tenant.openagents/omega

Open the front door with no project, wire the router, and photograph both

Open the front door with no project, wire the router, and photograph both omega#76, #77 and #78 each landed with a source-level suite and no rendered evidence, and each said so. This closes the shared gap: the front door's typing path, the router's wiring, and a rendered proof for all three. OMEGA-DELTA-0034 — the front door works with no project open. Upstream put a `has_open_project` early return in front of every entry to the agent panel ("a bit brute force, but it works"). A window with nothing to restore is by definition a window with no project, so that refused a composer to every new user: omega#76's exit, failing. The guards on the front door's own path are gone. The one that could plausibly have been load-bearing was checked rather than assumed — `NativeAgentServer::connect` takes the project as `_project` and never reads it. The workspace-touching guards stay, and removing one is asserted to fail: a terminal genuinely needs a working directory, and `should_create_terminal_for_new_entry` had to *gain* that requirement, because `project.supports_terminal()` is true for any local project and `new_thread`'s own guard was what had been standing in for it. `agent::ToggleFocus` moves off `cmd-?`, which is macOS's reserved Help chord, to `ctrl-cmd-a`. OMEGA-DELTA-0035 — the router is wired, and a pin is a gesture. Omega's native agent entry resolves to an `OmegaAgentConnection`, so every new first-party session is routed on purpose and recorded before the turn exists; the panel polls the engine's framed `get_capacity` answer into `observe_capacity`; and a pin menu sits on each thread's disclosure line. The pin is not a mode flag. `pin_session` and `pin_next_session` require an `omega_front_door::PinGesture`, every variant of which is a control a person operates, and `omega_deltas` asserts every call site passes a literal variant. An engine lane is Full Auto authority, so owner gate 8 reaches the pin as directly as it reaches Start. Unpinned still routes to the native loop, always. Rendered proof. `zed_visual_test_runner` was in the fork with no baselines and no invocation. `script/omega-visual-proof` is the invocation; seven `omega_*` baselines are committed. Captured: the front door on a projectless window, typing reaching its composer, the executor line on all three thread kinds, an honoured pin, and an unhonoured pin with its fallback reason. Each capture is preceded by an assertion on the line's text read through the same method the render calls, and on the record's coherence — which is what caught a capture about to photograph an incoherent record, and a capture that had photographed the launchpad because the panel had never opened. Falsified. Restoring the `activate_draft` guard fails both the rendered proof and `test_empty_workspace_opens_the_front_door`; reverting the native agent entry, laundering a `PinGesture`, restoring a bare `NativeAgentServer` downcast, and restoring `cmd-?` each fail their own check. An earlier falsification aimed at `activate_new_thread` passed, because the rendered path crosses `activate_draft` — the check was re-aimed at the guard that path actually crosses rather than trusted. Release Notes: - Omega now opens a usable agent thread on a window with no project: a fresh launch lands on the composer and typing starts a real thread. - Every Omega Agent thread now names the executor that ran it and why it was routed there, including a pin that could not be honoured and the reason it could not. - Added an executor pin control to each thread's disclosure line. - Moved the agent panel's toggle off `cmd-?`, which macOS reserves for Help, to `ctrl-cmd-a`.