[Juliusolsson05]

What this consolidates

This publishes the exact Agent Code state that has been tested locally after the feed-render rewrite, UI component/modal foundation, macOS distribution hardening, Claude prompt-delivery repair, and the follow-up rendering fixes. It supersedes the overlapping work in #524, #526, and #529 so remote main becomes the single clean source of truth.

Machine-local workflow references, PTY probes, project-tree.txt, the standalone packages/workflow-mcp repository, and an unrelated vendor/codex-src checkout advance are intentionally excluded.

Verification

• npm run typecheck — pass
• npm run build — pass
• npm run audit:production — pass, 0 vulnerabilities
• rendering fixture privacy audit — LIKELY_SAFE, no findings
• focused prompt-delivery tests — 5/5 pass
• focused dictation modal renderer test — pass
• full Vitest suite — 752 passed, 4 skipped; three scheduler-sensitive polling/file-write tests failed under full parallel load and passed when isolated (the identical 3-second JsonlTailer tests in the Claude/Codex submodules, plus SessionRecorderManager finalization)

Why one consolidation PR

The tested workspace combines the three original PR branches plus fixes made while exercising them together. Merging the old branches independently would recreate intermediate combinations that are no longer the tested product state.