@paigy/harness 0.3.14 → 0.3.16

package/dist/main.js

@@ -4580,7 +4580,7 @@ import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname4, join as join8 } from "path";
+import { dirname as dirname4, join as join9 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
@@ -8638,6 +8638,7 @@ import { randomUUID as randomUUID2 } from "crypto";
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync as readFileSync2, rmSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
+import { execFileSync as execFileSync2 } from "child_process";
 var import_undici = __toESM(require_undici(), 1);
 var require2 = __sdkCreateRequire(import.meta.url);
 var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";
@@ -9921,6 +9922,23 @@ var zodToJsonSchema = (schema, options) => {
 };
 var OPTIONS_MIN = 2;
 var OPTIONS_MAX = 6;
+var OptionSchema = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string(),
+  hint: external_exports.string().max(500).describe("Optional short projection of consequence or action if this option is chosen (e.g. 'Reruns test suite', 'Merges to main').").optional(),
+  // .describe() flows into the MCP contact JSON schema (zodToJsonSchema), so
+  // the constraints below are what an agent reads when deciding to use these.
+  html: external_exports.string().max(16384).describe(
+    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."
+  ).optional(),
+  image: external_exports.string().url().describe(
+    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use `html` instead."
+  ).optional()
+});
+var OptionInputSchema = OptionSchema.omit({ id: true }).extend({
+  label: external_exports.string().trim().min(1).max(1e3)
+}).strict();
+var NIGHT = { from: 23, to: 7 };
 function draft2020(node) {
   if (Array.isArray(node)) return node.map(draft2020);
   if (node && typeof node === "object") {
@@ -9952,26 +9970,21 @@ function mcpInputSchema(s) {
 }
 var AskInputSchema = external_exports.object({
   id: external_exports.string().optional().describe("Optional idempotency key or client-side ID for this specific ask."),
-  parentId: external_exports.string().uuid().optional().describe("Optional explicit parent Goal ID. If omitted, the platform's semantic router will auto-cluster it."),
+  parentId: external_exports.string().uuid().optional().describe("The Goal this question is about \u2014 usually the one you are working on. The question goes onto that Goal and its answer comes back there. Omit it and Paigy places the question in the tree itself."),
   repo: external_exports.string().optional().describe("Optional repository context."),
   ask: external_exports.string().trim().min(1).max(1e4).describe(
-    "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+    "ONE question, and only what is needed to answer it. Several questions are several asks in the array, one each: an answer settles the one ask it was given in the shape that ask declares, so a person who answers the part of a bundled ask that interested them settles nothing and is asked again. Paigy reads every ask once and takes a bundled one apart into its own cards anyway \u2014 parts of one piece of work under one Goal, separate things as separate Goals \u2014 but the words it splits are its reading, not yours. News, progress and findings are their own contact; a call contact JOINS a call already happening, so several arrive as one call."
   ),
-  options: external_exports.array(external_exports.object({
-    label: external_exports.string().trim().min(1).max(1e3),
-    hint: external_exports.string().trim().max(500).describe("Optional short projection of consequence or action if this option is chosen.").optional(),
-    image: external_exports.string().url().optional(),
-    html: external_exports.string().max(16384).describe("Optional sandboxed HTML/CSS preview. No JavaScript or network; inline CSS and data: URIs only. It renders edge-to-edge in a responsive card 200pt tall (about 320pt wide on a phone, with the next option peeking beside it), so fit the HTML to that viewport.").optional()
-  }).strict()).min(2).max(6).optional()
+  options: external_exports.array(OptionInputSchema).min(2).max(6).optional()
 }).strict();
 var StartContactSchema = external_exports.object({
-  asks: external_exports.array(AskInputSchema).min(1).describe("The list of asks/questions to pose. They will be semantically clustered by the API."),
+  asks: external_exports.array(AskInputSchema).min(1).describe("The questions to pose, one per object. An ask with a parentId is filed on that Goal as it is; only an ask naming no Goal is placed in the tree by Paigy."),
   waiting: external_exports.enum(["none", "hard"]).default("none"),
   channel: external_exports.enum(["notification", "call"]).default("notification")
 }).strict();
 var ContactSchema = external_exports.union([StartContactSchema, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
 var CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
-var CONTACT_DESCRIPTION = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. The platform will semantically cluster your asks under the correct Goals automatically. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Never bundle multiple questions into a single 'ask' string; pass them as separate objects in the 'asks' array.";
+var CONTACT_DESCRIPTION = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. One question per 'ask'; several questions are several objects in 'asks'. A bundled ask is taken apart into its own cards by Paigy's one intake read \u2014 parts of one piece of work under one Goal, separate things as separate Goals. An ask with no options that is not blocking is a report: on a Goal whose report card is still open it is added to that card, with no new push; one that only says where your work stands while under way is recorded as the Goal's progress, not sent (the result says so).";
 var CreateGoalSchema = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
   /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
@@ -9979,10 +9992,6 @@ var CreateGoalSchema = external_exports.object({
   title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
-  /** A past conversation this Goal should be read against — History's "new session from this"
-   *  (owner, on the call of 2026-09-14: "let's do the reference with the threading"). A
-   *  reference only: the owner reads it through `get_thread`, which does its own scoping, and
-   *  the writer refuses a thread belonging to another account. */
   /** THE GOAL THIS ONE BELONGS UNDER (owner, 2026-09-15: "the ask I gave for the design doc
    *  didn't get created as a child goal of the voice UI goal, which is how it should've
    *  worked"). It could not have been: this door took no parent, so the only route was
@@ -10022,23 +10031,13 @@ var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({
 var ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
-var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var UPDATE_GOAL_DESCRIPTION = `Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. state: done means the work was accomplished, and it can be reopened: when the person says it is not done ("it's not working"), set state: active on that same Goal instead of starting a new one; its parent reopens with it. cancelled is final. Returns the Goal as get_goal reads it, at its new revision.`;
+var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Another agent's Goal that has gone quiet for 3 days (check_replies lists them as stalledOthers) is taken over when you claim it, and becomes yours to finish or cancel. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION = "What is waiting for you: your open Deliveries (a request the user started toward you, a handoff), one row each with its Goals, how many decisions are still open, and the newest words in brief; `assigned`, your Goals nobody has started yet, however they became yours (claim_goal({goalId}) starts one); and `review`, your Goals with something new on them \u2014 the user's answers and notes are Entries on the Goal, not Deliveries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread a Delivery in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true clears the Goal from `review` and closes the Deliveries addressed to you on it.";
 var CheckRepliesSchema = external_exports.object({}).strict();
-var GetThreadSchema = external_exports.object({
-  parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
-}).strict();
-var GET_THREAD_DESCRIPTION = "Read the authorized durable Entries on one conversation Thread \u2014 what you wrote there and what was delivered to you, oldest first. Use claim_goal to find the work to resume; use this to rehydrate a Thread that a search hit or a Delivery named.";
-var SearchThreadsSchema = external_exports.object({
-  q: external_exports.string().describe("What to look for \u2014 plain words or a phrase (e.g. 'the livekit timeout', 'deploy to prod').")
-}).strict();
-var SEARCH_THREADS_DESCRIPTION = `Search your PAST conversations before asking \u2014 "have we discussed this before?". Full-text over your own threads (the asks you sent + the user's answers); returns ranked threads with highlighted snippets, NOT rows: { hits: [{ parentId, at, agentLabel, matches: [{ notificationId, role, snippet }] }] }. The loop this exists for: search first \u2192 get_thread the best hit to rehydrate it \u2192 THEN continue or contact, so you answer with receipts ("last week you said ship it") instead of re-asking. Read-only, safe to call anytime; scoped to your own account's threads.`;
 var AGENT_TOOLS = [
   { name: "contact", description: CONTACT_DESCRIPTION, inputSchema: CONTACT_SCHEMA },
   { name: "check_replies", description: CHECK_REPLIES_DESCRIPTION, inputSchema: mcpInputSchema(CheckRepliesSchema) },
-  { name: "get_thread", description: GET_THREAD_DESCRIPTION, inputSchema: mcpInputSchema(GetThreadSchema) },
-  { name: "search_threads", description: SEARCH_THREADS_DESCRIPTION, inputSchema: mcpInputSchema(SearchThreadsSchema) },
   { name: "create_goal", description: CREATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(CreateGoalToolSchema) },
   { name: "claim_goal", description: CLAIM_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(ClaimGoalSchema) },
   { name: "get_goal", description: GET_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(GetGoalSchema) },
@@ -10072,19 +10071,6 @@ var TransformSchema = external_exports.enum([
   "summarize"
   // reduce volume, keep decision value — 30-turn cap, spoken briefing
 ]);
-var OptionSchema = external_exports.object({
-  id: external_exports.string(),
-  label: external_exports.string(),
-  hint: external_exports.string().max(500).describe("Optional short projection of consequence or action if this option is chosen (e.g. 'Reruns test suite', 'Merges to main').").optional(),
-  // .describe() flows into the MCP contact JSON schema (zodToJsonSchema), so
-  // the constraints below are what an agent reads when deciding to use these.
-  html: external_exports.string().max(16384).describe(
-    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."
-  ).optional(),
-  image: external_exports.string().url().describe(
-    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use `html` instead."
-  ).optional()
-});
 var VisualSchema = external_exports.object({
   url: external_exports.string().url(),
   label: external_exports.string().optional()
@@ -10138,7 +10124,7 @@ var NotifyRequestFields = external_exports.object({
    *  ABSENT on the E2EE path, where the sealed `envelope` below carries it. The
    *  superRefine at the bottom enforces exactly one of the two. */
   context: ContextSchema.optional(),
-  options: external_exports.array(OptionSchema.omit({ id: true })).min(OPTIONS_MIN).max(OPTIONS_MAX).optional().describe(
+  options: external_exports.array(OptionInputSchema).min(OPTIONS_MIN).max(OPTIONS_MAX).optional().describe(
     "The choices, in order \u2014 required when select is 'one'/'many'/'rank', omitted otherwise. Ids are assigned automatically by position ('1', '2', \u2026); the user's answer references them as optionId(s)."
   ),
   points: external_exports.array(external_exports.string().min(1)).optional().describe(
@@ -10332,7 +10318,7 @@ var AwaitItemSchema = external_exports.discriminatedUnion("type", [
   /** The awaited ask was REPLACED by a newer notification on its thread (e.g. a
    *  post-feedback revision, #633) — the user will never answer this id. Stop
    *  awaiting it; the live ask is the thread's newest turn (await that one, or
-   *  re-orient via get_thread / check_replies). */
+   *  re-orient via check_replies). */
   external_exports.object({
     type: external_exports.literal("superseded"),
     parentId: external_exports.string(),
@@ -10377,9 +10363,9 @@ var AgendaTurnSchema = external_exports.object({
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
   coveredIds: external_exports.array(external_exports.string()).optional(),
-  /** At most three short spoken sentences. Capped because a turn is a breath: a 1031-char
-   *  line went out on 2026-07-28 and the caller could not answer it at all. */
-  info: external_exports.array(external_exports.string().min(1)).max(3).default([]),
+  /** The spoken sentences of the turn, in order. No count: how long a turn is is the brain's call
+   *  (owner, 2026-09-25), and a count here refused whole plans. */
+  info: external_exports.array(external_exports.string().min(1)).default([]),
   question: external_exports.string().min(1).nullable(),
   /** True on the one turn carrying the agent's own declared question. */
   asks: external_exports.boolean().optional(),
@@ -10414,42 +10400,12 @@ var AgendaTurnSchema = external_exports.object({
 var CLAIM_STALE_MS = 30 * 6e4;
 var InboxItemSchema = external_exports.object({
   id: external_exports.string(),
-  /** The conversation thread + connection this item lives on. Present on the replied
-   *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
-  parentId: external_exports.string().optional(),
-  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
-   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
-   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
-   *  accumulates every message an agent ever sent, so grouping by it renders a day of
-   *  unrelated updates as a single "12-part request". Absent on rows written before the
-   *  `asks` table, and on anything that never went through `notify` — both fall back to the
-   *  thread, which is what the client did for all rows until now. */
-  askId: external_exports.string().optional(),
-  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
-   *  shares one `created_at` to the microsecond, so without it the author's order is
-   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
-   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
-   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
-  seq: external_exports.number().int().optional(),
-  /** HOW MANY units the arrival was cut into. A device reads a LENS, never the arrival —
-   *  `/api/inbox` serves `open`, so the units already settled are gone from it — and a client
-   *  counting what it can see is counting what is LEFT. Walking a three-unit ask on the answer
-   *  screen read "1 of 3", then "1 of 2", then no chip at all, each answer having removed the
-   *  only evidence of itself. How big an arrival is, is a fact about the arrival, so the
-   *  server that can still see every row states it. Absent on any row with no `askId`: a
-   *  unit knows WHICH ask it came from and WHERE it sat in it, and how many there were is
-   *  the one part of its own arrival a single row cannot answer. */
-  units: external_exports.number().int().positive().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema,
   context: ContextSchema,
   options: external_exports.array(OptionSchema).optional(),
   /** The ask's declared coverage points (#396), when the agent sent them. */
   points: external_exports.array(external_exports.string()).optional(),
-  /** The call's AGENDA (broker/agenda-design.md): the ordered turns it is made of, built at
-   *  ring/enqueue time. Replaces the condensed line + index-aligned phrased points, which
-   *  between them could not express a call as a sequence. `question: null` is a real turn —
-   *  a status update stays a statement instead of being shaped into a yes/no. */
   /** Does this claim want an ANSWER, or is it telling you something? Written per row from
    *  `requestAsks` — the agent's own declaration, not a guess. `false` is what earns a card
    *  its acknowledge affordance: without it a status update offers a text box and a dismiss,
@@ -10470,7 +10426,31 @@ var InboxItemSchema = external_exports.object({
    *  instant the agent picks it up (#997). Absent = pre-trigger row; fall back to
    *  `createdAt`. */
   agentStateAt: external_exports.string().datetime().optional(),
-  agenda: external_exports.array(AgendaTurnSchema).optional(),
+  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (walk/design.md §11, owner
+   *  2026-09-22). One per DecisionNeed on the Call, in the Call's order, answered or open (a
+   *  superseded or cancelled need is no longer a question anyone is asked). Present only on a
+   *  Call's cards, and every card of that Call carries the same list: the call screen reads it
+   *  once, off the one read it already makes (`GET /api/inbox/:callId`).
+   *
+   *  It counts DECISIONS, not agenda turns: turns include context-only lines and are re-planned
+   *  every cycle, so a spine drawn from them would change length under the caller mid-call.
+   *
+   *  `entryId` is the request Entry — the id the bot calls a CLAIM, and the one it names on the
+   *  `turn` topic (`asking`, `settled`), because the bot never sees a DecisionNeed id. `title` is
+   *  the card's own concise heading; `answer` the accepted answer in words, null while open. It
+   *  REPLACED `agenda` (turns), which nothing ever filled. */
+  questions: external_exports.array(external_exports.object({
+    id: external_exports.string(),
+    entryId: external_exports.string(),
+    title: external_exports.string(),
+    state: external_exports.enum(["open", "answered"]),
+    answer: external_exports.string().nullable(),
+    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+     *  author is not an agent this account holds (unpaired since, or a person). */
+    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema.optional() }).optional()
+  })).optional(),
   visuals: external_exports.array(VisualSchema).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
    *  agent's suggestion, or a default silly name). */
@@ -10487,16 +10467,35 @@ var InboxItemSchema = external_exports.object({
    *  agent (held in the inbox until the agent replies on the thread). */
   turn: external_exports.enum(["you", "agent"]).default("you"),
   /** Hard error reason on an awaiting request (turn="agent") — the wake failed to reach
-   *  the agent (provider-agnostic; set server-side). Absent = no hard error, though the
-   *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
+   *  the agent (provider-agnostic; set server-side). Absent = no hard error. Drives the inbox
+   *  error badge + Retry. */
   error: external_exports.string().optional(),
+  /** WHEN THIS AGENT WORK WENT QUIET (turn="agent"), by the one rule (`coldSince`: three days
+   *  with nothing said), or absent while it is not stalled. The inbox's stalled badge reads
+   *  this and nothing else (2026-09-23: a 3-minute age rule badged every live Goal stalled,
+   *  and "dismiss the stalled ones" cancelled 37 pieces of live work). */
+  cold: external_exports.string().datetime().optional(),
   clarifies: external_exports.string().optional(),
-  /** The ring ladder ran out while this was still pending — we tried to reach you and
-   *  STOPPED trying (`arbitration/arbitrate.ts` `nextRing` → `stop`). Distinct from an
-   *  agent with nothing to say, which the roster drew identically until now: "nothing to
-   *  say" and "gave up saying it" are opposite situations wearing the same face
-   *  (navigation-design.md, gap 1). False for anything that never rang. */
-  gaveUp: external_exports.boolean().default(false),
+  /** THIS CARD'S QUESTION IS ON A LIVE CALL (owner, 2026-09-24: "Mark it while the call is
+   *  live"). Present only while an open Call Delivery carries the card's request Entry — read
+   *  off the same open list the card came from, so it clears when the Call does. A card is the
+   *  backup for a call not taken; while the call has it, the call is where it is answered. */
+  onCall: external_exports.literal(true).optional(),
+  /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
+   *  declined, and what the ladder will do next — read off the cron's own row, never computed
+   *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
+   *  The ladder is ACCOUNT-WIDE (#2259): `anchorAt` and `step` are the account's position;
+   *  `nextRingAt` is this card's armed instant (`deliveries.next_ring_at`), null once the cron
+   *  has disarmed it — the curve's end, `inbox`/`dismiss`, or a setting that said no more rings.
+   *  It replaced `gaveUp` (deleted 2026-09-22): "the ladder spent" was a boolean the projection
+   *  never set, and it is `nextRingAt === null` here — the party's *Missed you* (`party/dress.ts`)
+   *  and the roster's `unreached` read `declinedAt`, and stand while it does. */
+  ring: external_exports.object({
+    declinedAt: external_exports.string().datetime(),
+    anchorAt: external_exports.string().datetime(),
+    nextRingAt: external_exports.string().datetime().nullable(),
+    step: external_exports.number().int()
+  }).optional(),
   /** Why this arrived the way it did, read back off the delivery receipt (`notify/why.ts`).
    *  Absent for anything never delivered through a push, and for older rows written before
    *  the reason was recorded. Deliberately a debug affordance, shown small (owner,
@@ -10530,7 +10529,10 @@ var InboxItemSchema = external_exports.object({
     goalIds: external_exports.array(external_exports.string()),
     decisionNeedId: external_exports.string().optional(),
     sealed: external_exports.boolean(),
-    goalState: external_exports.string().optional()
+    goalState: external_exports.string().optional(),
+    /** THAT GOAL'S NAME (#2416) — what Activity's row is headed by, since a row there is one Goal
+     *  and the cards it holds sit behind it. Stamped by the same read as `goalState`. */
+    goalTitle: external_exports.string().optional()
   }).optional()
 });
 var APNS_TOKEN_RE = /^[0-9a-fA-F]{64}$/;
@@ -10561,6 +10563,8 @@ var MissedCallSchema = external_exports.enum([
   "inbox",
   "dismiss"
 ]);
+var clock = (h) => h === 0 ? "midnight" : h === 12 ? "noon" : h < 12 ? `${h} am` : `${h - 12} pm`;
+var QUIET = ` Nothing rings from ${clock(NIGHT.from)} to ${clock(NIGHT.to)} your time; the count waits for morning.`;
 var BrokerTuningSchema = external_exports.object({
   /** 'none' = skip the spoken ack after a mapped answer (power users find it slow). */
   ackVerbosity: external_exports.enum(["normal", "none"]).optional(),
@@ -10595,6 +10599,12 @@ var UserSettingsSchema = external_exports.object({
    *  must not silently reset this privacy choice. Absent = leave unchanged on
    *  write, 'hosted' on read (see store.ts). */
   voiceMode: external_exports.enum(["hosted", "on_device"]).optional(),
+  /** Talk — after you answer, the next step is read aloud (walk/design.md §6). ALWAYS ON until
+   *  turned off (owner, 2026-09-18, #2249): a setting, not a per-walk toggle. Optional, NOT
+   *  defaulted, for the same reason `voiceMode` is: a stale client PATCHing the full settings
+   *  object must not silently turn it back on. Absent = leave unchanged on write, true on
+   *  read (see store.ts). */
+  talk: external_exports.boolean().optional(),
   /** Per-user ring budget (#603): calls per rolling day before further calls
    *  degrade to banner. Absent = the global default (25). A number, never a
    *  bypass — every account keeps a ceiling. No UI; set per user for testing. */
@@ -10621,7 +10631,6 @@ var UserSettingsSchema = external_exports.object({
 });
 var HistoryItemSchema = external_exports.object({
   id: external_exports.string(),
-  parentId: external_exports.string(),
   /** 'user' = a request you sent; 'agent' = a notification an agent sent you. */
   initiator: external_exports.enum(["user", "agent"]),
   title: external_exports.string(),
@@ -10780,6 +10789,24 @@ var QueueQuestionSchema = external_exports.object({
    *  gate at all. */
   blocked: external_exports.boolean().default(false)
 });
+var QueueReplySchema = external_exports.object({
+  /** The card this note was (`deliveryId:requestEntryId`, minted by the server like every card
+   *  id) — so the phone can tell a reply it just sent from one the queue already carries, and the
+   *  walk can name it in its zoom. */
+  id: external_exports.string(),
+  /** The Goal the note is on. */
+  goalId: external_exports.string(),
+  /** What the note said. */
+  note: external_exports.string(),
+  /** Where it was carried — where a second reply goes (`POST /api/entries`, #2252). */
+  deliveryId: external_exports.string(),
+  requestEntryId: external_exports.string(),
+  askedAt: external_exports.string(),
+  /** When the person last replied — the window's start. */
+  repliedAt: external_exports.string(),
+  /** The person's latest words about it; null when there is nothing readable in them. */
+  reply: external_exports.string().nullable()
+});
 var QueueItemSchema = external_exports.object({
   id: external_exports.string(),
   /** One-line headline — the first sentence of the outcome. */
@@ -10792,6 +10819,9 @@ var QueueItemSchema = external_exports.object({
   assignee: external_exports.string().nullable().default(null),
   /** What the agent last said it was doing; null if it has said nothing. */
   progress: external_exports.string().nullable().default(null),
+  /** HOME'S LINE FOR THAT NOTE (owner, 2026-09-23): a few plain words one read wrote from `progress`,
+   *  served only while it was written for the current note. Null means show the Goal's name. */
+  progressLine: external_exports.string().nullable().optional(),
   reviewPending: external_exports.boolean().default(false),
   dueAt: external_exports.string().nullable().default(null),
   /** The Goal this one was opened under; null at the root. */
@@ -10804,11 +10834,20 @@ var QueueItemSchema = external_exports.object({
   blocked: external_exports.boolean().default(false),
   /** Every decision need on it, open or settled — the page decides which to show. */
   questions: external_exports.array(QueueQuestionSchema).default([]),
+  /** Every note on it the person replied to (`QueueReplySchema`) — the page decides which to show.
+   *  Optional, not defaulted: absent is none, and every hand-built queue (fixtures, the demo) need
+   *  not spell an empty list. */
+  replies: external_exports.array(QueueReplySchema).optional(),
   /** The repository or project identifier this Goal belongs to (#2280), null if untracked. */
   repo: external_exports.string().nullable().optional(),
   createdAt: external_exports.string(),
-  updatedAt: external_exports.string().nullable().default(null)
+  updatedAt: external_exports.string().nullable().default(null),
+  /** When its owner last SAID something about it (`goals.last_progress_at`, written by every
+   *  `update_goal` that changes `progress`). `updatedAt` moves for reasons nobody chose — a
+   *  state recomputed, a review flag — so it cannot tell work in hand from work gone quiet. */
+  lastProgressAt: external_exports.string().nullable().optional()
 });
+var COLD_AFTER_MS = 3 * 24 * 60 * 60 * 1e3;
 var NoteSourceSchema = external_exports.enum(["app", "call"]);
 var NoteStatusSchema = external_exports.enum(["open", "assigned", "in_progress", "done"]);
 var NoteRepeatSchema = external_exports.enum(["once", "until_done"]);
@@ -11109,6 +11148,8 @@ var ApiError = class extends Error {
     this.body = body;
   }
 };
+var tokenOverride = null;
+var authToken = (explicit) => explicit ?? tokenOverride ?? readToken();
 async function fail(what, res) {
   throw new ApiError(what, res.status, await res.text());
 }
@@ -11145,8 +11186,6 @@ async function updateGoal(goalId, input, opts = {}) {
   return await res.json();
 }
 var AWAIT_WINDOW_MS = 45e3;
-var tokenOverride = null;
-var authToken = (explicit) => explicit ?? tokenOverride ?? readToken();
 async function whoAmI(opts = {}) {
   try {
     const res = await reach(`${BACKEND_URL}/api/identity`, {
@@ -11233,6 +11272,33 @@ async function dismissTriage(proposalId, opts = {}) {
   if (!res.ok) throw new Error(`dismiss_triage failed: ${res.status} ${await res.text()}`);
   return await res.json();
 }
+function repoFromRemote(url) {
+  const said = (url ?? "").trim();
+  if (!said) return null;
+  const path = said.replace(/^[a-z+]+:\/\/[^/]+\//i, "").replace(/^[^@]+@[^:]+:/, "").replace(/\.git$/i, "").replace(/\/+$/, "");
+  const parts = path.split("/").filter(Boolean);
+  if (parts.length < 2) return null;
+  const [owner, name] = parts.slice(-2);
+  if (!owner || !name) return null;
+  return `${owner}/${name}`.toLowerCase();
+}
+var asked;
+function currentRepo(cwd = process.cwd()) {
+  if (asked !== void 0) return asked;
+  try {
+    const url = execFileSync2("git", ["remote", "get-url", "origin"], {
+      cwd,
+      encoding: "utf8",
+      timeout: 2e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    asked = repoFromRemote(url);
+  } catch {
+    asked = null;
+  }
+  return asked;
+}
+var NOT_SENT = "Recorded as progress, not sent: nobody was notified. If the person should see it (a result, something to try or check, a finding), contact again and say so; report progress with update_goal.";
 async function contact(input, opts = {}) {
   const parsed = ContactSchema.parse(input);
   opts.signal?.throwIfAborted();
@@ -11240,13 +11306,18 @@ async function contact(input, opts = {}) {
   const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
   let deliveryId;
   let deliveries = [];
+  let recorded = [];
   if ("deliveryId" in parsed) {
     deliveryId = parsed.deliveryId;
   } else {
     const reqAsks = parsed.asks.map((a) => ({
       id: a.id,
       parentId: a.parentId,
-      repo: a.repo,
+      // Derived, not asked for (#2315): the agent's own remote, in one spelling, so a project's
+      // work does not grow three trees for "paigy", "mauurda/paigy" and "Paigy". An explicit one
+      // still wins — normalised the same way — because a caller that names one knows something
+      // this cannot see.
+      repo: repoFromRemote(a.repo) ?? a.repo ?? currentRepo() ?? void 0,
       ask: a.ask,
       options: a.options ?? []
     }));
@@ -11264,14 +11335,24 @@ async function contact(input, opts = {}) {
     if (!res.ok) await fail("batch contact", res);
     const receipt = await res.json();
     deliveries = receipt.deliveries ?? [];
+    recorded = receipt.recorded ?? [];
+    if (deliveries.length === 0 && recorded.length) return { sent: false, recorded, message: NOT_SENT };
     if (deliveries.length === 0) throw new Error("Goal contact returned no Delivery identities");
     deliveryId = deliveries[0]?.deliveryId ?? "";
     if (!deliveryId) throw new Error("Goal contact returned no valid Delivery identity");
   }
+  const all = deliveries.filter((d) => !!d.deliveryId && !!d.goalId).map(({ id, deliveryId: deliveryId2, goalId }) => ({ ...id ? { id } : {}, deliveryId: deliveryId2, goalId }));
+  const joinedCard = deliveries[0]?.joinedCard === true;
   const read = async (signal2) => {
     const res = ensureAuthed(await send22(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
     if (!res.ok) await fail("read_delivery", res);
-    return await res.json();
+    const one = await res.json();
+    return {
+      ...one,
+      ...all.length > 1 ? { deliveries: all } : {},
+      ...recorded.length ? { recorded, notSent: NOT_SENT } : {},
+      ...joinedCard ? { joinedCard: true } : {}
+    };
   };
   const settled = (d) => d.kind === "notification" || d.state === "closed" || d.answers.length > 0 || d.entries.some((e) => e.kind === "contribution");
   if (opts.waits === false) return read(opts.signal);
@@ -11301,47 +11382,108 @@ async function checkReplies(opts = {}) {
 var HEARTBEAT_MS = 25e3;
 var RETRY_MS = [1e3, 2e3, 5e3, 1e4, 3e4];
 var JOIN = { config: { broadcast: { self: false } } };
+var JOIN_TIMEOUT_MS = 1e4;
 var lines = /* @__PURE__ */ new Map();
 function frame(line, topic, event, payload) {
+  const ref = String(++line.ref);
   try {
-    line.ws?.send(JSON.stringify({ topic, event, payload, ref: String(++line.ref) }));
+    line.ws?.send(JSON.stringify({ topic, event, payload, ref }));
   } catch {
   }
+  return ref;
 }
 function stop(line) {
   line.open = false;
+  line.beat = void 0;
   clearInterval(line.heart);
   clearTimeout(line.retry);
+  for (const t of line.topics.values()) {
+    clearTimeout(t.timer);
+    t.joined = false;
+    t.ref = void 0;
+  }
+}
+function join3(line, name, t) {
+  clearTimeout(t.timer);
+  t.joined = false;
+  t.ref = frame(line, `realtime:${name}`, "phx_join", JOIN);
+  t.timer = setTimeout(() => rejoin(line, name, t), JOIN_TIMEOUT_MS);
+}
+function rejoin(line, name, t) {
+  clearTimeout(t.timer);
+  t.joined = false;
+  t.ref = void 0;
+  if (!line.open || line.topics.get(name) !== t) return;
+  t.timer = setTimeout(() => {
+    if (line.open && line.topics.get(name) === t) join3(line, name, t);
+  }, RETRY_MS[Math.min(t.attempt++, RETRY_MS.length - 1)]);
+}
+function joined(t) {
+  clearTimeout(t.timer);
+  t.joined = true;
+  t.attempt = 0;
+  for (const l of t.listeners) l.onJoined?.(++l.joins);
 }
 function connect(line) {
   const base = line.url.replace(/^http/, "ws").replace(/\/+$/, "");
   const ws = line.ws = new import_undici.WebSocket(`${base}/realtime/v1/websocket?apikey=${encodeURIComponent(line.anonKey)}&vsn=1.0.0`);
+  let gone = false;
+  const again = () => {
+    if (gone) return;
+    gone = true;
+    stop(line);
+    if (!line.topics.size) return;
+    line.retry = setTimeout(() => connect(line), RETRY_MS[Math.min(line.attempt++, RETRY_MS.length - 1)]);
+  };
   ws.addEventListener("open", () => {
+    if (gone) return;
     line.open = true;
     line.attempt = 0;
-    for (const topic of line.topics.keys()) frame(line, `realtime:${topic}`, "phx_join", JOIN);
-    line.heart = setInterval(() => frame(line, "phoenix", "heartbeat", {}), HEARTBEAT_MS);
+    for (const [name, t] of line.topics) join3(line, name, t);
+    line.heart = setInterval(() => {
+      if (line.beat) {
+        try {
+          ws.close();
+        } catch {
+        }
+        again();
+        return;
+      }
+      line.beat = frame(line, "phoenix", "heartbeat", {});
+    }, HEARTBEAT_MS);
   });
   ws.addEventListener("message", (e) => {
+    if (gone) return;
     let m;
     try {
       m = JSON.parse(String(e.data));
     } catch {
       return;
     }
-    if (m.event !== "broadcast" || !m.topic?.startsWith("realtime:")) return;
-    for (const l of line.topics.get(m.topic.slice("realtime:".length)) ?? []) {
+    if (m.topic === "phoenix") {
+      if (m.event === "phx_reply" && m.ref === line.beat) line.beat = void 0;
+      return;
+    }
+    if (!m.topic?.startsWith("realtime:")) return;
+    const name = m.topic.slice("realtime:".length);
+    const t = line.topics.get(name);
+    if (!t) return;
+    if (m.event === "phx_reply") {
+      if (!t.ref || m.ref !== t.ref) return;
+      if (m.payload?.status === "ok") joined(t);
+      else rejoin(line, name, t);
+      return;
+    }
+    if (m.event === "phx_error" || m.event === "phx_close") {
+      if (m.ref && m.ref !== t.ref) return;
+      rejoin(line, name, t);
+      return;
+    }
+    if (m.event !== "broadcast") return;
+    for (const l of t.listeners) {
       if (m.payload?.event === l.event) l.onMessage(m.payload.payload);
     }
   });
-  let gone = false;
-  const again = () => {
-    if (gone) return;
-    gone = true;
-    stop(line);
-    if (!line.topics.size) return;
-    line.retry = setTimeout(() => connect(line), RETRY_MS[Math.min(line.attempt++, RETRY_MS.length - 1)]);
-  };
   ws.addEventListener("close", again);
   ws.addEventListener("error", again);
 }
@@ -11349,17 +11491,22 @@ function subscribeRealtime(args) {
   const key = `${args.url} ${args.anonKey}`;
   let line = lines.get(key);
   if (!line) lines.set(key, line = { url: args.url, anonKey: args.anonKey, open: false, attempt: 0, ref: 0, topics: /* @__PURE__ */ new Map() });
-  let heard = line.topics.get(args.topic);
-  if (!heard) {
-    line.topics.set(args.topic, heard = /* @__PURE__ */ new Set());
-    if (line.open) frame(line, `realtime:${args.topic}`, "phx_join", JOIN);
-  }
-  const me = { event: args.event, onMessage: args.onMessage };
-  heard.add(me);
+  let t = line.topics.get(args.topic);
+  if (!t) {
+    line.topics.set(args.topic, t = { listeners: /* @__PURE__ */ new Set(), joined: false, attempt: 0 });
+    if (line.open) join3(line, args.topic, t);
+  }
+  const topic = t;
+  const me = { event: args.event, onMessage: args.onMessage, onJoined: args.onJoined, joins: 0 };
+  topic.listeners.add(me);
+  if (topic.joined && me.onJoined) queueMicrotask(() => {
+    if (topic.joined && topic.listeners.has(me)) me.onJoined?.(++me.joins);
+  });
   if (!line.ws) connect(line);
   return {
     close: () => {
-      if (!heard.delete(me) || heard.size) return;
+      if (!topic.listeners.delete(me) || topic.listeners.size) return;
+      clearTimeout(topic.timer);
       line.topics.delete(args.topic);
       if (line.topics.size) {
         if (line.open) frame(line, `realtime:${args.topic}`, "phx_leave", {});
@@ -11375,7 +11522,8 @@ function subscribeRealtime(args) {
   };
 }
 async function subscribeWake(onNudge, opts = {}) {
-  const cfg = await registerDelivery("self_hosted", opts);
+  const { release = true, onJoined, ...client } = opts;
+  const cfg = await registerDelivery("self_hosted", client);
   const { url, anonKey } = cfg.realtime;
   const channel = wakeChannel(cfg.tokenId);
   const ch = subscribeRealtime({
@@ -11383,14 +11531,15 @@ async function subscribeWake(onNudge, opts = {}) {
     anonKey,
     topic: channel,
     event: WAKE_EVENT,
-    onMessage: (payload) => onNudge(payload ?? {})
+    onMessage: (payload) => onNudge(payload ?? {}),
+    onJoined
   });
   return {
     tokenId: cfg.tokenId,
     channel,
     close: async () => {
       ch.close();
-      await registerDelivery("poll", opts).catch(() => {
+      if (release) await registerDelivery("poll", client).catch(() => {
       });
     }
   };
@@ -11404,7 +11553,7 @@ import { homedir as homedir9, hostname } from "os";
 import { spawnSync } from "child_process";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { delimiter, dirname, join as join3 } from "path";
+import { delimiter, dirname, join as join4 } from "path";
 var CATALOG = [
   {
     name: "claude",
@@ -11440,10 +11589,10 @@ var CATALOG = [
 function probeDirs(home = homedir3()) {
   return [
     dirname(process.execPath),
-    join3(home, ".local", "bin"),
+    join4(home, ".local", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin",
-    join3(home, ".npm-global", "bin")
+    join4(home, ".npm-global", "bin")
   ];
 }
 function which(bin) {
@@ -11451,7 +11600,7 @@ function which(bin) {
   const fromPath = hit.status === 0 ? hit.stdout.trim() : "";
   if (fromPath) return fromPath;
   for (const dir of probeDirs()) {
-    const candidate = join3(dir, bin);
+    const candidate = join4(dir, bin);
     if (existsSync2(candidate)) return candidate;
   }
   return null;
@@ -11493,14 +11642,14 @@ function detectAll(deps = {}) {
 // src/host.ts
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2, join as join4, resolve } from "path";
+import { dirname as dirname2, join as join5, resolve } from "path";
 import { homedir as homedir4 } from "os";
 function workspacesFile() {
-  return join4(homedir4(), ".paigy", "workspaces.json");
+  return join5(homedir4(), ".paigy", "workspaces.json");
 }
 function listWorkspaces(deps) {
   try {
@@ -11541,7 +11690,7 @@ function resolveWakeDir(pinned, deps) {
 // src/owner.ts
 import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var HEAD_BYTES = 64e3;
 function readHead(file) {
   const fd = openSync2(file, "r");
@@ -11557,7 +11706,7 @@ function ownerSession(slot, deps = {}) {
   const m = /^session:([0-9a-f]{8})$/.exec(slot);
   if (!m) return null;
   const prefix = m[1];
-  const root = deps.projectsDir ?? join5(homedir5(), ".claude", "projects");
+  const root = deps.projectsDir ?? join6(homedir5(), ".claude", "projects");
   const list = deps.list ?? ((dir) => readdirSync(dir));
   const head = deps.head ?? readHead;
   let folders;
@@ -11569,7 +11718,7 @@ function ownerSession(slot, deps = {}) {
   for (const folder of folders) {
     let files;
     try {
-      files = list(join5(root, folder));
+      files = list(join6(root, folder));
     } catch {
       continue;
     }
@@ -11577,7 +11726,7 @@ function ownerSession(slot, deps = {}) {
     if (!file) continue;
     let text;
     try {
-      text = head(join5(root, folder, file));
+      text = head(join6(root, folder, file));
     } catch {
       continue;
     }
@@ -12881,6 +13030,23 @@ var zodToJsonSchema2 = (schema, options) => {
 // ../../packages/schema/dist/index.js
 var OPTIONS_MIN2 = 2;
 var OPTIONS_MAX2 = 6;
+var OptionSchema2 = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string(),
+  hint: external_exports.string().max(500).describe("Optional short projection of consequence or action if this option is chosen (e.g. 'Reruns test suite', 'Merges to main').").optional(),
+  // .describe() flows into the MCP contact JSON schema (zodToJsonSchema), so
+  // the constraints below are what an agent reads when deciding to use these.
+  html: external_exports.string().max(16384).describe(
+    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."
+  ).optional(),
+  image: external_exports.string().url().describe(
+    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use `html` instead."
+  ).optional()
+});
+var OptionInputSchema2 = OptionSchema2.omit({ id: true }).extend({
+  label: external_exports.string().trim().min(1).max(1e3)
+}).strict();
+var NIGHT2 = { from: 23, to: 7 };
 function draft20202(node) {
   if (Array.isArray(node)) return node.map(draft20202);
   if (node && typeof node === "object") {
@@ -12912,26 +13078,21 @@ function mcpInputSchema2(s) {
 }
 var AskInputSchema2 = external_exports.object({
   id: external_exports.string().optional().describe("Optional idempotency key or client-side ID for this specific ask."),
-  parentId: external_exports.string().uuid().optional().describe("Optional explicit parent Goal ID. If omitted, the platform's semantic router will auto-cluster it."),
+  parentId: external_exports.string().uuid().optional().describe("The Goal this question is about \u2014 usually the one you are working on. The question goes onto that Goal and its answer comes back there. Omit it and Paigy places the question in the tree itself."),
   repo: external_exports.string().optional().describe("Optional repository context."),
   ask: external_exports.string().trim().min(1).max(1e4).describe(
-    "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+    "ONE question, and only what is needed to answer it. Several questions are several asks in the array, one each: an answer settles the one ask it was given in the shape that ask declares, so a person who answers the part of a bundled ask that interested them settles nothing and is asked again. Paigy reads every ask once and takes a bundled one apart into its own cards anyway \u2014 parts of one piece of work under one Goal, separate things as separate Goals \u2014 but the words it splits are its reading, not yours. News, progress and findings are their own contact; a call contact JOINS a call already happening, so several arrive as one call."
   ),
-  options: external_exports.array(external_exports.object({
-    label: external_exports.string().trim().min(1).max(1e3),
-    hint: external_exports.string().trim().max(500).describe("Optional short projection of consequence or action if this option is chosen.").optional(),
-    image: external_exports.string().url().optional(),
-    html: external_exports.string().max(16384).describe("Optional sandboxed HTML/CSS preview. No JavaScript or network; inline CSS and data: URIs only. It renders edge-to-edge in a responsive card 200pt tall (about 320pt wide on a phone, with the next option peeking beside it), so fit the HTML to that viewport.").optional()
-  }).strict()).min(2).max(6).optional()
+  options: external_exports.array(OptionInputSchema2).min(2).max(6).optional()
 }).strict();
 var StartContactSchema2 = external_exports.object({
-  asks: external_exports.array(AskInputSchema2).min(1).describe("The list of asks/questions to pose. They will be semantically clustered by the API."),
+  asks: external_exports.array(AskInputSchema2).min(1).describe("The questions to pose, one per object. An ask with a parentId is filed on that Goal as it is; only an ask naming no Goal is placed in the tree by Paigy."),
   waiting: external_exports.enum(["none", "hard"]).default("none"),
   channel: external_exports.enum(["notification", "call"]).default("notification")
 }).strict();
 var ContactSchema2 = external_exports.union([StartContactSchema2, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
 var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
-var CONTACT_DESCRIPTION2 = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. The platform will semantically cluster your asks under the correct Goals automatically. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Never bundle multiple questions into a single 'ask' string; pass them as separate objects in the 'asks' array.";
+var CONTACT_DESCRIPTION2 = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. One question per 'ask'; several questions are several objects in 'asks'. A bundled ask is taken apart into its own cards by Paigy's one intake read \u2014 parts of one piece of work under one Goal, separate things as separate Goals. An ask with no options that is not blocking is a report: on a Goal whose report card is still open it is added to that card, with no new push; one that only says where your work stands while under way is recorded as the Goal's progress, not sent (the result says so).";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
   /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
@@ -12939,10 +13100,6 @@ var CreateGoalSchema2 = external_exports.object({
   title: external_exports.string().trim().min(1).max(80).optional(),
   ownerParticipant: external_exports.string().trim().min(1).optional(),
   idempotencyKey: external_exports.string().trim().min(1).max(200),
-  /** A past conversation this Goal should be read against — History's "new session from this"
-   *  (owner, on the call of 2026-09-14: "let's do the reference with the threading"). A
-   *  reference only: the owner reads it through `get_thread`, which does its own scoping, and
-   *  the writer refuses a thread belonging to another account. */
   /** THE GOAL THIS ONE BELONGS UNDER (owner, 2026-09-15: "the ask I gave for the design doc
    *  didn't get created as a child goal of the voice UI goal, which is how it should've
    *  worked"). It could not have been: this door took no parent, so the only route was
@@ -12982,23 +13139,13 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
-var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var UPDATE_GOAL_DESCRIPTION2 = `Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. state: done means the work was accomplished, and it can be reopened: when the person says it is not done ("it's not working"), set state: active on that same Goal instead of starting a new one; its parent reopens with it. cancelled is final. Returns the Goal as get_goal reads it, at its new revision.`;
+var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Another agent's Goal that has gone quiet for 3 days (check_replies lists them as stalledOthers) is taken over when you claim it, and becomes yours to finish or cancel. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION2 = "What is waiting for you: your open Deliveries (a request the user started toward you, a handoff), one row each with its Goals, how many decisions are still open, and the newest words in brief; `assigned`, your Goals nobody has started yet, however they became yours (claim_goal({goalId}) starts one); and `review`, your Goals with something new on them \u2014 the user's answers and notes are Entries on the Goal, not Deliveries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread a Delivery in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true clears the Goal from `review` and closes the Deliveries addressed to you on it.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
-var GetThreadSchema2 = external_exports.object({
-  parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
-}).strict();
-var GET_THREAD_DESCRIPTION2 = "Read the authorized durable Entries on one conversation Thread \u2014 what you wrote there and what was delivered to you, oldest first. Use claim_goal to find the work to resume; use this to rehydrate a Thread that a search hit or a Delivery named.";
-var SearchThreadsSchema2 = external_exports.object({
-  q: external_exports.string().describe("What to look for \u2014 plain words or a phrase (e.g. 'the livekit timeout', 'deploy to prod').")
-}).strict();
-var SEARCH_THREADS_DESCRIPTION2 = `Search your PAST conversations before asking \u2014 "have we discussed this before?". Full-text over your own threads (the asks you sent + the user's answers); returns ranked threads with highlighted snippets, NOT rows: { hits: [{ parentId, at, agentLabel, matches: [{ notificationId, role, snippet }] }] }. The loop this exists for: search first \u2192 get_thread the best hit to rehydrate it \u2192 THEN continue or contact, so you answer with receipts ("last week you said ship it") instead of re-asking. Read-only, safe to call anytime; scoped to your own account's threads.`;
 var AGENT_TOOLS2 = [
   { name: "contact", description: CONTACT_DESCRIPTION2, inputSchema: CONTACT_SCHEMA2 },
   { name: "check_replies", description: CHECK_REPLIES_DESCRIPTION2, inputSchema: mcpInputSchema2(CheckRepliesSchema2) },
-  { name: "get_thread", description: GET_THREAD_DESCRIPTION2, inputSchema: mcpInputSchema2(GetThreadSchema2) },
-  { name: "search_threads", description: SEARCH_THREADS_DESCRIPTION2, inputSchema: mcpInputSchema2(SearchThreadsSchema2) },
   { name: "create_goal", description: CREATE_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(CreateGoalToolSchema2) },
   { name: "claim_goal", description: CLAIM_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(ClaimGoalSchema2) },
   { name: "get_goal", description: GET_GOAL_DESCRIPTION2, inputSchema: mcpInputSchema2(GetGoalSchema2) },
@@ -13047,19 +13194,6 @@ var TransformSchema2 = external_exports.enum([
   "summarize"
   // reduce volume, keep decision value — 30-turn cap, spoken briefing
 ]);
-var OptionSchema2 = external_exports.object({
-  id: external_exports.string(),
-  label: external_exports.string(),
-  hint: external_exports.string().max(500).describe("Optional short projection of consequence or action if this option is chosen (e.g. 'Reruns test suite', 'Merges to main').").optional(),
-  // .describe() flows into the MCP contact JSON schema (zodToJsonSchema), so
-  // the constraints below are what an agent reads when deciding to use these.
-  html: external_exports.string().max(16384).describe(
-    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."
-  ).optional(),
-  image: external_exports.string().url().describe(
-    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use `html` instead."
-  ).optional()
-});
 var VisualSchema2 = external_exports.object({
   url: external_exports.string().url(),
   label: external_exports.string().optional()
@@ -13113,7 +13247,7 @@ var NotifyRequestFields2 = external_exports.object({
    *  ABSENT on the E2EE path, where the sealed `envelope` below carries it. The
    *  superRefine at the bottom enforces exactly one of the two. */
   context: ContextSchema2.optional(),
-  options: external_exports.array(OptionSchema2.omit({ id: true })).min(OPTIONS_MIN2).max(OPTIONS_MAX2).optional().describe(
+  options: external_exports.array(OptionInputSchema2).min(OPTIONS_MIN2).max(OPTIONS_MAX2).optional().describe(
     "The choices, in order \u2014 required when select is 'one'/'many'/'rank', omitted otherwise. Ids are assigned automatically by position ('1', '2', \u2026); the user's answer references them as optionId(s)."
   ),
   points: external_exports.array(external_exports.string().min(1)).optional().describe(
@@ -13307,7 +13441,7 @@ var AwaitItemSchema2 = external_exports.discriminatedUnion("type", [
   /** The awaited ask was REPLACED by a newer notification on its thread (e.g. a
    *  post-feedback revision, #633) — the user will never answer this id. Stop
    *  awaiting it; the live ask is the thread's newest turn (await that one, or
-   *  re-orient via get_thread / check_replies). */
+   *  re-orient via check_replies). */
   external_exports.object({
     type: external_exports.literal("superseded"),
     parentId: external_exports.string(),
@@ -13352,9 +13486,9 @@ var AgendaTurnSchema2 = external_exports.object({
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
   coveredIds: external_exports.array(external_exports.string()).optional(),
-  /** At most three short spoken sentences. Capped because a turn is a breath: a 1031-char
-   *  line went out on 2026-07-28 and the caller could not answer it at all. */
-  info: external_exports.array(external_exports.string().min(1)).max(3).default([]),
+  /** The spoken sentences of the turn, in order. No count: how long a turn is is the brain's call
+   *  (owner, 2026-09-25), and a count here refused whole plans. */
+  info: external_exports.array(external_exports.string().min(1)).default([]),
   question: external_exports.string().min(1).nullable(),
   /** True on the one turn carrying the agent's own declared question. */
   asks: external_exports.boolean().optional(),
@@ -13389,42 +13523,12 @@ var AgendaTurnSchema2 = external_exports.object({
 var CLAIM_STALE_MS2 = 30 * 6e4;
 var InboxItemSchema2 = external_exports.object({
   id: external_exports.string(),
-  /** The conversation thread + connection this item lives on. Present on the replied
-   *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
-  parentId: external_exports.string().optional(),
-  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
-   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
-   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
-   *  accumulates every message an agent ever sent, so grouping by it renders a day of
-   *  unrelated updates as a single "12-part request". Absent on rows written before the
-   *  `asks` table, and on anything that never went through `notify` — both fall back to the
-   *  thread, which is what the client did for all rows until now. */
-  askId: external_exports.string().optional(),
-  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
-   *  shares one `created_at` to the microsecond, so without it the author's order is
-   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
-   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
-   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
-  seq: external_exports.number().int().optional(),
-  /** HOW MANY units the arrival was cut into. A device reads a LENS, never the arrival —
-   *  `/api/inbox` serves `open`, so the units already settled are gone from it — and a client
-   *  counting what it can see is counting what is LEFT. Walking a three-unit ask on the answer
-   *  screen read "1 of 3", then "1 of 2", then no chip at all, each answer having removed the
-   *  only evidence of itself. How big an arrival is, is a fact about the arrival, so the
-   *  server that can still see every row states it. Absent on any row with no `askId`: a
-   *  unit knows WHICH ask it came from and WHERE it sat in it, and how many there were is
-   *  the one part of its own arrival a single row cannot answer. */
-  units: external_exports.number().int().positive().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema2,
   context: ContextSchema2,
   options: external_exports.array(OptionSchema2).optional(),
   /** The ask's declared coverage points (#396), when the agent sent them. */
   points: external_exports.array(external_exports.string()).optional(),
-  /** The call's AGENDA (broker/agenda-design.md): the ordered turns it is made of, built at
-   *  ring/enqueue time. Replaces the condensed line + index-aligned phrased points, which
-   *  between them could not express a call as a sequence. `question: null` is a real turn —
-   *  a status update stays a statement instead of being shaped into a yes/no. */
   /** Does this claim want an ANSWER, or is it telling you something? Written per row from
    *  `requestAsks` — the agent's own declaration, not a guess. `false` is what earns a card
    *  its acknowledge affordance: without it a status update offers a text box and a dismiss,
@@ -13445,7 +13549,31 @@ var InboxItemSchema2 = external_exports.object({
    *  instant the agent picks it up (#997). Absent = pre-trigger row; fall back to
    *  `createdAt`. */
   agentStateAt: external_exports.string().datetime().optional(),
-  agenda: external_exports.array(AgendaTurnSchema2).optional(),
+  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (walk/design.md §11, owner
+   *  2026-09-22). One per DecisionNeed on the Call, in the Call's order, answered or open (a
+   *  superseded or cancelled need is no longer a question anyone is asked). Present only on a
+   *  Call's cards, and every card of that Call carries the same list: the call screen reads it
+   *  once, off the one read it already makes (`GET /api/inbox/:callId`).
+   *
+   *  It counts DECISIONS, not agenda turns: turns include context-only lines and are re-planned
+   *  every cycle, so a spine drawn from them would change length under the caller mid-call.
+   *
+   *  `entryId` is the request Entry — the id the bot calls a CLAIM, and the one it names on the
+   *  `turn` topic (`asking`, `settled`), because the bot never sees a DecisionNeed id. `title` is
+   *  the card's own concise heading; `answer` the accepted answer in words, null while open. It
+   *  REPLACED `agenda` (turns), which nothing ever filled. */
+  questions: external_exports.array(external_exports.object({
+    id: external_exports.string(),
+    entryId: external_exports.string(),
+    title: external_exports.string(),
+    state: external_exports.enum(["open", "answered"]),
+    answer: external_exports.string().nullable(),
+    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+     *  author is not an agent this account holds (unpaired since, or a person). */
+    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema2.optional() }).optional()
+  })).optional(),
   visuals: external_exports.array(VisualSchema2).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
    *  agent's suggestion, or a default silly name). */
@@ -13462,16 +13590,35 @@ var InboxItemSchema2 = external_exports.object({
    *  agent (held in the inbox until the agent replies on the thread). */
   turn: external_exports.enum(["you", "agent"]).default("you"),
   /** Hard error reason on an awaiting request (turn="agent") — the wake failed to reach
-   *  the agent (provider-agnostic; set server-side). Absent = no hard error, though the
-   *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
+   *  the agent (provider-agnostic; set server-side). Absent = no hard error. Drives the inbox
+   *  error badge + Retry. */
   error: external_exports.string().optional(),
+  /** WHEN THIS AGENT WORK WENT QUIET (turn="agent"), by the one rule (`coldSince`: three days
+   *  with nothing said), or absent while it is not stalled. The inbox's stalled badge reads
+   *  this and nothing else (2026-09-23: a 3-minute age rule badged every live Goal stalled,
+   *  and "dismiss the stalled ones" cancelled 37 pieces of live work). */
+  cold: external_exports.string().datetime().optional(),
   clarifies: external_exports.string().optional(),
-  /** The ring ladder ran out while this was still pending — we tried to reach you and
-   *  STOPPED trying (`arbitration/arbitrate.ts` `nextRing` → `stop`). Distinct from an
-   *  agent with nothing to say, which the roster drew identically until now: "nothing to
-   *  say" and "gave up saying it" are opposite situations wearing the same face
-   *  (navigation-design.md, gap 1). False for anything that never rang. */
-  gaveUp: external_exports.boolean().default(false),
+  /** THIS CARD'S QUESTION IS ON A LIVE CALL (owner, 2026-09-24: "Mark it while the call is
+   *  live"). Present only while an open Call Delivery carries the card's request Entry — read
+   *  off the same open list the card came from, so it clears when the Call does. A card is the
+   *  backup for a call not taken; while the call has it, the call is where it is answered. */
+  onCall: external_exports.literal(true).optional(),
+  /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
+   *  declined, and what the ladder will do next — read off the cron's own row, never computed
+   *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
+   *  The ladder is ACCOUNT-WIDE (#2259): `anchorAt` and `step` are the account's position;
+   *  `nextRingAt` is this card's armed instant (`deliveries.next_ring_at`), null once the cron
+   *  has disarmed it — the curve's end, `inbox`/`dismiss`, or a setting that said no more rings.
+   *  It replaced `gaveUp` (deleted 2026-09-22): "the ladder spent" was a boolean the projection
+   *  never set, and it is `nextRingAt === null` here — the party's *Missed you* (`party/dress.ts`)
+   *  and the roster's `unreached` read `declinedAt`, and stand while it does. */
+  ring: external_exports.object({
+    declinedAt: external_exports.string().datetime(),
+    anchorAt: external_exports.string().datetime(),
+    nextRingAt: external_exports.string().datetime().nullable(),
+    step: external_exports.number().int()
+  }).optional(),
   /** Why this arrived the way it did, read back off the delivery receipt (`notify/why.ts`).
    *  Absent for anything never delivered through a push, and for older rows written before
    *  the reason was recorded. Deliberately a debug affordance, shown small (owner,
@@ -13505,7 +13652,10 @@ var InboxItemSchema2 = external_exports.object({
     goalIds: external_exports.array(external_exports.string()),
     decisionNeedId: external_exports.string().optional(),
     sealed: external_exports.boolean(),
-    goalState: external_exports.string().optional()
+    goalState: external_exports.string().optional(),
+    /** THAT GOAL'S NAME (#2416) — what Activity's row is headed by, since a row there is one Goal
+     *  and the cards it holds sit behind it. Stamped by the same read as `goalState`. */
+    goalTitle: external_exports.string().optional()
   }).optional()
 });
 var APNS_TOKEN_RE2 = /^[0-9a-fA-F]{64}$/;
@@ -13536,6 +13686,8 @@ var MissedCallSchema2 = external_exports.enum([
   "inbox",
   "dismiss"
 ]);
+var clock2 = (h) => h === 0 ? "midnight" : h === 12 ? "noon" : h < 12 ? `${h} am` : `${h - 12} pm`;
+var QUIET2 = ` Nothing rings from ${clock2(NIGHT2.from)} to ${clock2(NIGHT2.to)} your time; the count waits for morning.`;
 var BrokerTuningSchema2 = external_exports.object({
   /** 'none' = skip the spoken ack after a mapped answer (power users find it slow). */
   ackVerbosity: external_exports.enum(["normal", "none"]).optional(),
@@ -13570,6 +13722,12 @@ var UserSettingsSchema2 = external_exports.object({
    *  must not silently reset this privacy choice. Absent = leave unchanged on
    *  write, 'hosted' on read (see store.ts). */
   voiceMode: external_exports.enum(["hosted", "on_device"]).optional(),
+  /** Talk — after you answer, the next step is read aloud (walk/design.md §6). ALWAYS ON until
+   *  turned off (owner, 2026-09-18, #2249): a setting, not a per-walk toggle. Optional, NOT
+   *  defaulted, for the same reason `voiceMode` is: a stale client PATCHing the full settings
+   *  object must not silently turn it back on. Absent = leave unchanged on write, true on
+   *  read (see store.ts). */
+  talk: external_exports.boolean().optional(),
   /** Per-user ring budget (#603): calls per rolling day before further calls
    *  degrade to banner. Absent = the global default (25). A number, never a
    *  bypass — every account keeps a ceiling. No UI; set per user for testing. */
@@ -13596,7 +13754,6 @@ var UserSettingsSchema2 = external_exports.object({
 });
 var HistoryItemSchema2 = external_exports.object({
   id: external_exports.string(),
-  parentId: external_exports.string(),
   /** 'user' = a request you sent; 'agent' = a notification an agent sent you. */
   initiator: external_exports.enum(["user", "agent"]),
   title: external_exports.string(),
@@ -13755,6 +13912,24 @@ var QueueQuestionSchema2 = external_exports.object({
    *  gate at all. */
   blocked: external_exports.boolean().default(false)
 });
+var QueueReplySchema2 = external_exports.object({
+  /** The card this note was (`deliveryId:requestEntryId`, minted by the server like every card
+   *  id) — so the phone can tell a reply it just sent from one the queue already carries, and the
+   *  walk can name it in its zoom. */
+  id: external_exports.string(),
+  /** The Goal the note is on. */
+  goalId: external_exports.string(),
+  /** What the note said. */
+  note: external_exports.string(),
+  /** Where it was carried — where a second reply goes (`POST /api/entries`, #2252). */
+  deliveryId: external_exports.string(),
+  requestEntryId: external_exports.string(),
+  askedAt: external_exports.string(),
+  /** When the person last replied — the window's start. */
+  repliedAt: external_exports.string(),
+  /** The person's latest words about it; null when there is nothing readable in them. */
+  reply: external_exports.string().nullable()
+});
 var QueueItemSchema2 = external_exports.object({
   id: external_exports.string(),
   /** One-line headline — the first sentence of the outcome. */
@@ -13767,6 +13942,9 @@ var QueueItemSchema2 = external_exports.object({
   assignee: external_exports.string().nullable().default(null),
   /** What the agent last said it was doing; null if it has said nothing. */
   progress: external_exports.string().nullable().default(null),
+  /** HOME'S LINE FOR THAT NOTE (owner, 2026-09-23): a few plain words one read wrote from `progress`,
+   *  served only while it was written for the current note. Null means show the Goal's name. */
+  progressLine: external_exports.string().nullable().optional(),
   reviewPending: external_exports.boolean().default(false),
   dueAt: external_exports.string().nullable().default(null),
   /** The Goal this one was opened under; null at the root. */
@@ -13779,11 +13957,20 @@ var QueueItemSchema2 = external_exports.object({
   blocked: external_exports.boolean().default(false),
   /** Every decision need on it, open or settled — the page decides which to show. */
   questions: external_exports.array(QueueQuestionSchema2).default([]),
+  /** Every note on it the person replied to (`QueueReplySchema`) — the page decides which to show.
+   *  Optional, not defaulted: absent is none, and every hand-built queue (fixtures, the demo) need
+   *  not spell an empty list. */
+  replies: external_exports.array(QueueReplySchema2).optional(),
   /** The repository or project identifier this Goal belongs to (#2280), null if untracked. */
   repo: external_exports.string().nullable().optional(),
   createdAt: external_exports.string(),
-  updatedAt: external_exports.string().nullable().default(null)
+  updatedAt: external_exports.string().nullable().default(null),
+  /** When its owner last SAID something about it (`goals.last_progress_at`, written by every
+   *  `update_goal` that changes `progress`). `updatedAt` moves for reasons nobody chose — a
+   *  state recomputed, a review flag — so it cannot tell work in hand from work gone quiet. */
+  lastProgressAt: external_exports.string().nullable().optional()
 });
+var COLD_AFTER_MS2 = 3 * 24 * 60 * 60 * 1e3;
 var NoteSourceSchema2 = external_exports.enum(["app", "call"]);
 var NoteStatusSchema2 = external_exports.enum(["open", "assigned", "in_progress", "done"]);
 var NoteRepeatSchema2 = external_exports.enum(["once", "until_done"]);
@@ -14232,7 +14419,13 @@ function startSession(opts) {
       ...process.env,
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
       ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
-      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {}
+      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {},
+      // A PUMP DRIVES THIS PROCESS (2026-09-22, #2265): every run `runHarness` starts has the
+      // bridge's pump typing answers in, so nothing inside it may start a second delivery path.
+      // Exported on EVERY spawn — `PAIGY_SESSION_ID` above is the conversation to resume, and a
+      // fresh spawn has none, which is how a fresh run read as "not harness-started" to the
+      // session-start hook and the `listen` tool (they now test either mark; listening.ts).
+      PAIGY_HARNESS: "1"
     },
     stdio: ["pipe", "pipe", "pipe"]
   });
@@ -14439,6 +14632,7 @@ async function ask(state, rail, input) {
       waiting: "hard",
       channel: input.call ? "call" : "notification"
     });
+    if ("recorded" in sent) return null;
     const entryId = sent.requestEntryIds[0];
     if (!entryId) return null;
     (state.seen ??= /* @__PURE__ */ new Set()).add(entryId);
@@ -14615,7 +14809,7 @@ function runHarness(opts) {
 // src/update.ts
 import { execFile } from "child_process";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join6 } from "path";
+import { dirname as dirname3, join as join7 } from "path";
 import { promisify } from "util";
 var SERVICE_LABEL = "ai.paigy.harness";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
@@ -14642,7 +14836,7 @@ async function latestVersion() {
 }
 async function install(version) {
   const bin = dirname3(process.execPath);
-  await promisify(execFile)(join6(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+  await promisify(execFile)(join7(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
     env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
     timeout: 5 * 6e4
   });
@@ -14693,7 +14887,7 @@ function selfUpdater(deps) {
 }
 
 // src/host.ts
-var HOST_FILE = join7(homedir7(), ".paigy", "host.json");
+var HOST_FILE = join8(homedir7(), ".paigy", "host.json");
 function readHostState() {
   try {
     const s = JSON.parse(readFileSync4(HOST_FILE, "utf8"));
@@ -14722,9 +14916,9 @@ async function slotHasWaitingWork(token, session) {
 }
 var PRESENCE_FRESH_MS = 3 * 6e4;
 function wakeAction(live, now, serverSeenAt) {
-  if (live) return "skip";
-  if (serverSeenAt !== void 0 && now - serverSeenAt < PRESENCE_FRESH_MS) return "skip";
-  return "spawn";
+  if (live) return { action: "skip", why: "run" };
+  if (serverSeenAt !== void 0 && now - serverSeenAt < PRESENCE_FRESH_MS) return { action: "skip", why: "presence" };
+  return { action: "spawn", why: "nobody" };
 }
 function startHost(opts) {
   const runs = /* @__PURE__ */ new Map();
@@ -14814,7 +15008,11 @@ function startHost(opts) {
       const live = runs.get(key);
       const tokenId = slotIdentity(slot).tokenId;
       const seenByServer = tokenId ? presence.get(tokenId) : void 0;
-      if (wakeAction(!!live, Date.now(), seenByServer) === "skip") return;
+      const decided = wakeAction(!!live, Date.now(), seenByServer);
+      if (decided.action === "skip") {
+        opts.log(decided.why === "run" ? `\u25CC ${slotName(slot) ?? slot} is running here \u2014 its pump types the work in; not spawning` : `\u25CC ${slotName(slot) ?? slot} is working somewhere this host cannot see (heartbeat) \u2014 not spawning`);
+        return;
+      }
       const token = readToken(slot);
       if (!token) return;
       const owner = ownerSession(slot);
@@ -15194,9 +15392,9 @@ async function available(deps = {}) {
   });
   return [ollama, ...harnesses];
 }
-function refusal(options, asked) {
+function refusal(options, asked2) {
   const lines2 = [
-    asked ? `Can't judge with --via ${asked}: ${options.find((o) => o.provider === asked)?.hint ?? "it isn't available on this machine"}` : "No local judge available \u2014 triage refuses rather than sending your queue to a cloud model.",
+    asked2 ? `Can't judge with --via ${asked2}: ${options.find((o) => o.provider === asked2)?.hint ?? "it isn't available on this machine"}` : "No local judge available \u2014 triage refuses rather than sending your queue to a cloud model.",
     "",
     "Triage runs the model where your queue already lives (#1106). Your options:"
   ];
@@ -15220,10 +15418,10 @@ var RUNNERS = {
   agy: { cli: "agy", argv: () => ["-p"] }
 };
 var RUN_TIMEOUT_MS = 5 * 6e4;
-async function judgeFor(asked, deps = {}) {
+async function judgeFor(asked2, deps = {}) {
   const options = await available(deps);
-  const chosen = asked ? options.find((o) => o.provider === asked) : options.find((o) => o.ready);
-  if (!chosen?.ready) return { error: refusal(options, asked) };
+  const chosen = asked2 ? options.find((o) => o.provider === asked2) : options.find((o) => o.ready);
+  if (!chosen?.ready) return { error: refusal(options, asked2) };
   if (chosen.provider === "ollama") {
     const model = chosen.model;
     return {
@@ -15244,9 +15442,9 @@ async function judgeFor(asked, deps = {}) {
     };
   }
   const runner = RUNNERS[chosen.provider];
-  if (!runner) return { error: refusal(options, asked) };
+  if (!runner) return { error: refusal(options, asked2) };
   const bin = which(runner.cli);
-  if (!bin) return { error: refusal(options, asked) };
+  if (!bin) return { error: refusal(options, asked2) };
   return {
     provider: chosen.provider,
     model: null,
@@ -15552,7 +15750,7 @@ var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
 }
-var ICON = join8(here, "..", "assets", "icon.png");
+var ICON = join9(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
     // Sized for the working log, which is now the window's centerpiece; the layout is a
@@ -15564,9 +15762,9 @@ function createWindow() {
     minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
-    webPreferences: { preload: join8(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
+    webPreferences: { preload: join9(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
   });
-  void win.loadFile(join8(here, "..", "renderer", "index.html"));
+  void win.loadFile(join9(here, "..", "renderer", "index.html"));
 }
 var host = null;
 app.whenReady().then(() => {
@@ -15635,7 +15833,7 @@ ipcMain.handle("paigy:agent", async (_e, name) => {
 });
 ipcMain.handle("paigy:agent-log", (_e, name) => {
   try {
-    const all = readFileSync5(join8(homedir9(), ".paigy", "host.log"), "utf8").split("\n");
+    const all = readFileSync5(join9(homedir9(), ".paigy", "host.log"), "utf8").split("\n");
     const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
     return mine.slice(-500).join("\n");
   } catch {