@paigy/harness 0.3.15 → 0.3.17

package/dist/main.js

@@ -4580,7 +4580,7 @@ import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname4, join as join8 } from "path";
+import { dirname as dirname4, join as join9 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
@@ -9973,7 +9973,7 @@ var AskInputSchema = external_exports.object({
   parentId: external_exports.string().uuid().optional().describe("The Goal this question is about \u2014 usually the one you are working on. The question goes onto that Goal and its answer comes back there. Omit it and Paigy places the question in the tree itself."),
   repo: external_exports.string().optional().describe("Optional repository context."),
   ask: external_exports.string().trim().min(1).max(1e4).describe(
-    "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+    "ONE question, and only what is needed to answer it. Several questions are several asks in the array, one each: an answer settles the one ask it was given in the shape that ask declares, so a person who answers the part of a bundled ask that interested them settles nothing and is asked again. Paigy reads every ask once and takes a bundled one apart into its own cards anyway \u2014 parts of one piece of work under one Goal, separate things as separate Goals \u2014 but the words it splits are its reading, not yours. News, progress and findings are their own contact; a call contact JOINS a call already happening, so several arrive as one call."
   ),
   options: external_exports.array(OptionInputSchema).min(2).max(6).optional()
 }).strict();
@@ -9984,7 +9984,7 @@ var StartContactSchema = external_exports.object({
 }).strict();
 var ContactSchema = external_exports.union([StartContactSchema, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
 var CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
-var CONTACT_DESCRIPTION = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Never bundle multiple questions into a single 'ask' string; pass them as separate objects in the 'asks' array.";
+var CONTACT_DESCRIPTION = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. One question per 'ask'; several questions are several objects in 'asks'. A bundled ask is taken apart into its own cards by Paigy's one intake read \u2014 parts of one piece of work under one Goal, separate things as separate Goals. An ask with no options that is not blocking is a report: on a Goal whose report card is still open it is added to that card, with no new push; one that only says where your work stands while under way is recorded as the Goal's progress, not sent (the result says so).";
 var CreateGoalSchema = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
   /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
@@ -10031,9 +10031,9 @@ var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({
 var ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
-var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var UPDATE_GOAL_DESCRIPTION = `Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. state: done means the work was accomplished, and it can be reopened: when the person says it is not done ("it's not working"), set state: active on that same Goal instead of starting a new one; its parent reopens with it. cancelled is final. Returns the Goal as get_goal reads it, at its new revision.`;
+var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Another agent's Goal that has gone quiet for 3 days (check_replies lists them as stalledOthers) is taken over when you claim it, and becomes yours to finish or cancel. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION = "What is waiting for you: your open Deliveries (a request the user started toward you, a handoff), one row each with its Goals, how many decisions are still open, and the newest words in brief; `assigned`, your Goals nobody has started yet, however they became yours (claim_goal({goalId}) starts one); and `review`, your Goals with something new on them \u2014 the user's answers and notes are Entries on the Goal, not Deliveries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread a Delivery in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true clears the Goal from `review` and closes the Deliveries addressed to you on it.";
 var CheckRepliesSchema = external_exports.object({}).strict();
 var AGENT_TOOLS = [
   { name: "contact", description: CONTACT_DESCRIPTION, inputSchema: CONTACT_SCHEMA },
@@ -10363,9 +10363,9 @@ var AgendaTurnSchema = external_exports.object({
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
   coveredIds: external_exports.array(external_exports.string()).optional(),
-  /** At most three short spoken sentences. Capped because a turn is a breath: a 1031-char
-   *  line went out on 2026-07-28 and the caller could not answer it at all. */
-  info: external_exports.array(external_exports.string().min(1)).max(3).default([]),
+  /** The spoken sentences of the turn, in order. No count: how long a turn is is the brain's call
+   *  (owner, 2026-09-25), and a count here refused whole plans. */
+  info: external_exports.array(external_exports.string().min(1)).default([]),
   question: external_exports.string().min(1).nullable(),
   /** True on the one turn carrying the agent's own declared question. */
   asks: external_exports.boolean().optional(),
@@ -10400,32 +10400,6 @@ var AgendaTurnSchema = external_exports.object({
 var CLAIM_STALE_MS = 30 * 6e4;
 var InboxItemSchema = external_exports.object({
   id: external_exports.string(),
-  /** The conversation thread + connection this item lives on. Present on the replied
-   *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
-  parentId: external_exports.string().optional(),
-  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
-   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
-   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
-   *  accumulates every message an agent ever sent, so grouping by it renders a day of
-   *  unrelated updates as a single "12-part request". Absent on rows written before the
-   *  `asks` table, and on anything that never went through `notify` — both fall back to the
-   *  thread, which is what the client did for all rows until now. */
-  askId: external_exports.string().optional(),
-  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
-   *  shares one `created_at` to the microsecond, so without it the author's order is
-   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
-   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
-   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
-  seq: external_exports.number().int().optional(),
-  /** HOW MANY units the arrival was cut into. A device reads a LENS, never the arrival —
-   *  `/api/inbox` serves `open`, so the units already settled are gone from it — and a client
-   *  counting what it can see is counting what is LEFT. Walking a three-unit ask on the answer
-   *  screen read "1 of 3", then "1 of 2", then no chip at all, each answer having removed the
-   *  only evidence of itself. How big an arrival is, is a fact about the arrival, so the
-   *  server that can still see every row states it. Absent on any row with no `askId`: a
-   *  unit knows WHICH ask it came from and WHERE it sat in it, and how many there were is
-   *  the one part of its own arrival a single row cannot answer. */
-  units: external_exports.number().int().positive().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema,
   context: ContextSchema,
@@ -10470,7 +10444,18 @@ var InboxItemSchema = external_exports.object({
     entryId: external_exports.string(),
     title: external_exports.string(),
     state: external_exports.enum(["open", "answered"]),
-    answer: external_exports.string().nullable()
+    answer: external_exports.string().nullable(),
+    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+     *  author is not an agent this account holds (unpaired since, or a person). */
+    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema.optional() }).optional(),
+    /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
+     *  its need offers, exactly as its own card carries them, present only when one of them has a
+     *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
+     *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
+     *  says those, and the list stays small (an `html` is up to 16 KB). */
+    options: external_exports.array(OptionSchema).optional()
   })).optional(),
   visuals: external_exports.array(VisualSchema).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
@@ -10488,10 +10473,20 @@ var InboxItemSchema = external_exports.object({
    *  agent (held in the inbox until the agent replies on the thread). */
   turn: external_exports.enum(["you", "agent"]).default("you"),
   /** Hard error reason on an awaiting request (turn="agent") — the wake failed to reach
-   *  the agent (provider-agnostic; set server-side). Absent = no hard error, though the
-   *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
+   *  the agent (provider-agnostic; set server-side). Absent = no hard error. Drives the inbox
+   *  error badge + Retry. */
   error: external_exports.string().optional(),
+  /** WHEN THIS AGENT WORK WENT QUIET (turn="agent"), by the one rule (`coldSince`: three days
+   *  with nothing said), or absent while it is not stalled. The inbox's stalled badge reads
+   *  this and nothing else (2026-09-23: a 3-minute age rule badged every live Goal stalled,
+   *  and "dismiss the stalled ones" cancelled 37 pieces of live work). */
+  cold: external_exports.string().datetime().optional(),
   clarifies: external_exports.string().optional(),
+  /** THIS CARD'S QUESTION IS ON A LIVE CALL (owner, 2026-09-24: "Mark it while the call is
+   *  live"). Present only while an open Call Delivery carries the card's request Entry — read
+   *  off the same open list the card came from, so it clears when the Call does. A card is the
+   *  backup for a call not taken; while the call has it, the call is where it is answered. */
+  onCall: external_exports.literal(true).optional(),
   /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
    *  declined, and what the ladder will do next — read off the cron's own row, never computed
    *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
@@ -10540,7 +10535,10 @@ var InboxItemSchema = external_exports.object({
     goalIds: external_exports.array(external_exports.string()),
     decisionNeedId: external_exports.string().optional(),
     sealed: external_exports.boolean(),
-    goalState: external_exports.string().optional()
+    goalState: external_exports.string().optional(),
+    /** THAT GOAL'S NAME (#2416) — what Activity's row is headed by, since a row there is one Goal
+     *  and the cards it holds sit behind it. Stamped by the same read as `goalState`. */
+    goalTitle: external_exports.string().optional()
   }).optional()
 });
 var APNS_TOKEN_RE = /^[0-9a-fA-F]{64}$/;
@@ -10639,7 +10637,6 @@ var UserSettingsSchema = external_exports.object({
 });
 var HistoryItemSchema = external_exports.object({
   id: external_exports.string(),
-  parentId: external_exports.string(),
   /** 'user' = a request you sent; 'agent' = a notification an agent sent you. */
   initiator: external_exports.enum(["user", "agent"]),
   title: external_exports.string(),
@@ -10798,6 +10795,24 @@ var QueueQuestionSchema = external_exports.object({
    *  gate at all. */
   blocked: external_exports.boolean().default(false)
 });
+var QueueReplySchema = external_exports.object({
+  /** The card this note was (`deliveryId:requestEntryId`, minted by the server like every card
+   *  id) — so the phone can tell a reply it just sent from one the queue already carries, and the
+   *  walk can name it in its zoom. */
+  id: external_exports.string(),
+  /** The Goal the note is on. */
+  goalId: external_exports.string(),
+  /** What the note said. */
+  note: external_exports.string(),
+  /** Where it was carried — where a second reply goes (`POST /api/entries`, #2252). */
+  deliveryId: external_exports.string(),
+  requestEntryId: external_exports.string(),
+  askedAt: external_exports.string(),
+  /** When the person last replied — the window's start. */
+  repliedAt: external_exports.string(),
+  /** The person's latest words about it; null when there is nothing readable in them. */
+  reply: external_exports.string().nullable()
+});
 var QueueItemSchema = external_exports.object({
   id: external_exports.string(),
   /** One-line headline — the first sentence of the outcome. */
@@ -10825,6 +10840,10 @@ var QueueItemSchema = external_exports.object({
   blocked: external_exports.boolean().default(false),
   /** Every decision need on it, open or settled — the page decides which to show. */
   questions: external_exports.array(QueueQuestionSchema).default([]),
+  /** Every note on it the person replied to (`QueueReplySchema`) — the page decides which to show.
+   *  Optional, not defaulted: absent is none, and every hand-built queue (fixtures, the demo) need
+   *  not spell an empty list. */
+  replies: external_exports.array(QueueReplySchema).optional(),
   /** The repository or project identifier this Goal belongs to (#2280), null if untracked. */
   repo: external_exports.string().nullable().optional(),
   createdAt: external_exports.string(),
@@ -11285,6 +11304,7 @@ function currentRepo(cwd = process.cwd()) {
   }
   return asked;
 }
+var NOT_SENT = "Recorded as progress, not sent: nobody was notified. If the person should see it (a result, something to try or check, a finding), contact again and say so; report progress with update_goal.";
 async function contact(input, opts = {}) {
   const parsed = ContactSchema.parse(input);
   opts.signal?.throwIfAborted();
@@ -11292,6 +11312,7 @@ async function contact(input, opts = {}) {
   const headers = { "content-type": "application/json", authorization: `Bearer ${authToken(opts.token) ?? ""}`, "x-paigy-model": "goal-entry-v1" };
   let deliveryId;
   let deliveries = [];
+  let recorded = [];
   if ("deliveryId" in parsed) {
     deliveryId = parsed.deliveryId;
   } else {
@@ -11320,16 +11341,24 @@ async function contact(input, opts = {}) {
     if (!res.ok) await fail("batch contact", res);
     const receipt = await res.json();
     deliveries = receipt.deliveries ?? [];
+    recorded = receipt.recorded ?? [];
+    if (deliveries.length === 0 && recorded.length) return { sent: false, recorded, message: NOT_SENT };
     if (deliveries.length === 0) throw new Error("Goal contact returned no Delivery identities");
     deliveryId = deliveries[0]?.deliveryId ?? "";
     if (!deliveryId) throw new Error("Goal contact returned no valid Delivery identity");
   }
-  const all = deliveries.filter((d) => !!d.deliveryId && !!d.goalId);
+  const all = deliveries.filter((d) => !!d.deliveryId && !!d.goalId).map(({ id, deliveryId: deliveryId2, goalId }) => ({ ...id ? { id } : {}, deliveryId: deliveryId2, goalId }));
+  const joinedCard = deliveries[0]?.joinedCard === true;
   const read = async (signal2) => {
     const res = ensureAuthed(await send22(`${BACKEND_URL}/api/deliveries/${encodeURIComponent(deliveryId)}`, { headers, signal: signal2 }));
     if (!res.ok) await fail("read_delivery", res);
     const one = await res.json();
-    return all.length > 1 ? { ...one, deliveries: all } : one;
+    return {
+      ...one,
+      ...all.length > 1 ? { deliveries: all } : {},
+      ...recorded.length ? { recorded, notSent: NOT_SENT } : {},
+      ...joinedCard ? { joinedCard: true } : {}
+    };
   };
   const settled = (d) => d.kind === "notification" || d.state === "closed" || d.answers.length > 0 || d.entries.some((e) => e.kind === "contribution");
   if (opts.waits === false) return read(opts.signal);
@@ -11359,47 +11388,108 @@ async function checkReplies(opts = {}) {
 var HEARTBEAT_MS = 25e3;
 var RETRY_MS = [1e3, 2e3, 5e3, 1e4, 3e4];
 var JOIN = { config: { broadcast: { self: false } } };
+var JOIN_TIMEOUT_MS = 1e4;
 var lines = /* @__PURE__ */ new Map();
 function frame(line, topic, event, payload) {
+  const ref = String(++line.ref);
   try {
-    line.ws?.send(JSON.stringify({ topic, event, payload, ref: String(++line.ref) }));
+    line.ws?.send(JSON.stringify({ topic, event, payload, ref }));
   } catch {
   }
+  return ref;
 }
 function stop(line) {
   line.open = false;
+  line.beat = void 0;
   clearInterval(line.heart);
   clearTimeout(line.retry);
+  for (const t of line.topics.values()) {
+    clearTimeout(t.timer);
+    t.joined = false;
+    t.ref = void 0;
+  }
+}
+function join3(line, name, t) {
+  clearTimeout(t.timer);
+  t.joined = false;
+  t.ref = frame(line, `realtime:${name}`, "phx_join", JOIN);
+  t.timer = setTimeout(() => rejoin(line, name, t), JOIN_TIMEOUT_MS);
+}
+function rejoin(line, name, t) {
+  clearTimeout(t.timer);
+  t.joined = false;
+  t.ref = void 0;
+  if (!line.open || line.topics.get(name) !== t) return;
+  t.timer = setTimeout(() => {
+    if (line.open && line.topics.get(name) === t) join3(line, name, t);
+  }, RETRY_MS[Math.min(t.attempt++, RETRY_MS.length - 1)]);
+}
+function joined(t) {
+  clearTimeout(t.timer);
+  t.joined = true;
+  t.attempt = 0;
+  for (const l of t.listeners) l.onJoined?.(++l.joins);
 }
 function connect(line) {
   const base = line.url.replace(/^http/, "ws").replace(/\/+$/, "");
   const ws = line.ws = new import_undici.WebSocket(`${base}/realtime/v1/websocket?apikey=${encodeURIComponent(line.anonKey)}&vsn=1.0.0`);
+  let gone = false;
+  const again = () => {
+    if (gone) return;
+    gone = true;
+    stop(line);
+    if (!line.topics.size) return;
+    line.retry = setTimeout(() => connect(line), RETRY_MS[Math.min(line.attempt++, RETRY_MS.length - 1)]);
+  };
   ws.addEventListener("open", () => {
+    if (gone) return;
     line.open = true;
     line.attempt = 0;
-    for (const topic of line.topics.keys()) frame(line, `realtime:${topic}`, "phx_join", JOIN);
-    line.heart = setInterval(() => frame(line, "phoenix", "heartbeat", {}), HEARTBEAT_MS);
+    for (const [name, t] of line.topics) join3(line, name, t);
+    line.heart = setInterval(() => {
+      if (line.beat) {
+        try {
+          ws.close();
+        } catch {
+        }
+        again();
+        return;
+      }
+      line.beat = frame(line, "phoenix", "heartbeat", {});
+    }, HEARTBEAT_MS);
   });
   ws.addEventListener("message", (e) => {
+    if (gone) return;
     let m;
     try {
       m = JSON.parse(String(e.data));
     } catch {
       return;
     }
-    if (m.event !== "broadcast" || !m.topic?.startsWith("realtime:")) return;
-    for (const l of line.topics.get(m.topic.slice("realtime:".length)) ?? []) {
+    if (m.topic === "phoenix") {
+      if (m.event === "phx_reply" && m.ref === line.beat) line.beat = void 0;
+      return;
+    }
+    if (!m.topic?.startsWith("realtime:")) return;
+    const name = m.topic.slice("realtime:".length);
+    const t = line.topics.get(name);
+    if (!t) return;
+    if (m.event === "phx_reply") {
+      if (!t.ref || m.ref !== t.ref) return;
+      if (m.payload?.status === "ok") joined(t);
+      else rejoin(line, name, t);
+      return;
+    }
+    if (m.event === "phx_error" || m.event === "phx_close") {
+      if (m.ref && m.ref !== t.ref) return;
+      rejoin(line, name, t);
+      return;
+    }
+    if (m.event !== "broadcast") return;
+    for (const l of t.listeners) {
       if (m.payload?.event === l.event) l.onMessage(m.payload.payload);
     }
   });
-  let gone = false;
-  const again = () => {
-    if (gone) return;
-    gone = true;
-    stop(line);
-    if (!line.topics.size) return;
-    line.retry = setTimeout(() => connect(line), RETRY_MS[Math.min(line.attempt++, RETRY_MS.length - 1)]);
-  };
   ws.addEventListener("close", again);
   ws.addEventListener("error", again);
 }
@@ -11407,17 +11497,22 @@ function subscribeRealtime(args) {
   const key = `${args.url} ${args.anonKey}`;
   let line = lines.get(key);
   if (!line) lines.set(key, line = { url: args.url, anonKey: args.anonKey, open: false, attempt: 0, ref: 0, topics: /* @__PURE__ */ new Map() });
-  let heard = line.topics.get(args.topic);
-  if (!heard) {
-    line.topics.set(args.topic, heard = /* @__PURE__ */ new Set());
-    if (line.open) frame(line, `realtime:${args.topic}`, "phx_join", JOIN);
-  }
-  const me = { event: args.event, onMessage: args.onMessage };
-  heard.add(me);
+  let t = line.topics.get(args.topic);
+  if (!t) {
+    line.topics.set(args.topic, t = { listeners: /* @__PURE__ */ new Set(), joined: false, attempt: 0 });
+    if (line.open) join3(line, args.topic, t);
+  }
+  const topic = t;
+  const me = { event: args.event, onMessage: args.onMessage, onJoined: args.onJoined, joins: 0 };
+  topic.listeners.add(me);
+  if (topic.joined && me.onJoined) queueMicrotask(() => {
+    if (topic.joined && topic.listeners.has(me)) me.onJoined?.(++me.joins);
+  });
   if (!line.ws) connect(line);
   return {
     close: () => {
-      if (!heard.delete(me) || heard.size) return;
+      if (!topic.listeners.delete(me) || topic.listeners.size) return;
+      clearTimeout(topic.timer);
       line.topics.delete(args.topic);
       if (line.topics.size) {
         if (line.open) frame(line, `realtime:${args.topic}`, "phx_leave", {});
@@ -11433,7 +11528,7 @@ function subscribeRealtime(args) {
   };
 }
 async function subscribeWake(onNudge, opts = {}) {
-  const { release = true, ...client } = opts;
+  const { release = true, onJoined, ...client } = opts;
   const cfg = await registerDelivery("self_hosted", client);
   const { url, anonKey } = cfg.realtime;
   const channel = wakeChannel(cfg.tokenId);
@@ -11442,7 +11537,8 @@ async function subscribeWake(onNudge, opts = {}) {
     anonKey,
     topic: channel,
     event: WAKE_EVENT,
-    onMessage: (payload) => onNudge(payload ?? {})
+    onMessage: (payload) => onNudge(payload ?? {}),
+    onJoined
   });
   return {
     tokenId: cfg.tokenId,
@@ -11463,7 +11559,7 @@ import { homedir as homedir9, hostname } from "os";
 import { spawnSync } from "child_process";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { delimiter, dirname, join as join3 } from "path";
+import { delimiter, dirname, join as join4 } from "path";
 var CATALOG = [
   {
     name: "claude",
@@ -11499,10 +11595,10 @@ var CATALOG = [
 function probeDirs(home = homedir3()) {
   return [
     dirname(process.execPath),
-    join3(home, ".local", "bin"),
+    join4(home, ".local", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin",
-    join3(home, ".npm-global", "bin")
+    join4(home, ".npm-global", "bin")
   ];
 }
 function which(bin) {
@@ -11510,7 +11606,7 @@ function which(bin) {
   const fromPath = hit.status === 0 ? hit.stdout.trim() : "";
   if (fromPath) return fromPath;
   for (const dir of probeDirs()) {
-    const candidate = join3(dir, bin);
+    const candidate = join4(dir, bin);
     if (existsSync2(candidate)) return candidate;
   }
   return null;
@@ -11552,14 +11648,14 @@ function detectAll(deps = {}) {
 // src/host.ts
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2, join as join4, resolve } from "path";
+import { dirname as dirname2, join as join5, resolve } from "path";
 import { homedir as homedir4 } from "os";
 function workspacesFile() {
-  return join4(homedir4(), ".paigy", "workspaces.json");
+  return join5(homedir4(), ".paigy", "workspaces.json");
 }
 function listWorkspaces(deps) {
   try {
@@ -11600,7 +11696,7 @@ function resolveWakeDir(pinned, deps) {
 // src/owner.ts
 import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var HEAD_BYTES = 64e3;
 function readHead(file) {
   const fd = openSync2(file, "r");
@@ -11616,7 +11712,7 @@ function ownerSession(slot, deps = {}) {
   const m = /^session:([0-9a-f]{8})$/.exec(slot);
   if (!m) return null;
   const prefix = m[1];
-  const root = deps.projectsDir ?? join5(homedir5(), ".claude", "projects");
+  const root = deps.projectsDir ?? join6(homedir5(), ".claude", "projects");
   const list = deps.list ?? ((dir) => readdirSync(dir));
   const head = deps.head ?? readHead;
   let folders;
@@ -11628,7 +11724,7 @@ function ownerSession(slot, deps = {}) {
   for (const folder of folders) {
     let files;
     try {
-      files = list(join5(root, folder));
+      files = list(join6(root, folder));
     } catch {
       continue;
     }
@@ -11636,7 +11732,7 @@ function ownerSession(slot, deps = {}) {
     if (!file) continue;
     let text;
     try {
-      text = head(join5(root, folder, file));
+      text = head(join6(root, folder, file));
     } catch {
       continue;
     }
@@ -12991,7 +13087,7 @@ var AskInputSchema2 = external_exports.object({
   parentId: external_exports.string().uuid().optional().describe("The Goal this question is about \u2014 usually the one you are working on. The question goes onto that Goal and its answer comes back there. Omit it and Paigy places the question in the tree itself."),
   repo: external_exports.string().optional().describe("Optional repository context."),
   ask: external_exports.string().trim().min(1).max(1e4).describe(
-    "The question, and only what is needed to answer it. News, progress and findings are their own contact \u2014 a call contact JOINS a call already happening, so several arrive as one call. Do not bundle: a DecisionNeed is settled only by an answer in the shape this ask declares, so someone who answers the part that interested them settles nothing and is asked again."
+    "ONE question, and only what is needed to answer it. Several questions are several asks in the array, one each: an answer settles the one ask it was given in the shape that ask declares, so a person who answers the part of a bundled ask that interested them settles nothing and is asked again. Paigy reads every ask once and takes a bundled one apart into its own cards anyway \u2014 parts of one piece of work under one Goal, separate things as separate Goals \u2014 but the words it splits are its reading, not yours. News, progress and findings are their own contact; a call contact JOINS a call already happening, so several arrive as one call."
   ),
   options: external_exports.array(OptionInputSchema2).min(2).max(6).optional()
 }).strict();
@@ -13002,7 +13098,7 @@ var StartContactSchema2 = external_exports.object({
 }).strict();
 var ContactSchema2 = external_exports.union([StartContactSchema2, external_exports.object({ deliveryId: external_exports.string().uuid() }).strict()]);
 var CONTACT_SCHEMA2 = { type: "object", ...mcpInputSchema2(ContactSchema2) };
-var CONTACT_DESCRIPTION2 = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. Never bundle multiple questions into a single 'ask' string; pass them as separate objects in the 'asks' array.";
+var CONTACT_DESCRIPTION2 = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none is placed in the person's tree by Paigy. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. One question per 'ask'; several questions are several objects in 'asks'. A bundled ask is taken apart into its own cards by Paigy's one intake read \u2014 parts of one piece of work under one Goal, separate things as separate Goals. An ask with no options that is not blocking is a report: on a Goal whose report card is still open it is added to that card, with no new push; one that only says where your work stands while under way is recorded as the Goal's progress, not sent (the result says so).";
 var CreateGoalSchema2 = external_exports.object({
   outcome: external_exports.string().trim().min(1).max(1e4),
   /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
@@ -13049,9 +13145,9 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), and `next`, the one step to take. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. Returns the Goal as get_goal reads it, at its new revision.";
-var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, how many decisions are still open, and the newest words in brief. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
+var UPDATE_GOAL_DESCRIPTION2 = `Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. state: done means the work was accomplished, and it can be reopened: when the person says it is not done ("it's not working"), set state: active on that same Goal instead of starting a new one; its parent reopens with it. cancelled is final. Returns the Goal as get_goal reads it, at its new revision.`;
+var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Another agent's Goal that has gone quiet for 3 days (check_replies lists them as stalledOthers) is taken over when you claim it, and becomes yours to finish or cancel. Returns the Goal as get_goal reads it, and creates or renews the execution lease.";
+var CHECK_REPLIES_DESCRIPTION2 = "What is waiting for you: your open Deliveries (a request the user started toward you, a handoff), one row each with its Goals, how many decisions are still open, and the newest words in brief; `assigned`, your Goals nobody has started yet, however they became yours (claim_goal({goalId}) starts one); and `review`, your Goals with something new on them \u2014 the user's answers and notes are Entries on the Goal, not Deliveries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread a Delivery in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true clears the Goal from `review` and closes the Deliveries addressed to you on it.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
 var AGENT_TOOLS2 = [
   { name: "contact", description: CONTACT_DESCRIPTION2, inputSchema: CONTACT_SCHEMA2 },
@@ -13396,9 +13492,9 @@ var AgendaTurnSchema2 = external_exports.object({
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
   coveredIds: external_exports.array(external_exports.string()).optional(),
-  /** At most three short spoken sentences. Capped because a turn is a breath: a 1031-char
-   *  line went out on 2026-07-28 and the caller could not answer it at all. */
-  info: external_exports.array(external_exports.string().min(1)).max(3).default([]),
+  /** The spoken sentences of the turn, in order. No count: how long a turn is is the brain's call
+   *  (owner, 2026-09-25), and a count here refused whole plans. */
+  info: external_exports.array(external_exports.string().min(1)).default([]),
   question: external_exports.string().min(1).nullable(),
   /** True on the one turn carrying the agent's own declared question. */
   asks: external_exports.boolean().optional(),
@@ -13433,32 +13529,6 @@ var AgendaTurnSchema2 = external_exports.object({
 var CLAIM_STALE_MS2 = 30 * 6e4;
 var InboxItemSchema2 = external_exports.object({
   id: external_exports.string(),
-  /** The conversation thread + connection this item lives on. Present on the replied
-   *  detail — they power History's "Continue" / "New session from this" (#57/#251). */
-  parentId: external_exports.string().optional(),
-  /** THE ARRIVAL this row is one unit of (`notifications.ask_id` → `asks`). A claim is one
-   *  arrival and its units are N rows of it, so this — not `parentId` — is what makes a
-   *  multi-part notification one thing on screen. The thread is the whole CONVERSATION: it
-   *  accumulates every message an agent ever sent, so grouping by it renders a day of
-   *  unrelated updates as a single "12-part request". Absent on rows written before the
-   *  `asks` table, and on anything that never went through `notify` — both fall back to the
-   *  thread, which is what the client did for all rows until now. */
-  askId: external_exports.string().optional(),
-  /** WHERE this unit sat in the message it was cut from (`notifications.seq`). The batch
-   *  shares one `created_at` to the microsecond, so without it the author's order is
-   *  unrecoverable client-side — a four-paragraph briefing rendered opening-paragraph-last
-   *  (live 2026-08-10, D35). The API already orders by it; this lets a reader that
-   *  re-sorts (grouping, filtering) put an arrival back in the order it was written. */
-  seq: external_exports.number().int().optional(),
-  /** HOW MANY units the arrival was cut into. A device reads a LENS, never the arrival —
-   *  `/api/inbox` serves `open`, so the units already settled are gone from it — and a client
-   *  counting what it can see is counting what is LEFT. Walking a three-unit ask on the answer
-   *  screen read "1 of 3", then "1 of 2", then no chip at all, each answer having removed the
-   *  only evidence of itself. How big an arrival is, is a fact about the arrival, so the
-   *  server that can still see every row states it. Absent on any row with no `askId`: a
-   *  unit knows WHICH ask it came from and WHERE it sat in it, and how many there were is
-   *  the one part of its own arrival a single row cannot answer. */
-  units: external_exports.number().int().positive().optional(),
   tokenId: external_exports.string().optional(),
   status: NotifyStatusSchema2,
   context: ContextSchema2,
@@ -13503,7 +13573,18 @@ var InboxItemSchema2 = external_exports.object({
     entryId: external_exports.string(),
     title: external_exports.string(),
     state: external_exports.enum(["open", "answered"]),
-    answer: external_exports.string().nullable()
+    answer: external_exports.string().nullable(),
+    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+     *  author is not an agent this account holds (unpaired since, or a person). */
+    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema2.optional() }).optional(),
+    /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
+     *  its need offers, exactly as its own card carries them, present only when one of them has a
+     *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
+     *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
+     *  says those, and the list stays small (an `html` is up to 16 KB). */
+    options: external_exports.array(OptionSchema2).optional()
   })).optional(),
   visuals: external_exports.array(VisualSchema2).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
@@ -13521,10 +13602,20 @@ var InboxItemSchema2 = external_exports.object({
    *  agent (held in the inbox until the agent replies on the thread). */
   turn: external_exports.enum(["you", "agent"]).default("you"),
   /** Hard error reason on an awaiting request (turn="agent") — the wake failed to reach
-   *  the agent (provider-agnostic; set server-side). Absent = no hard error, though the
-   *  client may still flag a stall by age. Drives the inbox error badge + Retry. */
+   *  the agent (provider-agnostic; set server-side). Absent = no hard error. Drives the inbox
+   *  error badge + Retry. */
   error: external_exports.string().optional(),
+  /** WHEN THIS AGENT WORK WENT QUIET (turn="agent"), by the one rule (`coldSince`: three days
+   *  with nothing said), or absent while it is not stalled. The inbox's stalled badge reads
+   *  this and nothing else (2026-09-23: a 3-minute age rule badged every live Goal stalled,
+   *  and "dismiss the stalled ones" cancelled 37 pieces of live work). */
+  cold: external_exports.string().datetime().optional(),
   clarifies: external_exports.string().optional(),
+  /** THIS CARD'S QUESTION IS ON A LIVE CALL (owner, 2026-09-24: "Mark it while the call is
+   *  live"). Present only while an open Call Delivery carries the card's request Entry — read
+   *  off the same open list the card came from, so it clears when the Call does. A card is the
+   *  backup for a call not taken; while the call has it, the call is where it is answered. */
+  onCall: external_exports.literal(true).optional(),
   /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
    *  declined, and what the ladder will do next — read off the cron's own row, never computed
    *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
@@ -13573,7 +13664,10 @@ var InboxItemSchema2 = external_exports.object({
     goalIds: external_exports.array(external_exports.string()),
     decisionNeedId: external_exports.string().optional(),
     sealed: external_exports.boolean(),
-    goalState: external_exports.string().optional()
+    goalState: external_exports.string().optional(),
+    /** THAT GOAL'S NAME (#2416) — what Activity's row is headed by, since a row there is one Goal
+     *  and the cards it holds sit behind it. Stamped by the same read as `goalState`. */
+    goalTitle: external_exports.string().optional()
   }).optional()
 });
 var APNS_TOKEN_RE2 = /^[0-9a-fA-F]{64}$/;
@@ -13672,7 +13766,6 @@ var UserSettingsSchema2 = external_exports.object({
 });
 var HistoryItemSchema2 = external_exports.object({
   id: external_exports.string(),
-  parentId: external_exports.string(),
   /** 'user' = a request you sent; 'agent' = a notification an agent sent you. */
   initiator: external_exports.enum(["user", "agent"]),
   title: external_exports.string(),
@@ -13831,6 +13924,24 @@ var QueueQuestionSchema2 = external_exports.object({
    *  gate at all. */
   blocked: external_exports.boolean().default(false)
 });
+var QueueReplySchema2 = external_exports.object({
+  /** The card this note was (`deliveryId:requestEntryId`, minted by the server like every card
+   *  id) — so the phone can tell a reply it just sent from one the queue already carries, and the
+   *  walk can name it in its zoom. */
+  id: external_exports.string(),
+  /** The Goal the note is on. */
+  goalId: external_exports.string(),
+  /** What the note said. */
+  note: external_exports.string(),
+  /** Where it was carried — where a second reply goes (`POST /api/entries`, #2252). */
+  deliveryId: external_exports.string(),
+  requestEntryId: external_exports.string(),
+  askedAt: external_exports.string(),
+  /** When the person last replied — the window's start. */
+  repliedAt: external_exports.string(),
+  /** The person's latest words about it; null when there is nothing readable in them. */
+  reply: external_exports.string().nullable()
+});
 var QueueItemSchema2 = external_exports.object({
   id: external_exports.string(),
   /** One-line headline — the first sentence of the outcome. */
@@ -13858,6 +13969,10 @@ var QueueItemSchema2 = external_exports.object({
   blocked: external_exports.boolean().default(false),
   /** Every decision need on it, open or settled — the page decides which to show. */
   questions: external_exports.array(QueueQuestionSchema2).default([]),
+  /** Every note on it the person replied to (`QueueReplySchema`) — the page decides which to show.
+   *  Optional, not defaulted: absent is none, and every hand-built queue (fixtures, the demo) need
+   *  not spell an empty list. */
+  replies: external_exports.array(QueueReplySchema2).optional(),
   /** The repository or project identifier this Goal belongs to (#2280), null if untracked. */
   repo: external_exports.string().nullable().optional(),
   createdAt: external_exports.string(),
@@ -14070,6 +14185,7 @@ import { resolve as resolve2, delimiter as delimiter2 } from "path";
 
 // src/harness/acp.ts
 var none = { events: [], writes: [] };
+var NOTHING_TO_RESUME = /* @__PURE__ */ new Set([-32002, -32601]);
 function optionFor(options, decision) {
   const want = decision.allow ? "allow_once" : "reject_once";
   return options.find((o) => o.kind === want)?.optionId ?? null;
@@ -14166,20 +14282,29 @@ var AcpDriver = class {
     if (msg.id === this.initId) {
       this.initId = void 0;
       if (msg.error) {
-        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}` }], writes: [] };
+        return { events: [{ kind: "error", message: `initialize failed: ${msg.error.message}`, fatal: true }], writes: [] };
       }
       this.sessionNewId = this.nextId++;
       return {
         events: [],
-        writes: [frame2(this.resume ? { id: this.sessionNewId, method: "session/resume", params: { sessionId: this.resume, cwd: this.cwd, mcpServers: [] } } : { id: this.sessionNewId, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } })]
+        writes: [frame2(this.resume ? { id: this.sessionNewId, method: "session/resume", params: { sessionId: this.resume, cwd: this.cwd, mcpServers: [] } } : this.sessionNew(this.sessionNewId))]
       };
     }
     if (msg.id === this.sessionNewId) {
       this.sessionNewId = void 0;
+      const resuming = this.resume !== void 0;
+      if (resuming && msg.error?.code !== void 0 && NOTHING_TO_RESUME.has(msg.error.code)) {
+        this.resume = void 0;
+        this.sessionNewId = this.nextId++;
+        return {
+          events: [{ kind: "error", message: `session/resume found nothing to resume (${msg.error.message}) \u2014 opening a new conversation` }],
+          writes: [frame2(this.sessionNew(this.sessionNewId))]
+        };
+      }
       const sessionId2 = msg.error ? void 0 : msg.result?.sessionId ?? this.resume;
       if (!sessionId2) {
         return {
-          events: [{ kind: "error", message: `${this.resume ? "session/resume" : "session/new"} failed: ${msg.error?.message ?? "no sessionId"}` }],
+          events: [{ kind: "error", message: `${resuming ? "session/resume" : "session/new"} failed: ${msg.error?.message ?? "no sessionId"}`, fatal: true }],
           writes: []
         };
       }
@@ -14272,6 +14397,9 @@ var AcpDriver = class {
       writes: []
     };
   }
+  sessionNew(id) {
+    return { id, method: "session/new", params: { cwd: this.cwd, mcpServers: [] } };
+  }
   /** Send the queued prompts as one turn, if the agent can take one right now. */
   flush() {
     if (!this.sessionId || this.promptId !== void 0 || !this.queued.length) return [];
@@ -14316,7 +14444,7 @@ function startSession(opts) {
       ...process.env,
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
       ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
-      ...opts.resume ? { PAIGY_SESSION_ID: opts.resume } : {},
+      ...opts.resume ?? opts.session ? { PAIGY_SESSION_ID: opts.resume ?? opts.session } : {},
       // A PUMP DRIVES THIS PROCESS (2026-09-22, #2265): every run `runHarness` starts has the
       // bridge's pump typing answers in, so nothing inside it may start a second delivery path.
       // Exported on EVERY spawn — `PAIGY_SESSION_ID` above is the conversation to resume, and a
@@ -14326,7 +14454,11 @@ function startSession(opts) {
     },
     stdio: ["pipe", "pipe", "pipe"]
   });
+  let ended2 = false;
+  child.stdin?.on("error", () => {
+  });
   const write = (frames) => {
+    if (ended2) return;
     for (const f of frames) child.stdin?.write(`${f}
 `);
   };
@@ -14335,6 +14467,7 @@ function startSession(opts) {
     if (text) opts.onEvent({ kind: "error", message: text });
   });
   child.on("exit", (code) => {
+    ended2 = true;
     opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
     opts.onExit?.();
   });
@@ -14363,6 +14496,7 @@ function startSession(opts) {
     },
     stop() {
       write(driver.close());
+      ended2 = true;
       child.kill();
     }
   };
@@ -14529,6 +14663,7 @@ async function ask(state, rail, input) {
       waiting: "hard",
       channel: input.call ? "call" : "notification"
     });
+    if ("recorded" in sent) return null;
     const entryId = sent.requestEntryIds[0];
     if (!entryId) return null;
     (state.seen ??= /* @__PURE__ */ new Set()).add(entryId);
@@ -14604,6 +14739,23 @@ async function finish(result, state, rail, opts) {
     opts?.log?.(`\u26A0 finish contact failed: ${error.message}`);
   }
 }
+async function failedToStart(reason, state, rail, opts) {
+  try {
+    const goalId = state.goal?.id ?? (await rail.claim()).goalId;
+    state.goal = void 0;
+    state.resting = true;
+    if (!goalId) return;
+    await rail.contact({
+      asks: [{ ask: `The session could not start, so nothing is working on this yet.
+
+${reason}`, parentId: goalId }],
+      waiting: "none",
+      channel: "notification"
+    });
+  } catch (error) {
+    opts?.log?.(`\u26A0 could not report the failed start: ${error.message}`);
+  }
+}
 async function afterTurn(event, state, rail, opts) {
   if (!event.failed && !endsWithQuestion(event.result)) {
     await finish(event.result, state, rail, opts);
@@ -14628,10 +14780,16 @@ function runHarness(opts) {
   let tail = [];
   const state = { resting: true };
   let session = null;
-  const rail = railFor({ token: opts.token, ...opts.resume ? { reach: reachAs(opts.resume) } : {} });
+  const speaksAs = opts.resume ?? opts.session;
+  const rail = railFor({ token: opts.token, ...speaksAs ? { reach: reachAs(speaksAs) } : {} });
   async function handle(event) {
     if (event.kind === "error") {
       opts.log(`\u26A0 ${event.message}`);
+      if (event.fatal && running) {
+        opts.log(`\u2716 could not start: ${event.message}`);
+        await failedToStart(event.message, state, rail, { log: opts.log });
+        stop2();
+      }
       return;
     }
     if (event.kind === "permission") {
@@ -14677,6 +14835,7 @@ function runHarness(opts) {
     mode: opts.mode,
     ...opts.token ? { token: opts.token } : {},
     ...opts.resume ? { resume: opts.resume } : {},
+    ...opts.session ? { session: opts.session } : {},
     ...opts.bin ? { bin: opts.bin } : {},
     ...opts.onExit ? { onExit: opts.onExit } : {},
     onEvent: (event) => void handle(event).catch((err) => opts.log(`\u26A0 ${err.message}`))
@@ -14685,27 +14844,28 @@ function runHarness(opts) {
     (e) => opts.log(`\u26A0 conversation loop stopped: ${e.message}`)
   );
   opts.log(`\u25B6 started ${opts.harness} in ${opts.cwd} (${opts.mode} mode)`);
+  function stop2() {
+    running = false;
+    tail = [];
+    cancelAsks(state);
+    session?.stop();
+    session = null;
+    opts.log("\u25A0 stopped");
+  }
   return {
     send(text) {
       session?.send(text);
     },
     working: () => running && state.resting !== true,
     tail: () => [...tail],
-    stop() {
-      running = false;
-      tail = [];
-      cancelAsks(state);
-      session?.stop();
-      session = null;
-      opts.log("\u25A0 stopped");
-    }
+    stop: stop2
   };
 }
 
 // src/update.ts
 import { execFile } from "child_process";
 import { createRequire } from "module";
-import { dirname as dirname3, join as join6 } from "path";
+import { dirname as dirname3, join as join7 } from "path";
 import { promisify } from "util";
 var SERVICE_LABEL = "ai.paigy.harness";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
@@ -14732,7 +14892,7 @@ async function latestVersion() {
 }
 async function install(version) {
   const bin = dirname3(process.execPath);
-  await promisify(execFile)(join6(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+  await promisify(execFile)(join7(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
     env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
     timeout: 5 * 6e4
   });
@@ -14783,7 +14943,7 @@ function selfUpdater(deps) {
 }
 
 // src/host.ts
-var HOST_FILE = join7(homedir7(), ".paigy", "host.json");
+var HOST_FILE = join8(homedir7(), ".paigy", "host.json");
 function readHostState() {
   try {
     const s = JSON.parse(readFileSync4(HOST_FILE, "utf8"));
@@ -14807,6 +14967,7 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
+var launchRun = (spec) => ({ session: spec.sessionId });
 async function slotHasWaitingWork(token, session) {
   return (await checkReplies({ token, ...session ? { reach: reachAs(session) } : {} })).deliveries.length > 0;
 }
@@ -14865,7 +15026,7 @@ function startHost(opts) {
         mode: "bypass",
         prompt: "",
         token: spec.token,
-        resume: spec.sessionId,
+        ...launchRun(spec),
         onExit: () => {
           runs.delete(key);
           opts.log(`\u2716 ${label} ended`);
@@ -15646,7 +15807,7 @@ var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
 }
-var ICON = join8(here, "..", "assets", "icon.png");
+var ICON = join9(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
     // Sized for the working log, which is now the window's centerpiece; the layout is a
@@ -15658,9 +15819,9 @@ function createWindow() {
     minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
-    webPreferences: { preload: join8(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
+    webPreferences: { preload: join9(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
   });
-  void win.loadFile(join8(here, "..", "renderer", "index.html"));
+  void win.loadFile(join9(here, "..", "renderer", "index.html"));
 }
 var host = null;
 app.whenReady().then(() => {
@@ -15729,7 +15890,7 @@ ipcMain.handle("paigy:agent", async (_e, name) => {
 });
 ipcMain.handle("paigy:agent-log", (_e, name) => {
   try {
-    const all = readFileSync5(join8(homedir9(), ".paigy", "host.log"), "utf8").split("\n");
+    const all = readFileSync5(join9(homedir9(), ".paigy", "host.log"), "utf8").split("\n");
     const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
     return mine.slice(-500).join("\n");
   } catch {