feat(director): /setup recalls the guide over the air [spec 10]

[wine-fall]

Implements specs/spec10/10-tui.md (§3.2-C, §3.4) and specs/spec03/03-03-guide-harness.md (§7) — the mid-broadcast slice of the conversation-partner boundary (PR 2 of 2, after #140). Closes #97.

• /setup recalls the guide over the air. A command at every steer site (the /settings precedent): the Director's segment loop parks inside the app's setupRecall while whatever is on the air plays out — the record keeps spinning (boundary decision Q6), no new segment opens — and resumes when the conversation ends. Stub runs answer with the shell pointer. Single-flight; a /quit consumed by the guide's reader is handed back to the Director and honored at all three sites.
• Same conversation, explicit entry: no standing decline; a clean machine answers everything checks out — nothing to fix.
• Live application where possible: the voice provider swaps behind a delegate when the resolved voice changed (voiceChanged) — buffered look-ahead dropped first, the old provider closed after a grace so the clip on air keeps its file — the TUI identity line re-greets (refreshIdentity), and a repair the environment outranks says so honestly instead of pretending.
• The A failing voice endpoint never reopens the setup path — segments skip silently forever #97 reopen path: an auth-shaped synth failure (401/402/403) raises an app seam that turns the CONFIGURED endpoint back into a voice gap for the recall's probes, and names the way back once — type /setup to fix it — instead of skipping segments silently forever.

Verification

• pnpm test 864 green (new: steer parsing + parked-loop resume + stub pointer + auth hint once + non-auth silence + quit-inside-recall, failing-endpoint gap, zero-gap explicit feedback, setupComplete/voiceChanged units, refreshIdentity re-greet); tsc + oxlint clean.
• Real pty smoke (pyte 180×48, real engine + real haiku brain, stale-yt-dlp sandbox): boot offer declined → broadcast airs → typed /setup re-probes and re-opens the offer card → the loop stays parked (no new segments while the card waits) → decline resumes the broadcast → /quit acks. PASS, twice (before and after the review fixes).
• Peer review (codex gpt-5.6-sol, xhigh): 4 findings, 4 applied (failing-endpoint gap reachability; look-ahead invalidation across the voice swap; quit honored inside the recall; TUI identity refresh), each locked with a regression test.

AI coding brief

• Original request: The grilling session pinned nine boundary decisions; Q5 chose to build the mid-broadcast recall in this pass and route it so the music keeps playing (Q6), closing A failing voice endpoint never reopens the setup path — segments skip silently forever #97's "no path back to the guide short of the shell".
• Manual interventions: None in this slice; all nine decisions were pre-pinned by the user in the grilling.
• Retro: codex's P1 (a configured-but-failing endpoint never reaches the conversation) was the exact scenario A failing voice endpoint never reopens the setup path — segments skip silently forever #97 describes and the build missed it by testing only the missing-endpoint shape — reading the issue's failure mode as a test case up front would have caught it pre-review.

🤖 Generated with Claude Code