Commits on May 7, 2026 permissions: sidebar mode picker for live session attenuation Surfaces the Plan / Execute / Watch lattice as a per-session control in the Sessions panel. Each active row now shows: - A colored mode badge with hover-tip describing the mode. - A dropdown that only offers narrowing transitions (e.g. an Execute session can switch to Watch or Plan, never the other way), so the lattice rejection from TokenRegistry.attenuate is invisible to the user under normal use. If the registry does refuse a request — say, because the underlying token has already been narrowed by the watchdog — the toast surfaces the refusal explicitly. Implementation notes: - SessionSummary now exposes mode + tokenId, so the listing API has enough state for the picker without a second round trip. - New session.setMode message handler proxies to SessionRegistry.setMode, looking up the session origin so callers don't have to thread it through.…