diff --git a/app/src/components/settings/panels/AutocompletePanel.tsx b/app/src/components/settings/panels/AutocompletePanel.tsx
index d30339c88..d6734f26e 100644
--- a/app/src/components/settings/panels/AutocompletePanel.tsx
+++ b/app/src/components/settings/panels/AutocompletePanel.tsx
@@ -28,6 +28,7 @@ const DEFAULT_CONFIG: AutocompleteConfig = {
   style_examples: [],
   disabled_apps: [],
   accept_with_tab: true,
+  overlay_ttl_ms: 1100,
 };
 
 const MAX_LOG_ENTRIES = 200;
@@ -56,6 +57,10 @@ const parseAutocompleteConfig = (raw: unknown): AutocompleteConfig => {
       typeof value.accept_with_tab === 'boolean'
         ? value.accept_with_tab
         : DEFAULT_CONFIG.accept_with_tab,
+    overlay_ttl_ms:
+      typeof value.overlay_ttl_ms === 'number'
+        ? value.overlay_ttl_ms
+        : DEFAULT_CONFIG.overlay_ttl_ms,
   };
 };
 
@@ -77,6 +82,7 @@ const AutocompletePanel = () => {
     DEFAULT_CONFIG.disabled_apps.join('\n')
   );
   const [acceptWithTab, setAcceptWithTab] = useState<boolean>(DEFAULT_CONFIG.accept_with_tab);
+  const [overlayTtlMs, setOverlayTtlMs] = useState<string>(String(DEFAULT_CONFIG.overlay_ttl_ms));
   const [contextOverride, setContextOverride] = useState<string>('');
   const [focusDebug, setFocusDebug] = useState<string>('');
   const [logs, setLogs] = useState<string[]>([]);
@@ -153,6 +159,7 @@ const AutocompletePanel = () => {
       setStyleExamplesText(config.style_examples.join('\n'));
       setDisabledAppsText(config.disabled_apps.join('\n'));
       setAcceptWithTab(config.accept_with_tab);
+      setOverlayTtlMs(String(config.overlay_ttl_ms));
     } catch (err) {
       setError(err instanceof Error ? err.message : 'Failed to load autocomplete settings');
     } finally {
@@ -253,6 +260,7 @@ const AutocompletePanel = () => {
       appendUiLog('saving autocomplete settings');
       const debounce = Number(debounceMs);
       const max = Number(maxChars);
+      const ttl = Number(overlayTtlMs);
       const response = await openhumanAutocompleteSetStyle({
         enabled,
         debounce_ms: Number.isFinite(debounce) ? Math.min(Math.max(debounce, 50), 2000) : 120,
@@ -268,6 +276,7 @@ const AutocompletePanel = () => {
           .map(entry => entry.trim())
           .filter(Boolean),
         accept_with_tab: acceptWithTab,
+        overlay_ttl_ms: Number.isFinite(ttl) ? Math.min(Math.max(ttl, 300), 10000) : 1100,
       });
 
       setEnabled(response.result.config.enabled);
@@ -278,6 +287,7 @@ const AutocompletePanel = () => {
       setStyleExamplesText(response.result.config.style_examples.join('\n'));
       setDisabledAppsText(response.result.config.disabled_apps.join('\n'));
       setAcceptWithTab(response.result.config.accept_with_tab);
+      setOverlayTtlMs(String(response.result.config.overlay_ttl_ms));
       appendLogs(response.logs);
       setMessage('Autocomplete settings saved.');
       await refreshStatus();
@@ -507,6 +517,18 @@ const AutocompletePanel = () => {
               className="w-28 rounded border border-stone-300 bg-white px-2 py-1 text-xs text-stone-700"
             />
           </label>
+          <label className="flex items-center justify-between rounded-xl border border-stone-200 bg-stone-50 px-3 py-2">
+            <span className="text-sm text-stone-700">Overlay TTL (ms)</span>
+            <input
+              type="number"
+              min={300}
+              max={10000}
+              step={100}
+              value={overlayTtlMs}
+              onChange={event => setOverlayTtlMs(event.target.value)}
+              className="w-28 rounded border border-stone-300 bg-white px-2 py-1 text-xs text-stone-700"
+            />
+          </label>
           <label className="flex items-center justify-between rounded-xl border border-stone-200 bg-stone-50 px-3 py-2">
             <span className="text-sm text-stone-700">Style Preset</span>
             <select
diff --git a/app/src/components/settings/panels/__tests__/AutocompletePanel.test.tsx b/app/src/components/settings/panels/__tests__/AutocompletePanel.test.tsx
index ace454ac7..c498b68e8 100644
--- a/app/src/components/settings/panels/__tests__/AutocompletePanel.test.tsx
+++ b/app/src/components/settings/panels/__tests__/AutocompletePanel.test.tsx
@@ -81,6 +81,7 @@ describe('AutocompletePanel', () => {
         style_examples: [],
         disabled_apps: [],
         accept_with_tab: true,
+        overlay_ttl_ms: 1100,
       },
     };
 
diff --git a/app/src/utils/tauriCommands/autocomplete.ts b/app/src/utils/tauriCommands/autocomplete.ts
index bed731c19..eadcf1d66 100644
--- a/app/src/utils/tauriCommands/autocomplete.ts
+++ b/app/src/utils/tauriCommands/autocomplete.ts
@@ -78,6 +78,7 @@ export interface AutocompleteSetStyleParams {
   style_examples?: string[];
   disabled_apps?: string[];
   accept_with_tab?: boolean;
+  overlay_ttl_ms?: number;
 }
 
 export interface AutocompleteConfig {
@@ -89,6 +90,7 @@ export interface AutocompleteConfig {
   style_examples: string[];
   disabled_apps: string[];
   accept_with_tab: boolean;
+  overlay_ttl_ms: number;
 }
 
 export interface AutocompleteSetStyleResult {
diff --git a/overlay/src-tauri/Cargo.lock b/overlay/src-tauri/Cargo.lock
index 1f583f239..81a0717c8 100644
--- a/overlay/src-tauri/Cargo.lock
+++ b/overlay/src-tauri/Cargo.lock
@@ -96,6 +96,28 @@ version = "0.2.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
 
+[[package]]
+name = "alsa"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed7572b7ba83a31e20d1b48970ee402d2e3e0537dcfe0a3ff4d6eb7508617d43"
+dependencies = [
+ "alsa-sys",
+ "bitflags 2.11.0",
+ "cfg-if",
+ "libc",
+]
+
+[[package]]
+name = "alsa-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db8fee663d06c4e303404ef5f40488a53e062f89ba8bfed81f42325aafad1527"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
 [[package]]
 name = "android_system_properties"
 version = "0.1.5"
@@ -161,6 +183,26 @@ version = "1.0.102"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
+[[package]]
+name = "arboard"
+version = "3.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0348a1c054491f4bfe6ab86a7b6ab1e44e45d899005de92f58b3df180b36ddaf"
+dependencies = [
+ "clipboard-win",
+ "image",
+ "log",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation 0.3.2",
+ "parking_lot",
+ "percent-encoding",
+ "windows-sys 0.60.2",
+ "x11rb",
+]
+
 [[package]]
 name = "argon2"
 version = "0.5.3"
@@ -570,6 +612,12 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "block"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d8c1fef690941d3e7788d328517591fecc684c084084702d6ff1641e993699a"
+
 [[package]]
 name = "block-buffer"
 version = "0.10.4"
@@ -588,13 +636,22 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "block2"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c132eebf10f5cad5289222520a4a058514204aed6d791f1cf4fe8088b82d15f"
+dependencies = [
+ "objc2 0.5.2",
+]
+
 [[package]]
 name = "block2"
 version = "0.6.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
 dependencies = [
- "objc2",
+ "objc2 0.6.4",
 ]
 
 [[package]]
@@ -954,6 +1011,21 @@ version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f88a43d011fc4a6876cb7344703e297c71dda42494fee094d5f7c76bf13f746"
 
+[[package]]
+name = "cocoa"
+version = "0.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "667fdc068627a2816b9ff831201dd9864249d6ee8d190b9532357f1fc0f61ea7"
+dependencies = [
+ "bitflags 1.3.2",
+ "block",
+ "core-foundation 0.9.4",
+ "core-graphics 0.21.0",
+ "foreign-types 0.3.2",
+ "libc",
+ "objc",
+]
+
 [[package]]
 name = "colorchoice"
 version = "1.0.5"
@@ -1057,13 +1129,23 @@ dependencies = [
  "version_check",
 ]
 
+[[package]]
+name = "core-foundation"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57d24c7a13c43e870e37c1556b74555437870a04514f7685f5b354e090567171"
+dependencies = [
+ "core-foundation-sys 0.7.0",
+ "libc",
+]
+
 [[package]]
 name = "core-foundation"
 version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -1073,16 +1155,59 @@ version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
+[[package]]
+name = "core-foundation-sys"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3a71ab494c0b5b860bdc8407ae08978052417070c2ced38573a9157ad75b8ac"
+
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
+[[package]]
+name = "core-graphics"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3889374e6ea6ab25dba90bb5d96202f61108058361f6dc72e8b03e6f8bbe923"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.7.0",
+ "foreign-types 0.3.2",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52a67c4378cf203eace8fb6567847eb641fd6ff933c1145a115c6ee820ebb978"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "foreign-types 0.3.2",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa95a34622365fa5bbf40b20b75dba8dfa8c94c734aea8ac9a5ca38af14316f1"
+dependencies = [
+ "bitflags 2.11.0",
+ "core-foundation 0.10.1",
+ "core-graphics-types",
+ "foreign-types 0.5.0",
+ "libc",
+]
+
 [[package]]
 name = "core-graphics"
 version = "0.25.0"
@@ -1107,6 +1232,49 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "coreaudio-rs"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "321077172d79c662f64f5071a03120748d5bb652f5231570141be24cfcd2bace"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation-sys 0.8.7",
+ "coreaudio-sys",
+]
+
+[[package]]
+name = "coreaudio-sys"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ceec7a6067e62d6f931a2baf6f3a751f4a892595bcec1461a3c94ef9949864b6"
+dependencies = [
+ "bindgen",
+]
+
+[[package]]
+name = "cpal"
+version = "0.15.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "873dab07c8f743075e57f524c583985fbaf745602acbe916a01539364369a779"
+dependencies = [
+ "alsa",
+ "core-foundation-sys 0.8.7",
+ "coreaudio-rs",
+ "dasp_sample",
+ "jni",
+ "js-sys",
+ "libc",
+ "mach2",
+ "ndk 0.8.0",
+ "ndk-context",
+ "oboe",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows 0.54.0",
+]
+
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -1179,6 +1347,12 @@ version = "0.8.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
 
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
 [[package]]
 name = "crypto-common"
 version = "0.1.7"
@@ -1345,6 +1519,12 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "dasp_sample"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c87e182de0887fd5361989c677c4e8f5000cd9491d6d563161a8f3a5519fc7f"
+
 [[package]]
 name = "data-encoding"
 version = "2.10.0"
@@ -1530,9 +1710,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
+ "block2 0.6.2",
  "libc",
- "objc2",
+ "objc2 0.6.4",
 ]
 
 [[package]]
@@ -1716,6 +1896,25 @@ dependencies = [
  "tower-service",
 ]
 
+[[package]]
+name = "enigo"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cf6f550bbbdd5fe66f39d429cb2604bcdacbf00dca0f5bbe2e9306a0009b7c6"
+dependencies = [
+ "core-foundation 0.10.1",
+ "core-graphics 0.24.0",
+ "foreign-types-shared 0.3.1",
+ "libc",
+ "log",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+ "windows 0.58.0",
+ "xkbcommon",
+ "xkeysym",
+]
+
 [[package]]
 name = "enumflags2"
 version = "0.7.12"
@@ -1869,6 +2068,26 @@ version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a043dc74da1e37d6afe657061213aa6f425f855399a11d3463c6ecccc4dfda1f"
 
+[[package]]
+name = "fax"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f05de7d48f37cd6730705cbca900770cab77a89f413d23e100ad7fad7795a0ab"
+dependencies = [
+ "fax_derive",
+]
+
+[[package]]
+name = "fax_derive"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0aca10fb742cb43f9e7bb8467c91aa9bcb8e3ffbc6a6f7389bb93ffc920577d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
 [[package]]
 name = "fd-lock"
 version = "4.0.4"
@@ -2228,6 +2447,16 @@ dependencies = [
  "version_check",
 ]
 
+[[package]]
+name = "gethostname"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
+dependencies = [
+ "rustix",
+ "windows-link 0.2.1",
+]
+
 [[package]]
 name = "getrandom"
 version = "0.1.16"
@@ -2463,6 +2692,17 @@ dependencies = [
  "tracing",
 ]
 
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if",
+ "crunchy",
+ "zerocopy",
+]
+
 [[package]]
 name = "hashbrown"
 version = "0.12.3"
@@ -2595,6 +2835,12 @@ dependencies = [
  "windows-link 0.2.1",
 ]
 
+[[package]]
+name = "hound"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62adaabb884c94955b19907d60019f4e145d091c75345379e70d1ee696f7854f"
+
 [[package]]
 name = "html5ever"
 version = "0.29.1"
@@ -2758,7 +3004,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
 dependencies = [
  "android_system_properties",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "iana-time-zone-haiku",
  "js-sys",
  "log",
@@ -2911,6 +3157,7 @@ dependencies = [
  "moxcms",
  "num-traits",
  "png 0.18.1",
+ "tiff",
  "zune-core",
  "zune-jpeg",
 ]
@@ -3355,6 +3602,15 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c41e0c4fef86961ac6d6f8a82609f55f31b05e4fce149ac5710e439df7619ba4"
 
+[[package]]
+name = "mach2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "macro_rules_attribute"
 version = "0.2.2"
@@ -3380,6 +3636,15 @@ dependencies = [
  "hashify",
 ]
 
+[[package]]
+name = "malloc_buf"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62bb907fe88d54d8d9ce32a3cceab4218ed2f6b7d35617cafe9adf84e43919cb"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "markup5ever"
 version = "0.14.1"
@@ -3463,6 +3728,15 @@ version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 
+[[package]]
+name = "memmap2"
+version = "0.9.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714098028fe011992e1c3962653c96b2d578c4b4bce9036e15ff220319b1e0e3"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "memoffset"
 version = "0.9.1"
@@ -3557,10 +3831,10 @@ dependencies = [
  "dpi",
  "gtk",
  "keyboard-types",
- "objc2",
- "objc2-app-kit",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
  "once_cell",
  "png 0.17.16",
  "serde",
@@ -3600,6 +3874,20 @@ dependencies = [
  "rawpointer",
 ]
 
+[[package]]
+name = "ndk"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2076a31b7010b17a38c01907c45b945e8f11495ee4dd588309718901b1f7a5b7"
+dependencies = [
+ "bitflags 2.11.0",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys 0.5.0+25.2.9519653",
+ "num_enum",
+ "thiserror 1.0.69",
+]
+
 [[package]]
 name = "ndk"
 version = "0.9.0"
@@ -3609,7 +3897,7 @@ dependencies = [
  "bitflags 2.11.0",
  "jni-sys 0.3.1",
  "log",
- "ndk-sys",
+ "ndk-sys 0.6.0+11769913",
  "num_enum",
  "raw-window-handle",
  "thiserror 1.0.69",
@@ -3621,6 +3909,15 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
 
+[[package]]
+name = "ndk-sys"
+version = "0.5.0+25.2.9519653"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c196769dd60fd4f363e11d948139556a344e79d451aeb2fa2fd040738ef7691"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
 [[package]]
 name = "ndk-sys"
 version = "0.6.0+11769913"
@@ -3737,6 +4034,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c6673768db2d862beb9b39a78fdcb1a69439615d5794a1be50caa9bc92c81967"
 
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
 [[package]]
 name = "num-integer"
 version = "0.1.46"
@@ -3783,6 +4091,31 @@ version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3"
 
+[[package]]
+name = "objc"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1"
+dependencies = [
+ "malloc_buf",
+]
+
+[[package]]
+name = "objc-sys"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb91bdd390c7ce1a8607f35f3ca7151b65afc0ff5ff3b34fa350f7d7c7e4310"
+
+[[package]]
+name = "objc2"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a785d4eeff09c14c487497c162e92766fbb3e4059a71840cecc03d9a50b804"
+dependencies = [
+ "objc-sys",
+ "objc2-encode",
+]
+
 [[package]]
 name = "objc2"
 version = "0.6.4"
@@ -3793,6 +4126,22 @@ dependencies = [
  "objc2-exception-helper",
 ]
 
+[[package]]
+name = "objc2-app-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4e89ad9e3d7d297152b17d39ed92cd50ca8063a89a9fa569046d41568891eff"
+dependencies = [
+ "bitflags 2.11.0",
+ "block2 0.5.1",
+ "libc",
+ "objc2 0.5.2",
+ "objc2-core-data 0.2.2",
+ "objc2-core-image 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-quartz-core 0.2.2",
+]
+
 [[package]]
 name = "objc2-app-kit"
 version = "0.3.2"
@@ -3800,10 +4149,11 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
- "objc2",
+ "block2 0.6.2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3813,8 +4163,20 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
 dependencies = [
  "bitflags 2.11.0",
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617fbf49e071c178c0b24c080767db52958f716d9eabdf0890523aeae54773ef"
+dependencies = [
+ "bitflags 2.11.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
 ]
 
 [[package]]
@@ -3823,8 +4185,8 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
 dependencies = [
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3835,7 +4197,7 @@ checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
 dependencies = [
  "bitflags 2.11.0",
  "dispatch2",
- "objc2",
+ "objc2 0.6.4",
 ]
 
 [[package]]
@@ -3846,19 +4208,31 @@ checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
 dependencies = [
  "bitflags 2.11.0",
  "dispatch2",
- "objc2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
  "objc2-io-surface",
 ]
 
+[[package]]
+name = "objc2-core-image"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55260963a527c99f1819c4f8e3b47fe04f9650694ef348ffd2227e8196d34c80"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
 [[package]]
 name = "objc2-core-image"
 version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
 dependencies = [
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3867,8 +4241,8 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ca347214e24bc973fc025fd0d36ebb179ff30536ed1f80252706db19ee452009"
 dependencies = [
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3878,7 +4252,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
 dependencies = [
  "bitflags 2.11.0",
- "objc2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
  "objc2-core-graphics",
 ]
@@ -3898,6 +4272,18 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "objc2-foundation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ee638a5da3799329310ad4cfa62fbf045d5f56e3ef5ba4149e7452dcf89d5a8"
+dependencies = [
+ "bitflags 2.11.0",
+ "block2 0.5.1",
+ "libc",
+ "objc2 0.5.2",
+]
+
 [[package]]
 name = "objc2-foundation"
 version = "0.3.2"
@@ -3905,9 +4291,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
+ "block2 0.6.2",
  "libc",
- "objc2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
 ]
 
@@ -3918,10 +4304,35 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
 dependencies = [
  "bitflags 2.11.0",
- "objc2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
 ]
 
+[[package]]
+name = "objc2-metal"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd0cba1276f6023976a406a14ffa85e1fdd19df6b0f737b063b95f6c8c7aadd6"
+dependencies = [
+ "bitflags 2.11.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e42bee7bff906b14b167da2bac5efe6b6a07e6f7c0a21a7308d40c960242dc7a"
+dependencies = [
+ "bitflags 2.11.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
 [[package]]
 name = "objc2-quartz-core"
 version = "0.3.2"
@@ -3929,9 +4340,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
 dependencies = [
  "bitflags 2.11.0",
- "objc2",
+ "objc2 0.6.4",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3950,17 +4361,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
- "objc2",
+ "block2 0.6.2",
+ "objc2 0.6.4",
  "objc2-cloud-kit",
- "objc2-core-data",
+ "objc2-core-data 0.3.2",
  "objc2-core-foundation",
  "objc2-core-graphics",
- "objc2-core-image",
+ "objc2-core-image 0.3.2",
  "objc2-core-location",
  "objc2-core-text",
- "objc2-foundation",
- "objc2-quartz-core",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
  "objc2-user-notifications",
 ]
 
@@ -3970,8 +4381,8 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9df9128cbbfef73cda168416ccf7f837b62737d748333bfe9ab71c245d76613e"
 dependencies = [
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3981,11 +4392,11 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
- "objc2",
- "objc2-app-kit",
+ "block2 0.6.2",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
 ]
 
 [[package]]
@@ -3997,6 +4408,29 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "oboe"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8b61bebd49e5d43f5f8cc7ee2891c16e0f41ec7954d36bcb6c14c5e0de867fb"
+dependencies = [
+ "jni",
+ "ndk 0.8.0",
+ "ndk-context",
+ "num-derive",
+ "num-traits",
+ "oboe-sys",
+]
+
+[[package]]
+name = "oboe-sys"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c8bb09a4a2b1d668170cfe0a7d5bc103f8999fb316c98099b6a9939c9f2e79d"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "once_cell"
 version = "1.21.4"
@@ -4055,6 +4489,7 @@ version = "0.49.17"
 dependencies = [
  "aes-gcm",
  "anyhow",
+ "arboard",
  "argon2",
  "async-imap",
  "async-trait",
@@ -4066,10 +4501,12 @@ dependencies = [
  "clap",
  "clap_complete",
  "console 0.16.3",
+ "cpal",
  "cron",
  "dialoguer",
  "directories",
  "dirs 5.0.1",
+ "enigo",
  "env_logger",
  "fastembed",
  "futures",
@@ -4078,6 +4515,7 @@ dependencies = [
  "hex",
  "hmac 0.12.1",
  "hostname",
+ "hound",
  "image",
  "lettre",
  "log",
@@ -4094,6 +4532,7 @@ dependencies = [
  "prometheus",
  "prost",
  "rand 0.9.2",
+ "rdev",
  "regex",
  "reqwest 0.12.28",
  "ring",
@@ -4307,8 +4746,8 @@ dependencies = [
  "android_system_properties",
  "log",
  "nix 0.30.1",
- "objc2",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
  "objc2-ui-kit",
  "serde",
  "windows-sys 0.61.2",
@@ -4943,6 +5382,12 @@ version = "0.1.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b5a041e753da8b807c9255f28de81879c78c876392ff2469cde94799b2896b9d"
 
+[[package]]
+name = "quick-error"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3"
+
 [[package]]
 name = "quick-xml"
 version = "0.38.4"
@@ -5215,6 +5660,22 @@ dependencies = [
  "crossbeam-utils",
 ]
 
+[[package]]
+name = "rdev"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00552ca2dc2f93b84cd7b5581de49549411e4e41d89e1c691bcb93dc4be360c3"
+dependencies = [
+ "cocoa",
+ "core-foundation 0.7.0",
+ "core-foundation-sys 0.7.0",
+ "core-graphics 0.19.2",
+ "lazy_static",
+ "libc",
+ "winapi",
+ "x11",
+]
+
 [[package]]
 name = "redox_syscall"
 version = "0.5.18"
@@ -5521,7 +5982,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d99feebc72bae7ab76ba994bb5e121b8d83d910ca40b36e0921f53becc41784"
 dependencies = [
  "core-foundation 0.10.1",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "jni",
  "log",
  "once_cell",
@@ -5694,7 +6155,7 @@ checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
 dependencies = [
  "bitflags 2.11.0",
  "core-foundation 0.10.1",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
  "security-framework-sys",
 ]
@@ -5705,7 +6166,7 @@ version = "2.17.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -6231,12 +6692,12 @@ checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
 dependencies = [
  "bytemuck",
  "js-sys",
- "ndk",
- "objc2",
+ "ndk 0.9.0",
+ "objc2 0.6.4",
  "objc2-core-foundation",
  "objc2-core-graphics",
- "objc2-foundation",
- "objc2-quartz-core",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
  "raw-window-handle",
  "redox_syscall",
  "tracing",
@@ -6438,7 +6899,7 @@ version = "0.33.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4fc858248ea01b66f19d8e8a6d55f41deaf91e9d495246fd01368d99935c6c01"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
  "memchr",
  "ntapi",
@@ -6462,7 +6923,7 @@ version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -6486,9 +6947,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9103edf55f2da3c82aea4c7fab7c4241032bfeea0e71fa557d98e00e7ce7cc20"
 dependencies = [
  "bitflags 2.11.0",
- "block2",
+ "block2 0.6.2",
  "core-foundation 0.10.1",
- "core-graphics",
+ "core-graphics 0.25.0",
  "crossbeam-channel",
  "dispatch2",
  "dlopen2",
@@ -6499,12 +6960,12 @@ dependencies = [
  "jni",
  "libc",
  "log",
- "ndk",
+ "ndk 0.9.0",
  "ndk-context",
- "ndk-sys",
- "objc2",
- "objc2-app-kit",
- "objc2-foundation",
+ "ndk-sys 0.6.0+11769913",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-foundation 0.3.2",
  "once_cell",
  "parking_lot",
  "raw-window-handle",
@@ -6556,9 +7017,9 @@ dependencies = [
  "log",
  "mime",
  "muda",
- "objc2",
- "objc2-app-kit",
- "objc2-foundation",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-foundation 0.3.2",
  "objc2-ui-kit",
  "objc2-web-kit",
  "percent-encoding",
@@ -6673,8 +7134,8 @@ checksum = "fc624469b06f59f5a29f874bbc61a2ed737c0f9c23ef09855a292c389c42e83f"
 dependencies = [
  "dunce",
  "glob",
- "objc2-app-kit",
- "objc2-foundation",
+ "objc2-app-kit 0.3.2",
+ "objc2-foundation 0.3.2",
  "open",
  "schemars 0.8.22",
  "serde",
@@ -6698,7 +7159,7 @@ dependencies = [
  "gtk",
  "http",
  "jni",
- "objc2",
+ "objc2 0.6.4",
  "objc2-ui-kit",
  "objc2-web-kit",
  "raw-window-handle",
@@ -6722,8 +7183,8 @@ dependencies = [
  "http",
  "jni",
  "log",
- "objc2",
- "objc2-app-kit",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "once_cell",
  "percent-encoding",
  "raw-window-handle",
@@ -6870,6 +7331,20 @@ dependencies = [
  "cfg-if",
 ]
 
+[[package]]
+name = "tiff"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b63feaf3343d35b6ca4d50483f94843803b0f51634937cc2ec519fc32232bc52"
+dependencies = [
+ "fax",
+ "flate2",
+ "half",
+ "quick-error",
+ "weezl",
+ "zune-jpeg",
+]
+
 [[package]]
 name = "time"
 version = "0.3.47"
@@ -7389,11 +7864,11 @@ dependencies = [
  "dirs 6.0.0",
  "libappindicator",
  "muda",
- "objc2",
- "objc2-app-kit",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "objc2-core-foundation",
  "objc2-core-graphics",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
  "once_cell",
  "png 0.17.16",
  "serde",
@@ -8079,6 +8554,12 @@ dependencies = [
  "windows-core 0.61.2",
 ]
 
+[[package]]
+name = "weezl"
+version = "0.1.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a28ac98ddc8b9274cb41bb4d9d4d5c425b6020c50c46f25559911905610b4a88"
+
 [[package]]
 name = "whisper-rs"
 version = "0.16.0"
@@ -8151,15 +8632,25 @@ version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d9bec5a31f3f9362f2258fd0e9c9dd61a9ca432e7306cc78c444258f0dce9a9c"
 dependencies = [
- "objc2",
- "objc2-app-kit",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
  "raw-window-handle",
  "windows-sys 0.59.0",
  "windows-version",
 ]
 
+[[package]]
+name = "windows"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9252e5725dbed82865af151df558e754e4a3c2c30818359eb17465f1346a1b49"
+dependencies = [
+ "windows-core 0.54.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows"
 version = "0.57.0"
@@ -8170,6 +8661,16 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
+[[package]]
+name = "windows"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
+dependencies = [
+ "windows-core 0.58.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows"
 version = "0.61.3"
@@ -8192,6 +8693,16 @@ dependencies = [
  "windows-core 0.61.2",
 ]
 
+[[package]]
+name = "windows-core"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12661b9c89351d684a50a8a643ce5f608e20243b9fb84687800163429f161d65"
+dependencies = [
+ "windows-result 0.1.2",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-core"
 version = "0.57.0"
@@ -8204,6 +8715,19 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
+[[package]]
+name = "windows-core"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+dependencies = [
+ "windows-implement 0.58.0",
+ "windows-interface 0.58.0",
+ "windows-result 0.2.0",
+ "windows-strings 0.1.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-core"
 version = "0.61.2"
@@ -8252,6 +8776,17 @@ dependencies = [
  "syn 2.0.117",
 ]
 
+[[package]]
+name = "windows-implement"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
 [[package]]
 name = "windows-implement"
 version = "0.60.2"
@@ -8274,6 +8809,17 @@ dependencies = [
  "syn 2.0.117",
 ]
 
+[[package]]
+name = "windows-interface"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
 [[package]]
 name = "windows-interface"
 version = "0.59.3"
@@ -8327,6 +8873,15 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
+[[package]]
+name = "windows-result"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-result"
 version = "0.3.4"
@@ -8345,6 +8900,16 @@ dependencies = [
  "windows-link 0.2.1",
 ]
 
+[[package]]
+name = "windows-strings"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
+dependencies = [
+ "windows-result 0.2.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-strings"
 version = "0.4.2"
@@ -8816,7 +9381,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e5a8135d8676225e5744de000d4dff5a082501bf7db6a1c1495034f8c314edbc"
 dependencies = [
  "base64 0.22.1",
- "block2",
+ "block2 0.6.2",
  "cookie",
  "crossbeam-channel",
  "dirs 6.0.0",
@@ -8829,11 +9394,11 @@ dependencies = [
  "javascriptcore-rs",
  "jni",
  "libc",
- "ndk",
- "objc2",
- "objc2-app-kit",
+ "ndk 0.9.0",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
  "objc2-core-foundation",
- "objc2-foundation",
+ "objc2-foundation 0.3.2",
  "objc2-ui-kit",
  "objc2-web-kit",
  "once_cell",
@@ -8874,6 +9439,40 @@ dependencies = [
  "pkg-config",
 ]
 
+[[package]]
+name = "x11rb"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9993aa5be5a26815fe2c3eacfc1fde061fc1a1f094bf1ad2a18bf9c495dd7414"
+dependencies = [
+ "gethostname",
+ "rustix",
+ "x11rb-protocol",
+]
+
+[[package]]
+name = "x11rb-protocol"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
+
+[[package]]
+name = "xkbcommon"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8d66ca9352cbd4eecbbc40871d8a11b4ac8107cfc528a6e14d7c19c69d0e1ac9"
+dependencies = [
+ "libc",
+ "memmap2",
+ "xkeysym",
+]
+
+[[package]]
+name = "xkeysym"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9cc00251562a284751c9973bace760d86c0276c471b4be569fe6b068ee97a56"
+
 [[package]]
 name = "yoke"
 version = "0.8.2"
diff --git a/overlay/src-tauri/src/lib.rs b/overlay/src-tauri/src/lib.rs
index 1d78ac3e5..e60d4e808 100644
--- a/overlay/src-tauri/src/lib.rs
+++ b/overlay/src-tauri/src/lib.rs
@@ -3,9 +3,9 @@ mod log_bridge;
 use log_bridge::{LogBuffer, LogEntry, TauriLogLayer};
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::sync::Arc;
-use tauri::Manager;
 #[cfg(target_os = "macos")]
 use tauri::ActivationPolicy;
+use tauri::Manager;
 use tracing_subscriber::layer::SubscriberExt;
 use tracing_subscriber::util::SubscriberInitExt;
 use tracing_subscriber::EnvFilter;
@@ -40,6 +40,19 @@ fn set_click_through(
     Ok(())
 }
 
+/// JSON-RPC URL of the desktop core sidecar, when the overlay was spawned by it.
+/// When set, the web UI should prefer HTTP `fetch` to this URL so autocomplete,
+/// screen intelligence, and voice state match the main app (see `overlay/src/parentCoreRpc.ts`).
+#[tauri::command]
+fn overlay_parent_rpc_url() -> Option<String> {
+    let url = std::env::var("OPENHUMAN_OVERLAY_PARENT_RPC_URL").ok()?;
+    let trimmed = url.trim();
+    if trimmed.is_empty() {
+        return None;
+    }
+    Some(trimmed.to_string())
+}
+
 /// Forward an RPC call to openhuman_core's dispatch in-process.
 /// Uses the same invoke_method path as the HTTP JSON-RPC server.
 #[tauri::command]
@@ -76,6 +89,7 @@ pub fn run() {
         .invoke_handler(tauri::generate_handler![
             get_log_history,
             set_click_through,
+            overlay_parent_rpc_url,
             core_rpc,
             insert_text_into_focused_field,
         ])
@@ -112,20 +126,33 @@ pub fn run() {
 
             log::info!("[overlay] overlay process started, tracing bridge active");
 
-            // ── Start openhuman_core JSON-RPC server in-process ─────────
-            // Use port 7799 to avoid conflicts with a standalone core on 7788.
-            // Override with OPENHUMAN_CORE_PORT env var.
-            tauri::async_runtime::spawn(async move {
-                let port = std::env::var("OPENHUMAN_CORE_PORT")
-                    .ok()
-                    .and_then(|p| p.parse::<u16>().ok())
-                    .unwrap_or(7799);
-                log::info!("[overlay] starting openhuman_core server on 127.0.0.1:{}...", port);
-                match openhuman_core::core::jsonrpc::run_server(None, Some(port), true).await {
-                    Ok(()) => log::info!("[overlay] core server shut down cleanly"),
-                    Err(e) => log::error!("[overlay] core server error: {}", e),
-                }
-            });
+            // ── Optional in-process JSON-RPC (standalone / dev without a parent core) ──
+            // When spawned by the desktop sidecar, OPENHUMAN_OVERLAY_PARENT_RPC_URL is set and
+            // the web UI talks to the parent over HTTP — do not bind a second server on 7788.
+            // Use OPENHUMAN_OVERLAY_EMBEDDED_CORE_PORT (default 7799), not OPENHUMAN_CORE_PORT.
+            let parent_rpc = std::env::var("OPENHUMAN_OVERLAY_PARENT_RPC_URL")
+                .ok()
+                .filter(|s| !s.trim().is_empty());
+            if parent_rpc.is_some() {
+                log::info!(
+                    "[overlay] parent core RPC URL set — skipping embedded JSON-RPC server"
+                );
+            } else {
+                tauri::async_runtime::spawn(async move {
+                    let port = std::env::var("OPENHUMAN_OVERLAY_EMBEDDED_CORE_PORT")
+                        .ok()
+                        .and_then(|p| p.parse::<u16>().ok())
+                        .unwrap_or(7799);
+                    log::info!(
+                        "[overlay] starting embedded openhuman_core server on 127.0.0.1:{} (standalone)",
+                        port
+                    );
+                    match openhuman_core::core::jsonrpc::run_server_embedded(None, Some(port), true).await {
+                        Ok(()) => log::info!("[overlay] embedded core server shut down cleanly"),
+                        Err(e) => log::error!("[overlay] embedded core server error: {}", e),
+                    }
+                });
+            }
 
             // ── macOS: floating panel + visible on all workspaces ───────
             #[cfg(target_os = "macos")]
diff --git a/overlay/src-tauri/tauri.conf.json b/overlay/src-tauri/tauri.conf.json
index 8304825fa..2da284b16 100644
--- a/overlay/src-tauri/tauri.conf.json
+++ b/overlay/src-tauri/tauri.conf.json
@@ -16,7 +16,7 @@
         "label": "overlay",
         "title": "",
         "width": 376,
-        "height": 432,
+        "height": 520,
         "minWidth": 376,
         "minHeight": 432,
         "transparent": true,
diff --git a/overlay/src/App.tsx b/overlay/src/App.tsx
index ae37200f7..f7bf0c4e6 100644
--- a/overlay/src/App.tsx
+++ b/overlay/src/App.tsx
@@ -2,6 +2,8 @@ import { invoke } from "@tauri-apps/api/core";
 import { getCurrentWindow } from "@tauri-apps/api/window";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 
+import { callParentCoreRpc } from "./parentCoreRpc";
+
 const TARGET_SAMPLE_RATE = 16000;
 
 type OverlayStatus = "idle" | "listening" | "transcribing" | "ready" | "error";
@@ -64,13 +66,30 @@ interface AutocompleteStatus {
   suggestion: AutocompleteSuggestion | null;
 }
 
+/** Matches `VoiceStatus` in src/openhuman/voice/types.rs */
+interface VoiceStatus {
+  stt_available: boolean;
+  tts_available: boolean;
+  stt_model_id: string;
+  tts_voice_id: string;
+  whisper_binary: string | null;
+  piper_binary: string | null;
+  stt_model_path: string | null;
+  tts_voice_path: string | null;
+  whisper_in_process: boolean;
+  llm_cleanup_enabled: boolean;
+}
+
 interface OverlayDebugSnapshot {
   screen: AccessibilityStatus | null;
   autocomplete: AutocompleteStatus | null;
+  voice: VoiceStatus | null;
   updatedAt: number | null;
   error: string | null;
 }
 
+const DEBUG_EXPANDED_KEY = "openhuman_overlay_debug_expanded";
+
 function logOverlay(message: string, details?: unknown) {
   if (details) {
     console.debug(`[overlay] ${message}`, details);
@@ -205,16 +224,67 @@ export function App() {
   const sessionIdRef = useRef(0);
   const globePollInFlightRef = useRef(false);
 
+  /** `undefined` until Tauri reports env; then URL string or `null` (embedded core only). */
+  const [parentRpcUrl, setParentRpcUrl] = useState<string | null | undefined>(undefined);
+  const [coreReachable, setCoreReachable] = useState(true);
+  const [voiceCaptureEnabled, setVoiceCaptureEnabled] = useState(true);
+  const [debugExpanded, setDebugExpanded] = useState(() => {
+    try {
+      return typeof localStorage !== "undefined" && localStorage.getItem(DEBUG_EXPANDED_KEY) === "1";
+    } catch {
+      return false;
+    }
+  });
+
   const [status, setStatus] = useState<OverlayStatus>("idle");
   const [message, setMessage] = useState("Click to start listening");
   const [transcript, setTranscript] = useState("");
   const [debugSnapshot, setDebugSnapshot] = useState<OverlayDebugSnapshot>({
     screen: null,
     autocomplete: null,
+    voice: null,
     updatedAt: null,
     error: null,
   });
 
+  useEffect(() => {
+    let mounted = true;
+    void invoke<string | null>("overlay_parent_rpc_url")
+      .then((url) => {
+        if (!mounted) return;
+        const trimmed = url?.trim();
+        setParentRpcUrl(trimmed && trimmed.length > 0 ? trimmed : null);
+      })
+      .catch(() => {
+        if (mounted) setParentRpcUrl(null);
+      });
+    return () => {
+      mounted = false;
+    };
+  }, []);
+
+  const rpc = useCallback(
+    async <T,>(method: string, params: Record<string, unknown> = {}): Promise<T> => {
+      if (parentRpcUrl === undefined) {
+        throw new Error("[overlay] RPC not initialized");
+      }
+      if (parentRpcUrl) {
+        return callParentCoreRpc<T>(parentRpcUrl, method, params);
+      }
+      return invoke<T>("core_rpc", { method, params });
+    },
+    [parentRpcUrl],
+  );
+
+  const persistDebugExpanded = useCallback((expanded: boolean) => {
+    setDebugExpanded(expanded);
+    try {
+      localStorage.setItem(DEBUG_EXPANDED_KEY, expanded ? "1" : "0");
+    } catch {
+      /* ignore */
+    }
+  }, []);
+
   useEffect(() => {
     let disposed = false;
 
@@ -228,11 +298,11 @@ export function App() {
     };
 
     const startGlobeListener = async () => {
+      if (parentRpcUrl === undefined) {
+        return;
+      }
       try {
-        const result = await invoke<GlobeHotkeyStatus>("core_rpc", {
-          method: "openhuman.screen_intelligence_globe_listener_start",
-          params: {},
-        });
+        const result = await rpc<GlobeHotkeyStatus>("openhuman.screen_intelligence_globe_listener_start", {});
         logOverlay("globe listener start result", result);
 
         if (!result.supported) {
@@ -252,16 +322,13 @@ export function App() {
     };
 
     const pollGlobeListener = async () => {
-      if (disposed || globePollInFlightRef.current) {
+      if (disposed || parentRpcUrl === undefined || globePollInFlightRef.current) {
         return;
       }
       globePollInFlightRef.current = true;
 
       try {
-        const result = await invoke<GlobeHotkeyPollResult>("core_rpc", {
-          method: "openhuman.screen_intelligence_globe_listener_poll",
-          params: {},
-        });
+        const result = await rpc<GlobeHotkeyPollResult>("openhuman.screen_intelligence_globe_listener_poll", {});
 
         if (disposed) {
           return;
@@ -297,33 +364,43 @@ export function App() {
     return () => {
       disposed = true;
       window.clearInterval(intervalId);
-      void invoke("core_rpc", {
-        method: "openhuman.screen_intelligence_globe_listener_stop",
-        params: {},
-      }).catch(() => {});
+      if (parentRpcUrl === undefined) {
+        return;
+      }
+      void rpc("openhuman.screen_intelligence_globe_listener_stop", {}).catch(() => {});
     };
-  }, [appWindow]);
+  }, [appWindow, parentRpcUrl, rpc]);
 
   useEffect(() => {
     let disposed = false;
     let pollInFlight = false;
 
     const pollDebugState = async () => {
-      if (disposed || pollInFlight) {
+      if (disposed || parentRpcUrl === undefined || pollInFlight) {
         return;
       }
       pollInFlight = true;
 
       try {
-        const [screen, autocomplete] = await Promise.all([
-          invoke<AccessibilityStatus>("core_rpc", {
-            method: "openhuman.accessibility_status",
-            params: {},
-          }),
-          invoke<AutocompleteStatus>("core_rpc", {
-            method: "openhuman.autocomplete_status",
-            params: {},
-          }),
+        if (parentRpcUrl) {
+          try {
+            await rpc<{ ok?: boolean }>("core.ping", {});
+            if (!disposed) {
+              setCoreReachable(true);
+            }
+          } catch {
+            if (!disposed) {
+              setCoreReachable(false);
+            }
+          }
+        } else {
+          setCoreReachable(true);
+        }
+
+        const [screen, autocomplete, voice] = await Promise.all([
+          rpc<AccessibilityStatus>("openhuman.screen_intelligence_status", {}),
+          rpc<AutocompleteStatus>("openhuman.autocomplete_status", {}),
+          rpc<VoiceStatus>("openhuman.voice_status", {}),
         ]);
 
         if (disposed) {
@@ -335,11 +412,13 @@ export function App() {
           captureCount: screen.session.capture_count,
           autocompletePhase: autocomplete.phase,
           hasSuggestion: Boolean(autocomplete.suggestion?.value),
+          sttAvailable: voice.stt_available,
         });
 
         setDebugSnapshot({
           screen,
           autocomplete,
+          voice,
           updatedAt: Date.now(),
           error: null,
         });
@@ -370,7 +449,7 @@ export function App() {
       disposed = true;
       window.clearInterval(intervalId);
     };
-  }, []);
+  }, [parentRpcUrl, rpc]);
 
   const insertTranscriptIntoFocusedField = useCallback(
     async (text: string) => {
@@ -404,13 +483,10 @@ export function App() {
     async (blob: Blob, sessionId: number) => {
       try {
         const audioBytes = await convertBlobToWavBytes(blob);
-        const result = await invoke<TranscribeResult>("core_rpc", {
-          method: "openhuman.voice_transcribe_bytes",
-          params: {
-            audio_bytes: audioBytes,
-            extension: "wav",
-            skip_cleanup: false,
-          },
+        const result = await rpc<TranscribeResult>("openhuman.voice_transcribe_bytes", {
+          audio_bytes: audioBytes,
+          extension: "wav",
+          skip_cleanup: false,
         });
 
         if (sessionIdRef.current !== sessionId) {
@@ -444,7 +520,7 @@ export function App() {
         setMessage(error instanceof Error ? error.message : "Transcription failed");
       }
     },
-    [insertTranscriptIntoFocusedField],
+    [insertTranscriptIntoFocusedField, rpc],
   );
 
   const stopRecording = useCallback(() => {
@@ -521,15 +597,33 @@ export function App() {
   }, [cleanupStream, transcribeBlob]);
 
   const handleMainButton = useCallback(() => {
+    // Always allow stopping an active recording, regardless of config state.
     if (status === "listening") {
       logOverlay("main button toggled to stop listening");
       stopRecording();
       return;
     }
 
+    if (!voiceCaptureEnabled) {
+      setMessage("Turn on voice capture to use the microphone");
+      return;
+    }
+    if (debugSnapshot.voice && !debugSnapshot.voice.stt_available) {
+      setMessage(
+        "Speech-to-text is not available. Configure Local AI / voice in the main OpenHuman app.",
+      );
+      return;
+    }
+
     logOverlay("main button toggled to start listening", { priorStatus: status });
     void startRecording();
-  }, [startRecording, status, stopRecording]);
+  }, [
+    debugSnapshot.voice,
+    startRecording,
+    status,
+    stopRecording,
+    voiceCaptureEnabled,
+  ]);
 
   const shellClassName = useMemo(() => {
     if (status === "listening") {
@@ -560,6 +654,11 @@ export function App() {
   const autocompleteRunning =
     debugSnapshot.autocomplete?.running && debugSnapshot.autocomplete?.enabled;
 
+  const sttAvailable = debugSnapshot.voice?.stt_available ?? true;
+  const voiceBlocked =
+    !voiceCaptureEnabled || (debugSnapshot.voice !== null && !debugSnapshot.voice.stt_available);
+  const waitingForCoreConfig = parentRpcUrl === undefined;
+
   return (
     <div className="flex h-screen w-screen items-start justify-start bg-transparent p-3">
       <div className="relative select-none">
@@ -579,6 +678,13 @@ export function App() {
             void appWindow.startDragging();
           }}
         >
+          {parentRpcUrl && !coreReachable ? (
+            <div className="mb-2 rounded-2xl border border-amber-400/35 bg-amber-950/35 px-3 py-2 text-[11px] leading-4 text-amber-50">
+              Cannot reach the OpenHuman core at the sidecar URL. Autocomplete and screen debug may
+              be stale. Check that the main app is running.
+            </div>
+          ) : null}
+
           <div className="mb-3 flex items-center justify-between gap-2">
             <span className="rounded-full bg-black/15 px-2 py-1 text-[10px] font-semibold uppercase tracking-[0.24em]">
               Voice
@@ -593,11 +699,45 @@ export function App() {
             </button>
           </div>
 
+          <div className="mb-3 flex items-center justify-between gap-2 rounded-2xl border border-white/10 bg-black/15 px-3 py-2">
+            <div className="min-w-0">
+              <p className="text-[10px] font-semibold uppercase tracking-[0.18em] opacity-80">
+                Voice capture
+              </p>
+              <p className="mt-0.5 text-[11px] leading-4 opacity-85">
+                {waitingForCoreConfig
+                  ? "Checking core…"
+                  : sttAvailable
+                    ? debugSnapshot.voice?.whisper_in_process
+                      ? "STT ready (in-process)"
+                      : "STT ready"
+                    : "STT unavailable — configure voice in the main app"}
+              </p>
+            </div>
+            <button
+              type="button"
+              role="switch"
+              aria-checked={voiceCaptureEnabled}
+              aria-label={voiceCaptureEnabled ? "Turn voice capture off" : "Turn voice capture on"}
+              className={`relative h-8 w-[52px] shrink-0 rounded-full border border-white/15 transition ${
+                voiceCaptureEnabled ? "bg-emerald-500/50" : "bg-black/35"
+              }`}
+              onClick={() => setVoiceCaptureEnabled((previous) => !previous)}
+            >
+              <span
+                className={`absolute top-1 h-6 w-6 rounded-full bg-white shadow transition ${
+                  voiceCaptureEnabled ? "left-7" : "left-1"
+                }`}
+              />
+            </button>
+          </div>
+
           <div className="flex items-start gap-3">
             <button
               type="button"
               onClick={handleMainButton}
-              className={`group relative flex h-[108px] w-[108px] shrink-0 items-center justify-center rounded-full border border-white/20 bg-black/20 transition duration-200 hover:bg-black/28 ${
+              disabled={waitingForCoreConfig || voiceBlocked}
+              className={`group relative flex h-[108px] w-[108px] shrink-0 items-center justify-center rounded-full border border-white/20 bg-black/20 transition duration-200 hover:bg-black/28 disabled:cursor-not-allowed disabled:opacity-40 ${
                 status === "listening" ? "scale-[1.02]" : ""
               }`}
               aria-label={status === "listening" ? "Stop listening" : "Start listening"}
@@ -632,21 +772,50 @@ export function App() {
 
           <div className="mt-3 rounded-[24px] border border-white/10 bg-black/15 p-3">
             <div className="flex items-center justify-between gap-2">
-              <span className="text-[10px] font-semibold uppercase tracking-[0.22em] opacity-75">
-                Debug
-              </span>
-              <span className="text-[10px] opacity-65">
-                {debugSnapshot.updatedAt ? formatTimestamp(debugSnapshot.updatedAt) : "waiting"}
-              </span>
+              <button
+                type="button"
+                className="flex flex-1 items-center justify-between gap-2 text-left"
+                onClick={() => persistDebugExpanded(!debugExpanded)}
+                aria-expanded={debugExpanded}
+              >
+                <span className="text-[10px] font-semibold uppercase tracking-[0.22em] opacity-75">
+                  Debug {debugExpanded ? "▼" : "▶"}
+                </span>
+                <span className="text-[10px] opacity-65">
+                  {debugSnapshot.updatedAt ? formatTimestamp(debugSnapshot.updatedAt) : "waiting"}
+                </span>
+              </button>
             </div>
 
+            {!debugExpanded ? (
+              <p className="mt-2 text-[11px] leading-4 opacity-80">
+                Screen: {debugSnapshot.screen?.session.active ? "session on" : "idle"} ·
+                Autocomplete: {autocompletePhase}
+                {debugSnapshot.autocomplete?.last_error ? " · error" : ""}
+              </p>
+            ) : null}
+
             {debugSnapshot.error ? (
               <div className="mt-3 rounded-2xl border border-red-300/20 bg-red-950/20 px-3 py-2 text-[11px] leading-4 text-red-100">
                 {debugSnapshot.error}
               </div>
             ) : null}
 
+            {debugExpanded ? (
             <div className="mt-3 grid gap-3">
+              <section className="rounded-2xl border border-white/8 bg-black/10 px-3 py-2">
+                <div className="text-[10px] font-semibold uppercase tracking-[0.18em] opacity-70">
+                  Voice / STT
+                </div>
+                <div className="mt-2 space-y-1 text-[11px] leading-4 opacity-90">
+                  <p>STT: {sttAvailable ? "available" : "unavailable"}</p>
+                  <p className="truncate">Model: {debugSnapshot.voice?.stt_model_id ?? "—"}</p>
+                  <p className="truncate">
+                    Whisper: {debugSnapshot.voice?.whisper_binary ?? "not found"}
+                  </p>
+                </div>
+              </section>
+
               <section className="rounded-2xl border border-white/8 bg-black/10 px-3 py-2">
                 <div className="text-[10px] font-semibold uppercase tracking-[0.18em] opacity-70">
                   Screen Intelligence
@@ -704,6 +873,7 @@ export function App() {
                 </div>
               </section>
             </div>
+            ) : null}
           </div>
         </div>
       </div>
diff --git a/overlay/src/parentCoreRpc.ts b/overlay/src/parentCoreRpc.ts
new file mode 100644
index 000000000..b60ca87b1
--- /dev/null
+++ b/overlay/src/parentCoreRpc.ts
@@ -0,0 +1,95 @@
+/**
+ * HTTP JSON-RPC to the desktop core sidecar (same process as the main app).
+ * Mirrors the naming normalization in app/src/services/coreRpcClient.ts (subset).
+ */
+
+let nextJsonRpcId = 1;
+
+export function normalizeLegacyMethod(method: string): string {
+  if (method.startsWith("openhuman.accessibility_")) {
+    return method.replace("openhuman.accessibility_", "openhuman.screen_intelligence_");
+  }
+  return method;
+}
+
+/** RpcOutcome with non-empty logs serializes as `{ result, logs }` in the core. */
+function unwrapCliCompatibleJson<T>(raw: unknown): T {
+  if (
+    raw !== null &&
+    typeof raw === "object" &&
+    "result" in raw &&
+    "logs" in raw &&
+    Array.isArray((raw as { logs: unknown }).logs)
+  ) {
+    return (raw as { result: T }).result;
+  }
+  return raw as T;
+}
+
+interface JsonRpcError {
+  code: number;
+  message: string;
+  data?: unknown;
+}
+
+interface JsonRpcResponse<T> {
+  jsonrpc?: string;
+  id?: number | string | null;
+  result?: T;
+  error?: JsonRpcError;
+}
+
+/** Default timeout for parent core RPC requests (ms). */
+const DEFAULT_RPC_TIMEOUT_MS = 10_000;
+
+export async function callParentCoreRpc<T>(
+  rpcUrl: string,
+  method: string,
+  params: Record<string, unknown> = {},
+  timeoutMs: number = DEFAULT_RPC_TIMEOUT_MS,
+): Promise<T> {
+  const normalizedMethod = normalizeLegacyMethod(method);
+  const payload = {
+    jsonrpc: "2.0" as const,
+    id: nextJsonRpcId++,
+    method: normalizedMethod,
+    params,
+  };
+
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+
+  let response: Response;
+  try {
+    response = await fetch(rpcUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload),
+      signal: controller.signal,
+    });
+  } catch (err) {
+    clearTimeout(timer);
+    if (err instanceof DOMException && err.name === "AbortError") {
+      throw new Error(`Core RPC request timed out after ${timeoutMs}ms (method: ${normalizedMethod})`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Core RPC HTTP ${response.status}: ${text || response.statusText}`);
+  }
+
+  const json = (await response.json()) as JsonRpcResponse<unknown>;
+
+  if (json.error) {
+    throw new Error(json.error.message || "Core RPC returned an error");
+  }
+  if (!Object.prototype.hasOwnProperty.call(json, "result")) {
+    throw new Error("Core RPC response missing result");
+  }
+
+  return unwrapCliCompatibleJson<T>(json.result);
+}
diff --git a/src/core/jsonrpc.rs b/src/core/jsonrpc.rs
index 5f1e6ba73..1aff261c6 100644
--- a/src/core/jsonrpc.rs
+++ b/src/core/jsonrpc.rs
@@ -570,6 +570,29 @@ pub async fn run_server(
     host: Option<&str>,
     port: Option<u16>,
     socketio_enabled: bool,
+) -> anyhow::Result<()> {
+    run_server_inner(host, port, socketio_enabled, false).await
+}
+
+/// Like [`run_server`] but marks the instance as embedded — the overlay will
+/// **not** be auto-spawned, preventing recursive overlay launches.
+pub async fn run_server_embedded(
+    host: Option<&str>,
+    port: Option<u16>,
+    socketio_enabled: bool,
+) -> anyhow::Result<()> {
+    run_server_inner(host, port, socketio_enabled, true).await
+}
+
+/// Internal server entrypoint.
+///
+/// When `embedded_core` is `true` the server skips auto-spawning the overlay
+/// (useful when the overlay itself hosts an embedded core to avoid recursion).
+async fn run_server_inner(
+    host: Option<&str>,
+    port: Option<u16>,
+    socketio_enabled: bool,
+    embedded_core: bool,
 ) -> anyhow::Result<()> {
     // Ensure all controllers are registered before starting.
     let _ = all::all_registered_controllers();
@@ -631,8 +654,31 @@ pub async fn run_server(
         log::info!("[rpc:socketio] disabled (--jsonrpc-only)");
     }
 
+    // Derive the real bound address from the listener so ephemeral port 0,
+    // wildcard binds, and IPv6 are handled correctly.
+    let bound_addr = listener.local_addr()?;
+    let parent_core_rpc_url = {
+        let (h, p) = (bound_addr.ip(), bound_addr.port());
+        let effective_ip = if h.is_unspecified() {
+            if h.is_ipv6() {
+                std::net::IpAddr::V6(std::net::Ipv6Addr::LOCALHOST)
+            } else {
+                std::net::IpAddr::V4(std::net::Ipv4Addr::LOCALHOST)
+            }
+        } else {
+            h
+        };
+        if effective_ip.is_ipv6() {
+            format!("http://[{effective_ip}]:{p}/rpc")
+        } else {
+            format!("http://{effective_ip}:{p}/rpc")
+        }
+    };
+    log::debug!("[core] parent_core_rpc_url = {parent_core_rpc_url}");
+
     // Optional background bootstrap for local AI services.
-    tokio::spawn(async {
+    let is_embedded = embedded_core;
+    tokio::spawn(async move {
         match crate::openhuman::config::Config::load_or_init().await {
             Ok(config) => {
                 if config.local_ai.enabled {
@@ -641,8 +687,11 @@ pub async fn run_server(
                 }
 
                 // Launch the overlay Tauri app (transparent debug/voice panel) as a child process.
-                if config.overlay_enabled {
-                    crate::openhuman::overlay::spawn_overlay();
+                // Skip when running as an embedded core inside the overlay itself.
+                if is_embedded {
+                    log::info!("[overlay] embedded core — skipping overlay auto-spawn");
+                } else if config.overlay_enabled {
+                    crate::openhuman::overlay::spawn_overlay(parent_core_rpc_url.as_str());
                 } else {
                     log::info!("[overlay] overlay disabled by config (overlay_enabled = false)");
                 }
diff --git a/src/openhuman/accessibility/helper.rs b/src/openhuman/accessibility/helper.rs
index 9fcfd86ed..123d67962 100644
--- a/src/openhuman/accessibility/helper.rs
+++ b/src/openhuman/accessibility/helper.rs
@@ -2,71 +2,177 @@
 //!
 //! Replaces the separate osascript subprocess spawns and standalone overlay binary
 //! with a single persistent Swift process communicating via stdin/stdout JSON.
+//!
+//! ## Mutex architecture
+//!
+//! Three globals prevent deadlock between fire-and-forget (show/hide) and
+//! request-response (focus/paste) callers:
+//!
+//! - `UNIFIED_HELPER`: guards the process handle + stdin writer.
+//!   Held only for the brief duration of a stdin write (~μs).
+//! - `RESPONSE_RX`: guards the mpsc receiver that the background reader
+//!   thread populates.  Held only for the duration of `recv_timeout`.
+//! - `RECV_SERIALISER`: held for the entire send+receive round-trip so that
+//!   two callers cannot interleave their reads.
+//!
+//! Fire-and-forget callers never touch `RESPONSE_RX` or `RECV_SERIALISER`,
+//! so `show`/`hide` can proceed while a `focus` query is in-flight.
 
 #[cfg(target_os = "macos")]
 use once_cell::sync::Lazy;
 #[cfg(target_os = "macos")]
 use std::io::{BufRead, BufReader, Write};
 #[cfg(target_os = "macos")]
-use std::sync::Mutex as StdMutex;
+use std::sync::atomic::{AtomicU64, Ordering};
+#[cfg(target_os = "macos")]
+use std::sync::{mpsc, Mutex as StdMutex};
+#[cfg(target_os = "macos")]
+use std::time::{Duration, Instant};
 #[cfg(target_os = "macos")]
 use std::{
     fs,
     path::PathBuf,
-    process::{Child, ChildStdin, ChildStdout, Command, Stdio},
+    process::{Child, ChildStdin, Command, Stdio},
 };
 
+#[cfg(target_os = "macos")]
+use serde_json::Value;
+
+/// Process handle + stdin writer.  Held only briefly for writes.
 #[cfg(target_os = "macos")]
 struct UnifiedHelperProcess {
     child: Child,
     stdin: ChildStdin,
-    stdout: BufReader<ChildStdout>,
 }
 
+/// Guards the process handle and stdin.
 #[cfg(target_os = "macos")]
 static UNIFIED_HELPER: Lazy<StdMutex<Option<UnifiedHelperProcess>>> =
     Lazy::new(|| StdMutex::new(None));
 
+/// Channel receiver fed by the background stdout-reader thread.
+/// Separate from UNIFIED_HELPER so fire-and-forget callers never contend here.
+#[cfg(target_os = "macos")]
+static RESPONSE_RX: Lazy<StdMutex<Option<mpsc::Receiver<String>>>> =
+    Lazy::new(|| StdMutex::new(None));
+
+/// Serialises request/response pairs so two callers cannot interleave reads.
+/// Fire-and-forget callers never acquire this lock.
+#[cfg(target_os = "macos")]
+static RECV_SERIALISER: Lazy<StdMutex<()>> = Lazy::new(|| StdMutex::new(()));
+
+/// Prevents concurrent Swift compiles from `ensure_helper_binary` vs background precompile.
+#[cfg(target_os = "macos")]
+static HELPER_COMPILE_LOCK: Lazy<StdMutex<()>> = Lazy::new(|| StdMutex::new(()));
+
+/// Monotonic ids for `helper_send_receive` so a late line cannot be consumed as the wrong reply.
+#[cfg(target_os = "macos")]
+static HELPER_REQ_ID: AtomicU64 = AtomicU64::new(1);
+
+/// Timeout for a single request/response round-trip with the Swift helper.
+#[cfg(target_os = "macos")]
+const HELPER_RECV_TIMEOUT: Duration = Duration::from_secs(8);
+
 /// Send a JSON request and read a JSON response (one line each).
 /// Used for `focus` and `paste` commands that produce a response.
+///
+/// Holds `RECV_SERIALISER` for the full round-trip, but releases
+/// `UNIFIED_HELPER` before blocking on the channel recv, so fire-and-forget
+/// callers (`show`/`hide`) are never blocked by an in-flight focus query.
 #[cfg(target_os = "macos")]
 pub(super) fn helper_send_receive(
     request: &serde_json::Value,
 ) -> Result<serde_json::Value, String> {
-    ensure_helper_running()?;
-    let mut guard = UNIFIED_HELPER
+    // Serialise request/response pairs — prevents interleaved reads.
+    let _rr_guard = RECV_SERIALISER
         .lock()
-        .map_err(|_| "unified helper lock poisoned".to_string())?;
-    let helper = guard
-        .as_mut()
-        .ok_or_else(|| "unified helper unavailable".to_string())?;
+        .map_err(|_| "recv serialiser lock poisoned".to_string())?;
 
-    // Write request
-    let line = request.to_string();
-    helper
-        .stdin
-        .write_all(line.as_bytes())
-        .and_then(|_| helper.stdin.write_all(b"\n"))
-        .and_then(|_| helper.stdin.flush())
-        .map_err(|e| format!("failed to write to helper stdin: {e}"))?;
+    ensure_helper_running()?;
 
-    // Read response (one line)
-    let mut response_line = String::new();
-    helper
-        .stdout
-        .read_line(&mut response_line)
-        .map_err(|e| format!("failed to read helper stdout: {e}"))?;
+    let id_num = HELPER_REQ_ID.fetch_add(1, Ordering::Relaxed);
+    let id_str = id_num.to_string();
 
-    if response_line.trim().is_empty() {
-        return Err("helper returned empty response".to_string());
+    let mut req = request.clone();
+    let req_obj = req
+        .as_object_mut()
+        .ok_or_else(|| "helper request must be a JSON object".to_string())?;
+    req_obj.insert("id".to_string(), Value::String(id_str.clone()));
+
+    // Write the request, holding UNIFIED_HELPER only for this brief write.
+    {
+        let mut guard = UNIFIED_HELPER
+            .lock()
+            .map_err(|_| "unified helper lock poisoned".to_string())?;
+        let helper = guard
+            .as_mut()
+            .ok_or_else(|| "unified helper unavailable".to_string())?;
+        let line = req.to_string();
+        helper
+            .stdin
+            .write_all(line.as_bytes())
+            .and_then(|_| helper.stdin.write_all(b"\n"))
+            .and_then(|_| helper.stdin.flush())
+            .map_err(|e| format!("failed to write to helper stdin: {e}"))?;
+    } // UNIFIED_HELPER released here — fire-and-forget callers can proceed
+
+    // Read until the line matches `id` (discards stale lines after a timeout or reordering).
+    let deadline = Instant::now() + HELPER_RECV_TIMEOUT;
+    loop {
+        let remaining = deadline.saturating_duration_since(Instant::now());
+        if remaining.is_zero() {
+            return Err(format!(
+                "helper response timed out waiting for id {id_str} (stale lines may follow)"
+            ));
+        }
+        let chunk = remaining.min(Duration::from_millis(500));
+        let response_line = {
+            let rx_guard = RESPONSE_RX
+                .lock()
+                .map_err(|_| "response rx lock poisoned".to_string())?;
+            let rx = rx_guard
+                .as_ref()
+                .ok_or_else(|| "response channel unavailable".to_string())?;
+            match rx.recv_timeout(chunk) {
+                Ok(line) => line,
+                Err(std::sync::mpsc::RecvTimeoutError::Timeout) => {
+                    // Non-fatal: the outer loop will check `remaining` and
+                    // either retry or surface the top-level timeout.
+                    continue;
+                }
+                Err(std::sync::mpsc::RecvTimeoutError::Disconnected) => {
+                    return Err("helper response channel disconnected".to_string());
+                }
+            }
+        };
+
+        if response_line.trim().is_empty() {
+            log::debug!(
+                "[accessibility] helper skipped empty stdout line while waiting for id {id_str}"
+            );
+            continue;
+        }
+
+        let value: Value = serde_json::from_str(response_line.trim())
+            .map_err(|e| format!("failed to parse helper response: {e}"))?;
+
+        let matches = value
+            .get("id")
+            .and_then(|v| v.as_str())
+            .is_some_and(|rid| rid == id_str.as_str());
+        if matches {
+            return Ok(value);
+        }
+        log::debug!(
+            "[accessibility] discarding helper response with mismatched or missing id (want id={})",
+            id_str
+        );
     }
-
-    serde_json::from_str(response_line.trim())
-        .map_err(|e| format!("failed to parse helper response: {e}"))
 }
 
 /// Send a JSON request without waiting for a response.
 /// Used for `show`, `hide`, and `quit` commands.
+/// Only acquires UNIFIED_HELPER (for the stdin write) — never blocks on I/O.
 #[cfg(target_os = "macos")]
 pub(super) fn helper_send_fire_and_forget(request: &serde_json::Value) -> Result<(), String> {
     ensure_helper_running()?;
@@ -90,6 +196,13 @@ pub(super) fn helper_send_fire_and_forget(request: &serde_json::Value) -> Result
 /// Quit and clean up the helper process.
 #[cfg(target_os = "macos")]
 pub(super) fn helper_quit() -> Result<(), String> {
+    // Drop the response channel first so the reader thread exits cleanly.
+    {
+        let mut rx_guard = RESPONSE_RX
+            .lock()
+            .map_err(|_| "response rx lock poisoned".to_string())?;
+        rx_guard.take();
+    }
     let mut guard = UNIFIED_HELPER
         .lock()
         .map_err(|_| "unified helper lock poisoned".to_string())?;
@@ -103,6 +216,8 @@ pub(super) fn helper_quit() -> Result<(), String> {
     Ok(())
 }
 
+/// Ensure the helper process is running.  Spawns it (and the stdout reader
+/// thread) if not yet started or if it has exited unexpectedly.
 #[cfg(target_os = "macos")]
 fn ensure_helper_running() -> Result<(), String> {
     let mut guard = UNIFIED_HELPER
@@ -120,6 +235,10 @@ fn ensure_helper_running() -> Result<(), String> {
         }
         log::debug!("[accessibility] unified helper exited, restarting");
         *guard = None;
+        // Also drop the stale receiver so a new one will be created below.
+        if let Ok(mut rx_guard) = RESPONSE_RX.lock() {
+            rx_guard.take();
+        }
     }
 
     let binary_path = ensure_helper_binary()?;
@@ -139,17 +258,69 @@ fn ensure_helper_running() -> Result<(), String> {
         .take()
         .ok_or_else(|| "failed to capture helper stdout".to_string())?;
 
-    *guard = Some(UnifiedHelperProcess {
-        child,
-        stdin,
-        stdout: BufReader::new(stdout),
+    // Spawn a background thread that continuously reads lines from the helper's
+    // stdout and forwards them into the channel.  The thread exits when the
+    // sender is dropped (i.e. when helper_quit drops RESPONSE_RX) or when the
+    // process closes its stdout.
+    let (tx, rx) = mpsc::channel::<String>();
+    std::thread::spawn(move || {
+        let mut reader = BufReader::new(stdout);
+        let mut line = String::new();
+        loop {
+            line.clear();
+            match reader.read_line(&mut line) {
+                Ok(0) => break, // EOF — helper exited
+                Ok(_) => {
+                    let trimmed = line.trim().to_string();
+                    if !trimmed.is_empty() && tx.send(trimmed).is_err() {
+                        break; // Receiver dropped — time to exit
+                    }
+                }
+                Err(e) => {
+                    log::debug!("[accessibility] helper stdout reader error: {e}");
+                    break;
+                }
+            }
+        }
+        log::debug!("[accessibility] helper stdout reader thread exiting");
     });
+
+    // Store the new receiver.
+    if let Ok(mut rx_guard) = RESPONSE_RX.lock() {
+        *rx_guard = Some(rx);
+    }
+
+    *guard = Some(UnifiedHelperProcess { child, stdin });
     log::debug!("[accessibility] unified helper started");
     Ok(())
 }
 
+/// Compile the Swift helper binary in the background so the first overlay
+/// request does not incur the compile latency.  Safe to call multiple times;
+/// subsequent calls are no-ops (the binary is cached by `ensure_helper_binary`).
+#[cfg(target_os = "macos")]
+pub fn precompile_helper_background() {
+    std::thread::spawn(|| {
+        log::debug!("[accessibility] precompile_helper_background: starting");
+        match ensure_helper_binary() {
+            Ok(path) => log::debug!("[accessibility] helper binary ready: {}", path.display()),
+            Err(e) => log::warn!(
+                "[accessibility] helper precompile failed (will retry on first use): {e}"
+            ),
+        }
+    });
+}
+
+/// No-op on non-macOS platforms.
+#[cfg(not(target_os = "macos"))]
+pub fn precompile_helper_background() {}
+
 #[cfg(target_os = "macos")]
 fn ensure_helper_binary() -> Result<PathBuf, String> {
+    let _compile_guard = HELPER_COMPILE_LOCK
+        .lock()
+        .map_err(|_| "helper compile lock poisoned".to_string())?;
+
     let cache_dir = std::env::temp_dir().join("openhuman-accessibility-helper");
     fs::create_dir_all(&cache_dir).map_err(|e| format!("failed to create cache dir: {e}"))?;
     let source_path = cache_dir.join("unified_helper.swift");
@@ -479,11 +650,33 @@ func pasteText(id: String?, text: String) -> [String: Any] {
 final class OverlayController {
     private var panel: NSPanel?
     private var textField: NSTextField?
+    private var hintField: NSTextField?
     private var hideWorkItem: DispatchWorkItem?
 
-    func show(x: CGFloat, yTop: CGFloat, width: CGFloat, height: CGFloat, text: String, ttlMs: Int) {
-        let panelWidth = min(420, max(140, CGFloat(text.count) * 7 + 26))
-        let panelHeight: CGFloat = 26
+    func show(x: CGFloat, yTop: CGFloat, width: CGFloat, height: CGFloat, text: String, ttlMs: Int, tabHint: String) {
+        let showTabHint = !tabHint.isEmpty
+        // Detect current system appearance for contrast-appropriate colors.
+        let isDark: Bool = {
+            if #available(macOS 10.14, *) {
+                return NSApp.effectiveAppearance
+                    .bestMatch(from: [.darkAqua, .aqua]) == .darkAqua
+            }
+            return false
+        }()
+        let bgColor = isDark
+            ? NSColor(white: 0.92, alpha: 0.82)   // light badge on dark background
+            : NSColor(white: 0.10, alpha: 0.82)   // dark badge on light background
+        let textColor = isDark
+            ? NSColor(white: 0.08, alpha: 0.95)
+            : NSColor(white: 1.0, alpha: 0.95)
+
+        // Measure badge width from actual text metrics instead of char-count estimate.
+        let font = NSFont.systemFont(ofSize: 13)
+        let attrs: [NSAttributedString.Key: Any] = [.font: font]
+        let measured = (text as NSString).size(withAttributes: attrs)
+        let hintPad: CGFloat = showTabHint ? 80 : 16
+        let panelWidth = min(480, max(140, ceil(measured.width) + hintPad))
+        let panelHeight: CGFloat = 28
 
         // Multi-monitor: find the screen containing the target or mouse cursor.
         let screen: NSScreen? = {
@@ -537,23 +730,42 @@ final class OverlayController {
             let content = NSView(frame: NSRect(x: 0, y: 0, width: panelWidth, height: panelHeight))
             content.wantsLayer = true
             content.layer?.cornerRadius = 6
-            content.layer?.backgroundColor = NSColor(white: 0.08, alpha: 0.35).cgColor
+            content.layer?.backgroundColor = bgColor.cgColor
             p.contentView = content
 
             let label = NSTextField(labelWithString: text)
-            label.frame = NSRect(x: 8, y: 4, width: panelWidth - 12, height: 18)
-            label.textColor = NSColor(white: 1.0, alpha: 0.46)
-            label.font = NSFont.systemFont(ofSize: 13)
+            label.frame = NSRect(x: 8, y: 5, width: panelWidth - (showTabHint ? 62 : 16), height: 18)
+            label.textColor = textColor
+            label.font = font
             label.lineBreakMode = .byTruncatingTail
             content.addSubview(label)
 
+            let hint = NSTextField(labelWithString: tabHint.isEmpty ? "Tab ↵" : tabHint)
+            hint.frame = NSRect(x: panelWidth - 54, y: 5, width: 48, height: 18)
+            hint.textColor = NSColor(white: isDark ? 0.35 : 0.65, alpha: 1.0)
+            hint.font = NSFont.monospacedSystemFont(ofSize: 10, weight: .regular)
+            hint.alignment = .right
+            hint.isHidden = !showTabHint
+            content.addSubview(hint)
+
             panel = p
             textField = label
+            hintField = hint
+        }
+
+        // Re-apply colors on every show so runtime appearance changes are reflected.
+        panel?.contentView?.layer?.backgroundColor = bgColor.cgColor
+        textField?.textColor = textColor
+        hintField?.textColor = NSColor(white: isDark ? 0.35 : 0.65, alpha: 1.0)
+        hintField?.isHidden = !showTabHint
+        if showTabHint {
+            hintField?.stringValue = tabHint
         }
 
         panel?.setFrame(NSRect(x: originX, y: originYCocoa, width: panelWidth, height: panelHeight), display: true)
         panel?.contentView?.frame = NSRect(x: 0, y: 0, width: panelWidth, height: panelHeight)
-        textField?.frame = NSRect(x: 8, y: 4, width: panelWidth - 12, height: 18)
+        textField?.frame = NSRect(x: 8, y: 5, width: panelWidth - (showTabHint ? 62 : 16), height: 18)
+        hintField?.frame = NSRect(x: panelWidth - 54, y: 5, width: 48, height: 18)
         textField?.stringValue = text
         panel?.orderFrontRegardless()
 
@@ -602,8 +814,12 @@ DispatchQueue.global(qos: .userInitiated).async {
             let h = CGFloat((payload["h"] as? NSNumber)?.doubleValue ?? 0)
             let text = (payload["text"] as? String) ?? ""
             let ttl = (payload["ttl_ms"] as? NSNumber)?.intValue ?? 900
+            let tabHint: String = {
+                if let s = payload["tab_hint"] as? String { return s }
+                return "Tab ↵"
+            }()
             DispatchQueue.main.async {
-                controller.show(x: x, yTop: y, width: w, height: h, text: text, ttlMs: ttl)
+                controller.show(x: x, yTop: y, width: w, height: h, text: text, ttlMs: ttl, tabHint: tabHint)
             }
 
         case "hide":
diff --git a/src/openhuman/accessibility/keys.rs b/src/openhuman/accessibility/keys.rs
index 125aed9ce..0ba3c0fda 100644
--- a/src/openhuman/accessibility/keys.rs
+++ b/src/openhuman/accessibility/keys.rs
@@ -1,7 +1,70 @@
 //! Key state probes via direct FFI (lightweight, no helper needed).
+//!
+//! Tab and Escape detection is gated on the Input Monitoring permission.
+//! The permission is cached; if initially denied, we re-check occasionally so
+//! granting permission without restarting the app still enables Tab/Escape.
+
+#[cfg(target_os = "macos")]
+use std::sync::atomic::{AtomicBool, AtomicI64, Ordering};
+
+#[cfg(target_os = "macos")]
+static INPUT_MONITORING_GRANTED: AtomicBool = AtomicBool::new(false);
+/// Last time we called `detect_input_monitoring_permission` (ms since UNIX epoch).
+#[cfg(target_os = "macos")]
+static INPUT_MONITORING_LAST_CHECK_MS: AtomicI64 = AtomicI64::new(0);
+
+/// Re-check interval when permission is still denied (avoid IOHID every tick).
+#[cfg(target_os = "macos")]
+const INPUT_MONITORING_RECHECK_MS: i64 = 2500;
+
+#[cfg(target_os = "macos")]
+fn refresh_input_monitoring_cache() {
+    use std::time::{SystemTime, UNIX_EPOCH};
+
+    let now_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .map(|d| d.as_millis() as i64)
+        .unwrap_or(0);
+
+    if INPUT_MONITORING_GRANTED.load(Ordering::Relaxed) {
+        return;
+    }
+
+    let last = INPUT_MONITORING_LAST_CHECK_MS.load(Ordering::Relaxed);
+    if now_ms - last < INPUT_MONITORING_RECHECK_MS && last != 0 {
+        return;
+    }
+    INPUT_MONITORING_LAST_CHECK_MS.store(now_ms, Ordering::Relaxed);
+
+    use super::permissions::detect_input_monitoring_permission;
+    use super::types::PermissionState;
+    let granted = matches!(
+        detect_input_monitoring_permission(),
+        PermissionState::Granted
+    );
+    if granted {
+        INPUT_MONITORING_GRANTED.store(true, Ordering::Relaxed);
+        log::info!("[accessibility] Input Monitoring granted — Tab/Escape key detection enabled.");
+        return;
+    }
+
+    // First denial: warn once (avoid spam on every recheck interval).
+    static WARNED: AtomicBool = AtomicBool::new(false);
+    if !WARNED.swap(true, Ordering::Relaxed) {
+        log::warn!(
+            "[accessibility] Input Monitoring permission not granted; \
+             Tab/Escape key detection disabled until granted. \
+             Grant in System Settings → Privacy & Security → Input Monitoring."
+        );
+    }
+}
 
 #[cfg(target_os = "macos")]
 pub fn is_tab_key_down() -> bool {
+    refresh_input_monitoring_cache();
+    if !INPUT_MONITORING_GRANTED.load(Ordering::Relaxed) {
+        return false;
+    }
     unsafe { CGEventSourceKeyState(KCG_EVENT_SOURCE_STATE_COMBINED_SESSION_STATE, KVK_TAB) }
 }
 
@@ -12,6 +75,10 @@ pub fn is_tab_key_down() -> bool {
 
 #[cfg(target_os = "macos")]
 pub fn is_escape_key_down() -> bool {
+    refresh_input_monitoring_cache();
+    if !INPUT_MONITORING_GRANTED.load(Ordering::Relaxed) {
+        return false;
+    }
     unsafe { CGEventSourceKeyState(KCG_EVENT_SOURCE_STATE_COMBINED_SESSION_STATE, KVK_ESCAPE) }
 }
 
diff --git a/src/openhuman/accessibility/mod.rs b/src/openhuman/accessibility/mod.rs
index cab4a040d..3f34a9930 100644
--- a/src/openhuman/accessibility/mod.rs
+++ b/src/openhuman/accessibility/mod.rs
@@ -26,6 +26,7 @@ pub use globe::{
     globe_listener_poll, globe_listener_start, globe_listener_stop, GlobeHotkeyPollResult,
     GlobeHotkeyStatus,
 };
+pub use helper::precompile_helper_background;
 pub use keys::{is_escape_key_down, is_tab_key_down};
 pub use overlay::{hide_overlay, quit_overlay, show_overlay};
 pub use paste::apply_text_to_focused_field;
diff --git a/src/openhuman/accessibility/overlay.rs b/src/openhuman/accessibility/overlay.rs
index 758db2034..89e1f5786 100644
--- a/src/openhuman/accessibility/overlay.rs
+++ b/src/openhuman/accessibility/overlay.rs
@@ -4,8 +4,16 @@ use super::text_util::truncate_tail;
 use super::types::ElementBounds;
 
 /// Show an overlay badge near the given element bounds.
+///
+/// When `tab_hint` is empty, the Swift helper hides the Tab keyboard hint (used when
+/// `accept_with_tab` is disabled in config).
 #[cfg(target_os = "macos")]
-pub fn show_overlay(bounds: &ElementBounds, text: &str, ttl_ms: u32) -> Result<(), String> {
+pub fn show_overlay(
+    bounds: &ElementBounds,
+    text: &str,
+    ttl_ms: u32,
+    tab_hint: &str,
+) -> Result<(), String> {
     let message = serde_json::json!({
         "type": "show",
         "x": bounds.x,
@@ -13,7 +21,8 @@ pub fn show_overlay(bounds: &ElementBounds, text: &str, ttl_ms: u32) -> Result<(
         "w": bounds.width,
         "h": bounds.height,
         "text": truncate_tail(text, 96),
-        "ttl_ms": ttl_ms
+        "ttl_ms": ttl_ms,
+        "tab_hint": tab_hint,
     });
     super::helper::helper_send_fire_and_forget(&message)
 }
@@ -32,7 +41,12 @@ pub fn quit_overlay() -> Result<(), String> {
 }
 
 #[cfg(not(target_os = "macos"))]
-pub fn show_overlay(_bounds: &ElementBounds, _text: &str, _ttl_ms: u32) -> Result<(), String> {
+pub fn show_overlay(
+    _bounds: &ElementBounds,
+    _text: &str,
+    _ttl_ms: u32,
+    _tab_hint: &str,
+) -> Result<(), String> {
     Ok(())
 }
 
@@ -45,3 +59,86 @@ pub fn hide_overlay() -> Result<(), String> {
 pub fn quit_overlay() -> Result<(), String> {
     Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    #[cfg(not(target_os = "macos"))]
+    use super::*;
+
+    // --- Non-macOS stubs always succeed ---
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overlay_non_macos_returns_ok() {
+        let bounds = ElementBounds {
+            x: 0,
+            y: 0,
+            width: 100,
+            height: 50,
+        };
+        assert!(show_overlay(&bounds, "suggestion text", 900, "Tab ↵").is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overlay_non_macos_empty_text_returns_ok() {
+        let bounds = ElementBounds {
+            x: 10,
+            y: 20,
+            width: 0,
+            height: 0,
+        };
+        assert!(show_overlay(&bounds, "", 500, "").is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overlay_non_macos_zero_ttl_returns_ok() {
+        let bounds = ElementBounds {
+            x: 0,
+            y: 0,
+            width: 200,
+            height: 30,
+        };
+        assert!(show_overlay(&bounds, "hello", 0, "Tab ↵").is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overlay_non_macos_max_ttl_returns_ok() {
+        let bounds = ElementBounds {
+            x: -10,
+            y: -5,
+            width: 300,
+            height: 60,
+        };
+        assert!(show_overlay(&bounds, "test", u32::MAX, "Tab ↵").is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn hide_overlay_non_macos_returns_ok() {
+        assert!(hide_overlay().is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn quit_overlay_non_macos_returns_ok() {
+        assert!(quit_overlay().is_ok());
+    }
+
+    // Verify overlay functions can be called multiple times without error
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn hide_overlay_idempotent() {
+        assert!(hide_overlay().is_ok());
+        assert!(hide_overlay().is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn quit_overlay_idempotent() {
+        assert!(quit_overlay().is_ok());
+        assert!(quit_overlay().is_ok());
+    }
+}
diff --git a/src/openhuman/accessibility/paste.rs b/src/openhuman/accessibility/paste.rs
index 91ff2eca3..0b7fe5a15 100644
--- a/src/openhuman/accessibility/paste.rs
+++ b/src/openhuman/accessibility/paste.rs
@@ -152,12 +152,16 @@ fn clipboard_save_osascript() -> Option<String> {
 }
 
 /// Fallback insertion: direct AXValue write via AppleScript.
+/// Reads `AXSelectedTextRange` to insert at the cursor position rather than
+/// always appending to the end of the field.
 #[cfg(target_os = "macos")]
 fn apply_text_via_axvalue(text: &str) -> Result<(), String> {
     let escaped = text
         .replace('\\', "\\\\")
         .replace('\"', "\\\"")
         .replace('\n', " ");
+    // AXSelectedTextRange.location is 0-based; AppleScript string indices are 1-based.
+    // "text 1 thru 0" evaluates to "" in AppleScript — correct for cursor-at-start.
     let script = format!(
         r##"
 tell application "System Events"
@@ -168,16 +172,29 @@ tell application "System Events"
     set currentValue to value of attribute "AXValue" of focusedElement as text
   end try
   if currentValue is "missing value" then set currentValue to ""
-  if currentValue is "" then
-    try
-      set currentValue to value of attribute "AXSelectedText" of focusedElement as text
-    end try
-    if currentValue is "missing value" then set currentValue to ""
+  -- Read cursor position from AXSelectedTextRange (0-based location).
+  set insertionOffset to -1
+  try
+    set selRange to value of attribute "AXSelectedTextRange" of focusedElement
+    set insertionOffset to location of selRange
+  end try
+  -- Insert at cursor when available, otherwise append.
+  if insertionOffset >= 0 and insertionOffset <= (length of currentValue) then
+    if insertionOffset = 0 then
+      set value of attribute "AXValue" of focusedElement to ("{}" & currentValue)
+    else if insertionOffset >= (length of currentValue) then
+      set value of attribute "AXValue" of focusedElement to (currentValue & "{}")
+    else
+      set beforeCursor to text 1 thru insertionOffset of currentValue
+      set afterCursor to text (insertionOffset + 1) thru -1 of currentValue
+      set value of attribute "AXValue" of focusedElement to (beforeCursor & "{}" & afterCursor)
+    end if
+  else
+    set value of attribute "AXValue" of focusedElement to (currentValue & "{}")
   end if
-  set value of attribute "AXValue" of focusedElement to (currentValue & "{}")
 end tell
 "##,
-        escaped
+        escaped, escaped, escaped, escaped
     );
     let output = std::process::Command::new("osascript")
         .arg("-e")
diff --git a/src/openhuman/accessibility/text_util.rs b/src/openhuman/accessibility/text_util.rs
index 63f8bbbc0..996ac2a22 100644
--- a/src/openhuman/accessibility/text_util.rs
+++ b/src/openhuman/accessibility/text_util.rs
@@ -34,3 +34,149 @@ pub fn parse_ax_number(raw: &str) -> Option<i32> {
         Some(rounded as i32)
     })
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    // --- truncate_tail ---
+
+    #[test]
+    fn truncate_tail_shorter_than_max_returns_original() {
+        assert_eq!(truncate_tail("hello", 10), "hello");
+    }
+
+    #[test]
+    fn truncate_tail_exactly_max_returns_original() {
+        assert_eq!(truncate_tail("hello", 5), "hello");
+    }
+
+    #[test]
+    fn truncate_tail_longer_than_max_returns_tail() {
+        assert_eq!(truncate_tail("hello", 3), "llo");
+    }
+
+    #[test]
+    fn truncate_tail_empty_string() {
+        assert_eq!(truncate_tail("", 5), "");
+    }
+
+    #[test]
+    fn truncate_tail_zero_max_returns_empty() {
+        assert_eq!(truncate_tail("hello", 0), "");
+    }
+
+    #[test]
+    fn truncate_tail_multibyte_chars_counts_chars_not_bytes() {
+        // "héllo" is 5 chars; last 3 = "llo"
+        assert_eq!(truncate_tail("héllo", 3), "llo");
+    }
+
+    #[test]
+    fn truncate_tail_unicode_emoji_counts_codepoints() {
+        // "ab🎉cd" — 5 codepoints; last 3 = "🎉cd"
+        assert_eq!(truncate_tail("ab🎉cd", 3), "🎉cd");
+    }
+
+    // --- normalize_ax_value ---
+
+    #[test]
+    fn normalize_ax_value_trims_whitespace() {
+        assert_eq!(normalize_ax_value("  hello  "), "hello");
+    }
+
+    #[test]
+    fn normalize_ax_value_missing_value_lowercase_returns_empty() {
+        assert_eq!(normalize_ax_value("missing value"), "");
+    }
+
+    #[test]
+    fn normalize_ax_value_missing_value_uppercase_returns_empty() {
+        assert_eq!(normalize_ax_value("MISSING VALUE"), "");
+    }
+
+    #[test]
+    fn normalize_ax_value_mixed_case_missing_value_returns_empty() {
+        assert_eq!(normalize_ax_value("Missing Value"), "");
+    }
+
+    #[test]
+    fn normalize_ax_value_empty_string_returns_empty() {
+        assert_eq!(normalize_ax_value(""), "");
+    }
+
+    #[test]
+    fn normalize_ax_value_only_whitespace_returns_empty() {
+        assert_eq!(normalize_ax_value("   "), "");
+    }
+
+    #[test]
+    fn normalize_ax_value_regular_text_unchanged() {
+        assert_eq!(normalize_ax_value("some value"), "some value");
+    }
+
+    // --- parse_ax_number ---
+
+    #[test]
+    fn parse_ax_number_integer_string() {
+        assert_eq!(parse_ax_number("42"), Some(42));
+    }
+
+    #[test]
+    fn parse_ax_number_negative_integer() {
+        assert_eq!(parse_ax_number("-7"), Some(-7));
+    }
+
+    #[test]
+    fn parse_ax_number_float_rounds_to_nearest() {
+        assert_eq!(parse_ax_number("42.4"), Some(42));
+        assert_eq!(parse_ax_number("42.6"), Some(43));
+    }
+
+    #[test]
+    fn parse_ax_number_comma_treated_as_decimal_separator() {
+        // Locale-style: "1,5" → 1.5 → rounds to 2
+        assert_eq!(parse_ax_number("1,5"), Some(2));
+    }
+
+    #[test]
+    fn parse_ax_number_missing_value_returns_none() {
+        assert_eq!(parse_ax_number("missing value"), None);
+    }
+
+    #[test]
+    fn parse_ax_number_empty_returns_none() {
+        assert_eq!(parse_ax_number(""), None);
+    }
+
+    #[test]
+    fn parse_ax_number_whitespace_only_returns_none() {
+        assert_eq!(parse_ax_number("  "), None);
+    }
+
+    #[test]
+    fn parse_ax_number_non_numeric_returns_none() {
+        assert_eq!(parse_ax_number("abc"), None);
+    }
+
+    #[test]
+    fn parse_ax_number_nan_returns_none() {
+        assert_eq!(parse_ax_number("NaN"), None);
+    }
+
+    #[test]
+    fn parse_ax_number_infinity_returns_none() {
+        assert_eq!(parse_ax_number("inf"), None);
+        assert_eq!(parse_ax_number("infinity"), None);
+    }
+
+    #[test]
+    fn parse_ax_number_zero() {
+        assert_eq!(parse_ax_number("0"), Some(0));
+    }
+
+    #[test]
+    fn parse_ax_number_trims_surrounding_whitespace() {
+        assert_eq!(parse_ax_number("  10  "), Some(10));
+    }
+}
diff --git a/src/openhuman/accessibility/types.rs b/src/openhuman/accessibility/types.rs
index 8cb018588..157f36c8c 100644
--- a/src/openhuman/accessibility/types.rs
+++ b/src/openhuman/accessibility/types.rs
@@ -71,3 +71,146 @@ pub enum PermissionKind {
     Accessibility,
     InputMonitoring,
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn make_ctx(
+        app: Option<&str>,
+        title: Option<&str>,
+        bounds: Option<ElementBounds>,
+    ) -> AppContext {
+        AppContext {
+            app_name: app.map(str::to_string),
+            window_title: title.map(str::to_string),
+            bounds,
+        }
+    }
+
+    fn make_bounds(x: i32, y: i32, w: i32, h: i32) -> ElementBounds {
+        ElementBounds {
+            x,
+            y,
+            width: w,
+            height: h,
+        }
+    }
+
+    // --- AppContext::same_as ---
+
+    #[test]
+    fn same_as_identical_contexts_true() {
+        let a = make_ctx(
+            Some("App"),
+            Some("Window"),
+            Some(make_bounds(0, 0, 800, 600)),
+        );
+        let b = make_ctx(
+            Some("App"),
+            Some("Window"),
+            Some(make_bounds(0, 0, 800, 600)),
+        );
+        assert!(a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_both_none_fields_true() {
+        let a = make_ctx(None, None, None);
+        let b = make_ctx(None, None, None);
+        assert!(a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_app_name_false() {
+        let a = make_ctx(Some("AppA"), Some("Window"), None);
+        let b = make_ctx(Some("AppB"), Some("Window"), None);
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_window_title_false() {
+        let a = make_ctx(Some("App"), Some("Win1"), None);
+        let b = make_ctx(Some("App"), Some("Win2"), None);
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_one_has_bounds_other_none_false() {
+        let a = make_ctx(Some("App"), None, Some(make_bounds(0, 0, 100, 100)));
+        let b = make_ctx(Some("App"), None, None);
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_bounds_x_false() {
+        let a = make_ctx(None, None, Some(make_bounds(10, 0, 100, 100)));
+        let b = make_ctx(None, None, Some(make_bounds(20, 0, 100, 100)));
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_bounds_y_false() {
+        let a = make_ctx(None, None, Some(make_bounds(0, 10, 100, 100)));
+        let b = make_ctx(None, None, Some(make_bounds(0, 20, 100, 100)));
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_bounds_width_false() {
+        let a = make_ctx(None, None, Some(make_bounds(0, 0, 100, 100)));
+        let b = make_ctx(None, None, Some(make_bounds(0, 0, 200, 100)));
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_different_bounds_height_false() {
+        let a = make_ctx(None, None, Some(make_bounds(0, 0, 100, 100)));
+        let b = make_ctx(None, None, Some(make_bounds(0, 0, 100, 200)));
+        assert!(!a.same_as(&b));
+    }
+
+    #[test]
+    fn same_as_reflexive() {
+        let a = make_ctx(Some("App"), Some("Win"), Some(make_bounds(1, 2, 3, 4)));
+        assert!(a.same_as(&a));
+    }
+
+    // --- AppContext::as_compound_text ---
+
+    #[test]
+    fn as_compound_text_both_some_lowercase() {
+        let ctx = make_ctx(Some("MyApp"), Some("My Window"), None);
+        assert_eq!(ctx.as_compound_text(), "myapp my window");
+    }
+
+    #[test]
+    fn as_compound_text_app_none_title_some() {
+        let ctx = make_ctx(None, Some("Window Title"), None);
+        assert_eq!(ctx.as_compound_text(), " window title");
+    }
+
+    #[test]
+    fn as_compound_text_app_some_title_none() {
+        let ctx = make_ctx(Some("AppName"), None, None);
+        assert_eq!(ctx.as_compound_text(), "appname ");
+    }
+
+    #[test]
+    fn as_compound_text_both_none_returns_space() {
+        let ctx = make_ctx(None, None, None);
+        assert_eq!(ctx.as_compound_text(), " ");
+    }
+
+    #[test]
+    fn as_compound_text_already_lowercase_unchanged() {
+        let ctx = make_ctx(Some("slack"), Some("general"), None);
+        assert_eq!(ctx.as_compound_text(), "slack general");
+    }
+
+    #[test]
+    fn as_compound_text_mixed_case_lowercased() {
+        let ctx = make_ctx(Some("VS Code"), Some("README.md"), None);
+        assert_eq!(ctx.as_compound_text(), "vs code readme.md");
+    }
+}
diff --git a/src/openhuman/autocomplete/core/engine.rs b/src/openhuman/autocomplete/core/engine.rs
index 809cc8bfa..6f79bdfe9 100644
--- a/src/openhuman/autocomplete/core/engine.rs
+++ b/src/openhuman/autocomplete/core/engine.rs
@@ -2,7 +2,7 @@ use crate::openhuman::config::Config;
 use crate::openhuman::local_ai;
 use chrono::Utc;
 use once_cell::sync::Lazy;
-use std::sync::Arc;
+use std::sync::{Arc, Once};
 use tokio::sync::Mutex;
 use tokio::task::JoinHandle;
 use tokio::time::{self, Duration, Instant};
@@ -114,6 +114,14 @@ impl AutocompleteEngine {
             return Ok(AutocompleteStartResult { started: false });
         }
 
+        // Kick off Swift helper compilation in the background so the first
+        // suggestion request does not stall waiting for `swiftc`.
+        // Only after we know config loaded and autocomplete is enabled.
+        static PRECOMPILE_ONCE: Once = Once::new();
+        PRECOMPILE_ONCE.call_once(|| {
+            crate::openhuman::accessibility::precompile_helper_background();
+        });
+
         let debounce_ms = params
             .debounce_ms
             .unwrap_or(config.autocomplete.debounce_ms)
@@ -180,6 +188,8 @@ impl AutocompleteEngine {
                                         Some(&error_message),
                                         None,
                                         None,
+                                        700,
+                                        false,
                                     );
                                 }
                             }
@@ -346,7 +356,7 @@ impl AutocompleteEngine {
             state.last_overlay_signature = None;
         }
         if should_apply {
-            show_overflow_badge("accepted", Some(&cleaned), None, None, None);
+            show_overflow_badge("accepted", Some(&cleaned), None, None, None, 700, false);
         }
 
         // Persist acceptance for personalisation (fire-and-forget).
@@ -425,6 +435,9 @@ impl AutocompleteEngine {
         if let Some(accept_with_tab) = params.accept_with_tab {
             config.autocomplete.accept_with_tab = accept_with_tab;
         }
+        if let Some(overlay_ttl_ms) = params.overlay_ttl_ms {
+            config.autocomplete.overlay_ttl_ms = overlay_ttl_ms.clamp(300, 10_000);
+        }
         config.save().await.map_err(|e| e.to_string())?;
 
         let mut state = self.inner.lock().await;
@@ -620,7 +633,8 @@ impl AutocompleteEngine {
         }
         state.suggestion = Some(AutocompleteSuggestion {
             value: suggestion.clone(),
-            confidence: 0.72,
+            // Placeholder until `local_ai::inline_complete` surfaces a real score (avoid 0.0 so UI/thresholds keep signal).
+            confidence: 0.75,
         });
         state.phase = "ready".to_string();
         state.last_error = None;
@@ -631,6 +645,7 @@ impl AutocompleteEngine {
         );
         if !is_in_app && state.last_overlay_signature.as_deref() != Some(ready_signature.as_str()) {
             state.last_overlay_signature = Some(ready_signature);
+            let overlay_ttl_ms = config.autocomplete.overlay_ttl_ms;
             drop(state);
             show_overflow_badge(
                 "ready",
@@ -638,6 +653,8 @@ impl AutocompleteEngine {
                 None,
                 app_name.as_deref(),
                 focused.bounds.as_ref(),
+                overlay_ttl_ms,
+                config.autocomplete.accept_with_tab,
             );
             return Ok(());
         }
@@ -723,7 +740,15 @@ impl AutocompleteEngine {
                         .unwrap_or_default()
                         .to_lowercase();
                     if !app_lower.contains("openhuman") {
-                        show_overflow_badge("accepted", Some(&cleaned), None, None, None);
+                        show_overflow_badge(
+                            "accepted",
+                            Some(&cleaned),
+                            None,
+                            None,
+                            None,
+                            700,
+                            false,
+                        );
                     }
                 }
 
@@ -783,7 +808,7 @@ impl AutocompleteEngine {
                 .unwrap_or_default()
                 .to_lowercase();
             if !app_lower.contains("openhuman") {
-                show_overflow_badge("rejected", Some(&value), None, None, None);
+                show_overflow_badge("rejected", Some(&value), None, None, None, 700, false);
             }
         }
         Ok(())
diff --git a/src/openhuman/autocomplete/core/overlay.rs b/src/openhuman/autocomplete/core/overlay.rs
index 434252757..57deb9131 100644
--- a/src/openhuman/autocomplete/core/overlay.rs
+++ b/src/openhuman/autocomplete/core/overlay.rs
@@ -23,10 +23,12 @@ pub(super) fn show_overflow_badge(
     error: Option<&str>,
     app_name: Option<&str>,
     anchor_bounds: Option<&ElementBounds>,
+    ttl_ms: u32,
+    // When `kind == "ready"`, show the Tab hint in the overlay only if true.
+    show_tab_hint: bool,
 ) {
     #[cfg(target_os = "macos")]
     {
-        const READY_THROTTLE_MS: i64 = 1_200;
         let now_ms = Utc::now().timestamp_millis();
         let signature = format!(
             "{}:{}:{}:{}",
@@ -36,12 +38,11 @@ pub(super) fn show_overflow_badge(
             error.unwrap_or_default()
         );
 
+        // Deduplicate rapid duplicate events only (same payload within a short window).
+        const DEDUP_MS: i64 = 400;
         if let Ok(mut guard) = LAST_OVERFLOW_BADGE.lock() {
             if let Some((last_signature, last_ms)) = guard.as_ref() {
-                if *last_signature == signature {
-                    return;
-                }
-                if kind == "ready" && (now_ms - *last_ms) < READY_THROTTLE_MS {
+                if *last_signature == signature && now_ms - *last_ms < DEDUP_MS {
                     return;
                 }
             }
@@ -58,16 +59,18 @@ pub(super) fn show_overflow_badge(
                     width: 0,
                     height: 0,
                 };
-                let bounds = if anchor_bounds.is_some() {
-                    anchor_bounds.unwrap()
-                } else {
-                    log::debug!(
-                        "[autocomplete] overlay: no anchor bounds, falling back to zero bounds (mouse cursor); suggestion={:?}",
-                        truncate_tail(suggestion_text, 40)
-                    );
-                    &fallback_bounds
+                let bounds: &ElementBounds = match anchor_bounds {
+                    Some(b) => b,
+                    None => {
+                        log::debug!(
+                            "[autocomplete] overlay: no anchor bounds, falling back to zero bounds (mouse cursor); suggestion={:?}",
+                            truncate_tail(suggestion_text, 40)
+                        );
+                        &fallback_bounds
+                    }
                 };
-                if accessibility::show_overlay(bounds, suggestion_text, 1100).is_ok() {
+                let tab_hint = if show_tab_hint { "Tab ↵" } else { "" };
+                if accessibility::show_overlay(bounds, suggestion_text, ttl_ms, tab_hint).is_ok() {
                     return;
                 }
             }
@@ -133,3 +136,141 @@ fn escape_osascript_text(raw: &str) -> String {
 pub(super) fn overlay_helper_quit() -> Result<(), String> {
     accessibility::quit_overlay()
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    // --- overlay_helper_quit (cross-platform) ---
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn overlay_helper_quit_non_macos_returns_ok() {
+        assert!(overlay_helper_quit().is_ok());
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn overlay_helper_quit_non_macos_idempotent() {
+        assert!(overlay_helper_quit().is_ok());
+        assert!(overlay_helper_quit().is_ok());
+    }
+
+    // --- escape_osascript_text (macOS-only) ---
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_plain_string_unchanged() {
+        assert_eq!(escape_osascript_text("hello world"), "hello world");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_escapes_double_quotes() {
+        assert_eq!(escape_osascript_text(r#"say "hello""#), r#"say \"hello\""#);
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_escapes_backslash() {
+        assert_eq!(escape_osascript_text(r"back\slash"), r"back\\slash");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_replaces_newline_with_space() {
+        assert_eq!(escape_osascript_text("line1\nline2"), "line1 line2");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_replaces_carriage_return_with_space() {
+        assert_eq!(escape_osascript_text("line1\rline2"), "line1 line2");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_crlf_both_replaced() {
+        // \r and \n are each replaced individually → two spaces
+        assert_eq!(escape_osascript_text("a\r\nb"), "a  b");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_empty_string_unchanged() {
+        assert_eq!(escape_osascript_text(""), "");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_backslash_before_quote_double_escapes() {
+        // r#"\"# + `"` = `\"` — backslash first becomes `\\`, then `"` becomes `\"`
+        assert_eq!(escape_osascript_text("\\\""), "\\\\\\\"");
+    }
+
+    #[cfg(target_os = "macos")]
+    #[test]
+    fn escape_osascript_text_multiple_quotes() {
+        assert_eq!(
+            escape_osascript_text(r#""a" and "b""#),
+            r#"\"a\" and \"b\""#
+        );
+    }
+
+    // --- show_overflow_badge signature (non-macOS no-op smoke test) ---
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overflow_badge_non_macos_does_not_panic_ready() {
+        let bounds = crate::openhuman::accessibility::ElementBounds {
+            x: 0,
+            y: 0,
+            width: 100,
+            height: 50,
+        };
+        // Should be a no-op and not panic.
+        show_overflow_badge(
+            "ready",
+            Some("suggestion"),
+            None,
+            Some("TestApp"),
+            Some(&bounds),
+            900,
+            true,
+        );
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overflow_badge_non_macos_does_not_panic_error() {
+        show_overflow_badge(
+            "error",
+            None,
+            Some("something failed"),
+            None,
+            None,
+            500,
+            false,
+        );
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overflow_badge_non_macos_does_not_panic_accepted() {
+        show_overflow_badge(
+            "accepted",
+            Some("accepted text"),
+            None,
+            None,
+            None,
+            0,
+            false,
+        );
+    }
+
+    #[cfg(not(target_os = "macos"))]
+    #[test]
+    fn show_overflow_badge_non_macos_does_not_panic_rejected() {
+        show_overflow_badge("rejected", None, None, None, None, 200, false);
+    }
+}
diff --git a/src/openhuman/autocomplete/core/text.rs b/src/openhuman/autocomplete/core/text.rs
index 563729668..69e73afbc 100644
--- a/src/openhuman/autocomplete/core/text.rs
+++ b/src/openhuman/autocomplete/core/text.rs
@@ -26,3 +26,135 @@ pub(super) fn sanitize_suggestion(text: &str) -> String {
 pub(super) fn is_no_text_candidate_error(err: &str) -> bool {
     err.contains("ERROR:no_text_candidate_found")
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    // --- truncate_head ---
+
+    #[test]
+    fn truncate_head_shorter_than_max_returns_original() {
+        assert_eq!(truncate_head("hello", 10), "hello");
+    }
+
+    #[test]
+    fn truncate_head_exactly_max_returns_original() {
+        assert_eq!(truncate_head("hello", 5), "hello");
+    }
+
+    #[test]
+    fn truncate_head_longer_than_max_returns_head() {
+        assert_eq!(truncate_head("hello world", 5), "hello");
+    }
+
+    #[test]
+    fn truncate_head_empty_string() {
+        assert_eq!(truncate_head("", 5), "");
+    }
+
+    #[test]
+    fn truncate_head_zero_max_returns_empty() {
+        assert_eq!(truncate_head("hello", 0), "");
+    }
+
+    #[test]
+    fn truncate_head_multibyte_chars_counts_codepoints() {
+        // "héllo" is 5 chars; first 3 = "hél"
+        assert_eq!(truncate_head("héllo", 3), "hél");
+    }
+
+    // --- sanitize_suggestion ---
+
+    #[test]
+    fn sanitize_suggestion_plain_text() {
+        assert_eq!(sanitize_suggestion("hello world"), "hello world");
+    }
+
+    #[test]
+    fn sanitize_suggestion_trims_leading_and_trailing_whitespace() {
+        assert_eq!(sanitize_suggestion("  hello  "), "hello");
+    }
+
+    #[test]
+    fn sanitize_suggestion_strips_surrounding_double_quotes() {
+        assert_eq!(sanitize_suggestion("\"quoted\""), "quoted");
+    }
+
+    #[test]
+    fn sanitize_suggestion_takes_first_line_only() {
+        assert_eq!(sanitize_suggestion("line one\nline two"), "line one");
+    }
+
+    #[test]
+    fn sanitize_suggestion_crlf_newline_takes_first_line() {
+        assert_eq!(sanitize_suggestion("line one\r\nline two"), "line one");
+    }
+
+    #[test]
+    fn sanitize_suggestion_replaces_embedded_tabs_with_spaces() {
+        // Leading/trailing tabs are stripped by trim(); only interior tabs become spaces.
+        assert_eq!(sanitize_suggestion("he\tllo"), "he llo");
+    }
+
+    #[test]
+    fn sanitize_suggestion_empty_input_returns_empty() {
+        assert_eq!(sanitize_suggestion(""), "");
+    }
+
+    #[test]
+    fn sanitize_suggestion_whitespace_only_returns_empty() {
+        assert_eq!(sanitize_suggestion("   \n   "), "");
+    }
+
+    #[test]
+    fn sanitize_suggestion_truncates_to_max_chars() {
+        // MAX_SUGGESTION_CHARS is 64 — a 70-char string should be cut to 64.
+        let long = "a".repeat(70);
+        let result = sanitize_suggestion(&long);
+        assert_eq!(result.len(), 64);
+        assert!(result.chars().all(|c| c == 'a'));
+    }
+
+    #[test]
+    fn sanitize_suggestion_exactly_max_chars_unchanged() {
+        let exact = "b".repeat(64);
+        assert_eq!(sanitize_suggestion(&exact), exact);
+    }
+
+    #[test]
+    fn sanitize_suggestion_removes_bare_carriage_return() {
+        // Bare \r is NOT treated as a line ending by lines(), so it stays in the
+        // first-line content and is then removed by replace('\r', "").
+        assert_eq!(sanitize_suggestion("hello\rworld"), "helloworld");
+    }
+
+    // --- is_no_text_candidate_error ---
+
+    #[test]
+    fn is_no_text_candidate_error_exact_match() {
+        assert!(is_no_text_candidate_error("ERROR:no_text_candidate_found"));
+    }
+
+    #[test]
+    fn is_no_text_candidate_error_substring_match() {
+        assert!(is_no_text_candidate_error(
+            "AX query failed: ERROR:no_text_candidate_found"
+        ));
+    }
+
+    #[test]
+    fn is_no_text_candidate_error_unrelated_error() {
+        assert!(!is_no_text_candidate_error("some other error"));
+    }
+
+    #[test]
+    fn is_no_text_candidate_error_empty_string() {
+        assert!(!is_no_text_candidate_error(""));
+    }
+
+    #[test]
+    fn is_no_text_candidate_error_partial_prefix_no_match() {
+        assert!(!is_no_text_candidate_error("ERROR:no_text"));
+    }
+}
diff --git a/src/openhuman/autocomplete/core/types.rs b/src/openhuman/autocomplete/core/types.rs
index c6f093c07..3c3aee961 100644
--- a/src/openhuman/autocomplete/core/types.rs
+++ b/src/openhuman/autocomplete/core/types.rs
@@ -92,6 +92,7 @@ pub struct AutocompleteSetStyleParams {
     pub style_examples: Option<Vec<String>>,
     pub disabled_apps: Option<Vec<String>>,
     pub accept_with_tab: Option<bool>,
+    pub overlay_ttl_ms: Option<u32>,
 }
 
 #[derive(Debug, Clone, Serialize, Deserialize)]
diff --git a/src/openhuman/config/schema/autocomplete.rs b/src/openhuman/config/schema/autocomplete.rs
index 40cee1662..d9b1a03ff 100644
--- a/src/openhuman/config/schema/autocomplete.rs
+++ b/src/openhuman/config/schema/autocomplete.rs
@@ -19,6 +19,8 @@ pub struct AutocompleteConfig {
     pub disabled_apps: Vec<String>,
     #[serde(default = "default_accept_with_tab")]
     pub accept_with_tab: bool,
+    #[serde(default = "default_overlay_ttl_ms")]
+    pub overlay_ttl_ms: u32,
 }
 
 fn default_enabled() -> bool {
@@ -41,6 +43,10 @@ fn default_accept_with_tab() -> bool {
     true
 }
 
+fn default_overlay_ttl_ms() -> u32 {
+    1100
+}
+
 impl Default for AutocompleteConfig {
     fn default() -> Self {
         Self {
@@ -52,6 +58,7 @@ impl Default for AutocompleteConfig {
             style_examples: Vec::new(),
             disabled_apps: vec![],
             accept_with_tab: default_accept_with_tab(),
+            overlay_ttl_ms: default_overlay_ttl_ms(),
         }
     }
 }
diff --git a/src/openhuman/overlay/process.rs b/src/openhuman/overlay/process.rs
index b91b32bd1..1422c1fc0 100644
--- a/src/openhuman/overlay/process.rs
+++ b/src/openhuman/overlay/process.rs
@@ -10,22 +10,40 @@ use std::process::{Command, Stdio};
 
 /// Attempt to find and spawn the overlay binary.
 ///
+/// `parent_core_rpc_url` must be the JSON-RPC URL of the **same** core process
+/// that spawned the overlay (e.g. `http://127.0.0.1:7788/rpc`) so the overlay
+/// UI can query autocomplete, screen intelligence, and voice state from the
+/// desktop sidecar instead of a separate in-process core instance.
+///
 /// This is best-effort: if the binary is not found or fails to launch, a
 /// warning is logged and the core continues normally.
-pub fn spawn_overlay() {
+pub fn spawn_overlay(parent_core_rpc_url: &str) {
     let Some(overlay_bin) = find_overlay_binary() else {
-        log::debug!("[overlay] openhuman-overlay binary not found — skipping overlay launch");
+        log::warn!(
+            "[overlay] openhuman-overlay binary not found — skipping overlay launch (set OPENHUMAN_OVERLAY_BIN or build overlay/src-tauri)"
+        );
         return;
     };
 
-    log::info!("[overlay] launching overlay: {}", overlay_bin.display());
+    log::info!(
+        "[overlay] launching overlay: {} (parent RPC {})",
+        overlay_bin.display(),
+        parent_core_rpc_url
+    );
 
-    match Command::new(&overlay_bin)
-        .stdin(Stdio::null())
+    let mut cmd = Command::new(&overlay_bin);
+    cmd.stdin(Stdio::null())
         .stdout(Stdio::null())
         .stderr(Stdio::null())
-        .spawn()
-    {
+        .env(
+            "OPENHUMAN_OVERLAY_PARENT_RPC_URL",
+            parent_core_rpc_url.trim(),
+        )
+        // The desktop core sets OPENHUMAN_CORE_PORT; the overlay must not inherit it or its
+        // optional embedded JSON-RPC server will try to bind the same port as the parent.
+        .env_remove("OPENHUMAN_CORE_PORT");
+
+    match cmd.spawn() {
         Ok(child) => {
             log::info!("[overlay] overlay process spawned (pid={})", child.id());
         }
diff --git a/src/openhuman/skills/registry_ops.rs b/src/openhuman/skills/registry_ops.rs
index d071bdbf6..599abf270 100644
--- a/src/openhuman/skills/registry_ops.rs
+++ b/src/openhuman/skills/registry_ops.rs
@@ -409,7 +409,7 @@ pub async fn skills_list_available(
 
 #[cfg(test)]
 mod tests {
-    use super::super::registry_cache::{cache_path, is_cache_fresh, write_cache};
+    use super::super::registry_cache::{is_cache_fresh, write_cache};
     use super::super::registry_types::{CachedRegistry, RegistrySkillCategories, SkillCategory};
     use super::*;
 
diff --git a/src/openhuman/subconscious/integration_test.rs b/src/openhuman/subconscious/integration_test.rs
index b349de4c0..e0508eb87 100644
--- a/src/openhuman/subconscious/integration_test.rs
+++ b/src/openhuman/subconscious/integration_test.rs
@@ -103,7 +103,7 @@ mod tests {
         )
         .await;
 
-        let notion_doc_id = ingest(
+        let _notion_doc_id = ingest(
             &memory,
             "skill-notion",
             "tick1-tracker",
diff --git a/src/openhuman/text_input/ops.rs b/src/openhuman/text_input/ops.rs
index 2ef416594..585f0e77f 100644
--- a/src/openhuman/text_input/ops.rs
+++ b/src/openhuman/text_input/ops.rs
@@ -114,7 +114,7 @@ pub async fn show_ghost(
         element_bounds.height,
     );
 
-    match accessibility::show_overlay(&element_bounds, &params.text, ttl_ms) {
+    match accessibility::show_overlay(&element_bounds, &params.text, ttl_ms, "") {
         Ok(()) => Ok(RpcOutcome::single_log(
             ShowGhostTextResult {
                 shown: true,
diff --git a/src/rpc/dispatch.rs b/src/rpc/dispatch.rs
index 600dc9435..91a431e10 100644
--- a/src/rpc/dispatch.rs
+++ b/src/rpc/dispatch.rs
@@ -21,9 +21,7 @@ pub async fn try_dispatch(
 
 #[cfg(test)]
 mod tests {
-    use futures_util::FutureExt;
     use serde_json::json;
-    use std::panic::AssertUnwindSafe;
 
     use super::try_dispatch;