@paigy/harness 0.3.10 → 0.3.12

package/dist/main.js

@@ -4580,7 +4580,7 @@ import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync4 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname4, join as join6 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
@@ -10915,11 +10915,17 @@ function sessionId() {
   return SESSION_ID;
 }
 async function reach(url, init) {
+  return send(url, init, SESSION_ID);
+}
+function reachAs(session) {
+  return (url, init) => send(url, init, session);
+}
+async function send(url, init, session) {
   try {
     const headers = {
       ...init?.headers,
       "x-paigy-instance": INSTANCE_ID,
-      "x-paigy-session": SESSION_ID
+      "x-paigy-session": session
     };
     return await fetch(url, { ...init, headers, dispatcher: await proxy() });
   } catch (e) {
@@ -12195,6 +12201,9 @@ var CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
 var CONTACT_DESCRIPTION = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
+  /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+   *  rings"). Omit it and the brain writes one at admission from the outcome. */
+  title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
   /** A past conversation this Goal should be read against — History's "new session from this"
@@ -12214,11 +12223,14 @@ var CreateGoalSchema = external_exports.object({
 var CreateGoalToolSchema = CreateGoalSchema.extend({
   idempotencyKey: CreateGoalSchema.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
 }).strict();
-var CREATE_GOAL_DESCRIPTION = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+var CREATE_GOAL_DESCRIPTION = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
     outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+    /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+     *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+    title: external_exports.string().trim().min(1).max(80).nullable().optional(),
     ownerParticipant: external_exports.string().trim().min(1).optional(),
     parentGoalId: external_exports.string().uuid().nullable().optional(),
     dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -12234,10 +12246,10 @@ var UpdateGoalSchema = external_exports.object({
 var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({ goalId: external_exports.string().uuid() }).strict();
 var ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
-var GET_GOAL_DESCRIPTION = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the new revision and a prose summary.";
-var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
+var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema = external_exports.object({}).strict();
 var GetThreadSchema = external_exports.object({
   parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -12258,6 +12270,7 @@ var AGENT_TOOLS = [
   { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(UpdateGoalToolSchema) }
 ];
 var AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
+var LIVE_MS = 3 * 6e4;
 var ContextSchema = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -13094,7 +13107,19 @@ var QueueQuestionSchema = external_exports.object({
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: external_exports.string().nullable().default(null)
+  answer: external_exports.string().nullable().default(null),
+  /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+   *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+   *  this is the field they agree through rather than each re-deriving it from the row it
+   *  arrived under. Required because the API projects it on every need it sends. */
+  goalId: external_exports.string(),
+  /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+   *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+   *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+   *  gate at all. */
+  blocked: external_exports.boolean().default(false)
 });
 var QueueItemSchema = external_exports.object({
   id: external_exports.string(),
@@ -13233,25 +13258,6 @@ var DeliveryConfigSchema = external_exports.object({
    *  carries credentials; only a `poll` registration can come back with null here. */
   realtime: external_exports.object({ url: external_exports.string(), anonKey: external_exports.string() }).nullable()
 });
-var StatusSchema = external_exports.object({
-  name: external_exports.string(),
-  sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
-  /** A phone is registered for push/ring (any push token on the account). */
-  phone: external_exports.boolean(),
-  /** HOW MANY THINGS ARE WAITING ON THIS IDENTITY — replies it never collected and requests
-   *  it never picked up. THE SAME NUMBER the harness's wake gate reads
-   *  (`pendingSummary.unacknowledged`), from the same function, because a statusline saying
-   *  zero while the sweep sees one is two ideas of "waiting".
-   *
-   *  Why it is here at all (owner, 2026-09-07): nothing can interrupt an idle agent process
-   *  that nobody spawned, so a terminal session only learns of work by asking. The harness
-   *  used to paper over that by spawning a SECOND process on the identity; now it stands
-   *  back, correctly, and the person sitting at the terminal is the one who can act. A
-   *  coffee-beans request sat unread for three days.
-   *
-   *  Optional: an older API sends no field, and the statusline then renders exactly as before. */
-  waiting: external_exports.number().int().nonnegative().optional()
-});
 var EnvelopeRecipientSchema = external_exports.object({
   keyId: external_exports.string(),
   epk: external_exports.string(),
@@ -13593,7 +13599,7 @@ async function listNotes(opts = {}) {
 }
 async function listConnections(opts = {}) {
   const res = ensureAuthed(await reach(`${BACKEND_URL}/api/tokens`, {
-    headers: { authorization: `Bearer ${authToken(opts.token)}` }
+    headers: { authorization: `Bearer ${authToken(opts.token)}`, "x-paigy-model": "goal-entry-v1" }
   }));
   if (!res.ok) throw new Error(`list_connections failed: ${res.status} ${await res.text()}`);
   return await res.json();
@@ -13634,14 +13640,14 @@ async function dismissTriage(proposalId, opts = {}) {
 async function contact(input, opts = {}) {
   const parsed = ContactSchema.parse(input);
   opts.signal?.throwIfAborted();
-  const send2 = opts.reach ?? reach;
+  const send22 = opts.reach ?? reach;
   const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
   let deliveryId;
   if ("deliveryId" in parsed) deliveryId = parsed.deliveryId;
   else {
     if (!opts.reach && readKeyFile()?.e2ee) throw new Error("Goal contact does not support E2EE yet; refusing to send plaintext.");
     const shaped = deriveAsk(NotifyRequestSchema.parse({ ask: parsed.ask, waiting: parsed.waiting, options: parsed.options }));
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
       method: "POST",
       headers,
       signal: opts.signal,
@@ -13653,11 +13659,9 @@ async function contact(input, opts = {}) {
     if (!deliveryId) throw new Error("Goal contact returned no Delivery identity");
   }
   const read = async (signal2) => {
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
     if (!res.ok) await fail("read_delivery", res);
-    const delivery = await res.json();
-    return delivery.kind === "notification" ? { ...delivery, message: `${delivery.message}
-Inbox delivery is asynchronous; use claim_goal/get_goal to collect durable answers. Do not poll this Notification.` } : delivery;
+    return await res.json();
   };
   const settled = (d) => d.kind === "notification" || d.state === "closed" || d.answers.length > 0 || d.entries.some((e) => e.kind === "contribution");
   if (opts.waits === false) return read(opts.signal);
@@ -13784,7 +13788,7 @@ async function subscribeWake(onNudge, opts = {}) {
 
 // src/main.ts
 var import_qrcode = __toESM(require_lib(), 1);
-import { homedir as homedir7, hostname } from "os";
+import { homedir as homedir8, hostname } from "os";
 
 // src/harness/catalog.ts
 import { spawnSync } from "child_process";
@@ -13816,6 +13820,8 @@ var CATALOG = [
     name: "agy",
     label: "Antigravity",
     cli: "agy",
+    // `agy` has no ACP mode; its adapter ships inside the harness (`harness/agy-acp.ts`).
+    adapter: "paigy-agy-acp",
     authProbe: ["agy", "help"],
     loginHint: "Install and set up Antigravity (`agy`).",
     installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
@@ -13876,8 +13882,8 @@ function detectAll(deps = {}) {
 
 // src/host.ts
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -13922,6 +13928,62 @@ function resolveWakeDir(pinned, deps) {
   return listWorkspaces(deps)[0];
 }
 
+// src/owner.ts
+import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join4 } from "path";
+var HEAD_BYTES = 64e3;
+function readHead(file) {
+  const fd = openSync2(file, "r");
+  try {
+    const buf = Buffer.alloc(HEAD_BYTES);
+    const n = readSync(fd, buf, 0, HEAD_BYTES, 0);
+    return buf.subarray(0, n).toString("utf8");
+  } finally {
+    closeSync2(fd);
+  }
+}
+function ownerSession(slot, deps = {}) {
+  const m = /^session:([0-9a-f]{8})$/.exec(slot);
+  if (!m) return null;
+  const prefix = m[1];
+  const root = deps.projectsDir ?? join4(homedir4(), ".claude", "projects");
+  const list = deps.list ?? ((dir) => readdirSync(dir));
+  const head = deps.head ?? readHead;
+  let folders;
+  try {
+    folders = list(root);
+  } catch {
+    return null;
+  }
+  for (const folder of folders) {
+    let files;
+    try {
+      files = list(join4(root, folder));
+    } catch {
+      continue;
+    }
+    const file = files.find((f) => f.startsWith(prefix) && f.endsWith(".jsonl"));
+    if (!file) continue;
+    let text;
+    try {
+      text = head(join4(root, folder, file));
+    } catch {
+      continue;
+    }
+    for (const line of text.split("\n")) {
+      try {
+        const row = JSON.parse(line);
+        if (typeof row.cwd === "string" && typeof row.sessionId === "string" && row.sessionId.startsWith(prefix)) {
+          return { sessionId: row.sessionId, cwd: row.cwd };
+        }
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride2 = /* @__PURE__ */ Symbol("Let zodToJsonSchema decide on which parser to use");
 var defaultOptions2 = {
@@ -15266,6 +15328,9 @@ var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
 var CONTACT_DESCRIPTION2 = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
+  /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+   *  rings"). Omit it and the brain writes one at admission from the outcome. */
+  title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
   /** A past conversation this Goal should be read against — History's "new session from this"
@@ -15285,11 +15350,14 @@ var CreateGoalSchema2 = external_exports.object({
 var CreateGoalToolSchema2 = CreateGoalSchema2.extend({
   idempotencyKey: CreateGoalSchema2.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
 }).strict();
-var CREATE_GOAL_DESCRIPTION2 = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+var CREATE_GOAL_DESCRIPTION2 = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema2 = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
     outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+    /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+     *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+    title: external_exports.string().trim().min(1).max(80).nullable().optional(),
     ownerParticipant: external_exports.string().trim().min(1).optional(),
     parentGoalId: external_exports.string().uuid().nullable().optional(),
     dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -15305,10 +15373,10 @@ var UpdateGoalSchema2 = external_exports.object({
 var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend({ goalId: external_exports.string().uuid() }).strict();
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
-var GET_GOAL_DESCRIPTION2 = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the new revision and a prose summary.";
-var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
 var GetThreadSchema2 = external_exports.object({
   parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -15344,6 +15412,7 @@ function entryWords(entry) {
   }
   return entry.sources.map((source) => source.text).join("\n");
 }
+var LIVE_MS2 = 3 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -16125,7 +16194,19 @@ var QueueQuestionSchema2 = external_exports.object({
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: external_exports.string().nullable().default(null)
+  answer: external_exports.string().nullable().default(null),
+  /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+   *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+   *  this is the field they agree through rather than each re-deriving it from the row it
+   *  arrived under. Required because the API projects it on every need it sends. */
+  goalId: external_exports.string(),
+  /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+   *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+   *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+   *  gate at all. */
+  blocked: external_exports.boolean().default(false)
 });
 var QueueItemSchema2 = external_exports.object({
   id: external_exports.string(),
@@ -16262,25 +16343,6 @@ var DeliveryConfigSchema2 = external_exports.object({
    *  carries credentials; only a `poll` registration can come back with null here. */
   realtime: external_exports.object({ url: external_exports.string(), anonKey: external_exports.string() }).nullable()
 });
-var StatusSchema2 = external_exports.object({
-  name: external_exports.string(),
-  sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
-  /** A phone is registered for push/ring (any push token on the account). */
-  phone: external_exports.boolean(),
-  /** HOW MANY THINGS ARE WAITING ON THIS IDENTITY — replies it never collected and requests
-   *  it never picked up. THE SAME NUMBER the harness's wake gate reads
-   *  (`pendingSummary.unacknowledged`), from the same function, because a statusline saying
-   *  zero while the sweep sees one is two ideas of "waiting".
-   *
-   *  Why it is here at all (owner, 2026-09-07): nothing can interrupt an idle agent process
-   *  that nobody spawned, so a terminal session only learns of work by asking. The harness
-   *  used to paper over that by spawning a SECOND process on the identity; now it stands
-   *  back, correctly, and the person sitting at the terminal is the one who can act. A
-   *  coffee-beans request sat unread for three days.
-   *
-   *  Optional: an older API sends no field, and the statusline then renders exactly as before. */
-  waiting: external_exports.number().int().nonnegative().optional()
-});
 var EnvelopeRecipientSchema2 = external_exports.object({
   keyId: external_exports.string(),
   epk: external_exports.string(),
@@ -16433,7 +16495,7 @@ function sameTail(a, b) {
 // src/harness/session.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 import { resolve as resolve2, delimiter as delimiter2 } from "path";
 
 // src/harness/acp.ts
@@ -16443,15 +16505,19 @@ function optionFor(options, decision) {
   return options.find((o) => o.kind === want)?.optionId ?? null;
 }
 function createAcpDriver(opts) {
-  return new AcpDriver(opts.cwd, opts.mode);
+  return new AcpDriver(opts.cwd, opts.mode, opts.resume);
 }
 var AcpDriver = class {
-  constructor(cwd, mode) {
+  /** `resume`: the id of an existing session to continue rather than open a new one (#1637) —
+   *  the session a bound identity belongs to, so the process this drives IS its holder. */
+  constructor(cwd, mode, resume) {
     this.cwd = cwd;
     this.mode = mode;
+    this.resume = resume;
   }
   cwd;
   mode;
+  resume;
   nextId = 1;
   initId;
   sessionNewId;
@@ -16535,15 +16601,15 @@ var AcpDriver = class {
       this.sessionNewId = this.nextId++;
       return {
         events: [],
-        writes: [frame2({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
+        writes: [frame2(this.resume ? { id: this.sessionNewId, method: "session/resume", params: { sessionId: this.resume, cwd: this.cwd, mcpServers: [] } } : { id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
       };
     }
     if (msg.id === this.sessionNewId) {
       this.sessionNewId = void 0;
-      const sessionId2 = msg.result?.sessionId;
+      const sessionId2 = msg.error ? void 0 : msg.result?.sessionId ?? this.resume;
       if (!sessionId2) {
         return {
-          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
+          events: [{ kind: "error", message: `${this.resume ? "session/resume" : "session/new"} failed: ${msg.error?.message ?? "no sessionId"}` }],
           writes: []
         };
       }
@@ -16657,7 +16723,7 @@ var frame2 = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
 var ADAPTER_BIN = {
   claude: "claude-agent-acp",
   codex: "codex-acp",
-  agy: "agy"
+  agy: "paigy-agy-acp"
 };
 function splitLines(buffer, chunk) {
   const combined = buffer + chunk;
@@ -16666,7 +16732,7 @@ function splitLines(buffer, chunk) {
   return { lines: parts.filter((l) => l.trim()), rest };
 }
 function startSession(opts) {
-  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir4()));
+  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir5()));
   if (!existsSync4(cwd)) {
     queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
   }
@@ -16679,7 +16745,8 @@ function startSession(opts) {
     env: {
       ...process.env,
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
-      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
+      ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
+      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {}
     },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -16699,7 +16766,7 @@ function startSession(opts) {
     opts.onEvent({ kind: "error", message: e.message });
     opts.onExit?.();
   });
-  const driver = createAcpDriver({ cwd, mode: opts.mode });
+  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.resume ? { resume: opts.resume } : {} });
   let buffer = "";
   child.stdout?.on("data", (chunk) => {
     const { lines: lines2, rest } = splitLines(buffer, String(chunk));
@@ -16759,7 +16826,9 @@ async function step(session, state, rail) {
     unheard(brief2, state);
     if (ended(brief2.state)) await rail.update(brief2.goalId, { revision: brief2.revision, changes: { reviewed: true }, reason: "Typed into the session." });
     else state.goal = { id: brief2.goalId, revision: brief2.revision };
-    send(session, state, brief2.message);
+    const outcome = brief2.outcome?.trim() ?? "";
+    const said = (brief2.entries ?? []).map((e) => entryWords(e).trim()).filter((w) => w && w.toLowerCase() !== outcome.toLowerCase());
+    send2(session, state, [outcome, ...said].filter(Boolean).join("\n\n"));
     return;
   }
   const brief = await rail.read(state.goal.id);
@@ -16778,9 +16847,9 @@ async function step(session, state, rail) {
   }
   if (state.asks?.size || !state.resting) return;
   const words2 = unheard(brief, state);
-  if (words2.length) send(session, state, words2.join("\n\n"));
+  if (words2.length) send2(session, state, words2.join("\n\n"));
 }
-function send(session, state, text) {
+function send2(session, state, text) {
   state.resting = false;
   session.send(text);
 }
@@ -16913,7 +16982,7 @@ function runHarness(opts) {
   let tail = [];
   const state = { resting: true };
   let session = null;
-  const rail = railFor({ token: opts.token });
+  const rail = railFor({ token: opts.token, ...opts.resume ? { reach: reachAs(opts.resume) } : {} });
   async function handle(event) {
     if (event.kind === "error") {
       opts.log(`\u26A0 ${event.message}`);
@@ -16961,6 +17030,7 @@ function runHarness(opts) {
     cwd: opts.cwd,
     mode: opts.mode,
     ...opts.token ? { token: opts.token } : {},
+    ...opts.resume ? { resume: opts.resume } : {},
     ...opts.bin ? { bin: opts.bin } : {},
     ...opts.onExit ? { onExit: opts.onExit } : {},
     onEvent: (event) => void handle(event).catch((err) => opts.log(`\u26A0 ${err.message}`))
@@ -16993,7 +17063,7 @@ function runHarness(opts) {
 // src/update.ts
 import { execFile } from "child_process";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join4 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { promisify } from "util";
 var SERVICE_LABEL = "ai.paigy.harness";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
@@ -17016,7 +17086,7 @@ async function latestVersion() {
 }
 async function install(version) {
   const bin = dirname3(process.execPath);
-  await promisify(execFile)(join4(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+  await promisify(execFile)(join5(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
     env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
     timeout: 5 * 6e4
   });
@@ -17050,7 +17120,7 @@ function selfUpdater(deps) {
 }
 
 // src/host.ts
-var HOST_FILE = join5(homedir5(), ".paigy", "host.json");
+var HOST_FILE = join6(homedir6(), ".paigy", "host.json");
 function readHostState() {
   try {
     const s = JSON.parse(readFileSync3(HOST_FILE, "utf8"));
@@ -17074,8 +17144,8 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-async function slotHasWaitingWork(token) {
-  return (await checkReplies({ token })).deliveries.length > 0;
+async function slotHasWaitingWork(token, session) {
+  return (await checkReplies({ token, ...session ? { reach: reachAs(session) } : {} })).deliveries.length > 0;
 }
 var PRESENCE_FRESH_MS = 3 * 6e4;
 function wakeAction(live, now, serverSeenAt) {
@@ -17088,6 +17158,7 @@ function startHost(opts) {
   const asHost = { token: opts.token };
   const refreshIdentities = async () => {
     for (const slot of listSlots()) {
+      if (slot === "Desktop") continue;
       const token = readToken(slot);
       if (!token) continue;
       const me = await whoAmI({ token }).catch(() => null);
@@ -17167,9 +17238,11 @@ function startHost(opts) {
       if (wakeAction(!!live, Date.now(), seenByServer) === "skip") return;
       const token = readToken(slot);
       if (!token) return;
-      const workspace = resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
+      const owner = ownerSession(slot);
+      if (owner && !allowed(owner.cwd, opts.wsDeps)) return;
+      const workspace = owner?.cwd ?? resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
       if (!workspace) return;
-      if (!await slotHasWaitingWork(token).catch(() => false)) return;
+      if (!await slotHasWaitingWork(token, owner?.sessionId).catch(() => false)) return;
       const label = slotName(slot) ?? slot;
       const log2 = (line) => opts.log(`[${label}] ${line}`);
       const run = runHarness({
@@ -17178,6 +17251,7 @@ function startHost(opts) {
         mode: "bypass",
         prompt: "",
         token,
+        ...owner ? { resume: owner.sessionId } : {},
         // A dead run must not squat the slot — evict so the next wake can respawn.
         onExit: () => {
           runs.delete(key);
@@ -17188,7 +17262,7 @@ function startHost(opts) {
       runs.set(key, { run, label, token });
       void heartbeat(void 0, { token }).catch(() => {
       });
-      opts.log(`\u25B6 woke ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
+      opts.log(`\u25B6 ${owner ? "resumed" : "woke"} ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
     }
   }
   const listening = /* @__PURE__ */ new Map();
@@ -17497,7 +17571,7 @@ function staleWhy(note) {
 
 // src/triage/judge.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 import { delimiter as delimiter3 } from "path";
 var PRIVACY = {
   ollama: "never leaves this machine",
@@ -17601,7 +17675,7 @@ async function judgeFor(asked, deps = {}) {
       const out = spawnSync2(bin, runner.argv(null), {
         input: prompt,
         encoding: "utf8",
-        cwd: homedir6(),
+        cwd: homedir7(),
         timeout: RUN_TIMEOUT_MS,
         maxBuffer: 32 * 1024 * 1024,
         env: { ...process.env, PATH: [process.env["PATH"], ...probeDirs()].filter(Boolean).join(delimiter3) }
@@ -17899,7 +17973,7 @@ var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
 }
-var ICON = join6(here, "..", "assets", "icon.png");
+var ICON = join7(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
     // Sized for the working log, which is now the window's centerpiece; the layout is a
@@ -17911,9 +17985,9 @@ function createWindow() {
     minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
-    webPreferences: { preload: join6(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
+    webPreferences: { preload: join7(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
   });
-  void win.loadFile(join6(here, "..", "renderer", "index.html"));
+  void win.loadFile(join7(here, "..", "renderer", "index.html"));
 }
 var host = null;
 app.whenReady().then(() => {
@@ -17982,7 +18056,7 @@ ipcMain.handle("paigy:agent", async (_e, name) => {
 });
 ipcMain.handle("paigy:agent-log", (_e, name) => {
   try {
-    const all = readFileSync4(join6(homedir7(), ".paigy", "host.log"), "utf8").split("\n");
+    const all = readFileSync4(join7(homedir8(), ".paigy", "host.log"), "utf8").split("\n");
     const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
     return mine.slice(-500).join("\n");
   } catch {

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@paigy/harness",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "description": "Run Claude Code / Codex on this machine, bridged to Paigy — launchable from your phone.",
   "license": "MIT",
   "type": "module",
   "main": "dist/main.js",
   "bin": {
     "paigy-harness": "dist/cli.js",
-    "paigy": "dist/cli.js"
+    "paigy": "dist/cli.js",
+    "paigy-agy-acp": "dist/agy-acp.js"
   },
   "scripts": {
     "build": "tsup",
@@ -32,6 +33,7 @@
   },
   "files": [
     "dist/cli.js",
+    "dist/agy-acp.js",
     "README.md"
   ],
   "publishConfig": {