@paigy/harness 0.2.12 → 0.3.1

package/dist/main.js

@@ -4577,11 +4577,13 @@ var require_lib = __commonJS({
 // src/main.ts
 import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
+import { readFileSync as readFileSync4 } from "fs";
 import { fileURLToPath } from "url";
 import { dirname as dirname4, join as join5 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
+import { randomUUID } from "crypto";
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -8625,7 +8627,8 @@ var coerce = {
 var NEVER = INVALID;
 
 // ../../packages/sdk/dist/index.js
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, statSync, writeFileSync } from "fs";
+import { randomUUID as randomUUID2 } from "crypto";
 import { homedir } from "os";
 import { join } from "path";
 var require2 = __sdkCreateRequire(import.meta.url);
@@ -10891,16 +10894,25 @@ async function proxy() {
   if (!PROXY_ENV.some((k) => process.env[k])) return void 0;
   return agent ??= new (await import("./undici-GCFUZISI.js")).EnvHttpProxyAgent();
 }
+var INSTANCE_ID = randomUUID();
+var SESSION_ID = process.env.PAIGY_SESSION_ID ?? process.env.CLAUDE_CODE_SESSION_ID ?? INSTANCE_ID;
 async function reach(url, init) {
   try {
-    return await fetch(url, { ...init, dispatcher: await proxy() });
+    const headers = {
+      ...init?.headers,
+      "x-paigy-instance": INSTANCE_ID,
+      "x-paigy-session": SESSION_ID
+    };
+    return await fetch(url, { ...init, headers, dispatcher: await proxy() });
   } catch (e) {
     throw new Error(`${NETWORK_MSG} (${e?.message ?? String(e)})`);
   }
 }
 var ContextSchema = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
-  description: external_exports.array(external_exports.string().min(1)).min(1).describe("Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand.")
+  description: external_exports.array(external_exports.string().min(1)).describe(
+    "Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand. MAY BE EMPTY: a claim whose whole content is its heading \u2014 a single sentence \u2014 has no body, and saying so beats repeating the heading underneath itself. That repeat is what `min(1)` used to force, at 2x the storage, with every reader subtracting it back out at render time."
+  )
 });
 var ParticipantSchema = external_exports.object({
   kind: external_exports.enum(["human", "agent"]),
@@ -11047,6 +11059,14 @@ var NotifyRequestSchema = external_exports.object({
   waiting: external_exports.enum(["none", "soft", "hard"]).optional().describe(
     "With `ask`: what happens to your work while you wait. 'none' = you're just informing the user. 'soft' = you'd like an answer but can keep working. 'hard' = you are stopped until they answer (reaches them urgently and escalates to a real phone call if unanswered). Replaces urgencyHint + blocking \u2014 send this one field."
   ),
+  /** Δ9b (#895): HOLD this claim so the sender can correct the plan before anyone is
+   *  interrupted. Opt-in per claim, because the fail-open is a minute-granularity cron —
+   *  holding by default would charge every quiet claim that minute before any agent could
+   *  correct anything. Ignored for `waiting: 'hard'`: a blocking ask rings on what we have,
+   *  and the enrichment can still land mid-call (#781 re-plans the unspoken tail). */
+  confirm: external_exports.boolean().optional().describe(
+    "Hold this one so you can correct the plan before the user is interrupted. The response comes back with `held: true` and the plan; POST the confirm route to release it (with options/visuals/urgency corrections, or nothing at all). If you never do, it is announced anyway a couple of minutes later. Ignored when waiting is 'hard'."
+  ),
   /** #575: a RELAY of the user's explicitly stated preference, never the agent's
    *  choice. Outranks waiting in both directions: 'call' rings even for a
    *  waiting:'none' "call me when it's done"; 'message' never rings even for
@@ -11080,7 +11100,7 @@ var NotifyRequestSchema = external_exports.object({
   if (r.ask !== void 0) {
     for (const f of ["context", "select", "points"]) {
       if (r[f] !== void 0)
-        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives it (use \`needs\` for multi-part asks)` });
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives the answer shape from your prose. Drop ${f} and say it in \`ask\` instead ("should I\u2026" for approve/deny, "which of these\u2026" for a pick), passing \`options\` when you're offering concrete alternatives.` });
     }
     return;
   }
@@ -11105,35 +11125,45 @@ function normalizeWaiting(req) {
     blocking: req.blocking || waiting === "hard"
   };
 }
-var DERIVE_CHUNKS_MAX = 8;
-var DERIVE_CHUNK_MAX = 300;
-function chunkAsk(text, max = DERIVE_CHUNK_MAX, cap = DERIVE_CHUNKS_MAX) {
+function unitsOf(text) {
+  const spans = [];
+  const re = /\n\s*\n+/g;
+  let cursor = 0;
+  const push = (from, to) => {
+    const slice = text.slice(from, to);
+    const lead = slice.length - slice.trimStart().length;
+    const tail = slice.length - slice.trimEnd().length;
+    if (from + lead < to - tail) spans.push({ start: from + lead, end: to - tail });
+  };
+  for (let m = re.exec(text); m; m = re.exec(text)) {
+    push(cursor, m.index);
+    cursor = m.index + m[0].length;
+  }
+  push(cursor, text.length);
+  return spans;
+}
+function headline(text) {
+  const line = text.split("\n").map((l) => l.trim()).filter((l) => l && !/^`{3,}/.test(l)).map((l) => l.replace(/^(?:#{1,6}|[-*>]|\d{1,3}\.)\s+/, "")).find(Boolean) ?? "";
+  return (/^[^.!?\n]+[.!?]?/.exec(line)?.[0] ?? line).trim();
+}
+function bodyAfterHeadline(text) {
   const body = text.trim();
-  if (!body) return [];
-  const sentences = body.match(/[^.!?]+[.!?]*\s*/g) ?? [body];
-  const chunks = [];
-  for (const raw of sentences) {
-    const s = raw.trim();
-    if (!s) continue;
-    const last = chunks[chunks.length - 1];
-    if (last !== void 0 && `${last} ${s}`.length <= max) chunks[chunks.length - 1] = `${last} ${s}`;
-    else chunks.push(s);
-  }
-  if (chunks.length <= cap) return chunks;
-  return [...chunks.slice(0, cap - 1), chunks.slice(cap - 1).join(" ")];
+  const title = headline(body);
+  const rest = body.slice(title.length).replace(/^[\s.!?—–-]+/, "").trim();
+  if (!rest) return { title, description: [] };
+  const chunks = unitsOf(rest).map((u) => rest.slice(u.start, u.end)).filter(Boolean);
+  return { title, description: chunks.length ? chunks : [rest] };
 }
 function deriveAsk(req) {
   req = normalizeWaiting(req);
   if (!req.ask) return req;
   const text = req.ask.trim();
-  const firstSentence = (/^[^.!?\n]+[.!?]?/.exec(text)?.[0] ?? text).trim();
-  const title = firstSentence.length > 90 ? `${firstSentence.slice(0, 87).trimEnd()}\u2026` : firstSentence;
   const hinted = req.urgencyHint === "now" ? "call" : req.urgencyHint === "soon" ? "banner" : req.urgencyHint === "whenever" ? "inbox" : req.urgency;
   const urgency = req.channel === "call" ? "call" : req.channel === "message" && hinted === "call" ? "banner" : hinted;
   const { ask: _ask, needs, urgencyHint: _hint, channel: _channel, ...rest } = req;
   return {
     ...rest,
-    context: { title, description: chunkAsk(text) },
+    context: bodyAfterHeadline(text),
     // Options riding alongside the ask (#575: pixels can't be prose) floor to a
     // single pick — the model broker may upgrade to many/rank from the wording.
     select: req.options?.length ? "one" : "text",
@@ -11323,6 +11353,40 @@ var NotifyResponseSchema = external_exports.object({
   answer: UserAnswerSchema.optional(),
   answeredAt: external_exports.string().datetime().optional()
 });
+var NotifyPlanUnitSchema = external_exports.object({
+  notificationId: external_exports.string(),
+  /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
+  title: external_exports.string(),
+  /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
+  level: NotifyLevelSchema,
+  /** Answered from something the user already decided: nobody is interrupted, and a trail card
+   *  says so. The agent should not wait on this one. */
+  settled: external_exports.literal(true).optional(),
+  /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
+   *  agent — nothing here changed the ask, and ignoring it costs nothing. */
+  needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
+  /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
+   *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
+   *  broker that DECIDES that destroys the only fact separating a statement from a real ask
+   *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
+   *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
+  proposal: external_exports.object({
+    select: SelectShapeSchema,
+    options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
+  }).optional(),
+  /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
+   *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
+   *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
+   *  shape — the read RAISES (a decision always asks) and never silences a question the
+   *  agent declared (#731, #923). */
+  wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
+});
+var NotifyPlanSchema = external_exports.object({
+  units: external_exports.array(NotifyPlanUnitSchema),
+  /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
+   *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
+  speaks: external_exports.string().optional()
+});
 var UserResponseSchema = external_exports.object({
   requestId: external_exports.string(),
   answer: UserAnswerSchema,
@@ -11377,6 +11441,20 @@ var InboxItemSchema = external_exports.object({
   /** The conversation thread + connection this item lives on. Present on the replied
    *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
   parentId: external_exports.string().optional(),
+  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
+   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
+   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
+   *  accumulates every message an agent ever sent, so grouping by it renders a day of
+   *  unrelated updates as a single "12-part request". Absent on rows written before the
+   *  `asks` table, and on anything that never went through `notify` — both fall back to the
+   *  thread, which is what the client did for all rows until now. */
+  askId: external_exports.string().optional(),
+  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
+   *  shares one `created_at` to the microsecond, so without it the author's order is
+   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
+   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
+   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
+  seq: external_exports.number().int().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema,
   context: ContextSchema,
@@ -11387,6 +11465,16 @@ var InboxItemSchema = external_exports.object({
    *  ring/enqueue time. Replaces the condensed line + index-aligned phrased points, which
    *  between them could not express a call as a sequence. `question: null` is a real turn —
    *  a status update stays a statement instead of being shaped into a yes/no. */
+  /** Does this claim want an ANSWER, or is it telling you something? Written per row from
+   *  `requestAsks` — the agent's own declaration, not a guess. `false` is what earns a card
+   *  its acknowledge affordance: without it a status update offers a text box and a dismiss,
+   *  and neither of those is "got it" (owner, 2026-08-10). */
+  asks: external_exports.boolean().optional(),
+  /** When a live process last pulsed for this row's agent — the liveness input for
+   *  "working requires a pulse" (#928): the list said "Working…" from agent_state alone
+   *  while the party called the same dead claim stalled. Absent = no token/no data,
+   *  which must never CLAIM stalled. */
+  lastSeenAt: external_exports.string().optional(),
   agenda: external_exports.array(AgendaTurnSchema).optional(),
   /** On a replied detail (#397): the next steps the user attached to the answer
    *  ("call back after lunch") — shown so they can see the commitment was captured. */
@@ -11411,6 +11499,23 @@ var InboxItemSchema = external_exports.object({
    *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
   error: external_exports.string().optional(),
   clarifies: external_exports.string().optional(),
+  /** The ring ladder ran out while this was still pending — we tried to reach you and
+   *  STOPPED trying (`arbitration/arbitrate.ts` `nextRing` → `stop`). Distinct from an
+   *  agent with nothing to say, which the roster drew identically until now: "nothing to
+   *  say" and "gave up saying it" are opposite situations wearing the same face
+   *  (navigation-design.md, gap 1). False for anything that never rang. */
+  gaveUp: external_exports.boolean().default(false),
+  /** Why this arrived the way it did, read back off the delivery receipt (`notify/why.ts`).
+   *  Absent for anything never delivered through a push, and for older rows written before
+   *  the reason was recorded. Deliberately a debug affordance, shown small (owner,
+   *  2026-08-07) — its real job is to give "this didn't need a call" something to be
+   *  feedback ABOUT. */
+  why: external_exports.object({
+    asked: NotifyLevelSchema,
+    got: NotifyLevelSchema,
+    because: external_exports.enum(["unresponsive", "dismissed", "not_permitted", "silent", "coalesced", "agent_capped", "unplanned", "learned_raise"]).optional(),
+    line: external_exports.string()
+  }).optional(),
   select: external_exports.enum(["one", "many", "rank", "confirm", "text"]).default("one"),
   confirmStyle: external_exports.enum(["yesno", "approve"]).default("yesno").describe(
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
@@ -11521,6 +11626,15 @@ var HistoryItemSchema = external_exports.object({
   /** When you answered the agent's notification (agent→user only). */
   humanAckedAt: external_exports.string().nullable()
 });
+var ACTIVITY_LINES = 2;
+var ACTIVITY_LINE_MAX = 80;
+var AgentActivitySchema = external_exports.object({
+  /** Oldest first, so the newest line is last — the one that replaces in place. */
+  lines: external_exports.array(external_exports.string().max(ACTIVITY_LINE_MAX)).max(ACTIVITY_LINES),
+  /** When the harness observed this tail. Its own timestamp, not the heartbeat's: a beat
+   *  that carries an UNCHANGED tail must not make a stalled agent look like it just moved. */
+  at: external_exports.string().datetime()
+});
 var ConnectionSummarySchema = external_exports.object({
   /** The connection = the agent's token id (used to address a request). */
   id: external_exports.string(),
@@ -11532,6 +11646,14 @@ var ConnectionSummarySchema = external_exports.object({
   provider: external_exports.string().nullable(),
   /** The pairing's assigned voice (#462); null = the default voice. */
   voice: VoiceKeySchema.nullable(),
+  /** The LOUDEST this agent may ever reach you — a ceiling on `NOTIFY_LADDER`, set by the
+   *  user on the agent's own page. null = no ceiling (today's behaviour for every
+   *  connection). Android binds importance to a relationship rather than to each message,
+   *  and that is the thing our roster could not say: "Marlow may always call me; Otto
+   *  never may" (navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
+   *  every surface at once and outranks even `sessionMode: all_calls` — a mode the user
+   *  set once must not overrule a rule they set about one agent. */
+  reach: NotifyLevelSchema.nullable().optional(),
   createdAt: external_exports.string().datetime(),
   /** Most recent notification on this connection, either direction. Null = no contact yet.
    *  Drives the agents-page recency grouping (Today / This week / …). */
@@ -11546,10 +11668,49 @@ var ConnectionSummarySchema = external_exports.object({
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional()
   }).optional(),
+  /** The tail of this agent's working log, when a harness is driving it — the agent page's
+   *  live strip. Absent for anything the desktop harness isn't running (a hatched identity
+   *  used straight from a terminal emits no work events; the page says so rather than
+   *  drawing an empty box). */
+  activity: AgentActivitySchema.optional(),
   /** True = a provider-managed agent running in the provider's cloud (e.g. Anthropic CMA);
    *  false = a local MCP connection running on the user's computer (Claude Code/Codex/…). */
   managed: external_exports.boolean()
 });
+var MoveRingSchema = external_exports.enum(["home", "travels", "retired", "quarantined"]);
+var MoveSchema = external_exports.object({
+  id: external_exports.string(),
+  /** The reusable question, as distill normalized it. */
+  question: external_exports.string(),
+  /** The operative ruling. Editable by the user (PATCH) — which resets the ledger. */
+  answer: external_exports.string(),
+  /** The user's stated reason, when they gave one. Null = inherently narrow: the judge is
+   *  told so, and the ruling only derives essentially the same question in the same scope. */
+  rationale: external_exports.string().nullable(),
+  /** Where the ruling lives: a repo/workspace, or 'global'. */
+  scope: external_exports.string(),
+  ring: MoveRingSchema,
+  /** True = the user pinned it with `always` (travel granted by hand, not by evidence). */
+  pinned: external_exports.boolean(),
+  /** True = a pin the user placed was BROKEN by later counter-evidence. Surfaced so the
+   *  break is visible instead of a pin silently disappearing. */
+  pinBroken: external_exports.boolean(),
+  /** When the ruling was distilled. */
+  learnedAt: external_exports.string(),
+  /** Last time it answered an ask. Null = never fired. */
+  lastUsedAt: external_exports.string().nullable(),
+  /** How many asks it has answered. Instrumentation — deliberately NOT an input to the
+   *  evidence curve: firing says the question keeps arising, not that the ruling is right. */
+  usedCount: external_exports.number(),
+  /** Ledger: outcomes that said it held up. Saturating — the tenth is worth almost nothing. */
+  confirms: external_exports.number(),
+  /** Ledger: contradictions, in signal units (a full override = 1, weaker signals less).
+   *  Linear and priced above the entire confirmation budget, so any full counter wins. */
+  counters: external_exports.number(),
+  /** The agent that asked the question this move came from, when known. Null for a move
+   *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
+  learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
+});
 var CreateRequestSchema = external_exports.object({
   /** The connection (token id) to send to, from GET /api/tokens. */
   tokenId: external_exports.string(),
@@ -11756,6 +11917,17 @@ var DeviceTokenSchema = external_exports.object({
    *  a default silly name). */
   name: external_exports.string(),
   device: external_exports.string().nullable(),
+  /** The pairing's assigned voice, cached so the desktop can seed the SAME face the phone
+   *  draws — voice is the third ingredient of a hatchling's build (party/traits.ts). */
+  voice: external_exports.string().nullable().optional(),
+  /** The token's server-side id — the face's COLOUR anchor, and the only seed ingredient
+   *  that survives a rename. Cached by the host's identity beat. */
+  token_id: external_exports.string().nullable().optional(),
+  /** WHERE this identity works — the folder a wake should land it in. Written by the host
+   *  at spawn and by `paigy-harness handoff` from a live terminal. Without it every wake
+   *  landed in the FIRST granted workspace and the agent rediscovered its own repo from
+   *  the thread each time (host.ts, live catch 2026-08-06 — prompt-papered until now). */
+  workspace: external_exports.string().nullable().optional(),
   phone_reveal: PairingRevealSchema.nullable().optional(),
   // present once the phone reveals
   uik_pub: external_exports.string().nullable().optional()
@@ -11782,6 +11954,8 @@ var NotificationFeedbackKindSchema = external_exports.enum([
   // "There should be a picture or design here."
   "should_have_called",
   // "Don't put this in a banner — ring me for something like this."
+  "should_have_messaged",
+  // the inverse: "that didn't deserve a ring — a message would do."
   "other"
   // anything else — the note carries it.
 ]);
@@ -12078,7 +12252,11 @@ function open(envelope, myKeyId, mySecretKeyB64) {
   if (!eqCt(sealedCanon, expected)) throw new Error("header mismatch (tampered metadata)");
   return { header: envelope.hdr, body };
 }
-var AGENT_NAME = process.env.PAIGY_AGENT ?? "mcp-agent";
+function sessionSlot(sessionId) {
+  const id = sessionId ?? process.env.PAIGY_SESSION_ID ?? process.env.CLAUDE_CODE_SESSION_ID ?? randomUUID2();
+  return `session:${id.slice(0, 8)}`;
+}
+var AGENT_NAME = process.env.PAIGY_AGENT || sessionSlot();
 var TOKEN_PATH = join(homedir(), ".paigy", "token.json");
 var KEY_PATH = join(homedir(), ".paigy", "key.json");
 function readTokenFile() {
@@ -12093,10 +12271,45 @@ function readTokenFile() {
     return {};
   }
 }
-function saveToken(token, agent2 = AGENT_NAME) {
-  const slots = { ...readTokenFile(), [agent2]: token };
+function withTokenLock(mutate) {
+  const lock = TOKEN_PATH + ".lock";
+  const spin = new Int32Array(new SharedArrayBuffer(4));
   mkdirSync(join(homedir(), ".paigy"), { recursive: true });
-  writeFileSync(TOKEN_PATH, JSON.stringify(slots, null, 2) + "\n", { mode: 384 });
+  for (const deadline = Date.now() + 5e3; Date.now() < deadline; ) {
+    try {
+      closeSync(openSync(lock, "wx"));
+      break;
+    } catch {
+      const held = statSync(lock, { throwIfNoEntry: false })?.mtimeMs ?? Date.now();
+      if (Date.now() - held > 5e3) rmSync(lock, { force: true });
+      else Atomics.wait(spin, 0, 0, 25);
+    }
+  }
+  try {
+    return mutate();
+  } finally {
+    rmSync(lock, { force: true });
+  }
+}
+function saveToken(token, agent2 = AGENT_NAME) {
+  withTokenLock(() => {
+    const slots = { ...readTokenFile(), [agent2]: token };
+    writeFileSync(TOKEN_PATH, JSON.stringify(slots, null, 2) + "\n", { mode: 384 });
+  });
+}
+function updateSlot(agent2, patch) {
+  return withTokenLock(() => {
+    const slots = readTokenFile();
+    const existing = slots[agent2];
+    if (!existing) return false;
+    slots[agent2] = { ...existing, ...patch };
+    writeFileSync(TOKEN_PATH, JSON.stringify(slots, null, 2) + "\n", { mode: 384 });
+    return true;
+  });
+}
+function slotIdentity(agent2) {
+  const t = readTokenFile()[agent2];
+  return { name: t?.name ?? null, voice: t?.voice ?? null, tokenId: t?.token_id ?? null, workspace: t?.workspace ?? null };
 }
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function readToken(agent2 = AGENT_NAME) {
@@ -12282,10 +12495,14 @@ async function claimSessions(opts = {}) {
   return (await res.json()).sessions;
 }
 async function heartbeat(runtime, opts = {}) {
+  const body = {
+    ...runtime !== void 0 ? { runtime } : {},
+    ...opts.activity !== void 0 ? { activity: opts.activity } : {}
+  };
   const res = ensureAuthed(await reach(`${BACKEND_URL}/api/presence`, {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token)}` },
-    ...runtime !== void 0 ? { body: JSON.stringify({ runtime }) } : {}
+    ...Object.keys(body).length > 0 ? { body: JSON.stringify(body) } : {}
   }));
   if (!res.ok) throw new Error(`heartbeat failed: ${res.status}`);
 }
@@ -12301,7 +12518,7 @@ async function setTaskState(notificationId, state, opts = {}) {
 
 // src/main.ts
 var import_qrcode = __toESM(require_lib(), 1);
-import { hostname } from "os";
+import { homedir as homedir6, hostname } from "os";
 
 // src/harness/catalog.ts
 import { spawnSync } from "child_process";
@@ -12328,6 +12545,14 @@ var CATALOG = [
     loginHint: "Run `codex login` to authenticate.",
     installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
     installAdapter: "npm install -g @agentclientprotocol/codex-acp"
+  },
+  {
+    name: "agy",
+    label: "Antigravity",
+    cli: "agy",
+    authProbe: ["agy", "help"],
+    loginHint: "Install and set up Antigravity (`agy`).",
+    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
   }
 ];
 function probeDirs(home = homedir2()) {
@@ -12419,295 +12644,24 @@ function removeWorkspace(dir, deps) {
   writeFileSync2(deps.file, JSON.stringify(all, null, 2));
   return all;
 }
-
-// src/harness/session.ts
-import { spawn } from "child_process";
-import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir4 } from "os";
-import { resolve as resolve2, delimiter as delimiter2 } from "path";
-
-// src/harness/acp.ts
-var none = { events: [], writes: [] };
-function optionFor(options, decision) {
-  const want = decision.allow ? "allow_once" : "reject_once";
-  return options.find((o) => o.kind === want)?.optionId ?? null;
-}
-function createAcpDriver(opts) {
-  return new AcpDriver(opts.cwd, opts.mode, opts.mcp ?? []);
+function allowed(cwd, deps) {
+  const target = resolve(cwd.replace(/^~(?=$|\/)/, homedir3()));
+  return listWorkspaces(deps).some((w) => target === w || target.startsWith(`${w}/`));
 }
-var AcpDriver = class {
-  constructor(cwd, mode, mcp = []) {
-    this.cwd = cwd;
-    this.mode = mode;
-    this.mcp = mcp;
-  }
-  cwd;
-  mode;
-  mcp;
-  nextId = 1;
-  initId;
-  sessionNewId;
-  promptId;
-  sessionId;
-  queued = [];
-  /** Options of each unanswered permission request, keyed by its JSON-RPC id. */
-  pending = /* @__PURE__ */ new Map();
-  /** The turn being streamed: text accumulates, tools append, both flush on stopReason. */
-  text = "";
-  tools = [];
-  /** The opening frame. Everything after is driven by responses in `handleLine`. */
-  open() {
-    this.initId = this.nextId++;
-    return [
-      frame({
-        id: this.initId,
-        method: "initialize",
-        params: {
-          protocolVersion: 2,
-          // We are not an editor: no file services offered, the agent uses its own.
-          clientCapabilities: { fs: { readTextFile: false, writeTextFile: false } },
-          clientInfo: { name: "paigy-desktop", version: "0.0.0" }
-        }
-      })
-    ];
-  }
-  /** Queue a prompt; it goes out when the session exists and no turn is running. */
-  send(text) {
-    this.queued.push(text);
-    return this.flush();
-  }
-  /** Answer a PermissionEvent (ask mode). The id is the request's JSON-RPC id as a string. */
-  respond(id, decision) {
-    const request = this.pending.get(id);
-    if (!request) return [];
-    this.pending.delete(id);
-    const optionId = optionFor(request.options, decision);
-    return [
-      optionId ? frame({ id: request.id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id: request.id, result: { outcome: { outcome: "cancelled" } } })
-    ];
-  }
-  /** Cancel anything still blocked — called on stop so the process can exit cleanly. */
-  close() {
-    const writes = [...this.pending.values()].map(
-      (r) => frame({ id: r.id, result: { outcome: { outcome: "cancelled" } } })
-    );
-    this.pending.clear();
-    return writes;
-  }
-  handleLine(line) {
-    const trimmed = line.trim();
-    if (!trimmed) return none;
-    let msg;
-    try {
-      msg = JSON.parse(trimmed);
-    } catch {
-      return none;
-    }
-    if (msg.method !== void 0) {
-      return msg.id !== void 0 ? this.handleRequest(msg) : this.handleNotification(msg);
-    }
-    if (msg.id !== void 0) return this.handleResponse(msg);
-    return none;
-  }
-  // ── responses to our requests ──
-  handleResponse(msg) {
-    if (msg.id === this.initId) {
-      this.initId = void 0;
-      if (msg.error) {
-        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}` }], writes: [] };
-      }
-      this.sessionNewId = this.nextId++;
-      return {
-        events: [],
-        writes: [frame({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: this.mcp } })]
-      };
-    }
-    if (msg.id === this.sessionNewId) {
-      this.sessionNewId = void 0;
-      const sessionId = msg.result?.sessionId;
-      if (!sessionId) {
-        return {
-          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
-          writes: []
-        };
-      }
-      this.sessionId = sessionId;
-      const value = this.mode === "bypass" ? "bypassPermissions" : "default";
-      const writes = [
-        frame({
-          id: this.nextId++,
-          method: "session/set_config_option",
-          params: { sessionId, configId: "mode", value }
-        }),
-        frame({ id: this.nextId++, method: "session/set_mode", params: { sessionId, modeId: value } })
-      ];
-      writes.push(...this.flush());
-      return { events: [], writes };
-    }
-    if (msg.id === this.promptId) {
-      this.promptId = void 0;
-      const events = [];
-      if (this.text.trim() || this.tools.length) {
-        events.push({
-          kind: "turn",
-          role: "agent",
-          text: this.text.trim(),
-          ...this.tools.length ? { tools: [...this.tools] } : {}
-        });
-      }
-      const result = this.text.trim();
-      const failed = msg.error !== void 0 || msg.result?.stopReason === "refusal";
-      this.text = "";
-      this.tools = [];
-      const writes = this.flush();
-      if (!writes.length) {
-        events.push({
-          kind: "idle",
-          ...result ? { result } : {},
-          ...failed ? { failed: true } : {}
-        });
-      }
-      return { events, writes };
-    }
-    return none;
-  }
-  // ── the agent talking to us ──
-  handleNotification(msg) {
-    if (msg.method !== "session/update") return none;
-    const update = msg.params?.update;
-    switch (update?.sessionUpdate) {
-      case "agent_message_chunk":
-        this.text += update.content?.text ?? "";
-        return none;
-      case "tool_call": {
-        const title = update.title?.trim() || update.kind || "tool";
-        this.tools.push(title);
-        return none;
-      }
-      default:
-        return none;
-    }
-  }
-  handleRequest(msg) {
-    if (msg.method !== "session/request_permission") {
-      return {
-        events: [],
-        writes: [frame({ id: msg.id, error: { code: -32601, message: `Method not found: ${msg.method}` } })]
-      };
-    }
-    const id = msg.id;
-    const options = msg.params?.options ?? [];
-    const title = msg.params?.toolCall?.title?.trim() || "a tool call";
-    const tool = msg.params?.toolCall?.kind ?? "tool";
-    if (this.mode === "bypass") {
-      const optionId = optionFor(options, { allow: true }) ?? optionFor(options, { allow: false });
-      return {
-        // The decision still goes through Paigy — as history, not a question. Bypass
-        // means "don't stall the agent", never "don't tell the user".
-        events: [{ kind: "turn", role: "agent", text: `auto-approved: ${title}`, tools: [tool] }],
-        writes: [
-          optionId ? frame({ id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id, result: { outcome: { outcome: "cancelled" } } })
-        ]
-      };
-    }
-    this.pending.set(String(id), { id, options });
-    return {
-      events: [{ kind: "permission", id: String(id), tool, summary: title }],
-      writes: []
-    };
-  }
-  /** Send the queued prompts as one turn, if the agent can take one right now. */
-  flush() {
-    if (!this.sessionId || this.promptId !== void 0 || !this.queued.length) return [];
-    const blocks = this.queued.map((text) => ({ type: "text", text }));
-    this.queued = [];
-    this.promptId = this.nextId++;
-    return [
-      frame({
-        id: this.promptId,
-        method: "session/prompt",
-        params: { sessionId: this.sessionId, prompt: blocks }
-      })
-    ];
+function resolveWakeDir(pinned, deps) {
+  if (pinned && allowed(pinned, deps)) {
+    const dir = resolve(pinned.replace(/^~(?=$|\/)/, homedir3()));
+    if ((deps.exists ?? existsSync3)(dir)) return dir;
   }
-};
-var frame = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
-
-// src/harness/session.ts
-var ADAPTER_BIN = {
-  claude: "claude-agent-acp",
-  codex: "codex-acp"
-};
-function splitLines(buffer, chunk) {
-  const combined = buffer + chunk;
-  const parts = combined.split("\n");
-  const rest = parts.pop() ?? "";
-  return { lines: parts.filter((l) => l.trim()), rest };
-}
-function startSession(opts) {
-  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir4()));
-  if (!existsSync4(cwd)) {
-    queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
-  }
-  const child = (opts.spawnFn ?? spawn)(opts.bin ?? ADAPTER_BIN[opts.harness], [], {
-    cwd,
-    // The adapter shells out to its vendor CLI (`claude`, `codex`), and a GUI- or
-    // launchd-launched process's PATH won't have it — probe dirs plus the RUNNING
-    // node's own bin dir (nvm installs the adapters next to node; launchd's bare
-    // PATH knows neither — live catch 2026-08-04: the first slot-wake ENOENT'd).
-    env: {
-      ...process.env,
-      PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
-      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
-    },
-    stdio: ["pipe", "pipe", "pipe"]
-  });
-  const write = (frames) => {
-    for (const f of frames) child.stdin?.write(`${f}
-`);
-  };
-  child.stderr?.on("data", (chunk) => {
-    const text = String(chunk).trim();
-    if (text) opts.onEvent({ kind: "error", message: text });
-  });
-  child.on("exit", (code) => {
-    opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
-    opts.onExit?.();
-  });
-  child.on("error", (e) => {
-    opts.onEvent({ kind: "error", message: e.message });
-    opts.onExit?.();
-  });
-  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.mcp ? { mcp: opts.mcp } : {} });
-  let buffer = "";
-  child.stdout?.on("data", (chunk) => {
-    const { lines, rest } = splitLines(buffer, String(chunk));
-    buffer = rest;
-    for (const line of lines) {
-      const { events, writes } = driver.handleLine(line);
-      write(writes);
-      for (const event of events) opts.onEvent(event);
-    }
-  });
-  write(driver.open());
-  return {
-    send(text) {
-      write(driver.send(text));
-    },
-    respond(id, decision) {
-      write(driver.respond(id, decision));
-    },
-    stop() {
-      write(driver.close());
-      child.kill();
-    }
-  };
+  return listWorkspaces(deps)[0];
 }
 
 // ../../packages/schema/dist/index.js
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
-  description: external_exports.array(external_exports.string().min(1)).min(1).describe("Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand.")
+  description: external_exports.array(external_exports.string().min(1)).describe(
+    "Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand. MAY BE EMPTY: a claim whose whole content is its heading \u2014 a single sentence \u2014 has no body, and saying so beats repeating the heading underneath itself. That repeat is what `min(1)` used to force, at 2x the storage, with every reader subtracting it back out at render time."
+  )
 });
 var ParticipantSchema2 = external_exports.object({
   kind: external_exports.enum(["human", "agent"]),
@@ -12854,6 +12808,14 @@ var NotifyRequestSchema2 = external_exports.object({
   waiting: external_exports.enum(["none", "soft", "hard"]).optional().describe(
     "With `ask`: what happens to your work while you wait. 'none' = you're just informing the user. 'soft' = you'd like an answer but can keep working. 'hard' = you are stopped until they answer (reaches them urgently and escalates to a real phone call if unanswered). Replaces urgencyHint + blocking \u2014 send this one field."
   ),
+  /** Δ9b (#895): HOLD this claim so the sender can correct the plan before anyone is
+   *  interrupted. Opt-in per claim, because the fail-open is a minute-granularity cron —
+   *  holding by default would charge every quiet claim that minute before any agent could
+   *  correct anything. Ignored for `waiting: 'hard'`: a blocking ask rings on what we have,
+   *  and the enrichment can still land mid-call (#781 re-plans the unspoken tail). */
+  confirm: external_exports.boolean().optional().describe(
+    "Hold this one so you can correct the plan before the user is interrupted. The response comes back with `held: true` and the plan; POST the confirm route to release it (with options/visuals/urgency corrections, or nothing at all). If you never do, it is announced anyway a couple of minutes later. Ignored when waiting is 'hard'."
+  ),
   /** #575: a RELAY of the user's explicitly stated preference, never the agent's
    *  choice. Outranks waiting in both directions: 'call' rings even for a
    *  waiting:'none' "call me when it's done"; 'message' never rings even for
@@ -12887,7 +12849,7 @@ var NotifyRequestSchema2 = external_exports.object({
   if (r.ask !== void 0) {
     for (const f of ["context", "select", "points"]) {
       if (r[f] !== void 0)
-        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives it (use \`needs\` for multi-part asks)` });
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives the answer shape from your prose. Drop ${f} and say it in \`ask\` instead ("should I\u2026" for approve/deny, "which of these\u2026" for a pick), passing \`options\` when you're offering concrete alternatives.` });
     }
     return;
   }
@@ -12903,6 +12865,23 @@ var NotifyRequestSchema2 = external_exports.object({
   if (!needsOptions && r.options?.length)
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' takes no options` });
 });
+function unitsOf2(text) {
+  const spans = [];
+  const re = /\n\s*\n+/g;
+  let cursor = 0;
+  const push = (from, to) => {
+    const slice = text.slice(from, to);
+    const lead = slice.length - slice.trimStart().length;
+    const tail = slice.length - slice.trimEnd().length;
+    if (from + lead < to - tail) spans.push({ start: from + lead, end: to - tail });
+  };
+  for (let m = re.exec(text); m; m = re.exec(text)) {
+    push(cursor, m.index);
+    cursor = m.index + m[0].length;
+  }
+  push(cursor, text.length);
+  return spans;
+}
 var NotifyStatusSchema2 = external_exports.enum(["pending", "answered", "ignored"]);
 var AgentStateSchema2 = external_exports.enum(["idle", "in_progress", "completed", "needs_input"]);
 var SetTaskStateSchema2 = external_exports.object({
@@ -13085,6 +13064,40 @@ var NotifyResponseSchema2 = external_exports.object({
   answer: UserAnswerSchema2.optional(),
   answeredAt: external_exports.string().datetime().optional()
 });
+var NotifyPlanUnitSchema2 = external_exports.object({
+  notificationId: external_exports.string(),
+  /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
+  title: external_exports.string(),
+  /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
+  level: NotifyLevelSchema2,
+  /** Answered from something the user already decided: nobody is interrupted, and a trail card
+   *  says so. The agent should not wait on this one. */
+  settled: external_exports.literal(true).optional(),
+  /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
+   *  agent — nothing here changed the ask, and ignoring it costs nothing. */
+  needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
+  /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
+   *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
+   *  broker that DECIDES that destroys the only fact separating a statement from a real ask
+   *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
+   *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
+  proposal: external_exports.object({
+    select: SelectShapeSchema2,
+    options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
+  }).optional(),
+  /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
+   *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
+   *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
+   *  shape — the read RAISES (a decision always asks) and never silences a question the
+   *  agent declared (#731, #923). */
+  wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
+});
+var NotifyPlanSchema2 = external_exports.object({
+  units: external_exports.array(NotifyPlanUnitSchema2),
+  /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
+   *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
+  speaks: external_exports.string().optional()
+});
 var UserResponseSchema2 = external_exports.object({
   requestId: external_exports.string(),
   answer: UserAnswerSchema2,
@@ -13139,6 +13152,20 @@ var InboxItemSchema2 = external_exports.object({
   /** The conversation thread + connection this item lives on. Present on the replied
    *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
   parentId: external_exports.string().optional(),
+  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
+   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
+   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
+   *  accumulates every message an agent ever sent, so grouping by it renders a day of
+   *  unrelated updates as a single "12-part request". Absent on rows written before the
+   *  `asks` table, and on anything that never went through `notify` — both fall back to the
+   *  thread, which is what the client did for all rows until now. */
+  askId: external_exports.string().optional(),
+  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
+   *  shares one `created_at` to the microsecond, so without it the author's order is
+   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
+   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
+   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
+  seq: external_exports.number().int().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema2,
   context: ContextSchema2,
@@ -13149,6 +13176,16 @@ var InboxItemSchema2 = external_exports.object({
    *  ring/enqueue time. Replaces the condensed line + index-aligned phrased points, which
    *  between them could not express a call as a sequence. `question: null` is a real turn —
    *  a status update stays a statement instead of being shaped into a yes/no. */
+  /** Does this claim want an ANSWER, or is it telling you something? Written per row from
+   *  `requestAsks` — the agent's own declaration, not a guess. `false` is what earns a card
+   *  its acknowledge affordance: without it a status update offers a text box and a dismiss,
+   *  and neither of those is "got it" (owner, 2026-08-10). */
+  asks: external_exports.boolean().optional(),
+  /** When a live process last pulsed for this row's agent — the liveness input for
+   *  "working requires a pulse" (#928): the list said "Working…" from agent_state alone
+   *  while the party called the same dead claim stalled. Absent = no token/no data,
+   *  which must never CLAIM stalled. */
+  lastSeenAt: external_exports.string().optional(),
   agenda: external_exports.array(AgendaTurnSchema2).optional(),
   /** On a replied detail (#397): the next steps the user attached to the answer
    *  ("call back after lunch") — shown so they can see the commitment was captured. */
@@ -13173,6 +13210,23 @@ var InboxItemSchema2 = external_exports.object({
    *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
   error: external_exports.string().optional(),
   clarifies: external_exports.string().optional(),
+  /** The ring ladder ran out while this was still pending — we tried to reach you and
+   *  STOPPED trying (`arbitration/arbitrate.ts` `nextRing` → `stop`). Distinct from an
+   *  agent with nothing to say, which the roster drew identically until now: "nothing to
+   *  say" and "gave up saying it" are opposite situations wearing the same face
+   *  (navigation-design.md, gap 1). False for anything that never rang. */
+  gaveUp: external_exports.boolean().default(false),
+  /** Why this arrived the way it did, read back off the delivery receipt (`notify/why.ts`).
+   *  Absent for anything never delivered through a push, and for older rows written before
+   *  the reason was recorded. Deliberately a debug affordance, shown small (owner,
+   *  2026-08-07) — its real job is to give "this didn't need a call" something to be
+   *  feedback ABOUT. */
+  why: external_exports.object({
+    asked: NotifyLevelSchema2,
+    got: NotifyLevelSchema2,
+    because: external_exports.enum(["unresponsive", "dismissed", "not_permitted", "silent", "coalesced", "agent_capped", "unplanned", "learned_raise"]).optional(),
+    line: external_exports.string()
+  }).optional(),
   select: external_exports.enum(["one", "many", "rank", "confirm", "text"]).default("one"),
   confirmStyle: external_exports.enum(["yesno", "approve"]).default("yesno").describe(
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
@@ -13283,6 +13337,15 @@ var HistoryItemSchema2 = external_exports.object({
   /** When you answered the agent's notification (agent→user only). */
   humanAckedAt: external_exports.string().nullable()
 });
+var ACTIVITY_LINES2 = 2;
+var ACTIVITY_LINE_MAX2 = 80;
+var AgentActivitySchema2 = external_exports.object({
+  /** Oldest first, so the newest line is last — the one that replaces in place. */
+  lines: external_exports.array(external_exports.string().max(ACTIVITY_LINE_MAX2)).max(ACTIVITY_LINES2),
+  /** When the harness observed this tail. Its own timestamp, not the heartbeat's: a beat
+   *  that carries an UNCHANGED tail must not make a stalled agent look like it just moved. */
+  at: external_exports.string().datetime()
+});
 var ConnectionSummarySchema2 = external_exports.object({
   /** The connection = the agent's token id (used to address a request). */
   id: external_exports.string(),
@@ -13294,6 +13357,14 @@ var ConnectionSummarySchema2 = external_exports.object({
   provider: external_exports.string().nullable(),
   /** The pairing's assigned voice (#462); null = the default voice. */
   voice: VoiceKeySchema2.nullable(),
+  /** The LOUDEST this agent may ever reach you — a ceiling on `NOTIFY_LADDER`, set by the
+   *  user on the agent's own page. null = no ceiling (today's behaviour for every
+   *  connection). Android binds importance to a relationship rather than to each message,
+   *  and that is the thing our roster could not say: "Marlow may always call me; Otto
+   *  never may" (navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
+   *  every surface at once and outranks even `sessionMode: all_calls` — a mode the user
+   *  set once must not overrule a rule they set about one agent. */
+  reach: NotifyLevelSchema2.nullable().optional(),
   createdAt: external_exports.string().datetime(),
   /** Most recent notification on this connection, either direction. Null = no contact yet.
    *  Drives the agents-page recency grouping (Today / This week / …). */
@@ -13308,10 +13379,49 @@ var ConnectionSummarySchema2 = external_exports.object({
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional()
   }).optional(),
+  /** The tail of this agent's working log, when a harness is driving it — the agent page's
+   *  live strip. Absent for anything the desktop harness isn't running (a hatched identity
+   *  used straight from a terminal emits no work events; the page says so rather than
+   *  drawing an empty box). */
+  activity: AgentActivitySchema2.optional(),
   /** True = a provider-managed agent running in the provider's cloud (e.g. Anthropic CMA);
    *  false = a local MCP connection running on the user's computer (Claude Code/Codex/…). */
   managed: external_exports.boolean()
 });
+var MoveRingSchema2 = external_exports.enum(["home", "travels", "retired", "quarantined"]);
+var MoveSchema2 = external_exports.object({
+  id: external_exports.string(),
+  /** The reusable question, as distill normalized it. */
+  question: external_exports.string(),
+  /** The operative ruling. Editable by the user (PATCH) — which resets the ledger. */
+  answer: external_exports.string(),
+  /** The user's stated reason, when they gave one. Null = inherently narrow: the judge is
+   *  told so, and the ruling only derives essentially the same question in the same scope. */
+  rationale: external_exports.string().nullable(),
+  /** Where the ruling lives: a repo/workspace, or 'global'. */
+  scope: external_exports.string(),
+  ring: MoveRingSchema2,
+  /** True = the user pinned it with `always` (travel granted by hand, not by evidence). */
+  pinned: external_exports.boolean(),
+  /** True = a pin the user placed was BROKEN by later counter-evidence. Surfaced so the
+   *  break is visible instead of a pin silently disappearing. */
+  pinBroken: external_exports.boolean(),
+  /** When the ruling was distilled. */
+  learnedAt: external_exports.string(),
+  /** Last time it answered an ask. Null = never fired. */
+  lastUsedAt: external_exports.string().nullable(),
+  /** How many asks it has answered. Instrumentation — deliberately NOT an input to the
+   *  evidence curve: firing says the question keeps arising, not that the ruling is right. */
+  usedCount: external_exports.number(),
+  /** Ledger: outcomes that said it held up. Saturating — the tenth is worth almost nothing. */
+  confirms: external_exports.number(),
+  /** Ledger: contradictions, in signal units (a full override = 1, weaker signals less).
+   *  Linear and priced above the entire confirmation budget, so any full counter wins. */
+  counters: external_exports.number(),
+  /** The agent that asked the question this move came from, when known. Null for a move
+   *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
+  learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
+});
 var CreateRequestSchema2 = external_exports.object({
   /** The connection (token id) to send to, from GET /api/tokens. */
   tokenId: external_exports.string(),
@@ -13518,6 +13628,17 @@ var DeviceTokenSchema2 = external_exports.object({
    *  a default silly name). */
   name: external_exports.string(),
   device: external_exports.string().nullable(),
+  /** The pairing's assigned voice, cached so the desktop can seed the SAME face the phone
+   *  draws — voice is the third ingredient of a hatchling's build (party/traits.ts). */
+  voice: external_exports.string().nullable().optional(),
+  /** The token's server-side id — the face's COLOUR anchor, and the only seed ingredient
+   *  that survives a rename. Cached by the host's identity beat. */
+  token_id: external_exports.string().nullable().optional(),
+  /** WHERE this identity works — the folder a wake should land it in. Written by the host
+   *  at spawn and by `paigy-harness handoff` from a live terminal. Without it every wake
+   *  landed in the FIRST granted workspace and the agent rediscovered its own repo from
+   *  the thread each time (host.ts, live catch 2026-08-06 — prompt-papered until now). */
+  workspace: external_exports.string().nullable().optional(),
   phone_reveal: PairingRevealSchema2.nullable().optional(),
   // present once the phone reveals
   uik_pub: external_exports.string().nullable().optional()
@@ -13544,6 +13665,8 @@ var NotificationFeedbackKindSchema2 = external_exports.enum([
   // "There should be a picture or design here."
   "should_have_called",
   // "Don't put this in a banner — ring me for something like this."
+  "should_have_messaged",
+  // the inverse: "that didn't deserve a ring — a message would do."
   "other"
   // anything else — the note carries it.
 ]);
@@ -13564,6 +13687,323 @@ var FeedbackOutcomeSchema2 = external_exports.object({
   childIds: external_exports.array(external_exports.string()).optional()
 });
 
+// src/paigy/activity.ts
+function shortenPaths(s) {
+  return s.replace(/(?<![\w.@+-])(?:\/[\w.@+-]+){3,}/g, (p) => {
+    const parts = p.split("/").filter(Boolean);
+    return `\u2026/${parts.slice(-2).join("/")}`;
+  });
+}
+function workLine(event) {
+  const note = (event.note ?? "").split("\n").find((l) => l.trim()) ?? "";
+  const line = shortenPaths([event.tool.trim(), note.trim()].filter(Boolean).join(" \u2014 ").replace(/\s+/g, " "));
+  return line.length > ACTIVITY_LINE_MAX2 ? `${line.slice(0, ACTIVITY_LINE_MAX2 - 1)}\u2026` : line;
+}
+function pushWork(lines, line) {
+  if (!line || lines[lines.length - 1] === line) return [...lines];
+  return [...lines, line].slice(-ACTIVITY_LINES2);
+}
+function sameTail(a, b) {
+  return a.length === b.length && a.every((l, i) => l === b[i]);
+}
+
+// src/harness/session.ts
+import { spawn } from "child_process";
+import { existsSync as existsSync4 } from "fs";
+import { homedir as homedir4 } from "os";
+import { resolve as resolve2, delimiter as delimiter2 } from "path";
+
+// src/harness/acp.ts
+var none = { events: [], writes: [] };
+function optionFor(options, decision) {
+  const want = decision.allow ? "allow_once" : "reject_once";
+  return options.find((o) => o.kind === want)?.optionId ?? null;
+}
+function createAcpDriver(opts) {
+  return new AcpDriver(opts.cwd, opts.mode, opts.mcp ?? []);
+}
+var AcpDriver = class {
+  constructor(cwd, mode, mcp = []) {
+    this.cwd = cwd;
+    this.mode = mode;
+    this.mcp = mcp;
+  }
+  cwd;
+  mode;
+  mcp;
+  nextId = 1;
+  initId;
+  sessionNewId;
+  promptId;
+  sessionId;
+  queued = [];
+  /** Options of each unanswered permission request, keyed by its JSON-RPC id. */
+  pending = /* @__PURE__ */ new Map();
+  /** Where the REPORT starts in `text` — everything before the LAST tool call is working
+   *  narration ("Now the API endpoints." → runs a tool), and it used to ship: the chunks
+   *  concatenate with no separator, so the owner's phone got "…find the repo.Now I have
+   *  the full picture. Writing the migration.Now…" as the opening paragraph of a finished
+   *  task (live, 2026-08-11 — "looks like a working log"). The narration's audience is the
+   *  terminal and host.log; what the agent composed AFTER its last tool call is the part
+   *  addressed to a human, and that is what leaves the machine. */
+  reportFrom = 0;
+  /** The turn being streamed: text accumulates, tools append, both flush on stopReason. */
+  text = "";
+  tools = [];
+  /** The opening frame. Everything after is driven by responses in `handleLine`. */
+  open() {
+    this.initId = this.nextId++;
+    return [
+      frame({
+        id: this.initId,
+        method: "initialize",
+        params: {
+          protocolVersion: 2,
+          // We are not an editor: no file services offered, the agent uses its own.
+          clientCapabilities: { fs: { readTextFile: false, writeTextFile: false } },
+          clientInfo: { name: "paigy-desktop", version: "0.0.0" }
+        }
+      })
+    ];
+  }
+  /** Queue a prompt; it goes out when the session exists and no turn is running. */
+  send(text) {
+    this.queued.push(text);
+    return this.flush();
+  }
+  /** Answer a PermissionEvent (ask mode). The id is the request's JSON-RPC id as a string. */
+  respond(id, decision) {
+    const request = this.pending.get(id);
+    if (!request) return [];
+    this.pending.delete(id);
+    const optionId = optionFor(request.options, decision);
+    return [
+      optionId ? frame({ id: request.id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id: request.id, result: { outcome: { outcome: "cancelled" } } })
+    ];
+  }
+  /** Cancel anything still blocked — called on stop so the process can exit cleanly. */
+  close() {
+    const writes = [...this.pending.values()].map(
+      (r) => frame({ id: r.id, result: { outcome: { outcome: "cancelled" } } })
+    );
+    this.pending.clear();
+    return writes;
+  }
+  handleLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed) return none;
+    let msg;
+    try {
+      msg = JSON.parse(trimmed);
+    } catch {
+      return none;
+    }
+    if (msg.method !== void 0) {
+      return msg.id !== void 0 ? this.handleRequest(msg) : this.handleNotification(msg);
+    }
+    if (msg.id !== void 0) return this.handleResponse(msg);
+    return none;
+  }
+  // ── responses to our requests ──
+  handleResponse(msg) {
+    if (msg.id === this.initId) {
+      this.initId = void 0;
+      if (msg.error) {
+        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}` }], writes: [] };
+      }
+      this.sessionNewId = this.nextId++;
+      return {
+        events: [],
+        writes: [frame({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: this.mcp } })]
+      };
+    }
+    if (msg.id === this.sessionNewId) {
+      this.sessionNewId = void 0;
+      const sessionId = msg.result?.sessionId;
+      if (!sessionId) {
+        return {
+          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
+          writes: []
+        };
+      }
+      this.sessionId = sessionId;
+      const value = this.mode === "bypass" ? "bypassPermissions" : "default";
+      const writes = [
+        frame({
+          id: this.nextId++,
+          method: "session/set_config_option",
+          params: { sessionId, configId: "mode", value }
+        }),
+        frame({ id: this.nextId++, method: "session/set_mode", params: { sessionId, modeId: value } })
+      ];
+      writes.push(...this.flush());
+      return { events: [], writes };
+    }
+    if (msg.id === this.promptId) {
+      this.promptId = void 0;
+      const events = [];
+      const report = this.text.slice(this.reportFrom).trim() || this.text.trim();
+      if (report || this.tools.length) {
+        events.push({
+          kind: "turn",
+          role: "agent",
+          text: report,
+          ...this.tools.length ? { tools: [...this.tools] } : {}
+        });
+      }
+      const result = report;
+      const failed = msg.error !== void 0 || msg.result?.stopReason === "refusal";
+      this.text = "";
+      this.tools = [];
+      this.reportFrom = 0;
+      const writes = this.flush();
+      if (!writes.length) {
+        events.push({
+          kind: "idle",
+          ...result ? { result } : {},
+          ...failed ? { failed: true } : {}
+        });
+      }
+      return { events, writes };
+    }
+    return none;
+  }
+  // ── the agent talking to us ──
+  handleNotification(msg) {
+    if (msg.method !== "session/update") return none;
+    const update = msg.params?.update;
+    switch (update?.sessionUpdate) {
+      case "agent_message_chunk":
+        this.text += update.content?.text ?? "";
+        return none;
+      case "tool_call": {
+        const title = update.title?.trim() || update.kind || "tool";
+        this.tools.push(title);
+        const note = this.text.slice(this.reportFrom).trim();
+        this.reportFrom = this.text.length;
+        return { events: [{ kind: "work", tool: title, ...note ? { note } : {} }], writes: [] };
+      }
+      default:
+        return none;
+    }
+  }
+  handleRequest(msg) {
+    if (msg.method !== "session/request_permission") {
+      return {
+        events: [],
+        writes: [frame({ id: msg.id, error: { code: -32601, message: `Method not found: ${msg.method}` } })]
+      };
+    }
+    const id = msg.id;
+    const options = msg.params?.options ?? [];
+    const title = msg.params?.toolCall?.title?.trim() || "a tool call";
+    const tool = msg.params?.toolCall?.kind ?? "tool";
+    if (this.mode === "bypass") {
+      const optionId = optionFor(options, { allow: true }) ?? optionFor(options, { allow: false });
+      return {
+        // The decision still goes through Paigy — as history, not a question. Bypass
+        // means "don't stall the agent", never "don't tell the user".
+        events: [{ kind: "turn", role: "agent", text: `auto-approved: ${title}`, tools: [tool] }],
+        writes: [
+          optionId ? frame({ id, result: { outcome: { outcome: "selected", optionId } } }) : frame({ id, result: { outcome: { outcome: "cancelled" } } })
+        ]
+      };
+    }
+    this.pending.set(String(id), { id, options });
+    return {
+      events: [{ kind: "permission", id: String(id), tool, summary: title }],
+      writes: []
+    };
+  }
+  /** Send the queued prompts as one turn, if the agent can take one right now. */
+  flush() {
+    if (!this.sessionId || this.promptId !== void 0 || !this.queued.length) return [];
+    const blocks = this.queued.map((text) => ({ type: "text", text }));
+    this.queued = [];
+    this.promptId = this.nextId++;
+    return [
+      frame({
+        id: this.promptId,
+        method: "session/prompt",
+        params: { sessionId: this.sessionId, prompt: blocks }
+      })
+    ];
+  }
+};
+var frame = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
+
+// src/harness/session.ts
+var ADAPTER_BIN = {
+  claude: "claude-agent-acp",
+  codex: "codex-acp",
+  agy: "agy"
+};
+function splitLines(buffer, chunk) {
+  const combined = buffer + chunk;
+  const parts = combined.split("\n");
+  const rest = parts.pop() ?? "";
+  return { lines: parts.filter((l) => l.trim()), rest };
+}
+function startSession(opts) {
+  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir4()));
+  if (!existsSync4(cwd)) {
+    queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
+  }
+  const child = (opts.spawnFn ?? spawn)(opts.bin ?? ADAPTER_BIN[opts.harness], [], {
+    cwd,
+    // The adapter shells out to its vendor CLI (`claude`, `codex`), and a GUI- or
+    // launchd-launched process's PATH won't have it — probe dirs plus the RUNNING
+    // node's own bin dir (nvm installs the adapters next to node; launchd's bare
+    // PATH knows neither — live catch 2026-08-04: the first slot-wake ENOENT'd).
+    env: {
+      ...process.env,
+      PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
+      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
+    },
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  const write = (frames) => {
+    for (const f of frames) child.stdin?.write(`${f}
+`);
+  };
+  child.stderr?.on("data", (chunk) => {
+    const text = String(chunk).trim();
+    if (text) opts.onEvent({ kind: "error", message: text });
+  });
+  child.on("exit", (code) => {
+    opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
+    opts.onExit?.();
+  });
+  child.on("error", (e) => {
+    opts.onEvent({ kind: "error", message: e.message });
+    opts.onExit?.();
+  });
+  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.mcp ? { mcp: opts.mcp } : {} });
+  let buffer = "";
+  child.stdout?.on("data", (chunk) => {
+    const { lines, rest } = splitLines(buffer, String(chunk));
+    buffer = rest;
+    for (const line of lines) {
+      const { events, writes } = driver.handleLine(line);
+      write(writes);
+      for (const event of events) opts.onEvent(event);
+    }
+  });
+  write(driver.open());
+  return {
+    send(text) {
+      write(driver.send(text));
+    },
+    respond(id, decision) {
+      write(driver.respond(id, decision));
+    },
+    stop() {
+      write(driver.close());
+      child.kill();
+    }
+  };
+}
+
 // src/paigy/conversation.ts
 function endsWithQuestion(text) {
   if (!text) return false;
@@ -13658,6 +14098,9 @@ function levelFor(event) {
     case "idle":
       if (endsWithQuestion(event.result)) return "banner";
       return event.failed ? "push" : "inbox";
+    case "work":
+      return "inbox";
+    // moot — entryFor drops work before a level ever matters
     case "error":
       return "inbox";
   }
@@ -13678,16 +14121,14 @@ function entryFor(event, state = {}) {
   switch (event.kind) {
     case "turn": {
       const who = event.role === "agent" ? "Agent" : "You";
-      const title = event.text ? `${who}: ${firstLine(event.text)}` : `${who} ran ${(event.tools ?? []).join(", ")}`;
-      const description = [event.text, event.tools?.length ? `Tools: ${event.tools.join(", ")}` : null].filter((c) => Boolean(c));
+      const body = event.text ? event.role === "agent" ? event.text : `${who}: ${event.text}` : `${who} ran ${(event.tools ?? []).join(", ")}.`;
       return {
         ...common,
-        context: { title: clip(title), description: description.length ? description : [title] },
-        // The shaped form always carries an answer shape — the contract's rule, and the
-        // right one: any inbox row can be replied to, and a reply to history is just
-        // the user initiating (the pump feeds it back in). Non-blocking, so it never
-        // reads as a question.
-        select: "text"
+        ask: body
+        // No `select`: the contract refuses it on the `ask` form ("the broker derives it"),
+        // and with no options it derives "text" anyway — the shape this wants, since any
+        // inbox row can be replied to and a reply to history is just the user initiating
+        // (the pump feeds it back in).
       };
     }
     case "permission":
@@ -13709,16 +14150,24 @@ function entryFor(event, state = {}) {
       };
     case "idle": {
       const asking = endsWithQuestion(event.result);
+      const result = event.result?.trim();
+      const norm = (t) => (t ?? "").replace(/\s+/g, " ").trim();
+      if (result && !event.failed && norm(result) === norm(state.lastAgentText)) {
+        if (!asking) return null;
+        const spans = unitsOf2(result);
+        const tail = spans.map((sp) => result.slice(sp.start, sp.end)).reverse().find((t) => t.includes("?"));
+        return { ...common, ask: tail ?? result, blocking: true };
+      }
+      const lead = asking ? "" : event.failed ? "The agent stopped without finishing. " : "Turn complete. ";
       return {
         ...common,
-        context: {
-          title: asking ? clip(firstLine(event.result ?? "")) : event.failed ? "The agent stopped without finishing" : "Turn complete",
-          description: [event.result || (event.failed ? "No result reported." : "Done.")]
-        },
-        select: "text",
+        ask: `${lead}${result || (event.failed ? "No result reported." : "Done.")}`,
         ...asking ? { blocking: true } : {}
       };
     }
+    case "work":
+      return null;
+    // log-only by contract — the live texture of the working log
     case "error":
       return null;
   }
@@ -13740,9 +14189,16 @@ function decisionFrom(answer) {
 }
 async function mirror(event, state, deps = {}) {
   const entry = entryFor(event, state);
+  if (event.kind === "turn" && event.role === "agent" && event.text) state.lastAgentText = event.text;
   if (!entry) return {};
+  let req;
+  try {
+    req = NotifyRequestSchema2.parse(entry);
+  } catch (e) {
+    console.error(`paigy: mirror entry failed the contract \u2014 a bridge bug, not the network: ${e instanceof Error ? e.message.slice(0, 300) : String(e)}`);
+    return {};
+  }
   try {
-    const req = NotifyRequestSchema2.parse(entry);
     const { notificationId, parentId } = await (deps.submit ?? submitNotification)(req);
     (state.mine ??= /* @__PURE__ */ new Set()).add(notificationId);
     return { parentId, notificationId };
@@ -13771,8 +14227,9 @@ async function askQuestion(question, state, deps = {}) {
     ...state.parentId ? { parentId: state.parentId } : {},
     ...state.repo ? { repo: state.repo } : {},
     ...state.branch ? { branch: state.branch } : {},
-    context: { title: clip(firstLine(question)), description: [question] },
-    select: "text",
+    // Prose in — see `entryFor`'s `turn` case. An agent's question is the case most likely
+    // to run long, and its title was a clipped prefix of itself.
+    ask: question,
     blocking: true,
     urgency: "banner"
   };
@@ -13807,12 +14264,12 @@ function spokenText(answer) {
       return null;
   }
 }
-var firstLine = (s) => s.split("\n")[0] ?? s;
 var clip = (s) => (s.length > 120 ? `${s.slice(0, 117)}\u2026` : s) || "(no text)";
 
 // src/run.ts
 function runHarness(opts) {
   let running = true;
+  let tail = [];
   const state = { ...opts.exclusive ? { exclusive: true } : {} };
   let session = null;
   const asMe = { token: opts.token };
@@ -13840,11 +14297,17 @@ function runHarness(opts) {
       opts.log(decision.allow ? `\u2713 approved: ${event.summary}` : `\u2717 denied: ${event.summary}`);
       return;
     }
+    if (event.kind === "work") {
+      opts.log(`\u2699 ${event.tool}${event.note ? ` \u2014 ${event.note.split("\n")[0] ?? ""}` : ""}`);
+      tail = pushWork(tail, workLine(event));
+      return;
+    }
     const { parentId } = await mirror(event, state, deps);
     state.parentId ??= parentId;
     if (event.kind === "turn") opts.log(`${event.role}: ${event.text.split("\n")[0] ?? ""}`);
     if (event.kind === "idle") {
       state.resting = true;
+      tail = [];
       if (endsWithQuestion(event.result)) {
         const local = await opts.localAsk?.question?.(event.result ?? "") ?? null;
         if (local?.trim() && session && running) {
@@ -13882,8 +14345,10 @@ function runHarness(opts) {
       session?.send(text);
     },
     working: () => running && state.resting !== true,
+    tail: () => [...tail],
     stop() {
       running = false;
+      tail = [];
       cancelAsks(state);
       session?.stop();
       session = null;
@@ -13915,16 +14380,22 @@ function hostElsewhere() {
 function startHost(opts) {
   const runs = /* @__PURE__ */ new Map();
   const asHost = { token: opts.token };
-  const refreshNames = async () => {
+  const refreshIdentities = async () => {
     for (const slot of listSlots()) {
       const token = readToken(slot);
       if (!token) continue;
       const me = await whoAmI({ token }).catch(() => null);
-      if (me?.name && me.name !== slotName(slot)) saveToken({ access_token: token, name: me.name, device: null }, slot);
+      if (!me) continue;
+      const have = slotIdentity(slot);
+      if (me.name !== have.name || (me.voice ?? null) !== have.voice || (me.tokenId ?? null) !== have.tokenId) {
+        updateSlot(slot, { ...me.name ? { name: me.name } : {}, voice: me.voice ?? null, token_id: me.tokenId ?? null });
+      }
     }
   };
   const beat = () => {
-    void refreshNames();
+    void refreshIdentities();
+    for (const r of runs.values()) if (r.token) void heartbeat(void 0, { token: r.token }).catch(() => {
+    });
     void heartbeat({
       harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
       workspaces: listWorkspaces(opts.wsDeps)
@@ -13949,25 +14420,28 @@ function startHost(opts) {
         },
         log: log2
       });
-      runs.set(spec.sessionId, { run, label });
+      runs.set(spec.sessionId, { run, label, token: spec.token });
+      void heartbeat(void 0, { token: spec.token }).catch(() => {
+      });
+      void refreshIdentities();
       try {
-        saveToken({ access_token: spec.token, name: label, device: null }, `session:${spec.sessionId.slice(0, 8)}`);
+        saveToken({ access_token: spec.token, name: label, device: null, workspace: spec.workspace }, sessionSlot(spec.sessionId));
       } catch {
       }
       opts.log(`\u25B6 phone-launched ${label} (${spec.harness}) in ${spec.workspace}`);
     }
   }
-  const SLOT_HARNESS = { "mcp-agent": "claude", codex: "codex" };
-  const WAKE_PROMPT = "You were woken because Paigy work is waiting for you. This is a fresh session with your existing identity, so you may already have work in flight that you can't remember. Call check_replies FIRST, then get_thread on each conversation it returns and read it before you touch anything: it holds what you were doing, where (a repo or worktree may not be this folder), and what the owner already decided. Then handle what's waiting and follow your paigy instructions to stay in the loop.";
+  const SLOT_HARNESS = { "mcp-agent": "claude", codex: "codex", antigravity: "agy" };
+  const WAKE_PROMPT = "You were woken because Paigy work is waiting for you. This is a fresh session with your existing identity, so you may already have work in flight that you can't remember. Call check_replies FIRST, then get_thread on each conversation it returns and read it before you touch anything: it holds what you were doing, where (a repo or worktree may not be this folder), and what the owner already decided. Then handle what's waiting and follow your paigy instructions to stay in the loop. Speak to the owner at exactly TWO moments: when you are BLOCKED on a decision only they can make (contact with waiting:'hard', the decision as the ask, options if you have real ones), and when you are DONE (one short report: what shipped, how you verified it, anything you flagged). Progress is never a contact \u2014 call set_task_state('in_progress') when you pick work up and the app shows you working; narrate to the terminal, not to the human.";
   async function sweepSlots() {
-    const workspace = listWorkspaces(opts.wsDeps)[0];
-    if (!workspace) return;
     for (const slot of listSlots()) {
       const harness = SLOT_HARNESS[slot] ?? (slot === "Desktop" ? void 0 : "claude");
       const key = `slot:${slot}`;
       if (!harness || runs.has(key)) continue;
       const token = readToken(slot);
       if (!token) continue;
+      const workspace = resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
+      if (!workspace) continue;
       const work = await checkReplies({ token }).catch(() => null);
       if (!work || work.requests.length === 0 && work.replies.length === 0) continue;
       const label = slotName(slot) ?? slot;
@@ -13986,10 +14460,33 @@ function startHost(opts) {
         },
         log: log2
       });
-      runs.set(key, { run, label });
+      runs.set(key, { run, label, token });
+      void heartbeat(void 0, { token }).catch(() => {
+      });
       opts.log(`\u25B6 woke ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
     }
   }
+  const ACTIVITY_MS = 2e3;
+  const published = /* @__PURE__ */ new Map();
+  const streamActivity = () => {
+    const publishTail = (token, lines) => {
+      void heartbeat(void 0, { token, activity: { lines, at: (/* @__PURE__ */ new Date()).toISOString() } }).catch(() => {
+      });
+    };
+    for (const [key, r] of runs) {
+      if (!r.token) continue;
+      const lines = r.run.tail();
+      const was = published.get(key);
+      if (was && sameTail(was.lines, lines)) continue;
+      published.set(key, { token: r.token, lines });
+      publishTail(r.token, lines);
+    }
+    for (const [key, was] of published) {
+      if (runs.has(key)) continue;
+      published.delete(key);
+      if (was.lines.length > 0) publishTail(was.token, []);
+    }
+  };
   const publish = () => {
     try {
       writeFileSync3(HOST_FILE, JSON.stringify({ pid: process.pid, at: Date.now(), roster: api.roster() }));
@@ -14003,6 +14500,7 @@ function startHost(opts) {
     void sweepSlots();
     publish();
   }, 5e3);
+  const activityTick = setInterval(streamActivity, ACTIVITY_MS);
   const stopSessions = () => {
     for (const { run, label } of runs.values()) {
       run.stop();
@@ -14019,18 +14517,29 @@ function startHost(opts) {
       const live = new Map([...runs.values()].map((r) => [r.label, r.run]));
       const names = /* @__PURE__ */ new Map();
       for (const key of listSlots()) if (key !== "Desktop") names.set(slotName(key) ?? key, key);
-      for (const label of live.keys()) if (!names.has(label)) names.set(label, label);
-      return [...names.keys()].map((name) => ({
-        name,
-        running: live.has(name),
-        working: live.get(name)?.working() ?? false
-      }));
+      for (const label of live.keys()) if (!names.has(label)) names.set(label, null);
+      return [...names.entries()].map(([name, slot]) => {
+        const id = slot ? slotIdentity(slot) : { voice: null, tokenId: null };
+        return {
+          name,
+          // The slot key rides along so the window's agent page can speak AS this agent —
+          // its pending reads (`checkReplies`, the same pure read the sweep does) need the
+          // slot's own token, and the display name is not a key.
+          slot,
+          tokenId: id.tokenId,
+          voice: id.voice,
+          running: live.has(name),
+          working: live.get(name)?.working() ?? false
+        };
+      });
     },
     stopSessions,
     stop() {
       clearInterval(pulse);
       clearInterval(spawnPoll);
       stopSessions();
+      streamActivity();
+      clearInterval(activityTick);
       try {
         writeFileSync3(HOST_FILE, JSON.stringify({ pid: process.pid, at: 0, roster: [] }));
       } catch {
@@ -14045,7 +14554,7 @@ function startHost(opts) {
 var here = dirname4(fileURLToPath(import.meta.url));
 var wsDeps = { file: workspacesFile() };
 var DEVICE_SLOT = "Desktop";
-var deviceToken = () => readToken(DEVICE_SLOT) || readToken();
+var deviceToken = () => readToken(DEVICE_SLOT);
 var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
@@ -14053,8 +14562,13 @@ function log(message) {
 var ICON = join5(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
-    width: 720,
-    height: 640,
+    // Sized for the working log, which is now the window's centerpiece; the layout is a
+    // single fluid column (max-width 1080, logs wrap at any token), so any size between
+    // the min and a full screen holds without a horizontal scrollbar.
+    width: 880,
+    height: 820,
+    minWidth: 560,
+    minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
     webPreferences: { preload: join5(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
@@ -14112,6 +14626,31 @@ ipcMain.handle("paigy:beacon", async () => {
   })();
   return { qr, code: code.user_code };
 });
+ipcMain.handle("paigy:agent", async (_e, name) => {
+  const entry = (host?.roster() ?? readHostState()?.roster ?? []).find((a) => a.name === name);
+  if (!entry) return null;
+  const token = entry.slot ? readToken(entry.slot) : "";
+  const pending = token ? await checkReplies({ token }).catch(() => null) : null;
+  return {
+    ...entry,
+    pending: pending ? {
+      requests: pending.requests.slice(0, 5).map((r) => ({
+        line: (r.text.split("\n").find(Boolean) ?? "").slice(0, 140),
+        at: r.createdAt
+      })),
+      replies: pending.replies.length
+    } : null
+  };
+});
+ipcMain.handle("paigy:agent-log", (_e, name) => {
+  try {
+    const all = readFileSync4(join5(homedir6(), ".paigy", "host.log"), "utf8").split("\n");
+    const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
+    return mine.slice(-500).join("\n");
+  } catch {
+    return "";
+  }
+});
 ipcMain.handle("paigy:workspaces", () => listWorkspaces(wsDeps));
 ipcMain.handle("paigy:workspace-add", async () => {
   const picked = await dialog.showOpenDialog({ properties: ["openDirectory", "createDirectory"] });