host paints the inconsistency in
-            // user-visible chat content (acceptable v1 behavior;
-            // see WS-2 plan "Inconsistency caveat").
-            let arg = RichChatViewModel.parseGoalArgument(parsed.args)
-            switch arg {
-            case .set(let goalText):
-                richChatViewModel.recordActiveGoal(text: goalText)
-                richChatViewModel.transientHint = "Goal locked: \(Self.truncatedToastGoal(goalText))"
-            case .clear:
-                richChatViewModel.recordActiveGoal(text: nil)
-                richChatViewModel.transientHint = "Goal cleared."
-            case .empty:
-                richChatViewModel.transientHint = "Sent /goal — see the agent reply for current goal."
-            }
-            scheduleHintClear()
-        case "queue":
-            // TODO(WS-2-Q5): verify against a real v0.13 ACP host
-            // that the verbatim "/queue <text>" wire shape is what
-            // Hermes accepts (versus a structured arg shape). The
-            // optimistic mirror logic below assumes verbatim text.
-            let queuedText = parsed.args.trimmingCharacters(in: .whitespacesAndNewlines)
-            if !queuedText.isEmpty {
-                richChatViewModel.recordQueuedPrompt(text: queuedText)
-            }
-            richChatViewModel.transientHint = "Queued — runs after current turn."
-            scheduleHintClear()
-        case "steer" where isNonInterruptive:
+        // /steer is non-interruptive — the agent is still on its
+        // current turn; the guidance applies after the next tool
+        // call. Don't change the "Agent working..." status (it's
+        // already on); show a transient toast so the user knows the
+        // guidance was accepted. v2.5 / Hermes v2026.4.23+.
+        let isSteer = richChatViewModel.isNonInterruptiveSlash(text)
+        if isSteer {
             richChatViewModel.transientHint = "Guidance queued — applies after the next tool call."
-            scheduleHintClear()
-        default:
-            // Regular interruptive prompt (or an unrecognized slash).
-            // Don't flip "Agent working…" for any other
-            // non-interruptive command (defensive; matches the
-            // legacy contract).
-            if !isNonInterruptive { acpStatus = ACPPhase.agentWorking }
+            Task { @MainActor [weak self] in
+                try? await Task.sleep(nanoseconds: 4_000_000_000)
+                if self?.richChatViewModel.transientHint == "Guidance queued — applies after the next tool call." {
+                    self?.richChatViewModel.transientHint = nil
+                }
+            }
+        } else {
+            acpStatus = ACPPhase.agentWorking
         }
         acpPromptTask = Task { @MainActor in
             do {
@@ -707,7 +608,7 @@ final class ChatViewModel {
                 // notifier handles the foreground/disabled gating;
                 // we just hand it the latest assistant text and
                 // session title for the body line.
-                if !isNonInterruptive {
+                if !isSteer {
                     let preview = richChatViewModel.messages
                         .last(where: { $0.isAssistant })?
                         .content ?? ""

scarf/scarf/Features/Chat/Views/ChatQueueIndicator.swift

@@ -1,95 +0,0 @@
-import SwiftUI
-import ScarfCore
-import ScarfDesign
-
-/// Header chip that surfaces prompts the user has queued via
-/// `/queue …` (Hermes v0.13). Tap → popover listing the queued
-/// prompt previews + their relative timestamps.
-///
-/// The chip is OPTIMISTIC — it's a Scarf-side mirror of what the user
-/// typed. Hermes owns the authoritative queue server-side. The popover
-/// header makes that explicit so the user understands per-entry
-/// removal isn't supported (Hermes has no remove-by-id verb), and the
-/// v2.8.0 plan removed the "Clear all" button rather than ship one
-/// that would lie about its effect on server-side state. See WS-2 plan
-/// Q2 for the wire-shape question that drove that decision.
-struct ChatQueueIndicator: View {
-    let queuedPrompts: [HermesQueuedPrompt]
-    @State private var isPopoverShown = false
-
-    var body: some View {
-        if queuedPrompts.isEmpty {
-            EmptyView()
-        } else {
-            chipButton
-                .popover(isPresented: $isPopoverShown, arrowEdge: .bottom) {
-                    queuePopover
-                }
-        }
-    }
-
-    private var chipButton: some View {
-        Button {
-            isPopoverShown = true
-        } label: {
-            HStack(spacing: 4) {
-                Image(systemName: "tray.full")
-                Text("\(queuedPrompts.count) queued")
-            }
-            .scarfStyle(.caption)
-            .padding(.horizontal, ScarfSpace.s2)
-            .padding(.vertical, 2)
-            .background(Capsule().fill(ScarfColor.warning.opacity(0.16)))
-            .foregroundStyle(ScarfColor.warning)
-        }
-        .buttonStyle(.plain)
-        .help("Prompts waiting to run after the current turn finishes")
-    }
-
-    @ViewBuilder
-    private var queuePopover: some View {
-        VStack(alignment: .leading, spacing: ScarfSpace.s2) {
-            Text("Queued prompts")
-                .scarfStyle(.headline)
-                .foregroundStyle(ScarfColor.foregroundPrimary)
-            Text("Local view — Hermes manages the actual queue server-side. The next prompt runs automatically when the current turn finishes.")
-                .scarfStyle(.caption)
-                .foregroundStyle(ScarfColor.foregroundMuted)
-                .fixedSize(horizontal: false, vertical: true)
-            ScarfDivider()
-            ScrollView {
-                VStack(alignment: .leading, spacing: ScarfSpace.s2) {
-                    ForEach(Array(queuedPrompts.enumerated()), id: \.element.id) { index, prompt in
-                        queueRow(prompt, position: index + 1)
-                    }
-                }
-                .padding(.vertical, 2)
-            }
-            .frame(maxHeight: 220)
-        }
-        .padding(ScarfSpace.s4)
-        .frame(width: 360)
-    }
-
-    @ViewBuilder
-    private func queueRow(_ prompt: HermesQueuedPrompt, position: Int) -> some View {
-        VStack(alignment: .leading, spacing: 2) {
-            HStack(alignment: .firstTextBaseline, spacing: ScarfSpace.s2) {
-                Text("#\(position)")
-                    .scarfStyle(.captionUppercase)
-                    .foregroundStyle(ScarfColor.foregroundFaint)
-                Text(prompt.queuedAt, style: .relative)
-                    .scarfStyle(.caption)
-                    .foregroundStyle(ScarfColor.foregroundFaint)
-                    .monospacedDigit()
-            }
-            Text(prompt.text)
-                .scarfStyle(.body)
-                .foregroundStyle(ScarfColor.foregroundPrimary)
-                .lineLimit(3)
-                .truncationMode(.tail)
-                .fixedSize(horizontal: false, vertical: true)
-        }
-        .padding(.vertical, 2)
-    }
-}

scarf/scarf/Features/Chat/Views/ChatTranscriptPane.swift

@@ -21,10 +21,7 @@ struct ChatTranscriptPane: View {
                 acpOutputTokens: richChat.acpOutputTokens,
                 acpThoughtTokens: richChat.acpThoughtTokens,
                 projectName: chatViewModel.currentProjectName,
-                gitBranch: chatViewModel.currentGitBranch,
-                activeGoal: richChat.activeGoal,
-                onClearGoal: { chatViewModel.sendText("/goal --clear") },
-                queuedPrompts: richChat.queuedPrompts
+                gitBranch: chatViewModel.currentGitBranch
             )
             Divider()
 
@@ -61,8 +58,7 @@ struct ChatTranscriptPane: View {
                 onSend: onSend,
                 isEnabled: isEnabled,
                 commands: richChat.availableCommands,
-                showCompressButton: richChat.supportsCompress && !richChat.hasBroaderCommandMenu,
-                isAgentWorking: richChat.isAgentWorking
+                showCompressButton: richChat.supportsCompress && !richChat.hasBroaderCommandMenu
             )
             .id(richChat.sessionId ?? "scarf.chat.no-session")
         }

scarf/scarf/Features/Chat/Views/ChatView.swift

@@ -5,12 +5,6 @@ struct ChatView: View {
     @Environment(ChatViewModel.self) private var viewModel
     @Environment(HermesFileWatcher.self) private var fileWatcher
     @Environment(AppCoordinator.self) private var coordinator
-    /// Capabilities store for the active server (injected on
-    /// `ContextBoundRoot`). Forwarded into `ChatViewModel` so the
-    /// rich-chat slash menu can gate v0.13 surfaces (`/goal`, `/queue`,
-    /// `/steer` on idle). Nil during harness scenarios; treated the
-    /// same as `.empty` capabilities.
-    @Environment(\.hermesCapabilities) private var capabilitiesStore
     @State private var showErrorDetails = false
 
     /// Side-pane visibility toggles (issue #58). Drive the new
@@ -51,15 +45,6 @@ struct ChatView: View {
         .navigationTitle(
             viewModel.currentProjectName.map { "Chat · \($0)" } ?? "Chat"
         )
-        // Forward the env-injected capabilities store into the chat VM
-        // on every refresh tick so the rich-chat slash menu picks up
-        // v0.13 surfaces the moment the host advertises them. The id
-        // value is the capabilities-line string — a stable identity
-        // that flips exactly when the detector fires. Nil store ↔
-        // `.empty` capabilities, which is what the VM defaults to.
-        .task(id: capabilitiesStore?.capabilities.versionLine ?? "") {
-            viewModel.attachCapabilitiesStore(capabilitiesStore)
-        }
         .task {
             await viewModel.loadRecentSessions()
             viewModel.refreshCredentialPreflight()

scarf/scarf/Features/Chat/Views/RichChatInputBar.swift

@@ -16,11 +16,6 @@ struct RichChatInputBar: View {
     let isEnabled: Bool
     var commands: [HermesSlashCommand] = []
     var showCompressButton: Bool = false
-    /// Whether the agent is currently mid-turn. Used to grey-out
-    /// `/steer` in the slash menu on idle pre-v0.13 hosts (where the
-    /// command silently no-ops). v0.13+ hosts allow `/steer` on idle
-    /// and the row stays interactive regardless of `isAgentWorking`.
-    var isAgentWorking: Bool = false
 
     @Environment(\.hermesCapabilities) private var capabilitiesStore
 
@@ -57,8 +52,6 @@ struct RichChatInputBar: View {
                 SlashCommandMenu(
                     commands: filteredCommands,
                     agentHasCommands: !commands.isEmpty,
-                    disabledCommandNames: disabledMenuCommandNames,
-                    disabledReason: disabledMenuReason,
                     selectedIndex: $selectedIndex,
                     onSelect: insertCommand
                 )
@@ -399,27 +392,6 @@ struct RichChatInputBar: View {
         SlashCommandMenu.filter(commands: commands, query: menuQuery)
     }
 
-    /// Names of menu rows that should render greyed-out + ignore taps.
-    /// v2.8 / Hermes v0.13: `/steer` is greyed only when the connected
-    /// host is pre-v0.13 AND the session is idle. Pre-v0.13 hosts
-    /// silently no-op `/steer` outside an active turn — surfacing the
-    /// row as "use during a turn" is friendlier than letting the user
-    /// click and see nothing happen. v0.13+ hosts allow steer-on-idle
-    /// (the command just sends as a regular prompt) so the row stays
-    /// interactive there.
-    private var disabledMenuCommandNames: Set<String> {
-        let hasSteerOnIdle = capabilitiesStore?.capabilities.hasACPSteerOnIdle ?? false
-        if !isAgentWorking && !hasSteerOnIdle {
-            return ["steer"]
-        }
-        return []
-    }
-
-    private var disabledMenuReason: String? {
-        guard !disabledMenuCommandNames.isEmpty else { return nil }
-        return "Use `/steer` while the agent is working — your Hermes version doesn't support steering on idle sessions."
-    }
-
     private func updateMenuState() {
         let shouldShow = shouldShowMenu
 

scarf/scarf/Features/Chat/Views/SessionInfoBar.swift

@@ -20,17 +20,6 @@ struct SessionInfoBar: View {
     /// name. Nil for non-project chats and for projects that aren't
     /// git repos.
     var gitBranch: String? = nil
-    /// Active locked goal (Hermes v0.13 `/goal`). Nil hides the pill.
-    /// Optimistic — set by `RichChatViewModel.recordActiveGoal(text:)`
-    /// when the user sends `/goal …`.
-    var activeGoal: HermesActiveGoal? = nil
-    /// Invoked when the user picks "Clear goal" from the goal pill's
-    /// context menu. Caller dispatches `/goal --clear` so the optimistic
-    /// pill clear and the server-side authoritative state stay in sync.
-    var onClearGoal: (() -> Void)? = nil
-    /// Local mirror of prompts queued via `/queue …` (Hermes v0.13).
-    /// Empty list hides the chip.
-    var queuedPrompts: [HermesQueuedPrompt] = []
 
     /// Active Hermes profile name (issue #50). Resolved on each body
     /// re-evaluation; the resolver caches for 5s so this is cheap.
@@ -73,42 +62,6 @@ struct SessionInfoBar: View {
                     }
                 }
 
-                // Goal pill (v2.8 / Hermes v0.13). `.info` keeps it
-                // visually decodable from the rust accent (project /
-                // branch) and the warning amber (queue chip). The
-                // pill renders only when `activeGoal` is non-nil —
-                // pre-v0.13 hosts can't reach the `/goal` send path
-                // through the slash menu (it's filtered out in
-                // `availableCommands`), so the pill stays absent there
-                // by transitive impossibility.
-                if let activeGoal {
-                    HStack(spacing: 4) {
-                        Image(systemName: "scope")
-                        Text(Self.truncatedGoal(activeGoal.text))
-                    }
-                    .scarfStyle(.caption)
-                    .padding(.horizontal, ScarfSpace.s2)
-                    .padding(.vertical, 2)
-                    .background(Capsule().fill(ScarfColor.info.opacity(0.16)))
-                    .foregroundStyle(ScarfColor.info)
-                    .help("Goal locked: \(activeGoal.text)")
-                    .contextMenu {
-                        if let onClearGoal {
-                            Button("Clear goal", role: .destructive, action: onClearGoal)
-                        }
-                    }
-                }
-
-                // Queue chip (v2.8 / Hermes v0.13). Local mirror only —
-                // Hermes is the authoritative owner of the actual
-                // queue. Per-entry deletion isn't exposed (Hermes has
-                // no remove-by-id verb), and the v2.8.0 plan drops the
-                // global "Clear all" button to avoid lying about
-                // server-side state. The popover is read-only.
-                if !queuedPrompts.isEmpty {
-                    ChatQueueIndicator(queuedPrompts: queuedPrompts)
-                }
-
                 HStack(spacing: 4) {
                     Circle()
                         .fill(isWorking ? ScarfColor.success : ScarfColor.foregroundFaint)
@@ -181,11 +134,4 @@ struct SessionInfoBar: View {
     private func formatTokens(_ count: Int) -> String {
         count.formatted(.number.notation(.compactName).precision(.fractionLength(0...1)))
     }
-
-    /// Cap goal text in the chip to keep the SessionInfoBar from
-    /// wrapping when the user locks a long goal. Full goal text is
-    /// available in the tooltip via `.help(...)`.
-    static func truncatedGoal(_ text: String) -> String {
-        text.count <= 36 ? text : String(text.prefix(33)) + "…"
-    }
 }

scarf/scarf/Features/Chat/Views/SlashCommandMenu.swift

@@ -11,13 +11,6 @@ struct SlashCommandMenu: View {
     /// Whether the agent advertised any commands at all. Lets us distinguish
     /// "agent hasn't sent commands yet" from "filter matched nothing".
     let agentHasCommands: Bool
-    /// Names that render greyed-out + ignore taps. v2.8 uses this only
-    /// for `/steer` on pre-v0.13 idle sessions; v0.13 hosts allow steer
-    /// on idle and the set is empty.
-    var disabledCommandNames: Set<String> = []
-    /// Tooltip shown on disabled rows. Reused per-row in v2.8 — only
-    /// one disabled case ships, so a single shared string is enough.
-    var disabledReason: String? = nil
     @Binding var selectedIndex: Int
     var onSelect: (HermesSlashCommand) -> Void
 
@@ -57,17 +50,13 @@ struct SlashCommandMenu: View {
                 ScrollView {
                     LazyVStack(spacing: 0) {
                         ForEach(Array(commands.enumerated()), id: \.element.id) { index, command in
-                            let isDisabled = disabledCommandNames.contains(command.name)
                             SlashCommandRow(
                                 command: command,
-                                isSelected: index == selectedIndex,
-                                isDisabled: isDisabled,
-                                disabledReason: isDisabled ? disabledReason : nil
+                                isSelected: index == selectedIndex
                             )
                             .id(index)
                             .contentShape(Rectangle())
                             .onTapGesture {
-                                guard !isDisabled else { return }
                                 selectedIndex = index
                                 onSelect(command)
                             }
@@ -88,8 +77,6 @@ struct SlashCommandMenu: View {
 private struct SlashCommandRow: View {
     let command: HermesSlashCommand
     let isSelected: Bool
-    var isDisabled: Bool = false
-    var disabledReason: String? = nil
 
     var body: some View {
         HStack(alignment: .firstTextBaseline, spacing: 8) {
@@ -120,19 +107,11 @@ private struct SlashCommandRow: View {
                         .foregroundStyle(ScarfColor.foregroundMuted)
                         .lineLimit(2)
                 }
-                if isDisabled, let reason = disabledReason {
-                    Text(reason)
-                        .scarfStyle(.caption)
-                        .foregroundStyle(ScarfColor.foregroundFaint)
-                        .lineLimit(2)
-                }
             }
             Spacer(minLength: 0)
         }
         .padding(.horizontal, ScarfSpace.s3)
         .padding(.vertical, ScarfSpace.s2)
         .background(isSelected ? ScarfColor.accentTint : Color.clear)
-        .opacity(isDisabled ? 0.55 : 1.0)
-        .help(isDisabled ? (disabledReason ?? "") : "")
     }
 }

scarf/scarf/Features/Kanban/ViewModels/KanbanBoardViewModel.swift

@@ -55,9 +55,22 @@ final class KanbanBoardViewModel {
     var assigneeFilter: String?       // nil = all assignees
     var showArchived: Bool = false
 
-    /// Optimistic moves keyed by task id; cleared when the polled
-    /// response includes the same status the optimistic move set.
-    private var optimisticOverrides: [String: String] = [:]
+    /// Optimistic in-flight overrides keyed by task id; cleared when the
+    /// polled response confirms the new state.
+    /// - Status side: drag-drop column moves.
+    /// - Hallucination-gate side (v0.13): Verify clicks flip `pending` →
+    ///   `verified` locally so the banner disappears immediately.
+    /// The override entry is dropped from the dictionary entirely once
+    /// both sides are nil (no override needed).
+    private struct OptimisticOverride {
+        var status: String?
+        var hallucinationGate: KanbanHallucinationGate?
+
+        var isEmpty: Bool {
+            status == nil && hallucinationGate == nil
+        }
+    }
+    private var optimisticOverrides: [String: OptimisticOverride] = [:]
     /// Tasks dropped into invalid columns produce a transient "denied"
     /// banner. Stored as an explicit error to support the Cmd-Z style
     /// undo we don't ship in v2.7.5 but want to leave room for.
@@ -177,8 +190,10 @@ final class KanbanBoardViewModel {
         // Optimistic mutation — flip the local row's status to a
         // value within the destination column's range. We pick a
         // representative status per column.
-        let optimisticStatus = optimisticStatus(for: destination)
-        optimisticOverrides[taskId] = optimisticStatus
+        let optimisticStatusValue = optimisticStatus(for: destination)
+        var override = optimisticOverrides[taskId] ?? OptimisticOverride()
+        override.status = optimisticStatusValue
+        optimisticOverrides[taskId] = override
 
         let svc = service
         Task {
@@ -190,11 +205,11 @@ final class KanbanBoardViewModel {
                 // without waiting for the 5s tick.
                 await refresh()
             } catch let err as KanbanError {
-                optimisticOverrides.removeValue(forKey: taskId)
+                clearStatusOverride(for: taskId)
                 lastError = err.errorDescription
                 logger.warning("kanban move failed: \(err.errorDescription ?? "", privacy: .public)")
             } catch {
-                optimisticOverrides.removeValue(forKey: taskId)
+                clearStatusOverride(for: taskId)
                 lastError = error.localizedDescription
             }
         }
@@ -269,6 +284,48 @@ final class KanbanBoardViewModel {
         return task
     }
 
+    // MARK: - Hallucination gate (v0.13)
+
+    /// User confirmed the worker-created card is real. Optimistically
+    /// flip the gate to `verified` so the banner disappears immediately;
+    /// the polling loop confirms the new state on the next tick. On
+    /// failure (e.g. the verb name is wrong on this v0.13.x build), the
+    /// override is cleared and the error surfaces in `lastError`.
+    func verifyHallucination(taskId: String) {
+        var override = optimisticOverrides[taskId] ?? OptimisticOverride()
+        override.hallucinationGate = .verified
+        optimisticOverrides[taskId] = override
+        Task {
+            do {
+                try await service.verify(taskId: taskId)
+                await refresh()
+            } catch let err as KanbanError {
+                clearHallucinationOverride(for: taskId)
+                lastError = err.errorDescription
+                logger.warning("kanban verify failed: \(err.errorDescription ?? "", privacy: .public)")
+            } catch {
+                clearHallucinationOverride(for: taskId)
+                lastError = error.localizedDescription
+            }
+        }
+    }
+
+    /// User rejected the worker-created card as a hallucinated reference.
+    /// Routes through `comment` + `archive` per `KanbanService.rejectHallucinated`
+    /// so there's an audit trail for why the card disappeared.
+    func rejectHallucination(taskId: String) {
+        Task {
+            do {
+                try await service.rejectHallucinated(taskId: taskId)
+                await refresh()
+            } catch let err as KanbanError {
+                lastError = err.errorDescription
+            } catch {
+                lastError = error.localizedDescription
+            }
+        }
+    }
+
     // MARK: - Private helpers
 
     private func mergePolledTasks(_ polled: [HermesKanbanTask]) {
@@ -282,25 +339,75 @@ final class KanbanBoardViewModel {
             filtered = polled
         }
         let presentIds = Set(filtered.map(\.id))
-        // Drop optimistic overrides for tasks Hermes confirmed.
-        for (id, optimistic) in optimisticOverrides {
-            if let row = filtered.first(where: { $0.id == id }) {
-                if columnFromStatus(optimistic) == columnFromStatus(row.status) {
+        // Drop optimistic overrides for tasks Hermes confirmed. Two
+        // independent sides — clear them separately so a Verify click
+        // still in-flight survives a status-side poll confirmation, and
+        // vice versa.
+        for (id, override) in optimisticOverrides {
+            guard let row = filtered.first(where: { $0.id == id }) else {
+                if !presentIds.contains(id) {
+                    // Task no longer in the polled set (archived, deleted,
+                    // or filtered out). Drop the override entirely.
                     optimisticOverrides.removeValue(forKey: id)
                 }
-            } else if !presentIds.contains(id) {
-                // Task no longer in the polled set (archived, deleted,
-                // or filtered out). Drop the optimistic entry.
+                continue
+            }
+            // Status side — optimistic move confirmed.
+            if let optStatus = override.status,
+               columnFromStatus(optStatus) == columnFromStatus(row.status) {
+                optimisticOverrides[id]?.status = nil
+            }
+            // Hallucination-gate side — optimistic verify/reject confirmed.
+            if let optGate = override.hallucinationGate,
+               KanbanHallucinationGate.from(row.hallucinationGateStatus) == optGate {
+                optimisticOverrides[id]?.hallucinationGate = nil
+            }
+            if optimisticOverrides[id]?.isEmpty ?? true {
                 optimisticOverrides.removeValue(forKey: id)
             }
         }
         tasks = filtered
     }
 
+    /// Drop the status side of a task's override (preserving any
+    /// in-flight hallucination-gate optimistic state).
+    private func clearStatusOverride(for taskId: String) {
+        guard var override = optimisticOverrides[taskId] else { return }
+        override.status = nil
+        if override.isEmpty {
+            optimisticOverrides.removeValue(forKey: taskId)
+        } else {
+            optimisticOverrides[taskId] = override
+        }
+    }
+
+    /// Drop the hallucination-gate side of a task's override (preserving
+    /// any in-flight status-side drag-drop).
+    private func clearHallucinationOverride(for taskId: String) {
+        guard var override = optimisticOverrides[taskId] else { return }
+        override.hallucinationGate = nil
+        if override.isEmpty {
+            optimisticOverrides.removeValue(forKey: taskId)
+        } else {
+            optimisticOverrides[taskId] = override
+        }
+    }
+
+    /// Effective hallucination gate for a task — the optimistic override
+    /// wins if one is in flight; otherwise the polled value. View code
+    /// reads through this so the banner / dim state matches the moment-
+    /// after-click experience.
+    func effectiveHallucinationGate(_ task: HermesKanbanTask) -> KanbanHallucinationGate? {
+        if let override = optimisticOverrides[task.id]?.hallucinationGate {
+            return override
+        }
+        return KanbanHallucinationGate.from(task.hallucinationGateStatus)
+    }
+
     /// Return the effective board column for a task — the optimistic
     /// override wins if one is in flight; otherwise the polled status.
     private func effectiveColumn(_ task: HermesKanbanTask) -> KanbanBoardColumn {
-        if let overrideStatus = optimisticOverrides[task.id] {
+        if let overrideStatus = optimisticOverrides[task.id]?.status {
             return columnFromStatus(overrideStatus)
         }
         return columnFromStatus(task.status)

scarf/scarf/Features/Kanban/Views/KanbanBoardView.swift

@@ -13,6 +13,7 @@ import ScarfDesign
 ///   tenant.
 struct KanbanBoardView: View {
     @State private var viewModel: KanbanBoardViewModel
+    @Environment(\.hermesCapabilities) private var capabilitiesStore
 
     /// When non-nil, a project board hosts this view. Drives header
     /// chrome (subtitle, hidden tenant filter) and create-sheet
@@ -33,6 +34,15 @@ struct KanbanBoardView: View {
         self.projectName = projectName
     }
 
+    /// Convenience read for the v0.13 diagnostics flag — gates the
+    /// max_retries field, hallucination banner, diagnostics rendering,
+    /// and the auto-blocked reason banner. Pre-v0.13 hosts get the
+    /// v2.7.5 surface unchanged. Treats a missing store as "off" so
+    /// harness contexts (Previews) don't accidentally surface gated UI.
+    private var supportsKanbanDiagnostics: Bool {
+        capabilitiesStore?.capabilities.hasKanbanDiagnostics ?? false
+    }
+
     @State private var inspectorTaskId: String?
     @State private var showingCreateSheet = false
     @State private var blockSheetTaskId: String?
@@ -71,7 +81,8 @@ struct KanbanBoardView: View {
             KanbanCreateSheet(
                 assignees: viewModel.assignees,
                 tenantPrefill: viewModel.tenantFilter,
-                projectWorkspacePath: viewModel.projectPath
+                projectWorkspacePath: viewModel.projectPath,
+                supportsKanbanDiagnostics: supportsKanbanDiagnostics
             ) { request in
                 _ = try await viewModel.createTask(request)
             }
@@ -188,7 +199,9 @@ struct KanbanBoardView: View {
                         onDrop: { ref in
                             handleDrop(ref.id, on: column)
                         },
-                        canCreate: column == .upNext || column == .triage
+                        canCreate: column == .upNext || column == .triage,
+                        supportsKanbanDiagnostics: supportsKanbanDiagnostics,
+                        effectiveHallucinationGate: { viewModel.effectiveHallucinationGate($0) }
                     )
                 }
                 Spacer(minLength: ScarfSpace.s4)
@@ -208,6 +221,8 @@ struct KanbanBoardView: View {
                 service: viewModel.service,
                 taskId: taskId,
                 availableAssignees: viewModel.assignees,
+                supportsKanbanDiagnostics: supportsKanbanDiagnostics,
+                effectiveHallucinationGate: { viewModel.effectiveHallucinationGate($0) },
                 onClose: { inspectorTaskId = nil },
                 onClaim: {
                     viewModel.attemptMove(taskId: taskId, to: .running)
@@ -232,6 +247,15 @@ struct KanbanBoardView: View {
                 },
                 onReassign: { profile in
                     viewModel.reassignTask(taskId: taskId, to: profile)
+                },
+                onVerifyHallucination: {
+                    viewModel.verifyHallucination(taskId: taskId)
+                },
+                onRejectHallucination: {
+                    viewModel.rejectHallucination(taskId: taskId)
+                    // Card vanishes from active board after archive — close
+                    // the inspector so it doesn't dangle on a deleted task.
+                    inspectorTaskId = nil
                 }
             )
         }

scarf/scarf/Features/Kanban/Views/KanbanCardView.swift

@@ -24,12 +24,40 @@ struct KanbanTaskRef: Transferable {
 /// - **Running** gets a blue left-edge accent + live shimmer
 /// - **Blocked** gets a warning left-edge accent + ⚠ glyph
 /// - **Done** dims to 0.7 opacity (0.55 in dark mode)
+/// - **Hallucination-gate pending** (v0.13+) dims to 0.6 + ⚠ glyph and
+///   shows a one-line auto-blocked reason in the footer when present.
 struct KanbanCardView: View {
     let task: HermesKanbanTask
     let onTap: () -> Void
+    /// True when the connected Hermes is on v0.13+ — gates the
+    /// hallucination dim/glyph, auto-block sub-line, and diagnostics
+    /// dot on the card. Pre-v0.13 hosts see the v2.7.5 chrome unchanged.
+    let supportsKanbanDiagnostics: Bool
+    /// Optimistic-aware accessor. Pre-v0.13 always nil. Otherwise delegates
+    /// to the board VM so a Verify click un-dims the card immediately.
+    let effectiveHallucinationGate: (HermesKanbanTask) -> KanbanHallucinationGate?
+
+    init(
+        task: HermesKanbanTask,
+        supportsKanbanDiagnostics: Bool = false,
+        effectiveHallucinationGate: @escaping (HermesKanbanTask) -> KanbanHallucinationGate? = { _ in nil },
+        onTap: @escaping () -> Void
+    ) {
+        self.task = task
+        self.supportsKanbanDiagnostics = supportsKanbanDiagnostics
+        self.effectiveHallucinationGate = effectiveHallucinationGate
+        self.onTap = onTap
+    }
 
     @Environment(\.colorScheme) private var colorScheme
 
+    /// Cached gate read — derived once per body eval rather than recomputed
+    /// in each subview helper.
+    private var hallucinationGate: KanbanHallucinationGate? {
+        guard supportsKanbanDiagnostics else { return nil }
+        return effectiveHallucinationGate(task)
+    }
+
     var body: some View {
         Button(action: onTap) {
             VStack(alignment: .leading, spacing: ScarfSpace.s2) {
@@ -66,13 +94,22 @@ struct KanbanCardView: View {
         }
         .buttonStyle(.plain)
         .scarfShadow(.sm)
-        .opacity(task.isDone ? doneOpacity : 1.0)
+        // v0.13: hallucination-pending cards dim to 0.6 to signal "needs
+        // verification before running" without making them unreadable.
+        // Done cards stay at the established doneOpacity (0.7 / 0.55).
+        .opacity(cardOpacity)
         .draggable(KanbanTaskRef(id: task.id)) {
             // Drag preview — the live card with a heavier shadow.
             self.dragPreview
         }
     }
 
+    private var cardOpacity: Double {
+        if task.isDone { return doneOpacity }
+        if hallucinationGate == .pending { return 0.6 }
+        return 1.0
+    }
+
     private var titleRow: some View {
         HStack(alignment: .top, spacing: ScarfSpace.s2) {
             statusGlyph
@@ -82,7 +119,15 @@ struct KanbanCardView: View {
                 .lineLimit(2)
                 .multilineTextAlignment(.leading)
             Spacer(minLength: 0)
-            if needsAssignmentWarning {
+            // v0.13 hallucination glyph takes precedence over the
+            // unassigned glyph — the hallucination state is the more
+            // specific signal (a worker created this card; verify it).
+            if hallucinationGate == .pending {
+                Image(systemName: "questionmark.diamond.fill")
+                    .foregroundStyle(ScarfColor.warning)
+                    .font(.system(size: 11, weight: .semibold))
+                    .help("Worker-created — verify before running")
+            } else if needsAssignmentWarning {
                 Image(systemName: "exclamationmark.triangle.fill")
                     .foregroundStyle(ScarfColor.warning)
                     .font(.system(size: 11, weight: .semibold))
@@ -186,13 +231,37 @@ struct KanbanCardView: View {
     }
 
     private var footerRow: some View {
-        HStack(spacing: ScarfSpace.s2) {
-            Text(relativeTimeLabel)
-                .scarfStyle(.caption)
-                .foregroundStyle(ScarfColor.foregroundFaint)
-            Spacer(minLength: 0)
-            if let priority = task.priority, priority >= 70 {
-                priorityIndicator(priority)
+        VStack(alignment: .leading, spacing: 2) {
+            // v0.13: server-supplied auto-blocked reason. Renders verbatim
+            // (truncated to one line; full reason in the inspector).
+            // Pre-v0.13 hosts always have task.autoBlockedReason == nil.
+            if supportsKanbanDiagnostics,
+               KanbanStatus.from(task.status) == .blocked,
+               let reason = task.autoBlockedReason, !reason.isEmpty {
+                Text(reason)
+                    .scarfStyle(.caption)
+                    .foregroundStyle(ScarfColor.danger)
+                    .lineLimit(1)
+                    .truncationMode(.tail)
+                    .help(reason)
+            }
+            HStack(spacing: ScarfSpace.s2) {
+                Text(relativeTimeLabel)
+                    .scarfStyle(.caption)
+                    .foregroundStyle(ScarfColor.foregroundFaint)
+                Spacer(minLength: 0)
+                // v0.13: diagnostics dot — small stethoscope glyph when
+                // any cross-run distress signal is attached. Matches the
+                // chip count in the inspector.
+                if supportsKanbanDiagnostics, !task.diagnostics.isEmpty {
+                    Image(systemName: "stethoscope")
+                        .font(.system(size: 9))
+                        .foregroundStyle(ScarfColor.warning)
+                        .help("\(task.diagnostics.count) diagnostic signal\(task.diagnostics.count == 1 ? "" : "s")")
+                }
+                if let priority = task.priority, priority >= 70 {
+                    priorityIndicator(priority)
+                }
             }
         }
     }

scarf/scarf/Features/Kanban/Views/KanbanColumnView.swift

@@ -17,6 +17,38 @@ struct KanbanColumnView: View {
     let onCreate: () -> Void
     let onDrop: (KanbanTaskRef) -> Void
     let canCreate: Bool
+    /// True when the connected Hermes is on v0.13+. Forwarded to each
+    /// `KanbanCardView` so the hallucination dim/glyph + diagnostics dot
+    /// + auto-block sub-line gate uniformly.
+    let supportsKanbanDiagnostics: Bool
+    /// Optimistic-aware accessor forwarded to cards. Default is
+    /// "no override" so Previews and harness contexts still render
+    /// without wiring up a board VM.
+    let effectiveHallucinationGate: (HermesKanbanTask) -> KanbanHallucinationGate?
+
+    init(
+        column: KanbanBoardColumn,
+        tasks: [HermesKanbanTask],
+        isLive: Bool,
+        readyPillCount: Int,
+        onTaskTap: @escaping (HermesKanbanTask) -> Void,
+        onCreate: @escaping () -> Void,
+        onDrop: @escaping (KanbanTaskRef) -> Void,
+        canCreate: Bool,
+        supportsKanbanDiagnostics: Bool = false,
+        effectiveHallucinationGate: @escaping (HermesKanbanTask) -> KanbanHallucinationGate? = { _ in nil }
+    ) {
+        self.column = column
+        self.tasks = tasks
+        self.isLive = isLive
+        self.readyPillCount = readyPillCount
+        self.onTaskTap = onTaskTap
+        self.onCreate = onCreate
+        self.onDrop = onDrop
+        self.canCreate = canCreate
+        self.supportsKanbanDiagnostics = supportsKanbanDiagnostics
+        self.effectiveHallucinationGate = effectiveHallucinationGate
+    }
 
     @State private var isTargeted = false
 
@@ -36,7 +68,11 @@ struct KanbanColumnView: View {
                             .padding(.top, ScarfSpace.s4)
                     } else {
                         ForEach(tasks) { task in
-                            KanbanCardView(task: task) {
+                            KanbanCardView(
+                                task: task,
+                                supportsKanbanDiagnostics: supportsKanbanDiagnostics,
+                                effectiveHallucinationGate: effectiveHallucinationGate
+                            ) {
                                 onTaskTap(task)
                             }
                         }

scarf/scarf/Features/Kanban/Views/KanbanCreateSheet.swift

@@ -14,6 +14,12 @@ struct KanbanCreateSheet: View {
     /// Pre-filled project workspace path on per-project boards. When
     /// non-nil, the workspace picker is locked to "Project Dir".
     let projectWorkspacePath: String?
+    /// True when the connected Hermes is on v0.13+ — gates the
+    /// `--max-retries` field and decides whether to strip newlines from
+    /// the title at submit time. Pre-v0.13 hosts may truncate at the
+    /// first `\n`; we keep the multi-line input rendering on either way
+    /// since a taller `TextField` is harmless on v0.12.
+    let supportsKanbanDiagnostics: Bool
     /// Closure invoked when the user submits — VM owner constructs the
     /// `KanbanService.create` call.
     let onSubmit: (KanbanCreateRequest) async throws -> Void
@@ -33,6 +39,11 @@ struct KanbanCreateSheet: View {
     @State private var skillsInput: String = ""
     @State private var tenant: String = ""
     @State private var sendToTriage: Bool = false
+    /// v0.13: per-task retry budget. Toggle-gated so the user can opt
+    /// into "send the flag" vs. "let Hermes pick its default" (the
+    /// release notes default to 3 — see TODO in KanbanCreateRequest).
+    @State private var maxRetriesEnabled: Bool = false
+    @State private var maxRetries: Int = 3
     @State private var isSubmitting: Bool = false
     @State private var submitError: String?
     @FocusState private var titleFocused: Bool
@@ -62,6 +73,9 @@ struct KanbanCreateSheet: View {
                     assigneePicker
                     workspaceField
                     priorityField
+                    if supportsKanbanDiagnostics {
+                        maxRetriesField
+                    }
                     skillsField
                     if projectWorkspacePath == nil {
                         tenantField
@@ -114,10 +128,60 @@ struct KanbanCreateSheet: View {
     // MARK: - Fields
 
     private var titleField: some View {
+        // v0.13 server tolerates multi-line titles. We keep the
+        // multi-line input rendering on for ALL versions of Hermes —
+        // visually a taller TextField is harmless on v0.12 — and decide
+        // at submit time whether to strip newlines (see `makeRequest`).
         VStack(alignment: .leading, spacing: 4) {
             ScarfSectionHeader("Title")
-            ScarfTextField("What needs doing?", text: $title)
-                .focused($titleFocused)
+            TextField(
+                "What needs doing?",
+                text: $title,
+                axis: .vertical
+            )
+            .lineLimit(1...4)
+            .textFieldStyle(.plain)
+            .scarfStyle(.body)
+            .padding(.horizontal, ScarfSpace.s3)
+            .padding(.vertical, ScarfSpace.s2)
+            .background(
+                RoundedRectangle(cornerRadius: ScarfRadius.md, style: .continuous)
+                    .fill(ScarfColor.backgroundSecondary)
+            )
+            .overlay(
+                RoundedRectangle(cornerRadius: ScarfRadius.md, style: .continuous)
+                    .strokeBorder(ScarfColor.borderStrong, lineWidth: 1)
+            )
+            .focused($titleFocused)
+        }
+    }
+
+    /// v0.13: per-task retry budget. Toggle gates whether `--max-retries`
+    /// is sent at all so the user can preserve "let Hermes pick the
+    /// default" semantics by leaving the toggle off.
+    private var maxRetriesField: some View {
+        VStack(alignment: .leading, spacing: 4) {
+            ScarfSectionHeader(
+                "Max retries",
+                subtitle: "0 = no retries. Defaults to 3."
+            )
+            HStack(spacing: ScarfSpace.s3) {
+                Toggle("Override default", isOn: $maxRetriesEnabled)
+                    .toggleStyle(.switch)
+                    .labelsHidden()
+                Stepper(value: $maxRetries, in: 0...20) {
+                    Text("\(maxRetries)")
+                        .scarfStyle(.bodyEmph)
+                        .frame(minWidth: 24, alignment: .trailing)
+                        .foregroundStyle(
+                            maxRetriesEnabled
+                                ? ScarfColor.foregroundPrimary
+                                : ScarfColor.foregroundFaint
+                        )
+                }
+                .disabled(!maxRetriesEnabled)
+                Spacer()
+            }
         }
     }
 
@@ -307,7 +371,14 @@ struct KanbanCreateSheet: View {
     }
 
     private func makeRequest() -> KanbanCreateRequest {
-        let trimmedTitle = title.trimmingCharacters(in: .whitespacesAndNewlines)
+        var trimmedTitle = title.trimmingCharacters(in: .whitespacesAndNewlines)
+        // Pre-v0.13 hosts may truncate titles at the first `\n`. Strip
+        // newlines client-side when we know the connected Hermes hasn't
+        // shipped multi-line title support — replace with a space to
+        // keep the user's intent visible. v0.13+ keeps newlines verbatim.
+        if !supportsKanbanDiagnostics {
+            trimmedTitle = trimmedTitle.replacingOccurrences(of: "\n", with: " ")
+        }
         let trimmedBody = bodyText.trimmingCharacters(in: .whitespacesAndNewlines)
         let trimmedAssignee = assignee.trimmingCharacters(in: .whitespacesAndNewlines)
         let trimmedTenant = tenant.trimmingCharacters(in: .whitespacesAndNewlines)
@@ -330,6 +401,14 @@ struct KanbanCreateSheet: View {
             }
         }
 
+        // Belt-and-suspenders: the `maxRetriesField` is only rendered
+        // when `supportsKanbanDiagnostics` is true, but gate again here
+        // so a programmatic state change can't smuggle the flag onto a
+        // pre-v0.13 host (where the verb would error).
+        let resolvedMaxRetries: Int? = (supportsKanbanDiagnostics && maxRetriesEnabled)
+            ? maxRetries
+            : nil
+
         return KanbanCreateRequest(
             title: trimmedTitle,
             body: trimmedBody.isEmpty ? nil : trimmedBody,
@@ -342,7 +421,8 @@ struct KanbanCreateSheet: View {
             idempotencyKey: nil,
             maxRuntimeSeconds: nil,
             createdBy: nil,
-            skills: parsedSkills
+            skills: parsedSkills,
+            maxRetries: resolvedMaxRetries
         )
     }
 }

scarf/scarf/Features/Kanban/Views/KanbanInspectorPane.swift

@@ -8,6 +8,16 @@ import ScarfDesign
 struct KanbanInspectorPane: View {
     @State private var viewModel: KanbanTaskDetailViewModel
     let availableAssignees: [HermesKanbanAssignee]
+    /// True when the connected Hermes is on v0.13+ — gates the
+    /// hallucination banner, max_retries chip, diagnostics block,
+    /// and auto-blocked reason banner. Pre-v0.13 hosts see the v2.7.5
+    /// inspector unchanged.
+    let supportsKanbanDiagnostics: Bool
+    /// Resolves an effective hallucination gate — the board VM owns the
+    /// optimistic-override merge so the banner disappears immediately on
+    /// Verify before the polled state confirms the new gate. Falls back
+    /// to the wire-level value when no override is in flight.
+    let effectiveHallucinationGate: (HermesKanbanTask) -> KanbanHallucinationGate?
     let onClose: () -> Void
     let onClaim: () -> Void
     let onComplete: () -> Void
@@ -15,6 +25,8 @@ struct KanbanInspectorPane: View {
     let onUnblock: () -> Void
     let onArchive: () -> Void
     let onReassign: (String?) -> Void
+    let onVerifyHallucination: () -> Void
+    let onRejectHallucination: () -> Void
 
     @State private var selectedTab: DetailTab = .comments
 
@@ -30,16 +42,22 @@ struct KanbanInspectorPane: View {
         service: KanbanService,
         taskId: String,
         availableAssignees: [HermesKanbanAssignee] = [],
+        supportsKanbanDiagnostics: Bool = false,
+        effectiveHallucinationGate: @escaping (HermesKanbanTask) -> KanbanHallucinationGate? = { _ in nil },
         onClose: @escaping () -> Void,
         onClaim: @escaping () -> Void,
         onComplete: @escaping () -> Void,
         onBlock: @escaping () -> Void,
         onUnblock: @escaping () -> Void,
         onArchive: @escaping () -> Void,
-        onReassign: @escaping (String?) -> Void = { _ in }
+        onReassign: @escaping (String?) -> Void = { _ in },
+        onVerifyHallucination: @escaping () -> Void = {},
+        onRejectHallucination: @escaping () -> Void = {}
     ) {
         _viewModel = State(initialValue: KanbanTaskDetailViewModel(service: service, taskId: taskId))
         self.availableAssignees = availableAssignees
+        self.supportsKanbanDiagnostics = supportsKanbanDiagnostics
+        self.effectiveHallucinationGate = effectiveHallucinationGate
         self.onClose = onClose
         self.onClaim = onClaim
         self.onComplete = onComplete
@@ -47,6 +65,8 @@ struct KanbanInspectorPane: View {
         self.onUnblock = onUnblock
         self.onArchive = onArchive
         self.onReassign = onReassign
+        self.onVerifyHallucination = onVerifyHallucination
+        self.onRejectHallucination = onRejectHallucination
     }
 
     var body: some View {
@@ -159,6 +179,16 @@ struct KanbanInspectorPane: View {
                                 ScarfBadge(workspace, kind: .neutral)
                                     .fixedSize()
                             }
+                            // v0.13: max_retries chip. Read-only — Hermes
+                            // has no `update --max-retries` verb. The
+                            // `if let` guards pre-v0.13 hosts (always nil)
+                            // and the explicit capability gate adds
+                            // belt-and-suspenders.
+                            if supportsKanbanDiagnostics, let maxRetries = task.maxRetries {
+                                ScarfBadge("retries: \(maxRetries)", kind: .neutral)
+                                    .fixedSize()
+                                    .help("Max retries set at create time. Hermes has no update verb — re-create the task to change this.")
+                            }
                             if let tenant = task.tenant, !tenant.isEmpty {
                                 ScarfBadge(tenant, kind: .brand)
                                     .fixedSize()
@@ -251,13 +281,18 @@ struct KanbanInspectorPane: View {
     // MARK: - Body
 
     /// Inline health banner shown above the task body when something
-    /// requires user attention. Two conditions trigger today:
-    /// 1. Task is in `ready`/`todo` with no assignee — explains that
-    ///    the dispatcher silently skips unassigned tasks.
-    /// 2. The most recent run ended in a non-success outcome
-    ///    (`stale_lock`/`crashed`/`gave_up`/`timed_out`/`spawn_failed`/
-    ///    `reclaimed`/`failed`) — surfaces the error so the user
-    ///    doesn't have to dig into the Runs tab to discover it.
+    /// requires user attention. Stack vertically (multiple can apply at
+    /// once on a v0.13 task — e.g. unassigned + hallucination pending +
+    /// last-run-blocked).
+    /// Order top-to-bottom:
+    /// 1. **Hallucination gate (v0.13+)** — pending worker-created card.
+    ///    User must verify or reject before any other action makes sense.
+    /// 2. **Auto-blocked reason (v0.13+)** — server-supplied reason
+    ///    overrides the generic "Last run: blocked" banner.
+    /// 3. Task is in `ready`/`todo` with no assignee — explains that the
+    ///    dispatcher silently skips unassigned tasks.
+    /// 4. The most recent run ended in a non-success outcome — surfaces
+    ///    the error so the user doesn't have to dig into the Runs tab.
     @ViewBuilder
     private func healthBanner(for task: HermesKanbanTask) -> some View {
         let status = KanbanStatus.from(task.status)
@@ -292,25 +327,137 @@ struct KanbanInspectorPane: View {
         // Also suppress for `done` (terminal success).
         let suppressFailureBanner = (status == .running) || (status == .done)
 
-        if needsAssignee {
-            bannerRow(
-                icon: "exclamationmark.triangle.fill",
-                tint: ScarfColor.warning,
-                title: "Won't run automatically",
-                message: "Unassigned tasks are silently skipped by Hermes's dispatcher. Add an assignee to get this scheduled."
-            )
-        } else if hadFailedEndedRun, let lastEndedRun, !suppressFailureBanner {
-            let label = (lastEndedRun.outcome ?? lastEndedRun.status).lowercased()
-            let detail = lastEndedRun.error ?? lastEndedRun.summary ?? "no details"
-            bannerRow(
-                icon: "exclamationmark.octagon.fill",
-                tint: ScarfColor.danger,
-                title: "Last run: \(label)",
-                message: detail
-            )
+        // v0.13: hallucination-gate state. Read through the VM's
+        // optimistic-aware accessor so a Verify click takes effect
+        // before the polled state confirms. Belt-and-suspenders gate
+        // on capability flag.
+        let hallucination: KanbanHallucinationGate? = supportsKanbanDiagnostics
+            ? effectiveHallucinationGate(task)
+            : nil
+        // v0.13: structured auto-blocked reason. Renders the server's
+        // string verbatim; takes precedence over the generic "Last run:
+        // blocked" banner.
+        let autoBlockedReason: String? = (supportsKanbanDiagnostics
+                                          && status == .blocked
+                                          && (task.autoBlockedReason?.isEmpty == false))
+            ? task.autoBlockedReason
+            : nil
+        // Suppress the generic last-run banner when the more specific
+        // server-side reason supersedes it.
+        let suppressGenericFailure = autoBlockedReason != nil
+
+        VStack(alignment: .leading, spacing: ScarfSpace.s2) {
+            if hallucination == .pending {
+                hallucinationBanner
+            }
+            if let reason = autoBlockedReason {
+                bannerRow(
+                    icon: "exclamationmark.octagon.fill",
+                    tint: ScarfColor.danger,
+                    title: "Auto-blocked",
+                    // Verbatim — Hermes-side message is the source of truth.
+                    message: reason
+                )
+            }
+            if needsAssignee {
+                bannerRow(
+                    icon: "exclamationmark.triangle.fill",
+                    tint: ScarfColor.warning,
+                    title: "Won't run automatically",
+                    message: "Unassigned tasks are silently skipped by Hermes's dispatcher. Add an assignee to get this scheduled."
+                )
+            }
+            if hadFailedEndedRun, let lastEndedRun,
+               !suppressFailureBanner, !suppressGenericFailure {
+                let label = (lastEndedRun.outcome ?? lastEndedRun.status).lowercased()
+                let detail = lastEndedRun.error ?? lastEndedRun.summary ?? "no details"
+                bannerRow(
+                    icon: "exclamationmark.octagon.fill",
+                    tint: ScarfColor.danger,
+                    title: "Last run: \(label)",
+                    message: detail
+                )
+            }
+            // v0.13: cross-run diagnostics on the task header.
+            if supportsKanbanDiagnostics, !task.diagnostics.isEmpty {
+                diagnosticsBlock(task.diagnostics)
+            }
         }
     }
 
+    /// v0.13 hallucination-gate banner — Verify / Reject affordances for
+    /// worker-created cards waiting on user verification.
+    private var hallucinationBanner: some View {
+        HStack(alignment: .top, spacing: ScarfSpace.s2) {
+            Image(systemName: "questionmark.diamond.fill")
+                .foregroundStyle(ScarfColor.warning)
+                .font(.system(size: 13, weight: .semibold))
+            VStack(alignment: .leading, spacing: 4) {
+                Text("Created by a worker — verify before running")
+                    .scarfStyle(.captionStrong)
+                    .foregroundStyle(ScarfColor.foregroundPrimary)
+                Text("A worker claimed it created this card; Hermes hasn't confirmed the underlying work exists. Verify the card matches a real follow-up, or reject if it's a hallucinated reference.")
+                    .scarfStyle(.caption)
+                    .foregroundStyle(ScarfColor.foregroundMuted)
+                HStack(spacing: ScarfSpace.s2) {
+                    Button("Verify", action: onVerifyHallucination)
+                        .buttonStyle(ScarfPrimaryButton())
+                    Button("Reject", action: onRejectHallucination)
+                        .buttonStyle(ScarfDestructiveButton())
+                }
+                .padding(.top, 2)
+            }
+            Spacer(minLength: 0)
+        }
+        .padding(ScarfSpace.s2)
+        .background(
+            RoundedRectangle(cornerRadius: ScarfRadius.md, style: .continuous)
+                .fill(ScarfColor.warning.opacity(0.10))
+        )
+        .overlay(
+            RoundedRectangle(cornerRadius: ScarfRadius.md, style: .continuous)
+                .strokeBorder(ScarfColor.warning.opacity(0.4), lineWidth: 1)
+        )
+    }
+
+    /// v0.13 diagnostics block — renders a list of distress signals.
+    /// Used both at the task-header level (cross-run signals) and per
+    /// run on the Runs tab (in-flight signals). Wraps in a horizontal
+    /// scroll so a long diag list doesn't blow out inspector width.
+    private func diagnosticsBlock(_ diags: [HermesKanbanDiagnostic]) -> some View {
+        VStack(alignment: .leading, spacing: 4) {
+            Text("Diagnostics")
+                .scarfStyle(.captionUppercase)
+                .foregroundStyle(ScarfColor.foregroundFaint)
+            ScrollView(.horizontal, showsIndicators: false) {
+                HStack(spacing: 4) {
+                    ForEach(diags) { diag in
+                        diagnosticBadge(diag)
+                    }
+                }
+            }
+        }
+        .padding(.top, 4)
+    }
+
+    @ViewBuilder
+    private func diagnosticBadge(_ diag: HermesKanbanDiagnostic) -> some View {
+        let kind = KanbanDiagnosticKind.from(diag.kind)
+        let badgeKind: ScarfBadgeKind = {
+            switch kind.severity {
+            case .danger:  return .danger
+            case .warning: return .warning
+            case .neutral: return .neutral
+            }
+        }()
+        // Render the raw kind string — view code stays in sync with
+        // whatever future kinds Hermes ships. The typed mirror picks
+        // the badge tint and tooltip glyph; the verbatim wire string
+        // is the user-facing label.
+        ScarfBadge(diag.kind, kind: badgeKind)
+            .help(diag.message ?? diag.kind)
+    }
+
     private func bannerRow(
         icon: String,
         tint: Color,
@@ -562,6 +709,9 @@ struct KanbanInspectorPane: View {
     private func runRow(_ run: HermesKanbanRun) -> some View {
         VStack(alignment: .leading, spacing: 2) {
             HStack(spacing: ScarfSpace.s2) {
+                // Render the wire-side outcome / status string verbatim so
+                // v0.13's richer outcome strings ("zombied — reclaimed by
+                // reaper", etc.) surface unchanged.
                 ScarfBadge(run.outcome ?? run.status, kind: outcomeKind(run.outcome ?? run.status))
                 if let profile = run.profile {
                     Text(profile)
@@ -585,6 +735,12 @@ struct KanbanInspectorPane: View {
                     .foregroundStyle(ScarfColor.danger)
                     .frame(maxWidth: .infinity, alignment: .leading)
             }
+            // v0.13: per-run diagnostics. Gated on capability so a future
+            // server-side change can't accidentally surface partial UX
+            // on a pre-v0.13 host.
+            if supportsKanbanDiagnostics, !run.diagnostics.isEmpty {
+                diagnosticsBlock(run.diagnostics)
+            }
         }
         .padding(ScarfSpace.s2)
         .background(
@@ -619,23 +775,32 @@ struct KanbanInspectorPane: View {
     @ViewBuilder
     private var primaryAction: some View {
         if let task = viewModel.detail?.task {
-            switch KanbanStatus.from(task.status) {
-            case .ready, .todo:
-                Button("Start", action: onClaim)
-                    .buttonStyle(ScarfPrimaryButton())
-                    .help("Atomically claim this task and start the worker. Moves it to Running.")
-            case .running:
-                Button("Complete", action: onComplete)
-                    .buttonStyle(ScarfPrimaryButton())
-                    .help("Mark this task as Done. You'll be prompted for an optional result summary.")
-            case .blocked:
-                Button("Unblock", action: onUnblock)
-                    .buttonStyle(ScarfPrimaryButton())
-                    .help("Return this task to the Up Next queue so the dispatcher can pick it up again.")
-            case .triage:
-                EmptyView()
-            default:
+            // v0.13: when the hallucination gate is pending, suppress the
+            // primary action — the banner provides Verify / Reject as the
+            // gate. Showing "Start" alongside the banner would let the
+            // user dispatch a card Hermes hasn't confirmed exists.
+            if supportsKanbanDiagnostics,
+               effectiveHallucinationGate(task) == .pending {
                 EmptyView()
+            } else {
+                switch KanbanStatus.from(task.status) {
+                case .ready, .todo:
+                    Button("Start", action: onClaim)
+                        .buttonStyle(ScarfPrimaryButton())
+                        .help("Atomically claim this task and start the worker. Moves it to Running.")
+                case .running:
+                    Button("Complete", action: onComplete)
+                        .buttonStyle(ScarfPrimaryButton())
+                        .help("Mark this task as Done. You'll be prompted for an optional result summary.")
+                case .blocked:
+                    Button("Unblock", action: onUnblock)
+                        .buttonStyle(ScarfPrimaryButton())
+                        .help("Return this task to the Up Next queue so the dispatcher can pick it up again.")
+                case .triage:
+                    EmptyView()
+                default:
+                    EmptyView()
+                }
             }
         }
     }