@paigy/harness 0.3.11 → 0.3.13

package/dist/cli.js

@@ -22759,11 +22759,17 @@ function sessionId() {
   return SESSION_ID;
 }
 async function reach(url, init) {
+  return send(url, init, SESSION_ID);
+}
+function reachAs(session) {
+  return (url, init) => send(url, init, session);
+}
+async function send(url, init, session) {
   try {
     const headers = {
       ...init?.headers,
       "x-paigy-instance": INSTANCE_ID,
-      "x-paigy-session": SESSION_ID
+      "x-paigy-session": session
     };
     return await fetch(url, { ...init, headers, dispatcher: await proxy() });
   } catch (e) {
@@ -23921,14 +23927,14 @@ async function acceptTriage(proposalId, body, opts = {}) {
 async function contact(input, opts = {}) {
   const parsed = ContactSchema.parse(input);
   opts.signal?.throwIfAborted();
-  const send2 = opts.reach ?? reach;
+  const send22 = opts.reach ?? reach;
   const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
   let deliveryId;
   if ("deliveryId" in parsed) deliveryId = parsed.deliveryId;
   else {
     if (!opts.reach && readKeyFile()?.e2ee) throw new Error("Goal contact does not support E2EE yet; refusing to send plaintext.");
     const shaped = deriveAsk(NotifyRequestSchema.parse({ ask: parsed.ask, waiting: parsed.waiting, options: parsed.options }));
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
       method: "POST",
       headers,
       signal: opts.signal,
@@ -23940,7 +23946,7 @@ async function contact(input, opts = {}) {
     if (!deliveryId) throw new Error("Goal contact returned no Delivery identity");
   }
   const read = async (signal2) => {
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
     if (!res.ok) await fail("read_delivery", res);
     return await res.json();
   };
@@ -24062,7 +24068,7 @@ async function subscribeWake(onNudge, opts = {}) {
     }
   };
 }
-var import_undici, require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, StartContactSchema, ContactSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, CreateGoalToolSchema, CREATE_GOAL_DESCRIPTION, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, GetGoalSchema, GET_GOAL_DESCRIPTION, UPDATE_GOAL_DESCRIPTION, CLAIM_GOAL_DESCRIPTION, CHECK_REPLIES_DESCRIPTION, CheckRepliesSchema, GetThreadSchema, GET_THREAD_DESCRIPTION, SearchThreadsSchema, SEARCH_THREADS_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, QueueQuestionSchema, QueueItemSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenSchema, SupportRequestSchema, NotificationFeedbackKindSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, ApiError, AWAIT_WINDOW_MS, tokenOverride, authToken, HEARTBEAT_MS, RETRY_MS, JOIN, lines;
+var import_undici, require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, StartContactSchema, ContactSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, CreateGoalToolSchema, CREATE_GOAL_DESCRIPTION, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, GetGoalSchema, GET_GOAL_DESCRIPTION, UPDATE_GOAL_DESCRIPTION, CLAIM_GOAL_DESCRIPTION, CHECK_REPLIES_DESCRIPTION, CheckRepliesSchema, GetThreadSchema, GET_THREAD_DESCRIPTION, SearchThreadsSchema, SEARCH_THREADS_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, LIVE_MS, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, QueueQuestionSchema, QueueItemSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenSchema, SupportRequestSchema, NotificationFeedbackKindSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, ApiError, AWAIT_WINDOW_MS, tokenOverride, authToken, HEARTBEAT_MS, RETRY_MS, JOIN, lines;
 var init_dist = __esm({
   "../../packages/sdk/dist/index.js"() {
     "use strict";
@@ -26735,6 +26741,9 @@ var init_dist = __esm({
     CONTACT_DESCRIPTION = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
     CreateGoalSchema = external_exports.object({
       outcome: external_exports.string().trim().min(1).max(1e4),
+      /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+       *  rings"). Omit it and the brain writes one at admission from the outcome. */
+      title: external_exports.string().trim().min(1).max(80).optional(),
       ownerParticipant: external_exports.string().trim().min(1).optional(),
       idempotencyKey: external_exports.string().trim().min(1).max(200),
       /** A past conversation this Goal should be read against — History's "new session from this"
@@ -26754,11 +26763,14 @@ var init_dist = __esm({
     CreateGoalToolSchema = CreateGoalSchema.extend({
       idempotencyKey: CreateGoalSchema.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
     }).strict();
-    CREATE_GOAL_DESCRIPTION = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+    CREATE_GOAL_DESCRIPTION = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
     UpdateGoalSchema = external_exports.object({
       revision: external_exports.number().int().positive(),
       changes: external_exports.object({
         outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+        /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+         *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+        title: external_exports.string().trim().min(1).max(80).nullable().optional(),
         ownerParticipant: external_exports.string().trim().min(1).optional(),
         parentGoalId: external_exports.string().uuid().nullable().optional(),
         dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -26775,7 +26787,7 @@ var init_dist = __esm({
     ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
     GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
     GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-    UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+    UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
     CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
     CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
     CheckRepliesSchema = external_exports.object({}).strict();
@@ -26798,6 +26810,7 @@ var init_dist = __esm({
       { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(UpdateGoalToolSchema) }
     ];
     AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
+    LIVE_MS = 3 * 6e4;
     ContextSchema = external_exports.object({
       title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
       description: external_exports.array(external_exports.string().min(1)).describe(
@@ -27579,7 +27592,19 @@ var init_dist = __esm({
       /** The ruling in the person's own words, from the contribution that replied — not the
        *  option id, which is not something anyone reads back. Null while it is open, and null
        *  for a settled question whose reply carried nothing readable. */
-      answer: external_exports.string().nullable().default(null)
+      answer: external_exports.string().nullable().default(null),
+      /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+       *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+       *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+       *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+       *  this is the field they agree through rather than each re-deriving it from the row it
+       *  arrived under. Required because the API projects it on every need it sends. */
+      goalId: external_exports.string(),
+      /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+       *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+       *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+       *  gate at all. */
+      blocked: external_exports.boolean().default(false)
     });
     QueueItemSchema = external_exports.object({
       id: external_exports.string(),
@@ -32456,7 +32481,7 @@ var require_lib = __commonJS({
 
 // src/triage/judge.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 import { delimiter as delimiter3 } from "path";
 function pickOllamaModel(tags) {
   if (tags.length === 0) return null;
@@ -32539,7 +32564,7 @@ async function judgeFor(asked, deps = {}) {
       const out = spawnSync2(bin, runner.argv(null), {
         input: prompt,
         encoding: "utf8",
-        cwd: homedir6(),
+        cwd: homedir7(),
         timeout: RUN_TIMEOUT_MS,
         maxBuffer: 32 * 1024 * 1024,
         env: { ...process.env, PATH: [process.env["PATH"], ...probeDirs()].filter(Boolean).join(delimiter3) }
@@ -33129,8 +33154,11 @@ var import_qrcode = __toESM(require_lib(), 1);
 import { hostname } from "os";
 import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
 import { execFile as execFile2, execSync } from "child_process";
-import { homedir as homedir7 } from "os";
-import { join as join6 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join7 } from "path";
+
+// src/run.ts
+init_dist();
 
 // src/harness/session.ts
 import { spawn } from "child_process";
@@ -33145,15 +33173,19 @@ function optionFor(options, decision) {
   return options.find((o) => o.kind === want)?.optionId ?? null;
 }
 function createAcpDriver(opts) {
-  return new AcpDriver(opts.cwd, opts.mode);
+  return new AcpDriver(opts.cwd, opts.mode, opts.resume);
 }
 var AcpDriver = class {
-  constructor(cwd, mode) {
+  /** `resume`: the id of an existing session to continue rather than open a new one (#1637) —
+   *  the session a bound identity belongs to, so the process this drives IS its holder. */
+  constructor(cwd, mode, resume) {
     this.cwd = cwd;
     this.mode = mode;
+    this.resume = resume;
   }
   cwd;
   mode;
+  resume;
   nextId = 1;
   initId;
   sessionNewId;
@@ -33237,15 +33269,15 @@ var AcpDriver = class {
       this.sessionNewId = this.nextId++;
       return {
         events: [],
-        writes: [frame2({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
+        writes: [frame2(this.resume ? { id: this.sessionNewId, method: "session/resume", params: { sessionId: this.resume, cwd: this.cwd, mcpServers: [] } } : { id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
       };
     }
     if (msg.id === this.sessionNewId) {
       this.sessionNewId = void 0;
-      const sessionId2 = msg.result?.sessionId;
+      const sessionId2 = msg.error ? void 0 : msg.result?.sessionId ?? this.resume;
       if (!sessionId2) {
         return {
-          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
+          events: [{ kind: "error", message: `${this.resume ? "session/resume" : "session/new"} failed: ${msg.error?.message ?? "no sessionId"}` }],
           writes: []
         };
       }
@@ -33382,7 +33414,8 @@ function startSession(opts) {
     env: {
       ...process.env,
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
-      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
+      ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
+      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {}
     },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -33402,7 +33435,7 @@ function startSession(opts) {
     opts.onEvent({ kind: "error", message: e.message });
     opts.onExit?.();
   });
-  const driver = createAcpDriver({ cwd, mode: opts.mode });
+  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.resume ? { resume: opts.resume } : {} });
   let buffer = "";
   child.stdout?.on("data", (chunk) => {
     const { lines: lines2, rest } = splitLines(buffer, String(chunk));
@@ -34784,6 +34817,9 @@ var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
 var CONTACT_DESCRIPTION2 = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
+  /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+   *  rings"). Omit it and the brain writes one at admission from the outcome. */
+  title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
   /** A past conversation this Goal should be read against — History's "new session from this"
@@ -34803,11 +34839,14 @@ var CreateGoalSchema2 = external_exports.object({
 var CreateGoalToolSchema2 = CreateGoalSchema2.extend({
   idempotencyKey: CreateGoalSchema2.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
 }).strict();
-var CREATE_GOAL_DESCRIPTION2 = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+var CREATE_GOAL_DESCRIPTION2 = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema2 = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
     outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+    /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+     *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+    title: external_exports.string().trim().min(1).max(80).nullable().optional(),
     ownerParticipant: external_exports.string().trim().min(1).optional(),
     parentGoalId: external_exports.string().uuid().nullable().optional(),
     dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -34824,7 +34863,7 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
 var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
 var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
@@ -34862,6 +34901,7 @@ function entryWords(entry) {
   }
   return entry.sources.map((source) => source.text).join("\n");
 }
+var LIVE_MS2 = 3 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -35643,7 +35683,19 @@ var QueueQuestionSchema2 = external_exports.object({
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: external_exports.string().nullable().default(null)
+  answer: external_exports.string().nullable().default(null),
+  /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+   *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+   *  this is the field they agree through rather than each re-deriving it from the row it
+   *  arrived under. Required because the API projects it on every need it sends. */
+  goalId: external_exports.string(),
+  /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+   *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+   *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+   *  gate at all. */
+  blocked: external_exports.boolean().default(false)
 });
 var QueueItemSchema2 = external_exports.object({
   id: external_exports.string(),
@@ -35968,7 +36020,7 @@ async function step(session, state, rail) {
     else state.goal = { id: brief2.goalId, revision: brief2.revision };
     const outcome = brief2.outcome?.trim() ?? "";
     const said = (brief2.entries ?? []).map((e) => entryWords(e).trim()).filter((w) => w && w.toLowerCase() !== outcome.toLowerCase());
-    send(session, state, [outcome, ...said].filter(Boolean).join("\n\n"));
+    send2(session, state, [outcome, ...said].filter(Boolean).join("\n\n"));
     return;
   }
   const brief = await rail.read(state.goal.id);
@@ -35987,9 +36039,9 @@ async function step(session, state, rail) {
   }
   if (state.asks?.size || !state.resting) return;
   const words2 = unheard(brief, state);
-  if (words2.length) send(session, state, words2.join("\n\n"));
+  if (words2.length) send2(session, state, words2.join("\n\n"));
 }
-function send(session, state, text) {
+function send2(session, state, text) {
   state.resting = false;
   session.send(text);
 }
@@ -36122,7 +36174,7 @@ function runHarness(opts) {
   let tail = [];
   const state = { resting: true };
   let session = null;
-  const rail = railFor({ token: opts.token });
+  const rail = railFor({ token: opts.token, ...opts.resume ? { reach: reachAs(opts.resume) } : {} });
   async function handle(event) {
     if (event.kind === "error") {
       opts.log(`\u26A0 ${event.message}`);
@@ -36170,6 +36222,7 @@ function runHarness(opts) {
     cwd: opts.cwd,
     mode: opts.mode,
     ...opts.token ? { token: opts.token } : {},
+    ...opts.resume ? { resume: opts.resume } : {},
     ...opts.bin ? { bin: opts.bin } : {},
     ...opts.onExit ? { onExit: opts.onExit } : {},
     onEvent: (event) => void handle(event).catch((err) => opts.log(`\u26A0 ${err.message}`))
@@ -36203,8 +36256,8 @@ function runHarness(opts) {
 init_dist();
 init_catalog();
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -36243,10 +36296,66 @@ function resolveWakeDir(pinned, deps) {
   return listWorkspaces(deps)[0];
 }
 
+// src/owner.ts
+import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join4 } from "path";
+var HEAD_BYTES = 64e3;
+function readHead(file) {
+  const fd = openSync2(file, "r");
+  try {
+    const buf = Buffer.alloc(HEAD_BYTES);
+    const n = readSync(fd, buf, 0, HEAD_BYTES, 0);
+    return buf.subarray(0, n).toString("utf8");
+  } finally {
+    closeSync2(fd);
+  }
+}
+function ownerSession(slot, deps = {}) {
+  const m = /^session:([0-9a-f]{8})$/.exec(slot);
+  if (!m) return null;
+  const prefix = m[1];
+  const root = deps.projectsDir ?? join4(homedir5(), ".claude", "projects");
+  const list = deps.list ?? ((dir) => readdirSync(dir));
+  const head = deps.head ?? readHead;
+  let folders;
+  try {
+    folders = list(root);
+  } catch {
+    return null;
+  }
+  for (const folder of folders) {
+    let files;
+    try {
+      files = list(join4(root, folder));
+    } catch {
+      continue;
+    }
+    const file = files.find((f) => f.startsWith(prefix) && f.endsWith(".jsonl"));
+    if (!file) continue;
+    let text;
+    try {
+      text = head(join4(root, folder, file));
+    } catch {
+      continue;
+    }
+    for (const line of text.split("\n")) {
+      try {
+        const row = JSON.parse(line);
+        if (typeof row.cwd === "string" && typeof row.sessionId === "string" && row.sessionId.startsWith(prefix)) {
+          return { sessionId: row.sessionId, cwd: row.cwd };
+        }
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+
 // src/update.ts
 import { execFile } from "child_process";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join4 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { promisify } from "util";
 var SERVICE_LABEL = "ai.paigy.harness";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
@@ -36259,9 +36368,13 @@ function newer(latest, current) {
   for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
   return false;
 }
+var WAIT_CAP_MS = 6 * 36e5;
 function updateAction(o) {
   if (!o.service || !o.latest || o.latest === o.failed || !newer(o.latest, o.current)) return "none";
-  return o.sessions > 0 ? "wait" : "install";
+  if (o.sessions <= 0) return "install";
+  const working = o.working ?? o.sessions;
+  if (working > 0) return "wait";
+  return (o.waited ?? 0) >= WAIT_CAP_MS ? "install" : "wait";
 }
 async function latestVersion() {
   const res = await fetch(REGISTRY, { signal: AbortSignal.timeout(1e4) });
@@ -36269,7 +36382,7 @@ async function latestVersion() {
 }
 async function install(version) {
   const bin = dirname3(process.execPath);
-  await promisify(execFile)(join4(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+  await promisify(execFile)(join5(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
     env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
     timeout: 5 * 6e4
   });
@@ -36280,6 +36393,7 @@ function selfUpdater(deps) {
   let checkedAt = -Infinity;
   let failed;
   let waiting = false;
+  let waitingSince = null;
   return async () => {
     if (!service) return;
     const now = (deps.now ?? Date.now)();
@@ -36287,9 +36401,25 @@ function selfUpdater(deps) {
       checkedAt = now;
       latest = await (deps.latest ?? latestVersion)().catch(() => latest);
     }
-    const action = updateAction({ current: VERSION, latest, service, sessions: deps.sessions(), failed });
-    if (action === "wait" && !waiting) deps.log(`\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running`);
+    const sessions = deps.sessions();
+    const working = deps.working?.();
+    if (latest && newer(latest, VERSION) && latest !== failed && waitingSince === null) waitingSince = now;
+    const action = updateAction({
+      current: VERSION,
+      latest,
+      service,
+      sessions,
+      failed,
+      ...working === void 0 ? {} : { working },
+      waited: waitingSince === null ? 0 : now - waitingSince
+    });
+    if (action === "wait" && !waiting) {
+      deps.log(working ? `\u21E1 @paigy/harness ${latest} is out \u2014 updating once the turn in flight finishes` : `\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running (at most ${Math.round(WAIT_CAP_MS / 36e5)}h)`);
+    }
     waiting = action === "wait";
+    if (action === "install" && sessions > 0) {
+      deps.log(`\u21E1 @paigy/harness ${latest} is out and ${sessions} resting session(s) have held it for ${Math.round((now - (waitingSince ?? now)) / 36e5)}h \u2014 restarting over them`);
+    }
     if (action !== "install" || !latest) return;
     try {
       await (deps.install ?? install)(latest);
@@ -36303,14 +36433,14 @@ function selfUpdater(deps) {
 }
 
 // src/host.ts
-var HOST_FILE = join5(homedir5(), ".paigy", "host.json");
+var HOST_FILE = join6(homedir6(), ".paigy", "host.json");
 var runKey = (slot) => `slot:${slot}`;
 var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-async function slotHasWaitingWork(token) {
-  return (await checkReplies({ token })).deliveries.length > 0;
+async function slotHasWaitingWork(token, session) {
+  return (await checkReplies({ token, ...session ? { reach: reachAs(session) } : {} })).deliveries.length > 0;
 }
 var PRESENCE_FRESH_MS = 3 * 6e4;
 function wakeAction(live, now, serverSeenAt) {
@@ -36334,7 +36464,12 @@ function startHost(opts) {
       }
     }
   };
-  const update = selfUpdater({ sessions: () => runs.size, log: opts.log });
+  const update = selfUpdater({
+    sessions: () => runs.size,
+    // A turn in flight blocks the update; a session merely standing by does not hold it forever.
+    working: () => [...runs.values()].filter((r) => r.run.working()).length,
+    log: opts.log
+  });
   const beat = () => {
     void refreshIdentities();
     void update().catch(() => {
@@ -36403,9 +36538,11 @@ function startHost(opts) {
       if (wakeAction(!!live, Date.now(), seenByServer) === "skip") return;
       const token = readToken(slot);
       if (!token) return;
-      const workspace = resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
+      const owner = ownerSession(slot);
+      if (owner && !allowed(owner.cwd, opts.wsDeps)) return;
+      const workspace = owner?.cwd ?? resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
       if (!workspace) return;
-      if (!await slotHasWaitingWork(token).catch(() => false)) return;
+      if (!await slotHasWaitingWork(token, owner?.sessionId).catch(() => false)) return;
       const label = slotName(slot) ?? slot;
       const log = (line) => opts.log(`[${label}] ${line}`);
       const run = runHarness({
@@ -36414,6 +36551,7 @@ function startHost(opts) {
         mode: "bypass",
         prompt: "",
         token,
+        ...owner ? { resume: owner.sessionId } : {},
         // A dead run must not squat the slot — evict so the next wake can respawn.
         onExit: () => {
           runs.delete(key);
@@ -36424,7 +36562,7 @@ function startHost(opts) {
       runs.set(key, { run, label, token });
       void heartbeat(void 0, { token }).catch(() => {
       });
-      opts.log(`\u25B6 woke ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
+      opts.log(`\u25B6 ${owner ? "resumed" : "woke"} ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
     }
   }
   const listening = /* @__PURE__ */ new Map();
@@ -36656,7 +36794,7 @@ async function pairThisMachine() {
   }
 }
 function forwardCodexThreadId() {
-  const cfg = join6(process.env.CODEX_HOME || join6(homedir7(), ".codex"), "config.toml");
+  const cfg = join7(process.env.CODEX_HOME || join7(homedir8(), ".codex"), "config.toml");
   if (!existsSync5(cfg)) return;
   const text = readFileSync4(cfg, "utf8");
   const head = "[mcp_servers.paigy]\n";
@@ -36758,7 +36896,7 @@ async function main() {
     const wsDeps = { file: workspacesFile() };
     for (const dir of parsed.grant) addWorkspace(dir, wsDeps);
     if (!listWorkspaces(wsDeps).length) {
-      const guess = join6(homedir7(), "projects");
+      const guess = join7(homedir8(), "projects");
       if (existsSync5(guess)) {
         addWorkspace(guess, wsDeps);
         console.log(`\u2713 workspace granted: ${guess} (change with --grant DIR)`);
@@ -36799,7 +36937,7 @@ async function main() {
       }
     }
     try {
-      const settings = join6(homedir7(), ".claude", "settings.json");
+      const settings = join7(homedir8(), ".claude", "settings.json");
       if (which("claude") && existsSync5(settings)) {
         const cfg = JSON.parse(readFileSync4(settings, "utf8"));
         if (!cfg["statusLine"]) {
@@ -36857,13 +36995,13 @@ async function main() {
   <key>SoftResourceLimits</key><dict>
     <key>NumberOfFiles</key><integer>65536</integer>
   </dict>
-  <key>StandardOutPath</key><string>${join6(homedir7(), ".paigy", "host.log")}</string>
-  <key>StandardErrorPath</key><string>${join6(homedir7(), ".paigy", "host.log")}</string>
+  <key>StandardOutPath</key><string>${join7(homedir8(), ".paigy", "host.log")}</string>
+  <key>StandardErrorPath</key><string>${join7(homedir8(), ".paigy", "host.log")}</string>
 </dict></plist>
 `;
-    const dir = join6(homedir7(), "Library", "LaunchAgents");
+    const dir = join7(homedir8(), "Library", "LaunchAgents");
     mkdirSync3(dir, { recursive: true });
-    const path = join6(dir, `${SERVICE_LABEL}.plist`);
+    const path = join7(dir, `${SERVICE_LABEL}.plist`);
     writeFileSync4(path, plist);
     execSync(`launchctl unload ${path} 2>/dev/null; launchctl load ${path}`, { shell: "/bin/sh" });
     console.log(`\u2713 host installed as a login service (${path}) \u2014 logs at ~/.paigy/host.log`);
@@ -36886,7 +37024,7 @@ async function main() {
       process.exit(1);
     }
     const name = slotName(slot) ?? slot;
-    console.log(`\u2713 ${name} is handed off \u2014 wakes in ${cwd.replace(homedir7(), "~")}`);
+    console.log(`\u2713 ${name} is handed off \u2014 wakes in ${cwd.replace(homedir8(), "~")}`);
     if (!allowed(cwd, { file: workspacesFile() })) {
       console.log(`  \u26A0 that folder isn't on the allow-list, so wakes will land in the first granted`);
       console.log(`    workspace instead \u2014 add it in the desktop app, or: paigy-harness host --grant ${cwd}`);

package/dist/main.js

@@ -4580,7 +4580,7 @@ import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync4 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname4, join as join6 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
@@ -10915,11 +10915,17 @@ function sessionId() {
   return SESSION_ID;
 }
 async function reach(url, init) {
+  return send(url, init, SESSION_ID);
+}
+function reachAs(session) {
+  return (url, init) => send(url, init, session);
+}
+async function send(url, init, session) {
   try {
     const headers = {
       ...init?.headers,
       "x-paigy-instance": INSTANCE_ID,
-      "x-paigy-session": SESSION_ID
+      "x-paigy-session": session
     };
     return await fetch(url, { ...init, headers, dispatcher: await proxy() });
   } catch (e) {
@@ -12195,6 +12201,9 @@ var CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
 var CONTACT_DESCRIPTION = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
+  /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+   *  rings"). Omit it and the brain writes one at admission from the outcome. */
+  title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
   /** A past conversation this Goal should be read against — History's "new session from this"
@@ -12214,11 +12223,14 @@ var CreateGoalSchema = external_exports.object({
 var CreateGoalToolSchema = CreateGoalSchema.extend({
   idempotencyKey: CreateGoalSchema.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
 }).strict();
-var CREATE_GOAL_DESCRIPTION = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+var CREATE_GOAL_DESCRIPTION = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
     outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+    /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+     *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+    title: external_exports.string().trim().min(1).max(80).nullable().optional(),
     ownerParticipant: external_exports.string().trim().min(1).optional(),
     parentGoalId: external_exports.string().uuid().nullable().optional(),
     dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -12235,7 +12247,7 @@ var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({
 var ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
 var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
 var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema = external_exports.object({}).strict();
@@ -12258,6 +12270,7 @@ var AGENT_TOOLS = [
   { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(UpdateGoalToolSchema) }
 ];
 var AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
+var LIVE_MS = 3 * 6e4;
 var ContextSchema = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -13094,7 +13107,19 @@ var QueueQuestionSchema = external_exports.object({
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: external_exports.string().nullable().default(null)
+  answer: external_exports.string().nullable().default(null),
+  /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+   *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+   *  this is the field they agree through rather than each re-deriving it from the row it
+   *  arrived under. Required because the API projects it on every need it sends. */
+  goalId: external_exports.string(),
+  /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+   *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+   *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+   *  gate at all. */
+  blocked: external_exports.boolean().default(false)
 });
 var QueueItemSchema = external_exports.object({
   id: external_exports.string(),
@@ -13615,14 +13640,14 @@ async function dismissTriage(proposalId, opts = {}) {
 async function contact(input, opts = {}) {
   const parsed = ContactSchema.parse(input);
   opts.signal?.throwIfAborted();
-  const send2 = opts.reach ?? reach;
+  const send22 = opts.reach ?? reach;
   const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
   let deliveryId;
   if ("deliveryId" in parsed) deliveryId = parsed.deliveryId;
   else {
     if (!opts.reach && readKeyFile()?.e2ee) throw new Error("Goal contact does not support E2EE yet; refusing to send plaintext.");
     const shaped = deriveAsk(NotifyRequestSchema.parse({ ask: parsed.ask, waiting: parsed.waiting, options: parsed.options }));
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/goals/${parsed.goalIds[0]}/contact`, {
       method: "POST",
       headers,
       signal: opts.signal,
@@ -13634,7 +13659,7 @@ async function contact(input, opts = {}) {
     if (!deliveryId) throw new Error("Goal contact returned no Delivery identity");
   }
   const read = async (signal2) => {
-    const res = ensureAuthed(await send2(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
+    const res = ensureAuthed(await send22(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
     if (!res.ok) await fail("read_delivery", res);
     return await res.json();
   };
@@ -13763,7 +13788,7 @@ async function subscribeWake(onNudge, opts = {}) {
 
 // src/main.ts
 var import_qrcode = __toESM(require_lib(), 1);
-import { homedir as homedir7, hostname } from "os";
+import { homedir as homedir8, hostname } from "os";
 
 // src/harness/catalog.ts
 import { spawnSync } from "child_process";
@@ -13857,8 +13882,8 @@ function detectAll(deps = {}) {
 
 // src/host.ts
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir6 } from "os";
+import { join as join6 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -13903,6 +13928,62 @@ function resolveWakeDir(pinned, deps) {
   return listWorkspaces(deps)[0];
 }
 
+// src/owner.ts
+import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join4 } from "path";
+var HEAD_BYTES = 64e3;
+function readHead(file) {
+  const fd = openSync2(file, "r");
+  try {
+    const buf = Buffer.alloc(HEAD_BYTES);
+    const n = readSync(fd, buf, 0, HEAD_BYTES, 0);
+    return buf.subarray(0, n).toString("utf8");
+  } finally {
+    closeSync2(fd);
+  }
+}
+function ownerSession(slot, deps = {}) {
+  const m = /^session:([0-9a-f]{8})$/.exec(slot);
+  if (!m) return null;
+  const prefix = m[1];
+  const root = deps.projectsDir ?? join4(homedir4(), ".claude", "projects");
+  const list = deps.list ?? ((dir) => readdirSync(dir));
+  const head = deps.head ?? readHead;
+  let folders;
+  try {
+    folders = list(root);
+  } catch {
+    return null;
+  }
+  for (const folder of folders) {
+    let files;
+    try {
+      files = list(join4(root, folder));
+    } catch {
+      continue;
+    }
+    const file = files.find((f) => f.startsWith(prefix) && f.endsWith(".jsonl"));
+    if (!file) continue;
+    let text;
+    try {
+      text = head(join4(root, folder, file));
+    } catch {
+      continue;
+    }
+    for (const line of text.split("\n")) {
+      try {
+        const row = JSON.parse(line);
+        if (typeof row.cwd === "string" && typeof row.sessionId === "string" && row.sessionId.startsWith(prefix)) {
+          return { sessionId: row.sessionId, cwd: row.cwd };
+        }
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride2 = /* @__PURE__ */ Symbol("Let zodToJsonSchema decide on which parser to use");
 var defaultOptions2 = {
@@ -15247,6 +15328,9 @@ var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
 var CONTACT_DESCRIPTION2 = "Contact the user about exactly one existing Goal: pass goalIds:[goalId], ask, channel:'notification'|'call', and waiting:'none'|'hard'. Options supply choices. Notification returns immediately; collect durable answers with claim_goal/get_goal. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Continuation sends nothing and rereads the same durable evidence, including previously read answers. Entries retain authorship and provenance; accepted decisions are separate from quoted speech. Call state open does not mean ringing. Unsupported: soft waiting, multiple Goals/questions, outcome admission, and re-presentation of an existing request. Create a Goal explicitly first; never resend a pending ask to continue waiting.";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
+  /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
+   *  rings"). Omit it and the brain writes one at admission from the outcome. */
+  title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
   /** A past conversation this Goal should be read against — History's "new session from this"
@@ -15266,11 +15350,14 @@ var CreateGoalSchema2 = external_exports.object({
 var CreateGoalToolSchema2 = CreateGoalSchema2.extend({
   idempotencyKey: CreateGoalSchema2.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
 }).strict();
-var CREATE_GOAL_DESCRIPTION2 = "Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.";
+var CREATE_GOAL_DESCRIPTION2 = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: the owner must claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema2 = external_exports.object({
   revision: external_exports.number().int().positive(),
   changes: external_exports.object({
     outcome: external_exports.string().trim().min(1).max(1e4).optional(),
+    /** The work's NAME (#2115) — one to five words, how a person refers to it out loud. The
+     *  brain writes one at admission; this is the owner saying it better. Null clears it. */
+    title: external_exports.string().trim().min(1).max(80).nullable().optional(),
     ownerParticipant: external_exports.string().trim().min(1).optional(),
     parentGoalId: external_exports.string().uuid().nullable().optional(),
     dependencies: external_exports.array(external_exports.object({ goalId: external_exports.string().uuid(), gate: external_exports.enum(["start", "finish"]) }).strict()).optional(),
@@ -15287,7 +15374,7 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
 var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
 var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
@@ -15325,6 +15412,7 @@ function entryWords(entry) {
   }
   return entry.sources.map((source) => source.text).join("\n");
 }
+var LIVE_MS2 = 3 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -16106,7 +16194,19 @@ var QueueQuestionSchema2 = external_exports.object({
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: external_exports.string().nullable().default(null)
+  answer: external_exports.string().nullable().default(null),
+  /** The Goal this question belongs to — a step knows its Goal on its own, not only through
+   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
+   *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
+   *  this is the field they agree through rather than each re-deriving it from the row it
+   *  arrived under. Required because the API projects it on every need it sends. */
+  goalId: external_exports.string(),
+  /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
+   *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
+   *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
+   *  gate at all. */
+  blocked: external_exports.boolean().default(false)
 });
 var QueueItemSchema2 = external_exports.object({
   id: external_exports.string(),
@@ -16395,7 +16495,7 @@ function sameTail(a, b) {
 // src/harness/session.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 import { resolve as resolve2, delimiter as delimiter2 } from "path";
 
 // src/harness/acp.ts
@@ -16405,15 +16505,19 @@ function optionFor(options, decision) {
   return options.find((o) => o.kind === want)?.optionId ?? null;
 }
 function createAcpDriver(opts) {
-  return new AcpDriver(opts.cwd, opts.mode);
+  return new AcpDriver(opts.cwd, opts.mode, opts.resume);
 }
 var AcpDriver = class {
-  constructor(cwd, mode) {
+  /** `resume`: the id of an existing session to continue rather than open a new one (#1637) —
+   *  the session a bound identity belongs to, so the process this drives IS its holder. */
+  constructor(cwd, mode, resume) {
     this.cwd = cwd;
     this.mode = mode;
+    this.resume = resume;
   }
   cwd;
   mode;
+  resume;
   nextId = 1;
   initId;
   sessionNewId;
@@ -16497,15 +16601,15 @@ var AcpDriver = class {
       this.sessionNewId = this.nextId++;
       return {
         events: [],
-        writes: [frame2({ id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
+        writes: [frame2(this.resume ? { id: this.sessionNewId, method: "session/resume", params: { sessionId: this.resume, cwd: this.cwd, mcpServers: [] } } : { id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
       };
     }
     if (msg.id === this.sessionNewId) {
       this.sessionNewId = void 0;
-      const sessionId2 = msg.result?.sessionId;
+      const sessionId2 = msg.error ? void 0 : msg.result?.sessionId ?? this.resume;
       if (!sessionId2) {
         return {
-          events: [{ kind: "error", message: `session/new failed: ${msg.error?.message ?? "no sessionId"}` }],
+          events: [{ kind: "error", message: `${this.resume ? "session/resume" : "session/new"} failed: ${msg.error?.message ?? "no sessionId"}` }],
           writes: []
         };
       }
@@ -16628,7 +16732,7 @@ function splitLines(buffer, chunk) {
   return { lines: parts.filter((l) => l.trim()), rest };
 }
 function startSession(opts) {
-  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir4()));
+  const cwd = resolve2(opts.cwd.replace(/^~(?=$|\/)/, homedir5()));
   if (!existsSync4(cwd)) {
     queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
   }
@@ -16641,7 +16745,8 @@ function startSession(opts) {
     env: {
       ...process.env,
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
-      ...opts.token ? { PAIGY_TOKEN: opts.token } : {}
+      ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
+      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {}
     },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -16661,7 +16766,7 @@ function startSession(opts) {
     opts.onEvent({ kind: "error", message: e.message });
     opts.onExit?.();
   });
-  const driver = createAcpDriver({ cwd, mode: opts.mode });
+  const driver = createAcpDriver({ cwd, mode: opts.mode, ...opts.resume ? { resume: opts.resume } : {} });
   let buffer = "";
   child.stdout?.on("data", (chunk) => {
     const { lines: lines2, rest } = splitLines(buffer, String(chunk));
@@ -16723,7 +16828,7 @@ async function step(session, state, rail) {
     else state.goal = { id: brief2.goalId, revision: brief2.revision };
     const outcome = brief2.outcome?.trim() ?? "";
     const said = (brief2.entries ?? []).map((e) => entryWords(e).trim()).filter((w) => w && w.toLowerCase() !== outcome.toLowerCase());
-    send(session, state, [outcome, ...said].filter(Boolean).join("\n\n"));
+    send2(session, state, [outcome, ...said].filter(Boolean).join("\n\n"));
     return;
   }
   const brief = await rail.read(state.goal.id);
@@ -16742,9 +16847,9 @@ async function step(session, state, rail) {
   }
   if (state.asks?.size || !state.resting) return;
   const words2 = unheard(brief, state);
-  if (words2.length) send(session, state, words2.join("\n\n"));
+  if (words2.length) send2(session, state, words2.join("\n\n"));
 }
-function send(session, state, text) {
+function send2(session, state, text) {
   state.resting = false;
   session.send(text);
 }
@@ -16877,7 +16982,7 @@ function runHarness(opts) {
   let tail = [];
   const state = { resting: true };
   let session = null;
-  const rail = railFor({ token: opts.token });
+  const rail = railFor({ token: opts.token, ...opts.resume ? { reach: reachAs(opts.resume) } : {} });
   async function handle(event) {
     if (event.kind === "error") {
       opts.log(`\u26A0 ${event.message}`);
@@ -16925,6 +17030,7 @@ function runHarness(opts) {
     cwd: opts.cwd,
     mode: opts.mode,
     ...opts.token ? { token: opts.token } : {},
+    ...opts.resume ? { resume: opts.resume } : {},
     ...opts.bin ? { bin: opts.bin } : {},
     ...opts.onExit ? { onExit: opts.onExit } : {},
     onEvent: (event) => void handle(event).catch((err) => opts.log(`\u26A0 ${err.message}`))
@@ -16957,7 +17063,7 @@ function runHarness(opts) {
 // src/update.ts
 import { execFile } from "child_process";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join4 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { promisify } from "util";
 var SERVICE_LABEL = "ai.paigy.harness";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
@@ -16970,9 +17076,13 @@ function newer(latest, current) {
   for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
   return false;
 }
+var WAIT_CAP_MS = 6 * 36e5;
 function updateAction(o) {
   if (!o.service || !o.latest || o.latest === o.failed || !newer(o.latest, o.current)) return "none";
-  return o.sessions > 0 ? "wait" : "install";
+  if (o.sessions <= 0) return "install";
+  const working = o.working ?? o.sessions;
+  if (working > 0) return "wait";
+  return (o.waited ?? 0) >= WAIT_CAP_MS ? "install" : "wait";
 }
 async function latestVersion() {
   const res = await fetch(REGISTRY, { signal: AbortSignal.timeout(1e4) });
@@ -16980,7 +17090,7 @@ async function latestVersion() {
 }
 async function install(version) {
   const bin = dirname3(process.execPath);
-  await promisify(execFile)(join4(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+  await promisify(execFile)(join5(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
     env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
     timeout: 5 * 6e4
   });
@@ -16991,6 +17101,7 @@ function selfUpdater(deps) {
   let checkedAt = -Infinity;
   let failed;
   let waiting = false;
+  let waitingSince = null;
   return async () => {
     if (!service) return;
     const now = (deps.now ?? Date.now)();
@@ -16998,9 +17109,25 @@ function selfUpdater(deps) {
       checkedAt = now;
       latest = await (deps.latest ?? latestVersion)().catch(() => latest);
     }
-    const action = updateAction({ current: VERSION, latest, service, sessions: deps.sessions(), failed });
-    if (action === "wait" && !waiting) deps.log(`\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running`);
+    const sessions = deps.sessions();
+    const working = deps.working?.();
+    if (latest && newer(latest, VERSION) && latest !== failed && waitingSince === null) waitingSince = now;
+    const action = updateAction({
+      current: VERSION,
+      latest,
+      service,
+      sessions,
+      failed,
+      ...working === void 0 ? {} : { working },
+      waited: waitingSince === null ? 0 : now - waitingSince
+    });
+    if (action === "wait" && !waiting) {
+      deps.log(working ? `\u21E1 @paigy/harness ${latest} is out \u2014 updating once the turn in flight finishes` : `\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running (at most ${Math.round(WAIT_CAP_MS / 36e5)}h)`);
+    }
     waiting = action === "wait";
+    if (action === "install" && sessions > 0) {
+      deps.log(`\u21E1 @paigy/harness ${latest} is out and ${sessions} resting session(s) have held it for ${Math.round((now - (waitingSince ?? now)) / 36e5)}h \u2014 restarting over them`);
+    }
     if (action !== "install" || !latest) return;
     try {
       await (deps.install ?? install)(latest);
@@ -17014,7 +17141,7 @@ function selfUpdater(deps) {
 }
 
 // src/host.ts
-var HOST_FILE = join5(homedir5(), ".paigy", "host.json");
+var HOST_FILE = join6(homedir6(), ".paigy", "host.json");
 function readHostState() {
   try {
     const s = JSON.parse(readFileSync3(HOST_FILE, "utf8"));
@@ -17038,8 +17165,8 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-async function slotHasWaitingWork(token) {
-  return (await checkReplies({ token })).deliveries.length > 0;
+async function slotHasWaitingWork(token, session) {
+  return (await checkReplies({ token, ...session ? { reach: reachAs(session) } : {} })).deliveries.length > 0;
 }
 var PRESENCE_FRESH_MS = 3 * 6e4;
 function wakeAction(live, now, serverSeenAt) {
@@ -17063,7 +17190,12 @@ function startHost(opts) {
       }
     }
   };
-  const update = selfUpdater({ sessions: () => runs.size, log: opts.log });
+  const update = selfUpdater({
+    sessions: () => runs.size,
+    // A turn in flight blocks the update; a session merely standing by does not hold it forever.
+    working: () => [...runs.values()].filter((r) => r.run.working()).length,
+    log: opts.log
+  });
   const beat = () => {
     void refreshIdentities();
     void update().catch(() => {
@@ -17132,9 +17264,11 @@ function startHost(opts) {
       if (wakeAction(!!live, Date.now(), seenByServer) === "skip") return;
       const token = readToken(slot);
       if (!token) return;
-      const workspace = resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
+      const owner = ownerSession(slot);
+      if (owner && !allowed(owner.cwd, opts.wsDeps)) return;
+      const workspace = owner?.cwd ?? resolveWakeDir(slotIdentity(slot).workspace, opts.wsDeps);
       if (!workspace) return;
-      if (!await slotHasWaitingWork(token).catch(() => false)) return;
+      if (!await slotHasWaitingWork(token, owner?.sessionId).catch(() => false)) return;
       const label = slotName(slot) ?? slot;
       const log2 = (line) => opts.log(`[${label}] ${line}`);
       const run = runHarness({
@@ -17143,6 +17277,7 @@ function startHost(opts) {
         mode: "bypass",
         prompt: "",
         token,
+        ...owner ? { resume: owner.sessionId } : {},
         // A dead run must not squat the slot — evict so the next wake can respawn.
         onExit: () => {
           runs.delete(key);
@@ -17153,7 +17288,7 @@ function startHost(opts) {
       runs.set(key, { run, label, token });
       void heartbeat(void 0, { token }).catch(() => {
       });
-      opts.log(`\u25B6 woke ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
+      opts.log(`\u25B6 ${owner ? "resumed" : "woke"} ${label} (${harness}) \u2014 work was waiting in ${workspace}`);
     }
   }
   const listening = /* @__PURE__ */ new Map();
@@ -17462,7 +17597,7 @@ function staleWhy(note) {
 
 // src/triage/judge.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 import { delimiter as delimiter3 } from "path";
 var PRIVACY = {
   ollama: "never leaves this machine",
@@ -17566,7 +17701,7 @@ async function judgeFor(asked, deps = {}) {
       const out = spawnSync2(bin, runner.argv(null), {
         input: prompt,
         encoding: "utf8",
-        cwd: homedir6(),
+        cwd: homedir7(),
         timeout: RUN_TIMEOUT_MS,
         maxBuffer: 32 * 1024 * 1024,
         env: { ...process.env, PATH: [process.env["PATH"], ...probeDirs()].filter(Boolean).join(delimiter3) }
@@ -17864,7 +17999,7 @@ var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
 }
-var ICON = join6(here, "..", "assets", "icon.png");
+var ICON = join7(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
     // Sized for the working log, which is now the window's centerpiece; the layout is a
@@ -17876,9 +18011,9 @@ function createWindow() {
     minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
-    webPreferences: { preload: join6(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
+    webPreferences: { preload: join7(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
   });
-  void win.loadFile(join6(here, "..", "renderer", "index.html"));
+  void win.loadFile(join7(here, "..", "renderer", "index.html"));
 }
 var host = null;
 app.whenReady().then(() => {
@@ -17947,7 +18082,7 @@ ipcMain.handle("paigy:agent", async (_e, name) => {
 });
 ipcMain.handle("paigy:agent-log", (_e, name) => {
   try {
-    const all = readFileSync4(join6(homedir7(), ".paigy", "host.log"), "utf8").split("\n");
+    const all = readFileSync4(join7(homedir8(), ".paigy", "host.log"), "utf8").split("\n");
     const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
     return mine.slice(-500).join("\n");
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/harness",
-  "version": "0.3.11",
+  "version": "0.3.13",
   "description": "Run Claude Code / Codex on this machine, bridged to Paigy — launchable from your phone.",
   "license": "MIT",
   "type": "module",