diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
new file mode 100644
index 00000000..7af2823e
--- /dev/null
+++ b/.claude-plugin/marketplace.json
@@ -0,0 +1,16 @@
+{
+  "name": "agent360",
+  "owner": { "name": "Agent360", "url": "https://computermcp.dev" },
+  "description": "Computer MCP: macOS computer use you can leave running.",
+  "plugins": [
+    {
+      "name": "computer-mcp",
+      "source": "./plugin",
+      "description": "macOS computer use that stays behind your window, asks before it deletes or sends, refuses password managers, and logs every action.",
+      "version": "0.1.0",
+      "homepage": "https://computermcp.dev",
+      "repository": "https://github.com/Agent360dk/computerMCP",
+      "license": "MIT"
+    }
+  ]
+}
diff --git a/.github/ISSUE_TEMPLATE/bug.yml b/.github/ISSUE_TEMPLATE/bug.yml
new file mode 100644
index 00000000..f8f70ec4
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug.yml
@@ -0,0 +1,35 @@
+name: "Something did not work"
+description: "An agent tried something on your Mac and it failed, or it took your screen when it should not have."
+title: "Bug: <what happened in one line>"
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Nothing is sent from your Mac on its own. Paste only what you are happy to share:
+        the audit log hashes typed text and never stores what was on screen, but app names
+        and window titles are in it.
+  - type: textarea
+    id: what
+    attributes:
+      label: What the agent tried, and what actually happened
+    validations:
+      required: true
+  - type: textarea
+    id: audit
+    attributes:
+      label: The last few lines of the audit log
+      description: "Ask the agent for `computer_audit` with limit 10, or copy from ~/.local/state/computer-mcp/audit.jsonl."
+      render: json
+  - type: textarea
+    id: learning
+    attributes:
+      label: Anything it wrote with computer_learning
+      description: "~/.local/state/computer-mcp/learnings.jsonl - numbers and email addresses are already masked."
+  - type: input
+    id: versions
+    attributes:
+      label: macOS version and computer-mcp version
+      placeholder: "macOS 26.4.1 · computer-mcp 0.2.2"
+    validations:
+      required: true
diff --git a/.github/mutant-giv-tilbage.sh b/.github/mutant-giv-tilbage.sh
index a181830d..d0972378 100644
--- a/.github/mutant-giv-tilbage.sh
+++ b/.github/mutant-giv-tilbage.sh
@@ -5,28 +5,71 @@
 set -u
 fejl=0
 mut() {
-  local navn="$1" fra="$2" til="$3" d="$RUNNER_TEMP/mut-$1"
+  local navn="$1" fra="$2" til="$3" d="$RUNNER_TEMP/mut-$1" maal="${MUT_MAAL:-cmcp-helper}"
   # Uden byggemappen: den baerer faste stier til originalen (koersel 3 kunne ikke bygge).
   mkdir -p "$d" && cp -R helper/Package.swift helper/Sources "$d"/
   [ -f helper/Package.resolved ] && cp helper/Package.resolved "$d"/
-  python3 - "$d/Sources/cmcp-helper/${MUT_FIL:-Skaerm.swift}" "$fra" "$til" <<'PY'
+  # ⛔ 30/9 (Astra R2 7): et anker der ikke fandtes, stoppede ikke noget - scriptet
+  #    byggede den UMUTEREDE kode og kaldte resultatet et bevis. Nu er det en fejl.
+  if ! python3 - "$d/Sources/$maal/${MUT_FIL:-Skaerm.swift}" "$fra" "$til" <<'PY2'
 import sys
 p, a, b = sys.argv[1:4]
 s = open(p).read()
 assert s.count(a) == 1, a
 open(p, 'w').write(s.replace(a, b))
-PY
-  (cd "$d" && swift build -c release 2>&1 | tail -5) ; [ -x "$d/.build/release/cmcp-helper" ] || { echo "::error::$navn kunne ikke bygges"; fejl=1; return; }
-  if CMCP_HELPER="$d/.build/release/cmcp-helper" node test/giv-tilbage.mjs; then
-    echo "::error::mutanten $navn overlevede - proeven maaler ikke"; fejl=1
-  else
-    echo "mutanten $navn er roed"
-  fi
+PY2
+  then echo "::error::$navn: ankeret findes ikke praecis én gang"; fejl=1; return; fi
+  (cd "$d" && swift build -c release 2>&1 | tail -5) ; [ -x "$d/.build/release/$maal" ] || { echo "::error::$navn kunne ikke bygges"; fejl=1; return; }
+  local ud rc
+  ud=$(CMCP_HELPER="$d/.build/release/cmcp-helper" CMCP_STATUS_BIN="$d/.build/release/cmcp-status" node "${PROEVE:-test/giv-tilbage.mjs}" 2>&1); rc=$?
+  # Roed = exit 1 OG en DUMP-linje. Exit 0 = overlevede. Alt andet = instrumentet svarede ikke.
+  if [ $rc -eq 0 ]; then echo "::error::mutanten $navn overlevede - proeven maaler ikke"; fejl=1
+  # Runde 3 (Astra 6): KUN den prove mutanten er skrevet til taeller (FORVENTET), ikke en vilkaarlig anden.
+  # Runde 5 (Astra): hele det forventede praefiks skal staa FORREST paa en DUMP-linje.
+  elif [ $rc -eq 1 ] && printf '%s\n' "$ud" | awk -v p="DUMP ${FORVENTET:-}" 'index($0, p) == 1 { f = 1 } END { exit !f }'; then echo "mutanten $navn er roed ($(printf '%s\n' "$ud" | awk -v p="DUMP ${FORVENTET:-}" 'index($0, p) == 1 { print; exit }' | cut -c1-90))"
+  else echo "::error::$navn: instrumentet svarede ikke (rc=$rc) - det er ikke et bevis"; fejl=1; fi
 }
-mut M1-giver-ikke-tilbage 'NSRunningApplication(processIdentifier: foer.forrestPid)?.activate(options: [])' ''
-mut M2-maaler-ikke 'guard foer.forrestPid > 0, efter.forrestPid != foer.forrestPid else { return ["took_screen": false] }' 'return ["took_screen": false]'
+FORVENTET=2b mut M1-giver-ikke-tilbage 'NSRunningApplication(processIdentifier: foer.forrestPid)?.activate(options: [])' ''
+FORVENTET='2 et tryk' mut M2-maaler-ikke 'guard foer.forrestPid > 0, efter.forrestPid != foer.forrestPid else { return ["took_screen": false] }' 'return ["took_screen": false]'
 # M3: launch giver ikke forgrunden tilbage (main.swift)
-MUT_FIL=main.swift mut M3-launch-giver-ikke-tilbage 'if (g["took_screen"] as? Bool) == true { for (k, v) in g { ls[k] = v } }' 'if false { for (k, v) in g { ls[k] = v } }'
-# M4: kun et skift til maalprogrammet gives tilbage (reglen foer koersel 10)
-mut M4-kun-maalprogrammet 'efter.forrestPid == maal || !menneskeRoerteNetop()' 'efter.forrestPid == maal'
+FORVENTET='3 et program' MUT_FIL=main.swift mut M3-launch-giver-ikke-tilbage 'if (g["took_screen"] as? Bool) == true || g["observed"] != nil { for (k, v) in g { ls[k] = v } }' 'if false { for (k, v) in g { ls[k] = v } }'
+# M4 (28/9): menneske-tjekket maa ikke spurioest blokere give-tilbage. Paa en
+# maskine UDEN menneske skal forgrunden stadig gives tilbage - saa hvis nogen
+# faar menneske-grenen til altid at fyre (og dermed altid lade forgrunden staa),
+# SKAL proeven blive roed.
+FORVENTET=2b mut M4-menneske-tjek-blokerer 'if menneskeRoerteNetop() {' 'if true {'
+# M5-M6 (29/9, panelet): kodeordsfelter faar heller ikke tastetryk fra `type`.
+# M5: fokus-opslaget siger altid «ikke sikkert» -> proeve 3/3k/3b skal blive roed.
+# M6: tjekket kun foer foerste tegn -> fokus der flytter undervejs (3c) skal blive roed.
+FORVENTET='3 et kodeordsfelt' PROEVE=test/skriv-ankommer.mjs MUT_FIL=Accessibility.swift mut M5-type-i-kodeordsfelt \
+  'static func sikkerStatus(_ el: AXUIElement, kendtRolle: String? = nil) -> Bool? {' \
+  'static func sikkerStatus(_ el: AXUIElement, kendtRolle: String? = nil) -> Bool? {
+        if true { return false }'
+FORVENTET=3c PROEVE=test/skriv-ankommer.mjs MUT_FIL=Input.swift mut M6-kun-tjek-ved-start \
+  'if let stop, stop() { return sendt }' 'if let stop, sendt == 0, stop() { return sendt }'
+# M7-M8 (30/9, runde 5): paste stopper foer Cmd+V naar laanet slutter.
+# M7: det foerste stop (foer udklipsholderen roeres) er vaek -> «before anything changed» maa ikke kunne naas.
+FORVENTET='1 SIGUSR1' PROEVE=test/paste-stop.mjs MUT_FIL=Accessibility.swift mut M7-paste-roerer-udklip-foer-stop \
+  '        if pasteStop { return (false, "stopped before anything changed: the screen loan ended", false) }' ''
+# M8: stoppet laeses aldrig -> paste fortsaetter til Cmd+V (kun paa en fremmed maskine).
+FORVENTET='1 SIGUSR1' PROEVE=test/paste-stop.mjs MUT_FIL=Accessibility.swift mut M8-paste-hoerer-ikke-stop \
+  '        return sigismember(&s, SIGUSR1) == 1' '        return false'
+# M9 (30/9, live-proeven): boksen naevner ikke det ventende spoergsmaal -> 3c skal blive roed.
+# 12/10: ankeret flyttet til boksens titel (Tekst.swift) - det gamle forsvandt i 7bc3f41, og ingen saa det,
+# fordi «Fremmed Mac» var annulleret paa hver kandidat siden 9/10 (CI 38230972853 fandt det).
+FORVENTET=3c PROEVE=test/ikon-menu.mjs MUT_MAAL=cmcp-status MUT_FIL=Tekst.swift mut M9-boksen-tier-om-spoergsmaalet \
+  'titel: "\(renTekst(v.klient ?? "An agent")) needs you"' 'titel: "Computer MCP"'
+# M10 (1/10, konsulent-panelet): giv-tilbage river igen ethvert program tilbage -
+# ogsaa et der koerte i forvejen (= mennesket der skiftede skrivebord) -> 4 skal blive roed.
+FORVENTET='4 et program der koerte' mut M10-river-menneskets-skift-tilbage \
+  'if !egen {' 'if false {'
+# M11 (1/10, GitHubs Mac 36863990504 - retarget 36901238860): almindelig skrivning
+# taeller igen som et menneskeligt skift -> et rigtigt tastetryk ville fejlagtigt
+# blokere en legitim tilbagegivelse. Oprindeligt bevist via parallel.mjs's
+# menneske-simulation, som siden skriver via tilgaengeligheds-laget (ingen rigtig
+# keyDown postes der laengere - den mutant blev umaalelig af parallel.mjs selv).
+# giv-tilbage.mjs's sag 5 sender et AEGTE globalt tastetryk med vilje og maaler
+# praecis dette.
+FORVENTET='5 et rigtigt tastetryk' mut M11-skrivning-er-et-skift \
+  '[.flagsChanged, .leftMouseDown' '[.keyDown, .flagsChanged, .leftMouseDown'
 exit $fejl
diff --git a/.github/mutant-porte.py b/.github/mutant-porte.py
new file mode 100644
index 00000000..15128ff6
--- /dev/null
+++ b/.github/mutant-porte.py
@@ -0,0 +1,50 @@
+#!/usr/bin/env python3
+# Mutationsbevis for portene (29/9, B7 - MANDAT: «hver vagt skal kunne blive roed»).
+# Hver mutant i mutanter-porte.json bygger én fejl ind i en vagt; dens proeve SKAL
+# blive roed. Filen gendannes ALTID fra en kopi taget lige foer - aldrig fra git,
+# for filen kan baere ucommittet arbejde (30/9: `git checkout` tog en hel funktion).
+import hashlib, json, os, shutil, subprocess, sys, tempfile
+ROD = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+os.chdir(ROD)
+overlevede, fejl = [], []
+for m in json.load(open('.github/mutanter-porte.json', encoding='utf-8')):
+    orig = open(m['fil'], encoding='utf-8').read()
+    h = hashlib.sha256(orig.encode()).hexdigest()
+    par = m.get('par') or [[m['fra'], m['til']]]
+    tael = [orig.count(a) for a, _ in par]
+    if any(t != 1 for t in tael):
+        fejl.append(f"{m['navn']}: ankrene findes {tael} gange"); continue
+    muteret = orig
+    for a, b in par: muteret = muteret.replace(a, b)
+    try:
+        open(m['fil'], 'w', encoding='utf-8').write(muteret)
+        # 11/10 (diskchatten): hver mutant koerer i sin EGEN midlertidige mappe, som fjernes bagefter.
+        # Mutanten faar proeven til at dumpe med vilje - og en dumpet proeve efterlod sine mapper:
+        # tusindvis pr. port, og disken loeb fuld (Mac'en gik ned 11/10 11.03).
+        tmp = tempfile.mkdtemp(prefix='cmcp-m-', dir='/tmp')
+        try:
+            k = subprocess.run(['node', m['proeve']], capture_output=True, text=True, timeout=600,
+                               env={**os.environ, 'TMPDIR': tmp + '/'})
+            rc, ud = k.returncode, k.stdout
+        except subprocess.TimeoutExpired:
+            rc, ud = 'timeout', ''
+        finally:
+            shutil.rmtree(tmp, ignore_errors=True)
+    finally:
+        open(m['fil'], 'w', encoding='utf-8').write(orig)
+    if hashlib.sha256(open(m['fil'], encoding='utf-8').read().encode()).hexdigest() != h:
+        fejl.append(f"{m['navn']}: {m['fil']} blev IKKE gendannet"); break
+    # ⛔ Runde 1 30/9 (Astra 9): enhver ikke-nul exit talte som «roed» - ogsaa en
+    #    prove der crashede for foerste assertion. Roed = rc 1 OG en DUMP-linje.
+    # ⛔ Runde 2 (Astra 7): en tilfaeldig ANDEN DUMP-linje var ogsaa «bevis». Nu skal
+    #    den prove mutanten er skrevet til (`forventet`), vaere en af de roede.
+    doemt = [l for l in ud.splitlines() if l.startswith('DUMP ' + m.get('forventet', ''))]
+    if rc == 0:
+        overlevede.append(m['navn']); print(f"::error::mutanten {m['navn']} overlevede - {m['proeve']} maaler ikke")
+    elif rc == 1 and doemt:
+        print(f"mutanten {m['navn']} er roed ({m['proeve']}: {doemt[0][:90]})")
+    else:
+        fejl.append(f"{m['navn']}: instrumentet svarede ikke (rc={rc}, {len(doemt)} DUMP-linjer) - det er ikke et bevis")
+for f in fejl: print(f"::error::{f}")
+print(f"{len(overlevede)} overlevede, {len(fejl)} fejl")
+sys.exit(1 if overlevede or fejl else 0)
diff --git a/.github/mutanter-porte.json b/.github/mutanter-porte.json
new file mode 100644
index 00000000..146548e2
--- /dev/null
+++ b/.github/mutanter-porte.json
@@ -0,0 +1,2790 @@
+[
+ {
+  "navn": "S2-tekst-klippet",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "text: helTekst, scope: kort(scope)",
+    "text: helTekst.slice(0, 200), scope: kort(scope)"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "A14"
+ },
+ {
+  "navn": "S2-intet-loft",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "  if (n > TEKST_LOFT) return `the action is",
+    "  if (false) return `the action is"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "A15"
+ },
+ {
+  "navn": "S3-venter-haenger",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "      venter = false;\n      clearTimeout(ur);",
+    "      clearTimeout(ur);"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "AG"
+ },
+ {
+  "navn": "S3-buffer-overskrevet",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "      buf += d;\n      const i = buf.indexOf('\\n');\n      if (i < 0) return;\n      let m = null;",
+    "      buf = String(d);\n      const i = buf.indexOf('\\n');\n      if (i < 0) return;\n      let m = null;"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "F3"
+ },
+ {
+  "navn": "S3-lukket-er-ja",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "sock.on('close', () => slut({ ok: false,",
+    "sock.on('close', () => slut({ ok: true,"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "F1"
+ },
+ {
+  "navn": "B3-done-overalt",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "m.verified === 'done' && kind === 'goer-selv'",
+    "m.verified === 'done'"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "E3"
+ },
+ {
+  "navn": "B3-modellen-skriver-hvor",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "          target: hvorIkon, targetBundle: bid",
+    "          target: String(args.message).slice(0, 80), targetBundle: bid"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "E1"
+ },
+ {
+  "navn": "R1-boks-efter-nej",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "      if (!svar.ikkeKoerer) {\n        if (svar.ok && nytSessionsProgram",
+    "      if (!svar.ikkeSpurgt) {\n        if (svar.ok && nytSessionsProgram"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "G1"
+ },
+ {
+  "navn": "B4-spoerger-ikke",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "               || !!sende,",
+    "               || false,"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "a send-knappen"
+ },
+ {
+  "navn": "B4-return-er-ikke-send",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "  if (tast === 'return' || tast === 'enter') return slags === 'chat' || mods.has('cmd') || mods.has('ctrl');",
+    ""
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "b «return»"
+ },
+ {
+  "navn": "B4-linjeskift-slipper",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if (name === 'computer_type' && slags === 'chat' && /[\\p{Cc}\\p{Zl}\\p{Zp}]/u.test(String(args.text ?? '').replace(/\\t/g, ''))) {",
+    "  if (false) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "c linjeskift"
+ },
+ {
+  "navn": "B4-modellen-skriver-modtager",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  const hvem = [...(sam.recipient ? [sam.recipient] : (sam.headings || []))]",
+    "  const hvem = [String(args.contains || ''), ...(sam.recipient ? [sam.recipient] : (sam.headings || []))]"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "d en falsk modtager"
+ },
+ {
+  "navn": "R4-genkontrol-kun-ved-send",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    if (beskedSlags(targetBundleId)) {\n      const igen",
+    "    if (sende?.describe) {\n      const igen"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r4"
+ },
+ {
+  "navn": "R5-svagt-fingeraftryk",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  const fp = JSON.stringify({ w: sam.window || '', h: sam.headings || [], r: sam.recipient || '', v: felt.value, c: !!sam.column });",
+    "  const fp = JSON.stringify({ v: felt.value });"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r5b"
+ },
+ {
+  "navn": "R5-ulaeseligt-spoerges",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if (!hvem.length || !tekst) {",
+    "  if (false) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "u ulaeselig"
+ },
+ {
+  "navn": "R6-navnloes-er-ikke-send",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    " : (!rolle || /^AX(Button|Image|Group|Unknown|Link)$/.test(String(rolle)));",
+    " : false;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r6 en navnloes"
+ },
+ {
+  "navn": "R6-danske-ord",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "(send|resend|sende|afsend|indsend|reply|svar|besvar|",
+    "(send|resend|sende|indsend|reply|svar|"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r6 «Afsend»"
+ },
+ {
+  "navn": "R6-webchat-overset",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    slags = titler.some(x => !x || WEBCHAT.test(x)) ? 'chat' : titler.some(x => WEBMAIL.test(x)) ? 'mail' : null;",
+    "    slags = titler.some(x => !x) ? 'chat' : null;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r6 Return i WhatsApp Web"
+ },
+ {
+  "navn": "R7-mail-return-er-send",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "  if (tast === 'return' || tast === 'enter') return slags === 'chat' || mods.has('cmd') || mods.has('ctrl');",
+    "  if (tast === 'return' || tast === 'enter') return true;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r7 Return i mail"
+ },
+ {
+  "navn": "B2-laan-virker-ikke",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "  if (v === '') return !laanAktivt();",
+    "  if (v === '') return true;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "3 ...og move tilbydes nu"
+ },
+ {
+  "navn": "B2-tilbagetagning-ignoreret",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (nr !== laanNr) return;\n      saetLaan(0); laanHaandtag = null;",
+    "      if (nr !== laanNr) return;\n      laanHaandtag = null;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6 skaermen taget tilbage"
+ },
+ {
+  "navn": "B2-loft-ignoreret",
+  "fil": "mcp-server/policy.js",
+  "par": [
+   [
+    "  return v !== '' && !['0', 'false', 'no', 'off', 'nej', 'fra'].includes(v);\n}",
+    "  return false;\n}"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "11"
+ },
+ {
+  "navn": "B2-ikonets-ur-ignoreret",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "        const til = Math.min(vores, Number(m.until) > 0 ? Number(m.until) : vores);",
+    "        const til = vores;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "7 laanet udloeb"
+ },
+ {
+  "navn": "R8-kun-skaermkald",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    if (laanAktivt()) {\n      let m = null;",
+    "    if (laanAktivt() && tagerSkaermen(name, args)) {\n      let m = null;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "5c"
+ },
+ {
+  "navn": "R8-egen-input",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (idle < Math.min(graense, sidenEgen)) {",
+    "      if (idle < graense) {"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "5d"
+ },
+ {
+  "navn": "B5-menneske-ignoreret",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (idle < Math.min(graense, sidenEgen)) {",
+    "      if (false) {"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "5 mennesket bruger"
+ },
+ {
+  "navn": "R13-oprindelig-fejl",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (nr !== laanNr) return;",
+    "      if (!laanHaandtag && !laanAktivt()) return;"
+   ],
+   [
+    "  const t = setTimeout(() => { if (nr === laanNr && !laanAktivt()) laanHaandtag?.(); }",
+    "  const t = setTimeout(() => { if (!laanAktivt()) { const h = laanHaandtag; laanHaandtag = null; h?.(); } }"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "7b"
+ },
+ {
+  "navn": "B6-osascript-overset",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  [/^Bash\\([^)]*osascript/i,",
+    "  [/^INGEN-osascript/i,"
+   ]
+  ],
+  "proeve": "test/omveje.mjs",
+  "forventet": "1 osascript"
+ },
+ {
+  "navn": "B6-alt-naevnes",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (hvorfor) fundet.push(",
+    "      if (true) fundet.push("
+   ]
+  ],
+  "proeve": "test/omveje.mjs",
+  "forventet": "4 harmloese"
+ },
+ {
+  "navn": "R15-skaller-overset",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  [/^Bash\\((\\/[\\w/.-]*\\/)?(ba|z|k|c|da|fi|tc)?sh(\\s|:|\\)|$)/,",
+    "  [/^INGEN-skal/,"
+   ]
+  ],
+  "proeve": "test/omveje.mjs",
+  "forventet": "4b"
+ },
+ {
+  "navn": "S2-ombryd-taber-tegn",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "            linjer.append(String(ord.prefix(bredde)))\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ombryd.mjs",
+  "forventet": "1 ord laengere"
+ },
+ {
+  "navn": "Q1-ingen-binding",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "        if (laanOejeblik() !== laanVedDom) {",
+    "        if (false) {"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6b"
+ },
+ {
+  "navn": "Q1-stille-draebes-ikke",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "    if (OPSLAG.has(argv[0]) || argv.includes('--dry')) continue;",
+    "    if (OPSLAG.has(argv[0]) || argv.includes('--dry') || argv.includes('--app')) continue;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6d"
+ },
+ {
+  "navn": "Q1-oprindelig-nummerfejl",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  let nr = null, lukketFoerStart = false;",
+    "  let nr = ++laanNr, lukketFoerStart = false;"
+   ],
+   [
+    "  nr = ++laanNr; laanAfgivet = false;",
+    "  laanAfgivet = false;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6e ...og naar"
+ },
+ {
+  "navn": "Q6-pause-efter-ikon",
+  "fil": "mcp-server/godkend.js",
+  "par": [
+   [
+    "  const nej = forhaandsNej(sp.text);\n  if (nej) return",
+    "  const nej = forhaandsNej(sp.text);\n  if (false) return"
+   ]
+  ],
+  "proeve": "test/ikon-godkend.mjs",
+  "forventet": "G3a"
+ },
+ {
+  "navn": "Q3-kolonne-ikke-krævet",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if (hvem.length && sam.column !== true) {",
+    "  if (false) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 uden kolonne"
+ },
+ {
+  "navn": "Q3-soegefelt-godtaget",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "&& felt.subrole !== 'AXSearchField';",
+    "&& true;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 et soegefelt"
+ },
+ {
+  "navn": "Q3-andet-vindue-godtaget",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if (knapVindue && sam.window && knapVindue !== sam.window) {",
+    "  if (false) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 Send-knappen ligger"
+ },
+ {
+  "navn": "Q3-alle-overskrifter-som-modtager",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    `To (read from the screen, above the text field): ${hvem[0]}`,",
+    "    `To (read from the screen, above the text field): ${hvem.join(' - ')}`,"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 kun den foerste"
+ },
+ {
+  "navn": "Q4-ulaeselig-titel-er-ikke-chat",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    slags = titler.some(x => !x || WEBCHAT.test(x)) ? 'chat' : titler.some(x => WEBMAIL.test(x)) ? 'mail' : null;",
+    "    slags = titler.some(x => x && WEBCHAT.test(x)) ? 'chat' : titler.some(x => WEBMAIL.test(x)) ? 'mail' : null;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q4 browser med ulaeselig"
+ },
+ {
+  "navn": "Q4-mail-foer-chat",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    slags = titler.some(x => !x || WEBCHAT.test(x)) ? 'chat' : titler.some(x => WEBMAIL.test(x)) ? 'mail' : null;",
+    "    slags = titler.some(x => WEBMAIL.test(x)) ? 'mail' : titler.some(x => !x || WEBCHAT.test(x)) ? 'chat' : null;"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q4 «Gmail - Slack»"
+ },
+ {
+  "navn": "Q9-navnloes-gruppe-er-send",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  return !rolle || /^AX(Button|Image|Unknown)$/.test(String(rolle));",
+    "  return !rolle || /^AX(Button|Image|Unknown|Group)$/.test(String(rolle));"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q9 klik paa en navnloes gruppe"
+ },
+ {
+  "navn": "Q8-sudo-overset",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  [/^Bash\\((\\/[\\w/.-]*\\/)?(sudo|doas)(\\s*\\*|:\\*|\\s+(\\/\\S*\\/)?((ba|z|k|c|da|fi|tc)?sh|python\\d*|node|ruby|perl|osascript|open)\\b)/,",
+    "  [/^INGEN-sudo/,"
+   ]
+  ],
+  "proeve": "test/omveje.mjs",
+  "forventet": "4d"
+ },
+ {
+  "navn": "R3-kontrol-uden-vindue",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    if (!knapVindue || !sam.window || !sammeRaekke) {",
+    "    if (!sammeRaekke) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 Send-knappens vindue kan ikke"
+ },
+ {
+  "navn": "R3-kontrol-ikke-ved-feltet",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    if (!knapVindue || !sam.window || !sammeRaekke) {",
+    "    if (!knapVindue || !sam.window) {"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q3 Send-knappen ligger ikke ved"
+ },
+ {
+  "navn": "R3-ukendt-rolle-ufarlig",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  return !rolle || /^AX(Button|Image|Unknown)$/.test(String(rolle));",
+    "  return /^AX(Button|Image)$/.test(String(rolle));"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "q9 klik paa et element med ukendt"
+ },
+ {
+  "navn": "R4-ax-flytter-stempel",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "POSTER_INPUT.has(name) && res.__postedeInput !== false) sidsteEgenHandling",
+    "POSTER_INPUT.has(name)) sidsteEgenHandling"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "5e"
+ },
+ {
+  "navn": "R4-kun-lodret-raekke",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "\n                        && k.x >= f.x - 16 && k.x <= f.x + f.w + 160;",
+    ";"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r4a"
+ },
+ {
+  "navn": "R4-opslagsfejl-springer-binding",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    erKontrol = true;\n    const k = await kontrol();",
+    "    const k = await kontrol();\n    erKontrol = !!(k && !k.fejl);"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r4e"
+ },
+ {
+  "navn": "R4-browser-kun-fokus-titel",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    const titler = [String(t.window || '').trim(), ...(k ? [k.fejl ? '' : String(k.vindue || '').trim()] : [])];",
+    "    const titler = [String(t.window || '').trim()];"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r4c"
+ },
+ {
+  "navn": "R4-paste-undtaget",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "    if (OPSLAG.has(argv[0]) || argv.includes('--dry')) continue;",
+    "    if (OPSLAG.has(argv[0]) || argv.includes('--dry') || argv[0] === 'paste') continue;"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6f"
+ },
+ {
+  "navn": "R5-nul-binding-skjuler-laan",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  const laanVedDom = laanOejeblik();",
+    "  const laanVedDom = laanAktivt() ? laanNr : 0;"
+   ],
+   [
+    "        if (laanOejeblik() !== laanVedDom) {",
+    "        if ((laanAktivt() ? laanNr : 0) !== laanVedDom) {"
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "6g"
+ },
+ {
+  "navn": "R5-ulaeseligt-kontrolvindue-ignoreres",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    const titler = [String(t.window || '').trim(), ...(k ? [k.fejl ? '' : String(k.vindue || '').trim()] : [])];",
+    "    const titler = [String(t.window || '').trim(), ...(k?.fejl ? [''] : k?.vindue ? [String(k.vindue).trim()] : [])];"
+   ]
+  ],
+  "proeve": "test/sende-port.mjs",
+  "forventet": "r4d"
+ },
+ {
+  "navn": "Q10-praecise-kommandoer-taeller",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      if (arg !== null && r !== 'Bash' && !/\\*/.test(arg) && !/(^|\\s)-$/.test(arg.trim())) continue;",
+    "      if (false) continue;"
+   ]
+  ],
+  "proeve": "test/omveje.mjs",
+  "forventet": "4f"
+ },
+ {
+  "navn": "Q11-menu-genvej-overset",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/menu-genvej.mjs",
+  "forventet": "2 et punkt med Cmd+Q",
+  "par": [
+   [
+    "    return !!p.shortcut && tastSerFarlig(p.shortcut);",
+    "    return false;"
+   ]
+  ]
+ },
+ {
+  "navn": "Q12-menu-ukendt-aabner",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/menu-genvej.mjs",
+  "forventet": "3 et punkt der ikke kan",
+  "par": [
+   [
+    "    if (!p) return true;",
+    "    if (!p) return false;"
+   ]
+  ]
+ },
+ {
+  "navn": "Q13-lukke-ord-vaek",
+  "fil": "mcp-server/policy.js",
+  "proeve": "test/claims.mjs",
+  "forventet": "11. farlige menustier",
+  "par": [
+   [
+    "  return FARLIGE_MENUORD.some(o => p.includes(o)) || LUKKE_ORD.test(p);",
+    "  return FARLIGE_MENUORD.some(o => p.includes(o));"
+   ]
+  ]
+ },
+ {
+  "navn": "Q14-tilbagerykning-overset",
+  "fil": "test/forrest-log.mjs",
+  "proeve": "test/forrest-log-kalibrering.mjs",
+  "forventet": "10 rød",
+  "par": [
+   [
+    "    if (s.aarsag === 'SetFrontProcess' && forrige",
+    "    if (false && s.aarsag === 'SetFrontProcess' && forrige"
+   ]
+  ]
+ },
+ {
+  "navn": "Q15-agent-forrest-overset",
+  "fil": "test/forrest-log.mjs",
+  "proeve": "test/forrest-log-kalibrering.mjs",
+  "forventet": "5 rød",
+  "par": [
+   [
+    "    if (agentPid(s.pid) && s.aarsag !== 'SetManagedDisplayCurrentSpace')",
+    "    if (false)"
+   ]
+  ]
+ },
+ {
+  "navn": "Q16-mennesket-er-agent",
+  "fil": "test/forrest-log.mjs",
+  "proeve": "test/forrest-log-kalibrering.mjs",
+  "forventet": "15 grøn",
+  "par": [
+   [
+    "    if (agentPid(s.pid) && s.aarsag !== 'SetManagedDisplayCurrentSpace')",
+    "    if (s.aarsag === 'SetManagedDisplayCurrentSpace')"
+   ]
+  ]
+ },
+ {
+  "navn": "Q17-launch-slaar-ikke-op",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/launch-lukket.mjs",
+  "forventet": "1 et lukket",
+  "par": [
+   [
+    "        targetBundleId = r.bundleId || null;",
+    "        targetBundleId = null;"
+   ]
+  ]
+ },
+ {
+  "navn": "Q18-doer-sti-smugles",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/doer.mjs",
+  "forventet": "4 et forsoeg",
+  "par": [
+   [
+    "        if (!/^[0-9A-Za-z]{22}$/.test(id)) return errorResult(",
+    "        if (false) return errorResult("
+   ]
+  ]
+ },
+ {
+  "navn": "Q19-laering-nummer-slipper",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/laering.mjs",
+  "forventet": "2b et telefonnummer",
+  "par": [
+   [
+    "    .replace(/\\+?\\d[\\d ,.\\-]{4,}\\d/g, '[number]')\n",
+    "\n"
+   ]
+  ]
+ },
+ {
+  "navn": "Q20-quit-spoerger-ikke",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/claims-offline.mjs",
+  "forventet": "quit spoerger",
+  "par": [
+   [
+    "               || name === 'computer_quit'\n",
+    "\n"
+   ]
+  ]
+ },
+ {
+  "navn": "Q21-luk-vindue-spoerger-ikke",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/claims-offline.mjs",
+  "forventet": "at lukke et vindue",
+  "par": [
+   [
+    "               || (name === 'computer_window' && args.button === 'close')\n",
+    "\n"
+   ]
+  ]
+ },
+ {
+  "navn": "Q22-optagelse-spoerger-ikke",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/optagelse.mjs",
+  "forventet": "2 start spoerger",
+  "par": [
+   [
+    "               || optagStart\n",
+    "\n"
+   ]
+  ]
+ },
+ {
+  "navn": "Q23-kaede-brud-overset",
+  "fil": "mcp-server/audit.js",
+  "proeve": "test/audit-chain.mjs",
+  "forventet": "en AENDRET linje",
+  "par": [
+   [
+    "      ok: aegte.length === 0 && !haleFjernet, checked: tjekket,",
+    "      ok: true, checked: tjekket,"
+   ]
+  ]
+ },
+ {
+  "navn": "Q24-modtager-overses",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/sende-port.mjs",
+  "forventet": "w1 modtageren",
+  "par": [
+   [
+    "  const hvem = [...(sam.recipient ? [sam.recipient] : (sam.headings || []))]",
+    "  const hvem = [...(sam.headings || [])]"
+   ]
+  ]
+ },
+ {
+  "navn": "Q25-slet-knap-spoerger-ikke",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "1 en knap der hedder",
+  "par": [
+   [
+    "        alwaysAsk: menuFarlig || knapFarlig",
+    "        alwaysAsk: menuFarlig"
+   ]
+  ]
+ },
+ {
+  "navn": "Q26-klik-fejler-aabent",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "6 intet fundet",
+  "par": [
+   [
+    "      if (!d?.found) return true;",
+    "      if (!d?.found) return false;"
+   ]
+  ]
+ },
+ {
+  "navn": "Q27-tryk-fejler-aabent",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "11 dry-run finder intet",
+  "par": [
+   [
+    "    if (!el) return { afvis: 'Refused: what would be pressed could not be determined. Nothing was pressed, and nobody was asked.', grund: 'press: target unknown' };",
+    "    if (!el) return { farlig: false };"
+   ]
+  ]
+ },
+ {
+  "navn": "Q28-toerkoersel-fejler-aabent",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "12 selve toerkoerslen fejler",
+  "par": [
+   [
+    "    return { afvis: `Refused: what would be pressed could not be determined (${err?.message || 'unknown error'}). Nothing was pressed, and nobody was asked.`, grund: 'press: lookup failed' };",
+    "    return { farlig: false };"
+   ]
+  ]
+ },
+ {
+  "navn": "Q29-umuligt-tryk-spoerger-igen",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "13 not-found",
+  "par": [
+   [
+    "    if (err instanceof HelperError && (err.code === 'not-found' || err.code === 'ambiguous')) {",
+    "    if (false && err instanceof HelperError && (err.code === 'not-found' || err.code === 'ambiguous')) {"
+   ]
+  ]
+ },
+ {
+  "navn": "Q30-ukendt-ejer-spoerger-igen",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "15 klik uden app",
+  "par": [
+   [
+    "    if (ejerUkendt && currentMode() !== 'readonly') {",
+    "    if (false && ejerUkendt && currentMode() !== 'readonly') {"
+   ]
+  ]
+ },
+ {
+  "navn": "Q31-sende-port-foer-readonly",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/readonly-foerst.mjs",
+  "forventet": "computer_press i readonly",
+  "par": [
+   [
+    "  const sende = (effektivTier === TIER.READ || kunLaes) ? null : await sendeDom(name, args, targetBundleId);",
+    "  const sende = effektivTier === TIER.READ ? null : await sendeDom(name, args, targetBundleId);"
+   ]
+  ]
+ },
+ {
+  "navn": "P1-maaling-fjernet-fra-loglinjen",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "1 ja: maalingen staar",
+  "par": [
+   [
+    "    ...(verdict.asker === 'menubar' ? { asker: 'menubar', presence: tagMaaling() } : {}),\n    decision: verdict.allow",
+    "    ...(verdict.asker === 'menubar' ? { asker: 'menubar' } : {}),\n    decision: verdict.allow"
+   ]
+  ]
+ },
+ {
+  "navn": "P2-slut-idle-springes-over",
+  "fil": "mcp-server/tilstede.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "2 udloeb",
+  "par": [
+   [
+    "    const slut = besvaretJa ? 'answered' : await loft(idleNu(), 1500, 'unreadable');",
+    "    const slut = 'answered';"
+   ]
+  ]
+ },
+ {
+  "navn": "P3-ulaeselig-bliver-nul",
+  "fil": "mcp-server/tilstede.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "3 ulaeselig",
+  "par": [
+   [
+    "    return Number.isFinite(v) && v >= 0 ? Math.round(v * 10) / 10 : 'unreadable';",
+    "    return Number.isFinite(v) && v >= 0 ? Math.round(v * 10) / 10 : 0;"
+   ]
+  ]
+ },
+ {
+  "navn": "P4-laanet-uden-maaling",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "6 skaermlaan",
+  "par": [
+   [
+    "decision, asked, ...(asked ? { asker: 'menubar', presence: tagMaaling() } : {}), reason });",
+    "decision, asked, ...(asked ? { asker: 'menubar' } : {}), reason });"
+   ]
+  ]
+ },
+ {
+  "navn": "M1-modul-mangler-i-pakken",
+  "fil": "mcp-server/package.json",
+  "proeve": "test/pakke-filer.mjs",
+  "forventet": "hver fil index.js importerer",
+  "par": [
+   [
+    "    \"tilstede.js\",\n",
+    ""
+   ]
+  ]
+ },
+ {
+  "navn": "D1-venter-ikke-paa-pause",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "D1 mennesket holder pause",
+  "par": [
+   [
+    "        if (laanAktivt()) await ventPaaStilhed(laanVedDom);\n",
+    ""
+   ]
+  ]
+ },
+ {
+  "navn": "D3-ventetiden-uden-loft",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "D3 mennesket bliver ved",
+  "par": [
+   [
+    "    const slut = Date.now() + 5000;\n    while (laanAktivt() && laanOejeblik() === vedDom && Date.now() < slut) {",
+    "    const slut = Date.now() + 12000;\n    while (laanAktivt() && laanOejeblik() === vedDom && Date.now() < slut) {"
+   ]
+  ]
+ },
+ {
+  "navn": "E1-gh-fejl-bliver-ikke-koert",
+  "fil": "scripts/release.sh",
+  "proeve": "test/release-fejlmatrix.mjs",
+  "forventet": "S1 gh fejler",
+  "par": [
+   [
+    "if ! CIDOM=$(gh run list",
+    "if false && ! CIDOM=$(gh run list"
+   ]
+  ]
+ },
+ {
+  "navn": "E2-lsremote-fejl-bliver-ledigt",
+  "fil": "scripts/release.sh",
+  "proeve": "test/release-fejlmatrix.mjs",
+  "forventet": "S2 ls-remote fejler",
+  "par": [
+   [
+    "  *) echo \"⛔ GitHub kunne ikke spoerges om maerket",
+    "  *) FJERN_TAG=\"\" ;;\n  zz) echo \"⛔ GitHub kunne ikke spoerges om maerket"
+   ]
+  ]
+ },
+ {
+  "navn": "E3-faelden-armeret-gennem-deprecate",
+  "fil": "scripts/release.sh",
+  "proeve": "test/release-fejlmatrix.mjs",
+  "forventet": "S3 publish lykkedes",
+  "par": [
+   [
+    "( cd mcp-server && npm publish --access public )\n# ⛔ 7/10 (panel R2+R8, E): faelden stod armeret gennem deprecate.",
+    "( cd mcp-server && npm publish --access public )\n# (mutant: ingen afvaebning her)"
+   ],
+   [
+    "trap - EXIT\n# ⛔ 25/9 (fyld-tjek)",
+    "# ⛔ 25/9 (fyld-tjek)"
+   ]
+  ]
+ },
+ {
+  "navn": "E4-reservelinjen-kan-ikke-koeres",
+  "fil": "scripts/release.sh",
+  "proeve": "test/release-fejlmatrix.mjs",
+  "forventet": "S4 deprecate fejler",
+  "par": [
+   [
+    "       printf \"     npm deprecate '%s' '%s'\\n\" \"@agent360/computer-mcp@$SAARBAR\" \"$DEPR_BESKED\"; }",
+    "       echo \"     npm deprecate @agent360/computer-mcp@$SAARBAR \\\"...\\\"\"; }"
+   ]
+  ]
+ },
+ {
+  "navn": "E5-login-fejl-fortsaetter",
+  "fil": "tools/faerdiggoer-udgivelsen.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F2 login fejler",
+  "par": [
+   [
+    "  $PUB login github || { echo \"⛔ login til registret fejlede - intet er sendt til registret. Koer scriptet igen.\"; exit 1; }",
+    "  $PUB login github || echo \"login fejlede\""
+   ]
+  ]
+ },
+ {
+  "navn": "E6-tom-liste-er-findes",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F8 tom PR-liste",
+  "par": [
+   [
+    ".[0] | select(. != null) | \"\\(.number) \\(.state)\"",
+    ".[0] | \"\\(.number) \\(.state)\""
+   ]
+  ]
+ },
+ {
+  "navn": "E7-synkronisering-springes-over",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F6 halv synkronisering",
+  "par": [
+   [
+    "  #    en halv rettelse, som næste kørsel committede (kun PUBLICERET, forbeholdet stadig på siden).\n  goer python3 scripts/sync-tal.py\n",
+    "  #    en halv rettelse, som næste kørsel committede (kun PUBLICERET, forbeholdet stadig på siden).\n"
+   ]
+  ]
+ },
+ {
+  "navn": "E8-npm-readme-tabes",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F3 ...grenen hedder",
+  "par": [
+   [
+    "FILER=\"PUBLICERET README.md docs mcp-server/README.md server.json ",
+    "FILER=\"PUBLICERET README.md docs server.json "
+   ]
+  ]
+ },
+ {
+  "navn": "K1-plugin-peger-paa-latest",
+  "fil": "plugin/.claude-plugin/plugin.json",
+  "proeve": "test/plugin-manifest.mjs",
+  "forventet": "serveren startes med npx",
+  "par": [
+   [
+    "\"-y\", \"@agent360/computer-mcp@",
+    "\"-y\", \"@agent360/computer-mcp@latest-"
+   ]
+  ]
+ },
+ {
+  "navn": "F1-proeve-uden-egen-tilstand",
+  "fil": "test/knap-ord.mjs",
+  "proeve": "test/tilstand-isoleret.mjs",
+  "forventet": "hver serverstartende proeve",
+  "par": [
+   [
+    "import './egen-tilstand.mjs';\n",
+    ""
+   ]
+  ]
+ },
+ {
+  "navn": "F2-proeve-kan-ramme-menneskets-ikon",
+  "fil": "test/egen-tilstand.mjs",
+  "proeve": "test/tilstand-isoleret.mjs",
+  "forventet": "egen-tilstand.mjs slaar ogsaa",
+  "par": [
+   [
+    "if (process.env.CMCP_STATUS_IKON === undefined) process.env.CMCP_STATUS_IKON = '0';",
+    ""
+   ]
+  ]
+ },
+ {
+  "navn": "H1-alle-tryk-farlige",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/claims.mjs",
+  "forventet": "5b. harmloest program",
+  "par": [
+   [
+    "name === 'computer_press' ? !!trykDom?.farlig",
+    "name === 'computer_press' ? true"
+   ]
+  ]
+ },
+ {
+  "navn": "H2-terminal-spoerger-ikke",
+  "fil": "mcp-server/policy.js",
+  "proeve": "test/claims.mjs",
+  "forventet": "5. press bedoemmes",
+  "par": [
+   [
+    "  const nytSessionsProgram = targetBundleId\n    && SPOERG_PR_SESSION.has(targetBundleId)",
+    "  const nytSessionsProgram = targetBundleId\n    && false && SPOERG_PR_SESSION.has(targetBundleId)"
+   ]
+  ]
+ },
+ {
+  "navn": "I1-ukendt-ejer-klikker-efter-ja",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/klik-ejer.mjs",
+  "forventet": "9a ukendt ejer ved vurderingen",
+  "par": [
+   [
+    "    if (ejerUkendt && currentMode() !== 'readonly') {",
+    "    if (false && ejerUkendt && currentMode() !== 'readonly') {"
+   ]
+  ]
+ },
+ {
+  "navn": "K33-tryk-naar-ikke-koeen",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/claims.mjs",
+  "forventet": "33. de tre afviste handlinger",
+  "par": [
+   [
+    "    if (verdict.koe) {\n      noterVentende(",
+    "    if (verdict.koe && name !== 'computer_press') {\n      noterVentende("
+   ]
+  ]
+ },
+ {
+  "navn": "H3-attrap-sender-opslag-videre",
+  "fil": "test/falsk-hjaelper.mjs",
+  "proeve": "test/attrap-faste-opslag.mjs",
+  "forventet": "standard: apps svarer fast",
+  "par": [
+   [
+    "const FASTE = ${aegteOpslag ? 'null' : JSON.stringify(FASTE_OPSLAG)};",
+    "const FASTE = null;"
+   ]
+  ]
+ },
+ {
+  "navn": "H4-aegte-opslag-ignoreres",
+  "fil": "test/falsk-hjaelper.mjs",
+  "proeve": "test/attrap-faste-opslag.mjs",
+  "forventet": "aegteOpslag: apps kommer",
+  "par": [
+   [
+    "const FASTE = ${aegteOpslag ? 'null' : JSON.stringify(FASTE_OPSLAG)};",
+    "const FASTE = ${false ? 'null' : JSON.stringify(FASTE_OPSLAG)};"
+   ]
+  ]
+ },
+ {
+  "navn": "L1-readme-uddrag-redigeret",
+  "fil": "README.md",
+  "proeve": "test/readme-log.mjs",
+  "forventet": "hver linje i uddraget staar byte for byte",
+  "par": [
+   [
+    "\"decision\":\"denied\",\"asked\":true,",
+    "\"decision\":\"allowed\",\"asked\":true,"
+   ]
+  ]
+ },
+ {
+  "navn": "L2-loggen-redigeret",
+  "fil": "test/fixtures/audit-readme.jsonl",
+  "proeve": "test/readme-log.mjs",
+  "forventet": "loggens kaede holder",
+  "par": [
+   [
+    "\"reason\":\"read-only action\"",
+    "\"reason\":\"read-only action.\""
+   ]
+  ]
+ },
+ {
+  "navn": "S1-lyd-ved-genlevering",
+  "fil": "helper/Sources/cmcp-status/Lyd.swift",
+  "proeve": "test/ikon-lyd.mjs",
+  "forventet": "2 samme spoergsmaal leveret igen",
+  "par": [
+   [
+    "guard til, !lukket, !besvaret, !hoerte.contains(nonce) else { return false }",
+    "guard til, !lukket, !besvaret else { return false }"
+   ]
+  ]
+ },
+ {
+  "navn": "S2-lyd-ved-udloeb",
+  "fil": "helper/Sources/cmcp-status/Lyd.swift",
+  "proeve": "test/ikon-lyd.mjs",
+  "forventet": "3 udloebet",
+  "par": [
+   [
+    "guard til, !lukket, !besvaret, !hoerte.contains(nonce) else { return false }",
+    "guard til, !besvaret, !hoerte.contains(nonce) else { return false }"
+   ]
+  ]
+ },
+ {
+  "navn": "S3-lyd-fra-mod-gustavs-valg",
+  "fil": "helper/Sources/cmcp-status/Lyd.swift",
+  "proeve": "test/ikon-lyd.mjs",
+  "forventet": "9 standarden er til",
+  "par": [
+   [
+    "let LYD_STANDARD = true",
+    "let LYD_STANDARD = false"
+   ]
+  ]
+ },
+ {
+  "navn": "S4-lyd-uden-om-reglen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "proeve": "test/ikon-lyd.mjs",
+  "forventet": "10 ikonet har én lyd",
+  "par": [
+   [
+    "if lydHukommelse.skalLyde(",
+    "if true || lydHukommelse.skalLyde("
+   ]
+  ]
+ },
+ {
+  "navn": "P5-ask-user-uden-maaling",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "3b ask_user",
+  "par": [
+   [
+    "if (maaling) Object.defineProperty(res, '__presence'",
+    "if (false && maaling) Object.defineProperty(res, '__presence'"
+   ]
+  ]
+ },
+ {
+  "navn": "P6-ny-version-om-gammel-proces",
+  "fil": "mcp-server/tilstede.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "4 versionsfilen skiftet",
+  "par": [
+   [
+    "icon = !v ? 'unknown' : skiftet ? 'replaced since start' : v;",
+    "icon = !v ? 'unknown' : v;"
+   ]
+  ]
+ },
+ {
+  "navn": "P7-ikonets-pid-ignoreres",
+  "fil": "mcp-server/tilstede.js",
+  "proeve": "test/tilstede.mjs",
+  "forventet": "1 ja: ikonets version er DETTE",
+  "par": [
+   [
+    "try { pid = readFileSync(IKON_PID_FIL, 'utf8').trim(); } catch { pid = null; }",
+    "pid = null;"
+   ]
+  ]
+ },
+ {
+  "navn": "D4-sidste-opslag-faar-hele-fristen",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "D4 langsomme opslag",
+  "par": [
+   [
+    "try { m = await callHelper(['idle'], { timeout: Math.min(2000, tilbage) }); }",
+    "try { m = await callHelper(['idle'], { timeout: 2000 }); }"
+   ]
+  ]
+ },
+ {
+  "navn": "E9-genoptag-uden-commit",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F9 genoptaget",
+  "par": [
+   [
+    "  if [ \"$(git branch --show-current)\" = \"$GREN\" ] && [ \"$(git rev-parse \"$GREN\")\" = \"$(git rev-parse origin/main)\" ]",
+    "  if false && [ \"$(git rev-parse \"$GREN\")\" = \"$(git rev-parse origin/main)\" ]"
+   ]
+  ]
+ },
+ {
+  "navn": "H5-dry-sluges-som-handling",
+  "fil": "test/falsk-hjaelper.mjs",
+  "proeve": "test/attrap-faste-opslag.mjs",
+  "forventet": "aegteOpslag: press --dry",
+  "par": [
+   [
+    "if (!OPSLAG.has(kommando) && !(kommando === 'press' && argv.includes('--dry'))) {",
+    "if (!OPSLAG.has(kommando)) {"
+   ]
+  ]
+ },
+ {
+  "navn": "S5-nyt-spoergsmaal-naar-ikke-lyden",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "proeve": "test/ikon-lyd.mjs",
+  "forventet": "13 et nyt spoergsmaal",
+  "par": [
+   [
+    "nyAnmodning = { a in ikon.vis(a) }",
+    "nyAnmodning = { _ in ikon.tik() }"
+   ]
+  ]
+ },
+ {
+  "navn": "Q32-tidsudloeb-i-toerkoersel-er-ufarligt",
+  "fil": "mcp-server/index.js",
+  "proeve": "test/knap-ord.mjs",
+  "forventet": "16 toerkoerslen naar ikke frem",
+  "par": [
+   [
+    "      return { afvis: 'Refused: finding the element took too long, so what would be pressed could not be confirmed. Nothing was pressed, and nobody was asked. Try again.', grund: 'press: lookup timed out' };",
+    "      return { farlig: false };"
+   ]
+  ]
+ },
+ {
+  "navn": "L3-readme-presence-usand",
+  "fil": "README.md",
+  "proeve": "test/readme-log.mjs",
+  "forventet": "README siger hvor hvert presence-felt",
+  "par": [
+   [
+    "Only the box setting was read from",
+    "Every field was read from"
+   ]
+  ]
+ },
+ {
+  "navn": "E10-genoptagelse-tager-fremmed-staged-med",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F10",
+  "par": [
+   [
+    "\n    goer git commit -m \"release: $V er udgivet - forbeholdene væk\" -- $FILER\n",
+    "\n    goer git commit -m \"release: $V er udgivet - forbeholdene væk\"\n"
+   ]
+  ]
+ },
+ {
+  "navn": "E11-ny-gren-tager-fremmed-staged-med",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F11",
+  "par": [
+   [
+    "\n  goer git commit -m \"release: $V er udgivet - forbeholdene væk\" -- $FILER\n",
+    "\n  goer git commit -m \"release: $V er udgivet - forbeholdene væk\"\n"
+   ]
+  ]
+ },
+ {
+  "navn": "B5a-sync-tal-roerer-ikke-pluginnet",
+  "fil": "scripts/sync-tal.py",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F3 ...dok-PR'en loefter pluginnet",
+  "par": [
+   [
+    "if re.fullmatch(r'\\d+\\.\\d+\\.\\d+', UDGIVET):\n    for _sti, _moenstre",
+    "if False:\n    for _sti, _moenstre"
+   ]
+  ]
+ },
+ {
+  "navn": "B5b-dok-pr-uden-pluginnet",
+  "fil": "tools/dok-pr.sh",
+  "proeve": "test/efter-udgivelsen.mjs",
+  "forventet": "F3 ...dok-PR'en loefter pluginnet",
+  "par": [
+   [
+    " server.json plugin/.claude-plugin/plugin.json .claude-plugin/marketplace.json\"",
+    " server.json\""
+   ]
+  ]
+ },
+ {
+  "navn": "A1-advarsel-rammer-0.2.1",
+  "fil": "scripts/release.sh",
+  "proeve": "test/release-fejlmatrix.mjs",
+  "forventet": "S6 advarslen rammer kun versioner foer 0.2.1",
+  "par": [
+   [
+    "SAARBAR=\"<0.2.1\"",
+    "SAARBAR=\"<$V\""
+   ]
+  ]
+ },
+ {
+  "navn": "B1-forbehold-ved-samme-vaerktoejstal",
+  "fil": "scripts/sync-tal.py",
+  "proeve": "test/sync-tal-versioner.mjs",
+  "forventet": "samme vaerktoejstal som kilden",
+  "par": [
+   [
+    "VAERKTOEJS_AFSTAND = AFSTAND and (K is None or K != N)",
+    "VAERKTOEJS_AFSTAND = AFSTAND"
+   ]
+  ]
+ },
+ {
+  "navn": "C4-plugin-vejen-forsvinder-fra-README",
+  "fil": "README.md",
+  "proeve": "test/plugin-manifest.mjs",
+  "forventet": "README.md viser plugin-vejen",
+  "par": [
+   [
+    "/plugin install computer-mcp@agent360",
+    "/plugin install computer-mcp"
+   ]
+  ]
+ },
+ {
+  "navn": "U1-usynlige-tegn-taeller-med-i-serveren",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const USYNLIGE = /\\p{Cf}/gu;",
+    "const USYNLIGE = /(?!)/gu;"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1.1 serveren"
+ },
+ {
+  "navn": "U2-serveren-vaelger-ved-tvivl",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "return hits.length === 1 && !deltId(hits[0]) ? hits[0] : null;",
+    "return hits[0] && !deltId(hits[0]) ? hits[0] : null;"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1.2 serveren"
+ },
+ {
+  "navn": "U3-usynlige-tegn-taeller-med-i-hjaelperen",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "$0.properties.generalCategory != .format",
+    "_ = $0; return true"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2.1 hjaelperen"
+ },
+ {
+  "navn": "U4-hjaelperen-vaelger-ved-tvivl",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "return hits.count == 1 ? .fundet(hits[0]) : (hits.isEmpty ? .intet : .tvetydig)",
+    "return hits.isEmpty ? .intet : .fundet(hits[0])"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2.2 hjaelperen"
+ },
+ {
+  "navn": "U5-koerende-program-uden-reglen",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "static func app(bundleId: String) -> NSRunningApplication? { appOpslag(bundleId).app }",
+    "static func app(bundleId: String) -> NSRunningApplication? { allApps().first { $0.bundleIdentifier == bundleId } ?? appOpslag(bundleId).app }"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6a AX.app"
+ },
+ {
+  "navn": "U6-lukket-program-forkert-valg",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "else { return nil }\n        return fund[i]",
+    "else { return nil }\n        return fund.first"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6b"
+ },
+ {
+  "navn": "U7-porten-uden-reglen",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const hit = findProgram(r.apps || [], want);\n    return hit ? (hit.bundleId || null) : null;",
+    "const hit = (r.apps || []).find(a => [a.bundleId, a.name].some(v => (v || '').toLowerCase() === want.toLowerCase()));\n    return hit ? (hit.bundleId || null) : null;"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "4 resolveBundleId"
+ },
+ {
+  "navn": "U8-forrest-opslaget-uden-reglen",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const hit = findProgram(r.apps || [], want);\n    // R17 (Opus P2)",
+    "const hit = (r.apps || []).find(a => [a.bundleId, a.name].some(v => (v || '').toLowerCase() === want.toLowerCase()));\n    // R17 (Opus P2)"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "5 resolveApp"
+ },
+ {
+  "navn": "U9-hjaelperen-oversaetter-ikke-app",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "let args = Args(oversatArgv.argv)",
+    "let args = Args(CommandLine.arguments)"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6c"
+ },
+ {
+  "navn": "U10-trim-tager-NEL",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "[0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x20, 0xA0, 0x1680]",
+    "[0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x20, 0x85, 0xA0, 0x1680]"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "3a trim"
+ },
+ {
+  "navn": "U11-trim-glemmer-BOM",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "0x205F, 0x3000, 0xFEFF])",
+    "0x205F, 0x3000])"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "3a trim"
+ },
+ {
+  "navn": "U12-serveren-smaa-paa-hele-strengen",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const smaa = (s) => Array.from(String(s ?? ''), c => c.toLowerCase()).join('');",
+    "const smaa = (s) => String(s ?? '').toLowerCase();"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1.15 serveren"
+ },
+ {
+  "navn": "U13-hjaelperen-kanonisk-lighed",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "navne.firstIndex(where: { smaa(Array($0.unicodeScalars)) == lav })",
+    "navne.firstIndex(where: { String(String.UnicodeScalarView(smaa(Array($0.unicodeScalars)))) == String(String.UnicodeScalarView(lav)) })"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2.16 hjaelperen"
+ },
+ {
+  "navn": "U14-serveren-id-uden-praecist-trin",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const viaId = apps.find(a => (a.bundleId || '') === w)\n             || ",
+    "const viaId = "
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1a.2 serveren"
+ },
+ {
+  "navn": "U15-hjaelperen-id-uden-store-smaa-trin",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "        if let i = ids.firstIndex(where: { $0.map { smaa(Array($0.unicodeScalars)) } == lw }) { return .fundet(i) }\n",
+    "        _ = lw\n"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2a.1 hjaelperen"
+ },
+ {
+  "navn": "U16-serveren-normaliserer-foer-praecist",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const w = String(want ?? '').trim();",
+    "const w = navneNoegle(want);"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1.5 serveren"
+ },
+ {
+  "navn": "U17-hjaelperen-normaliserer-foer-praecist",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "let lav = smaa(trim(want))",
+    "let lav = noegle(want)"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2.5 hjaelperen"
+ },
+ {
+  "navn": "U18-oversaettelsen-doed",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "where a[i] == \"--app\" && !a[i + 1].hasPrefix(\"--\")",
+    "where a[i] == \"--app-x\" && !a[i + 1].hasPrefix(\"--\")"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2c.1"
+ },
+ {
+  "navn": "U19-leveringen-sammenligner-navne-selv",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "guard let app = AX.app(bundleId: navn) else {",
+    "guard let app = AX.app(bundleId: navn) ?? AX.allApps().first(where: { $0.localizedName?.lowercased() == navn.lowercased() }) else {"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6d"
+ },
+ {
+  "navn": "U20-vinduesfilter-sammenligner-navne-selv",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "if let scope = args.str(\"app\"), !AX.passer(a, scope) { continue }",
+    "if let scope = args.str(\"app\"), !AX.passer(a, scope), a.localizedName?.lowercased() != scope.lowercased() { continue }"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6d"
+ },
+ {
+  "navn": "U21-opstart-tvetydig-falder-til-disken",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "        if o.tvetydig || kunPraecistId { return (nil, false) }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6e"
+ },
+ {
+  "navn": "U22-serveren-trimmer-ikke",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const w = String(want ?? '').trim();\n  if (!w) return null;",
+    "const w = String(want ?? '');\n  if (!w) return null;"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1.14 serveren"
+ },
+ {
+  "navn": "X1-boksens-allow-uden-touch-id",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "case .tillad(let n): tilladNonce(n, kilde: \"allow-box\")",
+    "case .tillad(let n): aaben(n)?.svar(ok: true)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5a"
+ },
+ {
+  "navn": "X2-boksens-allow-ved-lang-tekst",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "        if kilde == \"allow-box\" && renTekst(a.s.text).count > BOKS_MAX_TEGN { return }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5c"
+ },
+ {
+  "navn": "X3-allow-i-boksen-ved-lang-tekst",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    ".filter { helVist || $0 != \"Allow… (confirm with Touch ID)\" }",
+    ".filter { _ in true }"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "2c"
+ },
+ {
+  "navn": "X4-placering-efter-musen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "let i = boksSkaerm(forrestVindue: forrestVindue(), mus: NSEvent.mouseLocation, skaerme: skaerme.map { $0.frame })\n        let f = skaerme[i].visibleFrame",
+    "let i = boksSkaerm(forrestVindue: nil, mus: NSEvent.mouseLocation, skaerme: skaerme.map { $0.frame })\n        let f = skaerme[i].visibleFrame"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5g"
+ },
+ {
+  "navn": "X5-skaermvalget-ser-bort-fra-vinduet",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    if let v = forrestVindue, let i = skaerme.firstIndex(where: { $0.contains(CGPoint(x: v.midX, y: v.midY)) }) { return i }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "3a"
+ },
+ {
+  "navn": "X6-vinduets-ramme-ikke-omregnet",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "CGRect(x: cg.minX, y: hovedHoejde - cg.maxY, width: cg.width, height: cg.height)",
+    "CGRect(x: cg.minX, y: cg.minY, width: cg.width, height: cg.height)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "3c"
+ },
+ {
+  "navn": "X7-boksen-i-skaermbilleder",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    p.sharingType = .none\n",
+    "    p.sharingType = .readOnly\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5i"
+ },
+ {
+  "navn": "X8-ny-skaerm-flytter-ikke-boksen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            if self?.boks.isVisible == true { self?.boks.placer() }",
+    "            _ = self"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5h"
+ },
+ {
+  "navn": "X9-skifte-skaerm-flytter-ikke-boksen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "\n            else if boks.skalFlyttes() { boks.placer() }",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5h"
+ },
+ {
+  "navn": "X10-knappen-ikke-bundet-til-spoergsmaalet",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "vist = ind; nonce = ny",
+    "vist = ind"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5e"
+ },
+ {
+  "navn": "X11-menuens-knaptekst-i-boksen",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "menuKnap == \"Allow… (confirm with Touch ID)\" ? \"Allow (Touch ID)\" : menuKnap",
+    "menuKnap"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "2b"
+ },
+ {
+  "navn": "X12-boksen-paastaar-hele-teksten",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "let helVist = hel.count <= BOKS_MAX_TEGN",
+    "let helVist = true"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "2c"
+ },
+ {
+  "navn": "X13-agentens-navn-uvasket",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "\"\\(renTekst(v.klient ?? \"An agent\")) needs you\"",
+    "\"\\(v.klient ?? \"An agent\") needs you\""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "2g"
+ },
+ {
+  "navn": "Y1-tidlig-retur-foer-reglen",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "false) }\n        switch Navne.vaelgApp(",
+    "false) }\n        if let a = alle.first(where: { Navne.noegle($0.localizedName ?? \"\") == Navne.noegle(hvad) }) { return (a, false) }\n        switch Navne.vaelgApp("
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6a2"
+ },
+ {
+  "navn": "Y2-foerste-program-paa-disken",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "        var fund: [URL] = []\n",
+    "        if let f = (try? FileManager.default.contentsOfDirectory(atPath: mapper[0]))?.first(where: { $0.hasSuffix(\".app\") }) { return URL(fileURLWithPath: mapper[0]).appendingPathComponent(f) }\n        var fund: [URL] = []\n"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6b"
+ },
+ {
+  "navn": "Y3-nej-bliver-til-ja",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "case .svar(let v):\n                a.svar(ok: v)",
+    "case .svar(let v):\n                _ = v; a.svar(ok: true)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5c2"
+ },
+ {
+  "navn": "Y4-spoergsmaal-uden-engangsnummer",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "return anmodninger.first { $0.s.nonce == n && !$0.besvaret }",
+    "return anmodninger.first { _ = n; return !$0.besvaret }"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5c3"
+ },
+ {
+  "navn": "Y5-boksen-uden-for-skaermen",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "CGPoint(x: synlig.maxX - bredde - 16, y: synlig.maxY - 12)",
+    "CGPoint(x: synlig.minX - bredde - 16, y: synlig.maxY - 12)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "3d"
+ },
+ {
+  "navn": "Y6-et-andet-programs-vindue",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "(w[kCGWindowOwnerPID as String] as? NSNumber)?.int32Value == pid",
+    "(w[kCGWindowOwnerPID as String] as? NSNumber)?.int32Value != pid"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "3e"
+ },
+ {
+  "navn": "Y7-menulinje-lag-som-vindue",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "\n                      && (w[kCGWindowLayer as String] as? NSNumber)?.intValue == 0",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "3e"
+ },
+ {
+  "navn": "Y9-placering-uden-hjoernet",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "setFrameTopLeftPoint(boksHjoerne(synlig: f, bredde: frame.width))",
+    "setFrameTopLeftPoint(NSPoint(x: f.minX - 500, y: f.maxY))"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5g"
+ },
+ {
+  "navn": "Z1-maalet-bindes-ikke",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      && (tool.tier !== TIER.READ || (name === 'computer_screenshot' && args.redact === false))) args[BUNDET] = koerendeMaal;",
+    "      && false) args[BUNDET] = koerendeMaal;"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "1a"
+ },
+ {
+  "navn": "Z2-hjaelperkald-uden-binding",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "const appArg = (args) => (args[BUNDET] ? `=${args[BUNDET]}` : String(args.app));",
+    "const appArg = (args) => String(args.app);"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "1a"
+ },
+ {
+  "navn": "Z3-lukket-program-bindes",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if (args.app && koerendeMaal && koerendeMaal === targetBundleId\n",
+    "  if (args.app && targetBundleId && (koerendeMaal = targetBundleId)\n"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "2"
+ },
+ {
+  "navn": "Z4-serveren-bundet-falder-til-navne",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "  if (w.startsWith('=')) return (w.length > 1 && apps.find(a => (a.bundleId || '') === w.slice(1))) || null;\n",
+    ""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1b.1"
+ },
+ {
+  "navn": "Z5-hjaelperen-bundet-uden-tjek",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "guard !id.isEmpty, findesPraecist(id) else { return nil }",
+    "guard !id.isEmpty else { return nil }"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2c.6"
+ },
+ {
+  "navn": "Z6-aktiv-kun-for-den-ene-proces",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "const aktiv = !!hit?.active || !!aktivProces;",
+    "const aktiv = !!hit?.active;"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "3"
+ },
+ {
+  "navn": "Z7-boksen-uden-hvor-og-hvor-laenge",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "        for f in v.fakta { linjer += ombryd(f, bredde: BOKS_BREDDE_TEGN) }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "2h"
+ },
+ {
+  "navn": "Z8-ingen-pause-efter-nyt-spoergsmaal",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "sidenNytSpoergsmaal >= BOKS_PAUSE && !touchIdIGang",
+    "!touchIdIGang"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6c"
+ },
+ {
+  "navn": "Z9-knapper-aktive-under-touch-id",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    sidenNytSpoergsmaal >= BOKS_PAUSE && !touchIdIGang\n",
+    "    sidenNytSpoergsmaal >= BOKS_PAUSE\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6c"
+ },
+ {
+  "navn": "Z10-deny-bliver-done",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "case \"Deny\", \"I won't do this\": return .afvis(n)",
+    "case \"Deny\", \"I won't do this\": return .gjort(n)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6a"
+ },
+ {
+  "navn": "Z11-klik-fra-aeldre-visning",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "guard aktive, let n = knapNonce, n == visteNonce else { return .intet }",
+    "guard let n = knapNonce else { return .intet }"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6a"
+ },
+ {
+  "navn": "Z12-boksen-svarer-paa-sidste-spoergsmaal",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "let foerste = aabne.first",
+    "let foerste = aabne.last"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5m"
+ },
+ {
+  "navn": "Z13-touch-id-slipper-aldrig-knapperne",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            self?.boks.touchIdIGang = false\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5k"
+ },
+ {
+  "navn": "Z14-take-me-there-forkert",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "case \"Take me there\": return .hentFrem(n)",
+    "case \"Take me there\": return .afvis(n)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6a"
+ },
+ {
+  "navn": "Z15-program-uden-id-kan-ikke-naas",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "        if let b = bundleId, !b.isEmpty { return b }\n        return \"pid:\\(pid)\"",
+    "        return bundleId ?? \"\""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2d"
+ },
+ {
+  "navn": "Z16-filter-uden-pid",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "        Navne.id(bundleId: a.bundleIdentifier, pid: a.processIdentifier) == scope\n",
+    "        a.bundleIdentifier == scope\n"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6g"
+ },
+ {
+  "navn": "W1-hjaelperen-glemmer-bindingen",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "AX.kunPraecistId = oversatArgv.bundet\n",
+    ""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6h"
+ },
+ {
+  "navn": "W2-bundet-opslag-falder-til-navne",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "        if kunPraecistId { return (alle.first { $0.bundleIdentifier == hvad }, false) }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6h"
+ },
+ {
+  "navn": "W3-bundet-opstart-falder-til-disken",
+  "fil": "helper/Sources/cmcp-helper/Accessibility.swift",
+  "par": [
+   [
+    "if o.tvetydig || kunPraecistId { return (nil, false) }",
+    "if o.tvetydig { return (nil, false) }"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "6h"
+ },
+ {
+  "navn": "W4-sendeporten-ubundet",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "callHelper(['samtale', '--app', appVaerdi(args, bid), '--title-only']",
+    "callHelper(['samtale', '--app', bid, '--title-only']"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "4"
+ },
+ {
+  "navn": "W5-pid-ikke-reserveret",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "  if (/^pid:\\d+$/.test(w)) return apps.find(a => !a.bundleId && String(a.pid) === w.slice(4)) || null;\n",
+    ""
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1c.1"
+ },
+ {
+  "navn": "W6-touch-id-nej-bliver-ja",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "ok && erLaan ? .laan : .svar(ok)",
+    "ok && erLaan ? .laan : .svar(true)"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6d"
+ },
+ {
+  "navn": "W7-ok-overskrevet-i-callbacken",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            self?.boks.touchIdIGang = false\n            // Et mislykket",
+    "            self?.boks.touchIdIGang = false\n            let ok = true\n            // Et mislykket"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5c2"
+ },
+ {
+  "navn": "W8-skaermbillede-ubundet",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      && (tool.tier !== TIER.READ || (name === 'computer_screenshot' && args.redact === false))) args[BUNDET] = koerendeMaal;",
+    "      && tool.tier !== TIER.READ) args[BUNDET] = koerendeMaal;"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "5"
+ },
+ {
+  "navn": "V1-serveren-ser-ikke-delt-id",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "  if (viaNavn) return deltId(viaNavn) ? null : viaNavn;",
+    "  if (viaNavn) return viaNavn;"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "6"
+ },
+ {
+  "navn": "V2-hjaelperen-ser-ikke-delt-id",
+  "fil": "helper/Sources/cmcp-helper/Navne.swift",
+  "par": [
+   [
+    "return delt ? .tvetydig : v",
+    "return v"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "2a.7"
+ },
+ {
+  "navn": "V3-delt-id-ogsaa-ved-samme-navn",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "a.bundleId === x.bundleId && smaa(a.name || '') !== smaa(x.name || '')",
+    "a.bundleId === x.bundleId"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1a.9"
+ },
+ {
+  "navn": "Q1-open-app-uden-praecist-id",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "        if (r?.bundleId !== targetBundleId) {\n",
+    "        if (false) {\n"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "7 open_app med navnet"
+ },
+ {
+  "navn": "X1-visningstjeneste-uden-usynligt-tegn",
+  "fil": "mcp-server/helper.js",
+  "par": [
+   [
+    "return hits.length === 1 && !deltId(hits[0]) ? hits[0] : null;",
+    "return hits.length === 1 ? hits[0] : null;"
+   ]
+  ],
+  "proeve": "test/usynlige-navne.mjs",
+  "forventet": "1a.10"
+ },
+ {
+  "navn": "Q2-open-app-uden-formkrav",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/.test(targetBundleId)) {\n",
+    "        if (false) {\n"
+   ]
+  ],
+  "proeve": "test/bundet-maal.mjs",
+  "forventet": "7b"
+ },
+ {
+  "navn": "T1-stille-laan-uden-stopknap",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "                       knapper: [TAG_TILBAGE] + b.knapper)\n}\n",
+    "                       knapper: b.knapper)\n}\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "7a"
+ },
+ {
+  "navn": "T2-laan-og-spoergsmaal-uden-stopknap",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "                           knapper: [TAG_TILBAGE] + b.knapper)\n    }\n",
+    "                           knapper: b.knapper)\n    }\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "7b"
+ },
+ {
+  "navn": "T3-stopknappen-venter-paa-pausen",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    if knap == TAG_TILBAGE { return .tagTilbage }\n",
+    "    if knap == TAG_TILBAGE && aktive && knapNonce == visteNonce { return .tagTilbage }\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "6e"
+ },
+ {
+  "navn": "T4-laanet-holder-ikke-boksen-fremme",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "slaaetFra: boksSlaaetFra, arbejder: arbejder) {\n",
+    "slaaetFra: boksSlaaetFra, arbejder: arbejder) && laan == nil {\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5s"
+ },
+ {
+  "navn": "T5-laanet-ikke-i-boksen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "venter: venter, laan: laan),",
+    "venter: venter),"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5n"
+ },
+ {
+  "navn": "T6-boksens-stopknap-goer-intet",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "        case .tagTilbage: tagTilbageNu(kilde: \"take-back-box\")\n",
+    "        case .tagTilbage: break\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5o"
+ },
+ {
+  "navn": "T7-stopknappen-slaas-fra",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "b.isEnabled = aktiv || b.title == TAG_TILBAGE }",
+    "b.isEnabled = aktiv }"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5p"
+ },
+ {
+  "navn": "T8-boksen-paa-svaevelaget",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    p.isFloatingPanel = true\n    p.level = .statusBar\n",
+    "    p.level = .statusBar\n    p.isFloatingPanel = true\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5t"
+ },
+ {
+  "navn": "C6e-porten-ser-navnet-ikke-id",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "      ? await resolveBundleId(args.app)\n      : await frontmostBundleId();\n",
+    "      ? String(args.app)\n      : await frontmostBundleId();\n"
+   ]
+  ],
+  "proeve": "test/claims.mjs",
+  "forventet": "6e"
+ },
+ {
+  "navn": "K1-signalet-ignoreres",
+  "fil": "helper/Sources/cmcp-helper/Skrivevagt.swift",
+  "par": [
+   [
+    "    if sikkerIndtastning { return .sikkertFelt }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6a"
+ },
+ {
+  "navn": "K2-ukendt-fokus-bliver-ja",
+  "fil": "helper/Sources/cmcp-helper/Skrivevagt.swift",
+  "par": [
+   [
+    "    guard let s = fokusSikkert else { return .ukendtFokus }\n",
+    "    guard let s = fokusSikkert else { return .maa }\n"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6a"
+ },
+ {
+  "navn": "K3-type-uden-signal-foerst",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    if skriveDom(fokusSikkert: false, sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt {\n",
+    "    if false {\n"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6b"
+ },
+ {
+  "navn": "K4-paste-uden-signal",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "                     sikkerIndtastning: macosSikkerIndtastning()) {\n    case .maa: break\n",
+    "                     sikkerIndtastning: false) {\n    case .maa: break\n"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6c"
+ },
+ {
+  "navn": "K5-paste-ukendt-fokus-tilladt",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    case .ukendtFokus:\n        Out.fail(\"could not see where the keyboard focus is, so a password field cannot be ruled out; nothing was pasted.",
+    "    case .ukendtFokus: break\n    case .maa where false:\n        Out.fail(\"could not see where the keyboard focus is, so a password field cannot be ruled out; nothing was pasted."
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6c"
+ },
+ {
+  "navn": "K6-signalet-er-ikke-macos",
+  "fil": "helper/Sources/cmcp-helper/Input.swift",
+  "par": [
+   [
+    "func macosSikkerIndtastning() -> Bool { IsSecureEventInputEnabled() }",
+    "func macosSikkerIndtastning() -> Bool { false }"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6d"
+ },
+ {
+  "navn": "F1-tidsudloeb-vaelger-alligevel",
+  "fil": "helper/Sources/cmcp-helper/Skrivevagt.swift",
+  "par": [
+   [
+    "    if stoppedeTidligt && index == nil { return .ufuldstaendig }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "7e"
+ },
+ {
+  "navn": "F2-find-tier-om-tidsudloeb",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "        fundSvar[\"stopped_early\"] = true\n",
+    ""
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "7d"
+ },
+ {
+  "navn": "T9-synlig-uden-laan",
+  "fil": "helper/Sources/cmcp-status/Tekst.swift",
+  "par": [
+   [
+    "    laan || (sessioner > 0 && !slaaetFra && arbejder)\n",
+    "    sessioner > 0 && !slaaetFra && arbejder\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5r"
+ },
+ {
+  "navn": "T10-stopknap-i-samme-raekke",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            if k == TAG_TILBAGE { stopRaekke.addArrangedSubview(b) } else { knapper.addArrangedSubview(b) }\n",
+    "            knapper.addArrangedSubview(b)\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5v"
+ },
+ {
+  "navn": "T11-follow-afgjort-af-orange",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "        if ny == nil && sessioner.count > 1 {\n",
+    "        if !ind.orange && sessioner.count > 1 {\n"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5w"
+ },
+ {
+  "navn": "F3-vaelgTraef-uden-tidsflag",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "stoppedeTidligt: AX.stoppedeTidligt, index: args.int(\"index\")",
+    "stoppedeTidligt: false, index: args.int(\"index\")"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "7c"
+ },
+ {
+  "navn": "K7-cmd-v-skriver-ikke",
+  "fil": "helper/Sources/cmcp-helper/Skrivevagt.swift",
+  "par": [
+   [
+    "    if cmd { return tast == \"v\" }\n",
+    "    if cmd { return false }\n"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6e"
+ },
+ {
+  "navn": "K8-key-uden-skrivevagt",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    if kombiSkriverTekst(combo) {\n        let fokusPid",
+    "    if false {\n        let fokusPid"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6f"
+ },
+ {
+  "navn": "K9-fokus-set-value-uden-signal",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    " || (fokusVej && skriveDom(fokusSikkert: false, sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt) {",
+    " {"
+   ]
+  ],
+  "proeve": "test/skriv-ankommer.mjs",
+  "forventet": "6g"
+ },
+ {
+  "navn": "L1-loft-kun-paa-grunden",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "  if ([...laanTekst].length > 280) return errorResult(",
+    "  if ([...grund].length > 280) return errorResult("
+   ]
+  ],
+  "proeve": "test/skaerm-laan.mjs",
+  "forventet": "9c"
+ },
+ {
+  "navn": "T12-boksens-lag-saettes-udefra",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            boks.vis(boksIndhold(arbejder: arbejdende, tilsluttede: s.count, venter: venter, laan: laan),",
+    "            boks.level = .floating\n            boks.vis(boksIndhold(arbejder: arbejdende, tilsluttede: s.count, venter: venter, laan: laan),"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5u"
+ },
+ {
+  "navn": "T13-skjult-ikon-viser-ikke-boksen",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "    if NSApp.isHidden { NSApp.unhideWithoutActivation() }\n",
+    ""
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5y"
+ },
+ {
+  "navn": "T14-skjult-ikon-genvises-ikke",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "            if !boks.isVisible || NSApp.isHidden { boks.placer(); visBoksen(boks) }",
+    "            if !boks.isVisible { boks.placer(); visBoksen(boks) }"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5y"
+ },
+ {
+  "navn": "T15-follow-vindue-i-skjult-ikon",
+  "fil": "helper/Sources/cmcp-status/main.swift",
+  "par": [
+   [
+    "        visBoksen(panel)   // frem",
+    "        panel.orderFrontRegardless()   // frem"
+   ]
+  ],
+  "proeve": "test/ikon-boks.mjs",
+  "forventet": "5y"
+ },
+ {
+  "navn": "C1-programbillede-uden-kilderamme",
+  "fil": "helper/Sources/cmcp-helper/Capture.swift",
+  "par": [
+   [
+    "                cfg.sourceRect = CGRect(x: 0, y: 0, width: display.width, height: display.height)\n",
+    "\n"
+   ]
+  ],
+  "proeve": "test/billede-placering.mjs",
+  "forventet": "5"
+ },
+ {
+  "navn": "C9-laerred-altid-2x",
+  "fil": "helper/Sources/cmcp-helper/Capture.swift",
+  "par": [
+   [
+    "                cfg.width = display.width * skala\n",
+    "                cfg.width = display.width * 2\n"
+   ]
+  ],
+  "proeve": "test/billede-placering.mjs",
+  "forventet": "5b"
+ },
+ {
+  "navn": "MV1-tryk-paa-rullemenu-bagved",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "    if (!trykDom.afvis && menuVagt() && MENU_ROLLER.has(trykDom.rolle)) {",
+    "    if (false) {"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "1a"
+ },
+ {
+  "navn": "MV2-menuvagt-sendes-ikke",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "const menuFlag = (args) => (args.app && menuVagt() ? ['--menu-vagt'] : []);",
+    "const menuFlag = (args) => [];"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "1b"
+ },
+ {
+  "navn": "MV3-menuvagt-ogsaa-i-forgrund",
+  "fil": "mcp-server/index.js",
+  "par": [
+   [
+    "const menuVagt = () => baggrund() && !laanAktivt();",
+    "const menuVagt = () => true;"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "1d"
+ },
+ {
+  "navn": "MV4-hjaelper-trykker-menurolle",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    if args.flag(\"menu-vagt\"), let rolle = first.dict[\"role\"] as? String, Skaerm.menuRoller.contains(rolle) {",
+    "    if args.flag(\"menu-vagt\"), false, let rolle = first.dict[\"role\"] as? String, Skaerm.menuRoller.contains(rolle) {"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "3"
+ },
+ {
+  "navn": "MV5-tast-paa-menufokus",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    if args.flag(\"menu-vagt\"), let pid = tastPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {",
+    "    if args.flag(\"menu-vagt\"), false, let pid = tastPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "3"
+ },
+ {
+  "navn": "MV6-tekst-paa-menufokus",
+  "fil": "helper/Sources/cmcp-helper/main.swift",
+  "par": [
+   [
+    "    if args.flag(\"menu-vagt\"), let pid = skrivPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {",
+    "    if args.flag(\"menu-vagt\"), false, let pid = skrivPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {"
+   ]
+  ],
+  "proeve": "test/menu-vagt.mjs",
+  "forventet": "3"
+ }
+]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9197a272..467a5de7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
   build-and-test:
     # macOS-koerer. Der findes ingen anden slags: hele produktet er bygget paa
     # macOS' egne rammevaerker.
-    runs-on: macos-14
+    runs-on: macos-15
 
     steps:
       - uses: actions/checkout@v4
@@ -61,6 +61,41 @@ jobs:
       - name: Revisionskaeden under samtidighed
         run: node test/audit-chain.mjs
 
+      # ⛔ 7/10: den udgivne pakke manglede et modul (tilstede.js) uden at nogen proeve
+      #    saa det - alle koerer fra kildemappen. Kraever ingen rettigheder.
+      - name: Alt serveren importerer, er med i pakken
+        run: node test/pakke-filer.mjs
+
+      # 7/10 (punkt L): README'ens log-uddrag er en byte-eksakt del af en committet
+      #    log fra en isoleret koersel, og kaeden holder. Kraever ingen rettigheder.
+      - name: README'ens log-uddrag er loggen som den er
+        run: node test/readme-log.mjs
+
+      # 7/10 (punkt S): hoejst én lyd pr. nyt spoergsmaal. Kompilerer ikonets Lyd.swift
+      #    for sig - starter aldrig ikonet.
+      - name: Ikonets lyd-regel
+        run: node test/ikon-lyd.mjs
+
+      # 9/10: WhatsApp hedder «\u200eWhatsApp». Serverens og hjaelperens navneregel
+      #    koeres mod samme tabel; Navne.swift kompileres for sig.
+      - name: Usynlige tegn i programnavne
+        run: node test/usynlige-navne.mjs
+
+      # 9/10: boksen i hjoernet - indhold, skaerm og Touch ID-vejen. Kompilerer
+      #    Tekst.swift for sig og laeser ikonets --dump-question; starter aldrig ikonet.
+      - name: Boksen i hjoernet
+        run: node test/ikon-boks.mjs
+
+      # R17 (9/10): det program porten vurderede, er det handlingen rammer (attrap-hjaelper).
+      - name: Bundet maal
+        run: node test/bundet-maal.mjs
+
+      # 7/10 (panel R12, Opus): pluginnet skal pege paa PUBLICERET - den version npm
+      #    serverer. Flettes en gren uden at sync-tal.py har koert efter en udgivelse,
+      #    bliver main roed her, og release.sh nægter at udgive.
+      - name: Pluginnet peger paa den version npm serverer
+        run: node test/plugin-manifest.mjs
+
       - name: Det der IKKE er proevet her
         # En groen koersel maa ikke kunne forveksles med en fuld proeve.
         # Tilgaengelighed og Skaermoptagelse kan ikke gives paa en byggekoerer,
diff --git a/.github/workflows/fremmed-mac.yml b/.github/workflows/fremmed-mac.yml
index 7796c39f..2e104c88 100644
--- a/.github/workflows/fremmed-mac.yml
+++ b/.github/workflows/fremmed-mac.yml
@@ -13,14 +13,48 @@ on:
   push:
     branches: ['proeve/**']
   workflow_dispatch:
+    inputs:
+      full_matrix:
+        description: 'Kør på hele macOS-matrixen (Intel + Apple Silicon, begge GA-versioner) i stedet for kun macos-15'
+        type: boolean
+        default: false
+      film_pynt:
+        description: 'Ren optagelse til forsiden (2/10, forside-chatten): notes.txt+almindelige ord, neutral side i stedet for Netflix, normalt skrivebord, Game Center tavs. Rører ALDRIG tjekkene.'
+        type: boolean
+        default: false
 
 jobs:
+  # ⛔ A6 (1/10): "macos-14 + macos-15, Intel + Apple Silicon" er forældet ordlyd -
+  #    macos-14 er nu DEPRECATED hos GitHub (højst to GA-versioner ad gangen).
+  #    Nutidens svar er de to AKTIVE GA-versioner, begge arkitekturer. En push
+  #    til en proeve/-gren rører stadig kun macos-15 (uændret hastighed); hele
+  #    matrixen køres kun ved manuelt workflow_dispatch med full_matrix=true -
+  #    ellers 4x koererminutter på hver kørsel under udvikling.
+  matrix-plan:
+    runs-on: ubuntu-latest
+    outputs:
+      os: ${{ steps.plan.outputs.os }}
+    steps:
+      - id: plan
+        run: |
+          if [ "${{ inputs.full_matrix }}" = "true" ]; then
+            echo 'os=["macos-15","macos-15-intel","macos-26","macos-26-intel"]' >> "$GITHUB_OUTPUT"
+          else
+            echo 'os=["macos-15"]' >> "$GITHUB_OUTPUT"
+          fi
+
   fremmed-mac:
-    runs-on: macos-15
+    needs: matrix-plan
+    strategy:
+      fail-fast: false
+      matrix:
+        os: ${{ fromJSON(needs.matrix-plan.outputs.os) }}
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 90
     env:
       CMCP_FREMMED_MASKINE: '1'
       CMCP_STATUS_IKON: '0'
+      CMCP_FILM_PYNT: ${{ inputs.film_pynt && '1' || '' }}
     steps:
       - uses: actions/checkout@v4
 
@@ -30,6 +64,21 @@ jobs:
           defaults read -g AppleLanguages || true
           ls /Applications
 
+      # Pynt til forsiden (2/10, forside-chatten): kun KAMERAET's billede ændrer
+      # sig her - rører intet tjek. Alt er best-effort og fejler aldrig bygningen
+      # (`|| true` overalt): en koerer uden netop den defaults-noegle skal stadig
+      # kunne koere resten af suiten.
+      - name: Pynt til forsiden
+        if: ${{ inputs.film_pynt }}
+        run: |
+          PIC=$(ls "/System/Library/Desktop Pictures/"*.heic 2>/dev/null | head -1)
+          if [ -n "$PIC" ]; then
+            osascript -e "tell application \"Finder\" to set desktop picture to POSIX file \"$PIC\"" || true
+          fi
+          defaults write com.apple.gamed GKAutoSignInEnabled -bool false 2>/dev/null || true
+          defaults -currentHost write com.apple.notificationcenterui doNotDisturb -bool true 2>/dev/null || true
+          killall NotificationCenter 2>/dev/null || true
+
       # Samme bygning som udgivelsen: hjaelperen til begge arkitekturer OG
       # menulinje-ikonet (koersel 3: statusikon-proeven fandt intet ikon).
       - name: Byg som udgivelsen
@@ -50,6 +99,13 @@ jobs:
       - name: Pillow
         run: python -m pip install --quiet --disable-pip-version-check pillow
 
+      # 1/10 (Gustav: «film hvordan den fungerer»): hvert scenarie og hver
+      # parallel-koersel optages - kun her, paa GitHubs Mac.
+      - name: Kamera til filmene
+        run: |
+          which ffmpeg || brew install --quiet ffmpeg
+          ffmpeg -hide_banner -f avfoundation -list_devices true -i "" 2>&1 | grep -i "capture screen" || true
+
       # Uden et menneske er Finder forrest, og produktet roerer (med rette) aldrig
       # det program mennesket bruger. Et menneske ville arbejde i et andet program
       # - ogsaa mens suiten koerer (koersel 3: to suiter ramte Finder).
@@ -59,6 +115,7 @@ jobs:
           mcp-server/vendor/cmcp-helper focused || true
 
       - name: Hele suiten
+        id: suite
         continue-on-error: true
         run: |
           export TMPDIR="$RUNNER_TEMP/"
@@ -69,8 +126,15 @@ jobs:
           exit $rc
 
       - name: Mutationsbevis for giv-tilbage (proeven tager forgrunden, saa kun her)
+        id: mutant
         continue-on-error: true
-        run: bash .github/mutant-giv-tilbage.sh
+        # 29/9 (B7): og hver port-vagt (samtykke, sende-port, skaerm-laan, omveje)
+        # skal kunne blive roed. bash -e: uden «|| rc» stoppede trinnet ved foerste.
+        run: |
+          rc=0
+          bash .github/mutant-giv-tilbage.sh || rc=1
+          python3 .github/mutant-porte.py || rc=1
+          exit $rc
 
       # Uden et menneske er Finder forrest, og produktet roerer (med rette) aldrig
       # det program mennesket bruger. Et menneske ville arbejde i et andet program.
@@ -83,8 +147,9 @@ jobs:
           mcp-server/vendor/cmcp-helper focused || true
 
       - name: Brugsscenarierne i baggrunden
+        id: bg
         continue-on-error: true
-        run: CMCP_BRUG=laes,lokal,kamera CMCP_BRUG_RAPPORT="$RUNNER_TEMP/baggrund.json" node test/brugsscenarier.mjs
+        run: CMCP_FILM="$RUNNER_TEMP/film" CMCP_BRUG=laes,lokal,kamera CMCP_BRUG_RAPPORT="$RUNNER_TEMP/baggrund.json" node test/brugsscenarier.mjs
 
       - name: Hvad maskinen viste efter baggrunden
         if: always()
@@ -98,20 +163,80 @@ jobs:
           sleep 2
 
       - name: Brugsscenarierne i forgrunden
+        id: fg
         continue-on-error: true
-        run: CMCP_BRUG=laes,lokal,kamera CMCP_BRUG_TILSTAND=forgrund CMCP_BRUG_TAG_SKAERMEN=1 CMCP_BRUG_RAPPORT="$RUNNER_TEMP/forgrund.json" node test/brugsscenarier.mjs
+        run: CMCP_FILM="$RUNNER_TEMP/film" CMCP_BRUG=laes,lokal,kamera CMCP_BRUG_TILSTAND=forgrund CMCP_BRUG_TAG_SKAERMEN=1 CMCP_BRUG_RAPPORT="$RUNNER_TEMP/forgrund.json" node test/brugsscenarier.mjs
 
       - name: Hvad maskinen viste efter forgrunden
         if: always()
         run: bash .github/diagnose.sh forgrund
 
+      # 1/10 (Gustav): 5, 10 og 15 agenter samtidig i baggrunden, mens et menneske
+      # skriver i TextEdit. Forrest maales hvert 100. ms; teksten tegn for tegn.
+      - name: Mange agenter samtidig
+        id: par
+        continue-on-error: true
+        run: |
+          killall Chess Calculator Contacts "System Settings" "Activity Monitor" Notes Safari "Script Editor" 2>/dev/null || true
+          CMCP_FILM="$RUNNER_TEMP/film" CMCP_PARALLEL_RAPPORT="$RUNNER_TEMP/parallel.json" node test/parallel.mjs
+
+      - name: Filmene
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          # Matrix-sikkert navn (A6, 2/10): flere OS-koerere i samme kørsel ville
+          # ellers kollidere på samme artefakt-navn (upload-artifact@v4 kræver unikt).
+          name: fremmed-mac-film-${{ matrix.os }}
+          path: ${{ runner.temp }}/film/
+          if-no-files-found: warn
+
+      # B3 (2/10): ét billede pr. use case (før/efter) i en HTML-rapport, linket
+      # fra PR'en - uden at se alle 19+19 film i fuld længde. Trækker kun billeder
+      # ud af film "Kamera til filmene" allerede har optaget her.
+      - name: Kontaktark
+        if: always()
+        run: |
+          python3 scripts/kontaktark.py "${{ runner.temp }}/film" "${{ runner.temp }}/kontaktark" || true
+          if [ -f "${{ runner.temp }}/kontaktark/index.html" ]; then
+            echo "### Kontaktark (B3)" >> "$GITHUB_STEP_SUMMARY"
+            echo "Før/efter-billede pr. use case: se artefaktet **fremmed-mac-kontaktark-${{ matrix.os }}** på denne kørsel." >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+      - name: Kontaktark-artefakt
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: fremmed-mac-kontaktark-${{ matrix.os }}
+          path: ${{ runner.temp }}/kontaktark/
+          if-no-files-found: warn
+
       - name: Beviserne
         if: always()
         uses: actions/upload-artifact@v4
         with:
-          name: fremmed-mac-beviser
+          name: fremmed-mac-beviser-${{ matrix.os }}
           path: |
             ${{ runner.temp }}/suite.log
             ${{ runner.temp }}/baggrund.json
             ${{ runner.temp }}/forgrund.json
+            ${{ runner.temp }}/parallel.json
             ${{ runner.temp }}/diag/
+
+      # ⛔ 28/9: foer var suite, mutant og de to scenarie-koersler alle
+      #    continue-on-error uden en samlende port - en groen koersel beviste
+      #    intet om proeverne. Nu fejler jobbet, hvis en af dem ikke bestod.
+      #    (Beviserne uploades ovenfor med if: always, saa de findes stadig.)
+      - name: Porten - en fejlet proeve goer hele jobbet roedt
+        if: always()
+        run: |
+          fail=0
+          for par in "Suiten:${{ steps.suite.outcome }}" \
+                     "Mutationsbeviset:${{ steps.mutant.outcome }}" \
+                     "Baggrunds-scenarier:${{ steps.bg.outcome }}" \
+                     "Forgrunds-scenarier:${{ steps.fg.outcome }}" \
+                     "Mange agenter samtidig:${{ steps.par.outcome }}"; do
+            navn="${par%%:*}"; res="${par##*:}"
+            echo "$navn: $res"
+            [ "$res" = "success" ] || { echo "⛔ $navn bestod ikke ($res)"; fail=1; }
+          done
+          [ "$fail" = "0" ] && echo "Alle fem porte grønne." || exit 1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 32b6f897..d988b258 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,11 +6,11 @@ name: Release
 # npm-udgivelsen staar med vilje IKKE her: en udgivelse der sker automatisk
 # paa et maerke er en udgivelse ingen naaede at se paa foerst.
 #
-# Den bor nu i `udgiv-npm.yml` - workflow_dispatch med et versionsfelt, saa et
-# menneske stadig trykker, men der findes ingen token nogen steder (OIDC /
-# npm trusted publishing). Grunden: MAALT 21/9 var alle ni tokens paa kontoen
-# udloebne, den nyeste efter syv dage, og kontoen kraever en sikkerhedsnoegle
-# som andet trin - saa `npm publish` i haanden svarer EOTP uden vej udenom.
+# Den bor i `scripts/release.sh`, koert af et menneske i en rigtig terminal: npm
+# aabner da godkendelsen med sikkerhedsnoeglen i browseren (MAALT 6/10, npm 10.9.4
+# lib/utils/auth.js - kun med stdin og stdout som terminal). 7/10 (panel R8): den
+# tidligere `udgiv-npm.yml` er fjernet - den havde aldrig koert og manglede
+# PUBLICERET, tekstsynkroniseringen, deprecate og registret. Én vej, ikke to.
 on:
   push:
     tags: ['v*']
@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   universal:
-    runs-on: macos-14
+    runs-on: macos-15
     steps:
       - uses: actions/checkout@v4
 
@@ -49,6 +49,18 @@ jobs:
           python test/redaction-unit.py
           node test/claims-offline.mjs
 
+      # ⛔ 7/10 (panel R8-R9, punkt M): ét-kliks-installation til Claude Desktop - ogsaa
+      #    Team/Enterprise, der ikke har Anthropics indbyggede computer use. Pakken bygges
+      #    af den SAMME binaer som ovenfor og bevises foer den haenges paa udgivelsen:
+      #    den starter fra den udpakkede pakke og svarer med kildens vaerktoejstal.
+      - name: Byg og bevis MCPB-pakken
+        run: |
+          npm i -g @anthropic-ai/mcpb@2.1.2 --no-audit --no-fund
+          bash scripts/build-mcpb.sh "$RUNNER_TEMP/mcpb"
+          node test/mcpb-start.mjs "$RUNNER_TEMP/mcpb/computer-mcp.mcpb"
+          cp "$RUNNER_TEMP/mcpb/computer-mcp.mcpb" computer-mcp.mcpb
+          shasum -a 256 computer-mcp.mcpb > computer-mcp.mcpb.sha256
+
       - name: Beskriv hvad der er bygget
         id: describe
         run: |
@@ -66,6 +78,8 @@ jobs:
           path: |
             mcp-server/vendor/cmcp-helper
             cmcp-helper.sha256
+            computer-mcp.mcpb
+            computer-mcp.mcpb.sha256
 
       - name: Haeng den paa udgivelsen
         if: startsWith(github.ref, 'refs/tags/v')
@@ -77,6 +91,8 @@ jobs:
           gh release upload "${GITHUB_REF_NAME}" \
             mcp-server/vendor/cmcp-helper \
             cmcp-helper.sha256 \
+            computer-mcp.mcpb \
+            computer-mcp.mcpb.sha256 \
             --clobber
 
       - name: Kvittering
diff --git a/.github/workflows/udgiv-npm.yml b/.github/workflows/udgiv-npm.yml
deleted file mode 100644
index 605da7cc..00000000
--- a/.github/workflows/udgiv-npm.yml
+++ /dev/null
@@ -1,111 +0,0 @@
-name: Udgiv til npm
-
-# ⛔ HVORFOR DEN LIGGER I SIN EGEN FIL, OG HVORFOR DEN IKKE FYRER PAA ET MAERKE
-#
-#    release.yml siger det med vilje: «en udgivelse der sker automatisk paa et
-#    maerke er en udgivelse ingen naaede at se paa foerst». Den holdning staar
-#    ved magt. Det trusted publishing fjerner er NOEGLEN, ikke mennesket.
-#
-#    Derfor: workflow_dispatch med et versionsfelt. Et menneske trykker, men
-#    der findes ingen token nogen steder - hverken i repoet, i GitHub Secrets
-#    eller paa nogens maskine.
-#
-#    MAALT 21/9-2026, hvorfor det her er noedvendigt: alle ni tokens paa
-#    npm-kontoen var udloebne. Den nyeste blev lavet 13/9 og doede 20/9 - syv
-#    dage. npm's egen politik siger 7 dages standard og 90 dages loft, saa en
-#    token DOER igen. Og kontoen har `tfa: auth-and-writes` med en
-#    sikkerhedsnoegle som andet trin, saa `npm publish` svarer EOTP og der
-#    findes ingen engangskode at taste. OIDC har ingen af delene.
-#
-#    ⛔ Publish-trinnet SKAL ligge i denne fil. npm's validering tjekker det
-#    KALDENDE workflows filnavn, saa et genbrugt workflow virker ikke.
-#
-# ---------------------------------------------------------------------------
-# ENGANGS-OPSAETNING, som kun Gustav kan lave (ét minut, ét sted):
-#
-#   npmjs.com -> @agent360/computer-mcp -> Settings -> Trusted Publisher
-#     Provider:   GitHub Actions
-#     Repository: Agent360dk/computerMCP
-#     Workflow:   udgiv-npm.yml
-#     Environment: (tom)
-#
-#   Derefter: ingen token, ingen engangskode, ingen udloeb. Nogensinde.
-# ---------------------------------------------------------------------------
-
-on:
-  workflow_dispatch:
-    inputs:
-      version:
-        description: 'Version der udgives (skal matche mcp-server/package.json)'
-        required: true
-
-permissions:
-  contents: read
-  id-token: write        # ⛔ den her linje ER trusted publishing. Uden den: ingen OIDC.
-
-jobs:
-  udgiv:
-    # macOS fordi build-release.sh bygger den universelle Swift-binaer
-    # (arm64 + x86_64) der ligger i pakken. En Linux-koerer kan ikke.
-    runs-on: macos-14
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '22'        # OIDC kraever Node >= 22.14
-          registry-url: 'https://registry.npmjs.org'
-
-      # npm >= 11.5.1 er kravet. Koererens npm er aeldre.
-      - name: Ny nok npm
-        run: |
-          npm i -g npm@latest
-          echo "npm $(npm -v) · node $(node -v)"
-
-      - name: Versionen skal matche kilden
-        run: |
-          K="$(node -p "require('./mcp-server/package.json').version")"
-          if [ "$K" != "${{ inputs.version }}" ]; then
-            echo "⛔ kilden siger $K, du bad om ${{ inputs.version }}"; exit 1
-          fi
-          echo "  $K"
-
-      # ⛔ ASTRA runde 2 (25/9): denne vej udgav uden release.sh's lokale porte -
-      #    samtykke-kvitteringen, hele suiten paa en Mac, CI-tjekket. Maerket v$V
-      #    saettes KUN af release.sh efter de porte, saa det er beviset paa at de
-      #    koerte - og det skal pege paa praecis den commit der udgives.
-      - name: Maerket skal findes og pege paa denne commit
-        env:
-          V: ${{ inputs.version }}
-        run: |
-          T="$(git ls-remote --tags origin "refs/tags/v$V^{}" | cut -f1)"
-          [ -z "$T" ] && T="$(git ls-remote --tags origin "refs/tags/v$V" | cut -f1)"
-          if [ -z "$T" ]; then echo "⛔ maerket v$V findes ikke - koer scripts/release.sh $V foerst"; exit 1; fi
-          if [ "$T" != "$GITHUB_SHA" ]; then echo "⛔ v$V peger paa $T, ikke paa $GITHUB_SHA"; exit 1; fi
-          echo "  v$V = $GITHUB_SHA"
-
-      # ⛔ IKKE en bar npm publish. build-release.sh genskriver
-      #    mcp-server/README.md fra rodens README - uden det sender npm en
-      #    pakkeside der mangler afsnit rodens README har, frosset for evigt.
-      - name: Byg udgivelsen
-        run: ./scripts/build-release.sh
-
-      - name: Hjaelperen skal vaere universel
-        run: |
-          A="$(lipo -archs mcp-server/vendor/cmcp-helper)"
-          case "$A" in *x86_64*arm64*|*arm64*x86_64*) echo "  $A" ;;
-            *) echo "⛔ ikke universel: $A"; exit 1 ;; esac
-
-      - name: Paastande der kan proeves uden rettigheder
-        # CMCP_KRAEV_BINAER=1: her SKAL den sendte binaer findes og maales.
-        # Uden flaget springer proeven over den og siger UMAALT - fint paa en
-        # maskine hvor ingen har bygget, men her ville det vaere en blind port.
-        run: CMCP_KRAEV_BINAER=1 node test/claims-offline.mjs
-
-      - name: Revisionskaeden under samtidighed
-        run: node test/audit-chain.mjs
-
-      - name: Udgiv
-        run: cd mcp-server && npm publish --access public
-        # Ingen NODE_AUTH_TOKEN. Det er hele pointen.
diff --git a/.gitignore b/.gitignore
index 567460e8..8b56b019 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,7 @@ videos/*/.hyperframes/
 # lokalt saa alting rigtigt ud fordi filen laa paa disken.
 !docs/demo.mp4
 .dialog-kvittering
+
+# MCPB-bundle build-output (bygges on demand med scripts/build-mcpb.sh)
+dist-mcpb/
+*.mcpb
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6328064d..d3e610b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,23 +3,191 @@
 Dates are the day the version was tagged. Everything here was measured before it
 was written down; where a claim has a test, the test is named.
 
+## 0.2.2
+
+The first version on npm since 0.1.0. It also contains everything under 0.2.1
+below: 0.2.1 was held back in its last live test on 9 October and was never
+published on its own.
+
+**It does not ask about what cannot happen.** `computer_press` first runs the
+same search as a dry run. If nothing matches, more than one thing matches, or the
+lookup does not answer in time, the press is refused and nobody is asked - a yes
+to something that could not be pressed was a wasted consent. A click at a point
+whose app cannot be identified is refused the same way. (`test/knap-ord.mjs`
+11-16, `test/klik-ejer.mjs` 9a/9b)
+**Read-only says read-only.** In `readonly` mode a write is refused for that
+reason before the send port or the press lookup looks at the screen, so the log
+gives the real reason. (`test/readonly-foerst.mjs`)
+**Every menu bar question is measured in the log.** Each line where the menu bar
+icon asked carries `presence`: seconds since the last keyboard or mouse input
+when it was asked and when it ended (`answered` if the answer was yes), the server and icon
+versions, whether the box is on, and how many agent sessions were running. Idle
+time is input activity, not proof that someone saw the question.
+(`test/tilstede.mjs`)
+**A sound for each new question.** Each new question plays one sound - not again
+if the same question is sent twice, and not when it expires. It can be switched
+off in the icon's menu. (`test/ikon-lyd.mjs`)
+**A box in the corner of the screen you are working on.** While an agent works,
+a box in the top-right corner shows which agents are working, in which app and
+what they are doing - on the screen with the window you are using, not the one
+the pointer is on, and it follows you between screens. When a question waits, it
+turns orange and shows the whole question - who, what, where it lands and how
+long a yes counts - with the menu's own buttons: `Allow (Touch ID)` and `Deny`;
+the buttons wait a second after a new question appears. Allowing still asks for Touch ID every time; for a
+question longer than 280 characters, `Allow` is only in the menu. (`test/ikon-boks.mjs`)
+**A screenshot of one app shows its windows where they are.** Measured on macOS
+26.4.1: `computer_screenshot` with an `app` put the app's content in the image's
+top-left corner (Calculator at (405, 516) on screen was at (0, 0) in the image),
+so a point read off the image was clicked in the wrong place and the blackout over
+password fields sat next to the content. On a display that is not Retina, the
+image claimed 2 pixels per point while the content sat at 1, with the same result.
+The capture now takes the whole display as its source at that display's own
+scale. (`test/billede-placering.mjs`)
+**A pop-up behind your work stays shut.** Measured: `computer_press` on a pop-up
+button in an app behind opened its menu on your screen, and it stayed there -
+holding your mouse and keyboard, so a Return chose an item in the app behind -
+until you closed it. That has been so since `computer_press` existed. In the
+background, a press on a pop-up, menu button or combo box is now refused before
+anything is sent, and so are keys and typing when that app's focus is on one;
+during a screen loan they work as before. (`test/menu-vagt.mjs`)
+**A search that ran out of time no longer picks for you.** When an app answers so
+slowly that `computer_find` stops before it has seen the whole app, the answer now
+says `stopped_early` - before, it looked exactly like an empty app. And
+`computer_set_value` and `computer_press` will not pick the one match they found
+after such a search, because a second, identical field may be in the part they did
+not reach: they refuse with `search-incomplete` unless you pass an `index`.
+(`test/skriv-ankommer.mjs` 7-7d)
+**macOS's own password signal stops typing and pasting.** A browser switches on
+macOS's secure input for a password field, also when the accessibility layer only
+sees the page around it. While it is on, `computer_type` types nothing - not
+through the accessibility layer and not as key presses - and `computer_paste`,
+which had no field check at all, now judges the field in front like `type` does:
+an unknown focus or a password field is refused. The signal only ever adds a no.
+(`test/skriv-ankommer.mjs` 5, 5k, 6a-6d)
+**The box now actually appears.** The server starts the status app hidden, so it
+cannot take your focus - and a hidden app shows no windows, so the box never came
+up when the server had started it (measured 9 October: not on screen, on no
+desktop). The app now makes itself visible without becoming active right before it
+shows the box: the box comes up, and the app you are in stays in front.
+(`test/ikon-boks.mjs` 5y; measured live: on screen, layer 25, focus unchanged)
+**The whole loan question fits in the box.** A screen-loan question longer than
+the 280 characters the box shows in full is refused before anyone is asked, so
+`Allow` is always in the box when you are asked; `reason` has room for 248
+characters. The stop button sits on its own row, so a do-it-yourself question
+during a loan keeps all its buttons, and `Follow` works during a loan. `key` with
+a letter, a digit or `cmd+v` writes text, so it is judged like `computer_type`,
+and `computer_set_value` on the focused field also listens to macOS's password
+signal. (`test/skaerm-laan.mjs` 9b-9c, `test/ikon-boks.mjs` 5r-5x,
+`test/skriv-ankommer.mjs` 3t, 5t, 5r, 6e-6g, 7e)
+**The screen loan is in the box, with its stop button.** While an agent has your
+screen, the box says who and how many minutes are left, with `Take the screen back
+now` first - also while the agent is quiet and also when the box is switched off.
+The button works at once: no pause, no Touch ID, whichever question the box is
+showing. Before, a quiet loan could only be seen in the menu bar. The box now sits
+on the status bar's layer, so another app's floating panel cannot cover it, and
+the agent is told to send you to the box. (`test/ikon-boks.mjs` 6e, 7a-7c, 4c,
+5n-5p, 5r-5x, 8a-8c)
+**WhatsApp by its name.** WhatsApp's name starts with an invisible character
+(U+200E, on disk and in the running app), so `app: "WhatsApp"` found nothing:
+starting it in the background was refused as an unknown app, and so was every
+action in it. Names are now compared without invisible formatting characters,
+on the server and in the helper alike - an exact name still wins, and if more
+than one app fits, none is chosen and the action is refused. Once the gate has
+judged a running app, everything after it is bound to that exact app: if it quits
+in between, nothing happens. A name whose bundle id another running process
+shares under a different name (macOS runs services such as AutoFill once per app,
+under one id) is refused rather than guessed. An app without a bundle id is found by its process
+for reading; acting in it is still treated as an unknown app.
+(`test/usynlige-navne.mjs`, `test/bundet-maal.mjs`)
+**A step during a screen loan waits for you.** If you are using the keyboard or
+mouse, the step now waits up to five seconds for a pause instead of telling the
+agent to call again; if you keep going, it is refused and nothing moves.
+(`test/skaerm-laan.mjs` D1-D4)
+**One file for Claude Desktop, and a plugin for Claude Code.** The GitHub release
+carries `computer-mcp.mcpb` and its checksum; the release workflow builds it and
+checks that it starts from the unpacked bundle with npm offline. The repo is a
+Claude Code plugin marketplace: `/plugin marketplace add Agent360dk/computerMCP`,
+then `/plugin install computer-mcp@agent360`. The plugin is pinned to the newest
+version on npm and raised after each release. (`test/mcpb-start.mjs`,
+`test/plugin-manifest.mjs`)
+**The README shows the log as it is.** Lines from an isolated run, byte for
+byte, with the chain checked. (`test/readme-log.mjs`)
+**For contributors:** the five lookups a gate verdict depends on (what is in
+front, what is under a point, what has focus, what a press would hit, and how
+long since the last input) get fixed answers in the stand-in helper unless a
+test asks for the real ones; every test the suite runs that starts a server gets
+its own state folder (the manual Touch ID test deliberately does not); and the
+release tooling says when it cannot tell and can be resumed after a failure.
+(`test/attrap-faste-opslag.mjs`, `test/tilstand-isoleret.mjs`,
+`test/release-fejlmatrix.mjs`, `test/efter-udgivelsen.mjs`)
+
 ## 0.2.1
 
-The first release since 0.1.0. A `v0.2.0` tag exists on GitHub from 20
-September, but that version was never published to npm; everything below is
-new relative to 0.1.0.
+Never published on its own - it ships inside 0.2.2. A `v0.2.0` tag exists on
+GitHub from 20 September, but that version was never published to npm either;
+everything below is new relative to 0.1.0.
 
 **Typing reaches an app in the background.** `computer_type` with an `app` now
 writes into the field that app has focus in and reads it back, instead of sending
 keystrokes an app without a key window can drop (text sent to Finder's search
-field arrived nowhere). A field that does not accept that, and every password
-field, still gets keystrokes, and the answer says the text was not confirmed.
+field arrived nowhere). A field that does not accept that still gets
+keystrokes, and the answer says the text was not confirmed. A password field gets
+nothing: `computer_type` now refuses it as `computer_set_value` always did, and
+checks before every character, so a Tab in "user<Tab>password" - or a click, or a
+field that moves on by itself - stops the typing at the password field.
+**It says where it can be walked around.** The consent gate guards this
+server's own calls; an agent with `osascript` or browser automation in its
+client's allow list never reaches it. `computer_permissions` now names those
+rules (Claude Code settings; other clients are not read) - only the ones that
+allow anything: a wildcard or a script on stdin, not an exact command that runs
+one fixed thing (on a real Mac: 22 of 127 matching rules) - and SECURITY.md says
+plainly what the gate is and is not.
+**A waiting question says so on screen.** Measured on a real Mac: four screen
+loans expired unanswered while the icon correctly turned orange - the box on
+screen only said how many agents were working, on another display. It now says
+`Needs you: click the orange menu bar icon`, and moves to the screen you are
+on when a question arrives (text only; the box never gets a button).
+**The screen can be lent, and taken back.** Background mode kept seven tools
+out of reach unless you restarted with `CMCP_BACKGROUND=0`, per server.
+`computer_request_screen` now asks in the menu bar: you lend this one agent the
+screen with Touch ID for at most 15 minutes, only one agent at a time. Those
+tools then appear for it; each step waits while you are using the keyboard or
+mouse (a step already running finishes), and `Take the screen back now` ends
+the loan at once and stops a step that is still running. Setting `CMCP_BACKGROUND`
+locks it out. Consent in the foreground now goes through the menu bar icon too
+(Touch ID); the dialog is only the fallback when the icon is not running. A no in
+the menu bar, a question already waiting, or an action too long to show in full
+is a no - never a dialog instead.
+**A message to a real person asks every time.** Until now, pressing Send in
+WhatsApp went through in `allow` without anyone being asked. In messaging apps,
+Send (pressed or clicked) and Return/Enter with any modifier now ask for that one
+message, showing the recipient and the text read from the screen by the server.
+A line break in `computer_type` is refused in chat apps, since it sends; in mail it
+is a new line, and Cmd+Return / Cmd+Shift+D is the send. Web chats and webmail in
+a browser count too, recognised by the page title (a chat on a site that is not on
+the list is not recognised). The recipient is the name
+above the text field; if it or the text cannot be read, nothing is sent. If what
+would be sent changes after the yes, nothing is sent.
+**`computer_ask_user` works in background mode.** It used to be a dialog, so
+background mode refused it - and an agent that hit a password or a 2FA code
+could only give up. The question now waits in the menu bar icon: the whole
+request, where it lands (written by the server), and `Take me there`, so it is
+the person who brings the app forward. `Done` is a signal, never a consent, and
+is only accepted on this kind of question.
+**You see the whole action before you allow it.** The menu bar question used to
+cut the action at 200 characters and the Touch ID sheet at 80, without saying so.
+The full text now sits wrapped above `Allow…` (up to 4,000 characters), the sheet
+says when it is shortened, and a longer action is not asked at all.
 **When an app brings itself forward, the front is handed back.** Pressing a
 button or a menu item can make the app bring itself to the front: "New Finder
 Window" pulled Finder over the app the person was working in, and the answer
 said nothing. `computer_press` and `computer_menu` now report `took_screen`, and
 when the target app took the front, it is handed straight back to the app the
-person was in (`gave_back`). Only a switch to the target app is counted.
+person was in (`gave_back`). The front is only handed back when the change was
+the app's own doing: if someone pressed a key or clicked just before, it is left
+where they put it and the reply says the screen changed rather than reactivating
+under their hands. And taking the screen and handing it back is no longer counted
+as a clean background run - the scenario reports it as `delvist`, not proven.
 `computer_launch` with `background: true` does the same: measured on a clean
 Mac, six of eight apps brought themselves forward as they started, before the
 hide took effect. And every `took_screen` that rested on a change of front app
@@ -46,8 +214,20 @@ nothing to reach. An app that already has a window is left exactly as it is.
 `index` (its number in the list `computer_find` returned) pick one element.
 `computer_set_value` no longer guesses with `first` when several fields match:
 in Finder the first text field can be a file name.
-
-**The safety fixes, first.** 0.1.0's redaction could fail open: if painting
+**An app's own door, opened from behind.** `computer_open` reaches an app whose
+window is covered or that will not act from behind, through the app's own URL
+rather than its window: `play_track` (a Spotify track), `open_chat` (a WhatsApp
+chat, with no pre-filled text), `open_app`. You give an intent and one parameter,
+never a URL; the server builds a fixed, validated URL for it, and `file:`,
+`shortcuts:`, `osascript` and anything else are refused. It carries navigation
+only, never a send. Its input safety is proven; its effect on the real apps is
+not yet measured on a Mac that has them.
+
+**The safety fixes, first.**
+The per-app lock now fails closed: if it cannot be taken for any reason other
+than another agent holding it, the action does not happen (before, a lock-
+infrastructure error let two agents write over each other - the very thing the
+lock exists to stop). 0.1.0's redaction could fail open: if painting
 over a password field failed, the unpainted image was used. It now fails
 closed, and the whole image is blacked out when the scan runs out of time.
 Password managers are left out of the capture itself, not just painted over.
diff --git a/README.md b/README.md
index e0eb6728..0b31cc77 100644
--- a/README.md
+++ b/README.md
@@ -7,18 +7,22 @@
 A macOS computer-use MCP server built for the part everyone skips: what happens
 in the hours you are not watching.
 
+- **It runs in every MCP client, not one app.** Claude Code, Cursor, VS Code,
+  Codex, or your own agent - one `npx` line, the same server
+  everywhere. It is not tied to a single vendor's desktop app or plan.
 - **It does not take over your Mac.** It presses buttons and fills fields in
   windows that stay behind the one you are in, and it leaves your pointer where
-  you put it. Nothing gets minimised, nothing comes to the front, nothing steals
-  what you are typing.
+  you put it. When an app pulls itself to the front as it opens, the front is
+  handed straight back and the reply says so - nothing is left stealing what you
+  are typing.
 - **It does not pretend.** When something is refused or fails, it says so and
   says why. The most common complaint about agents driving a computer is that
   they carry on as if it worked.
 - **Several can run at once.** No session lock, no one-at-a-time limit. Writes
   to the shared log take a short file lock, so two servers cannot break the
   chain between them.
-- **It will not go near your passwords.** Keychain, 1Password and seven others
-  ask every time, in every mode, and password fields are blacked out while the
+- **It will not go near your passwords.** Keychain, 1Password and five others
+  are refused in the default mode (with `CMCP_BACKGROUND=0` they ask every time), and password fields are blacked out while the
   screenshot is still in memory. A screen recording leaves password managers
   out, but does not black out password fields.
 - **You can read back what it did.** Every call lands in an append-only log,
@@ -35,8 +39,9 @@ draws its own controls on a canvas and publishes nothing - some games, some
 plotting tools - is still a blind spot. **A browser is a separate case:** the
 switch above is an Electron API, and Chrome does not implement it. Measured on
 Chrome: 29 buttons before and after, unchanged. You get the browser's own
-window - tabs, toolbar, address bar - and not the page inside it. For a page,
-drive the browser with a browser tool.
+window - tabs, toolbar, address bar - and the page inside it only when Chrome
+has built that tree itself (measured both ways, see the limits below). For a
+page, drive the browser with a browser tool.
 
 No account, no API key, no model inside it. MIT.
 
@@ -74,16 +79,21 @@ written. There is no moment where an unredacted picture of your desktop exists
 as a file. Native fields expose the role `AXSecureTextField`; fields in a web
 page expose role `AXTextField` with the *subrole* `AXSecureTextField`. Checking
 only the role would catch native fields and let every browser password box
-through - so both are checked.
+through - so both are checked. In a web page the field is only found when the
+browser shows its page to the accessibility layer, and Chrome has done so on one and the same
+Mac at one time and not at another (see the limits below). Where it does not, the field is not
+painted over; what it shows is the browser's own dots, unless the page itself
+shows the password in plain text.
 
 **2. The dangerous places ask first.** By default the agent works without
 interrupting you - that is what lets it run while you do something else - and
 every write is logged. What never goes through on its own: password managers and
-Keychain ask *every single time*, in every mode, and that one is not
-configurable. Terminals and editors, where a keystroke can be a command, ask once
+Keychain are refused in the default mode, because the menu bar cannot show what
+would be typed (with `CMCP_BACKGROUND=0` they ask *every single time*, in every
+mode), and that one is not configurable. Terminals and editors, where a keystroke can be a command, ask once
 per app per session. Quitting an app, closing a window, switching Space,
-destructive-looking menu items and any action whose target app cannot be
-identified ask every time. The gate judges the app an action lands in: an
+and destructive-looking menu items ask every time; an action whose target app
+cannot be identified is refused in the default mode. The gate judges the app an action lands in: an
 app opened some other way - Spotlight, a shortcut - is guarded by what the
 agent then tries to do in it. Want a dialog before the first write too? Set
 `CMCP_MODE=ask`. If nobody answers, the answer is no.
@@ -106,6 +116,29 @@ breach. The salt is random per run and never written down, because an unsalted
 hash of a short password can be guessed offline by whoever holds the log. The
 honest cost: two actions can be compared within one run, not across runs.
 
+Here is what that looks like, unedited. In the lines below an agent typed a
+sentence into TextEdit behind the window the person was using, asked in the menu
+bar to move a file to the Trash and got no answer, then was refused when it tried
+to type into 1Password. They come from an isolated test run - its own state
+folder and stand-ins for the helper and the menu bar icon, so no real screen was
+touched and nobody's own log was read - which `node scripts/log-uddrag.mjs`
+repeats. In the `presence` fields, the idle times come from the stand-in helper
+and the icon version from the stand-in icon; the session count comes from the
+isolated state, and the surface is derived. Only the box setting was read from
+the Mac that made the run. A test checks that every line is byte for byte in
+[the full log of that run](https://github.com/Agent360dk/computerMCP/blob/main/test/fixtures/audit-readme.jsonl)
+and that its chain holds.
+
+<!-- log-uddrag:start -->
+```jsonl
+{"ts":"2026-10-07T18:36:13.804Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","args":{"app":{"length":8,"sha256_12":"c4d885ae85a3","salted":true},"text":{"length":37,"sha256_12":"53b5b18d7c2b","salted":true}},"target":"com.apple.TextEdit","mode":"allow","asker":"custom","decision":"allowed","asked":false,"reason":"CMCP_MODE=allow","l":1,"kaede":"608dbed0e6cb4d58"}
+{"ts":"2026-10-07T18:36:13.805Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","target":"com.apple.TextEdit","phase":"executing","l":1,"kaede":"08e8f505e7d0e7c8"}
+{"ts":"2026-10-07T18:36:13.852Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","outcome":"ok","effect":"sent","l":1,"kaede":"b8ecd7f441ea98b3"}
+{"ts":"2026-10-07T18:36:15.004Z","session":"0636dcef","call":"558fe0f1","tool":"computer_menu","tier":"write","args":{"app":{"length":6,"sha256_12":"6e84f8d2198c","salted":true},"path":"File > Move to Trash"},"target":"com.apple.finder","mode":"allow","asker":"menubar","presence":{"idle_at_ask":600,"idle_at_end":600,"server":"0.2.2","icon":"0.2.2","box":"on","sessions":1,"surface_derived":"box+menu"},"decision":"denied","asked":true,"reason":"background mode: nobody answered in the menu bar in time","l":1,"kaede":"98e213d5869cb131"}
+{"ts":"2026-10-07T18:36:15.087Z","session":"0636dcef","call":"56b7802a","tool":"computer_type","tier":"write","args":{"app":{"length":9,"sha256_12":"0c1139ec706b","salted":true},"text":{"length":7,"sha256_12":"a2acf331b097","salted":true}},"target":"com.1password.1password","mode":"allow","asker":"custom","decision":"denied","asked":false,"reason":"background mode: this would need a dialog, and a dialog takes the screen (a password app can never be approved from the menu bar)","l":1,"kaede":"81e0ef24b729b4e6"}
+```
+<!-- log-uddrag:end -->
+
 Each gate has a test, and each test has been mutation-checked: break the code on
 purpose and the test goes red. See [Testing](#testing).
 
@@ -116,8 +149,15 @@ purpose and the test goes red. See [Testing](#testing).
 claude mcp add computer -- npx -y @agent360/computer-mcp
 ```
 
+Or, inside Claude Code, as a plugin pinned to the version on npm:
+
+```text
+/plugin marketplace add Agent360dk/computerMCP
+/plugin install computer-mcp@agent360
+```
+
 ```jsonc
-// Cursor, VS Code, Codex CLI, Windsurf - mcp.json
+// Cursor, VS Code, Codex CLI - mcp.json
 {
   "mcpServers": {
     "computer": { "command": "npx", "args": ["-y", "@agent360/computer-mcp"] }
@@ -151,20 +191,21 @@ the client and check `computer_permissions` again.
 | `CMCP_MODE` | Behaviour |
 |---|---|
 | `readonly` | Write tools are not even listed. The agent can look and cannot touch. |
-| `ask` | The first write opens a dialog; one yes grants the session. Password managers still ask every time, terminals and editors once per session. |
-| `allow` | **Default.** Writes proceed without asking, still logged. Password managers *still* ask every time, terminals and editors once per session, and in background mode anything that would need a dialog waits in the menu bar instead. |
+| `ask` | The first write opens a dialog; one yes grants the session. Password managers are refused (with `CMCP_BACKGROUND=0` they ask every time), terminals and editors ask once per session. |
+| `allow` | **Default.** Writes proceed without asking, still logged. Password managers are *still* refused (with `CMCP_BACKGROUND=0` they ask every time), terminals and editors ask once per session, and in background mode anything that would need a dialog waits in the menu bar instead. |
 
 `CMCP_ASK_TIMEOUT` (seconds, default 60) controls how long a dialog waits before
 it refuses.
 
 ## Tools
 
-**30 tools: fourteen that look, sixteen that touch.** Twenty are offered by
+**32 tools: fourteen that look, eighteen that touch.** Twenty-five are offered by
 default, and the agent uses them without asking - the same way a browser tool
 drives a browser. Two gates survive that, and they are the two that matter:
 
-- **Password managers ask every time.** Keychain, 1Password and seven others,
-  in every mode, even after you have said yes. That is the whole difference
+- **Password managers are refused.** Keychain, 1Password and five others, in
+  every mode, even after you have said yes; with `CMCP_BACKGROUND=0` they ask
+  every time instead. That is the whole difference
   between *you may work* and *you may have my passwords*.
 - **Anything that deletes or clears asks every time**, recognised from the words
   in the action itself.
@@ -197,22 +238,32 @@ and the front is handed straight back to the app you were in (`gave_back`).
 `computer_launch` joins them with `background: true`: the app starts behind
 what you are doing. Many apps bring themselves forward as they start - six of
 eight did on a clean Mac - and when one does, the front is handed straight back
-and the answer says `took_screen` and `gave_back`. It is a moment, not nothing. Eight are still held back:
-`move`, `activate`, `quit`, `space`, `window`, `drag`, `paste` and `ask_user`. `CMCP_BACKGROUND=0`
+and the answer says `took_screen` and `gave_back`. It is a moment, not nothing. Seven are still held back:
+`move`, `activate`, `quit`, `space`, `window`, `drag` and `paste` - until you lend
+the screen: `computer_request_screen` asks you in the box in the corner of your
+screen (and in the menu bar), one agent at a time, approved with Touch ID, for at
+most 15 minutes. While it has the screen, each step waits while you are using the
+keyboard or mouse (a step already running finishes), and `Take the screen back
+now` ends the loan at once and stops a step that is still running. That button
+stays in the box for as long as the loan lasts - also when the agent is quiet and
+when you have switched the box off - and it never asks for Touch ID. Setting `CMCP_BACKGROUND` locks it
+out entirely. `CMCP_BACKGROUND=0`
 gives you those too - and a typo will not turn it off, only `0`, `false`, `no`
 or `off`. `CMCP_MODE=ask` puts one consent dialog per session in front of the
-first write, and `CMCP_MODE=readonly` leaves you the twelve that only look.
+first write, and `CMCP_MODE=readonly` leaves you the fourteen that only look.
 
 Both surviving gates are mutation-proved: break them in the source and the
 refusal turns into a free pass, which is how we know the test can fail.
 
 <!-- FORBEHOLD -->
-> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 30 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
-<!-- /FORBEHOLD -->**Look:** `computer_pending` · `computer_screenshot` · `computer_record` · `computer_inspect` · `computer_find` ·
+> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 32 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
+<!-- /FORBEHOLD -->
+
+**Look:** `computer_pending` · `computer_screenshot` · `computer_record` · `computer_inspect` · `computer_find` ·
 `computer_wait_for` · `computer_focused` · `computer_apps` · `computer_windows` ·
 `computer_permissions` · `computer_displays` · `computer_menus` · `computer_audit` · `computer_learning`
 
-**Touch:** `computer_launch` · `computer_quit` · `computer_paste` · `computer_window` · `computer_space` · `computer_menu` · `computer_press` · `computer_set_value` · `computer_ask_user` ·
+**Touch:** `computer_request_screen` · `computer_launch` · `computer_open` · `computer_quit` · `computer_paste` · `computer_window` · `computer_space` · `computer_menu` · `computer_press` · `computer_set_value` · `computer_ask_user` ·
 `computer_click` · `computer_drag` · `computer_type` · `computer_key` · `computer_scroll` ·
 `computer_move` · `computer_activate`
 
@@ -220,12 +271,24 @@ refusal turns into a free pass, which is how we know the test can fail.
 or false, never text. The agent puts the cursor in the field, the dialog names
 the app and the window it is about to land in - written by the server, not by
 the model - and you type on your own keyboard. There is deliberately no route
-through this server for a password to reach a model.
+through this server for a password to reach a model. In background mode there is
+no dialog: the question waits in the box in the corner of your screen and under
+the menu bar icon, with the whole request, where
+it lands, and `Take me there` - your click brings the app forward, not the agent's.
+You do it and choose `Done`. A Done is a signal, not a consent: it can never
+approve anything else.
 
 **`computer_set_value`** writes into a field behind another window without
 moving your pointer, and refuses on a secure field every time. We removed that
 check on purpose once: the modified build wrote into the password box. It is the
 only thing standing there.
+`computer_type` refuses the same way, and checks before every character: when a
+Tab, a click or the page itself moves the focus into a password field halfway
+through, the typing stops there. It also listens to macOS's own password signal
+(secure input), which a browser switches on for a password field even when the
+accessibility layer only sees the page around it: while it is on, nothing is typed
+anywhere. The signal can only add a no - it never turns an unknown field into a
+yes. `computer_paste` judges the field in front the same way before it pastes.
 
 **`computer_wait_for`** waits for an element to appear instead of taking
 screenshots in a loop. Twenty polls cost one call here and twenty images the
@@ -263,11 +326,18 @@ Two or more matches is a refusal, not a guess - the agent gets the candidates
 and has to narrow it down, because pressing the first plausible button is
 exactly the kind of almost-right action nobody notices afterwards.
 
-The consent dialog still comes to the front, and the apps on the always-ask list
+The consent question still reaches you (in the menu bar by default), and the apps on the always-ask list
 still ask every time. `computer_press` names its target app, and that name is
-what the gate judges - so pressing something in 1Password asks even when
+what the gate judges - so pressing something in 1Password is refused (with `CMCP_BACKGROUND=0`: asks) even when
 1Password is nowhere near the front.
 
+**Claude Code's auto mode and the screen tools.** Measured on 1 Oct: after the
+person lent the screen with Touch ID, Claude Code's auto mode still refused
+`computer_move` as a security weakening. That is the client's own guard, not this
+server's, and it is right to be careful. To use the screen tools, run the session
+without auto mode and approve each call when Claude Code asks; the lease and the
+gates in this server still apply on top.
+
 **Several agents at once.** Each MCP client starts its own server, so a second
 chat is just a second process. They share one audit log, and every line carries
 a per-server `session` mark - set `CMCP_CLIENT=<name>` and the line carries that
@@ -285,29 +355,70 @@ at the same time; nothing is serialised that does not have to be.
 
 ## The menu bar icon
 
-While an agent is running, a small icon sits in the menu bar. It is the only
-thing this product puts on your screen, and it never takes focus.
+While an agent is running, a small icon sits in the menu bar, and while one is
+working, a small box sits in the top-right corner of your screen. Those two are
+all this product puts on your screen, and neither ever takes focus.
 
 - **The dropdown lists every agent that is running** - which client, and what it
   is doing right now. Click one to open a live window that follows it. The text
   says *what* it did (`Type 42 characters`, `Press an element in Finder`), never
   what was typed: the characters are not in the status file, not in the log, and
   not in the icon.
+- **The box shows what is happening, where you are working.** It sits in the
+  top-right corner of the screen with the window you are using - not the one the
+  pointer happens to be on - and follows you when you switch screens. It lists
+  which agents are working, in which app, and what they are doing now. It never
+  takes the keyboard, and disappears half a minute after the work stops. You can switch it off in the icon's menu.
 - **A question that needs you turns the icon orange.** In background mode the
   server used to refuse anything that needed a human, because a dialog takes the
   screen. Now it waits for you instead: the question sits in the icon until you
   answer it, and the agent is told nothing happened until you do.
-- **Allowing is deliberate.** `Allow…` lives in a submenu, never one click in the
-  main menu, and it asks for Touch ID (or your Mac's password) every time. The
+- **The box turns orange too, with the whole question.** It shows who is asking,
+  what, where it lands and how long a yes counts - the same lines the server
+  writes into the menu - with the menu's own buttons: `Allow (Touch ID)` and
+  `Deny` (or `Done` for something you do yourself). The buttons wait a second
+  after a new question appears, so a click meant for the last one cannot land on
+  it. For a question longer than 280 characters, `Allow` is only in the menu,
+  where all of it is shown: you see everything a yes covers before you give it.
+- **Allowing is deliberate.** In the menu, `Allow…` lives in a submenu, never one
+  click in the main menu; in the box it is a button. Both ask for Touch ID (or your
+  Mac's password) every time. The
   answer travels back down the same socket connection the question came in on,
   bound to a one-time number with a deadline. A late answer, a different number,
   or a yes without your fingerprint is a no.
+- **You see the whole action before you allow it.** The full text sits in the
+  submenu, wrapped, right above `Allow…` - up to 4,000 characters. Anything longer
+  is not asked at all: a yes has to cover everything you saw.
+- **A message to a real person asks every time.** In the chat and mail apps on
+  its list (WhatsApp, Messages, Slack, Teams, Telegram, Signal, Discord, Mail,
+  Outlook and others) and in web chats and webmail recognised by the page title
+  (WhatsApp, Messenger, Slack, Teams, Telegram, Discord, LinkedIn, Instagram,
+  Facebook, Google Chat, X, Gmail, Outlook and a few more - a chat on any other
+  site is not recognised), pressing or
+  clicking Send - in several languages, or a button with no name at all - and
+  pressing Return in a chat (Cmd+Return in mail) asks you first, for that one
+  message. The question shows who it goes to and what it says, read from the
+  screen by the server: the name above the text field, and the field itself.
+  If either cannot be read, nothing is sent - you send it yourself. A line break
+  typed into a chat is refused, because there it sends; in mail it is just a new
+  line. If the conversation or the text changes after you say yes, nothing is
+  sent. What it cannot see: apps not on the list, and messages sent by other
+  tools your client allows, such as browser automation or `osascript`.
+- **It tells you where it can be walked around.** The gate guards this server's
+  own calls, not your whole Mac. `computer_permissions` lists the rules it
+  recognises in your client that let an agent click, type or send without it -
+  a shell, `sudo`, `osascript`, a script interpreter, browser or computer
+  automation - so you can decide whether to keep them. It reads Claude Code's
+  settings; other clients are not read.
 - **Some things can never be approved there**: apps on the always-ask list
   (password managers), an action whose target app could not be resolved, and an
   unredacted screenshot. Those stay refused and show up in `computer_pending`.
 - **No banners by default, and never a button in one.** A notification with an
   `Allow` button would be a second way to say yes - and an agent can click a
   notification. You can switch a plain banner on from the icon's own menu.
+- **A sound for each new question.** Each new question plays one sound; switch it off in the icon's menu.
+  It does not play again if the same question is sent twice, and not when it
+  expires.
 - **The icon cannot be touched by an agent.** Any write tool aimed at it is
   refused in every mode, before the gate can even ask. Measured: without that
   rule, three of three presses reached the helper.
@@ -335,14 +446,16 @@ sit unnoticed until it expires. That is a real limitation today, not a setting.
 - **Consent is not containment.** After you approve, the agent drives your real
   Mac - that is what you approved. If you need a boundary rather than a
   decision, run it in a VM. That is the honest answer, not a missing feature.
-- **It does not see inside web pages.** Measured 23 Sep on two Chromes - the
+- **It cannot count on seeing inside web pages.** Measured 23 Sep on two Chromes - the
   one in use and a clean Chrome for Testing: **zero** web areas in the
   accessibility tree, no page text, only the browser's own buttons and address
   bar. Chrome builds that tree for a real screen reader, not for the switch
   Electron apps honour. Apps built on Electron - VS Code, Slack, Notion, the
   IDE this was measured in - do expose their content: 4.000 nodes, 1.434 texts,
-  267 buttons in one window. So: inside a web page, use a browser tool; inside
-  an app, use this one. They do not overlap.
+  267 buttons in one window. On 9 Oct the Chrome on the same Mac did show its
+  pages (861 nodes on one page). Why it changed is not measured - Chrome decides
+  for itself when to build that tree. Until that is measured and built on, treat
+  a web page as a browser tool's job and an app as this one's.
 - **Keystrokes do not land in a Chromium window that is not focused.** Measured
   the same day: the helper reported `typed: 21` and `took_screen: false`, and
   the text arrived nowhere. `computer_set_value` through the accessibility
@@ -362,7 +475,10 @@ sit unnoticed until it expires. That is a real limitation today, not a setting.
   open the system will not even say which app has focus - and a save panel's
   *Go to folder* could not be driven through an app's own queue. So the agent
   can read them, but it cannot choose in them without taking the screen. Today
-  it stops and says so rather than pretending.
+  it stops and says so rather than pretending: a press on a pop-up, menu button
+  or combo box behind is refused, and so are keys while the focus is on one. A
+  plain button that pops up a menu of its own is not recognised in advance - if
+  that menu opens over your work, close it with Escape.
 
 ## Building from source
 
diff --git a/SECURITY.md b/SECURITY.md
index d8584904..77bdc215 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -20,6 +20,8 @@ In scope:
 - Making an expired or dismissed dialog resolve as approval
 - Clear-text secrets appearing in the audit log
 - Command injection through any argument that reaches the helper binary
+- Sending a message in a messaging app through this server without the person
+  seeing who it goes to and what it says, and approving that one message
 
 Out of scope, and documented as such:
 
@@ -29,6 +31,27 @@ Out of scope, and documented as such:
   containment, and the README says so before you install.
 - Prompt injection that leads to an action the user then approves.
 - macOS permissions being held by the host app rather than by this package.
+- Sends that never pass through this server: browser automation, `osascript`,
+  or any other tool your client allows. The send port guards this server's own
+  calls; your client's permissions decide the rest.
+- A web chat or webmail whose page title is not on the recognised list, and a
+  messaging app not on the list. Recognition is by title and bundle ID; the
+  lists are in `policy.js` and in the README.
+
+## What the consent gate is, and is not
+
+The gate guards this server's own tool calls. It is not a jail. An agent that
+also has a shell under your user can quit the menu bar icon and answer on its
+socket, edit this package's files, or click and type with `osascript` without
+ever calling us. Nothing inside this package can prevent that - everything it
+has is writable by the same user.
+
+The control that does sit outside the agent is your MCP client's permissions.
+`computer_permissions` lists the rules it recognises there that let an agent act
+without this server (for Claude Code: a shell, `sudo`, `osascript`, script
+interpreters, browser or computer automation). It is a list of known patterns,
+not a proof that nothing else gets around the gate; other clients are not read.
+Only you can remove those rules.
 
 ## Supported versions
 
diff --git a/WISHLIST.md b/WISHLIST.md
index aebe931d..13006dc8 100644
--- a/WISHLIST.md
+++ b/WISHLIST.md
@@ -23,6 +23,21 @@ Nothing from outside yet - the package is two days old. The forms above are the
 
 ---
 
+## ⏳ Waiting for 0.2.2
+
+- **A menu-bar question has to be noticeable, not just askable.** Measured 6/10 in the audit log:
+  23 questions went through the icon, 1 was approved. 22 timed out (15 of them screen-lending),
+  while a person was sitting at the machine. Screen-lending already has a 5-minute window, measured
+  separately - the window is not the problem, the question itself is too easy to miss (a colour
+  change in the menu bar, no sound, no notification). In practice "deletion and sending asks you
+  first" becomes "refused quietly", and screen-lending cannot be used at all. Proposed: a real
+  macOS notification (`UNUserNotificationCenter` from `cmcp-status`) naming the app and the action,
+  with Allow/Deny buttons; a short sound per question; the icon blinking until it is answered; and
+  a test asserting exactly one notification per question. Measure after shipping: the share of
+  approved-or-denied versus timed-out menu-bar questions in `audit.jsonl`.
+
+---
+
 ## ⏳ Waiting for 0.3.0
 
 - **A running server never tells you it is out of date.** Measured 20/9, and it cost a real day:
diff --git a/bundle/manifest.json b/bundle/manifest.json
new file mode 100644
index 00000000..450f1bb8
--- /dev/null
+++ b/bundle/manifest.json
@@ -0,0 +1,44 @@
+{
+  "manifest_version": "0.3",
+  "name": "computer-mcp",
+  "display_name": "Computer MCP",
+  "version": "0.2.2",
+  "description": "macOS computer use you can leave running: it stays behind your window and never touches passwords.",
+  "long_description": "A macOS computer-use MCP server built for the hours you are not watching. It acts in windows behind the one you are in and leaves your pointer alone, it says so when something fails, several can run at once, and it will not go near your password manager. Every action is written to an append-only audit log. Runs in any MCP client, macOS, MIT, no account.",
+  "author": {
+    "name": "Agent360",
+    "url": "https://computermcp.dev"
+  },
+  "homepage": "https://computermcp.dev",
+  "documentation": "https://computermcp.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Agent360dk/computerMCP"
+  },
+  "license": "MIT",
+  "keywords": ["macos", "computer-use", "mcp", "accessibility", "security", "privacy", "background", "audit", "automation"],
+  "server": {
+    "type": "node",
+    "entry_point": "server/index.js",
+    "mcp_config": {
+      "command": "node",
+      "args": ["${__dirname}/server/index.js"],
+      "env": {
+        "CMCP_MODE": "${user_config.mode}",
+        "CMCP_CLIENT": "claude-desktop"
+      }
+    }
+  },
+  "compatibility": {
+    "platforms": ["darwin"]
+  },
+  "user_config": {
+    "mode": {
+      "type": "string",
+      "title": "Mode",
+      "description": "readonly = the agent can look, not touch · ask = the first write asks you, and one yes covers the session · allow = writes go ahead without asking, still logged (default)",
+      "default": "allow",
+      "required": false
+    }
+  }
+}
diff --git a/docs/404.html b/docs/404.html
index 9f015b8b..4d4930fa 100644
--- a/docs/404.html
+++ b/docs/404.html
@@ -87,7 +87,7 @@ <h2>The pages that do exist</h2>
 <a href="/docs/install-claude-code/">Install for Claude Code</a>
 <a href="/docs/install-codex/">Install for Codex</a>
 <a href="/docs/install-cursor/">Install for Cursor</a>
-<a href="/tools.html">All 30 tools</a>
+<a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">Capability matrix</a>
 <a href="/security.html">Threat model</a>
 <a href="/learn/mcp-security/">MCP security</a>
diff --git a/docs/blog/driving-macos-from-an-ai-agent.html b/docs/blog/driving-macos-from-an-ai-agent.html
index e4f5c76c..36008b63 100644
--- a/docs/blog/driving-macos-from-an-ai-agent.html
+++ b/docs/blog/driving-macos-from-an-ai-agent.html
@@ -156,7 +156,7 @@ <h2>What we would tell someone starting today</h2>
 </ol>
 
 <div class="box">
-<p><strong>Computer MCP</strong> is the macOS computer-use MCP server these findings came out of. Thirty tools, no API key, MIT, and a <a href="../security.html">security model</a> that is specific about what it does not cover. The <a href="https://github.com/Agent360dk/computerMCP/tree/main/recipes">recipes folder</a> collects app-specific notes like the Electron numbers above, and it takes contributions.</p>
+<p><strong>Computer MCP</strong> is the macOS computer-use MCP server these findings came out of. Thirty-two tools, no API key, MIT, and a <a href="../security.html">security model</a> that is specific about what it does not cover. The <a href="https://github.com/Agent360dk/computerMCP/tree/main/recipes">recipes folder</a> collects app-specific notes like the Electron numbers above, and it takes contributions.</p>
 </div>
 </main>
 
diff --git a/docs/docs/capability-matrix/index.html b/docs/docs/capability-matrix/index.html
index f63f79f2..b17318b9 100644
--- a/docs/docs/capability-matrix/index.html
+++ b/docs/docs/capability-matrix/index.html
@@ -8,7 +8,7 @@
   <link rel="icon" type="image/x-icon" href="/favicon.ico">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <meta name="theme-color" content="#0d1117">
-<meta name="description" content="Every wall an agent hits on macOS, and which side of it we are on: measured, by design, not yet, or we will not cross it. thirty tools, and an honest list of what they cannot reach.">
+<meta name="description" content="Every wall an agent hits on macOS, and which side of it we are on: measured, by design, not yet, or we will not cross it. thirty-two tools, and an honest list of what they cannot reach.">
 <link rel="canonical" href="https://computermcp.dev/docs/capability-matrix/">
 <meta property="og:type" content="article">
 <meta property="og:url" content="https://computermcp.dev/docs/capability-matrix/">
@@ -93,7 +93,7 @@ <h2>Walls that exist because the tool is not you</h2>
 <tr><th style="width:220px">Wall</th><th style="width:110px"></th><th>What actually happens</th></tr>
 <tr><td>macOS permissions</td><td><span class="k d">by design</span></td><td>Accessibility and Screen Recording must be granted by a human, once, in System Settings. No tool can grant them to itself - that is the whole point of them. <span class="k u">unmeasured:</span> which process the grant attaches to when the server is started by an MCP client over <code>npx</code>, and whether upgrading re-prompts. <a href="https://github.com/Agent360dk/computerMCP/issues">Issue #4</a> tracks it.</td></tr>
 <tr><td>Touch ID, biometrics</td><td><span class="k x">will not</span></td><td>Cannot be simulated, and should not be. A fingerprint prompt is a human saying yes with their body.</td></tr>
-<tr><td>Passwords, 2FA codes, CAPTCHAs</td><td><span class="k d">by design</span></td><td>The agent never receives one. <code>computer_ask_user</code> puts the cursor in the field, shows a dialog naming the app and window, and you type on your own keyboard. It returns <em>true</em> or <em>false</em> - never text. There is deliberately no route through this server for a secret to reach a model.</td></tr>
+<tr><td>Passwords, 2FA codes, CAPTCHAs</td><td><span class="k d">by design</span></td><td>The agent never receives one. <code>computer_ask_user</code> puts the cursor in the field and names the app and window - in the menu bar icon in background mode, in a dialog otherwise - and you type on your own keyboard. <code>computer_type</code> refuses password fields, checked before every character. It returns <em>true</em> or <em>false</em> - never text. There is deliberately no route through this server for a secret to reach a model.</td></tr>
 </table></div>
 
 <h2>Walls in macOS itself</h2>
@@ -112,14 +112,14 @@ <h2>Walls we clear partly, and say so</h2>
 <div class="scroll"><table>
 <tr><th style="width:220px">Wall</th><th style="width:110px"></th><th>What actually happens</th></tr>
 <tr><td>Redacting secrets</td><td><span class="k m">measured</span></td><td>Only what macOS <em>marks</em> as secure is painted out. Measured on a real web page: a password input carries role <code>AXTextField</code> with subrole <code>AXSecureTextField</code> and is redacted; a plain text field is not. A password in a text editor, or a token printed in a terminal, carries no marker and <strong>will not be hidden</strong>. Use <code>readonly</code> when the screen holds something the system cannot know about.</td></tr>
-<tr><td>Working without taking over the screen</td><td><span class="k m">measured</span></td><td>Three kinds, and the difference is how the action is delivered, not what the tool is called. <b>Quiet by delivery:</b> <code>computer_press</code>, <code>computer_set_value</code> and <code>computer_menu</code> fire the element's own accessibility action, so they work on a window <em>behind</em> the one you are in and never touch your pointer. The app can still bring itself forward in response - measured: File &gt; New Finder Window did - and then <code>press</code> and <code>menu</code> answer <code>took_screen</code> and hand the front straight back. <b>Quiet when you name the app:</b> <code>computer_click</code>, <code>computer_type</code>, <code>computer_key</code> and <code>computer_scroll</code> are delivered into that app's own event queue - measured: the text arrived, the pointer stayed where it was left, and the front window did not change. <code>computer_launch</code> joins them with <code>background: true</code> - measured on a clean Mac, six of eight apps brought themselves forward as they started, and the front is handed straight back. Without an app they go through the system input tap and land wherever your keyboard focus is, so in background mode they are refused. One measured limit: keystrokes do not land in a Chromium window that is not focused, so for anything Chromium-based use <code>computer_press</code> and <code>computer_set_value</code>. <b>Held back in background mode:</b> <code>computer_move</code>, <code>computer_drag</code>, <code>computer_paste</code>, <code>computer_activate</code>, <code>computer_quit</code>, <code>computer_space</code>, <code>computer_window</code> and <code>computer_ask_user</code>. Each either moves your pointer, brings something to the front, or changes what you see - a window moved on a screen you are looking at is a quiet channel with a very visible result.</td></tr>
+<tr><td>Working without taking over the screen</td><td><span class="k m">measured</span></td><td>Three kinds, and the difference is how the action is delivered, not what the tool is called. <b>Quiet by delivery:</b> <code>computer_press</code>, <code>computer_set_value</code> and <code>computer_menu</code> fire the element's own accessibility action, so they work on a window <em>behind</em> the one you are in and never touch your pointer. The app can still bring itself forward in response - measured: File &gt; New Finder Window did - and then <code>press</code> and <code>menu</code> answer <code>took_screen</code> and hand the front straight back. <b>Quiet when you name the app:</b> <code>computer_click</code>, <code>computer_type</code>, <code>computer_key</code> and <code>computer_scroll</code> are delivered into that app's own event queue - measured: the text arrived, the pointer stayed where it was left, and the front window did not change. <code>computer_launch</code> joins them with <code>background: true</code> - measured on a clean Mac, six of eight apps brought themselves forward as they started, and the front is handed straight back. Without an app they go through the system input tap and land wherever your keyboard focus is, so in background mode they are refused. One measured limit: keystrokes do not land in a Chromium window that is not focused, so for anything Chromium-based use <code>computer_press</code> and <code>computer_set_value</code>. <b>Held back in background mode:</b> <code>computer_move</code>, <code>computer_drag</code>, <code>computer_paste</code>, <code>computer_activate</code>, <code>computer_quit</code>, <code>computer_space</code> and <code>computer_window</code>. Each either moves your pointer, brings something to the front, or changes what you see - a window moved on a screen you are looking at is a quiet channel with a very visible result. <code>computer_ask_user</code> left this list on 29 September: in background mode its question waits in the menu bar icon instead of a dialog. And the held-back seven are no longer out of reach: <code>computer_request_screen</code> asks you to lend this one agent the screen, approved with Touch ID in the menu bar, for at most 15 minutes. While it has it, each step waits while you are using the keyboard or mouse (a step already running finishes), and one click in the menu takes the screen back and stops a step still running. Set <code>CMCP_BACKGROUND</code> and nothing can borrow it.</td></tr>
 <tr><td>Several agents at once</td><td><span class="k m">measured</span></td><td>Each MCP client runs its own server. Measured: two servers, 50 interleaved writes, <strong>zero torn lines</strong>, and every line carries a <code>session</code> mark. But they share one pointer and one focused window, and nothing locks between them. Give background work to <code>computer_press</code>.</td></tr>
 <tr><td>Knowing where the cursor is</td><td><span class="k m">measured</span></td><td><code>computer_focused</code> reports the focused element and whether it is secure. The system-wide lookup alone returns nothing - measured - so it goes through the focused application, then the frontmost app.</td></tr>
 <tr><td>A Save / Don't Save sheet</td><td><span class="k m">measured</span></td><td>The sheet you meet every time you close something with unsaved work. Measured: the sheet is found as <code>AXSheet</code>, all three buttons come back with a center and a <code>pressable</code> flag, and <code>computer_find</code> with <code>contains: "Don't Save"</code> returns exactly that one button - an agent looks for the words, not for a position. It is also the clearest case for the gate: a sheet can throw away work on your behalf, so in read-only mode pressing it is refused and nothing reaches the machine. Measured against a sheet the test puts up itself, in a fully transparent window, so proving it costs nobody their screen.</td></tr>
 <tr><td>The Dock and the status icons</td><td><span class="k m">measured</span></td><td>Wi-Fi, the clock, the battery, and every app in the Dock were invisible until today, and the reason was not that they are special: they simply live <em>outside any window</em>. Measured: the Dock has zero windows and 32 dock items hanging off the application itself; Control Center has zero windows and nine menu bar items. The search walked down through windows only, so everything outside one was unreachable. It now falls back to the application element when an app has no windows - <code>computer_find</code> returns them like anything else, with a center you can click and a <code>pressable</code> flag. Nothing changes for apps that do have windows.</td></tr>
 <tr><td>Whether an update breaks your permissions</td><td><span class="k m">measured</span></td><td>It does not. The grant belongs to the <em>host</em> - the app that launches the server, which is your terminal, your editor or Claude Desktop - and not to our binary. Measured directly: the same helper run from a path macOS had never seen still reports Accessibility, and so does a copy with a byte appended, which gives it a different signature entirely. So upgrading the package does not send you back to System Settings. The flip side is worth knowing too: the permission you granted covers anything that host launches, not this tool alone.</td></tr>
 <tr><td>Knowing that something is waiting for you</td><td><span class="k m">measured</span></td><td>If the server may never take the screen, it cannot knock either. A write that would need a dialog is refused, and the explanation goes back to the model - which only reaches you if you read that particular conversation. <code>computer_pending</code> makes it visible instead: what was asked for, when, and why it stopped. It is a list, not a button - nothing there can be approved from there, because a consent granted without a human is the one thing the gate exists to prevent. To allow the work you change the mode, and the queue simply says what is waiting.</td></tr>
-<tr><td>Never taking over the screen at all</td><td><span class="k m">measured</span></td><td><b>This is the default.</b> The server runs in background mode unless you set <code>CMCP_BACKGROUND=0</code>, and a typo does not turn it off - only <code>0</code>, <code>false</code>, <code>no</code> or <code>off</code> count as a no.<br><br><b>What that means for the tools.</b> Until 21 September background mode hid all thirteen of those that could take the screen, which made it the product minus half its hands. That was because "takes the screen" was a property of the tool's <em>name</em>. It is not - it is a property of the <em>delivery</em>. An event sent to the global input stream lands in whatever window you are using; the same event delivered into one app's own queue does not. So four of them - <code>computer_type</code>, <code>computer_key</code>, <code>computer_scroll</code> and <code>computer_click</code> - now take an <code>app</code>, and with it they are offered in background mode. Without one the call is refused with an explanation of what to pass instead. <b>Measured: 22 of the 30 are offered in background, eight of them writing</b> - up from 15 and three.<br><br><b>Measured on a machine in use, through the shipped product:</b> text typed into an app that was not in front arrived in that app, the pointer stayed where the person had left it, and the front window did not change. Typing goes into the field that app has focus in and is read back; a field that does not accept that (and every password field) gets keystrokes instead, which an app in the background can drop, and the answer then says the text was not confirmed. <b>That measurement covers typing and key presses. Clicks and scrolls take the same route and have not been measured</b> - a mouse event carries no window number, and whether an app accepts one it never saw the pointer reach is a question we have not answered. The answer still reports on the screen honestly; it does not claim the click landed. Every key press, click, scroll and typed string now carries <code>took_screen</code> in its own answer, derived from what the server did rather than from what happened around it - so it cannot mistake the person moving their own mouse for the server moving it.<br><br><b>Still hidden in background mode, and some always will be:</b> <code>computer_move</code> <em>is</em> the pointer, <code>computer_activate</code> and <code>computer_space</code> exist to move you, and <code>computer_ask_user</code> is a dialog. <code>computer_launch</code> joins the quiet side with <code>background: true</code> - the app starts behind what you are doing. <code>quit</code>, <code>window</code>, <code>drag</code> and <code>paste</code> have not been rebuilt yet.<br><br><b>One thing it does to other apps, and you should know it.</b> To find a password field in Slack, Notion or Discord at all, Chromium's accessibility tree has to be on - so taking a screenshot switches it on in every app on screen, not only the one you asked about. Without that, the blackout is blind in exactly the apps where people type passwords. The cost is carried by those apps: they build and keep a tree they would not otherwise have. <code>CMCP_INGEN_ELECTRON=1</code> turns it off, and the blackout is then blind there.<br><br>The honest limit that does not change: this is a promise about what <em>we</em> do. Press a button and the app may open a window of its own; that is its choice, not ours.</td></tr>
+<tr><td>Never taking over the screen at all</td><td><span class="k m">measured</span></td><td><b>This is the default.</b> The server runs in background mode unless you set <code>CMCP_BACKGROUND=0</code>, and a typo does not turn it off - only <code>0</code>, <code>false</code>, <code>no</code> or <code>off</code> count as a no.<br><br><b>What that means for the tools.</b> Until 21 September background mode hid all thirteen of those that could take the screen, which made it the product minus half its hands. That was because "takes the screen" was a property of the tool's <em>name</em>. It is not - it is a property of the <em>delivery</em>. An event sent to the global input stream lands in whatever window you are using; the same event delivered into one app's own queue does not. So four of them - <code>computer_type</code>, <code>computer_key</code>, <code>computer_scroll</code> and <code>computer_click</code> - now take an <code>app</code>, and with it they are offered in background mode. Without one the call is refused with an explanation of what to pass instead. <b>Measured: 25 of the 32 are offered in background, eleven of them writing</b> - up from 15 and three.<br><br><b>Measured on a machine in use, through the shipped product:</b> text typed into an app that was not in front arrived in that app, the pointer stayed where the person had left it, and the front window did not change. Typing goes into the field that app has focus in and is read back; a field that does not accept that gets keystrokes instead, which an app in the background can drop, and the answer then says the text was not confirmed. A password field gets nothing - checked before every character, so a Tab into one halfway through stops the typing there. <b>That measurement covers typing and key presses. Clicks and scrolls take the same route and have not been measured</b> - a mouse event carries no window number, and whether an app accepts one it never saw the pointer reach is a question we have not answered. The answer still reports on the screen honestly; it does not claim the click landed. Every key press, click, scroll and typed string now carries <code>took_screen</code> in its own answer, derived from what the server did rather than from what happened around it - so it cannot mistake the person moving their own mouse for the server moving it.<br><br><b>Still hidden in background mode, and some always will be:</b> <code>computer_move</code> <em>is</em> the pointer, <code>computer_activate</code> and <code>computer_space</code> exist to move you. <code>computer_ask_user</code> left this list on 29 September: its question now waits in the menu bar icon. <code>computer_launch</code> joins the quiet side with <code>background: true</code> - the app starts behind what you are doing. <code>quit</code>, <code>window</code>, <code>drag</code> and <code>paste</code> have not been rebuilt yet.<br><br><b>One thing it does to other apps, and you should know it.</b> To find a password field in Slack, Notion or Discord at all, Chromium's accessibility tree has to be on - so taking a screenshot switches it on in every app on screen, not only the one you asked about. Without that, the blackout is blind in exactly the apps where people type passwords. The cost is carried by those apps: they build and keep a tree they would not otherwise have. <code>CMCP_INGEN_ELECTRON=1</code> turns it off, and the blackout is then blind there.<br><br>The honest limit that does not change: this is a promise about what <em>we</em> do. Press a button and the app may open a window of its own; that is its choice, not ours.</td></tr>
 <tr><td>Password managers, in the tree as well as the image</td><td><span class="k m">measured</span></td><td>Screenshots black out Keychain Access, Apple Passwords, 1Password, Bitwarden, LastPass and Dashlane entirely. Until today the accessibility tree did not: <code>computer_inspect</code> and <code>computer_find</code> would hand over the contents of the very window the image hides - as a read, so with no consent, in read-only mode, and in background mode. Anything not marked as a secure field came with it: a revealed password sitting in a static field, a one-time code, a secure note, every username. Both now stop at the app: <code>find</code> returns nothing, <code>inspect</code> returns one node saying <code>denied</code> and why - silence with a reason beats silence. Measured on a running app added to the list: 3 matches and 33 nodes became 0 and 1, with zero values.</td></tr>
 <tr><td>Acting quietly inside an app</td><td><span class="k m">measured</span></td><td>The quiet route - <code>computer_press</code> and <code>computer_set_value</code>, which work on a window behind another one without moving your pointer - only exists where the app publishes an accessibility tree. Measured on five running apps: Chrome exposes 321 elements across 4 windows, 148 of them things you can actually press or type into. An Electron app measured before its tree was switched on exposed its 2 windows and 16 elements inside them, <strong>none</strong> usable; with the tree on, the same two windows gave 728 buttons. Finder's desktop window is 103 icons and nothing pressable. Where the tree is empty the only route left is a screenshot and a click by coordinate - which does move the real cursor. So "works on a window behind another one" is true of the app, not of every app.</td></tr>
 <tr><td>Reaching a full-screen app</td><td><span class="k m">measured</span></td><td><code>computer_space</code> switches desktop the way Control+Arrow does, because macOS gives every full-screen window its own desktop - a window the agent cannot find is often simply on another one. It is the one tool here that deliberately <em>does</em> move what you are looking at, so it asks every time, in every mode, like quitting an app. Two honest limits, both measured: if the system shortcut for switching desktops is off on this machine it says so and sends nothing rather than pressing a dead key; and it reports whether the desktop actually changed by comparing which windows are on screen before and after, so it never claims a switch it cannot prove. Two earlier ways of checking that were wrong - counting accessibility windows drifted 10 to 8 with nothing changing, and the system notification never reaches a short-lived command-line process.</td></tr>
@@ -147,10 +147,10 @@ <h2>Not yet, and honestly named</h2>
 <tr><td>Windows or Linux</td><td><span class="k x">will not</span></td><td>macOS only, and none planned. The accessibility model is the product.</td></tr>
 </table></div>
 
-<h2>The thirty tools</h2>
+<h2>The thirty-two tools</h2>
 <div class="scroll"><table>
 <tr><th style="width:120px">Look (14)</th><td><code>computer_permissions</code> · <code>computer_record</code> · <code>computer_apps</code> · <code>computer_windows</code> · <code>computer_displays</code> · <code>computer_menus</code> · <code>computer_screenshot</code> · <code>computer_inspect</code> · <code>computer_pending</code> · <code>computer_audit</code> · <code>computer_find</code> · <code>computer_wait_for</code> · <code>computer_focused</code> · <code>computer_learning</code></td></tr>
-<tr><th>Touch (16)</th><td><code>computer_launch</code> · <code>computer_quit</code> · <code>computer_drag</code> · <code>computer_space</code> · <code>computer_paste</code> · <code>computer_window</code> · <code>computer_menu</code> · <code>computer_set_value</code> · <code>computer_press</code> · <code>computer_ask_user</code> · <code>computer_click</code> · <code>computer_move</code> · <code>computer_scroll</code> · <code>computer_type</code> · <code>computer_key</code> · <code>computer_activate</code></td></tr>
+<tr><th>Touch (18)</th><td><code>computer_request_screen</code> · <code>computer_launch</code> · <code>computer_open</code> · <code>computer_quit</code> · <code>computer_drag</code> · <code>computer_space</code> · <code>computer_paste</code> · <code>computer_window</code> · <code>computer_menu</code> · <code>computer_set_value</code> · <code>computer_press</code> · <code>computer_ask_user</code> · <code>computer_click</code> · <code>computer_move</code> · <code>computer_scroll</code> · <code>computer_type</code> · <code>computer_key</code> · <code>computer_activate</code></td></tr>
 </table></div>
 <div class="box"><p>In <code>CMCP_MODE=readonly</code> only the fourteen reading tools are listed at all. A model that can see a tool will eventually try it, and a refusal per call is noise.</p></div>
 
diff --git a/docs/docs/install-claude-code/index.html b/docs/docs/install-claude-code/index.html
index cc0407b9..1436256a 100644
--- a/docs/docs/install-claude-code/index.html
+++ b/docs/docs/install-claude-code/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for Claude Code</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,13 +108,14 @@ <h1>Install Computer MCP for Claude Code</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and
-the sixteen write tools are not even listed to the model. It can look at your screen and it
+the eighteen write tools are not even listed to the model. It can look at your screen and it
 cannot touch anything. You see the whole tool list before you grant anything, and you can
 move to <code>ask</code> when you have. Step 1b below shows where the setting goes.</p>
 </div>
 
 <h2>Step 1: Add the server to Claude Code</h2>
 <pre><code>claude mcp add --scope user computer -- npx -y @agent360/computer-mcp@latest</code></pre><p><code>--scope user</code> registers it once for every project instead of only the folder you happen to be standing in.</p>
+<p>Or install it as a plugin from inside Claude Code, pinned to the version on npm: <code>/plugin marketplace add Agent360dk/computerMCP</code>, then <code>/plugin install computer-mcp@agent360</code>.</p>
 
 <h3>Step 1b: pick the mode before the first run</h3>
 <div class="scroll"><table>
@@ -202,7 +203,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/security.html">Threat model</a>
 <a href="/learn/mcp-security/">MCP security checklist</a>
diff --git a/docs/docs/install-claude-desktop/index.html b/docs/docs/install-claude-desktop/index.html
index e83eeb95..db388116 100644
--- a/docs/docs/install-claude-desktop/index.html
+++ b/docs/docs/install-claude-desktop/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for Claude Desktop</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,7 +108,7 @@ <h1>Install Computer MCP for Claude Desktop</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and the
-sixteen write tools are not even listed to the model. It can look at your screen and it cannot
+eighteen write tools are not even listed to the model. It can look at your screen and it cannot
 touch anything. You see the whole tool list before you grant anything.</p>
 </div>
 
@@ -229,7 +229,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
 <a href="/docs/uninstall/">Uninstall</a>
diff --git a/docs/docs/install-codex/index.html b/docs/docs/install-codex/index.html
index 11974e6d..6838a86d 100644
--- a/docs/docs/install-codex/index.html
+++ b/docs/docs/install-codex/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for OpenAI Codex</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,7 +108,7 @@ <h1>Install Computer MCP for OpenAI Codex</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and
-the sixteen write tools are not even listed to the model. It can look at your screen and it
+the eighteen write tools are not even listed to the model. It can look at your screen and it
 cannot touch anything. You see the whole tool list before you grant anything, and you can
 move to <code>ask</code> when you have. Step 1b below shows where the setting goes.</p>
 </div>
@@ -202,7 +202,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/security.html">Threat model</a>
 <a href="/learn/mcp-security/">MCP security checklist</a>
diff --git a/docs/docs/install-copilot/index.html b/docs/docs/install-copilot/index.html
index 84de4032..b6ae1088 100644
--- a/docs/docs/install-copilot/index.html
+++ b/docs/docs/install-copilot/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for GitHub Copilot</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,7 +108,7 @@ <h1>Install Computer MCP for GitHub Copilot</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and the
-sixteen write tools are not even listed to the model. It can look at your screen and it cannot
+eighteen write tools are not even listed to the model. It can look at your screen and it cannot
 touch anything. You see the whole tool list before you grant anything.</p>
 </div>
 
@@ -228,7 +228,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
 <a href="/docs/uninstall/">Uninstall</a>
diff --git a/docs/docs/install-cursor/index.html b/docs/docs/install-cursor/index.html
index 96986f86..ae6509e7 100644
--- a/docs/docs/install-cursor/index.html
+++ b/docs/docs/install-cursor/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for Cursor</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,7 +108,7 @@ <h1>Install Computer MCP for Cursor</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and
-the sixteen write tools are not even listed to the model. It can look at your screen and it
+the eighteen write tools are not even listed to the model. It can look at your screen and it
 cannot touch anything. You see the whole tool list before you grant anything, and you can
 move to <code>ask</code> when you have. Step 1b below shows where the setting goes.</p>
 </div>
@@ -215,7 +215,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/security.html">Threat model</a>
 <a href="/learn/mcp-security/">MCP security checklist</a>
diff --git a/docs/docs/install-vscode/index.html b/docs/docs/install-vscode/index.html
index 2a6ad8b7..415f5a0a 100644
--- a/docs/docs/install-vscode/index.html
+++ b/docs/docs/install-vscode/index.html
@@ -91,11 +91,11 @@ <h1>Install Computer MCP for VS Code</h1>
 
 <div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has 30: menu bar
+<b>0.1.0</b>, which has 12 tools. The code in the repository has 32: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
-Those ship with 0.2.1, which is built and tested but not published yet.</p>
+Those ship with 0.2.2, which is built and tested but not published yet.</p>
 <p>Everything else on this page works with what you install today. If you want
 all of them now, <a href="https://github.com/Agent360dk/computerMCP">build from
 source</a>: about thirty-five seconds, and nothing to download.</p>
@@ -108,7 +108,7 @@ <h1>Install Computer MCP for VS Code</h1>
 
 <div class="box">
 <p><b>Start in read-only.</b> Set <code>CMCP_MODE=readonly</code> for the first run and the
-sixteen write tools are not even listed to the model. It can look at your screen and it cannot
+eighteen write tools are not even listed to the model. It can look at your screen and it cannot
 touch anything. You see the whole tool list before you grant anything.</p>
 </div>
 
@@ -218,7 +218,7 @@ <h2>FAQ</h2>
 <details><summary>Is there a Windows or Linux build?</summary><p>No, and there is no plan for one. The three guarantees are built on macOS APIs: the Accessibility API for what an element is, and ScreenCaptureKit for the screenshot. A port would be a different product with different guarantees, not the same one recompiled.</p></details>
 
 <h2>Related</h2>
-<div class="rel"><a href="/tools.html">All 30 tools</a>
+<div class="rel"><a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
 <a href="/docs/uninstall/">Uninstall</a>
diff --git a/docs/index.html b/docs/index.html
index d4b3c8fe..530e8fb4 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -6,7 +6,7 @@
 <meta name="msvalidate.01" content="582C4D765316F7C90DBE1E6F244968DF">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <title>Computer MCP - computer use you can actually leave running</title>
-<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "SoftwareApplication", "name": "Computer MCP", "applicationCategory": "DeveloperApplication", "operatingSystem": "macOS 14 or later", "description": "macOS computer use built for unattended runs: it acts on windows behind the one you are in and leaves the pointer alone, it reports failures instead of pretending, several sessions run at once, password managers ask every time, and every call lands in an append-only log. 30 tools, 14 read-only. No account, no API key, no network calls of its own.", "url": "https://computermcp.dev/", "downloadUrl": "https://www.npmjs.com/package/@agent360/computer-mcp", "codeRepository": "https://github.com/Agent360dk/computerMCP", "license": "https://opensource.org/licenses/MIT", "softwareHelp": "https://computermcp.dev/docs/install-claude-code/", "featureList": ["Acts on background windows without moving your pointer or raising anything", "Reports refusals and failures instead of carrying on as if they worked", "Several sessions at once - no session lock, no one-at-a-time limit", "Password managers ask every time, in every mode", "Secure text fields blacked out before the screenshot is written", "Append-only audit log, fingerprinted rather than stored in clear", "No shell execution, no file access, no network calls of its own"], "offers": {"@type": "Offer", "price": "0", "priceCurrency": "USD"}, "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}, {"@context": "https://schema.org", "@type": "Organization", "name": "Agent360", "url": "https://agent360.dk", "sameAs": ["https://github.com/Agent360dk", "https://browsermcp.dev", "https://jesperai.com"]}, {"@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "Does anything leave my machine?", "acceptedAnswer": {"@type": "Answer", "text": "No. There is no account, no telemetry and no server of ours involved. Screenshots go to the MCP client you configured - the same place the rest of your conversation goes - and nowhere else.The same rule holds for this website: no analytics, no cookies, no third-party requests. The only <script> tag anywhere on the site is application/ld+json structured data, which your browser does not execute - never a program. View source and check."}}, {"@type": "Question", "name": "How is this different from the other macOS MCP servers?", "acceptedAnswer": {"@type": "Answer", "text": "Capability-wise, not enormously - screenshots, clicks, keystrokes, the accessibility tree. The difference is what happens in the hours you are not watching. It works in windows behind the one you are in and leaves your pointer where you put it, so it does not take over the machine while you use it. It tells you when something failed instead of carrying on as if it worked. Several can run at once. And it will not go near your password manager. If you only ever watch it work, most of that is wasted on you."}}, {"@type": "Question", "name": "Why is the audit log fingerprinted instead of plain?", "acceptedAnswer": {"@type": "Answer", "text": "Because a complete record of every keystroke is exactly the file an attacker would want. The fingerprint proves two actions typed the same thing without ever storing what it was. It is scrambled with a random ingredient that only exists while it runs - a fingerprint without that random ingredient, of an eight-character password, is guessable offline, which would have made the log the very thing this promise is against. The cost is honest: comparison works within a run, not across runs."}}, {"@type": "Question", "name": "Can I turn the redaction off?", "acceptedAnswer": {"@type": "Answer", "text": "Yes - redact: false on a single screenshot. It is per call and never sticky, and the result says plainly that the image was not redacted."}}, {"@type": "Question", "name": "Does it ask me before it does things?", "acceptedAnswer": {"@type": "Answer", "text": "Not for ordinary work - it acts, and every call lands in the log. A few things never happen without a person saying yes: your password manager, anything that deletes or clears, and starting a screen recording. In the default mode they wait in the menu bar icon - a password manager cannot be approved there, so it is refused. If you would rather be asked once up front, CMCP_MODE=ask puts a single session-granting dialog in front of the first write, and ignoring that dialog refuses the action rather than allowing it."}}]}]</script>
+<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "SoftwareApplication", "name": "Computer MCP", "applicationCategory": "DeveloperApplication", "operatingSystem": "macOS 14 or later", "description": "macOS computer use built for unattended runs: it acts on windows behind the one you are in and leaves the pointer alone, it reports failures instead of pretending, several sessions run at once, password managers ask every time, and every call lands in an append-only log. 32 tools, 14 read-only. No account, no API key, no network calls of its own.", "url": "https://computermcp.dev/", "downloadUrl": "https://www.npmjs.com/package/@agent360/computer-mcp", "codeRepository": "https://github.com/Agent360dk/computerMCP", "license": "https://opensource.org/licenses/MIT", "softwareHelp": "https://computermcp.dev/docs/install-claude-code/", "featureList": ["Acts on background windows without moving your pointer or raising anything", "Reports refusals and failures instead of carrying on as if they worked", "Several sessions at once - no session lock, no one-at-a-time limit", "Password managers ask every time, in every mode", "Secure text fields blacked out before the screenshot is written", "Append-only audit log, fingerprinted rather than stored in clear", "No shell execution, no file access, no network calls of its own"], "offers": {"@type": "Offer", "price": "0", "priceCurrency": "USD"}, "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}, {"@context": "https://schema.org", "@type": "Organization", "name": "Agent360", "url": "https://agent360.dk", "sameAs": ["https://github.com/Agent360dk", "https://browsermcp.dev", "https://jesperai.com"]}, {"@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "Does anything leave my machine?", "acceptedAnswer": {"@type": "Answer", "text": "No. There is no account, no telemetry and no server of ours involved. Screenshots go to the MCP client you configured - the same place the rest of your conversation goes - and nowhere else.The same rule holds for this website: no analytics, no cookies, no third-party requests. The only <script> tag anywhere on the site is application/ld+json structured data, which your browser does not execute - never a program. View source and check."}}, {"@type": "Question", "name": "How is this different from the other macOS MCP servers?", "acceptedAnswer": {"@type": "Answer", "text": "Capability-wise, not enormously - screenshots, clicks, keystrokes, the accessibility tree. The difference is what happens in the hours you are not watching. It works in windows behind the one you are in and leaves your pointer where you put it, so it does not take over the machine while you use it. It tells you when something failed instead of carrying on as if it worked. Several can run at once. And it will not go near your password manager. If you only ever watch it work, most of that is wasted on you."}}, {"@type": "Question", "name": "Why is the audit log fingerprinted instead of plain?", "acceptedAnswer": {"@type": "Answer", "text": "Because a complete record of every keystroke is exactly the file an attacker would want. The fingerprint proves two actions typed the same thing without ever storing what it was. It is scrambled with a random ingredient that only exists while it runs - a fingerprint without that random ingredient, of an eight-character password, is guessable offline, which would have made the log the very thing this promise is against. The cost is honest: comparison works within a run, not across runs."}}, {"@type": "Question", "name": "Can I turn the redaction off?", "acceptedAnswer": {"@type": "Answer", "text": "Yes - redact: false on a single screenshot. It is per call and never sticky, and the result says plainly that the image was not redacted."}}, {"@type": "Question", "name": "Does it ask me before it does things?", "acceptedAnswer": {"@type": "Answer", "text": "Not for ordinary work - it acts, and every call lands in the log. A few things never happen without a person saying yes: your password manager, anything that deletes or clears, and starting a screen recording. In the default mode they wait in the menu bar icon - a password manager cannot be approved there, so it is refused. If you would rather be asked once up front, CMCP_MODE=ask puts a single session-granting dialog in front of the first write, and ignoring that dialog refuses the action rather than allowing it."}}]}]</script>
   <link rel="icon" type="image/svg+xml" href="/logo.svg">
   <link rel="icon" type="image/x-icon" href="/favicon.ico">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
@@ -183,8 +183,10 @@ <h3><span class="dot" style="background:var(--warn)"></span>What still asks, and
 <section id="install">
   <h2>Install</h2>
 <!-- FORBEHOLD -->
-<div class="box warn"><p><b>What you get today, honestly.</b> <code>npx @agent360/computer-mcp</code> currently serves <b>0.1.0</b>, which has 12 tools. The 30 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.</p></div>
-<!-- /FORBEHOLD -->  <p class="intro">Add it to your MCP client, grant two macOS permissions, done. It starts ready to work: twenty-two of the thirty, no asking, except your password manager, anything that deletes or clears, and starting a screen recording. It runs in the background by default, so nothing takes your screen; <code>CMCP_BACKGROUND=0</code> adds the eight that do.</p>
+<div class="box warn"><p><b>What you get today, honestly.</b> <code>npx @agent360/computer-mcp</code> currently serves <b>0.1.0</b>, which has 12 tools. The 32 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.</p></div>
+<!-- /FORBEHOLD -->
+
+  <p class="intro">Add it to your MCP client, grant two macOS permissions, done. It starts ready to work: twenty-five of the thirty-two, no asking, except your password manager, anything that deletes or clears, and starting a screen recording. It runs in the background by default, so nothing takes your screen; <code>CMCP_BACKGROUND=0</code> adds the seven that do.</p>
   <div class="scroll"><table class="tbl">
     <tr><th style="width:150px">Claude Code</th><td><code>claude mcp add computer -- npx -y @agent360/computer-mcp</code></td></tr>
     <tr><th>Cursor / VS Code / Codex</th><td>In <code>mcp.json</code>: <code>{"command":"npx","args":["-y","@agent360/computer-mcp"]}</code></td></tr>
@@ -270,8 +272,8 @@ <h3><span class="dot" style="background:var(--accent2)"></span>No API key, no se
 
 
 <section id="tools">
-  <h2>thirty tools</h2>
-  <p class="intro">fourteen that look, sixteen that touch. Grouped by what you would
+  <h2>thirty-two tools</h2>
+  <p class="intro">fourteen that look, eighteen that touch. Grouped by what you would
   actually want, with the names underneath in case you are wiring this up yourself.</p>
   <div class="scroll"><table class="tbl">
     <tr><th style="width:210px">So it can...</th><th>What that means</th></tr>
@@ -291,7 +293,8 @@ <h2>thirty tools</h2>
         hundred screenshots of a progress bar, and you pay for every one of them.</td></tr>
     <tr><td><b>Ask you</b><br><code class="sml">ask_user</code></td>
         <td>When it hits a password or a code from your phone, it puts the cursor in the
-        box and asks you to type. It gets back "done" or "cancelled" - never the text.</td></tr>
+        box and asks you to type - in the menu bar icon, so nothing jumps in front of you.
+        It gets back "done" or "cancelled" - never the text.</td></tr>
     <tr><td><b>Show its work</b><br><code class="sml">audit · permissions</code></td>
         <td>Read back everything it did, in order. What you typed is stored as a
         fingerprint, never as readable text.</td></tr>
diff --git a/docs/learn/computer-use-mcp/index.html b/docs/learn/computer-use-mcp/index.html
index f3520aae..00eed09a 100644
--- a/docs/learn/computer-use-mcp/index.html
+++ b/docs/learn/computer-use-mcp/index.html
@@ -262,7 +262,7 @@ <h2>Related</h2>
 <a href="/learn/mcp-security/">MCP security: what a server can reach</a>
 <a href="/use-cases/unattended-runs/">Leaving an agent running overnight</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
-<a href="/tools.html">All 30 tools</a></div>
+<a href="/tools.html">All 32 tools</a></div>
 </main>
 <footer><div class="wrap">
 <p>Computer MCP is built by <a href="https://agent360.dk">Agent360</a>, who also make
diff --git a/docs/learn/owasp-mcp-top-10/index.html b/docs/learn/owasp-mcp-top-10/index.html
index 0b10be36..c9081c99 100644
--- a/docs/learn/owasp-mcp-top-10/index.html
+++ b/docs/learn/owasp-mcp-top-10/index.html
@@ -127,7 +127,7 @@ <h2>The ten, and what we do about each</h2>
 <td><span class="k m">addressed</span> Tools carry a tier, and
 <code>CMCP_MODE=readonly</code> does not merely refuse the write tools - it
 <b>does not list them</b>. A tool the model cannot see is a tool it cannot be
-talked into trying. Measured: 30 tools in full mode, 11 in read-only.</td></tr>
+talked into trying. Measured: 32 tools in full mode, 11 in read-only.</td></tr>
 
 <tr><td><b>MCP03</b></td><td>Tool Poisoning</td>
 <td><span class="k u">not our layer</span> This is about a malicious server
diff --git a/docs/llms-install.md b/docs/llms-install.md
index d66fc486..ee06b00e 100644
--- a/docs/llms-install.md
+++ b/docs/llms-install.md
@@ -9,12 +9,14 @@ finished until `computer_permissions` confirms it.
 
 Computer MCP drives macOS itself: it reads the accessibility tree, takes
 screenshots, clicks, types, presses buttons, chooses menu items and moves
-windows. The source has **30 tools, 14 of them read-only**, no API key, and
+windows. The source has **32 tools, 14 of them read-only**, no API key, and
 no network calls of its own.
 
 <!-- FORBEHOLD -->
-> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 30 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
-<!-- /FORBEHOLD -->The design premise is that it is safe to leave running: password fields are blacked out in memory
+> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 32 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
+<!-- /FORBEHOLD -->
+
+The design premise is that it is safe to leave running: password fields are blacked out in memory
 before a screenshot is written to disk, writes go through a consent gate, and
 every action lands in a log the server only appends to - every line carries a fingerprint of itself and the one before it, so a removed or edited line breaks the chain and says where that never stores typed text in clear.
 
@@ -26,6 +28,13 @@ Claude Code:
 claude mcp add --scope user computer -- npx -y @agent360/computer-mcp@latest
 ```
 
+Or, inside Claude Code, as a plugin pinned to the version npm serves:
+
+```text
+/plugin marketplace add Agent360dk/computerMCP
+/plugin install computer-mcp@agent360
+```
+
 OpenAI Codex:
 
 ```bash
diff --git a/docs/llms.txt b/docs/llms.txt
index bfbdaf4a..8b94cfc0 100644
--- a/docs/llms.txt
+++ b/docs/llms.txt
@@ -6,10 +6,12 @@
 > log that only grows. No account, no API key, no model inside it. MIT.
 
 # FORBEHOLD
-VERSION: npx serves 0.1.0, which has 12 tools. The 30 tools described below
+VERSION: npx serves 0.1.0, which has 12 tools. The 32 tools described below are
 the source: they are built and tested but not published yet. Do not tell a user
 that a tool is available after an npx install unless it is one of the twelve.
-# /FORBEHOLDInstall: `npx @agent360/computer-mcp` (ships a signed universal binary; no Swift needed)
+# /FORBEHOLD
+
+Install: `npx @agent360/computer-mcp` (ships a signed universal binary; no Swift needed)
 Repository: https://github.com/Agent360dk/computerMCP
 npm: @agent360/computer-mcp
 Registry name: io.github.Agent360dk/computer-mcp
@@ -52,7 +54,7 @@ for, because that machine also holds passwords, keys and production terminals.
   password managers still ask every time, terminals and editors once per
   session, and that is not configurable
 
-## The 30 tools, 14 of them read-only
+## The 32 tools, 14 of them read-only
 
 Look: computer_screenshot, computer_record, computer_inspect, computer_find, computer_wait_for,
 computer_focused, computer_apps, computer_windows, computer_displays,
@@ -61,7 +63,7 @@ computer_permissions,
 computer_pending
 computer_audit
 computer_learning
-Touch: computer_launch, computer_quit, computer_paste, computer_window, computer_space, computer_menu, computer_press, computer_set_value, computer_ask_user, computer_click,
+Touch: computer_request_screen, computer_launch, computer_open, computer_quit, computer_paste, computer_window, computer_space, computer_menu, computer_press, computer_set_value, computer_ask_user, computer_click,
 computer_type, computer_key, computer_scroll, computer_move, computer_drag, computer_activate
 
 computer_ask_user returns only true or false - never text. It is how a human
diff --git a/docs/tools.html b/docs/tools.html
index c4c27786..930ba32b 100644
--- a/docs/tools.html
+++ b/docs/tools.html
@@ -4,7 +4,7 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <title>Tool reference - Computer MCP</title>
-<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{"@type": "ListItem", "position": 1, "name": "Computer MCP", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 2, "name": "All 30 tools", "item": "https://computermcp.dev/tools.html"}]}, {"@context": "https://schema.org", "@type": "TechArticle", "headline": "All 30 tools", "name": "All 30 tools", "description": "Every tool in Computer MCP: what it takes, what it returns, and which one to reach for when the obvious one is the wrong one.", "url": "https://computermcp.dev/tools.html", "inLanguage": "en", "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}, "publisher": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}]</script>
+<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{"@type": "ListItem", "position": 1, "name": "Computer MCP", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 2, "name": "All 32 tools", "item": "https://computermcp.dev/tools.html"}]}, {"@context": "https://schema.org", "@type": "TechArticle", "headline": "All 32 tools", "name": "All 32 tools", "description": "Every tool in Computer MCP: what it takes, what it returns, and which one to reach for when the obvious one is the wrong one.", "url": "https://computermcp.dev/tools.html", "inLanguage": "en", "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}, "publisher": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}]</script>
   <link rel="icon" type="image/svg+xml" href="/logo.svg">
   <link rel="icon" type="image/x-icon" href="/favicon.ico">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
@@ -71,11 +71,13 @@
 
 <main class="wrap">
 <h1>Tool reference</h1>
-<p class="lede">thirty tools. fourteen look, sixteen touch. The useful part of this page is not the parameter lists - it is knowing which tool to reach for when the obvious one is the wrong one.</p>
+<p class="lede">thirty-two tools. fourteen look, eighteen touch. The useful part of this page is not the parameter lists - it is knowing which tool to reach for when the obvious one is the wrong one.</p>
 
 <!-- FORBEHOLD -->
-<div class="box warn"><p><b>What you get today, honestly.</b> <code>npx @agent360/computer-mcp</code> currently serves <b>0.1.0</b>, which has 12 tools. The 30 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.</p></div>
-<!-- /FORBEHOLD --><div class="box">
+<div class="box warn"><p><b>What you get today, honestly.</b> <code>npx @agent360/computer-mcp</code> currently serves <b>0.1.0</b>, which has 12 tools. The 32 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.</p></div>
+<!-- /FORBEHOLD -->
+
+<div class="box">
 <p><strong>The one habit that matters.</strong> Find things by name, not by pixel. <code>computer_inspect</code> and <code>computer_find</code> return the frame of every element, so the agent can act on "the Log in button" rather than on a coordinate that stops being true the moment a window moves. Reach for <code>computer_click</code> only when there is no accessibility element to aim at: a canvas, a map, an image.</p>
 </div>
 
@@ -98,6 +100,10 @@ <h3>computer_set_value<span class="tier write">write</span></h3>
 <p>Write a value straight into a field through the accessibility API: no focus change, no keystrokes, no cursor movement. It reaches a field in a window sitting behind another one, which typing cannot.</p>
 <div class="box warn"><p><b>It refuses on a secure field, every time.</b> We removed that check once on purpose to see what happened: the modified build wrote into the password box. It is the only thing standing there.</p></div>
 
+<h3>computer_request_screen<span class="tier write">write</span></h3>
+<p>Ask the person to lend this one agent the screen, for the few steps that cannot be done from behind: moving the pointer, dragging, bringing a window forward. They approve it in the menu bar icon with Touch ID, for at most 15 minutes.</p>
+<div class="box"><p><b>The screen stays theirs.</b> While the agent has it, each step waits while they are using the keyboard or mouse (a step already running finishes), and <code>Take the screen back now</code> in the menu ends the loan at once and stops a step still running. The loan is the open connection to the icon: when it closes, the loan is over. With <code>CMCP_BACKGROUND</code> set, nothing can borrow it.</p></div>
+
 <h3>computer_ask_user<span class="tier write">write</span></h3>
 <p>Ask the person to do something themselves, and wait. Use it for anything the model must not see: a password, a 2FA code, a CAPTCHA, an OAuth consent.</p>
 <p>The agent puts the cursor in the right field first, then calls this. A native dialog names the app and the window it is about to land in - written by the server, not by the model - and the person types on their own keyboard.</p>
@@ -112,6 +118,10 @@ <h3>computer_launch<span class="tier write">write</span></h3>
 <p>Open an application, by bundle ID or by its plain name. <code>computer_activate</code> can only bring forward something already running; this starts what is closed. Already running, it just comes forward, and the answer says which of the two happened.</p>
 <div class="box"><p>Launching cannot lose anything, so it is not on the always-ask list the way quitting is - but it is still a write, and it goes through the same gate as every other write: refused in read-only mode, and in ask mode the first one asks for the session. Quitting is separate because it can lose work, and it asks every single time.</p></div>
 
+<h3>computer_open<span class="tier write">write</span></h3>
+<p>Open an app's own door in the background - a Spotify track, a WhatsApp chat, or the app itself - via the app's own URL, never a send. You give an <code>intent</code> and its one parameter, not a URL: the server builds a fixed, validated URL for that intent, and anything else is refused.</p>
+<div class="box"><p>It carries navigation only. To send a message you still act on the chat once it is open, and the person confirms it - opening a chat is not sending into it.</p></div>
+
 <h3>computer_quit<span class="tier write">write</span></h3>
 <p>Ask an application to quit, the same way Cmd+Q does. It never kills a process: the app still gets to ask you about unsaved work, and an agent should trigger that question rather than route around it.</p>
 <div class="box warn"><p><b>Quitting can lose work, so this asks every time, in every mode</b> - like closing a window, and like a menu item that looks destructive.</p></div>
diff --git a/docs/use-cases/unattended-runs/index.html b/docs/use-cases/unattended-runs/index.html
index 1b01e661..acac5a95 100644
--- a/docs/use-cases/unattended-runs/index.html
+++ b/docs/use-cases/unattended-runs/index.html
@@ -166,7 +166,7 @@ <h2>FAQ</h2>
 <details><summary>What should I do before starting a long run?</summary><p>Look at your own screen. Close terminals with credentials in the scrollback and quit the password manager. The redaction covers what macOS marks as secure; it cannot cover a secret sitting in a plain text window.</p></details>
 <h2>Related</h2>
 <div class="rel"><a href="/docs/install-claude-code/">Install for Claude Code</a>
-<a href="/tools.html">All 30 tools</a>
+<a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
 <a href="/security.html">Threat model</a></div>
diff --git a/docs/use-cases/without-taking-over-your-screen/index.html b/docs/use-cases/without-taking-over-your-screen/index.html
index 69ee5a57..ca037fb8 100644
--- a/docs/use-cases/without-taking-over-your-screen/index.html
+++ b/docs/use-cases/without-taking-over-your-screen/index.html
@@ -8,15 +8,15 @@
   <link rel="icon" type="image/x-icon" href="/favicon.ico">
   <link rel="apple-touch-icon" href="/apple-touch-icon.png">
   <meta name="theme-color" content="#0d1117">
-<meta name="description" content="Seven of the thirty tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.">
+<meta name="description" content="Seven of the thirty-two tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.">
 <link rel="canonical" href="https://computermcp.dev/use-cases/without-taking-over-your-screen/">
 <meta property="og:type" content="article">
 <meta property="og:title" content="Let an agent work while you keep using your Mac">
-<meta property="og:description" content="Seven of the thirty tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.">
+<meta property="og:description" content="Seven of the thirty-two tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.">
 <meta property="og:url" content="https://computermcp.dev/use-cases/without-taking-over-your-screen/">
 <meta property="og:image" content="https://computermcp.dev/og-image.jpg">
 <meta name="twitter:card" content="summary_large_image">
-<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{"@type": "ListItem", "position": 1, "name": "Computer MCP", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 2, "name": "Use cases", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 3, "name": "Let an agent work while you keep using your Mac", "item": "https://computermcp.dev/use-cases/without-taking-over-your-screen/"}]}, {"@context": "https://schema.org", "@type": "TechArticle", "headline": "Let an agent work while you keep using your Mac", "description": "Seven of the thirty tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.", "url": "https://computermcp.dev/use-cases/without-taking-over-your-screen/", "inLanguage": "en", "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}, "publisher": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}, {"@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "Can an agent use my Mac without taking over the screen?", "acceptedAnswer": {"@type": "Answer", "text": "Largely, yes. computer_press fires an element's own accessibility action rather than simulating a click, so it works on a background window without moving your pointer. computer_set_value writes into a field the same way, and computer_wait_for waits for an element instead of taking screenshots in a loop. What still needs the real screen is anything with no accessibility element behind it, such as dragging on a canvas."}}, {"@type": "Question", "name": "Does clicking a button require bringing the app forward?", "acceptedAnswer": {"@type": "Answer", "text": "Not with computer_press. It triggers the button's own AXPress action where the window stands, behind whatever else is open. computer_click moves the real cursor when you do not name an app. Name one and the event goes into that app's own queue instead - built the same way as typing, and not yet measured for mouse events the way typing has been."}}, {"@type": "Question", "name": "Can I run two agents at the same time?", "acceptedAnswer": {"@type": "Answer", "text": "Yes. Each MCP client starts its own server process with its own consent state, so they do not queue behind each other. Every audit line carries a per-server session mark, and CMCP_CLIENT gives each one a readable name."}}, {"@type": "Question", "name": "Will two servers corrupt the shared audit log?", "acceptedAnswer": {"@type": "Answer", "text": "No. Each write is an only-grows open, and the repo has a test that runs two servers through fifty interleaved writes and fails if a single line comes out torn."}}, {"@type": "Question", "name": "Why does computer_wait_for matter for cost?", "acceptedAnswer": {"@type": "Answer", "text": "Because the alternative is a screenshot loop. Twenty polls through wait_for cost one tool call; twenty screenshots cost twenty images in the model's context, of a progress bar."}}, {"@type": "Question", "name": "The agent says it cannot see a window that is open. Why?", "acceptedAnswer": {"@type": "Answer", "text": "Almost always a full-screen app. True full-screen puts an app on its own Space, and from outside that Space neither the accessibility API nor the screenshot sees the windows underneath. Leave the target app windowed."}}, {"@type": "Question", "name": "Does the consent dialog interrupt me every time?", "acceptedAnswer": {"@type": "Answer", "text": "No. The default does not ask at all - it works, and everything lands in the log. The only things that still ask, every time and in every mode, are password managers and anything that deletes or clears. If you would rather be asked once up front, CMCP_MODE=ask puts a single session-granting dialog in front of the first write."}}]}]</script>
+<script type="application/ld+json">[{"@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{"@type": "ListItem", "position": 1, "name": "Computer MCP", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 2, "name": "Use cases", "item": "https://computermcp.dev/"}, {"@type": "ListItem", "position": 3, "name": "Let an agent work while you keep using your Mac", "item": "https://computermcp.dev/use-cases/without-taking-over-your-screen/"}]}, {"@context": "https://schema.org", "@type": "TechArticle", "headline": "Let an agent work while you keep using your Mac", "description": "Seven of the thirty-two tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.", "url": "https://computermcp.dev/use-cases/without-taking-over-your-screen/", "inLanguage": "en", "author": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}, "publisher": {"@type": "Organization", "name": "Agent360", "url": "https://agent360.dk"}}, {"@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "Can an agent use my Mac without taking over the screen?", "acceptedAnswer": {"@type": "Answer", "text": "Largely, yes. computer_press fires an element's own accessibility action rather than simulating a click, so it works on a background window without moving your pointer. computer_set_value writes into a field the same way, and computer_wait_for waits for an element instead of taking screenshots in a loop. What still needs the real screen is anything with no accessibility element behind it, such as dragging on a canvas."}}, {"@type": "Question", "name": "Does clicking a button require bringing the app forward?", "acceptedAnswer": {"@type": "Answer", "text": "Not with computer_press. It triggers the button's own AXPress action where the window stands, behind whatever else is open. computer_click moves the real cursor when you do not name an app. Name one and the event goes into that app's own queue instead - built the same way as typing, and not yet measured for mouse events the way typing has been."}}, {"@type": "Question", "name": "Can I run two agents at the same time?", "acceptedAnswer": {"@type": "Answer", "text": "Yes. Each MCP client starts its own server process with its own consent state, so they do not queue behind each other. Every audit line carries a per-server session mark, and CMCP_CLIENT gives each one a readable name."}}, {"@type": "Question", "name": "Will two servers corrupt the shared audit log?", "acceptedAnswer": {"@type": "Answer", "text": "No. Each write is an only-grows open, and the repo has a test that runs two servers through fifty interleaved writes and fails if a single line comes out torn."}}, {"@type": "Question", "name": "Why does computer_wait_for matter for cost?", "acceptedAnswer": {"@type": "Answer", "text": "Because the alternative is a screenshot loop. Twenty polls through wait_for cost one tool call; twenty screenshots cost twenty images in the model's context, of a progress bar."}}, {"@type": "Question", "name": "The agent says it cannot see a window that is open. Why?", "acceptedAnswer": {"@type": "Answer", "text": "Almost always a full-screen app. True full-screen puts an app on its own Space, and from outside that Space neither the accessibility API nor the screenshot sees the windows underneath. Leave the target app windowed."}}, {"@type": "Question", "name": "Does the consent dialog interrupt me every time?", "acceptedAnswer": {"@type": "Answer", "text": "No. The default does not ask at all - it works, and everything lands in the log. The only things that still ask, every time and in every mode, are password managers and anything that deletes or clears. If you would rather be asked once up front, CMCP_MODE=ask puts a single session-granting dialog in front of the first write."}}]}]</script>
 <style>
 :root{--bg:#0d1117;--surface:#161b22;--surface2:#1c2128;--border:#30363d;--text:#e6edf3;
 --muted:#8b949e;--accent:#3fb950;--accent2:#58a6ff;--warn:#d29922;--danger:#f85149;
@@ -86,12 +86,12 @@
 <main class="wrap">
 <p class="crumb"><a href="/">Computer MCP</a> / Use cases / Without taking over your screen</p>
 <h1>Let an agent work while you keep using your Mac</h1>
-<p class="lede">Seven of the thirty tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.</p>
+<p class="lede">Seven of the thirty-two tools act on a background window without moving your pointer: press an element by its own accessibility action, write into a field, choose a menu item, and - by naming the app - type, press a key, scroll or click into that app's own queue.</p>
 
 <div class="box">
 <p>The usual complaint about computer-use tools is not that they are weak. It is that using
 one means giving up your machine: the pointer jumps, windows come forward, and you sit and
-watch instead of working. Three of the thirty tools exist specifically so that does not
+watch instead of working. Three of the thirty-two tools exist specifically so that does not
 have to happen.</p>
 </div>
 
@@ -161,7 +161,7 @@ <h2>FAQ</h2>
 <details><summary>Does the consent dialog interrupt me every time?</summary><p>No. In the default allow mode ordinary writes do not ask at all, and everything is logged. Password managers ask every time, regardless of mode; terminals and editors ask once per session; quitting, closing and destructive-looking menu items ask every time. In background mode those questions wait in the menu bar icon instead of popping up. Ask mode adds one dialog before the first write, which then grants the session.</p></details>
 <h2>Related</h2>
 <div class="rel"><a href="/docs/install-claude-code/">Install for Claude Code</a>
-<a href="/tools.html">All 30 tools</a>
+<a href="/tools.html">All 32 tools</a>
 <a href="/docs/capability-matrix/">What it can and cannot reach</a>
 <a href="/docs/when-not-to-use/">When not to use it</a>
 <a href="/security.html">Threat model</a></div>
diff --git a/gemini-extension.json b/gemini-extension.json
index 549debf5..069ebf76 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,7 +1,7 @@
 {
   "name": "computer-mcp",
-  "version": "0.2.1",
-  "description": "Drive macOS from any MCP client with the guardrails on by default: password fields blacked out in memory before the screenshot is written, password managers that ask every time and terminals once per session, and a log the server only appends to that never stores typed text in clear. 30 tools, 14 read-only. No API key, MIT.",
+  "version": "0.2.2",
+  "description": "Drive macOS from any MCP client with the guardrails on by default: password fields blacked out in memory before the screenshot is written, password managers that are refused and terminals that ask once per session, and a log the server only appends to that never stores typed text in clear. 32 tools, 14 read-only. No API key, MIT.",
   "mcpServers": {
     "computer": {
       "command": "npx",
diff --git a/helper/Sources/cmcp-helper/Accessibility.swift b/helper/Sources/cmcp-helper/Accessibility.swift
index 11bffaed..bbb9fe25 100644
--- a/helper/Sources/cmcp-helper/Accessibility.swift
+++ b/helper/Sources/cmcp-helper/Accessibility.swift
@@ -162,9 +162,30 @@ enum AX {
     ///    Det udvider ikke hvad der maa rammes: `main.swift`s faelles opslag
     ///    faldt allerede tilbage paa `allApps()`, saa porten kunne i forvejen
     ///    navngive et menulinje-program. Det var kun DE SEKS veje der ikke kunne.
-    static func app(bundleId: String) -> NSRunningApplication? {
-        allApps().first { $0.bundleIdentifier == bundleId }
-            ?? allApps().first { $0.localizedName?.lowercased() == bundleId.lowercased() }
+    static func app(bundleId: String) -> NSRunningApplication? { appOpslag(bundleId).app }
+
+    /// Passer et program til et --app der allerede er oversat ved indgangen (id eller «pid:<n>»)?
+    static func passer(_ a: NSRunningApplication, _ scope: String) -> Bool {
+        Navne.id(bundleId: a.bundleIdentifier, pid: a.processIdentifier) == scope
+    }
+
+    /// Id'et eller navnet slaaet op efter Navne-reglen - samme regel som serverens port.
+    /// `tvetydig`: flere passer kun uden usynlige tegn; saa vaelges intet, og opstarten
+    /// falder heller ikke tilbage paa disken (R16, Astra).
+    /// Saat ved indgangen naar serverens port bandt maalet (`--app =<id>`): kun det praecise id.
+    nonisolated(unsafe) static var kunPraecistId = false
+
+    static func appOpslag(_ hvad: String) -> (app: NSRunningApplication?, tvetydig: Bool) {
+        let alle = allApps()
+        // Et bundet maal: kun det praecise id - aldrig navne, aldrig store/smaa (R18, Astra).
+        if kunPraecistId { return (alle.first { $0.bundleIdentifier == hvad }, false) }
+        // Et program uden id, allerede oversat til sin proces: kun den proces.
+        if hvad.hasPrefix("pid:") { return (alle.first { Navne.id(bundleId: $0.bundleIdentifier, pid: $0.processIdentifier) == hvad }, false) }
+        switch Navne.vaelgApp(ids: alle.map { $0.bundleIdentifier }, navne: alle.map { $0.localizedName }, want: hvad) {
+        case .fundet(let i): return (alle[i], false)
+        case .tvetydig: return (nil, true)
+        case .intet: return (nil, false)
+        }
     }
 
     /// ⛔ ARKET DER STOPPER EN UBEVOGTET KOERSEL (22/9-2026)
@@ -298,10 +319,82 @@ enum AX {
     /// webfelter er dem folk bruger. Begge skal tjekkes, hver gang.
     static let secureRoles: Set<String> = ["AXSecureTextField"]
 
+    /// ⛔ Runde 3 30/9 (Fable R3): rettet i ÉT sted, ikke syv. `isSecure` tabte en
+    ///    fejl paa underrollen (`string()` -> nil -> «ikke sikkert»), og den bruges af
+    ///    set_value, sloeringen, focused og inspect. Nu er ukendt = sikkert (fejl lukket)
+    ///    for alle kaldesteder. `role` genbruges, saa sloeringens skanning ikke faar et
+    ///    ekstra opslag pr. element.
     static func isSecure(_ el: AXUIElement, role: String) -> Bool {
-        if secureRoles.contains(role) { return true }
-        if let sub = string(el, kAXSubroleAttribute as String), secureRoles.contains(sub) { return true }
-        return false
+        sikkerStatus(el, kendtRolle: role) != false
+    }
+
+    /// Staar tastaturfokus i et sikkert felt? I programmet `pid`, eller hvor
+    /// fokus er paa maskinen, naar intet program er navngivet.
+    ///
+    /// ⛔ Findes fordi panelet 29/9 (Astra + Fable) fandt at kun `set_value`
+    ///    naegtede kodeordsfelter. `type` faldt tilbage til tastetryk - og
+    ///    tastede i kodeordsfeltet. Et fokus vi ikke kan slaa op, er ikke et
+    ///    kendt sikkert felt; svaret siger allerede at tastetryk ikke er
+    ///    efterproevet.
+    ///
+    /// ⛔ Runde 1 30/9 (Astra 6): her stod `false` naar fokus eller rolle ikke kunne
+    ///    laeses - «ukendt» blev til «ikke et kodeordsfelt». Nu er ukendt `nil`, og
+    ///    skrivningen stopper: vi kan ikke udelukke at teksten lander i et kodeord.
+    /// Er elementet et sikkert felt? `nil` = kunne ikke afgoeres: et opslag FEJLEDE.
+    /// ⛔ Runde 2 30/9 (Astra 2): `isSecure` brugte `string()`, som taber fejlen - en
+    ///    underrolle der ikke kunne laeses, blev til «ikke sikker». Kun «findes ikke»
+    ///    (noValue / attributeUnsupported) betyder ingen underrolle.
+    static func sikkerStatus(_ el: AXUIElement, kendtRolle: String? = nil) -> Bool? {
+        let rolle: String
+        if let k = kendtRolle, !k.isEmpty {
+            rolle = k
+        } else {
+            var rv: CFTypeRef?
+            guard AXUIElementCopyAttributeValue(el, kAXRoleAttribute as CFString, &rv) == .success,
+                  let r = rv as? String, !r.isEmpty else { return nil }
+            rolle = r
+        }
+        if secureRoles.contains(rolle) { return true }
+        var sv: CFTypeRef?
+        switch AXUIElementCopyAttributeValue(el, kAXSubroleAttribute as CFString, &sv) {
+        case .success: return (sv as? String).map { secureRoles.contains($0) } ?? false
+        case .noValue, .attributeUnsupported: return false
+        default: return nil
+        }
+    }
+
+    /// Titlen paa det vindue elementet ligger i - sende-porten kraever at Send-knappen
+    /// hoerer til den samtale mennesket faar vist (runde 2, Astra 3).
+    static func vinduesTitel(_ el: AXUIElement) -> String? {
+        guard let w = attr(el, kAXWindowAttribute as String), CFGetTypeID(w) == AXUIElementGetTypeID() else { return nil }
+        // swiftlint:disable:next force_cast
+        return string(w as! AXUIElement, kAXTitleAttribute as String)
+    }
+
+    /// Rollen paa det element, der har fokus i programmet `pid` (nil = ukendt).
+    static func fokusRolle(pid: pid_t) -> String? {
+        let app = AXUIElementCreateApplication(pid)
+        AXUIElementSetMessagingTimeout(app, 1.0)
+        var r: CFTypeRef?
+        guard AXUIElementCopyAttributeValue(app, kAXFocusedUIElementAttribute as CFString, &r) == .success,
+              let raw = r, CFGetTypeID(raw) == AXUIElementGetTypeID() else { return nil }
+        // swiftlint:disable:next force_cast
+        return string(raw as! AXUIElement, kAXRoleAttribute as String)
+    }
+
+    static func fokusErSikkert(pid: pid_t?) -> Bool? {
+        guard let pid else {
+            guard let f = focused() else { return nil }
+            return sikkerStatus(f.el)
+        }
+        let app = AXUIElementCreateApplication(pid)
+        AXUIElementSetMessagingTimeout(app, 1.0)
+        var r: CFTypeRef?
+        guard AXUIElementCopyAttributeValue(app, kAXFocusedUIElementAttribute as CFString, &r) == .success,
+              let raw = r, CFGetTypeID(raw) == AXUIElementGetTypeID() else { return nil }
+        // swiftlint:disable:next force_cast
+        let el = raw as! AXUIElement
+        return sikkerStatus(el)
     }
 
     /// Hvilket element har tastaturfokus lige nu - paa tvaers af programmer.
@@ -422,7 +515,7 @@ enum AX {
             // Tom maengde = vi kunne ikke spoerge vinduesserveren; saa tager vi alle.
             if !visible.isEmpty && !visible.contains(a.processIdentifier) { return false }
             guard let scope = scopeBundleId else { return true }
-            return a.bundleIdentifier == scope || a.localizedName?.lowercased() == scope.lowercased()
+            return AX.passer(a, scope)   // navnet er oversat til id ved indgangen (Navne.oversaet)
         }
 
         // ⛔ MAALT 24/9: BUDGETTET BANDT IKKE DET DET HED EFTER.
@@ -616,7 +709,7 @@ enum AX {
         var nodes: [[String: Any]] = []
         let apps = allApps().filter { a in
             guard let scope = bundleId else { return true }
-            return a.bundleIdentifier == scope || a.localizedName?.lowercased() == scope.lowercased()
+            return AX.passer(a, scope)   // navnet er oversat til id ved indgangen (Navne.oversaet)
         }
         outer: for app in apps {
             // Et spaerret program afleverer KUN at det findes - aldrig indhold.
@@ -733,7 +826,7 @@ extension AX {
 
         let apps = allApps().filter { a in
             guard let scope = bundleId else { return true }
-            return a.bundleIdentifier == scope || a.localizedName?.lowercased() == scope.lowercased()
+            return AX.passer(a, scope)   // navnet er oversat til id ved indgangen (Navne.oversaet)
         }
 
         outer: for app in apps {
@@ -848,7 +941,8 @@ extension AX {
         // swiftlint:disable:next force_cast
         let el = raw as! AXUIElement
         let rolle = string(el, kAXRoleAttribute as String) ?? ""
-        if isSecure(el, role: rolle) { return nil }
+        // Runde 2 (Astra 2): ogsaa AX-vejen skriver kun naar feltet VIDES ikke at vaere sikkert.
+        guard sikkerStatus(el) == false else { return nil }
         var kan: DarwinBoolean = false
         guard AXUIElementIsAttributeSettable(el, kAXSelectedTextAttribute as CFString, &kan) == .success,
               kan.boolValue else { return nil }
@@ -1245,6 +1339,27 @@ extension AX {
 //    udklipsholderen, hvor mennesket saa selv finder den senere.
 extension AX {
 
+    /// Saettes af SIGUSR1 (runde 4, Astra 4): skaerm-laanet sluttede. Et paste der
+    /// endnu ikke har trykket Cmd+V, stopper og laegger personens udklipsholder
+    /// tilbage. Et der HAR trykket, bliver faerdigt - saa gendannelsen ikke tabes.
+    /// Bloker SIGUSR1 i denne traad, saa et stop bliver liggende som VENTENDE i
+    /// stedet for at draebe processen eller forsvinde.
+    /// ⛔ FORUDSAETNING (efterkontrol 30/9, Astra maalte): ingen traad i paste-stien maa
+    ///    have SIGUSR1 ublokeret. Nye traade arver blokeringen, og Dispatch-traade
+    ///    blokerer den ogsaa - men en traad der OPHAEVER den, kan faa signalet i stedet,
+    ///    og sigpending() her ser det saa ikke (35/200 i Astras forsoeg). Opret derfor
+    ///    ikke en saadan traad foer Cmd+V - og kald denne FOER alt andet.
+    static func blokerPasteStop() {
+        var s = sigset_t(); sigemptyset(&s); sigaddset(&s, SIGUSR1)
+        pthread_sigmask(SIG_BLOCK, &s, nil)
+    }
+    /// Er et stop modtaget? Synkront: laeser de ventende signaler, ingen callback.
+    static var pasteStop: Bool {
+        var s = sigset_t(); sigemptyset(&s)
+        sigpending(&s)
+        return sigismember(&s, SIGUSR1) == 1
+    }
+
     /// Laeg tekst i udklipsholderen, tryk Cmd+V, og laeg det gamle tilbage.
     static func pasteText(_ text: String, restore: Bool) -> (ok: Bool, why: String, restored: Bool) {
         let pb = NSPasteboard.general
@@ -1261,6 +1376,7 @@ extension AX {
             }
         }
 
+        if pasteStop { return (false, "stopped before anything changed: the screen loan ended", false) }
         pb.clearContents()
         guard pb.setString(text, forType: .string) else {
             return (false, "could not write to the clipboard", false)
@@ -1274,6 +1390,11 @@ extension AX {
             return (false, "could not build the key event", false)
         }
         ned.flags = .maskCommand; op.flags = .maskCommand
+        // Sidste stop-tjek, synkront, lige foer tastetrykket.
+        if pasteStop {
+            if restore { pb.clearContents(); if !gammel.isEmpty { pb.writeObjects(gammel) } }
+            return (false, "stopped before pasting: the screen loan ended" + (restore ? ", and your own clipboard was put back" : ""), restore)
+        }
         ned.post(tap: .cghidEventTap)
         op.post(tap: .cghidEventTap)
 
@@ -1323,11 +1444,22 @@ extension AX {
         if hvad.contains("/") || hvad.hasPrefix(".") { return nil }
         // Ogsaa et almindeligt navn skal virke: mennesket siger "Notes",
         // ikke "com.apple.Notes".
-        for m in ["/Applications", "/System/Applications", NSHomeDirectory() + "/Applications"] {
+        let mapper = ["/Applications", "/System/Applications", NSHomeDirectory() + "/Applications"]
+        for m in mapper {
             let k = URL(fileURLWithPath: m).appendingPathComponent(hvad + ".app")
             if FileManager.default.fileExists(atPath: k.path) { return k }
         }
-        return nil
+        // ⛔ 9/10: «/Applications/\u{200E}WhatsApp.app» - et usynligt tegn i filnavnet.
+        //    Samme regel som navnet paa et koerende program (Navne.swift), kun i de
+        //    samme tre mapper, og kun naar praecis ét program passer.
+        var fund: [URL] = []
+        for m in mapper {
+            for f in (try? FileManager.default.contentsOfDirectory(atPath: m)) ?? [] where f.hasSuffix(".app") {
+                fund.append(URL(fileURLWithPath: m).appendingPathComponent(f))
+            }
+        }
+        guard case .fundet(let i) = Navne.vaelg(fund.map { $0.deletingPathExtension().lastPathComponent }, hvad) else { return nil }
+        return fund[i]
     }
 
     /// ⛔ FABLE 24/9: `computer_launch` af et LUKKET program blev afvist i
@@ -1338,7 +1470,10 @@ extension AX {
     ///    Svaret her er det bundle-id som `launchApp` ville starte - samme
     ///    raekkefoelge, samme opslag - uden at starte noget.
     static func launchMaal(_ hvad: String) -> (bundleId: String?, koerer: Bool) {
-        if let k = AX.app(bundleId: hvad) { return (k.bundleIdentifier, true) }
+        let o = appOpslag(hvad)
+        if let k = o.app { return (k.bundleIdentifier, true) }
+        // Tvetydigt, eller et bundet maal der ikke koerer mere: aldrig disken (R18).
+        if o.tvetydig || kunPraecistId { return (nil, false) }
         guard let u = programURL(hvad) else { return (nil, false) }
         return (Bundle(url: u)?.bundleIdentifier, false)
     }
@@ -1350,8 +1485,16 @@ extension AX {
     nonisolated(unsafe) static var sidstStartetPid: pid_t?
 
     static func launchApp(_ hvad: String, stille: Bool = false) -> (ok: Bool, why: String, bundleId: String?) {
+        // Samme opslag og samme raekkefoelge som launchMaal, saa porten vurderede det der startes.
+        let opslag = appOpslag(hvad)
+        if kunPraecistId && opslag.app == nil {
+            return (false, "the app the gate judged is no longer running - nothing was started", nil)
+        }
+        if opslag.tvetydig {
+            return (false, "more than one running app is called '\(hvad)' once invisible characters are ignored - name it by bundle id", nil)
+        }
         // Allerede i gang? Saa er "start" bare "hent frem", og det siger vi.
-        if let k = AX.app(bundleId: hvad) {
+        if let k = opslag.app {
             // ⛔ MAALT 27/9 paa Gustavs Mac: Aktivitetsovervaagning og Spotify koerte,
             //    men mennesket havde lukket vinduerne - og «left where it was» efterlod
             //    intet at naa. Et menneske klikker paa Dock-ikonet. Vi beder programmet
diff --git a/helper/Sources/cmcp-helper/Capture.swift b/helper/Sources/cmcp-helper/Capture.swift
index 88c2c1f0..76b64cc8 100644
--- a/helper/Sources/cmcp-helper/Capture.swift
+++ b/helper/Sources/cmcp-helper/Capture.swift
@@ -114,7 +114,7 @@ enum Capture {
                 //    skaerm programmets foerste vindue faktisk staar paa.
                 if displayId == nil && displayIndex == nil, let bid = bundleId,
                    let app = AX.allApps().first(where: {
-                       $0.bundleIdentifier == bid || $0.localizedName?.lowercased() == bid.lowercased()
+                       AX.passer($0, bid)   // navnet er oversat til id ved indgangen (Navne.oversaet)
                    }),
                    let w = AX.windows(of: app).first,
                    let r = AX.frame(w) {
@@ -163,11 +163,13 @@ enum Capture {
                     if let bid = bundleId {
                         // En adgangskode-manager fotograferes ikke som maal: det filter
                         // kan intet udelukke, og det hviler 100 % paa scanningen.
+                        // Navnet sammenlignes her med vilje ogsaa paa Swifts maade: det kan kun
+                        // tilfoeje et afslag (en adgangskode-manager), aldrig vaelge et maal.
                         let navngivet = content.applications.filter {
                             $0.bundleIdentifier == bid || $0.applicationName.lowercased() == bid.lowercased()
                         }
                         let axNavngivet = AX.allApps().filter {
-                            $0.bundleIdentifier == bid || $0.localizedName?.lowercased() == bid.lowercased()
+                            AX.passer($0, bid)   // navnet er oversat til id ved indgangen (Navne.oversaet)
                         }
                         if erSpaerretId(bid) || navngivet.contains(where: { erSpaerretId($0.bundleIdentifier) })
                             || axNavngivet.contains(where: { erSpaerretId($0.bundleIdentifier) }) {
@@ -185,7 +187,7 @@ enum Capture {
                 let filter: SCContentFilter
                 if let bid = bundleId {
                     let apps = content.applications.filter {
-                        $0.bundleIdentifier == bid || $0.applicationName.lowercased() == bid.lowercased()
+                        Navne.id(bundleId: $0.bundleIdentifier, pid: $0.processID) == bid   // navnet er oversat ved indgangen (Navne.oversaet)
                     }
                     guard !apps.isEmpty else {
                         // MAALT 18/9: her stod "the app is not running", og det var
@@ -198,7 +200,7 @@ enum Capture {
                         // program der staar lige for naesen af dem. Vi spoerger
                         // arbejdsbordet i stedet og siger hvad der faktisk er galt.
                         let running = AX.allApps().contains {
-                            $0.bundleIdentifier == bid || $0.localizedName?.lowercased() == bid.lowercased()
+                            AX.passer($0, bid)   // navnet er oversat til id ved indgangen (Navne.oversaet)
                         }
                         box.set(failure: running
                             ? "'\(bid)' is running, but has no windows on the desktop that is showing. A full-screen app gives itself its own desktop, and everything else sits on another. Switch to it with computer_activate or computer_space, or leave full screen."
@@ -217,8 +219,26 @@ enum Capture {
                 if plan { box.setPlanKlar(); sem.signal(); return }
 
                 let cfg = SCStreamConfiguration()
-                cfg.width = display.width * 2
-                cfg.height = display.height * 2
+                // ⛔ R28 (Opus, MAALT paa Gustavs skaerm 2, som er 1x): laerredet var altid 2 pixels pr.
+                //    punkt, men ScreenCaptureKit lagde kilden ind i sin EGEN oploesning - 1 pixel pr.
+                //    punkt i et laerred der sagde 2. Indholdet laa i den halve stoerrelse, og sloeringen
+                //    (tegnet efter de 2) ved siden af kodeordsfeltet. Nu: skaermens egen skala, og
+                //    kilden skaleres ind i laerredet, saa de to aldrig kan skilles ad.
+                let skala: Int = {
+                    guard let m = CGDisplayCopyDisplayMode(display.displayID), m.width > 0 else { return 2 }
+                    return max(1, m.pixelWidth / m.width)
+                }()
+                cfg.width = display.width * skala
+                cfg.height = display.height * skala
+                cfg.scalesToFit = true
+                // ⛔ MAALT 10/10 paa macOS 26.4.1: uden denne linje lagde et billede af ÉT
+                //    program programmets indhold i billedets oeverste venstre hjoerne
+                //    (Lommeregneren paa (405, 516) laa i (0, 0)). Et punkt laest af billedet
+                //    ramte saa et andet sted paa skaermen, og sloeringen - der tegnes paa
+                //    rammens rigtige plads - laa ved siden af det den skulle daekke.
+                //    Hele skaermen som kilde: vinduerne staar der, hvor de staar.
+                //    Bevis: test/billede-placering.mjs.
+                cfg.sourceRect = CGRect(x: 0, y: 0, width: display.width, height: display.height)
                 cfg.capturesAudio = false
                 cfg.showsCursor = false
 
diff --git a/helper/Sources/cmcp-helper/Input.swift b/helper/Sources/cmcp-helper/Input.swift
index a33c5bb7..bddff387 100644
--- a/helper/Sources/cmcp-helper/Input.swift
+++ b/helper/Sources/cmcp-helper/Input.swift
@@ -1,4 +1,5 @@
 import AppKit
+import Carbon
 import CoreGraphics
 import Foundation
 
@@ -120,14 +121,23 @@ enum Input {
     ///    en tekst minutter, og skifter mennesket program imens, faar det nye
     ///    program resten. Nu kontrolleres modtageren foer hvert tegn; har den
     ///    skiftet (eller kan ikke bekraeftes), stopper skrivningen.
+    ///
+    /// ⛔ `stop` spoerges foer HVERT tegn (29/9): et Tab i «bruger\tkode», et klik
+    ///    eller et felt der selv hopper videre kan flytte fokus ind i et
+    ///    kodeordsfelt midt i teksten. Et tjek kun ved start lod resten lande dér.
     @discardableResult
-    static func type(_ text: String, cps: Int, tilPid: pid_t? = nil) -> Int {
+    static func type(_ text: String, cps: Int, tilPid: pid_t? = nil, stop: (() -> Bool)? = nil) -> Int {
         let delay = cps > 0 ? UInt32(1_000_000 / cps) : 4000
         let globalStart = tilPid == nil ? fokuseretPid() : nil
         if tilPid == nil && globalStart == nil { return 0 }
         var sendt = 0
+        var forrige: Character?
         for ch in text {
             if tilPid == nil && fokuseretPid() != globalStart { return sendt }
+            // Et fokusskift tager et oejeblik; efter Tab/Enter ventes der, foer der spoerges.
+            if let f = forrige, f == "\t" || f == "\n" || f == "\r" { usleep(80_000) }
+            if let stop, stop() { return sendt }
+            forrige = ch
             let s = String(ch)
             var utf16 = Array(s.utf16)
             if let down = CGEvent(keyboardEventSource: nil, virtualKey: 0, keyDown: true) {
@@ -183,3 +193,6 @@ enum Input {
         return true
     }
 }
+
+/// macOS' adgangskodesignal (Secure Event Input) lige nu - se Skrivevagt.swift.
+func macosSikkerIndtastning() -> Bool { IsSecureEventInputEnabled() }
diff --git a/helper/Sources/cmcp-helper/Navne.swift b/helper/Sources/cmcp-helper/Navne.swift
new file mode 100644
index 00000000..3aff50a9
--- /dev/null
+++ b/helper/Sources/cmcp-helper/Navne.swift
@@ -0,0 +1,107 @@
+import Foundation
+
+/// ⛔ 9/10 (F1 paa Gustavs Mac): WhatsApp hedder «\u{200E}WhatsApp» - et usynligt
+///    venstre-mod-hoejre-maerke (U+200E) foran navnet, baade i filnavnet
+///    (/Applications/\u{200E}WhatsApp.app) og i CFBundleDisplayName. `--app WhatsApp`
+///    fandt derfor intet: opstarten blev «ukendt maal» og afvist i baggrunden, og
+///    hvert skrivende kald i en koerende WhatsApp ligesaa. Et menneske ser «WhatsApp»;
+///    det goer opslaget nu ogsaa.
+///
+///    Reglen er den SAMME som serverens `findProgram` i helper.js - porten og
+///    leveringen skal ramme samme program (18/9). test/usynlige-navne.mjs koerer
+///    begge sider mod de samme tilfaelde og sammenligner tegnmaengderne udtoemmende:
+///      1. bundle-id praecist, saa bundle-id uden hensyn til store/smaa bogstaver
+///      2. et praecist navn (smaa bogstaver) - det foerste
+///      3. ellers navnet uden usynlige formateringstegn (Unicode Cf) - men kun naar
+///         praecis ét program passer. Passer flere, er svaret «tvetydig», og et
+///         tvetydigt navn afvises (ogsaa ved opstart: ingen faldbag til disken).
+///
+/// ⛔ R16 (Astra + Opus, MAALT 9/10): foerste udgave brugte Swifts egne regler -
+///    `.whitespacesAndNewlines` (fjerner ogsaa U+0085 og U+200B, men ikke U+FEFF),
+///    `lowercased()` paa hele strengen og Swifts kanoniske `==` (é = e+U+0301). JS
+///    goer det modsatte paa alle tre. «Computer MCP\u{85}» blev derfor «ukendt maal»
+///    i porten og menulinje-ikonet i hjaelperen. Nu: JS' trim-maengde ordret, smaa
+///    bogstaver tegn for tegn, og sammenligning paa tegn - ikke paa kanonisk lighed.
+enum Navne {
+    enum Valg: Equatable { case fundet(Int), intet, tvetydig }
+
+    /// Praecis ECMAScripts WhiteSpace + LineTerminator - det `String.prototype.trim` fjerner.
+    static let kant: Set<UInt32> = Set([0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x20, 0xA0, 0x1680]
+        + Array(0x2000...0x200A) + [0x2028, 0x2029, 0x202F, 0x205F, 0x3000, 0xFEFF])
+
+    static func trim(_ s: String) -> [Unicode.Scalar] {
+        var a = Array(s.unicodeScalars)
+        while let f = a.first, kant.contains(f.value) { a.removeFirst() }
+        while let l = a.last, kant.contains(l.value) { a.removeLast() }
+        return a
+    }
+
+    /// Smaa bogstaver tegn for tegn - som JS' `Array.from(s, c => c.toLowerCase())`.
+    static func smaa(_ t: [Unicode.Scalar]) -> [Unicode.Scalar] {
+        t.flatMap { Array(String($0).lowercased().unicodeScalars) }
+    }
+
+    static func noegle(_ s: String) -> [Unicode.Scalar] {
+        var v = String.UnicodeScalarView()
+        v.append(contentsOf: s.unicodeScalars.filter { $0.properties.generalCategory != .format })
+        return smaa(trim(String(v)))
+    }
+
+    /// Navnetrinene (2-3). Bruges alene for programmer paa disken, der ikke har et id endnu.
+    static func vaelg(_ navne: [String], _ want: String) -> Valg {
+        let lav = smaa(trim(want))
+        guard !lav.isEmpty else { return .intet }
+        if let i = navne.firstIndex(where: { smaa(Array($0.unicodeScalars)) == lav }) { return .fundet(i) }
+        let n = noegle(want)
+        guard !n.isEmpty else { return .intet }
+        let hits = navne.indices.filter { noegle(navne[$0]) == n }
+        return hits.count == 1 ? .fundet(hits[0]) : (hits.isEmpty ? .intet : .tvetydig)
+    }
+
+    /// Et koerende program: trin 1-3 i den raekkefoelge serverens `findProgram` bruger.
+    static func vaelgApp(ids: [String?], navne: [String?], want: String) -> Valg {
+        let w = trim(want)
+        guard !w.isEmpty else { return .intet }
+        if let i = ids.firstIndex(where: { $0.map { Array($0.unicodeScalars) } == w }) { return .fundet(i) }
+        let lw = smaa(w)
+        if let i = ids.firstIndex(where: { $0.map { smaa(Array($0.unicodeScalars)) } == lw }) { return .fundet(i) }
+        let v = vaelg(navne.map { $0 ?? "" }, want)
+        // ⛔ R18 (Opus, MAALT live): et navn hvis id deles med en koerende proces med et ANDET
+        //    navn (visningstjenester), er tvetydigt - leveringen gaar til id'et, ikke processen.
+        guard case .fundet(let i) = v, let id = ids[i], !id.isEmpty else { return v }
+        let mit = smaa(Array((navne[i] ?? "").unicodeScalars))
+        let delt = ids.indices.contains { $0 != i && ids[$0] == id && smaa(Array((navne[$0] ?? "").unicodeScalars)) != mit }
+        return delt ? .tvetydig : v
+    }
+
+    /// Programmets id efter oversaettelsen. Et program uden bundle-id (fx et program
+    /// bygget med swiftc) faar sin proces som id: «pid:<n>» - ellers kunne det slet ikke
+    /// naas, naar filtrene kun sammenligner id (R17-koersel 9/10: test/vaelger.mjs).
+    static func id(bundleId: String?, pid: Int32) -> String {
+        if let b = bundleId, !b.isEmpty { return b }
+        return "pid:\(pid)"
+    }
+
+    /// `--app <navn>` oversat ÉN gang, foer nogen kommando ser det. `slaaOp` er
+    /// opslaget blandt de koerende programmer; giver det intet, staar argumentet uroert.
+    /// R17: `--app =<id>` er et maal serverens port har bundet - kun det praecise id, og
+    /// koerer det ikke (`findesPraecist`), er svaret nil: intet maa ske.
+    ///    `bundet` siger at maalet var bundet: saa maa intet senere opslag i hjaelperen
+    ///    falde tilbage paa navne eller paa disken (R18, Astra: programmet kan forsvinde
+    ///    mellem indgangen og leveringen).
+    static func oversaet(_ argv: [String], slaaOp: (String) -> String?,
+                         findesPraecist: (String) -> Bool) -> (argv: [String], bundet: Bool)? {
+        var a = argv
+        var bundet = false
+        for i in a.indices.dropLast() where a[i] == "--app" && !a[i + 1].hasPrefix("--") {
+            let v = a[i + 1]
+            if v.hasPrefix("=") {
+                let id = String(v.dropFirst())
+                guard !id.isEmpty, findesPraecist(id) else { return nil }
+                a[i + 1] = id
+                bundet = true
+            } else if let bid = slaaOp(v) { a[i + 1] = bid }
+        }
+        return (a, bundet)
+    }
+}
diff --git a/helper/Sources/cmcp-helper/Skaerm.swift b/helper/Sources/cmcp-helper/Skaerm.swift
index 63b76090..b15dcd31 100644
--- a/helper/Sources/cmcp-helper/Skaerm.swift
+++ b/helper/Sources/cmcp-helper/Skaerm.swift
@@ -27,6 +27,8 @@ enum Skaerm {
         let markoer: CGPoint
         let forrestPid: pid_t
         let forrestNavn: String
+        /// Hvornaar standen blev maalt - et program startet EFTER det, er handlingens.
+        var tid: Date = Date()
     }
 
     /// ⛔ MAALT 27/9 paa en fremmed Mac: `NSWorkspace.frontmostApplication` er en
@@ -176,9 +178,11 @@ enum Skaerm {
     ///    og et nyt program efter op mod et sekund - derfor et vindue pr. handling.
     static func givTilbage(foer: Stand, tilPid: () -> pid_t?, ventMs: Int) -> [String: Any] {
         var efter = stand()
-        var gaaet = 0
-        while efter.forrestPid == foer.forrestPid && gaaet < ventMs {
-            usleep(60_000); gaaet += 60; efter = stand()
+        // ⛔ 1/10 (konsulent-panelet): vinduet talte kun soevntiden, ikke tiden i
+        //    opslagene. Under belastning varede «240 ms» flere sekunder. Nu uret.
+        let start = Date()
+        while efter.forrestPid == foer.forrestPid && Date().timeIntervalSince(start) * 1000 < Double(ventMs) {
+            usleep(60_000); efter = stand()
         }
         guard foer.forrestPid > 0, efter.forrestPid != foer.forrestPid else { return ["took_screen": false] }
         // ⛔ 27/9 (koersel 7-9): ved en baggrundsstart kom et TREDJE program frem
@@ -187,10 +191,32 @@ enum Skaerm {
         //    trykker en tast eller klikker; et program der skubber sig frem, goer
         //    ingen af delene. Uden menneskelig input i 1,5 s var det ikke mennesket.
         let maal = tilPid()
-        guard maal != foer.forrestPid, efter.forrestPid == maal || !menneskeRoerteNetop() else {
+        // Maalet er der mennesket allerede var: intet skift at give tilbage.
+        if maal == foer.forrestPid { return ["took_screen": false] }
+        // ⛔ 1/10 (MAALT paa Gustavs Mac, macOS' egen log): to gange skiftede han selv
+        //    skrivebord midt i et agent-kald, og hjaelperen rev forgrunden tilbage -
+        //    én gang blev hele skaermen flyttet til et andet skrivebord. Et skrivebords-
+        //    skift er hverken et tastetryk eller et klik, saa menneske-tjekket saa det
+        //    ikke. Nu gives der KUN tilbage, naar det der kom frem er handlingens eget
+        //    program eller et program handlingen selv startede. Et program der koerte i
+        //    forvejen og kommer frem, kan vaere mennesket - og det roeres ikke.
+        let egen = efter.forrestPid == maal || startetEfter(efter.forrestPid, foer.tid)
+        if !egen {
             return ["took_screen": false,
                     "observed": ["frontmost_changed_to": efter.forrestNavn,
-                                 "note": "someone pressed a key or clicked just before, so this is taken to be the person switching - left alone"]]
+                                 "note": "\(efter.forrestNavn) came to the front, but it is not the app this acted on and was already running. A person switching desktop or app looks exactly like this, so the front was left where it is."]]
+        }
+        // ⛔ 28/9 (haerdning M4): FOER stod `efter.forrestPid == maal || !menneskeRoerteNetop()`
+        //    - naar maalprogrammet kom frem, blev forgrunden givet tilbage UANSET om
+        //    mennesket lige havde klikket/tastet. Klikkede mennesket selv over i netop
+        //    dét program, rev vi det tilbage under haenderne paa dem. Nu gaelder
+        //    menneske-tjekket i ALLE grene: har nogen roert tastatur eller mus lige
+        //    foer, saa lader vi forgrunden staa - og siger aerligt at skaermen skiftede,
+        //    i stedet for et tavst took_screen:false.
+        if menneskeRoerteNetop() {
+            return ["took_screen": true, "gave_back": false,
+                    "observed": ["frontmost_changed_to": efter.forrestNavn,
+                                 "note": "a person clicked or typed just before, so this is taken to be them and the front was left with \(efter.forrestNavn)"]]
         }
         NSRunningApplication(processIdentifier: foer.forrestPid)?.activate(options: [])
         var tilbage = false
@@ -207,10 +233,27 @@ enum Skaerm {
     /// Har et menneske trykket en tast eller klikket inden for de sidste 1,5 s?
     /// Kun tryk og klik: musebevaegelser sker hele tiden uden at skifte program.
     static func menneskeRoerteNetop(sekunder: Double = 1.5) -> Bool {
-        let typer: [CGEventType] = [.keyDown, .flagsChanged, .leftMouseDown, .rightMouseDown, .otherMouseDown]
+        // 1/10: ogsaa rul og styrefladens bevaegelser (29 = gestus) - et skrivebordsskift
+        // med tre fingre er hverken tast eller klik.
+        // ⛔ 1/10 (GitHubs Mac, koersel 36863990504): ALMINDELIG SKRIVNING (keyDown) er
+        //    ikke et programskift. Mens «mennesket» skrev i TextEdit, kom Finder frem, og
+        //    giv-tilbage troede at skriveriet var et skift - alle 270 tegn landede i Finder.
+        //    Et menneske skifter program med et klik, med Cmd+Tab (modifier = flagsChanged)
+        //    eller med styrefladen. Kun de taeller.
+        let typer: [CGEventType] = [.flagsChanged, .leftMouseDown, .rightMouseDown, .otherMouseDown, .scrollWheel]
+            + [CGEventType(rawValue: 29)].compactMap { $0 }
         return typer.contains { CGEventSource.secondsSinceLastEventType(.combinedSessionState, eventType: $0) < sekunder }
     }
 
+    /// Blev programmet startet efter `t` (med et halvt sekunds slaek for uret)?
+    static func startetEfter(_ pid: pid_t, _ t: Date) -> Bool {
+        guard let d = NSRunningApplication(processIdentifier: pid)?.launchDate else { return false }
+        return d >= t.addingTimeInterval(-0.5)
+    }
+
+    /// Roller hvis tryk eller tast aabner en menu (samme liste som serverens MENU_ROLLER, R28).
+    static let menuRoller: Set<String> = ["AXPopUpButton", "AXMenuButton", "AXComboBox", "AXMenuBarItem"]
+
     /// Koerer en handling og beskriver den aerligt.
     static func maalt(tilPid: pid_t?, flyttedeMarkoer: Bool = false,
                       _ handling: () -> Void) -> [String: Any] {
diff --git a/helper/Sources/cmcp-helper/Skrivevagt.swift b/helper/Sources/cmcp-helper/Skrivevagt.swift
new file mode 100644
index 00000000..e0f0fa31
--- /dev/null
+++ b/helper/Sources/cmcp-helper/Skrivevagt.swift
@@ -0,0 +1,49 @@
+import Foundation
+
+// Maa agenten skrive - taste eller indsaette - i det felt der har fokus? (R23)
+// Egen fil, saa test/skriv-ankommer.mjs kan kompilere afgoerelsen for sig.
+//
+// ⛔ R23 (Opus, Astra): macOS' eget adgangskodesignal (Secure Event Input) taendes af
+//    en browser for et kodeordsfelt - ogsaa naar tilgaengeligheds-laget kun ser en
+//    beholder (AXWebArea) og derfor siger «ikke sikkert». Signalet er kun et EKSTRA
+//    NEJ: det er globalt (et kodeordsfelt i ethvert program taender det) og slukket,
+//    naar browseren ikke er forrest. Det kan aldrig goere et ukendt fokus til et ja.
+
+enum SkriveDom: Equatable { case maa, ukendtFokus, sikkertFelt }
+
+/// `fokusSikkert`: tilgaengeligheds-lagets svar (nil = ukendt).
+/// `sikkerIndtastning`: macOS' adgangskodesignal lige nu.
+func skriveDom(fokusSikkert: Bool?, sikkerIndtastning: Bool) -> SkriveDom {
+    if sikkerIndtastning { return .sikkertFelt }
+    guard let s = fokusSikkert else { return .ukendtFokus }
+    return s ? .sikkertFelt : .maa
+}
+
+/// Skriver denne tastekombination TEKST i feltet med fokus? (R24, Astra + Opus: `key`
+/// med «a» eller cmd+v gik uden om skriveDom.) Bogstaver, tal og mellemrum uden cmd/ctrl
+/// (shift, alt og fn giver ogsaa tegn), og cmd+v (indsaet). Genveje og flytte-taster ikke.
+func kombiSkriverTekst(_ combo: String) -> Bool {
+    let dele = combo.lowercased().split(separator: "+").map(String.init)
+    guard let tast = dele.last else { return false }
+    let mod = Set(dele.dropLast())
+    if mod.contains("ctrl") || mod.contains("control") { return false }
+    let cmd = mod.contains("cmd") || mod.contains("command") || mod.contains("meta")
+    if cmd { return tast == "v" }
+    return tast == "space" || (tast.count == 1 && (tast.first!.isLetter || tast.first!.isNumber))
+}
+
+/// Valget efter en soegning (R23/R24 - ren funktion, saa ÉT fund efter tidsudloeb kan proeves).
+enum ValgDom: Equatable { case vaelg(Int), ufuldstaendig, udenforListen, ingen, tvetydigOverskriver, tvetydig }
+
+func valgEfterSoegning(antal: Int, stoppedeTidligt: Bool, index: Int?, maaGaette: Bool, first: Bool) -> ValgDom {
+    // ⛔ R23 (Astra, maalt): en soegning der loeb toer for tid har maaske ikke set et
+    //    andet, ens element. Saa vaelges intet af sig selv - kun et udtrykkeligt index.
+    if stoppedeTidligt && index == nil { return .ufuldstaendig }
+    if let i = index { return i >= 0 && i < antal ? .vaelg(i) : .udenforListen }
+    if antal == 0 { return .ingen }
+    if antal > 1 {
+        if !maaGaette { return .tvetydigOverskriver }
+        if !first { return .tvetydig }
+    }
+    return .vaelg(0)
+}
diff --git a/helper/Sources/cmcp-helper/main.swift b/helper/Sources/cmcp-helper/main.swift
index 3ae96996..563ad2b0 100644
--- a/helper/Sources/cmcp-helper/main.swift
+++ b/helper/Sources/cmcp-helper/main.swift
@@ -12,9 +12,9 @@ import Foundation
 /// om, er praecis den slags der goer at man ikke kan lade den koere alene.
 func modtager(_ args: Args) -> pid_t? {
     guard let navn = args.str("app") else { return nil }
-    guard let app = AX.app(bundleId: navn)
-        ?? AX.allApps().first(where: { $0.bundleIdentifier == navn })
-        ?? AX.allApps().first(where: { $0.localizedName?.lowercased() == navn.lowercased() }) else {
+    // Kun Navne-reglen (R16): en ekstra sammenligning her med Swifts egne regler
+    // kunne levere til et program porten aldrig vurderede.
+    guard let app = AX.app(bundleId: navn) else {
         Out.fail("'\(navn)' is not running, so there is no queue to deliver to",
                  code: "app-not-found")
     }
@@ -22,9 +22,20 @@ func modtager(_ args: Args) -> pid_t? {
 }
 
 
-let HELPER_VERSION = "0.2.1"
+let HELPER_VERSION = "0.2.2"
 
-let args = Args(CommandLine.arguments)
+/// ⛔ 9/10 (F1 paa Gustavs Mac): `--app` blev sammenlignet med programnavne paa
+///    tyve steder hver for sig (find, vinduer, skaermbilleder, sloering, levering).
+///    «\u{200E}WhatsApp» passede ingen af dem, saa `find --app WhatsApp` fandt intet.
+///    Nu oversaettes et navn ÉN gang, her, til det bundle-id Navne-reglen vaelger
+///    blandt de koerende programmer - samme program som serverens port vurderede.
+///    Koerer programmet ikke, eller passer flere, staar argumentet uroert.
+guard let oversatArgv = Navne.oversaet(CommandLine.arguments, slaaOp: { AX.app(bundleId: $0).map { Navne.id(bundleId: $0.bundleIdentifier, pid: $0.processIdentifier) } },
+                                      findesPraecist: { id in AX.allApps().contains { $0.bundleIdentifier == id } }) else {
+    Out.fail("the app the gate judged is no longer running - nothing was done", code: "app-gone")
+}
+AX.kunPraecistId = oversatArgv.bundet
+let args = Args(oversatArgv.argv)
 
 // ⛔ FUNDET AF SIKKERHEDSREVIEWET 20/9. `contains` og `title` gik som
 //    ARGUMENTER, og `ps` viser hele kommandolinjen for enhver proces med samme
@@ -68,25 +79,24 @@ func denySet(_ a: Args) -> Set<String> {
 /// Vælg ét træf. --index N er nummeret i den liste, find (og en tvetydig fejl) viste.
 /// Uden --index: præcis ét træf, eller --first når kaldet må gætte (press).
 func vaelgTraef(_ hits: [AX.Match], _ args: Args, maaGaette: Bool) -> AX.Match {
-    if let i = args.int("index") {
-        guard i >= 0, i < hits.count else {
-            Out.fail("there is no match number \(i); there are \(hits.count)", code: "not-found",
-                     extra: ["matches": hits.map(\.dict), "count": hits.count])
-        }
+    switch valgEfterSoegning(antal: hits.count, stoppedeTidligt: AX.stoppedeTidligt, index: args.int("index"), maaGaette: maaGaette, first: args.flag("first")) {
+    case .vaelg(let i):
         return hits[i]
+    case .ufuldstaendig:
+        Out.fail("the search stopped after \(Int(AX.tidsgraense)) seconds before it had seen the whole app, so another matching element cannot be ruled out - nothing was done. Narrow the search (role, subrole, title or a lower depth), or pick one with index from computer_find.",
+                 code: "search-incomplete", extra: ["matches": hits.map(\.dict), "count": hits.count, "stopped_early": true])
+    case .udenforListen:
+        Out.fail("there is no match number \(args.int("index") ?? -1); there are \(hits.count)", code: "not-found",
+                 extra: ["matches": hits.map(\.dict), "count": hits.count])
+    case .ingen:
+        Out.fail("nothing matched", code: "not-found", extra: ["count": 0])
+    case .tvetydigOverskriver:
+        Out.fail("found \(hits.count) matches, and this action overwrites text, so it does not guess - pick one with index (its number in matches) or narrow with subrole",
+                 code: "ambiguous", extra: ["matches": hits.map(\.dict), "count": hits.count])
+    case .tvetydig:
+        Out.fail("found \(hits.count) matches - narrow the search, pick one with index, or pass --first",
+                 code: "ambiguous", extra: ["matches": hits.map(\.dict), "count": hits.count])
     }
-    guard let first = hits.first else { Out.fail("nothing matched", code: "not-found", extra: ["count": 0]) }
-    if hits.count > 1 {
-        if !maaGaette {
-            Out.fail("found \(hits.count) matches, and this action overwrites text, so it does not guess - pick one with index (its number in matches) or narrow with subrole",
-                     code: "ambiguous", extra: ["matches": hits.map(\.dict), "count": hits.count])
-        }
-        if !args.flag("first") {
-            Out.fail("found \(hits.count) matches - narrow the search, pick one with index, or pass --first",
-                     code: "ambiguous", extra: ["matches": hits.map(\.dict), "count": hits.count])
-        }
-    }
-    return first
 }
 
 switch args.command {
@@ -134,9 +144,7 @@ case "windows":
     let kilde = args.str("app") != nil ? AX.allApps() : AX.runningApps()
     var ulaeselige: [String] = []
     for a in kilde {
-        if let scope = args.str("app"),
-           a.bundleIdentifier != scope,
-           a.localizedName?.lowercased() != scope.lowercased() { continue }
+        if let scope = args.str("app"), !AX.passer(a, scope) { continue }   // navnet er oversat ved indgangen
         let svar = AX.windowsMed(of: a)
         // ⛔ 24/9: et program der ikke svarede, maa ikke se ud som et program
         //    uden vinduer. Se `windowsMed` for hvordan de to blev blandet.
@@ -264,7 +272,9 @@ case "launch":
         //    `Skaerm.forrestLige`). Nu gives forgrunden straks tilbage.
         let g = Skaerm.givTilbage(foer: foerL, tilPid: { AX.sidstStartetPid ?? AX.app(bundleId: l.bundleId ?? hvad)?.processIdentifier },
                                   ventMs: 4000)   // Kontakter kom frem efter 1,5 s (koersel 7)
-        if (g["took_screen"] as? Bool) == true { for (k, v) in g { ls[k] = v } }
+        // 1/10: «observed» = et program der koerte i forvejen kom frem; det er ikke os, og
+        // svaret skal sige det i stedet for skaermens raa skift (giv-tilbage case 4 paa CI).
+        if (g["took_screen"] as? Bool) == true || g["observed"] != nil { for (k, v) in g { ls[k] = v } }
         else { for (k, v) in Skaerm.udfald(foer: foerL) { ls[k] = v } }
         // Skjul det NYE program foerst nu: forgrunden er givet tilbage, saa en
         // skjulning kan ikke laengere sende den videre til et tredje program.
@@ -277,6 +287,41 @@ case "launch":
     }
     Out.ok(ls)
 
+case "open-url":
+    // Doeren: aabn en app's EGEN indgang bagfra (spotify:track:, whatsapp://chat)
+    // uden at aktivere. Serveren bygger URL'en af en fast skabelon og validerer
+    // hver parameter; helperen dobbelt-tjekker mod en HAARDKODET scheme-allowlist,
+    // saa selv en fejl i serveren aldrig kan aabne file:/shortcuts:/osascript.
+    guard let raw = args.str("url"), let url = URL(string: raw), let scheme = url.scheme?.lowercased() else {
+        Out.fail("--url is missing or is not a valid URL", code: "bad-args")
+    }
+    // Kun de schemes et intent faktisk bygger (play_track -> spotify:, open_chat ->
+    //  whatsapp://). 29/9 (Fable-review): 'claude' var på listen uden at noget intent
+    //  byggede den - en død flade. Væk. Tilføj igen NÅR et intent bruger den.
+    let tilladteSchemes: Set<String> = ["spotify", "whatsapp"]
+    let schemeListe = tilladteSchemes.sorted().joined(separator: ", ")
+    guard tilladteSchemes.contains(scheme) else {
+        Out.fail("the scheme '\(scheme)' is not one of this door's app schemes (\(schemeListe))", code: "scheme-not-allowed")
+    }
+    let foerU = Skaerm.stand()
+    let cfg = NSWorkspace.OpenConfiguration()
+    cfg.activates = false
+    let sem = DispatchSemaphore(value: 0)
+    var aabenFejl: Error? = nil
+    NSWorkspace.shared.open(url, configuration: cfg) { _, error in aabenFejl = error; sem.signal() }
+    // ⛔ 29/9 (Astra, luknings-review): FOER stod `_ = sem.wait(...)` - resultatet
+    //    blev smidt vaek, saa en TIMEOUT (callbacken kom aldrig) faldt igennem til
+    //    Out.ok og rapporterede «aabnet» uden bekraeftelse. Nu er en timeout en fejl.
+    if sem.wait(timeout: .now() + 10) == .timedOut {
+        Out.fail("opening the \(scheme) door timed out with no response from the system", code: "open-timeout")
+    }
+    if let e = aabenFejl { Out.fail("opening the \(scheme) door failed: \(e.localizedDescription)", code: "open-failed") }
+    var uu: [String: Any] = ["opened_scheme": scheme]
+    // Kan hente sig selv frem trods activates:false - giv forgrunden straks tilbage.
+    let gu = Skaerm.givTilbage(foer: foerU, tilPid: { NSWorkspace.shared.frontmostApplication?.processIdentifier }, ventMs: 4000)
+    for (k, v) in gu { uu[k] = v }
+    Out.ok(uu)
+
 case "quit":
     guard let hvad = args.str("app") else { Out.fail("--app is missing", code: "bad-args") }
     // ⛔ Den her maaling er ikke pynt. Et program med ugemt arbejde svarer paa
@@ -293,6 +338,12 @@ case "quit":
     Out.ok(sq)
 
 case "paste":
+    // ⛔ Efterkontrol runde 5 (Astra): en Dispatch-callback saetter flaget SENERE end
+    //    signalet ankommer - et stop-tjek kunne overhale den (maalt 30/30). Nu BLOKERES
+    //    SIGUSR1 som det allerfoerste: signalet bliver liggende som ventende, og foer
+    //    Cmd+V spoerges `sigpending()` synkront. Intet vindue mellem modtaget og tjekket.
+    //    Kommer signalet foer blokeringen, doer processen - foer noget er roert.
+    AX.blokerPasteStop()
     // Teksten kommer paa stdin, ikke som argument - samme grund som `type`:
     // et argument staar i procestabellen, hvor enhver bruger paa maskinen
     // kan laese det med `ps`.
@@ -300,8 +351,18 @@ case "paste":
     var ind = ""
     while let l = readLine(strippingNewline: false) { ind += l }
     if ind.isEmpty { Out.fail("no text on stdin", code: "bad-args") }
+    // ⛔ R23 (Astra): indsaet havde intet feltvaern - samme regel som `type`. Cmd+V lander
+    //    i det forreste programs fokus, saa det er DET felt der doemmes.
+    switch skriveDom(fokusSikkert: AX.fokusErSikkert(pid: NSWorkspace.shared.frontmostApplication?.processIdentifier),
+                     sikkerIndtastning: macosSikkerIndtastning()) {
+    case .maa: break
+    case .ukendtFokus:
+        Out.fail("could not see where the keyboard focus is, so a password field cannot be ruled out; nothing was pasted. Use computer_find + computer_set_value, or ask the person.", code: "focus-unknown")
+    case .sikkertFelt:
+        Out.fail("the keyboard focus is in a password field - we do not paste into password fields; nothing was pasted. Ask the person to type it themselves with computer_ask_user.", code: "secure-field")
+    }
     let r = AX.pasteText(ind, restore: !args.flag("no-restore"))
-    if !r.ok { Out.fail(r.why, code: "paste-failed") }
+    if !r.ok { Out.fail(r.why, code: AX.pasteStop ? "screen-taken-back" : "paste-failed") }
     Out.ok(["pasted": true, "chars": ind.count, "restored": r.restored, "note": r.why])
 
 case "window-set":
@@ -437,7 +498,13 @@ case "find":
         limit: args.int("limit") ?? 25,
         ekstraDeny: denySet(args)
     )
-    Out.ok(["matches": hits.map(\.dict), "count": hits.count])
+    var fundSvar: [String: Any] = ["matches": hits.map(\.dict), "count": hits.count]
+    // ⛔ R23 (Astra): et tidsudloeb lignede et tomt program ({count: 0}). Nu siges det.
+    if AX.stoppedeTidligt {
+        fundSvar["stopped_early"] = true
+        fundSvar["note"] = "The search stopped after \(Int(AX.tidsgraense)) seconds - this app answers slowly, so these are the matches in PART of it, not all. Narrow it with role, subrole, title or a lower depth."
+    }
+    Out.ok(fundSvar)
 
 case "set-value":
     // Et flag hjaelperen ikke kender, maa ikke ignoreres i stilhed: --subrole blev
@@ -472,6 +539,7 @@ case "set-value":
 
     // Enten et navngivet element, eller det der har fokus.
     var target: (el: AXUIElement, dict: [String: Any])?
+    var fokusVej = false
     if args.str("app") != nil || args.str("role") != nil || args.str("subrole") != nil || _soeg.title != nil || _soeg.contains != nil {
         let hits = AX.find(bundleId: args.str("app"), role: args.str("role"),
                            title: _soeg.title, contains: _soeg.contains, subrole: args.str("subrole"),
@@ -487,11 +555,13 @@ case "set-value":
                      code: "no-target")
         }
         target = f
+        fokusVej = true
     }
     guard let t = target else { Out.fail("intet maal", code: "no-target") }
 
     let role = (t.dict["role"] as? String) ?? ""
-    if AX.isSecure(t.el, role: role) {
+    // R24 (Astra): paa FOKUS-vejen kan macOS' adgangskodesignal se et felt AX ikke kan.
+    if AX.isSecure(t.el, role: role) || (fokusVej && skriveDom(fokusSikkert: false, sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt) {
         Out.fail("this is a secure field - we do not write into password fields. Ask the person to type it themselves with computer_ask_user.",
                  code: "secure-field", extra: ["element": t.dict])
     }
@@ -549,9 +619,140 @@ case "at":
         "app": app?.localizedName ?? "",
         "bundleId": app?.bundleIdentifier ?? "",
         "role": AX.string(el!, kAXRoleAttribute as String) ?? "",
+        // Navnet paa det der ligger under punktet - sende-porten skal kunne se
+        // at et klik rammer en send-knap (29/9).
+        "title": AX.string(el!, kAXTitleAttribute as String) ?? "",
+        "description": AX.string(el!, kAXDescriptionAttribute as String) ?? "",
+        "window": AX.vinduesTitel(el!) ?? "",
+        "frame": AX.frame(el!)?.dict ?? [:],
         "under": under
     ])
 
+case "idle":
+    // Hvor laenge siden der sidst kom tastatur- eller museinput? Skaerm-laanet
+    // (29/9) pauser, naar mennesket selv bruger maskinen. Serveren sammenligner
+    // med sin EGEN sidste handling, saa vores egne tastetryk ikke taeller.
+    // Rent opslag.
+    let typer: [CGEventType] = [.keyDown, .flagsChanged, .leftMouseDown, .rightMouseDown, .otherMouseDown, .mouseMoved, .scrollWheel]
+    let idle = typer.map { CGEventSource.secondsSinceLastEventType(.combinedSessionState, eventType: $0) }.min() ?? 9999
+    Out.ok(["idle": idle])
+
+case "samtale":
+    // ⛔ SENDE-PORTEN (29/9, dommen 28/9 D4): hvem gaar en besked til, og hvad
+    //    staar der? Laeses af SERVEREN fra skaermen - aldrig af modellen - saa
+    //    mennesket godkender det der faktisk sendes, ikke det agenten paastaar.
+    //    Rent opslag: intet flyttes, intet trykkes, et kodeordsfelt laeses aldrig.
+    Perms.require(accessibility: true)
+    guard let sPid = modtager(args) else { Out.fail("--app is missing", code: "bad-args") }
+    let sApp = AXUIElementCreateApplication(sPid)
+    AXUIElementSetMessagingTimeout(sApp, 2.0)
+    var sVindue: AXUIElement?
+    if let w = AX.attr(sApp, kAXFocusedWindowAttribute as String), CFGetTypeID(w) == AXUIElementGetTypeID() {
+        // swiftlint:disable:next force_cast
+        sVindue = (w as! AXUIElement)
+    }
+    // --title-only: kun vinduets titel. Sende-porten skal kende en browsers side foer
+    // hvert klik; hele traeet (op til 4.000 elementer) for det var for dyrt (runde 3).
+    if args.flag("title-only") {
+        Out.ok(["window": sVindue.flatMap { AX.string($0, kAXTitleAttribute as String) } ?? ""])
+    }
+    var sUd: [String: Any] = [:]
+    // Feltet foerst: modtageren laeses i SAMME KOLONNE som feltet, over det.
+    // ⛔ Runde 1 30/9 (Fable P4): de oeverste navne i hele vinduet kunne vaere
+    //    sidebarens chatliste - et FORKERT navn vist som modtager er vaerre end intet.
+    var feltRamme: Rect?
+    if let f = AX.attr(sApp, kAXFocusedUIElementAttribute as String), CFGetTypeID(f) == AXUIElementGetTypeID() {
+        // swiftlint:disable:next force_cast
+        let fel = f as! AXUIElement
+        let r = AX.string(fel, kAXRoleAttribute as String) ?? ""
+        var felt: [String: Any] = ["role": r]
+        if let sub = AX.string(fel, kAXSubroleAttribute as String), !sub.isEmpty { felt["subrole"] = sub }
+        // Kun hvis det VIDES ikke at vaere sikkert, laeses vaerdien (runde 2, Astra 2).
+        if AX.sikkerStatus(fel) != false { felt["secure"] = true } else if let v = AX.string(fel, kAXValueAttribute as String) { felt["value"] = v }
+        feltRamme = AX.frame(fel)
+        if let fr = feltRamme { felt["frame"] = fr.dict }
+        sUd["field"] = felt
+    }
+    // ⛔ 1/10 (MAALT i Gustavs rigtige WhatsApp 30/9-1/10): Catalyst-programmer giver
+    //    fokus til en beholder (AXGroup «iOSContentGroup», hele vinduet), ikke til
+    //    skrivefeltet - saa porten saa intet felt og afviste ALLE afsendelser. Har
+    //    vinduet praecis ÉT tekstomraade, er det feltet. Flere: ukendt, intet gaettes.
+    let fokusRolle = ((sUd["field"] as? [String: Any])?["role"] as? String) ?? ""
+    if fokusRolle != "AXTextArea" && fokusRolle != "AXTextField", let v = sVindue {
+        var omr: [AXUIElement] = []
+        var koeF: [(AXUIElement, Int)] = [(v, 0)]
+        var setF = 0
+        while !koeF.isEmpty && setF < 4000 {
+            let (el, d) = koeF.removeFirst(); setF += 1
+            if (AX.string(el, kAXRoleAttribute as String) ?? "") == "AXTextArea" { omr.append(el) }
+            if d < 14 { for b in AX.children(el) { koeF.append((b, d + 1)) } }
+        }
+        if omr.count == 1 {
+            let fel = omr[0]
+            var felt: [String: Any] = ["role": "AXTextArea", "found": "the window's only text area (the app gave focus to a container)"]
+            if AX.sikkerStatus(fel) != false { felt["secure"] = true } else if let val = AX.string(fel, kAXValueAttribute as String) { felt["value"] = val }
+            feltRamme = AX.frame(fel)
+            if let fr = feltRamme { felt["frame"] = fr.dict }
+            sUd["field"] = felt
+        }
+    }
+    if let v = sVindue {
+        sUd["window"] = AX.string(v, kAXTitleAttribute as String) ?? ""
+        var fundne: [(y: Double, tekst: String)] = []
+        var koe: [(AXUIElement, Int)] = [(v, 0)]
+        let vy = AX.frame(v)?.y ?? 0
+        var besoegt = 0
+        while !koe.isEmpty && besoegt < 4000 {
+            let (el, d) = koe.removeFirst(); besoegt += 1
+            let r = AX.string(el, kAXRoleAttribute as String) ?? ""
+            if r == "AXStaticText" || r == "AXHeading" {
+                let t = (AX.string(el, kAXValueAttribute as String) ?? AX.string(el, kAXTitleAttribute as String) ?? "")
+                    .trimmingCharacters(in: .whitespacesAndNewlines)
+                if !t.isEmpty, let fr = AX.frame(el), fr.y > vy + 20 {
+                    // Med et felt: kun tekst over feltet, der overlapper dets kolonne.
+                    if let fe = feltRamme {
+                        let overlapper = fr.x < fe.x + fe.w && fr.x + fr.w > fe.x
+                        if overlapper && fr.y + fr.h <= fe.y { fundne.append((fr.y, String(t.prefix(120)))) }
+                    } else {
+                        fundne.append((fr.y, String(t.prefix(120))))
+                    }
+                }
+            }
+            if d < 14 { for b in AX.children(el) { koe.append((b, d + 1)) } }
+        }
+        sUd["headings"] = fundne.sorted { $0.y < $1.y }.prefix(3).map { $0.tekst }
+        sUd["column"] = feltRamme != nil
+        // ⛔ 1/10 (MAALT i WhatsApp): samtalens navn er en KNAP oeverst i feltets kolonne
+        //    (ikke en overskrift), og overskrifterne over feltet er datoer. Modtageren er
+        //    den bredeste knap i kolonnens top, hvis SAMME tekst ogsaa staar i en raekke i
+        //    chatlisten til venstre for kolonnen - saa er det navnet mennesket selv ser
+        //    begge steder. Ellers: ingen modtager (porten afviser, som foer).
+        if let fe = feltRamme, let vr = AX.frame(v) {
+            var top: [(w: Double, t: String)] = []
+            var liste: [String] = []
+            var koeN: [(AXUIElement, Int)] = [(v, 0)]
+            var setN = 0
+            while !koeN.isEmpty && setN < 4000 {
+                let (el, d) = koeN.removeFirst(); setN += 1
+                let r = AX.string(el, kAXRoleAttribute as String) ?? ""
+                let t = (AX.string(el, kAXTitleAttribute as String) ?? AX.string(el, kAXDescriptionAttribute as String)
+                         ?? AX.string(el, kAXValueAttribute as String) ?? "").trimmingCharacters(in: .whitespacesAndNewlines)
+                if !t.isEmpty, let fr = AX.frame(el) {
+                    if fr.x + fr.w <= fe.x - 20 { liste.append(t) }
+                    else if r == "AXButton" && fr.y < vr.y + 90 && fr.x < fe.x + fe.w && fr.x + fr.w > fe.x - 60 && t.count >= 2 {
+                        top.append((fr.w, String(t.prefix(120))))
+                    }
+                }
+                if d < 14 { for b in AX.children(el) { koeN.append((b, d + 1)) } }
+            }
+            let kandidater = top.filter { k in liste.contains { $0.contains(k.t) } }.sorted { $0.w > $1.w }
+            if let navn = kandidater.first, kandidater.count == 1 || navn.w > kandidater[1].w * 2 {
+                sUd["recipient"] = navn.t
+            }
+        }
+    }
+    Out.ok(sUd)
+
 case "focused":
     // Laesende: hvad har tastaturfokus, og er det et sikkert felt?
     Perms.require(accessibility: true)
@@ -608,7 +809,7 @@ case "wait-for":
 case "press":
     // Et flag hjaelperen ikke kender, maa ikke ignoreres i stilhed: --subrole blev
     // tidligere slugt, og kaldet ramte et andet felt end det, agenten bad om (27/9).
-    let unknownPressFlags = args.ukendte(Set(["match-stdin", "app", "role", "subrole", "title", "contains", "first", "index", "depth"]))
+    let unknownPressFlags = args.ukendte(Set(["match-stdin", "app", "role", "subrole", "title", "contains", "first", "index", "depth", "dry", "menu-vagt"]))
     if !unknownPressFlags.isEmpty { Out.fail("unknown flag(s): \(unknownPressFlags.joined(separator: " "))", code: "bad-args") }
     let _soeg = laesSoegning(args)
     Perms.require(accessibility: true)
@@ -625,8 +826,20 @@ case "press":
     // vaelger selv med --index. At trykke paa det foerste tilfaeldige traef er
     // praecis den slags naesten-rigtige handling der er svaer at opdage bagefter.
     let first = vaelgTraef(hits, args, maaGaette: true)
+    // --dry: HVILKET element ville blive trykket? Samme soegning og samme valg
+    // som trykket selv - sende-porten doemmer det, foer noget sker (29/9).
+    if args.flag("dry") {
+        var d = first.dict
+        if let w = AX.vinduesTitel(first.el) { d["window"] = w }
+        Out.ok(["would_press": d])
+    }
     var pressPid: pid_t = -1
     AXUIElementGetPid(first.el, &pressPid)
+    // R28: i baggrunden uden laan (--menu-vagt fra serveren) trykkes en menurolle ikke - menuen
+    // ville staa paa menneskets skaerm og fange mus og tastatur (maalt 10/10).
+    if args.flag("menu-vagt"), let rolle = first.dict["role"] as? String, Skaerm.menuRoller.contains(rolle) {
+        Out.fail("pressing this \(rolle) opens a menu on the person's screen - nothing was pressed. Ask for the screen with computer_request_screen first.", code: "menu-in-background")
+    }
     var trykket = false
     let pressMaal = Skaerm.handletOgGivetTilbage(tilPid: pressPid) { trykket = AX.press(first) }
     guard trykket else {
@@ -693,6 +906,15 @@ case "type":
         Out.fail("--text or --stdin is missing", code: "bad-args")
     }
     let skrivPid = modtager(args)
+    if args.flag("menu-vagt"), let pid = skrivPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {
+        Out.fail("the focus in that app is on a \(rolle) - a key there opens its menu on the person's screen, so nothing was typed. Ask for the screen with computer_request_screen first.", code: "menu-focus")
+    }
+    // ⛔ R23: macOS' adgangskodesignal er taendt - et kodeordsfelt har fokus et sted.
+    //    Intet skrives, hverken gennem tilgaengeligheds-laget eller som tastetryk.
+    if skriveDom(fokusSikkert: false, sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt {
+        Out.fail("a password field has the keyboard focus (macOS secure input is on) - we do not type into password fields. Ask the person to type it themselves with computer_ask_user.",
+                 code: "secure-field", extra: ["typed": 0, "did": [] as [String]])
+    }
     // Med et navngivet program: skriv først direkte i det felt, programmet selv har
     // fokus på, og læs det tilbage. Tager feltet ikke imod den vej, sendes tastetryk
     // som før - og så siger svaret, at ankomsten ikke er efterprøvet (P2, 27/9).
@@ -704,8 +926,33 @@ case "type":
                    .merging(axMaal) { a, _ in a })
         }
     }
+    // ⛔ Kodeordsfelter faar heller ikke tastetryk (29/9, panelet): foer kunne kun
+    //    `set_value` sige nej, og `type` tastede videre. Tjekket foer hvert tegn,
+    //    saa et fokus der flytter ind i et kodeordsfelt undervejs stopper dér.
     var sendtTegn = 0
-    let skrivMaal = Skaerm.maalt(tilPid: skrivPid) { sendtTegn = Input.type(typeText, cps: args.int("cps") ?? 240, tilPid: skrivPid) }
+    var ramteSikkert = false
+    var ukendtFokus = false
+    let skrivMaal = Skaerm.maalt(tilPid: skrivPid) {
+        sendtTegn = Input.type(typeText, cps: args.int("cps") ?? 240, tilPid: skrivPid) {
+            switch skriveDom(fokusSikkert: AX.fokusErSikkert(pid: skrivPid), sikkerIndtastning: macosSikkerIndtastning()) {
+            case .maa: return false
+            case .ukendtFokus: ukendtFokus = true; return true
+            case .sikkertFelt: ramteSikkert = true; return true
+            }
+        }
+    }
+    if ukendtFokus {
+        Out.fail("could not see where the keyboard focus is, so a password field cannot be ruled out; stopped after \(sendtTegn) of \(typeText.count) characters. Use computer_find + computer_set_value, or ask the person.",
+                 code: "focus-unknown",
+                 extra: ["typed": sendtTegn, "did": sendtTegn > 0 ? ["typed \(sendtTegn) characters"] : []].merging(skrivMaal) { a, _ in a })
+    }
+    if ramteSikkert {
+        Out.fail(sendtTegn == 0
+                 ? "the keyboard focus is in a secure field - we do not type into password fields. Ask the person to type it themselves with computer_ask_user."
+                 : "the focus moved into a secure field while typing; stopped after \(sendtTegn) of \(typeText.count) characters, and nothing was typed there",
+                 code: "secure-field",
+                 extra: ["typed": sendtTegn, "did": sendtTegn > 0 ? ["typed \(sendtTegn) characters"] : []].merging(skrivMaal) { a, _ in a })
+    }
     // Stoppede den undervejs, fordi modtageren skiftede, er det en FEJL - og det
     // halve der naaede frem, staar i `did`, saa loggen kan skrive det ned.
     if sendtTegn < typeText.count {
@@ -720,6 +967,20 @@ case "key":
     Perms.require(accessibility: true)
     guard let combo = args.str("combo") else { Out.fail("--combo is missing", code: "bad-args") }
     let tastPid = modtager(args)
+    if args.flag("menu-vagt"), let pid = tastPid, let rolle = AX.fokusRolle(pid: pid), Skaerm.menuRoller.contains(rolle) {
+        Out.fail("the focus in that app is on a \(rolle) - '\(combo)' there can open its menu on the person's screen, so it was not sent. Ask for the screen with computer_request_screen first.", code: "menu-focus")
+    }
+    // ⛔ R24 (Astra + Opus): «a», «shift+a» og cmd+v skriver tekst - samme regel som `type`.
+    if kombiSkriverTekst(combo) {
+        let fokusPid = tastPid ?? NSWorkspace.shared.frontmostApplication?.processIdentifier
+        switch skriveDom(fokusSikkert: AX.fokusErSikkert(pid: fokusPid), sikkerIndtastning: macosSikkerIndtastning()) {
+        case .maa: break
+        case .ukendtFokus:
+            Out.fail("could not see where the keyboard focus is, so a password field cannot be ruled out - '\(combo)' writes text, so it was not sent. Use computer_find + computer_set_value, or ask the person.", code: "focus-unknown")
+        case .sikkertFelt:
+            Out.fail("the keyboard focus is in a password field (or macOS secure input is on) - '\(combo)' writes text, so it was not sent. Ask the person to type it themselves with computer_ask_user.", code: "secure-field")
+        }
+    }
     var tastOk = false
     let tastMaal = Skaerm.maalt(tilPid: tastPid) { tastOk = Input.hotkey(combo, tilPid: tastPid) }
     guard tastOk else { Out.fail("unknown key combination '\(combo)'", code: "bad-key") }
@@ -729,7 +990,7 @@ default:
     Out.fail(
         "unknown command '\(args.command)'",
         code: "bad-command",
-        extra: ["commands": ["version", "permissions", "apps", "windows", "activate", "secure-rects", "wait-for", "focused", "set-value",
+        extra: ["commands": ["version", "permissions", "apps", "windows", "activate", "secure-rects", "wait-for", "focused", "samtale", "idle", "set-value",
                             "screenshot", "redact", "inspect", "find", "at", "press", "click", "move", "scroll", "type", "key"]]
     )
 }
diff --git a/helper/Sources/cmcp-status/Lyd.swift b/helper/Sources/cmcp-status/Lyd.swift
new file mode 100644
index 00000000..a6f73457
--- /dev/null
+++ b/helper/Sources/cmcp-status/Lyd.swift
@@ -0,0 +1,32 @@
+import Foundation
+
+// LYD VED ET NYT SPOERGSMAAL (panel R8-R9, punkt S, 7/10).
+//
+// ⛔ 22 af 23 spoergsmaal 30/9-4/10 udloeb ubesvaret. Det orange ikon ses kun af den
+//    der kigger paa menulinjen; en lyd naar ogsaa den hvis blik er i chatten.
+//    Reglen: ÉN lyd pr. nyt spoergsmaal - aldrig ved udloeb (`nyAnmodning` kaldes
+//    ogsaa dér, for at slukke det orange), aldrig for et spoergsmaal der allerede er
+//    besvaret, og aldrig to gange for samme nonce (en server kan levere det samme
+//    spoergsmaal igen paa en ny forbindelse). Afgjort her, ét sted, saa test/ikon-lyd.mjs
+//    kompilerer og maaler den samme regel ikonet bruger - uden at starte ikonet.
+//
+// Standarden var Gustavs valg (Opus: til, hans egen WISHLIST-tekst · Astra: tilvalg).
+// Gustav 8/10 («kør det hele» på anbefalingen «lyd til»): TIL. Kan slås fra i menuen.
+let LYD_STANDARD = true
+
+func lydSlaaetTil() -> Bool {
+    (UserDefaults.standard.object(forKey: "lyd") as? Bool) ?? LYD_STANDARD
+}
+
+struct LydHukommelse {
+    private(set) var hoerte = Set<String>()
+
+    /// Skal dette spoergsmaal give lyd nu? Husker nonce'en, saa svaret kun er ja én gang.
+    mutating func skalLyde(nonce: String, lukket: Bool, besvaret: Bool, til: Bool) -> Bool {
+        guard til, !lukket, !besvaret, !hoerte.contains(nonce) else { return false }
+        // Et ikon lever i dagevis; hukommelsen maa ikke vokse uden graense.
+        if hoerte.count >= 1000 { hoerte.removeAll() }
+        hoerte.insert(nonce)
+        return true
+    }
+}
diff --git a/helper/Sources/cmcp-status/Tekst.swift b/helper/Sources/cmcp-status/Tekst.swift
new file mode 100644
index 00000000..dff73a44
--- /dev/null
+++ b/helper/Sources/cmcp-status/Tekst.swift
@@ -0,0 +1,221 @@
+import AppKit
+import Foundation
+import CoreGraphics
+
+// Tekst til menuen og Touch ID-arket. Egen fil, saa test/ombryd.mjs kan
+// kompilere den direkte og maale at intet tegn falder ud (29/9).
+
+/// Fjerner alt usynligt: styretegn, retningstegn, nul-bredde, linjeskift.
+func renTekst(_ s: String) -> String {
+    String(String.UnicodeScalarView(s.unicodeScalars.map { u -> Unicode.Scalar in
+        switch u.properties.generalCategory {
+        case .control, .format, .lineSeparator, .paragraphSeparator: return " "
+        default: return u
+        }
+    }))
+}
+
+/// Kort udgave til hovedmenuen og banneret: resten staar i undermenuen.
+func kort(_ s: String, _ n: Int) -> String {
+    let r = renTekst(s)
+    return r.count > n ? "\(r.prefix(n))…" : r
+}
+
+// MARK: - Boksen i hjoernet (9/10)
+//
+// ⛔ Gustav 9/10: «hver gang den bliver aktiv, er det en flydende komponent i hoejre
+//    hjoerne af skaermen, saa man kan se hvad der sker, naar de koerer» - «saa kan
+//    jeg ogsaa goere hvad du beder mig om». MAALT samme dag under F1: et spoergsmaal
+//    udloeb, fordi boksen stod i hjoernet af den ANDEN skaerm (x=4794 paa en
+//    ultrabred skaerm, musen var der) og kun sagde «Needs you: click the orange menu
+//    bar icon». Nu: den skaerm mennesket arbejder paa, hvad hver agent goer, og
+//    spoergsmaalet HELT med menuens egne knapper.
+//
+// ⛔ Regelaendring (Gustav 9/10, «1 ja»; R9 kraevede hans udtrykkelige ja): boksen
+//    maa have «Allow». Det er den samme handling som menuens - Touch ID hver gang,
+//    samme engangsnummer - og den vises KUN naar hele teksten staar i boksen: et ja
+//    skal daekke alt hvad mennesket saa. Laengere spoergsmaal godkendes i menuen.
+
+/// Saa mange tegn kan boksen vise HELT, ombrudt.
+let BOKS_MAX_TEGN = 280
+let BOKS_BREDDE_TEGN = 48
+/// Knapperne goer intet saa laenge efter et NYT spoergsmaal (R17, Opus 4b): et klik
+/// paa vej mod det gamle maa ikke ramme det nye, der gled ind under markoeren.
+let BOKS_PAUSE: TimeInterval = 1.0
+
+struct BoksIndhold: Equatable {
+    let titel: String
+    let orange: Bool
+    let linjer: [String]
+    let knapper: [String]
+}
+
+/// Menuens knap -> boksens. Kun etiketten er kortere; handlingen er den samme.
+func boksKnap(_ menuKnap: String) -> String {
+    menuKnap == "Allow… (confirm with Touch ID)" ? "Allow (Touch ID)" : menuKnap
+}
+
+/// Knappen der stopper et skaerm-laan. Den staar i menuen OG i boksen, saa laenge
+/// laanet varer (R22, Astra + Opus: et stille laan kunne kun ses i menuen, og to
+/// spoergsmaal i menulinjen udloeb 9/10, fordi mennesket ikke fandt ikonet).
+let TAG_TILBAGE = "Take the screen back now"
+
+/// Linjen om laanet - menuens oeverste linje og boksens, samme tekst.
+func laanTekst(klient: String?, minutterTilbage: Int) -> String {
+    "\(laanNavn(klient)) is using your screen — \(minutterTilbage) min left"
+}
+
+/// Agentens navn i laanets linjer: usynlige tegn vasket og ingen kantmellemrum.
+func laanNavn(_ klient: String?) -> String {
+    let n = renTekst(klient ?? "").trimmingCharacters(in: .whitespaces)
+    return n.isEmpty ? "An agent" : n
+}
+
+/// `arbejder`: dem der arbejder nu (navn, hvilket program, hvad de goer).
+/// `venter`: det foerste aabne spoergsmaal og menuens knapper for det.
+/// `laan`: et aktivt skaerm-laan - saa staar det oeverst, og stopknappen er foerst.
+func boksIndhold(arbejder: [(navn: String, maal: String?, nu: String)], tilsluttede: Int,
+                 venter: (antal: Int, klient: String?, tekst: String, fakta: [String], menuKnapper: [String])?,
+                 laan: (klient: String?, minutter: Int)? = nil) -> BoksIndhold {
+    let b = boksIndholdUdenLaan(arbejder: arbejder, tilsluttede: tilsluttede, venter: venter)
+    guard let l = laan else { return b }
+    if venter != nil {
+        return BoksIndhold(titel: b.titel, orange: true,
+                           linjer: [laanTekst(klient: l.klient, minutterTilbage: l.minutter)] + b.linjer,
+                           knapper: [TAG_TILBAGE] + b.knapper)
+    }
+    return BoksIndhold(titel: "\(laanNavn(l.klient)) is using your screen", orange: true,
+                       linjer: ["\(l.minutter) min left - each step waits while you use the mouse or keyboard"] + b.linjer,
+                       knapper: [TAG_TILBAGE] + b.knapper)
+}
+
+private func boksIndholdUdenLaan(arbejder: [(navn: String, maal: String?, nu: String)], tilsluttede: Int,
+                                 venter: (antal: Int, klient: String?, tekst: String, fakta: [String], menuKnapper: [String])?) -> BoksIndhold {
+    if let v = venter {
+        let hel = renTekst(v.tekst)
+        let helVist = hel.count <= BOKS_MAX_TEGN
+        var linjer = helVist ? ombryd(hel, bredde: BOKS_BREDDE_TEGN)
+            : ombryd(String(hel.prefix(120)) + "…", bredde: BOKS_BREDDE_TEGN)
+              + ["(\(hel.count) characters - the whole text is in the menu bar icon)"]
+        // ⛔ R17 (Opus 4c): HVOR det lander og HVOR LAENGE et ja gaelder - menuens fakta,
+        //    skrevet af serveren. Altid hele, saa Allow aldrig staar uden dem.
+        for f in v.fakta { linjer += ombryd(f, bredde: BOKS_BREDDE_TEGN) }
+        if v.antal > 1 { linjer.append("+\(v.antal - 1) more in the menu bar icon") }
+        let knapper = v.menuKnapper
+            .filter { helVist || $0 != "Allow… (confirm with Touch ID)" }
+            .map(boksKnap)
+        return BoksIndhold(titel: "\(renTekst(v.klient ?? "An agent")) needs you", orange: true, linjer: linjer, knapper: knapper)
+    }
+    var linjer: [String] = []
+    for a in arbejder.prefix(3) {
+        linjer.append("● " + renTekst(a.navn) + (a.maal.map { " · " + renTekst($0) } ?? ""))
+        linjer.append("   " + kort(a.nu, 60))
+    }
+    if arbejder.count > 3 { linjer.append("+\(arbejder.count - 3) more working") }
+    let hale = tilsluttede > arbejder.count ? " · \(tilsluttede) connected" : ""
+    let titel = (arbejder.count == 1 ? "Computer MCP - 1 agent working" : "Computer MCP - \(arbejder.count) agents working") + hale
+    return BoksIndhold(titel: titel, orange: false, linjer: linjer, knapper: arbejder.isEmpty ? [] : ["Follow"])
+}
+
+/// Skal boksen staa fremme? (R24, ren funktion - tik() afgoer det kun her.)
+/// Et aktivt skaerm-laan holder den fremme uanset alt: stopknappen skal kunne ses.
+/// Ellers kun naar der er sessioner, boksen ikke er slaaet fra, og nogen arbejder
+/// (eller har gjort det inden for et halvt minut, eller et spoergsmaal venter).
+func boksSynlig(laan: Bool, sessioner: Int, slaaetFra: Bool, arbejder: Bool) -> Bool {
+    laan || (sessioner > 0 && !slaaetFra && arbejder)
+}
+
+/// Boksens panel-opsaetning (R24): laget saettes EFTER isFloatingPanel, som ellers
+/// nulstiller det til det almindelige svaevelag (3) - maalt R22 og R24 (Opus).
+func boksPanelOpsaetning(_ p: NSPanel) {
+    p.isFloatingPanel = true
+    p.level = .statusBar
+    p.becomesKeyOnlyIfNeeded = true
+    p.hidesOnDeactivate = false
+    p.isMovableByWindowBackground = true
+    p.isReleasedWhenClosed = false
+    p.collectionBehavior = [.canJoinAllSpaces, .stationary, .ignoresCycle, .fullScreenAuxiliary]
+    p.backgroundColor = .clear
+    p.isOpaque = false
+    p.hasShadow = true
+    // Boksen er til mennesket, ikke til agenternes skaermbilleder.
+    p.sharingType = .none
+}
+
+/// Maa boksens knapper goere noget nu? Ikke foer BOKS_PAUSE efter et nyt spoergsmaal,
+/// og ikke mens Touch ID-arket er oppe (et andet tryk ville starte endnu et, R17 Opus 4f).
+func boksKnapperAktive(sidenNytSpoergsmaal: TimeInterval, touchIdIGang: Bool) -> Bool {
+    sidenNytSpoergsmaal >= BOKS_PAUSE && !touchIdIGang
+}
+
+enum TouchIdUdfald: Equatable { case laan, svar(Bool) }
+
+/// Hvad Touch ID-svaret betyder - for menuen og boksen ens. Et nej er altid et nej;
+/// kun et ja til et skaerm-laan bliver et laan (R18, Astra: et «ok = true» i callbacken
+/// overlevede proeven).
+func touchIdUdfald(ok: Bool, erLaan: Bool) -> TouchIdUdfald { ok && erLaan ? .laan : .svar(ok) }
+
+enum BoksHandling: Equatable { case foelg, tagTilbage, tillad(String), afvis(String), gjort(String), hentFrem(String), intet }
+
+/// Hvad et tryk paa en boksknap betyder. Knappen baerer sit eget spoergsmaal (`knapNonce`);
+/// er det ikke det boksen viser nu, eller er knapperne ikke aktive, sker intet.
+func boksHandling(knap: String, knapNonce: String?, visteNonce: String?, aktive: Bool) -> BoksHandling {
+    if knap == "Follow" { return .foelg }
+    // At STOPPE venter aldrig: ingen pause, intet Touch ID, intet engangsnummer.
+    if knap == TAG_TILBAGE { return .tagTilbage }
+    guard aktive, let n = knapNonce, n == visteNonce else { return .intet }
+    switch knap {
+    case "Allow (Touch ID)": return .tillad(n)
+    case "Done — I did it": return .gjort(n)
+    case "Take me there": return .hentFrem(n)
+    case "Deny", "I won't do this": return .afvis(n)
+    default: return .intet
+    }
+}
+
+/// Hvilken skaerm arbejder mennesket paa? Den med det forreste vindue; ellers den
+/// musen er paa; ellers den foerste. Rammerne er i Cocoa-koordinater.
+func boksSkaerm(forrestVindue: CGRect?, mus: CGPoint, skaerme: [CGRect]) -> Int {
+    if let v = forrestVindue, let i = skaerme.firstIndex(where: { $0.contains(CGPoint(x: v.midX, y: v.midY)) }) { return i }
+    if let i = skaerme.firstIndex(where: { $0.contains(mus) }) { return i }
+    return 0
+}
+
+/// Boksens oeverste venstre hjoerne: oeverst til hoejre i skaermens synlige del.
+func boksHjoerne(synlig: CGRect, bredde: CGFloat) -> CGPoint {
+    CGPoint(x: synlig.maxX - bredde - 16, y: synlig.maxY - 12)
+}
+
+/// Det forreste programs forreste ALMINDELIGE vindue (lag 0) i CGWindowList' liste,
+/// som er ordnet forrest foerst. Rammen er i CGWindowList' koordinater.
+func forrestVinduesRamme(_ liste: [[String: Any]], pid: Int32) -> CGRect? {
+    for w in liste where (w[kCGWindowOwnerPID as String] as? NSNumber)?.int32Value == pid
+                      && (w[kCGWindowLayer as String] as? NSNumber)?.intValue == 0 {
+        if let d = w[kCGWindowBounds as String] as? NSDictionary, let r = CGRect(dictionaryRepresentation: d) { return r }
+    }
+    return nil
+}
+
+/// CGWindowList maaler fra hovedskaermens OEVERSTE venstre hjoerne med y nedad;
+/// NSScreen fra det NEDERSTE med y opad.
+func cocoaRamme(_ cg: CGRect, hovedHoejde: CGFloat) -> CGRect {
+    CGRect(x: cg.minX, y: hovedHoejde - cg.maxY, width: cg.width, height: cg.height)
+}
+
+/// Ombryder teksten i linjer, saa HELE den kan laeses i menuen (29/9).
+/// Et ord laengere end linjen deles; intet tegn falder ud.
+func ombryd(_ s: String, bredde: Int = 64) -> [String] {
+    var linjer: [String] = []
+    var nu = ""
+    for stk in renTekst(s).split(separator: " ", omittingEmptySubsequences: true) {
+        var ord = String(stk)
+        while ord.count > bredde {
+            if !nu.isEmpty { linjer.append(nu); nu = "" }
+            linjer.append(String(ord.prefix(bredde)))
+            ord = String(ord.dropFirst(bredde))
+        }
+        if nu.isEmpty { nu = ord } else if nu.count + 1 + ord.count <= bredde { nu += " " + ord } else { linjer.append(nu); nu = ord }
+    }
+    if !nu.isEmpty { linjer.append(nu) }
+    return linjer
+}
diff --git a/helper/Sources/cmcp-status/main.swift b/helper/Sources/cmcp-status/main.swift
index 51e19df6..c0a8cf6c 100644
--- a/helper/Sources/cmcp-status/main.swift
+++ b/helper/Sources/cmcp-status/main.swift
@@ -21,7 +21,10 @@ import UserNotifications
 
 // MARK: - Model
 
-struct Post: Codable { let ts: String; let text: String; let outcome: String }
+// D3 (2/10): `target` er den raa app-streng (bundle-id ELLER synligt navn) serveren
+// allerede havde i hånden - se status.js' statusHandling for hvorfor den ikke
+// slås op dér. Mangler nøglen i ældre/andre poster, afkodes den som nil (Codable).
+struct Post: Codable { let ts: String; let text: String; let outcome: String; let target: String? }
 struct Session: Codable {
     let session: String
     let pid: Int32
@@ -90,6 +93,15 @@ func overskrift(_ n: Int) -> String {
 }
 
 /// Live-vinduets tekst for én agent: nyeste oeverst.
+/// D3 (2/10): det seneste KENDTE maal - den igangvaerende handling hvis der er
+/// én, ellers den sidst FAERDIGE. `now` er kun sat de faa millisekunder en
+/// handling rent faktisk koerer; uden faldbagget til `recent` ville "Show me
+/// where" naesten aldrig vaere aktiv, fordi de fleste handlinger er for hurtige
+/// til at nogen naar at se dem som "now".
+func senesteMaal(_ s: Session) -> String? {
+    s.now?.target ?? s.recent.last?.target
+}
+
 func liveTekst(_ s: Session) -> String {
     var linjer = ["\(navn(s))   (pid \(s.pid), started \(siden(s.started)))", ""]
     if let n = s.now { linjer.append("NOW  ▶︎ \(n.text)"); linjer.append("") }
@@ -119,6 +131,13 @@ struct Spoergsmaal: Codable {
     let scope: String
     let target: String
     let expires: Double
+    /// nil = et samtykke (Touch ID). «goer-selv» = mennesket goer det selv, fx
+    /// taster et kodeord; «Done» er et SIGNAL, aldrig et samtykke (29/9).
+    let kind: String?
+    /// Programmet «Take me there» henter frem - valgt af serveren, ikke modellen.
+    let targetBundle: String?
+    /// «skaerm»: hvor mange minutter skaermen laanes ud (hoejst 15).
+    let minutes: Int?
 }
 
 final class Anmodning {
@@ -133,15 +152,31 @@ final class Anmodning {
     ///    kunne give fd-nummeret til en NY forbindelse, som den gamle traad
     ///    saa stjal bytes fra. Nu ejer KUN laesetraaden `close`; her lukkes
     ///    kun skrivesiden.
-    func svar(ok: Bool) {
+    func svar(ok: Bool, verified: String? = nil) {
         guard !besvaret, !lukket else { return }
         besvaret = true
-        let linje = "{\"nonce\":\"\(s.nonce)\",\"ok\":\(ok),\"verified\":\"\(ok ? "owner" : "none")\"}\n"
+        let v = verified ?? (ok ? "owner" : "none")
+        let linje = "{\"nonce\":\"\(s.nonce)\",\"ok\":\(ok),\"verified\":\"\(v)\"}\n"
         linje.withCString { p in _ = write(fd, p, strlen(p)) }
         shutdown(fd, SHUT_RDWR)
     }
+
+    /// ⛔ SKAERM-LAANET (29/9): ja'et skrives, men forbindelsen holdes AABEN.
+    ///    Laanet ER forbindelsen - naar den lukkes, er skaermen menneskets igen.
+    func svarLaan(til: Double) {
+        guard !besvaret, !lukket else { return }
+        besvaret = true
+        let linje = "{\"nonce\":\"\(s.nonce)\",\"ok\":true,\"verified\":\"owner\",\"until\":\(Int(til))}\n"
+        linje.withCString { p in _ = write(fd, p, strlen(p)) }
+    }
+    func afslutLaan() { shutdown(fd, SHUT_RDWR) }
 }
 
+/// Hoejst ét laan ad gangen: skaermen er én.
+var aktivtLaan: Anmodning?
+var laanTil: Date?
+var laanOpdateret: () -> Void = {}
+
 var anmodninger: [Anmodning] = []
 var nyAnmodning: (Anmodning) -> Void = { _ in }
 
@@ -180,7 +215,8 @@ func startSocket() {
 func laesSpoergsmaal(_ k: Int32) {
     var data = Data()
     var buf = [UInt8](repeating: 0, count: 4096)
-    while !data.contains(0x0A) && data.count < 16_384 {
+    // 64 KB: serveren sender teksten HEL (op til 4.000 tegn, 29/9); 16 KB kunne klippe den.
+    while !data.contains(0x0A) && data.count < 65_536 {
         let n = read(k, &buf, buf.count)
         if n <= 0 { close(k); return }
         data.append(buf, count: n)
@@ -189,6 +225,10 @@ func laesSpoergsmaal(_ k: Int32) {
           let s = try? JSONDecoder().decode(Spoergsmaal.self, from: data[..<i]) else { close(k); return }
     let a = Anmodning(s, fd: k)
     DispatchQueue.main.async {
+        // Skaerm-koe (2/10): en skaerm-anmodning mens et andet laan er aktivt
+        // afvises IKKE laengere her - den staar i koen som enhver anden
+        // anmodning. Serveren venter allerede taalmodigt (skaermVentetid());
+        // menuen gatér «Allow» ud mens et andet laan loeber (menuNeedsUpdate).
         anmodninger.append(a)
         nyAnmodning(a)
         // ⛔ Astra, runde 2 (22/9): ikonet afkodede `expires` og brugte den
@@ -214,18 +254,11 @@ func laesSpoergsmaal(_ k: Int32) {
         a.lukket = true
         a.ctx?.invalidate()
         anmodninger.removeAll { $0 === a }
+        // Forbindelsen er lukket: var det et laan, er skaermen menneskets igen.
+        if aktivtLaan === a { aktivtLaan = nil; laanTil = nil; laanOpdateret() }
     }
 }
 
-/// Fjerner alt usynligt: styretegn, retningstegn, nul-bredde, linjeskift.
-func renTekst(_ s: String) -> String {
-    String(String.UnicodeScalarView(s.unicodeScalars.map { u -> Unicode.Scalar in
-        switch u.properties.generalCategory {
-        case .control, .format, .lineSeparator, .paragraphSeparator: return " "
-        default: return u
-        }
-    }))
-}
 
 /// Touch ID-arket er beslutnings-oejeblikket, saa det bygges af de FASTE felter
 /// i fast raekkefoelge - hvem, hvor, og hvor meget et ja giver. Modellens egen
@@ -233,12 +266,22 @@ func renTekst(_ s: String) -> String {
 /// viste kun modellens tekst, og den kunne skubbe maalet ud eller lyve om det.
 func touchIdTekst(_ a: Anmodning) -> String {
     let hvem = renTekst(a.s.client ?? "An agent")
+    if a.s.kind == "screen" {
+        let grund = kort(a.s.text, 90)
+        return "lend \(hvem) your screen for \(max(1, min(15, a.s.minutes ?? 10))) minutes. It pauses when you use the keyboard or mouse; take it back any time from the box or the menu bar. \u{201C}\(grund)\u{201D}"
+    }
     let hvor = renTekst(a.s.target)
     let omfang = renTekst(a.s.scope)
-    let hvad = renTekst(a.s.text).prefix(80)
+    let hel = renTekst(a.s.text)
+    // ⛔ 29/9: arket klippede ved 80 tegn uden at sige det. Nu siger det det -
+    //    og hele teksten staar i menuen lige over «Allow».
+    let hvad = hel.count > 80 ? "\(hel.prefix(80))… (\(hel.count) characters, all shown in the menu)" : hel
     return "let \(hvem) act in \(hvor). \(omfang) Action: \u{201C}\(hvad)\u{201D}"
 }
 
+
+
+
 /// Ét ja = ét menneske der bekraefter at det er ham. Uden det: nej.
 func bekraeftMenneske(_ a: Anmodning, _ faerdig: @escaping (Bool) -> Void) {
     let ctx = LAContext()
@@ -278,26 +321,43 @@ final class Boks: NSPanel {
     override var canBecomeKey: Bool { false }
     override var canBecomeMain: Bool { false }
 
-    let linje1 = NSTextField(labelWithString: "")
-    let linje2 = NSTextField(labelWithString: "")
-    let knap = NSButton(title: "Follow", target: nil, action: nil)
+    let bredde: CGFloat
+    let titel = NSTextField(labelWithString: "")
+    let tekst = NSTextField(wrappingLabelWithString: "")
+    let knapper = NSStackView()
+    /// Stopknappen i sin egen raekke (R24: med gør-selv-knapperne var raekken 465 af 336 px).
+    let stopRaekke = NSStackView()
     let vaelger = NSPopUpButton(frame: .zero, pullsDown: false)
+    let stak = NSStackView()
     var valgt: String? = nil
+    /// Det spoergsmaal knapperne svarer paa - sat i SAMME opdatering som teksten,
+    /// saa et klik altid gaelder det mennesket saa.
+    private(set) var nonce: String? = nil
+    private var vist: BoksIndhold? = nil
+    /// Hvornaar det viste spoergsmaal kom, og om Touch ID-arket er oppe (R17, Opus).
+    private var nytSpoergsmaal = Date.distantPast
+    var touchIdIGang = false { didSet { opdaterKnapper() } }
+    func knapperAktive() -> Bool {
+        boksKnapperAktive(sidenNytSpoergsmaal: Date().timeIntervalSince(nytSpoergsmaal), touchIdIGang: touchIdIGang)
+    }
+    func opdaterKnapper() {
+        let aktiv = nonce == nil || knapperAktive()
+        // Stopknappen slaas aldrig fra: at tage skaermen tilbage maa aldrig vente (R22).
+        for case let b as NSButton in knapper.arrangedSubviews { b.isEnabled = aktiv || b.title == TAG_TILBAGE }
+    }
+    /// Den skaerm boksen sidst blev sat paa.
+    private(set) var placeretPaa: CGRect? = nil
+    /// (knappens titel, det spoergsmaal KNAPPEN blev lavet til) - R17 (Astra).
+    var knapTrykket: (String, String?) -> Void = { _, _ in }
 
-    init(bredde: CGFloat = 340) {
+    init(bredde: CGFloat = 360) {
+        self.bredde = bredde
         super.init(contentRect: NSRect(x: 0, y: 0, width: bredde, height: 78),
                    styleMask: [.borderless, .nonactivatingPanel],
                    backing: .buffered, defer: false)
-        level = .statusBar
-        isFloatingPanel = true
-        becomesKeyOnlyIfNeeded = true
-        hidesOnDeactivate = false
-        isMovableByWindowBackground = true
-        isReleasedWhenClosed = false
-        collectionBehavior = [.canJoinAllSpaces, .stationary, .ignoresCycle, .fullScreenAuxiliary]
-        backgroundColor = .clear
-        isOpaque = false
-        hasShadow = true
+        // ⛔ R22/R24 (Opus, MAALT): laget skal saettes EFTER isFloatingPanel - samlet i
+        //    boksPanelOpsaetning (Tekst.swift), som prøven maaler paa et rigtigt panel.
+        boksPanelOpsaetning(self)
 
         let baggrund = NSVisualEffectView(frame: contentView!.bounds)
         baggrund.autoresizingMask = [.width, .height]
@@ -308,54 +368,204 @@ final class Boks: NSPanel {
         baggrund.layer?.masksToBounds = true
         contentView?.addSubview(baggrund)
 
-        linje1.font = .systemFont(ofSize: 12, weight: .semibold)
-        linje1.frame = NSRect(x: 12, y: 50, width: bredde - 24, height: 16)
-        linje2.font = .monospacedSystemFont(ofSize: 11, weight: .regular)
-        linje2.textColor = .secondaryLabelColor
-        linje2.frame = NSRect(x: 12, y: 30, width: bredde - 24, height: 16)
-        linje2.lineBreakMode = .byTruncatingTail
-        knap.frame = NSRect(x: bredde - 92, y: 6, width: 80, height: 20)
-        knap.bezelStyle = .rounded
-        knap.controlSize = .small
-        knap.font = .systemFont(ofSize: 11)
-        vaelger.frame = NSRect(x: 8, y: 5, width: bredde - 108, height: 22)
+        titel.font = .systemFont(ofSize: 12, weight: .semibold)
+        tekst.font = .monospacedSystemFont(ofSize: 11, weight: .regular)
+        tekst.textColor = .labelColor
+        tekst.preferredMaxLayoutWidth = bredde - 24
+        tekst.maximumNumberOfLines = 0
         vaelger.controlSize = .small
         vaelger.font = .systemFont(ofSize: 11)
-        for v in [linje1, linje2, knap, vaelger] { baggrund.addSubview(v) }
+        knapper.orientation = .horizontal
+        knapper.spacing = 8
+        stak.orientation = .vertical
+        stak.alignment = .leading
+        stak.spacing = 6
+        stak.edgeInsets = NSEdgeInsets(top: 10, left: 12, bottom: 10, right: 12)
+        stak.translatesAutoresizingMaskIntoConstraints = false
+        stopRaekke.orientation = .horizontal
+        for v in [titel, tekst, stopRaekke, knapper] as [NSView] { stak.addArrangedSubview(v) }
+        baggrund.addSubview(stak)
+        NSLayoutConstraint.activate([
+            stak.leadingAnchor.constraint(equalTo: baggrund.leadingAnchor),
+            stak.trailingAnchor.constraint(equalTo: baggrund.trailingAnchor),
+            stak.topAnchor.constraint(equalTo: baggrund.topAnchor),
+            tekst.widthAnchor.constraint(equalToConstant: bredde - 24),
+        ])
     }
 
-    /// Oeverst til hoejre paa den skaerm musen er paa, under menulinjen.
+    /// Oeverst til hoejre paa den skaerm mennesket arbejder paa: den med det
+    /// forreste vindue, ellers den med musen (boksSkaerm i Tekst.swift).
     func placer() {
-        let skaerm = NSScreen.screens.first { NSMouseInRect(NSEvent.mouseLocation, $0.frame, false) } ?? NSScreen.main
-        guard let f = skaerm?.visibleFrame else { return }
-        setFrameTopLeftPoint(NSPoint(x: f.maxX - frame.width - 16, y: f.maxY - 12))
+        let skaerme = NSScreen.screens
+        guard !skaerme.isEmpty else { return }
+        let i = boksSkaerm(forrestVindue: forrestVindue(), mus: NSEvent.mouseLocation, skaerme: skaerme.map { $0.frame })
+        let f = skaerme[i].visibleFrame
+        setFrameTopLeftPoint(boksHjoerne(synlig: f, bredde: frame.width))
+        placeretPaa = skaerme[i].frame
+    }
+
+    /// Er mennesket gaaet over paa en anden skaerm, siden boksen blev sat?
+    func skalFlyttes() -> Bool {
+        let skaerme = NSScreen.screens
+        guard !skaerme.isEmpty else { return false }
+        let i = boksSkaerm(forrestVindue: forrestVindue(), mus: NSEvent.mouseLocation, skaerme: skaerme.map { $0.frame })
+        return placeretPaa != skaerme[i].frame
     }
 
-    func opdater(_ sessioner: [Session], tilsluttede: Int = 0) {
-        let flere = sessioner.count > 1
-        vaelger.isHidden = !flere
-        if flere {
+    func vis(_ ind: BoksIndhold, nonce ny: String?, sessioner: [Session]) {
+        if ind == vist && ny == nonce { return }
+        if ny != nonce && ny != nil {
+            nytSpoergsmaal = Date()
+            DispatchQueue.main.asyncAfter(deadline: .now() + BOKS_PAUSE + 0.05) { [weak self] in self?.opdaterKnapper() }
+        }
+        vist = ind; nonce = ny
+        titel.stringValue = ind.titel
+        titel.textColor = ind.orange ? .systemOrange : .labelColor
+        tekst.stringValue = ind.linjer.joined(separator: "\n")
+        for r in [knapper, stopRaekke] { for v in r.arrangedSubviews { r.removeArrangedSubview(v); v.removeFromSuperview() } }
+        // Flere agenter: vaelgeren bestemmer hvem «Follow» foelger.
+        // Vaelgeren og Follow: kun naar intet spoergsmaal vises (R24, Astra: et laan er
+        // ogsaa orange, og saa blev `valgt` aldrig opdateret).
+        if ny == nil && sessioner.count > 1 {
             let navne = sessioner.map { navn($0) }
-            if vaelger.itemTitles != navne {
-                vaelger.removeAllItems(); vaelger.addItems(withTitles: navne)
-            }
+            if vaelger.itemTitles != navne { vaelger.removeAllItems(); vaelger.addItems(withTitles: navne) }
             if let v = valgt, let i = sessioner.firstIndex(where: { $0.session == v }) { vaelger.selectItem(at: i) }
-            valgt = sessioner[max(0, vaelger.indexOfSelectedItem)].session
-        } else {
-            valgt = sessioner.first?.session
+            knapper.addArrangedSubview(vaelger)
         }
-        let s = sessioner.first { $0.session == valgt } ?? sessioner.first
-        guard let s else { return }
-        // ⛔ Gustav 23/9: «der skal kun vaere det antal agenter, som der er live».
-        //    Maalt samme dag: 15 servere koerte, 0 lavede noget. Et tal der
-        //    blander «tilsluttet» og «arbejder» siger ingenting. Boksen viser
-        //    dem der ARBEJDER, og naevner resten som tilsluttede.
-        let hale = tilsluttede > sessioner.count ? " · \(tilsluttede) connected" : ""
-        linje1.stringValue = (flere ? "Computer MCP - \(sessioner.count) working" : "Computer MCP - \(navn(s))") + hale
-        if let n = s.now { linje2.stringValue = "> " + n.text }
-        else if let sidste = s.recent.last { linje2.stringValue = "idle - last: \(sidste.text) (\(siden(sidste.ts)))" }
-        else { linje2.stringValue = "idle" }
+        if ny == nil {
+            let i = vaelger.indexOfSelectedItem
+            valgt = (sessioner.count > 1 && sessioner.indices.contains(i)) ? sessioner[i].session : sessioner.first?.session
+        }
+        for k in ind.knapper {
+            let b = NSButton(title: k, target: self, action: #selector(tryk(_:)))
+            // Knappen baerer selv sit spoergsmaal - ikke boksens nuvaerende (R17, Astra).
+            b.identifier = NSUserInterfaceItemIdentifier("boks-" + (ny ?? ""))
+            b.bezelStyle = .rounded
+            b.controlSize = .small
+            b.font = .systemFont(ofSize: 11)
+            if k == TAG_TILBAGE { stopRaekke.addArrangedSubview(b) } else { knapper.addArrangedSubview(b) }
+        }
+        knapper.isHidden = knapper.arrangedSubviews.isEmpty
+        stopRaekke.isHidden = stopRaekke.arrangedSubviews.isEmpty
+        opdaterKnapper()
+        stak.layoutSubtreeIfNeeded()
+        let hoejde = ceil(stak.fittingSize.height)
+        let top = frame.maxY
+        setContentSize(NSSize(width: bredde, height: hoejde))
+        setFrameTopLeftPoint(NSPoint(x: frame.minX, y: top))
+    }
+
+    @objc func tryk(_ b: NSButton) {
+        let id = b.identifier?.rawValue ?? ""
+        knapTrykket(b.title, id.count > 5 ? String(id.dropFirst(5)) : nil)
+    }
+}
+
+/// ⛔ 9/10 (F1, MAALT): serveren starter ikonet med `open -g -j`, og «-j» starter det
+///    SKJULT. Et skjult program viser ingen vinduer: boksen kom aldrig frem - hverken i
+///    0.2.1 eller 0.2.2 - naar serveren startede ikonet (visible = false, CGWindowList uden
+///    onscreen, paa intet skrivebord). Kun naar ikonet blev startet direkte (liveproeven
+///    13:07) kunne den ses. Nu goeres programmet synligt UDEN at blive aktivt: fokus bliver hos
+///    mennesket, og boksen kommer frem.
+func visBoksen(_ b: NSPanel) {
+    if NSApp.isHidden { NSApp.unhideWithoutActivation() }
+    b.orderFrontRegardless()
+}
+
+/// Det forreste programs forreste almindelige vindue, i Cocoa-koordinater - eller nil.
+func forrestVindue() -> CGRect? {
+    guard let pid = NSWorkspace.shared.frontmostApplication?.processIdentifier,
+          let hovedHoejde = NSScreen.screens.first?.frame.height,
+          let liste = CGWindowListCopyWindowInfo([.optionOnScreenOnly, .excludeDesktopElements], kCGNullWindowID) as? [[String: Any]],
+          let r = forrestVinduesRamme(liste, pid: pid)
+    else { return nil }
+    return cocoaRamme(r, hovedHoejde: hovedHoejde)
+}
+
+// MARK: - Spoergsmaalets undermenu som ren tekst (29/9)
+//
+// Menuen OG --dump-question bygger af denne funktion, saa proeverne maaler den
+// tekst mennesket faktisk ser - uden at ikonet nogensinde startes i en proeve.
+
+struct SpoergsmaalMenu {
+    let titel: String       // linjen i hovedmenuen
+    let overskrift: String  // «The whole action (N characters):»
+    let tekst: [String]     // hele handlingen, ombrudt
+    let fakta: [String]     // omfang + hvor det lander (skrevet af serveren)
+    let knapper: [String]   // i raekkefoelge
+    let ventetekst: String? // sat naar et ANDET laan allerede er aktivt (skaerm-koe)
+}
+
+/// `aktivtAndetLaan`: et skaerm-laan en ANDEN anmodning allerede holder, hvis noget.
+/// Sat -> «Allow» udelades (kun Deny), og ventetekst siger hvem og hvor laenge.
+/// Skaerm-koeen 2/10: queue-trinnet gatér her, ikke ved at afvise forbindelsen -
+/// samme funktion bygger baade den rigtige menu og --dump-question's svar.
+func spoergsmaalMenu(_ s: Spoergsmaal, aktivtAndetLaan: (klient: String?, til: Date)? = nil) -> SpoergsmaalMenu {
+    let hel = renTekst(s.text)
+    var knapper: [String]
+    if s.kind == "goer-selv" {
+        knapper = (s.targetBundle != nil ? ["Take me there"] : []) + ["Done — I did it", "I won't do this"]
+    } else {
+        knapper = ["Allow… (confirm with Touch ID)", "Deny"]
+    }
+    var ventetekst: String? = nil
+    if s.kind == "screen", let l = aktivtAndetLaan {
+        knapper.removeAll { $0 == "Allow… (confirm with Touch ID)" }
+        let rest = max(0, Int(ceil(l.til.timeIntervalSinceNow / 60)))
+        ventetekst = "Waiting — the screen is lent to \(l.klient ?? "an agent") for \(rest) more minutes"
     }
+    return SpoergsmaalMenu(
+        titel: "\(s.client ?? "agent") · \(s.session): \(kort(s.text, 60))",
+        overskrift: "The whole action (\(hel.count) characters):",
+        tekst: ombryd(hel),
+        fakta: [s.scope, "Lands in: \(s.target)"],
+        knapper: knapper,
+        ventetekst: ventetekst)
+}
+
+/// Oeverst i menuen mens skaermen er laant ud.
+func laanLinjer(klient: String?, til: Date) -> [String] {
+    let rest = max(0, Int(ceil(til.timeIntervalSinceNow / 60)))
+    return [laanTekst(klient: klient, minutterTilbage: rest), TAG_TILBAGE]
+}
+
+if CommandLine.arguments.contains("--dump-question") {
+    // Et spoergsmaal paa stdin (samme JSON som socket'en) -> undermenuens tekst.
+    let raa = FileHandle.standardInput.readDataToEndOfFile()
+    guard let s = try? JSONDecoder().decode(Spoergsmaal.self, from: raa) else {
+        FileHandle.standardError.write("could not read a question on stdin\n".data(using: .utf8)!); exit(2)
+    }
+    // Proeve-kun felt, IKKE en del af den rigtige socket-protokol (Spoergsmaal roeres ikke):
+    // {"simulateActiveLoan": {"client": "andenagent", "minutesLeft": 4}} laeser skaerm-koeens
+    // gatering uden en levende GUI - test/ikon-menu.mjs maaler den samme spoergsmaalMenu()
+    // der ogsaa bygger den rigtige menu.
+    var aktivtAndetLaan: (klient: String?, til: Date)? = nil
+    if let raw = try? JSONSerialization.jsonObject(with: raa) as? [String: Any],
+       let sim = raw["simulateActiveLoan"] as? [String: Any] {
+        let min = (sim["minutesLeft"] as? Double) ?? (sim["minutesLeft"] as? Int).map(Double.init) ?? 1
+        aktivtAndetLaan = (klient: sim["client"] as? String, til: Date().addingTimeInterval(min * 60))
+    }
+    let m = spoergsmaalMenu(s, aktivtAndetLaan: aktivtAndetLaan)
+    var ud: [String: Any] = ["title": m.titel, "header": m.overskrift, "text": m.tekst, "facts": m.fakta,
+                             "buttons": m.knapper, "touchId": touchIdTekst(Anmodning(s, fd: -1)),
+                             "box": { () -> [String: Any] in
+                                 // Boksen i hjoernet for samme spoergsmaal - samme funktion som den rigtige boks.
+                                 let b = boksIndhold(arbejder: [], tilsluttede: 0,
+                                                     venter: (antal: 1, klient: s.client, tekst: s.text, fakta: m.fakta, menuKnapper: m.knapper))
+                                 return ["title": b.titel, "orange": b.orange, "lines": b.linjer, "buttons": b.knapper]
+                             }()]
+    if let v = m.ventetekst { ud["waitingForLoan"] = v }
+    if s.kind == "screen" {
+        let minutter = max(1, min(15, s.minutes ?? 10))
+        ud["whileLent"] = laanLinjer(klient: s.client, til: Date().addingTimeInterval(Double(minutter) * 60))
+        // Boksen mens laanet varer (R22) - samme funktion som den rigtige boks.
+        let b = boksIndhold(arbejder: [], tilsluttede: 1, venter: nil, laan: (klient: s.client, minutter: minutter))
+        ud["boxWhileLent"] = ["title": b.titel, "orange": b.orange, "lines": b.linjer, "buttons": b.knapper]
+    }
+    let data = try! JSONSerialization.data(withJSONObject: ud, options: [.prettyPrinted, .sortedKeys])
+    FileHandle.standardOutput.write(data)
+    FileHandle.standardOutput.write("\n".data(using: .utf8)!)
+    exit(0)
 }
 
 // MARK: - --dump (uden UI)
@@ -366,7 +576,13 @@ if CommandLine.arguments.contains("--dump") {
         "title": overskrift(s.count),
         "items": s.map(menuLinje),
         "live": s.map(liveTekst),
-        "sessions": s.map { $0.session }
+        "sessions": s.map { $0.session },
+        // D3: maalet for den igangvaerende handling, saa en proeve kan maale at
+        // det naar helt frem til --dump uden en levende GUI. nil -> NSNull (JSON null).
+        "nowTarget": s.map { sess -> Any in
+            if let t = senesteMaal(sess) { return t }
+            return NSNull()
+        }
     ]
     let data = try! JSONSerialization.data(withJSONObject: ud, options: [.prettyPrinted, .sortedKeys])
     FileHandle.standardOutput.write(data)
@@ -391,8 +607,10 @@ startSocket()
 final class LivePanel: NSObject, NSWindowDelegate {
     let panel: NSPanel
     let tekst: NSTextView
+    let visKnap = NSButton(title: "Show me where", target: nil, action: nil)
     var session: String
     var lukket: () -> Void = {}
+    var maal: String? = nil   // raa app-streng fra den igangvaerende handling (D3)
 
     init(session: String) {
         self.session = session
@@ -406,7 +624,11 @@ final class LivePanel: NSObject, NSWindowDelegate {
         panel.hidesOnDeactivate = false
         panel.becomesKeyOnlyIfNeeded = true
         panel.isReleasedWhenClosed = false
-        let scroll = NSScrollView(frame: panel.contentView!.bounds)
+        // D3 (2/10): en knaprad nederst, resten scroller. MENNESKETS klik henter
+        // programmet frem - samme princip som "Take me there" paa et samtykke
+        // (hentFrem): agenten selv roerer aldrig forgrunden.
+        let hoejde = panel.contentView!.bounds.height
+        let scroll = NSScrollView(frame: NSRect(x: 0, y: 32, width: panel.contentView!.bounds.width, height: hoejde - 32))
         scroll.autoresizingMask = [.width, .height]
         scroll.hasVerticalScroller = true
         tekst = NSTextView(frame: scroll.bounds)
@@ -416,7 +638,15 @@ final class LivePanel: NSObject, NSWindowDelegate {
         tekst.autoresizingMask = [.width]
         scroll.documentView = tekst
         panel.contentView?.addSubview(scroll)
+        visKnap.frame = NSRect(x: 12, y: 6, width: 160, height: 22)
+        visKnap.bezelStyle = .rounded
+        visKnap.controlSize = .small
+        visKnap.autoresizingMask = [.maxXMargin]
+        visKnap.isEnabled = false
+        panel.contentView?.addSubview(visKnap)
         super.init()
+        visKnap.target = self
+        visKnap.action = #selector(visMigHvor)
         panel.delegate = self
     }
 
@@ -427,17 +657,33 @@ final class LivePanel: NSObject, NSWindowDelegate {
                 panel.setFrameTopLeftPoint(NSPoint(x: skaerm.maxX - 540, y: skaerm.maxY - 10))
             }
         }
-        panel.orderFrontRegardless()   // frem, men IKKE aktiveret
+        visBoksen(panel)   // frem, men IKKE aktiveret - og synligt, selv om ikonet startede skjult (R26)
     }
 
     func opdater() {
         guard let s = laesSessioner().first(where: { $0.session == session }) else {
             panel.title = "Computer MCP — agent \(session) has stopped"
+            maal = nil; visKnap.isEnabled = false
             return
         }
         panel.title = "Computer MCP — \(navn(s))"
         let ny = liveTekst(s)
         if tekst.string != ny { tekst.string = ny }
+        maal = senesteMaal(s)
+        visKnap.isEnabled = maal != nil
+    }
+
+    /// MENNESKETS klik - aldrig agentens. Proever bundle-id foerst (det
+    /// aegte format), falder tilbage til et synligt navn (det modellen kan
+    /// have skrevet i stedet). Finder den intet, sker der ingenting - ingen
+    /// fejlboks, ingen gaetten paa et andet program.
+    @objc func visMigHvor() {
+        guard let m = maal, !m.isEmpty else { return }
+        if let app = NSRunningApplication.runningApplications(withBundleIdentifier: m).first {
+            app.activate(options: [])
+            return
+        }
+        NSWorkspace.shared.runningApplications.first { $0.localizedName == m }?.activate(options: [])
     }
 
     func windowWillClose(_ n: Notification) { lukket() }
@@ -450,10 +696,9 @@ final class Ikon: NSObject, NSMenuDelegate {
     var tomSiden: Date? = nil
     lazy var boks: Boks = {
         let b = Boks()
-        b.knap.target = self
-        b.knap.action = #selector(foelgFraBoks)
         b.vaelger.target = self
         b.vaelger.action = #selector(skiftIBoks)
+        b.knapTrykket = { [weak self] knap, nonce in self?.boksKnapTrykket(knap, nonce: nonce) }
         return b
     }()
     var boksSlaaetFra: Bool {
@@ -472,6 +717,11 @@ final class Ikon: NSObject, NSMenuDelegate {
         item.menu = menu
         let t = Timer(timeInterval: 1.0, repeats: true) { [weak self] _ in self?.tik() }
         RunLoop.main.add(t, forMode: .common)
+        // En skaerm sat i eller taget ud: boksen hen paa en skaerm der findes (9/10).
+        NotificationCenter.default.addObserver(forName: NSApplication.didChangeScreenParametersNotification,
+                                               object: nil, queue: .main) { [weak self] _ in
+            if self?.boks.isVisible == true { self?.boks.placer() }
+        }
         tik()
     }
 
@@ -496,12 +746,29 @@ final class Ikon: NSObject, NSMenuDelegate {
         let arbejder = s.contains { $0.now != nil }
             || s.contains { (iso.date(from: $0.updated).map { -$0.timeIntervalSinceNow } ?? 999) < 30 }
             || !anmodninger.filter { !$0.besvaret }.isEmpty
-        if s.isEmpty || boksSlaaetFra || !arbejder {
+        // ⛔ R22: et aktivt skaerm-laan holder boksen fremme - ogsaa naar agenten er stille,
+        //    og ogsaa naar boksen er slaaet fra i menuen - for stopknappen skal kunne ses.
+        let laan: (klient: String?, minutter: Int)? = {
+            guard let l = aktivtLaan, !l.lukket, let til = laanTil else { return nil }
+            return (klient: l.s.client, minutter: max(0, Int(ceil(til.timeIntervalSinceNow / 60))))
+        }()
+        if !boksSynlig(laan: laan != nil, sessioner: s.count, slaaetFra: boksSlaaetFra, arbejder: arbejder) {
             if boks.isVisible { boks.orderOut(nil) }
         } else {
-            boks.opdater(s.filter { $0.now != nil || (iso.date(from: $0.updated).map { -$0.timeIntervalSinceNow } ?? 999) < 30 },
-                         tilsluttede: s.count)
-            if !boks.isVisible { boks.placer(); boks.orderFrontRegardless() }
+            let aktive = s.filter { $0.now != nil || (iso.date(from: $0.updated).map { -$0.timeIntervalSinceNow } ?? 999) < 30 }
+            let foerste = aabne.first
+            let venter = foerste.map { a in
+                let mm = spoergsmaalMenu(a.s, aktivtAndetLaan: andetLaan(a))
+                return (antal: aabne.count, klient: a.s.client, tekst: a.s.text, fakta: mm.fakta, menuKnapper: mm.knapper)
+            }
+            let arbejdende = aktive.map { sess in
+                (navn: navn(sess), maal: senesteMaal(sess),
+                 nu: sess.now.map { $0.text } ?? sess.recent.last.map { "idle - last: \($0.text) (\(siden($0.ts)))" } ?? "idle")
+            }
+            boks.vis(boksIndhold(arbejder: arbejdende, tilsluttede: s.count, venter: venter, laan: laan),
+                     nonce: foerste?.s.nonce, sessioner: aktive)
+            if !boks.isVisible || NSApp.isHidden { boks.placer(); visBoksen(boks) }
+            else if boks.skalFlyttes() { boks.placer() }
         }
         if s.isEmpty && anmodninger.isEmpty {
             if tomSiden == nil { tomSiden = Date() }
@@ -511,6 +778,17 @@ final class Ikon: NSObject, NSMenuDelegate {
 
     func menuNeedsUpdate(_ m: NSMenu) {
         m.removeAllItems()
+        // Skaermen er laant ud: det OEVERSTE mennesket ser, og én knap til at tage den tilbage.
+        if let l = aktivtLaan, !l.lukket, let til = laanTil {
+            let ll = laanLinjer(klient: l.s.client, til: til)
+            let h = NSMenuItem(title: ll[0], action: nil, keyEquivalent: "")
+            h.isEnabled = false
+            m.addItem(h)
+            let tilbage = NSMenuItem(title: ll[1], action: #selector(tagTilbage), keyEquivalent: "")
+            tilbage.target = self
+            m.addItem(tilbage)
+            m.addItem(.separator())
+        }
         let s = laesSessioner()
         let aabne = anmodninger.filter { !$0.besvaret }
         if !aabne.isEmpty {
@@ -520,19 +798,52 @@ final class Ikon: NSObject, NSMenuDelegate {
             for a in aabne {
                 // Selve «Allow» ligger i en undermenu: ét klik i hovedmenuen maa
                 // aldrig vaere et ja, og menuen kan bygges om mens den er aaben.
-                let i = NSMenuItem(title: "\(a.s.client ?? "agent") · \(a.s.session): \(a.s.text)", action: nil, keyEquivalent: "")
+                // Teksten kommer fra spoergsmaalMenu - den samme som --dump-question.
+                // Skaerm-koe (2/10): et ANDET aktivt laan gatér «Allow» ud af denne
+                // anmodnings egen undermenu - hun staar i koen, serveren venter allerede.
+                let mm = spoergsmaalMenu(a.s, aktivtAndetLaan: andetLaan(a))
+                let i = NSMenuItem(title: mm.titel, action: nil, keyEquivalent: "")
                 let sub = NSMenu()
-                for linje in [a.s.scope, "Lands in: \(a.s.target)"] {
-                    let l = NSMenuItem(title: linje, action: nil, keyEquivalent: "")
+                // ⛔ HELE teksten, ombrudt, over knapperne (29/9, panelet): et ja
+                //    skal daekke alt mennesket saa. Sort, ikke graa.
+                let top = NSMenuItem(title: "", action: nil, keyEquivalent: "")
+                top.attributedTitle = NSAttributedString(string: mm.overskrift,
+                    attributes: [.font: NSFont.menuFont(ofSize: 0), .foregroundColor: NSColor.secondaryLabelColor])
+                top.isEnabled = false
+                sub.addItem(top)
+                for linje in mm.tekst {
+                    let l = NSMenuItem(title: "", action: nil, keyEquivalent: "")
+                    l.attributedTitle = NSAttributedString(string: linje,
+                        attributes: [.font: NSFont.menuFont(ofSize: 0), .foregroundColor: NSColor.labelColor])
                     l.isEnabled = false
                     sub.addItem(l)
                 }
                 sub.addItem(.separator())
-                let ja = NSMenuItem(title: "Allow… (confirm with Touch ID)", action: #selector(tillad(_:)), keyEquivalent: "")
-                ja.target = self; ja.representedObject = a.s.nonce
-                let nej = NSMenuItem(title: "Deny", action: #selector(afvis(_:)), keyEquivalent: "")
-                nej.target = self; nej.representedObject = a.s.nonce
-                sub.addItem(ja); sub.addItem(nej)
+                for linje in mm.fakta {
+                    let l = NSMenuItem(title: linje, action: nil, keyEquivalent: "")
+                    l.isEnabled = false
+                    sub.addItem(l)
+                }
+                if let v = mm.ventetekst {
+                    let l = NSMenuItem(title: v, action: nil, keyEquivalent: "")
+                    l.isEnabled = false
+                    sub.addItem(l)
+                    sub.addItem(.separator())
+                }
+                // «Done» paa et goer-selv-spoergsmaal kraever intet Touch ID: det
+                // giver ingen lov til noget, det siger kun at det er gjort (29/9).
+                for knap in mm.knapper {
+                    let handling: Selector
+                    switch knap {
+                    case "Take me there": handling = #selector(hentFrem(_:))
+                    case "Done — I did it": handling = #selector(gjort(_:))
+                    case "Allow… (confirm with Touch ID)": handling = #selector(tillad(_:))
+                    default: handling = #selector(afvis(_:))
+                    }
+                    let k = NSMenuItem(title: knap, action: handling, keyEquivalent: "")
+                    k.target = self; k.representedObject = a.s.nonce
+                    sub.addItem(k)
+                }
                 i.submenu = sub
                 m.addItem(i)
             }
@@ -563,6 +874,10 @@ final class Ikon: NSObject, NSMenuDelegate {
         banner.target = self
         banner.state = UserDefaults.standard.bool(forKey: "banner") ? .on : .off
         m.addItem(banner)
+        let lyd = NSMenuItem(title: "Play a sound when an agent needs you", action: #selector(skiftLyd), keyEquivalent: "")
+        lyd.target = self
+        lyd.state = lydSlaaetTil() ? .on : .off
+        m.addItem(lyd)
         let skjul = NSMenuItem(title: "Hide this icon until the next agent starts", action: #selector(skjulIkon), keyEquivalent: "")
         skjul.target = self
         m.addItem(skjul)
@@ -587,7 +902,7 @@ final class Ikon: NSObject, NSMenuDelegate {
     @objc func skiftIBoks() {
         let s = laesSessioner()
         let i = boks.vaelger.indexOfSelectedItem
-        if i >= 0 && i < s.count { boks.valgt = s[i].session; boks.opdater(s) }
+        if i >= 0 && i < s.count { boks.valgt = s[i].session }
     }
 
     @objc func skiftBoks() {
@@ -595,11 +910,6 @@ final class Ikon: NSObject, NSMenuDelegate {
         tik()
     }
 
-    func find(_ sender: NSMenuItem) -> Anmodning? {
-        guard let n = sender.representedObject as? String else { return nil }
-        return anmodninger.first { $0.s.nonce == n && !$0.besvaret }
-    }
-
     /// ⛔ MAALING, ikke vagt (22/9): sikkerhedskonsulenten foreslog at afvise
     ///    klik der ikke kommer fra hardware. Hvad et AEGTE klik i en statusmenu
     ///    baerer af kilde-felter, er umaalt - en vagt bygget paa et gaet kunne
@@ -622,20 +932,103 @@ final class Ikon: NSObject, NSMenuDelegate {
         else { FileManager.default.createFile(atPath: sti, contents: linje.data(using: .utf8), attributes: [.posixPermissions: 0o600]) }
     }
 
-    @objc func tillad(_ sender: NSMenuItem) {
-        noterKilde("allow")
-        guard let a = find(sender) else { return }
+    /// Et ANDET skaerm-laan der allerede er aktivt (skaerm-koe 2/10) - menuen og boksen.
+    func andetLaan(_ a: Anmodning) -> (klient: String?, til: Date)? {
+        (a.s.kind == "screen" && aktivtLaan != nil && aktivtLaan !== a) ? (aktivtLaan!.s.client, laanTil!) : nil
+    }
+
+    func aaben(_ nonce: String?) -> Anmodning? {
+        guard let n = nonce else { return nil }
+        return anmodninger.first { $0.s.nonce == n && !$0.besvaret }
+    }
+
+    /// Boksens knapper (9/10): samme handlinger som menuens - Allow gaar gennem
+    /// tilladNonce og dermed Touch ID. Knappen svarer paa det spoergsmaal boksen viste.
+    func boksKnapTrykket(_ knap: String, nonce n: String?) {
+        // Knappens eget spoergsmaal skal vaere det boksen viser NU, og knapperne skal vaere
+        // aktive (R17: Astra + Opus) - ellers sker intet. Afgoeres i boksHandling (Tekst.swift).
+        switch boksHandling(knap: knap, knapNonce: n, visteNonce: boks.nonce, aktive: boks.knapperAktive()) {
+        case .foelg: foelgFraBoks()
+        case .tagTilbage: tagTilbageNu(kilde: "take-back-box")
+        case .tillad(let n): tilladNonce(n, kilde: "allow-box")
+        case .gjort(let n): gjortNonce(n, kilde: "done-box")
+        case .hentFrem(let n): hentFremNonce(n)
+        case .afvis(let n): afvisNonce(n, kilde: "deny-box")
+        case .intet: break
+        }
+    }
+
+    @objc func tillad(_ sender: NSMenuItem) { tilladNonce(sender.representedObject as? String, kilde: "allow") }
+
+    func tilladNonce(_ nonce: String?, kilde: String) {
+        noterKilde(kilde)
+        guard let a = aaben(nonce) else { return }
+        // Et ja i boksen kraever, at boksen viste HELE teksten (som menuen goer).
+        if kilde == "allow-box" && renTekst(a.s.text).count > BOKS_MAX_TEGN { return }
+        boks.touchIdIGang = true
         bekraeftMenneske(a) { [weak self] ok in
+            self?.boks.touchIdIGang = false
             // Et mislykket Touch ID er et nej, ikke et «proev igen» agenten kan vente paa.
-            a.svar(ok: ok)
+            switch touchIdUdfald(ok: ok, erLaan: a.s.kind == "screen") {
+            case .laan:
+                if let l = aktivtLaan, !l.lukket, l !== a {
+                    // Skaerm-koe (2/10): kaploeb - et andet laan blev givet mellem at
+                    // menuen blev aabnet og klikket (gatingen i menuNeedsUpdate missede
+                    // det). Intet svar sendes: anmodningen bliver staaende i koen og
+                    // faar en frisk «Allow» naar det andet laan slutter, i stedet for at
+                    // tvinge agenten til at spoerge forfra.
+                    self?.tik()
+                    return
+                }
+                let minutter = max(1, min(15, a.s.minutes ?? 10))
+                let til = Date().addingTimeInterval(Double(minutter) * 60)
+                a.svarLaan(til: til.timeIntervalSince1970 * 1000)
+                aktivtLaan = a; laanTil = til
+                DispatchQueue.main.asyncAfter(deadline: .now() + Double(minutter) * 60) {
+                    if aktivtLaan === a { a.afslutLaan() }
+                }
+            case .svar(let v):
+                a.svar(ok: v)
+            }
             anmodninger.removeAll { $0 === a }
             self?.tik()
         }
     }
 
-    @objc func afvis(_ sender: NSMenuItem) {
-        noterKilde("deny")
-        guard let a = find(sender) else { return }
+    /// Tag skaermen tilbage: intet Touch ID - at STOPPE kraever aldrig bevis.
+    @objc func tagTilbage() { tagTilbageNu(kilde: "take-back") }
+
+    /// Menuens og boksens stopknap: samme vej, hvert sit kildemaerke (R22).
+    func tagTilbageNu(kilde: String) {
+        noterKilde(kilde)
+        aktivtLaan?.afslutLaan()
+        tik()
+    }
+
+    /// «Done» paa et goer-selv-spoergsmaal: et signal, ikke et samtykke.
+    @objc func gjort(_ sender: NSMenuItem) { gjortNonce(sender.representedObject as? String, kilde: "done") }
+
+    func gjortNonce(_ nonce: String?, kilde: String) {
+        noterKilde(kilde)
+        guard let a = aaben(nonce), a.s.kind == "goer-selv" else { return }
+        a.svar(ok: true, verified: "done")
+        anmodninger.removeAll { $0 === a }
+        tik()
+    }
+
+    /// «Take me there»: MENNESKETS klik henter programmet frem - ikke agentens.
+    @objc func hentFrem(_ sender: NSMenuItem) { hentFremNonce(sender.representedObject as? String) }
+
+    func hentFremNonce(_ nonce: String?) {
+        guard let a = aaben(nonce), let b = a.s.targetBundle else { return }
+        NSRunningApplication.runningApplications(withBundleIdentifier: b).first?.activate(options: [])
+    }
+
+    @objc func afvis(_ sender: NSMenuItem) { afvisNonce(sender.representedObject as? String, kilde: "deny") }
+
+    func afvisNonce(_ nonce: String?, kilde: String) {
+        noterKilde(kilde)
+        guard let a = aaben(nonce) else { return }
         a.svar(ok: false)
         anmodninger.removeAll { $0 === a }
         tik()
@@ -650,12 +1043,21 @@ final class Ikon: NSObject, NSMenuDelegate {
         if nu { UNUserNotificationCenter.current().requestAuthorization(options: [.alert]) { _, _ in } }
     }
 
+    /// Lyden (punkt S): reglen bor i Lyd.swift, saa proeven maaler den samme.
+    @objc func skiftLyd() { UserDefaults.standard.set(!lydSlaaetTil(), forKey: "lyd") }
+    var lydHukommelse = LydHukommelse()
+
     func vis(_ a: Anmodning) {
         tik()
+        if lydHukommelse.skalLyde(nonce: a.s.nonce, lukket: a.lukket, besvaret: a.besvaret, til: lydSlaaetTil()) {
+            NSSound(named: "Glass")?.play()
+        }
+        // Et nyt spoergsmaal flytter boksen hen hvor mennesket er (30/9, live-proeven).
+        if boks.isVisible { boks.placer(); visBoksen(boks) }
         guard UserDefaults.standard.bool(forKey: "banner") else { return }
         let c = UNMutableNotificationContent()
         c.title = "An agent needs you"
-        c.body = "\(a.s.client ?? "agent"): \(a.s.text)"
+        c.body = "\(a.s.client ?? "agent"): \(kort(a.s.text, 120))"
         UNUserNotificationCenter.current().add(UNNotificationRequest(identifier: a.s.nonce, content: c, trigger: nil))
     }
 
@@ -676,4 +1078,5 @@ app.setActivationPolicy(.accessory)
 DispatchQueue.main.async { if NSApp.isActive { NSApp.deactivate() } }
 let ikon = Ikon()
 nyAnmodning = { a in ikon.vis(a) }
+laanOpdateret = { ikon.tik() }
 app.run()
diff --git a/mcp-server/README.md b/mcp-server/README.md
index 71f86584..cb93c0d3 100644
--- a/mcp-server/README.md
+++ b/mcp-server/README.md
@@ -5,18 +5,22 @@
 A macOS computer-use MCP server built for the part everyone skips: what happens
 in the hours you are not watching.
 
+- **It runs in every MCP client, not one app.** Claude Code, Cursor, VS Code,
+  Codex, or your own agent - one `npx` line, the same server
+  everywhere. It is not tied to a single vendor's desktop app or plan.
 - **It does not take over your Mac.** It presses buttons and fills fields in
   windows that stay behind the one you are in, and it leaves your pointer where
-  you put it. Nothing gets minimised, nothing comes to the front, nothing steals
-  what you are typing.
+  you put it. When an app pulls itself to the front as it opens, the front is
+  handed straight back and the reply says so - nothing is left stealing what you
+  are typing.
 - **It does not pretend.** When something is refused or fails, it says so and
   says why. The most common complaint about agents driving a computer is that
   they carry on as if it worked.
 - **Several can run at once.** No session lock, no one-at-a-time limit. Writes
   to the shared log take a short file lock, so two servers cannot break the
   chain between them.
-- **It will not go near your passwords.** Keychain, 1Password and seven others
-  ask every time, in every mode, and password fields are blacked out while the
+- **It will not go near your passwords.** Keychain, 1Password and five others
+  are refused in the default mode (with `CMCP_BACKGROUND=0` they ask every time), and password fields are blacked out while the
   screenshot is still in memory. A screen recording leaves password managers
   out, but does not black out password fields.
 - **You can read back what it did.** Every call lands in an append-only log,
@@ -33,8 +37,9 @@ draws its own controls on a canvas and publishes nothing - some games, some
 plotting tools - is still a blind spot. **A browser is a separate case:** the
 switch above is an Electron API, and Chrome does not implement it. Measured on
 Chrome: 29 buttons before and after, unchanged. You get the browser's own
-window - tabs, toolbar, address bar - and not the page inside it. For a page,
-drive the browser with a browser tool.
+window - tabs, toolbar, address bar - and the page inside it only when Chrome
+has built that tree itself (measured both ways, see the limits below). For a
+page, drive the browser with a browser tool.
 
 No account, no API key, no model inside it. MIT.
 
@@ -72,16 +77,21 @@ written. There is no moment where an unredacted picture of your desktop exists
 as a file. Native fields expose the role `AXSecureTextField`; fields in a web
 page expose role `AXTextField` with the *subrole* `AXSecureTextField`. Checking
 only the role would catch native fields and let every browser password box
-through - so both are checked.
+through - so both are checked. In a web page the field is only found when the
+browser shows its page to the accessibility layer, and Chrome has done so on one and the same
+Mac at one time and not at another (see the limits below). Where it does not, the field is not
+painted over; what it shows is the browser's own dots, unless the page itself
+shows the password in plain text.
 
 **2. The dangerous places ask first.** By default the agent works without
 interrupting you - that is what lets it run while you do something else - and
 every write is logged. What never goes through on its own: password managers and
-Keychain ask *every single time*, in every mode, and that one is not
-configurable. Terminals and editors, where a keystroke can be a command, ask once
+Keychain are refused in the default mode, because the menu bar cannot show what
+would be typed (with `CMCP_BACKGROUND=0` they ask *every single time*, in every
+mode), and that one is not configurable. Terminals and editors, where a keystroke can be a command, ask once
 per app per session. Quitting an app, closing a window, switching Space,
-destructive-looking menu items and any action whose target app cannot be
-identified ask every time. The gate judges the app an action lands in: an
+and destructive-looking menu items ask every time; an action whose target app
+cannot be identified is refused in the default mode. The gate judges the app an action lands in: an
 app opened some other way - Spotlight, a shortcut - is guarded by what the
 agent then tries to do in it. Want a dialog before the first write too? Set
 `CMCP_MODE=ask`. If nobody answers, the answer is no.
@@ -104,6 +114,29 @@ breach. The salt is random per run and never written down, because an unsalted
 hash of a short password can be guessed offline by whoever holds the log. The
 honest cost: two actions can be compared within one run, not across runs.
 
+Here is what that looks like, unedited. In the lines below an agent typed a
+sentence into TextEdit behind the window the person was using, asked in the menu
+bar to move a file to the Trash and got no answer, then was refused when it tried
+to type into 1Password. They come from an isolated test run - its own state
+folder and stand-ins for the helper and the menu bar icon, so no real screen was
+touched and nobody's own log was read - which `node scripts/log-uddrag.mjs`
+repeats. In the `presence` fields, the idle times come from the stand-in helper
+and the icon version from the stand-in icon; the session count comes from the
+isolated state, and the surface is derived. Only the box setting was read from
+the Mac that made the run. A test checks that every line is byte for byte in
+[the full log of that run](https://github.com/Agent360dk/computerMCP/blob/main/test/fixtures/audit-readme.jsonl)
+and that its chain holds.
+
+<!-- log-uddrag:start -->
+```jsonl
+{"ts":"2026-10-07T18:36:13.804Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","args":{"app":{"length":8,"sha256_12":"c4d885ae85a3","salted":true},"text":{"length":37,"sha256_12":"53b5b18d7c2b","salted":true}},"target":"com.apple.TextEdit","mode":"allow","asker":"custom","decision":"allowed","asked":false,"reason":"CMCP_MODE=allow","l":1,"kaede":"608dbed0e6cb4d58"}
+{"ts":"2026-10-07T18:36:13.805Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","target":"com.apple.TextEdit","phase":"executing","l":1,"kaede":"08e8f505e7d0e7c8"}
+{"ts":"2026-10-07T18:36:13.852Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","outcome":"ok","effect":"sent","l":1,"kaede":"b8ecd7f441ea98b3"}
+{"ts":"2026-10-07T18:36:15.004Z","session":"0636dcef","call":"558fe0f1","tool":"computer_menu","tier":"write","args":{"app":{"length":6,"sha256_12":"6e84f8d2198c","salted":true},"path":"File > Move to Trash"},"target":"com.apple.finder","mode":"allow","asker":"menubar","presence":{"idle_at_ask":600,"idle_at_end":600,"server":"0.2.2","icon":"0.2.2","box":"on","sessions":1,"surface_derived":"box+menu"},"decision":"denied","asked":true,"reason":"background mode: nobody answered in the menu bar in time","l":1,"kaede":"98e213d5869cb131"}
+{"ts":"2026-10-07T18:36:15.087Z","session":"0636dcef","call":"56b7802a","tool":"computer_type","tier":"write","args":{"app":{"length":9,"sha256_12":"0c1139ec706b","salted":true},"text":{"length":7,"sha256_12":"a2acf331b097","salted":true}},"target":"com.1password.1password","mode":"allow","asker":"custom","decision":"denied","asked":false,"reason":"background mode: this would need a dialog, and a dialog takes the screen (a password app can never be approved from the menu bar)","l":1,"kaede":"81e0ef24b729b4e6"}
+```
+<!-- log-uddrag:end -->
+
 Each gate has a test, and each test has been mutation-checked: break the code on
 purpose and the test goes red. See [Testing](#testing).
 
@@ -114,8 +147,15 @@ purpose and the test goes red. See [Testing](#testing).
 claude mcp add computer -- npx -y @agent360/computer-mcp
 ```
 
+Or, inside Claude Code, as a plugin pinned to the version on npm:
+
+```text
+/plugin marketplace add Agent360dk/computerMCP
+/plugin install computer-mcp@agent360
+```
+
 ```jsonc
-// Cursor, VS Code, Codex CLI, Windsurf - mcp.json
+// Cursor, VS Code, Codex CLI - mcp.json
 {
   "mcpServers": {
     "computer": { "command": "npx", "args": ["-y", "@agent360/computer-mcp"] }
@@ -149,20 +189,21 @@ the client and check `computer_permissions` again.
 | `CMCP_MODE` | Behaviour |
 |---|---|
 | `readonly` | Write tools are not even listed. The agent can look and cannot touch. |
-| `ask` | The first write opens a dialog; one yes grants the session. Password managers still ask every time, terminals and editors once per session. |
-| `allow` | **Default.** Writes proceed without asking, still logged. Password managers *still* ask every time, terminals and editors once per session, and in background mode anything that would need a dialog waits in the menu bar instead. |
+| `ask` | The first write opens a dialog; one yes grants the session. Password managers are refused (with `CMCP_BACKGROUND=0` they ask every time), terminals and editors ask once per session. |
+| `allow` | **Default.** Writes proceed without asking, still logged. Password managers are *still* refused (with `CMCP_BACKGROUND=0` they ask every time), terminals and editors ask once per session, and in background mode anything that would need a dialog waits in the menu bar instead. |
 
 `CMCP_ASK_TIMEOUT` (seconds, default 60) controls how long a dialog waits before
 it refuses.
 
 ## Tools
 
-**30 tools: fourteen that look, sixteen that touch.** Twenty are offered by
+**32 tools: fourteen that look, eighteen that touch.** Twenty-five are offered by
 default, and the agent uses them without asking - the same way a browser tool
 drives a browser. Two gates survive that, and they are the two that matter:
 
-- **Password managers ask every time.** Keychain, 1Password and seven others,
-  in every mode, even after you have said yes. That is the whole difference
+- **Password managers are refused.** Keychain, 1Password and five others, in
+  every mode, even after you have said yes; with `CMCP_BACKGROUND=0` they ask
+  every time instead. That is the whole difference
   between *you may work* and *you may have my passwords*.
 - **Anything that deletes or clears asks every time**, recognised from the words
   in the action itself.
@@ -195,22 +236,32 @@ and the front is handed straight back to the app you were in (`gave_back`).
 `computer_launch` joins them with `background: true`: the app starts behind
 what you are doing. Many apps bring themselves forward as they start - six of
 eight did on a clean Mac - and when one does, the front is handed straight back
-and the answer says `took_screen` and `gave_back`. It is a moment, not nothing. Eight are still held back:
-`move`, `activate`, `quit`, `space`, `window`, `drag`, `paste` and `ask_user`. `CMCP_BACKGROUND=0`
+and the answer says `took_screen` and `gave_back`. It is a moment, not nothing. Seven are still held back:
+`move`, `activate`, `quit`, `space`, `window`, `drag` and `paste` - until you lend
+the screen: `computer_request_screen` asks you in the box in the corner of your
+screen (and in the menu bar), one agent at a time, approved with Touch ID, for at
+most 15 minutes. While it has the screen, each step waits while you are using the
+keyboard or mouse (a step already running finishes), and `Take the screen back
+now` ends the loan at once and stops a step that is still running. That button
+stays in the box for as long as the loan lasts - also when the agent is quiet and
+when you have switched the box off - and it never asks for Touch ID. Setting `CMCP_BACKGROUND` locks it
+out entirely. `CMCP_BACKGROUND=0`
 gives you those too - and a typo will not turn it off, only `0`, `false`, `no`
 or `off`. `CMCP_MODE=ask` puts one consent dialog per session in front of the
-first write, and `CMCP_MODE=readonly` leaves you the twelve that only look.
+first write, and `CMCP_MODE=readonly` leaves you the fourteen that only look.
 
 Both surviving gates are mutation-proved: break them in the source and the
 refusal turns into a free pass, which is how we know the test can fail.
 
 <!-- FORBEHOLD -->
-> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 30 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
-<!-- /FORBEHOLD -->**Look:** `computer_pending` · `computer_screenshot` · `computer_record` · `computer_inspect` · `computer_find` ·
+> **What you get today, honestly.** `npx @agent360/computer-mcp` currently serves **0.1.0**, which has 12 tools. The 32 tools described here are the source: they are built and tested, but not published yet. Building from source takes about thirty-five seconds if you want them now.
+<!-- /FORBEHOLD -->
+
+**Look:** `computer_pending` · `computer_screenshot` · `computer_record` · `computer_inspect` · `computer_find` ·
 `computer_wait_for` · `computer_focused` · `computer_apps` · `computer_windows` ·
 `computer_permissions` · `computer_displays` · `computer_menus` · `computer_audit` · `computer_learning`
 
-**Touch:** `computer_launch` · `computer_quit` · `computer_paste` · `computer_window` · `computer_space` · `computer_menu` · `computer_press` · `computer_set_value` · `computer_ask_user` ·
+**Touch:** `computer_request_screen` · `computer_launch` · `computer_open` · `computer_quit` · `computer_paste` · `computer_window` · `computer_space` · `computer_menu` · `computer_press` · `computer_set_value` · `computer_ask_user` ·
 `computer_click` · `computer_drag` · `computer_type` · `computer_key` · `computer_scroll` ·
 `computer_move` · `computer_activate`
 
@@ -218,12 +269,24 @@ refusal turns into a free pass, which is how we know the test can fail.
 or false, never text. The agent puts the cursor in the field, the dialog names
 the app and the window it is about to land in - written by the server, not by
 the model - and you type on your own keyboard. There is deliberately no route
-through this server for a password to reach a model.
+through this server for a password to reach a model. In background mode there is
+no dialog: the question waits in the box in the corner of your screen and under
+the menu bar icon, with the whole request, where
+it lands, and `Take me there` - your click brings the app forward, not the agent's.
+You do it and choose `Done`. A Done is a signal, not a consent: it can never
+approve anything else.
 
 **`computer_set_value`** writes into a field behind another window without
 moving your pointer, and refuses on a secure field every time. We removed that
 check on purpose once: the modified build wrote into the password box. It is the
 only thing standing there.
+`computer_type` refuses the same way, and checks before every character: when a
+Tab, a click or the page itself moves the focus into a password field halfway
+through, the typing stops there. It also listens to macOS's own password signal
+(secure input), which a browser switches on for a password field even when the
+accessibility layer only sees the page around it: while it is on, nothing is typed
+anywhere. The signal can only add a no - it never turns an unknown field into a
+yes. `computer_paste` judges the field in front the same way before it pastes.
 
 **`computer_wait_for`** waits for an element to appear instead of taking
 screenshots in a loop. Twenty polls cost one call here and twenty images the
@@ -261,11 +324,18 @@ Two or more matches is a refusal, not a guess - the agent gets the candidates
 and has to narrow it down, because pressing the first plausible button is
 exactly the kind of almost-right action nobody notices afterwards.
 
-The consent dialog still comes to the front, and the apps on the always-ask list
+The consent question still reaches you (in the menu bar by default), and the apps on the always-ask list
 still ask every time. `computer_press` names its target app, and that name is
-what the gate judges - so pressing something in 1Password asks even when
+what the gate judges - so pressing something in 1Password is refused (with `CMCP_BACKGROUND=0`: asks) even when
 1Password is nowhere near the front.
 
+**Claude Code's auto mode and the screen tools.** Measured on 1 Oct: after the
+person lent the screen with Touch ID, Claude Code's auto mode still refused
+`computer_move` as a security weakening. That is the client's own guard, not this
+server's, and it is right to be careful. To use the screen tools, run the session
+without auto mode and approve each call when Claude Code asks; the lease and the
+gates in this server still apply on top.
+
 **Several agents at once.** Each MCP client starts its own server, so a second
 chat is just a second process. They share one audit log, and every line carries
 a per-server `session` mark - set `CMCP_CLIENT=<name>` and the line carries that
@@ -283,29 +353,70 @@ at the same time; nothing is serialised that does not have to be.
 
 ## The menu bar icon
 
-While an agent is running, a small icon sits in the menu bar. It is the only
-thing this product puts on your screen, and it never takes focus.
+While an agent is running, a small icon sits in the menu bar, and while one is
+working, a small box sits in the top-right corner of your screen. Those two are
+all this product puts on your screen, and neither ever takes focus.
 
 - **The dropdown lists every agent that is running** - which client, and what it
   is doing right now. Click one to open a live window that follows it. The text
   says *what* it did (`Type 42 characters`, `Press an element in Finder`), never
   what was typed: the characters are not in the status file, not in the log, and
   not in the icon.
+- **The box shows what is happening, where you are working.** It sits in the
+  top-right corner of the screen with the window you are using - not the one the
+  pointer happens to be on - and follows you when you switch screens. It lists
+  which agents are working, in which app, and what they are doing now. It never
+  takes the keyboard, and disappears half a minute after the work stops. You can switch it off in the icon's menu.
 - **A question that needs you turns the icon orange.** In background mode the
   server used to refuse anything that needed a human, because a dialog takes the
   screen. Now it waits for you instead: the question sits in the icon until you
   answer it, and the agent is told nothing happened until you do.
-- **Allowing is deliberate.** `Allow…` lives in a submenu, never one click in the
-  main menu, and it asks for Touch ID (or your Mac's password) every time. The
+- **The box turns orange too, with the whole question.** It shows who is asking,
+  what, where it lands and how long a yes counts - the same lines the server
+  writes into the menu - with the menu's own buttons: `Allow (Touch ID)` and
+  `Deny` (or `Done` for something you do yourself). The buttons wait a second
+  after a new question appears, so a click meant for the last one cannot land on
+  it. For a question longer than 280 characters, `Allow` is only in the menu,
+  where all of it is shown: you see everything a yes covers before you give it.
+- **Allowing is deliberate.** In the menu, `Allow…` lives in a submenu, never one
+  click in the main menu; in the box it is a button. Both ask for Touch ID (or your
+  Mac's password) every time. The
   answer travels back down the same socket connection the question came in on,
   bound to a one-time number with a deadline. A late answer, a different number,
   or a yes without your fingerprint is a no.
+- **You see the whole action before you allow it.** The full text sits in the
+  submenu, wrapped, right above `Allow…` - up to 4,000 characters. Anything longer
+  is not asked at all: a yes has to cover everything you saw.
+- **A message to a real person asks every time.** In the chat and mail apps on
+  its list (WhatsApp, Messages, Slack, Teams, Telegram, Signal, Discord, Mail,
+  Outlook and others) and in web chats and webmail recognised by the page title
+  (WhatsApp, Messenger, Slack, Teams, Telegram, Discord, LinkedIn, Instagram,
+  Facebook, Google Chat, X, Gmail, Outlook and a few more - a chat on any other
+  site is not recognised), pressing or
+  clicking Send - in several languages, or a button with no name at all - and
+  pressing Return in a chat (Cmd+Return in mail) asks you first, for that one
+  message. The question shows who it goes to and what it says, read from the
+  screen by the server: the name above the text field, and the field itself.
+  If either cannot be read, nothing is sent - you send it yourself. A line break
+  typed into a chat is refused, because there it sends; in mail it is just a new
+  line. If the conversation or the text changes after you say yes, nothing is
+  sent. What it cannot see: apps not on the list, and messages sent by other
+  tools your client allows, such as browser automation or `osascript`.
+- **It tells you where it can be walked around.** The gate guards this server's
+  own calls, not your whole Mac. `computer_permissions` lists the rules it
+  recognises in your client that let an agent click, type or send without it -
+  a shell, `sudo`, `osascript`, a script interpreter, browser or computer
+  automation - so you can decide whether to keep them. It reads Claude Code's
+  settings; other clients are not read.
 - **Some things can never be approved there**: apps on the always-ask list
   (password managers), an action whose target app could not be resolved, and an
   unredacted screenshot. Those stay refused and show up in `computer_pending`.
 - **No banners by default, and never a button in one.** A notification with an
   `Allow` button would be a second way to say yes - and an agent can click a
   notification. You can switch a plain banner on from the icon's own menu.
+- **A sound for each new question.** Each new question plays one sound; switch it off in the icon's menu.
+  It does not play again if the same question is sent twice, and not when it
+  expires.
 - **The icon cannot be touched by an agent.** Any write tool aimed at it is
   refused in every mode, before the gate can even ask. Measured: without that
   rule, three of three presses reached the helper.
@@ -333,14 +444,16 @@ sit unnoticed until it expires. That is a real limitation today, not a setting.
 - **Consent is not containment.** After you approve, the agent drives your real
   Mac - that is what you approved. If you need a boundary rather than a
   decision, run it in a VM. That is the honest answer, not a missing feature.
-- **It does not see inside web pages.** Measured 23 Sep on two Chromes - the
+- **It cannot count on seeing inside web pages.** Measured 23 Sep on two Chromes - the
   one in use and a clean Chrome for Testing: **zero** web areas in the
   accessibility tree, no page text, only the browser's own buttons and address
   bar. Chrome builds that tree for a real screen reader, not for the switch
   Electron apps honour. Apps built on Electron - VS Code, Slack, Notion, the
   IDE this was measured in - do expose their content: 4.000 nodes, 1.434 texts,
-  267 buttons in one window. So: inside a web page, use a browser tool; inside
-  an app, use this one. They do not overlap.
+  267 buttons in one window. On 9 Oct the Chrome on the same Mac did show its
+  pages (861 nodes on one page). Why it changed is not measured - Chrome decides
+  for itself when to build that tree. Until that is measured and built on, treat
+  a web page as a browser tool's job and an app as this one's.
 - **Keystrokes do not land in a Chromium window that is not focused.** Measured
   the same day: the helper reported `typed: 21` and `took_screen: false`, and
   the text arrived nowhere. `computer_set_value` through the accessibility
@@ -360,7 +473,10 @@ sit unnoticed until it expires. That is a real limitation today, not a setting.
   open the system will not even say which app has focus - and a save panel's
   *Go to folder* could not be driven through an app's own queue. So the agent
   can read them, but it cannot choose in them without taking the screen. Today
-  it stops and says so rather than pretending.
+  it stops and says so rather than pretending: a press on a pop-up, menu button
+  or combo box behind is refused, and so are keys while the focus is on one. A
+  plain button that pops up a menu of its own is not recognised in advance - if
+  that menu opens over your work, close it with Escape.
 
 ## Building from source
 
diff --git a/mcp-server/godkend.js b/mcp-server/godkend.js
index 47c7b8fc..ca5db961 100644
--- a/mcp-server/godkend.js
+++ b/mcp-server/godkend.js
@@ -32,10 +32,23 @@ import { existsSync } from 'fs';
 import { dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { startIkon } from './status.js';
+import { maalSpoergsmaal } from './tilstede.js';
+
+/// Seneste spoergsmaals maaling (punkt P). Hver agent har hoejst ét spoergsmaal ad
+/// gangen (`venter`), saa index.js tager den til netop den loglinje.
+let senesteMaaling = null;
+export function tagMaaling() { const m = senesteMaaling; senesteMaaling = null; return m; }
 
 const DIR = process.env.CMCP_STATE_DIR || join(homedir(), '.local', 'state', 'computer-mcp');
 export const IKON_SOCKET = join(DIR, 'ikon.sock');
 
+/// ⛔ Et ja skal daekke ALT det mennesket saa (29/9, panelet). Foer klippede
+///    protokollen teksten ved 200 tegn og Touch ID-arket ved 80 - tavst. Nu
+///    gaar hele teksten til ikonet, som viser den ombrudt over «Allow». En
+///    tekst over loftet spoerges slet ikke: hellere et nej end et ja til noget
+///    halvt laest.
+export const TEKST_LOFT = 4000;
+
 let venter = false;          // hoejst ét aabent spoergsmaal pr. agent
 let pauseTil = 0;            // efter et nej: ingen nye spoergsmaal i et stykke tid
 const PAUSE_MS = 30_000;
@@ -69,20 +82,119 @@ async function ikonetKlar() {
   return false;
 }
 
+/// `computer_ask_user` i baggrund (29/9): mennesket goer det selv - taster et
+/// kodeord, godkender en OAuth-side - og trykker «Done». Et signal, ikke et
+/// samtykke: «done» godtages KUN paa et spoergsmaal af denne slags, saa det
+/// aldrig kan blive til et ja til en anden handling.
+export async function spoergOmGoerSelv(sp, timeoutSec) {
+  return spoergIkonet({ ...sp, kind: 'goer-selv' }, timeoutSec);
+}
+
+/// ⛔ SKAERM-LAANET (29/9, panelet: «tilstanden ejes af ikonet, ikke af en
+///    env-var»). Mennesket giver EN agent skaermen i hoejst 15 minutter, med
+///    Touch ID. Laanet ER forbindelsen: ikonet holder den aaben saa laenge
+///    laanet gaelder, og lukker den naar tiden er gaaet, naar mennesket tager
+///    skaermen tilbage, eller naar ikonet doer. Saa kalder vi `slut` - der er
+///    ingen fil en agent kan pille ved, og intet der skal spoerges om igen.
+///    Svarer { ok, grund, til, afslut } - `til` er det tidligste af vores og
+///    ikonets ur; `afslut` giver skaermen tilbage foer tid.
+export async function laanSkaermen({ session, client, text, minutter }, timeoutSec, slut) {
+  if (venter) return { ok: false, grund: 'this agent already has a question waiting in the menu bar' };
+  if (Date.now() < pauseTil) return { ok: false, grund: 'the person just said no; this agent may not ask again for 30 seconds' };
+  // Runde 1 (Astra 8): over loftet spoerges der ikke - samme regel som samtykket.
+  const helTekst = ren(text).trim();
+  if ([...helTekst].length > TEKST_LOFT) return { ok: false, grund: `the reason is ${[...helTekst].length} characters - more than the ${TEKST_LOFT} the menu bar shows in full` };
+  if (!(await ikonetKlar())) return { ok: false, grund: 'the menu bar icon is not running' };
+  return new Promise((resolve) => {
+    venter = true;
+    senesteMaaling = null;
+    const afslutMaaling = maalSpoergsmaal();
+    const nonce = randomBytes(16).toString('hex');
+    const frist = Date.now() + timeoutSec * 1000;
+    let buf = '', svaret = false, lukket = false;
+    // Maalingen (punkt P) skal staa paa loglinjen, saa svaret venter paa den - hoejst
+    // 1,5 s. Ved et ja maales ingen ny idle (et menneske svarede netop); kun maalingen
+    // fra spoergsmaalets start, som et menneskes svartid normalt allerede har overhalet.
+    const afgoer = (v) => {
+      if (svaret) return; svaret = true; venter = false; clearTimeout(ur);
+      afslutMaaling(v.ok === true).then((x) => { senesteMaaling = x; }, () => {}).finally(() => resolve(v));
+    };
+    const sock = createConnection(IKON_SOCKET);
+    const ur = setTimeout(() => { afgoer({ ok: false, grund: 'nobody answered in the menu bar in time' }); sock.destroy(); }, timeoutSec * 1000);
+    sock.on('connect', () => {
+      sock.write(JSON.stringify({
+        nonce, session, client: ren(client).slice(0, 200), text: helTekst,
+        scope: `If you allow it, the agent may use your screen for ${minutter} minutes: move the pointer, type into the app in front and bring windows forward. Before each step it waits if you are using the keyboard or mouse; a step already running finishes, or stops at once when you take the screen back. Password apps, deletions, and messages in the apps and web chats it recognises still ask. Take the screen back at any time with Take the screen back now, in the box in the corner of your screen or in this menu.`,
+        target: 'your screen', kind: 'screen', minutes: minutter, expires: frist
+      }) + '\n');
+    });
+    sock.on('data', (d) => {
+      if (svaret) return;
+      buf += d;
+      const i = buf.indexOf('\n'); if (i < 0) return;
+      let m = null; try { m = JSON.parse(buf.slice(0, i)); } catch {}
+      if (!m || m.nonce !== nonce) { afgoer({ ok: false, grund: 'the answer did not match the question' }); return sock.destroy(); }
+      if (Date.now() > frist) { afgoer({ ok: false, grund: 'the answer came after the question had expired' }); return sock.destroy(); }
+      if (m.ok === true && m.verified === 'owner') {
+        const vores = Date.now() + minutter * 60_000;
+        const til = Math.min(vores, Number(m.until) > 0 ? Number(m.until) : vores);
+        return afgoer({ ok: true, til, afslut: () => sock.destroy(), grund: 'the person gave this agent the screen and confirmed it was them' });
+      }
+      if (m.verified === 'optaget') { afgoer({ ok: false, grund: 'another agent has the screen right now' }); return sock.destroy(); }
+      if (m.ok === false) pauseTil = Date.now() + PAUSE_MS;
+      afgoer({ ok: false, grund: m.ok === false ? 'the person said no in the menu bar' : 'the answer was not confirmed by the person (Touch ID or password)' });
+      sock.destroy();
+    });
+    const luk = () => {
+      if (lukket) return; lukket = true;
+      if (!svaret) return afgoer({ ok: false, grund: 'the menu bar icon closed without an answer' });
+      slut?.();
+    };
+    sock.on('close', luk);
+    sock.on('error', luk);
+  });
+}
+
+/// ⛔ Runde 2 30/9 (Astra 6): loft, pause og et ventende spoergsmaal tjekkes FOER
+///    det afgoeres om ikonet koerer - ellers blev et manglende ikon til en boks
+///    med 4.001 tegn, eller en boks lige efter et nej.
+function forhaandsNej(text) {
+  const n = [...ren(text).trim()].length;
+  if (n > TEKST_LOFT) return `the action is ${n} characters - more than the ${TEKST_LOFT} the menu bar shows in full, and a yes must cover everything the person saw`;
+  if (venter) return 'this agent already has a question waiting in the menu bar';
+  if (Date.now() < pauseTil) return 'the person just said no; this agent may not ask again for 30 seconds';
+  return null;
+}
+
 export async function spoergIkonet(sp, timeoutSec) {
-  if (!venter && !(await ikonetKlar())) {
-    return { ok: false, ikkeSpurgt: true, grund: 'the menu bar icon is not running' };
+  const nej = forhaandsNej(sp.text);
+  if (nej) return { ok: false, ikkeSpurgt: true, grund: nej };
+  if (!(await ikonetKlar())) {
+    return { ok: false, ikkeSpurgt: true, ikkeKoerer: true, grund: 'the menu bar icon is not running' };
   }
   return spoerg(sp, timeoutSec);
 }
 
-function spoerg({ session, client, text, scope, target }, timeoutSec) {
+// Renses for ALT usynligt: linjeskift, men ogsaa U+2028/2029, U+0085,
+// retningstegn (U+202E) og nul-bredde-tegn. Sikkerhedskonsulenten,
+// runde 2: kun \r\n\t var fjernet, saa modellen kunne vende teksten
+// eller skubbe maalet ud af Touch ID-arket.
+const ren = (v) => String(v ?? '').replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]+/gu, ' ');
+
+function spoerg({ session, client, text, scope, target, kind = null, targetBundle = null }, timeoutSec) {
   return new Promise((resolve) => {
-    if (!existsSync(IKON_SOCKET)) return resolve({ ok: false, ikkeSpurgt: true, grund: 'the menu bar icon is not running' });
+    // Loftet er afgjort i forhaandsNej() foer vi kom hertil (spoerg kaldes kun fra
+    // spoergIkonet) - én vagt pr. regel. «venter» og pausen tjekkes IGEN her, fordi
+    // der ligger et await (ikonetKlar) imellem: to samtidige kald kan begge have
+    // passeret forhaandsNej (runde 3, Fable a).
+    const helTekst = ren(text).trim();
+    if (!existsSync(IKON_SOCKET)) return resolve({ ok: false, ikkeSpurgt: true, ikkeKoerer: true, grund: 'the menu bar icon is not running' });
     if (venter) return resolve({ ok: false, ikkeSpurgt: true, grund: 'this agent already has a question waiting in the menu bar' });
     if (Date.now() < pauseTil) return resolve({ ok: false, ikkeSpurgt: true, grund: 'the person just said no; this agent may not ask again for 30 seconds' });
 
     venter = true;
+    senesteMaaling = null;
+    const afslutMaaling = maalSpoergsmaal();
     const nonce = randomBytes(16).toString('hex');
     // ⛔ Astra, runde 2 (22/9): fristen blev kun haandhaevet af en timer. En
     //    timer kan komme for sent (maskinen sover, kaldet er forsinket), og saa
@@ -97,18 +209,17 @@ function spoerg({ session, client, text, scope, target }, timeoutSec) {
       clearTimeout(ur);
       try { sock.destroy(); } catch {}
       if (!svar.ok && svar.menneske) pauseTil = Date.now() + PAUSE_MS;
-      resolve(svar);
+      // Maalingen aendrer aldrig svaret; den forsinker det hoejst 1,5 s (se laanSkaermen).
+      afslutMaaling(svar.ok === true).then((x) => { senesteMaaling = x; }, () => {}).finally(() => resolve(svar));
     };
     const ur = setTimeout(() => slut({ ok: false, grund: 'nobody answered in the menu bar in time' }), timeoutSec * 1000);
     const sock = createConnection(IKON_SOCKET);
     sock.on('connect', () => {
-      // Renses for ALT usynligt: linjeskift, men ogsaa U+2028/2029, U+0085,
-      // retningstegn (U+202E) og nul-bredde-tegn. Sikkerhedskonsulenten,
-      // runde 2: kun \r\n\t var fjernet, saa modellen kunne vende teksten
-      // eller skubbe maalet ud af Touch ID-arket.
-      const ren = (v) => String(v ?? '').replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]+/gu, ' ').slice(0, 200);
+      // De faste felter skrives af serveren og holdes korte; teksten sendes hel.
+      const kort = (v) => ren(v).slice(0, 200);
       sock.write(JSON.stringify({
-        nonce, session, client: ren(client), text: ren(text), scope: ren(scope), target: ren(target),
+        nonce, session, client: kort(client), text: helTekst, scope: kort(scope), target: kort(target),
+        kind, targetBundle: targetBundle ? kort(targetBundle) : null,
         expires: Date.now() + timeoutSec * 1000
       }) + '\n');
     });
@@ -121,13 +232,14 @@ function spoerg({ session, client, text, scope, target }, timeoutSec) {
       if (!m || m.nonce !== nonce) return slut({ ok: false, grund: 'the answer did not match the question' });
       if (Date.now() > frist) return slut({ ok: false, grund: 'the answer came after the question had expired' });
       if (m.ok === true && m.verified === 'owner') return slut({ ok: true, grund: 'the person approved in the menu bar and confirmed it was them' });
+      if (m.ok === true && m.verified === 'done' && kind === 'goer-selv') return slut({ ok: true, grund: 'the person says it is done' });
       // Kun et udtrykkeligt nej er et menneskes nej - og kun det giver pausen.
       // Et ja uden bekraeftelse er ikke et ja, men heller ikke et menneske der
       // har sagt fra; en pause ville straffe mennesket for en fejl i ikonet.
       if (m.ok === false) return slut({ ok: false, menneske: true, grund: 'the person said no in the menu bar' });
       return slut({ ok: false, grund: 'the answer was not confirmed by the person (Touch ID or password)' });
     });
-    sock.on('error', () => slut({ ok: false, ikkeSpurgt: true, grund: 'the menu bar icon could not be reached' }));
+    sock.on('error', () => slut({ ok: false, ikkeSpurgt: true, ikkeKoerer: true, grund: 'the menu bar icon could not be reached' }));
     sock.on('close', () => slut({ ok: false, grund: 'the menu bar icon closed without an answer' }));
   });
 }
diff --git a/mcp-server/helper.js b/mcp-server/helper.js
index da910a22..ef715c4c 100644
--- a/mcp-server/helper.js
+++ b/mcp-server/helper.js
@@ -65,6 +65,27 @@ function ekstraFra(parsed) {
   return Object.keys(ud).length ? ud : null;
 }
 
+/// Hjaelper-processer der koerer lige nu. Naar et skaerm-laan slutter, draebes
+/// dem der TAGER skaermen (runde 1 30/9, Astra 4): «tag skaermen tilbage» skal
+/// ogsaa stoppe et traek eller en skrivning der er i gang.
+const levende = new Map();
+// ⛔ Runde 2 30/9 (Astra 1, Fable 3): kun «skaerm-tagende» blev draebt - en stille
+//    skrivning i det forreste program, `paste`, `launch` og vindueskald fortsatte.
+//    Nu draebes ALT denne server har i gang, som ikke er et rent opslag.
+const OPSLAG = new Set(['apps', 'displays', 'find', 'focused', 'inspect', 'menus', 'permissions', 'redact',
+  'screenshot', 'secure-rects', 'version', 'wait-for', 'windows', 'at', 'resolve-app', 'samtale', 'idle']);
+export function afbrydSkaermKald() {
+  let n = 0;
+  for (const [child, argv] of levende) {
+    // Et opslag (ogsaa `press --dry`) draebes ikke. `paste` faar SIGUSR1 i stedet for
+    // SIGTERM (runde 4, Astra 4): den stopper FOER Cmd+V og laegger personens
+    // udklipsholder tilbage; har den allerede trykket, bliver gendannelsen faerdig.
+    if (OPSLAG.has(argv[0]) || argv.includes('--dry')) continue;
+    try { child.afbrudtAfLaan = true; child.kill(argv[0] === 'paste' ? 'SIGUSR1' : 'SIGTERM'); n++; } catch {}
+  }
+  return n;
+}
+
 export function callHelper(args, { timeout = 30000, stdin = null } = {}) {
   return new Promise((resolve, reject) => {
     const bin = helperPath();
@@ -86,6 +107,9 @@ export function callHelper(args, { timeout = 30000, stdin = null } = {}) {
                                      parsed.code || 'helper-error',
                                      ekstraFra(parsed)));
       }
+      if (err && !parsed && child.afbrudtAfLaan) {
+        return reject(new HelperError('the screen loan ended while this ran (taken back, expired or handed back), so it was stopped part way', 'screen-taken-back'));
+      }
       if (err && !parsed) {
         return reject(new HelperError(
           err.killed ? `the helper did not answer within ${timeout} ms` : (String(stderr).trim() || err.message),
@@ -95,6 +119,8 @@ export function callHelper(args, { timeout = 30000, stdin = null } = {}) {
       if (!parsed) return reject(new HelperError('the helper did not answer with JSON', 'helper-bad-output'));
       resolve(parsed);
     });
+    levende.set(child, args);
+    child.on('exit', () => levende.delete(child));
 
     // Hemmeligheder gaar paa stdin, aldrig som argument: `ps` viser hele
     // kommandolinjen for enhver proces med samme bruger-id. Vi LOVEDE det paa
@@ -108,6 +134,50 @@ export function callHelper(args, { timeout = 30000, stdin = null } = {}) {
   });
 }
 
+/// ⛔ 9/10 (F1 paa Gustavs Mac): WhatsApp hedder «\u200eWhatsApp» - et usynligt
+///    venstre-mod-hoejre-maerke (U+200E) foran navnet, baade paa disken og i
+///    CFBundleDisplayName. `app: "WhatsApp"` fandt derfor intet, maalet blev
+///    «ukendt», og hvert skrivende kald i WhatsApp blev afvist i baggrunden.
+///
+///    Samme regel som hjaelperens `Navne.vaelg` (Navne.swift), saa porten og
+///    leveringen rammer samme program (18/9) - test/usynlige-navne.mjs koerer
+///    begge sider mod de samme tilfaelde:
+///      1. bundle-id praecist, saa bundle-id uden hensyn til store/smaa bogstaver
+///      1b. et praecist navn (smaa bogstaver tegn for tegn) - det foerste
+///      2. ellers navnet uden usynlige formateringstegn (Unicode Cf) - men kun naar
+///         praecis ét program passer. Passer flere, vaelges intet: et ukendt maal afvises.
+const USYNLIGE = /\p{Cf}/gu;
+/// ⛔ R16 (Astra + Opus, MAALT 9/10): smaa bogstaver TEGN FOR TEGN og sammenligning
+///    paa tegn - som Navne.swift. `toLowerCase()` paa hele strengen bruger graesk
+///    slut-sigma, Swift goer ikke; tegn for tegn er de ens (proeven tjekker hvert tegn).
+const smaa = (s) => Array.from(String(s ?? ''), c => c.toLowerCase()).join('');
+export const navneNoegle = (s) => smaa(String(s ?? '').replace(USYNLIGE, '').trim());
+export function findProgram(apps, want) {
+  const w = String(want ?? '').trim();
+  if (!w) return null;
+  // R17: et maal porten har bundet (`=<id>`, se appArg i index.js) er PRAECIS det id -
+  // ingen store/smaa, ingen navne. Er det vaek, er svaret intet.
+  if (w.startsWith('=')) return (w.length > 1 && apps.find(a => (a.bundleId || '') === w.slice(1))) || null;
+  // Et program uden bundle-id hedder «pid:<n>» efter oversaettelsen (Navne.id i hjaelperen).
+  // Formatet er reserveret: et program der HEDDER «pid:5», naas aldrig ad den vej (R18, Astra).
+  if (/^pid:\d+$/.test(w)) return apps.find(a => !a.bundleId && String(a.pid) === w.slice(4)) || null;
+  const lw = smaa(w);
+  const viaId = apps.find(a => (a.bundleId || '') === w)
+             || apps.find(a => a.bundleId && smaa(a.bundleId) === lw);
+  if (viaId) return viaId;
+  // ⛔ R18 (Opus, MAALT live): macOS' visningstjenester koerer én proces pr. vaertsprogram med
+  //    SAMME id og hvert sit navn («Autoudfyld (Google Chrome)» / «Autoudfyld (Agent360 IDE)»).
+  //    Leveringen gaar til id'et, ikke til processen - saa et navn hvis id deles med en koerende
+  //    proces med et ANDET navn, er tvetydigt og afvises. Samme navn (Chrome x2) er ikke tvetydigt.
+  const deltId = (x) => !!x.bundleId && apps.some(a => a !== x && a.bundleId === x.bundleId && smaa(a.name || '') !== smaa(x.name || ''));
+  const viaNavn = apps.find(a => smaa(a.name || '') === lw);
+  if (viaNavn) return deltId(viaNavn) ? null : viaNavn;
+  const n = navneNoegle(want);
+  if (!n) return null;
+  const hits = apps.filter(a => navneNoegle(a.name) === n);
+  return hits.length === 1 && !deltId(hits[0]) ? hits[0] : null;
+}
+
 /// Oversaetter det program-argument agenten skrev, til et kanonisk bundle-ID.
 ///
 /// ⛔ Findes fordi porten ellers kan omgaas med ét ord. `ALWAYS_ASK_APPS`
@@ -149,10 +219,7 @@ export async function resolveBundleId(appArg) {
   //    under load 143, og en timeout maa ikke blive til et tavst ja.
   try {
     const r = await callHelper(['apps', '--all'], { timeout: 15000 });  // samme maengde som leveringen
-    const apps = r.apps || [];
-    const lower = want.toLowerCase();
-    const hit = apps.find(a => (a.bundleId || '').toLowerCase() === lower)
-             || apps.find(a => (a.name || '').toLowerCase() === lower);
+    const hit = findProgram(r.apps || [], want);
     return hit ? (hit.bundleId || null) : null;
   } catch {
     return null;
@@ -175,10 +242,13 @@ export async function resolveApp(appArg) {
   if (!want) return null;
   try {
     const r = await callHelper(['apps', '--all'], { timeout: 15000 });  // samme maengde som leveringen
-    const lower = want.toLowerCase();
-    const hit = (r.apps || []).find(a => (a.bundleId || '').toLowerCase() === lower)
-             || (r.apps || []).find(a => (a.name || '').toLowerCase() === lower);
-    return hit ? { bundleId: hit.bundleId || null, active: !!hit.active, name: hit.name } : null;
+    const hit = findProgram(r.apps || [], want);
+    // R17 (Opus P2): «er det programmet mennesket bruger lige nu?» gaelder ALLE processer
+    // med det valgte id - hjaelperen leverer til id'et, ikke til den ene proces.
+    const aktivProces = hit?.bundleId ? (r.apps || []).find(a => a.bundleId === hit.bundleId && a.active) : null;
+    const aktiv = !!hit?.active || !!aktivProces;
+    // Navnet i et afslag er den proces mennesket faktisk bruger.
+    return hit ? { bundleId: hit.bundleId || null, active: aktiv, name: (aktivProces || hit).name } : null;
   } catch {
     return null;
   }
diff --git a/mcp-server/index.js b/mcp-server/index.js
index d0809802..95ece081 100644
--- a/mcp-server/index.js
+++ b/mcp-server/index.js
@@ -23,8 +23,10 @@ import { randomUUID } from 'crypto';
 import { fileURLToPath } from 'url';
 
 import { TOOLS, TOOL_BY_NAME, describe } from './tools.js';
-import { TIER, ALWAYS_ASK_APPS, SPOERG_PR_SESSION, decide, currentMode, askHumanToDo, menuSerFarlig, tastSerFarlig, baggrund, TAGER_SKAERMEN, KAN_STILLES, MANGLER_FOR_STILLE, kaldErStille, tagerSkaermen } from './policy.js';
-import { callHelper, HelperError, helperPath, frontmostBundleId, resolveBundleId, resolveApp } from './helper.js';
+import { spoergOmGoerSelv, laanSkaermen, tagMaaling } from './godkend.js';
+import { BESKED_APPS, beskedSlags, WEBMAIL, WEBCHAT, SENDE_ORD, tastSender, saetLaan, laanAktivt, laanTilTid, baggrundLaast, laanOejeblik } from './policy.js';
+import { TIER, ALWAYS_ASK_APPS, SPOERG_PR_SESSION, decide, currentMode, askHumanToDo, askTimeout, skaermVentetid, menuSerFarlig, tastSerFarlig, baggrund, TAGER_SKAERMEN, KAN_STILLES, MANGLER_FOR_STILLE, kaldErStille, tagerSkaermen } from './policy.js';
+import { callHelper, HelperError, helperPath, frontmostBundleId, resolveBundleId, resolveApp, afbrydSkaermKald } from './helper.js';
 import { record, scrubArgs, kendNoegler, fingerprint, AUDIT_PATH, noterVentende, ventende, KOE_PATH, kaedenHolder, SESSION, loggenKanSkrives, iKald } from './audit.js';
 import { medProgramLaas } from './programlaas.js';
 import { taelOgTael } from './sloejfe.js';
@@ -176,12 +178,20 @@ When a step did nothing - the next route (measured 27-28 Sep):
 - \`computer_press\` said ok and nothing changed (a sidebar in App Store or System
   Settings): the app ignores presses there from behind. Find the same action in
   its menus with \`computer_menus\` - System Settings has every page under View.
-- A menu item is greyed out, code \`menu-needs-front\`: the app only allows it
-  while it is in front. Ask the person to bring it forward, then call again.
+- A menu item is greyed out, code \`menu-needs-front\`: this may be because the
+  app only enables it while it is in front - which cannot be done from behind.
+  Tell the person and let them bring it forward; do not keep pressing it.
 - The app runs but has no window: \`computer_launch\` with \`background: true\`
-  asks it to show one, without bringing it forward.
+  asks it to show one; if the app pulls itself forward the front is handed back.
 - Nothing is found in an app you just saw: check \`computer_windows\` - the
   window may have been closed.
+- \`computer_find\` finds nothing anywhere in an app that draws its own controls
+  on a canvas (some games, some plotting tools, some remote-desktop windows):
+  take one \`computer_screenshot\` of that app only, describe what you see, and
+  hand the step to the person with \`computer_ask_user\` - do not guess
+  coordinates from the image yourself. A canvas is also where the accessibility
+  layer cannot black out a password field, so the person - never you - decides
+  if that screenshot is safe to take.
 - Whichever it was, write it down with \`computer_learning\`: the route that
   failed and the one that worked. That is how this tool gets better.
 
@@ -189,13 +199,29 @@ What you will be refused, and why:
 - anything that would take the screen while in background mode - the person is
   working; use the route above instead
 - the app the person is using right now - wait, or target another app
-- password managers and Keychain: they ask every single time, in every mode
+- password managers and Keychain: refused in background mode (the default);
+  with CMCP_BACKGROUND=0 they ask every single time
 - an unredacted screenshot: that is the person's decision, never the model's
 - the Computer MCP status icon itself: it is their control surface
 
-When something needs a human, the question waits in the menu bar icon and the
-person answers it with Touch ID. You are told the action did not happen; call
-it again after they approve. \`computer_pending\` lists what is waiting.
+When something needs a human, do not give up - ask. This tool drives what a person
+can reach by hand, but some steps stay theirs to take: a login or password, the
+go-ahead to send a message to a real person, or something macOS only lets a person
+do. When you hit one, say plainly what you need and ask the person to take that
+step - \`computer_ask_user\` puts the question to them and returns their answer. In
+background mode it waits in the Computer MCP box in the corner of their screen and
+under the menu bar icon: name the \`app\` whose field you
+prepared, and the person brings it forward themselves, does it, and chooses Done;
+in the foreground it is a dialog. If the icon is not running it is refused - then
+say in your reply what you need instead of trying to force it. You never type a
+password yourself - the person types any secret, and \`computer_type\` refuses
+password fields. If a step genuinely needs the screen - dragging, moving the
+pointer, bringing a window forward - ask for it with \`computer_request_screen\`
+and say why; the person lends it for a few minutes, and you hand it back with
+action "release" as soon as you are done. Sensitive write
+actions that go through the menu-bar consent icon are listed by \`computer_pending\`
+and approved there. Handing back "I can't" before you have asked is the one wrong
+move; never work around a refusal.
 
 Reading: \`computer_inspect\` answers as text by default. If it says INCOMPLETE
 or [cut: ...], the answer is PART of the tree - narrow it with \`computer_find\`
@@ -206,7 +232,7 @@ Everything is written to an append-only audit log with a rolling chain.`;
 
 const server = new Server(
   { name: 'computer-mcp', version: PKG.version },
-  { capabilities: { tools: {} }, instructions: VEJLEDNING }
+  { capabilities: { tools: { listChanged: true } }, instructions: VEJLEDNING }
 );
 
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
@@ -270,6 +296,406 @@ for (const sig of ['SIGTERM', 'SIGINT', 'SIGHUP']) process.on(sig, () => process
 /// Den grund mennesket laeser, naar en handling spoerger hver gang. Én grund pr.
 /// slags - «det ligner en sletning» er ikke grunden til at spoerge om en optagelse.
 /// Hoejst 150 tegn: menulinje-ikonet viser 200, og «this one action only» skal med.
+/// ⛔ B6 (29/9, panelet: «sikkerhedskontrol UDEN for agenten»). Porten vogter
+///    denne servers egne kald - ikke et faengsel (godkend.js). En agent med en
+///    shell under samme bruger kan klikke med osascript, og en browser-
+///    automation kan sende fra webmail, helt uden om os. Den kontrol der LIGGER
+///    uden for agenten, er klientens egne tilladelser. Vi kan ikke haandhaeve
+///    dem - men vi kan sige praecis hvor hullerne staar, i stedet for at lade
+///    porten ligne mere end den er. Kun laesning; kun de fundne regler naevnes.
+const OMVEJE = [
+  [/^Bash$|^Bash\((\*|:\*)\)$/, 'runs any shell command - including osascript, which can click and type in any app without this server'],
+  [/^Bash\([^)]*osascript/i, 'runs AppleScript, which can click, type and send in any app without this server'],
+  // ⛔ Runde 2 30/9 (Fable 1): hele browser-/computer-servere og deres skrivende
+  //    vaerktoejer - ogsaa Claude in Chrome, computer-use og remote-devices, som
+  //    klienterne selv skibes med. Vores egen server (computer-mcp) er ikke en omvej.
+  [/^mcp__(?:(?!__)[\w-])*(browser|playwright|puppeteer|chrome|computer[-_]use|remote[-_]devices|desktop[-_]commander)(?:(?!__)[\w-])*__[\w-]*(click|fill|type|press|execute|evaluate|upload|navigate|select|drag|key|scroll|computer|form|input|javascript)/i,
+   'drives a browser or the computer - webmail and web chats included - without this server'],
+  [/^mcp__(?:(?!__)[\w-])*(browser|playwright|puppeteer|chrome|computer[-_]use|remote[-_]devices|desktop[-_]commander)(?:(?!__)[\w-])*(__\*)?$/i,
+   'allows every tool of a browser or computer automation server - clicks and form fills included'],
+  // Runde 1+2 (Fable P5, Fable 1): skaller og fortolkere, ogsaa med fuld sti, og
+  // programmer der koerer andre programmer - root og browser-automation inklusive.
+  [/^Bash\((\/[\w/.-]*\/)?(ba|z|k|c|da|fi|tc)?sh(\s|:|\)|$)/, 'runs a shell - and from there osascript, which can click and type in any app without this server'],
+  [/^Bash\((\/[\w/.-]*\/)?(python\d*(\.\d+)?|node|ruby|perl|deno|bun|php|swift|open|shortcuts|automator|osacompile|cliclick)(\s|:|\)|$)/,
+   'runs a script interpreter or an automation tool - enough to click, type and send without this server'],
+  [/^Bash\((\/[\w/.-]*\/)?(sudo|doas)(\s*\*|:\*|\s+(\/\S*\/)?((ba|z|k|c|da|fi|tc)?sh|python\d*|node|ruby|perl|osascript|open)\b)/, 'runs commands as root - anything, including clicking and sending without this server'],
+  [/^Bash\((\/[\w/.-]*\/)?(npx|bunx|pnpx|env|xargs|eval)(\s*\*|:\*|\s+(playwright|puppeteer|selenium)\b|\s+(\/\S*\/)?((ba|z|k|c|da|fi|tc)?sh|python\d*|node|ruby|perl|osascript)\b)/, 'runs any program it is given - browser automation included - without this server'],
+];
+function klientOmveje() {
+  const hjem = homedir(), her = process.cwd();
+  const filer = process.env.CMCP_KLIENT_INDSTILLINGER
+    ? process.env.CMCP_KLIENT_INDSTILLINGER.split(':').filter(Boolean)
+    : [join(hjem, '.claude', 'settings.json'), join(hjem, '.claude', 'settings.local.json'),
+       join(her, '.claude', 'settings.json'), join(her, '.claude', 'settings.local.json')];
+  const laest = [], fundet = [];
+  for (const fil of filer) {
+    let allow;
+    try { allow = JSON.parse(readFileSync(fil, 'utf8'))?.permissions?.allow; } catch { continue; }
+    laest.push(fil);
+    for (const regel of Array.isArray(allow) ? allow : []) {
+      // ⛔ Live-proeven 30/9: 128 «omveje» paa Gustavs maskine, de fleste praecise
+      //    kommandoer (`Bash(node --check index.js)`) der kun tillader den ene ting.
+      //    En Bash-regel er kun en omvej med et wildcard eller et script fra stdin.
+      const r = String(regel);
+      const arg = r.startsWith('Bash(') ? r.slice(5, -1) : null;
+      if (arg !== null && r !== 'Bash' && !/\*/.test(arg) && !/(^|\s)-$/.test(arg.trim())) continue;
+      const hvorfor = OMVEJE.find(([re]) => re.test(r))?.[1];
+      if (hvorfor) fundet.push({ rule: String(regel).slice(0, 120), file: fil, why: hvorfor });
+    }
+  }
+  return {
+    bypasses: fundet,
+    bypassesChecked: laest.length ? laest : 'no Claude Code settings found; other MCP clients are not checked',
+    ...(fundet.length ? { bypassNote: `${fundet.length} rule(s) in your client let an agent act on this Mac without asking - this server's consent never sees those actions. Only the person can remove them.` } : {})
+  };
+}
+
+/// ⛔ SKAERM-LAANET (29/9, panelet: B2 + B5). Mennesket laaner EN agent skaermen
+///    i menulinje-ikonet, med Touch ID, i hoejst 15 minutter. Laanet ER den
+///    aabne forbindelse til ikonet (godkend.js): lukkes den - tiden er gaaet,
+///    mennesket tog skaermen tilbage, ikonet doede - er laanet slut, og
+///    vaerktoejslisten meldes aendret. CMCP_BACKGROUND sat er et loft.
+let laanHaandtag = null;
+let laanNr = 0;
+let laanAfgivet = false;
+const POSTER_INPUT = new Set(['computer_click', 'computer_move', 'computer_drag', 'computer_scroll', 'computer_type', 'computer_key', 'computer_paste', 'computer_space']);     // agenten gav selv skaermen tilbage (en loglinje, ikke to)              // hvert laan sit nummer: et gammelt laans slut roerer ikke et nyt
+let sidsteEgenHandling = 0;
+const klientNavn = () => server.getClientVersion?.()?.name || process.env.CMCP_CLIENT || null;
+async function meldListe() { try { await server.sendToolListChanged(); } catch { /* klienten lytter ikke */ } }
+
+async function skaermLaan(args) {
+  const handling = args.action || 'request';
+  const log = (decision, reason, asked = false) => record({ tool: 'computer_request_screen', tier: TIER.WRITE,
+    args: scrubArgs(args), mode: currentMode(), target: 'screen', decision, asked, ...(asked ? { asker: 'menubar', presence: tagMaaling() } : {}), reason });
+  if (currentMode() === 'readonly') {
+    log('denied', 'read-only mode');
+    return errorResult('Refused: read-only mode - the screen cannot be lent to an agent that may not touch anything.');
+  }
+  if (handling === 'status') {
+    return textResult({ screen: laanAktivt() ? 'lent to this agent' : baggrund() ? 'background - the person has it' : 'foreground (CMCP_BACKGROUND=0)',
+                        until: laanAktivt() ? new Date(laanTilTid()).toISOString() : null });
+  }
+  if (handling === 'release') {
+    const havde = laanAktivt();
+    laanAfgivet = true;
+    const h = laanHaandtag; h?.();              // lukker forbindelsen -> slut() rydder op, logger og melder listen
+    saetLaan(0); laanHaandtag = null;
+    return textResult({ released: havde, note: havde ? 'The screen is the person\'s again.' : 'This agent did not have the screen.' });
+  }
+  if (baggrundLaast()) {
+    log('denied', 'the person has locked this server to background mode');
+    return errorResult('Refused: the person has locked this server to background mode (CMCP_BACKGROUND is set), so the screen cannot be lent to an agent. ' +
+      'Use the quiet tools, or tell the person in the chat what you need.');
+  }
+  if (laanAktivt()) return textResult({ granted: true, already: true, until: new Date(laanTilTid()).toISOString() });
+  if (!baggrund()) return textResult({ granted: true, already: true, note: 'This server runs with CMCP_BACKGROUND=0: it already has the foreground.' });
+  const grund = String(args.reason || '').trim();
+  if (!grund) return errorResult('Refused: say in `reason` what you need the screen for - the person decides on that.');
+  // ⛔ R24 (Opus, MAALT): boksen viser hele spoergsmaalet - og Allow - kun op til 280 tegn
+  //    (BOKS_MAX_TEGN i ikonet). En laengere grund gav kun Deny i boksen, mens vejledningen
+  //    sendte mennesket netop dertil. Saa spoerges der ikke om den.
+  //    Loftet gaelder HELE spoergsmaalet - serveren saetter «Use your screen for N minutes: »
+  //    foran (maalt i 9c: en grund paa 280 gav et spoergsmaal paa 311).
+  const laanMin = Math.max(1, Math.min(15, Number.isInteger(args.minutes) ? args.minutes : 10));
+  const laanTekst = `Use your screen for ${laanMin} minutes: ${grund}`;
+  const plads = 280 - ([...laanTekst].length - [...grund].length);
+  if ([...laanTekst].length > 280) return errorResult(`Refused: \`reason\` is ${[...grund].length} characters - keep it to one sentence of at most ${plads}, so the person can read the whole question in the box in the corner of their screen and approve it there. Nobody was asked.`);
+  // Runde 1 (Fable F5): et laan der ikke kan skrives i loggen, gives ikke.
+  if (!loggenKanSkrives()) return errorResult(`Refused: the audit log at ${AUDIT_PATH} cannot be written, and the screen is not lent without a record.`);
+  // ⛔ Runde 2 (Astra 1): nummeret blev talt op FOER spoergsmaalet - en anden
+  //    anmodning (afvist som «already waiting») gjorde saa det godkendte laans
+  //    slut ugyldigt, og laanet sluttede aldrig. Nu faar kun et ja et nummer.
+  let nr = null, lukketFoerStart = false;
+  const min = Math.max(1, Math.min(15, Number.isInteger(args.minutes) ? args.minutes : 10));
+  const svar = await laanSkaermen({ session: SESSION, client: klientNavn(), text: laanTekst, minutter: min },
+    skaermVentetid(), async () => {
+      // Forbindelsen er lukket: tiden gik, mennesket tog skaermen, ikonet doede,
+      // eller agenten gav den tilbage. Kun DETTE laans slut taeller.
+      if (nr === null) { lukketFoerStart = true; return; }
+      if (nr !== laanNr) return;
+      saetLaan(0); laanHaandtag = null;
+      // ⛔ Runde 1 (Astra 4): et traek eller en skrivning der er i gang, stoppes.
+      const stoppet = afbrydSkaermKald();
+      record({ tool: 'computer_request_screen', outcome: 'ended',
+               reason: laanAfgivet ? 'the agent handed the screen back' : 'the screen went back to the person', ...(stoppet ? { stopped: stoppet } : {}) });
+      await meldListe();
+    });
+  log(svar.ok ? 'allowed' : 'denied', svar.grund, true);
+  if (!svar.ok) {
+    return errorResult(`Refused: ${svar.grund}. The screen stays with the person - use the quiet tools, and do not ask again with the same request.`);
+  }
+  if (lukketFoerStart) return errorResult('Refused: the screen was taken back the moment it was given. Ask again only if the person wants it.');
+  // Runde 2 (Astra F5): kan laanet ikke skrives i loggen efter ja'et, gives det ikke.
+  if (!loggenKanSkrives()) { svar.afslut?.(); return errorResult(`Refused: the audit log at ${AUDIT_PATH} cannot be written, and the screen is not lent without a record.`); }
+  nr = ++laanNr; laanAfgivet = false;
+  saetLaan(svar.til); laanHaandtag = svar.afslut;
+  record({ tool: 'computer_request_screen', outcome: 'lent', until: new Date(svar.til).toISOString() });
+  // Vores eget ur ogsaa: udloeber laanet, lukkes forbindelsen, og listen meldes.
+  const t = setTimeout(() => { if (nr === laanNr && !laanAktivt()) laanHaandtag?.(); }, Math.max(0, svar.til - Date.now()) + 50);
+  t.unref?.();
+  await meldListe();
+  return textResult({ granted: true, until: new Date(svar.til).toISOString(), minutes: min,
+    note: 'The tools that take the screen are offered to you until then. Each step waits while the person is using the keyboard or mouse. ' +
+          'Call computer_request_screen with action "release" as soon as you are done.' });
+}
+
+/// ⛔ Runde 4 (Astra 3 + Fable 1): hvordan blev teksten leveret? Baeres som et
+///    ikke-talt felt paa svaret. Runde 3 ledte efter «"method":"accessibility"» i
+///    svarets PROSA, hvor den aldrig stod - linjen kunne aldrig fyre.
+function medInput(r, res) {
+  Object.defineProperty(res, '__postedeInput', { value: r?.method !== 'accessibility', enumerable: false });
+  return res;
+}
+
+/// Samme soegning for trykket og for sende-portens --dry: ellers kunne porten
+/// doemme ét element og trykket ramme et andet.
+function trykArgv(args) {
+  const a = ['press', '--match-stdin', '--app', appArg(args)];
+  if (args.role) a.push('--role', String(args.role));
+  if (args.subrole) a.push('--subrole', String(args.subrole));
+  if (Number.isInteger(args.index)) a.push('--index', String(args.index));
+  if (args.first) a.push('--first');
+  const soeg = {};
+  if (args.title) soeg.title = String(args.title);
+  if (args.contains) soeg.contains = String(args.contains);
+  return { a, soeg };
+}
+
+/// ⛔ SENDE-PORTEN (29/9, dommen 28/9 D4 + trin 7). Er DETTE kald i en
+///    beskedapp en afsendelse? Returnerer null (nej), { afvis } eller
+///    { describe } - hvor teksten er skrevet af SERVEREN fra skaermen: hvem
+///    samtalen er med, og hvad der staar i feltet. Modellens egne ord kommer
+///    aldrig ind i den. Kan det ikke afgoeres, er svaret ja: hellere et
+///    spoergsmaal for meget end en besked ingen godkendte.
+/// Er menupunktets TASTATURGENVEJ en af dem der lukker eller sletter (Cmd+Q, Cmd+W …)?
+/// ⛔ 1/10 (konsulent-panelet): ord baerer ikke paa tvaers af sprog - «Slut Skak» slap
+///    igennem. Genvejen staar i programmets egen menu og er ens paa alle sprog.
+///    Kan punktet ikke slaas op, spoerges der (lukket, ikke aabent).
+async function menuGenvejErFarlig(app, path) {
+  try {
+    const dybde = Math.max(1, String(path).split('>').length);
+    const r = await callHelper(['menus', '--app', String(app), '--depth', String(dybde)]);
+    const p = (r?.items || []).find(x => x.path === path);
+    if (!p) return true;
+    return !!p.shortcut && tastSerFarlig(p.shortcut);
+  } catch { return true; }
+}
+
+/// Hedder knappen et tryk eller klik rammer, noget der sletter, rydder eller lukker?
+/// ⛔ 1/10 (konsulent-panelet, skaerm-koeen): README lover «Anything that deletes or
+///    clears asks every time, recognised from the words in the action itself» - men
+///    ordene blev kun laest paa menupunkter og genveje. En KNAP der hed «Slet» eller
+///    «Erase», trykket med computer_press eller ramt af et klik, spurgte aldrig.
+///    Samme ord som menuen. Kendes elementets navn ikke, kan det ikke doemmes herfra:
+///    et tryk der ikke kan slaas op, finder heller ikke noget at trykke paa.
+/// ⛔ 2/10 (Opus-panelet, canvas-spørgsmålet): den sætning gælder KUN press - et
+///    tryk der ikke kan slås op, rammer intet, så at fejle åbent er harmløst der.
+///    Et KOORDINAT-KLIK rammer skærmen uanset om opslaget her lykkes. Før stod
+///    "intet fundet"/"intet navn"/en fejl alle som `false` (ikke farligt) - netop
+///    de tre tilstande hvor serveren IKKE ved hvad der klikkes på (en canvas-tegnet
+///    dialog, et fjernskrivebord, et navnløst element). README's løfte holdt ikke
+///    på den vej: et "Delete" kunne rammes blindt uden at nogen blev spurgt. Et
+///    punkt vi ikke kan identificere, er nu farligt - spørg, fail CLOSED.
+/// ⛔ RETTET samme dag (CI, test/sende-port.mjs q9): den første udgave spurgte
+///    ved ETHVERT navnløst element, inklusiv en navnløs AXGroup - et helt
+///    almindeligt, harmløst layout-lag i Electron-apps. Sende-portens EGEN
+///    `navnSender` har allerede løst præcis dette (runde 2, Fable 2 - se
+///    kommentaren der): kun en rolle der plausibelt ER en knap (ukendt, eller
+///    Button/Image/Unknown) kan overhovedet VÆRE et "Slet", så kun DEN
+///    rolle-klasse spørger når navnet mangler. En gruppe kan ikke hedde "Delete".
+/// ⛔ RETTET samme dag igen (CI, test/e2e-forloeb.mjs "click --app tager ikke
+///    skaermen"): `at`-opslaget svarede `found:false` PAA EN HELT ALMINDELIG,
+///    navngivet NSButton ("klik-maal") - maalt fejl -25200. Forsøgte da at lade
+///    "punktet tilhører den app kaldet selv navngav" (targetBundleId === under)
+///    tælle som harmløst.
+/// ⛔ RETTET EN TREDJE GANG (review-security, 2/10, Critical, confidence 90):
+///    den rettelse genåbnede PRÆCIS det Opus-panelet fandt. Et fjernskrivebord
+///    eller en VM ejer sit eget vindue legitimt - "under" matcher ALTID "app"
+///    derinde, for hele pointen med en RDP-klient er at AX-laget aldrig kan se
+///    ind i den. At kende APPEN er ikke det samme som at kende ELEMENTET.
+///    Prøvede derefter et genforsøg 150ms senere (en ægte AX-kvirk burde være
+///    forbigående, et opaque fjernskrivebord ville fejle igen) - MÅLT at
+///    svigte: samme -25200 to gange i træk på den samme knap. Kvirken er ikke
+///    timing. Der er ingen billig måde at skelne "en helt almindelig knap AX
+///    tilfældigvis ikke kan slå op" fra "et fjernskrivebord der aldrig kan
+///    slås op" med kun ÉT punkt-opslag - så der gættes ikke mere. `found:false`
+///    spørger nu ALTID, uden undtagelse. computer_click bliver dyrere på en
+///    kendt AX-kvirk (test/e2e-forloeb.mjs's egen "klik-maal"-knap rammes af
+///    den) - det er prisen for at lukke hullet, og den er betalt med vilje.
+function kanVaereKnap(rolle) {
+  return !rolle || /^AX(Button|Image|Unknown)$/.test(String(rolle));
+}
+/// ⛔ 7/10 (panel R8, punkt I): et tryk hvis maal toerkoerslen ikke kan vise, spurgte
+///    mennesket (F5, fail-closed) - om et ja til noget der alligevel ikke kunne ske:
+///    toerkoersel og tryk bruger SAMME soegning og samme valg (main.swift `--dry`), saa
+///    `not-found` og `ambiguous` fejler ogsaa det rigtige tryk. Koden kalder det selv
+///    «et spildt og forvirrende samtykke» (se `computer_record` nedenfor). Nu afvises
+///    det uden at spoerge, med den samme tekst og de samme kandidater som det rigtige
+///    tryk ville have givet - vaerktoejets loefte til modellen er uaendret.
+///    Et tidsudloeb afvises ogsaa (bevidst stramning, Astra R8): intet vides om hvad
+///    der ville blive trykket, og et spoergsmaal kan ikke goere det vidst.
+async function trykForhaand(args) {
+  try {
+    const { a, soeg } = trykArgv(args);
+    const d = await callHelper([...a, '--dry'], { stdin: JSON.stringify(soeg), timeout: 15000 });
+    const el = d?.would_press;
+    if (!el) return { afvis: 'Refused: what would be pressed could not be determined. Nothing was pressed, and nobody was asked.', grund: 'press: target unknown' };
+    return { farlig: [el.name, ...(el.names || []), el.title].filter(Boolean).some(n => menuSerFarlig(n)), rolle: el.role };
+  } catch (err) {
+    if (err instanceof HelperError && (err.code === 'not-found' || err.code === 'ambiguous')) {
+      const ekstra = err.extra ? '\n\n' + JSON.stringify(err.extra, null, 2).slice(0, 1200) : '';
+      return { afvis: `Error (${err.code}): ${err.message}${ekstra}\n\nNothing was pressed, and nobody was asked.`, grund: `press: ${err.code}` };
+    }
+    if (err instanceof HelperError && err.code === 'helper-timeout') {
+      return { afvis: 'Refused: finding the element took too long, so what would be pressed could not be confirmed. Nothing was pressed, and nobody was asked. Try again.', grund: 'press: lookup timed out' };
+    }
+    return { afvis: `Refused: what would be pressed could not be determined (${err?.message || 'unknown error'}). Nothing was pressed, and nobody was asked.`, grund: 'press: lookup failed' };
+  }
+}
+/// Klikkets halvdel af porten. Trykkets ligger i `trykForhaand` (7/10): et klik kan
+/// ramme noget tilgaengelighedslaget ikke ser (canvas, fjernskrivebord), saa «intet
+/// fundet» spoerger her fortsat - et tryk uden fundet element kan slet ikke ske.
+async function knapErFarlig(name, args) {
+  if (name === 'computer_click' && Number.isFinite(args.x) && Number.isFinite(args.y)) {
+    try {
+      const d = await callHelper(['at', '--x', String(args.x), '--y', String(args.y)], { timeout: 8000 });
+      if (!d?.found) return true;
+      const navne = [d.title, d.description].filter(Boolean);
+      if (!navne.length) return kanVaereKnap(d.role);
+      return navne.some(n => menuSerFarlig(n));
+    } catch { return true; }
+  }
+  return false;
+}
+
+async function sendeDom(name, args, bid) {
+  let slags = beskedSlags(bid);
+  if (!slags) return null;
+  let s = null;
+  const laes = async () => s ??= await callHelper(['samtale', '--app', appVaerdi(args, bid)], { timeout: 15000 }).catch(() => ({}));
+  // Den kontrol et tryk eller klik rammer - slaaet op ÉN gang. `fejl` = opslaget
+  // mislykkedes; saa kan intet bindes, og en afsendelse afvises (runde 4, Astra 2).
+  let kontrolSvar;
+  const kontrol = async () => {
+    if (kontrolSvar !== undefined) return kontrolSvar;
+    try {
+      if (name === 'computer_press') {
+        const { a, soeg } = trykArgv(args);
+        const d = await callHelper([...a, '--dry'], { stdin: JSON.stringify(soeg), timeout: 15000 });
+        const el = d.would_press;
+        kontrolSvar = el ? { navne: [el.name, ...(el.names || []), el.title], rolle: el.role, vindue: el.window || null, ramme: el.frame || null, fundet: true }
+                         : { fejl: true };
+      } else if (name === 'computer_click') {
+        const d = await callHelper(['at', '--x', String(args.x), '--y', String(args.y)], { timeout: 8000 });
+        kontrolSvar = { navne: [d.title, d.description], rolle: d.role, vindue: d.window || null, ramme: d.frame || null,
+                        fundet: !!d.found, andetProgram: d.bundleId !== bid };
+      } else kontrolSvar = null;
+    } catch { kontrolSvar = { fejl: true }; }
+    return kontrolSvar;
+  };
+  // En browser er kun en beskedapp naar vinduet ER en webchat eller webmail. Runde 4
+  // (Astra 2): et tryk kan ramme en knap i et ANDET vindue end det fokuserede, saa
+  // baade det fokuserede vindues titel og kontrollens vindues titel doemmes.
+  if (slags === 'browser') {
+    const t = await callHelper(['samtale', '--app', appVaerdi(args, bid), '--title-only'], { timeout: 8000 }).catch(() => ({}));
+    const k = await kontrol();
+    // Runde 5 (Astra 2, Fable 1): en kontrol hvis vindue ikke kan laeses, er et ukendt
+    // vindue - det doemmes som den fokuserede titel doemmes: fejl-lukket, som en chat.
+    const titler = [String(t.window || '').trim(), ...(k ? [k.fejl ? '' : String(k.vindue || '').trim()] : [])];
+    // Kan en titel ikke laeses, ved vi ikke hvad siden er: behandl den som en chat (fejl lukket).
+    slags = titler.some(x => !x || WEBCHAT.test(x)) ? 'chat' : titler.some(x => WEBMAIL.test(x)) ? 'mail' : null;
+    if (!slags) return null;
+  }
+  // I en chat er et linjeskift - og ethvert andet styretegn end tab - en usynlig afsendelse.
+  if (name === 'computer_type' && slags === 'chat' && /[\p{Cc}\p{Zl}\p{Zp}]/u.test(String(args.text ?? '').replace(/\t/g, ''))) {
+    return { afvis: 'in a chat app a line break sends the message. Type the text without it, then send with ' +
+      'computer_key return - that asks the person first and shows them who it goes to and what it says.' };
+  }
+  // Et element UDEN navn er kun en mulig send-knap hvis det ER en knap (eller vi
+  // ikke ved hvad det er) - ikke et navnloest menupunkt i menulinjen (claim 35, 30/9).
+  // Ved et KLIK er et navnloest element kun en mulig send-knap hvis det er en knap eller
+  // et billede - i Electron-apps rammer et klik ofte en navnloes gruppe (Fable R2 2).
+  const navnSender = (navne, rolle = '', klik = false) => {
+    const n = navne.filter(Boolean).join(' ').trim();
+    if (n) return SENDE_ORD.test(n);
+    // Runde 3 (Astra 3): en UKENDT rolle er ogsaa ved et klik en mulig send - kun
+    // en KENDT ufarlig rolle (fx AXGroup) er undtaget.
+    // ⛔ 2/10: klik-grenen her var en ORD-FOR-ORD kopi af knapErFarlig's
+    // kanVaereKnap() (samme mønster genbrugt bevidst). To kopier af samme
+    // logik betyder at en mutation i den ene maskeres af den anden - MÅLT:
+    // mutant R3-ukendt-rolle-ufarlig overlevede, fordi knapErFarlig stadig
+    // spurgte af sin EGEN grund. Kalder nu den delte funktion direkte -
+    // én kilde, én mutation rammer begge gates' prøver.
+    return klik ? kanVaereKnap(rolle) : (!rolle || /^AX(Button|Image|Group|Unknown|Link)$/.test(String(rolle)));
+  };
+  let knapVindue = null, knapRamme = null, erKontrol = false;
+  let sender = false;
+  if (name === 'computer_key') {
+    sender = tastSender(args.combo, slags);
+    // Mellemrum trykker paa en knap der har fokus (runde 1, Astra 1).
+    if (!sender && /(^|\+)space$/i.test(String(args.combo || ''))) {
+      const rolle = String((await laes()).field?.role || '');
+      sender = !/^AX(TextArea|TextField|ComboBox|SearchField)$/.test(rolle);
+    }
+  }
+  if (name === 'computer_menu') sender = SENDE_ORD.test(String(args.path || '').split('>').pop() || '');
+  if (name === 'computer_press' || name === 'computer_click') {
+    // erKontrol FOER opslaget: et opslag der fejler, maa ikke springe bindingen over.
+    erKontrol = true;
+    const k = await kontrol();
+    if (!k || k.fejl) sender = true;
+    else {
+      // Intet element, et andet program foran, eller et element UDEN navn: vi ved ikke hvad det er - saa er det en mulig send.
+      sender = (name === 'computer_click' && (!k.fundet || k.andetProgram)) || navnSender(k.navne, k.rolle, name === 'computer_click');
+      knapVindue = k.vindue; knapRamme = k.ramme;
+    }
+  }
+  if (!sender) return null;
+  const sam = await laes();
+  // 1/10: en modtager laest fra samtalens top (og set i chatlisten) vinder over overskrifter.
+  const hvem = [...(sam.recipient ? [sam.recipient] : (sam.headings || []))].map(x => String(x || '').trim()).filter(Boolean);
+  const felt = sam.field || {};
+  // ⛔ Runde 2 (Astra 3): et soegefelt er ikke en besked, og uden kolonnen (feltets
+  //    ramme) er navnene ikke bundet til feltet. Og Send-knappen skal ligge i det
+  //    vindue hvis samtale mennesket faar vist.
+  const erBeskedfelt = /^AX(TextArea|TextField)$/.test(String(felt.role || '')) && felt.subrole !== 'AXSearchField';
+  const tekst = felt.secure || !erBeskedfelt ? null : (typeof felt.value === 'string' && felt.value.trim() ? felt.value : null);
+  // ⛔ Runde 3 (Astra 2): vinduet SKAL kunne laeses, og Send-kontrollen skal ligge
+  //    paa beskedfeltets raekke - saadan ligger den i chat-apps. Ellers kan knappen
+  //    hoere til et andet felt end det hvis tekst mennesket godkendte.
+  if (erKontrol) {
+    const f = felt.frame, k = knapRamme;
+    // Runde 4 (Astra 2): VED SIDEN AF feltet - samme raekke OG vandret lige ved det
+    // (inde i feltet eller hoejst 160 pt til hoejre). Kun lodret lod en knap langt
+    // til hoejre, i et andet felt eller vindue paa samme hoejde, passere.
+    const sammeRaekke = f && k && k.y < f.y + f.h + 16 && k.y + k.h > f.y - 16
+                        && k.x >= f.x - 16 && k.x <= f.x + f.w + 160;
+    if (!knapVindue || !sam.window || !sammeRaekke) {
+      return { afvis: 'the Send control could not be tied to the text field whose message would be sent (its window or position could not be read, or it is not next to that field). Nothing was sent. Ask the person to send it themselves.' };
+    }
+  }
+  if (knapVindue && sam.window && knapVindue !== sam.window) {
+    return { afvis: `the Send control is in the window "${String(knapVindue).slice(0, 60)}", not in the conversation shown ("${String(sam.window).slice(0, 60)}"), so a yes could not be tied to it. Nothing was sent.` };
+  }
+  if (hvem.length && sam.column !== true) {
+    return { afvis: 'the name of the conversation could not be tied to the text field (the field\'s position could not be read), so a yes could not be tied to who it goes to. Nothing was sent. Ask the person to send it themselves.' };
+  }
+  // ⛔ Runde 1 (Astra 3, Fable P4): kan modtager ELLER tekst ikke laeses, kan et ja
+  //    ikke bindes til det der sendes - og en genkontrol af to «ulaeselige» er
+  //    ingen kontrol. Saa sendes intet herfra; mennesket kan selv sende.
+  if (!hvem.length || !tekst) {
+    return { afvis: `${!hvem.length ? 'who this message goes to' : 'the text of this message'} could not be read from the screen, ` +
+      'so a yes could not be tied to what would actually be sent. Nothing was sent. Ask the person to send it themselves, ' +
+      'or open the conversation so its name is shown above the text field.' };
+  }
+  const fp = JSON.stringify({ w: sam.window || '', h: sam.headings || [], r: sam.recipient || '', v: felt.value, c: !!sam.column });
+  return { fp, describe: [
+    `Send a ${slags === 'mail' ? 'mail' : 'message'} in ${bid}.`,
+    `To (read from the screen, above the text field): ${hvem[0]}`,
+    `Message (read back from the field): “${tekst}”`
+  ].join(' ') };
+}
+
 export function hvorforSpoerg(name, args, { usloeretBillede, optagStart }) {
   if (optagStart) return 'Password managers are left out, but one opened mid-recording can show for a moment. Password fields elsewhere are NOT blacked out.';
   if (usloeretBillede) return 'Password fields will NOT be blacked out in this image, and the image goes to the agent.';
@@ -379,11 +805,32 @@ async function optag(args) {
     note: 'Recording. Call computer_record with action "stop" to finish the file.' });
 }
 
+/// ⛔ R17 (Astra + Opus, enige 9/10): navnet fortolkes ÉN gang - af porten. Har porten
+///    fundet et KOERENDE program, faar alt efter porten (forhaandstjek, genmaaling og
+///    levering) det valgte id som `=<id>`: hjaelperen og findProgram slaar saa KUN det
+///    praecise id op og afviser, hvis programmet er vaek - ingen navne, ingen store/smaa.
+///    Tekst, samtykke og log beholder agentens navn (args.app er uroert).
+///    Opstart af et lukket program beholder navnet: et id ville lade Launch Services
+///    vaelge enhver kopi der paastaar id'et (programURL, 24/9).
+const BUNDET = Symbol('bundet maal');
+// Roller hvis tryk eller tast aabner en menu (R28, 10/10): en menu fra et program bagved tegnes paa
+// menneskets skaerm og fanger mus og tastatur, til mennesket selv lukker den.
+const MENU_ROLLER = new Set(['AXPopUpButton', 'AXMenuButton', 'AXComboBox', 'AXMenuBarItem']);
+// Menuvagten gaelder i baggrunden uden laan; under laan (eller i forgrunden) maa en menu aabnes.
+const menuVagt = () => baggrund() && !laanAktivt();
+const menuFlag = (args) => (args.app && menuVagt() ? ['--menu-vagt'] : []);
+const appArg = (args) => (args[BUNDET] ? `=${args[BUNDET]}` : String(args.app));
+/// Et id serveren selv har i haanden (fx porten maal), i den bundne form naar kaldet er bundet
+/// til netop det id (R18, Astra: sendeportens og vinduernes opslag fik det ubundne id).
+const appVaerdi = (args, bid) => (args[BUNDET] && args[BUNDET] === bid ? `=${bid}` : bid);
+
 async function runTool(name, args) {
   switch (name) {
     case 'computer_permissions': {
       const r = await callHelper(['permissions']);
+      const omveje = klientOmveje();
       return textResult({
+        ...omveje,
         accessibility: r.accessibility,
         screenRecording: r.screenRecording,
         macos: r.macos,
@@ -397,7 +844,7 @@ async function runTool(name, args) {
     }
     case 'computer_apps': return textResult(await callHelper(['apps']));
     case 'computer_windows': {
-      const a = ['windows']; if (args.app) a.push('--app', String(args.app));
+      const a = ['windows']; if (args.app) a.push('--app', appArg(args));
       return textResult(await callHelper(a));
     }
     case 'computer_inspect': {
@@ -414,7 +861,7 @@ async function runTool(name, args) {
       //
       //    `format: 'json'` findes stadig for den der vil have rammer og dybde.
       const a = ['inspect'];
-      if (args.app) a.push('--app', String(args.app));
+      if (args.app) a.push('--app', appArg(args));
       a.push('--depth', String(args.depth ?? 40), '--limit', String(args.limit ?? 1500));
       const r = await callHelper(a);
       const noder = r?.nodes || [];
@@ -490,16 +937,42 @@ async function runTool(name, args) {
       });
     }
     case 'computer_launch': {
-      const r = await callHelper(['launch', '--app', String(args.app),
+      const r = await callHelper(['launch', '--app', appArg(args),
         ...(args.background ? ['--background'] : [])]);
       return medSkaerm(textResult(r), r);
     }
+    case 'computer_open': {
+      // Doeren. Modellen giver et intent + EN parameter, aldrig en URL. Serveren
+      // bygger URL'en af en fast skabelon og validerer parameteren strengt, saa
+      // KUN cifre/bogstaver kan passere - ingen injektion, ingen fri scheme.
+      const intent = String(args.intent || '');
+      if (intent === 'open_app') {
+        const bid = String(args.bundleId || '');
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/.test(bid)) return errorResult('Refused: open_app needs a valid bundle id like com.spotify.client. Nothing was done.');
+        const r = await callHelper(['launch', '--app', bid, '--background']);
+        return medSkaerm(textResult(r), r);
+      }
+      let url;
+      if (intent === 'play_track') {
+        const id = String(args.spotifyId || '');
+        if (!/^[0-9A-Za-z]{22}$/.test(id)) return errorResult('Refused: play_track needs a 22-character Spotify track id (letters and digits only). Nothing was done.');
+        url = `spotify:track:${id}`;
+      } else if (intent === 'open_chat') {
+        const phone = String(args.phone || '').replace(/[\s()-]/g, '');
+        if (!/^\+?\d{4,15}$/.test(phone)) return errorResult('Refused: open_chat needs a phone number in international form, e.g. +4560174569. Nothing was done.');
+        url = `whatsapp://send?phone=${encodeURIComponent(phone.replace(/^\+/, ''))}`;
+      } else {
+        return errorResult(`Refused: unknown intent '${intent}'. Use open_app, play_track or open_chat. Nothing was done.`);
+      }
+      const r = await callHelper(['open-url', '--url', url]);
+      return medSkaerm(textResult(r), r);
+    }
     case 'computer_quit': {
       // ⛔ 23/9: svaret baar intet `took_screen`, saa loggen kunne ikke goere
       //    det op for den her vej. Et program der rejser et «vil du gemme?»-ark
       //    kan hive sig selv frem - og det skal staa der, ogsaa naar det ikke
       //    var os der gjorde det.
-      const r = await callHelper(['quit', '--app', String(args.app)]);
+      const r = await callHelper(['quit', '--app', appArg(args)]);
       return medSkaerm(textResult(r), r);
     }
     case 'computer_drag':
@@ -520,7 +993,7 @@ async function runTool(name, args) {
       return textResult(await callHelper(a, { stdin: String(args.text) }));
     }
     case 'computer_window': {
-      const base = ['--app', String(args.app)];
+      const base = ['--app', appArg(args)];
       if (args.title) base.push('--title', String(args.title));
       if (Number.isInteger(args.index)) base.push('--index', String(args.index));
       if (args.button) {
@@ -550,13 +1023,13 @@ async function runTool(name, args) {
       return medSkaerm(textResult(rw), rw);
     }
     case 'computer_menus': {
-      const a = ['menus', '--app', String(args.app)];
+      const a = ['menus', '--app', appArg(args)];
       if (Number.isInteger(args.depth)) a.push('--depth', String(args.depth));
       return textResult(await callHelper(a));
     }
     case 'computer_menu': {
       // took_screen: et menupunkt kan faa programmet til at hente sig selv frem (27/9).
-      const r = await callHelper(['menu-click', '--app', String(args.app), '--path', String(args.path)]);
+      const r = await callHelper(['menu-click', '--app', appArg(args), '--path', String(args.path)]);
       return medSkaerm(textResult(r), r);
     }
     case 'computer_displays':
@@ -565,7 +1038,7 @@ async function runTool(name, args) {
     case 'computer_screenshot': {
       const out = join(tmpdir(), `cmcp-${randomUUID()}.png`);
       const a = ['screenshot', '--out', out, '--max-width', String(args.maxWidth ?? 1400)];
-      if (args.app) a.push('--app', String(args.app));
+      if (args.app) a.push('--app', appArg(args));
       if (args.redact === false) a.push('--no-redact');
       if (Number.isInteger(args.displayId)) a.push('--display-id', String(args.displayId));
       else if (Number.isInteger(args.display)) a.push('--display', String(args.display));
@@ -611,7 +1084,7 @@ async function runTool(name, args) {
       //    hemmelige, kaldet gjorde ikke. De gaar nu paa stdin, som den skrevne
       //    tekst har gjort siden 18/9.
       const a = ['find', '--match-stdin'];
-      if (args.app) a.push('--app', String(args.app));
+      if (args.app) a.push('--app', appArg(args));
       if (args.role) a.push('--role', String(args.role));
       if (args.subrole) a.push('--subrole', String(args.subrole));
       a.push('--depth', String(args.depth ?? 24), '--limit', String(args.limit ?? 25));
@@ -631,7 +1104,7 @@ async function runTool(name, args) {
       //    hemmelige, kaldet gjorde ikke. De gaar nu paa stdin, som den skrevne
       //    tekst har gjort siden 18/9.
       const a = ['set-value', '--match-stdin'];
-      if (args.app) a.push('--app', String(args.app));
+      if (args.app) a.push('--app', appArg(args));
       if (args.role) a.push('--role', String(args.role));
       if (args.subrole) a.push('--subrole', String(args.subrole));
       if (Number.isInteger(args.index)) a.push('--index', String(args.index));
@@ -655,7 +1128,7 @@ async function runTool(name, args) {
       //    hemmelige, kaldet gjorde ikke. De gaar nu paa stdin, som den skrevne
       //    tekst har gjort siden 18/9.
       const a = ['wait-for', '--match-stdin'];
-      if (args.app) a.push('--app', String(args.app));
+      if (args.app) a.push('--app', appArg(args));
       if (args.role) a.push('--role', String(args.role));
       if (args.subrole) a.push('--subrole', String(args.subrole));
       const soeg = {};
@@ -675,26 +1148,57 @@ async function runTool(name, args) {
       //    felter, fordi de baerer hemmeligheder - loggen behandlede dem som
       //    hemmelige, kaldet gjorde ikke. De gaar nu paa stdin, som den skrevne
       //    tekst har gjort siden 18/9.
-      const a = ['press', '--match-stdin', '--app', String(args.app)];
-      if (args.role) a.push('--role', String(args.role));
-      if (args.subrole) a.push('--subrole', String(args.subrole));
-      if (Number.isInteger(args.index)) a.push('--index', String(args.index));
-      if (args.first) a.push('--first');
-      const soeg = {};
-      if (args.title) soeg.title = String(args.title);
-      if (args.contains) soeg.contains = String(args.contains);
-      const r = await callHelper(a, { stdin: JSON.stringify(soeg) });
+      const { a, soeg } = trykArgv(args);
+      const r = await callHelper([...a, ...menuFlag(args)], { stdin: JSON.stringify(soeg) });
       // press udfoerer elementets EGEN handling og faar svar fra programmet.
       return medSkaerm(medEffekt(textResult(r), 'performed'), r);
     }
     case 'computer_ask_user': {
-      // ⛔ SERVEREN skriver hvor det lander, ikke modellen. En
-      //    prompt-indsproejtning kan formulere `message` - den kan ikke
-      //    formulere denne linje.
+      // ⛔ 29/9 (panelet): i baggrund tager en dialog skaermen, saa spoergsmaalet
+      //    gaar til menulinje-ikonet. Mennesket henter selv programmet frem
+      //    («Take me there» er DERES klik), taster og vaelger «Done». Et Done er
+      //    et signal, ikke et samtykke - det kan aldrig give lov til en handling.
+      if (baggrund()) {
+        if (!args.app) {
+          return errorResult('Refused: in background mode, name the `app` whose field the person should use - the field you put the cursor in with computer_press. ' +
+            'The question then waits in the box in the corner of their screen and under the menu bar icon, and nothing is brought to the front.');
+        }
+        const bid = await resolveBundleId(appArg(args));
+        if (!bid) return errorResult(`Refused: '${args.app}' is not running, so there is no field to type in. Use computer_apps for the exact name.`);
+        let titel = null;
+        try {
+          const w = await callHelper(['windows', '--app', appVaerdi(args, bid)], { timeout: 8000 });
+          titel = ((w && w.windows) || [])[0]?.title || null;
+        } catch { titel = null; }
+        // SERVEREN skriver hvor, ikke modellen.
+        const hvorIkon = titel ? `${bid} - the window "${String(titel).slice(0, 70)}"` : bid;
+        const svar = await spoergOmGoerSelv({
+          session: SESSION, client: server.getClientVersion?.()?.name || process.env.CMCP_CLIENT || null,
+          text: String(args.message),
+          scope: 'You do this yourself. Computer MCP does not see what you type, and it is not written to the log.',
+          target: hvorIkon, targetBundle: bid
+        }, askTimeout());
+        if (svar.ikkeSpurgt) {
+          return errorResult(`Refused: ${svar.grund}. Nothing was asked and nothing was brought to the front. ` +
+            'Tell the person in the chat what you need them to do.');
+        }
+        const res = textResult(svar.ok
+          ? { done: true, hvor: hvorIkon, via: 'menu bar', note: 'The person says it is done. We did not see what was typed, and it is not in the log.' }
+          : { done: false, cancelled: true, hvor: hvorIkon, via: 'menu bar', note: `${svar.grund}. Do not ask again with the same request.` });
+        // ⛔ 7/10 (Astra R10): spoergsmaalet her gik til menulinjen, men maalingen (punkt P)
+        //    naaede aldrig loggen - den stod kun paa de veje porten selv spoerger ad.
+        //    Den baeres til udfaldslinjen som et usynligt felt, samme moenster som effekten.
+        const maaling = tagMaaling();
+        if (maaling) Object.defineProperty(res, '__presence', { value: maaling, enumerable: false });
+        return res;
+      }
+      // Forgrund: dialogen. SERVEREN skriver hvor det lander, ikke modellen. En
+      // prompt-indsproejtning kan formulere `message` - den kan ikke formulere
+      // denne linje.
       let hvor = null;
       try {
         const bid = await frontmostBundleId();
-        const w = bid ? await callHelper(['windows', '--app', String(bid)], { timeout: 8000 }) : null;
+        const w = bid ? await callHelper(['windows', '--app', appVaerdi(args, String(bid))], { timeout: 8000 }) : null;
         const titel = ((w && w.windows) || [])[0]?.title;
         hvor = bid ? (titel ? `${bid} - the window "${String(titel).slice(0, 70)}"` : bid) : null;
       } catch { hvor = null; }
@@ -707,7 +1211,7 @@ async function runTool(name, args) {
     case 'computer_click': {
       const r = await callHelper(['click', '--x', String(args.x), '--y', String(args.y),
         '--button', String(args.button || 'left'), '--count', String(args.count || 1),
-        ...(args.app ? ['--app', String(args.app)] : [])]);
+        ...(args.app ? ['--app', appArg(args)] : [])]);
       // ⛔ MAALT 22/9 i e2e-forloebet: et klik leveret til en proces-koe
       //    LANDEDE IKKE - knappen skiftede ikke titel. Og svaret sagde
       //    «Clicked at 395, 245. The pointer stayed where the person left it»,
@@ -732,7 +1236,7 @@ async function runTool(name, args) {
       return textResult('The pointer moved.');
     case 'computer_scroll': {
       const r = await callHelper(['scroll', '--dx', String(args.dx || 0), '--dy', String(args.dy || 0),
-        ...(args.app ? ['--app', String(args.app)] : [])]);
+        ...(args.app ? ['--app', appArg(args)] : [])]);
       return medSkaerm(textResult('Scrolled.' + stilleNote(args.app, r)), r);
     }
     case 'computer_type':
@@ -742,21 +1246,21 @@ async function runTool(name, args) {
       //    Hjaelperen har haft --stdin siden 18/9; JS-siden brugte den aldrig.
       //    Det var altsaa et udgivet loefte der var usandt i den udgivne kode.
       const r = await callHelper(['type', '--stdin', '--cps', String(args.cps || 240),
-        ...(args.app ? ['--app', String(args.app)] : [])],
+        ...(args.app ? ['--app', appArg(args)] : []), ...menuFlag(args)],
         { timeout: Math.max(30000, String(args.text).length * 60), stdin: String(args.text) });
       // Med et navngivet program skriver hjaelperen i programmets fokuserede felt og
       // laeser det tilbage (27/9). Kun det kan kaldes «verified»; tastetryk kvitteres ikke.
       if (r?.method === 'accessibility' && r?.verified === true) {
-        return medEffekt(medSkaerm(textResult(`Typed ${String(args.text).length} characters into the field ${args.app} has focus in, and read them back.` + stilleNote(args.app, r)), r), 'verified');
+        return medInput(r, medEffekt(medSkaerm(textResult(`Typed ${String(args.text).length} characters into the field ${args.app} has focus in, and read them back.` + stilleNote(args.app, r)), r), 'verified'));
       }
-      return medEffekt(medSkaerm(textResult(`Typed ${String(args.text).length} characters.` + (args.app ? ' Sent as keystrokes to the app\'s own queue; the app does not confirm them, so read the field back if it matters.' : '') + stilleNote(args.app, r)), r), 'sent');
+      return medInput(r, medEffekt(medSkaerm(textResult(`Typed ${String(args.text).length} characters.` + (args.app ? ' Sent as keystrokes to the app\'s own queue; the app does not confirm them, so read the field back if it matters.' : '') + stilleNote(args.app, r)), r), 'sent'));
     case 'computer_key': {
       const r = await callHelper(['key', '--combo', String(args.combo),
-        ...(args.app ? ['--app', String(args.app)] : [])]);
+        ...(args.app ? ['--app', appArg(args)] : []), ...menuFlag(args)]);
       return medEffekt(medSkaerm(textResult(`Pressed ${args.combo}.` + stilleNote(args.app, r)), r), 'sent');
     }
     case 'computer_activate':
-      await callHelper(['activate', '--app', String(args.app)]);
+      await callHelper(['activate', '--app', appArg(args)]);
       return textResult(`Switched to ${args.app}.`);
     default:
       throw new HelperError(`unknown tool: ${name}`, 'unknown-tool');
@@ -826,11 +1330,21 @@ async function haandterKald(request) {
     return errorResult(`Refused: ${skemaFejl}. Nothing was sent to the Mac.`);
   }
 
+  // ⛔ Runde 4 (Astra 1): laanets tilstand tages ved KALDETS START - foer den
+  //    foerste vagt hvis udfald afhaenger af laanet (aktiv-program-vagten laeser
+  //    baggrund()). Lige foer handlingen skal tilstanden vaere den samme; er et laan
+  //    sluttet, begyndt eller skiftet undervejs, sker handlingen ikke.
+  const laanVedDom = laanOejeblik();
+
+  // Skaerm-laanet spoerger selv (i ikonet) og roerer intet program.
+  if (name === 'computer_request_screen') return skaermLaan(args);
+
   // Hvilket program rammer handlingen? For computer_activate er det det
   // program der skiftes TIL, og for computer_press det program elementet
   // ligger i - ellers det der er forrest og altsaa modtager
   // klikket eller tastetrykket.
   let targetBundleId = null;
+  let koerendeMaal = null;
   if (tool.tier !== TIER.READ || (name === 'computer_screenshot' && args.redact === false)) {
     // ⛔ RETTET 21/9. Hvis kaldet NAVNGIVER et program, er det programmet
     //    der rammes - ikke det der tilfaeldigvis er forrest. Foer i dag
@@ -841,6 +1355,39 @@ async function haandterKald(request) {
     targetBundleId = args.app
       ? await resolveBundleId(args.app)
       : await frontmostBundleId();
+    // R17: et navngivet program porten fandt blandt de koerende (ikke intent, ikke disk).
+    if (args.app) koerendeMaal = targetBundleId;
+    // Doeren navngiver sit maal via intent'et (ikke via args.app), saa porten
+    // ser den rigtige app - ikke det der tilfaeldigvis er forrest - og ikke
+    // kalder den "ukendt maal" og spoerger. Et ugyldigt intent giver null, som
+    // saa afvises af porten, praecis som det skal.
+    if (name === 'computer_open') {
+      targetBundleId = args.intent === 'open_app' ? (args.bundleId ? String(args.bundleId) : null)
+        : args.intent === 'play_track' ? 'com.spotify.client'
+        : args.intent === 'open_chat' ? 'net.whatsapp.WhatsApp'
+        : null;
+      // ⛔ R19 (Opus, MAALT): «bundleId: "Passwords"» blev doemt som id'et «Passwords» - ikke paa
+      //    adgangskode-listen - mens hjaelperen startede Adgangskoder ved NAVN. Ogsaa «com.apple.passwords»
+      //    (listen sammenligner praecist). Nu: det program hjaelperen ville starte, skal have PRAECIS den
+      //    streng agenten skrev som id - ellers afvises kaldet, i alle tilstande.
+      if (args.intent === 'open_app' && targetBundleId) {
+        // Samme formkrav som leveringen - FOER opslaget, saa ingen spoerges om noget der afvises (R20, Opus).
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/.test(targetBundleId)) {
+          record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(),
+                   decision: 'denied', asked: false, reason: 'open_app needs a valid bundle id' });
+          return errorResult('Refused: open_app needs a valid bundle id like com.spotify.client. Nothing was done.');
+        }
+        let r = null;
+        try { r = await callHelper(['resolve-app', '--app', targetBundleId], { timeout: 15000 }); } catch {}
+        if (r?.bundleId !== targetBundleId) {
+          const grund = `open_app needs the exact bundle id - '${targetBundleId}' ${r?.bundleId ? `resolves to ${r.bundleId}` : 'is not an installed app'}`;
+          // Loggen faar en fast grund - aldrig modellens streng (Astra 25/9).
+          record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(),
+                   target: r?.bundleId || null, decision: 'denied', asked: false, reason: 'open_app needs the exact bundle id' });
+          return errorResult(`Refused: ${grund}. Pass the bundle id itself. Nothing was done.`);
+        }
+      }
+    }
     // ⛔ FABLE 24/9: et LUKKET program findes ikke blandt de koerende, saa
     //    `computer_launch` blev altid «ukendt maal» og afvist - vaerktoejet
     //    kunne ikke det ene det er til. Hjaelperen svarer nu med det bundle-id
@@ -911,6 +1458,17 @@ async function haandterKald(request) {
     //    det farligste. Kan ejeren ikke opsloas, er maalet ukendt - og et
     //    ukendt maal spoerger, som alle andre steder i porten.
     koordinatEjereFoer = ejerUkendt ? null : ejere.slice();
+    // ⛔ 7/10 (panel R8, punkt I): et ukendt ejer-opslag spurgte mennesket - og
+    //    genmaalingen lige foer handlingen (maalErStadigForsvarligt) afviste saa det
+    //    samme opslag EFTER ja'et. Et spildt samtykke. Nu afvises det her, uden at
+    //    spoerge. Bevidst stramning (Astra R8): kun et andet opslag, der tilfaeldigvis
+    //    lykkedes, kunne foer naa igennem. Readonly faar sin egen grund fra decide.
+    if (ejerUkendt && currentMode() !== 'readonly') {
+      record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(),
+               decision: 'denied', asked: false, reason: 'coordinates: the owner of the point is unknown' });
+      return errorResult('Refused: the app under that point could not be identified, so nobody could be asked about the right app. ' +
+        'Nothing was done, and nobody was asked. Locate the element with computer_find (or take a screenshot) and try again.');
+    }
     if (ejerUkendt) targetBundleId = null;
     else if (ejere.length) {
       targetBundleId = ejere.find(b => ALWAYS_ASK_APPS.has(b))
@@ -951,6 +1509,11 @@ async function haandterKald(request) {
     return errorResult(`Refused: ${grund}. It is where the person watches the agents and answers them; an agent may not press anything in it.`);
   }
 
+  // R17: fra her rammer alt det koerende program porten vurderede - se appArg.
+  //    Ogsaa et usloeret skaermbillede, som porten vurderer som en skrivning (R18, Astra).
+  if (args.app && koerendeMaal && koerendeMaal === targetBundleId
+      && (tool.tier !== TIER.READ || (name === 'computer_screenshot' && args.redact === false))) args[BUNDET] = koerendeMaal;
+
   // `computer_ask_user` viser selv en dialog til mennesket - den ER
   // samtykke-oejeblikket. Spurgte porten foerst, ville mennesket faa to
   // dialoger for ét spoergsmaal. Den er stadig WRITE-niveau, saa den er skjult
@@ -1029,7 +1592,7 @@ async function haandterKald(request) {
     'computer_click', 'computer_press', 'computer_set_value', 'computer_menu']);
   if (baggrund() && ROERER_I_PROGRAMMET.has(name) && args.app
       && (!KAN_STILLES.has(name) || kaldErStille(name, args))) {
-    const maal = await resolveApp(args.app);
+    const maal = await resolveApp(appArg(args));
     if (maal?.active) {
       const t0 = TOOL_BY_NAME.get(name);
       const grund0 = 'background mode: the named app is the one the person is using right now';
@@ -1061,7 +1624,11 @@ async function haandterKald(request) {
 
   if (baggrund() && KAN_STILLES.has(name) && !kaldErStille(name, args)) {
     const t = TOOL_BY_NAME.get(name);
-    const grund = 'background mode: no app named, so it would go to the global input stream';
+    // 1/10 (Astra): de tre launch-afvisninger i loggen sagde «no app named», men alle
+    // havde et program - de manglede `background: true`. Grunden siger nu det rigtige.
+    const grund = name === 'computer_launch'
+      ? 'background mode: started without background: true, so it would bring the app to the front'
+      : 'background mode: no app named, so it would go to the global input stream';
     record({ tool: name, tier: t?.tier, args: scrubArgs(args), mode: currentMode(),
              decision: 'denied', reason: grund });
     // ⛔ FANGET AF HUSETS EGEN VAGT (paastand 33), samme time som porten blev
@@ -1075,7 +1642,7 @@ async function haandterKald(request) {
       `so the person would see it happen.\n\n` +
       `Set \`${MANGLER_FOR_STILLE[name]}\` and call it again. ` +
       `The event then goes into that app's own queue: the pointer stays where ` +
-      `the person left it, nothing comes to the front, and it works on a window ` +
+      `the person left it, this call pulls nothing to the front, and it works on a window ` +
       `behind the one they are in.\n` +
       `Use computer_apps or computer_windows if you are unsure of the name.`
     );
@@ -1091,8 +1658,8 @@ async function haandterKald(request) {
       `The action was: ${describe(name, args)}\n` +
       `In background mode the server never moves the pointer, sends a key press, ` +
       `brings an app forward, switches desktop, or raises a dialog of its own.\n` +
-      `If the person genuinely needs this tool, they can set CMCP_BACKGROUND=0 - ` +
-      `but ask them first, and say why.\n` +
+      `If this step genuinely needs the screen, ask the person to lend it to you with ` +
+      `computer_request_screen - they approve it in the box in the corner of their screen (or the menu bar), for a few minutes.\n` +
       `Otherwise use the quiet route: computer_find to locate the element, then ` +
       `computer_press or computer_set_value - they act on a window behind another ` +
       `one and leave the pointer where the person put it.`
@@ -1118,6 +1685,45 @@ async function haandterKald(request) {
     );
   }
 
+  // ⛔ SENDE-PORTEN (29/9): en afsendelse i en beskedapp spoerger HVER gang,
+  //    med modtager og tekst laest fra skaermen af serveren.
+  // ⛔ 7/10 (panel R8, punkt J): i readonly afviser `decide` alle skrivende kald.
+  //    Sende-porten koerte alligevel FOER - laeste samtalen paa skaermen og afviste
+  //    med SIN grund, saa loggen sagde «Send control could not be tied» om et kald
+  //    der var afvist af readonly. Readonly afgoeres nu foerst: ingen `samtale`- eller
+  //    toerkoersels-opslag for et kald der alligevel ikke maa ske.
+  const kunLaes = currentMode() === 'readonly';
+  // Punkt I: et tryk hvis maal ikke kan vises, afvises her - foer sende-porten og
+  // foer noget spoergsmaal (se trykForhaand).
+  let trykDom = null;
+  if (name === 'computer_press' && effektivTier !== TIER.READ && !kunLaes) {
+    trykDom = await trykForhaand(args);
+    // ⛔ R28 (maalt 10/10, findes i alle udgivne versioner): et tryk paa en rullemenu bagved aabner
+    //    menuen paa menneskets skaerm, og den bliver staaende og fanger mus og tastatur, til de selv
+    //    lukker den. README lover at rullemenuer er uden for raekkevidde i baggrunden.
+    if (!trykDom.afvis && menuVagt() && MENU_ROLLER.has(trykDom.rolle)) {
+      trykDom = { afvis: `Refused: pressing this ${trykDom.rolle} opens a menu, and a menu from an app behind is drawn on the person's screen and holds their mouse and keyboard until they close it. Nothing was pressed. To use a menu or choose in a pop-up, ask for the screen with computer_request_screen first (a pop-up's value cannot be set from behind).`,
+                  grund: `press: would open a menu on the person's screen (${trykDom.rolle})` };
+    }
+    if (trykDom.afvis) {
+      record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(), target: targetBundleId,
+               decision: 'denied', asked: false, reason: trykDom.grund });
+      return errorResult(trykDom.afvis);
+    }
+  }
+  const sende = (effektivTier === TIER.READ || kunLaes) ? null : await sendeDom(name, args, targetBundleId);
+  if (sende?.afvis) {
+    record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(), target: targetBundleId,
+             decision: 'denied', asked: false, reason: `send port: ${sende.afvis}` });
+    return errorResult(`Refused: ${sende.afvis}\n\nNothing was typed.`);
+  }
+
+  const menuFarlig = name === 'computer_menu' && effektivTier !== TIER.READ
+    && (menuSerFarlig(args.path) || await menuGenvejErFarlig(appArg(args), args.path));
+  const knapFarlig = effektivTier !== TIER.READ && !kunLaes && (
+    name === 'computer_press' ? !!trykDom?.farlig
+    : name === 'computer_click' ? await knapErFarlig(name, args) : false);
+
   const verdict = name === 'computer_ask_user'
     ? (currentMode() === 'readonly'
         ? { allow: false, asked: false,
@@ -1132,7 +1738,7 @@ async function haandterKald(request) {
         //    og der stod ingen sti. Man godkendte i blinde.
         //    `describe` viser stien og knappen, og laekker IKKE skrevet tekst
         //    («Type 11 characters»). Status og koe beholder den korte tekst.
-        tier: effektivTier, targetBundleId, describe: describe(name, args),
+        tier: effektivTier, targetBundleId, describe: sende?.describe || describe(name, args),
         ikon: { session: SESSION, client: server.getClientVersion?.()?.name || process.env.CMCP_CLIENT || null },
         aldrigViaIkonet: usloeretBillede,
         // Et menupunkt der ser ud til at slette noget, spoerger hver gang -
@@ -1140,7 +1746,7 @@ async function haandterKald(request) {
         // At lukke et vindue kan tabe ugemt arbejde. Flytte og aendre kan ikke.
         // At starte et program kan intet tabe. At afslutte det kan. De to deler
         // derfor ikke port, selv om de ligner hinanden.
-        alwaysAsk: (name === 'computer_menu' && menuSerFarlig(args.path))
+        alwaysAsk: menuFarlig || knapFarlig
                 || (name === 'computer_key' && tastSerFarlig(args.combo))
                || (name === 'computer_window' && args.button === 'close')
                || name === 'computer_quit'
@@ -1149,8 +1755,10 @@ async function haandterKald(request) {
                // Samme regel som at afslutte et program: spoerg hver gang.
                || name === 'computer_space'
                || usloeretBillede
-               || optagStart,
-        hvorfor: hvorforSpoerg(name, args, { usloeretBillede, optagStart })
+               || optagStart
+               || !!sende,
+        hvorfor: sende ? 'A message to a real person cannot be taken back. This yes covers this one message only.'
+                       : hvorforSpoerg(name, args, { usloeretBillede, optagStart })
       });
 
   record({
@@ -1164,7 +1772,7 @@ async function haandterKald(request) {
     //    formaal er at kunne besvare hvad der skete. Ingen hemmelighed slipper
     //    ud; beviset bliver falsk. Saa staar det i linjen.
     ...(process.env.CMCP_OSASCRIPT && verdict.asker !== 'menubar' ? { asker: 'custom' } : {}),
-    ...(verdict.asker === 'menubar' ? { asker: 'menubar' } : {}),
+    ...(verdict.asker === 'menubar' ? { asker: 'menubar', presence: tagMaaling() } : {}),
     decision: verdict.allow ? 'allowed' : 'denied', asked: verdict.asked, reason: verdict.reason
   });
 
@@ -1181,7 +1789,30 @@ async function haandterKald(request) {
   //    laasen kan vente op til et minut paa en anden agent. I det minut kunne
   //    mennesket naa at skifte ind i programmet, og tjekket var allerede koert.
   //    Nu koeres det INDE i laasen, umiddelbart foer handlingen udfoeres.
+  // Punkt D: vent paa at mennesket holder pause (se kaldet foer loglinjen).
+  const ventPaaStilhed = async (vedDom) => {
+    const graense = Math.max(1.5, Number(process.env.CMCP_MENNESKE_SEK) || 0);
+    const slut = Date.now() + 5000;
+    while (laanAktivt() && laanOejeblik() === vedDom && Date.now() < slut) {
+      // ⛔ 7/10 (Astra R10, MAALT 6,7 s): hvert opslag fik hele sin frist paa 2 s - ogsaa
+      //    det sidste, der startede lige foer loftet. Nu faar det hoejst resttiden.
+      const tilbage = slut - Date.now();
+      if (tilbage < 100) return;
+      let m = null;
+      try { m = await callHelper(['idle'], { timeout: Math.min(2000, tilbage) }); } catch { m = null; }
+      const idle = Number(m?.idle);
+      if (!(idle >= 0)) return;              // ulaeseligt: den endelige vagt afgoer det (den afviser)
+      const sidenEgen = (Date.now() - sidsteEgenHandling) / 1000;
+      if (idle >= Math.min(graense, sidenEgen)) return;
+      const rest = slut - Date.now();
+      if (rest <= 0) return;
+      // Hoejst et halvt sekund ad gangen: en pause eller et tilbagetaget laan ses straks.
+      await new Promise(r => setTimeout(r, Math.min(Math.max(200, (graense - idle) * 1000 + 100), 500, rest)));
+    }
+  };
   const maalErStadigForsvarligt = async () => {
+    // (Runde 1, Astra 4: «laanet sluttede mens kaldet ventede» haandhaeves nu af
+    //  laanVedDom lige foer handlingen - én vagt for alle skrivende kald.)
     // ⛔ Sikkerhedsgennemgangen runde 2 (24/9): punktets ejer blev slaaet op
     //    FOER porten, foer spoergsmaalet og foer programlaasen - som kan vente
     //    et minut. Kom et andet vindue frem imens, landede klikket dér uden ny
@@ -1204,6 +1835,11 @@ async function haandterKald(request) {
       }
       const somMaengde = (a) => [...new Set(a)].sort().join('|');
       if (!koordinatEjereFoer) {
+        // 7/10 (punkt I): naas ikke laengere - et ukendt ejer-opslag afvises foer
+        // spoergsmaalet (se KOORDINAT_VAERKTOEJ-blokken). Staar som forsvar i dybden,
+        // hvis den tidlige afvisning nogensinde fjernes. Ingen proeve naar grenen nu:
+        // klik-ejer 9a/9b standser ved den tidlige afvisning (mutant I1 viser at uden
+        // den naar et klik igennem efter et ja - Astra R10).
         const farlig = nu.find(b => ALWAYS_ASK_APPS.has(b) || SPOERG_PR_SESSION.has(b));
         if (farlig) return `the window under that point was unknown when it was approved, and it is now ${farlig}`;
       } else if (somMaengde(nu) !== somMaengde(koordinatEjereFoer)) {
@@ -1221,9 +1857,42 @@ async function haandterKald(request) {
         return `the app in front changed while the agent waited (was ${targetBundleId || 'unknown'}, now ${nu || 'unknown'}), so the keystrokes would land somewhere that was not approved`;
       }
     }
+    // ⛔ Genkontrol under laasen (dommen 28/9, Astras krav): mellem ja'et og
+    //    handlingen kan feltet eller samtalen have skiftet. Det mennesket
+    //    godkendte skal vaere det der sendes - ellers sendes intet.
+    // ⛔ Runde 1 (Astra 2): genkontrollen koerte kun naar den foerste dom var «send»
+    //    - et klik der pegede paa Attach ved dommen og paa Send under laasen, gik
+    //    igennem. Nu doemmes der ALTID igen hvor noget kan sende, og dommen skal
+    //    vaere den samme: hvem, hvad og om det sender.
+    if (beskedSlags(targetBundleId)) {
+      const igen = await sendeDom(name, args, targetBundleId);
+      if (JSON.stringify(igen ?? null) !== JSON.stringify(sende ?? null)) {
+        return 'what would be sent changed after the person approved it - who it goes to or what it says - so it was not sent';
+      }
+    }
+    // ⛔ B5 (29/9, panelet): med laant skaerm TAGER agenten ikke skaermen fra et
+    //    menneske der bruger den. Input efter vores egen sidste handling er et
+    //    menneske (vores egne tastetryk taeller ikke) - saa venter agenten.
+    // ⛔ Runde 1 (Astra 5, Fable F2): gaelder ALLE skrivende kald under laanet -
+    //    ogsaa de stille med `app`, der ellers kunne skrive i det felt mennesket
+    //    sidder i. Og: vores egen sidste haendelse ligger FOER sidsteEgenHandling
+    //    (hjaelperen maaler 120 ms efter), saa alt input nyere end den er ikke vores.
+    if (laanAktivt()) {
+      let m = null;
+      try { m = await callHelper(['idle'], { timeout: 5000 }); } catch { m = null; }
+      const idle = Number(m?.idle);
+      if (!(idle >= 0)) return 'whether the person is using the machine could not be read just before acting';
+      const sidenEgen = (Date.now() - sidsteEgenHandling) / 1000;
+      // Hvor nyligt input taeller som «mennesket er her» (standard 1,5 s).
+      // Kan kun HAEVES (runde 5, Fable 2): en knap der kan slaa menneske-vagten fra, er ingen vagt.
+      const graense = Math.max(1.5, Number(process.env.CMCP_MENNESKE_SEK) || 0);
+      if (idle < Math.min(graense, sidenEgen)) {
+        return 'the person kept using the keyboard or mouse (waited up to 5 seconds), and the screen is theirs while they do. Nothing was done; call it again when they pause';
+      }
+    }
     if (!(verdict.allow && verdict.asker === 'menubar' && baggrund() && args.app
           && ROERER_I_PROGRAMMET.has(name))) return null;
-    const nu = await resolveApp(args.app);
+    const nu = await resolveApp(appArg(args));
     if (nu && !nu.active && nu.bundleId === targetBundleId) return null;
     return nu?.active
       ? 'the person approved, but the app became the one they are using while they answered'
@@ -1262,6 +1931,14 @@ async function haandterKald(request) {
         // ⛔ ASTRA 25/9: logvagten tjekkede FOER laasen, som kan vente et minut.
         //    Blev loggen uskrivbar imens, skete handlingen alligevel. Nu skrives
         //    en linje lige foer handlingen; kan den ikke skrives, sker intet.
+        // ⛔ 7/10 (panel R8-R9, punkt D): «each step waits while you are using the
+        //    keyboard or mouse» var i koden «afvis, kald igen». Nu venter skridtet selv -
+        //    hoejst 5 s, laanet forlaenges ikke, og tages det tilbage, stopper ventetiden.
+        //    Ventetiden ligger FOER loglinjen og genmaalingen herunder, saa maal, modtager,
+        //    besked, laan og log maales EFTER den - aldrig en kontrol fra foer ventetiden.
+        //    Den endelige vagt i maalErStadigForsvarligt afviser stadig, hvis mennesket
+        //    stadig er der (eller er kommet igen).
+        if (laanAktivt()) await ventPaaStilhed(laanVedDom);
         record({ tool: name, tier: effektivTier, target: targetBundleId, phase: 'executing' });
         if (!loggenKanSkrives()) {
           stopgrund = `the audit log at ${AUDIT_PATH} could not be written just before acting, and an action that is not recorded does not happen`;
@@ -1271,7 +1948,18 @@ async function haandterKald(request) {
         //    op til tre sekunder paa sin laas. Nu er genmaalingen det sidste der sker
         //    foer handlingen - intet der kan vente, ligger imellem.
         stopgrund = await maalErStadigForsvarligt();
-        return stopgrund ? null : runTool(name, args);
+        if (stopgrund) return null;
+        if (laanOejeblik() !== laanVedDom) {
+          stopgrund = 'the screen loan changed while this waited (it began, ended or was taken back), so it was not done - call it again';
+          return null;
+        }
+        // Runde 2 (Astra 5): kun handlinger der POSTER input flytter stemplet - efter et
+        // tryk eller en menu (rene tilgaengeligheds-handlinger) er intet input vores.
+        // Runde 3 (Astra 5): en skrivning via tilgaengeligheds-laget poster intet input.
+        // Stemplet flyttes kun efter en handling der LYKKEDES og faktisk postede input.
+        let res;
+        try { res = await runTool(name, args); return res; }
+        finally { if (res && !res.isError && POSTER_INPUT.has(name) && res.__postedeInput !== false) sidsteEgenHandling = Date.now(); }
       });
       if (stopgrund) {
         record({ tool: name, tier: tool.tier, args: scrubArgs(args), mode: currentMode(),
@@ -1280,14 +1968,17 @@ async function haandterKald(request) {
         return errorResult(`Refused: ${stopgrund}. Nothing was done. Call it again.`);
       }
       if (!laast.ok) {
-        const grund = `another agent is working in ${targetBundleId || 'the foreground app'} right now`;
+        // laast.grund er sat naar laasen fejlede LUKKET paa en infra-fejl (M1);
+        // ellers er det ventetiden der udloeb (en anden agent holdt laasen).
+        const grund = laast.grund || `another agent is working in ${targetBundleId || 'the foreground app'} right now, and it did not finish within a minute`;
         record({ tool: name, outcome: 'refused', reason: grund });
-        return errorResult(`Refused: ${grund}, and it did not finish within a minute. Nothing was done. Try again shortly.`);
+        return errorResult(`Refused: ${grund}. Nothing was done. Try again shortly.`);
       }
       result = laast.vaerdi;
     }
     record({ tool: name, outcome: 'ok',
              ...(result?.__effekt ? { effect: result.__effekt } : {}),
+             ...(result?.__presence ? { asker: 'menubar', presence: result.__presence } : {}),
              ...(result?.__tookScreen === undefined ? {} : { took_screen: result.__tookScreen }) });
     // Kunne UDFALDET ikke skrives, er handlingen sket og sporet mangler en linje.
     // Det kan ikke goeres om - men det maa ikke vaere tavst.
@@ -1345,7 +2036,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const a = request.params.arguments || {};
   const klient = server.getClientVersion?.()?.name;
   if (klient) statusKlient(klient);
-  statusHandling(liveTekst(navn, a), 'running');
+  // D3 (2/10): raa app-streng videre til foelg-panelets "Show me where"-knap -
+  // se status.js' statusHandling for hvorfor den IKKE sloeges op her.
+  statusHandling(liveTekst(navn, a), 'running', typeof a.app === 'string' ? a.app : null);
   let svar;
   try {
     svar = await iKald(() => haandterKald(request));
diff --git a/mcp-server/package-lock.json b/mcp-server/package-lock.json
index 322c8b49..eb6d97ce 100644
--- a/mcp-server/package-lock.json
+++ b/mcp-server/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@agent360/computer-mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@agent360/computer-mcp",
-      "version": "0.2.1",
+      "version": "0.2.2",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.0.0"
diff --git a/mcp-server/package.json b/mcp-server/package.json
index b9a3b5b0..9bdfd659 100644
--- a/mcp-server/package.json
+++ b/mcp-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@agent360/computer-mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "mcpName": "io.github.Agent360dk/computer-mcp",
   "description": "Computer use you can actually leave running. It works in windows behind the one you are in and leaves your pointer alone, it says so when something fails instead of pretending, several can run at once, and it will not go near your password manager. Everything is logged. macOS, MIT, no account.",
   "type": "module",
@@ -19,6 +19,7 @@
     "programlaas.js",
     "sloejfe.js",
     "vagt.js",
+    "tilstede.js",
     "bin/",
     "vendor/",
     "README.md"
diff --git a/mcp-server/policy.js b/mcp-server/policy.js
index e2ad735f..788b3572 100644
--- a/mcp-server/policy.js
+++ b/mcp-server/policy.js
@@ -90,9 +90,17 @@ const FARLIGE_MENUORD = [
 /// "Arkiv > Slet browserdata" fanges, og det goer "Rediger > Slet" ogsaa.
 export function menuSerFarlig(path) {
   const p = String(path || '').toLowerCase();
-  return FARLIGE_MENUORD.some(o => p.includes(o));
+  return FARLIGE_MENUORD.some(o => p.includes(o)) || LUKKE_ORD.test(p);
 }
 
+/// ⛔ 1/10 (konsulent-panelet, maalt paa Gustavs Mac): Skaks danske menu siger
+///    «Slut Skak», ikke «Afslut». Ingen ord paa listen matchede, og et ugemt parti
+///    blev lukket uden at nogen blev spurgt. Det samme gjaldt «Luk» og
+///    Aktivitetsovervaagnings «Slut proces». Hele ord, saa «Slutdato» og
+///    «Genaabn lukkede faner» gaar fri. Ordene er kun et gulv: GENVEJEN afgoer det
+///    (`menuGenvejErFarlig` i index.js), for Cmd+Q er Cmd+Q paa alle sprog.
+const LUKKE_ORD = /(^|[^\p{L}])(slut|luk|close)(?=[^\p{L}]|$)/u;
+
 /// ⛔ FUNDET AF MODSTANDER-REVIEWET 21/9: en ugatet slettekanal.
 ///
 ///    Forsiden lover: «Anything that deletes or clears asks every time,
@@ -118,6 +126,67 @@ const FARLIGE_TASTER = new Set([
 ///    delstreng: «cmd+shift+delete» indeholder «delete», og en delstreng-regel
 ///    ville ogsaa faelde «forwarddelete» og «cmd+shift+d». Huset har betalt
 ///    for den fejlklasse otte gange paa én fil.
+/// ⛔ SENDE-PORTEN (29/9, dommen 28/9 D4 + trin 7).
+///    Programmer hvor én handling kan sende noget til et andet menneske. En
+///    besked til et rigtigt menneske kan ikke kaldes tilbage, saa HVER
+///    afsendelse spoerger - én gang pr. besked, med modtager og tekst laest fra
+///    skaermen af serveren, aldrig af modellen. Kun computer-mcp's egne kald:
+///    browser-mcp og `osascript` gaar uden om (se SECURITY.md).
+// ⛔ Runde 1 30/9 (Astra 1, Fable F3/F7/F8/P3): chat og mail er ikke det samme.
+//    I en chat SENDER Return og et linjeskift; i mail er de en ny linje, og
+//    cmd+Return / cmd+shift+D sender. Og webchat/webmail i en browser er ogsaa
+//    en afsendelse - genkendt paa vinduets titel. FaceTime er ude: et opkald er
+//    ikke en besked, og porten lover ikke at fange det.
+export const CHAT_APPS = new Set([
+  'net.whatsapp.WhatsApp', 'desktop.WhatsApp', 'com.apple.MobileSMS',
+  'com.tinyspeck.slackmacgap', 'ru.keepcoder.Telegram', 'org.telegram.desktop',
+  'org.whispersystems.signal-desktop', 'com.hnc.Discord', 'com.microsoft.teams2', 'com.microsoft.teams',
+  'com.facebook.archon.developerID', 'com.skype.skype', 'us.zoom.xos', 'com.viber.osx',
+  'com.automattic.beeper.desktop'
+]);
+export const MAIL_APPS = new Set([
+  'com.apple.mail', 'com.microsoft.Outlook', 'com.readdle.smartemail-Mac', 'com.superhuman.electron',
+  'org.mozilla.thunderbird'
+]);
+export const BESKED_APPS = new Set([...CHAT_APPS, ...MAIL_APPS]);
+export const BROWSERE = new Set([
+  'com.apple.Safari', 'com.apple.SafariTechnologyPreview', 'com.google.Chrome', 'com.google.Chrome.canary',
+  'org.chromium.Chromium', 'company.thebrowser.Browser', 'com.microsoft.edgemac', 'org.mozilla.firefox',
+  'org.mozilla.firefoxdeveloperedition', 'com.brave.Browser', 'com.operasoftware.Opera', 'com.vivaldi.Vivaldi'
+]);
+// ⛔ Runde 2 30/9 (Astra 4, Fable 7): «Signal processing - Wikipedia» og «Teams of the
+//    year» blev chat, «Google Chat» blev det ikke, og «Gmail - Slack» blev mail. Nu
+//    forankrede navne, chat foerst (dér sender Return), og signal ude (ingen webklient).
+export const WEBCHAT = /(^|[\s|·—–-])(whatsapp|messenger|slack|microsoft teams|telegram( web)?|discord|linkedin|instagram|facebook|google chat|messages \/ x|x\.com)([\s|·—–-]|$)/i;
+export const WEBMAIL = /(^|[\s|·—–-])(gmail|outlook|proton ?mail|yahoo mail|icloud mail|fastmail|hey)([\s|·—–-]|$)/i;
+
+/// Er programmet et sted hvor en handling kan sende? 'chat' | 'mail' | 'browser' | null.
+export function beskedSlags(bid) {
+  if (!bid) return null;
+  if (CHAT_APPS.has(bid)) return 'chat';
+  if (MAIL_APPS.has(bid)) return 'mail';
+  if (BROWSERE.has(bid)) return 'browser';
+  return null;
+}
+
+/// Ord der navngiver en afsendelse, paa en knap eller et menupunkt - paa de
+/// sprog en Mac typisk koerer. JS' \b kender ikke æøå/é, saa graensen er et
+/// bogstav-tjek. «Besvar»/«Afsend» slap igennem i runde 1 (Astra 1).
+export const SENDE_ORD = /(^|[^\p{L}])(send|resend|sende|afsend|indsend|reply|svar|besvar|post|submit|skicka|svara|senden|antworten|absenden|envoyer|r[ée]pondre|enviar|responder|invia|rispondi|verzend|verzenden|beantwoorden)([^\p{L}]|$)/iu;
+
+/// Er en tast en afsendelse? I en chat: Return/Enter med ENHVER modifikator (vi
+/// gaetter ikke om shift+return er et linjeskift). I mail: cmd+Return og
+/// cmd+shift+D - et almindeligt Return er en ny linje. Samme normalisering som
+/// tastevagten.
+export function tastSender(combo, slags = 'chat') {
+  const dele = String(combo || '').toLowerCase().split('+').map(x => x.trim()).filter(Boolean);
+  if (!dele.length) return false;
+  const tast = dele[dele.length - 1];
+  const mods = new Set(dele.slice(0, -1).map(m => ({ command: 'cmd', meta: 'cmd', control: 'ctrl' }[m] || m)));
+  if (tast === 'return' || tast === 'enter') return slags === 'chat' || mods.has('cmd') || mods.has('ctrl');
+  return tast === 'd' && mods.has('cmd') && mods.has('shift');
+}
+
 export function tastSerFarlig(combo) {
   // ⛔ ASTRA, 25/9 (Critical): vagten sammenlignede en STRENG, hjaelperen
   //    (Input.swift hotkey) laver et SAET af flag. `cmd+cmd+q` og `fn+cmd+q`
@@ -204,11 +273,31 @@ export function baggrund() {
   //    window, drag, paste, ask_user - slaar baggrund fra med
   //    CMCP_BACKGROUND=0. En tastefejl slaar den IKKE fra: kun de ord der
   //    staar herunder taeller som et nej.
+  //
+  //    29/9: SKAERM-LAANET (panelet). Er intet sat, ejer mennesket kontakten -
+  //    i menulinje-ikonet, med Touch ID, for én agent og hoejst 15 minutter.
+  //    Er CMCP_BACKGROUND sat til ja, er det et LOFT: intet laan kommer forbi.
   const v = String(process.env.CMCP_BACKGROUND ?? '').trim().toLowerCase();
-  if (v === '') return true;
+  if (v === '') return !laanAktivt();
   return !['0', 'false', 'no', 'off', 'nej', 'fra'].includes(v);
 }
 
+let laanTil = 0;
+/// Laanet gaelder til `til` (ms). 0 = intet laan.
+// Runde 5 (Astra 1): hver aendring af laanet taeller generationen op - saa «intet
+// laan -> laan -> intet laan» under ét kald ikke ligner «uaendret».
+let laanGen = 0;
+export function saetLaan(til) { laanTil = Number(til) || 0; laanGen++; }
+/// Laanets tilstand som ét oejebliksbillede: generation + om det er aktivt lige nu.
+export function laanOejeblik() { return `${laanGen}:${laanAktivt() ? 1 : 0}`; }
+export function laanAktivt() { return Date.now() < laanTil; }
+export function laanTilTid() { return laanAktivt() ? laanTil : 0; }
+/// Har mennesket laast serveren til baggrund? Saa kan skaermen ikke laanes.
+export function baggrundLaast() {
+  const v = String(process.env.CMCP_BACKGROUND ?? '').trim().toLowerCase();
+  return v !== '' && !['0', 'false', 'no', 'off', 'nej', 'fra'].includes(v);
+}
+
 /// De vaerktoejer der ikke kan holdes i baggrunden.
 export const TAGER_SKAERMEN = new Set([
   'computer_click', 'computer_move', 'computer_scroll', 'computer_type',
@@ -244,6 +333,8 @@ const STILLE_NAAR = {
   computer_scroll: (a) => !!a.app,
   computer_click:  (a) => !!a.app,
   computer_launch: (a) => a.background === true,
+  // 29/9: i baggrund spoerger den via menulinje-ikonet, aldrig med en dialog.
+  computer_ask_user: () => true,
 };
 
 export const KAN_STILLES = new Set(Object.keys(STILLE_NAAR));
@@ -313,6 +404,20 @@ export function askTimeout() {
   return Number.isFinite(v) && v > 0 ? v : 60;
 }
 
+/// ⛔ 1/10 (skaerm-koe-panelet, Astra + Opus 5.5 enige): et skaerm-laan brugte det
+///    almindelige 60 s-spoergsmaals-vindue. MAALT i Gustavs egen chat-historik:
+///    11 af 12 udloebne skaerm-anmodninger kom INDEN FOR 3 minutter efter at han
+///    havde sagt «klar»/«fortsaet» i samme chat - han var der, men naaede ikke
+///    at svare paa 60 sekunder. Skaerm-anmodninger faar derfor deres eget,
+///    laengere vindue: 5 minutter som standard, 20 minutter som loft (under
+///    stdio-graensen paa 30 min for lange MCP-kald i Claude Code - saa kaldet
+///    aldrig selv afbrydes af klienten mens det venter).
+export function skaermVentetid() {
+  const v = Number(process.env.CMCP_SCREEN_WAIT);
+  const sek = Number.isFinite(v) && v > 0 ? v : 300;
+  return Math.min(sek, 1200);
+}
+
 export function askHuman(title, body, timeoutSec = askTimeout()) {
   return new Promise((resolve) => {
     const script = [
@@ -463,6 +568,27 @@ export async function decide({ tier, targetBundleId, describe, alwaysAsk = false
       if (v.allow && nytSessionsProgram && !alwaysAsk && !dangerousApp) sessionGodkendte.add(targetBundleId);
       return v;
     }
+    // ⛔ 29/9 (panelet, «ét samtykke-spor»): ogsaa i forgrunden spoerges ikonet
+    //    foerst. En osascript-boks kan enhver anden agent med osascript klikke
+    //    «Yes» i; Touch ID kan den ikke. Boksen er kun faldbag naar ikonet ikke
+    //    koerer - og for det ikonet aldrig maa godkende (adgangskode-programmer,
+    //    ukendt maal), hvor mennesket i forgrunden stadig kan svare i boksen.
+    if (ikon && !dangerousApp && !unknownTarget && !aldrigViaIkonet) {
+      const svar = await spoergIkonet({ ...ikon, text: describe, target: targetBundleId,
+        scope: nytSessionsProgram && !alwaysAsk
+          ? `If you allow it, the agent may work in ${targetBundleId} for the rest of this session.`
+          : `${alwaysAsk && hvorfor ? hvorfor + ' ' : ''}If you allow it, this one action only.` }, askTimeout());
+      // ⛔ Runde 1 30/9 (Astra 7 + Fable F1): boksen var faldbag for ALLE «ikke
+      //    spurgt» - ogsaa pausen efter et nej, teksten over loftet og et
+      //    spoergsmaal der allerede venter. Under et skaerm-laan er serveren i
+      //    forgrund, saa et nej i ikonet kunne omgaas med en boks. Nu KUN naar
+      //    ikonet ikke koerer; ellers er svaret nej.
+      if (!svar.ikkeKoerer) {
+        if (svar.ok && nytSessionsProgram && !alwaysAsk) sessionGodkendte.add(targetBundleId);
+        return svar.ok ? { allow: true, asked: true, asker: 'menubar', reason: svar.grund }
+                       : { allow: false, asked: !svar.ikkeSpurgt, asker: 'menubar', koe: true, reason: svar.grund };
+      }
+    }
     const ok = await askHuman(
       'Computer MCP',
       alwaysAsk
@@ -499,6 +625,15 @@ export async function decide({ tier, targetBundleId, describe, alwaysAsk = false
     return v;
   }
 
+  // Ét samtykke-spor (29/9): ikonet foerst, boksen kun naar ikonet ikke koerer.
+  if (ikon && targetBundleId) {
+    const svar = await spoergIkonet({ ...ikon, text: describe, target: targetBundleId,
+      scope: 'If you allow it, the agent may click and type for the rest of this session. Password apps still always ask.' }, askTimeout());
+    if (!svar.ikkeKoerer) {
+      if (svar.ok) sessionGranted = true;
+      return { allow: svar.ok, asked: !svar.ikkeSpurgt, asker: 'menubar', ...(svar.ok ? {} : { koe: true }), reason: svar.grund };
+    }
+  }
   const ok = await askHuman(
     'Computer MCP',
     // ⛔ 24/9: her stod «apps like 1Password and Terminal ask every single time».
diff --git a/mcp-server/programlaas.js b/mcp-server/programlaas.js
index b12aee16..6df83fb2 100644
--- a/mcp-server/programlaas.js
+++ b/mcp-server/programlaas.js
@@ -42,7 +42,11 @@ export async function medProgramLaas(program, fn, maksVentMs = 60_000) {
       try { writeSync(fd, String(process.pid)); } finally { closeSync(fd); }
       break;
     } catch (err) {
-      if (err.code !== 'EEXIST') return { ok: true, vaerdi: await fn() };   // kan ikke laase: gaa videre som foer
+      // ⛔ 28/9 (haerdning M1): FOER kørte vi fn() alligevel her (fail-open) - en
+      //    laase-infra-fejl (ENOTDIR hvis laase-mappen bliver en fil, EACCES m.fl.)
+      //    lod to agenter skrive i flaeng, netop dét laasen skal forhindre. Nu
+      //    fejler laasen LUKKET: kan handlingen ikke serialiseres, sker den ikke.
+      if (err.code !== 'EEXIST') return { ok: false, grund: `the per-app lock could not be taken (${err.code || 'unknown error'}); an action that cannot be serialised does not happen` };
       if (!ejerLever(sti)) { try { unlinkSync(sti); } catch {} continue; }
       if (Date.now() - start > maksVentMs) return { ok: false };
       await sov(40);
diff --git a/mcp-server/status.js b/mcp-server/status.js
index 53d7b52d..01b0b746 100644
--- a/mcp-server/status.js
+++ b/mcp-server/status.js
@@ -18,6 +18,9 @@ import { spawn } from 'child_process';
 
 const DIR = process.env.CMCP_STATE_DIR || join(homedir(), '.local', 'state', 'computer-mcp');
 export const SESSIONS_DIR = join(DIR, 'sessions');
+/// Ikonet skriver sit procesnummer her (main.swift `pidFil`) - det ikon der ejer denne
+/// tilstandsmappe og dens ikon.sock.
+export const IKON_PID_FIL = join(DIR, 'status.pid');
 const HISTORIK = 20;
 export const STATUS_IKON_ID = 'dk.agent360.computer-mcp.status';
 
@@ -70,9 +73,15 @@ export function statusStart({ session, client, version }) {
 }
 
 /// En handling er begyndt, eller afvist foer den begyndte.
-export function statusHandling(tekst, udfald) {
+/// `maal` (D3, 2/10): den raa app-streng mennesket/modellen navngav (bundle-id
+/// ELLER synligt navn - begge forekommer i `args.app`). Sendes videre uprøvet:
+/// at SLÅ den op (resolveApp) her ville lægge et ekstra helper-opslag på HVER
+/// handling bare for at fodre følg-panelets knap. Ikonet forsøger selv begge
+/// former, naar mennesket klikker "Show me where" - aldrig agenten selv.
+export function statusHandling(tekst, udfald, maal = null) {
   if (!tilstand) return;
-  const post = { ts: new Date().toISOString(), text: String(tekst).slice(0, 160), outcome: udfald };
+  const post = { ts: new Date().toISOString(), text: String(tekst).slice(0, 160), outcome: udfald,
+                 target: maal ? String(maal).slice(0, 200) : null };
   tilstand.recent.push(post);
   if (tilstand.recent.length > HISTORIK) tilstand.recent.shift();
   tilstand.now = udfald === 'running' ? post : null;
diff --git a/mcp-server/tilstede.js b/mcp-server/tilstede.js
new file mode 100644
index 00000000..8246b633
--- /dev/null
+++ b/mcp-server/tilstede.js
@@ -0,0 +1,86 @@
+// Hvad kunne mennesket se, da et spoergsmaal stod i menulinjen?
+//
+// ⛔ 7/10 (panel R8-R9, punkt P): «1 af 23 besvaret» stod som et faktum, men loggen
+//    gemte intet om, hvorvidt nogen brugte maskinen, eller hvad der blev vist. Opus
+//    maalte at 13 af de 14 spoergsmaal 30/9 kom FOER boksen kunne sige at et
+//    spoergsmaal ventede, og to midt om natten. Intet menulinje-tiltag kan maales
+//    uden det her - derfor foerst.
+//
+//    Hvert spoergsmaal faar derfor i loggen:
+//    - idle_at_ask / idle_at_end: sekunder siden sidste tastatur/mus (hjaelperens
+//      `idle`), eller «unreadable». ⛔ Astra R9: inputaktivitet, IKKE bevis paa at
+//      et menneske var til stede.
+//    - server: denne servers version. icon: version af det ikon der KOERER (ikke det
+//      medsendte - de kan vaere forskellige). box: om boksen er slaaet til.
+//    - surface_derived: «box+menu» eller «menu», AFLEDT af samme input som ikonet
+//      bruger (indstillingen + om der findes sessioner) - ikke maalt i ikonet, og
+//      navnet siger det.
+//    Kun tal, versioner og til/fra: intet der kan baere en hemmelighed.
+import { execFile } from 'child_process';
+import { readdirSync, readFileSync, statSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+import { callHelper } from './helper.js';
+import { SESSIONS_DIR, STATUS_IKON_ID, IKON_PID_FIL } from './status.js';
+
+const SERVER = (() => {
+  try { return JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), 'package.json'), 'utf8')).version; }
+  catch { return 'unknown'; }
+})();
+
+const koer = (bin, args, ms = 1500) => new Promise((r) =>
+  execFile(bin, args, { timeout: ms }, (e, ud) => r(e ? null : String(ud).trim())));
+
+export async function idleNu() {
+  try {
+    const m = await callHelper(['idle'], { timeout: 1500 });
+    const v = Number(m?.idle);
+    return Number.isFinite(v) && v >= 0 ? Math.round(v * 10) / 10 : 'unreadable';
+  } catch { return 'unreadable'; }
+}
+
+export async function ikonTilstand() {
+  // Aldrig sat = standard = boksen er til (main.swift: `boks-fra` er false som standard).
+  const fra = await koer('/usr/bin/defaults', ['read', STATUS_IKON_ID, 'boks-fra']);
+  const box = fra === '1' ? 'off' : 'on';
+  // ⛔ 7/10 (Astra R10): her stod det FOERSTE cmcp-status i proceslisten, og versionen
+  //    blev laest fra filen paa disken. Var ikonet skiftet ud uden genstart, sagde maalingen
+  //    den nye version om den gamle proces. Nu: det ikon der ejer DENNE tilstandsmappe (dets
+  //    status.pid - samme ikon som fik spoergsmaalet), og er versionsfilen aendret efter at
+  //    processen startede, siges det i stedet for et tal.
+  let icon = 'not running';
+  let pid = null;
+  try { pid = readFileSync(IKON_PID_FIL, 'utf8').trim(); } catch { pid = null; }
+  if (pid && /^\d+$/.test(pid)) {
+    const ps = await koer('/bin/ps', ['-o', 'etime=,comm=', '-p', pid]);
+    const m = ps?.match(/^\s*([\d:-]+)\s+(.+\/Contents\/MacOS\/cmcp-status)$/);
+    if (m) {
+      const indhold = dirname(dirname(m[2]));
+      const v = await koer('/usr/bin/defaults', ['read', join(indhold, 'Info'), 'CFBundleShortVersionString']);
+      const [dage, rest] = m[1].includes('-') ? m[1].split('-') : ['0', m[1]];
+      const startet = Date.now() - (Number(dage) * 86400 + rest.split(':').reduce((a, x) => a * 60 + Number(x), 0)) * 1000;
+      let skiftet = false;
+      try { skiftet = statSync(join(indhold, 'Info.plist')).mtimeMs > startet + 2000; } catch { skiftet = false; }
+      icon = !v ? 'unknown' : skiftet ? 'replaced since start' : v;
+    }
+  }
+  let sessions = 0;
+  try { sessions = readdirSync(SESSIONS_DIR).filter(f => f.endsWith('.json')).length; } catch { sessions = 0; }
+  return { server: SERVER, icon, box, sessions, surface_derived: box === 'on' && sessions > 0 ? 'box+menu' : 'menu' };
+}
+
+/// Startes naar spoergsmaalet stilles; afsluttes naar det er afgjort.
+/// Ved et JA maales ingen ny idle: idle_at_end er «answered» (et menneske svarede netop).
+/// Hver del venter hoejst 1,5 s (slut-idle og saa start-maalingen), saa et svar forsinkes
+/// hoejst ca. 3 s (Opus R10: her stod «hoejst 1,5 s»).
+const loft = (p, ms, v) => Promise.race([p, new Promise(r => setTimeout(() => r(v), ms))]);
+export function maalSpoergsmaal() {
+  const start = Promise.all([idleNu(), ikonTilstand()]);
+  return async (besvaretJa) => {
+    const slut = besvaretJa ? 'answered' : await loft(idleNu(), 1500, 'unreadable');
+    const r = await loft(start, 1500, null);
+    if (!r) return { idle_at_ask: 'unreadable', idle_at_end: slut, server: SERVER, icon: 'unknown', box: 'unknown', sessions: null, surface_derived: 'unknown' };
+    const [ved, t] = r;
+    return { idle_at_ask: ved, idle_at_end: slut, ...t };
+  };
+}
diff --git a/mcp-server/tools.js b/mcp-server/tools.js
index 7daabfbb..f7e610af 100644
--- a/mcp-server/tools.js
+++ b/mcp-server/tools.js
@@ -11,7 +11,7 @@ export const TOOLS = [
   {
     name: 'computer_permissions',
     tier: TIER.READ,
-    description: 'Check which macOS permissions are granted (Accessibility, Screen Recording). Call this first if anything fails.',
+    description: 'Check which macOS permissions are granted (Accessibility, Screen Recording). Call this first if anything fails. It also lists the rules in your MCP client (Claude Code settings) that let an agent click, type or send on this Mac without going through this server - osascript, an open shell, browser automation - because this server\'s consent never sees those.',
     inputSchema: { type: 'object', properties: {} }
   },
   {
@@ -46,6 +46,22 @@ export const TOOLS = [
       required: ['app']
     }
   },
+  {
+    name: 'computer_open',
+    tier: TIER.WRITE,
+    description: "Open an app's OWN door in the background - a Spotify track, a WhatsApp chat, or the app itself - without activating it (if the app pulls itself to the front anyway, the front is handed back and the reply says so). This is the way to reach an app whose window is covered, or that will not act from behind: it uses the app's own URL, not its window. It carries navigation ONLY, never a send: it opens a chat with no pre-filled text and starts a track - it cannot send a message. Sending is a separate, ordinary action on the open window, subject to the same rules as any other write (this tool does not itself add or enforce a send-time confirmation). You give an `intent` and its one parameter, never a URL: the server builds a fixed, validated URL for that intent, and file:, shortcuts:, osascript and anything else are refused.",
+    inputSchema: {
+      type: 'object',
+      required: ['intent'],
+      properties: {
+        intent: { type: 'string', enum: ['open_app', 'play_track', 'open_chat'],
+          description: 'open_app: bring an app up in the background (needs bundleId). play_track: start a Spotify track (needs spotifyId, 22 chars). open_chat: open a WhatsApp chat to a phone number with NO pre-filled text (needs phone).' },
+        bundleId: { type: 'string', description: 'For open_app: the app, e.g. com.spotify.client.' },
+        spotifyId: { type: 'string', description: 'For play_track: the 22-character Spotify track id.' },
+        phone: { type: 'string', description: 'For open_chat: the phone number in international form, e.g. +4560174569.' }
+      }
+    }
+  },
   {
     name: 'computer_quit',
     tier: TIER.WRITE,
@@ -279,7 +295,7 @@ export const TOOLS = [
   {
     name: 'computer_press',
     tier: TIER.WRITE,
-    description: 'Press an element through its own accessibility action instead of simulating a click on a coordinate. Works while the window is BEHIND another one and never moves the human\'s mouse pointer - so it is the tool to reach for when the agent should not take over the screen. Two or more matches is a refusal, not a guess: narrow the search, or pass first=true if you mean the first one.',
+    description: 'Press an element through its own accessibility action instead of simulating a click on a coordinate. Works while the window is BEHIND another one and never moves the human\'s mouse pointer - so it is the tool to reach for when the agent should not take over the screen. The exception is anything that opens a menu (a pop-up, a menu button, a combo box): pressing it behind would draw the menu over the person\'s screen and hold their mouse and keyboard, so it is refused until you ask for the screen with computer_request_screen. Two or more matches is a refusal, not a guess: narrow the search, or pass first=true if you mean the first one.',
     inputSchema: {
       type: 'object',
       required: ['app'],
@@ -294,15 +310,30 @@ export const TOOLS = [
       }
     }
   },
+  {
+    name: 'computer_request_screen',
+    tier: TIER.WRITE,
+    description: 'Ask the person to lend you the screen for a while - for the few steps that cannot be done from behind: moving the pointer, dragging, bringing a window forward, switching desktop. Before calling this, tell the person in the chat exactly what to do: press Allow (Touch ID) in the Computer MCP box in the top-right corner of the screen they are using (the same question is also under the orange menu bar icon), then confirm with Touch ID - this call then waits (several minutes) for them to do that, so do not call it silently. They approve it with Touch ID; you get it for at most 15 minutes, only you, and they can take it back at any moment with Take the screen back now, which stays in that box for as long as the loan lasts. While you have it, the tools that take the screen are offered to you, and each one pauses while the person is using the keyboard or mouse. Password apps, deletions, and messages in the apps and web chats it recognises still ask. Say in `reason` exactly what you need to do. action "release" hands it back when you are done; "status" tells you whether you have it. Refused if the person has locked the server to background (CMCP_BACKGROUND set).',
+    inputSchema: {
+      type: 'object',
+      required: ['action'],
+      properties: {
+        action: { type: 'string', enum: ['request', 'release', 'status'] },
+        reason: { type: 'string', description: 'What you need the screen for, in one sentence of at most 248 characters - the person reads the whole question in the box and decides on this.' },
+        minutes: { type: 'integer', minimum: 1, maximum: 15, description: 'How long, at most 15. Default 10.' }
+      }
+    }
+  },
   {
     name: 'computer_ask_user',
     tier: TIER.WRITE,
-    description: 'Ask the human to do something themselves, and wait. Use it for anything you must NOT see: a password, a 2FA code, a CAPTCHA, an OAuth consent. Put the cursor in the right field first (computer_find, then computer_press), then call this - the human types on their own keyboard and presses Done. You get back true or false, never the text. There is deliberately no way to receive a secret through this server; if you need one typed, this is the only route.',
+    description: 'Ask the human to do something themselves, and wait. Use it for anything you must NOT see: a password, a 2FA code, a CAPTCHA, an OAuth consent. Put the cursor in the right field first (computer_find, then computer_press), then call this - the human types on their own keyboard and presses Done. You get back true or false, never the text. There is deliberately no way to receive a secret through this server; if you need one typed, this is the only route. In background mode (the default) the question waits in the Computer MCP box in the top-right corner of their screen (and under the menu bar icon) instead of a dialog: name the `app` whose field you prepared, and the person brings it forward themselves, does it, and chooses Done.',
     inputSchema: {
       type: 'object',
       required: ['message'],
       properties: {
-        message: { type: 'string', description: 'What the human should do, in one sentence. Say why, so they can judge whether to refuse.' }
+        message: { type: 'string', description: 'What the human should do, in one sentence. Say why, so they can judge whether to refuse.' },
+        app: { type: 'string', description: 'The app whose field the person should use (name or bundle ID). Required in background mode; the server, not you, tells the person where it is.' }
       }
     }
   },
@@ -382,6 +413,8 @@ export function describe(name, args = {}) {
     case 'computer_press': return `Press ${maal ? `"${maal}"` : 'an element'} in ${args.app}`;
     case 'computer_set_value': return `Write ${String(args.text || '').length} characters into a field${args.app ? ' in ' + args.app : ''}`;
     case 'computer_ask_user': return `Ask you to do something yourself`;
+    case 'computer_request_screen': return args.action === 'release' ? 'Hand the screen back'
+      : args.action === 'status' ? 'Check whether it has the screen' : `Ask to use your screen for ${args.minutes || 10} minutes`;
     case 'computer_activate': return `Switch to ${args.app}`;
     case 'computer_launch': return `Open ${args.app}${args.background ? ' in the background' : ''}`;
     case 'computer_quit': return `Quit ${args.app}`;
diff --git a/plugin/.claude-plugin/plugin.json b/plugin/.claude-plugin/plugin.json
new file mode 100644
index 00000000..3c249a16
--- /dev/null
+++ b/plugin/.claude-plugin/plugin.json
@@ -0,0 +1,15 @@
+{
+  "name": "computer-mcp",
+  "version": "0.1.0",
+  "description": "macOS computer use that stays behind your window, asks before it deletes or sends, refuses password managers, and logs every action.",
+  "author": { "name": "Agent360", "url": "https://computermcp.dev" },
+  "homepage": "https://computermcp.dev",
+  "repository": "https://github.com/Agent360dk/computerMCP",
+  "license": "MIT",
+  "mcpServers": {
+    "computer-mcp": {
+      "command": "npx",
+      "args": ["-y", "@agent360/computer-mcp@0.1.0"]
+    }
+  }
+}
diff --git a/scripts/build-mcpb.sh b/scripts/build-mcpb.sh
new file mode 100755
index 00000000..b1da4f60
--- /dev/null
+++ b/scripts/build-mcpb.sh
@@ -0,0 +1,43 @@
+#!/bin/bash
+# Byg en self-contained Claude Desktop / Smithery MCPB-bundle.
+#
+# ⛔ HVORFOR VENDORED, IKKE npx (29/9, distributions-research)
+#    MCPB-designet er «bundler alle afhængigheder, virker offline, ingen sky».
+#    Et manifest med command:"npx" fejler det designet (kræver npm-netværk hver
+#    opstart) og bruger ikke Claude Desktops medbragte Node. Derfor pakkes
+#    server-filerne + node_modules + vendor/ (helper-binær + status-app) ind, og
+#    manifestet peger paa `node ${__dirname}/server/index.js`.
+#
+#    Brug: bash scripts/build-mcpb.sh [output-mappe]
+#    Kraever: `npm i -g @anthropic-ai/mcpb`.
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+OUT="${1:-$ROOT/dist-mcpb}"
+SRV="$OUT/build/server"
+
+echo "1/5 ryd + opret $OUT/build"
+rm -rf "$OUT/build"; mkdir -p "$SRV"
+
+echo "2/5 kopier server-filer + vendor (samme sæt som npm 'files')"
+# ⛔ 7/10: her stod en HAANDHOLDT filliste. Den manglede tilstede.js (punkt P), saa
+#    bundlen ville gaa ned ved opstart. Nu bruges npm's egen "files" - én liste, ét sted
+#    (test/pakke-filer.mjs vogter at hele import-kaeden er med).
+cp "$ROOT/mcp-server/package.json" "$SRV/"
+for f in $(node -e "console.log(require('$ROOT/mcp-server/package.json').files.join('\n'))"); do
+  f="${f%/}"
+  [ -e "$ROOT/mcp-server/$f" ] || { echo "FEJL: $f staar i package.json files, men findes ikke"; exit 1; }
+  cp -R "$ROOT/mcp-server/$f" "$SRV/"
+done
+find "$SRV" -name .DS_Store -delete
+
+echo "3/5 installer produktions-deps ind i bundlen (offline-klar)"
+( cd "$SRV" && npm install --omit=dev --no-audit --no-fund >/dev/null )
+
+echo "4/5 manifest + valider"
+# Versionen foelger pakken - manifestet bar et fast «0.2.1».
+node -e "const m=require('$ROOT/bundle/manifest.json'); m.version=require('$ROOT/mcp-server/package.json').version; require('fs').writeFileSync('$OUT/build/manifest.json', JSON.stringify(m,null,2)+'\n')"
+( cd "$OUT/build" && mcpb validate manifest.json )
+
+echo "5/5 pak"
+( cd "$OUT/build" && mcpb pack . "$OUT/computer-mcp.mcpb" )
+echo "FAERDIG: $OUT/computer-mcp.mcpb"
diff --git a/scripts/kontaktark.py b/scripts/kontaktark.py
new file mode 100755
index 00000000..b1080908
--- /dev/null
+++ b/scripts/kontaktark.py
@@ -0,0 +1,124 @@
+#!/usr/bin/env python3
+"""Kontaktark (B3): ét billede pr. use case (før/efter) i en HTML-rapport.
+
+Tager de film "Fremmed Mac"-jobbet allerede optager (brug-baggrund-*.mp4,
+brug-forgrund-*.mp4, parallel-*.mp4) og bygger en statisk HTML-side med et
+"før"- og "efter"-billede pr. brugsscenarie, så man kan SE at hver use case
+leverer uden at se alle filmene i fuld længde.
+
+⛔ Rører ikke produktionskoden og tager ikke skærmen - trækker kun billeder
+   ud af film der allerede er optaget af et tidligere CI-trin.
+"""
+import json
+import re
+import subprocess
+import sys
+from pathlib import Path
+
+NAVN_MOENSTER = re.compile(r"^brug-(baggrund|forgrund)-(\d+)-(.+)\.mp4$")
+
+
+def varighed(sti: Path) -> float:
+    ud = subprocess.run(
+        ["ffprobe", "-v", "error", "-show_entries", "format=duration",
+         "-of", "csv=p=0", str(sti)],
+        capture_output=True, text=True, check=True)
+    return float(ud.stdout.strip())
+
+
+def traek_billede(sti: Path, sekund: float, ud: Path) -> None:
+    ud.parent.mkdir(parents=True, exist_ok=True)
+    subprocess.run(
+        ["ffmpeg", "-hide_banner", "-loglevel", "error", "-ss", f"{sekund:.2f}",
+         "-i", str(sti), "-frames:v", "1", "-vf", "scale=480:-2", "-y", str(ud)],
+        check=True)
+
+
+def main() -> None:
+    if len(sys.argv) != 3:
+        print("brug: kontaktark.py <film-mappe> <output-mappe>", file=sys.stderr)
+        sys.exit(2)
+    film_dir = Path(sys.argv[1])
+    ud_dir = Path(sys.argv[2])
+    billed_dir = ud_dir / "billeder"
+    billed_dir.mkdir(parents=True, exist_ok=True)
+
+    use_cases: dict[tuple[str, str], dict] = {}
+    parallelle: list[dict] = []
+
+    for fil in sorted(film_dir.glob("*.mp4")):
+        m = NAVN_MOENSTER.match(fil.name)
+        if m:
+            tilstand, nr, navn = m.groups()
+            try:
+                v = varighed(fil)
+            except subprocess.CalledProcessError:
+                continue
+            foer = billed_dir / f"{tilstand}-{nr}-foer.png"
+            efter = billed_dir / f"{tilstand}-{nr}-efter.png"
+            traek_billede(fil, min(2.0, v * 0.15), foer)
+            traek_billede(fil, max(0.0, v - 1.0), efter)
+            key = (nr, navn)
+            use_cases.setdefault(key, {})[tilstand] = {
+                "foer": foer.relative_to(ud_dir), "efter": efter.relative_to(ud_dir),
+                "varighed": round(v, 1), "fil": fil.name,
+            }
+        elif fil.name.startswith("parallel-"):
+            try:
+                v = varighed(fil)
+            except subprocess.CalledProcessError:
+                continue
+            billed = billed_dir / f"{fil.stem}-midt.png"
+            traek_billede(fil, v * 0.5, billed)
+            parallelle.append({"navn": fil.stem, "billede": billed.relative_to(ud_dir),
+                                "varighed": round(v, 1), "fil": fil.name})
+
+    rows = []
+    for (nr, navn), tilstande in sorted(use_cases.items(), key=lambda x: int(x[0][0])):
+        celler = []
+        for tilstand in ("baggrund", "forgrund"):
+            d = tilstande.get(tilstand)
+            if not d:
+                celler.append(f"<td class='mangler'>{tilstand}: ikke kørt</td>")
+                continue
+            celler.append(
+                f"<td><div class='tilstand'>{tilstand} · {d['varighed']}s · "
+                f"<code>{d['fil']}</code></div>"
+                f"<div class='par'><img src='{d['foer']}' alt='før'><img src='{d['efter']}' alt='efter'></div></td>"
+            )
+        rows.append(f"<tr><th>{nr}. {navn.replace('-', ' ')}</th>{''.join(celler)}</tr>")
+
+    par_rows = "".join(
+        f"<div class='pcard'><h3>{p['navn']} · {p['varighed']}s</h3>"
+        f"<img src='{p['billede']}' alt='{p['navn']}'></div>"
+        for p in parallelle
+    )
+
+    html = f"""<!doctype html><html lang="da"><head><meta charset="utf-8">
+<title>Kontaktark · computer-mcp brugsscenarier</title>
+<style>
+body{{font-family:-apple-system,system-ui,sans-serif;margin:0;padding:24px;background:#0b0c0f;color:#e8e8ec}}
+h1{{font-size:1.3rem}} h2{{margin-top:2rem}}
+table{{width:100%;border-collapse:collapse;margin-top:1rem}}
+th,td{{border:1px solid #2a2c33;padding:10px;vertical-align:top;text-align:left}}
+th{{width:220px;font-size:.85rem}}
+.tilstand{{font-size:.75rem;color:#9aa0ab;margin-bottom:6px}}
+.par{{display:flex;gap:6px}} .par img{{width:48%;border-radius:4px;border:1px solid #333}}
+.mangler{{color:#666;font-style:italic}}
+.pgrid{{display:flex;flex-wrap:wrap;gap:16px;margin-top:1rem}}
+.pcard{{width:300px}} .pcard img{{width:100%;border-radius:4px;border:1px solid #333}}
+.pcard h3{{font-size:.8rem;font-weight:600;color:#9aa0ab}}
+code{{background:#1a1c22;padding:1px 4px;border-radius:3px}}
+</style></head><body>
+<h1>Kontaktark · hver use case, før og efter (B3)</h1>
+<p>Trukket automatisk fra filmene i dette CI-job. Intet er optaget på Gustavs Mac.</p>
+<table><tr><th>Scenarie</th><th>Baggrund</th><th>Forgrund</th></tr>{''.join(rows)}</table>
+<h2>Parallelle agenter</h2>
+<div class="pgrid">{par_rows}</div>
+</body></html>"""
+    (ud_dir / "index.html").write_text(html, encoding="utf-8")
+    print(f"Kontaktark skrevet: {ud_dir / 'index.html'} ({len(use_cases)} scenarier, {len(parallelle)} parallel-film)")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/log-uddrag.mjs b/scripts/log-uddrag.mjs
new file mode 100644
index 00000000..d260304b
--- /dev/null
+++ b/scripts/log-uddrag.mjs
@@ -0,0 +1,82 @@
+// README'S LOG-UDDRAG KOMMER FRA EN RIGTIG KOERSEL - ALDRIG FRA NOGENS EGEN LOG (punkt L).
+//
+// ⛔ 7/10 (panel R8-R9): «proof, not promises» kraever at README viser loggen som den
+//    er. Uddraget maa ikke komme fra et menneskes rigtige revisionslog (den beskriver
+//    hans maskine), og det maa ikke vaere skrevet i haanden. Scriptet koerer den
+//    rigtige server i en tom, midlertidig mappe, med en hjaelper og en spoerger der
+//    ikke kan roere skaermen, og gemmer loggen som test/fixtures/audit-readme.jsonl.
+//    test/readme-log.mjs kraever at README-uddraget staar byte for byte i den fil, og
+//    at filens kaede holder.
+//
+//      node scripts/log-uddrag.mjs        # skriver fixturen og README-blokken igen
+//
+//    Koeres ved hvert versionsloeft: linjen med spoergsmaalet baerer serverens version,
+//    og proeven kraever at den er pakkens. Blokken skrives i BEGGE README'er (repoets og
+//    npm's), saa claims 45 stadig ser dem som een.
+import { spawn } from 'node:child_process';
+import { mkdtempSync, mkdirSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
+import { createServer } from 'node:net';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger, lavStandinIkon } from '../test/falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const UD = join(ROOT, 'test', 'fixtures', 'audit-readme.jsonl');
+const STATE = mkdtempSync(join(tmpdir(), 'cmcp-log-uddrag-'));
+const h = lavFalskHjaelper('cmcp-log-uddrag');
+h.saetSvar({
+  // Mennesket arbejder i Safari; agenten skriver i TextEdit bag ved.
+  apps: { apps: [{ name: 'Safari', bundleId: 'com.apple.Safari', pid: 500, active: true },
+                 { name: 'TextEdit', bundleId: 'com.apple.TextEdit', pid: 501, active: false },
+                 { name: 'Finder', bundleId: 'com.apple.finder', pid: 502, active: false },
+                 { name: '1Password', bundleId: 'com.1password.1password', pid: 503, active: false }] },
+});
+// Ingen svarer: et udloeb er et nej, og det er det loggen skal vise.
+const sp = lavFalskSpoerger('udloeb', 'cmcp-log-uddrag-sp');
+// Standardopsaetningen har menulinje-ikonet: spoergsmaalet gaar dertil. Attrappen
+// tager imod og svarer aldrig (som et menneske der ikke er der).
+mkdirSync(STATE, { recursive: true, mode: 0o700 });
+const ikon = createServer(sock => { sock.on('data', () => {}); sock.on('error', () => {}); });
+await new Promise(r => ikon.listen(join(STATE, 'ikon.sock'), r));
+// Maalingen laeser ikonets version paa det ikon der ejer tilstandsmappen (status.pid):
+// et stand-in med pakkens version - aldrig menneskets rigtige ikon (Astra R10).
+const VERSION = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+const standin = lavStandinIkon(STATE, VERSION);
+
+const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+  env: { ...process.env, CMCP_STATE_DIR: STATE, CMCP_HELPER: h.sti, CMCP_OSASCRIPT: sp.sti, CMCP_ASK_TIMEOUT: '1',
+         CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1', CMCP_MODE: 'allow' },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise((r, rej) => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); setTimeout(() => rej(new Error('timeout ' + m)), 30000); });
+try {
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'readme-example', version: '1' } });
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+  for (const [name, args] of [
+    ['computer_apps', {}],
+    ['computer_type', { app: 'TextEdit', text: 'Dear Anna, the meeting moves to 3 pm.' }],
+    ['computer_menu', { app: 'Finder', path: 'File > Move to Trash' }],
+    ['computer_type', { app: '1Password', text: 'hunter2' }],
+  ]) {
+    const r = await rpc('tools/call', { name, arguments: args });
+    console.log(`${name}: ${(r.result?.content?.[0]?.text || '').split('\n')[0].slice(0, 90)}`);
+  }
+} finally { srv.kill(); ikon.close(); standin.stop(); }
+const log = readFileSync(join(STATE, 'audit.jsonl'), 'utf8');
+writeFileSync(UD, log);
+rmSync(STATE, { recursive: true, force: true });
+const linjer = log.trim().split('\n');
+console.log(`\n${linjer.length} linjer skrevet til ${UD.slice(ROOT.length + 1)}`);
+
+// README-blokken: fra agentens foerste skrivning til enden - uredigeret.
+const fra = linjer.findIndex(l => l.includes('"tool":"computer_type"'));
+const blok = '<!-- log-uddrag:start -->\n```jsonl\n' + linjer.slice(fra).join('\n') + '\n```\n<!-- log-uddrag:end -->';
+for (const f of ['README.md', join('mcp-server', 'README.md')]) {
+  const sti = join(ROOT, f), s = readFileSync(sti, 'utf8');
+  const m = s.match(/<!-- log-uddrag:start -->[\s\S]*?<!-- log-uddrag:end -->/g);
+  if (m?.length !== 1) { console.error(`${f}: fandt ${m?.length || 0} log-uddrag-blokke (skal vaere 1)`); process.exit(1); }
+  writeFileSync(sti, s.replace(m[0], () => blok));
+  console.log(`${f}: blokken skrevet (${linjer.length - fra} linjer)`);
+}
diff --git a/scripts/release.sh b/scripts/release.sh
index d4956807..21d6efba 100755
--- a/scripts/release.sh
+++ b/scripts/release.sh
@@ -50,6 +50,22 @@ if [ -n "$(git status --porcelain)" ]; then
   exit 1
 fi
 
+# ⛔ OPUS (2/10): uden dette tjek kan lokal main staa paa en commit origin/main
+#    IKKE har (fx en anden chats traee) - scriptet ville taenke HEAD'en v$V,
+#    skubbe maerket offentligt paa en forkert commit, og saa faa SELVE
+#    main-pushet nedenfor afvist af branch-beskyttelsen. Maerket ville alligevel
+#    staa derude, forkert. Stop foer noget som helst skubbes.
+git fetch origin main --quiet
+HEAD_NU="$(git rev-parse HEAD)"
+ORIGIN_MAIN="$(git rev-parse origin/main)"
+if [ "$HEAD_NU" != "$ORIGIN_MAIN" ]; then
+  echo "⛔ HEAD ($HEAD_NU) er ikke det samme som origin/main ($ORIGIN_MAIN)."
+  echo "   Udgivelsen maerker og pakker HEAD - er den ikke identisk med origin/main,"
+  echo "   maerkes/pakkes en commit GitHub ikke har endnu (eller en forkert én)."
+  echo "   git checkout main && git pull - og koer saa scriptet igen."
+  exit 1
+fi
+
 echo "== 0/7 teksten skal beskrive DEN version vi udgiver =="
 echo "$V" > "$ROOT/PUBLICERET"
 python3 "$ROOT/scripts/sync-tal.py" | sed 's/^/   /'
@@ -142,9 +158,15 @@ echo "   samtykke-porten bevist $(cut -d' ' -f2 "$KVIT") for denne kode ✓"
 #    runner.
 echo "== 2b/7 CI skal vaere groen paa den commit der udgives =="
 HEADSHA=$(git rev-parse HEAD)
-CIDOM=$(gh run list -R Agent360dk/computerMCP -w CI --limit 20 \
+# ⛔ 7/10 (panel R8, E): en fejlet forespoergsel (net, GitHub-timeout) blev under
+#    set -e enten et tavst stop eller laest som «CI har ikke koert». Den er UKENDT.
+if ! CIDOM=$(gh run list -R Agent360dk/computerMCP -w CI --limit 20 \
           --json headSha,conclusion,status \
-          -q "[.[] | select(.headSha==\"$HEADSHA\")] | .[0].conclusion" 2>/dev/null)
+          -q "[.[] | select(.headSha==\"$HEADSHA\")] | .[0].conclusion" 2>/dev/null); then
+  echo "⛔ CI-status kunne ikke laeses fra GitHub (net eller timeout) - den er UKENDT, ikke «ikke koert»."
+  echo "   Intet er maerket eller udgivet. Proev igen om lidt."
+  exit 1
+fi
 case "$CIDOM" in
   success) echo "   CI groen paa $(git rev-parse --short HEAD) ✓" ;;
   "" | null)
@@ -162,6 +184,12 @@ echo "== 3/7 versionerne skal vaere ens =="
 for f in mcp-server/package.json server.json; do
   grep -q "\"version\": \"$V\"" "$f" || { echo "⛔ $f staar ikke paa $V"; exit 1; }
 done
+# 7/10 (panel R11, B5): Claude Code-pluginnet og markedet foelger PUBLICERET, ikke pakken -
+#    paa main skal de pege paa en version npm HAR. Trin 0 satte PUBLICERET og koerte
+#    sync-tal.py, saa her staar de lokalt paa $V; committet kommer i dok-PR'en efter publish.
+for f in plugin/.claude-plugin/plugin.json .claude-plugin/marketplace.json; do
+  grep -q "\"version\": \"$(cat PUBLICERET)\"" "$f" || { echo "⛔ $f foelger ikke PUBLICERET ($(cat PUBLICERET)) - koer python3 scripts/sync-tal.py"; exit 1; }
+done
 grep -q "^## $V" CHANGELOG.md || { echo "⛔ CHANGELOG.md mangler afsnittet ## $V"; exit 1; }
 
 echo "== 4/7 vaerktoejstallet skal matche koden =="
@@ -175,7 +203,7 @@ N=$(node -e "import('./mcp-server/tools.js').then(m=>console.log(m.TOOLS.length)
 #    streng, og vagten ville have afvist hver eneste fil - eller vaerre,
 #    matchet paa ingenting. En vagt med en graense skal naa laengere end
 #    det den vogter.
-WORDS="zero one two three four five six seven eight nine ten eleven twelve thirteen fourteen fifteen sixteen seventeen eighteen nineteen twenty twenty-one twenty-two twenty-three twenty-four twenty-five twenty-six twenty-seven twenty-eight twenty-nine thirty"
+WORDS="zero one two three four five six seven eight nine ten eleven twelve thirteen fourteen fifteen sixteen seventeen eighteen nineteen twenty twenty-one twenty-two twenty-three twenty-four twenty-five twenty-six twenty-seven twenty-eight twenty-nine thirty thirty-one thirty-two thirty-three thirty-four thirty-five thirty-six thirty-seven thirty-eight thirty-nine forty"
 WORD=$(echo "$WORDS" | cut -d' ' -f$((N+1)))
 bad=0
 for f in README.md docs/index.html docs/tools.html docs/llms.txt; do
@@ -219,7 +247,16 @@ echo "== 4c/7 maerket v$V maa ikke findes i forvejen =="
 #    At flytte et offentligt maerke omskriver historik andre kan have hentet.
 #    Det er et valg, ikke noget scriptet goer af sig selv.
 LOKALT_TAG=$(git rev-parse -q --verify "refs/tags/v$V" 2>/dev/null || true)
-FJERN_TAG=$(git ls-remote --tags origin "refs/tags/v$V" 2>/dev/null | head -1 | cut -f1 || true)
+# ⛔ 7/10 (panel R8, E): `|| true` gjorde en fejlet forespoergsel til «maerket er ledigt».
+#    `--exit-code` giver 2 naar maerket ikke findes; alt andet end 0/2 er UKENDT.
+set +e; FJERN_RAA=$(git ls-remote --exit-code --tags origin "refs/tags/v$V" 2>/dev/null); LSRC=$?; set -e
+case $LSRC in
+  0) FJERN_TAG=$(printf '%s\n' "$FJERN_RAA" | head -1 | cut -f1) ;;
+  2) FJERN_TAG="" ;;
+  *) echo "⛔ GitHub kunne ikke spoerges om maerket v$V (git ls-remote gav $LSRC) - UKENDT, ikke ledigt."
+     echo "   Intet er maerket eller udgivet. Proev igen om lidt."
+     exit 1 ;;
+esac
 if [ -n "$LOKALT_TAG" ] || [ -n "$FJERN_TAG" ]; then
   echo "   STOP: maerket v$V findes allerede${FJERN_TAG:+ - OGSAA paa GitHub}."
   echo "   Det peger paa $(git rev-list -n1 "v$V" 2>/dev/null | cut -c1-9), HEAD er $(git rev-parse --short HEAD) ($(git rev-list --count "v$V"..HEAD 2>/dev/null) commits imellem)."
@@ -251,30 +288,50 @@ echo "== 5/7 maerk og skub FOER der udgives =="
 #    fortrydes, foerst.
 npm whoami >/dev/null 2>&1 || { echo "⛔ npm-tokenen er ikke gyldig. Gustav skal lave en ny (2FA)."; exit 1; }
 git tag -a "v$V" -m "v$V"
-git push origin main --tags
+# ⛔ OPUS (2/10): "main" her var meningsløst OG farligt - HEAD er lige verificeret
+#    identisk med origin/main ovenfor, saa der er intet nyt at skubbe til main;
+#    og en protected branch afviser alligevel et direkte "push origin main".
+#    Det eneste dette skridt reelt skal skubbe, er maerket.
+git push origin "refs/tags/v$V"
 # ⛔ 25/9 (Astra): her stod `... 2>/dev/null || echo "(fandtes i forvejen)"` - enhver
 #    fejl (login, netvaerk, rettigheder) blev meldt som at udgivelsen fandtes.
 if gh release view "v$V" >/dev/null 2>&1; then
   echo "   (GitHub-udgivelsen v$V fandtes i forvejen)"
 else
-  gh release create "v$V" --title "v$V" --notes-file <(awk "/^## $V/{f=1;next}/^## /{f=0}f" CHANGELOG.md) \
+  # ⛔ R24 (Opus): noterne tog kun `## $V`. 0.2.1 blev aldrig udgivet, saa den foerste
+  #    udgivelse siden 0.1.0 manglede halvdelen. Nu: alt fra `## $V` ned til afsnittet for
+  #    den sidst UDGIVNE version (PUBLICERET foer denne koersel) - eller kun `## $V`, hvis
+  #    den ikke staar i CHANGELOG.
+  NOTER_STOP="^## $TIDLIGERE_UDGIVET"; grep -q "^## $TIDLIGERE_UDGIVET" CHANGELOG.md || NOTER_STOP="^## "
+  gh release create "v$V" --title "v$V" --notes-file <(awk -v start="^## $V" -v stop="$NOTER_STOP" '$0 ~ start {f=1; next} f && $0 ~ stop {f=0} f' CHANGELOG.md) \
     || { echo "⛔ GitHub-udgivelsen fejlede - npm er IKKE roert endnu"; exit 1; }
 fi
 
 echo "== 6/7 npm =="
 ( cd mcp-server && npm publish --access public )
+# ⛔ 7/10 (panel R2+R8, E): faelden stod armeret gennem deprecate. Et afbrudt deprecate
+#    (Ctrl-C mens browseren venter) rullede PUBLICERET tilbage og skrev «udgivelsen
+#    skete ikke» - EFTER en lykket publish. Nu er den afvaebnet i samme sekund.
+trap - EXIT
 # ⛔ 25/9 (fyld-tjek): 0.1.0 har fejl-aaben sloering (maalt ved 9e251ce). Den der har
 #    laast sig til den, skal have en advarsel - ikke bare dem der opgraderer selv.
-npm deprecate "@agent360/computer-mcp@<$V" "Upgrade to $V: earlier versions could return an unredacted screenshot when redaction failed." \
-  || echo "   ⚠ npm deprecate fejlede - koer den i haanden: npm deprecate @agent360/computer-mcp@<$V \"...\""
+# ⛔ 8/10 (panel R13-R14, fejl a): intervallet var «<$V». Ved 0.2.2 ville advarslen om et
+#    usloeret skaermbillede ogsaa ramme 0.2.1 - den version der rettede fejlen. Fejlen
+#    findes kun foer 0.2.1, saa intervallet er fast.
+SAARBAR="<0.2.1"
+DEPR_BESKED="Upgrade to $V: earlier versions could return an unredacted screenshot when redaction failed."
+# 7/10: reservelinjen var ikke til at koere (ucitéret `<` er en omdirigering, og
+#    beskeden stod som «...»). Nu skrives den ud ordret og citeret.
+npm deprecate "@agent360/computer-mcp@$SAARBAR" "$DEPR_BESKED" \
+  || { echo "   ⚠ npm deprecate fejlede - koer den i haanden, ordret:"
+       printf "     npm deprecate '%s' '%s'\n" "@agent360/computer-mcp@$SAARBAR" "$DEPR_BESKED"; }
 
 # ⛔ Foerst NU er forbeholdet usandt. `PUBLICERET` er den eneste kilde til hvad
 #    npx faktisk serverer, og sync-tal.py fjerner forbeholdet overalt naar den
 #    er lig med pakkens version. Uden denne linje ville sitet blive ved med at
 #    sige "npx serves 0.1.0" efter en lykket udgivelse.
-# Udgivelsen lykkedes - forbeholdet er nu retmaessigt vaek, og faelden skal
-# ikke rulle noget tilbage.
-trap - EXIT
+# Udgivelsen lykkedes - forbeholdet er nu retmaessigt vaek, og faelden er
+# afvaebnet (lige efter publish, se ovenfor).
 TIDLIGERE_UDGIVET="$V"
 echo "   PUBLICERET staar paa $V, og forbeholdet er fjernet fra alle flader."
 # ⛔ 25/9 (Fable): her stod «Husk at committe og skubbe». En paamindelse efter en
@@ -282,10 +339,28 @@ echo "   PUBLICERET staar paa $V, og forbeholdet er fjernet fra alle flader."
 #    Kun de filer sync-tal aendrede - traeet var rent foer vi startede.
 AENDREDE=$(git status --porcelain | awk '{print $2}')
 if [ -n "$AENDREDE" ]; then
+  # ⛔ OPUS (2/10): "git push origin main" her blev altid afvist - main er
+  #    protected (PR kraeves, enforce_admins=true). Faelden er allerede afvaebnet
+  #    (npm ER udgivet), saa et set -e-stop her ville efterlade en uklar
+  #    halvfaerdig tilstand. En gren + PR er det eneste der rent faktisk virker.
+  GREN="release-$V-dok"
+  git checkout -q -b "$GREN"
   git add $AENDREDE
   git commit -q -m "release: $V er udgivet - PUBLICERET og siderne foelger med"
-  git push origin main
-  echo "   ✓ PUBLICERET og siderne committet og skubbet"
+  git push -q origin "$GREN"
+  if PR_URL=$(gh pr create --base main --head "$GREN" \
+      --title "release: $V er udgivet - forbeholdene vaek" \
+      --body "npm og GitHub-udgivelsen for $V er allerede ude (irreversibelt). Denne PR synkroniserer kun PUBLICERET og de afledte sider - ingen ny funktionalitet." \
+      2>&1); then
+    echo "   ✓ PUBLICERET og siderne committet, skubbet til $GREN:"
+    echo "     $PR_URL"
+    echo "   Merge den PR for at faa teksten med paa main - npm-udgivelsen venter ikke paa den."
+  else
+    echo "⛔ PR-opret fejlede, men commit'en og grenen er skubbet og trygge:"
+    echo "$PR_URL" | sed 's/^/   /'
+    echo "   Aabn PR'en i haanden: gh pr create --base main --head $GREN"
+  fi
+  git checkout -q main
 fi
 
 echo "== 7/7 MCP-registret =="
@@ -294,14 +369,9 @@ echo "== 7/7 MCP-registret =="
 #    fire steder». Hvert skridt for sig, og en fejl er en fejl.
 mcp-publisher login github || { echo "⛔ login til MCP-registret fejlede - npm ER udgivet, registret er IKKE"; exit 1; }
 mcp-publisher publish || { echo "⛔ MCP-registret afviste udgivelsen - npm ER udgivet, registret er IKKE"; exit 1; }
-# ⛔ Y4c. Repo-beskrivelsen er den streng hvert katalog hoester. Staar der et
-#    vaerktoejstal, skal det aendres i SAMME oejeblik som pakken - ikke foer
-#    (saa lyver den for npx-brugere) og ikke efter (saa lyver den for alle).
-DESC=$(gh api repos/Agent360dk/computerMCP --jq .description 2>/dev/null)
-case "$DESC" in
-  *" $N tools"*) echo "   ✓ repo-beskrivelsen siger allerede $N" ;;
-  *) echo "   ⚠️  repo-beskrivelsen siger ikke '$N tools' - ret den nu:"
-     echo "      gh repo edit Agent360dk/computerMCP --description \"...$N tools...\"" ;;
-esac
+# ⛔ Fjernet 2/10: et vaerktoejstal i repo-beskrivelsen blev bevidst fjernet
+#    2/10, fordi tallet var forkert baade mod koden og mod npm. Dette script
+#    genindsatte det ved hver udgivelse - en regression mod den beslutning.
+#    Repo-beskrivelsen roeres ikke her laengere.
 
 echo "✅ $V er ude fire steder. Tjek: npm view @agent360/computer-mcp version"
diff --git a/scripts/sync-tal.py b/scripts/sync-tal.py
index 7bf2e20d..38bff3b0 100755
--- a/scripts/sync-tal.py
+++ b/scripts/sync-tal.py
@@ -18,7 +18,9 @@
        'eleven','twelve','thirteen','fourteen','fifteen','sixteen','seventeen',
        'eighteen','nineteen','twenty','twenty-one','twenty-two','twenty-three',
        'twenty-four','twenty-five','twenty-six','twenty-seven','twenty-eight',
-       'twenty-nine','thirty']
+       'twenty-nine','thirty','thirty-one','thirty-two','thirty-three',
+       'thirty-four','thirty-five','thirty-six','thirty-seven','thirty-eight',
+       'thirty-nine','forty']
 
 ud = subprocess.run(['node','-e',
   "import('./mcp-server/tools.js').then(m=>console.log(JSON.stringify("
@@ -53,8 +55,10 @@ def _erstat(t, moenster, nyt_ord, hale):
                   t, flags=re.I)
 
 def er_versionsforbehold(t, i):
-    # "0.1.0, which has 12 tools" er med RETTE et andet tal.
-    return '0.1.0' in t[max(0, i-90):i+20]
+    # "<udgivet>, which has K tools" er med RETTE et andet tal end kildens.
+    # 7/10: var '0.1.0' skrevet fast - saa et forbehold om 0.2.1 blev «rettet» til kildens tal.
+    w = t[max(0, i-90):i+20]
+    return 'serves' in w and (UDGIVET in w or '0.1.0' in w)
 
 # ⛔ TREDJE FORMULERING DER SLAP FORBI 19/9: forbeholdet paa install-siderne
 #    sagde "The source in the repository has 22" mens koden havde 25. Foerst
@@ -63,7 +67,7 @@ def er_versionsforbehold(t, i):
 #    Een kilde, seks visninger.
 FORBEHOLD = """<div class="box warn">
 <p><b>What you get today, honestly.</b> <code>npx</code> currently serves
-<b>0.1.0</b>, which has 12 tools. The code in the repository has {n}: menu bar
+<b>{u}</b>{har}. The code in the repository has {n}: menu bar
 access, window control, moving windows between screens, pasting, opening and
 quitting apps, waiting for something to appear, writing into a field behind
 another window, and asking you for a password without the model ever seeing it.
@@ -87,6 +91,43 @@ def er_versionsforbehold(t, i):
 NUVAERENDE = json.load(io.open(os.path.join(ROD, 'mcp-server/package.json'), encoding='utf-8'))['version']
 AFSTAND = UDGIVET != NUVAERENDE
 
+# ⛔ 7/10 (panel R8, punkt G): forbeholdet sagde «0.1.0, which has 12 tools» -
+#    skrevet fast tre steder. I 0.2.2-cyklussen (PUBLICERET=0.2.1) ville det sige
+#    «0.2.1, which has 12 tools»: forkert, paa det trin hvor en ny bruger beslutter
+#    sig. Tallet for den UDGIVNE version laeses nu fra dens git-maerke (`v<X>`),
+#    som er sandhedskilden for hvad der blev udgivet. Intet skrives i traeet - en
+#    datafil ville efterlade et urent trae efter release.sh's toerkoersel.
+#    0.1.0 har intet maerke; tallet er maalt paa npm 18/9. Ukendt bliver IKKE 12:
+#    saa naevnes intet tal.
+KENDTE_UDGIVNE = {'0.1.0': 12}
+def udgivet_tal(v):
+    if v == NUVAERENDE: return N
+    if v in KENDTE_UDGIVNE: return KENDTE_UDGIVNE[v]
+    import tempfile
+    try:
+        with tempfile.TemporaryDirectory() as d:
+            a = subprocess.run(['git', 'archive', 'v' + v, 'mcp-server'], cwd=ROD, capture_output=True, timeout=60)
+            if a.returncode: return None
+            if subprocess.run(['tar', '-x', '-C', d], input=a.stdout, capture_output=True, timeout=60).returncode: return None
+            r = subprocess.run(['node', '-e', "import('./mcp-server/tools.js').then(m=>console.log(m.TOOLS.length))"],
+                               cwd=d, capture_output=True, text=True, timeout=60)
+            s = r.stdout.strip()
+            return int(s) if r.returncode == 0 and s.isdigit() else None
+    except Exception:
+        return None
+K = udgivet_tal(UDGIVET) if AFSTAND else N
+def _har(k, ord_=False):
+    """«, which has 32 tools» / «, which has thirty-two» - eller intet tal, naar det er ukendt."""
+    if k is None: return ''
+    return (ORD[k] if ord_ and k < len(ORD) else str(k))
+print('udgivet: %s (%s vaerktoejer)' % (UDGIVET, K if K is not None else 'ukendt antal'))
+# ⛔ 8/10 (panel R13-R14, fejl b): forbeholdet handler om VAERKTOEJER («The 32 tools described
+#    here are ... not published yet»). Har den udgivne version lige saa mange vaerktoejer som
+#    kilden (0.2.1 og 0.2.2 har begge 32), er saetningen falsk - og den ville staa live fra
+#    fletningen af 0.2.2 til npm har den. Forbeholdet skrives kun naar tallet er forskelligt
+#    eller ukendt. (Taeller vaerktoejer, ikke navne: i dag er navnene ens.)
+VAERKTOEJS_AFSTAND = AFSTAND and (K is None or K != N)
+
 for f in sorted(x[len(ROD)+1:] for x in glob.glob(ROD+'/docs/docs/install-*/index.html')):
     p2 = os.path.join(ROD, f)
     t2 = io.open(p2, encoding='utf-8').read()
@@ -97,9 +138,9 @@ def er_versionsforbehold(t, i):
     MOENSTER = r'<div class="box warn">\s*\n<p><b>What you get today.*?</div>\n?'
     har = re.search(MOENSTER, t2, flags=re.S) is not None
     ny, hvad = t2, None
-    if AFSTAND and har:
-        ny = re.sub(MOENSTER, FORBEHOLD.format(n=N, v=NUVAERENDE), t2, count=1, flags=re.S); hvad = 'genskrevet'
-    elif AFSTAND and not har:
+    if VAERKTOEJS_AFSTAND and har:
+        ny = re.sub(MOENSTER, FORBEHOLD.format(n=N, v=NUVAERENDE, u=UDGIVET, har=(', which has %d tools' % K) if K is not None else ', an earlier version'), t2, count=1, flags=re.S); hvad = 'genskrevet'
+    elif VAERKTOEJS_AFSTAND and not har:
         ANKER = '<h2>The whole thing, in three steps</h2>'
         if ANKER in t2:
             # ⛔ Rundturen skal vaere IDENTISK. Foerste udgave lagde en tom
@@ -116,10 +157,10 @@ def er_versionsforbehold(t, i):
             #    identisk; det var den ikke.
             #    Bevis: fjern blokken fra én fil, koer scriptet EEN gang,
             #    `git diff` skal vaere tom. Foer rettelsen var den det ikke.
-            ny = t2.replace(ANKER, FORBEHOLD.format(n=N, v=NUVAERENDE) + ANKER, 1); hvad = 'sat ind igen'
+            ny = t2.replace(ANKER, FORBEHOLD.format(n=N, v=NUVAERENDE, u=UDGIVET, har=(', which has %d tools' % K) if K is not None else ', an earlier version') + ANKER, 1); hvad = 'sat ind igen'
         else:
             print('  ⚠ ingen plads til forbeholdet i', f, '- saet det ind i haanden')
-    elif not AFSTAND and har:
+    elif not VAERKTOEJS_AFSTAND and har:
         ny = re.sub(MOENSTER + r'\n?', '', t2, count=1, flags=re.S); hvad = 'FJERNET (udgivet == kilden)'
     if hvad and ny != t2:
         io.open(p2,'w',encoding='utf-8').write(ny)
@@ -186,7 +227,8 @@ def tal(m):
 #    Nu er der én kilde (udgivet, kilden, N) og fem visninger. Tomme markoerer
 #    fyldes; er der ingen afstand, toemmes de igen.
 def _forbehold(fil, udgivet, n):
-    lang = (f'`npx @agent360/computer-mcp` currently serves **{udgivet}**, which has 12 tools. '
+    har = f', which has {K} tools' if K is not None else ', an earlier version'
+    lang = (f'`npx @agent360/computer-mcp` currently serves **{udgivet}**{har}. '
             f'The {n} tools described here are the source: they are built and tested, but not published yet. '
             f'Building from source takes about thirty-five seconds if you want them now.')
     if fil.endswith('.html'):
@@ -195,9 +237,13 @@ def _forbehold(fil, udgivet, n):
                       .replace('<code>npx @agent360/computer-mcp<code>', '<code>npx @agent360/computer-mcp</code>')
                 + '</p></div>')
     if fil.endswith('.txt'):
-        return (f'VERSION: npx serves {udgivet}, which has 12 tools. The {n} tools described below\n'
+        if K is not None:
+            return (f'VERSION: npx serves {udgivet}, which has {K} tools. The {n} tools described below are\n'
+                    f'the source: they are built and tested but not published yet. Do not tell a user\n'
+                    f'that a tool is available after an npx install unless it is one of the {_har(K, True)}.')
+        return (f'VERSION: npx serves {udgivet}, an earlier version. The {n} tools described below are\n'
                 f'the source: they are built and tested but not published yet. Do not tell a user\n'
-                f'that a tool is available after an npx install unless it is one of the twelve.')
+                f'that a tool is available after an npx install unless you know {udgivet} has it.')
     return '> **What you get today, honestly.** ' + lang
 
 MARKERET = ['docs/index.html', 'docs/tools.html', 'README.md',
@@ -209,7 +255,7 @@ def _forbehold(fil, udgivet, n):
     m3 = _re.search(r'(<!-- FORBEHOLD -->|# FORBEHOLD).*?(<!-- /FORBEHOLD -->|# /FORBEHOLD)\n?',
                     t3, flags=_re.S)
     if not m3:
-        if AFSTAND: print('  ⚠ forbeholdet mangler i', f, '- npx serverer stadig', UDGIVET)
+        if VAERKTOEJS_AFSTAND: print('  ⚠ forbeholdet mangler i', f, '- npx serverer stadig', UDGIVET)
         continue
     aaben, luk = m3.group(1), m3.group(2)
     # ⛔ Foerste udgave regnede i TEGN: start+len(aaben) til end-len(luk).
@@ -218,7 +264,7 @@ def _forbehold(fil, udgivet, n):
     #    genudfyldningen fyrede aldrig. Gruppernes egne positioner er
     #    praecise; min hovedregning var det ikke.
     indhold = t3[m3.end(1):m3.start(2)].strip()
-    if AFSTAND:
+    if VAERKTOEJS_AFSTAND:
         # ⛔ Foerste udgave fyldte kun TOMME markoerer. Stod der allerede en
         #    tekst, skete der intet - saa en rettet generator naaede ALDRIG ud,
         #    og teksten frøs fast i den form den havde den dag den blev skrevet.
@@ -234,14 +280,21 @@ def _forbehold(fil, udgivet, n):
         #    aendrede noget. En mekanik der ikke kan koeres to gange uden
         #    forskel, er ikke idempotent - og saa kan man ikke se hvad der er
         #    ens arbejde og hvad der er scriptets stoej.
+        # ⛔ FUNDET AF FORSIDE-CHATTEN (2/10): `.rstrip('\n')` her gjorde `hale`
+        #    ALTID tom ('\n'.rstrip('\n') == ''), uanset hvad linjen ovenfor lige
+        #    havde regnet ud. Linjeskiftet efter lukkemarkøren forsvandt, så
+        #    <!-- /FORBEHOLD --> og det der fulgte stod på samme linje - GitHub
+        #    og npm viste markøren som rå tekst i stedet for en skjult HTML-
+        #    kommentar. `hale` er allerede den rigtige streng; den skal bruges
+        #    som den er, ikke strippes.
         hale = '\n' if t3[m3.end():].startswith('\n') else '\n\n'
         ny3 = (t3[:m3.start()] + aaben + '\n' + _forbehold(f, UDGIVET, N) + '\n'
-               + luk + hale.rstrip('\n') + t3[m3.end():])
+               + luk + hale + t3[m3.end():])
         if ny3 != t3:
             io.open(p3,'w',encoding='utf-8').write(ny3)
             print(('  forbeholdet sat ind igen: ' if not indhold else '  forbeholdet skrevet om: ') + f)
         continue
-    if not AFSTAND:
+    if not VAERKTOEJS_AFSTAND:
         # ⛔ FUNDET I EN TOERKOERSEL 20/9: her stod en FJERNELSE, og den var
         #    envejs - markoererne forsvandt sammen med teksten, saa der var
         #    intet at finde naeste gang. En fejlet udgivelse ville dermed
@@ -277,6 +330,25 @@ def _forbehold(fil, udgivet, n):
 #    Scriptet her redigerer i forvejen den fil (den staar i FLADER). Saa
 #    udledningen hoerer her, foer tallene rettes. `build-release.sh` goer det
 #    samme et oejeblik senere; det skader ikke, og paastand 45 vogter resultatet.
+# 7/10 (panel R10-R11, B5 - begge valgte (a)): Claude Code-pluginnet og markedet foelger
+#    PUBLICERET - den version npx faktisk serverer - ikke pakkens. Stod de paa pakkens
+#    version, pegede markedet paa main paa en version npm ikke havde fra fletning til
+#    udgivelse: `/plugin install` gav `npx ...@0.2.2` mod et register med 0.1.0, og serveren
+#    startede ikke. Loeftet kommer med dok-PR'en efter publish (tools/dok-pr.sh FILER).
+if re.fullmatch(r'\d+\.\d+\.\d+', UDGIVET):
+    for _sti, _moenstre in [('plugin/.claude-plugin/plugin.json', [r'("version": ")[^"]+(")', r'("@agent360/computer-mcp@)[^"]+(")']),
+                            ('.claude-plugin/marketplace.json', [r'("version": ")[^"]+(")'])]:
+        _p = os.path.join(ROD, _sti)
+        if not os.path.exists(_p):
+            continue
+        _t = io.open(_p, encoding='utf-8').read()
+        _ny = _t
+        for _m in _moenstre:
+            _ny = re.sub(_m, lambda mm: mm.group(1) + UDGIVET + mm.group(2), _ny)
+        if _ny != _t:
+            io.open(_p, 'w', encoding='utf-8').write(_ny)
+            print('  %s foelger nu PUBLICERET (%s)' % (_sti, UDGIVET))
+
 _rep = io.open(os.path.join(ROD, 'README.md'), encoding='utf-8').read()
 _npm = re.sub(r'<img src="docs/[^>]*>\n\n', '', _rep, count=1)
 _npm = _npm.replace('](docs/', '](https://github.com/Agent360dk/computerMCP/blob/main/docs/')
diff --git a/server.json b/server.json
index 92c30de4..4bc684c1 100644
--- a/server.json
+++ b/server.json
@@ -7,13 +7,13 @@
     "url": "https://github.com/Agent360dk/computerMCP",
     "source": "github"
   },
-  "version": "0.2.1",
+  "version": "0.2.2",
   "websiteUrl": "https://computermcp.dev",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@agent360/computer-mcp",
-      "version": "0.2.1",
+      "version": "0.2.2",
       "transport": {
         "type": "stdio"
       },
diff --git a/test/argumenter.mjs b/test/argumenter.mjs
index 8dcc091e..75ce7c00 100644
--- a/test/argumenter.mjs
+++ b/test/argumenter.mjs
@@ -12,6 +12,8 @@
 //      2. hjaelperen afviser en noegle der skulle have en vaerdi men fik et flag
 //    Intet her tager et billede: lag 1 proeves mod en attrap-hjaelper, lag 2 med
 //    `--plan`, der stopper foer optagelsen.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, spawnSync } from 'node:child_process';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/attrap-faste-opslag.mjs b/test/attrap-faste-opslag.mjs
new file mode 100644
index 00000000..33a66dbe
--- /dev/null
+++ b/test/attrap-faste-opslag.mjs
@@ -0,0 +1,64 @@
+// PROEVE-ATTRAPPEN SVARER FAST PAA DE OPSLAG DER AFGOER EN DOM (punkt H).
+//
+// ⛔ 7/10 (panel R8): `at`, `apps`, `focused`, `press --dry` og `idle` gik til den
+//    AEGTE hjaelper, saa en proeves dom afhang af udviklerens skaerm (R6-R7: tre roede
+//    dage paa Gustavs Mac). Proeven her kraever: de fem svarer fast som standard, en
+//    proeves eget `saetSvar` vinder, og aegte opslag sker kun naar proeven beder om det.
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, FASTE_OPSLAG } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const kald = (h, argv) => {
+  const r = spawnSync(h.sti, argv, { encoding: 'utf8', input: '{}' });
+  try { return JSON.parse(r.stdout); } catch { return { ulaeseligt: (r.stdout + r.stderr).slice(0, 80) }; }
+};
+const FEM = [['apps', '--all'], ['at', '--x', '5', '--y', '5'], ['focused'], ['press', '--app', 'com.apple.finder', '--dry'], ['idle']];
+const noegle = a => a[0] + (a.includes('--dry') ? ' --dry' : '');
+
+check('de fem opslag der afgoer en dom har hvert et fast svar',
+      FEM.every(a => FASTE_OPSLAG[noegle(a)]) && Object.keys(FASTE_OPSLAG).length === 5, Object.keys(FASTE_OPSLAG).join(', '));
+
+// 1. Standard: hvert svar er det faste - og staar i sporet som fast, ikke videresendt.
+const h = lavFalskHjaelper('cmcp-faste-opslag');
+for (const a of FEM) {
+  const svar = kald(h, a);
+  const { ok, ...resten } = svar;
+  check(`standard: ${noegle(a)} svarer fast`, ok === true && JSON.stringify(resten) === JSON.stringify(FASTE_OPSLAG[noegle(a)]),
+        JSON.stringify(svar).slice(0, 90));
+}
+check('standard: hvert svar er noteret som fast i sporet', h.kald().filter(k => k.fast).length === FEM.length,
+      `${h.kald().filter(k => k.fast).length} af ${FEM.length}`);
+
+// 2. Proevens eget svar vinder over standarden.
+h.saetSvar({ at: { found: false } });
+check('saetSvar vinder over standarden', kald(h, ['at', '--x', '1', '--y', '1']).found === false);
+
+// 3. Aegte opslag kun paa bestilling - og saa er det IKKE det faste svar.
+const RIGTIG = [join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper'), join(ROOT, 'helper', '.build', 'release', 'cmcp-helper')].some(existsSync);
+if (!RIGTIG || process.platform !== 'darwin') {
+  console.log('SPRUNGET OVER: aegte opslag (ingen bygget hjaelper her) - bevist intet');
+} else {
+  const ae = lavFalskHjaelper('cmcp-aegte-opslag', { aegteOpslag: true });
+  const apps = kald(ae, ['apps', '--all']);
+  check('aegteOpslag: apps kommer fra den rigtige hjaelper, ikke det faste svar',
+        Array.isArray(apps.apps) && JSON.stringify(apps.apps) !== JSON.stringify(FASTE_OPSLAG.apps.apps)
+        && !ae.kald().some(k => k.fast), `${apps.apps?.length ?? '?'} programmer`);
+  // Opus R10: med de faste svar maaler server-e2e ikke laengere de ægte svars FORM. Den
+  // maales her, laesende: idle (som P og D hviler paa), at og focused.
+  const id = kald(ae, ['idle']), at = kald(ae, ['at', '--x', '5', '--y', '5']), fo = kald(ae, ['focused']);
+  check('aegteOpslag: idle er et tal >= 0 fra den rigtige hjaelper', typeof id.idle === 'number' && id.idle >= 0 && id.idle !== FASTE_OPSLAG.idle.idle, JSON.stringify(id).slice(0, 60));
+  check('aegteOpslag: at og focused svarer i den aftalte form', typeof at.found === 'boolean' && typeof fo.focused === 'boolean',
+        `${JSON.stringify(at).slice(0, 50)} · ${JSON.stringify(fo).slice(0, 50)}`);
+  // press --dry er ogsaa et opslag (Astra R10): det rigtige svar, aldrig attrappens «intet blev udfoert».
+  const dry = kald(ae, ['press', '--app', 'com.apple.finder', '--title', 'zzz ingen knap hedder saadan', '--dry']);
+  check('aegteOpslag: press --dry naar den rigtige hjaelper (et svar, ikke et slugt kald)',
+        !dry.note && (dry.would_press || dry.code), JSON.stringify(dry).slice(0, 90));
+}
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/audit-chain.mjs b/test/audit-chain.mjs
index e5f0a975..67303785 100644
--- a/test/audit-chain.mjs
+++ b/test/audit-chain.mjs
@@ -12,6 +12,7 @@
 //    paa et sikkerhedsloefte laerer folk at ignorere den.
 //
 //    Proeven her koerer det der braekkede den: flere processer, samme fil.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { mkdtempSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
diff --git a/test/baggrund-stille.mjs b/test/baggrund-stille.mjs
index c1f4cfac..ce7ea313 100644
--- a/test/baggrund-stille.mjs
+++ b/test/baggrund-stille.mjs
@@ -11,6 +11,7 @@
 //
 //    Proeven her holder den nye regel fast: de fire TILBYDES i baggrund,
 //    afvises uden `app`, og gaar igennem med.
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { lavFalskSpoerger, lavFalskHjaelper } from './falsk-hjaelper.mjs';
 import { join, dirname } from 'node:path';
@@ -21,10 +22,19 @@ const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 //    ind i Finder - Gustavs program. Den maaler PORTEN, saa handlinger naar nu
 //    aldrig Mac'en: opslag gaar til den aegte hjaelper, handlinger sluges og noteres.
 const VAGT = lavFalskHjaelper('cmcp-baggrund-attrap');
+// ⛔ 7/10 (panel R6-R8, H): programlisten kom fra menneskets RIGTIGE skaerm. Stod
+//    Finder forrest, afviste produktet med rette Finder-kaldene (punkt 4 og den
+//    harmloese tast), og proeven blev roed af en grund der intet har med porten at
+//    goere. Nu er listen fast: Finder koerer, men TextEdit er forrest. Inspektion af
+//    Finders vindue gaar stadig til den aegte hjaelper (kun et opslag).
+VAGT.saetSvar({ apps: { apps: [
+  { name: 'Finder', bundleId: 'com.apple.finder', pid: 6001, active: false },
+  { name: 'TextEdit', bundleId: 'com.apple.TextEdit', pid: 6002, active: true } ] } });
 let sprungetHer = 0;
 const fails = [];
 const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
 
+const SPOERGER = lavFalskSpoerger('udloeb', 'cmcp-baggrund-spoerger');
 const env = {
   ...process.env,
   CMCP_HELPER: VAGT.sti,
@@ -44,7 +54,9 @@ const env = {
   //    menneskets skaerm. Betalt to gange i dag paa den anden side af samme
   //    regel - en proeve der skrev i hans vindue. Attrappen er ikke betinget
   //    af noget flag: en boks man kan komme til at vise, bliver vist.
-  CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-baggrund-spoerger').sti,
+  CMCP_OSASCRIPT: SPOERGER.sti,
+  // Intet rigtigt ikon i menneskets menulinje - heller ikke koert uden run-all.sh.
+  CMCP_STATUS_IKON: '0',
 };
 const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], { env, stdio: ['pipe', 'pipe', 'pipe'] });
 let buf = '';
@@ -79,10 +91,23 @@ try {
         mangler.length ? 'mangler: ' + mangler.join(', ') : fire.join(', '));
 
   // 2. ...og de der ALDRIG kan goeres stille, gemmes stadig.
-  const skal_vaere_vaek = ['computer_move', 'computer_activate', 'computer_space', 'computer_ask_user'];
+  //    ⛔ 29/9: `computer_ask_user` er IKKE laengere blandt dem. I baggrund
+  //    spoerger den via menulinje-ikonet i stedet for med en dialog (panelet 29/9).
+  const skal_vaere_vaek = ['computer_move', 'computer_activate', 'computer_space'];
   const slap_igennem = skal_vaere_vaek.filter(x => navne.includes(x));
   check('de der altid tager skaermen er stadig skjult', slap_igennem.length === 0,
-        slap_igennem.join(', ') || 'move, activate, space, ask_user er vaek');
+        slap_igennem.join(', ') || 'move, activate, space er vaek');
+
+  // 2b. ask_user tilbydes - og tager ALDRIG skaermen: uden `app` afvist, uden ikon
+  //     afvist, og aldrig en osascript-dialog.
+  check('ask_user tilbydes i baggrund (den spoerger via ikonet)', navne.includes('computer_ask_user'));
+  const spUden = await rpc('tools/call', { name: 'computer_ask_user', arguments: { message: 'Type the 2FA code' } });
+  const tA = JSON.stringify(spUden.result ?? spUden.error ?? {});
+  check('ask_user uden app: afvist, og siger at app skal navngives', /Refused/.test(tA) && /name the `app`/.test(tA), tA.slice(0, 120));
+  const spIkon = await rpc('tools/call', { name: 'computer_ask_user', arguments: { message: 'Type the 2FA code', app: 'Finder' } });
+  const tB = JSON.stringify(spIkon.result ?? spIkon.error ?? {});
+  check('ask_user uden ikon: afvist, intet bragt frem', /Refused/.test(tB) && /menu bar icon is not running/.test(tB), tB.slice(0, 120));
+  check('...og ingen dialog blev rejst i baggrund', SPOERGER.gangeSpurgt() === 0, `${SPOERGER.gangeSpurgt()} dialoger`);
 
   // 3. Uden `app` afvises kaldet - og afvisningen skal SIGE hvad man goer.
   const uden = await rpc('tools/call', { name: 'computer_type', arguments: { text: 'x' } });
@@ -118,7 +143,8 @@ try {
         !/Refused/.test(t2), t2.slice(0, 80));
   await VAGT.roligt(300);
   check('...og naar hjaelperen (i attrappen: noteret, ikke udfoert)',
-        VAGT.handlingerNaaedeFrem().some(k => k.argv[0] === 'scroll' && k.argv.includes('Finder')),
+        // R17: porten binder det koerende maal - hjaelperen faar Finders id, ikke navnet.
+        VAGT.handlingerNaaedeFrem().some(k => k.argv[0] === 'scroll' && k.argv.includes('=com.apple.finder')),
         'om skaermen blev roert, maales i stille-vej.mjs mod proevens EGET program');
 
   // 5. ⛔ DEN VIGTIGSTE. Naar kaldet navngiver et program, skal faren
diff --git a/test/billede-placering.mjs b/test/billede-placering.mjs
new file mode 100644
index 00000000..5d1ac173
--- /dev/null
+++ b/test/billede-placering.mjs
@@ -0,0 +1,149 @@
+// BILLEDE-PLACERING: et billede af ÉT program viser programmets vinduer der, hvor
+// de staar paa skaermen - og sloeringen ligger oven paa det, den skal skjule.
+//
+// ⛔ HVORFOR DEN FINDES (10/10-2026)
+//    Maalt paa macOS 26.4.1: `screenshot --app` lagde programmets indhold i
+//    billedets oeverste venstre hjoerne. Lommeregneren stod paa (405, 516), og
+//    dens pixels laa i (0, 0). To skader:
+//    - en agent der laeser et punkt af billedet og klikker der, rammer et andet
+//      sted paa skaermen - forskudt med vinduets placering
+//    - sloeringen af kodeordsfelter tegnes paa rammens RIGTIGE plads, altsaa ved
+//      siden af det indhold den skulle daekke
+//    Ingen proeve saa det: sloeringsbeviserne fotograferer hele skaermen, aldrig
+//    ét program. Rettelsen er en udtrykkelig kilde-ramme (hele skaermen) til
+//    ScreenCaptureKit.
+//
+//    Proeven bruger sit eget proevevindue (2 % synligt, under alle almindelige
+//    vinduer, musen gaar igennem det). Ingen af menneskets programmer fotograferes.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync, spawn } from 'node:child_process';
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { inflateSync } from 'node:zlib';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const HJAELPER = [process.env.CMCP_HELPER, join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper')].find(p => p && existsSync(p));
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const koer = (...a) => { try { return JSON.parse(execFileSync(HJAELPER, a, { encoding: 'utf8', timeout: 60000 })); }
+                          catch (e) { try { return JSON.parse(String(e.stdout)); } catch { return { ok: false, error: String(e.stdout || e.message).slice(0, 200) }; } } };
+const vent = (ms) => new Promise(r => setTimeout(r, ms));
+
+// En lille PNG-laeser (8 bit, RGB/RGBA, ikke interlaced) - saa proeven ikke afhaenger af et billedbibliotek.
+function laesPng(sti) {
+  const b = readFileSync(sti);
+  let p = 8, w = 0, h = 0, type = 0; const idat = [];
+  while (p < b.length) {
+    const len = b.readUInt32BE(p), kind = b.toString('latin1', p + 4, p + 8), data = b.subarray(p + 8, p + 8 + len);
+    if (kind === 'IHDR') { w = data.readUInt32BE(0); h = data.readUInt32BE(4); type = data[9];
+      if (data[8] !== 8 || data[12] !== 0 || (type !== 6 && type !== 2)) throw new Error(`PNG-format ikke understoettet (dybde ${data[8]}, type ${type}, interlace ${data[12]})`); }
+    if (kind === 'IDAT') idat.push(data);
+    if (kind === 'IEND') break;
+    p += 12 + len;
+  }
+  const bpp = type === 6 ? 4 : 3, raa = inflateSync(Buffer.concat(idat)), rk = w * bpp, ud = Buffer.alloc(h * rk);
+  for (let y = 0; y < h; y++) {
+    const f = raa[y * (rk + 1)], ind = raa.subarray(y * (rk + 1) + 1, (y + 1) * (rk + 1));
+    for (let x = 0; x < rk; x++) {
+      const a = x >= bpp ? ud[y * rk + x - bpp] : 0, o = y ? ud[(y - 1) * rk + x] : 0, c = (x >= bpp && y) ? ud[(y - 1) * rk + x - bpp] : 0;
+      let v = ind[x];
+      if (f === 1) v += a; else if (f === 2) v += o; else if (f === 3) v += (a + o) >> 1;
+      else if (f === 4) { const q = a + o - c, pa = Math.abs(q - a), pb = Math.abs(q - o), pc = Math.abs(q - c); v += (pa <= pb && pa <= pc) ? a : (pb <= pc ? o : c); }
+      ud[y * rk + x] = v & 255;
+    }
+  }
+  return { w, h, px: (x, y) => { const i = y * rk + x * bpp; return [ud[i], ud[i + 1], ud[i + 2], bpp === 4 ? ud[i + 3] : 255]; } };
+}
+// Den mindste ramme om alle pixels der opfylder `hvad`.
+function ramme(img, hvad) {
+  let x0 = Infinity, y0 = Infinity, x1 = -1, y1 = -1;
+  for (let y = 0; y < img.h; y++) for (let x = 0; x < img.w; x++) if (hvad(img.px(x, y))) { if (x < x0) x0 = x; if (y < y0) y0 = y; if (x > x1) x1 = x; if (y > y1) y1 = y; }
+  return x1 < 0 ? null : { x0, y0, x1: x1 + 1, y1: y1 + 1 };
+}
+const naer = (a, b, tol) => Math.abs(a - b) <= tol;
+
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-plac-'));
+const navn = 'cmcpplac' + Math.random().toString(36).slice(2, 8);
+const BIN = join(ARB, navn);
+execFileSync('swiftc', ['-O', join(ROOT, 'test', 'fixture', 'placering.swift'), '-o', BIN], { stdio: 'pipe', timeout: 180000 });
+const barn = spawn(BIN, { stdio: ['ignore', 'pipe', 'ignore'] });
+try {
+  await new Promise((res) => { barn.stdout.on('data', (d) => { if (/pid=/.test(String(d))) res(); }); setTimeout(res, 15000); });
+  let vin = null;
+  for (const frist = Date.now() + 30000; Date.now() < frist && !vin; await vent(300)) vin = (koer('windows', '--app', navn).windows || [])[0] || null;
+  check('0 proevevinduet staar paa sin kendte plads (400, 400, 200, 100)', !!vin && vin.frame.x === 400 && vin.frame.y === 400 && vin.frame.w === 200, JSON.stringify(vin?.frame || {}));
+
+  const raaSti = join(ARB, 'raa.png'), sloeretSti = join(ARB, 'sloeret.png');
+  const raa = koer('screenshot', '--app', navn, '--no-redact', '--out', raaSti);
+  if (!raa.ok && /permission|Screen Recording|could not be captured/i.test(raa.error || '')) {
+    console.log(`SPRUNGET OVER: 4 (ingen skaermoptagelse her: ${String(raa.error).slice(0, 120)}) - bevist intet, ikke bestaaet`);
+  } else {
+    const s = raa.pixelsPerPoint, ox = raa.displayOriginX, oy = raa.displayOriginY;
+    const forvent = { x0: (400 - ox) * s, y0: (400 - oy) * s, x1: (600 - ox) * s, y1: (500 - oy) * s };
+    const img = laesPng(raaSti);
+    const fundet = ramme(img, ([, , , a]) => a > 0);
+    check('1 billedet af programmet har vinduet DER, hvor det staar paa skaermen (ramme × pixelsPerPoint)',
+      !!fundet && naer(fundet.x0, forvent.x0, 2) && naer(fundet.y0, forvent.y0, 2) && naer(fundet.x1, forvent.x1, 2) && naer(fundet.y1, forvent.y1, 2),
+      `fundet ${JSON.stringify(fundet)} · forventet ${JSON.stringify(forvent)}`);
+
+    const sl = koer('screenshot', '--app', navn, '--out', sloeretSti);
+    const simg = laesPng(sloeretSti);
+    // Feltet: AX (500, 450)-(580, 480). Midten af det skal vaere sort OG uigennemsigtigt med sloering.
+    const fx = Math.round((540 - ox) * s), fy = Math.round((465 - oy) * s);
+    const sort = ([r, g, b, a]) => a === 255 && r < 20 && g < 20 && b < 20;
+    check('2 med sloering: kodeordsfeltets midte er sort', sl.ok === true && sl.redactedRegions >= 1 && sort(simg.px(fx, fy)), `${JSON.stringify(simg.px(fx, fy))} · ${sl.redactedRegions} omraade(r)`);
+    check('3 uden sloering: samme punkt er IKKE sort (det er os der sloerer, ikke billedet)', !sort(img.px(fx, fy)), JSON.stringify(img.px(fx, fy)));
+    // Sloeringen og indholdet skal vaere samme sted: alt det sorte ligger INDEN FOR vinduets indhold.
+    const sorteRamme = ramme(simg, sort);
+    check('4 sloeringen ligger inden for vinduets indhold i billedet, ikke ved siden af',
+      !!sorteRamme && !!fundet && sorteRamme.x0 >= fundet.x0 && sorteRamme.y0 >= fundet.y0 && sorteRamme.x1 <= fundet.x1 && sorteRamme.y1 <= fundet.y1,
+      `sort ${JSON.stringify(sorteRamme)} · vindue ${JSON.stringify(fundet)}`);
+  }
+  // 6. R28 (Opus, MAALT): paa en skaerm med en anden skala (1x) og et origo ≠ 0 laa indholdet i
+  //    1 pixel pr. punkt i et lærred der paastod 2 - og sloeringen ved siden af. Samme proeve dér.
+  const skaerme = (koer('displays').displays || []);
+  const anden = skaerme.find(d => !d.main);
+  if (!anden) {
+    console.log('SPRUNGET OVER: 3 (6a-6c kraever en skaerm mere end hovedskaermen) - bevist intet, ikke bestaaet');
+  } else {
+    const navn2 = navn + 'b', BIN2 = join(ARB, navn2);
+    execFileSync('cp', [BIN, BIN2]);
+    const barn2 = spawn(BIN2, { stdio: ['ignore', 'pipe', 'ignore'], env: { ...process.env, PLAC_DX: String(anden.x) } });
+    try {
+      await new Promise((res) => { barn2.stdout.on('data', (d) => { if (/pid=/.test(String(d))) res(); }); setTimeout(res, 15000); });
+      let v2 = null;
+      for (const frist = Date.now() + 30000; Date.now() < frist && !v2; await vent(300)) v2 = (koer('windows', '--app', navn2).windows || [])[0] || null;
+      const r2 = join(ARB, 'raa2.png'), s2 = join(ARB, 'sloeret2.png');
+      const a2 = koer('screenshot', '--app', navn2, '--no-redact', '--display-id', String(anden.id), '--out', r2);
+      const b2 = koer('screenshot', '--app', navn2, '--display-id', String(anden.id), '--out', s2);
+      if (!a2.ok || !b2.ok || !v2) {
+        check('6a billede paa den anden skaerm', false, JSON.stringify({ v2, a2, b2 }).slice(0, 300));
+      } else {
+        const k = a2.pixelsPerPoint, ox2 = a2.displayOriginX, oy2 = a2.displayOriginY;
+        const im2 = laesPng(r2), fu2 = ramme(im2, ([, , , al]) => al > 0);
+        const fv2 = { x0: (v2.frame.x - ox2) * k, y0: (v2.frame.y - oy2) * k, x1: (v2.frame.x + 200 - ox2) * k, y1: (v2.frame.y + 100 - oy2) * k };
+        check('6a anden skaerm: vinduet ligger DER, hvor rammen × pixelsPerPoint siger', !!fu2 && naer(fu2.x0, fv2.x0, 2) && naer(fu2.y0, fv2.y0, 2) && naer(fu2.x1, fv2.x1, 2) && naer(fu2.y1, fv2.y1, 2),
+          `ppp ${k} · fundet ${JSON.stringify(fu2)} · forventet ${JSON.stringify(fv2)}`);
+        const sim2 = laesPng(s2), sort2 = ([r, g, bb, al]) => al === 255 && r < 20 && g < 20 && bb < 20;
+        const px2 = [Math.round((v2.frame.x + 140 - ox2) * k), Math.round((v2.frame.y + 65 - oy2) * k)];
+        check('6b anden skaerm: kodeordsfeltets midte er sort med sloering', b2.redactedRegions >= 1 && sort2(sim2.px(...px2)), JSON.stringify(sim2.px(...px2)));
+        const so2 = ramme(sim2, sort2);
+        check('6c anden skaerm: sloeringen ligger inden for vinduets indhold', !!so2 && !!fu2 && so2.x0 >= fu2.x0 && so2.y0 >= fu2.y0 && so2.x1 <= fu2.x1 && so2.y1 <= fu2.y1,
+          `sort ${JSON.stringify(so2)} · vindue ${JSON.stringify(fu2)}`);
+      }
+    } finally { try { barn2.kill(); } catch {} }
+  }
+  // 5. Bundet til kilden (mutantporten genbygger ikke hjaelperen).
+  const cap = readFileSync(join(ROOT, 'helper', 'Sources', 'cmcp-helper', 'Capture.swift'), 'utf8');
+  check('5 optagelsen faar en udtrykkelig kilde-ramme: hele skaermen',
+    /cfg\.sourceRect = CGRect\(x: 0, y: 0, width: display\.width, height: display\.height\)/.test(cap));
+  check('5b laerredet foelger skaermens egen skala, og kilden skaleres ind i det',
+    /cfg\.width = display\.width \* skala/.test(cap) && /cfg\.height = display\.height \* skala/.test(cap) && /cfg\.scalesToFit = true/.test(cap));
+} finally {
+  try { barn.kill(); } catch {}
+  rmSync(ARB, { recursive: true, force: true });
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/brugsscenarier.mjs b/test/brugsscenarier.mjs
index 689ce4d7..c5389296 100644
--- a/test/brugsscenarier.mjs
+++ b/test/brugsscenarier.mjs
@@ -27,16 +27,24 @@
 //
 // ⚠️ Scenarierne er skrevet 27/9 og er IKKE kørt mod de rigtige programmer endnu.
 //    Et rødt scenarie siger hvilket trin der fejlede; dér starter næste skive.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, execFileSync } from 'node:child_process';
 import { mkdtempSync, mkdirSync, writeFileSync, rmSync, existsSync, readFileSync } from 'node:fs';
 import { tmpdir, homedir } from 'node:os';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { lavFalskSpoerger, lavVagtHjaelper } from './falsk-hjaelper.mjs';
+import { startFilm } from './film.mjs';
 
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const AEGTE = join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper');
 process.env.CMCP_STATUS_IKON = '0';   // aldrig det rigtige ikon i menneskets menulinje
+// PYNT (2/10, forside-chatten): kun scenarie 5's URL/titel skifter - samme tjek,
+// samme scenarie-nummer, samme browserSide()-mekanik. Netflix' plakater er
+// ophavsretligt beskyttede; en ren optagelse til computermcp.dev bruger en
+// neutral side i stedet.
+const PYNT = process.env.CMCP_FILM_PYNT === '1';
 const vent = (ms) => new Promise(r => setTimeout(r, ms));
 const tilfaeldig = () => Math.random().toString(36).slice(2, 8);
 
@@ -72,13 +80,15 @@ export function maaKoere(s, env, aabentAllerede = false) {
 // EN FRISK SERVER pr. scenarie: egen tilstandsmappe, egen revisionslog, og et
 // sikkerhedsnet der kun lader handlinger nå scenariets egne programmer.
 // ---------------------------------------------------------------------------
-async function nyServer({ tilladte, forgrund }) {
+async function nyServer({ tilladte, forgrund, delt }) {
   const vagt = lavVagtHjaelper(process.env.CMCP_HELPER || AEGTE);
   vagt.tillad(...tilladte);
   // Samtykke: prøven svarer ja - men kun scenariets egne programmer kan nå
   // hjælperen, og hvert spørgsmål står i rapporten bagefter.
   const spoerger = lavFalskSpoerger('ja', 'cmcp-brug');
-  const state = mkdtempSync(join(tmpdir(), 'cmcp-brug-'));
+  // 1/10 (konsulent-panelet): parallel-proeven deler EN state-mappe, som rigtige
+  // chats paa én Mac goer - ellers proeves programlaasen og revisionskaeden ikke.
+  const state = delt || mkdtempSync(join(tmpdir(), 'cmcp-brug-'));
   const srv = spawn('node', [join(ROOT, 'mcp-server/index.js')], {
     env: { ...process.env, CMCP_HELPER: vagt.sti, CMCP_STATE_DIR: state, CMCP_OSASCRIPT: spoerger.sti,
            CMCP_BACKGROUND: forgrund ? '0' : '1' },
@@ -94,7 +104,7 @@ async function nyServer({ tilladte, forgrund }) {
     let data = null; try { data = JSON.parse(tekst); } catch {}
     return { fejl: !!r.result?.isError || !!r.error, tekst, data };
   };
-  const luk = () => { try { srv.kill(); } catch {} rmSync(state, { recursive: true, force: true }); };
+  const luk = () => { try { srv.kill(); } catch {} if (!delt) rmSync(state, { recursive: true, force: true }); };
   return { kald, luk, vagt, spoerger };
 }
 
@@ -319,7 +329,9 @@ export const SCENARIER = [
       return `bonden er flyttet: «${m[0].name}»`;
     },
   },
-  browserSide(5, 'åbne Netflix', 'https://www.netflix.com/', /Netflix/),
+  PYNT
+    ? browserSide(5, 'åbne Netflix', 'https://en.wikipedia.org/wiki/MacOS', /macOS/)
+    : browserSide(5, 'åbne Netflix', 'https://www.netflix.com/', /Netflix/),
   {
     // ⛔ 27/9 på en fremmed Mac: tryk på «Wallpaper» i sidebjælken er tryk på en
     //    tekst og skifter ingen side, og vinduets titel er tom. Indstillinger har
@@ -420,14 +432,14 @@ export const SCENARIER = [
     async trin(c) {
       const A = 'com.apple.calculator';
       await c.start(A); await c.ventVindue(A);
-      await c.trykEn(A, [L({ en: 'All Clear', da: 'Ryd alt' }), L({ en: 'Clear', da: 'Ryd' })]);
+      // 1/10: «All Clear» er en RYD-knap og spoerger nu (som README lover). Et nystartet
+      // Lommeregner-vindue staar allerede paa 0, saa trykket var aldrig noedvendigt.
       await c.trykEn(A, ['7']);
       await c.trykEn(A, [L({ en: 'Add', da: 'Plus' }), 'Plus', '+']);
       await c.trykEn(A, ['5']);
       await c.trykEn(A, [L({ en: 'Equals', da: 'Lig med' }), '=']);
     },
     async tjek(c) { const m = await c.ventPaa('com.apple.calculator', { contains: '12' }); return `displayet viser «${m[0].name}»`; },
-    async ryd(c) { await c.trykEn('com.apple.calculator', [L({ en: 'All Clear', da: 'Ryd alt' }), L({ en: 'Clear', da: 'Ryd' })]).catch(() => {}); },
   },
   {
     // Søgefeltet i Finder og et filnavn er begge AXTextField; kun undertypen
@@ -461,16 +473,24 @@ export const SCENARIER = [
 // ---------------------------------------------------------------------------
 // KØRSLEN af ét scenarie: trin -> tjek -> ryd (altid) -> luk det, vi startede.
 // ---------------------------------------------------------------------------
-export async function koerScenarie(s, { forgrund = false } = {}) {
+export async function koerScenarie(s, { forgrund = false, film: filmNavn, menneskeArbejder = false, stateDir } = {}) {
   const spor = [], startede = new Set(), udenfor = [], tog = [];
-  const srv = await nyServer({ tilladte: s.apps, forgrund });
+  // 1/10: hvert rigtigt scenarie filmes paa en fremmed maskine (CMCP_FILM) - selvproevens attrapper ikke.
+  const film = s.nr > 0 && filmNavn !== false
+    ? startFilm(filmNavn || `brug-${forgrund ? 'forgrund' : 'baggrund'}-${String(s.nr).padStart(2, '0')}-${s.navn}`) : null;
+  const srv = await nyServer({ tilladte: s.apps, forgrund, delt: stateDir });
   const c = vaerktoej(srv, { forgrund, startede, spor, apps: s.apps, udenfor, tog });
   const res = { nr: s.nr, navn: s.navn, status: '', bevis: '', ryd: '', spor };
   let fase = 'trin';
   // Løftet, målt pr. scenarie: i baggrunden er det program mennesket var i,
   // stadig forrest bagefter (27/9: Finder kom frem midt i en kørsel, og intet
   // enkelt svar sagde det).
-  const forrest = async () => ((await srv.kald('computer_apps')).data?.apps || []).find(a => a.active)?.bundleId;
+  // ⛔ 1/10 (GitHubs Mac, koersel 36859187191): programlistens «active» var falsk for
+  //    ALLE programmer paa koereren - forrest var undefined, og tjekket blev sprunget
+  //    tavst over i hver eneste koersel. Tilgaengeligheds-lagets fokus (samme kilde som
+  //    hjaelperens egen Skaerm.forrestLige) spoerges foerst; listen er kun en reserve.
+  const forrest = async () => (await srv.kald('computer_focused')).data?.element?.bundleId
+    || ((await srv.kald('computer_apps')).data?.apps || []).find(a => a.active)?.bundleId;
   const forrestFoer = await forrest();
   try {
     await s.trin(c);
@@ -484,7 +504,10 @@ export async function koerScenarie(s, { forgrund = false } = {}) {
       res.status = 'fejlede';
       res.bevis = `tog skærmen og gav den ikke tilbage: ${beholdt.map(t => `${t.navn} (${t.hvorfor.slice(0, 80)})`).join('; ')} · ${res.bevis}`;
     } else if (tog.length) {
-      res.bevis += ` · ${tog.length}x hentede et program sig selv frem, forgrunden blev givet straks tilbage`;
+      // MANDAT: at tage skærmen og give den tilbage er stadig at tage skærmen.
+      // Genopretning er bedre end intet, men den gør ikke et forløb til baggrund.
+      res.status = 'delvist';
+      res.bevis += ` · ${tog.length}x hentede et program sig selv frem (skærmen taget, forgrunden givet straks tilbage) - ikke rent baggrundsforløb`;
     }
   } catch (e) {
     res.status = e instanceof KunForgrund ? 'delvist' : 'fejlede';
@@ -498,31 +521,60 @@ export async function koerScenarie(s, { forgrund = false } = {}) {
       await vent(2500);
       const forrestEfter = await forrest();
       res.forrest = `${forrestFoer} -> ${forrestEfter}`;
-      if (forrestFoer && forrestEfter !== forrestFoer) {
+      // Paa en Mac hvor et menneske arbejder imens (parallel.mjs, egen Mac), skifter
+      // HAN program. Kun scenariets egne programmer foran er saa scenariets skyld.
+      if (forrestFoer && forrestEfter !== forrestFoer && (!menneskeArbejder || s.apps.includes(forrestEfter))) {
         res.status = 'fejlede';
         res.bevis = `tog skærmen: ${forrestFoer} var forrest, bagefter ${forrestEfter} · ${res.bevis}`;
       }
+      // ⛔ 1/10 (Astra): en manglende førmåling sprang tjekket over og gav «bevist»
+      //    (læser 102: «undefined -> com.apple.DiskUtility»). Umålt er ikke grønt.
+      if (!forrestFoer || !forrestEfter) {
+        res.status = 'fejlede';
+        res.bevis = `skærmen er umålt: hvad der stod forrest kunne ikke læses (${forrestFoer} -> ${forrestEfter}) · ${res.bevis}`;
+      }
+    }
+    res.tog = tog.length;
+    // Knapperne læses FØR programmet lukkes - bagefter er der intet at læse (Opus, 1/10).
+    if (res.status === 'fejlede' || res.status === 'delvist') {
+      res.knapper = {};
+      for (const app of s.apps) {
+        const m = (await srv.kald('computer_find', { app, role: 'AXButton', limit: 40 })).data?.matches || [];
+        res.knapper[app] = m.map(x => x.name).filter(Boolean).slice(0, 25);
+      }
     }
     try { res.ryd = (s.ryd ? await s.ryd(c) : '') || ''; } catch (e) { res.ryd = `oprydningen fejlede: ${String(e.message).slice(0, 160)}`; }
     // Programmer scenariet selv startede, lukkes igen - gennem programmets egen
     // menu (genvejen er ens på alle sprog), for i baggrunden er computer_quit afvist.
+    // ⛔ 1/10 (MÅLT på Gustavs Mac): «Slut Skak» blev trykket, Skak spurgte «gem
+    //    partiet?» og blev stående foran ham - og oprydningen meldte intet, fordi den
+    //    kun tjekkede at menupunktet blev trykket. Nu: programmet SKAL være væk.
+    //    Spørger det om at gemme, er det prøvens eget dokument: «Gem ikke».
+    const vaek = async (app, sek) => { for (let i = 0; i < sek * 2; i++) { if (!(await c.koerer(app))) return true; await vent(500); } return false; };
     for (const app of startede) {
       try {
         if (forgrund) await c.k('computer_quit', { app }, { maaFejle: true });
         else await c.menuGenvej(app, 'cmd+q');
-      } catch { res.ryd += ` · ${app} blev ikke lukket igen`; }
+      } catch {}
+      if (!(await vaek(app, 6))) {
+        await c.trykEn(app, ['Gem ikke', "Don't Save"]).catch(() => {});
+        // ⛔ 1/10 (GitHubs Mac): i baggrunden lukkes et program ALDRIG uden et menneskes ja -
+        //    med vilje, for at lukke kan tabe arbejde. Proeven lod derfor programmerne staa
+        //    efter hver use case i ugevis, og ingen saa det. Programmet er proevens eget
+        //    (startet af scenariet): proeven lukker det selv, uden om produktet.
+        if (!(await vaek(app, 2))) {
+          const pid = ((await srv.kald('computer_apps')).data?.apps || []).find(a => a.bundleId === app)?.pid;
+          if (pid) { try { process.kill(pid, 'SIGTERM'); } catch {} }
+        }
+        if (!(await vaek(app, 4))) {
+          res.ryd += ` · ${app} blev ikke lukket igen (kører stadig)`;
+          res.status = 'fejlede';
+          res.bevis += ` · oprydningen efterlod ${app} kørende`;
+        }
+      }
     }
     const rev = (await srv.kald('computer_audit', { limit: 1 })).data;
     res.revision = rev ? `${rev.total} linjer, kæden ${String(rev.chain).split(' ')[0]}` : 'ingen revisionslog';
-    // Fejlede det, eller mangler noget: hvilke knapper programmet viste. Så kan
-    // næste runde ramme det rigtige element i stedet for at gætte.
-    if (res.status === 'fejlede' || res.status === 'delvist') {
-      res.knapper = {};
-      for (const app of s.apps) {
-        const m = (await srv.kald('computer_find', { app, role: 'AXButton', limit: 40 })).data?.matches || [];
-        res.knapper[app] = m.map(x => x.name).filter(Boolean).slice(0, 25);
-      }
-    }
     res.stoppet = srv.vagt.stoppet();
     res.samtykker = srv.spoerger.tekster().map(t => t.replace(/\s+/g, ' ').slice(0, 120));
     res.udenfor = udenfor;
@@ -531,6 +583,7 @@ export async function koerScenarie(s, { forgrund = false } = {}) {
       res.bevis += ` · ${res.stoppet.length + udenfor.length} handling(er) prøvede at nå et program uden for scenariet`;
     }
     srv.luk();
+    if (film) res.film = await film.stop();
   }
   return res;
 }
@@ -640,6 +693,8 @@ async function selvproeve() {
 }
 
 // ---------------------------------------------------------------------------
+// 1/10: filen kan importeres (test/parallel.mjs) uden at koere sig selv.
+if (process.argv[1] && fileURLToPath(import.meta.url) === (await import('node:path')).resolve(process.argv[1])) {
 const fails = await selvproeve();
 const forgrund = process.env.CMCP_BRUG_TILSTAND === 'forgrund';
 const res = [];
@@ -675,3 +730,4 @@ if (process.env.CMCP_BRUG_RAPPORT) writeFileSync(process.env.CMCP_BRUG_RAPPORT,
 const roede = res.filter(r => r.status === 'fejlede');
 console.log(fails.length ? `DUMPET: ${fails.length} tjek i selvprøven` : 'Selvprøven bestået.');
 process.exit(fails.length || roede.length ? 1 : 0);
+}
diff --git a/test/bundet-maal.mjs b/test/bundet-maal.mjs
new file mode 100644
index 00000000..95f85102
--- /dev/null
+++ b/test/bundet-maal.mjs
@@ -0,0 +1,167 @@
+// BUNDET MAAL: det program porten vurderede, er det program handlingen rammer.
+//
+// ⛔ R17 (Astra + Opus, enige 9/10): navnet blev fortolket to gange - af porten og igen
+//    af hjaelperen. Selv med samme regel kunne de to vaelge forskelligt (listen aendrer
+//    sig imellem; to processer med samme id). Nu faar alt efter porten det valgte id som
+//    `=<id>`, og hjaelperen slaar kun det praecise id op. Opstart af et LUKKET program
+//    beholder navnet (et id ville lade Launch Services vaelge enhver kopi der paastaar det).
+//
+//    Gennem den rigtige server, med en attrap-hjaelper der skriver hvert kald ned.
+//    Intet rammer skaermen.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const LRM = '‎';
+
+function klient(svar) {
+  const hj = lavFalskHjaelper('cmcp-bundet');
+  hj.saetSvar(svar);
+  // Ingen aegte dialog kan komme fra denne proeve: osascript er en attrap (claims 26).
+  const env = { ...process.env, CMCP_MODE: 'allow', CMCP_HELPER: hj.sti,
+                CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-bundet-sp').sti,
+                CMCP_STATE_DIR: mkdtempSync(join(tmpdir(), 'cmcp-bundet-')) };
+  delete env.CMCP_BACKGROUND;   // standarden: baggrund
+  const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], { env, stdio: ['pipe', 'pipe', 'pipe'] });
+  let buf = ''; const venter = new Map(); let n = 0;
+  srv.stdout.on('data', (d) => {
+    buf += d; let i;
+    while ((i = buf.indexOf('\n')) >= 0) {
+      const l = buf.slice(0, i); buf = buf.slice(i + 1);
+      if (!l.trim()) continue;
+      try { const m = JSON.parse(l); venter.get(m.id)?.(m); venter.delete(m.id); } catch { /* videre */ }
+    }
+  });
+  const rpc = (method, params) => new Promise((res, rej) => {
+    const id = ++n; venter.set(id, res);
+    srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+    setTimeout(() => rej(new Error('timeout ' + method)), 20000);
+  });
+  const kald = async (name, args) => {
+    const r = await rpc('tools/call', { name, arguments: args });
+    return { tekst: (r.result?.content || []).map(c => c.text || '').join('\n'), fejl: !!r.result?.isError };
+  };
+  return { srv, rpc, kald, hj };
+}
+const appArgv = (k) => { const i = k.argv.indexOf('--app'); return i >= 0 ? k.argv[i + 1] : undefined; };
+
+// 1 · et koerende program navngivet med sit (usynlige) navn
+{
+  const { srv, rpc, kald, hj } = klient({ apps: { apps: [
+    { name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: false },
+    { name: 'TextEdit', bundleId: 'com.apple.TextEdit', pid: 3302, active: true },
+    { name: `${LRM}Notes`, bundleId: 'com.apple.Notes', pid: 3303, active: false },
+  ] } });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  const r = await kald('computer_key', { app: 'Notes', combo: 'cmd+b' });
+  const tast = hj.kald().filter(k => k.argv[0] === 'key');
+  check('1a porten fandt Notes, og hjaelperen fik det BUNDNE id - ikke navnet', tast.length === 1 && appArgv(tast[0]) === '=com.apple.Notes',
+    JSON.stringify(tast.map(k => k.argv)) + ' · ' + r.tekst.slice(0, 120));
+  check('1b agentens tekst beholder navnet (intet «=» i svaret)', !/=com\.apple\.Notes/.test(r.tekst), r.tekst.slice(0, 160));
+  srv.kill();
+}
+
+// 2 · et LUKKET program startes: navnet beholdes
+{
+  const { srv, rpc, kald, hj } = klient({
+    apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: true }] },
+    'resolve-app': { app: 'Calculator', bundleId: 'com.apple.calculator', path: '/System/Applications/Calculator.app', running: false },
+  });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  const r = await kald('computer_launch', { app: 'Calculator', background: true });
+  const start = hj.kald().filter(k => k.argv[0] === 'launch');
+  check('2 opstart af et lukket program: hjaelperen faar navnet, ikke et bundet id', start.length === 1 && appArgv(start[0]) === 'Calculator',
+    JSON.stringify(start.map(k => k.argv)) + ' · ' + r.tekst.slice(0, 120));
+  srv.kill();
+}
+
+// 3 · to vinduer af samme program (samme id, samme navn) - mennesket bruger det ene (Opus P2).
+//     Den aktive staar SIDST, saa et opslag der kun ser paa den foerste proces, ville sige ja.
+{
+  const { srv, rpc, kald, hj } = klient({ apps: { apps: [
+    { name: 'Browser', bundleId: 'dk.same', pid: 101, active: false },
+    { name: 'Browser', bundleId: 'dk.same', pid: 100, active: true },
+  ] } });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  const r = await kald('computer_key', { app: 'Browser', combo: 'cmd+b' });
+  const tast = hj.kald().filter(k => k.argv[0] === 'key');
+  check('3 en anden proces med samme id er den mennesket bruger: afvist, intet tastet', r.fejl && tast.length === 0 && /Browser is the window/.test(r.tekst),
+    JSON.stringify(tast.map(k => k.argv)) + ' · ' + r.tekst.slice(0, 160));
+  srv.kill();
+}
+
+// 4 · sendeportens eget opslag faar ogsaa det bundne maal (R18, Astra: «samtale --app com.google.Chrome»)
+{
+  const { srv, rpc, kald, hj } = klient({
+    apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: true },
+                   { name: 'Google Chrome', bundleId: 'com.google.Chrome', pid: 3304, active: false }] },
+    samtale: { window: 'New Tab - Google Chrome' },
+  });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  await kald('computer_type', { app: 'Google Chrome', text: 'hej' });
+  const samtaler = hj.kald().filter(k => k.argv[0] === 'samtale');
+  check('4 sendeportens samtale-opslag faar det bundne id, ligesom leveringen', samtaler.length >= 1 && samtaler.every(k => appArgv(k) === '=com.google.Chrome'),
+    JSON.stringify(samtaler.map(k => k.argv)));
+  srv.kill();
+}
+
+// 6 · visningstjenester: samme id, hvert sit navn (R18, Opus - maalt live paa Gustavs Mac)
+{
+  const { srv, rpc, kald, hj } = klient({ apps: { apps: [
+    { name: 'Autoudfyld (Agent360 IDE)', bundleId: 'com.apple.SafariPlatformSupport.Helper', pid: 3798, active: false },
+    { name: 'Autoudfyld (Google Chrome)', bundleId: 'com.apple.SafariPlatformSupport.Helper', pid: 65766, active: false },
+    { name: 'Google Chrome', bundleId: 'com.google.Chrome', pid: 65569, active: true },
+  ] } });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  const r = await kald('computer_key', { app: 'Autoudfyld (Google Chrome)', combo: 'cmd+b' });
+  const tast = hj.kald().filter(k => k.argv[0] === 'key');
+  check('6 en visningstjeneste hvis id deles af en anden: afvist, intet leveret til den forkerte proces', r.fejl && tast.length === 0,
+    JSON.stringify(tast.map(k => k.argv)) + ' · ' + r.tekst.slice(0, 120));
+  srv.kill();
+}
+
+// 7 · computer_open open_app: kun et PRAECIST id (R19, Opus - maalt: «Passwords» startede Adgangskoder uden spoergsmaal)
+for (const [bundleId, svar, maaStarte, hvad] of [
+  ['Passwords', { app: 'Passwords', bundleId: 'com.apple.Passwords', running: false }, false, 'navnet paa et adgangskodeprogram'],
+  ['com.apple.passwords', { app: 'com.apple.passwords', bundleId: 'com.apple.Passwords', running: false }, false, 'id med andre store/smaa'],
+  ['com.spotify.client', { app: 'com.spotify.client', bundleId: 'com.spotify.client', running: false }, true, 'et praecist id paa et lukket program'],
+  // R20 (Astra): det praecise id paa et adgangskodeprogram afvises af adgangskode-reglen; et fejlet opslag afvises
+  ['com.apple.Passwords', { app: 'com.apple.Passwords', bundleId: 'com.apple.Passwords', running: false }, false, 'det praecise id paa et adgangskodeprogram'],
+  ['dk.findes.ikke', { ok: false, code: 'not-found', error: 'could not find' }, false, 'et opslag der fejler'],
+  // R20 (Opus, MAALT): ogsaa noeglering og terminal slap udenom med en anden stavemaade
+  ['com.apple.KeychainAccess', { app: 'com.apple.KeychainAccess', bundleId: 'com.apple.keychainaccess', running: false }, false, 'noeglering med andre store/smaa'],
+  ['com.apple.terminal', { app: 'com.apple.terminal', bundleId: 'com.apple.Terminal', running: false }, false, 'terminal med andre store/smaa'],
+  ['../Passwords', { app: 'Passwords', bundleId: 'com.apple.Passwords', running: false }, false, 'et ugyldigt id (formkravet foer opslaget)'],
+]) {
+  const { srv, rpc, kald, hj } = klient({ apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: true }] }, 'resolve-app': svar });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'bundet', version: '1' } });
+  const r = await kald('computer_open', { intent: 'open_app', bundleId });
+  const start = hj.kald().filter(k => k.argv[0] === 'launch');
+  check(`7 open_app med ${hvad} («${bundleId}»): ${maaStarte ? 'startes' : 'afvist, intet startet'}`,
+    maaStarte ? (start.length === 1 && appArgv(start[0]) === bundleId) : (r.fejl && start.length === 0),
+    JSON.stringify(start.map(k => k.argv)) + ' · ' + r.tekst.slice(0, 140));
+  if (bundleId === '../Passwords') {
+    const opslag = hj.kald().filter(k => k.argv[0] === 'resolve-app');
+    check('7b et ugyldigt id afvises af formkravet FOER noget slaas op', /valid bundle id/.test(r.tekst) && opslag.length === 0, `${opslag.length} opslag`);
+  }
+  srv.kill();
+}
+
+// 5 · bindingen dækker ogsaa et usloeret skaermbillede, som porten vurderer som en skrivning (R18, Astra)
+{
+  const { readFileSync } = await import('node:fs');
+  const ix = readFileSync(join(ROOT, 'mcp-server', 'index.js'), 'utf8');
+  check('5 bindingen: kun et koerende maal fra porten - skrivninger og det usloerede skaermbillede',
+    /if \(args\.app && koerendeMaal && koerendeMaal === targetBundleId\n\s+&& \(tool\.tier !== TIER\.READ \|\| \(name === 'computer_screenshot' && args\.redact === false\)\)\) args\[BUNDET\] = koerendeMaal;/.test(ix));
+}
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/claims-offline.mjs b/test/claims-offline.mjs
index 0b8f1880..b73bcb30 100644
--- a/test/claims-offline.mjs
+++ b/test/claims-offline.mjs
@@ -89,8 +89,9 @@ check('at lukke et vindue spoerger hver gang',
       /computer_window' && args\.button === 'close'/.test(altidSpoerg),
       'window+close staar i alwaysAsk');
 check('et farligt menupunkt spoerger hver gang',
-      /computer_menu' && menuSerFarlig/.test(altidSpoerg),
-      'menu gaar gennem menuSerFarlig');
+      /alwaysAsk: menuFarlig/.test(altidSpoerg)
+        && /menuFarlig = name === 'computer_menu'[^;]*menuSerFarlig\(args\.path\)[^;]*menuGenvejErFarlig/.test(idx),
+      'menu gaar gennem menuSerFarlig OG genvejen (1/10)');
 check('et Space-skift spoerger hver gang',
       /name === 'computer_space'/.test(altidSpoerg),
       'computer_space staar i alwaysAsk');
@@ -195,6 +196,26 @@ if (raa === null) {
         fanget.length ? 'fanget: ' + fanget.join(', ') : `${harmloese.length} harmloese gik igennem`);
 }
 
+// ⛔ 1/10 (skaerm-koe-panelet): et skaerm-laan brugte det almindelige 60 s-vindue,
+//    og MAALT i Gustavs chat-historik kom 11 af 12 udloebne anmodninger inden for
+//    3 minutter efter han sagde «klar». skaermVentetid() giver skaerm-anmodninger
+//    et eget, laengere vindue - adskilt fra askTimeout(), som styrer alle andre
+//    samtykke-dialoger og IKKE maa aendre sig ved et uheld.
+{
+  const gemt = process.env.CMCP_SCREEN_WAIT;
+  delete process.env.CMCP_SCREEN_WAIT;
+  check('skaermVentetid(): standard er 5 minutter (300 s), laengere end askTimeout()',
+        policy.skaermVentetid() === 300 && policy.skaermVentetid() > policy.askTimeout(),
+        `skaermVentetid=${policy.skaermVentetid()}, askTimeout=${policy.askTimeout()}`);
+  process.env.CMCP_SCREEN_WAIT = '9999';
+  check('skaermVentetid(): loftet er 20 minutter (1200 s), ogsaa ved et stoerre tal',
+        policy.skaermVentetid() === 1200, String(policy.skaermVentetid()));
+  process.env.CMCP_SCREEN_WAIT = '45';
+  check('skaermVentetid(): en gyldig vaerdi under loftet respekteres',
+        policy.skaermVentetid() === 45, String(policy.skaermVentetid()));
+  if (gemt === undefined) delete process.env.CMCP_SCREEN_WAIT; else process.env.CMCP_SCREEN_WAIT = gemt;
+}
+
 console.log();
 console.log(fails.length ? `DUMPET: ${fails.length}` : 'BESTAAET');
 process.exit(fails.length ? 1 : 0);
diff --git a/test/claims.mjs b/test/claims.mjs
index 383121eb..1f587776 100644
--- a/test/claims.mjs
+++ b/test/claims.mjs
@@ -3,6 +3,8 @@
 // De var alle sande i koden da de blev skrevet. Forskellen paa "sand i dag"
 // og "bliver ved med at vaere sand" er en proeve. Et sikkerhedsloefte uden
 // proeve er en kommentar.
+import './ryd-op.mjs';
+import { PROEVE_TILSTAND } from './egen-tilstand.mjs';
 import { spawn } from 'child_process';
 import { readFileSync, existsSync, mkdtempSync} from 'fs';
 import { createHash } from 'crypto';
@@ -88,7 +90,7 @@ function client(env) {
 //    ⛔ Og hullet det ville aabne, er lukket det rigtige sted: `release.sh`
 //       NAEGTER at udgive uden CMCP_DIALOGS=1. Saa kan samtykke-porten ikke
 //       vaere ubevist naar noget gaar ud, uanset hvor tit jeg glemmer flaget.
-import { lavFalskSpoerger, FREMMED_MASKINE, OPTAG_GRUND, lavFalskHjaelper as lavStandardAttrap } from './falsk-hjaelper.mjs';
+import { lavFalskSpoerger, FREMMED_MASKINE, OPTAG_GRUND, lavFalskHjaelper as lavStandardAttrap, lavVagtHjaelper } from './falsk-hjaelper.mjs';
 // ⛔ 24/9 (Fable, runde 2): 13 klienter koerte mod den AEGTE hjaelper, og paastand
 //    1b flyttede Gustavs rigtige markoer til (900,500) ved hver koersel. Nu gaar
 //    OPSLAG til den aegte hjaelper (svarene er sande), HANDLINGER sluges og noteres.
@@ -317,7 +319,19 @@ esac
 // "agenten maa arbejde" og "agenten maa hente mine kodeord" var vaek.
 // Koeres i allow-tilstand, hvor intet andet spoerger.
 {
-  const c = client({ CMCP_MODE: 'allow', CMCP_ASK_TIMEOUT: '2' });
+  // ⛔ 7/10 (panel R6-R8, H): 5 og 5b slog op paa menneskets RIGTIGE skaerm. Efter
+  //    punkt I (431c159) afvises et tryk hvis maal ikke kan vises, uden at spoerge -
+  //    saa «Ny fane» i en Terminal der ikke koerer, gav `Error (not-found)` og 5 blev
+  //    roed af en grund der intet har med porten at goere. Og 5b ledte efter
+  //    «Afvist:», som produktet aldrig skriver: den kunne ikke blive roed. Nu svarer
+  //    hjaelperen fast, og 5b kraever et positivt spor: trykket NAAEDE hjaelperen.
+  const h5 = lavStandardAttrap('cmcp-claims5');
+  h5.saetSvar({
+    apps: { apps: [{ name: 'Terminal', bundleId: 'com.apple.Terminal', pid: 5001 },
+                   { name: 'Finder', bundleId: 'com.apple.finder', pid: 5002 }] },
+    'press --dry': { would_press: { name: 'Ny fane', role: 'AXButton' } },
+  });
+  const c = client({ CMCP_MODE: 'allow', CMCP_ASK_TIMEOUT: '2', CMCP_HELPER: h5.sti });
   await c.ready();
   console.log('  (ogsaa gennem attrappen)');
   const r = await c.rpc('tools/call', {
@@ -329,15 +343,21 @@ esac
         r.result?.isError === true && /Refused:/.test(txt), txt.split('\n')[0]);
 
   // Modstykket: et harmloest program slipper igennem porten. Uden det ville
-  // "afvis alle press" ogsaa bestaa proeve 5. Finder koerer altid; opslaget
-  // finder ingenting, og DEN fejl er ikke portens.
+  // "afvis alle press" ogsaa bestaa proeve 5.
+  h5.saetSvar({
+    apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 5002 }] },
+    'press --dry': { would_press: { name: 'OK', role: 'AXButton' } },
+  });
+  const foer5b = h5.handlingerNaaedeFrem().filter(k => k.argv[0] === 'press').length;
   const r2 = await c.rpc('tools/call', {
     name: 'computer_press',
-    arguments: { app: 'com.apple.finder', title: 'FINDES-HELT-SIKKERT-IKKE-7f21' }
+    arguments: { app: 'com.apple.finder', title: 'OK' }
   });
   const txt2 = r2.result?.content?.[0]?.text || '';
-  check('5b. harmloest program stoppes ikke af porten',
-        !/Afvist:/.test(txt2), txt2.split('\n')[0].slice(0, 60));
+  check('5b. harmloest program stoppes ikke af porten: trykket naar hjaelperen',
+        r2.result?.isError !== true && !/Refused:/.test(txt2)
+        && h5.handlingerNaaedeFrem().filter(k => k.argv[0] === 'press').length === foer5b + 1,
+        txt2.split('\n')[0].slice(0, 60));
   c.srv.kill();
 }
 
@@ -401,7 +421,15 @@ esac
   //     revisionslinjen skal baere det kanoniske bundle-ID. Goer den ikke det,
   //     saa det porten saa, var navnet.
   if (probe && probe.name !== probe.bundleId) {
-    const c = client({ CMCP_MODE: 'readonly' });
+    // ⛔ 9/10: i readonly afvises et skrivende kald FOER opslaget (431c159, panel R8 J),
+    //    saa loggen fik target null, og 6e var roed paa en rigtig regel. Standardtilstanden
+    //    slaar programmet op; tryk-toerkoerslen finder intet element med denne titel og
+    //    afviser, saa intet trykkes. Porten slaar programmet op gennem HJAELPEREN (0.2.2,
+    //    bundet maal), saa standard-attrappen - der ikke kender menneskets programmer -
+    //    gav ogsaa null. Vagt-hjaelperen lader opslag gaa til den aegte og stopper alle
+    //    handlinger.
+    const vagt6e = lavVagtHjaelper(HELPER, 'cmcp-claims-6e');
+    const c = client({ CMCP_MODE: 'allow', CMCP_HELPER: vagt6e.sti });
     await c.ready();
     await c.rpc('tools/call', { name: 'computer_press', arguments: { app: probe.name, title: 'FINDES-IKKE-6e' } });
     c.srv.kill();
@@ -530,8 +558,11 @@ esac
     check('9. computer_ask_user findes', false, 'vaerktoejet mangler');
   } else {
     const props = Object.keys(t.inputSchema?.properties || {});
+    // 29/9: `app` kom til - det peger paa HVOR mennesket skal taste (baggrund,
+    // via ikonet). Et programnavn ind kan ikke blive til en hemmelighed ud.
     check('9. ask_user kan ikke bede om en hemmelighed',
-          props.length === 1 && props[0] === 'message',
+          props.length === 2 && props.includes('message') && props.includes('app')
+          && t.inputSchema.properties.app.type === 'string',
           `felter: ${props.join(', ') || 'ingen'}`);
     const txt = JSON.stringify(t.inputSchema);
     check('9b. skemaet har intet password-felt',
@@ -635,10 +666,12 @@ esac
   // Heuristikken paa aegte stier fra Gustavs egen Chrome, paa dansk - som
   // menulinjen faktisk er. En regel bygget paa engelske ord alene ville have
   // sluppet hver eneste af dem igennem.
+  // 1/10 (konsulent-panelet): «Slut Skak» og «Luk» slap igennem paa Gustavs Mac.
   const farlige = ['Chrome > Slet browserdata…', 'Chrome > Afslut Google Chrome',
-                   'Finder > Tøm papirkurv', 'History > Clear browsing data'];
+                   'Finder > Tøm papirkurv', 'History > Clear browsing data',
+                   'Skak > Slut Skak', 'Arkiv > Luk', 'Vis > Slut proces'];
   const harmloese = ['Arkiv > Udskriv…', 'Rediger > Kopiér', 'Vis > Zoom ind',
-                     'Bogmærker > Vis alle bogmærker'];
+                     'Bogmærker > Vis alle bogmærker', 'Indsæt > Slutnote', 'Historik > Genåbn lukkede faner'];
   const f = farlige.filter(p => pol.menuSerFarlig(p)).length;
   const h = harmloese.filter(p => !pol.menuSerFarlig(p)).length;
   check('11. farlige menustier genkendes', f === farlige.length, `${f}/${farlige.length}`);
@@ -1092,6 +1125,13 @@ esac
   //    En proeve hvis svar afhaenger af hvad der tilfaeldigvis staar forrest
   //    paa en anden persons skaerm, maaler ikke koden. Den her giver samtykke,
   //    saa den kan naa det den paastaar at maale.
+  //
+  // ⛔ 7/10: samme klasse en gang til. Punktet (11,22) blev slaaet op paa
+  //    menneskets RIGTIGE skaerm gennem den aegte hjaelper. Paa Gustavs Mac ligger
+  //    det i menulinjen, genmaalingen lige foer handlingen kunne ikke bekraefte et
+  //    vindue, og kaldet blev med rette afvist - saa 22c faldt uden at maale
+  //    argumenterne. Et fast svar paa `at` goer udfaldet uafhaengigt af skaermen.
+  h22.saetSvar({ at: { found: true, bundleId: 'com.apple.finder', role: 'AXGroup', title: '' } });
   const jaAttrap22 = lavFalskSpoerger('ja', 'cmcp-claims22-ja');
   const cA = client({ CMCP_MODE: 'allow', CMCP_BACKGROUND: '0', CMCP_HELPER: h22.sti,
                       CMCP_OSASCRIPT: jaAttrap22.sti,
@@ -1103,9 +1143,11 @@ esac
   await new Promise(r => setTimeout(r, 300));
   const kald = h22.kald().filter(k => k.argv[0] === 'drag').pop();
   const a = kald ? kald.argv.join(' ') : '';
-  const rigtigt = /--from-x 11/.test(a) && /--from-y 22/.test(a)
-               && /--to-x 33/.test(a) && /--to-y 44/.test(a)
-               && /--steps 7/.test(a) && /--hold-ms 150/.test(a);
+  // R6 (Astra): hele argv-elementer, ikke regex - `/--steps 7/` accepterede ogsaa 70.
+  const flag = (n) => { const i = kald ? kald.argv.indexOf(n) : -1; return i >= 0 ? kald.argv[i + 1] : undefined; };
+  const rigtigt = flag('--from-x') === '11' && flag('--from-y') === '22'
+               && flag('--to-x') === '33' && flag('--to-y') === '44'
+               && flag('--steps') === '7' && flag('--hold-ms') === '150';
   check('22c. og argumenterne naar hjaelperen uaendret', rigtigt,
         rigtigt ? 'alle seks tal kom igennem' : (a || 'intet drag-kald'));
 }
@@ -1424,6 +1466,10 @@ esac
         // Et FILNAVN er ikke tekst nogen laeser i et svar. Husets egne filer
         // hedder programlaas.js, godkend.js, sloejfe.jsonl - med vilje.
         if (/^[\w.\-\/]+\.(js|mjs|jsonl|json|sock|pid|lock|tmp|swift|app|png|sh|md)$/.test(str.trim())) continue;
+        // 7/10: en enkelt kebab-identifikator (en indstillingsnoegle som `boks-fra`, en
+        //    fejlkode som `press-failed`) er en maskin-noegle, ikke en saetning et menneske
+        //    laeser. Kalibreret: en dansk SAETNING fanges stadig (har mellemrum).
+        if (/^[a-z0-9]+(-[a-z0-9]+)+$/.test(str.trim())) continue;
         // Interpolationer er VARIABELNAVNE, ikke tekst mennesket laeser.
         //
         // Foerste udgave brugte [^)]* til Swifts interpolation - og det stopper
@@ -1477,6 +1523,15 @@ esac
 {
   const { lavFalskHjaelper: lfh33, lavFalskSpoerger: lfs33 } = await import('./falsk-hjaelper.mjs');
   const h33 = lfh33('cmcp-koe'); const sp33 = lfs33('udloeb', 'cmcp-koe-sp');
+  // ⛔ 7/10 (punkt I): maalene var slaaet op paa menneskets skaerm. Fandtes trykkets
+  //    knap ikke (eller ejeren af (10,10)), afvises kaldet nu uden at komme i koeen -
+  //    der er intet at godkende ved noget der ikke kan ske. Faste, opnaaelige maal,
+  //    saa paastanden maaler koeen og ikke skaermen.
+  h33.saetSvar({
+    apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: false }] },
+    at: { found: true, bundleId: 'com.apple.finder', role: 'AXGroup', title: '' },
+    'press --dry': { would_press: { name: 'x', role: 'AXButton' } },
+  });
   const fs33 = await import('fs');
   const { mkdtempSync: mk33 } = fs33;
   const { tmpdir: td33 } = await import('os');
@@ -1554,7 +1609,9 @@ esac
   const ae = a34.kaedenHolder();
   check('34c. og ét aendret tegn goer det samme',
         ae.ok === false && ae.brudtVedLinje === 4, JSON.stringify(ae));
-  delete process.env.CMCP_STATE_DIR;
+  // 7/10 (punkt F): gendan - aldrig slet. Slettet faldt resten af filen tilbage til
+  // menneskets rigtige tilstandsmappe.
+  process.env.CMCP_STATE_DIR = PROEVE_TILSTAND;
 }
 
 // ---------------------------------------------------------------- paastand 35
@@ -1659,7 +1716,9 @@ esac
   const ORD = ['zero','one','two','three','four','five','six','seven','eight','nine','ten',
     'eleven','twelve','thirteen','fourteen','fifteen','sixteen','seventeen','eighteen',
     'nineteen','twenty','twenty-one','twenty-two','twenty-three','twenty-four','twenty-five',
-    'twenty-six','twenty-seven','twenty-eight','twenty-nine','thirty'];
+    'twenty-six','twenty-seven','twenty-eight','twenty-nine','thirty','thirty-one','thirty-two',
+    'thirty-three','thirty-four','thirty-five','thirty-six','thirty-seven','thirty-eight',
+    'thirty-nine','forty'];
 
   // Alt der ligner en paastand om antal vaerktoejer, paa enhver flade.
   const MOENSTRE = [
@@ -1816,14 +1875,33 @@ esac
   check('42a. README udpeger den tilstand koden faktisk starter i', /\*\*Default\.\*\*/.test(raekke),
         `koden starter i «${standard}»; README-raekken: ${raekke.slice(0, 60) || 'ikke fundet'}`);
   const ORD = ['zero','one','two','three','four','five','six','seven','eight','nine','ten','eleven','twelve'];
-  const andre = A42.size - 2;                       // Keychain og 1Password naevnes ved navn
+  // ⛔ RETTET 6/10 (sidechatten, uafhaengig Opus-gennemgang @77ba8b6): denne linje
+  //    talte RAA bundle-ID'er - men tre af dem (onepassword, onepassword7,
+  //    1password.1password) er samme produkt i tre version-skikkelser, ikke tre
+  //    programmer. "A42.size - 2" gav 7, og README's "seven others" bestod kun
+  //    fordi begge sider delte den samme fejl - testen beviste ingenting.
+  //    Det rigtige tal er DISTINKTE PRODUKTER: 7 (Keychain, Apple Passwords,
+  //    1Password, Bitwarden, LastPass, Dashlane, Secretive), minus de 2 navngivne.
+  const PRODUKT_GRUPPER = [[/^com\.agilebits\.onepassword\d*$|^com\.1password\.1password$/, '1Password']];
+  const distinkteProdukter = new Set([...A42].map(b => PRODUKT_GRUPPER.find(([re]) => re.test(b))?.[1] || b)).size;
+  const andre = distinkteProdukter - 2;              // Keychain og 1Password naevnes ved navn
   check('42b. antallet af adgangskode-programmer i README stemmer med listen',
         readme.includes(`1Password and ${ORD[andre]} others`),
-        `listen har ${A42.size}, saa teksten skal sige «${ORD[andre]} others»`);
+        `listen har ${distinkteProdukter} distinkte produkter (${A42.size} bundle-ID'er), saa teksten skal sige «${ORD[andre]} others»`);
   const skjult = T42.size - K42.size;
   const side = fs42.existsSync(join(ROOT, 'docs/index.html')) ? fs42.readFileSync(join(ROOT, 'docs/index.html'), 'utf8') : '';
   check('42c. forsidens tal for skjulte vaerktoejer stemmer', !side || side.includes(`adds the ${ORD[skjult]} that do`),
         `koden skjuler ${skjult} i baggrund`);
+  // 42d (runde 1 30/9, Astra 10 + Fable P1): README sagde «Twenty-four are offered»
+  //   mens koden tilboed 25 - tallet var kun vogtet paa sitet, ikke i README.
+  const { TOOLS: V42 } = await import(join(ROOT, 'mcp-server', 'tools.js') + '?42d');
+  const tilbudt = V42.filter(t => !T42.has(t.name) || K42.has(t.name)).length;
+  const ORD2 = ['zero','one','two','three','four','five','six','seven','eight','nine','ten','eleven','twelve','thirteen','fourteen',
+    'fifteen','sixteen','seventeen','eighteen','nineteen','twenty','twenty-one','twenty-two','twenty-three','twenty-four','twenty-five',
+    'twenty-six','twenty-seven','twenty-eight','twenty-nine','thirty','thirty-one','thirty-two','thirty-three','thirty-four','thirty-five'];
+  const ord = ORD2[tilbudt] || String(tilbudt);
+  check('42d. README siger hvor mange vaerktoejer der tilbydes som standard',
+        readme.includes(`${ord[0].toUpperCase() + ord.slice(1)} are offered by`), `koden tilbyder ${tilbudt} i baggrund`);
 }
 
 // 43. ⛔ KONSULENTEN 22/9: revisionsloggen fingeraftrykker `title`/`contains`
@@ -2165,7 +2243,10 @@ esac
                     //    faktum: `ask` og `default` i samme saetningsled.
                     /\bask\b[^.;\n|]{0,14}\bdefault\b/i, /default is deliberately not the permissive/i,
                     // 25/9: gemini-extension.json lovede «a consent gate on every write».
-                    /consent (gate )?on every write/i] : []),
+                    /consent (gate )?on every write/i,
+                    // 8/10 (panel R14): MCPB-manifestet sagde «ask = confirm each write»; README og
+                    // koden: første skrivning spørger, ét ja dækker sessionen.
+                    /confirm (each|every) write/i] : []),
     // ⛔ 25/9 (Astra): «terminals ask for consent on every single action» slap
     //    forbi - moensteret kendte kun «every ... time».
     ...(termPrSession ? [/terminals?\b[^.]{0,60}\bevery (single )?(time|action)/i,
@@ -2177,7 +2258,7 @@ esac
     .split('\n').filter(f => f && !f.startsWith('test/') && !f.startsWith('videos/') && f !== 'CHANGELOG.md'
                      && !f.endsWith('package-lock.json'));
   // ⛔ KALIBRERING begge veje: vagten skal kende sit grundlag OG fange en plantet saetning.
-  const plantet = 'Password managers and terminals ask every single time. Nothing clicks until you say yes. Password managers and terminals ask for consent on every single action. readonly | ask (default) | allow';
+  const plantet = 'Password managers and terminals ask every single time. Nothing clicks until you say yes. Password managers and terminals ask for consent on every single action. readonly | ask (default) | allow · ask = confirm each write';
   const fanger = forbudt.filter(r => r.test(plantet)).length;
   if (!stdAllow || !termPrSession || flader.length < 20 || fanger < 3) {
     check('51. siderne lover det samtykke koden giver', false,
diff --git a/test/concurrent.mjs b/test/concurrent.mjs
index 3b4b138f..fcdfb5c4 100644
--- a/test/concurrent.mjs
+++ b/test/concurrent.mjs
@@ -25,6 +25,8 @@
 //    aabner et mikrosekunds vindue, kan slippe forbi en enkelt koersel.
 //    Vil man vaere sikker, er svaret O_APPEND i kernen - som er praecis det
 //    `appendFileSync` giver os, og derfor det vagten findes for at beskytte.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
 import { spawn } from 'child_process';
 import { readFileSync, existsSync, mkdtempSync } from 'fs';
 import { fileURLToPath } from 'url';
diff --git a/test/doer.mjs b/test/doer.mjs
new file mode 100644
index 00000000..4837b08d
--- /dev/null
+++ b/test/doer.mjs
@@ -0,0 +1,79 @@
+// Døren (computer_open): åbn en app's egen indgang bagfra via et INTENT + én
+// typet parameter - aldrig en fri URL fra modellen. Serveren bygger URL'en af
+// en fast skabelon og validerer parameteren strengt.
+//
+// ⛔ HVORFOR DEN FINDES (28/9)
+//    En dør der tog en fri URL/scheme ville være en generisk bagdør:
+//    file:, shortcuts://run-shortcut → shell, osascript = Turing-komplet. Prøven
+//    beviser: (1) der er INGEN url-parameter at injicere i, (2) hver parameter
+//    valideres så kun cifre/bogstaver passerer, (3) serveren bygger præcis den
+//    forventede app-URL. Helperen er mocket, så intet åbnes.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { mkdtempSync, writeFileSync, chmodSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// Mock-helper: ekko den modtagne --url / --app som JSON, aabn intet.
+const DIR = mkdtempSync(join(tmpdir(), 'cmcp-doer-'));
+const fakeHelper = join(DIR, 'fake-helper');
+writeFileSync(fakeHelper, `#!/bin/bash
+cmd="$1"; shift; url=""; app=""
+while [ $# -gt 0 ]; do case "$1" in --url) url="$2"; shift 2;; --app) app="$2"; shift 2;; *) shift;; esac; done
+if [ "$cmd" = "open-url" ]; then echo "{\\"ok\\":true,\\"echoed_url\\":\\"$url\\",\\"took_screen\\":false}"
+elif [ "$cmd" = "launch" ]; then echo "{\\"ok\\":true,\\"result\\":\\"launched in the background\\",\\"echoed_app\\":\\"$app\\",\\"took_screen\\":false}"
+else echo "{\\"ok\\":true}"; fi
+`);
+chmodSync(fakeHelper, 0o755);
+
+const srv = spawn('node', [join(ROOT, 'mcp-server/index.js')],
+  // Husets vagt 26: ingen prøve må kunne rejse en ægte macOS-dialog - fake osascript.
+  { env: { ...process.env, CMCP_HELPER: fakeHelper, CMCP_MODE: 'allow', CMCP_STATUS_IKON: '0', CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-doer').sti, CMCP_STATE_DIR: join(DIR, 'state') }, stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise(r => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); });
+const kald = async (args) => { const r = await rpc('tools/call', { name: 'computer_open', arguments: args }); const t = r.result?.content?.[0]?.text ?? ''; let d = null; try { d = JSON.parse(t); } catch {} return { fejl: !!r.result?.isError, tekst: t, data: d }; };
+
+try {
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'doer', version: '1' } });
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+
+  const tools = (await rpc('tools/list')).result?.tools || [];
+  const doer = tools.find(t => t.name === 'computer_open');
+  check('1 doeren findes', !!doer);
+  const props = Object.keys(doer?.inputSchema?.properties || {});
+  check('1b der er INGEN url-parameter at injicere i', !props.includes('url'), props.join(','));
+  check('1c parametrene er intent + typede felter', props.includes('intent') && props.includes('spotifyId') && props.includes('phone'));
+
+  // Gyldige intents -> praecis den forventede app-URL (mock ekko).
+  const t1 = await kald({ intent: 'play_track', spotifyId: '4cOdK2wGLETKBW3PvgPWqT' });
+  check('2 play_track bygger spotify:track: med id\'et', !t1.fejl && t1.data?.echoed_url === 'spotify:track:4cOdK2wGLETKBW3PvgPWqT', t1.data?.echoed_url || t1.tekst.slice(0, 80));
+  const t2 = await kald({ intent: 'open_chat', phone: '+45 60 17 45 69' });
+  check('3 open_chat bygger whatsapp://send?phone= (tegnene renset, ingen text)', !t2.fejl && t2.data?.echoed_url === 'whatsapp://send?phone=4560174569', t2.data?.echoed_url || t2.tekst.slice(0, 80));
+
+  // Ugyldige parametre -> AFVIST, intet aabnet.
+  const b1 = await kald({ intent: 'play_track', spotifyId: 'file:///etc/passwd' });
+  check('4 et forsoeg paa at smugle en sti ind i spotifyId afvises', b1.fejl && !b1.data?.echoed_url, b1.tekst.slice(0, 70));
+  const b2 = await kald({ intent: 'open_chat', phone: '4560; do shell script' });
+  check('5 et telefonnummer med skal-tekst afvises', b2.fejl, b2.tekst.slice(0, 70));
+  const b3 = await kald({ intent: 'run_shortcut', spotifyId: 'x' });
+  check('6 et ukendt intent afvises (ingen fri handling)', b3.fejl, b3.tekst.slice(0, 70));
+  const b4 = await kald({ intent: 'open_app', bundleId: 'com.x; rm -rf /' });
+  check('7 en bundle id med skal-tegn afvises', b4.fejl, b4.tekst.slice(0, 70));
+
+  // En medsendt fri url AFVISES helt: den er ikke et felt paa vaerktoejet, saa
+  // der er ingen vej at injicere en scheme ad. (Staerkere end at ignorere den.)
+  const t3 = await kald({ intent: 'play_track', spotifyId: '4cOdK2wGLETKBW3PvgPWqT', url: 'file:///etc/passwd' });
+  check('8 en medsendt fri url AFVISES (intet felt at injicere i)', t3.fejl && !t3.data?.echoed_url, t3.tekst.slice(0, 70));
+} finally {
+  srv.kill();
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/e2e-forloeb.mjs b/test/e2e-forloeb.mjs
index 5c382070..bc21275c 100644
--- a/test/e2e-forloeb.mjs
+++ b/test/e2e-forloeb.mjs
@@ -19,6 +19,8 @@
 //    fejlet port roerer intet.
 // E2E: ét forløb, én frisk server med dagens kode, som en agent ville bruge den.
 // Laesende paa menneskets RIGTIGE programmer. Skrivende KUN paa attrappen.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, execFileSync } from 'node:child_process';
 import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -176,28 +178,37 @@ try { midte = (JSON.parse(kf.tekst).matches || []).find(m => /orden-3/.test(JSON
 let klikMidte = null;
 try { klikMidte = (JSON.parse(kf.tekst).matches || []).find(m => /klik-maal/.test(JSON.stringify(m)))?.center; } catch {}
 if (klikMidte) {
+  // ⛔ RETTET (review-security, 2/10): denne knap er navngivet og helt
+  // almindelig ("klik-maal"), men maaler alligevel en KENDT AX-kvirk: punkt-
+  // opslaget (`at`) svarer found:false her (fejl -25200), gentagne gange,
+  // malt empirisk. Foer dette fund blev et saadant klik lukket igennem
+  // stille - noejagtig den samme fejlklasse som README's "Delete" paa et
+  // fjernskrivebord. Nu spoerger et klik der ikke kan identificeres, ALTID -
+  // ogsaa paa en helt harmloes knap. Attrap-spoergeren her svarer aldrig
+  // (`udloeb`), saa klikket afvises - det ER den sikre, korrekte opfoersel.
+  // Det fulde "menneske siger ja, klikket lander"-forloeb er allerede
+  // bevist andetsteds med en rigtig ja-spoerger (test/knap-ord.mjs,
+  // test/sende-port.mjs).
   const k = await kald('computer_click', { app: BID, x: klikMidte.x, y: klikMidte.y });
-  trin('haender+', 'click --app tager ikke skaermen', !k.fejl && /pointer stayed/.test(k.tekst), k.tekst.slice(0, 60));
-  // «It does not pretend»: svaret maa IKKE paastaa at klikket lykkedes.
-  trin('haender+', '...og paastaar ikke at klikket landede', /NOT verified/.test(k.tekst) && !/^Clicked at/.test(k.tekst),
-       k.tekst.slice(0, 60));
-  await new Promise(r => setTimeout(r, 700));
-  const efterK = await kald('computer_inspect', { app: BID });
-  // ⛔ UMAALT indtil nu. Rapporteres som maaling, ikke som paastand.
-  const landede = /KLIKKET/.test(efterK.tekst);
-  console.log(`\n  MAALING · landede klikket? ${landede ? 'JA' : 'NEJ'} - ${landede ? 'knappen skiftede titel' : 'knappen hedder stadig klik-maal'}`);
+  // Samme afvisnings-moenster som "adgangskode-program afvises" ovenfor:
+  // baggrundstilstand naegter en handling der kraever spoergsmaal, foer den
+  // overhovedet naar frem til en spoerger.
+  trin('haender+', 'et klik der ikke kan identificeres, spoerger - ogsaa paa en harmloes knap (AX-kvirk)',
+       k.fejl && /this would need a dialog/.test(k.tekst), k.tekst.slice(0, 90));
 } else if (midte) {
   trin('haender+', 'click --app (kunne ikke finde en knap at sigte paa)', false, kf.tekst.slice(0, 60));
 }
 
-// --- 3d. DE OTTE DER ALDRIG KAN GOERES STILLE - skal vaere SKJULT i baggrund,
+// --- 3d. DE SYV DER ALDRIG KAN GOERES STILLE - skal vaere SKJULT i baggrund,
+//     (29/9: `computer_ask_user` er ude af listen - i baggrund spoerger den via
+//     menulinje-ikonet; det maales i ikon-godkend.mjs del E.)
 //     og afvist hvis de kaldes ved navn alligevel. Skjult er ikke det samme
 //     som afvist, saa begge dele proeves.
 const SKJULT = ['computer_quit', 'computer_drag', 'computer_space', 'computer_paste',
-                'computer_window', 'computer_ask_user', 'computer_move', 'computer_activate'];
+                'computer_window', 'computer_move', 'computer_activate'];
 const tilbudt = SKJULT.filter(x => liste.includes(x));
-trin('skjult', 'de otte larmende tilbydes IKKE i baggrund', tilbudt.length === 0,
-     tilbudt.length ? 'TILBUDT: ' + tilbudt.join(', ') : 'ingen af de otte i listen');
+trin('skjult', 'de syv larmende tilbydes IKKE i baggrund', tilbudt.length === 0,
+     tilbudt.length ? 'TILBUDT: ' + tilbudt.join(', ') : 'ingen af de syv i listen');
 const tvang = await kald('computer_move', { x: 5, y: 5 });
 trin('skjult', '...og afvises hvis de kaldes ved navn alligevel', /Refused|not offered|unknown|background/i.test(tvang.tekst),
      tvang.tekst.slice(0, 70));
@@ -243,9 +254,14 @@ trin('log', 'took_screen staar i loggen', /took_screen/.test(log.tekst), (log.te
 // ⛔ Konsulenten 22/9: loggen sagde «ok» om baade «vi sendte det» og «det
 //    virkede». Nu staar der hvad vi FAKTISK ved: verified (laest efter),
 //    performed (programmet udfoerte den) eller sent (afleveret, udfald ukendt).
+// ⛔ RETTET (review-security, 2/10): «sent» kom tidligere KUN fra klikket paa
+//    «klik-maal» - det klik spoerger nu altid (se ovenfor), saa denne proeve
+//    naar aldrig frem til at taelle «sent» i DENNE frisk server. Selve
+//    effect-vaerdien er stadig i brug og proevet andetsteds, med en rigtig
+//    ja-spoerger (test/klik-ejer.mjs "9a kalibrering ... Clicked at 700, 50").
 const eff = [...log.tekst.matchAll(/"effect": "(\w+)"/g)].map(m => m[1]);
-trin('log', 'loggen skelner «sendt» fra «virkede»',
-     eff.includes('verified') && eff.includes('performed') && eff.includes('sent'),
+trin('log', 'loggen skelner mindst «verified» fra «virkede» («sent» proeves med et ja i test/klik-ejer.mjs)',
+     eff.includes('verified') && eff.includes('performed'),
      eff.length ? [...new Set(eff)].join(', ') : 'intet effect-felt');
 
 srv.kill(); attrap.kill();
diff --git a/test/efter-udgivelsen.mjs b/test/efter-udgivelsen.mjs
new file mode 100644
index 00000000..4160aa0a
--- /dev/null
+++ b/test/efter-udgivelsen.mjs
@@ -0,0 +1,144 @@
+// EFTER npm: REGISTRET OG DOKUMENTATIONS-PR'EN, I ENHVER TILSTAND.
+//
+// ⛔ 7/10 (panel R2-R8, punkt E): tools/faerdiggoer-udgivelsen.sh fortsatte efter et
+//    fejlet login til publish, koerte en kildeaendrende beviskoersel, glemte
+//    npm-README'en og navngav grenen anderledes end release.sh. tools/dok-pr.sh
+//    (fra genoptag-dok.sh, panel R4-R5) laver nu PR'en ud fra den faktiske tilstand.
+//
+// Koeres i en klon i tmp med lokal bare-origin og attrapper for npm, curl (registret),
+// mcp-publisher og gh. gh-attrappen sender AEGTE JSON gennem `jq -r "<-q>"`: en tom
+// liste er `[]`, ikke en tom streng (den forskel kostede en falsk «PR'en findes», R4).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync, spawnSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, readFileSync, chmodSync, existsSync, mkdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const V = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+const GIT = execFileSync('/bin/sh', ['-c', 'command -v git'], { encoding: 'utf8' }).trim();
+const GREN = `release-${V}-dok`;
+
+function opsaet(navn) {
+  const D = mkdtempSync(join(tmpdir(), `cmcp-efter-${navn}-`));
+  const K = join(D, 'repo'), BARE = join(D, 'origin.git'), BIN = join(D, 'bin'), LOG = join(D, 'kald.log');
+  mkdirSync(BIN);
+  execFileSync(GIT, ['clone', '-q', '--no-hardlinks', ROOT, K]);
+  for (const f of ['tools/dok-pr.sh', 'tools/faerdiggoer-udgivelsen.sh', 'scripts/sync-tal.py'])
+    writeFileSync(join(K, f), readFileSync(join(ROOT, f)));
+  const g = (...a) => execFileSync(GIT, a, { cwd: K, stdio: 'pipe', encoding: 'utf8' });
+  g('add', '-A', 'tools', 'scripts');
+  g('-c', 'user.name=p', '-c', 'user.email=p@example.invalid', 'commit', '-qm', 'proeve: arbejdstraeets vaerktoejer', '--allow-empty');
+  g('checkout', '-q', '-B', 'main');
+  execFileSync(GIT, ['clone', '-q', '--bare', K, BARE]);
+  g('remote', 'set-url', 'origin', BARE); g('fetch', '-q', 'origin'); g('branch', '-q', '-u', 'origin/main');
+  const stub = (n, krop) => { writeFileSync(join(BIN, n), `#!/bin/sh\necho "${n} $*" >> ${LOG}\n${krop}\n`); chmodSync(join(BIN, n), 0o755); };
+  return { D, K, BARE, BIN, LOG, g, stub };
+}
+function koer(o, script, { npmV = V, registret = V, login = 'exit 0', prJson = '[]', gitFejl = '' } = {}, ekstra = []) {
+  writeFileSync(join(o.D, 'registret'), registret);
+  o.stub('npm', `case "$1" in view) echo ${npmV} ;; *) exit 0 ;; esac`);
+  o.stub('curl', `printf '{"servers":[{"server":{"name":"io.github.Agent360dk/computer-mcp","version":"%s"},"_meta":{"io.modelcontextprotocol.registry/official":{"isLatest":true}}}]}' "$(cat ${join(o.D, 'registret')})"`);
+  o.stub('mcp-publisher', `case "$1" in login) ${login} ;; publish) echo ${V} > ${join(o.D, 'registret')} ;; esac`);
+  o.stub('gh', `if [ "$1 $2" = "pr list" ]; then q=""; while [ $# -gt 0 ]; do [ "$1" = "-q" ] && q="$2"; shift; done; printf '%s' '${prJson}' | jq -r "$q"; fi`);
+  writeFileSync(join(o.BIN, 'git'), `#!/bin/sh\nif [ "$1" = "ls-remote" ] && [ -n "${gitFejl}" ]; then exit ${gitFejl || 0}; fi\nexec ${GIT} "$@"\n`);
+  chmodSync(join(o.BIN, 'git'), 0o755);
+  const r = spawnSync('bash', [script, ...ekstra], { cwd: o.K, encoding: 'utf8', timeout: 300000,
+    env: { ...process.env, PATH: `${o.BIN}:${process.env.PATH}`, GIT_AUTHOR_NAME: 'p', GIT_AUTHOR_EMAIL: 'p@example.invalid',
+           GIT_COMMITTER_NAME: 'p', GIT_COMMITTER_EMAIL: 'p@example.invalid' } });
+  return { rc: r.status, ud: (r.stdout || '') + (r.stderr || ''), kald: existsSync(o.LOG) ? readFileSync(o.LOG, 'utf8') : '' };
+}
+const paaOrigin = (o, sti) => spawnSync(GIT, ['--git-dir', o.BARE, 'show', `${GREN}:${sti}`], { encoding: 'utf8' });
+const grenFiler = (o) => spawnSync(GIT, ['--git-dir', o.BARE, 'diff', '--name-only', 'main', GREN], { encoding: 'utf8' }).stdout.trim().split('\n').filter(Boolean);
+
+// F1 npm har ikke versionen: intet sker.
+{ const o = opsaet('f1'); const r = koer(o, 'tools/faerdiggoer-udgivelsen.sh', { npmV: '0.1.0', registret: '0.1.0' });
+  check('F1 npm mangler versionen: stop foer registret', r.rc !== 0 && !/mcp-publisher/.test(r.kald), `rc=${r.rc}`); }
+
+// F2 login fejler: ingen publish, ingen PR.
+{ const o = opsaet('f2'); const r = koer(o, 'tools/faerdiggoer-udgivelsen.sh', { registret: '0.1.0', login: 'exit 1' });
+  check('F2 login fejler: STOP - ingen publish og ingen PR', r.rc !== 0 && /mcp-publisher login/.test(r.kald) && !/mcp-publisher publish/.test(r.kald) && !/gh pr create/.test(r.kald),
+        (r.ud.match(/⛔[^\n]*/) || ['-'])[0].slice(0, 80)); }
+
+// F3 alt lykkes fra bunden: register, ny gren med npm-README'en, PR, main ren.
+{ const o = opsaet('f3'); const r = koer(o, 'tools/faerdiggoer-udgivelsen.sh', { registret: '0.1.0' });
+  const filer = grenFiler(o);
+  check('F3 alt groent: rc 0, registret opdateret, PR oprettet', r.rc === 0 && /mcp-publisher publish/.test(r.kald) && /gh pr create/.test(r.kald), `rc=${r.rc}`);
+  check("F3 ...grenen hedder som release.sh's og baerer npm-README'en", filer.includes('mcp-server/README.md') && filer.includes('PUBLICERET'), `${filer.length} filer`);
+  check("F3 ...forbeholdet er vaek fra forsiden og npm-README'en", !/currently serves/.test(paaOrigin(o, 'docs/index.html').stdout) && !/not published yet/.test(paaOrigin(o, 'mcp-server/README.md').stdout));
+  check('F3 ...arbejdstraeet staar rent paa main bagefter', o.g('status', '--porcelain').trim() === '' && o.g('branch', '--show-current').trim() === 'main', o.g('status', '--porcelain').trim().slice(0, 120) + ' @ ' + o.g('branch', '--show-current').trim());
+  check('F3 ...ingen kildeaendrende beviskoersel', !/bevis\.sh/.test(r.kald) && !filer.includes('mcp-server/audit.js'));
+  // Panel R11 (B5): pluginnet og markedet foelger PUBLICERET og loeftes HER, efter publish.
+  let pl = {}, mk = {}; try { pl = JSON.parse(paaOrigin(o, 'plugin/.claude-plugin/plugin.json').stdout); mk = JSON.parse(paaOrigin(o, '.claude-plugin/marketplace.json').stdout); } catch {}
+  check("F3 ...dok-PR'en loefter pluginnet og markedet til den udgivne version", pl.version === V
+        && JSON.stringify(pl.mcpServers?.['computer-mcp']?.args) === JSON.stringify(['-y', `@agent360/computer-mcp@${V}`])
+        && mk.plugins?.[0]?.version === V && filer.includes('plugin/.claude-plugin/plugin.json'), `${pl.version} / ${mk.plugins?.[0]?.version} / ${V}`); }
+
+// F4 PR'en findes allerede (registret ogsaa): intet skubbes.
+{ const o = opsaet('f4'); const r = koer(o, 'tools/faerdiggoer-udgivelsen.sh', { prJson: '[{"number":12,"state":"OPEN"}]' });
+  check('F4 PR findes: intet login, intet nyt PR', r.rc === 0 && !/mcp-publisher login/.test(r.kald) && !/gh pr create/.test(r.kald) && /findes allerede/.test(r.ud), `rc=${r.rc}`); }
+
+// F5 grenen findes kun paa origin (PR-oprettelsen fejlede sidst): skub + PR, ingen regenerering paa main.
+{ const o = opsaet('f5');
+  o.g('checkout', '-q', '-b', GREN); writeFileSync(join(o.K, 'PUBLICERET'), V + '\n');
+  execFileSync('python3', ['scripts/sync-tal.py'], { cwd: o.K, stdio: 'pipe' });
+  o.g('add', '-A'); o.g('-c', 'user.name=p', '-c', 'user.email=p@example.invalid', 'commit', '-qm', 'dok'); o.g('push', '-q', 'origin', GREN);
+  o.g('checkout', '-q', 'main'); o.g('branch', '-q', '-D', GREN);
+  const r = koer(o, 'tools/dok-pr.sh');
+  check('F5 gren kun paa origin: PR oprettes, main roeres ikke', r.rc === 0 && /gh pr create/.test(r.kald) && o.g('status', '--porcelain').trim() === '', `rc=${r.rc} ${r.ud.slice(-300).replace(/\s+/g, ' ')}`); }
+
+// F6 synkroniseringen doede halvvejs (PUBLICERET skrevet, siderne ikke): naeste koersel retter det.
+{ const o = opsaet('f6'); writeFileSync(join(o.K, 'PUBLICERET'), V + '\n');
+  const r = koer(o, 'tools/dok-pr.sh');
+  check('F6 halv synkronisering: grenen faar ogsaa siderne', r.rc === 0 && !/currently serves/.test(paaOrigin(o, 'docs/index.html').stdout) && grenFiler(o).includes('docs/index.html'), `rc=${r.rc}`); }
+
+// F7 origin kan ikke naas: stop, intet skrevet.
+{ const o = opsaet('f7'); const r = koer(o, 'tools/dok-pr.sh', { gitFejl: '128' });
+  check('F7 origin nede: stop, intet skrevet', r.rc !== 0 && /kan ikke n(å|aa) origin/.test(r.ud) && o.g('status', '--porcelain').trim() === '', (r.ud.match(/⛔[^\n]*/) || ['-'])[0].slice(0, 80)); }
+
+// F9 (Astra R10) committet fejler én gang efter at grenen er oprettet; naeste koersel
+//    faerdiggoer committet i stedet for at stoppe med «ingen aendringer».
+{ const o = opsaet('f9');
+  mkdirSync(join(o.D, 'kroge'));
+  o.g('config', 'core.hooksPath', join(o.D, 'kroge'));
+  writeFileSync(join(o.D, 'kroge', 'pre-commit'), '#!/bin/sh\nexit 1\n'); chmodSync(join(o.D, 'kroge', 'pre-commit'), 0o755);
+  const foer = koer(o, 'tools/dok-pr.sh');
+  check('forudsaetning F9: foerste koersel fejler i committet', foer.rc !== 0 && o.g('branch', '--show-current').trim() === GREN, `rc=${foer.rc}`);
+  writeFileSync(join(o.D, 'kroge', 'pre-commit'), '#!/bin/sh\nexit 0\n');
+  const toer = koer(o, 'tools/dok-pr.sh', {}, ['--toer']);
+  check('F9 toerkoerslen viser det manglende commit og stopper ikke', toer.rc === 0 && /git commit/.test(toer.ud), `rc=${toer.rc}`);
+  const r = koer(o, 'tools/dok-pr.sh');
+  check('F9 genoptaget efter fejlet commit: committet faerdiggjort, skubbet, PR oprettet', r.rc === 0 && /gh pr create/.test(r.kald)
+        && grenFiler(o).includes('PUBLICERET'), `rc=${r.rc} ${(r.ud.match(/⛔[^\n]*/) || [''])[0].slice(0, 80)}`); }
+
+// F10/F11 (Astra R11, MÅLT): en andens STAGED kildekode maa aldrig komme med paa dok-grenen -
+//    hverken ved genoptagelse efter et fejlet commit (F10) eller paa den nye gren (F11) - og
+//    den skal stadig ligge staged bagefter.
+const fremmed = (o) => { writeFileSync(join(o.K, 'mcp-server', 'index.js'), readFileSync(join(o.K, 'mcp-server', 'index.js'), 'utf8') + '\n// fremmed\n');
+  o.g('add', 'mcp-server/index.js'); };
+{ const o = opsaet('f10');
+  mkdirSync(join(o.D, 'kroge'));
+  o.g('config', 'core.hooksPath', join(o.D, 'kroge'));
+  writeFileSync(join(o.D, 'kroge', 'pre-commit'), '#!/bin/sh\nexit 1\n'); chmodSync(join(o.D, 'kroge', 'pre-commit'), 0o755);
+  koer(o, 'tools/dok-pr.sh');
+  writeFileSync(join(o.D, 'kroge', 'pre-commit'), '#!/bin/sh\nexit 0\n');
+  fremmed(o);
+  const r = koer(o, 'tools/dok-pr.sh');
+  check('F10 genoptagelse: kun vores filer paa dok-grenen, den fremmede aendring stadig staged', r.rc === 0 && /gh pr create/.test(r.kald)
+        && !grenFiler(o).includes('mcp-server/index.js') && o.g('diff', '--cached', '--name-only').includes('mcp-server/index.js'),
+        `rc=${r.rc} gren: ${grenFiler(o).join(',').slice(0, 80)}`); }
+{ const o = opsaet('f11'); fremmed(o);
+  const r = koer(o, 'tools/dok-pr.sh');
+  check('F11 ny gren: kun vores filer paa dok-grenen, den fremmede aendring stadig staged', r.rc === 0 && /gh pr create/.test(r.kald)
+        && !grenFiler(o).includes('mcp-server/index.js') && o.g('diff', '--cached', '--name-only').includes('mcp-server/index.js'),
+        `rc=${r.rc} gren: ${grenFiler(o).join(',').slice(0, 80)}`); }
+
+// F8 GitHubs tomme liste `[]` er IKKE «PR'en findes».
+{ const o = opsaet('f8'); const r = koer(o, 'tools/dok-pr.sh', { prJson: '[]' });
+  check('F8 tom PR-liste ([]): ingen falsk «findes», PR oprettes', !/findes allerede/.test(r.ud) && /gh pr create/.test(r.kald), `rc=${r.rc}`); }
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/egen-tilstand.mjs b/test/egen-tilstand.mjs
new file mode 100644
index 00000000..c6b8b3fa
--- /dev/null
+++ b/test/egen-tilstand.mjs
@@ -0,0 +1,17 @@
+// Hver proeve der starter serveren, faar sin EGEN tilstandsmappe - ogsaa koert alene.
+//
+// ⛔ 7/10 (panel R8-R9, punkt F): en serverstart uden CMCP_STATE_DIR skriver i
+//    menneskets rigtige revisionslog, koe og samtykke (~/.local/state/computer-mcp).
+//    Hver fil satte den selv - men en glemt start, eller en proeve der SLETTEDE
+//    variablen undervejs (claims 34), ville ramme den rigtige. Importeres foerst;
+//    `test/tilstand-isoleret.mjs` kraever importen i hver fil der starter serveren.
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+if (!process.env.CMCP_STATE_DIR) process.env.CMCP_STATE_DIR = mkdtempSync(join(tmpdir(), 'cmcp-proeve-tilstand-'));
+// 7/10: og ingen proeve starter eller spoerger menneskets rigtige menulinje-ikon, naar
+// den koeres alene (run-all.sh goer det samme). Proever der maaler ikonet, saetter selv
+// CMCP_STATUS_IKON og bruger et falsk ikon i deres egen mappe. Fundet: sessionsport
+// koert alene sendte sine spoergsmaal til menulinjen i stedet for proevens attrap.
+if (process.env.CMCP_STATUS_IKON === undefined) process.env.CMCP_STATUS_IKON = '0';
+export const PROEVE_TILSTAND = process.env.CMCP_STATE_DIR;
diff --git a/test/errors.mjs b/test/errors.mjs
index 504b23d6..c8a18130 100644
--- a/test/errors.mjs
+++ b/test/errors.mjs
@@ -31,6 +31,7 @@
 // synlige Space. Dem er der altid nogle af, og maskinen siger selv hvilke.
 // Ingen fixtur, ingen binaer i repoet, intet der afhaenger af hvordan
 // skrivebordet tilfaeldigvis staar.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFile } from 'child_process';
 import { existsSync } from 'fs';
 import { promisify } from 'util';
diff --git a/test/failclosed.mjs b/test/failclosed.mjs
index 59537477..456e53f8 100644
--- a/test/failclosed.mjs
+++ b/test/failclosed.mjs
@@ -16,6 +16,7 @@
 //    blev aldrig muteret, og proeven var groen mod ren kode. Det lignede et
 //    bevis. Fanget fordi jeg sammenlignede md5 foer og efter i stedet for at
 //    antage at gendannelsen var noedvendig.
+import './ryd-op.mjs';
 import { spawn } from 'child_process';
 import { tmpdir } from 'os';
 import { mkdtempSync } from 'fs';
diff --git a/test/falsk-hjaelper.mjs b/test/falsk-hjaelper.mjs
index 0025a871..ce0b64aa 100644
--- a/test/falsk-hjaelper.mjs
+++ b/test/falsk-hjaelper.mjs
@@ -13,7 +13,8 @@
 //    Seam'en fandtes allerede (`CMCP_HELPER`, brugt i paastand 8). Den bruges
 //    nu i ALLE port-proever: bryder porten sammen, lander handlingen i en
 //    tekstfil i stedet for paa skaermen, og proeven kan stadig se at den kom.
-import { writeFileSync, chmodSync, mkdtempSync, existsSync, readFileSync, appendFileSync } from 'fs';
+import './ryd-op.mjs';
+import { writeFileSync, chmodSync, mkdtempSync, mkdirSync, existsSync, readFileSync, appendFileSync } from 'fs';
 import { join } from 'path';
 import { spawn, spawnSync } from 'child_process';
 import { tmpdir } from 'os';
@@ -26,9 +27,28 @@ import { tmpdir } from 'os';
 ///    `screenshot` er et opslag i hjaelperens forstand, men det optager skaermen:
 ///    det sendes kun videre med --plan eller paa en fremmed maskine (se nedenfor).
 export const HJAELPER_OPSLAG = ['apps', 'displays', 'find', 'focused', 'inspect', 'menus', 'permissions',
-  'redact', 'screenshot', 'secure-rects', 'version', 'wait-for', 'windows', 'at', 'resolve-app'];
+  'redact', 'screenshot', 'secure-rects', 'version', 'wait-for', 'windows', 'at', 'resolve-app', 'samtale', 'idle'];
 
-export function lavFalskHjaelper(navn = 'cmcp-falsk') {
+/// De fem opslag der AFGOER en dom: hvad ligger forrest, hvad ligger under et punkt,
+/// hvad har fokus, hvad ville et tryk ramme, og hvor laenge har mennesket vaeret vaek.
+///
+/// ⛔ 7/10 (panel R8, punkt H): de blev sendt videre til den AEGTE hjaelper, saa
+///    dommen afhang af hvad der tilfaeldigvis laa paa udviklerens skaerm. R6-R7 kostede
+///    tre roede dage: en webchat forrest, Finder forrest, et punkt i menulinjen. Nu svarer
+///    attrappen fast og neutralt (Finder bag, TextEdit forrest, Finder under ethvert punkt,
+///    et «OK»-tryk, mennesket vaek i 10 min). En proeve der vil have noget andet, siger
+///    det med `saetSvar`; en der vil maale skaermen, skal bede om det:
+///    `lavFalskHjaelper(navn, { aegteOpslag: true })`.
+export const FASTE_OPSLAG = {
+  apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: false },
+                 { name: 'TextEdit', bundleId: 'com.apple.TextEdit', pid: 3302, active: true }] },
+  at: { found: true, bundleId: 'com.apple.finder', role: 'AXGroup', title: '' },
+  focused: { focused: true, element: { role: 'AXTextArea', secure: false } },
+  'press --dry': { would_press: { name: 'OK', role: 'AXButton' } },
+  idle: { idle: 600 },
+};
+
+export function lavFalskHjaelper(navn = 'cmcp-falsk', { aegteOpslag = false } = {}) {
   const dir = mkdtempSync(join(tmpdir(), navn + '-'));
   // Den rigtige hjaelper - opslag sendes videre dertil, saa proeverne stadig
   // maaler virkeligheden. Findes den ikke, svarer attrappen selv.
@@ -46,10 +66,46 @@ export function lavFalskHjaelper(navn = 'cmcp-falsk') {
   //    Derfor: OPSLAG sendes videre til den rigtige hjaelper og svarer sandt.
   //    Kun HANDLINGER - dem der kan roere skaermen - sluges og noteres.
   writeFileSync(js, `
-import { appendFileSync, writeSync } from 'fs';
+import { appendFileSync, writeSync, readFileSync } from 'fs';
 import { spawnSync } from 'child_process';
 const argv = process.argv.slice(2);
 const kommando = argv[0] || '';
+// Scriptede svar (29/9, sende-porten): en proeve kan bestemme hvad et opslag
+// svarer - «samtale», «at» eller «press --dry» - og aendre det undervejs.
+try {
+  const SVAR = JSON.parse(readFileSync(${JSON.stringify(join(dir, 'svar.json'))}, 'utf8'));
+  const noegle = kommando + (argv.includes('--dry') ? ' --dry' : '');
+  if (SVAR[noegle]) {
+    // «_vent» (ms): hjaelperen «arbejder» saa laenge - saa en proeve kan afbryde den midt i.
+    if (SVAR[noegle]._vent) {
+      // Ikke-blokerende, saa et signal kan naa frem undervejs. SIGUSR1 = «stop foer
+      // du goer noget» (paste ved laanets slut, runde 4): registreres og svares som
+      // den rigtige hjaelper goer.
+      process.on('SIGUSR1', () => {
+        appendFileSync(${JSON.stringify(spor)}, JSON.stringify({ argv, ts: Date.now(), signal: 'SIGUSR1' }) + '\\n');
+        writeSync(1, JSON.stringify({ ok: false, code: 'screen-taken-back', error: 'stopped before pasting: the screen loan ended' }) + '\\n');
+        process.exit(1);
+      });
+      await new Promise(r => setTimeout(r, SVAR[noegle]._vent));
+    }
+    appendFileSync(${JSON.stringify(spor)}, JSON.stringify({ argv, ts: Date.now(), scriptet: true }) + '\\n');
+    writeSync(1, JSON.stringify({ ok: true, ...SVAR[noegle] }) + '\\n');
+    process.exit(0);
+  }
+} catch {}
+// Faste standardsvar (punkt H) - kun naar proeven ikke selv har scriptet opslaget,
+// og ikke har bedt om aegte opslag.
+const FASTE = ${aegteOpslag ? 'null' : JSON.stringify(FASTE_OPSLAG)};
+const fastNoegle = kommando + (argv.includes('--dry') ? ' --dry' : '');
+if (FASTE && FASTE[fastNoegle]) {
+  appendFileSync(${JSON.stringify(spor)}, JSON.stringify({ argv, ts: Date.now(), fast: true }) + '\\n');
+  writeSync(1, JSON.stringify({ ok: true, ...FASTE[fastNoegle] }) + '\\n');
+  process.exit(0);
+}
+// ⛔ 30/9: «samtale» laeser en beskedapps modtager og tekst. Sendt videre til den
+//    rigtige hjaelper kunne en proevekoersel paa en udviklers Mac laese hans
+//    RIGTIGE chats (claim 35 ramte Gustavs WhatsApp). Uscriptet svarer den tomt.
+if (kommando === 'samtale') { writeSync(1, JSON.stringify({ ok: true }) + '\\n'); process.exit(0); }
 // ⛔ FUNDET 22/9: her stod en liste over HANDLINGER der skulle sluges -
 //    'menu', 'window' - mens hjaelperens rigtige kommandoer hedder
 //    'menu-click', 'window-button', 'window-set', 'set-value' og 'drag'.
@@ -58,7 +114,8 @@ const kommando = argv[0] || '';
 //    En liste over hvad der er farligt, er altid ufuldstaendig. Nu er det
 //    omvendt: kun kendte OPSLAG sendes videre, alt andet sluges.
 const OPSLAG = new Set(${JSON.stringify(HJAELPER_OPSLAG)});
-appendFileSync(${JSON.stringify(spor)}, JSON.stringify({ argv, ts: Date.now() }) + '\\n');
+// Et --dry er et opslag (intet trykkes), ikke en handling.
+if (!argv.includes('--dry')) appendFileSync(${JSON.stringify(spor)}, JSON.stringify({ argv, ts: Date.now() }) + '\\n');
 // ⛔ 25/9 (proeve-reviewet): «screenshot» blev sendt videre til den AEGTE hjaelper -
 //    kun flaget i proeverne beskyttede menneskets skaerm, ikke attrappen selv.
 if (kommando === 'screenshot' && !argv.includes('--plan') && process.env.CMCP_FREMMED_MASKINE !== '1') {
@@ -66,7 +123,11 @@ if (kommando === 'screenshot' && !argv.includes('--plan') && process.env.CMCP_FR
     error: 'the test stub does not photograph a real screen (set CMCP_FREMMED_MASKINE=1 on a machine nobody is working on)' }) + '\\n');
   process.exit(1);
 }
-if (!OPSLAG.has(kommando)) {
+// ⛔ 7/10 (Astra R10): «press --dry» er et opslag (hjaelperen svarer og afslutter foer
+//    trykket - main.swift «if args.flag("dry")» -> Out.ok, og kun press kender --dry), men
+//    det blev slugt her som en handling. Med aegteOpslag fik proeven derfor aldrig det
+//    rigtige svar. Uden aegteOpslag svarer de faste svar ovenfor foer vi naar hertil.
+if (!OPSLAG.has(kommando) && !(kommando === 'press' && argv.includes('--dry'))) {
   writeSync(1, JSON.stringify({ ok: true, note: 'attrap - intet blev udfoert' }) + '\\n');
   process.exit(0);
 }
@@ -100,6 +161,8 @@ process.exit(r.status === null ? 1 : r.status);
   return {
     sti: wrapper,
     /// Hvad naaede frem til hjaelperen? Tom liste = porten holdt.
+    /// Scriptede svar: { samtale: {...}, at: {...}, 'press --dry': {...} }.
+    saetSvar(svar) { writeFileSync(join(dir, 'svar.json'), JSON.stringify(svar)); },
     kald() {
       if (!existsSync(spor)) return [];
       return readFileSync(spor, 'utf8').trim().split('\n').filter(Boolean).map(JSON.parse);
@@ -127,7 +190,7 @@ process.exit(r.status === null ? 1 : r.status);
     ///    harmloese. Et nyt vaerktoej er daekket den dag det skrives.
     handlingerNaaedeFrem() {
       const OPSLAG = new Set(HJAELPER_OPSLAG);
-      return this.kald().filter(k => !OPSLAG.has(k.argv[0]));
+      return this.kald().filter(k => !OPSLAG.has(k.argv[0]) && !k.argv.includes('--dry'));
     }
   };
 }
@@ -296,6 +359,9 @@ case "$1" in
     esac ;;
   *)
     APP=""; prev=""; for a in "$@"; do [ "$prev" = "--app" ] && APP="$a"; prev="$a"; done
+    # 0.2.2 (bundet maal, R17): porten sender et koerende maal som «=<id>». Nettet
+    # sammenligner id'et - ellers stoppede det selv proevens egne programmer (10/10).
+    APP="\${APP#=}"
     if [ -z "$APP" ] || ! grep -qxF -- "$APP" "${tilladte}"; then
       printf '%s\\n' "$*" >> "${spor}"
       echo '{"ok":false,"code":"test-safety-net","error":"stopped by the test safety net: not an app the test opened"}'
@@ -328,3 +394,25 @@ export const FREMMED_MASKINE = process.env.CMCP_FREMMED_MASKINE === '1';
 /// Umaerkelige - men det er stadig input paa hans maskine. (Fable, runde 2.)
 export const ROER_GRUND = 'umaalt her: sender input i et program mennesket bruger - koer med CMCP_FREMMED_MASKINE=1 paa en maskine der ikke er Gustavs';
 export const OPTAG_GRUND = 'umaalt her: optager den rigtige skaerm - koer med CMCP_FREMMED_MASKINE=1 paa en maskine der ikke er Gustavs';
+
+/// Et stand-in for menulinje-ikonet, som maalingen (tilstede.js) kan finde: en lille proces
+/// paa en sti der ender paa /Contents/MacOS/cmcp-status, en Info.plist med `version`, og
+/// dens procesnummer i tilstandsmappens status.pid - som det rigtige ikon skriver det.
+/// Saa maaler en proeve DETTE ikon og aldrig menneskets rigtige.
+/// ⛔ 7/10: en kopi af /bin/sleep draebes af macOS (Apples egne programmer koerer ikke fra
+///    en anden sti, exit 137). Et lille program kompileret til formaalet virker.
+export function lavStandinIkon(stateDir, version) {
+  const dir = mkdtempSync(join(tmpdir(), 'cmcp-standin-ikon-'));
+  const indhold = join(dir, 'ComputerMCPStatus.app', 'Contents');
+  mkdirSync(join(indhold, 'MacOS'), { recursive: true });
+  writeFileSync(join(dir, 's.c'), '#include <unistd.h>\nint main(void){ sleep(600); return 0; }\n');
+  const exe = join(indhold, 'MacOS', 'cmcp-status');
+  const cc = spawnSync('cc', ['-o', exe, join(dir, 's.c')], { encoding: 'utf8' });
+  if (cc.status !== 0) throw new Error('stand-in-ikonet kunne ikke bygges: ' + (cc.stderr || '').slice(0, 120));
+  const plist = join(indhold, 'Info.plist');
+  writeFileSync(plist, '<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n' +
+    `<plist version="1.0"><dict><key>CFBundleShortVersionString</key><string>${version}</string></dict></plist>\n`);
+  const p = spawn(exe, [], { stdio: 'ignore' });
+  writeFileSync(join(stateDir, 'status.pid'), String(p.pid));
+  return { plist, pid: p.pid, stop() { try { p.kill(); } catch {} } };
+}
diff --git a/test/film.mjs b/test/film.mjs
new file mode 100644
index 00000000..252078e6
--- /dev/null
+++ b/test/film.mjs
@@ -0,0 +1,54 @@
+// FILM: en skaermoptagelse af det en proeve goer, saa et menneske kan SE beviset.
+//
+// ⛔ HVORFOR DEN FINDES (1/10-2026)
+//    Gustav: «film hvordan den fungerer, saa du sikrer at alle use cases leverer».
+//    Et JSON-svar siger at det virkede; en film viser det - ogsaa det ingen proeve
+//    spurgte om (et vindue der blinkede frem, en dialog der stod og ventede).
+//
+// ⛔ KUN PAA EN FREMMED MASKINE (CMCP_FREMMED_MASKINE=1) og kun naar en mappe er
+//    givet (CMCP_FILM=<mappe>). Paa menneskets Mac optages ALDRIG - det er hans
+//    skaerm, ikke vores bevismateriale.
+import { spawn, execFileSync } from 'node:child_process';
+import { mkdirSync, existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+
+const vent = (ms) => new Promise(r => setTimeout(r, ms));
+
+export function filmMappe() {
+  if (process.env.CMCP_FREMMED_MASKINE !== '1' || !process.env.CMCP_FILM) return null;
+  mkdirSync(process.env.CMCP_FILM, { recursive: true });
+  return process.env.CMCP_FILM;
+}
+
+let ffmpeg = null;
+function findFfmpeg() {
+  if (ffmpeg !== null) return ffmpeg;
+  for (const p of ['/opt/homebrew/bin/ffmpeg', '/usr/local/bin/ffmpeg']) if (existsSync(p)) return (ffmpeg = p);
+  try { return (ffmpeg = execFileSync('which', ['ffmpeg'], { encoding: 'utf8' }).trim()); } catch { return (ffmpeg = ''); }
+}
+
+/// Starter en optagelse af hovedskaermen. `stop()` afslutter den og giver stien,
+/// eller null hvis der ikke kom en brugbar film ud (saa siger rapporten det).
+export function startFilm(navn) {
+  const mappe = filmMappe();
+  const ff = mappe && findFfmpeg();
+  if (!mappe || !ff) return { sti: null, stop: async () => null, grund: mappe ? 'ffmpeg mangler' : 'ikke en fremmed maskine' };
+  const sti = join(mappe, `${navn.replace(/[^\w.-]+/g, '-')}.mp4`);
+  const p = spawn(ff, ['-hide_banner', '-loglevel', 'error', '-f', 'avfoundation', '-capture_cursor', '1',
+    '-framerate', '10', '-i', 'Capture screen 0:none', '-vf', 'scale=1280:-2', '-pix_fmt', 'yuv420p',
+    '-c:v', 'libx264', '-preset', 'ultrafast', '-y', sti], { stdio: ['pipe', 'ignore', 'pipe'] });
+  let fejl = '';
+  p.stderr.on('data', d => { fejl += d; });
+  const slut = new Promise(r => p.on('close', r));
+  return {
+    sti,
+    async stop() {
+      try { p.stdin.write('q'); p.stdin.end(); } catch {}
+      const t = setTimeout(() => { try { p.kill('SIGINT'); } catch {} }, 8000);
+      await slut; clearTimeout(t);
+      await vent(200);
+      return existsSync(sti) && statSync(sti).size > 10_000 ? sti : null;
+    },
+    fejl: () => fejl.slice(0, 300),
+  };
+}
diff --git a/test/fixture/placering.swift b/test/fixture/placering.swift
new file mode 100644
index 00000000..eac280e7
--- /dev/null
+++ b/test/fixture/placering.swift
@@ -0,0 +1,32 @@
+// Proevevindue til `billede-placering.mjs`: et vindue paa en KENDT plads paa
+// hovedskaermen, med et aegte kodeordsfelt paa en kendt plads i vinduet.
+//
+// Det skal vaere PAA skaermen - et billede af et program tages kun af det der
+// er paa skaermen. Saa det goeres usynligt paa anden maade: 2 % synligt, under
+// alle almindelige vinduer, og musen gaar igennem det.
+import AppKit
+
+let app = NSApplication.shared
+app.setActivationPolicy(.accessory)
+// AX-rammen (400 + PLAC_DX, 400, 200, 100) - AppKit regner nedefra. PLAC_DX flytter vinduet
+// over paa en anden skaerm (R28: skala og origo paa en skaerm der ikke er hovedskaermen).
+let H = NSScreen.screens[0].frame.height
+let DX = Double(ProcessInfo.processInfo.environment["PLAC_DX"] ?? "0") ?? 0
+let w = NSWindow(contentRect: NSRect(x: 400 + DX, y: H - 400 - 100, width: 200, height: 100),
+                 styleMask: [.borderless], backing: .buffered, defer: false)
+w.backgroundColor = .white
+w.isOpaque = false
+w.alphaValue = 0.02
+w.hasShadow = false
+w.ignoresMouseEvents = true
+w.level = NSWindow.Level(rawValue: NSWindow.Level.normal.rawValue - 1)
+w.collectionBehavior = [.canJoinAllSpaces]
+w.title = "cmcp-placering"
+// Feltet: AX (500, 450) til (580, 480).
+let felt = NSSecureTextField(frame: NSRect(x: 100, y: 20, width: 80, height: 30))
+felt.stringValue = "x"
+w.contentView?.addSubview(felt)
+w.orderFront(nil)
+print("pid=\(getpid())")
+fflush(stdout)
+app.run()
diff --git a/test/fixture/proevemaal.swift b/test/fixture/proevemaal.swift
index 814a84db..7eb1ae3c 100644
--- a/test/fixture/proevemaal.swift
+++ b/test/fixture/proevemaal.swift
@@ -6,6 +6,7 @@
 //
 // Vinduet placeres UDEN FOR enhver skaerm, saa intet kan ses.
 import AppKit
+import Carbon
 
 /// Et vindue uden titellinje kan som standard ikke blive noeglevindue, og
 /// saa naar tastetryk aldrig feltet. Proeverne skal kunne taste i det.
@@ -20,10 +21,18 @@ final class WebKodeord: NSTextField {
     override func accessibilitySubrole() -> NSAccessibility.Subrole? { .secureTextField }
 }
 
-final class App: NSObject, NSApplicationDelegate {
+/// Et felt der taeller rul (10/10): scroll bagved skal lande i programmet paa et PUNKT,
+/// ikke der hvor menneskets markoer staar.
+final class RulFelt: NSTextField {
+    var antal = 0, sum = 0.0
+    override func scrollWheel(with e: NSEvent) { antal += 1; sum += e.scrollingDeltaY; stringValue = "rul: \(antal) dy \(Int(sum))" }
+}
+
+final class App: NSObject, NSApplicationDelegate, NSMenuDelegate {
     var vindue: NSWindow!
     var felt: NSTextField!
     var knap: NSButton!
+    var skift: DispatchSourceSignal?
 
     @objc func trykket() { knap.title = "TRYKKET" }
     @objc func hentFrem() { NSApp.activate(ignoringOtherApps: true) }
@@ -36,6 +45,17 @@ final class App: NSObject, NSApplicationDelegate {
     var klikMaal: NSButton!
     @objc func klikket() { klikMaal.title = "KLIKKET" }
 
+    var menuTael: NSTextField!
+    var menuFokus: NSView? = nil
+    var aabnet = 0, lukket = 0, noed = 0
+    func vis() { menuTael.stringValue = "menu: aabnet \(aabnet) lukket \(lukket) noed \(noed)" }
+    func menuWillOpen(_ m: NSMenu) {
+        aabnet += 1; vis()
+        let t = Timer(timeInterval: 3.0, repeats: false) { [weak self] _ in self?.noed += 1; self?.vis(); m.cancelTracking() }
+        RunLoop.main.add(t, forMode: .eventTracking)
+    }
+    func menuDidClose(_ m: NSMenu) { lukket += 1; vis() }
+
     /// Et Gem-panel som ARK paa attrappens eget vindue - uden for skaermen,
     /// saa intet kan ses. Tilfoejet 22/9: filpaneler er det eneste hul der
     /// STOPPER en agent, og et panel kan ikke maales uden at et findes.
@@ -88,6 +108,23 @@ final class App: NSObject, NSApplicationDelegate {
         let rulle = NSPopUpButton(frame: NSRect(x: 180, y: 10, width: 110, height: 26))
         rulle.addItems(withTitles: ["rulle-A", "rulle-B"])
         vindue.contentView?.addSubview(rulle)
+        // ⛔ 10/10: en menu fra et program BAGVED tegnes paa menneskets skaerm. Kun naar en
+        //    proeve beder om det, taeller rullemenuen aabninger og lukninger i et felt, og den
+        //    lukker sig selv efter 3 s - saa en proeve uden net aldrig efterlader en menu aaben.
+        if ProcessInfo.processInfo.environment["CMCP_PROEVE_MENU"] == "1" {
+            // Egen rullemenu paa en FRI plads: «rulle» ovenfor ligger under tekstfeltet, saa et
+            // klik der rammer den, rammer feltet (maalt 10/10).
+            vindue.setContentSize(NSSize(width: 300, height: 200))
+            let menuRulle = NSPopUpButton(frame: NSRect(x: 10, y: 160, width: 120, height: 26))
+            menuRulle.addItems(withTitles: ["menu-A", "menu-B"])
+            vindue.contentView?.addSubview(menuRulle)
+            menuTael = NSTextField(labelWithString: "menu: aabnet 0 lukket 0 noed 0")
+            menuTael.frame = NSRect(x: 10, y: 130, width: 280, height: 20)
+            vindue.contentView?.addSubview(menuTael)
+            menuRulle.menu?.delegate = self
+            // R28 R4: fokus paa rullemenuen, saa en tast eller tekst bagved kan proeves mod den.
+            if ProcessInfo.processInfo.environment["CMCP_PROEVE_MENU_FOKUS"] == "1" { menuFokus = menuRulle }
+        }
 
         klikMaal = NSButton(frame: NSRect(x: 180, y: 50, width: 110, height: 24))
         klikMaal.title = "klik-maal"
@@ -113,6 +150,12 @@ final class App: NSObject, NSApplicationDelegate {
             andet.stringValue = "filnavn.txt"
             vindue.contentView?.addSubview(andet)
         }
+        if ProcessInfo.processInfo.environment["CMCP_PROEVE_RUL"] == "1" {
+            vindue.setContentSize(NSSize(width: 300, height: 200))
+            let rul = RulFelt(labelWithString: "rul: 0 dy 0")
+            rul.frame = NSRect(x: 150, y: 130, width: 140, height: 60)
+            vindue.contentView?.addSubview(rul)
+        }
         // Et kodeordsfelt med fokus, når en prøve beder om det: tekst må aldrig sættes
         // ind her gennem tilgængeligheds-laget (27/9).
         var foerste: NSView = felt
@@ -123,10 +166,41 @@ final class App: NSObject, NSApplicationDelegate {
             foerste = sikker
         }
         vindue.orderFront(nil)              // frem, men IKKE makeKey - vi stjaeler ingen fokus
+        // macOS' eget adgangskodesignal (Secure Event Input), som en browser taender det
+        // for et kodeordsfelt (R23). Det almindelige felt beholder fokus, saa KUN signalet
+        // kan stoppe skrivningen. Signalet slukkes naar processen doer.
+        if ProcessInfo.processInfo.environment["CMCP_PROEVE_SEI"] == "1" { EnableSecureEventInput() }
         // Feltet har fokus INDE I appen. Det er den tilstand et rigtigt
         // program er i: noget er valgt, selv naar vinduet ikke er forrest.
+        // En «samtale» som i en beskedapp (30/9, runde 1 Fable P4): en sidebar med et
+        // ANDET navn oeverst til venstre, samtalens navn over feltet, og feltet med
+        // fokus. Sende-porten skal laese samtalens navn - aldrig sidebarens.
+        if ProcessInfo.processInfo.environment["CMCP_PROEVE_SAMTALE"] == "1" {
+            vindue.setContentSize(NSSize(width: 400, height: 400))
+            let sidebar = NSTextField(labelWithString: "Alice Sidebar")
+            sidebar.frame = NSRect(x: 10, y: 350, width: 120, height: 20)
+            let overskrift = NSTextField(labelWithString: "Bob Samtale")
+            overskrift.frame = NSRect(x: 160, y: 300, width: 200, height: 20)
+            let beskedfelt = NSTextField(frame: NSRect(x: 160, y: 40, width: 200, height: 24))
+            beskedfelt.stringValue = "hej Bob"
+            for v in [sidebar, overskrift, beskedfelt] { vindue.contentView?.addSubview(v) }
+            foerste = beskedfelt
+        }
+        if let mf = menuFokus { foerste = mf }
         vindue.initialFirstResponder = foerste
         vindue.makeFirstResponder(foerste)
+        // Fokus flytter ind i et kodeordsfelt MIDT i en skrivning - som et Tab i
+        // «bruger\tkode», et klik eller et felt der selv hopper videre (29/9).
+        // Proeven sender SIGUSR1, naar skrivningen er i gang.
+        if ProcessInfo.processInfo.environment["CMCP_PROEVE_SIKKER_SKIFT"] == "1" {
+            let senere = NSSecureTextField(frame: NSRect(x: 10, y: 230, width: 280, height: 24))
+            vindue.contentView?.addSubview(senere)
+            signal(SIGUSR1, SIG_IGN)
+            let s = DispatchSource.makeSignalSource(signal: SIGUSR1, queue: .main)
+            s.setEventHandler { [weak self] in self?.vindue.makeFirstResponder(senere) }
+            s.resume()
+            skift = s
+        }
         if ProcessInfo.processInfo.environment["CMCP_PROEVE_GEMPANEL"] == "1" {
             DispatchQueue.main.asyncAfter(deadline: .now() + 0.5) { self.aabnGemPanel() }
         }
@@ -136,7 +210,9 @@ final class App: NSObject, NSApplicationDelegate {
         // En knap der henter programmet frem, som «Nyt Finder-vindue» gjorde på en
         // fremmed Mac (27/9). Kun når en prøve beder om det - den TAGER skærmen.
         if ProcessInfo.processInfo.environment["CMCP_PROEVE_HENT_FREM"] == "1" {
-            let frem = NSButton(frame: NSRect(x: 10, y: 200, width: 120, height: 24))
+            // R28 R6: inde i vinduet, saa et KLIK (ikke kun et tryk) ogsaa kan ramme den.
+            if vindue.contentView!.frame.height < 200 { vindue.setContentSize(NSSize(width: 300, height: 200)) }
+            let frem = NSButton(frame: NSRect(x: 150, y: 105, width: 140, height: 20))
             frem.title = "hent-frem"
             frem.target = self
             frem.action = #selector(hentFrem)
diff --git a/test/fixtures/audit-readme.jsonl b/test/fixtures/audit-readme.jsonl
new file mode 100644
index 00000000..7e299be9
--- /dev/null
+++ b/test/fixtures/audit-readme.jsonl
@@ -0,0 +1,7 @@
+{"ts":"2026-10-07T18:36:13.244Z","session":"0636dcef","call":"dc38fe77","tool":"computer_apps","tier":"read","args":{},"target":null,"mode":"allow","asker":"custom","decision":"allowed","asked":false,"reason":"read-only action","l":1,"kaede":"6e6660cbd2b09c2b"}
+{"ts":"2026-10-07T18:36:13.712Z","session":"0636dcef","call":"dc38fe77","tool":"computer_apps","outcome":"ok","l":1,"kaede":"052b51ad780313d9"}
+{"ts":"2026-10-07T18:36:13.804Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","args":{"app":{"length":8,"sha256_12":"c4d885ae85a3","salted":true},"text":{"length":37,"sha256_12":"53b5b18d7c2b","salted":true}},"target":"com.apple.TextEdit","mode":"allow","asker":"custom","decision":"allowed","asked":false,"reason":"CMCP_MODE=allow","l":1,"kaede":"608dbed0e6cb4d58"}
+{"ts":"2026-10-07T18:36:13.805Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","tier":"write","target":"com.apple.TextEdit","phase":"executing","l":1,"kaede":"08e8f505e7d0e7c8"}
+{"ts":"2026-10-07T18:36:13.852Z","session":"0636dcef","call":"2e0ef272","tool":"computer_type","outcome":"ok","effect":"sent","l":1,"kaede":"b8ecd7f441ea98b3"}
+{"ts":"2026-10-07T18:36:15.004Z","session":"0636dcef","call":"558fe0f1","tool":"computer_menu","tier":"write","args":{"app":{"length":6,"sha256_12":"6e84f8d2198c","salted":true},"path":"File > Move to Trash"},"target":"com.apple.finder","mode":"allow","asker":"menubar","presence":{"idle_at_ask":600,"idle_at_end":600,"server":"0.2.2","icon":"0.2.2","box":"on","sessions":1,"surface_derived":"box+menu"},"decision":"denied","asked":true,"reason":"background mode: nobody answered in the menu bar in time","l":1,"kaede":"98e213d5869cb131"}
+{"ts":"2026-10-07T18:36:15.087Z","session":"0636dcef","call":"56b7802a","tool":"computer_type","tier":"write","args":{"app":{"length":9,"sha256_12":"0c1139ec706b","salted":true},"text":{"length":7,"sha256_12":"a2acf331b097","salted":true}},"target":"com.1password.1password","mode":"allow","asker":"custom","decision":"denied","asked":false,"reason":"background mode: this would need a dialog, and a dialog takes the screen (a password app can never be approved from the menu bar)","l":1,"kaede":"81e0ef24b729b4e6"}
diff --git a/test/fixtures/forrest-log-1-10.ndjson b/test/fixtures/forrest-log-1-10.ndjson
new file mode 100644
index 00000000..bed4b64f
--- /dev/null
+++ b/test/fixtures/forrest-log-1-10.ndjson
@@ -0,0 +1,53 @@
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:03.406106+0800","machTimestamp":6925351374220,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33295393,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:03.406220+0800","machTimestamp":6925351376961,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25441 oldFrontASN=0x-0x395077807","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:03.824785+0800","machTimestamp":6925361422531,"eventMessage":"61403[SetFrontProcess]: [DataSource] Making <private> 0x0-0x178c68af the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33296743,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:03.824941+0800","machTimestamp":6925361426274,"eventMessage":"SETFRONT: pid=25441 asn=0x-0x178c68af foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:07.914162+0800","machTimestamp":6925459567578,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33296744,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:07.914329+0800","machTimestamp":6925459571578,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25441 oldFrontASN=0x-0x395077807","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:08.553152+0800","machTimestamp":6925474903328,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33296707,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:08.553345+0800","machTimestamp":6925474907965,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":55325486,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:31.208910+0800","machTimestamp":6926018641530,"eventMessage":"9afe3[DoDeferredOrdering]: [DataSource] Making <private> 0x0-0x17bb8ba1 the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170586116,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":55325485}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":55325486,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33297566,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:31.209035+0800","machTimestamp":6926018644531,"eventMessage":"SETFRONT: pid=62888 asn=0x-0x17bb8ba1 foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349766148,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":55325485}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:41.514352+0800","machTimestamp":6926265972127,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33296730,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:41.514449+0800","machTimestamp":6926265974469,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=62888 oldFrontASN=0x-0x398166945","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:42.232057+0800","machTimestamp":6926283197055,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c98b2 the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33299126,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:42.232248+0800","machTimestamp":6926283201644,"eventMessage":"SETFRONT: pid=25460 asn=0x-0x178c98b2 foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:44.873205+0800","machTimestamp":6926346584609,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33298580,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:44.873436+0800","machTimestamp":6926346590153,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25460 oldFrontASN=0x-0x395090098","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:46.478612+0800","machTimestamp":6926385114372,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c68af the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33298190,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:46.478738+0800","machTimestamp":6926385117400,"eventMessage":"SETFRONT: pid=25441 asn=0x-0x178c68af foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:53.029982+0800","machTimestamp":6926542347254,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33299383,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:53.030109+0800","machTimestamp":6926542350298,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25441 oldFrontASN=0x-0x395077807","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:53.674100+0800","machTimestamp":6926557806071,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x17bb8ba1 the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33298190,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:53.674307+0800","machTimestamp":6926557811041,"eventMessage":"SETFRONT: pid=62888 asn=0x-0x17bb8ba1 foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:49:54.372187+0800","machTimestamp":6926574560167,"eventMessage":"7dd83[DoDeferredOrdering]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33298580,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:49:54.372332+0800","machTimestamp":6926574563654,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=62888 oldFrontASN=0x-0x398166945","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:50:14.567154+0800","machTimestamp":6927059239367,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33300507,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:50:14.567268+0800","machTimestamp":6927059242115,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:50:14.749162+0800","machTimestamp":6927063607566,"eventMessage":"7dd83[SetFrontProcess]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33300510,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:50:14.749280+0800","machTimestamp":6927063610400,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:50:26.531912+0800","machTimestamp":6927346393576,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33297189,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:50:26.532057+0800","machTimestamp":6927346397045,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:50:27.159561+0800","machTimestamp":6927361457149,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c98b2 the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33300508,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:50:27.159771+0800","machTimestamp":6927361462190,"eventMessage":"SETFRONT: pid=25460 asn=0x-0x178c98b2 foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:50:27.761014+0800","machTimestamp":6927375892007,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c68af the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33297189,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:50:27.761143+0800","machTimestamp":6927375895112,"eventMessage":"SETFRONT: pid=25441 asn=0x-0x178c68af foreground=1 oldFrontPid=25460 oldFrontASN=0x-0x395090098","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:51:49.605509+0800","machTimestamp":6929340159886,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33307042,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:51:49.605834+0800","machTimestamp":6929340167707,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25441 oldFrontASN=0x-0x395077807","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:51:50.290155+0800","machTimestamp":6929356591398,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33303414,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:51:50.290338+0800","machTimestamp":6929356595801,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:28.650487+0800","machTimestamp":6930277239381,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33309682,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:28.650915+0800","machTimestamp":6930277249641,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:29.333239+0800","machTimestamp":6930293625418,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33309681,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:29.333379+0800","machTimestamp":6930293628783,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:40.330715+0800","machTimestamp":6930557564839,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c68af the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33303415,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:40.330963+0800","machTimestamp":6930557570789,"eventMessage":"SETFRONT: pid=25441 asn=0x-0x178c68af foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:47.885647+0800","machTimestamp":6930738883209,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178d28bb the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33310137,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:47.885856+0800","machTimestamp":6930738888237,"eventMessage":"SETFRONT: pid=25476 asn=0x-0x178d28bb foreground=1 oldFrontPid=25441 oldFrontASN=0x-0x395077807","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:48.521959+0800","machTimestamp":6930754154689,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c48ad the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33309680,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:48.522132+0800","machTimestamp":6930754158851,"eventMessage":"SETFRONT: pid=25436 asn=0x-0x178c48ad foreground=1 oldFrontPid=25476 oldFrontASN=0x-0x395126971","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:54.829979+0800","machTimestamp":6930905547186,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c98b2 the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33311316,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:54.830139+0800","machTimestamp":6930905551028,"eventMessage":"SETFRONT: pid=25460 asn=0x-0x178c98b2 foreground=1 oldFrontPid=25436 oldFrontASN=0x-0x395069613","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"%x[%s]: [DataSource] Making %s 0x%x-0x%x the front process in session 0x%x","userID":88,"activityIdentifier":0,"subsystem":"com.apple.SkyLight.processes","category":"Focus","threadID":33159032,"senderImageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367","backtrace":{"frames":[{"imageOffset":647588,"imageUUID":"EF82BE18-450B-33FE-9C68-A2C88144F367"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/Resources\/WindowServer","senderImagePath":"\/System\/Library\/PrivateFrameworks\/SkyLight.framework\/Versions\/A\/SkyLight","timestamp":"2026-10-01 16:52:57.552492+0800","machTimestamp":6930970887497,"eventMessage":"7d633[SetManagedDisplayCurrentSpace]: [DataSource] Making <private> 0x0-0x178c68af the front process in session 0x1a83b","processImageUUID":"7B15FBD3-BAAE-3FF4-8830-3910FED42941","traceID":514116712170520580,"processID":22090,"senderProgramCounter":647588,"parentActivityIdentifier":0}
+{"timezoneName":"","messageType":"Default","eventType":"logEvent","source":null,"formatString":"SETFRONT: pid=%d asn=0x-0x%x foreground=%d oldFrontPid=%d oldFrontASN=0x-0x%u","userID":0,"activityIdentifier":0,"subsystem":"com.apple.processmanager","category":"front-35286506","threadID":33312122,"senderImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","backtrace":{"frames":[{"imageOffset":199600,"imageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926"}]},"bootUUID":"2FBB5CA2-8BFB-4D43-AA84-FDDA5AA609B6","processImagePath":"\/System\/Library\/CoreServices\/launchservicesd","senderImagePath":"\/System\/Library\/CoreServices\/launchservicesd","timestamp":"2026-10-01 16:52:57.552670+0800","machTimestamp":6930970891755,"eventMessage":"SETFRONT: pid=25441 asn=0x-0x178c68af foreground=1 oldFrontPid=25460 oldFrontASN=0x-0x395090098","processImageUUID":"6949285D-03FB-3B34-B4CF-0A1300750926","traceID":1758355349700612,"processID":377,"senderProgramCounter":199600,"parentActivityIdentifier":0}
+{"count":52,"finished":1}
diff --git a/test/forrest-log-kalibrering.mjs b/test/forrest-log-kalibrering.mjs
new file mode 100644
index 00000000..9afcc5fc
--- /dev/null
+++ b/test/forrest-log-kalibrering.mjs
@@ -0,0 +1,35 @@
+// Forrest-loggens kalibrering: afspiller macOS' egen log fra koerslen paa Gustavs Mac
+// 1/10-2026 (16:48-16:55 maskintid WITA) og kraever de tre domme konsulent-panelet fandt.
+//
+// ⛔ HVORFOR DEN FINDES: den gamle vagt (NSWorkspace i en osascript-loekke) saa 1 skift
+//    pr. runde, mens loggen havde 26 - og kaldte en runde groen, hvor Skak stod forrest.
+//    Et instrument der ikke kan blive roedt paa den kendte fejl, maaler intet.
+//    Intet startes, intet laeses fra skaermen: kun en gemt logfil.
+import './ryd-op.mjs';
+import { readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { tolk, parSkift, doem } from './forrest-log.mjs';
+
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const fil = join(dirname(fileURLToPath(import.meta.url)), 'fixtures', 'forrest-log-1-10.ndjson');
+const skift = parSkift(readFileSync(fil, 'utf8').split('\n').map(tolk).filter(Boolean));
+// Agenternes programmer i koerslen (pids fra macOS' processmanager-log).
+const AGENT = new Set([62766, 62888, 62984, 63975, 64022, 65698, 65808]);
+const t = (hms) => Date.parse(`2026-10-01T${hms}+08:00`);
+const runde = (fra, til) => doem(skift.filter(s => s.t >= t(fra) && s.t <= t(til)), p => AGENT.has(p));
+
+check('0 loggen har de 26 skift', skift.length === 26, String(skift.length));
+const r5 = runde('16:48:43', '16:49:39'), r10 = runde('16:49:40', '16:51:02'), r15 = runde('16:51:04', '16:53:58');
+check('5 rød: skærmen revet tilbage + Skak forrest', r5.length === 2
+  && r5.some(f => f.slags === 'trak forgrunden tilbage fra mennesket') && r5.some(f => f.slags === 'agent-program forrest' && f.pid === 62888),
+  JSON.stringify(r5.map(f => f.slags)));
+check('10 rød: skærmen revet tilbage', r10.length === 1 && r10[0].slags === 'trak forgrunden tilbage fra mennesket', JSON.stringify(r10.map(f => f.slags)));
+check('15 grøn: kun menneskets egne skrivebordsskift', r15.length === 0, JSON.stringify(r15));
+// Menneskets egne skift er aldrig en fejl - ellers kan proeven ikke koere paa en Mac i brug.
+check('mennesket: 9 skrivebordsskift i 15-runden giver ingen fund',
+  skift.filter(s => s.t >= t('16:51:04') && s.t <= t('16:53:58') && s.aarsag === 'SetManagedDisplayCurrentSpace').length === 9);
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/forrest-log.mjs b/test/forrest-log.mjs
new file mode 100644
index 00000000..fa0c14f8
--- /dev/null
+++ b/test/forrest-log.mjs
@@ -0,0 +1,107 @@
+// FORREST-LOGGEN: hvad der stod forrest, læst i macOS' egen log - ikke gættet.
+//
+// ⛔ HVORFOR DEN FINDES (1/10-2026, konsulent-panelet)
+//    Den gamle vagt i parallel.mjs spurgte NSWorkspace.frontmostApplication i en
+//    langlivet osascript-løkke. Den værdi opdateres kun når processens run-loop
+//    kører (Apple: «if you repeatedly poll … without allowing the run loop to run,
+//    it will continue to return false»). Målt på Gustavs Mac 1/10: vagten skrev
+//    1 linje pr. runde, mens macOS' log havde 26 skift - og den kaldte en runde
+//    grøn, hvor Skak stod forrest i 10 sekunder.
+//
+//    Her læses to kilder i systemets log, med årsag:
+//      launchservicesd  SETFRONT: pid=… oldFrontPid=…        (HVEM blev forrest)
+//      WindowServer     <id>[Årsag]: … the front process      (HVORFOR)
+//    Årsagerne målt 1/10: SetManagedDisplayCurrentSpace (mennesket skiftede
+//    skrivebord), SetFrontProcess (et program bad om det), DoDeferredOrdering
+//    (programmet ordnede selv et vindue frem, fx et gem-panel).
+//
+// ⛔ Instrumentet beviser selv at det ser: en puls via `logger` hvert 2. sekund
+//    skal nå strømmen, og antallet af skift i strømmen skal være det samme som
+//    `log show` finder for samme tidsrum bagefter. Ellers er målingen UMÅLT.
+import { spawn, execFileSync } from 'node:child_process';
+
+const PRED_SKIFT = '(subsystem == "com.apple.processmanager" AND eventMessage CONTAINS "SETFRONT")';
+const PRED_AARSAG = '(process == "WindowServer" AND category == "Focus" AND eventMessage CONTAINS "the front process")';
+const PULS = 'cmcp-vagt-puls';
+const vent = (ms) => new Promise(r => setTimeout(r, ms));
+
+/// Én hændelse fra loggen (ndjson-linje fra `log stream`/`log show --style ndjson`)
+/// → {t, slags:'skift'|'aarsag'|'puls', pid, fra, aarsag}. Ukendt → null.
+export function tolk(linje) {
+  let e; try { e = JSON.parse(linje); } catch { return null; }
+  const m = e.eventMessage || '';
+  const t = Date.parse(String(e.timestamp || '').replace(' ', 'T').replace(/([+-]\d\d)(\d\d)$/, '$1:$2'));
+  let r;
+  if ((r = /SETFRONT: pid=(\d+).*oldFrontPid=(-?\d+)/.exec(m))) return { t, slags: 'skift', pid: +r[1], fra: +r[2] };
+  if ((r = /\[([A-Za-z]+)\]: \[DataSource\] Making .* the front process/.exec(m))) return { t, slags: 'aarsag', aarsag: r[1] };
+  if (m.includes(PULS)) return { t, slags: 'puls' };
+  return null;
+}
+
+/// Parrer hvert skift med WindowServers årsag (nærmeste inden for 150 ms).
+export function parSkift(haendelser) {
+  const aarsager = haendelser.filter(h => h.slags === 'aarsag');
+  return haendelser.filter(h => h.slags === 'skift').map(s => {
+    let bedst = null;
+    for (const a of aarsager) if (Math.abs(a.t - s.t) <= 150 && (!bedst || Math.abs(a.t - s.t) < Math.abs(bedst.t - s.t))) bedst = a;
+    return { ...s, aarsag: bedst?.aarsag || 'ukendt' };
+  });
+}
+
+/// Dommen over en række skift. `agentPid(pid)` siger om pid'en er et af agenternes programmer.
+///   1. Et agent-program kom forrest af andet end menneskets skrivebordsskift.
+///   2. Forgrunden blev trukket TILBAGE (SetFrontProcess til det program der stod forrest
+///      lige før) inden for 1,5 s efter at mennesket selv skiftede skrivebord.
+export function doem(skift, agentPid) {
+  const fejl = [];
+  skift.forEach((s, i) => {
+    if (agentPid(s.pid) && s.aarsag !== 'SetManagedDisplayCurrentSpace')
+      fejl.push({ t: s.t, slags: 'agent-program forrest', pid: s.pid, aarsag: s.aarsag });
+    const forrige = skift[i - 1];
+    if (s.aarsag === 'SetFrontProcess' && forrige && forrige.aarsag === 'SetManagedDisplayCurrentSpace'
+        && s.t - forrige.t <= 1500 && s.pid === forrige.fra)
+      fejl.push({ t: s.t, slags: 'trak forgrunden tilbage fra mennesket', pid: s.pid, aarsag: s.aarsag, efterMs: s.t - forrige.t });
+  });
+  return fejl;
+}
+
+const hhmmss = (t) => new Date(t).toTimeString().slice(0, 8);
+
+/// Start strømmen. stop() giver {skift, puls, umaalt?:grund}.
+export function startForrestLog() {
+  const t0 = Date.now();
+  const p = spawn('/usr/bin/log', ['stream', '--style', 'ndjson', '--predicate',
+    `${PRED_SKIFT} OR ${PRED_AARSAG} OR (process == "logger" AND eventMessage CONTAINS "${PULS}")`],
+    { stdio: ['ignore', 'pipe', 'ignore'] });
+  const h = []; let buf = '';
+  p.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const x = tolk(buf.slice(0, i)); buf = buf.slice(i + 1); if (x) h.push(x); } });
+  let n = 0;
+  const ur = setInterval(() => { try { spawn('logger', [`${PULS} ${++n}`], { stdio: 'ignore' }); } catch {} }, 2000);
+  return {
+    async stop() {
+      clearInterval(ur);
+      try { spawn('logger', [`${PULS} slut`], { stdio: 'ignore' }); } catch {}
+      await vent(2500);
+      try { p.kill(); } catch {}
+      const t1 = Date.now();
+      const skift = parSkift(h);
+      const puls = h.filter(x => x.slags === 'puls').length;
+      let umaalt = null;
+      // Under last (15 agenter) naar ikke hver puls frem til tiden; én pr. 10 s beviser at strømmen lever.
+      if (puls < Math.max(1, Math.floor((t1 - t0) / 10000))) umaalt = `strømmen svarede ikke: ${puls} puls(er) på ${((t1 - t0) / 1000).toFixed(0)} s`;
+      // Kalibrering: arkivet skal have præcis de samme skift som strømmen så.
+      if (!umaalt) {
+        const fmt = (t) => { const d = new Date(t); const z = (x, n = 2) => String(x).padStart(n, '0');
+          return `${d.getFullYear()}-${z(d.getMonth() + 1)}-${z(d.getDate())} ${z(d.getHours())}:${z(d.getMinutes())}:${z(d.getSeconds())}`; };
+        try {
+          const ud = execFileSync('/usr/bin/log', ['show', '--style', 'ndjson', '--start', fmt(t0 - 1000), '--end', fmt(t1),
+            '--predicate', PRED_SKIFT], { encoding: 'utf8', maxBuffer: 64 << 20, timeout: 120000 });
+          const arkiv = ud.split('\n').map(tolk).filter(x => x?.slags === 'skift' && x.t >= t0 && x.t <= t1 - 2500).length;
+          const strom = skift.filter(s => s.t >= t0 && s.t <= t1 - 2500).length;
+          if (arkiv !== strom) umaalt = `strømmen så ${strom} skift, arkivet har ${arkiv} for samme tidsrum`;
+        } catch (e) { umaalt = `arkivet kunne ikke læses: ${String(e.message).slice(0, 120)}`; }
+      }
+      return { skift, puls, umaalt, t0, hhmmss };
+    },
+  };
+}
diff --git a/test/genaabn.mjs b/test/genaabn.mjs
index c455af92..d0a48b02 100644
--- a/test/genaabn.mjs
+++ b/test/genaabn.mjs
@@ -8,6 +8,7 @@
 //    det samme, «vis dig», uden at aktivere det. MÅLT på attrappen: vinduet kom,
 //    programmet blev ikke aktivt, og det forreste program var det samme.
 //    Et program der allerede HAR et vindue, røres ikke.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFileSync, spawn } from 'node:child_process';
 import { existsSync, mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/giv-tilbage.mjs b/test/giv-tilbage.mjs
index 341dbe30..32ade453 100644
--- a/test/giv-tilbage.mjs
+++ b/test/giv-tilbage.mjs
@@ -11,6 +11,7 @@
 // ⛔ KØRER KUN PÅ EN FREMMED MASKINE (CMCP_FREMMED_MASKINE=1).
 //    Prøven FÅR med vilje et program til at tage forgrunden. På Gustavs Mac
 //    ville det tage hans skærm - også hvis rettelsen virker, i et kvart sekund.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFileSync, spawn } from 'node:child_process';
 import { existsSync, mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -94,9 +95,12 @@ try {
   try { execFileSync('pkill', ['-x', navn3]); } catch {}
   try { execFileSync(LSREGISTER, ['-u', pakke3]); } catch {}
 
-  // 4. Et TREDJE program skubber sig frem, mens et andet startes (koersel 7-9: Kontakter
-  //    kom frem, da Aktivitetsovervågning startede). Ingen har rørt tastatur eller mus,
-  //    så det var ikke mennesket - forgrunden skal gives tilbage, uanset hvem der kom frem.
+  // 4. Et TREDJE program, der koerte i forvejen, kommer frem, mens et andet startes.
+  //    ⛔ VENDT 1/10 (konsulent-panelet, maalt paa Gustavs Mac i macOS' egen log): to
+  //    gange var «det tredje program» mennesket selv, der skiftede skrivebord, og
+  //    hjaelperen rev skaermen tilbage under ham. Et skrivebordsskift er hverken tast
+  //    eller klik, saa det kan ikke skelnes fra et program der skubber sig frem.
+  //    Derfor roeres et program der koerte i forvejen IKKE - forgrunden bliver staaende.
   await vent(800);
   const menneske4 = forrest();
   const tredje = spawn(join(pakke, 'Contents', 'MacOS', navn), { stdio: ['ignore', 'pipe', 'ignore'], env: { ...process.env, CMCP_PROEVE_FREM_EFTER: '2500' } });
@@ -115,15 +119,60 @@ try {
 </dict></plist>`);
   execFileSync('cp', [join(pakke, 'Contents', 'MacOS', navn), join(pakke4, 'Contents', 'MacOS', navn4)]);
   execFileSync(LSREGISTER, ['-f', pakke4]);
+  // Mindst et sekund mellem det tredje programs start og handlingen: et program
+  // startet inden for et halvt sekund foer, regnes for handlingens eget.
+  await vent(1200);
   const r4 = koer('launch', '--app', bid4, '--background');
   const svar4 = JSON.stringify({ ok: r4.ok, took_screen: r4.took_screen, gave_back: r4.gave_back, why: r4.why, observed: r4.observed });
-  check('4 et tredje program der skubber sig frem under en start, siges: took_screen: true', r4.ok && r4.took_screen === true, svar4);
-  check('4b ...og forgrunden gives tilbage, selv om det ikke var det startede program', r4.gave_back === true, svar4);
+  check('4 et program der koerte i forvejen og kom frem, rives IKKE tilbage', r4.ok && r4.took_screen === false && r4.gave_back === undefined, svar4);
+  check('4b ...og svaret siger hvad der kom frem', /came to the front/.test(JSON.stringify(r4.observed || {})), svar4);
   await vent(300);
-  check('4c det program mennesket var i, er forrest igen', forrest() === menneske4, `${forrest()} (var ${menneske4})`);
+  check('4c forgrunden blev staaende hos det program der kom frem', forrest() !== menneske4, `${forrest()} (var ${menneske4})`);
   try { tredje.kill(); } catch {}
   try { execFileSync('pkill', ['-x', navn4]); } catch {}
   try { execFileSync(LSREGISTER, ['-u', pakke4]); } catch {}
+
+  // 5. ⛔ 1/10 (M11, konsulent-panelet): et RIGTIGT tastetryk (globalt, uden --app -
+  //    tvinger CGEvent-vejen uden om tilgaengeligheds-indsaettelsen) maa ALDRIG laese
+  //    som «mennesket roerte maskinen» og dermed blokere en legitim tilbagegivelse.
+  //    Det er den PRAECISE fejl M11 muterer: menneskeRoerteNetop() med .keyDown
+  //    inkluderet ville have set agentens EGEN skrivning som et menneske og ladet
+  //    Finder/et selv-aktiverende program blive staaende. Samme attrap-moenster som
+  //    sag 3 (CMCPFremVedStart), en FRISK proces, saa selv-aktiveringen er aekte.
+  const navn5 = 'cmcptast' + Math.random().toString(36).slice(2, 7);
+  const bid5 = 'dk.agent360.cmcp.' + navn5;
+  const pakke5 = join(START_DIR, navn5 + '.app');
+  mkdirSync(join(pakke5, 'Contents', 'MacOS'), { recursive: true });
+  writeFileSync(join(pakke5, 'Contents', 'Info.plist'), `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+<key>CFBundleIdentifier</key><string>${bid5}</string>
+<key>CFBundleExecutable</key><string>${navn5}</string>
+<key>CFBundlePackageType</key><string>APPL</string>
+<key>LSUIElement</key><true/>
+<key>CMCPFremVedStart</key><true/>
+</dict></plist>`);
+  execFileSync('cp', [join(pakke, 'Contents', 'MacOS', navn), join(pakke5, 'Contents', 'MacOS', navn5)]);
+  execFileSync(LSREGISTER, ['-f', pakke5]);
+  const menneske5 = forrest();
+  // Intet --app: tvinger den globale CGEvent-vej (samme vej det almindelige «type»
+  // ville have brugt FOER rettelsen af menneske-simulationen i parallel.mjs).
+  koer('type', '--text', 'x');
+  const r5 = koer('launch', '--app', bid5, '--background');
+  const svar5 = JSON.stringify({ ok: r5.ok, took_screen: r5.took_screen, gave_back: r5.gave_back, why: r5.why, observed: r5.observed });
+  // ⛔ MAALT 2/10 (koersel 36907620350): under belastning (Hele suiten/15 agenter) kan
+  //    selve REAKTIVERINGEN tabe kaploebet mod 500 ms og give `gave_back:false` - en
+  //    KENDT, UBESLAEGTET timing-flage i NSRunningApplication.activate(), ikke den fejl
+  //    M11 tester. De to grene har hver sin PRAECISE signatur: menneskeRoerteNetop()
+  //    returnerer ALTID `observed.note` med «taken to be them» FOER noget forsoeges
+  //    reaktiveret; den langsomme-reaktivering-grenen har ALDRIG et `observed`-felt.
+  //    Proeven maaler derfor PRAECIS det, og kun det: blev handlingen fejlagtigt tilskrevet
+  //    mennesket - ikke om selve genaktiveringen naaede at fuldfoeres inden for 500 ms.
+  check('5 et rigtigt tastetryk lige foer bliver IKKE laest som mennesket',
+    r5.ok && r5.took_screen === true && r5.observed === undefined, svar5);
+  try { execFileSync('pkill', ['-x', navn5]); } catch {}
+  try { execFileSync(LSREGISTER, ['-u', pakke5]); } catch {}
+
 } finally {
   try { b.kill(); } catch {}
   rmSync(ARB, { recursive: true, force: true });
diff --git a/test/ikon-boks.mjs b/test/ikon-boks.mjs
new file mode 100644
index 00000000..231c859b
--- /dev/null
+++ b/test/ikon-boks.mjs
@@ -0,0 +1,284 @@
+// IKON-BOKS: boksen i hjoernet viser hvad agenterne goer, staar paa den skaerm
+// mennesket arbejder paa, og et spoergsmaal kan besvares i den - med Touch ID.
+//
+// ⛔ 9/10 (F1 paa Gustavs Mac): et spoergsmaal udloeb, fordi boksen stod i hjoernet af
+//    den ANDEN skaerm (x=4794) og kun sagde «Needs you: click the orange menu bar icon».
+//    Gustav: «flydende komponent i hoejre hjoerne ... saa man kan se hvad der sker» og
+//    «saa kan jeg ogsaa goere hvad du beder mig om» (+ «1 ja»: Allow maa staa i boksen).
+//
+//    Proeven starter ALDRIG ikonet og viser intet: den kompilerer Tekst.swift for sig,
+//    laeser det rigtige ikons --dump-question, og binder ikonets kode til reglerne.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, readFileSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const KILDE = join(ROOT, 'helper', 'Sources', 'cmcp-status');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// 1-3 · Tekst.swift for sig: indhold og valg af skaerm
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-ikon-boks-'));
+writeFileSync(join(ARB, 'main.swift'), `import Foundation
+import CoreGraphics
+import AppKit
+struct Ag: Decodable { let navn: String; let maal: String?; let nu: String }
+struct V: Decodable { let antal: Int; let klient: String?; let tekst: String; let fakta: [String]; let menuKnapper: [String] }
+struct Hd: Decodable { let knap: String; let knapNonce: String?; let visteNonce: String?; let aktive: Bool }
+struct Ak: Decodable { let siden: Double; let iGang: Bool }
+struct Ti: Decodable { let ok: Bool; let laan: Bool }
+struct L: Decodable { let klient: String?; let min: Int }
+struct I: Decodable { let arbejder: [Ag]; let tilsluttede: Int; let venter: V?; let laan: L? }
+struct R: Decodable { let x: Double; let y: Double; let w: Double; let h: Double }
+struct S: Decodable { let vindue: R?; let mus: [Double]; let skaerme: [R] }
+struct H: Decodable { let synlig: R; let bredde: Double }
+struct Ind: Decodable { let indhold: [I]; let skaerm: [S]; let cocoa: [R]; let hjoerne: [H]; let handling: [Hd]; let aktive: [Ak]; let touchId: [Ti] }
+let raa = FileHandle.standardInput.readDataToEndOfFile()
+let ind = try! JSONDecoder().decode(Ind.self, from: raa)
+// CGWindowList-lister som macOS giver dem: NSNumber og NSDictionary (via JSONSerialization).
+let raaJson = try! JSONSerialization.jsonObject(with: raa) as! [String: Any]
+let lister = raaJson["vinduer"] as! [[String: Any]]
+let r = { (a: R) in CGRect(x: a.x, y: a.y, width: a.w, height: a.h) }
+let ud: [String: Any] = [
+  "indhold": ind.indhold.map { i -> [String: Any] in
+    let b = boksIndhold(arbejder: i.arbejder.map { (navn: $0.navn, maal: $0.maal, nu: $0.nu) }, tilsluttede: i.tilsluttede,
+                        venter: i.venter.map { (antal: $0.antal, klient: $0.klient, tekst: $0.tekst, fakta: $0.fakta, menuKnapper: $0.menuKnapper) },
+                        laan: i.laan.map { (klient: $0.klient, minutter: $0.min) })
+    return ["titel": b.titel, "orange": b.orange, "linjer": b.linjer, "knapper": b.knapper] },
+  "skaerm": ind.skaerm.map { s in boksSkaerm(forrestVindue: s.vindue.map(r), mus: CGPoint(x: s.mus[0], y: s.mus[1]), skaerme: s.skaerme.map(r)) },
+  "cocoa": ind.cocoa.map { c in let x = cocoaRamme(r(c), hovedHoejde: 1112); return [x.minX, x.minY, x.width, x.height] },
+  "hjoerne": ind.hjoerne.map { h in let p = boksHjoerne(synlig: r(h.synlig), bredde: CGFloat(h.bredde)); return [p.x, p.y] },
+  "vinduer": lister.map { l -> Any in
+    let pid = (l["pid"] as! NSNumber).int32Value
+    guard let v = forrestVinduesRamme(l["liste"] as! [[String: Any]], pid: pid) else { return NSNull() }
+    return [v.minX, v.minY, v.width, v.height] },
+  "handling": ind.handling.map { h -> String in
+    switch boksHandling(knap: h.knap, knapNonce: h.knapNonce, visteNonce: h.visteNonce, aktive: h.aktive) {
+    case .foelg: return "foelg"; case .tillad(let n): return "tillad:" + n; case .afvis(let n): return "afvis:" + n
+    case .gjort(let n): return "gjort:" + n; case .hentFrem(let n): return "hentFrem:" + n; case .tagTilbage: return "tagTilbage"; case .intet: return "intet" } },
+  "aktive": ind.aktive.map { boksKnapperAktive(sidenNytSpoergsmaal: $0.siden, touchIdIGang: $0.iGang) },
+  "pause": BOKS_PAUSE,
+  "touchId": ind.touchId.map { t -> String in switch touchIdUdfald(ok: t.ok, erLaan: t.laan) { case .laan: return "laan"; case .svar(let v): return v ? "ja" : "nej" } },
+  "max": BOKS_MAX_TEGN,
+  // R24: synligheden som ren funktion - (laan, sessioner, slaaetFra, arbejder)
+  "synlig": [(false, 2, false, true), (false, 2, true, true), (false, 2, false, false), (false, 0, false, true),
+             (true, 2, true, false), (true, 0, true, false), (true, 2, false, true)].map { boksSynlig(laan: $0.0, sessioner: $0.1, slaaetFra: $0.2, arbejder: $0.3) },
+  // R24: panelets opsaetning paa et panel der aldrig vises - laget MAALES, ikke laeses i kilden
+  "panel": { () -> [String: Any] in
+    _ = NSApplication.shared
+    let p = NSPanel(contentRect: NSRect(x: 0, y: 0, width: 10, height: 10), styleMask: [.borderless, .nonactivatingPanel], backing: .buffered, defer: true)
+    boksPanelOpsaetning(p)
+    return ["lag": p.level.rawValue, "alleSkriveborde": p.collectionBehavior.contains(.canJoinAllSpaces), "fuldskaerm": p.collectionBehavior.contains(.fullScreenAuxiliary),
+            "ikkeDelt": p.sharingType == .none, "noegle": p.becomesKeyOnlyIfNeeded, "svaever": p.isFloatingPanel] }()]
+FileHandle.standardOutput.write(try! JSONSerialization.data(withJSONObject: ud))
+`);
+const BIN = join(ARB, 'boks');
+execFileSync('swiftc', [join(KILDE, 'Tekst.swift'), join(ARB, 'main.swift'), '-o', BIN], { stdio: 'pipe', timeout: 300000 });
+const ALLOW_MENU = 'Allow… (confirm with Touch ID)';
+const SCOPE = 'If you allow it, the agent may work in com.apple.Terminal for the rest of this session.';
+const lang = 'Send the quarterly numbers to the board. '.repeat(8);   // > 280 tegn
+// Gustavs to skaerme: MacBook 1710x1112 forrest (hovedskaerm), ultrabred 3440x1440 til hoejre.
+const MAC = { x: 0, y: 0, w: 1710, h: 1112 }, BRED = { x: 1710, y: -200, w: 3440, h: 1440 };
+const ind = {
+  indhold: [
+    { arbejder: [{ navn: 'Claude · c753', maal: 'com.apple.Notes', nu: 'Press «Format» in Noter' }, { navn: 'Codex · 9f1', maal: null, nu: 'idle' }], tilsluttede: 12, venter: null },
+    { arbejder: Array.from({ length: 5 }, (_, i) => ({ navn: `a${i}`, maal: null, nu: 'x' })), tilsluttede: 5, venter: null },
+    { arbejder: [], tilsluttede: 3, venter: { antal: 1, klient: 'Claude', tekst: 'Press cmd+backspace in Noter', fakta: ['If you allow it, this one action only.', 'Lands in: com.apple.Notes'], menuKnapper: [ALLOW_MENU, 'Deny'] } },
+    { arbejder: [], tilsluttede: 3, venter: { antal: 3, klient: 'Claude', tekst: lang, fakta: [], menuKnapper: [ALLOW_MENU, 'Deny'] } },
+    { arbejder: [], tilsluttede: 1, venter: { antal: 1, klient: null, tekst: 'Type your password in Safari', fakta: [], menuKnapper: ['Take me there', 'Done — I did it', "I won't do this"] } },
+    { arbejder: [], tilsluttede: 1, venter: { antal: 1, klient: 'Claude', tekst: 'Use your screen for 2 minutes', fakta: [], menuKnapper: ['Deny'] } },
+    { arbejder: [], tilsluttede: 1, venter: { antal: 1, klient: 'Claude‮', tekst: 'x'.repeat(280), fakta: [], menuKnapper: [ALLOW_MENU, 'Deny'] } },
+    { arbejder: [], tilsluttede: 1, venter: { antal: 1, klient: 'Claude', tekst: 'Type 42 characters', fakta: [SCOPE, 'Lands in: com.apple.Terminal'], menuKnapper: [ALLOW_MENU, 'Deny'] } },
+    { arbejder: [], tilsluttede: 1, venter: null, laan: { klient: 'Claude', min: 2 } },
+    { arbejder: [], tilsluttede: 1, venter: { antal: 1, klient: 'Codex', tekst: 'Press Send in Mail', fakta: [], menuKnapper: [ALLOW_MENU, 'Deny'] }, laan: { klient: 'Claude', min: 7 } },
+    { arbejder: [{ navn: 'Claude · c753', maal: 'com.apple.Notes', nu: 'Type in Noter' }], tilsluttede: 4, venter: null, laan: { klient: 'Claude‮', min: 1 } },
+  ],
+  skaerm: [
+    { vindue: { x: 1800, y: 100, w: 1400, h: 900 }, mus: [100, 100], skaerme: [MAC, BRED] },   // vinduet paa den brede, musen paa Mac'en
+    { vindue: { x: 100, y: 100, w: 800, h: 600 }, mus: [4000, 500], skaerme: [MAC, BRED] },   // omvendt
+    { vindue: null, mus: [4000, 500], skaerme: [MAC, BRED] },                                  // intet vindue: musen
+    { vindue: null, mus: [-5000, -5000], skaerme: [MAC, BRED] },                               // intet: den foerste
+    { vindue: { x: 9000, y: 9000, w: 10, h: 10 }, mus: [4000, 500], skaerme: [MAC, BRED] },    // vindue uden for alle: musen
+  ],
+  cocoa: [{ x: 0, y: 0, w: 100, h: 50 }, { x: 1800, y: 34, w: 1200, h: 800 }],
+  handling: [
+    { knap: 'Allow (Touch ID)', knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: 'Allow (Touch ID)', knapNonce: 'n0', visteNonce: 'n1', aktive: true },
+    { knap: 'Allow (Touch ID)', knapNonce: 'n1', visteNonce: 'n1', aktive: false },
+    { knap: 'Deny', knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: "I won't do this", knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: 'Done — I did it', knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: 'Take me there', knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: 'Follow', knapNonce: null, visteNonce: null, aktive: false },
+    { knap: 'Allow (Touch ID)', knapNonce: null, visteNonce: null, aktive: true },
+    { knap: 'Allow… (confirm with Touch ID)', knapNonce: 'n1', visteNonce: 'n1', aktive: true },
+    { knap: 'Take the screen back now', knapNonce: null, visteNonce: 'n1', aktive: false },
+    { knap: 'Take the screen back now', knapNonce: 'n0', visteNonce: null, aktive: false },
+  ],
+  touchId: [{ ok: false, laan: false }, { ok: false, laan: true }, { ok: true, laan: false }, { ok: true, laan: true }],
+  aktive: [{ siden: 0.5, iGang: false }, { siden: 1.0, iGang: false }, { siden: 5, iGang: true }, { siden: 5, iGang: false }],
+  hjoerne: [{ synlig: { x: 0, y: 0, w: 1710, h: 1077 }, bredde: 360 }, { synlig: { x: 1710, y: -200, w: 3440, h: 1415 }, bredde: 360 }],
+  vinduer: (() => {
+    const v = (pid, lag, X) => ({ kCGWindowOwnerPID: pid, kCGWindowLayer: lag, kCGWindowBounds: { X, Y: 40, Width: 500, Height: 300 } });
+    return [
+      { pid: 7, liste: [v(5, 0, 10), v(7, 25, 20), v(7, 0, 30), v(7, 0, 40)] },   // menulinje-lag springes over; det forreste almindelige
+      { pid: 5, liste: [v(5, 0, 10), v(7, 0, 30)] },
+      { pid: 9, liste: [v(5, 0, 10)] },                                             // det forreste program har intet vindue
+    ];
+  })(),
+};
+const s = JSON.parse(execFileSync(BIN, { input: JSON.stringify(ind), encoding: 'utf8' }));
+const [n2, n5, q1, qLang, qSelv, qLaan, qGraense, qTerm, lStille, lSpoerg, lArb] = s.indhold;
+check('1a to agenter: titlen siger hvor mange der arbejder, og hvor mange der er tilsluttet', n2.titel === 'Computer MCP - 2 agents working · 12 connected' && !n2.orange, n2.titel);
+check('1b hver agent: navn, program og hvad den goer nu', n2.linjer[0] === '● Claude · c753 · com.apple.Notes' && n2.linjer[1].trim() === 'Press «Format» in Noter' && n2.linjer[2] === '● Codex · 9f1', JSON.stringify(n2.linjer));
+check('1c hoejst tre agenter, resten som et tal', n5.linjer.filter(l => l.startsWith('●')).length === 3 && n5.linjer.at(-1) === '+2 more working', JSON.stringify(n5.linjer));
+check('1d «Follow» naar nogen arbejder', JSON.stringify(n2.knapper) === '["Follow"]');
+check('2a et spoergsmaal: orange, hvem der spoerger, og HELE teksten', q1.orange && q1.titel === 'Claude needs you' && q1.linjer[0] === 'Press cmd+backspace in Noter', JSON.stringify(q1));
+check('2h ...og HVOR det lander og HVOR LAENGE et ja gaelder - menuens fakta, hele (R17, Opus 4c)',
+  q1.linjer.includes('If you allow it, this one action only.') && q1.linjer.includes('Lands in: com.apple.Notes')
+  && qTerm.linjer.slice(1, -1).join(' ') === SCOPE && qTerm.linjer.at(-1) === 'Lands in: com.apple.Terminal'
+  && JSON.stringify(qTerm.knapper) === '["Allow (Touch ID)","Deny"]', JSON.stringify(qTerm.linjer));
+check('2b ...med menuens knapper: Allow (Touch ID) og Deny', JSON.stringify(q1.knapper) === '["Allow (Touch ID)","Deny"]', JSON.stringify(q1.knapper));
+check(`2c over ${s.max} tegn: ingen Allow i boksen, og den siger hvor hele teksten er`,
+  !qLang.knapper.includes('Allow (Touch ID)') && qLang.knapper.includes('Deny')
+  && qLang.linjer.some(l => /\(\d+ characters - the whole text is in the menu bar icon\)/.test(l)), JSON.stringify(qLang));
+check('2d flere spoergsmaal: boksen siger hvor mange flere', qLang.linjer.at(-1) === '+2 more in the menu bar icon', qLang.linjer.at(-1));
+check('2e goer-selv: menuens egne knapper, ingen Allow', JSON.stringify(qSelv.knapper) === JSON.stringify(['Take me there', 'Done — I did it', "I won't do this"]) && qSelv.titel === 'An agent needs you', JSON.stringify(qSelv));
+check('2f et laan i koe: kun Deny, som i menuen', JSON.stringify(qLaan.knapper) === '["Deny"]');
+check(`2g paa graensen (${s.max} tegn): Allow staar, intet tegn mangler, og usynlige tegn i navnet er vasket`,
+  qGraense.knapper.includes('Allow (Touch ID)') && qGraense.linjer.join('').length === 280 && !qGraense.titel.includes('‮'), qGraense.titel);
+check('3a skaermen med det forreste vindue - ikke musens', s.skaerm[0] === 1 && s.skaerm[1] === 0, JSON.stringify(s.skaerm));
+check('3b intet vindue: musens skaerm; ingen af delene: den foerste', s.skaerm[2] === 1 && s.skaerm[3] === 0 && s.skaerm[4] === 1, JSON.stringify(s.skaerm));
+check('3d boksen staar inde paa skaermen, oeverst til hoejre', JSON.stringify(s.hjoerne) === JSON.stringify([[1334, 1065], [4774, 1203]]), JSON.stringify(s.hjoerne));
+check('3e det forreste programs forreste almindelige vindue - ikke et andet programs, ikke et menulinje-lag',
+  JSON.stringify(s.vinduer) === JSON.stringify([[30, 40, 500, 300], [10, 40, 500, 300], null]), JSON.stringify(s.vinduer));
+check('3c vinduets ramme omregnes fra oeverst-venstre til Cocoas nederst-venstre',
+  JSON.stringify(s.cocoa) === JSON.stringify([[0, 1062, 100, 50], [1800, 278, 1200, 800]]), JSON.stringify(s.cocoa));
+
+check('6a knapperne: Allow -> Touch ID-vejen paa KNAPPENS spoergsmaal; Deny og «I won\'t» er nej; Done er gjort; Take me there henter frem',
+  JSON.stringify(s.handling.slice(0, 7)) === JSON.stringify(['tillad:n1', 'intet', 'intet', 'afvis:n1', 'afvis:n1', 'gjort:n1', 'hentFrem:n1']), JSON.stringify(s.handling));
+check('6b Follow virker altid; uden spoergsmaal eller med en ukendt knap sker intet',
+  JSON.stringify(s.handling.slice(7, 10)) === JSON.stringify(['foelg', 'intet', 'intet']), JSON.stringify(s.handling.slice(7)));
+check('6e «Take the screen back now» virker ALTID: uden pause, uden Touch ID-vent og uanset hvilket spoergsmaal boksen viser (R22)',
+  JSON.stringify(s.handling.slice(10)) === JSON.stringify(['tagTilbage', 'tagTilbage']), JSON.stringify(s.handling.slice(10)));
+check('7a et STILLE laan staar i boksen: orange, hvem, hvor laenge, og stopknappen (R22: laanet kunne kun ses i menuen)',
+  lStille.orange && lStille.titel === 'Claude is using your screen' && /^2 min left/.test(lStille.linjer[0])
+  && JSON.stringify(lStille.knapper) === '["Take the screen back now"]', JSON.stringify(lStille));
+check('7b et laan OG et spoergsmaal: spoergsmaalet beholder titel og knapper, laanet staar oeverst, og stopknappen er foerst',
+  lSpoerg.titel === 'Codex needs you' && lSpoerg.linjer[0] === 'Claude is using your screen — 7 min left' && lSpoerg.linjer[1] === 'Press Send in Mail'
+  && JSON.stringify(lSpoerg.knapper) === '["Take the screen back now","Allow (Touch ID)","Deny"]', JSON.stringify(lSpoerg));
+check('7c et laan mens agenter arbejder: stopknappen foerst, Follow bagefter; usynlige tegn i navnet vasket',
+  lArb.titel === 'Claude is using your screen' && lArb.linjer.includes('● Claude · c753 · com.apple.Notes')
+  && JSON.stringify(lArb.knapper) === '["Take the screen back now","Follow"]', JSON.stringify(lArb));
+check('6d Touch ID: et nej er et nej - ogsaa for et skaerm-laan; kun et ja til et laan bliver et laan',
+  JSON.stringify(s.touchId) === '["nej","nej","ja","laan"]', JSON.stringify(s.touchId));
+check(`6c knapperne venter ${s.pause} s efter et nyt spoergsmaal og er fra mens Touch ID er oppe`,
+  JSON.stringify(s.aktive) === '[false,true,false,true]', JSON.stringify(s.aktive));
+
+// 4 · det rigtige ikon: --dump-question bygger boksen med samme funktion som den rigtige boks
+const ikon = [join(ROOT, 'helper', '.build', 'release', 'cmcp-status'), join(ROOT, 'mcp-server', 'vendor', 'ComputerMCPStatus.app', 'Contents', 'MacOS', 'cmcp-status')].find(p => existsSync(p));
+if (!ikon) console.log('SPR. 4 intet bygget ikon');
+else {
+  const vis = (q) => JSON.parse(execFileSync(ikon, ['--dump-question'], { encoding: 'utf8', input: JSON.stringify({ nonce: 'n', session: 's', client: 'Claude', scope: 'If you allow it, this one action only.', target: 'com.apple.Notes', expires: 0, ...q }) })).box;
+  const b = vis({ text: 'Press cmd+backspace in Noter' });
+  check('4a ikonet: spoergsmaalet i boksen med hvor det lander og omfanget, og Allow (Touch ID) og Deny',
+    b.title === 'Claude needs you' && b.lines.includes('Lands in: com.apple.Notes') && b.lines.includes('If you allow it, this one action only.')
+    && JSON.stringify(b.buttons) === '["Allow (Touch ID)","Deny"]', JSON.stringify(b));
+  const l = vis({ text: 'Use your screen for 2 minutes: F1', kind: 'screen', minutes: 2, simulateActiveLoan: { client: 'anden', minutesLeft: 3 } });
+  check('4b ikonet: et andet laan er aktivt - boksen har kun Deny', JSON.stringify(l.buttons) === '["Deny"]', JSON.stringify(l));
+  const raw = JSON.parse(execFileSync(ikon, ['--dump-question'], { encoding: 'utf8', input: JSON.stringify({ nonce: 'n', session: 's', client: 'Claude', scope: 'x', target: 'y', expires: 0, text: 'Use your screen for 2 minutes', kind: 'screen', minutes: 2 }) }));
+  check('4c ikonet: mens laanet varer, viser boksen hvem, hvor laenge og stopknappen - bygget af den rigtige boksIndhold',
+    raw.boxWhileLent && raw.boxWhileLent.title === 'Claude is using your screen' && /^2 min left/.test(raw.boxWhileLent.lines[0])
+    && JSON.stringify(raw.boxWhileLent.buttons) === '["Take the screen back now"]', JSON.stringify(raw.boxWhileLent));
+}
+
+// 5 · ikonets kode er bundet til reglerne
+const m = readFileSync(join(KILDE, 'main.swift'), 'utf8');
+const krop = (start) => { const i = m.indexOf(start); return i < 0 ? '' : m.slice(i, m.indexOf('\n    }\n', i)); };
+const knapKrop = krop('func boksKnapTrykket(');
+check('5a boksens Allow er menuens tilladNonce - samme vej, med sit eget kildemaerke',
+  /case \.tillad\(let n\): tilladNonce\(n, kilde: "allow-box"\)/.test(knapKrop) && /case \.afvis\(let n\): afvisNonce\(n, kilde: "deny-box"\)/.test(knapKrop)
+  && /case \.gjort\(let n\): gjortNonce\(n, kilde: "done-box"\)/.test(knapKrop) && /case \.hentFrem\(let n\): hentFremNonce\(n\)/.test(knapKrop), knapKrop.slice(0, 300));
+check('5b menuens Allow gaar samme vej', /@objc func tillad\(_ sender: NSMenuItem\) \{ tilladNonce\(sender\.representedObject as\? String, kilde: "allow"\) \}/.test(m));
+const tillad = krop('func tilladNonce(');
+check('5c et ja kraever Touch ID: intet svar foer bekraeftMenneske, og et ja i boksen kun naar HELE teksten stod der',
+  /if kilde == "allow-box" && renTekst\(a\.s\.text\)\.count > BOKS_MAX_TEGN \{ return \}\n\s+boks\.touchIdIGang = true\n\s+bekraeftMenneske\(a\) \{/.test(tillad)
+  && !/svar\(ok: true|svarLaan/.test(tillad.slice(0, tillad.indexOf('bekraeftMenneske(a)'))), tillad.slice(0, 300));
+check('5c2 svaret er Touch ID-svaret, gennem touchIdUdfald og intet andet (R18, Astra)',
+  /bekraeftMenneske\(a\) \{ \[weak self\] ok in\n\s+self\?\.boks\.touchIdIGang = false\n\s+\/\/[^\n]*\n\s+switch touchIdUdfald\(ok: ok, erLaan: a\.s\.kind == "screen"\) \{\n\s+case \.laan:/.test(tillad)
+  && /case \.svar\(let v\):\n\s+a\.svar\(ok: v\)\n/.test(tillad) && !/svar\(ok: true/.test(tillad));
+check('5c3 et spoergsmaal findes kun paa sit eget engangsnummer', /func aaben\(_ nonce: String\?\) -> Anmodning\? \{\n\s+guard let n = nonce else \{ return nil \}\n\s+return anmodninger\.first \{ \$0\.s\.nonce == n && !\$0\.besvaret \}\n\s+\}/.test(m));
+check('5d boksens tryk afgoeres af boksHandling med den viste nonce og om knapperne er aktive',
+  /switch boksHandling\(knap: knap, knapNonce: n, visteNonce: boks\.nonce, aktive: boks\.knapperAktive\(\)\) \{/.test(knapKrop));
+check('5k Touch ID: knapperne slaas fra foer arket og til igen naar det svarer',
+  /boks\.touchIdIGang = true\n\s+bekraeftMenneske\(a\) \{ \[weak self\] ok in\n\s+self\?\.boks\.touchIdIGang = false/.test(m));
+check('5l pausen: et nyt spoergsmaal saetter tiden, og knapperne foelger knapperAktive',
+  /if ny != nonce && ny != nil \{\n\s+nytSpoergsmaal = Date\(\)/.test(m) && /let aktiv = nonce == nil \|\| knapperAktive\(\)/.test(m));
+check('5m boksen viser det FOERSTE aabne spoergsmaal og bruger dets nonce', /let foerste = aabne\.first/.test(m) && /nonce: foerste\?\.s\.nonce, sessioner: aktive/.test(m));
+check('5e hver knap baerer sit eget spoergsmaal (R17, Astra)',
+  /vist = ind; nonce = ny/.test(m)
+  && /b\.identifier = NSUserInterfaceItemIdentifier\("boks-" \+ \(ny \?\? ""\)\)/.test(m)
+  && /knapTrykket\(b\.title, id\.count > 5 \? String\(id\.dropFirst\(5\)\) : nil\)/.test(m));
+check('5f boksen faar menuens knapper OG fakta for spoergsmaalet', /let mm = spoergsmaalMenu\(a\.s, aktivtAndetLaan: andetLaan\(a\)\)\n\s+return \(antal: aabne\.count, klient: a\.s\.client, tekst: a\.s\.text, fakta: mm\.fakta, menuKnapper: mm\.knapper\)/.test(m)
+  && /let mm = spoergsmaalMenu\(a\.s, aktivtAndetLaan: andetLaan\(a\)\)/.test(m));
+check('5g placeringen: skaermen med det forreste vindue, hjoernet fra boksHjoerne',
+  /let i = boksSkaerm\(forrestVindue: forrestVindue\(\), mus: NSEvent\.mouseLocation, skaerme: skaerme\.map \{ \$0\.frame \}\)\n\s+let f = skaerme\[i\]\.visibleFrame\n\s+setFrameTopLeftPoint\(boksHjoerne\(synlig: f, bredde: frame\.width\)\)/.test(m));
+check('5j det forreste vindue er det forreste PROGRAMS (forrestVinduesRamme med dets pid)',
+  /guard let pid = NSWorkspace\.shared\.frontmostApplication\?\.processIdentifier,[\s\S]{0,300}let r = forrestVinduesRamme\(liste, pid: pid\)\n\s+else \{ return nil \}\n\s+return cocoaRamme\(r, hovedHoejde: hovedHoejde\)/.test(m));
+check('5h flyttes med: ny skaerm-opsaetning, og naar mennesket skifter skaerm', /didChangeScreenParametersNotification[\s\S]{0,200}boks\.placer\(\)/.test(m) && /else if boks\.skalFlyttes\(\) \{ boks\.placer\(\) \}/.test(m));
+check('5i boksen tager aldrig tastaturet og beder om ikke at blive delt (sharingType none - om optagelser respekterer det, er UMAALT)',
+  /override var canBecomeKey: Bool \{ false \}/.test(m) && s.panel.ikkeDelt && /\.nonactivatingPanel/.test(m));
+
+const tikKrop = krop('func tik() {');
+check('5r synligheden (R24, adfaerd): et laan holder boksen fremme uanset alt; ellers kun naar nogen arbejder, der er sessioner, og boksen ikke er slaaet fra',
+  JSON.stringify(s.synlig) === '[true,false,false,false,true,true,true]', JSON.stringify(s.synlig));
+check('5s ...og tik() afgoer det KUN gennem boksSynlig - boksSlaaetFra bruges ikke andre steder i tik()',
+  /if !boksSynlig\(laan: laan != nil, sessioner: s\.count, slaaetFra: boksSlaaetFra, arbejder: arbejder\) \{/.test(tikKrop)
+  && (tikKrop.match(/boksSlaaetFra/g) || []).length === 1, tikKrop.slice(0, 160));
+check('5t panelet (R24, MAALT paa et panel): statuslinjens lag 25, alle skriveborde, fuld skaerm, ikke delt, tager aldrig tastaturet',
+  s.panel.lag === 25 && s.panel.alleSkriveborde && s.panel.fuldskaerm && s.panel.ikkeDelt && s.panel.noegle && s.panel.svaever, JSON.stringify(s.panel));
+const boksKlasse = m.slice(m.indexOf('final class Boks: NSPanel'), m.indexOf('/// Det forreste programs forreste almindelige vindue'));
+check('5u Boks bruger boksPanelOpsaetning, og intet i klassen saetter laget bagefter',
+  /boksPanelOpsaetning\(self\)/.test(boksKlasse) && !/\blevel\s*=/.test(boksKlasse) && !/isFloatingPanel\s*=/.test(boksKlasse)
+  // R25 (Opus): ogsaa udefra - den eneste `level =` i ikonets kode er Follow-vinduets eget panel.
+  && (m.match(/\blevel\s*=/g) || []).length === 1 && /panel\.level = \.floating/.test(m), boksKlasse.slice(0, 80));
+check('5v stopknappen staar i sin EGEN raekke over spoergsmaalets knapper (R24: 465 af 336 px med gør-selv)',
+  /if k == TAG_TILBAGE \{ stopRaekke\.addArrangedSubview\(b\) \} else \{ knapper\.addArrangedSubview\(b\) \}/.test(m)
+  && /for v in \[titel, tekst, stopRaekke, knapper\] as \[NSView\]/.test(m));
+check('5w Follow og vaelgeren afgoeres af «intet spoergsmaal» (ny == nil), ikke af orange - et laan er orange (R24, Astra)',
+  /if ny == nil && sessioner\.count > 1 \{/.test(m) && /if ny == nil \{\n\s+let i = vaelger\.indexOfSelectedItem/.test(m) && !/if !ind\.orange/.test(m));
+check('5y et SKJULT ikon (open -g -j) goeres synligt uden at blive aktivt, foer boksen vises - begge steder (F1 9/10: boksen kom aldrig frem)',
+  /func visBoksen\(_ b: NSPanel\) \{\n\s+if NSApp\.isHidden \{ NSApp\.unhideWithoutActivation\(\) \}\n\s+b\.orderFrontRegardless\(\)\n\}/.test(m)
+  && /if !boks\.isVisible \|\| NSApp\.isHidden \{ boks\.placer\(\); visBoksen\(boks\) \}/.test(m)
+  && /if boks\.isVisible \{ boks\.placer\(\); visBoksen\(boks\) \}/.test(m)
+  && !/boks\.orderFrontRegardless\(\)/.test(m) && !/NSApp\.unhide\(/.test(m) && !/NSApp\.activate/.test(m)
+  // R26 (Astra + Opus): ogsaa Follow-vinduet - den eneste direkte orderFrontRegardless er i visBoksen
+  && (m.match(/orderFrontRegardless\(\)/g) || []).length === 1 && /visBoksen\(panel\)/.test(m));
+check('5x et stop lukker forbindelsen (afslutLaan)', /func afslutLaan\(\) \{ shutdown\(fd, SHUT_RDWR\) \}/.test(m));
+check('5n laanet holder boksen fremme - ogsaa stille og ogsaa naar boksen er slaaet fra - og gaar ind i boksIndhold (R22)',
+  /guard let l = aktivtLaan, !l\.lukket, let til = laanTil else \{ return nil \}/.test(tikKrop)
+  && /boksIndhold\(arbejder: arbejdende, tilsluttede: s\.count, venter: venter, laan: laan\)/.test(tikKrop), tikKrop.slice(0, 200));
+check('5o boksens stopknap er menuens: samme tagTilbageNu, eget kildemaerke, intet Touch ID',
+  /case \.tagTilbage: tagTilbageNu\(kilde: "take-back-box"\)/.test(knapKrop)
+  && /@objc func tagTilbage\(\) \{ tagTilbageNu\(kilde: "take-back"\) \}/.test(m)
+  && /func tagTilbageNu\(kilde: String\) \{\n\s+noterKilde\(kilde\)\n\s+aktivtLaan\?\.afslutLaan\(\)/.test(m));
+check('5p stopknappen slaas aldrig fra - hverken af pausen eller af Touch ID-arket', /b\.isEnabled = aktiv \|\| b\.title == TAG_TILBAGE/.test(m));
+// 8 · agentens egne tekster peger paa boksen (R22: 0 af 2 svar i menulinjen 9/10, 2 af 2 i boksen)
+const vaerktoejer = readFileSync(join(ROOT, 'mcp-server', 'tools.js'), 'utf8');
+const beskrivelse = (navn) => { const i = vaerktoejer.indexOf(`name: '${navn}'`); const d = vaerktoejer.indexOf("description: '", i); return i < 0 || d < 0 ? '' : vaerktoejer.slice(d, vaerktoejer.indexOf("',\n", d)); };
+const laanTekst = beskrivelse('computer_request_screen'), spoergTekst = beskrivelse('computer_ask_user');
+check('8a computer_request_screen beder agenten sende mennesket til boksen paa deres skaerm, og naevner stopknappen der',
+  /Allow \(Touch ID\) in the Computer MCP box in the top-right corner of the screen they are using/.test(laanTekst)
+  && /Take the screen back now/.test(laanTekst) && !/click the orange icon in the menu bar, then Allow/.test(laanTekst), laanTekst.slice(150, 420));
+check('8b computer_ask_user: spoergsmaalet venter i boksen (og under menulinje-ikonet)',
+  /waits in the Computer MCP box in the top-right corner of their screen/.test(spoergTekst), spoergTekst.slice(380, 560));
+const idx = readFileSync(join(ROOT, 'mcp-server', 'index.js'), 'utf8');
+check('8c serverens egne vejledninger naevner boksen, ikke kun menulinjen',
+  /they approve it in the box in the corner of their screen/.test(idx) && /The question then waits in the box in the corner of their screen/.test(idx)
+  && /In\nbackground mode it waits in the Computer MCP box in the corner of their screen/.test(idx));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/ikon-godkend.mjs b/test/ikon-godkend.mjs
index 699e2c87..f7bab639 100644
--- a/test/ikon-godkend.mjs
+++ b/test/ikon-godkend.mjs
@@ -14,13 +14,15 @@
 //   P7 ukendt maal, usloeret billede ....... A4, A5
 //   kapløb mellem servere .................. B1
 //   tjek igen efter ja ..................... C1
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
 import { createServer } from 'node:net';
 import { spawn } from 'node:child_process';
 import { mkdtempSync, writeFileSync, existsSync, readFileSync, chmodSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+import { lavFalskHjaelper, lavFalskSpoerger, HJAELPER_OPSLAG } from './falsk-hjaelper.mjs';
 
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 // Ingen proeve maa saette et ikon i menneskets menulinje - heller ikke koert uden run-all.sh.
@@ -72,11 +74,21 @@ check('A10b efterladt socket-fil: genkendt som «ikonet koerer ikke»',
 (await import('node:fs')).unlinkSync(join(STATE_A, 'ikon.sock'));
 
 let mode = 'ja';
-const ikon = await lavIkon(STATE_A, q => {
+// ⛔ 29/9: closuren tog ikke `sock`, saa «sent-ja» kastede en ReferenceError som
+//    try{} slugte - det sene ja blev ALDRIG sendt, og A13 maalte kun «intet svar».
+const ikon = await lavIkon(STATE_A, (q, sock) => {
   if (mode === 'ja') return { nonce: q.nonce, ok: true, verified: 'owner' };
   if (mode === 'uden-bekraeftelse') return { nonce: q.nonce, ok: true, verified: 'none' };
   if (mode === 'forkert-nonce') return { nonce: 'f'.repeat(32), ok: true, verified: 'owner' };
   if (mode === 'nej') return { nonce: q.nonce, ok: false, verified: 'none' };
+  if (mode === 'krasj') { sock.destroy(); return null; }          // ikonet gaar ned midt i spoergsmaalet
+  if (mode === 'skrald') { sock.write('ikke json\n'); return null; }
+  if (mode === 'delt') {                          // svaret kommer i to stykker
+    const hel = JSON.stringify({ nonce: q.nonce, ok: true, verified: 'owner' }) + '\n';
+    sock.write(hel.slice(0, 10));
+    setTimeout(() => { try { sock.write(hel.slice(10)); } catch {} }, 80);
+    return null;
+  }
   if (mode === 'sent-ja') {                       // svarer FOR SENT, med et gyldigt ja
     setTimeout(() => { try { sock.write(JSON.stringify({ nonce: q.nonce, ok: true, verified: 'owner' }) + '\n'); } catch {} }, 2600);
     return null;
@@ -141,6 +153,17 @@ await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describ
 const q11 = ikon.modtaget[ikon.modtaget.length - 1];
 check('A11 linjeskift renses foer teksten naar ikonet', !/[\r\n]/.test(q11.text), JSON.stringify(q11.text));
 
+// A14/A15 (29/9, panelet): et ja skal daekke ALT det mennesket saa. Foer klippede
+//   protokollen teksten tavst ved 200 tegn - resten naaede aldrig ikonet.
+const lang = 'Send til Benjamin: ' + 'computer-MCP virker. '.repeat(140);   // ~2.960 tegn
+await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: lang, alwaysAsk: true, ikon: IKON });
+const q14 = ikon.modtaget[ikon.modtaget.length - 1];
+check('A14 en lang tekst naar ikonet HEL, ikke klippet', q14?.text === lang.trim(), `${q14?.text?.length} af ${lang.trim().length} tegn`);
+const foer15 = antal();
+const a15 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'x'.repeat(4001), alwaysAsk: true, ikon: IKON });
+check('A15 over loftet: ikke spurgt og afvist - intet ja til noget halvt laest',
+      !a15.allow && antal() === foer15 && /more than the 4000/.test(a15.reason), a15.reason);
+
 // A12: hoejst ét aabent spoergsmaal pr. agent.
 mode = 'tavs';
 const [b1, b2] = await Promise.all([
@@ -153,6 +176,33 @@ check('A12 to samtidige spoergsmaal fra samme agent: det andet naar aldrig ikone
 check('A8 intet svar i tide: afvist og i koeen',
       [b1, b2].some(v => !v.allow && v.koe && /nobody answered/.test(v.reason)));
 
+// F (29/9, panelet: «lad porten fejle og komme tilbage» foer den udvides).
+//   Porten er brugt 3 gange paa ni dage; hver fejlvej skal ende i et nej - og
+//   den NAESTE spoergsmaal skal virke, ellers har én fejl lukket porten for altid.
+mode = 'krasj';
+const f1 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F1 ikonet gaar ned midt i spoergsmaalet: et nej, ikke et ja', !f1.allow && /closed without an answer|could not be reached/.test(f1.reason), f1.reason);
+mode = 'ja';
+const f1b = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F1b ...og det naeste spoergsmaal virker straks (ingen haengende «venter», ingen straf-pause)', f1b.allow, f1b.reason);
+mode = 'skrald';
+const f2 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F2 et svar der ikke kan laeses: et nej', !f2.allow && /did not match/.test(f2.reason), f2.reason);
+mode = 'delt';
+const f3 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F3 et ja der kommer i to stykker, laeses som ét', f3.allow, f3.reason);
+// F4: ikonet doer helt og startes igen - porten skal finde det nye.
+ikon.srv.close();
+try { (await import('node:fs')).unlinkSync(join(STATE_A, 'ikon.sock')); } catch {}
+const f4 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F4 ikonet er vaek: afvist uden at haenge', !f4.allow && /not running/.test(f4.reason), f4.reason);
+mode = 'ja';
+const ikon2 = await lavIkon(STATE_A, q => ({ nonce: q.nonce, ok: mode !== 'nej', verified: mode === 'nej' ? 'none' : 'owner' }));
+const f4b = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('F4b ...et nyt ikon paa samme sted: porten virker igen', f4b.allow && ikon2.modtaget.length === 1, f4b.reason);
+// Resten af del A taler med det nye ikon.
+ikon.srv = ikon2.srv; ikon.modtaget = ikon2.modtaget;
+
 // A9: et nej giver en pause, saa agenten ikke kan traette mennesket til et ja.
 mode = 'nej';
 const a9 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
@@ -162,6 +212,36 @@ const a9b = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.find
 check('A9 et nej er et nej', !a9.allow && /said no/.test(a9.reason), a9.reason);
 check('A9 ...og samme agent maa ikke spoerge igen lige efter', !a9b.allow && antal() === foer9, a9b.reason);
 check('A ingen osascript-dialog blev forsoegt i hele del A', dialogAttrap.gangeSpurgt() === 0, `${dialogAttrap.gangeSpurgt()} forsoeg`);
+
+// G (runde 1 30/9, Astra 7 + Fable F1): i FORGRUND - og dermed under et skaerm-laan -
+//   maa et «ikke spurgt» fra ikonet aldrig blive til en osascript-boks. Kun et ikon
+//   der slet ikke koerer, giver boksen. Pausen fra A9s nej er stadig aktiv her.
+process.env.CMCP_BACKGROUND = '0';
+const dG = dialogAttrap.gangeSpurgt();
+const g1 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('G1 forgrund lige efter et nej i ikonet: afvist, ingen boks', !g1.allow && /said no/.test(g1.reason) && dialogAttrap.gangeSpurgt() === dG, g1.reason);
+const g2 = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'x'.repeat(4001), alwaysAsk: true, ikon: IKON });
+check('G2 forgrund, tekst over loftet: afvist, ingen boks', !g2.allow && /more than the 4000/.test(g2.reason) && dialogAttrap.gangeSpurgt() === dG, g2.reason);
+ikon.srv.close(); ikon.srv = { close() {} };
+try { (await import('node:fs')).unlinkSync(join(STATE_A, 'ikon.sock')); } catch {}
+const g3a = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: IKON });
+check('G3a ikonet koerer ikke OG personen sagde lige nej: afvist, ingen boks (Astra R2 6)', !g3a.allow && /said no/.test(g3a.reason) && dialogAttrap.gangeSpurgt() === dG, g3a.reason);
+const g3b = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'x'.repeat(4001), alwaysAsk: true, ikon: IKON });
+check('G3b ikonet koerer ikke, tekst over loftet: afvist, ingen boks', !g3b.allow && /more than the 4000/.test(g3b.reason) && dialogAttrap.gangeSpurgt() === dG, g3b.reason);
+// G3c: uden pause og uden ikon ER boksen faldbag - maalt i en frisk proces (pausen lever i modulet).
+{
+  const { execFileSync: ef } = await import('node:child_process');
+  const sp3 = lavFalskSpoerger('ja', 'cmcp-godkend-g3');
+  const kode = `const P = await import(${JSON.stringify(join(ROOT, 'mcp-server', 'policy.js'))});
+    const v = await P.decide({ tier: P.TIER.WRITE, targetBundleId: 'com.apple.finder', describe: 'Quit Finder', alwaysAsk: true, ikon: { session: 's', client: 'c' } });
+    console.log(JSON.stringify(v));`;
+  const ud = ef(process.execPath, ['--input-type=module', '-e', kode], { encoding: 'utf8', timeout: 60000,
+    env: { ...process.env, CMCP_BACKGROUND: '0', CMCP_STATUS_IKON: '0', CMCP_ASK_TIMEOUT: '2', CMCP_OSASCRIPT: sp3.sti,
+           CMCP_STATE_DIR: mkdtempSync(join(tmpdir(), 'cmcp-godkend-g3-')) } });
+  const g3c = JSON.parse(ud.trim().split('\n').pop());
+  check('G3c forgrund, ikonet koerer ikke, ingen pause: boksen er faldbag', g3c.allow && sp3.gangeSpurgt() === 1, JSON.stringify(g3c).slice(0, 100));
+}
+delete process.env.CMCP_BACKGROUND;
 ikon.srv.close();
 
 // ─── B: to rigtige servere spoerger samtidig ─────────────────────────────
@@ -184,6 +264,12 @@ function server(state, helper, navn) {
 
 const STATE_B = mkdtempSync(join(tmpdir(), 'cmcp-godkend-b-'));
 const hjB = lavFalskHjaelper('cmcp-godkend-b');
+// ⛔ 7/10 (panel R6-R8, H): programlisten kom fra menneskets RIGTIGE skaerm - stod
+//    Finder forrest, afviste produktet kaldet foer ikonet blev spurgt, og B1 faldt af
+//    en grund der intet har med to agenter at goere. Nu fast: Finder koerer bagved.
+hjB.saetSvar({ apps: { apps: [
+  { name: 'Finder', bundleId: 'com.apple.finder', pid: 7001, active: false },
+  { name: 'Agent360 IDE', bundleId: 'com.agent360.ide', pid: 7002, active: true } ] } });
 // Ikonet svarer KUN den agent der hedder chat-beta. chat-alfa faar intet.
 const ikonB = await lavIkon(STATE_B, q => q.client === 'chat-beta' ? { nonce: q.nonce, ok: true, verified: 'owner' } : null);
 const A = server(STATE_B, hjB.sti, 'chat-alfa');
@@ -215,6 +301,9 @@ if (a[0] === 'apps') {
   process.stdout.write(JSON.stringify({ ok: true, apps: [
     { name: 'Finder', bundleId: 'com.apple.finder', pid: 1, active: existsSync(${JSON.stringify(flag)}) },
     { name: 'Agent360 IDE', bundleId: 'com.agent360.ide', pid: 2, active: !existsSync(${JSON.stringify(flag)}) } ] }) + '\\n');
+} else if (${JSON.stringify(HJAELPER_OPSLAG)}.includes(a[0])) {
+  // Et rent opslag (fx \`idle\`, punkt P 7/10) er ikke en handling - samme liste som falsk-hjaelper.
+  process.stdout.write(JSON.stringify({ ok: true }) + '\\n');
 } else {
   appendFileSync(${JSON.stringify(handlinger)}, JSON.stringify(a) + '\\n');
   process.stdout.write(JSON.stringify({ ok: true }) + '\\n');
@@ -246,6 +335,9 @@ if (a[0] === 'apps') {
   process.stdout.write(JSON.stringify({ ok: true, apps: [
     { name: 'Finder', bundleId: 'com.apple.finder', pid: 1, active: existsSync(${JSON.stringify(flag2)}) },
     { name: 'Agent360 IDE', bundleId: 'com.agent360.ide', pid: 2, active: !existsSync(${JSON.stringify(flag2)}) } ] }) + '\\n');
+} else if (${JSON.stringify(HJAELPER_OPSLAG)}.includes(a[0])) {
+  // Et rent opslag (fx \`idle\`, punkt P 7/10) er ikke en handling - samme liste som falsk-hjaelper.
+  process.stdout.write(JSON.stringify({ ok: true }) + '\\n');
 } else {
   appendFileSync(${JSON.stringify(handlinger2)}, JSON.stringify(a) + '\\n');
   process.stdout.write(JSON.stringify({ ok: true }) + '\\n');
@@ -331,6 +423,54 @@ check('D2 ...og anden skrivning spurgte ikke igen', !d2b.result.isError && ikonD
 D2.srv.kill(); ikonD.srv.close();
 process.env.CMCP_MODE = 'allow';
 
+// ─── E: computer_ask_user via ikonet (29/9, panelet) ─────────────────────
+// I baggrund gaar spoergsmaalet til ikonet som «goer det selv». «Done» er et
+// SIGNAL: det maa aldrig kunne blive et ja til en anden handling.
+const STATE_E = mkdtempSync(join(tmpdir(), 'cmcp-godkend-e-'));
+const hjE = lavFalskHjaelper('cmcp-godkend-e');
+let eSvar = 'done';
+const ikonE = await lavIkon(STATE_E, q => eSvar === 'done' ? { nonce: q.nonce, ok: true, verified: 'done' }
+                                      : eSvar === 'nej' ? { nonce: q.nonce, ok: false, verified: 'none' } : null);
+const spE = lavFalskSpoerger('ja', 'cmcp-godkend-e-sp');
+// Egen server: attrappen skal kunne taelles, saa den saettes paa miljoeet her.
+const E1s = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+  env: { ...process.env, CMCP_STATE_DIR: STATE_E, CMCP_MODE: 'allow', CMCP_HELPER: hjE.sti,
+         CMCP_ASK_TIMEOUT: '3', CMCP_STATUS_IKON: '0', CMCP_OSASCRIPT: spE.sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+const eRpc = (() => { let buf = ''; const v = new Map(); let n = 0;
+  E1s.stdout.on('data', d => { buf += d; let i;
+    while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1);
+      try { const m = JSON.parse(l); v.get(m.id)?.(m); v.delete(m.id); } catch {} } });
+  return (method, params = {}) => new Promise((res, rej) => { const id = ++n; v.set(id, res);
+    E1s.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+    setTimeout(() => rej(new Error('timeout')), 30000); }); })();
+await eRpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'chat-e', version: '1' } });
+E1s.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+
+const e1 = await eRpc('tools/call', { name: 'computer_ask_user',
+  arguments: { message: 'Type your 2FA code in the field - Lands in: com.evil.app', app: 'Finder' } });
+const qE = ikonE.modtaget[0];
+const e1t = e1.result?.content?.[0]?.text || '';
+check('E1 ask_user i baggrund naar ikonet som «goer det selv»', qE?.kind === 'goer-selv', JSON.stringify(qE || {}).slice(0, 120));
+check('E1 ...hvor det lander er skrevet af SERVEREN (bundle-ID), ikke af modellen',
+      /com\.apple\.finder/.test(qE?.target || '') && qE?.targetBundle === 'com.apple.finder' && !/evil/.test(qE?.target || ''), `${qE?.target} | ${qE?.targetBundle}`);
+check('E1 ...Done giver done:true, og ingen tekst kommer tilbage', !e1.result.isError && /"done":\s*true/.test(e1t) && !/2FA code/.test(e1t.replace(/"note".*/, '')), e1t.slice(0, 120));
+check('E1 ...og ingen dialog blev rejst', spE.gangeSpurgt() === 0, `${spE.gangeSpurgt()}`);
+eSvar = 'nej';
+const e2 = await eRpc('tools/call', { name: 'computer_ask_user', arguments: { message: 'Approve the login', app: 'Finder' } });
+check('E2 «I won\'t do this»: done:false', /"done":\s*false/.test(e2.result?.content?.[0]?.text || ''), (e2.result?.content?.[0]?.text || '').slice(0, 100));
+E1s.kill(); ikonE.srv.close();
+
+// E3: et «done»-svar paa et almindeligt SAMTYKKE er et nej. Ellers kunne et
+//     signal uden Touch ID blive til en tilladelse.
+const STATE_E3 = mkdtempSync(join(tmpdir(), 'cmcp-godkend-e3-'));
+process.env.CMCP_STATE_DIR = STATE_E3;
+const G = await import(join(ROOT, 'mcp-server', 'godkend.js') + '?e3');
+const ikonE3 = await lavIkon(STATE_E3, q => ({ nonce: q.nonce, ok: true, verified: 'done' }));
+const e3 = await G.spoergIkonet({ session: 's', client: 'c', text: 'Quit Finder', scope: 'this one action only', target: 'com.apple.finder' }, 3);
+check('E3 «done» paa et samtykke-spoergsmaal: ikke et ja', !e3.ok && /not confirmed/.test(e3.grund), e3.grund);
+ikonE3.srv.close();
+
 if (fails.length) { console.log(`\n${fails.length} DUMPET`); process.exit(1); }
 console.log('\nBESTAAET');
 process.exit(0);
diff --git a/test/ikon-lyd.mjs b/test/ikon-lyd.mjs
new file mode 100644
index 00000000..85b55d6d
--- /dev/null
+++ b/test/ikon-lyd.mjs
@@ -0,0 +1,79 @@
+// IKON-LYD: hoejst én lyd pr. nyt spoergsmaal (punkt S).
+//
+// ⛔ 7/10 (panel R8, Astra): «genlevering, timeout og afbrudt forbindelse giver hoejst
+//    ét signal pr. spoergsmaal». Proeven kompilerer ikonets egen Lyd.swift og koerer
+//    forloebene gennem den samme LydHukommelse som ikonet - ingen skaerm, intet ikon,
+//    ingen lyd. Og den binder ikonet til reglen: den eneste lyd i main.swift spilles
+//    kun naar skalLyde svarer ja, og menuen kan slaa den fra.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const KILDE = join(ROOT, 'helper', 'Sources', 'cmcp-status');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-ikon-lyd-'));
+try {
+  writeFileSync(join(ARB, 'main.swift'), `import Foundation
+struct H: Decodable { let nonce: String; let lukket: Bool; let besvaret: Bool; let til: Bool }
+let ind = try! JSONDecoder().decode([H].self, from: FileHandle.standardInput.readDataToEndOfFile())
+var hk = LydHukommelse()
+let ud = ind.map { hk.skalLyde(nonce: $0.nonce, lukket: $0.lukket, besvaret: $0.besvaret, til: $0.til) }
+FileHandle.standardOutput.write(try! JSONSerialization.data(withJSONObject: ["lyde": ud, "standard": LYD_STANDARD]))
+`);
+  const BIN = join(ARB, 'lyd');
+  execFileSync('swiftc', [join(KILDE, 'Lyd.swift'), join(ARB, 'main.swift'), '-o', BIN], { stdio: 'pipe', timeout: 180000 });
+  const koer = (h) => JSON.parse(execFileSync(BIN, { input: JSON.stringify(h), encoding: 'utf8' }));
+  const h = (nonce, { lukket = false, besvaret = false, til = true } = {}) => ({ nonce, lukket, besvaret, til });
+
+  // Et spoergsmaal i ikonets liv: vist, leveret igen paa en ny forbindelse, udloebet.
+  const r = koer([h('a'), h('a'), h('x', { lukket: true }), h('b'), h('c', { besvaret: true }), h('d', { til: false }), h('d')]).lyde;
+  check('1 et nyt spoergsmaal giver lyd', r[0] === true, JSON.stringify(r));
+  check('2 samme spoergsmaal leveret igen giver ingen lyd', r[1] === false);
+  // Udloebet maales paa et spoergsmaal der IKKE fik lyd ved ankomst (fx slaaet fra dengang) -
+  // ellers holder genleverings-reglen i stedet, og proeven maaler den forkerte regel.
+  check('3 udloebet (orange slukkes) giver ingen lyd', r[2] === false);
+  check('4 et andet nyt spoergsmaal giver sin egen lyd', r[3] === true);
+  check('5 et besvaret spoergsmaal giver ingen lyd', r[4] === false);
+  check('6 slaaet fra giver ingen lyd', r[5] === false);
+  check('7 en lyd der ikke blev spillet (slaaet fra), taeller ikke som hoert', r[6] === true);
+  check('8 hoejst én lyd pr. spoergsmaal over hele forloebet', r.filter(Boolean).length === 3, `${r.filter(Boolean).length} lyde for a, b, d`);
+
+  // Standarden var Gustavs valg (R9). Gustav 8/10: til.
+  const { standard } = koer([]);
+  check('9 standarden er til (Gustav 8/10)', standard === true, String(standard));
+
+  // Ikonet bruger reglen: den eneste lyd staar under skalLyde, og menuen kan slaa den fra.
+  const main = readFileSync(join(KILDE, 'main.swift'), 'utf8');
+  const lyde = main.match(/NSSound\(/g) || [];
+  check('10 ikonet har én lyd, og den spilles kun naar skalLyde svarer ja', lyde.length === 1
+        && /if lydHukommelse\.skalLyde\(nonce: a\.s\.nonce, lukket: a\.lukket, besvaret: a\.besvaret, til: lydSlaaetTil\(\)\) \{\n\s*NSSound\(/.test(main),
+        `${lyde.length} lyde i main.swift`);
+  // Astra R10: mutanten «nyAnmodning = { _ in ikon.tik() }» overlevede - reglen og lydstedet
+  // var bevist, men ikke at et nyt spoergsmaal NAAR lydstedet. Kaeden bindes her led for led.
+  check('13 et nyt spoergsmaal naar lydstedet: socket -> nyAnmodning -> vis(a)',
+        /anmodninger\.append\(a\)\n\s*nyAnmodning\(a\)/.test(main) && /^nyAnmodning = \{ a in ikon\.vis\(a\) \}$/m.test(main)
+        && /func vis\(_ a: Anmodning\) \{\n\s*tik\(\)\n\s*if lydHukommelse\.skalLyde\(/.test(main));
+  check('11 menuen har et punkt der slaar lyden til og fra', /"Play a sound when an agent needs you", action: #selector\(skiftLyd\)/.test(main)
+        && /func skiftLyd\(\) \{ UserDefaults\.standard\.set\(!lydSlaaetTil\(\), forKey: "lyd"\) \}/.test(main));
+  // README'en lover det standarden giver - begge README'er (claims 45 holder dem ens).
+  const readme = readFileSync(join(ROOT, 'README.md'), 'utf8');
+  const lover = standard ? /each new question plays one sound; switch it off in the icon's menu/i
+                         : /Switch it on in the icon's menu, and each new\s+question plays one sound/;
+  check('12 README lover den standard ikonet har', lover.test(readme), standard ? 'til' : 'tilvalg');
+  // ...og CHANGELOG'ens afsnit om lyden (Opus R12: ellers bliver den usand uden at nogen ser det).
+  const log = readFileSync(join(ROOT, 'CHANGELOG.md'), 'utf8');
+  const loverLog = standard ? /each new question plays one sound/i : /\*\*A sound, if you want one\.\*\* Switch it on in the icon's menu/;
+  check('12b CHANGELOG lover den standard ikonet har', loverLog.test(log), standard ? 'til' : 'tilvalg');
+} catch (e) {
+  check('proeven koerte', false, String(e.stderr || e.message).slice(0, 200));
+} finally {
+  rmSync(ARB, { recursive: true, force: true });
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/ikon-menu.mjs b/test/ikon-menu.mjs
new file mode 100644
index 00000000..48f15a5a
--- /dev/null
+++ b/test/ikon-menu.mjs
@@ -0,0 +1,84 @@
+// IKON-MENU: viser menulinje-ikonet det rigtige for hvert slags spoergsmaal?
+//
+// ⛔ HVORFOR DEN FINDES (29/9-2026)
+//    Tre nye ting i ikonet - hele teksten over knapperne, «goer det selv» med Done,
+//    og skaerm-laanet - var kun kompileret, aldrig koert. Menuen bygges af
+//    `spoergsmaalMenu`, og `cmcp-status --dump-question` skriver praecis den
+//    tekst som JSON UDEN at vise noget. Ikonet startes aldrig her.
+import './ryd-op.mjs';
+import { execFileSync } from 'node:child_process';
+import { existsSync, statSync, mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// ⛔ En AELDRE binaer kender ikke --dump-question og ville starte det rigtige ikon.
+//    Derfor den nyeste af kandidaterne, og en hard frist.
+// En udpeget binaer (mutationsbeviset) vinder altid over den nyeste.
+const IKON = process.env.CMCP_STATUS_BIN || [
+  join(ROOT, 'mcp-server', 'vendor', 'ComputerMCPStatus.app', 'Contents', 'MacOS', 'cmcp-status'),
+  join(ROOT, 'helper', '.build', 'release', 'cmcp-status')]
+  .filter(p => p && existsSync(p)).sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs)[0];
+const STATE = mkdtempSync(join(tmpdir(), 'cmcp-ikonmenu-'));
+const vis = (q) => JSON.parse(execFileSync(IKON, ['--dump-question'], {
+  input: JSON.stringify({ nonce: 'n', session: 's1', client: 'chat', scope: 'If you allow it, this one action only.',
+                          target: 'com.apple.finder', expires: Date.now() + 60000, ...q }),
+  env: { ...process.env, CMCP_STATE_DIR: STATE }, timeout: 10000, killSignal: 'SIGKILL' }).toString());
+
+if (!IKON) { console.log('SPR. ingen ikon-binaer at maale'); process.exit(1); }
+
+// 1. Et almindeligt samtykke: hele teksten, fakta, Allow/Deny.
+// Serveren trimmer teksten foer ikonet faar den (godkend.js), saa proeven goer det samme.
+const lang = ('Send til Benjamin: ' + 'computer-MCP virker. '.repeat(40)).trim();
+const a = vis({ text: lang });
+check('1 samtykke: Allow og Deny, i den raekkefoelge', JSON.stringify(a.buttons) === JSON.stringify(['Allow… (confirm with Touch ID)', 'Deny']), JSON.stringify(a.buttons));
+check('1 ...hele teksten staar i undermenuen', a.text.join(' ').replace(/\s+/g, '') === lang.trim().replace(/\s+/g, ''), `${a.text.length} linjer`);
+check('1 ...overskriften siger hvor mange tegn', a.header === `The whole action (${lang.trim().length} characters):`, a.header);
+check('1 ...hovedmenuen viser en kort udgave', a.title.endsWith('…') && a.title.length < 100, a.title);
+check('1 ...hvor det lander staar som fakta', a.facts.includes('Lands in: com.apple.finder'), JSON.stringify(a.facts));
+check('1 ...Touch ID-arket siger at det er forkortet, og hvor resten staar', /characters, all shown in the menu/.test(a.touchId), a.touchId.slice(0, 120));
+
+// 2. Goer det selv: ingen Allow, ingen Touch ID-knap.
+const g = vis({ text: 'Type your 2FA code', kind: 'goer-selv', targetBundle: 'com.apple.finder' });
+check('2 goer-selv: Take me there, Done, I won\'t - og INGEN Allow',
+      JSON.stringify(g.buttons) === JSON.stringify(['Take me there', 'Done — I did it', "I won't do this"]), JSON.stringify(g.buttons));
+const g2 = vis({ text: 'Approve the login', kind: 'goer-selv' });
+check('2b uden program at hente frem: ingen Take me there', !g2.buttons.includes('Take me there'), JSON.stringify(g2.buttons));
+
+// 3. Skaerm-laanet: Allow kraever Touch ID, og mens laanet gaelder staar det oeverst.
+const l = vis({ text: 'Use your screen for 5 minutes: drag the file', kind: 'screen', minutes: 5, target: 'your screen' });
+check('3 laan: Allow med Touch ID', l.buttons[0] === 'Allow… (confirm with Touch ID)', JSON.stringify(l.buttons));
+check('3 ...Touch ID-arket siger laan, minutter og at det kan tages tilbage', /lend chat your screen for 5 minutes/.test(l.touchId) && /take it back/.test(l.touchId), l.touchId);
+check('3 ...og mens det gaelder: hvem, hvor laenge, og «Take the screen back now»',
+      /chat is using your screen — 5 min left/.test(l.whileLent?.[0] || '') && l.whileLent?.[1] === 'Take the screen back now', JSON.stringify(l.whileLent));
+// 3c (live-proeven 30/9): boksen paa skaermen skal SIGE at et spoergsmaal venter, og hvor.
+// 9/10: boksen viser spoergsmaalet HELT og har menuens knapper (test/ikon-boks.mjs maaler resten).
+const bx = vis({ text: 'Use your screen for 5 minutes: live-proeve', kind: 'screen', minutes: 5 }).box || {};
+check('3c boksen siger at et spoergsmaal venter, og hvem der spoerger', bx.orange === true && /needs you/i.test(bx.title || ''), JSON.stringify(bx));
+check('3c ...og hvad det gaelder, helt - og hvor det lander', (bx.lines || [])[0] === 'Use your screen for 5 minutes: live-proeve' && (bx.lines || []).some(l => l.startsWith('Lands in:')), JSON.stringify(bx));
+check('3c ...med Allow (Touch ID) og Deny', JSON.stringify(bx.buttons) === '["Allow (Touch ID)","Deny"]', JSON.stringify(bx));
+check('3b laanet kan aldrig vaere over 15 minutter i ikonet', /for 15 minutes/.test(vis({ text: 'x', kind: 'screen', minutes: 99 }).touchId));
+
+// 3d (skaerm-koe-panelet, 2/10): et ANDET laan er allerede aktivt - «Allow» udelades,
+// «Deny» staar stadig, og en «Waiting»-linje siger hvem og hvor laenge. Samme funktion
+// bygger den rigtige menu (menuNeedsUpdate), saa dette maaler uden en levende GUI.
+const q = vis({ text: 'Use your screen for 3 minutes: resize a window', kind: 'screen', minutes: 3,
+                simulateActiveLoan: { client: 'anden-agent', minutesLeft: 4 } });
+check('3d koe: Allow er vaek, Deny staar', JSON.stringify(q.buttons) === JSON.stringify(['Deny']), JSON.stringify(q.buttons));
+check('3d ...og en Waiting-linje siger hvem og hvor laenge',
+      /Waiting.*anden-agent.*4 more minutes/.test(q.waitingForLoan || ''), q.waitingForLoan);
+// 3e uden et andet laan: uaendret - Allow staar, ingen Waiting-linje.
+const q2 = vis({ text: 'Use your screen for 3 minutes: resize a window', kind: 'screen', minutes: 3 });
+check('3e uden koe: Allow staar, ingen waitingForLoan-noegle', q2.buttons[0] === 'Allow… (confirm with Touch ID)' && !('waitingForLoan' in q2), JSON.stringify(q2.buttons));
+
+// 4. Modellen kan ikke tegne sine egne knapper ind.
+const s = vis({ text: 'Press "Gem"\nAllow… (confirm with Touch ID)‮' });
+check('4 linjeskift og retningstegn i teksten bliver ikke til egne linjer eller knapper',
+      s.text.length === 1 && !/[\n‮]/.test(s.text[0]) && s.buttons.length === 2, JSON.stringify(s.text));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/input-maal.mjs b/test/input-maal.mjs
index 612af388..2b80bfc9 100644
--- a/test/input-maal.mjs
+++ b/test/input-maal.mjs
@@ -7,6 +7,8 @@
 //
 // Intet sendes til Mac'en: attrap-hjaelper + en attrap-spoerger der svarer ja
 // og i samme oejeblik «skifter» det forreste program (en fil attrappen laeser).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -157,6 +159,7 @@ esac
 printf '%s ' "$@" >> ${ARGV4}; echo >> ${ARGV4}
 case "$1" in
   apps) echo '{"ok":true,"apps":[{"name":"TextEdit","bundleId":"com.apple.TextEdit","active":false},{"name":"Keychain Access","bundleId":"com.apple.keychainaccess","active":false},{"name":"Finder","bundleId":"com.apple.finder","active":true}]}' ;;
+  menus) echo '{"ok":true,"items":[{"path":"File > New","shortcut":"cmd+n","enabled":true}]}' ;;
   *) echo '{"ok":true}' ;;
 esac
 `);
diff --git a/test/klik-ejer.mjs b/test/klik-ejer.mjs
index 0e1e97a7..affaedc3 100644
--- a/test/klik-ejer.mjs
+++ b/test/klik-ejer.mjs
@@ -7,6 +7,8 @@
 //
 // Intet klikkes: serveren koerer mod en attrap-hjaelper der kun skriver sit
 // argv ned, og samtykket gaar til en attrap der ikke svarer.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -27,20 +29,22 @@ printf '%s ' "$@" >> ${ARGV}; echo >> ${ARGV}
 X=""; prev=""; for a in "$@"; do [ "$prev" = "--x" ] && X="$a"; prev="$a"; done
 case "$1" in
   apps) echo '{"ok":true,"apps":[{"name":"Google Chrome","bundleId":"com.google.Chrome","active":true}]}' ;;
+  # En almindelig side, ikke en webchat - ellers ville sende-porten doemme klikket (30/9).
+  samtale) echo '{"ok":true,"window":"Example Domain - Google Chrome"}' ;;
   at)
     # Markoeren staar over et Passwords-vindue.
-    case " $* " in *" --pointer "*) echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords"}'; exit 0 ;; esac
+    case " $* " in *" --pointer "*) echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords","role":"AXGroup","window":"Passwords"}'; exit 0 ;; esac
     case "$X" in
-      100) echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome"}' ;;
-      200) echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords"}' ;;
+      100) echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome","role":"AXStaticText","window":"Example Domain - Google Chrome"}' ;;
+      200) echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords","role":"AXGroup","window":"Passwords"}' ;;
       400) # Foerste opslag: Chrome. Derefter: Passwords - et vindue kom frem imens.
-           if [ -f ${join(D, 'skiftet')} ]; then echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords"}'
-           else : > ${join(D, 'skiftet')}; echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome"}'; fi ;;
+           if [ -f ${join(D, 'skiftet')} ]; then echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords","role":"AXGroup","window":"Passwords"}'
+           else : > ${join(D, 'skiftet')}; echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome","role":"AXStaticText","window":"Example Domain - Google Chrome"}'; fi ;;
       500) # Tilgaengeligheds-laget siger Chrome; vindues-stakken har 1Password under et gennemsigtigt lag.
-           echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome","under":["com.apple.dock","com.agilebits.onepassword7"]}' ;;
+           echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome","role":"AXStaticText","window":"Example Domain - Google Chrome","under":["com.apple.dock","com.agilebits.onepassword7"]}' ;;
       600|700) # Foerste opslag: ingen ejer. Derefter: 600 -> Passwords, 700 -> Chrome.
            if [ -f ${join(D, 'set-')}$X ]; then
-             [ "$X" = 600 ] && echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords"}' || echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome"}'
+             [ "$X" = 600 ] && echo '{"ok":true,"found":true,"bundleId":"com.apple.Passwords","role":"AXGroup","window":"Passwords"}' || echo '{"ok":true,"found":true,"bundleId":"com.google.Chrome","role":"AXStaticText","window":"Example Domain - Google Chrome"}'
            else : > ${join(D, 'set-')}$X; echo '{"ok":true,"found":false}'; fi ;;
       *)   echo '{"ok":true,"found":false}' ;;
     esac ;;
@@ -126,12 +130,17 @@ srv.kill();
   await rpc2('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'klikejer2', version: '1' } });
   s2.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
 
+  // ⛔ 7/10 (panel R8, punkt I): et ukendt ejer-opslag afvises nu FOER spoergsmaalet -
+  //    genmaalingen afviste det alligevel efter ja'et, og ja'et var spildt. Bevidst
+  //    stramning (Astra R8): kun et andet opslag der tilfaeldigvis lykkedes, naaede
+  //    foer igennem (det var 9a). Spoergeren svarer stadig JA, saa kun den tidlige
+  //    afvisning kan standse klikket.
   const r700 = await kald2('computer_click', { x: 700, y: 50 });
-  check('9a kalibrering: ukendt ejer + ja + nu et almindeligt program -> klikket sker', klikket(700) && ja.gangeSpurgt() === 1,
-        r700.slice(0, 80));
+  check('9a ukendt ejer ved vurderingen: afvist uden spoergsmaal, intet klik', !klikket(700) && ja.gangeSpurgt() === 0
+        && /could not be identified/.test(r700), r700.slice(0, 80));
   const r600 = await kald2('computer_click', { x: 600, y: 50 });
-  check('9b ukendt ejer + ja, men nu et adgangskode-program under punktet -> intet klik',
-        !klikket(600) && ja.gangeSpurgt() === 2 && /unknown when it was approved/.test(r600), r600.slice(0, 110));
+  check('9b ...ogsaa naar et adgangskode-program nu ligger under punktet: intet klik, intet spoergsmaal',
+        !klikket(600) && ja.gangeSpurgt() === 0 && /could not be identified/.test(r600), r600.slice(0, 110));
   s2.kill();
 }
 // ⛔ Proeve-reviewet 25/9: README kalder «et vindue macOS kalder uigennemsigtigt, men som
diff --git a/test/knap-ord.mjs b/test/knap-ord.mjs
new file mode 100644
index 00000000..2a27692f
--- /dev/null
+++ b/test/knap-ord.mjs
@@ -0,0 +1,138 @@
+// En KNAP der sletter, rydder eller lukker, spoerger - som et menupunkt med samme ord.
+//
+// ⛔ HVORFOR DEN FINDES (1/10-2026, konsulent-panelet om skaerm-koeen)
+//    README lover «Anything that deletes or clears asks every time, recognised from the
+//    words in the action itself». Ordene blev kun laest paa menuer og genveje: et tryk
+//    paa en knap der hed «Slet», eller et klik paa «Erase», spurgte aldrig.
+// Intet startes, intet tager skaermen: attrap-hjaelper og attrap-samtykke.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const D = mkdtempSync(join(tmpdir(), 'cmcp-knapord-'));
+const ARGV = join(D, 'argv.txt'), KNAP = join(D, 'knap.json'), AT = join(D, 'at.json'), STUB = join(D, 'stub.sh');
+writeFileSync(STUB, `#!/bin/sh
+printf '%s ' "$@" >> ${ARGV}; echo >> ${ARGV}
+case "$1" in
+  apps) echo '{"ok":true,"apps":[{"bundleId":"com.apple.TextEdit","name":"TextEdit","pid":4242,"active":false}]}' ;;
+  resolve-app) echo '{"ok":true,"bundleId":"com.apple.TextEdit","running":true}' ;;
+  press) case " $* " in *" --dry "*) cat ${KNAP} ;; *) echo '{"ok":true,"pressed":{}}' ;; esac ;;
+  at) cat ${AT} ;;
+  *) echo '{"ok":true}' ;;
+esac
+`);
+chmodSync(STUB, 0o755);
+const knap = (navn) => writeFileSync(KNAP, JSON.stringify({ ok: true, would_press: { name: navn, role: 'AXButton' } }));
+const ved = (titel) => writeFileSync(AT, JSON.stringify({ ok: true, found: true, bundleId: 'com.apple.TextEdit', role: 'AXButton', title: titel }));
+
+const spoerger = lavFalskSpoerger('udloeb', 'cmcp-knapord');
+const srv = spawn('node', [join(ROOT, 'mcp-server/index.js')], {
+  env: { ...process.env, CMCP_HELPER: STUB, CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1',
+         CMCP_STATE_DIR: join(D, 'state'), CMCP_BACKGROUND: '0', CMCP_MODE: 'allow',
+         CMCP_ASK_TIMEOUT: '2', CMCP_OSASCRIPT: spoerger.sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise(r => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); });
+const kald = async (navn, args) => (await rpc('tools/call', { name: navn, arguments: args })).result?.content?.[0]?.text || '';
+await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'knapord', version: '1' } });
+srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+const linjer = () => (existsSync(ARGV) ? readFileSync(ARGV, 'utf8') : '').split('\n');
+const trykket = () => linjer().filter(l => l.startsWith('press ') && !l.includes('--dry')).length;
+const klikket = () => linjer().filter(l => l.startsWith('click ')).length;
+
+knap('Slet'); let f = trykket();
+await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Slet' });
+check('1 en knap der hedder «Slet», trykkes IKKE uden et ja', trykket() === f);
+
+knap('Erase'); f = trykket();
+await kald('computer_press', { app: 'com.apple.TextEdit', contains: 'ras' });
+check('2 knappens EGET navn afgør det, ikke det agenten søgte på («ras» -> «Erase»)', trykket() === f);
+
+knap('Gem'); f = trykket();
+await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Gem' });
+check('3 en harmløs knap («Gem») trykkes uden at spørge', trykket() === f + 1);
+
+ved('Delete'); f = klikket();
+await kald('computer_click', { app: 'com.apple.TextEdit', x: 100, y: 200 });
+check('4 et klik der rammer «Delete», sker IKKE uden et ja', klikket() === f);
+
+// ⛔ 2/10 (Opus-panelet): et klik rammer UANSET om opslaget her kan sige hvad
+// der er på punktet - i modsætning til press, som slet ikke kan udføres uden
+// et fundet element. Før fejlede disse tre tilfælde ÅBENT (ikke farligt).
+writeFileSync(AT, JSON.stringify({ ok: true, found: false })); f = klikket();
+await kald('computer_click', { app: 'com.apple.TextEdit', x: 10, y: 10 });
+check('6 intet fundet på punktet: klikket sker IKKE uden et ja (fail closed)', klikket() === f);
+
+writeFileSync(AT, JSON.stringify({ ok: true, found: true, bundleId: 'com.apple.TextEdit', role: 'AXUnknown' })); f = klikket();
+await kald('computer_click', { app: 'com.apple.TextEdit', x: 10, y: 10 });
+check('7 fundet, men uden navn eller beskrivelse: klikket sker IKKE uden et ja', klikket() === f);
+
+const stubKilde = readFileSync(STUB, 'utf8');
+writeFileSync(STUB, stubKilde.replace(/^  at\) cat .*$/m, '  at) exit 1 ;;')); f = klikket();
+await kald('computer_click', { app: 'com.apple.TextEdit', x: 10, y: 10 });
+check('8 opslaget selv fejler: klikket sker IKKE uden et ja', klikket() === f);
+writeFileSync(STUB, stubKilde);
+
+// ⛔ RETTET samme dag (CI fandt det, test/sende-port.mjs q9): en navnløs
+// AXGroup er et helt almindeligt layout-lag, ikke en mulig "Slet"-knap -
+// kun roller der plausibelt ER en knap (ukendt, Button, Image, Unknown)
+// spørger når navnet mangler. Uden denne sondring spurgte porten på HVERT
+// navnløst klik, også harmløse - for bredt.
+writeFileSync(AT, JSON.stringify({ ok: true, found: true, bundleId: 'com.apple.TextEdit', role: 'AXGroup' })); f = klikket();
+await kald('computer_click', { app: 'com.apple.TextEdit', x: 10, y: 10 });
+check('9 fundet uden navn, men rollen er en harmløs gruppe: klikket sker UDEN at spørge', klikket() === f + 1);
+
+// ⛔ review-security F5 (2/10), Gustav ja: samme klasse fejl som klikkets F1 i dag,
+// bare paa tryk-grenen - et mislykket toerkoersels-opslag blev laest som "ufarligt".
+// ⛔ 7/10 (panel R8, punkt I): toerkoersel og tryk bruger SAMME soegning, saa et maal
+// toerkoerslen ikke kan vise, kan heller ikke trykkes. Foer spurgte porten om et ja til
+// noget der ikke kunne ske. Nu: intet tryk OG intet spoergsmaal, med en grund.
+let spurgt = spoerger.gangeSpurgt();
+writeFileSync(KNAP, JSON.stringify({ ok: true })); f = trykket();
+let svar = await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Hvad Som Helst' });
+check('11 dry-run finder intet at trykke (intet would_press): intet tryk, ingen spurgt', trykket() === f && spoerger.gangeSpurgt() === spurgt && /nobody was asked/.test(svar), svar.slice(0, 80));
+
+const stubKilde2 = readFileSync(STUB, 'utf8');
+writeFileSync(STUB, stubKilde2.replace(/^  press\) case.*$/m, '  press) exit 1 ;;')); f = trykket(); spurgt = spoerger.gangeSpurgt();
+svar = await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Noget' });
+check('12 selve toerkoerslen fejler: intet tryk, ingen spurgt', trykket() === f && spoerger.gangeSpurgt() === spurgt && /nobody was asked/.test(svar), svar.slice(0, 80));
+writeFileSync(STUB, stubKilde2);
+
+// 13-14: hjaelperens egne afslag naar videre med den tekst og de kandidater, det
+// rigtige tryk ville have givet - vaerktoejets loefte («a refusal, not a guess»).
+writeFileSync(KNAP, JSON.stringify({ ok: false, error: 'nothing matched', code: 'not-found', count: 0 })); f = trykket(); spurgt = spoerger.gangeSpurgt();
+svar = await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Findes Ikke' });
+check('13 not-found: intet tryk, ingen spurgt, hjaelperens grund', trykket() === f && spoerger.gangeSpurgt() === spurgt && /^Error \(not-found\): nothing matched/.test(svar), svar.slice(0, 80));
+writeFileSync(KNAP, JSON.stringify({ ok: false, error: '2 elements match', code: 'ambiguous', count: 2, matches: [{ title: 'OK', index: 0 }, { title: 'OK', index: 1 }] })); f = trykket(); spurgt = spoerger.gangeSpurgt();
+svar = await kald('computer_press', { app: 'com.apple.TextEdit', title: 'OK' });
+check('14 ambiguous: intet tryk, ingen spurgt, kandidaterne med', trykket() === f && spoerger.gangeSpurgt() === spurgt && /^Error \(ambiguous\)/.test(svar) && /"matches"/.test(svar), svar.slice(0, 80));
+
+// 16 (Opus R10, O1): toerkoerslen svarer ikke inden fristen (15 s). Grenen havde ingen
+// proeve: erstattet med «ufarlig» trykkede serveren en «Delete» uden at spoerge.
+const stubKilde3 = readFileSync(STUB, 'utf8');
+writeFileSync(STUB, stubKilde3.replace(/^  press\) case " \$\* " in \*" --dry "\*\) cat /m, '  press) case " $* " in *" --dry "*) sleep 17; cat '));
+knap('Delete'); f = trykket(); spurgt = spoerger.gangeSpurgt();
+svar = await kald('computer_press', { app: 'com.apple.TextEdit', title: 'Delete' });
+check('16 toerkoerslen naar ikke frem i tide: intet tryk, ingen spurgt, grunden siger det', trykket() === f && spoerger.gangeSpurgt() === spurgt
+      && /took too long/.test(svar), svar.slice(0, 80));
+writeFileSync(STUB, stubKilde3);
+
+// 15: et klik UDEN app paa et punkt hvis ejer ikke kan slaas op - genmaalingen afviste
+// det alligevel efter ja'et. Nu afvises det foer, uden spoergsmaal.
+writeFileSync(AT, JSON.stringify({ ok: true, found: false, under: [] })); f = klikket(); spurgt = spoerger.gangeSpurgt();
+svar = await kald('computer_click', { x: 10, y: 10 });
+check('15 klik uden app, ukendt ejer: intet klik, ingen spurgt', klikket() === f && spoerger.gangeSpurgt() === spurgt && /could not be identified/.test(svar), svar.slice(0, 80));
+
+check('10 kalibrering: porten spurgte et menneske om 1, 2, 4, 6, 7 og 8 - ikke om 11-16', spoerger.gangeSpurgt() === 6, `spurgt ${spoerger.gangeSpurgt()} gange`);
+srv.kill();
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/laas-fejler-lukket.mjs b/test/laas-fejler-lukket.mjs
new file mode 100644
index 00000000..3bc83501
--- /dev/null
+++ b/test/laas-fejler-lukket.mjs
@@ -0,0 +1,41 @@
+// M1 (28/9): programlåsen fejler LUKKET ved en infra-fejl.
+//
+// ⛔ HVORFOR DEN FINDES
+//    programlaas.js:45 kørte FØR handlingen alligevel (fail-open), hvis låsen
+//    ikke kunne tages af en anden grund end "optaget" (EEXIST). En låse-mappe
+//    der bliver en fil giver ENOTDIR - og så skrev to agenter i flæng i samme
+//    program, netop det låsen skal forhindre. Prøven tvinger ENOTDIR frem og
+//    kræver, at handlingen AFVISES (ok:false), ikke udføres.
+import './ryd-op.mjs';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// Gør 'laase'-stien til en FIL, så openSync inde i den giver ENOTDIR (ikke EEXIST).
+const base = mkdtempSync(join(tmpdir(), 'cmcp-laas-'));
+writeFileSync(join(base, 'laase'), 'jeg er en fil, ikke en mappe');
+process.env.CMCP_STATE_DIR = base;
+
+// DIR læses ved modul-load fra env, så env SKAL sættes før import.
+const { medProgramLaas } = await import('../mcp-server/programlaas.js');
+
+let kørt = false;
+const r = await medProgramLaas('com.apple.TextEdit', async () => { kørt = true; return 'skulle-ikke-ske'; });
+
+check('1 laasen fejler LUKKET (ok:false), ikke aaben', r.ok === false, JSON.stringify(r));
+check('2 handlingen blev IKKE udfoert', kørt === false);
+check('3 afslaget siger hvorfor (infra, ikke contention)', /could not be taken|serialised/.test(r.grund || ''), r.grund);
+
+// Kontrol: en ren mappe låser og kører handlingen som normalt.
+const base2 = mkdtempSync(join(tmpdir(), 'cmcp-laas-ok-'));
+process.env.CMCP_STATE_DIR = base2;
+const { medProgramLaas: laas2 } = await import('../mcp-server/programlaas.js?ren');
+let kørt2 = false;
+const r2 = await laas2('com.apple.TextEdit', async () => { kørt2 = true; return 42; });
+check('4 en ren mappe laaser og koerer handlingen', r2.ok === true && r2.vaerdi === 42 && kørt2 === true, JSON.stringify(r2));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/laering.mjs b/test/laering.mjs
index 045b5e90..e18a8240 100644
--- a/test/laering.mjs
+++ b/test/laering.mjs
@@ -7,6 +7,8 @@
 //    fandtes en vej videre, og intet sted blev det skrevet ned. Prøven sikrer at
 //    læringen lander i filen, at en persons nummer og mail aldrig gør, og at
 //    svaret siger ærligt at intet er sendt.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { mkdtempSync, readFileSync, existsSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/larmende-veje.mjs b/test/larmende-veje.mjs
index 2fa924a7..e95deb7d 100644
--- a/test/larmende-veje.mjs
+++ b/test/larmende-veje.mjs
@@ -20,6 +20,8 @@
 // ⛔ OG DEN MAALER ET AABENT SPOERGSMAAL: tager en AX-vinduesflytning fokus?
 //    `computer_focused` laeses FOER og EFTER. Svaret er et faktum om macOS,
 //    ikke en vurdering - og det afgoer om `computer_window` er fejlklassificeret.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, execFileSync } from 'node:child_process';
 import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -324,7 +326,7 @@ for (const [t, hvorfor] of [
   ['computer_activate', 'haever et program til forgrunden og tager dermed fokus'],
   ['computer_space',    'skifter menneskets Space'],
   ['computer_paste',    'udklipsholderen er global - en proeve ville overskrive hans'],
-  ['computer_ask_user', 'skal vise en aegte boks; maales af failclosed.mjs med CMCP_DIALOGS=1'],
+  ['computer_ask_user', 'forgrundens boks maales af failclosed.mjs med CMCP_DIALOGS=1; baggrundens ikon-vej af ikon-godkend.mjs del E (29/9)'],
   ['window resize',     'attrappen er borderless (har ingen AXSize); et vindue MED titellinje klemmer macOS ind paa hans skaerm'],
   ['window close/minim', 'samme: en lukkeknap findes kun paa en titellinje. Minimering laver desuden en genie-animation i HANS Dock'],
 ]) console.log(`  ${t.padEnd(20)} ${hvorfor}`);
diff --git a/test/launch-lukket.mjs b/test/launch-lukket.mjs
index 9526a76f..17aabba4 100644
--- a/test/launch-lukket.mjs
+++ b/test/launch-lukket.mjs
@@ -11,6 +11,8 @@
 //
 // Intet startes, intet tager skaermen: serveren koerer mod en attrap-hjaelper
 // der kun skriver sit argv ned, og samtykket gaar til en attrap der ikke svarer.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/log-fejl.mjs b/test/log-fejl.mjs
index 813e165d..d89d8683 100644
--- a/test/log-fejl.mjs
+++ b/test/log-fejl.mjs
@@ -7,6 +7,8 @@
 //
 // Intet sendes til Mac'en: serveren koerer mod en attrap-hjaelper der kun
 // skriver sit argv ned, og logfilen laases med chmod.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, mkdirSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/mcpb-start.mjs b/test/mcpb-start.mjs
new file mode 100644
index 00000000..7125f13d
--- /dev/null
+++ b/test/mcpb-start.mjs
@@ -0,0 +1,55 @@
+// DEN BYGGEDE MCPB-PAKKE STARTER, OG DEN ER DEN SAMME SERVER SOM KILDEN.
+//
+// ⛔ 7/10 (panel R8-R9, punkt M): ét-kliks-installationen til Claude Desktop er kun
+//    vaerd noget, hvis pakken starter uden at hente noget og svarer med det samme
+//    som kilden. Koeres af release.yml paa den byggede .mcpb (og i haanden):
+//      node test/mcpb-start.mjs <sti til computer-mcp.mcpb>
+//    Uden sti springes proeven over (den kraever en bygget pakke).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
+import { spawn, execFileSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const pakke = process.argv[2];
+if (!pakke) { console.log('SPRUNGET OVER: ingen .mcpb angivet (bevist intet)'); process.exit(0); }
+check('pakken findes', existsSync(pakke), pakke);
+
+const U = mkdtempSync(join(tmpdir(), 'cmcp-mcpb-'));
+execFileSync('unzip', ['-q', pakke, '-d', U]);
+const manifest = JSON.parse(readFileSync(join(U, 'manifest.json'), 'utf8'));
+const version = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+process.env.CMCP_BACKGROUND = '0';
+const kilde = (await import(join(ROOT, 'mcp-server', 'tools.js'))).TOOLS.length;
+check('manifestets version = pakkens', manifest.version === version, `${manifest.version} / ${version}`);
+check('ingen npx ved start (selvstaendig pakke)', manifest.server?.mcp_config?.command === 'node', manifest.server?.mcp_config?.command);
+
+const srv = spawn('node', [join(U, 'server', 'index.js')], {
+  env: { ...process.env, CMCP_STATE_DIR: mkdtempSync(join(tmpdir(), 'cmcp-mcpb-state-')), CMCP_STATUS_IKON: '0',
+         CMCP_NO_PARENT_WATCH: '1', CMCP_MODE: 'allow', CMCP_BACKGROUND: '0', npm_config_offline: 'true',
+         CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-mcpb-sp').sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+const svar = await new Promise((res) => {
+  let b = ''; const r = {};
+  const t = setTimeout(() => res(r), 20000);
+  srv.stdout.on('data', d => { b += d; for (const l of b.split('\n')) { try { const m = JSON.parse(l);
+    if (m.id === 1) r.server = m.result?.serverInfo?.version;
+    if (m.id === 2) { r.tools = m.result?.tools?.length; clearTimeout(t); res(r); } } catch {} } });
+  const w = o => srv.stdin.write(JSON.stringify(o) + '\n');
+  w({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'mcpb', version: '1' } } });
+  w({ jsonrpc: '2.0', method: 'notifications/initialized' });
+  w({ jsonrpc: '2.0', id: 2, method: 'tools/list' });
+});
+srv.kill();
+check('serveren i pakken starter og svarer', svar.server === version, String(svar.server));
+check('pakken tilbyder samme antal vaerktoejer som kilden', svar.tools === kilde, `${svar.tools} / ${kilde}`);
+check('hjaelperen er med i pakken', existsSync(join(U, 'server', 'vendor', 'cmcp-helper')));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/menu-genvej.mjs b/test/menu-genvej.mjs
new file mode 100644
index 00000000..0c443eb9
--- /dev/null
+++ b/test/menu-genvej.mjs
@@ -0,0 +1,79 @@
+// Et menupunkt der LUKKER noget, spoerger - uanset hvad det hedder paa skaermens sprog.
+//
+// ⛔ HVORFOR DEN FINDES (1/10-2026, konsulent-panelet, maalt paa Gustavs Mac)
+//    Prøvens oprydning valgte «Skak > Slut Skak». Porten kendte «afslut» og «quit»,
+//    ikke «slut», saa ingen blev spurgt - og et ugemt parti blev lukket. Ord baerer
+//    ikke paa tvaers af sprog. Genvejen gor: Cmd+Q staar i programmets egen menu.
+//
+// Intet startes, intet tager skaermen: serveren koerer mod en attrap-hjaelper der
+// kun skriver sit argv ned, og samtykket gaar til en attrap der ikke svarer.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const D = mkdtempSync(join(tmpdir(), 'cmcp-menugenvej-'));
+const ARGV = join(D, 'argv.txt'), MENUS = join(D, 'menus.json'), STUB = join(D, 'stub.sh');
+writeFileSync(STUB, `#!/bin/sh
+printf '%s ' "$@" >> ${ARGV}; echo >> ${ARGV}
+case "$1" in
+  apps) echo '{"ok":true,"apps":[{"bundleId":"com.apple.Chess","name":"Skak","pid":4242,"active":false}]}' ;;
+  resolve-app) echo '{"ok":true,"bundleId":"com.apple.Chess","running":true}' ;;
+  menus) cat ${MENUS} ;;
+  menu-click) echo '{"ok":true,"result":"pressed"}' ;;
+  *) echo '{"ok":true}' ;;
+esac
+`);
+chmodSync(STUB, 0o755);
+const menu = (items) => writeFileSync(MENUS, JSON.stringify({ ok: true, items }));
+
+const spoerger = lavFalskSpoerger('udloeb', 'cmcp-menugenvej');
+const srv = spawn('node', [join(ROOT, 'mcp-server/index.js')], {
+  env: { ...process.env, CMCP_HELPER: STUB, CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1',
+         CMCP_STATE_DIR: join(D, 'state'), CMCP_BACKGROUND: '0', CMCP_MODE: 'allow',
+         CMCP_ASK_TIMEOUT: '2', CMCP_OSASCRIPT: spoerger.sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise(r => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); });
+const kald = async (navn, args) => (await rpc('tools/call', { name: navn, arguments: args })).result?.content?.[0]?.text || '';
+await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'menugenvej', version: '1' } });
+srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+
+const klikket = (sti) => (existsSync(ARGV) ? readFileSync(ARGV, 'utf8') : '').split('\n')
+  .some(l => l.startsWith('menu-click ') && l.includes(`--path ${sti} `));
+
+// 1. Det ord der slap igennem paa Gustavs Mac.
+menu([{ path: 'Skak > Slut Skak', shortcut: 'cmd+q', enabled: true }]);
+await kald('computer_menu', { app: 'com.apple.Chess', path: 'Skak > Slut Skak' });
+check('1 «Skak > Slut Skak» trykkes IKKE uden et ja', !klikket('Skak > Slut Skak'));
+
+// 2. Et harmloest navn med en lukke-genvej: genvejen afgoer det, ikke ordet.
+menu([{ path: 'Skak > Faerdig', shortcut: 'cmd+q', enabled: true }]);
+await kald('computer_menu', { app: 'com.apple.Chess', path: 'Skak > Faerdig' });
+check('2 et punkt med Cmd+Q spoerger, uanset navnet', !klikket('Skak > Faerdig'));
+
+// 3. Kan punktet ikke slaas op, spoerges der (lukket, ikke aabent).
+menu([]);
+await kald('computer_menu', { app: 'com.apple.Chess', path: 'Skak > Ukendt' });
+check('3 et punkt der ikke kan slaas op, trykkes IKKE uden et ja', !klikket('Skak > Ukendt'));
+
+// 4. Et harmloest punkt med en harmloes genvej gaar fri - ellers spoerger alt.
+menu([{ path: 'Arkiv > Nyt spil', shortcut: 'cmd+n', enabled: true }]);
+await kald('computer_menu', { app: 'com.apple.Chess', path: 'Arkiv > Nyt spil' });
+check('4 «Arkiv > Nyt spil» (Cmd+N) trykkes uden at spoerge', klikket('Arkiv > Nyt spil'));
+
+// 5. Kalibrering: 1-3 blev stoppet af et menneske-spoergsmaal, ikke af noget andet.
+check('5 kalibrering: porten spurgte et menneske om 1, 2 og 3', spoerger.gangeSpurgt() === 3,
+      `spurgt ${spoerger.gangeSpurgt()} gange`);
+
+srv.kill();
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/menu-vagt.mjs b/test/menu-vagt.mjs
new file mode 100644
index 00000000..42d050cc
--- /dev/null
+++ b/test/menu-vagt.mjs
@@ -0,0 +1,127 @@
+// MENU-VAGT: et tryk eller en tast i et program BAGVED maa aldrig aabne en menu over
+// menneskets arbejde.
+//
+// ⛔ HVORFOR DEN FINDES (10/10-2026, R28)
+//    Maalt: `computer_press` paa en rullemenu i et program bagved aabnede menuen paa
+//    menneskets skaerm (menulaget 101). Den blev staaende, til mennesket selv klikkede
+//    vaek eller trykkede Escape, og imens gik deres tastetryk til menuen - et Return
+//    vaelger et punkt i programmet bagved. Det har vaeret saadan, siden tryk kom ind.
+//    README lover, at rullemenuer er uden for raekkevidde i baggrunden. Begge
+//    konsulenter (R28): ret det i 0.2.2, foer udgivelse.
+//
+//    Proeven bruger sit eget usynlige proevemaal (uden for skaermen, gennemsigtigt).
+//    Ingen menu aabnes: vagten afviser, foer noget sendes.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { execFileSync, spawn } from 'node:child_process';
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const HJAELPER = [process.env.CMCP_HELPER, join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper')].find(p => p && existsSync(p));
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const vent = (ms) => new Promise(r => setTimeout(r, ms));
+
+// 1 · Serveren (falsk hjaelper): porten og flaget.
+function klient(svar, ekstraEnv = {}) {
+  const hj = lavFalskHjaelper('cmcp-menuvagt');
+  hj.saetSvar(svar);
+  const env = { ...process.env, CMCP_MODE: 'allow', CMCP_HELPER: hj.sti,
+                CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-menuvagt-sp').sti,
+                CMCP_STATE_DIR: mkdtempSync(join(tmpdir(), 'cmcp-mv-')) };
+  delete env.CMCP_BACKGROUND;
+  Object.assign(env, ekstraEnv);
+  const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], { env, stdio: ['pipe', 'pipe', 'pipe'] });
+  let buf = ''; const venter = new Map(); let n = 0;
+  srv.stdout.on('data', (d) => {
+    buf += d; let i;
+    while ((i = buf.indexOf('\n')) >= 0) {
+      const l = buf.slice(0, i); buf = buf.slice(i + 1);
+      if (!l.trim()) continue;
+      try { const m = JSON.parse(l); venter.get(m.id)?.(m); venter.delete(m.id); } catch { /* videre */ }
+    }
+  });
+  const rpc = (method, params) => new Promise((res, rej) => {
+    const id = ++n; venter.set(id, res);
+    srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+    setTimeout(() => rej(new Error('timeout ' + method)), 20000);
+  });
+  const kald = async (name, args) => {
+    const r = await rpc('tools/call', { name, arguments: args });
+    return { tekst: (r.result?.content || []).map(c => c.text || '').join('\n'), fejl: !!r.result?.isError };
+  };
+  return { srv, rpc, kald, hj };
+}
+const APPS = { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: true },
+                      { name: 'Notes', bundleId: 'com.apple.Notes', pid: 3303, active: false }] };
+{
+  const { srv, rpc, kald, hj } = klient({ apps: APPS,
+    'press --dry': { would_press: { name: 'Sortér', role: 'AXPopUpButton' } },
+    key: { ok: true, key: 'space', took_screen: false }, type: { ok: true, typed: 1, took_screen: false } });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'menuvagt', version: '1' } });
+  const rp = await kald('computer_press', { app: 'Notes', title: 'Sortér' });
+  const tryk = hj.kald().filter(k => k.argv[0] === 'press' && !k.argv.includes('--dry'));
+  check('1a et tryk paa en rullemenu bagved uden laan: afvist foer noget trykkes, og svaret peger paa skaermlaanet',
+    rp.fejl && tryk.length === 0 && /menu/i.test(rp.tekst) && /computer_request_screen/.test(rp.tekst), rp.tekst.slice(0, 200));
+  await kald('computer_key', { app: 'Notes', combo: 'space' });
+  await kald('computer_type', { app: 'Notes', text: 'x' });
+  const ind = hj.kald().filter(k => ['key', 'type'].includes(k.argv[0]));
+  check('1b i baggrunden baerer taster og tekst til et program --menu-vagt til hjaelperen',
+    ind.length === 2 && ind.every(k => k.argv.includes('--menu-vagt')), JSON.stringify(ind.map(k => k.argv)));
+  srv.kill();
+}
+{
+  const { srv, rpc, kald, hj } = klient({ apps: APPS,
+    'press --dry': { would_press: { name: 'Vis', role: 'AXButton' } }, press: { ok: true, pressed: { name: 'Vis' }, took_screen: false } });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'menuvagt', version: '1' } });
+  await kald('computer_press', { app: 'Notes', title: 'Vis' });
+  const tryk = hj.kald().filter(k => k.argv[0] === 'press' && !k.argv.includes('--dry'));
+  check('1c en almindelig knap bagved trykkes stadig - med --menu-vagt til hjaelperen', tryk.length === 1 && tryk[0].argv.includes('--menu-vagt'), JSON.stringify(tryk.map(k => k.argv)));
+  srv.kill();
+}
+{
+  const { srv, rpc, kald, hj } = klient({ apps: APPS, key: { ok: true, key: 'space', took_screen: true } }, { CMCP_BACKGROUND: '0' });
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'menuvagt', version: '1' } });
+  await kald('computer_key', { app: 'Notes', combo: 'space' });
+  const ind = hj.kald().filter(k => k.argv[0] === 'key');
+  check('1d i forgrunden: intet --menu-vagt (en menu maa aabnes)', ind.length === 1 && !ind[0].argv.includes('--menu-vagt'), JSON.stringify(ind.map(k => k.argv)));
+  srv.kill();
+}
+
+// 2 · Hjaelperen live mod eget proevemaal: vagten afviser, foer noget sendes - ingen menu aabner.
+const koer = (...a) => { try { return JSON.parse(execFileSync(HJAELPER, a, { encoding: 'utf8', timeout: 60000 })); }
+                          catch (e) { try { return JSON.parse(String(e.stdout)); } catch { return { ok: false, error: String(e.stdout || e.message).slice(0, 200) }; } } };
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-mv-maal-'));
+const navn = 'cmcpmv' + Math.random().toString(36).slice(2, 8);
+const BIN = join(ARB, navn);
+execFileSync('swiftc', ['-O', join(ROOT, 'test', 'fixture', 'proevemaal.swift'), '-o', BIN], { stdio: 'pipe', timeout: 180000 });
+const barn = spawn(BIN, { stdio: ['ignore', 'pipe', 'ignore'], env: { ...process.env, CMCP_PROEVE_MENU: '1', CMCP_PROEVE_MENU_FOKUS: '1' } });
+try {
+  await new Promise((res) => { barn.stdout.on('data', (d) => { if (/pid=/.test(String(d))) res(); }); setTimeout(res, 15000); });
+  for (const frist = Date.now() + 30000; Date.now() < frist; await vent(300)) if ((koer('find', '--app', navn, '--title', 'menu-A', '--limit', '1').matches || []).length) break;
+  const tael = () => String(((koer('find', '--app', navn, '--role', 'AXStaticText', '--contains', 'menu:', '--limit', '1').matches || [])[0] || {}).name || '');
+  const p = koer('press', '--app', navn, '--role', 'AXPopUpButton', '--title', 'menu-A', '--menu-vagt');
+  check('2a tryk paa en rullemenu med menuvagt: afvist (menu-in-background), ingen menu aabnet',
+    p.ok === false && p.code === 'menu-in-background' && /aabnet 0/.test(tael()), JSON.stringify(p).slice(0, 160) + ' · ' + tael());
+  const k = koer('key', '--app', navn, '--combo', 'space', '--menu-vagt');
+  const t = koer('type', '--app', navn, '--text', ' ', '--menu-vagt');
+  check('2b fokus paa en rullemenu: tast og tekst med menuvagt afvist (menu-focus), ingen menu aabnet',
+    k.code === 'menu-focus' && t.code === 'menu-focus' && /aabnet 0/.test(tael()), JSON.stringify([k.code, t.code]) + ' · ' + tael());
+} finally {
+  try { barn.kill(); } catch {}
+  rmSync(ARB, { recursive: true, force: true });
+}
+
+// 3 · Bundet til kilden (mutantporten genbygger ikke hjaelperen).
+const m = readFileSync(join(ROOT, 'helper', 'Sources', 'cmcp-helper', 'main.swift'), 'utf8');
+check('3 hjaelperen: med menuvagt afvises tryk paa en menurolle og tast/tekst med fokus paa en menurolle',
+  /if args\.flag\("menu-vagt"\), let rolle = first\.dict\["role"\] as\? String, Skaerm\.menuRoller\.contains\(rolle\) \{\n\s+Out\.fail\([^\n]*code: "menu-in-background"\)/.test(m)
+  && /if args\.flag\("menu-vagt"\), let pid = tastPid, let rolle = AX\.fokusRolle\(pid: pid\), Skaerm\.menuRoller\.contains\(rolle\) \{\n\s+Out\.fail\([^\n]*code: "menu-focus"\)/.test(m)
+  && /if args\.flag\("menu-vagt"\), let pid = skrivPid, let rolle = AX\.fokusRolle\(pid: pid\), Skaerm\.menuRoller\.contains\(rolle\) \{\n\s+Out\.fail\([^\n]*code: "menu-focus"\)/.test(m));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/ombryd.mjs b/test/ombryd.mjs
new file mode 100644
index 00000000..dae3bf68
--- /dev/null
+++ b/test/ombryd.mjs
@@ -0,0 +1,53 @@
+// OMBRYD: viser menuen HELE teksten, mennesket siger ja til?
+//
+// ⛔ HVORFOR DEN FINDES (29/9-2026, panelet Astra + Fable)
+//    Touch ID-arket klippede handlingen ved 80 tegn og protokollen ved 200 - tavst.
+//    Et ja daekkede altsaa noget mennesket aldrig saa. Nu staar hele teksten ombrudt
+//    i menuen lige over «Allow». Prøven kompilerer ikonets egen tekst-fil og maaler
+//    at intet tegn falder ud, at ingen linje er for bred, og at usynlige tegn renses.
+//    Ingen skaerm, intet ikon, intet Touch ID.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-ombryd-'));
+try {
+  writeFileSync(join(ARB, 'main.swift'), `import Foundation
+let ind = try! JSONSerialization.jsonObject(with: FileHandle.standardInput.readDataToEndOfFile()) as! [String]
+let ud = ind.map { ["linjer": ombryd($0), "kort": kort($0, 60), "ren": renTekst($0)] as [String: Any] }
+FileHandle.standardOutput.write(try! JSONSerialization.data(withJSONObject: ud))
+`);
+  const BIN = join(ARB, 'ombryd');
+  execFileSync('swiftc', [join(ROOT, 'helper', 'Sources', 'cmcp-status', 'Tekst.swift'), join(ARB, 'main.swift'), '-o', BIN],
+               { stdio: 'pipe', timeout: 180000 });
+
+  const lang = 'Send til Benjamin: ' + 'computer-MCP virker. '.repeat(140);
+  const ordUdenMellemrum = 'x'.repeat(150) + ' slut';
+  const blandet = 'Hej 👋 Æblegrød på Østerbro — ' + 'ærø '.repeat(40) + 'https://example.com/' + 'a'.repeat(90);
+  const snyd = 'Press "Gem"\nAllow… (confirm with Touch ID)‮evil​';
+  const kortTekst = 'Quit Finder';
+  const svar = JSON.parse(execFileSync(BIN, { input: JSON.stringify([lang, ordUdenMellemrum, blandet, snyd, kortTekst]), encoding: 'utf8' }));
+
+  const tegn = (s) => [...s.replace(/\s+/g, '')].join('');
+  const renJS = (s) => s.replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu, ' ');
+  [['lang besked', lang], ['ord laengere end linjen', ordUdenMellemrum], ['dansk, emoji og en lang adresse', blandet]].forEach(([navn, s], i) => {
+    const l = svar[i].linjer;
+    check(`1 ${navn}: intet tegn falder ud`, tegn(l.join('')) === tegn(renJS(s)), `${tegn(l.join('')).length} af ${tegn(renJS(s)).length}`);
+    check(`2 ${navn}: ingen linje er bredere end 64`, l.every(x => [...x].length <= 64), String(Math.max(...l.map(x => [...x].length))));
+  });
+  check('3 linjeskift, retningstegn og nul-bredde bliver ikke til egne linjer i menuen',
+        svar[3].linjer.length === 1 && !/[\n‮​]/.test(svar[3].linjer.join('')), JSON.stringify(svar[3].linjer));
+  check('4 hovedmenuens korte udgave siger at der er mere', svar[0].kort.endsWith('…') && [...svar[0].kort].length === 61, svar[0].kort);
+  check('4b ...og en kort tekst staar uaendret', svar[4].kort === kortTekst && svar[4].linjer.join(' ') === kortTekst, svar[4].kort);
+} finally {
+  rmSync(ARB, { recursive: true, force: true });
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/omveje.mjs b/test/omveje.mjs
new file mode 100644
index 00000000..ad24d329
--- /dev/null
+++ b/test/omveje.mjs
@@ -0,0 +1,85 @@
+// OMVEJE: siger computer_permissions hvor klienten lader en agent handle UDEN
+// om denne server?
+//
+// ⛔ HVORFOR DEN FINDES (29/9-2026, panelet: B6)
+//    Samtykke-porten vogter denne servers egne kald. En `Bash(osascript ...)` eller
+//    en browser-automation med klik/udfyld i klientens allow-liste gaar helt uden
+//    om - og porten saa ud som et faengsel, den ikke er. Nu naevnes de regler.
+//    Proeven bruger en MIDLERTIDIG indstillingsfil, aldrig menneskets rigtige.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-omveje-'));
+const MED = join(ARB, 'med.json'), UDEN = join(ARB, 'uden.json');
+writeFileSync(MED, JSON.stringify({ permissions: { allow: [
+  'Bash(osascript -e \' *)', 'mcp__browser-mcp__browser_click', 'mcp__browser-mcp__browser_fill', 'Bash(*)',
+  'Bash(git status)', 'mcp__computer-mcp__computer_find', 'mcp__browser-mcp__browser_screenshot', 'Read(HEMMELIG-STI)',
+  // Runde 1 30/9 (Fable P5): skaller, fortolkere og en hel browser-server - stod i husets egne indstillinger.
+  'Bash(bash *)', 'Bash(zsh *)', 'Bash(python3 *)', 'Bash(node -e \' *)', 'mcp__browser-mcp', 'Bash(npm test)',
+  // Runde 2 30/9 (Fable 1): root, fuld sti, programmer der koerer programmer, og de
+  // automations-servere klienterne selv skibes med. Og det der IKKE er en omvej.
+  'Bash(sudo *)', 'Bash(/bin/zsh *)', 'Bash(npx playwright *)', 'mcp__claude-in-chrome', 'mcp__computer-use__computer',
+  'Bash(npx tsc:*)', 'mcp__computer-mcp',
+  // Live-proeven 30/9: PRAECISE kommandoer tillader kun den ene ting - ikke en omvej.
+  'Bash(node --check index.js)', 'Bash(python3 -c "import ast; ast.parse(open(\'x.py\').read())")',
+  'Bash(osascript -e \'tell application "Simulator" to activate\')', 'Bash(open -a Simulator)', 'Bash(sudo pmset *)',
+  // ...men et script fra stdin er en omvej.
+  'Bash(python3 -)'] } }));
+writeFileSync(UDEN, JSON.stringify({ permissions: { allow: ['Bash(git status)', 'mcp__computer-mcp__computer_press'] } }));
+
+async function permissions(filer) {
+  const HJ = lavFalskHjaelper('cmcp-omveje');
+  const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+    env: { ...process.env, CMCP_HELPER: HJ.sti, CMCP_STATE_DIR: ARB, CMCP_STATUS_IKON: '0', CMCP_KLIENT_INDSTILLINGER: filer,
+           CMCP_OSASCRIPT: lavFalskSpoerger('udloeb', 'cmcp-omveje-sp').sti },
+    stdio: ['pipe', 'pipe', 'pipe'] });
+  let buf = ''; const v = new Map(); let n = 0;
+  srv.stdout.on('data', d => { buf += d; let i;
+    while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1);
+      try { const m = JSON.parse(l); v.get(m.id)?.(m); v.delete(m.id); } catch {} } });
+  const rpc = (method, params = {}) => new Promise((res, rej) => { const id = ++n; v.set(id, res);
+    srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+    setTimeout(() => rej(new Error('timeout')), 30000); });
+  try {
+    await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'omveje', version: '1' } });
+    const r = await rpc('tools/call', { name: 'computer_permissions', arguments: {} });
+    return r.result?.content?.[0]?.text || '';
+  } finally { srv.kill(); }
+}
+
+const med = await permissions(MED);
+let j = {}; try { j = JSON.parse(med); } catch {}
+const regler = (j.bypasses || []).map(b => b.rule);
+check('1 osascript i allow naevnes som omvej', regler.some(r => /osascript/.test(r)), regler.join(' | '));
+check('2 en fri shell naevnes', regler.includes('Bash(*)'), regler.join(' | '));
+check('3 browser-klik og -udfyld naevnes', regler.includes('mcp__browser-mcp__browser_click') && regler.includes('mcp__browser-mcp__browser_fill'), regler.join(' | '));
+check('4 harmloese regler naevnes IKKE (git status, computer-mcp selv, et skaermbillede)',
+      !regler.some(r => /git status|computer-mcp|screenshot/.test(r)), regler.join(' | '));
+check('4b skaller, fortolkere og en hel browser-server naevnes (Fable P5)',
+      ['Bash(bash *)', 'Bash(zsh *)', 'Bash(python3 *)', "Bash(node -e ' *)", 'mcp__browser-mcp'].every(r => regler.includes(r)), regler.join(' | '));
+check('4c ...men ikke «npm test»', !regler.includes('Bash(npm test)'), regler.join(' | '));
+check('4d root, fuld sti, npx playwright, Claude in Chrome og computer-use naevnes (Fable R2 1)',
+      ['Bash(sudo *)', 'Bash(/bin/zsh *)', 'Bash(npx playwright *)', 'mcp__claude-in-chrome', 'mcp__computer-use__computer'].every(r => regler.includes(r)), regler.join(' | '));
+check('4f praecise kommandoer (uden wildcard) naevnes IKKE - kun de der tillader hvad som helst',
+      !regler.some(r => /node --check|ast\.parse|to activate|open -a Simulator|sudo pmset/.test(r)), regler.join(' | '));
+check('4g et script fra stdin (python3 -) er en omvej', regler.includes('Bash(python3 -)'), regler.join(' | '));
+check('4e ...men ikke «npx tsc» eller computer-mcp selv', !regler.includes('Bash(npx tsc:*)') && !regler.includes('mcp__computer-mcp'), regler.join(' | '));
+check('5 resten af filen laekkes ikke', !/HEMMELIG-STI/.test(med), 'svaret naevner kun de fundne regler');
+check('6 og mennesket faar at vide at kun det kan fjerne dem', /Only the person can remove them/.test(j.bypassNote || ''), j.bypassNote);
+const uden = JSON.parse(await permissions(UDEN) || '{}');
+check('7 uden omveje: ingen advarsel', Array.isArray(uden.bypasses) && uden.bypasses.length === 0 && !uden.bypassNote, JSON.stringify(uden.bypasses));
+const ingen = JSON.parse(await permissions(join(ARB, 'findes-ikke.json')) || '{}');
+check('8 ingen indstillinger fundet: det siges, ikke tavshed', /other MCP clients are not checked/.test(String(ingen.bypassesChecked)), String(ingen.bypassesChecked));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/optagelse-udelukker.mjs b/test/optagelse-udelukker.mjs
index c0d5bb1d..5b48b149 100644
--- a/test/optagelse-udelukker.mjs
+++ b/test/optagelse-udelukker.mjs
@@ -20,6 +20,7 @@
 // UMAALT her, sagt hoejt: at ScreenCaptureKit FAKTISK udelader programmets
 // pixels, naar det staar i `excludingApplications`. Det er Apples kontrakt.
 // Et pixel-bevis kraever en optagelse - paa en CI-Mac eller med Gustavs ja.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { spawn, execFileSync, spawnSync } from 'node:child_process';
 import { mkdtempSync, mkdirSync, writeFileSync, existsSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/optagelse.mjs b/test/optagelse.mjs
index 69b0cb65..87690f4c 100644
--- a/test/optagelse.mjs
+++ b/test/optagelse.mjs
@@ -4,6 +4,8 @@
 // Intet optages her: serveren koerer mod en attrap-hjaelper der skriver en lille fil
 // og venter paa SIGINT, og samtykket gaar til attrap-spoergere. Den AEGTE optagelse
 // kan kun maales paa en maskine ingen arbejder paa (CMCP_FREMMED_MASKINE=1).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, spawnSync } from 'node:child_process';
 import { createServer } from 'node:net';
 import { writeFileSync, chmodSync, readFileSync, existsSync, mkdtempSync, rmSync, readdirSync, mkdirSync } from 'node:fs';
diff --git a/test/pakke-filer.mjs b/test/pakke-filer.mjs
new file mode 100644
index 00000000..d3140321
--- /dev/null
+++ b/test/pakke-filer.mjs
@@ -0,0 +1,48 @@
+// ALT SERVEREN IMPORTERER, ER MED I DEN PAKKE DER UDGIVES.
+//
+// ⛔ 7/10: punkt P tilfoejede `mcp-server/tilstede.js`, og `godkend.js` importerer
+//    den. `package.json` "files" er en haandholdt liste - den manglede filen, og
+//    det samme gjorde `scripts/build-mcpb.sh`. Alle proever koerer fra kildemappen,
+//    saa INGEN af dem saa det: den udgivne pakke ville gaa ned ved opstart
+//    (ERR_MODULE_NOT_FOUND). Proeven her laeser hvad `npm pack` FAKTISK pakker og
+//    foelger hver relativ import fra index.js.
+import { execFileSync } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
+import { join, dirname, normalize } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const SRV = join(ROOT, 'mcp-server');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// Hvad npm faktisk ville pakke (ingen netvaerk, ingen skrivning).
+const ud = execFileSync('npm', ['pack', '--dry-run', '--json', '--ignore-scripts'], { cwd: SRV, encoding: 'utf8' });
+const pakket = new Set(JSON.parse(ud)[0].files.map(f => f.path));
+check('npm pack svarede med en filliste', pakket.size > 5, `${pakket.size} filer`);
+
+// Foelg relative imports fra indgangen.
+const set = new Set(), mangler = [];
+const koe = ['index.js'];
+while (koe.length) {
+  const f = koe.shift();
+  if (set.has(f)) continue;
+  set.add(f);
+  const sti = join(SRV, f);
+  if (!existsSync(sti)) { mangler.push(`${f} (findes ikke i kilden)`); continue; }
+  const kilde = readFileSync(sti, 'utf8');
+  for (const m of kilde.matchAll(/(?:import|export)[^'"`]*?from\s+['"](\.{1,2}\/[^'"]+)['"]|import\(\s*['"](\.{1,2}\/[^'"]+)['"]\s*\)/g)) {
+    const rel = m[1] || m[2];
+    koe.push(normalize(join(dirname(f), rel)));
+  }
+}
+for (const f of set) if (!pakket.has(f)) mangler.push(f);
+check('hver fil index.js importerer (hele kaeden) er med i pakken', mangler.length === 0, mangler.join(', ') || `${set.size} filer`);
+check('kaeden er ikke trivielt kort (maaleren saa importerne)', set.size >= 8, `${set.size}`);
+
+// MCPB-scriptet bruger samme liste - ingen egen haandholdt kopi.
+const mcpb = readFileSync(join(ROOT, 'scripts', 'build-mcpb.sh'), 'utf8');
+check('build-mcpb.sh laeser fillisten fra package.json', /package\.json/.test(mcpb) && !/for f in index\.js tools\.js/.test(mcpb));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/pakken-starter.mjs b/test/pakken-starter.mjs
index 714d57e8..f3de1e0f 100644
--- a/test/pakken-starter.mjs
+++ b/test/pakken-starter.mjs
@@ -13,6 +13,8 @@
 //    Derfor maaler den her ikke listen. Den goer det en fremmed goer: pakker,
 //    pakker ud i en tom mappe og starter serveren derfra. Enhver glemt fil -
 //    js, binaer eller andet - faar den til at falde.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { execFileSync, spawn } from 'node:child_process';
 import { mkdtempSync, rmSync, symlinkSync, readdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/parallel.mjs b/test/parallel.mjs
new file mode 100644
index 00000000..8967e699
--- /dev/null
+++ b/test/parallel.mjs
@@ -0,0 +1,272 @@
+// PARALLEL: kan 5, 10 og 15 agenter arbejde SAMTIDIG i baggrunden, mens et
+// menneske skriver i et andet program - uden at nogen af dem tager skaermen?
+//
+// ⛔ HVORFOR DEN FINDES (1/10-2026)
+//    Gustav: «ellers er der ikke nogen grund til at vi kan koere 15 samtidig».
+//    concurrent.mjs beviser kun at revisionsloggen ikke blandes. Her koerer hver
+//    agent en rigtig use case (sin egen server, sin egen hjaelper-vagt), alle paa
+//    én gang, og det maales udefra:
+//      1. hvad der stod FORREST, hvert 100. ms, hele vejen - maa aldrig skifte
+//      2. menneskets tekst i TextEdit, tegn for tegn - intet maa mangle eller komme til
+//      3. hver agents eget tjek (det programmet SELV viser bagefter)
+//      4. ingen agent naaede et program uden for sin liste (vagt-hjaelperen)
+//
+// ⛔ KUN PAA EN FREMMED MASKINE: proeven skriver som et menneske i TextEdit og
+//    starter og lukker programmer. Paa menneskets Mac er det ikke en proeve.
+import './ryd-op.mjs';
+import { spawn, execFileSync } from 'node:child_process';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { writeFileSync, mkdtempSync, existsSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { SCENARIER, koerScenarie } from './brugsscenarier.mjs';
+import { startFilm } from './film.mjs';
+import { startForrestLog, doem } from './forrest-log.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const vent = (ms) => new Promise(r => setTimeout(r, ms));
+
+// To tilstande:
+//   FREMMED (CMCP_FREMMED_MASKINE=1, GitHubs Mac): proeven spiller mennesket i TextEdit og filmer.
+//   EGEN MAC (CMCP_PARALLEL_EGEN_MAC=1, 1/10 Gustav: «testet og tjekket paa computeren»):
+//     mennesket ER der og arbejder som han plejer. Proeven skriver ALDRIG, filmer ikke,
+//     lukker ikke hans programmer, og koerer kun opgaver der ikke aendrer hans data
+//     (Lommeregner, Skak, Aktivitetsovervaagning, Finder laest). Maalet: kom NOGEN af
+//     agenternes programmer frem foran ham - hvert 100. ms, hele vejen.
+const FREMMED = process.env.CMCP_FREMMED_MASKINE === '1';
+// PYNT (2/10, forside-chatten): rører KUN hvad kameraet viser - filnavn og tekstens
+// ord. Rører ALDRIG tjekkene: samme forsoegt/verificeret-taelling, samme scenarie-
+// valg, samme antal agenter. Kun til en ren optagelse til computermcp.dev.
+const PYNT = process.env.CMCP_FILM_PYNT === '1';
+const EGEN = !FREMMED && process.env.CMCP_PARALLEL_EGEN_MAC === '1';
+if (!FREMMED && !EGEN) {
+  console.log('SPR. saet CMCP_FREMMED_MASKINE=1 (GitHubs Mac) eller CMCP_PARALLEL_EGEN_MAC=1 (din egen Mac, mens du arbejder)');
+  process.exit(0);
+}
+
+// Arbejderne: hver sit program, saa to agenter aldrig deler fokus i samme program.
+// ⛔ 1/10: Skak er et DOKUMENT - et ugemt parti gav et gem-panel foran Gustav. Kun paa GitHubs Mac.
+const ARBEJDERE = (EGEN ? [14, 13] : [14, 15, 9, 4, 17, 5, 13, 6]).map(nr => SCENARIER.find(s => s.nr === nr)).filter(Boolean);
+// Laeserne: flere agenter der laeser Finder samtidig - laesning deler intet fokus.
+const laeser = (i) => ({
+  nr: 100 + i, navn: `laese Finder ${i}`, apps: ['com.apple.finder'], klasse: 'laes',
+  async trin() {},
+  async tjek(c) {
+    const v = await c.vinduer('com.apple.finder');
+    const m = await c.find('com.apple.finder', { role: 'AXButton', limit: 5 });
+    return `${v.length} vindue(r), ${m.length} knap(per) laest`;
+  },
+});
+const NIVEAUER = (process.env.CMCP_PARALLEL_NIVEAUER || '5,10,15').split(',').map(Number);
+
+// Mennesket: et TextEdit-dokument forrest, og ord der skrives som et menneske gør.
+// ⛔ Koersel 36832790982 OG 36837334933 (1/10): TextEdit svarede ikke paa AppleEvents
+//    fra proeven paa GitHubs Mac (-1712, 40 gange), og jobbet broendte 90 min. Nu
+//    INGEN AppleEvents: `open` (LaunchServices) aabner, og hjaelperen - som har
+//    tilgaengeligheds-tilladelsen paa koereren - skriver og laeser. Hård frist 20 s.
+const HJ = join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper');
+const hj = (...a) => JSON.parse(execFileSync(HJ, a, { encoding: 'utf8', timeout: 10000 }));
+function startMenneske() {
+  const d = mkdtempSync(join(tmpdir(), 'cmcp-parallel-'));
+  const fil = join(d, PYNT ? 'notes.txt' : 'menneske.txt');
+  writeFileSync(fil, '');
+  // ⛔ 1/10 (koersel 36890103580): SIGKILL alene hjalp ikke - traef-tallet voksede
+  //    staedigt 2 -> 3 -> 4 paa tvaers af runderne, ALDRIG nulstillet, praecis det
+  //    moenster macOS' "Resume" giver: TextEdit gemmer sin vinduestilstand
+  //    periodisk og GENSKABER den naeste gang «open -a TextEdit» koeres - ogsaa
+  //    efter en -9. Samme opskrift som allerede bruges til Skak her i filen
+  //    (nulstil()): slaa Resume fra for netop TextEdit, og slet den gemte
+  //    tilstand foer hver aabning.
+  try { execFileSync('defaults', ['write', 'com.apple.TextEdit', 'NSQuitAlwaysKeepsWindows', '-bool', 'false']); } catch {}
+  try { execFileSync('defaults', ['write', 'com.apple.TextEdit', 'ApplePersistenceIgnoreState', '-bool', 'true']); } catch {}
+  try { execFileSync('rm', ['-rf', `${process.env.HOME}/Library/Saved Application State/com.apple.TextEdit.savedState`]); } catch {}
+  execFileSync('open', ['-a', 'TextEdit', fil]);
+  const frist = Date.now() + 20000;
+  for (;;) {
+    try { if (hj('windows', '--app', 'com.apple.TextEdit').count > 0 && hj('focused').element?.bundleId === 'com.apple.TextEdit') break; } catch {}
+    if (Date.now() > frist) throw new Error('UMÅLT: TextEdit kom ikke frem med et vindue inden 20 s');
+    execFileSync('sleep', ['0.5']);
+  }
+  // ⛔ 1/10 (koersel 36876560087): «tePid» blev FOER gaettet ud fra skift-loggen
+  //    FOER rundens start - men staar mennesket helt stille i de foerste 1,5 s
+  //    (det almindelige), er der INTET skift at gaette ud fra, og [...new
+  //    Set([])].pop() giver undefined. Det inverterede hele doemmelsen: hver
+  //    eneste TextEdit-visning blev saa selv kaldt "et udsving der aldrig blev
+  //    givet tilbage". Nu laeses TextEdits PID direkte, her, mens vi VED den har
+  //    fokus - ikke gaettet bagefter.
+  const pid = hj('apps').apps?.find(a => a.bundleId === 'com.apple.TextEdit')?.pid ?? null;
+  if (!pid) throw new Error('UMÅLT: TextEdit stod med et vindue og fokus, men kunne ikke findes i apps-listen');
+  // Sin egen proces: tastaturet maa ikke bremse proevens egen haendelsesloekke.
+  // ⛔ 1/10 (koersel 36869119105): uden --app gik tasterne til det FORRESTE program -
+  //    og naar Finders menu-klik (scenarie 15) kort gjorde Finder forrest, forsvandt
+  //    tasterne derind, mens helperen stadig svarede ok (sendt-tallet talte dem med).
+  //    TextEdits dokument endte TOMT, selvom "skrevet" viste 250+ tegn. Nu skriver
+  //    mennesket PRAECIS som produktet selv skriver i baggrunden: med --app, via
+  //    tilgaengeligheds-laget, saa teksten rammer TextEdit uanset hvad der er forrest.
+  //    ⛔ Men ogsaa EFTER den rettelse var staar.laengde=0 i to koersler i traek -
+  //    derfor logges hvert kalds RAA svar (sidste vinder), saa en fortsat 0 kan
+  //    laeses i stedet for gaettes paa en tredje gang.
+  // ⛔ 1/10 (koersler 36869119105, 36876560087, 36884149245, 36890103580, 36896072791):
+  //    fem koersler i traek paa at faa et paalideligt AFSLUTTENDE laes af TextEdits
+  //    dokument. Resume-rettelsen gjorde traef-tallet entydigt (1), men vaerdien laeses
+  //    stadig tom, selv om HVERT ENKELT skrive-kald selv bekraefter (sit eget readback-
+  //    tjek i AX.indsaetIFokus) at akkurat DEN tekst landede. I stedet for at gaette en
+  //    sjette gang paa TextEdits AX-kvirk: beviset flyttes til data vi ALLEREDE har og
+  //    stoler paa - hvert kalds EGEN «verified»-bekraeftelse - i stedet for et skroebeligt
+  //    `find`-opslag efter det hele er overstaaet.
+  const log = join(d, 'skrevet.txt'), tael = join(d, 'taelling.txt'), stop = join(d, 'stop'), sidsteSvar = join(d, 'sidste-svar.json');
+  // PYNT (2/10): kun ORDET der tastes skifter - samme loekke, samme --app-vej,
+  // samme verified-taelling. "ord[$((i % N))]" cykler en kort huskeliste i
+  // stedet for "m$i " - checken laeser aldrig selve teksten, kun tael/sidsteSvar.
+  const skrivLinje = PYNT
+    ? `ord=(Buy milk Call Alex Book flights Walk the dog Read a book Water the plants Send the invoice Pack lunch Charge the laptop Reply to Sam)
+      w="\${ord[$((i % \${#ord[@]}))]} "
+      R=$("${HJ}" type --app com.apple.TextEdit --text "$w" 2>&1)`
+    : `w="m$i "
+      R=$("${HJ}" type --app com.apple.TextEdit --text "$w" 2>&1)`;
+  const p = spawn('bash', ['-c', `i=0; v=0; while [ ! -f "${stop}" ]; do
+      ${skrivLinje}
+      printf '%s' "$R" > "${sidsteSvar}"
+      if printf '%s' "$R" | grep -q '"verified":true'; then v=$((v+1)); printf '%s' "$w" >> "${log}"; fi
+      i=$((i+1)); sleep 0.12
+    done
+    printf '%s %s' "$i" "$v" > "${tael}"`], { stdio: 'ignore' });
+  const slut = new Promise(r => p.on('close', r));
+  return {
+    pid,
+    async slut() { writeFileSync(stop, ''); await slut; await vent(800); return existsSync(log) ? readFileSync(log, 'utf8') : ''; },
+    sidsteSvar: () => { try { return readFileSync(sidsteSvar, 'utf8').trim().slice(0, 300); } catch { return '(intet svar logget)'; } },
+    // Hvor mange af de FORSOEGTE skrivninger blev VERIFICERET af hjaelperen selv -
+    // den stoerre proeve er om de alle naaede frem, ikke om et skroebeligt slut-opslag kan laese dem igen.
+    taelling() {
+      try { const [forsoegt, verificeret] = readFileSync(tael, 'utf8').trim().split(' ').map(Number); return { forsoegt, verificeret }; }
+      catch { return { forsoegt: 0, verificeret: 0 }; }
+    },
+    // ⛔ 1/10 (koersel 36884149245): et almindeligt «killall» venter paa TextEdits
+    //    egen afslutningslogik - og et UGEMT dokument beder om «Gem aendringer?»,
+    //    som intet svarer paa. Vinduet blev ikke lukket, og NAESTE rundes nye
+    //    TextEdit-vindue laa saa OVENI det gamle (2, saa 3, saa 4 AXTextArea-traef
+    //    paa tvaers af runderne) - find-opslaget tog det FOERSTE traef, som kunne
+    //    vaere det forkerte (gamle, tomme) vindue. -9 spoerger ikke; her er intet
+    //    at gemme, det er proevens eget kasserede dokument.
+    luk() {
+      try { execFileSync('killall', ['-9', 'TextEdit'], { stdio: 'ignore' }); } catch {}
+      for (let i = 0; i < 20; i++) {
+        try { if (!(hj('apps').apps || []).some(a => a.bundleId === 'com.apple.TextEdit')) return; } catch {}
+        try { execFileSync('sleep', ['0.1']); } catch {}
+      }
+    },
+  };
+}
+
+// Hvilke pids er agenternes programmer? Laeses loebende, for et program kan vaere lukket igen
+// naar dommen faeldes.
+function startPidKort(bundles) {
+  const kort = new Map();
+  const tag = () => { try { for (const a of hj('apps').apps || []) if (bundles.has(a.bundleId)) kort.set(a.pid, a.bundleId); } catch {} };
+  tag();
+  const ur = setInterval(tag, 1000);
+  return { kort, stop() { clearInterval(ur); tag(); } };
+}
+
+function nulstil() {
+  try { execFileSync('killall', ['Chess', 'Calculator', 'Contacts', 'System Settings', 'Activity Monitor', 'Notes', 'Safari'], { stdio: 'ignore' }); } catch {}
+  try { execFileSync('rm', ['-rf', `${process.env.HOME}/Library/Containers/com.apple.Chess/Data/Library/Saved Application State`]); } catch {}
+}
+
+const rapport = [];
+for (const n of NIVEAUER) {
+  if (FREMMED) { nulstil(); await vent(2500); }   // ⛔ aldrig paa menneskets Mac: killall lukker HANS programmer
+  const hold = [...ARBEJDERE.slice(0, n), ...Array.from({ length: Math.max(0, n - ARBEJDERE.length) }, (_, i) => laeser(i + 1))];
+  console.log(`\n== ${n} agenter samtidig: ${hold.map(s => s.nr).join(', ')}`);
+  let menneske = null;
+  if (FREMMED) {
+    try { menneske = startMenneske(); } catch (e) { check(`${n}.0 mennesket kom i gang`, false, e.message); continue; }
+    await vent(1500);
+  }
+  const film = FREMMED ? startFilm(`parallel-${n}-agenter`) : { stop: async () => null };
+  const agentBundles = new Set(hold.flatMap(s => s.apps).filter(a => a !== 'com.apple.finder'));
+  const pids = startPidKort(agentBundles);
+  const vagt = startForrestLog();
+  await vent(1500);
+  const t0 = Date.now();
+  // Én delt state-mappe pr. runde: programlaas og revisionskaede deles, som paa en rigtig Mac.
+  const delt = mkdtempSync(join(tmpdir(), 'cmcp-parallel-state-'));
+  const res = await Promise.all(hold.map(s => koerScenarie(s, { film: false, menneskeArbejder: EGEN, stateDir: delt })));
+  const sek = ((Date.now() - t0) / 1000).toFixed(1);
+  await vent(2500);   // et program kan hente sig selv frem sekunder efter (Kontakter, 27/9)
+  const maaling = await vagt.stop();
+  pids.stop();
+  const skrevet = menneske ? await menneske.slut() : '';
+  const taelling = menneske ? menneske.taelling() : { forsoegt: 0, verificeret: 0 };
+  const filmSti = await film.stop();
+  menneske?.luk();
+  const iRunden = maaling.skift.filter(x => x.t >= t0 - 1500);
+
+  // ⛔ 1/10 (koersel 36869119105): «tog > 0» fejlede ogsaa en scenarie der selv
+  //    tog skaermen OG gav den aerligt tilbage (menu-klik, README linje 204: "it is
+  //    a moment, not nothing") - det er allerede koerScenariens egen 'delvist', ikke
+  //    en fejl. Et IKKE-tilbagegivet tag staar som 'fejlede' i koerScenarie selv
+  //    (branchen "tog skærmen og gav den ikke tilbage"), saa status alene er nok;
+  //    5.1b dømmer den AERLIGE tilbagegivelsestid for mennesket uafhaengigt.
+  const roede = res.filter(r => r.status === 'fejlede');
+  const tid = (t) => `${((t - t0) / 1000).toFixed(1)} s`;
+  // ⛔ 1/10: maalt i macOS' egen log, med aarsag - den gamle vagt var blind (1 linje mod 26 skift).
+  check(`${n}.0 maaleren saa skaermen (${maaling.puls} puls, ${maaling.skift.length} skift)`, !maaling.umaalt, maaling.umaalt || '');
+  const fund = doem(iRunden, (pid) => pids.kort.has(pid));
+  check(`${n}.1 intet agent-program kom frem, og intet skift blev revet tilbage fra mennesket`, fund.length === 0,
+    fund.map(f => `${f.slags} (${pids.kort.get(f.pid) || 'pid ' + f.pid}, ${f.aarsag}) efter ${tid(f.t)}`).join(', '));
+  let fremmede = fund.length;
+  if (FREMMED) {
+    // ⛔ 1/10 (koersel 36876560087): FOER blev tePid gaettet ud fra skift-loggen -
+    //    staar mennesket stille foer runden (det almindelige), er der intet at
+    //    gaette ud fra, og hele doemmelsen inverteredes. Nu den PID vi faktisk
+    //    laeste direkte fra TextEdit, da menneske-simulationen startede.
+    const tePid = menneske.pid;
+    const efter = iRunden.filter(x => x.t >= t0);
+    // ⛔ 1/10 (koersel 36869119105): «TextEdit forrest hele vejen» var for strengt -
+    //    scenarie 15 klikker Finders menu (cmd+n, shift+cmd+g), og et menu-klik
+    //    SKAL kort goere programmet forrest for at kunne trykke dets menulinje.
+    //    README (linje 204) lover selv ærligt «took_screen»+«gave_back»: "it is a
+    //    moment, not nothing" - IKKE nul beroering nogensinde. Det der skal maales
+    //    er om skaermen blev givet AERLIGT tilbage, ikke om den aldrig blev taget.
+    //    Give-tilbage-vinduerne er 240 ms (tryk), 2000 ms (menu), 4000 ms (start);
+    //    3,5 s tolerance daekker alle tre plus AX-rundtursforsinkelse under last.
+    const TOLERANCE_MS = 3500;
+    const udsving = [];
+    let start = null;
+    for (const x of efter) {
+      if (x.pid !== tePid) { if (!start) start = x; }
+      else if (start) { udsving.push({ start, slut: x, varighedMs: x.t - start.t }); start = null; }
+    }
+    if (start) udsving.push({ start, slut: null, varighedMs: null });
+    const forLangsomme = udsving.filter(u => u.varighedMs === null || u.varighedMs > TOLERANCE_MS);
+    fremmede += forLangsomme.length;
+    check(`${n}.1b paa GitHubs Mac: TextEdit faar skaermen aerligt tilbage (${udsving.length} udsving, ${TOLERANCE_MS}ms tolerance)`,
+      forLangsomme.length === 0,
+      forLangsomme.map(u => `pid ${u.start.pid} (${u.start.aarsag}) efter ${tid(u.start.t)}` +
+        (u.varighedMs == null ? ' - aldrig givet tilbage' : `, varede ${u.varighedMs} ms`)).join(', '));
+    // ⛔ 1/10: SEKS koersler forsoegte et paalideligt AFSLUTTENDE laes af TextEdits
+    //    dokument via find-opslag - traef-tallet blev entydigt (Resume-rettelsen), men
+    //    vaerdien laeste stadig tom, en AX-kvirk uden for computer-mcp's egen kode. I
+    //    stedet bruges hjaelperens EGEN readback-bekraeftelse pr. kald: hvert «verified:
+    //    true» beviser at AKKURAT den tekst landede, maalt i selve oejeblikket - en
+    //    staerkere, mere granulaer proeve end et skroebeligt slut-opslag.
+    const tabtRate = taelling.forsoegt > 0 ? (taelling.forsoegt - taelling.verificeret) / taelling.forsoegt : 1;
+    check(`${n}.2 mennesket kunne skrive uafbrudt (${taelling.verificeret}/${taelling.forsoegt} skrivninger verificeret af hjaelperen)`,
+      taelling.forsoegt > 0 && tabtRate < 0.05,
+      `${taelling.verificeret} af ${taelling.forsoegt} verificeret (${(tabtRate * 100).toFixed(0)}% tabt) - sidste svar: ${menneske.sidsteSvar()}`);
+  }
+  check(`${n}.3 ingen agent fejlede eller tog skaermen (${res.filter(r => r.status === 'bevist').length} bevist, ${res.filter(r => r.status === 'delvist').length} delvist)`,
+    roede.length === 0, roede.map(r => `${r.nr} ${r.navn}: ${String(r.bevis).slice(0, 120)}`).join(' | '));
+  check(`${n}.4 ingen agent naaede et program uden for sin liste`, res.every(r => !(r.stoppet || []).length && !(r.udenfor || []).length));
+  for (const r of res) console.log(`     ${r.status.padEnd(8)} ${String(r.nr).padStart(3)} ${r.navn}: ${String(r.bevis).slice(0, 110)}`);
+  // Sporet beholdes: uden det kan ingen se HVORFOR en agent fejlede (Astra/Opus, 1/10).
+  rapport.push({ n, sek, film: filmSti, fund: fremmede, maaling: { puls: maaling.puls, umaalt: maaling.umaalt, skift: iRunden }, tegn: skrevet.length, taelling, res });
+  console.log(`     ${n} agenter paa ${sek} s · film: ${filmSti || 'ingen'}`);
+}
+if (process.env.CMCP_PARALLEL_RAPPORT) writeFileSync(process.env.CMCP_PARALLEL_RAPPORT, JSON.stringify(rapport, null, 2));
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/paste-stop.mjs b/test/paste-stop.mjs
new file mode 100644
index 00000000..3a85bdb8
--- /dev/null
+++ b/test/paste-stop.mjs
@@ -0,0 +1,58 @@
+// PASTE-STOP: stopper den RIGTIGE hjaelper et paste, naar skaerm-laanet slutter?
+//
+// ⛔ HVORFOR DEN FINDES (runde 5, 30/9-2026, Astra 3)
+//    Serveren sender SIGUSR1 til et paste der koerer, naar laanet slutter. Den falske
+//    hjaelper (skaerm-laan 6f) beviser at signalet SENDES - ikke at Swift-siden
+//    stopper. Her faar den rigtige hjaelper signalet, mens den venter paa teksten paa
+//    stdin, og SKAL svare «stopped before anything changed» uden at have roert
+//    udklipsholderen eller trykket Cmd+V.
+//
+// ⛔ KUN PAA EN FREMMED MASKINE: svigter stoppet, indsaettes teksten i det program
+//    der er forrest. Paa menneskets Mac er det ikke en proeve, det er en skade.
+import { spawn } from 'node:child_process';
+import { existsSync, statSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+if (process.env.CMCP_FREMMED_MASKINE !== '1') {
+  console.log('SPR. kun paa en fremmed maskine (CMCP_FREMMED_MASKINE=1) - et svigtende stop ville indsaette tekst');
+  process.exit(0);
+}
+const HJ = [process.env.CMCP_HELPER, join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper'), join(ROOT, 'helper', '.build', 'release', 'cmcp-helper')]
+  .filter(p => p && existsSync(p)).sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs)[0];
+
+const koer = (forsinkelseMs, tekstEfterMs = 300) => new Promise((res) => {
+  const p = spawn(HJ, ['paste'], { stdio: ['pipe', 'pipe', 'pipe'] });
+  let ud = '';
+  p.stdout.on('data', (d) => { ud += d; });
+  p.on('close', (rc, sig) => res({ rc, sig, ud: ud.trim() }));
+  setTimeout(() => {
+    try { p.kill('SIGUSR1'); } catch {}
+    const lever = () => { try { p.stdin.end('proeve-tekst der aldrig maa indsaettes'); } catch {} };
+    if (tekstEfterMs === 0) lever(); else setTimeout(lever, tekstEfterMs);
+  }, forsinkelseMs);
+});
+
+// 1. Signalet kommer mens hjaelperen venter paa teksten: den stopper foer noget er roert.
+const r1 = await koer(800);
+let j1 = {}; try { j1 = JSON.parse(r1.ud.split('\n').pop()); } catch {}
+check('1 SIGUSR1 foer teksten: stoppet, intet aendret', j1.ok === false && j1.code === 'screen-taken-back' && /before anything changed/.test(j1.error || ''), r1.ud.slice(0, 160));
+
+// 1b (efterkontrol, Astra): signalet og teksten i SAMME oejeblik - intet vindue for en
+//    forsinket callback at overhale. Stoppet SKAL ses foer Cmd+V.
+const r1b = await koer(800, 0);
+let j1b = {}; try { j1b = JSON.parse(r1b.ud.split('\n').pop()); } catch {}
+check('1b SIGUSR1 og teksten samtidig: stoppet foer Cmd+V', j1b.ok === false && j1b.code === 'screen-taken-back', r1b.ud.slice(0, 160));
+
+// 2. Signalet kommer MED DET SAMME (maaske foer signalkilden findes): enten stoppet,
+//    eller processen doer af signalet - aldrig et paste.
+const r2 = await koer(0);
+let j2 = {}; try { j2 = JSON.parse(r2.ud.split('\n').pop()); } catch {}
+check('2 SIGUSR1 med det samme: stoppet eller doed af signalet - aldrig indsat', r2.sig === 'SIGUSR1' || (j2.ok === false && j2.code === 'screen-taken-back'),
+      `sig=${r2.sig} ${r2.ud.slice(0, 120)}`);
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/plugin-manifest.mjs b/test/plugin-manifest.mjs
new file mode 100644
index 00000000..e2abc518
--- /dev/null
+++ b/test/plugin-manifest.mjs
@@ -0,0 +1,47 @@
+// CLAUDE CODE-PLUGINNET PEGER PAA DEN VERSION NPM SERVERER.
+//
+// ⛔ 7/10 (panel R8-R9, punkt K): én kommando i den klient brugerne sidder i
+//    (`/plugin marketplace add Agent360dk/computerMCP`). Pluginnet starter serveren med
+//    `npx -y @agent360/computer-mcp@<V>`. Peger det paa en anden version end pakken,
+//    faar brugeren en server, sitet ikke beskriver. Proeven binder de tre sammen og
+//    koerer Claude Codes egen validator, hvor den findes.
+import { readFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+// ⛔ 7/10 (panel R10-R11, B5): pluginnet fulgte PAKKENS version, og markedet paa main pegede
+//    derfor paa en version npm ikke havde, fra fletning til udgivelse - en installation der
+//    ikke kunne starte. Nu foelger det PUBLICERET (sync-tal.py), og dok-PR'en loefter det.
+const V = readFileSync(join(ROOT, 'PUBLICERET'), 'utf8').trim();
+const marked = JSON.parse(readFileSync(join(ROOT, '.claude-plugin', 'marketplace.json'), 'utf8'));
+const plugin = JSON.parse(readFileSync(join(ROOT, 'plugin', '.claude-plugin', 'plugin.json'), 'utf8'));
+
+const indgang = marked.plugins?.find(p => p.name === 'computer-mcp');
+check('markedet har pluginnet og peger paa mappen i repoet', indgang?.source === './plugin', JSON.stringify(indgang?.source));
+check('markedets version = PUBLICERET (det npm serverer)', indgang?.version === V, `${indgang?.version} / ${V}`);
+check('pluginnets version = PUBLICERET', plugin.version === V, `${plugin.version} / ${V}`);
+const srv = plugin.mcpServers?.['computer-mcp'];
+check('serveren startes med npx laast til netop den version npm serverer', srv?.command === 'npx'
+      && JSON.stringify(srv?.args) === JSON.stringify(['-y', `@agent360/computer-mcp@${V}`]), JSON.stringify(srv?.args));
+
+// 8/10 (panel R14, C4): fladerne viser plugin-vejen med de navne manifesterne faktisk har.
+const MARKED = marked.name, INSTALL = `/plugin install ${indgang?.name}@${MARKED}`, TILFOEJ = '/plugin marketplace add Agent360dk/computerMCP';
+for (const f of ['README.md', 'mcp-server/README.md', 'docs/docs/install-claude-code/index.html', 'docs/llms-install.md']) {
+  const t = readFileSync(join(ROOT, f), 'utf8');
+  check(`${f} viser plugin-vejen med manifesternes navne`, t.includes(TILFOEJ) && t.includes(INSTALL), INSTALL);
+}
+const har = spawnSync('/bin/sh', ['-c', 'command -v claude'], { encoding: 'utf8' }).stdout.trim();
+if (!har) {
+  console.log('SPR. Claude Codes validator - `claude` findes ikke paa denne maskine (umaalt, ikke bestaaet)');
+} else {
+  for (const sti of ['.', 'plugin']) {
+    const r = spawnSync('claude', ['plugin', 'validate', sti], { cwd: ROOT, encoding: 'utf8', timeout: 60000 });
+    check(`claude plugin validate ${sti}`, r.status === 0, ((r.stdout || '') + (r.stderr || '')).trim().split('\n').pop());
+  }
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/readme-log.mjs b/test/readme-log.mjs
new file mode 100644
index 00000000..0114bc16
--- /dev/null
+++ b/test/readme-log.mjs
@@ -0,0 +1,63 @@
+// README'S LOG-UDDRAG ER LOGGEN SOM DEN ER (punkt L).
+//
+// ⛔ 7/10 (panel R8): uddraget skal vaere en byte-eksakt del af en committet log fra
+//    en isoleret koersel, og den logs kaede skal holde. Aendres et tegn i uddraget
+//    eller i loggen, er proeven roed. Loggen skrives af scripts/log-uddrag.mjs -
+//    aldrig af et menneskes egen revisionslog.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { readFileSync, mkdtempSync, copyFileSync } from 'node:fs';
+import { tmpdir, homedir, hostname } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { FASTE_OPSLAG } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const FIX = join(ROOT, 'test', 'fixtures', 'audit-readme.jsonl');
+const fix = readFileSync(FIX, 'utf8');
+const fixLinjer = fix.trim().split('\n');
+const readme = readFileSync(join(ROOT, 'README.md'), 'utf8');
+const blokke = [...readme.matchAll(/<!-- log-uddrag:start -->\n```jsonl\n([\s\S]*?)\n```\n<!-- log-uddrag:end -->/g)];
+check('README har praecis een log-uddrag-blok', blokke.length === 1, `${blokke.length}`);
+const uddrag = (blokke[0]?.[1] || '').split('\n');
+
+// 1. Byte for byte, i samme raekkefoelge, uden huller - saa kaeden kan foelges i uddraget.
+const start = fixLinjer.indexOf(uddrag[0]);
+const sammenhaengende = start >= 0 && uddrag.every((l, i) => fixLinjer[start + i] === l);
+check('hver linje i uddraget staar byte for byte i loggen, i raekkefoelge', sammenhaengende,
+      sammenhaengende ? `${uddrag.length} linjer fra linje ${start + 1}` : `foerste afvigende: ${(uddrag.find((l, i) => fixLinjer[start + i] !== l) || uddrag[0] || '').slice(0, 70)}`);
+check('uddraget viser mindst et ja, et spoergsmaal uden svar og et nej', uddrag.length >= 3
+      && uddrag.some(l => /"decision":"allowed"/.test(l))
+      && uddrag.some(l => /"asked":true/.test(l) && /"decision":"denied"/.test(l))
+      && uddrag.some(l => /"asked":false/.test(l) && /"decision":"denied"/.test(l)));
+
+// 2. Loggens kaede holder - maalt med produktets egen kontrol, paa en kopi.
+process.env.CMCP_STATE_DIR = mkdtempSync(join(tmpdir(), 'cmcp-readme-log-'));
+copyFileSync(FIX, join(process.env.CMCP_STATE_DIR, 'audit.jsonl'));
+const { kaedenHolder } = await import('../mcp-server/audit.js');
+const k = kaedenHolder();
+check('loggens kaede holder fra ende til anden', k.ok === true && k.checked === fixLinjer.length && k.aegte === 0 && k.gamle === 0,
+      JSON.stringify(k));
+
+// 3. Linjen med spoergsmaalet baerer serverens version - den skal vaere pakkens.
+const version = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+const servere = [...fix.matchAll(/"server":"([^"]+)"/g)].map(m => m[1]);
+check('loggen er fra den version pakken udgiver (ellers: node scripts/log-uddrag.mjs)',
+      servere.length > 0 && servere.every(v => v === version), `${servere.join(',') || 'ingen'} / ${version}`);
+
+// 3b. README-sætningen om `presence` er bundet til hvor hvert felt kommer fra (Opus R10:
+//     «målt på Mac'en» var usandt for fire af syv felter, og intet bandt sætningen).
+const presence = [...fix.matchAll(/"presence":(\{[^}]*\})/g)].map(m => JSON.parse(m[1]));
+check('presence: idle er attrappens faste svar, ikonet er stand-in med pakkens version, sessioner fra den isolerede mappe',
+      presence.length > 0 && presence.every(p => p.idle_at_ask === FASTE_OPSLAG.idle.idle && p.idle_at_end === FASTE_OPSLAG.idle.idle
+        && p.icon === version && p.sessions === 1 && p.surface_derived === (p.box === 'on' ? 'box+menu' : 'menu')), JSON.stringify(presence[0] || null));
+const SAETNING = /In the `presence`\s+fields, the idle times come from the stand-in helper\s+and the icon version from the stand-in icon; the session count comes from the\s+isolated state, and the surface is derived\. Only the box setting was read from\s+the Mac that made the run\./;
+check('README siger hvor hvert presence-felt kommer fra (samme ordlyd som felterne ovenfor)', SAETNING.test(readme));
+
+// 4. Intet fra maskinen der skrev den.
+check('loggen naevner hverken hjemmemappe eller maskinnavn', !fix.includes(homedir()) && !fix.includes(hostname()));
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/readonly-foerst.mjs b/test/readonly-foerst.mjs
new file mode 100644
index 00000000..3b8a89f0
--- /dev/null
+++ b/test/readonly-foerst.mjs
@@ -0,0 +1,56 @@
+// READONLY AFGOERES FOER SENDE-PORTEN.
+//
+// ⛔ 7/10 (panel R8, punkt J): i readonly afviser `decide` alle skrivende kald, men
+//    sende-porten koerte foer: den laeste samtalen paa skaermen (`samtale`) og afviste
+//    med sin egen grund. Loggen sagde «Send control could not be tied» om et kald der
+//    var afvist af readonly. Nu: readonly-grunden, og ingen opslag for et kald der
+//    alligevel ikke maa ske.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { join, dirname } from 'node:path';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const WA = 'net.whatsapp.WhatsApp';
+const HJ = lavFalskHjaelper('cmcp-readonly-foerst');
+HJ.saetSvar({
+  // WhatsApp ligger BAG (Finder forrest), saa ingen anden port afviser foer readonly.
+  apps: { apps: [{ name: 'WhatsApp', bundleId: WA, pid: 4250, active: false }, { name: 'Finder', bundleId: 'com.apple.finder', pid: 4251, active: true }] },
+  samtale: { recipient: 'Mor', field: { role: 'AXTextArea', value: 'hej', frame: { x: 0, y: 0, w: 400, h: 40 } }, window: 'Mor' },
+  'press --dry': { would_press: { name: 'Send', role: 'AXButton', frame: { x: 410, y: 0, w: 30, h: 30 } } },
+  at: { found: true, bundleId: WA, role: 'AXButton', title: 'Send', frame: { x: 410, y: 0, w: 30, h: 30 } },
+});
+const STATE = mkdtempSync(join(tmpdir(), 'cmcp-readonly-foerst-'));
+const SP = lavFalskSpoerger('udloeb', 'cmcp-readonly-foerst-sp');
+const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+  env: { ...process.env, CMCP_MODE: 'readonly', CMCP_HELPER: HJ.sti, CMCP_STATE_DIR: STATE,
+         CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1', CMCP_OSASCRIPT: SP.sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise((r, rej) => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); setTimeout(() => rej(new Error('timeout ' + m)), 20000); });
+try {
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'ro', version: '1' } });
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+  const opslag = () => HJ.kald().map(k => k.argv.join(' '));
+  for (const [navn, args] of [['computer_press', { app: 'WhatsApp', title: 'Send' }], ['computer_click', { app: 'WhatsApp', x: 420, y: 10 }]]) {
+    const foer = opslag().length;
+    const r = await rpc('tools/call', { name: navn, arguments: args });
+    const t = r.result?.content?.[0]?.text || '';
+    const nye = opslag().slice(foer);
+    check(`${navn} i readonly afvises med readonly-grunden`, r.result?.isError === true && /readonly/.test(t), t.slice(0, 70).replace(/\s+/g, ' '));
+    check(`${navn} i readonly: ingen samtale- eller toerkoersels-opslag`, !nye.some(a => /^samtale|--dry/.test(a)), nye.join(' | ') || 'ingen opslag');
+    check(`${navn} i readonly: intet naaede hjaelperen som handling`, !nye.some(a => /^(press|click)\b/.test(a) && !/--dry/.test(a)));
+  }
+} finally {
+  srv.kill(); rmSync(STATE, { recursive: true, force: true });
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/release-fejlmatrix.mjs b/test/release-fejlmatrix.mjs
new file mode 100644
index 00000000..a8449323
--- /dev/null
+++ b/test/release-fejlmatrix.mjs
@@ -0,0 +1,115 @@
+// UDGIVELSESSCRIPTET SIGER SANDHEDEN VED HVERT EKSTERNT TRIN.
+//
+// ⛔ 7/10 (panel R2+R8, punkt E): fire beskeder i scripts/release.sh kunne lyve i det
+//    vaerste oejeblik - en GitHub-fejl laest som «CI har ikke koert», en fejlet
+//    ls-remote laest som «maerket er ledigt», faelden armeret gennem deprecate (et
+//    afbrudt deprecate skrev «udgivelsen skete ikke» efter en lykket publish), og en
+//    reservelinje til deprecate der ikke kunne koeres.
+//
+// Proeven koerer det RIGTIGE release.sh i en klon i tmp:
+//   - byg og suite er erstattet af stubbe (de er bevist andetsteds); den rigtige
+//     universelle binaer fra vendor/ bruges, saa arkitektur- og versionstjek er aegte
+//   - origin er en lokal bare-kopi; gh, npm og mcp-publisher er attrapper der logger
+//   - en git-indpakning lader KUN `ls-remote` fejle, naar et scenarie beder om det
+// Intet naar GitHub, npm eller registret.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync, spawnSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, readFileSync, chmodSync, existsSync, cpSync, mkdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+if (!existsSync(join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper'))) {
+  console.log('SPR. fejlmatricen - mcp-server/vendor/cmcp-helper mangler (koer scripts/build-release.sh); umaalt, ikke bestaaet');
+  process.exit(0);
+}
+const V = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+const GIT = execFileSync('/bin/sh', ['-c', 'command -v git'], { encoding: 'utf8' }).trim();
+
+function scenarie(navn, { gh = {}, npm = {}, git = {} } = {}) {
+  const D = mkdtempSync(join(tmpdir(), `cmcp-rel-${navn}-`));
+  const BARE = join(D, 'origin.git'), K = join(D, 'repo'), BIN = join(D, 'bin'), LOG = join(D, 'kald.log');
+  mkdirSync(BIN);
+  execFileSync(GIT, ['clone', '-q', '--no-hardlinks', ROOT, K]);
+  // Proeven skal maale release.sh som det staar i arbejdstraeet, ogsaa foer commit.
+  cpSync(join(ROOT, 'scripts', 'release.sh'), join(K, 'scripts', 'release.sh'));
+  writeFileSync(join(K, 'scripts', 'build-release.sh'), '#!/bin/sh\nexit 0\n');
+  writeFileSync(join(K, 'test', 'run-all.sh'), '#!/bin/sh\nexit 0\n');
+  chmodSync(join(K, 'scripts', 'build-release.sh'), 0o755); chmodSync(join(K, 'test', 'run-all.sh'), 0o755);
+  const gitK = (...a) => execFileSync(GIT, a, { cwd: K, stdio: 'pipe', encoding: 'utf8' });
+  gitK('-c', 'user.name=p', '-c', 'user.email=p@example.invalid', 'commit', '-qam', 'proeve: stubbe');
+  gitK('checkout', '-q', '-B', 'main');           // kun i klonen i tmp
+  execFileSync(GIT, ['clone', '-q', '--bare', K, BARE]);
+  gitK('remote', 'set-url', 'origin', BARE); gitK('fetch', '-q', 'origin');
+  gitK('branch', '-q', '-u', 'origin/main');
+  for (const t of gitK('tag', '-l').split('\n').filter(Boolean)) gitK('tag', '-d', t);
+  cpSync(join(ROOT, 'mcp-server', 'vendor'), join(K, 'mcp-server', 'vendor'), { recursive: true });
+  const fp = execFileSync('/bin/sh', ['-c', 'cat mcp-server/policy.js test/failclosed.mjs | shasum -a 256 | cut -c1-16'], { cwd: K, encoding: 'utf8' }).trim();
+  writeFileSync(join(K, '.dialog-kvittering'), `${fp} 2026-10-07T00:00:00Z\n`);
+
+  const stub = (navn, krop) => { writeFileSync(join(BIN, navn), `#!/bin/sh\necho "${navn} $*" >> ${LOG}\n${krop}\n`); chmodSync(join(BIN, navn), 0o755); };
+  stub('gh', `case "$1 $2" in
+  "run list") ${gh.runList ?? 'echo success'} ;;
+  "release view") exit 1 ;;
+  "release create") ${gh.releaseCreate ?? 'exit 0'} ;;
+  "pr create") echo https://github.com/x/y/pull/99 ;;
+  *) exit 0 ;;
+esac`);
+  stub('npm', `case "$1" in
+  whoami) echo proever ;;
+  publish) ${npm.publish ?? 'exit 0'} ;;
+  deprecate) ${npm.deprecate ?? 'exit 0'} ;;
+  *) exec /usr/bin/env -u PATH npm "$@" ;;
+esac`);
+  stub('mcp-publisher', 'exit 0');
+  writeFileSync(join(BIN, 'git'), `#!/bin/sh\nif [ "$1" = "ls-remote" ] && [ -n "${git.lsRemoteFejl ?? ''}" ]; then exit ${git.lsRemoteFejl ?? 0}; fi\nexec ${GIT} "$@"\n`);
+  chmodSync(join(BIN, 'git'), 0o755);
+
+  const r = spawnSync('bash', ['scripts/release.sh', V], { cwd: K, encoding: 'utf8', timeout: 300000,
+    env: { ...process.env, PATH: `${BIN}:${process.env.PATH}`, GIT_AUTHOR_NAME: 'p', GIT_AUTHOR_EMAIL: 'p@example.invalid',
+           GIT_COMMITTER_NAME: 'p', GIT_COMMITTER_EMAIL: 'p@example.invalid' } });
+  const kald = existsSync(LOG) ? readFileSync(LOG, 'utf8') : '';
+  const fjernTag = spawnSync(GIT, ['ls-remote', '--tags', BARE, `refs/tags/v${V}`], { encoding: 'utf8' }).stdout.trim();
+  return { rc: r.status, ud: (r.stdout || '') + (r.stderr || ''), kald, fjernTag, publiceret: readFileSync(join(K, 'PUBLICERET'), 'utf8').trim() };
+}
+
+// S1: GitHub svarer ikke paa CI-forespoergslen -> UKENDT, intet maerket.
+const s1 = scenarie('ci', { gh: { runList: 'exit 1' } });
+check('S1 gh fejler ved CI-tjek: stopper og siger UKENDT (ikke «ikke koert»)', s1.rc !== 0 && /UKENDT/.test(s1.ud) && !/har ikke koert/.test(s1.ud) && !s1.fjernTag,
+      (s1.ud.match(/⛔[^\n]*/) || ['(ingen ⛔)'])[0].slice(0, 100));
+
+// S2: ls-remote fejler (net) -> UKENDT, ikke «ledigt»; intet maerket.
+const s2 = scenarie('lsremote', { git: { lsRemoteFejl: 128 } });
+check('S2 ls-remote fejler: stopper og siger UKENDT, intet maerke', s2.rc !== 0 && /UKENDT, ikke ledigt/.test(s2.ud) && !s2.fjernTag && !/npm publish/.test(s2.kald),
+      (s2.ud.match(/⛔[^\n]*/) || ['(ingen ⛔)'])[0].slice(0, 100));
+
+// S3: publish lykkes, deprecate afbrydes (Ctrl-C under browserventetiden) -> ALDRIG «udgivelsen skete ikke».
+//    Et rigtigt Ctrl-C rammer hele procesgruppen: barnet doer AF signalet, og bash ogsaa
+//    (en barneproces der blot afslutter med 130, faar bash til at koere videre).
+const s3 = scenarie('deprecate-afbrudt', { npm: { deprecate: 'kill -INT $PPID; kill -INT $$' } });
+check('S3 forudsaetning: scriptet blev faktisk afbrudt under deprecate', s3.rc !== 0 && /npm publish/.test(s3.kald) && !/gh pr create/.test(s3.kald), `rc=${s3.rc}`);
+check('S3 publish lykkedes, deprecate afbrudt: PUBLICERET staar paa den nye version', s3.publiceret === V, `PUBLICERET=${s3.publiceret}`);
+check('S3 ...og scriptet paastaar ikke at udgivelsen ikke skete', !/udgivelsen skete ikke/.test(s3.ud), (s3.ud.match(/[^\n]*skete ikke[^\n]*/) || ['-'])[0].slice(0, 90));
+
+// S4: deprecate fejler -> reservelinjen kan koeres ordret (citeret, hele beskeden).
+const s4 = scenarie('deprecate-fejl', { npm: { deprecate: 'exit 1' } });
+const linje = (s4.ud.match(/^\s+npm deprecate '.*$/m) || [''])[0].trim();
+check('S4 deprecate fejler: reservelinjen er citeret og bærer hele beskeden', /^npm deprecate '@agent360\/computer-mcp@<0\.2\.1' 'Upgrade to [\d.]+: earlier versions could return an unredacted screenshot when redaction failed\.'$/.test(linje), linje.slice(0, 120));
+// S6 (panel R13-R14, fejl a): advarslen rammer kun versionerne FOER 0.2.1 - aldrig «<V».
+//    Med V = 0.2.2 ville «<V» advare om 0.2.1, der netop rettede fejlen.
+const dep = (s4.kald.match(/^npm deprecate .*$/m) || [''])[0];
+check('S6 advarslen rammer kun versioner foer 0.2.1, uanset hvilken version der udgives', /@agent360\/computer-mcp@<0\.2\.1 /.test(dep)
+      && (V === '0.2.1' || !dep.includes(`@<${V}`)), dep.slice(0, 100));
+
+// S5: alt lykkes -> maerke paa origin, publish, deprecate, PR og register i den raekkefoelge.
+const s5 = scenarie('alt-groent');
+const raek = ['gh release create', 'npm publish', 'npm deprecate', 'gh pr create', 'mcp-publisher publish'].map(k => s5.kald.indexOf(k));
+check('S5 alt groent: rc 0, maerke paa origin, raekkefoelgen release -> publish -> deprecate -> PR -> register',
+      s5.rc === 0 && !!s5.fjernTag && raek.every(i => i >= 0) && raek.every((v, i) => i === 0 || v > raek[i - 1]), `rc=${s5.rc} ${raek.join(',')}`);
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/run-all.sh b/test/run-all.sh
index df3e1ed1..0def00e1 100755
--- a/test/run-all.sh
+++ b/test/run-all.sh
@@ -5,6 +5,18 @@
 # overleve koerslen, ellers er en flaksende proeve ikke til at undersoege.
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
 LOG="${TMPDIR:-/tmp}/cmcp-suite-$(date +%H%M%S).log"
+# ⛔ 11/10 (diskchatten): suiten efterlod hver proeves cmcp-*-mapper i $TMPDIR - 8.041 mapper,
+#    og Mac'en gik ned 11/10 11.03, fordi disken var for fuld til dvalebilledet. Nu koerer hele
+#    suiten i sin EGEN korte mappe, som fjernes til sidst - ogsaa naar en proeve dumper, eller
+#    koerslen afbrydes. Loggen ovenfor ligger uden for og bliver staaende: den er beviset.
+#    Kort sti med vilje: menulinje-ikonets sokkel maa hoejst vaere 104 tegn.
+SUITE_TMP="$(mktemp -d /tmp/cmcp-s-XXXXXX)"
+trap 'rm -rf "$SUITE_TMP"' EXIT
+trap 'exit 130' INT TERM HUP
+export TMPDIR="$SUITE_TMP/"
+# 7/10 (punkt F): ingen proeve maa ramme menneskets rigtige tilstandsmappe - heller
+# ikke en der glemmer at saette sin egen. Hver fil kan stadig saette en mere lokal.
+export CMCP_STATE_DIR="${CMCP_STATE_DIR:-$(mktemp -d "${TMPDIR:-/tmp}/cmcp-suite-tilstand-XXXXXX")}"
 # ⛔ FUNDET AF RAADGIVEREN 19/9, og det er et brud paa produktets eget loefte.
 #    `failclosed.mjs` og `server-e2e.mjs` satte ingen egen state-mappe, saa de
 #    skrev i MENNESKETS rigtige revisionslog. MAALT i
@@ -92,6 +104,21 @@ run "paastande"          "node test/claims.mjs"
 #    og den var dermed ubevist i naesten hver koersel. Nu gaar spoergsmaalet
 #    gennem en attrap, saa den koerer HVER gang og viser ingenting.
 run "fejl-lukket"        "node test/failclosed.mjs"
+run "laas fejler lukket" "node test/laas-fejler-lukket.mjs"
+run "doeren"             "node test/doer.mjs"
+run "menu-genvej"        "node test/menu-genvej.mjs"
+run "knap-ord"           "node test/knap-ord.mjs"
+run "versionstekster"    "node test/sync-tal-versioner.mjs"
+run "readonly foerst"    "node test/readonly-foerst.mjs"
+run "tilstede"          "node test/tilstede.mjs"
+run "pakkens filer"     "node test/pakke-filer.mjs"
+run "udgivelsens fejlveje" "node test/release-fejlmatrix.mjs"
+run "efter udgivelsen"   "node test/efter-udgivelsen.mjs"
+run "claude code-plugin" "node test/plugin-manifest.mjs"
+run "tilstand isoleret"  "node test/tilstand-isoleret.mjs"
+run "faste opslag"      "node test/attrap-faste-opslag.mjs"
+run "readme-log"        "node test/readme-log.mjs"
+run "forrest-log"        "node test/forrest-log-kalibrering.mjs"
 
 run "fejlbeskeder"       "node test/errors.mjs"
 run "flere agenter"      "node test/concurrent.mjs"
@@ -99,6 +126,8 @@ run "revisionskaeden"    "node test/audit-chain.mjs"
 run "den stille vej"    "CMCP_KRAEV_STILLE=1 node test/stille-vej.mjs"
 run "vaelgeren"         "node test/vaelger.mjs"
 run "skriv ankommer"     "node test/skriv-ankommer.mjs"
+run "billede placering"  "node test/billede-placering.mjs"
+run "menuvagt"           "node test/menu-vagt.mjs"
 run "genaabn"           "node test/genaabn.mjs"
 run "laeringsfilen"     "node test/laering.mjs"
 run "giv tilbage"       "node test/giv-tilbage.mjs"
@@ -133,6 +162,25 @@ run "argumenter"         "node test/argumenter.mjs"
 run "pakken starter"     "node test/pakken-starter.mjs"
 # ⛔ B5: samtykket viste ikke HVAD der godkendes - «read the path above» uden en sti.
 run "samtykke-tekst"     "node test/samtykke-tekst.mjs"
+# ⛔ 29/9: Touch ID-arket klippede handlingen ved 80 tegn, tavst - et ja til noget ulaest.
+run "hele teksten i menuen" "node test/ombryd.mjs"
+run "lyd pr. spoergsmaal" "node test/ikon-lyd.mjs"
+# ⛔ 9/10: boksen stod paa den anden skaerm og sagde kun «Needs you» - et spoergsmaal udloeb.
+run "boksen i hjoernet"   "node test/ikon-boks.mjs"
+# ⛔ R17 (9/10): porten og hjaelperen fortolkede navnet hver for sig - nu faar leveringen portens id.
+run "bundet maal"        "node test/bundet-maal.mjs"
+# ⛔ 9/10: «\u200eWhatsApp» - app "WhatsApp" blev «ukendt maal» og afvist.
+run "usynlige navne"     "node test/usynlige-navne.mjs"
+# ⛔ 29/9: goer-selv, skaerm-laanet og den fulde tekst var kun kompileret i ikonet, aldrig koert.
+run "ikonets menu"       "node test/ikon-menu.mjs"
+# ⛔ 29/9: Send i WhatsApp gik igennem i allow uden at nogen blev spurgt.
+run "sende-porten"       "node test/sende-port.mjs"
+# ⛔ 29/9: forgrund kun via env-var + genstart, pr. server - nu laaner mennesket skaermen ud i ikonet.
+run "skaerm-laanet"      "node test/skaerm-laan.mjs"
+# ⛔ 29/9: porten lignede et faengsel; osascript/browser i allow gik udenom, usagt.
+run "omvejene"           "node test/omveje.mjs"
+# ⛔ 30/9: stopper den RIGTIGE hjaelper et paste ved laanets slut? Kun paa en fremmed maskine.
+run "paste stopper"       "node test/paste-stop.mjs"
 run "launch lukket"      "node test/launch-lukket.mjs"
 run "log der ikke kan skrives" "node test/log-fejl.mjs"
 run "klik rammer ejeren"  "node test/klik-ejer.mjs"
diff --git a/test/ryd-op.mjs b/test/ryd-op.mjs
new file mode 100644
index 00000000..87becfa8
--- /dev/null
+++ b/test/ryd-op.mjs
@@ -0,0 +1,36 @@
+// Proevernes midlertidige mapper slettes, naar proeven slutter - ogsaa naar den dumper eller afbrydes.
+//
+// ⛔ MAALT 30/9-2026: 5.442 cmcp-*-mapper (3,4 GB) i $TMPDIR paa Gustavs Mac -
+//    hver koersel af suiten eller mutationsbeviset efterlod ~400, og disken loeb
+//    fuld midt i en mutant.
+import fs from 'node:fs';
+import { syncBuiltinESMExports } from 'node:module';
+import { tmpdir } from 'node:os';
+const { realpathSync } = fs;
+
+const mapper = [];
+const original = fs.mkdtempSync;
+fs.mkdtempSync = (prefix, ...rest) => {
+  const d = original(prefix, ...rest);
+  // Kun mapper i systemets midlertidige mappe - aldrig noget en proeve fik udefra.
+  if (realpathSync(d).startsWith(realpathSync(tmpdir()) + '/')) mapper.push(d);
+  return d;
+};
+syncBuiltinESMExports();
+// ⛔ 11/10 (diskchatten, maalt 8.041 mapper og et nedbrud 11/10 11.03 fordi disken var fuld):
+//    «kun ved bestaaet» efterlod ALT fra hver dumpet proeve - og mutantporten faar proeverne
+//    til at dumpe med vilje, hundredvis af gange pr. koersel. Afbrudte koersler ryddede heller
+//    intet. Nu ryddes der altid: ved bestaaet, ved dumpet og ved afbrydelse. Skal en dumpet
+//    proeves mapper gemmes til fejlsoegning, saet CMCP_BEHOLD_PROEVEMAPPER=1.
+function ryd() {
+  if (process.env.CMCP_BEHOLD_PROEVEMAPPER === '1') return;
+  for (const d of mapper.splice(0)) { try { fs.rmSync(d, { recursive: true, force: true }); } catch {} }
+}
+process.on('exit', ryd);
+for (const [sig, nr] of [['SIGINT', 2], ['SIGTERM', 15], ['SIGHUP', 1]]) {
+  process.on(sig, () => {
+    ryd();
+    // Har proeven selv en handler for signalet, faar den lov at afslutte; ellers goer vi.
+    if (process.listenerCount(sig) <= 1) process.exit(128 + nr);
+  });
+}
diff --git a/test/samtidige-agenter.mjs b/test/samtidige-agenter.mjs
index 64db3166..903e85e8 100644
--- a/test/samtidige-agenter.mjs
+++ b/test/samtidige-agenter.mjs
@@ -7,6 +7,8 @@
 //
 // To rigtige servere, den rigtige hjaelper, og to usynlige proevevinduer
 // (uden titellinje, gennemsigtige, uden for skaermen - se proevemaal.swift).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn, execFileSync } from 'node:child_process';
 import { mkdtempSync, mkdirSync, writeFileSync, rmSync, existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/samtykke-tekst.mjs b/test/samtykke-tekst.mjs
index e9dd4a9b..937f9c77 100644
--- a/test/samtykke-tekst.mjs
+++ b/test/samtykke-tekst.mjs
@@ -10,6 +10,8 @@
 //
 //    Intet her viser en aegte dialog: spoergeren er en attrap der skriver den tekst
 //    den fik, og hjaelperen er en attrap der intet goer. Svaret er «nej».
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { writeFileSync, chmodSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/sende-port.mjs b/test/sende-port.mjs
new file mode 100644
index 00000000..8a554839
--- /dev/null
+++ b/test/sende-port.mjs
@@ -0,0 +1,355 @@
+// SENDE-PORTEN: kan en besked til et rigtigt menneske gaa ud, uden at mennesket
+// saa HVEM og HVAD - og sagde ja til netop den?
+//
+// ⛔ HVORFOR DEN FINDES (29/9-2026, dommen 28/9 D4 + trin 7)
+//    En besked kan ikke kaldes tilbage. Foer i dag fandtes intet beskedapp-begreb
+//    i porten: `computer_press` paa Send i WhatsApp gik igennem i allow uden at
+//    nogen blev spurgt. Dommens seks modforsoeg skal alle give roedt:
+//      (a) send-knappen · (b) Return/Enter · (c) linjeskift i computer_type ·
+//      (d) en falsk modtager fra modellen · (e) genbrugt nonce · (f) ja efter fristen.
+//    (e) og (f) er portens egne regler og maales i ikon-godkend.mjs (A7, A13, E3).
+//    Her: (a)-(d), genkontrollen under laasen, og en modtager der ikke kan laeses.
+//
+//    Rigtig server, FALSK ikon og FALSK hjaelper med scriptede skaerm-svar:
+//    ingen skaerm, ingen rigtig beskedapp, intet sendt.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { createServer } from 'node:net';
+import { spawn } from 'node:child_process';
+import { mkdtempSync, mkdirSync, writeFileSync, unlinkSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const STATE = mkdtempSync(join(tmpdir(), 'cmcp-sende-'));
+const HJ = lavFalskHjaelper('cmcp-sende');
+const SP = lavFalskSpoerger('ja', 'cmcp-sende-sp');
+const WA = 'net.whatsapp.WhatsApp';
+// Feltet og Send-knappen paa samme raekke i samme vindue - saadan ligger de i en chat-app.
+const FELT_RAMME = { x: 160, y: 600, w: 400, h: 40 };
+const KNAP = { window: 'WhatsApp', frame: { x: 570, y: 605, w: 30, h: 30 } };
+const SAMTALE = { window: 'WhatsApp', headings: ['Benjamin Riber', 'online'], column: true, field: { role: 'AXTextArea', value: 'computer-MCP virker', frame: FELT_RAMME } };
+const APPS = { apps: [{ name: 'WhatsApp', bundleId: WA, active: false }, { name: 'Finder', bundleId: 'com.apple.finder', active: true },
+                      { name: 'Google Chrome', bundleId: 'com.google.Chrome', active: false }, { name: 'Mail', bundleId: 'com.apple.mail', active: false }] };
+const svar = (ekstra = {}) => HJ.saetSvar({ apps: APPS, samtale: SAMTALE, 'press --dry': { would_press: { name: 'Send', role: 'AXButton', ...KNAP } }, ...ekstra });
+svar();
+
+// Det falske ikon: svarer efter `ikonSvar`, og kan aendre skaermen FOER det svarer.
+let ikonSvar = 'ja', foerSvar = null;
+const spurgt = [];
+await new Promise(res => createServer(sock => {
+  let buf = '';
+  sock.on('data', d => {
+    buf += d; const i = buf.indexOf('\n'); if (i < 0) return;
+    const q = JSON.parse(buf.slice(0, i)); spurgt.push(q);
+    if (foerSvar) { foerSvar(); foerSvar = null; }
+    const m = ikonSvar === 'ja' ? { ok: true, verified: 'owner' } : { ok: true, verified: 'none' };
+    sock.write(JSON.stringify({ nonce: q.nonce, ...m }) + '\n');
+  });
+  sock.on('error', () => {});
+}).listen(join(STATE, 'ikon.sock'), res));
+
+const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+  env: { ...process.env, CMCP_STATE_DIR: STATE, CMCP_MODE: 'allow', CMCP_HELPER: HJ.sti, CMCP_ASK_TIMEOUT: '3',
+         CMCP_STATUS_IKON: '0', CMCP_OSASCRIPT: SP.sti, CMCP_BACKGROUND: '1' },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = ''; const v = new Map(); let n = 0;
+srv.stdout.on('data', d => { buf += d; let i;
+  while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1);
+    try { const m = JSON.parse(l); v.get(m.id)?.(m); v.delete(m.id); } catch {} } });
+const rpc = (method, params = {}) => new Promise((res, rej) => { const id = ++n; v.set(id, res);
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+  setTimeout(() => rej(new Error('timeout ' + method)), 30000); });
+const kald = async (name, args) => { const r = await rpc('tools/call', { name, arguments: args });
+  return { fejl: !!r.result?.isError, tekst: r.result?.content?.[0]?.text || JSON.stringify(r.error || {}) }; };
+const handlinger = () => HJ.handlingerNaaedeFrem().map(k => k.argv[0]);
+
+try {
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'chat-sende', version: '1' } });
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+
+  // 0. At skrive et udkast er IKKE at sende: ingen spoergsmaal.
+  let foer = spurgt.length;
+  const s0 = await kald('computer_type', { app: 'WhatsApp', text: 'computer-MCP virker' });
+  check('0 et udkast uden linjeskift skrives uden at spoerge', !s0.fejl && spurgt.length === foer && handlinger().includes('type'), s0.tekst.slice(0, 90));
+
+  // (a) Send-knappen: spoerger, med modtager og tekst fra SKAERMEN.
+  foer = spurgt.length; ikonSvar = 'ja';
+  const sa = await kald('computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' });
+  const qa = spurgt[foer];
+  check('a send-knappen spoerger mennesket', !!qa, `${spurgt.length - foer} spoergsmaal`);
+  check('a ...og viser hvem det gaar til, laest fra skaermen over feltet', /To \(read from the screen, above the text field\): Benjamin Riber/.test(qa?.text || ''), qa?.text);
+  check('a ...og hele beskeden, laest tilbage fra feltet', /computer-MCP virker/.test(qa?.text || ''), qa?.text);
+  check('a ...kun for denne ene besked', /this one action only/.test(qa?.scope || '') && /cannot be taken back/.test(qa?.scope || ''), qa?.scope);
+  check('a ...og efter ja blev der trykket', !sa.fejl && handlinger().filter(x => x === 'press').length === 1, sa.tekst.slice(0, 90));
+
+  // En knap der IKKE sender, spoerger ikke.
+  foer = spurgt.length; svar({ 'press --dry': { would_press: { name: 'Attach', role: 'AXButton' } } });
+  await kald('computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Attach' });
+  check('a2 en knap der ikke sender, spoerger ikke', spurgt.length === foer, `${spurgt.length - foer}`);
+  svar();
+
+  // (b) Return og Enter - med ethvert ekstra modifikator - spoerger. Et nej = intet sendt.
+  ikonSvar = 'nej';
+  for (const combo of ['return', 'enter', 'cmd+return', 'cmd+cmd+return', 'shift+enter', 'cmd+shift+d']) {
+    foer = spurgt.length; const k0 = handlinger().filter(x => x === 'key').length;
+    const r = await kald('computer_key', { app: 'WhatsApp', combo });
+    check(`b «${combo}» spoerger, og uden ja sendes intet`, spurgt.length === foer + 1 && r.fejl
+          && handlinger().filter(x => x === 'key').length === k0, r.tekst.slice(0, 80));
+  }
+
+  // (c) Et linjeskift i teksten er en usynlig afsendelse: afvist, intet skrevet.
+  for (const [navn, t] of [['\\n', 'hej\nmed dig'], ['\\r', 'hej\r'], ['U+2028', 'hej
']]) {
+    foer = spurgt.length; const t0 = handlinger().filter(x => x === 'type').length;
+    const r = await kald('computer_type', { app: 'WhatsApp', text: t });
+    check(`c linjeskift (${navn}) i en beskedapp: afvist, intet skrevet`, r.fejl && /line break sends/.test(r.tekst)
+          && handlinger().filter(x => x === 'type').length === t0 && spurgt.length === foer, r.tekst.slice(0, 80));
+  }
+
+  // (d) Modellen kan ikke skrive modtageren: dens egne ord naar ikke spoergsmaalet.
+  foer = spurgt.length; ikonSvar = 'nej';
+  await kald('computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send', contains: 'to Mom' });
+  const qd = spurgt[foer];
+  check('d en falsk modtager fra modellen naar ikke spoergsmaalet', !!qd && !/Mom/.test(qd.text) && /Benjamin Riber/.test(qd.text), qd?.text);
+
+  // Et klik paa en send-knap spoerger ogsaa - og et klik der ikke kan bestemmes, spoerger.
+  foer = spurgt.length;
+  svar({ at: { found: true, bundleId: WA, role: 'AXButton', title: '', description: 'Send', ...KNAP } });
+  await kald('computer_click', { app: 'WhatsApp', x: 500, y: 500 });
+  check('d2 et klik paa send-knappen spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length;
+  svar({ at: { found: true, bundleId: 'com.apple.finder', role: 'AXButton', title: 'Other' } });
+  const kd3 = handlinger().filter(x => x === 'click').length;
+  const d3 = await kald('computer_click', { app: 'WhatsApp', x: 500, y: 500 });
+  check('d3 et klik hvor noget andet ligger foran: fejler lukket (afvist eller spurgt), intet klikket uden ja',
+        (d3.fejl || spurgt.length === foer + 1) && handlinger().filter(x => x === 'click').length === kd3, d3.tekst.slice(0, 90));
+  svar();
+
+  // Genkontrol under laasen: mennesket siger ja - men feltet skifter foer tasten trykkes.
+  foer = spurgt.length; ikonSvar = 'ja';
+  const k0 = handlinger().filter(x => x === 'key').length;
+  foerSvar = () => svar({ samtale: { ...SAMTALE, field: { role: 'AXTextArea', value: 'en HELT anden besked' } } });
+  const g = await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+  check('g det der sendes, aendrede sig efter ja: intet sendt', g.fejl && /changed after the person approved/.test(g.tekst)
+        && handlinger().filter(x => x === 'key').length === k0, g.tekst.slice(0, 100));
+  svar();
+
+  // u (runde 1, Astra 3): kan modtager eller tekst IKKE laeses, kan et ja ikke bindes til
+  //   det der sendes - saa sendes intet, og mennesket spoerges ikke om noget ulaeseligt.
+  for (const [navn, sam] of [['modtager', { window: '', headings: [], field: { role: 'AXTextArea', value: 'hej' } }],
+                             ['tekst', { ...SAMTALE, field: { role: 'AXTextArea' } }]]) {
+    foer = spurgt.length; svar({ samtale: sam });
+    const k0 = handlinger().filter(x => x === 'key').length;
+    const r = await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+    check(`u ulaeselig ${navn}: afvist, ikke spurgt, intet sendt`, r.fejl && /could not be read/.test(r.tekst) && spurgt.length === foer
+          && handlinger().filter(x => x === 'key').length === k0, r.tekst.slice(0, 100));
+  }
+  svar();
+
+  // R6 (runde 1, Astra 1 + Fable F3): «Afsend», en navnloes ikon-knap og mellemrum paa en knap sender ogsaa.
+  ikonSvar = 'nej';
+  for (const [navn, el] of [['«Afsend»', { name: 'Afsend', role: 'AXButton' }], ['«Besvar»', { name: 'Besvar', role: 'AXButton' }],
+                            ['en navnloes knap', { role: 'AXButton' }]]) {
+    foer = spurgt.length; svar({ 'press --dry': { would_press: { ...el, ...KNAP } } });
+    await kald('computer_press', { app: 'WhatsApp', role: 'AXButton', index: 3 });
+    check(`r6 ${navn} spoerger`, spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  }
+  // Med fokus paa knappen kan beskedteksten ikke laeses -> afvist (fejl lukket). Det der
+  // taeller: tasten naar aldrig frem uden et ja.
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, field: { role: 'AXButton' } } });
+  const ks = handlinger().filter(x => x === 'key').length;
+  const sp = await kald('computer_key', { app: 'WhatsApp', combo: 'space' });
+  check('r6 mellemrum med fokus paa en knap: behandlet som send (her afvist), tasten trykkes ikke', sp.fejl
+        && /could not be read/.test(sp.tekst) && handlinger().filter(x => x === 'key').length === ks, sp.tekst.slice(0, 90));
+  foer = spurgt.length; svar();
+  const ksp = handlinger().filter(x => x === 'key').length;
+  const spt = await kald('computer_key', { app: 'WhatsApp', combo: 'space' });
+  check('r6 ...men mellemrum i tekstfeltet spoerger ikke - og tasten trykkes', spurgt.length === foer && !spt.fejl
+        && handlinger().filter(x => x === 'key').length === ksp + 1, `${spurgt.length - foer} · ${spt.tekst.slice(0, 60)}`);
+
+  // R6 (Fable P3): en webchat i en browser er ogsaa en afsendelse - en almindelig side er ikke.
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'WhatsApp - Google Chrome' } });
+  await kald('computer_key', { app: 'Google Chrome', combo: 'return' });
+  check('r6 Return i WhatsApp Web i en browser spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'Wikipedia - Google Chrome' } });
+  const k1 = handlinger().filter(x => x === 'key').length;
+  await kald('computer_key', { app: 'Google Chrome', combo: 'return' });
+  check('r6 ...Return paa en almindelig side spoerger ikke', spurgt.length === foer && handlinger().filter(x => x === 'key').length === k1 + 1, `${spurgt.length - foer}`);
+
+  // R7 (Fable F8): i mail er Return en ny linje - og en mail med afsnit kan skrives.
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'Ny besked' } });
+  const t1 = handlinger().filter(x => x === 'type').length;
+  const mt = await kald('computer_type', { app: 'Mail', text: 'Hej Benjamin,\n\ncomputer-MCP virker.' });
+  check('r7 en mail med afsnit skrives uden at spoerge', !mt.fejl && spurgt.length === foer && handlinger().filter(x => x === 'type').length === t1 + 1, mt.tekst.slice(0, 80));
+  foer = spurgt.length;
+  const kmr = handlinger().filter(x => x === 'key').length;
+  const mr = await kald('computer_key', { app: 'Mail', combo: 'return' });
+  check('r7 Return i mail spoerger ikke - og tasten trykkes', spurgt.length === foer && !mr.fejl
+        && handlinger().filter(x => x === 'key').length === kmr + 1, `${spurgt.length - foer} · ${mr.tekst.slice(0, 60)}`);
+  foer = spurgt.length;
+  await kald('computer_key', { app: 'Mail', combo: 'cmd+return' });
+  check('r7 Cmd+Return i mail spoerger (Fable R2 8)', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length;
+  await kald('computer_key', { app: 'Mail', combo: 'cmd+shift+d' });
+  check('r7 ...men cmd+shift+D i mail spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length; svar();
+  const ctl = await kald('computer_type', { app: 'WhatsApp', text: 'hej\u0003' });
+  check('r7 andre styretegn i en chat afvises ogsaa (Fable F4)', ctl.fejl && /line break sends/.test(ctl.tekst), ctl.tekst.slice(0, 80));
+
+  // R4 (runde 1, Astra 2): et klik der pegede paa Attach ved dommen og paa Send under
+  //   laasen, maa ikke gaa igennem. Proeven holder laasen og skifter knappen imens.
+  svar({ at: { found: true, bundleId: WA, role: 'AXButton', title: 'Attach', description: '' } });
+  const LAAS = join(STATE, 'laase'); mkdirSync(LAAS, { recursive: true });
+  writeFileSync(join(LAAS, WA + '.lock'), String(process.pid));
+  const c0 = handlinger().filter(x => x === 'click').length;
+  foer = spurgt.length;
+  const atFoer = HJ.kald().filter(k => k.argv[0] === 'at').length;
+  const venter = kald('computer_click', { app: 'WhatsApp', x: 500, y: 500 });
+  // ⛔ 1/10: her stod en fast ventetid paa 1,2 s - under last naaede dommen ikke at se
+  //    «Attach» foer knappen blev byttet (1 af 3 roede paa Gustavs Mac). Nu ventes der
+  //    til serveren HAR slaaet knappen op, og saa en ekstra tand for at den naar laasen.
+  for (let i = 0; i < 100 && HJ.kald().filter(k => k.argv[0] === 'at').length === atFoer; i++) await new Promise(r => setTimeout(r, 100));
+  await new Promise(r => setTimeout(r, 400));
+  svar({ at: { found: true, bundleId: WA, role: 'AXButton', title: 'Send', description: '' } });
+  unlinkSync(join(LAAS, WA + '.lock'));
+  const r4 = await venter;
+  check('r4 Attach ved dommen, Send under laasen: intet klikket', r4.fejl && /changed after the person approved/.test(r4.tekst)
+        && handlinger().filter(x => x === 'click').length === c0, r4.tekst.slice(0, 100));
+  svar();
+
+  // R5 (runde 1, Astra 3): en ny overskrift eller vinduestitel efter ja er en anden samtale.
+  foer = spurgt.length; ikonSvar = 'ja';
+  const k2 = handlinger().filter(x => x === 'key').length;
+  foerSvar = () => svar({ samtale: { ...SAMTALE, headings: ['Benjamin Riber', 'online', 'Alice'], window: 'Alice' } });
+  const g2 = await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+  check('r5 samtalen skiftede efter ja (tredje overskrift, titel): intet sendt', g2.fejl && /changed after the person approved/.test(g2.tekst)
+        && handlinger().filter(x => x === 'key').length === k2, g2.tekst.slice(0, 100));
+  svar();
+  // r5b: KUN vinduets titel skifter (samme overskrifter, samme tekst) - et andet vindue
+  //      er en anden samtale. Det er fingeraftrykkets del; beskrivelsen ser det ikke.
+  const k3 = handlinger().filter(x => x === 'key').length;
+  foerSvar = () => svar({ samtale: { ...SAMTALE, window: 'WhatsApp - Alice' } });
+  const g3 = await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+  check('r5b kun vinduet skiftede efter ja: intet sendt', g3.fejl && /changed after the person approved/.test(g3.tekst)
+        && handlinger().filter(x => x === 'key').length === k3, g3.tekst.slice(0, 100));
+  svar();
+  // Q3 (runde 2, Astra 3): binding til modtager, felt og vindue.
+  ikonSvar = 'nej';
+  const afvist = async (navn, sam, ekstra, kaldet = ['computer_key', { app: 'WhatsApp', combo: 'return' }], grund = /could not|not in the conversation/) => {
+    foer = spurgt.length; svar({ samtale: sam, ...ekstra });
+    const r = await kald(...kaldet);
+    check(navn, r.fejl && grund.test(r.tekst) && spurgt.length === foer, r.tekst.slice(0, 110));
+  };
+  await afvist('q3 uden kolonne (feltets placering ulaeselig): afvist, ikke spurgt', { ...SAMTALE, column: false }, {});
+  await afvist('q3 et soegefelt med fokus er ikke en besked: afvist', { ...SAMTALE, field: { role: 'AXTextField', subrole: 'AXSearchField', value: 'Benjamin' } }, {});
+  await afvist('q3 Send-knappens vindue kan ikke laeses: afvist (Astra R3 2)', SAMTALE,
+               { 'press --dry': { would_press: { name: 'Send', role: 'AXButton', frame: KNAP.frame } } },
+               ['computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' }]);
+  await afvist('q3 Send-knappen ligger ikke ved beskedfeltet: afvist', SAMTALE,
+               { 'press --dry': { would_press: { name: 'Send', role: 'AXButton', window: 'WhatsApp', frame: { x: 570, y: 80, w: 30, h: 30 } } } },
+               ['computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' }]);
+  // Runde 4 (Astra 2): tre veje uden om bindingen.
+  await afvist('r4a samme titel og hoejde, men langt til hoejre for feltet: afvist', SAMTALE,
+               { 'press --dry': { would_press: { name: 'Send', role: 'AXButton', window: 'WhatsApp', frame: { x: 1500, y: 605, w: 30, h: 30 } } } },
+               ['computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' }]);
+  {
+    foer = spurgt.length; svar({ samtale: SAMTALE, 'press --dry': { ok: false, error: 'opslaget fejlede', code: 'ax-timeout' } });
+    const p0 = handlinger().filter(x => x === 'press').length;
+    const r = await kald('computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' });
+    check('r4b opslaget af Send-kontrollen fejler: afvist, ikke spurgt, intet trykket', r.fejl && spurgt.length === foer
+          && handlinger().filter(x => x === 'press').length === p0, r.tekst.slice(0, 110));
+  }
+  // r4e (7/10, fuld mutantport paa 0.2.2-kandidaten): siden punkt I afviser tryk-porten
+  //    allerede et fejlet «press --dry», saa r4b naar aldrig bindingen - mutant R4 overlevede.
+  //    Et KLIK med navngivet app har ingen tidlig afvisning: et fejlet opslag af kontrollen
+  //    under punktet skal stadig binde - afvist, ikke spurgt, intet klikket.
+  {
+    foer = spurgt.length; svar({ samtale: SAMTALE, at: { ok: false, error: 'opslaget fejlede', code: 'ax-timeout' } });
+    const c0 = handlinger().filter(x => x === 'click').length;
+    const r = await kald('computer_click', { app: 'WhatsApp', x: 585, y: 620 });
+    check('r4e opslaget af kontrollen under et klik fejler: afvist, ikke spurgt, intet klikket', r.fejl && spurgt.length === foer
+          && handlinger().filter(x => x === 'click').length === c0, r.tekst.slice(0, 110));
+  }
+  {
+    foer = spurgt.length;
+    svar({ samtale: { ...SAMTALE, window: 'Wikipedia - Google Chrome' },
+           'press --dry': { would_press: { name: 'Send', role: 'AXButton', window: 'WhatsApp - Google Chrome', frame: KNAP.frame } } });
+    const p0 = handlinger().filter(x => x === 'press').length;
+    const r = await kald('computer_press', { app: 'Google Chrome', role: 'AXButton', title: 'Send' });
+    check('r4c browser: fokus paa en almindelig side, Send i et WhatsApp-vindue: aldrig trykket uden ja', (r.fejl || spurgt.length === foer + 1)
+          && handlinger().filter(x => x === 'press').length === p0, r.tekst.slice(0, 110));
+  }
+  {
+    // r4d (runde 5, Astra 2): browser, fokus paa en almindelig side, Send-kontrol hvis vindue
+    //      IKKE kan laeses -> ukendt vindue, doemmes som en chat: aldrig trykket uden ja.
+    foer = spurgt.length;
+    svar({ samtale: { ...SAMTALE, window: 'Wikipedia - Google Chrome' },
+           'press --dry': { would_press: { name: 'Send', role: 'AXButton', frame: KNAP.frame } } });
+    const p0 = handlinger().filter(x => x === 'press').length;
+    const r = await kald('computer_press', { app: 'Google Chrome', role: 'AXButton', title: 'Send' });
+    check('r4d browser: Send-kontrol med ulaeseligt vindue: aldrig trykket uden ja', (r.fejl || spurgt.length === foer + 1)
+          && handlinger().filter(x => x === 'press').length === p0, r.tekst.slice(0, 110));
+  }
+  await afvist('q3 Send-knappen ligger i et andet vindue end samtalen: afvist', SAMTALE,
+               { 'press --dry': { would_press: { name: 'Send', role: 'AXButton', window: 'Arkiv', frame: KNAP.frame } } },
+               ['computer_press', { app: 'WhatsApp', role: 'AXButton', title: 'Send' }]);
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, headings: ['Benjamin Riber', 'online', 'hej ses i morgen'] } });
+  await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+  const qTo = spurgt[foer]?.text || '';
+  check('q3 kun den foerste overskrift vises som modtager (Fable R2 4)', /To \(read from the screen, above the text field\): Benjamin Riber Message/.test(qTo) && !/ses i morgen/.test(qTo), qTo.slice(0, 160));
+
+  // W (1/10, MAALT i Gustavs rigtige WhatsApp): navnet staar i en KNAP oeverst i samtalen,
+  //   og overskrifterne over feltet er datoer. Hjaelperens «recipient» vinder over dem.
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, headings: ['I dag'], recipient: 'Benjamin Riber' } });
+  await kald('computer_key', { app: 'WhatsApp', combo: 'return' });
+  const qW = spurgt[foer]?.text || '';
+  check('w1 modtageren fra samtalens top vises - ikke datoen over feltet', /: Benjamin Riber Message/.test(qW) && !/: I dag Message/.test(qW), qW.slice(0, 160));
+  // ...og uden modtager og uden overskrifter: afvist som foer (intet gaettes).
+  await afvist('w2 hverken modtager eller overskrift: intet sendt', { ...SAMTALE, headings: [] }, {},
+               ['computer_key', { app: 'WhatsApp', combo: 'return' }]);
+
+  // Q4 (runde 2, Astra 4 + Fable 7): browseren.
+  await afvist('q4 browser med ulaeselig titel behandles som chat (fejl lukket): intet sendt', { window: '', headings: [], field: {} }, {},
+               ['computer_key', { app: 'Google Chrome', combo: 'return' }]);
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'Gmail - Slack' } });
+  await kald('computer_key', { app: 'Google Chrome', combo: 'return' });
+  check('q4 «Gmail - Slack» er en chat: Return spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'Signal processing - Wikipedia' } });
+  const kw = handlinger().filter(x => x === 'key').length;
+  await kald('computer_key', { app: 'Google Chrome', combo: 'return' });
+  check('q4 «Signal processing - Wikipedia» er ikke en chat', spurgt.length === foer && handlinger().filter(x => x === 'key').length === kw + 1, `${spurgt.length - foer}`);
+  foer = spurgt.length; svar({ samtale: { ...SAMTALE, window: 'Inbox (3) - x@gmail.com - Gmail' } });
+  await kald('computer_key', { app: 'Google Chrome', combo: 'return' });
+  check('q4 webmail: Return spoerger ikke', spurgt.length === foer, `${spurgt.length - foer}`);
+  foer = spurgt.length;
+  await kald('computer_key', { app: 'Google Chrome', combo: 'cmd+return' });
+  check('q4 webmail: Cmd+Return spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+
+  // Q9 (runde 2, Fable 2): et klik paa en navnloes GRUPPE er ikke en send; paa en navnloes KNAP er det.
+  foer = spurgt.length; svar({ at: { found: true, bundleId: WA, role: 'AXGroup', title: '', description: '' } });
+  const kc = handlinger().filter(x => x === 'click').length;
+  const gk = await kald('computer_click', { app: 'WhatsApp', x: 300, y: 300 });
+  check('q9 klik paa en navnloes gruppe: ikke en afsendelse, klikket sker', spurgt.length === foer && !gk.fejl
+        && handlinger().filter(x => x === 'click').length === kc + 1, gk.tekst.slice(0, 80));
+  foer = spurgt.length; svar({ at: { found: true, bundleId: WA, role: 'AXButton', title: '', description: '', ...KNAP } });
+  await kald('computer_click', { app: 'WhatsApp', x: 300, y: 300 });
+  check('q9 klik paa en navnloes knap spoerger', spurgt.length === foer + 1, `${spurgt.length - foer}`);
+  // Runde 3 (Astra 3): en UKENDT rolle (opslaget fejlede) er ikke ufarlig ved et klik.
+  foer = spurgt.length; svar({ at: { found: true, bundleId: WA, role: '', title: '', description: '', ...KNAP } });
+  const kq = handlinger().filter(x => x === 'click').length;
+  await kald('computer_click', { app: 'WhatsApp', x: 300, y: 300 });
+  check('q9 klik paa et element med ukendt rolle spoerger, klikkes ikke uden ja', spurgt.length === foer + 1
+        && handlinger().filter(x => x === 'click').length === kq, `${spurgt.length - foer}`);
+  svar();
+
+  check('ingen dialog blev rejst i hele proeven', SP.gangeSpurgt() === 0, `${SP.gangeSpurgt()}`);
+} finally {
+  srv.kill();
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/server-e2e.mjs b/test/server-e2e.mjs
index 522ab1ac..f0c789ac 100644
--- a/test/server-e2e.mjs
+++ b/test/server-e2e.mjs
@@ -1,5 +1,7 @@
 // Taler MCP-protokollen mod serveren som en rigtig klient ville.
 // Koeres i readonly, saa der ikke popper samtykke-dialoger op i en proeve.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
 import { spawn } from 'child_process';
 import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';
@@ -214,7 +216,17 @@ try {
   }
 
   // Skrivende vaerktoej i readonly SKAL afvises
+  // ⛔ 7/10: (10,10) blev slaaet op paa menneskets RIGTIGE skaerm. Laa der en
+  //    Send-knap i en beskedapp, afviste sende-porten foerst («could not be tied to
+  //    the text field») - ogsaa en afvisning, men ikke den proeven er navngivet
+  //    efter. Et fast, neutralt svar paa `at` OG paa programlisten (sende-porten
+  //    tager programmet fra det forreste, `apps --all` -> `active`; stod en browser
+  //    med en webchat forrest, var klikket en mulig afsendelse) lige omkring dette
+  //    ene kald goer det readonly-reglen der afviser, uanset hvad der staar paa skaermen.
+  attrap.saetSvar({ at: { found: true, bundleId: 'com.apple.finder', role: 'AXGroup', title: '' },
+                    apps: { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', pid: 4241, active: true }] } });
   const click = await rpc('tools/call', { name: 'computer_click', arguments: { x: 10, y: 10 } });
+  attrap.saetSvar({});
   const ctxt = click.result?.content?.[0]?.text || '';
   check('klik afvist i readonly', click.result?.isError === true && /readonly/.test(ctxt), ctxt.slice(0, 60).replace(/\s+/g, ' '));
 
diff --git a/test/sessionsport.mjs b/test/sessionsport.mjs
index b8ff1af5..28b9a566 100644
--- a/test/sessionsport.mjs
+++ b/test/sessionsport.mjs
@@ -13,6 +13,8 @@
 //
 // ⛔ Attrap-spoerger, saa ingen aegte dialog kan naa menneskets skaerm, og
 //    attrap-hjaelper, saa intet udfoeres.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -24,12 +26,27 @@ const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const fails = [];
 const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
 
+// ⛔ 7/10: knappen «x» findes ikke. Siden F5 (77ba8b6) er et tryk, hvis maal
+//    `press --dry` ikke kan vise, en farlig handling, der spoerger HVER gang -
+//    med vilje. Proeven maalte derfor F5-vagten, ikke session-rabatten, og faldt
+//    paa enhver Mac hvor et program fra session-listen koerer (Gustavs: hans IDE).
+//    GitHubs Mac har intet saadant program og sprang punkt 1-3 over, saa CI saa
+//    det aldrig. Et fast, harmloest dry-svar maaler reglen proeven er navngivet efter.
 function klient(spoerger) {
+  const hj = lavFalskHjaelper('cmcp-sesport');
+  // ⛔ R6 (Astra): ogsaa programlisten er fast. Ellers afhang punkt 1-3 af hvad der
+  //    koerer: uden session-program sprang hele filen over, og uden Noeglering blev
+  //    maalet null, saa `unknownTarget` - ikke adgangskode-reglen - gav dialog nr. 2.
+  hj.saetSvar({
+    'press --dry': { would_press: { name: 'OK', role: 'AXButton' } },
+    apps: { apps: [{ name: 'Agent360 IDE', bundleId: SESSIONS_APP, pid: 4242 },
+                   { name: 'Keychain Access', bundleId: 'com.apple.keychainaccess', pid: 4243 }] },
+  });
   const env = {
     ...process.env,
     CMCP_MODE: 'allow', CMCP_BACKGROUND: '0',
     CMCP_ASK_TIMEOUT: '1',
-    CMCP_HELPER: lavFalskHjaelper('cmcp-sesport').sti,
+    CMCP_HELPER: hj.sti,
     CMCP_OSASCRIPT: spoerger.sti,
     CMCP_STATE_DIR: mkdtempSync(join(tmpdir(), 'cmcp-sesport-')),
   };
@@ -56,18 +73,13 @@ function klient(spoerger) {
 //    «ukendt» - og porten spurgte hver gang af en HELT anden grund. Proeven
 //    sagde «session-rabatten virker ikke»; den maalte ukendt-maal-porten.
 //    Et program skal koere for at kunne opsloes. Vi vaelger derfor et der goer.
+//    7/10 (R6, Astra): «et der koerer» gjorde udfaldet afhaengigt af maskinen -
+//    paa GitHubs Mac koerte intet, og punkt 1-3 sprang over. Nu er maalet fast,
+//    og programlisten svares af attrappen (se `klient`), saa det altid kan opsloes.
 const { SPOERG_PR_SESSION: LISTE } = await import(join(ROOT, 'mcp-server', 'policy.js'));
-const koerende = (await import('node:child_process')).execSync(
-  `"${lavFalskHjaelper('cmcp-opslag').sti}" apps`, { encoding: 'utf8' });
-const SESSIONS_APP = (JSON.parse(koerende).apps || [])
-  .map(a => a.bundleId).find(b => LISTE.has(b));
-if (!SESSIONS_APP) {
-  console.log('UMAALT  intet program fra session-listen koerer - punkt 1-3 kan ikke maales');
-  console.log();
-  console.log('BESTAAET');
-  process.exit(0);
-}
-console.log(`     (maaler mod ${SESSIONS_APP})`);
+const SESSIONS_APP = 'com.agent360.ide';
+if (!LISTE.has(SESSIONS_APP)) { console.log(`DUMP ${SESSIONS_APP} staar ikke paa session-listen`); console.log(); console.log('DUMPET: 1'); process.exit(1); }
+console.log(`     (maaler mod ${SESSIONS_APP}, fast programliste)`);
 
 // --- 1. Et SESSION-PROGRAM spoerger ÉN gang, ikke tre ---------------------
 {
@@ -128,12 +140,18 @@ console.log(`     (maaler mod ${SESSIONS_APP})`);
   const c = klient(sp);
   await c.rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'p', version: '1' } });
   c.srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+  // R6 (Astra): taelles efter HVERT kald, saa et forkert foerste eller andet kald
+  //    ikke kan skjules af et samlet tal der tilfaeldigvis rammer 2.
+  const efter = [];
   await c.rpc('tools/call', { name: 'computer_press', arguments: { app: SESSIONS_APP, title: 'x' } });
+  efter.push(sp.gangeSpurgt());
   await c.rpc('tools/call', { name: 'computer_press', arguments: { app: SESSIONS_APP, title: 'x' } });
+  efter.push(sp.gangeSpurgt());
   await c.rpc('tools/call', { name: 'computer_press', arguments: { app: 'com.apple.keychainaccess', title: 'x' } });
+  efter.push(sp.gangeSpurgt());
   c.srv.kill();
   check('et ja til arbejdsprogrammet daekker ikke en adgangskode-boks',
-        sp.gangeSpurgt() === 2, `${sp.gangeSpurgt()} dialoger: 1 for programmet + 1 for noeglen`);
+        efter.join(',') === '1,1,2', `dialoger efter hvert kald: ${efter.join(',')} (forventet 1,1,2)`);
 }
 
 // --- 4. Editorerne ER paa listen - det var hele hullet --------------------
diff --git a/test/skaerm-laan.mjs b/test/skaerm-laan.mjs
new file mode 100644
index 00000000..a18bf3ca
--- /dev/null
+++ b/test/skaerm-laan.mjs
@@ -0,0 +1,419 @@
+// SKAERM-LAANET: kan en agent faa skaermen - KUN naar mennesket giver den, kun
+// saa laenge, og aldrig mens mennesket selv bruger den?
+//
+// ⛔ HVORFOR DEN FINDES (29/9-2026, panelet: B2 + B5)
+//    Foer: forgrund kun via CMCP_BACKGROUND=0 og genstart, pr. proces - 21 servere
+//    kunne vaere uenige om én skaerm. Nu ejer menulinje-ikonet kontakten: mennesket
+//    laaner EN agent skaermen med Touch ID, i hoejst 15 minutter, og kan tage den
+//    tilbage. Laanet ER den aabne forbindelse; lukkes den, er skaermen menneskets.
+//
+//    Rigtig server, FALSK ikon (ingen menu, intet Touch ID), FALSK hjaelper med
+//    scriptet «idle»-svar. Intet flyttes, intet tager skaermen.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
+import { createServer } from 'node:net';
+import { spawn } from 'node:child_process';
+import { mkdtempSync, mkdirSync, writeFileSync, unlinkSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper, lavFalskSpoerger } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+const vent = ms => new Promise(r => setTimeout(r, ms));
+
+function lavIkon(state) {
+  const ikon = { svar: 'ja', laanMs: 60_000, spurgt: [], laan: null, lukketAfServer: 0, koe: [] };
+  // Skaerm-koe (2/10): naar det aktive laan slutter, svares den AELDSTE ventende
+  // skaerm-anmodning «ja» - ingen ny forespoergsel noedvendig (ikke en afvisning).
+  // ⛔ MAALT: en lokal .destroy() udloeser «close» paa EGEN socket, ikke «end»
+  //    («end» er kun for en FJERN-afsendt FIN) - saa koeen rykker videre paa
+  //    «close», som faar naar laanet slutter uanset hvem der lukkede det.
+  const naesteIKoe = () => {
+    const n = ikon.koe.shift();
+    if (!n) return;
+    ikon.laan = n.sock;
+    n.sock.on('close', () => { if (ikon.laan === n.sock) ikon.laan = null; naesteIKoe(); });
+    try { n.sock.write(JSON.stringify({ nonce: n.q.nonce, ok: true, verified: 'owner', until: Date.now() + ikon.laanMs }) + '\n'); } catch {}
+  };
+  return new Promise(res => createServer(sock => {
+    let buf = '', svaret = false;
+    sock.on('data', d => {
+      if (svaret) return;
+      buf += d; const i = buf.indexOf('\n'); if (i < 0) return;
+      const q = JSON.parse(buf.slice(0, i)); ikon.spurgt.push(q); svaret = true;
+      if (ikon.svar === 'koe' && q.kind === 'screen') {
+        if (ikon.laan) {
+          // Et andet laan har allerede skaermen: staar i koen, IKKE afvist -
+          // serveren venter selv (skaermVentetid()), fake-ikonet svarer foerst
+          // naar koen aabner (naesteIKoe).
+          ikon.koe.push({ sock, q });
+          sock.on('close', () => { ikon.koe = ikon.koe.filter(x => x.sock !== sock); });
+        } else {
+          ikon.laan = sock;
+          sock.on('close', () => { if (ikon.laan === sock) ikon.laan = null; naesteIKoe(); });
+          sock.write(JSON.stringify({ nonce: q.nonce, ok: true, verified: 'owner', until: Date.now() + ikon.laanMs }) + '\n');
+        }
+      } else if (ikon.svar === 'langsom') {            // svarer ja efter 800 ms
+        setTimeout(() => { try { sock.write(JSON.stringify({ nonce: q.nonce, ok: true, verified: 'owner', until: Date.now() + ikon.laanMs }) + '\n'); } catch {} }, 800);
+        ikon.laan = sock; sock.on('end', () => { ikon.lukketAfServer++; });
+      } else if (ikon.svar === 'ja') {
+        sock.write(JSON.stringify({ nonce: q.nonce, ok: true, verified: 'owner', until: Date.now() + ikon.laanMs }) + '\n');
+        ikon.laan = sock;                       // forbindelsen holdes AABEN: den er laanet
+        sock.on('end', () => { ikon.lukketAfServer++; });
+      } else if (ikon.svar === 'optaget') {
+        sock.end(JSON.stringify({ nonce: q.nonce, ok: false, verified: 'optaget' }) + '\n');
+      } else {
+        sock.end(JSON.stringify({ nonce: q.nonce, ok: false, verified: 'none' }) + '\n');
+      }
+    });
+    sock.on('error', () => {});
+  }).listen(join(state, 'ikon.sock'), () => res(ikon)));
+}
+
+function server(state, hj, ekstra = {}) {
+  const sp = lavFalskSpoerger('ja', 'cmcp-laan-sp');
+  // Menneske-graensen er 5 s her (standard 1,5): prooverne af attribution maa ikke
+  // afhaenge af hvor hurtigt en belastet maskine svarer (5d var ustabil, 30/9).
+  const env = { ...process.env, CMCP_STATE_DIR: state, CMCP_MODE: 'allow', CMCP_HELPER: hj.sti, CMCP_MENNESKE_SEK: '5',
+                CMCP_ASK_TIMEOUT: '3', CMCP_STATUS_IKON: '0', CMCP_OSASCRIPT: sp.sti, ...ekstra };
+  if (!('CMCP_BACKGROUND' in ekstra)) delete env.CMCP_BACKGROUND;
+  const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], { env, stdio: ['pipe', 'pipe', 'pipe'] });
+  let buf = ''; const v = new Map(); let n = 0; const meldt = [];
+  srv.stdout.on('data', d => { buf += d; let i;
+    while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1);
+      try { const m = JSON.parse(l); if (m.method) meldt.push(m.method); else { v.get(m.id)?.(m); v.delete(m.id); } } catch {} } });
+  const rpc = (method, params = {}) => new Promise((res, rej) => { const id = ++n; v.set(id, res);
+    srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
+    setTimeout(() => rej(new Error('timeout ' + method)), 30000); });
+  return {
+    srv, sp, meldt,
+    async klar() { await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'chat-laan', version: '1' } });
+      srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n'); },
+    async navne() { return ((await rpc('tools/list')).result?.tools || []).map(t => t.name); },
+    async kald(name, args) { const r = await rpc('tools/call', { name, arguments: args });
+      return { fejl: !!r.result?.isError, tekst: r.result?.content?.[0]?.text || JSON.stringify(r.error || {}) }; }
+  };
+}
+const listeMeldt = (s) => s.meldt.filter(m => m === 'notifications/tools/list_changed').length;
+
+const STATE = mkdtempSync(join(tmpdir(), 'cmcp-laan-'));
+const HJ = lavFalskHjaelper('cmcp-laan');
+// «Hvad er forrest» SKAL vaere scriptet: ellers svarer den rigtige Mac, og proevens
+// programlaas rammer et andet program end kaldet (6b var groen af den grund, 30/9).
+const APPS = { apps: [{ name: 'Finder', bundleId: 'com.apple.finder', active: true }, { name: 'TextEdit', bundleId: 'com.apple.TextEdit', active: false }] };
+// Og «hvem ejer punktet» (at) ogsaa: ellers laeses menneskets RIGTIGE skaerm, og
+// prooven afhaenger af hvad der ligger under (5,5) (kørsel 2, 30/9: WhatsApp).
+const AT = { found: true, bundleId: 'com.apple.finder', role: 'AXWindow', title: '', description: '', under: [] };
+const saet = (o) => HJ.saetSvar({ apps: APPS, at: AT, ...o });
+saet({ idle: { idle: 30 } });
+const ikon = await lavIkon(STATE);
+const S = server(STATE, HJ);
+const flyt = () => HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'move').length;
+try {
+  await S.klar();
+  let navne = await S.navne();
+  check('1 i baggrund: move er skjult, request_screen tilbydes', !navne.includes('computer_move') && navne.includes('computer_request_screen'));
+  const r0 = await S.kald('computer_move', { x: 5, y: 5 });
+  check('1b ...og move afvises, med vejen til at bede om skaermen', r0.fejl && /computer_request_screen/.test(r0.tekst), r0.tekst.slice(0, 90));
+
+  const uden = await S.kald('computer_request_screen', { action: 'request' });
+  check('2 uden grund: afvist, ikonet ikke spurgt', uden.fejl && /reason/.test(uden.tekst) && ikon.spurgt.length === 0, uden.tekst.slice(0, 80));
+
+  // 3. Mennesket giver skaermen.
+  const foerMeld = listeMeldt(S);
+  const ja = await S.kald('computer_request_screen', { action: 'request', reason: 'drag the file to the Trash', minutes: 5 });
+  const q = ikon.spurgt[0];
+  check('3 laanet: givet', !ja.fejl && /"granted":\s*true/.test(ja.tekst), ja.tekst.slice(0, 90));
+  check('3 ...ikonet blev spurgt om SKAERMEN, med grund og minutter', q?.kind === 'screen' && q?.minutes === 5 && /drag the file/.test(q?.text || ''), JSON.stringify(q || {}).slice(0, 140));
+  check('3 ...og det siger at agenten pauser og at skaermen kan tages tilbage', /waits if you are using the keyboard or mouse/.test(q?.scope || '') && /Take the screen back/.test(q?.scope || ''), q?.scope);
+  await vent(200);
+  navne = await S.navne();
+  check('3 ...klienten faar besked om at vaerktoejerne aendrede sig', listeMeldt(S) > foerMeld, `${listeMeldt(S) - foerMeld} meldinger`);
+  check('3 ...og move tilbydes nu', navne.includes('computer_move'));
+
+  // 4. Med laanet: move virker - naar mennesket IKKE bruger maskinen.
+  const m1 = await S.kald('computer_move', { x: 5, y: 5 });
+  check('4 med laanet og ingen menneske-input: move udfoeres', !m1.fejl && flyt() === 1, m1.tekst.slice(0, 80));
+  // 5. Mennesket bruger musen: agenten venter, intet flyttes.
+  await vent(700);
+  saet({ idle: { idle: 0.1 } });
+  const m2 = await S.kald('computer_move', { x: 6, y: 6 });
+  check('5 mennesket bruger maskinen: agenten venter, intet flyttes', m2.fejl && /using the keyboard or mouse/.test(m2.tekst) && flyt() === 1, m2.tekst.slice(0, 100));
+  saet({ idle: { idle: 'ulaeseligt' } });   // scriptet: aldrig den rigtige hjaelper
+  const m2b = await S.kald('computer_move', { x: 6, y: 6 });
+  check('5b kan det ikke laeses om mennesket er der: intet flyttes', m2b.fejl && flyt() === 1, m2b.tekst.slice(0, 100));
+  saet({ idle: { idle: 30 } });
+
+  // 5c (runde 1, Astra 5 + Fable F2): pausen gaelder OGSAA stille kald med `app` under laanet.
+  const t0 = HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'type').length;
+  await vent(600);
+  saet({ idle: { idle: 0.1 } });
+  const ty = await S.kald('computer_type', { app: 'Finder', text: 'x' });
+  check('5c under laanet pauser ogsaa et stille kald med app', ty.fejl && /using the keyboard or mouse/.test(ty.tekst)
+        && HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'type').length === t0, ty.tekst.slice(0, 90));
+  // 5d (Fable): input der er AELDRE end vores egen sidste handling, er vores eget - ingen pause.
+  saet({ idle: { idle: 30 } });
+  const forr5d = await S.kald('computer_move', { x: 5, y: 5 });
+  check('forudsaetning 5d: flytningen foer blev udfoert', !forr5d.fejl, forr5d.tekst.slice(0, 120));
+  await vent(200);
+  saet({ idle: { idle: 4.5 } });                       // aeldre end vores egen handling, men under graensen
+  const egen = await S.kald('computer_move', { x: 6, y: 6 });
+  check('5d input fra foer vores egen sidste handling taeller ikke som et menneske', !egen.fejl, egen.tekst.slice(0, 90));
+  // 5e (runde 4, Astra 3 + Fable 1): en skrivning via tilgaengeligheds-laget POSTER intet
+  //    input - den maa ikke goere menneskets input fra foer den til «vores». Sidste
+  //    rigtige input-handling ligger >3 s tilbage; AX-skrivningen lige nu.
+  await vent(3200);
+  saet({ idle: { idle: 30 }, type: { method: 'accessibility', verified: true } });
+  const ax = await S.kald('computer_type', { app: 'Finder', text: 'hej' });
+  check('forudsaetning 5e: AX-skrivningen blev udfoert', !ax.fejl, ax.tekst.slice(0, 100));
+  saet({ idle: { idle: 1.8 } });                       // input for 1,8 s siden: FOER AX-skrivningen, EFTER sidste rigtige input
+  const efterAx = await S.kald('computer_move', { x: 7, y: 7 });
+  check('5e input foer en AX-skrivning er stadig menneskets - agenten venter', efterAx.fejl && /using the keyboard or mouse/.test(efterAx.tekst), efterAx.tekst.slice(0, 100));
+  saet({ idle: { idle: 30 } });
+
+  // D (7/10, panel R8-R9): skridtet VENTER paa at mennesket holder pause (hoejst 5 s),
+  //    i stedet for at afvise og bede agenten kalde igen. Samme kald, én handling.
+  await vent(300);
+  saet({ idle: { idle: 0.1 } });
+  const fD1 = flyt(); const tD1 = Date.now();
+  setTimeout(() => saet({ idle: { idle: 30 } }), 1200);   // mennesket slipper musen efter 1,2 s
+  const d1 = await S.kald('computer_move', { x: 9, y: 9 });
+  const msD1 = Date.now() - tD1;
+  check('D1 mennesket holder pause undervejs: skridtet venter og udfoeres i SAMME kald', !d1.fejl && flyt() === fD1 + 1 && msD1 >= 1000 && msD1 < 3000,
+        `${msD1} ms · ${d1.tekst.slice(0, 60)}`);
+  await vent(300);
+  saet({ idle: { idle: 0.1 } });                            // mennesket bliver ved
+  const fD3 = flyt(); const tD3 = Date.now();
+  const d3 = await S.kald('computer_move', { x: 9, y: 9 });
+  const msD3 = Date.now() - tD3;
+  check('D3 mennesket bliver ved: afvist efter ventetiden, intet flyttes', d3.fejl && /using the keyboard or mouse/.test(d3.tekst) && flyt() === fD3
+        && msD3 >= 4500 && msD3 < 6000, `${msD3} ms · ${d3.tekst.slice(0, 60)}`);
+  // D4 (Astra R10): langsomme opslag (hvert ~1,8 s, under fristen paa 2 s) maa ikke
+  //    traekke ventetiden over loftet. Maalt paa loglinjen «executing», der skrives
+  //    lige efter ventetiden - foer den endelige vagt.
+  await vent(300);
+  saet({ idle: { idle: 0.1, _vent: 1700 } });
+  const tD4 = Date.now();
+  await S.kald('computer_move', { x: 9, y: 9 });
+  const exD4 = readFileSync(join(STATE, 'audit.jsonl'), 'utf8').trim().split('\n').map(x => JSON.parse(x))
+    .filter(x => x.tool === 'computer_move' && x.phase === 'executing').pop();
+  const msD4 = exD4 ? Date.parse(exD4.ts) - tD4 : null;
+  check('D4 langsomme opslag: ventetiden holder loftet paa 5 s', msD4 !== null && msD4 >= 4500 && msD4 < 6000, `${msD4} ms til «executing»`);
+  saet({ idle: { idle: 30 } });
+  const flytNu = flyt();
+
+  // 6. Mennesket tager skaermen tilbage: lukket forbindelse = slut.
+  const foer6 = listeMeldt(S);
+  ikon.laan.destroy();
+  await vent(300);
+  navne = await S.navne();
+  const m3 = await S.kald('computer_move', { x: 7, y: 7 });
+  check('6 skaermen taget tilbage: listen meldes, move skjult og afvist', listeMeldt(S) > foer6 && !navne.includes('computer_move') && m3.fejl && flyt() === flytNu,
+        `${listeMeldt(S) - foer6} meldinger · ${m3.tekst.slice(0, 60)}`);
+
+  // 6b (runde 1, Astra 4): et kald der VENTER paa programlaasen, mens laanet tilbagekaldes,
+  //    maa ikke udfoeres bagefter. Proeven holder selv laasen.
+  ikon.svar = 'ja'; ikon.laanMs = 60_000;
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'move the pointer', minutes: 2 });
+    check('forudsaetning: laanet til «move the pointer» blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 120)); }
+  const LAAS = join(STATE, 'laase'); mkdirSync(LAAS, { recursive: true });
+  writeFileSync(join(LAAS, 'com.apple.finder.lock'), String(process.pid));
+  const f6 = flyt();
+  const venter6 = S.kald('computer_move', { x: 9, y: 9 });
+  await vent(2000); ikon.laan.destroy(); await vent(300);   // 2 s: kaldet skal have naaet laasen (500 ms var for lidt paa en belastet maskine, 30/9)
+  unlinkSync(join(LAAS, 'com.apple.finder.lock'));
+  const r6 = await venter6;
+  check('6b laanet sluttede mens kaldet ventede paa laasen: intet flyttes', r6.fejl && /screen loan changed while this waited/.test(r6.tekst) && flyt() === f6, r6.tekst.slice(0, 90));
+
+  // 6c (runde 2, Astra 1): en STILLE skrivning (type med app) doemt under laanet, der
+  //    venter paa laasen mens laanet slutter, sker heller ikke.
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'type in Finder', minutes: 2 });
+    check('forudsaetning: laanet til «type in Finder» blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 120)); }
+  writeFileSync(join(LAAS, 'com.apple.finder.lock'), String(process.pid));
+  const ty0 = HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'type').length;
+  const venter6c = S.kald('computer_type', { app: 'Finder', text: 'x' });
+  await vent(2000); ikon.laan.destroy(); await vent(300);   // 2 s: kaldet skal have naaet laasen (500 ms var for lidt paa en belastet maskine, 30/9)
+  unlinkSync(join(LAAS, 'com.apple.finder.lock'));
+  const r6c = await venter6c;
+  check('6c en stille skrivning doemt under laanet sker ikke efter laanets slut', r6c.fejl && /screen loan changed while this waited/.test(r6c.tekst)
+        && HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'type').length === ty0, r6c.tekst.slice(0, 90));
+
+  // 6d (runde 2, Fable 3): en skrivning der KOERER naar mennesket tager skaermen tilbage, stoppes.
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'type a long text', minutes: 2 });
+    check('forudsaetning: laanet til «type a long text» blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 120)); }
+  saet({ idle: { idle: 30 }, type: { _vent: 4000, typed: 99 } });
+  const loeber = S.kald('computer_type', { app: 'Finder', text: 'en lang tekst' });
+  await vent(1200); ikon.laan.destroy();
+  const r6d = await loeber;
+  check('6d en kørende skrivning stoppes naar skaermen tages tilbage', r6d.fejl && /screen loan ended while this ran/.test(r6d.tekst), r6d.tekst.slice(0, 90));
+  saet({ idle: { idle: 30 } });
+
+  // 6f (runde 4, Astra 4): et paste der KOERER naar laanet slutter, faar besked om at
+  //    stoppe foer Cmd+V (SIGUSR1) - ikke et drab der ville tabe udklipsholderen.
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'paste a paragraph', minutes: 2 });
+    check('forudsaetning: laanet til «paste a paragraph» blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 120)); }
+  saet({ idle: { idle: 30 }, paste: { _vent: 4000, pasted: true } });
+  const pl = S.kald('computer_paste', { text: 'et langt afsnit' });
+  await vent(1500); ikon.laan.destroy();
+  const r6f = await pl;
+  const sig = HJ.kald().filter(k => k.signal === 'SIGUSR1' && k.argv[0] === 'paste').length;
+  check('6f et koerende paste faar SIGUSR1 og stopper foer Cmd+V', sig === 1 && r6f.fejl && /stopped before pasting/.test(r6f.tekst), `${sig} signal · ${r6f.tekst.slice(0, 80)}`);
+  saet({ idle: { idle: 30 } });
+
+  // 6g (runde 5, Astra 1): et kald startet UDEN laan, hvor et laan begynder OG slutter
+  //    mens det venter paa laasen. «Intet laan» foer og efter er ikke «uaendret».
+  // ⛔ 7/10 (punkt I): toerkoerslen svarer fast med en harmloes knap. Uden svar afviser
+  //    porten nu trykket FOER laasen (maalet kan ikke vises) - og saa maaler 6g ikke laanet.
+  saet({ idle: { idle: 30 }, 'press --dry': { would_press: { name: 'OK', role: 'AXButton' } } });
+  writeFileSync(join(LAAS, 'com.apple.TextEdit.lock'), String(process.pid));
+  const p6g0 = HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'press').length;
+  const venter6g = S.kald('computer_press', { app: 'TextEdit', role: 'AXButton', title: 'OK' });
+  await vent(1500);
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'a moment', minutes: 2 });
+    check('forudsaetning 6g: laanet mellem start og udfoerelse blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 100)); }
+  await S.kald('computer_request_screen', { action: 'release' });
+  await vent(300);
+  unlinkSync(join(LAAS, 'com.apple.TextEdit.lock'));
+  const r6g = await venter6g;
+  check('6g et laan der begyndte og sluttede mens kaldet ventede: intet udfoeres', r6g.fejl && /screen loan changed while this waited/.test(r6g.tekst)
+        && HJ.handlingerNaaedeFrem().filter(k => k.argv[0] === 'press').length === p6g0, r6g.tekst.slice(0, 110));
+
+  // 6e (runde 2, Astra 1): to anmodninger paa én gang fra samme agent. Den anden afvises
+  //    («already waiting»); den foerste godkendes - og naar den tages tilbage, SLUTTER den.
+  ikon.svar = 'langsom';
+  const [la, lb] = await Promise.all([
+    S.kald('computer_request_screen', { action: 'request', reason: 'first', minutes: 2 }),
+    (async () => { await vent(100); return S.kald('computer_request_screen', { action: 'request', reason: 'second', minutes: 2 }); })()]);
+  check('6e den anden samtidige anmodning afvises', lb.fejl && /already has a question waiting/.test(lb.tekst) && !la.fejl, `${la.tekst.slice(0, 40)} | ${lb.tekst.slice(0, 60)}`);
+  const meld6e = listeMeldt(S);
+  ikon.laan.destroy(); await vent(300);
+  const st6e = await S.kald('computer_request_screen', { action: 'status' });
+  check('6e ...og naar den godkendte tages tilbage, er laanet SLUT (listen meldt)', /background/.test(st6e.tekst) && listeMeldt(S) > meld6e, st6e.tekst.slice(0, 80));
+  ikon.svar = 'ja';
+
+  // D2 (7/10): laanet tages tilbage MENS skridtet venter paa pause: intet sker.
+  { const f = await S.kald('computer_request_screen', { action: 'request', reason: 'move once', minutes: 1 });
+    check('forudsaetning D2: laanet blev givet', /"granted":\s*true/.test(f.tekst), f.tekst.slice(0, 80)); }
+  await vent(300);
+  saet({ idle: { idle: 0.1 } });
+  const fD2 = flyt();
+  const pD2 = S.kald('computer_move', { x: 3, y: 3 });
+  await vent(800); ikon.laan?.destroy();
+  const d2 = await pD2;
+  check('D2 laanet taget tilbage under ventetiden: intet flyttes', d2.fejl && flyt() === fD2, d2.tekst.slice(0, 90));
+  saet({ idle: { idle: 30 } });
+  await vent(300);
+
+  // 7. Tiden udloeber: vores eget ur, ogsaa hvis ikonet ikke lukker.
+  ikon.laanMs = 1200;
+  await S.kald('computer_request_screen', { action: 'request', reason: 'move a window', minutes: 1 });
+  const lukFoer = ikon.lukketAfServer;
+  const flyt7 = flyt();
+  const meldFoer7 = listeMeldt(S);
+  await vent(1700);
+  const m4 = await S.kald('computer_move', { x: 8, y: 8 });
+  check('7 laanet udloeb: move afvist uden at ikonet lukkede', m4.fejl && flyt() === flyt7, m4.tekst.slice(0, 80));
+  await vent(200);
+  check('7 ...og serveren lukkede selv forbindelsen', ikon.lukketAfServer > lukFoer, `${ikon.lukketAfServer - lukFoer}`);
+  check('7b ...og klienten fik besked om at vaerktoejerne forsvandt (Fable F6)', listeMeldt(S) > meldFoer7, `${listeMeldt(S) - meldFoer7}`);
+
+  // 8. Agenten giver den tilbage selv.
+  ikon.laanMs = 60_000;
+  await S.kald('computer_request_screen', { action: 'request', reason: 'resize a window', minutes: 3 });
+  const lukFoer8 = ikon.lukketAfServer;
+  const rel = await S.kald('computer_request_screen', { action: 'release' });
+  await vent(200);
+  const st = await S.kald('computer_request_screen', { action: 'status' });
+  check('8 release: givet tilbage, forbindelsen lukket, status siger baggrund',
+        /"released":\s*true/.test(rel.tekst) && ikon.lukketAfServer > lukFoer8 && /background/.test(st.tekst), st.tekst.slice(0, 80));
+
+  // 9. En anden agent har skaermen: afvist, og det er ikke et menneskes nej.
+  ikon.svar = 'optaget';
+  const opt = await S.kald('computer_request_screen', { action: 'request', reason: 'x', minutes: 1 });
+  check('9 skaermen er optaget: afvist med den grund', opt.fejl && /another agent has the screen/.test(opt.tekst), opt.tekst.slice(0, 80));
+
+  // 9b (runde 1, Astra 8): en grund over loftet spoerges ikke - den klippes ikke tavst.
+  ikon.svar = 'ja';
+  const foer9b = ikon.spurgt.length;
+  const lang = await S.kald('computer_request_screen', { action: 'request', reason: 'x'.repeat(4100), minutes: 2 });
+  check('9b en grund over loftet: afvist, ikonet ikke spurgt', lang.fejl && /at most 2\d\d/.test(lang.tekst) && ikon.spurgt.length === foer9b, lang.tekst.slice(0, 90));
+  // 9c (R24, Opus MAALT: 334 tegn gav kun Deny i boksen): over 280 tegn spoerges ikke -
+  //    paa 280 spoerges der, saa Allow altid staar i boksen, naar mennesket bliver spurgt.
+  const foer9c = ikon.spurgt.length;
+  //    Serveren saetter «Use your screen for 2 minutes: » (31 tegn) foran, saa grunden har 249.
+  const over = await S.kald('computer_request_screen', { action: 'request', reason: 'y'.repeat(250), minutes: 2 });
+  const paa = await S.kald('computer_request_screen', { action: 'request', reason: 'z'.repeat(249), minutes: 2 });
+  const hel = ikon.spurgt.at(-1)?.text || '';
+  check('9c hele spoergsmaalet over 280 tegn: afvist uden spoergsmaal · paa 280: spurgt, og boksen kan vise det helt',
+    over.fejl && /at most 249/.test(over.tekst) && ikon.spurgt.length === foer9c + 1 && [...hel].length === 280 && hel.endsWith('z'.repeat(249)),
+    `${over.tekst.slice(0, 60)} · spurgt ${ikon.spurgt.length - foer9c} · ${[...hel].length} tegn · ${paa.tekst.slice(0, 80)}`);
+  if (!paa.fejl) await S.kald('computer_request_screen', { action: 'release' });
+
+  // 10. Et nej er et nej.
+  ikon.svar = 'nej';
+  const nej = await S.kald('computer_request_screen', { action: 'request', reason: 'drag it', minutes: 2 });
+  check('10 mennesket siger nej: afvist, move stadig skjult', nej.fejl && !(await S.navne()).includes('computer_move'), nej.tekst.slice(0, 80));
+  check('ingen osascript-dialog i hele forloebet', S.sp.gangeSpurgt() === 0, `${S.sp.gangeSpurgt()} · ${JSON.stringify(S.sp.tekster?.() || []).slice(0, 300)}`);
+} finally { S.srv.kill(); }
+
+// 11. CMCP_BACKGROUND sat er et LOFT: intet laan, ikonet ikke spurgt.
+const STATE2 = mkdtempSync(join(tmpdir(), 'cmcp-laan-loft-'));
+const ikon2 = await lavIkon(STATE2);
+const L = server(STATE2, HJ, { CMCP_BACKGROUND: '1' });
+try {
+  await L.klar();
+  const r = await L.kald('computer_request_screen', { action: 'request', reason: 'drag', minutes: 2 });
+  check('11 laast til baggrund: afvist, ikonet ikke spurgt', r.fejl && /locked this server to background/.test(r.tekst) && ikon2.spurgt.length === 0, r.tekst.slice(0, 90));
+} finally { L.srv.kill(); }
+
+// 12. ⛔ 1/10 (skaerm-koe-panelet): skaerm-anmodninger ventede foer paa det
+//    almindelige 60 s-spoergsmaals-vindue (CMCP_ASK_TIMEOUT). Nu har de deres eget,
+//    laengere - bevist her ved at goere det MODSATTE: saette skaerm-vinduet
+//    KORTERE end askTimeout, og vise at skaerm-vinduet er det der afgoer det. Hvis
+//    koden ved et uheld blev lagt tilbage til askTimeout() (3 s i denne proeve),
+//    ville et svar efter 800 ms stadig naa frem - her SKAL det IKKE naa frem.
+const STATE3 = mkdtempSync(join(tmpdir(), 'cmcp-laan-vent-'));
+const ikon3 = await lavIkon(STATE3);
+ikon3.svar = 'langsom'; ikon3.laanMs = 60_000;        // svarer ja efter 800 ms
+const V = server(STATE3, HJ, { CMCP_SCREEN_WAIT: '0.5', CMCP_ASK_TIMEOUT: '3' });
+try {
+  await V.klar();
+  const t0 = Date.now();
+  const r = await V.kald('computer_request_screen', { action: 'request', reason: 'kort skaerm-vindue', minutes: 2 });
+  const ms = Date.now() - t0;
+  check('12 skaermVentetid() - ikke askTimeout() - styrer ventetiden paa et skaerm-laan',
+        r.fejl && /nobody answered in the menu bar in time/.test(r.tekst) && ms < 2500,
+        `${ms} ms · ${r.tekst.slice(0, 90)}`);
+} finally { V.srv.kill(); }
+
+// 13. ⛔ 2/10 (skaerm-koe-panelet, trin 2): en skaerm-anmodning fra en ANDEN agent,
+//    mens et laan allerede er aktivt, bliver IKKE laengere afvist med «optaget» -
+//    den staar i koe, og serveren venter taalmodigt (den goer det allerede, trin 1:
+//    skaermVentetid()). TO servere (to agent-processer, samme ikon-socket) - en
+//    enkelt proces ville ramme 6e's «already waiting»-vagt foer den naaede koen.
+const STATE4 = mkdtempSync(join(tmpdir(), 'cmcp-laan-koe-'));
+const ikon4 = await lavIkon(STATE4);
+ikon4.svar = 'koe'; ikon4.laanMs = 60_000;
+const K1 = server(STATE4, HJ, { CMCP_SCREEN_WAIT: '10' });
+const K2 = server(STATE4, HJ, { CMCP_SCREEN_WAIT: '10' });
+try {
+  await Promise.all([K1.klar(), K2.klar()]);
+  const foerste = await K1.kald('computer_request_screen', { action: 'request', reason: 'first in line', minutes: 2 });
+  check('13 foerste agent: laanet givet straks', /"granted":\s*true/.test(foerste.tekst), foerste.tekst.slice(0, 90));
+  const foerAnden = Date.now();
+  let andenSvaret = null;
+  const anden = K2.kald('computer_request_screen', { action: 'request', reason: 'second in line', minutes: 2 }).then(r => { andenSvaret = r; return r; });
+  await vent(800);
+  check('13b anden agent staar STADIG og venter i koe - IKKE afvist som «optaget»',
+        andenSvaret === null && ikon4.koe.length === 1, `svaret: ${JSON.stringify(andenSvaret)} · koe: ${ikon4.koe.length}`);
+  ikon4.laan.destroy();   // foerste agent giver slip -> koeen aabner for den anden
+  const r = await anden;
+  check('13c anden agent godkendes naar foerste slutter - uden selv at spoerge forfra',
+        /"granted":\s*true/.test(r.tekst) && (Date.now() - foerAnden) > 700, `${Date.now() - foerAnden} ms · ${r.tekst.slice(0, 80)}`);
+} finally { K1.srv.kill(); K2.srv.kill(); }
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/skriv-ankommer.mjs b/test/skriv-ankommer.mjs
index 07509eb3..1c07a3fd 100644
--- a/test/skriv-ankommer.mjs
+++ b/test/skriv-ankommer.mjs
@@ -7,6 +7,7 @@
 //    var rød 2 af 5 gange på netop «teksten ankom» 25/9.
 //    Nu skrives der i programmets fokuserede felt gennem tilgængeligheds-laget, og
 //    feltet læses tilbage. Et kodeordsfelt tager aldrig den vej.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFileSync, spawn } from 'node:child_process';
 import { existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -51,18 +52,139 @@ try {
   const r2 = koer('type', '--app', navn, '--keystrokes', '--text', 'x');
   check('2 --keystrokes sender tastetryk og siger «ikke efterprøvet»', r2.ok && r2.method === 'keystrokes' && r2.verified === false, JSON.stringify(r2).slice(0, 160));
 
-  // 3. Et kodeordsfelt med fokus: aldrig tilgængeligheds-vejen.
+  // 3. Et kodeordsfelt med fokus får INTET - hverken gennem tilgængeligheds-laget
+  //    eller som tastetryk. Før 29/9 faldt `type` tilbage til tastetryk og tastede
+  //    i feltet; kun `set_value` sagde nej (panelet 29/9).
+  const nej = (r) => r.ok === false && r.code === 'secure-field' && !r.typed;
   const sikker = await start({ CMCP_PROEVE_SIKKER: '1' });
   const r3 = koer('type', '--app', sikker, '--text', 'hemmelig123');
-  check('3 et kodeordsfelt får aldrig tekst sat ind gennem tilgængeligheds-laget', r3.method !== 'accessibility', JSON.stringify(r3).slice(0, 160));
+  check('3 et kodeordsfelt får ingen tekst, heller ikke som tastetryk', nej(r3), JSON.stringify(r3).slice(0, 160));
+  const r3k = koer('type', '--app', sikker, '--keystrokes', '--text', 'hemmelig123');
+  check('3k ...heller ikke når tastetryk vælges direkte', nej(r3k), JSON.stringify(r3k).slice(0, 160));
+  // 3t (R24): `key` med et bogstav eller cmd+v skriver ogsaa tekst - samme regel.
+  const r3t = koer('key', '--app', sikker, '--combo', 'a'), r3v = koer('key', '--app', sikker, '--combo', 'cmd+v');
+  check('3t key med et bogstav eller cmd+v i et kodeordsfelt: afvist, intet sendt', r3t.ok === false && r3t.code === 'secure-field' && r3v.ok === false && r3v.code === 'secure-field', JSON.stringify([r3t, r3v]).slice(0, 200));
   // 3b. Et kodeordsfelt som på en webside (AXTextField med undertypen AXSecureTextField).
   //     macOS beskytter ikke dette; kun vores egen vagt gør.
   const web = await start({ CMCP_PROEVE_SIKKER: 'web' });
   const r3b = koer('type', '--app', web, '--text', 'hemmelig456');
-  check('3b et kodeordsfelt som på en webside får heller ikke den vej', r3b.method !== 'accessibility', JSON.stringify(r3b).slice(0, 160));
+  check('3b et kodeordsfelt som på en webside får heller ingen tekst', nej(r3b), JSON.stringify(r3b).slice(0, 160));
+  // 3s (runde 3 30/9, Fable R3): set_value er den tredje skrivevej - samme regel.
+  // Et native kodeordsfelt har ROLLEN AXTextField og UNDERROLLEN AXSecureTextField (CI 30/9: --role fandt intet).
+  const r3s = koer('set-value', '--app', sikker, '--subrole', 'AXSecureTextField', '--text', 'hemmelig789');
+  check('3s set_value i et kodeordsfelt: afvist', r3s.ok === false && r3s.code === 'secure-field', JSON.stringify(r3s).slice(0, 160));
+  const r3sw = koer('set-value', '--app', web, '--subrole', 'AXSecureTextField', '--text', 'hemmelig789');
+  check('3sw ...ogsaa som paa en webside', r3sw.ok === false && r3sw.code === 'secure-field', JSON.stringify(r3sw).slice(0, 160));
+  // 3c. Fokus flytter ind i et kodeordsfelt MIDT i teksten (Tab i «bruger\tkode»,
+  //     et klik, et felt der selv hopper videre): skrivningen stopper dér.
+  const skift = await start({ CMCP_PROEVE_SIKKER_SKIFT: '1' });
+  const fiks = boern[boern.length - 1];
+  const r3c = await new Promise((res) => {
+    const p = spawn(HJAELPER, ['type', '--app', skift, '--keystrokes', '--cps', '5', '--text', 'a'.repeat(40)]);
+    let ud = ''; p.stdout.on('data', (d) => { ud += d; });
+    p.on('close', () => { try { res(JSON.parse(ud)); } catch { res({ ok: false, error: ud.slice(0, 200) }); } });
+    // ⛔ RETTET 5/10: ventede FOER paa en fast 2,5 s, som racede mod opstarts-
+    //    forsinkelsen paa en travl maskine (maalt: typed=0, did:[] - signalet naaede
+    //    feltet foer det foerste tegn gjorde). Fixturens egen kommentar siger
+    //    praecis hvornaar: «naar skrivningen er i gang» - saa vent paa BEVIS
+    //    (feltet er ikke tomt), ikke paa en gaettet tid. Naar skrivningen aldrig
+    //    starter, udloeber dette efter 6 s og proeven dumper som foer - en aegte
+    //    regression skjules ikke.
+    (async () => {
+      const frist = Date.now() + 6000;
+      while (Date.now() < frist && !feltet(skift)) await new Promise((r) => setTimeout(r, 50));
+      fiks.kill('SIGUSR1');
+    })();
+  });
+  check('3c fokus der flytter ind i et kodeordsfelt undervejs stopper skrivningen dér',
+        r3c.ok === false && r3c.code === 'secure-field' && r3c.typed > 0 && r3c.typed < 40, JSON.stringify(r3c).slice(0, 180));
+
+  // 4. Sende-portens aflaesning (runde 1 30/9, Fable P4): modtageren er navnet OVER
+  //    feltet i samme kolonne - aldrig sidebarens oeverste navn. Og teksten er feltets.
+  const sam = await start({ CMCP_PROEVE_SAMTALE: '1' });
+  const s4 = koer('samtale', '--app', sam);
+  check('4 samtalen: modtageren er navnet over feltet, ikke sidebarens',
+        (s4.headings || [])[0] === 'Bob Samtale' && !(s4.headings || []).includes('Alice Sidebar') && s4.column === true, JSON.stringify(s4).slice(0, 200));
+  check('4b ...og teksten er feltets', s4.field?.value === 'hej Bob', JSON.stringify(s4.field || {}));
+
+  // 5. macOS' eget adgangskodesignal (Secure Event Input, R23 - Opus): en browser
+  //    taender det for et kodeordsfelt, ogsaa naar tilgaengeligheds-laget kun ser en
+  //    beholder (AXWebArea). Er det taendt, skrives der INTET - heller ikke i et
+  //    almindeligt felt. Signalet er kun et ekstra NEJ, aldrig et ja.
+  const sei = await start({ CMCP_PROEVE_SEI: '1' });
+  const seiProces = boern[boern.length - 1];
+  const r5 = koer('type', '--app', sei, '--text', 'hemmelig-sei');
+  check('5 macOS-adgangskodesignalet taendt: ingen tekst, heller ikke i et almindeligt felt', nej(r5) && !feltet(sei).includes('hemmelig'), JSON.stringify(r5).slice(0, 160));
+  const r5k = koer('type', '--app', sei, '--keystrokes', '--text', 'hemmelig-sei');
+  check('5k ...heller ikke som tastetryk', nej(r5k) && !feltet(sei).includes('hemmelig'), JSON.stringify(r5k).slice(0, 160));
+  const r5t = koer('key', '--app', sei, '--combo', 'shift+a');
+  check('5t ...og key med shift+a sendes heller ikke', r5t.ok === false && r5t.code === 'secure-field' && !feltet(sei).includes('A'), JSON.stringify(r5t).slice(0, 160));
+  const r5r = koer('key', '--app', sei, '--combo', 'tab');
+  check('5r ...men en flytte-tast (tab) skriver ingen tekst og sendes stadig', r5r.ok === true, JSON.stringify(r5r).slice(0, 120));
+  try { seiProces.kill(); } catch {}   // signalet slukkes med processen - straks
+
+  // 7. En soegning der loeb toer for tid (R23, Astra): `find` svarede {count: 0} som for
+  //    et tomt trae, og et enkelt fund blev skrevet i, selv om et andet, ens felt ikke var
+  //    set. Nu siger `find` det, og set_value vaelger intet af sig selv efter tidsudloeb.
+  const tid = await start({ CMCP_PROEVE_VAELGER: '1' });
+  const nul = (...a) => { try { return JSON.parse(execFileSync(HJAELPER, a, { encoding: 'utf8', timeout: 60000, env: { ...process.env, CMCP_BUDGET_SEK: '0' } })); }
+                          catch (e) { try { return JSON.parse(String(e.stdout)); } catch { return { ok: false, error: String(e.stdout || e.message).slice(0, 200) }; } } };
+  const r7 = nul('set-value', '--app', tid, '--role', 'AXTextField', '--text', 'tidsudloeb');
+  check('7 set_value efter en soegning der loeb toer for tid: intet skrives, og svaret siger hvorfor',
+    r7.ok === false && r7.code === 'search-incomplete' && r7.stopped_early === true && !feltet(tid).includes('tidsudloeb'), JSON.stringify(r7).slice(0, 180));
+  const f7 = nul('find', '--app', tid, '--role', 'AXTextField');
+  check('7b find siger at svaret er ufuldstaendigt (stopped_early) i stedet for at ligne et tomt program', f7.ok === true && f7.stopped_early === true, JSON.stringify(f7).slice(0, 180));
 } finally {
   for (const b of boern) { try { b.kill(); } catch {} }
   rmSync(ARB, { recursive: true, force: true });
 }
+// 6. Afgoerelsen for sig (Skrivevagt.swift kompileret alene) og bundet til begge skriveveje.
+{
+  const { readFileSync, writeFileSync } = await import('node:fs');
+  const KILDE = join(ROOT, 'helper', 'Sources', 'cmcp-helper');
+  const A6 = mkdtempSync(join(tmpdir(), 'cmcp-skrivevagt-'));
+  writeFileSync(join(A6, 'main.swift'), `import Foundation
+let tilf: [(Bool?, Bool)] = [(false, false), (true, false), (nil, false), (false, true), (true, true), (nil, true)]
+print(tilf.map { t -> String in switch skriveDom(fokusSikkert: t.0, sikkerIndtastning: t.1) { case .maa: return "maa"; case .ukendtFokus: return "ukendt"; case .sikkertFelt: return "sikker" } }.joined(separator: ","))
+print(["a", "shift+a", "A", "7", "space", "alt+e", "cmd+v", "Cmd+V", "cmd+shift+v", "return", "tab", "cmd+s", "ctrl+a", "cmd+a", "left", "escape", "ctrl+v", "fn+a"].map { kombiSkriverTekst($0) ? "1" : "0" }.joined())
+let valg: [(Int, Bool, Int?, Bool, Bool)] = [(1, true, nil, false, false), (1, true, nil, true, true), (1, true, 0, false, false), (1, false, nil, false, false),
+  (2, false, nil, false, false), (2, false, nil, true, false), (2, false, nil, true, true), (0, false, nil, true, true), (2, false, 5, false, false), (0, true, nil, false, false)]
+print(valg.map { v -> String in switch valgEfterSoegning(antal: v.0, stoppedeTidligt: v.1, index: v.2, maaGaette: v.3, first: v.4) {
+  case .vaelg(let i): return "v\\(i)"; case .ufuldstaendig: return "U"; case .udenforListen: return "X"; case .ingen: return "0"; case .tvetydigOverskriver: return "T"; case .tvetydig: return "t" } }.joined(separator: ","))
+`);
+  execFileSync('swiftc', ['-O', join(KILDE, 'Skrivevagt.swift'), join(A6, 'main.swift'), '-o', join(A6, 'v')], { stdio: 'pipe', timeout: 300000 });
+  const [dom, kombi, valgDom] = execFileSync(join(A6, 'v'), { encoding: 'utf8' }).trim().split('\n');
+  rmSync(A6, { recursive: true, force: true });
+  check('6a afgoerelsen: kun et kendt, almindeligt felt uden adgangskodesignal maa skrives i; signalet er et nej, aldrig et ja',
+    dom === 'maa,sikker,ukendt,sikker,sikker,sikker', dom);
+  const m = readFileSync(join(KILDE, 'main.swift'), 'utf8');
+  const typeKrop = m.slice(m.indexOf('let skrivPid = modtager(args)'), m.indexOf('if ukendtFokus {'));
+  check('6b type: signalet doemmes FOER tilgaengeligheds-vejen, og hvert tegn gaar gennem skriveDom',
+    typeKrop.indexOf('sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt') > 0
+    && typeKrop.indexOf('sikkerIndtastning: macosSikkerIndtastning()) == .sikkertFelt') < typeKrop.indexOf('AX.indsaetIFokus(')
+    && /switch skriveDom\(fokusSikkert: AX\.fokusErSikkert\(pid: skrivPid\), sikkerIndtastning: macosSikkerIndtastning\(\)\) \{\n\s+case \.maa: return false\n\s+case \.ukendtFokus: ukendtFokus = true; return true\n\s+case \.sikkertFelt: ramteSikkert = true; return true/.test(typeKrop), typeKrop.slice(0, 120));
+  const pasteKrop = m.slice(m.indexOf('case "paste":'), m.indexOf('case "window-set":'));
+  check('6c paste (R23, Astra): det forreste felt doemmes af samme skriveDom FOER Cmd+V - ukendt og kodeord afvises',
+    /switch skriveDom\(fokusSikkert: AX\.fokusErSikkert\(pid: NSWorkspace\.shared\.frontmostApplication\?\.processIdentifier\),\n\s+sikkerIndtastning: macosSikkerIndtastning\(\)\) \{\n\s+case \.maa: break\n\s+case \.ukendtFokus:\n\s+Out\.fail\([^\n]*code: "focus-unknown"\)\n\s+case \.sikkertFelt:\n\s+Out\.fail\([^\n]*code: "secure-field"\)/.test(pasteKrop)
+    && pasteKrop.indexOf('switch skriveDom(') < pasteKrop.indexOf('AX.pasteText('), pasteKrop.slice(0, 160));
+  const vaelg = m.slice(m.indexOf('func vaelgTraef('), m.indexOf('return first', m.indexOf('func vaelgTraef(')));
+  check('7c vaelgTraef afgoeres af valgEfterSoegning med hjaelperens rigtige tidsudloebs-flag',
+    /switch valgEfterSoegning\(antal: hits\.count, stoppedeTidligt: AX\.stoppedeTidligt, index: args\.int\("index"\), maaGaette: maaGaette, first: args\.flag\("first"\)\) \{/.test(m));
+  check('7d find-svaret baerer stopped_early, naar soegningen loeb toer for tid',
+    /if AX\.stoppedeTidligt \{\n\s+fundSvar\["stopped_early"\] = true/.test(m) && /Out\.ok\(fundSvar\)/.test(m));
+  check('6e en tast der SKRIVER tekst (bogstav, tal, mellemrum, alt/shift + tast, cmd+v) - ikke genveje og flytte-taster (R24)',
+    kombi === '111111111000000001', kombi);
+  const tastKrop = m.slice(m.indexOf('case "key":'), m.indexOf('default:', m.indexOf('case "key":')));
+  check('6f key: en tast der skriver tekst doemmes af skriveDom FOER den sendes (R24: «a» og cmd+v gik uden om)',
+    /if kombiSkriverTekst\(combo\) \{\n[\s\S]{0,200}switch skriveDom\(fokusSikkert: AX\.fokusErSikkert\(pid: fokusPid\), sikkerIndtastning: macosSikkerIndtastning\(\)\) \{/.test(tastKrop)
+    && tastKrop.indexOf('kombiSkriverTekst(combo)') < tastKrop.indexOf('Input.hotkey('), tastKrop.slice(0, 160));
+  const svKrop = m.slice(m.indexOf('case "set-value":'), m.indexOf('case "at":'));
+  check('6g set_value paa FOKUS (uden soegning): ogsaa macOS-signalet doemmer (R24, Astra)',
+    /if AX\.isSecure\(t\.el, role: role\) \|\| \(fokusVej && skriveDom\(fokusSikkert: false, sikkerIndtastning: macosSikkerIndtastning\(\)\) == \.sikkertFelt\) \{/.test(svKrop)
+    && /fokusVej = true/.test(svKrop), svKrop.slice(0, 120));
+  check('7e valget efter en soegning (R24, adfaerd med ÉT fund): efter tidsudloeb vaelges intet uden index - heller ikke med --first; index vinder; tvetydigt overskrives aldrig',
+    valgDom === 'U,U,v0,v0,T,t,v0,0,X,U', valgDom);
+  check('6d signalet er macOS\' eget (IsSecureEventInputEnabled)', /func macosSikkerIndtastning\(\) -> Bool \{ IsSecureEventInputEnabled\(\) \}/.test(readFileSync(join(KILDE, 'Input.swift'), 'utf8')));
+}
 console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
 process.exit(fails.length ? 1 : 0);
diff --git a/test/status-ikon.mjs b/test/status-ikon.mjs
index d3e24bfe..45416a1c 100644
--- a/test/status-ikon.mjs
+++ b/test/status-ikon.mjs
@@ -11,6 +11,8 @@
 //   3. Det der blev tastet, staar ALDRIG i statusfilen eller i menuen.
 //   4. En agent der stopper, forsvinder - ogsaa en der blev draebt uden
 //      at naa at rydde op efter sig.
+import './ryd-op.mjs';
+import './egen-tilstand.mjs';
 import { spawn, execFileSync } from 'child_process';
 import { readFileSync, readdirSync, existsSync, mkdtempSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -77,6 +79,15 @@ check('...og at det blev afvist', /⊘ .*Type \d+ characters/.test(liveA), liveA
 const liveB = d1.live.find(t => t.startsWith('chat-beta')) || '';
 check('en laesning staar ogsaa, som ✓', /✓ .*apps/.test(liveB), liveB.split('\n')[2]);
 
+// D3 (2/10): foelg-panelets "Show me where"-knap laeser det raa maal fra --dump,
+// uden en levende GUI. chat-alfa's eneste handling navngav 'Notes'.
+const alfaIdx = d1.items.findIndex(i => i.startsWith('chat-alfa'));
+check('det seneste maal naar frem til --dump (D3, "Show me where")',
+      d1.nowTarget[alfaIdx] === 'Notes', JSON.stringify(d1.nowTarget));
+const betaIdx = d1.items.findIndex(i => i.startsWith('chat-beta'));
+check('...og en handling UDEN app giver null, ikke en tom streng',
+      d1.nowTarget[betaIdx] === null, JSON.stringify(d1.nowTarget));
+
 // 3. Det tastede maa ikke staa nogen steder ikonet kan se.
 const filer = readdirSync(join(STATE, 'sessions')).map(f => readFileSync(join(STATE, 'sessions', f), 'utf8')).join('\n');
 check('det tastede staar ikke i statusfilerne', !filer.includes(HEMMELIG), `${filer.length} tegn gennemsoegt`);
diff --git a/test/stille-vej.mjs b/test/stille-vej.mjs
index 7dbc065d..6dc5ef9e 100644
--- a/test/stille-vej.mjs
+++ b/test/stille-vej.mjs
@@ -34,6 +34,7 @@
 //      M2  took_screen altid falsk  -> roed paa punkt 4
 //      M3  modtager() returnerer nil -> roed paa 1, 2 og 5, MEN ramte mennesket.
 //          Gentag den ikke paa en maskine der er i brug.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFileSync, spawn } from 'node:child_process';
 import { existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/sync-tal-versioner.mjs b/test/sync-tal-versioner.mjs
new file mode 100644
index 00000000..6cb4e98b
--- /dev/null
+++ b/test/sync-tal-versioner.mjs
@@ -0,0 +1,103 @@
+// FORBEHOLDET NAEVNER DEN UDGIVNE VERSIONS EGET TAL - aldrig et fast «12».
+//
+// ⛔ 7/10 (panel R8, punkt G): `sync-tal.py` skrev «0.1.0, which has 12 tools» fast
+//    tre steder. I 0.2.2-cyklussen (PUBLICERET=0.2.1) ville forsiden have sagt
+//    «0.2.1, which has 12 tools» - forkert, paa det trin hvor en ny bruger beslutter
+//    sig. Tallet laeses nu fra den udgivne versions git-maerke; ukendt = intet tal.
+//
+// Koeres i en lokal klon (med maerker), saa intet i arbejdstraeet aendres.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, writeFileSync, copyFileSync, rmSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+
+const ROD = join(dirname(fileURLToPath(import.meta.url)), '..');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const D = mkdtempSync(join(tmpdir(), 'cmcp-synctal-'));
+const K = join(D, 'r');
+try {
+  execFileSync('git', ['clone', '--quiet', '--shared', ROD, K]);
+  // Proeven skal maale den sync-tal der ligger i arbejdstraeet, ogsaa foer commit.
+  copyFileSync(join(ROD, 'scripts', 'sync-tal.py'), join(K, 'scripts', 'sync-tal.py'));
+  const pakke = JSON.parse(readFileSync(join(K, 'mcp-server', 'package.json'), 'utf8')).version;
+  const koer = (udgivet) => {
+    writeFileSync(join(K, 'PUBLICERET'), udgivet + '\n');
+    execFileSync('python3', ['scripts/sync-tal.py'], { cwd: K, stdio: 'pipe' });
+    return {
+      forside: readFileSync(join(K, 'docs', 'index.html'), 'utf8'),
+      readme: readFileSync(join(K, 'README.md'), 'utf8'),
+      llms: readFileSync(join(K, 'docs', 'llms.txt'), 'utf8'),
+      install: readFileSync(join(K, 'docs', 'docs', 'install-claude-code', 'index.html'), 'utf8'),
+    };
+  };
+  const forbehold = (t) => (t.match(/FORBEHOLD -->([\s\S]*?)<!-- \/FORBEHOLD|# FORBEHOLD([\s\S]*?)# \/FORBEHOLD/) || [])
+    .slice(1).filter(Boolean).join('');
+
+  // 1. 0.1.0 har intet maerke - det maalte tal (12) staar, ordret som i dag.
+  const a = koer('0.1.0');
+  check('0.1.0: forbeholdet siger 12 vaerktoejer', /serves <b>0\.1\.0<\/b>, which has 12 tools/.test(a.forside),
+        forbehold(a.forside).slice(0, 120).replace(/\s+/g, ' '));
+
+  // 2. v0.2.0 findes som maerke: tallet laeses derfra (28), ikke 12 og ikke kildens.
+  //    CI-checkouts er flade og uden maerker - saa hentes det ene maerke fra GitHub.
+  //    Kan det ikke hentes, er punktet UMAALT (sprunget over), aldrig groent.
+  let harTag = true;
+  try { execFileSync('git', ['rev-parse', '-q', '--verify', 'refs/tags/v0.2.0'], { cwd: K, stdio: 'pipe' }); }
+  catch {
+    try { execFileSync('git', ['fetch', '--quiet', '--depth=1', 'https://github.com/Agent360dk/computerMCP.git', 'tag', 'v0.2.0'], { cwd: K, stdio: 'pipe', timeout: 60000 }); }
+    catch { harTag = false; }
+  }
+  if (!harTag) { console.log('SPR. 0.2.0-punkterne - maerket v0.2.0 kunne ikke hentes (umaalt, ikke bestaaet)'); }
+  const b = harTag ? koer('0.2.0') : null;
+  if (harTag) {
+  const fb = forbehold(b.forside) + forbehold(b.readme) + forbehold(b.llms);
+  check('0.2.0: tallet kommer fra maerket v0.2.0 (28)', /0\.2\.0<\/b>, which has 28 tools/.test(b.forside)
+        && /\*\*0\.2\.0\*\*, which has 28 tools/.test(b.readme) && /serves 0\.2\.0, which has 28 tools/.test(b.llms),
+        fb.slice(0, 140).replace(/\s+/g, ' '));
+  check('0.2.0: intet «12 tools» i forbeholdet', !/\b12 tools\b|\btwelve\b/.test(fb));
+  // Installationssiderne faar forbeholdet FOER tallene rettes overalt - her er det
+  // beskyttelsen af versionsforbeholdet, der holder «28» fra at blive kildens tal.
+  check('0.2.0: installationssiden siger ogsaa 28 (ikke kildens tal)', /<b>0\.2\.0<\/b>, which has 28 tools/.test(b.install),
+        (b.install.match(/currently serves[\s\S]{0,60}/) || [''])[0].replace(/\s+/g, ' '));
+  }
+
+  // 3. Ukendt version (intet maerke, ikke kendt): intet tal - aldrig 12.
+  const c = koer('0.0.9');
+  const fc = forbehold(c.forside) + forbehold(c.readme) + forbehold(c.llms);
+  check('ukendt version: forbeholdet staar, uden tal', /0\.0\.9/.test(fc) && /an earlier version/.test(fc));
+  check('ukendt version: intet «12 tools»', !/\b12 tools\b|\btwelve\b/.test(fc));
+
+  // 3b (panel R13-R14, fejl b): den udgivne version har lige saa mange vaerktoejer som kilden
+  //     (0.2.1 og 0.2.2 har begge 32). «The 32 tools described here are ... not published yet»
+  //     ville vaere falsk - og staa live fra fletningen af 0.2.2 til npm har den. Et syntetisk
+  //     maerke paa HEAD i klonen giver den udgivne version kildens vaerktoejer.
+  const SYN = '9.9.8';
+  execFileSync('git', ['tag', '-f', 'v' + SYN, 'HEAD'], { cwd: K, stdio: 'pipe' });
+  const g = koer(SYN);
+  const alleSider = g.forside + g.readme + g.llms + g.install;
+  check('samme vaerktoejstal som kilden: intet «not published yet» nogen steder', !/not published yet|currently serves/.test(alleSider),
+        (alleSider.match(/[^.\n]{0,60}(not published yet|currently serves)[^.\n]{0,40}/) || [''])[0]);
+
+  // 4. Udgivet == kilden: intet forbehold paa forsiden.
+  const e = koer(pakke);
+  check('udgivet == kilden: forbeholdet er vaek', !/currently serves|not published yet/.test(forbehold(e.forside) + forbehold(e.readme)));
+
+  // 5. Idempotent: anden koersel med samme PUBLICERET aendrer intet.
+  koer(harTag ? '0.2.0' : '0.1.0');
+  const foer = execFileSync('git', ['status', '--porcelain'], { cwd: K, encoding: 'utf8' });
+  const foerIndhold = readFileSync(join(K, 'docs', 'index.html'), 'utf8') + readFileSync(join(K, 'README.md'), 'utf8');
+  koer(harTag ? '0.2.0' : '0.1.0');
+  const efter = execFileSync('git', ['status', '--porcelain'], { cwd: K, encoding: 'utf8' });
+  const efterIndhold = readFileSync(join(K, 'docs', 'index.html'), 'utf8') + readFileSync(join(K, 'README.md'), 'utf8');
+  check('anden koersel aendrer intet', foer === efter && foerIndhold === efterIndhold);
+} finally {
+  rmSync(D, { recursive: true, force: true });
+}
+
+console.log();
+if (fails.length) { console.log(`DUMPET: ${fails.length}`); process.exit(1); }
+console.log('BESTAAET');
diff --git a/test/tilladelser.mjs b/test/tilladelser.mjs
index da03e8ea..65dc7e39 100644
--- a/test/tilladelser.mjs
+++ b/test/tilladelser.mjs
@@ -17,6 +17,8 @@
 //    Tilladelserne kan ikke fjernes paa menneskets maskine - det ville koste
 //    ham hans egne. Saa hjaelperen erstattes af en attrap der svarer praecis
 //    den fejlkode macOS ville udloese, og vi maaler hvad SERVEREN goer ved den.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
 import { spawn } from 'node:child_process';
 import { mkdtempSync, writeFileSync, chmodSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/tilstand-isoleret.mjs b/test/tilstand-isoleret.mjs
new file mode 100644
index 00000000..314ffe2c
--- /dev/null
+++ b/test/tilstand-isoleret.mjs
@@ -0,0 +1,38 @@
+// INGEN PROEVE KAN SKRIVE I MENNESKETS RIGTIGE TILSTANDSMAPPE.
+//
+// ⛔ 7/10 (panel R8-R9, punkt F): en serverstart uden CMCP_STATE_DIR skriver i
+//    ~/.local/state/computer-mcp - revisionslog, koe, samtykke. Proeven her kraever:
+//    hver fil der starter serveren, importerer egen-tilstand.mjs (eller er undtaget
+//    med en grund og en bevist reserve), ingen fil SLETTER variablen, og run-all.sh
+//    saetter selv en midlertidig mappe.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import { readFileSync, readdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const T = dirname(fileURLToPath(import.meta.url));
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+// Undtaget: kvitteringens fingeraftryk er policy.js + failclosed.mjs, saa en aendring
+// dér kraever en ny dialog-koersel paa menneskets skaerm. Den har sin egen reserve.
+// touchid-manuel.mjs taler MED VILJE til det rigtige ikon (et menneske godkender med
+// Touch ID); den koeres kun i haanden, aldrig af run-all.sh eller CI - det tjekkes her.
+const UNDTAGET = { 'failclosed.mjs': /CMCP_STATE_DIR:\s*process\.env\.CMCP_STATE_DIR\s*\n?\s*\|\|\s*mkdtempSync/,
+                   'touchid-manuel.mjs': /const STATE = process\.env\.CMCP_STATE_DIR \|\| join\(homedir\(\), '\.local\/state\/computer-mcp'\)/ };
+const starter = readdirSync(T).filter(f => f.endsWith('.mjs') && f !== 'tilstand-isoleret.mjs')
+  .filter(f => { const s = readFileSync(join(T, f), 'utf8'); return /spawn\(/.test(s) && /index\.js/.test(s); });
+check('maaleren fandt serverstartende proever', starter.length >= 25, `${starter.length}`);
+const mangler = starter.filter(f => {
+  const s = readFileSync(join(T, f), 'utf8');
+  if (UNDTAGET[f]) return !UNDTAGET[f].test(s);
+  return !/^import (\{[^}]*\} from )?'\.\/egen-tilstand\.mjs';$/m.test(s);
+});
+check('hver serverstartende proeve importerer egen-tilstand.mjs (eller har en bevist reserve)', mangler.length === 0, mangler.join(', ') || 'alle');
+const sletter = readdirSync(T).filter(f => f.endsWith('.mjs') && f !== 'tilstand-isoleret.mjs')
+  .filter(f => /delete process\.env\.CMCP_STATE_DIR/.test(readFileSync(join(T, f), 'utf8')));
+check('ingen proeve sletter CMCP_STATE_DIR undervejs', sletter.length === 0, sletter.join(', ') || 'ingen');
+check('den manuelle Touch ID-proeve koeres ikke af suiten', !/touchid-manuel/.test(readFileSync(join(T, 'run-all.sh'), 'utf8')));
+check('egen-tilstand.mjs slaar ogsaa menneskets ikon fra (som run-all.sh)', /process\.env\.CMCP_STATUS_IKON = '0'/.test(readFileSync(join(T, 'egen-tilstand.mjs'), 'utf8')));
+check('run-all.sh saetter selv en midlertidig tilstandsmappe', /^export CMCP_STATE_DIR="\$\{CMCP_STATE_DIR:-\$\(mktemp -d/m.test(readFileSync(join(T, 'run-all.sh'), 'utf8')));
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/tilstede.mjs b/test/tilstede.mjs
new file mode 100644
index 00000000..4f43b7e6
--- /dev/null
+++ b/test/tilstede.mjs
@@ -0,0 +1,151 @@
+// HVERT SPOERGSMAAL I MENULINJEN FAAR SIN MAALING I LOGGEN (punkt P).
+//
+// ⛔ 7/10 (panel R8-R9): «1 af 23 besvaret» kunne ikke efterproeves - loggen gemte
+//    intet om inputaktivitet, versioner eller hvad der blev vist. Proeven koerer en
+//    rigtig server mod et FALSK ikon i en midlertidig mappe (aldrig menneskets
+//    ikon.sock) og en falsk hjaelper hvis `idle` proeven selv bestemmer.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
+import './egen-tilstand.mjs';
+import { spawn } from 'node:child_process';
+import { createServer } from 'node:net';
+import { join, dirname } from 'node:path';
+import { mkdtempSync, writeFileSync, readFileSync, chmodSync, rmSync, utimesSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { lavFalskSpoerger, lavStandinIkon } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const VERSION = JSON.parse(readFileSync(join(ROOT, 'mcp-server', 'package.json'), 'utf8')).version;
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const D = mkdtempSync(join(tmpdir(), 'cmcp-tilstede-'));
+const STATE = join(D, 'state');
+const IDLE = join(D, 'idle.txt');
+const STUB = join(D, 'stub.sh');
+// Svarer ikonet ikke, maa serveren aldrig naa en aegte dialog paa menneskets skaerm.
+const SP = lavFalskSpoerger('udloeb', 'cmcp-tilstede-sp');
+writeFileSync(STUB, `#!/bin/sh
+case "$1" in
+  idle) cat ${IDLE} ;;
+  apps) echo '{"ok":true,"apps":[{"bundleId":"com.apple.finder","name":"Finder","pid":4242,"active":false}]}' ;;
+  menus) echo '{"ok":true,"menus":[]}' ;;
+  *) echo '{"ok":true}' ;;
+esac
+`);
+chmodSync(STUB, 0o755);
+// null = hjaelperen svarer uden et tal; 'fejl' = hjaelperen svarer slet ikke med JSON.
+const idle = (v) => writeFileSync(IDLE, v === 'fejl' ? 'ikke json' : JSON.stringify(v === null ? { ok: true } : { ok: true, idle: v }));
+
+// Ikonet svarer efter `svar` - null betyder: svar aldrig (udloeb).
+let svar = null;
+const { mkdirSync } = await import('node:fs');
+mkdirSync(STATE, { recursive: true, mode: 0o700 });
+// Maalingen laeser versionen paa det ikon der ejer tilstandsmappen (status.pid) - her et
+// stand-in, aldrig menneskets rigtige ikon.
+const STANDIN = lavStandinIkon(STATE, '9.9.9-proeve');
+const ikon = createServer(sock => {
+  let buf = '';
+  sock.on('data', d => {
+    buf += d; const i = buf.indexOf('\n'); if (i < 0) return;
+    const q = JSON.parse(buf.slice(0, i));
+    // Idle skifter et halvt sekund EFTER spoergsmaalet er stillet (maalingen ved start
+    // er saa faerdig), og svaret kommer lidt efter - saa ask og end kan skelnes.
+    const s = svar;
+    setTimeout(() => { if (s && 'slutIdle' in s) idle(s.slutIdle); }, 500);
+    setTimeout(() => { if (s?.svar) sock.write(JSON.stringify({ nonce: q.nonce, ...s.svar }) + '\n'); }, 700);
+  });
+  sock.on('error', () => {});
+});
+await new Promise(r => ikon.listen(join(STATE, 'ikon.sock'), r));
+
+const srv = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+  env: { ...process.env, CMCP_STATE_DIR: STATE, CMCP_MODE: 'allow', CMCP_HELPER: STUB, CMCP_ASK_TIMEOUT: '2',
+         CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1', CMCP_OSASCRIPT: SP.sti },
+  stdio: ['pipe', 'pipe', 'pipe'] });
+let buf = '', n = 0; const w = new Map();
+srv.stdout.on('data', d => { buf += d; let i; while ((i = buf.indexOf('\n')) >= 0) { const l = buf.slice(0, i); buf = buf.slice(i + 1); try { const m = JSON.parse(l); w.get(m.id)?.(m); } catch {} } });
+const rpc = (m, p) => new Promise((r, rej) => { const id = ++n; w.set(id, r); srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: p }) + '\n'); setTimeout(() => rej(new Error('timeout ' + m)), 30000); });
+const vent = ms => new Promise(r => setTimeout(r, ms));
+const sidsteMenubar = () => readFileSync(join(STATE, 'audit.jsonl'), 'utf8').trim().split('\n').map(l => JSON.parse(l))
+  .filter(l => l.asker === 'menubar').pop();
+const kald = { name: 'computer_menu', arguments: { app: 'Finder', path: 'File > Move to Trash' } };
+
+try {
+  await rpc('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'tilstede', version: '1' } });
+  srv.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+
+  // 1. Ja: idle ved spoergsmaal er tallet, slut er «answered».
+  idle(12.5); svar = { svar: { ok: true, verified: 'owner' }, slutIdle: 0.4 };
+  await rpc('tools/call', kald);
+  let l = sidsteMenubar(), p = l?.presence;
+  check('1 ja: maalingen staar paa loglinjen', !!p && l.decision === 'allowed', JSON.stringify(p));
+  check('1 ja: idle_at_ask er det maalte tal', p?.idle_at_ask === 12.5);
+  check('1 ja: idle_at_end er «answered» (ingen ny idle efter et svar)', p?.idle_at_end === 'answered');
+  check('1 ja: serverens version', p?.server === VERSION, String(p?.server));
+  check('1 ja: box er on/off, flade afledt af box og sessioner', ['on', 'off'].includes(p?.box)
+        && p?.surface_derived === (p?.box === 'on' && p?.sessions > 0 ? 'box+menu' : 'menu'), `${p?.box} ${p?.sessions} ${p?.surface_derived}`);
+  check('1 ja: ikonets version er DETTE ikons (status.pid), ikke det foerste i proceslisten', p?.icon === '9.9.9-proeve', String(p?.icon));
+
+  // 2. Udloeb (ingen svarer): idle ved slut maales - det tal der fortaeller om nogen var der.
+  idle(3); svar = { svar: null, slutIdle: 47 };
+  await rpc('tools/call', kald);
+  l = sidsteMenubar(); p = l?.presence;
+  check('2 udloeb: idle_at_ask og idle_at_end er begge maalt', p?.idle_at_ask === 3 && p?.idle_at_end === 47 && l.decision === 'denied', JSON.stringify(p));
+
+  // 3. Hjaelperen kan ikke svare paa idle: «unreadable», aldrig et gaet.
+  idle(null); svar = { svar: null, slutIdle: 'fejl' };
+  await rpc('tools/call', kald);
+  l = sidsteMenubar(); p = l?.presence;
+  check('3 ulaeselig idle: «unreadable», ikke et tal', p?.idle_at_ask === 'unreadable' && p?.idle_at_end === 'unreadable', JSON.stringify(p));
+
+  // 3b. computer_ask_user spoerger ogsaa i menulinjen (Astra R10): maalingen staar paa
+  //     udfaldslinjen, for porten spoerger ikke selv - vaerktoejet goer.
+  idle(5); svar = { svar: { ok: true, verified: 'owner' }, slutIdle: 0.2 };
+  await rpc('tools/call', { name: 'computer_ask_user', arguments: { app: 'Finder', message: 'Type the password in the field' } });
+  const spurgt = readFileSync(join(STATE, 'audit.jsonl'), 'utf8').trim().split('\n').map(x => JSON.parse(x))
+    .filter(x => x.tool === 'computer_ask_user' && x.outcome === 'ok').pop();
+  check('3b ask_user: maalingen staar paa udfaldslinjen', spurgt?.asker === 'menubar' && spurgt?.presence?.idle_at_ask === 5
+        && spurgt?.presence?.idle_at_end === 'answered', JSON.stringify(spurgt?.presence || spurgt || 'ingen linje'));
+
+  // 4. Nej (sidst - et nej giver 30 s pause for naeste spoergsmaal). Ikonets versionsfil
+  //    er nu skiftet ud efter at ikonet startede (Astra R10): maalingen maa ikke paastaa den
+  //    nye version om den gamle proces.
+  const fremtid = new Date(Date.now() + 60000); utimesSync(STANDIN.plist, fremtid, fremtid);
+  idle(8); svar = { svar: { ok: false }, slutIdle: 1.5 };
+  await rpc('tools/call', kald);
+  l = sidsteMenubar(); p = l?.presence;
+  check('4 versionsfilen skiftet efter start: «replaced since start», ikke den nye version', p?.icon === 'replaced since start', String(p?.icon));
+  check('4 nej: idle_at_end maalt efter svaret', p?.idle_at_ask === 8 && p?.idle_at_end === 1.5 && l.decision === 'denied', JSON.stringify(p));
+
+  // 5. Kaeden holder med de nye felter.
+  const a = await rpc('tools/call', { name: 'computer_audit', arguments: { limit: 5 } });
+  const t = a.result?.content?.[0]?.text || '';
+  check('5 revisionsloggens kaede er intakt', /intact across/.test(t), (t.match(/(intact|BROKEN|UNKNOWN)[^"\n]{0,40}/) || [''])[0]);
+  check('5 maalingen baerer ingen tekst ud over tal, versioner og til/fra',
+        Object.values(sidsteMenubar().presence).every(v => v === null || typeof v === 'number' || /^[\w. +-]{0,40}$/.test(String(v))));
+  // 6. Skaermlaanet (15 af de 22 udloebne 30/9-4/10 var laan) maales ogsaa. Egen
+  //    server, saa nej'et i 4 ikke giver pause her.
+  const srv2 = spawn('node', [join(ROOT, 'mcp-server', 'index.js')], {
+    env: { ...process.env, CMCP_STATE_DIR: STATE, CMCP_MODE: 'allow', CMCP_HELPER: STUB, CMCP_ASK_TIMEOUT: '2',
+           CMCP_STATUS_IKON: '0', CMCP_NO_PARENT_WATCH: '1', CMCP_OSASCRIPT: SP.sti }, stdio: ['pipe', 'pipe', 'pipe'] });
+  let buf2 = '', n2 = 0; const w2 = new Map();
+  srv2.stdout.on('data', d => { buf2 += d; let i; while ((i = buf2.indexOf('\n')) >= 0) { const x = buf2.slice(0, i); buf2 = buf2.slice(i + 1); try { const m = JSON.parse(x); w2.get(m.id)?.(m); } catch {} } });
+  const rpc2 = (m, q) => new Promise((r, rej) => { const id = ++n2; w2.set(id, r); srv2.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method: m, params: q }) + '\n'); setTimeout(() => rej(new Error('timeout ' + m)), 30000); });
+  try {
+    await rpc2('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'tilstede-laan', version: '1' } });
+    srv2.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' }) + '\n');
+    idle(20); svar = { svar: { ok: false }, slutIdle: 2 };
+    await rpc2('tools/call', { name: 'computer_request_screen', arguments: { action: 'request', reason: 'proeve', minutes: 1 } });
+    const laan = readFileSync(join(STATE, 'audit.jsonl'), 'utf8').trim().split('\n').map(x => JSON.parse(x))
+      .filter(x => x.tool === 'computer_request_screen' && x.asker === 'menubar').pop();
+    check('6 skaermlaan: maalingen staar paa laanets loglinje', laan?.presence?.idle_at_ask === 20 && laan?.presence?.idle_at_end === 2,
+          JSON.stringify(laan?.presence || laan || 'ingen linje'));
+  } finally { srv2.kill(); }
+} catch (e) {
+  check('proeven koerte', false, e.message);
+} finally {
+  srv.kill(); ikon.close(); STANDIN.stop(); rmSync(D, { recursive: true, force: true });
+}
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/touchid-manuel.mjs b/test/touchid-manuel.mjs
index 712ca709..6f43c76a 100644
--- a/test/touchid-manuel.mjs
+++ b/test/touchid-manuel.mjs
@@ -10,6 +10,7 @@
 // Den rigtige state-mappe bruges med vilje, saa spoergsmaalet lander i det
 // ikon mennesket allerede har. Agenten skriver i et usynligt proevevindue den
 // selv ejer - intet af menneskets programmer roeres.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { spawn, execFileSync } from 'node:child_process';
 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from 'node:fs';
 import { tmpdir, homedir } from 'node:os';
diff --git a/test/usynlige-navne.mjs b/test/usynlige-navne.mjs
new file mode 100644
index 00000000..bfaebbf7
--- /dev/null
+++ b/test/usynlige-navne.mjs
@@ -0,0 +1,290 @@
+// USYNLIGE NAVNE: «WhatsApp» skal finde «‎WhatsApp» - i porten OG i leveringen,
+// og de to skal ALTID vaelge det samme program.
+//
+// ⛔ 9/10 (F1 paa Gustavs Mac): WhatsApp ligger som /Applications/‎WhatsApp.app og
+//    hedder «‎WhatsApp» naar den koerer. `app: "WhatsApp"` blev «ukendt maal».
+// ⛔ R16 (Astra + Opus, MAALT): foerste rettelse brugte Swifts egne regler (trim med
+//    U+0085/U+200B, smaa bogstaver paa hele strengen, kanonisk ==), saa porten og
+//    hjaelperen kunne vaelge forskellige programmer - «Computer MCP\u0085» var ukendt
+//    for porten og menulinje-ikonet for hjaelperen. Proeven er derfor tre ting:
+//      A. samme tabeller gennem serverens findProgram og hjaelperens Navne (Swift)
+//      B. de tre tegn-regler (trim, usynlige tegn, smaa bogstaver) sammenlignet for
+//         HVERT Unicode-tegn mellem JS og Swift
+//      C. kaldestederne bundet: hjaelperen slaar kun navne op gennem Navne, og
+//         ellers sammenlignes kun id'er
+//    Ingen skaerm, intet program startes.
+import './ryd-op.mjs';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, writeFileSync, readFileSync, existsSync, readdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { lavFalskHjaelper } from './falsk-hjaelper.mjs';
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+const KILDE = join(ROOT, 'helper', 'Sources', 'cmcp-helper');
+const fails = [];
+const check = (l, c, d = '') => { console.log(`${c ? 'OK  ' : 'DUMP'} ${l}${d ? ' - ' + d : ''}`); if (!c) fails.push(l); };
+
+const LRM = '‎', RLM = '‏', ZWSP = '​', NEL = '\u0085', BOM = '';
+// A1 · navne alene: [navne, hvad agenten skriver, forventet indeks (null = intet), hvad maales]
+const NAVNE = [
+  [['Finder', `${LRM}WhatsApp`], 'WhatsApp', 1, 'usynligt tegn foran navnet'],
+  [[`${LRM}WhatsApp`, `WhatsApp${RLM}`], 'WhatsApp', null, 'to passer uden de usynlige tegn: intet vaelges'],
+  [['WhatsApp', `${LRM}WhatsApp`], 'WhatsApp', 0, 'et praecist navn vinder over et der kun passer uden usynlige tegn'],
+  [[`${LRM}WhatsApp`, 'WhatsApp'], 'WhatsApp', 1, 'samme, omvendt raekkefoelge'],
+  [['WhatsApp', `${LRM}WhatsApp`], `${LRM}WhatsApp`, 1, 'det usynlige navn kopieret ordret vaelger sig selv'],
+  [[`${LRM}WhatsApp`], LRM, null, 'kun usynlige tegn finder intet'],
+  [[`${LRM}WhatsApp`], 'WhatsAp', null, 'et andet navn finder intet'],
+  [['Notes'], 'notes', 0, 'store/smaa bogstaver som foer'],
+  [[`Whats${ZWSP}App`], 'whatsapp', 0, 'usynligt tegn inde i navnet'],
+  [['Notes', 'Noter'], 'Note', null, 'et forkortet navn finder intet'],
+  [['Computer MCP'], `Computer MCP${NEL}`, null, 'U+0085 i kanten fjernes ikke (Opus R16)'],
+  [[`${ZWSP}Passwords`, 'Passwords'], `${ZWSP}Passwords`, 0, 'U+200B i kanten fjernes ikke (Astra R16)'],
+  [[`${NEL}Notes`, 'Notes'], `${NEL}Notes`, 0, 'U+0085 foran: det praecise navn'],
+  [[`${BOM}Notes`, 'Notes'], `${BOM}Notes`, 1, 'U+FEFF i kanten fjernes (som JS trim)'],
+  [['ος', 'οσ'], 'ΟΣ', 1, 'smaa bogstaver tegn for tegn (ingen graesk slut-sigma)'],
+  [['é', 'é'], 'é', 1, 'sammenligning paa tegn, ikke kanonisk lighed'],
+  [['  Notes'], 'Notes', 0, 'mellemrum foran navnet: passer uden usynlige tegn og kanter'],
+  [['Notes'], '   ', null, 'kun mellemrum finder intet'],
+];
+const VIS = { ids: ['com.apple.SafariPlatformSupport.Helper', 'com.apple.SafariPlatformSupport.Helper', 'com.google.Chrome', 'com.google.Chrome'],
+              navne: ['Autoudfyld (Agent360 IDE)', 'Autoudfyld (Google Chrome)', 'Google Chrome', 'Google Chrome'] };
+// A2 · koerende programmer med id: [ids, navne, ønske, forventet, hvad]
+const APPS = [
+  [['dk.SAFE', 'com.apple.Passwords'], ['Harmless', 'dk.safe'], 'dk.safe', 0, 'bundle-id uden hensyn til store/smaa bogstaver foer navne (Astra R16)'],
+  [['com.x.App', 'com.x.app'], ['A', 'B'], 'com.x.app', 1, 'et praecist bundle-id vinder over ét der kun passer uden store/smaa'],
+  [[null, 'dk.y'], ['Y', 'Z'], 'Y', 0, 'et program uden id findes paa navnet'],
+  [['net.whatsapp.WhatsApp', 'com.apple.finder'], [`${LRM}WhatsApp`, 'Finder'], 'WhatsApp', 0, 'Gustavs Mac'],
+  [['dk.a'], ['A'], ` dk.a${BOM}`, 0, 'id med kanter'],
+  [['dk.a', 'dk.b'], [`${LRM}X`, `X${RLM}`], 'X', null, 'tvetydigt navn'],
+  // R18 (Opus, maalt live 9/10): visningstjenester - samme id, hvert sit navn. Leveringen gaar til
+  // id'et, ikke processen, saa navnet er tvetydigt. To Chrome-vinduer med SAMME navn er ikke.
+  [VIS.ids, VIS.navne, 'Autoudfyld (Google Chrome)', null, 'en visningstjeneste: id delt med et andet navn - afvist'],
+  [VIS.ids, VIS.navne, 'Autoudfyld (Agent360 IDE)', null, 'ogsaa den anden visningstjeneste'],
+  [VIS.ids, VIS.navne, 'Google Chrome', 2, 'to processer med samme id OG samme navn: den foerste, som foer'],
+  // R19 (Opus): ruten UDEN det usynlige tegn - navnet findes saadan paa Gustavs Mac (maalt)
+  [['com.apple.ThemeWidgetControlViewService', 'com.apple.ThemeWidgetControlViewService'],
+   ['ThemeWidgetControlViewService (Finder)', `${LRM}ThemeWidgetControlViewService (WhatsApp)`],
+   'ThemeWidgetControlViewService (WhatsApp)', null, 'en visningstjeneste fundet uden sit usynlige tegn: stadig afvist'],
+  [VIS.ids, VIS.navne, 'com.apple.SafariPlatformSupport.Helper', 0, 'id\'et selv: den foerste proces med id\'et, som foer'],
+];
+// A3 · oversaettelsen ved hjaelperens indgang: [argv, opslag, forventet argv, hvad]
+const OVERSAET = [
+  [['h', 'find', '--app', 'WhatsApp', '--role', 'AXButton'], { WhatsApp: 'net.whatsapp.WhatsApp' }, [], { argv: ['h', 'find', '--app', 'net.whatsapp.WhatsApp', '--role', 'AXButton'], bundet: false }, 'navnet bliver til id'],
+  [['h', 'find', '--app', '--role', 'AXButton'], { '--role': 'x' }, [], { argv: ['h', 'find', '--app', '--role', 'AXButton'], bundet: false }, '--app uden vaerdi roeres ikke'],
+  [['h', 'find', '--app', 'Ukendt'], {}, [], { argv: ['h', 'find', '--app', 'Ukendt'], bundet: false }, 'intet opslag: uroert'],
+  [['h', 'windows', '--app'], { '': 'x' }, [], { argv: ['h', 'windows', '--app'], bundet: false }, '--app sidst roeres ikke'],
+  // R17: et maal porten har bundet (`=<id>`) - kun det praecise id, ellers intet
+  [['h', 'type', '--app', '=net.whatsapp.WhatsApp'], {}, ['net.whatsapp.WhatsApp'], { argv: ['h', 'type', '--app', 'net.whatsapp.WhatsApp'], bundet: true }, 'bundet id der koerer: det praecise id, og resten af hjaelperen ved at det er bundet'],
+  [['h', 'type', '--app', '=net.whatsapp.WhatsApp'], { '=net.whatsapp.WhatsApp': 'dk.andet', 'net.whatsapp.WhatsApp': 'dk.andet' }, [], null, 'bundet id der ikke koerer: intet - aldrig et navneopslag'],
+  [['h', 'type', '--app', '=NET.whatsapp.WhatsApp'], {}, ['net.whatsapp.WhatsApp'], null, 'bundet id med andre store/smaa: intet'],
+  [['h', 'type', '--app', '='], {}, [''], null, 'tomt bundet id: intet'],
+];
+// R17 · serverens side af det bundne maal: [apps (id, navn), oenske, forventet indeks]
+// R18 · «pid:<n>» er reserveret til programmer uden id - ens i porten og hjaelperen
+const PIDS = [
+  [[{ bundleId: '', name: 'Probe', pid: 5 }], 'pid:5', 0, 'et program uden id findes paa sin proces'],
+  [[{ bundleId: 'dk.x', name: 'pid:5', pid: 9 }], 'pid:5', null, 'et program der HEDDER «pid:5» naas ikke ad den vej'],
+  [[{ bundleId: 'dk.x', name: 'X', pid: 5 }], 'pid:5', null, 'et program MED id naas ikke paa sin proces'],
+];
+const BUNDNE = [
+  [[['dk.a', 'X'], ['dk.b', 'Y']], '=dk.b', 1, 'det praecise id'],
+  [[['DK.A', 'X']], '=dk.a', null, 'andre store/smaa: intet'],
+  [[['dk.z', 'dk.a']], '=dk.a', null, 'et program der HEDDER som id\'et: intet'],
+  [[['dk.a', 'X']], '=', null, 'tomt: intet'],
+];
+
+const { findProgram } = await import(join(ROOT, 'mcp-server', 'helper.js'));
+const jsNavne = NAVNE.map(([navne, want]) => {
+  const apps = navne.map((name, i) => ({ name, bundleId: `dk.proeve.${i}` }));
+  const hit = findProgram(apps, want); return hit ? apps.indexOf(hit) : null;
+});
+const jsApps = APPS.map(([ids, navne, want]) => {
+  const apps = ids.map((bundleId, i) => ({ bundleId: bundleId ?? '', name: navne[i] }));
+  const hit = findProgram(apps, want); return hit ? apps.indexOf(hit) : null;
+});
+
+// B · tegn-reglerne i JS, for hvert Unicode-tegn
+const alleTegn = function* () { for (let cp = 0; cp <= 0x10FFFF; cp++) if (cp < 0xD800 || cp > 0xDFFF) yield cp; };
+const jsTrim = [], jsCf = [], jsSmaa = [];
+for (const cp of alleTegn()) {
+  const c = String.fromCodePoint(cp);
+  if ((c + 'x').trim() === 'x') jsTrim.push(cp);
+  if (/\p{Cf}/u.test(c)) jsCf.push(cp);
+  const l = c.toLowerCase(); if (l !== c) jsSmaa.push(`${cp.toString(16)}:${Array.from(l, x => x.codePointAt(0).toString(16)).join(',')}`);
+}
+
+// A + B · hjaelperens Navne.swift, kompileret for sig
+const ARB = mkdtempSync(join(tmpdir(), 'cmcp-usynlige-navne-'));
+writeFileSync(join(ARB, 'main.swift'), `import Foundation
+struct N: Decodable { let navne: [String]; let want: String }
+struct A: Decodable { let ids: [String?]; let navne: [String?]; let want: String }
+struct O: Decodable { let argv: [String]; let opslag: [String: String]; let findes: [String] }
+struct Ind: Decodable { let navne: [N]; let apps: [A]; let oversaet: [O]; let jsKoder: [Int] }
+let ind = try! JSONDecoder().decode(Ind.self, from: FileHandle.standardInput.readDataToEndOfFile())
+func tal(_ v: Navne.Valg) -> Any { if case .fundet(let i) = v { return i }; return NSNull() }
+var trim: [Int] = [], cf: [Int] = [], smaa: [String] = []
+var maxAlder = (0, 0)
+for cp in 0...0x10FFFF where cp < 0xD800 || cp > 0xDFFF {
+  let s = Unicode.Scalar(UInt32(cp))!
+  if Navne.kant.contains(UInt32(cp)) { trim.append(cp) }
+  if s.properties.generalCategory == .format { cf.append(cp) }
+  let l = Navne.smaa([s]); if l != [s] { smaa.append(String(cp, radix: 16) + ":" + l.map { String($0.value, radix: 16) }.joined(separator: ",")) }
+  if let a = s.properties.age, (a.major, a.minor) > maxAlder { maxAlder = (a.major, a.minor) }
+}
+let ud: [String: Any] = [
+  "navne": ind.navne.map { tal(Navne.vaelg($0.navne, $0.want)) },
+  "tvetydig": ind.navne.map { Navne.vaelg($0.navne, $0.want) == .tvetydig },
+  "apps": ind.apps.map { tal(Navne.vaelgApp(ids: $0.ids, navne: $0.navne, want: $0.want)) },
+  "oversaet": ind.oversaet.map { o -> Any in
+    guard let r = Navne.oversaet(o.argv, slaaOp: { o.opslag[$0] }, findesPraecist: { o.findes.contains($0) }) else { return NSNull() }
+    return ["argv": r.argv, "bundet": r.bundet] },
+  "id": [Navne.id(bundleId: nil, pid: 5), Navne.id(bundleId: "", pid: 6), Navne.id(bundleId: "dk.a", pid: 7)],
+  "trim": trim, "cf": cf, "smaa": smaa,
+  // Tegn JS kender, men denne Swift-runtime ikke har i sine tabeller (Unicode-version, R17 Opus).
+  "ukendteAfJs": ind.jsKoder.filter { Unicode.Scalar(UInt32($0)).map { $0.properties.age == nil } ?? true },
+  "unicode": String(maxAlder.0) + "." + String(maxAlder.1)]
+FileHandle.standardOutput.write(try! JSONSerialization.data(withJSONObject: ud))
+`);
+const BIN = join(ARB, 'navne');
+execFileSync('swiftc', ['-O', join(KILDE, 'Navne.swift'), join(ARB, 'main.swift'), '-o', BIN], { stdio: 'pipe', timeout: 300000 });
+const sw = JSON.parse(execFileSync(BIN, { encoding: 'utf8', maxBuffer: 64 << 20, timeout: 300000, input: JSON.stringify({
+  navne: NAVNE.map(([navne, want]) => ({ navne, want })),
+  apps: APPS.map(([ids, navne, want]) => ({ ids, navne, want })),
+  oversaet: OVERSAET.map(([argv, opslag, findes]) => ({ argv, opslag, findes })),
+  jsKoder: [...jsCf, ...jsSmaa.map(e => parseInt(e.split(':')[0], 16))],
+}) }));
+
+NAVNE.forEach(([, , forventet, hvad], i) => {
+  check(`1.${i + 1} serveren: ${hvad}`, jsNavne[i] === forventet, `fik ${jsNavne[i]}, ventede ${forventet}`);
+  check(`2.${i + 1} hjaelperen: ${hvad}`, sw.navne[i] === forventet, `fik ${sw.navne[i]}, ventede ${forventet}`);
+});
+APPS.forEach(([, , , forventet, hvad], i) => {
+  check(`1a.${i + 1} serveren (id+navn): ${hvad}`, jsApps[i] === forventet, `fik ${jsApps[i]}, ventede ${forventet}`);
+  check(`2a.${i + 1} hjaelperen (id+navn): ${hvad}`, sw.apps[i] === forventet, `fik ${sw.apps[i]}, ventede ${forventet}`);
+});
+PIDS.forEach(([apps, want, forventet, hvad], i) => {
+  const hit = findProgram(apps, want);
+  check(`1c.${i + 1} serveren, pid: ${hvad}`, (hit ? apps.indexOf(hit) : null) === forventet, JSON.stringify(hit));
+});
+BUNDNE.forEach(([apps, want, forventet, hvad], i) => {
+  const liste = apps.map(([bundleId, name]) => ({ bundleId, name }));
+  const hit = findProgram(liste, want);
+  check(`1b.${i + 1} serveren, bundet maal: ${hvad}`, (hit ? liste.indexOf(hit) : null) === forventet, JSON.stringify(hit));
+});
+check('2b et tvetydigt navn er sit eget svar i hjaelperen (ingen faldbag til disken)', sw.tvetydig[1] === true && sw.tvetydig[0] === false);
+OVERSAET.forEach(([, , , forventet, hvad], i) =>
+  check(`2c.${i + 1} oversaettelsen ved indgangen: ${hvad}`,
+    JSON.stringify(sw.oversaet[i] && { argv: sw.oversaet[i].argv, bundet: sw.oversaet[i].bundet }) === JSON.stringify(forventet), JSON.stringify(sw.oversaet[i])));
+const forskel = (a, b) => { const s = new Set(b.map(String)); const t = new Set(a.map(String));
+  return [...a.filter(x => !s.has(String(x))), ...b.filter(x => !t.has(String(x)))].slice(0, 6); };
+check(`3a trim: samme ${jsTrim.length} tegn i JS og Swift`, jsTrim.length === sw.trim.length && forskel(jsTrim, sw.trim).length === 0, JSON.stringify(forskel(jsTrim, sw.trim)));
+// ⛔ CI 9/10 (a6673b4, som Opus forudsagde i R17): GitHubs Mac har Node med Unicode 17 og en
+//    Swift-runtime med aeldre tabeller; 28 nye tegn (fx U+A7CE) faar smaa bogstaver i JS men ikke i
+//    Swift. Reglen er den samme - runtimes kender forskellige tegn. Sammenlign derfor de tegn BEGGE
+//    kender, og sig hvor mange der er udeladt. Konsekvensen er en KENDT GRAENSE for ubundne laeseveje;
+//    skrivninger er bundet til det praecise id (bundet-maal.mjs).
+const swUkendt = new Set(sw.ukendteAfJs);
+const kendtJs = (cp) => !/\p{Cn}/u.test(String.fromCodePoint(cp));
+const kp = (e) => typeof e === 'number' ? e : parseInt(String(e).split(':')[0], 16);
+const begge = (e) => kendtJs(kp(e)) && !swUkendt.has(kp(e));
+const jsCfB = jsCf.filter(begge), swCfB = sw.cf.filter(begge), jsSmaaB = jsSmaa.filter(begge), swSmaaB = sw.smaa.filter(begge);
+const udeladt = (jsCf.length - jsCfB.length) + (sw.cf.length - swCfB.length) + (jsSmaa.length - jsSmaaB.length) + (sw.smaa.length - swSmaaB.length);
+const vers = `Node Unicode ${process.versions.unicode}, Swift ${sw.unicode}`;
+check(`3b usynlige tegn (Cf): samme ${jsCfB.length} tegn i JS og Swift (${vers})`, forskel(jsCfB, swCfB).length === 0, JSON.stringify(forskel(jsCfB, swCfB)));
+check(`3c smaa bogstaver: samme ${jsSmaaB.length} tegn i JS og Swift (${vers})`, forskel(jsSmaaB, swSmaaB).length === 0, JSON.stringify(forskel(jsSmaaB, swSmaaB)));
+check(`3d kun tegn den ene runtime ikke kender er udeladt (${udeladt}), og de er faa`, udeladt <= 200, String(udeladt));
+
+// C · kaldestederne
+const helperJs = readFileSync(join(ROOT, 'mcp-server', 'helper.js'), 'utf8');
+const krop = (src, start) => { const i = src.indexOf(start); return i < 0 ? '' : src.slice(i, src.indexOf('\n}', i)); };
+check('4 resolveBundleId (porten) bruger findProgram', /findProgram\(/.test(krop(helperJs, 'export async function resolveBundleId(')));
+check('5 resolveApp (hvem er forrest) bruger findProgram', /findProgram\(/.test(krop(helperJs, 'export async function resolveApp(')));
+const kilder = readdirSync(KILDE).filter(f => f.endsWith('.swift'));
+const src = Object.fromEntries(kilder.map(f => [f, readFileSync(join(KILDE, f), 'utf8')]));
+const ax = src['Accessibility.swift'], mainSwift = src['main.swift'];
+check('6a AX.app er opslaget og intet andet', /static func app\(bundleId: String\) -> NSRunningApplication\? \{ appOpslag\(bundleId\)\.app \}/.test(ax));
+check('6a2 opslaget vaelger med Navne.vaelgApp og returnerer netop det valgte - intet foer det (R17, Astra A17)',
+  /static func appOpslag\(_ hvad: String\) -> \(app: NSRunningApplication\?, tvetydig: Bool\) \{\n\s+let alle = allApps\(\)\n\s+\/\/[^\n]*\n\s+if kunPraecistId \{ return \(alle\.first \{ \$0\.bundleIdentifier == hvad \}, false\) \}\n\s+\/\/[^\n]*\n\s+if hvad\.hasPrefix\("pid:"\) \{ return \(alle\.first \{ Navne\.id\(bundleId: \$0\.bundleIdentifier, pid: \$0\.processIdentifier\) == hvad \}, false\) \}\n\s+switch Navne\.vaelgApp\(ids: alle\.map \{ \$0\.bundleIdentifier \}, navne: alle\.map \{ \$0\.localizedName \}, want: hvad\) \{\n\s+case \.fundet\(let i\): return \(alle\[i\], false\)\n\s+case \.tvetydig: return \(nil, true\)\n\s+case \.intet: return \(nil, false\)/.test(ax));
+check('6b programmer paa disken: praecist filnavn, ellers Navne.vaelg over HELE listen og netop det valgte (R17, Astra A18)',
+  /if FileManager\.default\.fileExists\(atPath: k\.path\) \{ return k \}\n\s+\}\n(\s+\/\/[^\n]*\n)*\s+var fund: \[URL\] = \[\]\n\s+for m in mapper \{\n\s+for f in \(try\? FileManager\.default\.contentsOfDirectory\(atPath: m\)\) \?\? \[\] where f\.hasSuffix\("\.app"\) \{\n\s+fund\.append\(URL\(fileURLWithPath: m\)\.appendingPathComponent\(f\)\)\n\s+\}\n\s+\}\n\s+/.test(ax) && /guard case \.fundet\(let i\) = Navne\.vaelg\(fund\.map \{ \$0\.deletingPathExtension\(\)\.lastPathComponent \}, hvad\) else \{ return nil \}\n\s+return fund\[i\]/.test(ax));
+check('6h et bundet maal holder hele vejen gennem hjaelperen: kun praecist id, ingen disk (R18, Astra)',
+  /^AX\.kunPraecistId = oversatArgv\.bundet\nlet args = Args\(oversatArgv\.argv\)/m.test(mainSwift)
+  && /if kunPraecistId \{ return \(alle\.first \{ \$0\.bundleIdentifier == hvad \}, false\) \}/.test(ax)
+  && /if o\.tvetydig \|\| kunPraecistId \{ return \(nil, false\) \}/.test(ax)
+  && /let opslag = appOpslag\(hvad\)\n\s+if kunPraecistId && opslag\.app == nil \{\n\s+return \(false,/.test(ax));
+check('6c --app oversaettes ét sted, foer alle kommandoer, og et bundet maal der er vaek er en fejl',
+  /^guard let oversatArgv = Navne\.oversaet\(CommandLine\.arguments, slaaOp: \{ AX\.app\(bundleId: \$0\)\.map \{ Navne\.id\(bundleId: \$0\.bundleIdentifier, pid: \$0\.processIdentifier\) \} \},\n\s+findesPraecist: \{ id in AX\.allApps\(\)\.contains \{ \$0\.bundleIdentifier == id \} \}\) else \{\n\s+Out\.fail\("the app the gate judged is no longer running - nothing was done", code: "app-gone"\)\n\}\nAX\.kunPraecistId = oversatArgv\.bundet\nlet args = Args\(oversatArgv\.argv\)/m.test(mainSwift));
+const navneSammenligninger = kilder.flatMap(f => src[f].split('\n').map((l, i) => ({ f, n: i + 1, l })))
+  .filter(({ f, l }) => f !== 'Navne.swift' && /(localizedName|applicationName)\??\.lowercased\(\)/.test(l));
+check('6d ingen anden sammenligning af programnavne end adgangskode-tjekket (kun et ekstra afslag)',
+  navneSammenligninger.length === 1 && navneSammenligninger[0].f === 'Capture.swift'
+  && /let navngivet = content\.applications\.filter \{\n\s+\$0\.bundleIdentifier == bid \|\| \$0\.applicationName\.lowercased\(\) == bid\.lowercased\(\)\n\s+\}\n\s+let axNavngivet/.test(src['Capture.swift']),
+  navneSammenligninger.map(x => `${x.f}:${x.n}`).join(', '));
+check('6e opstarten stopper ved et tvetydigt navn - baade opslaget og selve starten',
+  /let o = appOpslag\(hvad\)\n\s+if let k = o\.app \{ return \(k\.bundleIdentifier, true\) \}\n\s+\/\/[^\n]*\n\s+if o\.tvetydig \|\| kunPraecistId \{ return \(nil, false\) \}/.test(ax)
+  && /let opslag = appOpslag\(hvad\)\n\s+if kunPraecistId && opslag\.app == nil \{[\s\S]{0,160}\n\s+if opslag\.tvetydig \{/.test(ax));
+check('2d et program uden id faar sin proces som id (pid:<n>)', JSON.stringify(sw.id) === '["pid:5","pid:6","dk.a"]', JSON.stringify(sw.id));
+check('6g alle filtre sammenligner gennem AX.passer, og opslaget kender pid:',
+  /static func passer\(_ a: NSRunningApplication, _ scope: String\) -> Bool \{\n\s+Navne\.id\(bundleId: a\.bundleIdentifier, pid: a\.processIdentifier\) == scope\n\s+\}/.test(ax)
+  && (ax.match(/return AX\.passer\(a, scope\)/g) || []).length === 3 && /if let scope = args\.str\("app"\), !AX\.passer\(a, scope\) \{ continue \}/.test(mainSwift)
+  && (src['Capture.swift'].match(/AX\.passer\(\$0, bid\)/g) || []).length === 3
+  && /if hvad\.hasPrefix\("pid:"\) \{ return \(alle\.first \{ Navne\.id\(bundleId: \$0\.bundleIdentifier, pid: \$0\.processIdentifier\) == hvad \}, false\) \}/.test(ax)
+  && /slaaOp: \{ AX\.app\(bundleId: \$0\)\.map \{ Navne\.id\(bundleId: \$0\.bundleIdentifier, pid: \$0\.processIdentifier\) \} \}/.test(mainSwift));
+check('6f leveringen (modtager) bruger kun opslaget', /guard let app = AX\.app\(bundleId: navn\) else \{/.test(mainSwift));
+
+// 7-8 · gennem serverens rigtige opslag, med en attrap der svarer som Gustavs Mac
+const h = lavFalskHjaelper('cmcp-usynlige');
+process.env.CMCP_HELPER = h.sti;
+const { resolveBundleId, resolveApp } = await import(join(ROOT, 'mcp-server', 'helper.js'));
+h.saetSvar({ apps: { apps: [
+  { name: 'Finder', bundleId: 'com.apple.finder', pid: 3301, active: false },
+  { name: `${LRM}WhatsApp`, bundleId: 'net.whatsapp.WhatsApp', pid: 3303, active: false },
+] } });
+const bid = await resolveBundleId('WhatsApp');
+check('7 porten ser net.whatsapp.WhatsApp for app "WhatsApp"', bid === 'net.whatsapp.WhatsApp', String(bid));
+const ra = await resolveApp('WhatsApp');
+check('8 resolveApp ser samme program', ra?.bundleId === 'net.whatsapp.WhatsApp', JSON.stringify(ra));
+h.saetSvar({ apps: { apps: [
+  { name: 'Browser', bundleId: 'dk.same', pid: 101, active: false },
+  { name: 'Browser', bundleId: 'dk.same', pid: 100, active: true },
+] } });
+const p2 = await resolveApp('Browser');
+check('8b «er det programmet mennesket bruger?» gaelder alle processer med id\'et - to vinduer, den aktive SIDST (R17, Opus P2)', p2?.active === true, JSON.stringify(p2));
+h.saetSvar({ apps: { apps: [
+  { name: 'Other', bundleId: 'dk.same', pid: 100, active: true },
+  { name: 'Wanted', bundleId: 'dk.same', pid: 101, active: false },
+] } });
+const p2c = await resolveApp('Wanted');
+check('8d samme id, ANDET navn: navnet er tvetydigt og afvises (R18, Opus)', p2c === null, JSON.stringify(p2c));
+const p2b = await resolveApp('=dk.same');
+check('8c et bundet id slaas op praecist og er aktivt, naar én proces med id\'et er', p2b?.bundleId === 'dk.same' && p2b?.active === true, JSON.stringify(p2b));
+
+// 9-11 · den rigtige hjaelper
+const hjaelper = [join(ROOT, 'helper', '.build', 'release', 'cmcp-helper'), join(ROOT, 'mcp-server', 'vendor', 'cmcp-helper')].find(p => existsSync(p));
+const j = (a) => { try { return JSON.parse(execFileSync(hjaelper, a, { encoding: 'utf8', timeout: 15000 })); } catch (e) { try { return JSON.parse(String(e.stdout)); } catch { return { fejl: String(e.message).slice(0, 160) }; } } };
+if (!hjaelper) console.log('SPR. 9-11 ingen bygget hjaelper');
+else {
+  const koerende = (j(['apps', '--all']).apps || []).map(a => a.bundleId);
+  // 11 · R2 (Opus): bindingen maalt paa et program der koerer paa enhver Mac
+  if (koerende.includes('com.apple.finder')) {
+    check('11a resolve-app --app Finder: navnet er oversat til id ved indgangen', j(['resolve-app', '--app', 'Finder']).app === 'com.apple.finder');
+    check('11b resolve-app --app finder: smaa bogstaver', j(['resolve-app', '--app', 'finder']).app === 'com.apple.finder');
+    check(`11c resolve-app --app "Finder\\u0085": U+0085 fjernes ikke - intet fundet`, j(['resolve-app', '--app', `Finder${NEL}`]).bundleId == null);
+  } else console.log('SPR. 11 Finder koerer ikke');
+  const harWhatsApp = (() => { try { return readdirSync('/Applications').includes(`${LRM}WhatsApp.app`); } catch { return false; } })();
+  if (harWhatsApp) {
+    const r = j(['resolve-app', '--app', 'WhatsApp']);
+    check(`9 den rigtige hjaelper finder /Applications/${LRM}WhatsApp.app ud fra "WhatsApp"`, r.bundleId === 'net.whatsapp.WhatsApp', JSON.stringify(r).slice(0, 160));
+  } else console.log('SPR. 9 WhatsApp ligger ikke med det usynlige tegn paa denne Mac');
+  if (koerende.includes('net.whatsapp.WhatsApp')) {
+    const vn = j(['windows', '--app', 'WhatsApp']), vi = j(['windows', '--app', 'net.whatsapp.WhatsApp']);
+    check('10a windows --app WhatsApp = samme vinduer som med id', vn.count >= 1 && vn.count === vi.count, `navn ${vn.count} · id ${vi.count}`);
+    const fn = j(['find', '--app', 'WhatsApp', '--role', 'AXButton', '--limit', '3']), fi = j(['find', '--app', 'net.whatsapp.WhatsApp', '--role', 'AXButton', '--limit', '3']);
+    check('10b find --app WhatsApp = samme fund som med id', fn.count >= 1 && fn.count === fi.count, `navn ${fn.count} · id ${fi.count}`);
+  } else console.log('SPR. 10 WhatsApp koerer ikke - find og vinduer med navnet er ikke maalt');
+}
+
+console.log(fails.length ? `DUMPET: ${fails.length} tjek` : 'Alle tjek bestået.');
+process.exit(fails.length ? 1 : 0);
diff --git a/test/vaelger.mjs b/test/vaelger.mjs
index c1048c3a..bed55092 100644
--- a/test/vaelger.mjs
+++ b/test/vaelger.mjs
@@ -8,6 +8,7 @@
 //    `set_value`, som overskriver tekst, må aldrig gætte med «det første».
 //
 // Kører på et prøvemål VI ejer (usynligt vindue uden for skærmen, se fixture).
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { execFileSync, spawn } from 'node:child_process';
 import { existsSync, mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
diff --git a/test/vagt.mjs b/test/vagt.mjs
index 228134db..d8d8be41 100644
--- a/test/vagt.mjs
+++ b/test/vagt.mjs
@@ -14,6 +14,7 @@
 //    Det er et bedre signal end «lever klientens pid stadig», for et pid kan
 //    genbruges af en fremmed proces. Proeve 5 og 6 koerer den aegte vej: et
 //    barnebarn af en skal der doer.
+import './ryd-op.mjs';   // 11/10: mapperne ryddes altid, ogsaa ved dumpet og afbrudt
 import { mkdtempSync, existsSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, dirname } from 'node:path';
diff --git a/tools/bevis.sh b/tools/bevis.sh
index f73ca241..0ae81427 100755
--- a/tools/bevis.sh
+++ b/tools/bevis.sh
@@ -48,9 +48,15 @@ if [ "$UDGIVET" = "UMAALT" ]; then umaalt "npm" "kunne ikke naas"
 elif [ "$UDGIVET" = "$KILDE" ]; then ja "npm = kilden" "$UDGIVET"
 else nej "npm er bagud" "npx giver $UDGIVET, kilden er $KILDE"; fi
 
-FORAN=$(git rev-list origin/main..HEAD --count 2>/dev/null || echo 0)
-if [ "$FORAN" = "0" ]; then ja "alt er skubbet" "0 commits foran origin"
-else nej "ikke skubbet" "$FORAN commits ligger lokalt"; fi
+## ⛔ FUNDET under fuld-review 2/10: hardcoded mod origin/main gav falsk "ikke
+##    skubbet" på 64 commits - lokal main tracker origin/main (git config), men
+##    husets EGNE workflow pusher til en proeve/-gren via PR (main er LÅST,
+##    skub via PR). Tjekket maalte sin egen antagelse, ikke virkeligheden.
+##    Nu: er HEAD med på NOGEN fjern-gren, er den skubbet - navngiv hvilken.
+git fetch origin --quiet 2>/dev/null || true
+PAA_GREN=$(git branch -r --contains HEAD 2>/dev/null | grep -v ' -> ' | sed 's/^ *//' | head -1)
+if [ -n "$PAA_GREN" ]; then ja "alt er skubbet" "HEAD er på $PAA_GREN"
+else nej "ikke skubbet" "HEAD findes på ingen fjern-gren"; fi
 
 CI=$(gh run list -R Agent360dk/computerMCP -w CI --limit 20 --json headSha,conclusion \
       -q "[.[] | select(.headSha==\"$(git rev-parse HEAD)\")] | .[0].conclusion" 2>/dev/null)
diff --git a/tools/dok-pr.sh b/tools/dok-pr.sh
new file mode 100755
index 00000000..99a47947
--- /dev/null
+++ b/tools/dok-pr.sh
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+# tools/dok-pr.sh · dokumentations-PR'en efter en udgivelse (fra genoptag-dok.sh, panel R4-R5, 6-7/10)
+# Sørger for at PR'en `release-<V>-dok` findes, efter at npm HAR <V>. Kaldes af
+# tools/faerdiggoer-udgivelsen.sh og kan genoptages efter enhver fejl.
+# Finder den tilstand der faktisk er (gren lokalt / på origin / PR), og laver kun det der mangler.
+#   bash tools/dok-pr.sh --toer   viser hvad der ville ske, ændrer intet
+#   bash tools/dok-pr.sh          gør det
+set -euo pipefail
+cd "$(dirname "$0")/.."
+V="$(node -p "require('./mcp-server/package.json').version")"
+GREN="release-$V-dok"
+REPO=Agent360dk/computerMCP
+# Pluginnet og markedet foelger PUBLICERET (sync-tal.py) og loeftes derfor HER, efter publish (panel R11, B5).
+FILER="PUBLICERET README.md docs mcp-server/README.md server.json plugin/.claude-plugin/plugin.json .claude-plugin/marketplace.json"
+TOER=0; [ "${1:-}" = "--toer" ] && TOER=1
+stop() { echo "⛔ $*"; exit 1; }
+goer() { echo "   \$ $*"; [ $TOER = 1 ] || "$@"; }
+
+[ "$(npm view @agent360/computer-mcp@$V version 2>/dev/null)" = "$V" ] || stop "npm har ikke $V - det her er kun fejlvej D (npm HAR $V)"
+
+# ⛔ R4 (Astra): ægte gh svarer `[]` på en tom liste - `.[0]` gav da «null null» og en falsk «PR'en findes».
+PR=$(gh pr list --repo $REPO --head "$GREN" --state all --json number,state -q '.[0] | select(. != null) | "\(.number) \(.state)"' 2>/dev/null) || stop "kan ikke læse PR-listen - prøv igen"
+if [ -n "$PR" ]; then
+  echo "✓ PR'en findes allerede: #$PR - intet at gøre her. Videre til trin 7."
+  exit 0
+fi
+
+# ⛔ R4 (Astra): `--exit-code` giver 2 når grenen mangler; alt andet end 0/2 er «kan ikke nå origin», ikke fravær.
+set +e; git ls-remote --exit-code origin "refs/heads/$GREN" >/dev/null 2>&1; RC=$?; set -e
+case $RC in 0) PAA_ORIGIN=1 ;; 2) PAA_ORIGIN=0 ;; *) stop "kan ikke nå origin (git ls-remote gav $RC) - prøv igen" ;; esac
+LOKAL=0; git rev-parse --verify -q "refs/heads/$GREN" >/dev/null && LOKAL=1
+NU=$(git branch --show-current)
+echo "   tilstand: gren lokalt=$LOKAL · på origin=$PAA_ORIGIN · står på '$NU' · ingen PR"
+
+if [ $LOKAL = 1 ] || [ $PAA_ORIGIN = 1 ]; then
+  # Grenen findes: brug den, regenerér intet.
+  [ $LOKAL = 1 ] || goer git fetch origin "$GREN:$GREN"
+  [ "$NU" = "$GREN" ] || { [ -z "$(git status --porcelain)" ] || stop "træet er ikke rent på '$NU' - vis 'git status --short' i chatten"; goer git checkout "$GREN"; }
+  # ⛔ R10 (Astra, MÅLT): fejlede committet efter `checkout -b`, stod grenen uden commit og
+  #    ændringerne i træet. Genoptagelsen sammenlignede kun de committede træer og stoppede
+  #    med «ingen ændringer». Står vi på grenen, har den intet commit ud over main, og er der
+  #    ucommittede ændringer i de filer vi selv skriver: færdiggør committet først.
+  FAERDIGGJORT=0
+  if [ "$(git branch --show-current)" = "$GREN" ] && [ "$(git rev-parse "$GREN")" = "$(git rev-parse origin/main)" ] \
+     && [ -n "$(git status --porcelain -- $FILER)" ]; then
+    [ "$(cat PUBLICERET)" = "$V" ] || goer sh -c "echo $V > PUBLICERET"
+    goer python3 scripts/sync-tal.py
+    goer git add $FILER
+    goer git commit -m "release: $V er udgivet - forbeholdene væk" -- $FILER
+    FAERDIGGJORT=1
+  fi
+  if [ $TOER = 1 ] && { [ $LOKAL = 0 ] || [ $FAERDIGGJORT = 1 ]; }; then
+    echo "   (tørkørsel: grenen hentes ikke, så dens ændringer kontrolleres først i den rigtige kørsel)"
+  else
+    T_GREN=$(git rev-parse --verify -q "$GREN^{tree}") || stop "kan ikke læse grenen $GREN"
+    T_MAIN=$(git rev-parse --verify -q "origin/main^{tree}") || stop "kan ikke læse origin/main"
+    [ "$T_GREN" != "$T_MAIN" ] || stop "grenen har ingen ændringer mod main - spørg i chatten"
+  fi
+  goer git push origin "$GREN"
+else
+  # Ingen gren: sørg for at teksten siger $V, og læg den på en ny gren.
+  [ "$NU" = main ] || stop "står på '$NU', forventet main"
+  [ "$(git rev-parse HEAD)" = "$(git rev-parse origin/main)" ] || stop "main er ikke lig origin/main"
+  [ "$(cat PUBLICERET)" = "$V" ] || goer sh -c "echo $V > PUBLICERET"
+  # ⛔ R5 (Astra): altid, også når PUBLICERET allerede står rigtigt - ellers efterlod en sync-tal-fejl
+  #    en halv rettelse, som næste kørsel committede (kun PUBLICERET, forbeholdet stadig på siden).
+  goer python3 scripts/sync-tal.py
+  [ $TOER = 1 ] || [ -n "$(git status --porcelain -- $FILER)" ] || stop "intet ændret - PUBLICERET og siderne står allerede rigtigt på main? Spørg i chatten"
+  goer git checkout -b "$GREN"
+  goer git add $FILER
+  # ⛔ R11 (Astra, MÅLT): `git commit` uden stier tog HELE staging-området med - også en
+  #    andens staged kildekode, som så blev skubbet på dok-grenen. Kun vores egne filer
+  #    committes; alt andet staged bliver liggende urørt.
+  goer git commit -m "release: $V er udgivet - forbeholdene væk" -- $FILER
+  goer git push origin "$GREN"
+fi
+goer gh pr create --repo $REPO --base main --head "$GREN" \
+  --title "release: $V er udgivet - forbeholdene væk" \
+  --body "npm har $V. Denne PR synkroniserer kun PUBLICERET og de afledte sider (sync-tal.py)."
+goer git checkout main
+echo "✓ PR'en $GREN er oprettet. Videre til trin 7."
diff --git a/tools/faerdiggoer-udgivelsen.sh b/tools/faerdiggoer-udgivelsen.sh
index fbe45b99..2b8253b0 100755
--- a/tools/faerdiggoer-udgivelsen.sh
+++ b/tools/faerdiggoer-udgivelsen.sh
@@ -31,39 +31,42 @@ if [ "$PAA_NPM" != "$VENTET" ]; then
 fi
 
 sig "1 · MCP-registret"
-if command -v mcp-publisher >/dev/null 2>&1; then
-  mcp-publisher publish || { echo "   registret afviste - se ovenfor"; faldt=1; }
-else
-  echo "   mcp-publisher findes ikke lokalt; henter den engangs"
-  npx -y @modelcontextprotocol/publisher publish || { echo "   registret afviste"; faldt=1; }
-fi
-echo -n "   registret siger nu: "
-curl -s "https://registry.modelcontextprotocol.io/v0/servers?search=computer-mcp" \
-  | python3 -c "import json,sys;d=json.load(sys.stdin);print(next((e['server']['version'] for e in d.get('servers',[]) if e.get('_meta',{}).get('io.modelcontextprotocol.registry/official',{}).get('isLatest')),'(ikke fundet)'))"
-
-sig "2 · forbeholdene sletter sig selv"
-echo "$VENTET" > PUBLICERET
-python3 scripts/sync-tal.py
-echo "   filer der stadig naevner 0.1.0:"
-grep -rl "0\.1\.0" README.md docs/*.html 2>/dev/null | sed 's/^/     /' || echo "     ingen"
-
-sig "3 · er teksten selv-konsistent efter sletningen?"
-python3 scripts/sync-tal.py >/dev/null   # to gange = skal give nul aendring
-if [ -n "$(git diff --name-only -- README.md docs/ PUBLICERET)" ]; then
-  echo "   aendret (forventet):"; git diff --stat -- README.md docs/ PUBLICERET | sed 's/^/     /'
+# ⛔ 7/10 (panel R8, E): et fejlet login fortsatte til publish (`faldt=1` og videre).
+#    Nu: viser registret allerede versionen, sker intet; ellers login, og fejler det,
+#    STOP - ingen publish efter et fejlet login.
+registret() {
+  curl -sf "https://registry.modelcontextprotocol.io/v0/servers?search=computer-mcp" \
+    | python3 -c "
+import json, sys
+NAVN = 'io.github.Agent360dk/computer-mcp'
+d = json.load(sys.stdin)
+f = [e for e in d.get('servers', []) if e.get('server', {}).get('name') == NAVN
+     and e.get('_meta', {}).get('io.modelcontextprotocol.registry/official', {}).get('isLatest')]
+print(f[0]['server']['version'] if f else 'IKKE FUNDET')"
+}
+FOER="$(registret || echo 'intet svar')"
+echo "   registret: $FOER (ventet $VENTET)"
+if [ "$FOER" != "$VENTET" ]; then
+  PUB=mcp-publisher; command -v mcp-publisher >/dev/null 2>&1 || PUB="npx -y @modelcontextprotocol/publisher"
+  $PUB login github || { echo "⛔ login til registret fejlede - intet er sendt til registret. Koer scriptet igen."; exit 1; }
+  $PUB publish || { echo "⛔ registret afviste udgivelsen - se ovenfor. Koer scriptet igen."; exit 1; }
+  EFTER="$(registret || echo 'intet svar')"
+  echo "   registret nu: $EFTER"
+  [ "$EFTER" = "$VENTET" ] || { echo "⛔ registret viser ikke $VENTET endnu (svar: $EFTER) - maal igen om lidt"; faldt=1; }
 fi
 
-sig "4 · beviskortet"
-bash tools/bevis.sh || faldt=1
+sig "2 · dokumentations-PR'en (forbeholdene vaek)"
+# ⛔ 7/10 (panel R2-R8, E): her stod en kildeaendrende beviskoersel (tools/bevis.sh
+#    aendrer midlertidigt mcp-server/audit.js), en git add uden npm-README'en og en
+#    gren med et andet navn end release.sh's. Nu én faelles logik for PR'en:
+#    tools/dok-pr.sh finder tilstanden (PR findes, gren findes, ingen gren) og laver
+#    kun det der mangler. Beviskortet koeres for sig: bash tools/bevis.sh.
+bash tools/dok-pr.sh || faldt=1
 
-sig "5 · i hus"
-git add PUBLICERET README.md docs/ server.json 2>/dev/null || true
-git status --short | sed 's/^/   /'
 echo
-echo "   Naeste skridt er i haanden, med vilje:"
-echo "     git commit -F - <<'M'"
-echo "     udgivet: $VENTET staar paa npm, forbeholdene er vaek"
-echo "     M"
-echo "     git push origin main"
-
-[ "$faldt" -eq 0 ] && sig "ALT GROENT" || { sig "NOGET FALDT - se ovenfor"; exit 1; }
+if [ $faldt -eq 0 ]; then
+  echo "✅ npm, registret og dokumentations-PR'en staar paa $VENTET."
+else
+  echo "⛔ noget fejlede ovenfor - intet er gaaet tabt; koer scriptet igen."
+  exit 1
+fi