Synced from monorepo

Changes:
- Classify clipboard delivery confidence
- Add durable session update append
- Scope the xAI session bearer to first-party memory embedding endpoints
- Persist subagent outputs to disk and bound long-lived agent state
- Add MiniSweAgent:bash for mini-swe-agent parity
- Revert taking local sessions off the persistent shell
- Contextual tip recommending grok wrap on SSH sessions
- Voice STT bearer from model BYOK env_key/api_key
- Define exact website policies for sandbox
- Gate unsafe shell environments
- Shared pin hoist; single require_sha gate for marketplace plugins
- Server-signed is-managed claim (closes sidecar-removal downgrade)
- Optional require_sha pin for remote plugin installs
- Show session title and last exchange in the exit resume hint
- Gate shell output redirects
- Warn when fail_closed is present but not a boolean
- Add canonical text editing core (ratatui-textarea)
- Keep execution state out of goal scratch
- Add acknowledged persistence primitives
- Inherit child network restrictions in sandbox
- Fail closed when hook matchers fail to recompile
- Add MCP setup preferences for plugin MCPs
- Gate sourced shell scripts
- Gate file-typed project hooks
- grok wrap: restore terminal modes on child death
- Harden owner-only permissions on auth and MCP credentials
- Create crash dump files with owner-only permissions
- Write the agent_id cache owner-only (0600)
- SessionMetrics mode skips Mixpanel profile sync
- Dashboard: slim live-tail peek
- Yank full queued prompt text, not (+N lines)
- Defeat clock-rollback on the signed managed-config cache
- Stop early session/cancel from overtaking the prompt and wedging the turn slot
- Self-heal a diverged agent entrypoint on startup
- Add matched inference expectations in test-support
- Add AuthSingleFlight cancel/successor gap tests
- Remove consumer from external OTEL allowlist and pin scrub coverage
- Enable /copy in minimal mode
- Surface capacity and API-key detail on 429 errors
- Single-flight interactive auth
- Fix PageUp/PageDown skipping lines behind sticky prompt header

crates/codegen/xai-grok-pager/src/views/welcome/mod.rs

@@ -1673,8 +1673,9 @@ fn render_welcome_done(
 
     // Heights that don't depend on the menu — computed first so the menu
     // builder can probe the layout to decide whether to add a Changelog row.
-    // Startup-warning hint height (multi-line aware).
-    let hint_height = p.startup_warnings.first().map_or(0u16, |w| {
+    // Startup-warning hint height (multi-line aware). Must pick the same
+    // entry `render_startup_warnings` draws — see `startup::banner_warning`.
+    let hint_height = crate::startup::banner_warning(p.startup_warnings).map_or(0u16, |w| {
         let msg_lines = w.message.lines().count() as u16;
         let action_line = if w.action.is_some() { 1 } else { 0 };
         msg_lines + action_line + 1 // +1 for buffer spacing
@@ -2424,22 +2425,23 @@ fn render_auth_input_box(area: Rect, buf: &mut Buffer, theme: &Theme, input: &st
     }
 }
 
-/// Render the first startup warning centered in the given area.
+/// Render one startup warning centered in the given area.
 ///
 /// `startup_warnings` can hold more than one entry (the WezTerm
 /// kitty-keyboard banner is prepended ahead of `summarize_warnings()`
-/// output — see `diagnostics::assemble_startup_warnings`), but only the
-/// first is rendered; all of them point at `/terminal-setup`, which lists
-/// every issue. One message line, one optional action line, plus a buffer
-/// row for spacing. Severity controls color (yellow for `Warning`, dim
-/// for `Info`).
+/// output — see `diagnostics::assemble_startup_warnings`), but only one is
+/// rendered — the severity-aware pick from `startup::banner_warning`, so a
+/// runtime-pushed Warning displaces an earlier Info entry; all of them point
+/// at `/terminal-setup`, which lists every issue. One message line, one
+/// optional action line, plus a buffer row for spacing. Severity controls
+/// color (yellow for `Warning`, dim for `Info`).
 fn render_startup_warnings(
     area: Rect,
     buf: &mut Buffer,
     theme: &Theme,
     warnings: &[StartupWarning],
 ) -> Option<Rect> {
-    let w = warnings.first()?;
+    let w = crate::startup::banner_warning(warnings)?;
 
     // Skip the import-claude startup warning entirely — the import row in the
     // menu now carries the call-to-action with the same visual weight as