Bridge takes real calls

Added

• Windows: Bridge takes real calls. Click or hold the orb and talk — Bridge hears you, answers aloud, and works the workspace by voice: launch agents, hand an agent a refined prompt, read a pane, wait for it to finish, focus, tidy, close, or run a command, asking first before it closes or runs anything.
• Windows: the Bridge orb has a seat in the title bar, left of the bell. Hold it to talk, click it to start or end a call; during a call the seat lights in the phase's colour — cyan while you or Bridge speak, violet while it thinks, amber on an error.
• Windows: on a call, a strip drops over the top of the pane — the orb, what Bridge is doing, the latest line said, a chip for each thing it did, Yes/No when it asks, and an end button — and lifts away when the call ends.
• Windows: the orb is the same living sphere as the Mac app — a lit plasma core with its halo and orbit rings, comets on a call, ripples while the line is live, and a sweeping ring while it connects.

Changed

• The Claude Code model menu offers Claude Fable 5.1, Anthropic's newest frontier model, in place of Claude Fable 5.
• Pane headers no longer print a name that truncates at split width: every pane leads with its liveness dot and mark, the full title sits in the tooltip and at the top of the ⋯ menu, and flipping the terminals shows the work title large with the agent and role beneath it.
• A pane header's middle reads on from the mark — a browser's address, a thread's provider or token count — and terminal, files, and apps panes leave it empty.
• One workspace menu in the title bar holds Tidy Panes, Flip Terminals, and Usage in place of the three chips beside the bell.
• The signed-out welcome screen is the Mac app's: the agent orbit, the BridgeMind wordmark, "The First Agent Super App" rising letter by letter with its rule, and Sign in beneath — a still frame under Reduce Motion.
• The sidebar is re-measured against the Mac app: tighter header inset, two-line chat rows with the last line said, quiet and live count capsules, and a tier label in the plan's ink.
• Updates reach every signed-in builder: checking, downloading, and restarting into a new build no longer requires an active plan, so a lapsed subscription still receives security fixes.
• Windows: F5, Ctrl+R, Ctrl+P, Ctrl+F, F3, and Ctrl+S no longer trigger the browser engine's reload, print, find bar, or save page inside the app.
• A chat that is waiting on you says "Needs you" in the rail, and when you leave a chat for Settings only the chat you would return to dims.

Fixed

• Windows: dragging a pane onto another to swap them, and dragging an agent's chat tabs to reorder them, work — a press becomes a drag after a few pixels, Escape cancels, and the target pane lights up.
• Windows: after a Browser pane has been open, the window keeps resizing and moving its content correctly, focus returns to the app from Alt+Tab, the taskbar, or a notification, and the window edge stays draggable under a full-screened Browser pane.
• Reading a Browser pane no longer counts as leaving the app.
• The Browser pane's address bar shows the page that actually loaded; Back no longer leads to a page that was never shown.
• Cursor Agent launches with your prompt again.
• A terminal pane that reattaches after a reload, or a wizard-launched session's first pane, brings the shell to the pane's real size instead of leaving the TUI painting into a stale box.
• Adding a workspace no longer stalls sign-out and every other command while the folder picker is open.
• A chat left marked Running or Waiting by a crash or force-quit is settled when it is next opened, so a new message can be sent.
• An oversize command or query in a Codex transcript is shortened to one line instead of dropping the transcript item.
• A Files pane entry that cannot be resolved inside the workspace is hidden instead of making its folder unlistable.
• Windows: OneDrive Files On-Demand folders, Dev Drive, and Store-app shims are no longer refused as links when you give an agent a place; only real symlinks and junctions are.
• The terminal history store waits for a sibling process to release the file instead of treating a lock as damage.
• The Usage dashboard no longer crashes on a date written with CJK characters.
• Typing Ctrl+D, Ctrl+T, Ctrl+W, Ctrl+[ or Ctrl+] in a terminal reaches the shell instead of splitting, opening, closing or switching panes, and Escape in a full-screen terminal reaches the terminal.
• Dropping files from Explorer onto a terminal inserts their paths again; the app had been denying itself the drop events.
• A sent message no longer reappears in the chat or thread composer after you switch away and back, and a message that fails to send returns to the composer ahead of anything you typed since.
• Pressing Enter while composing with an IME no longer saves a half-typed memory note.
• An agent's chosen face survives opening Settings and saving other changes.

Security

• The in-app updater accepts only a signed installer whose signature names BridgeMindOne-x64-setup.exe and was made after the running build, so an older release cannot be replayed as an update.
• Claude Code launched from Chat, an agent's chat, Code Thread, or Create with AI reads only your own user-level Claude settings — a checked-in .claude/settings.json in a workspace can no longer grant permissions, set environment, or point at an API-key helper — and Bash is denied in every mode below Full.
• Auto's turn limit is enforced natively: a run stops at its mode's limit even if the screen's counter disagrees.
• Paths dropped or pasted into a terminal are quoted for that pane's shell, and a path the shell could expand is refused instead of run.
• Shell-integration prompt marks carry a per-launch token, so a program you run, a remote host, or pasted text cannot start or end a "command", relabel the folder, or teach ghost suggestions.
• Windows: agent launches that pass through cmd.exe resolve command names from PATH only, never from the workspace folder.
• An agent's memory and skills text is fenced in its briefing as data, never as instructions.
• What Bridge reads from a pane, or sends to the prompt refiner, has credentials redacted first; Bridge can type into agents but never straight into a shell, and every command it runs is one line you confirm.