@paigy/harness 0.3.29 → 0.3.30

package/dist/main.js

@@ -10040,7 +10040,7 @@ var GetGoalSchema = external_exports.object({
   history: external_exports.boolean().optional(),
   /** WHEN A READ HAS CONFUSED YOU. Adds `diagnosis`: every reader that already answers a question
    *  about this work, each answer attributed to the reader that gave it, and every disagreement
-   *  between two of them named. Off by default; `apps/api/src/goal/diagnose-design.md`. */
+   *  between two of them named. Off by default; `docs/model/goal/diagnose-design.md`. */
   diagnose: external_exports.boolean().optional()
 }).strict();
 var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), `next`, the one step to take, and `more`, where to read further. The conversation carries everything the person said, every open question and your newest entry; your older entries are left out and counted \u2014 history: true reads every entry in full. Another account's Goals, and another agent's Goal that is not below one of yours, are not disclosed.\n\ndiagnose: true is for when a read has CONFUSED you \u2014 not for the working loop. It adds `diagnosis`, which asks every reader that already answers a question about your work and NAMES the reader behind every value, so you never guess which of two places to look: what state your work is really in (the stored `goals.state` beside the derived `goal_execution_state`, which can differ); whether anything is armed to ring and when (`ladder_candidates`, with the ladder's own last decision); whether a wake fired for you and what it did (durable `wake.*` events, beside when your process was last heard from); and what has reached you (`list_waiting` \u2014 review flags, unstarted work, open questions, the person's newest words). Read `diagnosis.disagreements` FIRST: each one is two readers giving different values for the same fact, with both values and both sources, and it never chooses between them \u2014 that is yours to do, from the Goal's own history. `diagnosis.looked` names every reader asked, including any that could not answer, so an empty answer is never confused with a broken one.";
@@ -10058,6 +10058,7 @@ var AGENT_TOOLS = [
 ];
 var AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
 var LIVE_MS = 3 * 6e4;
+var WORKING_MS = 30 * 6e4;
 var ContextSchema = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -10128,7 +10129,7 @@ var AttentionSchema = external_exports.object({
   points: external_exports.array(external_exports.string()).nullable(),
   /** Whether the ask blocks the sender — what lets arbitration escalate it on silence. */
   blocking: external_exports.boolean(),
-  /** Reserved (MODEL.md lists it): a response deadline. No row column yet — a later Phase 2
+  /** Reserved (docs/model/model.md lists it): a response deadline. No row column yet — a later Phase 2
    *  slice wires it; optional so today's rows/callers project cleanly. */
   deadline: external_exports.string().datetime().nullable().optional()
 });
@@ -10179,7 +10180,7 @@ var NotifyRequestFields = external_exports.object({
    *  derive agent-side before sealing, so the server only ever shapes plaintext). */
   // 10k, not a sentence budget. What the human hears is bounded by the BROKER — it splits
   // the ask into topics and gives each one at most three sentences and one question
-  // (broker/agenda-design.md) — not by a wire cap the agent has to pre-summarize under.
+  // (docs/brain/broker/agenda-design.md) — not by a wire cap the agent has to pre-summarize under.
   // Owner, 2026-07-28: "our actual limitation on how long something is to the user should
   // come from the broker splitting and summarizing." The cap that remains is a size guard.
   ask: external_exports.string().min(1).max(1e4).optional().describe(
@@ -10256,7 +10257,7 @@ var UserAnswerSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({ kind: external_exports.literal("clarify"), chunks: external_exports.array(external_exports.string()).min(1) }),
   external_exports.object({ kind: external_exports.literal("confirm"), approved: external_exports.boolean() }),
   external_exports.object({ kind: external_exports.literal("turns"), turns: external_exports.array(TurnSchema).min(1) }),
-  /** An auto-answer derived from the user's PAST decisions (broker/precedent-design.md §2):
+  /** An auto-answer derived from the user's PAST decisions (docs/brain/broker/precedent-design.md §2):
    *  delivered through the same settle/await path as a human answer, carrying the judge's
    *  derivation and the precedent ids it grew from. Always paired with a visible trail
    *  card the user can reply to — the broker never overrides the user. */
@@ -10305,7 +10306,7 @@ var AwaitItemSchema = external_exports.discriminatedUnion("type", [
      *  and now knows exactly which call to make. Absent when either half is missing —
      *  a sentence with a hole in it is worse than no sentence. */
     note: external_exports.string().optional(),
-    /** The call record rendered for THIS agent (`voice/record-design.md`): the words the
+    /** The call record rendered for THIS agent (`docs/brain/voice/record-design.md`): the words the
      *  shaped answer was mapped from, filtered to its own claims. There is no second list
      *  of labels beside it — the acts went 2026-09-04 and `intents` went with them (owner,
      *  2026-09-04): the agent reads the sentence and decides. */
@@ -10401,10 +10402,11 @@ var AgendaTurnSchema = external_exports.object({
   agentId: external_exports.string().optional(),
   select: SelectShapeSchema.optional(),
   options: external_exports.array(OptionSchema.omit({ id: true })).optional(),
-  /** Pacing (#826, owner 2026-08-03: "how fast we move through them ... are parameters"):
-   *  seconds the floor stays open after this turn speaks. Absent = the bot's defaults
-   *  (the beat for context, the answer window for asks). Clamped bot-side. */
-  pace: external_exports.number().positive().optional(),
+  /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
+     paces itself now — a short beat between the sentences of a turn, the longer one at its end
+     (owner, 2026-09-30: "remove the bot deciding pace") — and it does that where the words are
+     spoken, not where the plan is written, so nothing between the brain and the walk decides
+     anything. A caller's own `beat_s` tuning is what it used to override. */
   /** Whether the walk WAITS for an answer before moving on. Absent = derived as today
    *  (a question blocks, context flows). blocking:false on a question = ask and move
    *  on, the claim stays pending; blocking:true on context = hold for a reply. */
@@ -10439,7 +10441,7 @@ var InboxItemSchema = external_exports.object({
    *  instant the agent picks it up (#997). Absent = pre-trigger row; fall back to
    *  `createdAt`. */
   agentStateAt: external_exports.string().datetime().optional(),
-  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (walk/design.md §11, owner
+  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (docs/clients/app/walk/design.md §11, owner
    *  2026-09-22). One per DecisionNeed on the Call, in the Call's order, answered or open (a
    *  superseded or cancelled need is no longer a question anyone is asked). Present only on a
    *  Call's cards, and every card of that Call carries the same list: the call screen reads it
@@ -10500,7 +10502,7 @@ var InboxItemSchema = external_exports.object({
    *  off the same open list the card came from, so it clears when the Call does. A card is the
    *  backup for a call not taken; while the call has it, the call is where it is answered. */
   onCall: external_exports.literal(true).optional(),
-  /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
+  /** THE RING, ON THE ITEM (docs/clients/app/walk/design.md §12 §17, #2251): the last ring on this card was
    *  declined, and what the ladder will do next — read off the cron's own row, never computed
    *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
    *  The ladder is ACCOUNT-WIDE (#2259): `anchorAt` and `step` are the account's position;
@@ -10531,7 +10533,7 @@ var InboxItemSchema = external_exports.object({
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
   ),
   /** Real downstream work is stuck behind this one — set by the agent, independent of
-   *  urgency (see the main README's "premier use case" + notify/states.md). Drives the
+   *  urgency (see the main README's "premier use case" + docs/delivery/notify/states.md). Drives the
    *  inbox's blocking badge and the extra confirm step before dismissing it. */
   blocking: external_exports.boolean().default(false),
   /** The user's locked-in answer; present only for replied items (GET /api/replied/:id). */
@@ -10605,9 +10607,16 @@ var UserSettingsSchema = external_exports.object({
     banner: external_exports.boolean(),
     push: external_exports.boolean()
   }),
+  /** LockedIn / Default / DateNight on screen; the stored words are unchanged on purpose —
+   *  they are an enum on a live column across every account, and the rename is a rename of
+   *  what people read (owner, 2026-09-30). */
   sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
-  silentPush: external_exports.boolean(),
-  autoCallback: external_exports.boolean(),
+  /** DEAD, AND ACCEPTED ANYWAY (#2813). DateNight is inbox-only with no way back, so nothing
+   *  reads this. It stays OPTIONAL rather than deleted because a phone on the old bundle
+   *  PATCHes the whole settings object and would be refused for sending a key we stopped
+   *  wanting — the same trap `voiceMode` below already documents. #2813 drops the field and
+   *  its column once no installed build still sends it. */
+  silentPush: external_exports.boolean().optional(),
   /** Opt-in (default false) to using your content to improve Paigy and train models. */
   improveConsent: external_exports.boolean(),
   missedCall: MissedCallSchema.default("backoff_standard"),
@@ -10618,12 +10627,16 @@ var UserSettingsSchema = external_exports.object({
    *  must not silently reset this privacy choice. Absent = leave unchanged on
    *  write, 'hosted' on read (see store.ts). */
   voiceMode: external_exports.enum(["hosted", "on_device"]).optional(),
-  /** Talk — after you answer, the next step is read aloud (walk/design.md §6). ALWAYS ON until
+  /** Talk — after you answer, the next step is read aloud (docs/clients/app/walk/design.md §6). ALWAYS ON until
    *  turned off (owner, 2026-09-18, #2249): a setting, not a per-walk toggle. Optional, NOT
    *  defaulted, for the same reason `voiceMode` is: a stale client PATCHing the full settings
    *  object must not silently turn it back on. Absent = leave unchanged on write, true on
    *  read (see store.ts). */
   talk: external_exports.boolean().optional(),
+  /** CALL DIAGNOSTICS (owner, 2026-10-01): the call report carries each listen and the bot's own
+   *  load timings. SERVER-SET, no UI — on for every account that existed on 2026-10-01, off for
+   *  newer ones (migration 20261001132859). Read-only here: the settings PATCH never writes it. */
+  callDiagnostics: external_exports.boolean().optional(),
   /** Per-user ring budget (#603): calls per rolling day before further calls
    *  degrade to banner. Absent = the global default (25). A number, never a
    *  bypass — every account keeps a ceiling. No UI; set per user for testing. */
@@ -10632,9 +10645,6 @@ var UserSettingsSchema = external_exports.object({
    *  slower speaker). No API-side semantics; the bot resolves each key with its
    *  own defaults. Set per user (no UI yet); absent = bot defaults. */
   voiceTuning: external_exports.record(external_exports.string(), external_exports.union([external_exports.number(), external_exports.string()])).optional(),
-  /** Opt-in to real-phone (PSTN) calls when the app can't ring. Optional, not
-   *  defaulted — an older client PATCHing the full object must not clobber it. */
-  pstnCalls: external_exports.boolean().optional(),
   /** The user's IANA timezone (e.g. "America/Bogota"), recorded by the app — it is the
    *  only party that knows it. REMINDERS are why it exists: "remind me at ten" becomes
    *  an absolute `due_at` only if we know whose ten. Optional and never defaulted, for
@@ -10678,7 +10688,7 @@ var ConnectionSummarySchema = external_exports.object({
   /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
    *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
    *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
-   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+   *  docs/server/tokens/devices-vs-agents-design.md. */
   kind: external_exports.enum(["device", "agent"]).optional(),
   /** For an agent, the token id of the DEVICE that minted it — so agents group under their
    *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
@@ -10696,7 +10706,7 @@ var ConnectionSummarySchema = external_exports.object({
    *  user on the agent's own page. null = no ceiling (today's behaviour for every
    *  connection). Android binds importance to a relationship rather than to each message,
    *  and that is the thing our roster could not say: "Marlow may always call me; Otto
-   *  never may" (navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
+   *  never may" (docs/clients/app/party/navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
    *  every surface at once and outranks even `sessionMode: all_calls` — a mode the user
    *  set once must not overrule a rule they set about one agent. */
   reach: NotifyLevelSchema.nullable().optional(),
@@ -10707,7 +10717,14 @@ var ConnectionSummarySchema = external_exports.object({
   /** Last presence heartbeat from a running agent process (POST /api/presence) — the
    *  desktop app while open. Null = never seen; stale = offline. */
   lastSeenAt: external_exports.string().datetime().nullable().optional(),
-  /** What a live desktop can run (companion.md §2.2), advertised on its heartbeat:
+  /** WORKING, NOT JUST CONNECTED (owner, 2026-09-30): the last time the agent itself acted on one of
+   *  its Goals — took its lease or recorded an operation (`tokens.last_worked_at`). Within
+   *  `WORKING_MS` it is working; otherwise it is connected but idle. Null = not seen working yet. */
+  lastWorkedAt: external_exports.string().datetime().nullable().optional(),
+  /** The oldest of its Goals that is `ready` for it — work handed to it that nobody has started.
+   *  With no work of its own for `WORKING_MS`, an agent sitting on this is not taking its work. */
+  oldestReadyAt: external_exports.string().datetime().nullable().optional(),
+  /** What a live desktop can run (docs/clients/desktop/companion.md §2.2), advertised on its heartbeat:
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
   runtime: external_exports.object({
@@ -10715,7 +10732,12 @@ var ConnectionSummarySchema = external_exports.object({
      *  shows its age here (`apps/desktop/src/update.ts`). */
     version: external_exports.string().optional(),
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
-    workspaces: external_exports.array(external_exports.string()).optional()
+    workspaces: external_exports.array(external_exports.string()).optional(),
+    /** THE GIT REPOS IN THOSE FOLDERS (2026-10-01, Goal 26982211): each granted folder that is a
+     *  repo, and each repo directly inside one, with its `origin` remote. A session started for
+     *  work on `mauurda/paigy` opens in that repo rather than the folder above it, where the repo's
+     *  own AGENTS.md is never read (`workspaceForRepo`). Absent on hosts that predate it. */
+    repos: external_exports.array(external_exports.object({ path: external_exports.string(), remote: external_exports.string() })).optional()
   }).optional(),
   /** The tail of this agent's working log, when a harness is driving it — the agent page's
    *  live strip. Absent for anything the desktop harness isn't running (a hatched identity
@@ -10798,7 +10820,7 @@ var QueueQuestionSchema = external_exports.object({
    *  for a settled question whose reply carried nothing readable. */
   answer: external_exports.string().nullable().default(null),
   /** The Goal this question belongs to — a step knows its Goal on its own, not only through
-   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  an `InboxItem`'s `communication.goalIds[0]` (docs/clients/app/walk/design.md §12 item 3).
    *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
    *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
    *  this is the field they agree through rather than each re-deriving it from the row it
@@ -10890,7 +10912,19 @@ var QueueItemSchema = external_exports.object({
     said: external_exports.string(),
     at: external_exports.string(),
     entryId: external_exports.string()
-  }).nullable().optional()
+  }).nullable().optional(),
+  /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
+   *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
+   *  answer to a question, a voice note filed as work. Null when the only hands on it have been its
+   *  agent's; optional, so a hand-built queue (fixtures, the demo) and a door older than
+   *  20260930222356 need not spell it — `work/list.ts`'s `yoursAt` keeps its other sources, so the
+   *  Work tab orders as it did before the migration rather than throwing on the missing key.
+   *
+   *  It is a FACT, not a reconstruction: `latest` holds one Entry, so an agent's progress note a
+   *  minute after the person speaks erases their instant from it, and the durable traces the client
+   *  can see (`replies`, `questions[].answeredAt`) miss a spontaneous note entirely — a `request`
+   *  Entry with no `about_id` is in neither. */
+  lastPersonAt: external_exports.string().nullable().optional()
 });
 var COLD_AFTER_MS = 3 * 24 * 60 * 60 * 1e3;
 var NoteSourceSchema = external_exports.enum(["app", "call"]);
@@ -10920,7 +10954,7 @@ var NoteSchema = external_exports.object({
   assignee: external_exports.string().nullable(),
   /** The request thread minted at assignment; null until assigned. */
   parentId: external_exports.string().nullable(),
-  /** REMINDERS (reminders-design.md): the NOT-BEFORE this becomes eligible to ride a
+  /** REMINDERS (docs/model/notes/reminders-design.md): the NOT-BEFORE this becomes eligible to ride a
    *  call — never a deadline. It only ever comes from the user's own words, so when it
    *  passes Paigy rings ONCE (#1293, owner 2026-08-26: a time said out loud is consent to
    *  a ring at that time); after that it rides like any other. Null = "the very next
@@ -11182,6 +11216,29 @@ var SnapshotSchema = external_exports.object({
     computers: external_exports.array(ComputerRowSchema).nullable()
   }).nullable()
 });
+var CallRecapSchema = external_exports.object({
+  call: external_exports.object({
+    status: external_exports.string(),
+    startedAt: external_exports.string(),
+    durationMs: external_exports.number().nullable(),
+    agents: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string().nullable() }))
+  }),
+  topics: external_exports.array(external_exports.object({
+    goalId: external_exports.string().uuid(),
+    title: external_exports.string(),
+    owner: external_exports.string(),
+    state: external_exports.string(),
+    questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
+    /** `words` is always what they SAID, verbatim — the record, never replaced. `headline` is
+     *  their answer on one line when the call's read wrote one (owner, 2026-10-01: "render them
+     *  summarized like a pre-made option is"), so the row scans like a chosen option and their
+     *  own words stay under it. Absent on every line stored before the read wrote them, and on
+     *  anything that is not an answer. */
+    lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), headline: external_exports.string().optional() }))
+  })),
+  unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+  more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
+});
 function sessionSlot(sessionId2) {
   const id = sessionId2 ?? sessionId();
   return `session:${id.slice(0, 8)}`;
@@ -12391,7 +12448,7 @@ async function brokerView(deps) {
 }
 
 // src/workspaces.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, join as join5, resolve } from "path";
 import { homedir as homedir5 } from "os";
 function workspacesFile() {
@@ -12432,10 +12489,41 @@ function resolveWakeDir(pinned, deps) {
   }
   return listWorkspaces(deps)[0];
 }
+function originOf(dir) {
+  try {
+    if (!statSync2(join5(dir, ".git")).isDirectory()) return null;
+    const config = readFileSync3(join5(dir, ".git", "config"), "utf8");
+    const section = config.split(/^\[/m).find((s) => /^remote\s+"origin"\]/.test(s));
+    return section?.match(/^\s*url\s*=\s*(.+)$/m)?.[1]?.trim() ?? null;
+  } catch {
+    return null;
+  }
+}
+var MAX_CHILDREN = 300;
+var MAX_REPOS = 100;
+function listRepos(deps) {
+  const repos = [];
+  for (const root of listWorkspaces(deps)) {
+    const own = originOf(root);
+    if (own) repos.push({ path: root, remote: own });
+    let children = [];
+    try {
+      children = readdirSync(root, { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort().slice(0, MAX_CHILDREN);
+    } catch {
+    }
+    for (const name of children) {
+      if (repos.length >= MAX_REPOS) return repos;
+      const path = join5(root, name);
+      const remote = originOf(path);
+      if (remote) repos.push({ path, remote });
+    }
+  }
+  return repos.slice(0, MAX_REPOS);
+}
 
 // src/holder.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { readFileSync as readFileSync4, readdirSync } from "fs";
+import { readFileSync as readFileSync4, readdirSync as readdirSync2 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join6 } from "path";
 function isAlive(pid) {
@@ -12468,7 +12556,7 @@ function holds(pid, procStart, deps) {
 }
 function localHolders(deps = {}) {
   const dir = deps.dir ?? join6(process.env.CLAUDE_CONFIG_DIR?.trim() || join6(homedir6(), ".claude"), "sessions");
-  const list = deps.list ?? ((d) => readdirSync(d));
+  const list = deps.list ?? ((d) => readdirSync2(d));
   const read = deps.read ?? ((f) => readFileSync4(f, "utf8"));
   const check = { alive: deps.alive ?? isAlive, started: deps.started ?? psStart };
   const held = /* @__PURE__ */ new Map();
@@ -12496,7 +12584,7 @@ function localHolders(deps = {}) {
 }
 
 // src/owner.ts
-import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync as readdirSync2 } from "fs";
+import { closeSync as closeSync2, openSync as openSync2, readSync, readdirSync as readdirSync3 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join7 } from "path";
 var HEAD_BYTES = 64e3;
@@ -12515,7 +12603,7 @@ function ownerSession(slot, deps = {}) {
   if (!m) return null;
   const prefix = m[1];
   const root = deps.projectsDir ?? join7(homedir7(), ".claude", "projects");
-  const list = deps.list ?? ((dir) => readdirSync2(dir));
+  const list = deps.list ?? ((dir) => readdirSync3(dir));
   const head = deps.head ?? readHead;
   let folders;
   try {
@@ -13956,7 +14044,7 @@ var GetGoalSchema2 = external_exports.object({
   history: external_exports.boolean().optional(),
   /** WHEN A READ HAS CONFUSED YOU. Adds `diagnosis`: every reader that already answers a question
    *  about this work, each answer attributed to the reader that gave it, and every disagreement
-   *  between two of them named. Off by default; `apps/api/src/goal/diagnose-design.md`. */
+   *  between two of them named. Off by default; `docs/model/goal/diagnose-design.md`. */
   diagnose: external_exports.boolean().optional()
 }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read one Goal without claiming it: its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), `next`, the one step to take, and `more`, where to read further. The conversation carries everything the person said, every open question and your newest entry; your older entries are left out and counted \u2014 history: true reads every entry in full. Another account's Goals, and another agent's Goal that is not below one of yours, are not disclosed.\n\ndiagnose: true is for when a read has CONFUSED you \u2014 not for the working loop. It adds `diagnosis`, which asks every reader that already answers a question about your work and NAMES the reader behind every value, so you never guess which of two places to look: what state your work is really in (the stored `goals.state` beside the derived `goal_execution_state`, which can differ); whether anything is armed to ring and when (`ladder_candidates`, with the ladder's own last decision); whether a wake fired for you and what it did (durable `wake.*` events, beside when your process was last heard from); and what has reached you (`list_waiting` \u2014 review flags, unstarted work, open questions, the person's newest words). Read `diagnosis.disagreements` FIRST: each one is two readers giving different values for the same fact, with both values and both sources, and it never chooses between them \u2014 that is yours to do, from the Goal's own history. `diagnosis.looked` names every reader asked, including any that could not answer, so an empty answer is never confused with a broken one.";
@@ -13989,6 +14077,7 @@ function entryWords(entry) {
   return entry.sources.map((source) => source.text).join("\n");
 }
 var LIVE_MS2 = 3 * 6e4;
+var WORKING_MS2 = 30 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -14059,7 +14148,7 @@ var AttentionSchema2 = external_exports.object({
   points: external_exports.array(external_exports.string()).nullable(),
   /** Whether the ask blocks the sender — what lets arbitration escalate it on silence. */
   blocking: external_exports.boolean(),
-  /** Reserved (MODEL.md lists it): a response deadline. No row column yet — a later Phase 2
+  /** Reserved (docs/model/model.md lists it): a response deadline. No row column yet — a later Phase 2
    *  slice wires it; optional so today's rows/callers project cleanly. */
   deadline: external_exports.string().datetime().nullable().optional()
 });
@@ -14110,7 +14199,7 @@ var NotifyRequestFields2 = external_exports.object({
    *  derive agent-side before sealing, so the server only ever shapes plaintext). */
   // 10k, not a sentence budget. What the human hears is bounded by the BROKER — it splits
   // the ask into topics and gives each one at most three sentences and one question
-  // (broker/agenda-design.md) — not by a wire cap the agent has to pre-summarize under.
+  // (docs/brain/broker/agenda-design.md) — not by a wire cap the agent has to pre-summarize under.
   // Owner, 2026-07-28: "our actual limitation on how long something is to the user should
   // come from the broker splitting and summarizing." The cap that remains is a size guard.
   ask: external_exports.string().min(1).max(1e4).optional().describe(
@@ -14187,7 +14276,7 @@ var UserAnswerSchema2 = external_exports.discriminatedUnion("kind", [
   external_exports.object({ kind: external_exports.literal("clarify"), chunks: external_exports.array(external_exports.string()).min(1) }),
   external_exports.object({ kind: external_exports.literal("confirm"), approved: external_exports.boolean() }),
   external_exports.object({ kind: external_exports.literal("turns"), turns: external_exports.array(TurnSchema2).min(1) }),
-  /** An auto-answer derived from the user's PAST decisions (broker/precedent-design.md §2):
+  /** An auto-answer derived from the user's PAST decisions (docs/brain/broker/precedent-design.md §2):
    *  delivered through the same settle/await path as a human answer, carrying the judge's
    *  derivation and the precedent ids it grew from. Always paired with a visible trail
    *  card the user can reply to — the broker never overrides the user. */
@@ -14236,7 +14325,7 @@ var AwaitItemSchema2 = external_exports.discriminatedUnion("type", [
      *  and now knows exactly which call to make. Absent when either half is missing —
      *  a sentence with a hole in it is worse than no sentence. */
     note: external_exports.string().optional(),
-    /** The call record rendered for THIS agent (`voice/record-design.md`): the words the
+    /** The call record rendered for THIS agent (`docs/brain/voice/record-design.md`): the words the
      *  shaped answer was mapped from, filtered to its own claims. There is no second list
      *  of labels beside it — the acts went 2026-09-04 and `intents` went with them (owner,
      *  2026-09-04): the agent reads the sentence and decides. */
@@ -14332,10 +14421,11 @@ var AgendaTurnSchema2 = external_exports.object({
   agentId: external_exports.string().optional(),
   select: SelectShapeSchema2.optional(),
   options: external_exports.array(OptionSchema2.omit({ id: true })).optional(),
-  /** Pacing (#826, owner 2026-08-03: "how fast we move through them ... are parameters"):
-   *  seconds the floor stays open after this turn speaks. Absent = the bot's defaults
-   *  (the beat for context, the answer window for asks). Clamped bot-side. */
-  pace: external_exports.number().positive().optional(),
+  /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
+     paces itself now — a short beat between the sentences of a turn, the longer one at its end
+     (owner, 2026-09-30: "remove the bot deciding pace") — and it does that where the words are
+     spoken, not where the plan is written, so nothing between the brain and the walk decides
+     anything. A caller's own `beat_s` tuning is what it used to override. */
   /** Whether the walk WAITS for an answer before moving on. Absent = derived as today
    *  (a question blocks, context flows). blocking:false on a question = ask and move
    *  on, the claim stays pending; blocking:true on context = hold for a reply. */
@@ -14370,7 +14460,7 @@ var InboxItemSchema2 = external_exports.object({
    *  instant the agent picks it up (#997). Absent = pre-trigger row; fall back to
    *  `createdAt`. */
   agentStateAt: external_exports.string().datetime().optional(),
-  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (walk/design.md §11, owner
+  /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (docs/clients/app/walk/design.md §11, owner
    *  2026-09-22). One per DecisionNeed on the Call, in the Call's order, answered or open (a
    *  superseded or cancelled need is no longer a question anyone is asked). Present only on a
    *  Call's cards, and every card of that Call carries the same list: the call screen reads it
@@ -14431,7 +14521,7 @@ var InboxItemSchema2 = external_exports.object({
    *  off the same open list the card came from, so it clears when the Call does. A card is the
    *  backup for a call not taken; while the call has it, the call is where it is answered. */
   onCall: external_exports.literal(true).optional(),
-  /** THE RING, ON THE ITEM (walk/design.md §12 §17, #2251): the last ring on this card was
+  /** THE RING, ON THE ITEM (docs/clients/app/walk/design.md §12 §17, #2251): the last ring on this card was
    *  declined, and what the ladder will do next — read off the cron's own row, never computed
    *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
    *  The ladder is ACCOUNT-WIDE (#2259): `anchorAt` and `step` are the account's position;
@@ -14462,7 +14552,7 @@ var InboxItemSchema2 = external_exports.object({
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
   ),
   /** Real downstream work is stuck behind this one — set by the agent, independent of
-   *  urgency (see the main README's "premier use case" + notify/states.md). Drives the
+   *  urgency (see the main README's "premier use case" + docs/delivery/notify/states.md). Drives the
    *  inbox's blocking badge and the extra confirm step before dismissing it. */
   blocking: external_exports.boolean().default(false),
   /** The user's locked-in answer; present only for replied items (GET /api/replied/:id). */
@@ -14536,9 +14626,16 @@ var UserSettingsSchema2 = external_exports.object({
     banner: external_exports.boolean(),
     push: external_exports.boolean()
   }),
+  /** LockedIn / Default / DateNight on screen; the stored words are unchanged on purpose —
+   *  they are an enum on a live column across every account, and the rename is a rename of
+   *  what people read (owner, 2026-09-30). */
   sessionMode: external_exports.enum(["default", "all_calls", "silent"]),
-  silentPush: external_exports.boolean(),
-  autoCallback: external_exports.boolean(),
+  /** DEAD, AND ACCEPTED ANYWAY (#2813). DateNight is inbox-only with no way back, so nothing
+   *  reads this. It stays OPTIONAL rather than deleted because a phone on the old bundle
+   *  PATCHes the whole settings object and would be refused for sending a key we stopped
+   *  wanting — the same trap `voiceMode` below already documents. #2813 drops the field and
+   *  its column once no installed build still sends it. */
+  silentPush: external_exports.boolean().optional(),
   /** Opt-in (default false) to using your content to improve Paigy and train models. */
   improveConsent: external_exports.boolean(),
   missedCall: MissedCallSchema2.default("backoff_standard"),
@@ -14549,12 +14646,16 @@ var UserSettingsSchema2 = external_exports.object({
    *  must not silently reset this privacy choice. Absent = leave unchanged on
    *  write, 'hosted' on read (see store.ts). */
   voiceMode: external_exports.enum(["hosted", "on_device"]).optional(),
-  /** Talk — after you answer, the next step is read aloud (walk/design.md §6). ALWAYS ON until
+  /** Talk — after you answer, the next step is read aloud (docs/clients/app/walk/design.md §6). ALWAYS ON until
    *  turned off (owner, 2026-09-18, #2249): a setting, not a per-walk toggle. Optional, NOT
    *  defaulted, for the same reason `voiceMode` is: a stale client PATCHing the full settings
    *  object must not silently turn it back on. Absent = leave unchanged on write, true on
    *  read (see store.ts). */
   talk: external_exports.boolean().optional(),
+  /** CALL DIAGNOSTICS (owner, 2026-10-01): the call report carries each listen and the bot's own
+   *  load timings. SERVER-SET, no UI — on for every account that existed on 2026-10-01, off for
+   *  newer ones (migration 20261001132859). Read-only here: the settings PATCH never writes it. */
+  callDiagnostics: external_exports.boolean().optional(),
   /** Per-user ring budget (#603): calls per rolling day before further calls
    *  degrade to banner. Absent = the global default (25). A number, never a
    *  bypass — every account keeps a ceiling. No UI; set per user for testing. */
@@ -14563,9 +14664,6 @@ var UserSettingsSchema2 = external_exports.object({
    *  slower speaker). No API-side semantics; the bot resolves each key with its
    *  own defaults. Set per user (no UI yet); absent = bot defaults. */
   voiceTuning: external_exports.record(external_exports.string(), external_exports.union([external_exports.number(), external_exports.string()])).optional(),
-  /** Opt-in to real-phone (PSTN) calls when the app can't ring. Optional, not
-   *  defaulted — an older client PATCHing the full object must not clobber it. */
-  pstnCalls: external_exports.boolean().optional(),
   /** The user's IANA timezone (e.g. "America/Bogota"), recorded by the app — it is the
    *  only party that knows it. REMINDERS are why it exists: "remind me at ten" becomes
    *  an absolute `due_at` only if we know whose ten. Optional and never defaulted, for
@@ -14609,7 +14707,7 @@ var ConnectionSummarySchema2 = external_exports.object({
   /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
    *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
    *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
-   *  apps/api/src/tokens/devices-vs-agents-design.md. */
+   *  docs/server/tokens/devices-vs-agents-design.md. */
   kind: external_exports.enum(["device", "agent"]).optional(),
   /** For an agent, the token id of the DEVICE that minted it — so agents group under their
    *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
@@ -14627,7 +14725,7 @@ var ConnectionSummarySchema2 = external_exports.object({
    *  user on the agent's own page. null = no ceiling (today's behaviour for every
    *  connection). Android binds importance to a relationship rather than to each message,
    *  and that is the thing our roster could not say: "Marlow may always call me; Otto
-   *  never may" (navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
+   *  never may" (docs/clients/app/party/navigation-design.md, gap 2). Clamped in `arbitrateLevel`, so it binds
    *  every surface at once and outranks even `sessionMode: all_calls` — a mode the user
    *  set once must not overrule a rule they set about one agent. */
   reach: NotifyLevelSchema2.nullable().optional(),
@@ -14638,7 +14736,14 @@ var ConnectionSummarySchema2 = external_exports.object({
   /** Last presence heartbeat from a running agent process (POST /api/presence) — the
    *  desktop app while open. Null = never seen; stale = offline. */
   lastSeenAt: external_exports.string().datetime().nullable().optional(),
-  /** What a live desktop can run (companion.md §2.2), advertised on its heartbeat:
+  /** WORKING, NOT JUST CONNECTED (owner, 2026-09-30): the last time the agent itself acted on one of
+   *  its Goals — took its lease or recorded an operation (`tokens.last_worked_at`). Within
+   *  `WORKING_MS` it is working; otherwise it is connected but idle. Null = not seen working yet. */
+  lastWorkedAt: external_exports.string().datetime().nullable().optional(),
+  /** The oldest of its Goals that is `ready` for it — work handed to it that nobody has started.
+   *  With no work of its own for `WORKING_MS`, an agent sitting on this is not taking its work. */
+  oldestReadyAt: external_exports.string().datetime().nullable().optional(),
+  /** What a live desktop can run (docs/clients/desktop/companion.md §2.2), advertised on its heartbeat:
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
   runtime: external_exports.object({
@@ -14646,7 +14751,12 @@ var ConnectionSummarySchema2 = external_exports.object({
      *  shows its age here (`apps/desktop/src/update.ts`). */
     version: external_exports.string().optional(),
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
-    workspaces: external_exports.array(external_exports.string()).optional()
+    workspaces: external_exports.array(external_exports.string()).optional(),
+    /** THE GIT REPOS IN THOSE FOLDERS (2026-10-01, Goal 26982211): each granted folder that is a
+     *  repo, and each repo directly inside one, with its `origin` remote. A session started for
+     *  work on `mauurda/paigy` opens in that repo rather than the folder above it, where the repo's
+     *  own AGENTS.md is never read (`workspaceForRepo`). Absent on hosts that predate it. */
+    repos: external_exports.array(external_exports.object({ path: external_exports.string(), remote: external_exports.string() })).optional()
   }).optional(),
   /** The tail of this agent's working log, when a harness is driving it — the agent page's
    *  live strip. Absent for anything the desktop harness isn't running (a hatched identity
@@ -14729,7 +14839,7 @@ var QueueQuestionSchema2 = external_exports.object({
    *  for a settled question whose reply carried nothing readable. */
   answer: external_exports.string().nullable().default(null),
   /** The Goal this question belongs to — a step knows its Goal on its own, not only through
-   *  an `InboxItem`'s `communication.goalIds[0]` (walk/design.md §12 item 3).
+   *  an `InboxItem`'s `communication.goalIds[0]` (docs/clients/app/walk/design.md §12 item 3).
    *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
    *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
    *  this is the field they agree through rather than each re-deriving it from the row it
@@ -14821,7 +14931,19 @@ var QueueItemSchema2 = external_exports.object({
     said: external_exports.string(),
     at: external_exports.string(),
     entryId: external_exports.string()
-  }).nullable().optional()
+  }).nullable().optional(),
+  /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
+   *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
+   *  answer to a question, a voice note filed as work. Null when the only hands on it have been its
+   *  agent's; optional, so a hand-built queue (fixtures, the demo) and a door older than
+   *  20260930222356 need not spell it — `work/list.ts`'s `yoursAt` keeps its other sources, so the
+   *  Work tab orders as it did before the migration rather than throwing on the missing key.
+   *
+   *  It is a FACT, not a reconstruction: `latest` holds one Entry, so an agent's progress note a
+   *  minute after the person speaks erases their instant from it, and the durable traces the client
+   *  can see (`replies`, `questions[].answeredAt`) miss a spontaneous note entirely — a `request`
+   *  Entry with no `about_id` is in neither. */
+  lastPersonAt: external_exports.string().nullable().optional()
 });
 var COLD_AFTER_MS2 = 3 * 24 * 60 * 60 * 1e3;
 var NoteSourceSchema2 = external_exports.enum(["app", "call"]);
@@ -14851,7 +14973,7 @@ var NoteSchema2 = external_exports.object({
   assignee: external_exports.string().nullable(),
   /** The request thread minted at assignment; null until assigned. */
   parentId: external_exports.string().nullable(),
-  /** REMINDERS (reminders-design.md): the NOT-BEFORE this becomes eligible to ride a
+  /** REMINDERS (docs/model/notes/reminders-design.md): the NOT-BEFORE this becomes eligible to ride a
    *  call — never a deadline. It only ever comes from the user's own words, so when it
    *  passes Paigy rings ONCE (#1293, owner 2026-08-26: a time said out loud is consent to
    *  a ring at that time); after that it rides like any other. Null = "the very next
@@ -15111,6 +15233,29 @@ var SnapshotSchema2 = external_exports.object({
     computers: external_exports.array(ComputerRowSchema2).nullable()
   }).nullable()
 });
+var CallRecapSchema2 = external_exports.object({
+  call: external_exports.object({
+    status: external_exports.string(),
+    startedAt: external_exports.string(),
+    durationMs: external_exports.number().nullable(),
+    agents: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string().nullable() }))
+  }),
+  topics: external_exports.array(external_exports.object({
+    goalId: external_exports.string().uuid(),
+    title: external_exports.string(),
+    owner: external_exports.string(),
+    state: external_exports.string(),
+    questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
+    /** `words` is always what they SAID, verbatim — the record, never replaced. `headline` is
+     *  their answer on one line when the call's read wrote one (owner, 2026-10-01: "render them
+     *  summarized like a pre-made option is"), so the row scans like a chosen option and their
+     *  own words stay under it. Absent on every line stored before the read wrote them, and on
+     *  anything that is not an answer. */
+    lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), headline: external_exports.string().optional() }))
+  })),
+  unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+  more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
+});
 
 // src/paigy/activity.ts
 function shortenPaths(s) {
@@ -15411,7 +15556,7 @@ var AcpDriver = class {
 var frame2 = (body) => JSON.stringify({ jsonrpc: "2.0", ...body });
 
 // src/paigy/inbox.ts
-import { mkdirSync as mkdirSync3, readdirSync as readdirSync3, renameSync, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { mkdirSync as mkdirSync3, readdirSync as readdirSync4, renameSync, rmSync as rmSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
 import { join as join8 } from "path";
 import { homedir as homedir8 } from "os";
 import { randomUUID as randomUUID4 } from "crypto";
@@ -15423,7 +15568,7 @@ function openInbox(dir) {
   const receipt = (name) => join8(dir, "taken", `${name}.note`);
   const taken = (name) => {
     try {
-      return statSync2(receipt(name)).mtimeMs;
+      return statSync3(receipt(name)).mtimeMs;
     } catch (error) {
       if (missing(error)) return null;
       throw error;
@@ -15467,7 +15612,7 @@ var alive = (pid) => {
 };
 function inboxFor(root = INBOX_ROOT) {
   try {
-    for (const name of readdirSync3(root)) {
+    for (const name of readdirSync4(root)) {
       const pid = Number(name.split("-")[0]);
       if (!Number.isInteger(pid) || !alive(pid)) rmSync2(join8(root, name), { recursive: true, force: true });
     }
@@ -16494,7 +16639,9 @@ function startHost(opts) {
     void heartbeat({
       version: VERSION,
       harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
-      workspaces: listWorkspaces(opts.wsDeps)
+      workspaces: listWorkspaces(opts.wsDeps),
+      // The repos inside them, so a session started for work on one opens IN it (Goal 26982211).
+      repos: listRepos(opts.wsDeps)
     }, asHost).catch(() => {
     });
     void listenSlots().then(sweepSlots).catch(() => {
@@ -16849,7 +16996,7 @@ ipcMain.handle("paigy:status", () => ({
   paired: Boolean(deviceToken()),
   device: Boolean(readToken(DEVICE_SLOT)),
   sessions: host?.sessions().map(([, label]) => label) ?? [],
-  // The party (companion.md / party design.md): who lives on this machine and what
+  // The party (docs/clients/desktop/companion.md / party design.md): who lives on this machine and what
   // each one is doing THIS SECOND — the one thing the laptop knows better than the phone.
   roster: host?.roster() ?? readHostState()?.roster ?? []
 }));