chore: snapshot working tree - pty_exited notifications + in-flight inference WIP

feat(booterm): structured pty_exited WS notifications. Plan-validated, impl-validated, code-reviewed green (contracts build clean, contracts test 29/29, booterm + web typecheck clean).

wip: in-progress inference/provider refactor (agents.ts, provider.ts, new llama-providers.ts, removed llama-args-validator), plus arena, dispatcher, compaction, schema changes.

openspec: pty-exit-notifications complete; x-agent-flags planned (not yet implemented).

apps/control/remote/boocontrol-edit.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# BooControl forced-command wrapper (embedding / Linux).
+#
+# Bound to the BooControl SSH key via authorized_keys:
+#   command="/home/samkintop/llama-swap/boocontrol-edit.sh",restrict ssh-ed25519 AAAA... boocontrol@embedding
+#
+# The key can do NOTHING but the verbs below, all hardcoded to
+# /home/samkintop/llama-swap and /home/samkintop/models. The only client-supplied
+# value is the HF repo id, regex-validated. Place at the path above and chmod +x.
+
+set -euo pipefail
+
+CFG=/home/samkintop/llama-swap/config.yaml
+MODELS=/home/samkintop/models
+SERVICE=llama-swap   # systemctl --user unit name
+
+read -r verb arg <<<"${SSH_ORIGINAL_COMMAND:-}"
+
+case "$verb" in
+  read)
+    [ -f "$CFG" ] && cat "$CFG" || true
+    ;;
+  backup)
+    bak="$CFG.bak-$(date -u +%Y%m%dT%H%M%SZ)"
+    cp "$CFG" "$bak"
+    echo "$bak"
+    ;;
+  write)
+    cat > "$CFG"
+    ;;
+  restart)
+    systemctl --user restart "$SERVICE"
+    ;;
+  pull)
+    if [[ ! "$arg" =~ ^[A-Za-z0-9][A-Za-z0-9._-]*/[A-Za-z0-9][A-Za-z0-9._-]*$ ]]; then
+      echo "bad repo id: $arg" >&2; exit 1
+    fi
+    huggingface-cli download "$arg" --local-dir "$MODELS/${arg//\//__}"
+    ;;
+  *)
+    echo "denied: $verb" >&2; exit 1
+    ;;
+esac