Forward goose agent turns through the agent gateway, behind a flag

docs/buzz-help.md

@@ -511,7 +511,12 @@ available rather than silently discarding it.
   resends work already sent through the gateway without it. Don't say an agent
   uses the gateway's models unless its Settings shows Model gateway.
 - **Activity**, where the agent type provides it, shows sessions and their
-  transcripts in the agent's profile. A turn's **Thread** or **Channel** label
+  transcripts in the agent's profile. Once goose agents run through the agent
+  gateway, a goose turn woken in a conversation by a plugin, watch or timer
+  that ran without the gateway shows "Ran without the agent gateway" beside its
+  prompt only while the app keeps running; goose compacting the conversation
+  can remove the prompt and its note. A wake run outside a conversation shows
+  no note. A turn's **Thread** or **Channel** label
   opens that conversation. Choosing an agent in the activity under a message,
   or a Working now agent whose conversation is known, opens that
   conversation's transcript. Working indicators describe current work,

docs/configuration.md

@@ -150,7 +150,10 @@ configuration and none of the Buzz request context, and the turn is noted
 mention, and in the harness's own turn activity for other turns, which receive
 it as `delivery.gatewayFallback`. That choice is made before dispatch; a turn
 whose gateway access is revoked after dispatch fails visibly and is never
-replayed. Memberships in other communities and hosted agents are unchanged.
+replayed. Once goose runs through the gateway, a goose agent's wake anchored
+in a conversation shows that note beside its prompt in Activity only while the
+app that ran it keeps running; a reload, or goose compacting the prompt out of
+its history, drops it. A standalone run (`runOnce`) shows none. Memberships in other communities and hosted agents are unchanged.
 See `src/features/agents/gateway/` for the shared route, session and request
 context contract that harnesses consume.
 

src-tauri/build.rs

@@ -179,6 +179,7 @@ fn main() {
             "plugin_host_forward_admission",
             "plugin_host_forward_open",
             "plugin_host_forward_associate",
+            "plugin_host_forward_register_child",
             "plugin_host_forward_seal",
             "plugin_host_forward_close",
             "plugin_host_read_file",

src-tauri/capabilities/default.json

@@ -125,6 +125,7 @@
     "allow-plugin-host-forward-admission",
     "allow-plugin-host-forward-open",
     "allow-plugin-host-forward-associate",
+    "allow-plugin-host-forward-register-child",
     "allow-plugin-host-forward-seal",
     "allow-plugin-host-forward-close",
     "allow-plugin-host-read-file",

src-tauri/src/browser_permissions_tests.rs

@@ -166,6 +166,7 @@ fn native_command_permissions_isolate_webviews() {
         "plugin_host_forward_admission",
         "plugin_host_forward_open",
         "plugin_host_forward_associate",
+        "plugin_host_forward_register_child",
         "plugin_host_forward_seal",
         "plugin_host_forward_close",
         "plugin_host_read_file",