@paigy/harness 0.3.37 → 0.3.38

package/dist/cli.js

@@ -77,7 +77,7 @@ function runProbe(argv) {
 function detect(entry, deps = {}) {
   const find = deps.which ?? which;
   const probe = deps.probe ?? runProbe;
-  const base = { name: entry.name, label: entry.label };
+  const base = { name: entry.name, label: entry.label, models: entry.models };
   const cliPath = find(entry.cli);
   if (!cliPath) return { ...base, status: "missing", hint: `${entry.label} is not installed.`, install: entry.installCli };
   const adapterPath = entry.adapter ? find(entry.adapter) : null;
@@ -109,7 +109,8 @@ var init_catalog = __esm({
         authProbe: ["claude", "auth", "status"],
         loginHint: "Run `claude` once in a terminal and sign in.",
         installCli: "curl -fsSL https://claude.ai/install.sh | bash",
-        installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp"
+        installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp",
+        models: ["claude-3-5-sonnet-20241022", "claude-3-5-haiku-20241022", "claude-3-opus-20240229"]
       },
       {
         name: "codex",
@@ -119,7 +120,8 @@ var init_catalog = __esm({
         authProbe: ["codex", "login", "status"],
         loginHint: "Run `codex login` to authenticate.",
         installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
-        installAdapter: "npm install -g @agentclientprotocol/codex-acp"
+        installAdapter: "npm install -g @agentclientprotocol/codex-acp",
+        models: ["gpt-4o", "gpt-4o-mini", "o1", "o1-mini"]
       },
       {
         name: "agy",
@@ -129,7 +131,8 @@ var init_catalog = __esm({
         adapter: "paigy-agy-acp",
         authProbe: ["agy", "help"],
         loginHint: "Install and set up Antigravity (`agy`).",
-        installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
+        installCli: "curl -fsSL https://antigravity.dev/install.sh | bash",
+        models: ["gemini-1.5-pro", "gemini-1.5-flash", "gemini-2.0-pro-exp"]
       }
     ];
   }
@@ -22777,10 +22780,47 @@ function claudeConversation() {
   if (!envSession("CLAUDE_CODE_SESSION_ID") || process.env.CLAUDE_CODE_CHILD_SESSION) return void 0;
   const dir = envSession("CLAUDE_CONFIG_DIR") ?? join2(homedir2(), ".claude");
   for (const pid of ancestors()) {
+    let text;
     try {
-      const { sessionId: sessionId2 } = JSON.parse(readFileSync(join2(dir, "sessions", `${pid}.json`), "utf8"));
-      return typeof sessionId2 === "string" && sessionId2.trim() ? sessionId2 : void 0;
+      text = readFileSync(join2(dir, "sessions", `${pid}.json`), "utf8");
     } catch {
+      continue;
+    }
+    const record = parseSessionRecord(text);
+    if (!record) continue;
+    return typeof record.sessionId === "string" && record.sessionId.trim() ? record.sessionId : void 0;
+  }
+  return void 0;
+}
+function parseSessionRecord(text) {
+  const object = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+  try {
+    return object(JSON.parse(text));
+  } catch {
+  }
+  let depth = 0;
+  let start = -1;
+  let quoted = false;
+  let escaped = false;
+  for (let i = 0; i < text.length; i += 1) {
+    const c = text[i];
+    if (quoted) {
+      if (escaped) escaped = false;
+      else if (c === "\\") escaped = true;
+      else if (c === '"') quoted = false;
+    } else if (c === '"') quoted = true;
+    else if (c === "{") {
+      if (depth === 0) start = i;
+      depth += 1;
+    } else if (c === "}" && depth > 0) {
+      depth -= 1;
+      if (depth === 0) {
+        try {
+          return object(JSON.parse(text.slice(start, i + 1)));
+        } catch {
+          return void 0;
+        }
+      }
     }
   }
   return void 0;
@@ -24254,7 +24294,7 @@ ${block2}`;
   }
   return text.slice(0, start) + updated + text.slice(end);
 }
-var import_undici, require2, CODEX_ENV, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, lineage, CLIENT, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, OPTION_LABEL_MAX, OPTION_HINT_MAX, OptionSchema, OptionInputSchema, NIGHT, ASK_MAX, UNITS_MAX, UNIT_TITLE_MAX, UNIT_BODY_MAX, UnitInputSchema, questionHandle, NodeRef, BlockedAction, reason, actionFits, ACTION_FITS, userExplicitlyRequested, units, UpdateInputSchema, questionFields, refineQuestion, QuestionInputSchema, QuestionWireSchema, AnswerInputSchema, QuestionDependencySchema, sendFields, ContactSchema, sendsAnything, ContactWireSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, UpdateGoalSchema, changedGoal, goalTitle, GOAL_OUTCOME_MAX, goalOutcome, CreateChange, EditChange, StateChange, AssignChange, DeferChange, MoveChange, DependencyChange, read, GoalChangeSchema, editNames, ManageGoalsSchema, ManageGoalsToolSchema, MANAGE_GOALS_DESCRIPTION, GetGoalSchema, GET_GOAL_DESCRIPTION, SearchToolSchema, SEARCH_DESCRIPTION, CheckActivitySchema, FEEDBACK_TEXT_MAX, SendFeedbackSchema, SEND_FEEDBACK_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, id, key, participant, SourceSchema, ResultRefSchema, NodeRefSchema, DependencySchema, goalState, existingGoalChanges, BrainGoalChangeSchema, option, QuestionChangeSchema, lessonScope, LessonChangeSchema, BrainNextSchema, messageBase, BrainMessageSchema, BrainSearchSchema, BrainResultSchema, str, strs, CompactResultSchema, COMPACT_RESULT_JSON_SCHEMA, str2, strs2, TalkerReplySchema, TALKER_REPLY_JSON_SCHEMA, str3, strs3, FilerReplySchema, FILER_REPLY_JSON_SCHEMA, ExplainerReplySchema, EXPLAINER_REPLY_JSON_SCHEMA, DISTILLER_DEFECTS, DistillerReplySchema, DISTILLER_REPLY_JSON_SCHEMA, TIDY_AUDIENCES, TidyReplySchema, TIDY_REPLY_JSON_SCHEMA, LIVE_MS, WORKING_MS, ContextSchema, ParticipantSchema, TransformSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, clock, QUIET, BrokerTuningSchema, UserSettingsSchema, HistoryWorkSchema, HistoryEntrySchema, HistoryPageSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, LessonStateSchema, LessonViewSchema, QueueQuestionSchema, QueueReplySchema, QueueItemSchema, QueueDeltaSchema, COLD_AFTER_MS, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, HostDecisionSchema, WakeNudgeSchema, PairingStatusSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenSchema, SupportRequestSchema, NotificationFeedbackKindSchema, SlimOptionSchema, QuestionRowSchema, WorkStateSchema, WorkRowSchema, ComputerRowSchema, AgentRowSchema, SnapshotSchema, CallRecapSchema, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, RevokedError, ApiError, tokenOverride, authToken, AWAIT_WINDOW_MS, NOT_SENT, APPLIED, DEMOTED, HEARTBEAT_MS, RETRY_MS, JOIN, JOIN_TIMEOUT_MS, lines;
+var import_undici, require2, CODEX_ENV, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, lineage, CLIENT, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, OPTION_LABEL_MAX, OPTION_HINT_MAX, OptionSchema, OptionInputSchema, NIGHT, ASK_MAX, UNITS_MAX, UNIT_TITLE_MAX, UNIT_BODY_MAX, UnitInputSchema, questionHandle, NodeRef, BlockedAction, reason, actionFits, ACTION_FITS, userExplicitlyRequested, units, UpdateInputSchema, questionFields, refineQuestion, QuestionInputSchema, QuestionWireSchema, AnswerInputSchema, QuestionDependencySchema, sendFields, ContactSchema, sendsAnything, ContactWireSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, UpdateGoalSchema, changedGoal, goalTitle, GOAL_OUTCOME_MAX, goalOutcome, CreateChange, EditChange, StateChange, AssignChange, DeferChange, MoveChange, DependencyChange, read, GoalChangeSchema, editNames, ManageGoalsSchema, ManageGoalsToolSchema, MANAGE_GOALS_DESCRIPTION, GetGoalSchema, GET_GOAL_DESCRIPTION, SearchToolSchema, SEARCH_DESCRIPTION, CheckActivitySchema, FEEDBACK_TEXT_MAX, SendFeedbackSchema, SEND_FEEDBACK_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, id, key, participant, SourceSchema, ResultRefSchema, NodeRefSchema, DependencySchema, goalState, existingGoalChanges, BrainGoalChangeSchema, option, QuestionChangeSchema, lessonScope, LessonChangeSchema, BrainNextSchema, messageBase, BrainMessageSchema, BrainSearchSchema, BrainResultSchema, str, strs, CompactResultSchema, COMPACT_RESULT_JSON_SCHEMA, str2, strs2, TalkerReplySchema, TALKER_REPLY_JSON_SCHEMA, str3, strs3, FilerReplySchema, FILER_REPLY_JSON_SCHEMA, ExplainerReplySchema, EXPLAINER_REPLY_JSON_SCHEMA, DISTILLER_DEFECTS, DistillerReplySchema, DISTILLER_REPLY_JSON_SCHEMA, TIDY_AUDIENCES, TidyReplySchema, TIDY_REPLY_JSON_SCHEMA, LIVE_MS, WORKING_MS, WORKING_TIER_MS, RECENT_TIER_MS, ContextSchema, ParticipantSchema, TransformSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, clock, QUIET, BrokerTuningSchema, UserSettingsSchema, HistoryWorkSchema, HistoryEntrySchema, HistoryPageSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, LessonStateSchema, LessonViewSchema, QueueQuestionSchema, QueueReplySchema, QueueItemSchema, QueueDeltaSchema, COLD_AFTER_MS, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, HostDecisionSchema, WakeNudgeSchema, PairingStatusSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenSchema, SupportRequestSchema, NotificationFeedbackKindSchema, SlimOptionSchema, QuestionRowSchema, WorkStateSchema, WorkRowSchema, ComputerRowSchema, AgentRowSchema, SnapshotSchema, CallRecapSchema, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, RevokedError, ApiError, tokenOverride, authToken, AWAIT_WINDOW_MS, NOT_SENT, APPLIED, DEMOTED, HEARTBEAT_MS, RETRY_MS, JOIN, JOIN_TIMEOUT_MS, lines;
 var init_dist = __esm({
   "../../packages/sdk/dist/index.js"() {
     "use strict";
@@ -24705,8 +24745,41 @@ var init_dist = __esm({
       message: external_exports.string().trim().min(1).describe(`The one point, at most ${ASK_MAX} characters; the context goes in units.`),
       goalIds: external_exports.array(external_exports.string().uuid()).min(1).max(10).describe("The Goals it is about, each one that exists: the one it is mainly about first."),
       units,
+      // A REPORT KEEPS ITS TAP (#2799, #3260; owner, 2026-10-08, settling #2776: "keep the reports open
+      // until the user acknowledges them"). A report asks nothing, so it opens no Question -- but it
+      // still waits to be acknowledged, and it carries the ONE tap that closes it. Never a decision: the
+      // tap lands as a contribution, the person's own words on the Goal, because there is no Question
+      // for it to answer.
+      //
+      // AND ITS WORDS ARE WRITTEN FOR THIS REPORT (owner, 2026-10-08, Goal 3c12d3c6: "Agent
+      // acknowledgments vary (e.g. 'sounds good, I will test later') instead of always 'got it'"). `Got
+      // it` and `Noted` say only that a card was cleared, where "Sounds good, I'll test later" says the
+      // work was RECEIVED and not verified -- the distinction a session spent an hour recovering from a
+      // call transcript on 2026-10-07, having read "not quite" as a defect report when it meant *not
+      // tested yet*. The words are worth writing because the agent reads them back.
+      //
+      // ONE STRING, NOT A LIST (owner, 2026-10-08 15:47, Goal 31a1e2ac, asked whether an agent should
+      // write up to four of them: "just on the cards, but it should be more like just they should only
+      // get one basically string value that they can enter that replaces got it"). A report has exactly
+      // one way to close, so the only thing an agent writes is what that button SAYS. #3260's 1..6
+      // `options` and this field are one job: the list is deleted, not deprecated (ONE JOB, ONE
+      // MECHANISM). It rides the door as the report's single stored option (`storedOption`,
+      // `apps/api/src/goal/router.ts`), so no reader below the door learns a second shape.
+      reply: external_exports.string().trim().min(1).describe(
+        `What this report's button says instead of "Got it", at most ${OPTION_LABEL_MAX} characters, written in THEIR voice for THIS report ("Sounds good, I'll test later") -- the care you give a question's options, so what they tap tells you whether they verified your work or only received it. One tap sends exactly these words back to you. Words that would CHANGE what happens next are a question, not a reply to a report: it still asks nothing and still owes you no answer. Left out, the button says "Got it", as every card did.`
+      ).optional(),
       userExplicitlyRequested
-    }).strict().superRefine((u, ctx) => refuseOverCaps(u.message, u.units, "message", ctx));
+    }).strict().superRefine((u, ctx) => {
+      refuseOverCaps(u.message, u.units, "message", ctx);
+      if (u.reply && u.reply.length > OPTION_LABEL_MAX) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["reply"],
+          params: { refusal: "reply_too_long", length: u.reply.length, cap: OPTION_LABEL_MAX },
+          message: `reply_too_long: the reply is ${u.reply.length} characters; the cap is ${OPTION_LABEL_MAX}. It is a button's words, so say it in a breath.`
+        });
+      }
+    });
     questionFields = {
       question: external_exports.string().trim().min(1).describe(
         `ONE question, in at most ${ASK_MAX} characters, and only what is needed to answer it; the context goes in units. Several questions are several objects, one each: an answer settles the one question it was given, so a person who answers the part of a bundled question that interested them settles nothing and is asked again. Separate questions cost nothing: ANY contact for a person already on a call JOINS that call, so several arrive as one call.`
@@ -24790,6 +24863,8 @@ QUESTIONS: one question per object; several questions are several objects in one
 
 CUT A LONG MESSAGE BEFORE YOU SEND IT: a question, an update's message or an answer is the one point, in at most ${ASK_MAX} characters; everything else it needs goes in 'units', up to ${UNITS_MAX} {title, body} in reading order, one idea each, every title at most ${UNIT_TITLE_MAX} characters and every body at most ${UNIT_BODY_MAX}. The person sees the main text and the titles, and opens a unit to read its body. Over a cap is refused by name (ask_too_long, too_many_units, unit_title_too_long, unit_body_too_long) and nothing is sent.
 
+GIVE A REPORT ITS REPLY: an update takes \`reply\` too, one line the person can tap instead of typing, written in THEIR voice for THAT report ("Sounds good, I'll test later") \u2014 the same care you give a question's options. It is what their button says instead of "Got it", and what they tap is what you read back, which tells you whether they verified your work or only received it. One line, because a report has one way to close, and it may not change what happens next: a reply that would is a question. Nothing is owed on it either way, and a report that writes none offers "Got it".
+
 UPDATES ask nothing, so no answer is owed and none should be awaited. An update reaches the person only when they asked you for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; any other is recorded as the Goal's progress and nobody is notified. So when the work is finished, mark the Goal done first (manage_goals), then send one update saying what is done and anything they need to do or check. On a Goal whose report card is still open, an update that reaches them is added to that card, with no new push. If the person is already on a call, anything that reaches them joins that call, with no ring.
 
 RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of what is addressed to you (not a history page): \`question\`, a Question you owe (answer it in answers, with its questionId); \`update\`, something new on one of your Goals (a reply, an answer: read it with get_goal); \`instruction\`, a request or note sent to you. \`hasMore\` says more are waiting. Reading acknowledges nothing: once you have handled events, confirm their eventIds with contact({ackEventIds}), and the next batch can come. contact({}) waits up to about 45 seconds for something to arrive; contact({wait:false}) returns at once. It also lists work given to you that nobody has started (\`assigned\`; your first write to it starts it) and your work gone quiet (\`stalled\`).`;
@@ -25144,8 +25219,10 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
       // something the person answered or asked for did not save, was refused or dropped
       "ignored",
       // the person asked or said something and was never answered (the critic's ignored_a_question)
-      "promised"
+      "promised",
       // said it did or would do something, and nothing shows it done (the critic's broken_promise)
+      "dropped"
+      // something it had to say never played and was never said later (owner, 2026-10-08, call 65433a9d)
     ];
     DistillerReplySchema = external_exports.object({
       defects: external_exports.array(external_exports.object({
@@ -25176,6 +25253,8 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
     );
     LIVE_MS = 3 * 6e4;
     WORKING_MS = 60 * 6e4;
+    WORKING_TIER_MS = 2 * 60 * 6e4;
+    RECENT_TIER_MS = 24 * 60 * 6e4;
     ContextSchema = external_exports.object({
       title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
       description: external_exports.array(external_exports.string().min(1)).describe(
@@ -25520,6 +25599,10 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
        *  so "who said that" survives the call, and it rides PER TURN because a coalesced call
        *  speaks for several agents — the turn is the only place that knows which. */
       agentId: external_exports.string().optional(),
+      /** ITS QUESTION IS ON THE TABLE (#3292): a talker line about a question the person owes. The walk tells
+       *  the phone (`asking`, so the agenda goes gold and its options show) without treating the line as a
+       *  question turn — the talker owns re-asking and the waits, so `question` stays null. */
+      onTable: external_exports.boolean().optional(),
       select: SelectShapeSchema.optional(),
       options: external_exports.array(OptionSchema.omit({ id: true })).optional(),
       /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
@@ -25594,9 +25677,16 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
         /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
          *  its need offers, exactly as its own card carries them, present only when one of them has a
          *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-         *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
-         *  says those, and the list stays small (an `html` is up to 16 KB). */
-        options: external_exports.array(OptionSchema).optional()
+         *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+        options: external_exports.array(OptionSchema).optional(),
+        /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+         *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+         *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+         *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+         *  preview layout for any `options`, and must see exactly what it did. */
+        choices: external_exports.array(OptionSchema).optional(),
+        /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+        select: external_exports.enum(["one", "many", "rank"]).optional()
       })).optional(),
       visuals: external_exports.array(VisualSchema).optional(),
       /** The connected agent's name (the single pairing name — user-typed, or the
@@ -26033,7 +26123,11 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
         from: external_exports.enum(["person", "agent"]),
         said: external_exports.string(),
         at: external_exports.string(),
-        entryId: external_exports.string()
+        entryId: external_exports.string(),
+        /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+         *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+         *  none was. The Work row reads it before `said`. */
+        summary: external_exports.string().optional()
       }).nullable().optional(),
       /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
        *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
@@ -26370,6 +26464,9 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
         title: external_exports.string(),
         owner: external_exports.string(),
         state: external_exports.string(),
+        /** Whether the call put it to the person. An item it carried and never said has no row on the
+         *  review (owner, 2026-10-08: "why do we get the third one when it didn't happen in the call?"). */
+        presented: external_exports.boolean(),
         questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
         /** `words` is always what they SAID, verbatim — the record, never replaced. `summary` is what
          *  the line says in ten words (owner, 2026-10-07): the filer's, or the talker's for the answer it
@@ -26377,9 +26474,33 @@ RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of w
          *  neither wrote one. */
         /** `about` is the request the line answered (its question), null for words that answered none —
          *  the key the screen groups on, so one question is one row however many times it was answered. */
-        lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), summary: external_exports.string().optional(), about: external_exports.string().nullable().optional() }))
+        /** `reply` is the reply the line makes up (an answer, an ok, a deferral), so one reply is one row
+         *  however many lines it cites; `at` is the call lines it came from, so a filed line an answer already
+         *  said is not drawn again (owner, 2026-10-07: "fix them all"); `replyKind` says which replies are answers. */
+        lines: external_exports.array(external_exports.object({
+          entryId: external_exports.string().uuid(),
+          words: external_exports.string(),
+          summary: external_exports.string().optional(),
+          about: external_exports.string().nullable().optional(),
+          reply: external_exports.string().nullable().optional(),
+          replyKind: external_exports.string().nullable().optional(),
+          at: external_exports.array(external_exports.number()).optional()
+        }))
       })),
       unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+      /** THE PUBLIC TRANSCRIPT — every line said on the call, in the order it was said, and WHO SAID IT
+       *  (owner, 2026-10-08: "the public view should only have the lines and who said them, and that's
+       *  it"; `docs/brain/phase-three/modular.md` build step 3). `speaker` is the role: "user" is the
+       *  person, "agent" an agent speaking, named in `agent`. The timeline's action lines are ours, not
+       *  theirs, and are not here; nor is a sealed line, which the server has no words for. It stands
+       *  BESIDE `topics` and `unfiled` — what the call did with the words — never instead of them. */
+      said: external_exports.array(external_exports.object({
+        lineId: external_exports.string().uuid(),
+        speaker: external_exports.enum(["user", "agent"]),
+        agent: external_exports.object({ id: external_exports.string().nullable(), name: external_exports.string().nullable() }).nullable(),
+        words: external_exports.string(),
+        atMs: external_exports.number()
+      })),
       more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
     });
     TOKEN_PATH = join22(homedir22(), ".paigy", "token.json");
@@ -32071,7 +32192,8 @@ function startSession(opts) {
   if (!existsSync3(cwd)) {
     queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
   }
-  const codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  let codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  if (opts.model && opts.harness === "codex") codexConfig = { ...codexConfig, model: opts.model };
   if (codexConfig) {
     const key3 = "mcp_servers.paigy.env_vars";
     const configPath = join5(process.env.CODEX_HOME || join5(homedir4(), ".codex"), "config.toml");
@@ -32097,6 +32219,8 @@ function startSession(opts) {
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
       ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
       ...opts.instance ? { PAIGY_INSTANCE_ID: opts.instance } : {},
+      ...opts.model && opts.harness === "claude" ? { CLAUDE_MODEL_CONFIG: JSON.stringify({ provider: "anthropic", model: opts.model }) } : {},
+      ...opts.model && opts.harness === "agy" ? { AGY_MODEL_CONFIG: JSON.stringify({ model: opts.model }) } : {},
       ...codexConfig ? { CODEX_CONFIG: JSON.stringify(codexConfig) } : {},
       ...opts.session ?? opts.resume ? { PAIGY_SESSION_ID: opts.session ?? opts.resume } : {},
       // A PUMP DRIVES THIS PROCESS (2026-09-22, #2265): every run `runHarness` starts has the
@@ -33601,8 +33725,41 @@ var UpdateInputSchema2 = external_exports.object({
   message: external_exports.string().trim().min(1).describe(`The one point, at most ${ASK_MAX2} characters; the context goes in units.`),
   goalIds: external_exports.array(external_exports.string().uuid()).min(1).max(10).describe("The Goals it is about, each one that exists: the one it is mainly about first."),
   units: units2,
+  // A REPORT KEEPS ITS TAP (#2799, #3260; owner, 2026-10-08, settling #2776: "keep the reports open
+  // until the user acknowledges them"). A report asks nothing, so it opens no Question -- but it
+  // still waits to be acknowledged, and it carries the ONE tap that closes it. Never a decision: the
+  // tap lands as a contribution, the person's own words on the Goal, because there is no Question
+  // for it to answer.
+  //
+  // AND ITS WORDS ARE WRITTEN FOR THIS REPORT (owner, 2026-10-08, Goal 3c12d3c6: "Agent
+  // acknowledgments vary (e.g. 'sounds good, I will test later') instead of always 'got it'"). `Got
+  // it` and `Noted` say only that a card was cleared, where "Sounds good, I'll test later" says the
+  // work was RECEIVED and not verified -- the distinction a session spent an hour recovering from a
+  // call transcript on 2026-10-07, having read "not quite" as a defect report when it meant *not
+  // tested yet*. The words are worth writing because the agent reads them back.
+  //
+  // ONE STRING, NOT A LIST (owner, 2026-10-08 15:47, Goal 31a1e2ac, asked whether an agent should
+  // write up to four of them: "just on the cards, but it should be more like just they should only
+  // get one basically string value that they can enter that replaces got it"). A report has exactly
+  // one way to close, so the only thing an agent writes is what that button SAYS. #3260's 1..6
+  // `options` and this field are one job: the list is deleted, not deprecated (ONE JOB, ONE
+  // MECHANISM). It rides the door as the report's single stored option (`storedOption`,
+  // `apps/api/src/goal/router.ts`), so no reader below the door learns a second shape.
+  reply: external_exports.string().trim().min(1).describe(
+    `What this report's button says instead of "Got it", at most ${OPTION_LABEL_MAX2} characters, written in THEIR voice for THIS report ("Sounds good, I'll test later") -- the care you give a question's options, so what they tap tells you whether they verified your work or only received it. One tap sends exactly these words back to you. Words that would CHANGE what happens next are a question, not a reply to a report: it still asks nothing and still owes you no answer. Left out, the button says "Got it", as every card did.`
+  ).optional(),
   userExplicitlyRequested: userExplicitlyRequested2
-}).strict().superRefine((u, ctx) => refuseOverCaps2(u.message, u.units, "message", ctx));
+}).strict().superRefine((u, ctx) => {
+  refuseOverCaps2(u.message, u.units, "message", ctx);
+  if (u.reply && u.reply.length > OPTION_LABEL_MAX2) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["reply"],
+      params: { refusal: "reply_too_long", length: u.reply.length, cap: OPTION_LABEL_MAX2 },
+      message: `reply_too_long: the reply is ${u.reply.length} characters; the cap is ${OPTION_LABEL_MAX2}. It is a button's words, so say it in a breath.`
+    });
+  }
+});
 var questionFields2 = {
   question: external_exports.string().trim().min(1).describe(
     `ONE question, in at most ${ASK_MAX2} characters, and only what is needed to answer it; the context goes in units. Several questions are several objects, one each: an answer settles the one question it was given, so a person who answers the part of a bundled question that interested them settles nothing and is asked again. Separate questions cost nothing: ANY contact for a person already on a call JOINS that call, so several arrive as one call.`
@@ -33686,6 +33843,8 @@ QUESTIONS: one question per object; several questions are several objects in one
 
 CUT A LONG MESSAGE BEFORE YOU SEND IT: a question, an update's message or an answer is the one point, in at most ${ASK_MAX2} characters; everything else it needs goes in 'units', up to ${UNITS_MAX2} {title, body} in reading order, one idea each, every title at most ${UNIT_TITLE_MAX2} characters and every body at most ${UNIT_BODY_MAX2}. The person sees the main text and the titles, and opens a unit to read its body. Over a cap is refused by name (ask_too_long, too_many_units, unit_title_too_long, unit_body_too_long) and nothing is sent.
 
+GIVE A REPORT ITS REPLY: an update takes \`reply\` too, one line the person can tap instead of typing, written in THEIR voice for THAT report ("Sounds good, I'll test later") \u2014 the same care you give a question's options. It is what their button says instead of "Got it", and what they tap is what you read back, which tells you whether they verified your work or only received it. One line, because a report has one way to close, and it may not change what happens next: a reply that would is a question. Nothing is owed on it either way, and a report that writes none offers "Got it".
+
 UPDATES ask nothing, so no answer is owed and none should be awaited. An update reaches the person only when they asked you for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; any other is recorded as the Goal's progress and nobody is notified. So when the work is finished, mark the Goal done first (manage_goals), then send one update saying what is done and anything they need to do or check. On a Goal whose report card is still open, an update that reaches them is added to that card, with no new push. If the person is already on a call, anything that reaches them joins that call, with no ring.
 
 RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of what is addressed to you (not a history page): \`question\`, a Question you owe (answer it in answers, with its questionId); \`update\`, something new on one of your Goals (a reply, an answer: read it with get_goal); \`instruction\`, a request or note sent to you. \`hasMore\` says more are waiting. Reading acknowledges nothing: once you have handled events, confirm their eventIds with contact({ackEventIds}), and the next batch can come. contact({}) waits up to about 45 seconds for something to arrive; contact({wait:false}) returns at once. It also lists work given to you that nobody has started (\`assigned\`; your first write to it starts it) and your work gone quiet (\`stalled\`).`;
@@ -34040,8 +34199,10 @@ var DISTILLER_DEFECTS2 = [
   // something the person answered or asked for did not save, was refused or dropped
   "ignored",
   // the person asked or said something and was never answered (the critic's ignored_a_question)
-  "promised"
+  "promised",
   // said it did or would do something, and nothing shows it done (the critic's broken_promise)
+  "dropped"
+  // something it had to say never played and was never said later (owner, 2026-10-08, call 65433a9d)
 ];
 var DistillerReplySchema2 = external_exports.object({
   defects: external_exports.array(external_exports.object({
@@ -34089,6 +34250,8 @@ function entryWords(entry) {
 }
 var LIVE_MS2 = 3 * 6e4;
 var WORKING_MS2 = 60 * 6e4;
+var WORKING_TIER_MS2 = 2 * 60 * 6e4;
+var RECENT_TIER_MS2 = 24 * 60 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -34433,6 +34596,10 @@ var AgendaTurnSchema2 = external_exports.object({
    *  so "who said that" survives the call, and it rides PER TURN because a coalesced call
    *  speaks for several agents — the turn is the only place that knows which. */
   agentId: external_exports.string().optional(),
+  /** ITS QUESTION IS ON THE TABLE (#3292): a talker line about a question the person owes. The walk tells
+   *  the phone (`asking`, so the agenda goes gold and its options show) without treating the line as a
+   *  question turn — the talker owns re-asking and the waits, so `question` stays null. */
+  onTable: external_exports.boolean().optional(),
   select: SelectShapeSchema2.optional(),
   options: external_exports.array(OptionSchema2.omit({ id: true })).optional(),
   /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
@@ -34507,9 +34674,16 @@ var InboxItemSchema2 = external_exports.object({
     /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
      *  its need offers, exactly as its own card carries them, present only when one of them has a
      *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-     *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
-     *  says those, and the list stays small (an `html` is up to 16 KB). */
-    options: external_exports.array(OptionSchema2).optional()
+     *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+    options: external_exports.array(OptionSchema2).optional(),
+    /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+     *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+     *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+     *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+     *  preview layout for any `options`, and must see exactly what it did. */
+    choices: external_exports.array(OptionSchema2).optional(),
+    /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+    select: external_exports.enum(["one", "many", "rank"]).optional()
   })).optional(),
   visuals: external_exports.array(VisualSchema2).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
@@ -34946,7 +35120,11 @@ var QueueItemSchema2 = external_exports.object({
     from: external_exports.enum(["person", "agent"]),
     said: external_exports.string(),
     at: external_exports.string(),
-    entryId: external_exports.string()
+    entryId: external_exports.string(),
+    /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+     *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+     *  none was. The Work row reads it before `said`. */
+    summary: external_exports.string().optional()
   }).nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
@@ -35281,6 +35459,9 @@ var CallRecapSchema2 = external_exports.object({
     title: external_exports.string(),
     owner: external_exports.string(),
     state: external_exports.string(),
+    /** Whether the call put it to the person. An item it carried and never said has no row on the
+     *  review (owner, 2026-10-08: "why do we get the third one when it didn't happen in the call?"). */
+    presented: external_exports.boolean(),
     questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
     /** `words` is always what they SAID, verbatim — the record, never replaced. `summary` is what
      *  the line says in ten words (owner, 2026-10-07): the filer's, or the talker's for the answer it
@@ -35288,9 +35469,33 @@ var CallRecapSchema2 = external_exports.object({
      *  neither wrote one. */
     /** `about` is the request the line answered (its question), null for words that answered none —
      *  the key the screen groups on, so one question is one row however many times it was answered. */
-    lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), summary: external_exports.string().optional(), about: external_exports.string().nullable().optional() }))
+    /** `reply` is the reply the line makes up (an answer, an ok, a deferral), so one reply is one row
+     *  however many lines it cites; `at` is the call lines it came from, so a filed line an answer already
+     *  said is not drawn again (owner, 2026-10-07: "fix them all"); `replyKind` says which replies are answers. */
+    lines: external_exports.array(external_exports.object({
+      entryId: external_exports.string().uuid(),
+      words: external_exports.string(),
+      summary: external_exports.string().optional(),
+      about: external_exports.string().nullable().optional(),
+      reply: external_exports.string().nullable().optional(),
+      replyKind: external_exports.string().nullable().optional(),
+      at: external_exports.array(external_exports.number()).optional()
+    }))
   })),
   unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+  /** THE PUBLIC TRANSCRIPT — every line said on the call, in the order it was said, and WHO SAID IT
+   *  (owner, 2026-10-08: "the public view should only have the lines and who said them, and that's
+   *  it"; `docs/brain/phase-three/modular.md` build step 3). `speaker` is the role: "user" is the
+   *  person, "agent" an agent speaking, named in `agent`. The timeline's action lines are ours, not
+   *  theirs, and are not here; nor is a sealed line, which the server has no words for. It stands
+   *  BESIDE `topics` and `unfiled` — what the call did with the words — never instead of them. */
+  said: external_exports.array(external_exports.object({
+    lineId: external_exports.string().uuid(),
+    speaker: external_exports.enum(["user", "agent"]),
+    agent: external_exports.object({ id: external_exports.string().nullable(), name: external_exports.string().nullable() }).nullable(),
+    words: external_exports.string(),
+    atMs: external_exports.number()
+  })),
   more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
 });
 
@@ -36245,10 +36450,14 @@ function localHolderPids(deps = {}) {
     if (!/^\d+\.json$/.test(file)) continue;
     let row;
     try {
-      row = JSON.parse(read3(join7(dir, file)));
+      row = parseSessionRecord(read3(join7(dir, file)));
     } catch {
       continue;
     }
+    if (!row) {
+      deps.unreadable?.(file);
+      continue;
+    }
     const pid = typeof row.pid === "number" ? row.pid : Number(file.slice(0, -5));
     if (typeof row.sessionId !== "string" || !row.sessionId.trim() || !Number.isInteger(pid) || pid <= 0) continue;
     if (!holds(pid, row.procStart, check)) continue;
@@ -36290,10 +36499,14 @@ function localHolders(deps = {}) {
     if (!/^\d+\.json$/.test(file)) continue;
     let row;
     try {
-      row = JSON.parse(read3(join7(dir, file)));
+      row = parseSessionRecord(read3(join7(dir, file)));
     } catch {
       continue;
     }
+    if (!row) {
+      deps.unreadable?.(file);
+      continue;
+    }
     const pid = typeof row.pid === "number" ? row.pid : Number(file.slice(0, -5));
     if (typeof row.sessionId !== "string" || !row.sessionId.trim() || !Number.isInteger(pid) || pid <= 0) continue;
     const slot = sessionSlot(row.sessionId);
@@ -36514,7 +36727,7 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-var launchRun = (spec) => ({ session: spec.sessionId });
+var launchRun = (spec) => ({ session: spec.sessionId, model: spec.model });
 var BOUND_ELSEWHERE_MS = 10 * 6e4;
 var boundElsewhere = /* @__PURE__ */ new Map();
 var BOUND_SKIP = "is bound to the session it was paired in, which this host cannot name \u2014 run `paigy-harness handoff` as it, in its folder, to record it";
@@ -36623,7 +36836,7 @@ function startHost(opts) {
     });
     void heartbeat({
       version: VERSION,
-      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
+      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status, models: a.models })),
       workspaces: listWorkspaces(opts.wsDeps),
       // The repos inside them, so a session started for work on one opens IN it (Goal 26982211).
       repos: listRepos(opts.wsDeps)
@@ -36715,9 +36928,14 @@ function startHost(opts) {
   let lastPresence = /* @__PURE__ */ new Map();
   async function evidence() {
     const presence = await presenceMap();
-    lastHolders = localHolders();
+    lastHolders = localHolders({ unreadable: (file) => {
+      if (unreadable.has(file)) return;
+      unreadable.add(file);
+      opts.log(`\u25CC session record ${file} has no object in it \u2014 the process it names reads as not running here`);
+    } });
     return { presence, holders: lastHolders };
   }
+  const unreadable = /* @__PURE__ */ new Set();
   let lastHolders = /* @__PURE__ */ new Map();
   async function wakeSlot(slot, { presence, holders }, cause = "sweep") {
     {

package/dist/main.js

@@ -8680,10 +8680,47 @@ function claudeConversation() {
   if (!envSession("CLAUDE_CODE_SESSION_ID") || process.env.CLAUDE_CODE_CHILD_SESSION) return void 0;
   const dir = envSession("CLAUDE_CONFIG_DIR") ?? join(homedir(), ".claude");
   for (const pid of ancestors()) {
+    let text;
     try {
-      const { sessionId: sessionId2 } = JSON.parse(readFileSync(join(dir, "sessions", `${pid}.json`), "utf8"));
-      return typeof sessionId2 === "string" && sessionId2.trim() ? sessionId2 : void 0;
+      text = readFileSync(join(dir, "sessions", `${pid}.json`), "utf8");
     } catch {
+      continue;
+    }
+    const record = parseSessionRecord(text);
+    if (!record) continue;
+    return typeof record.sessionId === "string" && record.sessionId.trim() ? record.sessionId : void 0;
+  }
+  return void 0;
+}
+function parseSessionRecord(text) {
+  const object = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+  try {
+    return object(JSON.parse(text));
+  } catch {
+  }
+  let depth = 0;
+  let start = -1;
+  let quoted = false;
+  let escaped = false;
+  for (let i = 0; i < text.length; i += 1) {
+    const c = text[i];
+    if (quoted) {
+      if (escaped) escaped = false;
+      else if (c === "\\") escaped = true;
+      else if (c === '"') quoted = false;
+    } else if (c === '"') quoted = true;
+    else if (c === "{") {
+      if (depth === 0) start = i;
+      depth += 1;
+    } else if (c === "}" && depth > 0) {
+      depth -= 1;
+      if (depth === 0) {
+        try {
+          return object(JSON.parse(text.slice(start, i + 1)));
+        } catch {
+          return void 0;
+        }
+      }
     }
   }
   return void 0;
@@ -10047,8 +10084,41 @@ var UpdateInputSchema = external_exports.object({
   message: external_exports.string().trim().min(1).describe(`The one point, at most ${ASK_MAX} characters; the context goes in units.`),
   goalIds: external_exports.array(external_exports.string().uuid()).min(1).max(10).describe("The Goals it is about, each one that exists: the one it is mainly about first."),
   units,
+  // A REPORT KEEPS ITS TAP (#2799, #3260; owner, 2026-10-08, settling #2776: "keep the reports open
+  // until the user acknowledges them"). A report asks nothing, so it opens no Question -- but it
+  // still waits to be acknowledged, and it carries the ONE tap that closes it. Never a decision: the
+  // tap lands as a contribution, the person's own words on the Goal, because there is no Question
+  // for it to answer.
+  //
+  // AND ITS WORDS ARE WRITTEN FOR THIS REPORT (owner, 2026-10-08, Goal 3c12d3c6: "Agent
+  // acknowledgments vary (e.g. 'sounds good, I will test later') instead of always 'got it'"). `Got
+  // it` and `Noted` say only that a card was cleared, where "Sounds good, I'll test later" says the
+  // work was RECEIVED and not verified -- the distinction a session spent an hour recovering from a
+  // call transcript on 2026-10-07, having read "not quite" as a defect report when it meant *not
+  // tested yet*. The words are worth writing because the agent reads them back.
+  //
+  // ONE STRING, NOT A LIST (owner, 2026-10-08 15:47, Goal 31a1e2ac, asked whether an agent should
+  // write up to four of them: "just on the cards, but it should be more like just they should only
+  // get one basically string value that they can enter that replaces got it"). A report has exactly
+  // one way to close, so the only thing an agent writes is what that button SAYS. #3260's 1..6
+  // `options` and this field are one job: the list is deleted, not deprecated (ONE JOB, ONE
+  // MECHANISM). It rides the door as the report's single stored option (`storedOption`,
+  // `apps/api/src/goal/router.ts`), so no reader below the door learns a second shape.
+  reply: external_exports.string().trim().min(1).describe(
+    `What this report's button says instead of "Got it", at most ${OPTION_LABEL_MAX} characters, written in THEIR voice for THIS report ("Sounds good, I'll test later") -- the care you give a question's options, so what they tap tells you whether they verified your work or only received it. One tap sends exactly these words back to you. Words that would CHANGE what happens next are a question, not a reply to a report: it still asks nothing and still owes you no answer. Left out, the button says "Got it", as every card did.`
+  ).optional(),
   userExplicitlyRequested
-}).strict().superRefine((u, ctx) => refuseOverCaps(u.message, u.units, "message", ctx));
+}).strict().superRefine((u, ctx) => {
+  refuseOverCaps(u.message, u.units, "message", ctx);
+  if (u.reply && u.reply.length > OPTION_LABEL_MAX) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["reply"],
+      params: { refusal: "reply_too_long", length: u.reply.length, cap: OPTION_LABEL_MAX },
+      message: `reply_too_long: the reply is ${u.reply.length} characters; the cap is ${OPTION_LABEL_MAX}. It is a button's words, so say it in a breath.`
+    });
+  }
+});
 var questionFields = {
   question: external_exports.string().trim().min(1).describe(
     `ONE question, in at most ${ASK_MAX} characters, and only what is needed to answer it; the context goes in units. Several questions are several objects, one each: an answer settles the one question it was given, so a person who answers the part of a bundled question that interested them settles nothing and is asked again. Separate questions cost nothing: ANY contact for a person already on a call JOINS that call, so several arrive as one call.`
@@ -10132,6 +10202,8 @@ QUESTIONS: one question per object; several questions are several objects in one
 
 CUT A LONG MESSAGE BEFORE YOU SEND IT: a question, an update's message or an answer is the one point, in at most ${ASK_MAX} characters; everything else it needs goes in 'units', up to ${UNITS_MAX} {title, body} in reading order, one idea each, every title at most ${UNIT_TITLE_MAX} characters and every body at most ${UNIT_BODY_MAX}. The person sees the main text and the titles, and opens a unit to read its body. Over a cap is refused by name (ask_too_long, too_many_units, unit_title_too_long, unit_body_too_long) and nothing is sent.
 
+GIVE A REPORT ITS REPLY: an update takes \`reply\` too, one line the person can tap instead of typing, written in THEIR voice for THAT report ("Sounds good, I'll test later") \u2014 the same care you give a question's options. It is what their button says instead of "Got it", and what they tap is what you read back, which tells you whether they verified your work or only received it. One line, because a report has one way to close, and it may not change what happens next: a reply that would is a question. Nothing is owed on it either way, and a report that writes none offers "Got it".
+
 UPDATES ask nothing, so no answer is owed and none should be awaited. An update reaches the person only when they asked you for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; any other is recorded as the Goal's progress and nobody is notified. So when the work is finished, mark the Goal done first (manage_goals), then send one update saying what is done and anything they need to do or check. On a Goal whose report card is still open, an update that reaches them is added to that card, with no new push. If the person is already on a call, anything that reaches them joins that call, with no ring.
 
 RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of what is addressed to you (not a history page): \`question\`, a Question you owe (answer it in answers, with its questionId); \`update\`, something new on one of your Goals (a reply, an answer: read it with get_goal); \`instruction\`, a request or note sent to you. \`hasMore\` says more are waiting. Reading acknowledges nothing: once you have handled events, confirm their eventIds with contact({ackEventIds}), and the next batch can come. contact({}) waits up to about 45 seconds for something to arrive; contact({wait:false}) returns at once. It also lists work given to you that nobody has started (\`assigned\`; your first write to it starts it) and your work gone quiet (\`stalled\`).`;
@@ -10486,8 +10558,10 @@ var DISTILLER_DEFECTS = [
   // something the person answered or asked for did not save, was refused or dropped
   "ignored",
   // the person asked or said something and was never answered (the critic's ignored_a_question)
-  "promised"
+  "promised",
   // said it did or would do something, and nothing shows it done (the critic's broken_promise)
+  "dropped"
+  // something it had to say never played and was never said later (owner, 2026-10-08, call 65433a9d)
 ];
 var DistillerReplySchema = external_exports.object({
   defects: external_exports.array(external_exports.object({
@@ -10525,6 +10599,8 @@ function entryUnit(entry) {
 }
 var LIVE_MS = 3 * 6e4;
 var WORKING_MS = 60 * 6e4;
+var WORKING_TIER_MS = 2 * 60 * 6e4;
+var RECENT_TIER_MS = 24 * 60 * 6e4;
 var ContextSchema = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -10869,6 +10945,10 @@ var AgendaTurnSchema = external_exports.object({
    *  so "who said that" survives the call, and it rides PER TURN because a coalesced call
    *  speaks for several agents — the turn is the only place that knows which. */
   agentId: external_exports.string().optional(),
+  /** ITS QUESTION IS ON THE TABLE (#3292): a talker line about a question the person owes. The walk tells
+   *  the phone (`asking`, so the agenda goes gold and its options show) without treating the line as a
+   *  question turn — the talker owns re-asking and the waits, so `question` stays null. */
+  onTable: external_exports.boolean().optional(),
   select: SelectShapeSchema.optional(),
   options: external_exports.array(OptionSchema.omit({ id: true })).optional(),
   /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
@@ -10943,9 +11023,16 @@ var InboxItemSchema = external_exports.object({
     /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
      *  its need offers, exactly as its own card carries them, present only when one of them has a
      *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-     *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
-     *  says those, and the list stays small (an `html` is up to 16 KB). */
-    options: external_exports.array(OptionSchema).optional()
+     *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+    options: external_exports.array(OptionSchema).optional(),
+    /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+     *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+     *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+     *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+     *  preview layout for any `options`, and must see exactly what it did. */
+    choices: external_exports.array(OptionSchema).optional(),
+    /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+    select: external_exports.enum(["one", "many", "rank"]).optional()
   })).optional(),
   visuals: external_exports.array(VisualSchema).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
@@ -11382,7 +11469,11 @@ var QueueItemSchema = external_exports.object({
     from: external_exports.enum(["person", "agent"]),
     said: external_exports.string(),
     at: external_exports.string(),
-    entryId: external_exports.string()
+    entryId: external_exports.string(),
+    /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+     *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+     *  none was. The Work row reads it before `said`. */
+    summary: external_exports.string().optional()
   }).nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
@@ -11719,6 +11810,9 @@ var CallRecapSchema = external_exports.object({
     title: external_exports.string(),
     owner: external_exports.string(),
     state: external_exports.string(),
+    /** Whether the call put it to the person. An item it carried and never said has no row on the
+     *  review (owner, 2026-10-08: "why do we get the third one when it didn't happen in the call?"). */
+    presented: external_exports.boolean(),
     questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
     /** `words` is always what they SAID, verbatim — the record, never replaced. `summary` is what
      *  the line says in ten words (owner, 2026-10-07): the filer's, or the talker's for the answer it
@@ -11726,9 +11820,33 @@ var CallRecapSchema = external_exports.object({
      *  neither wrote one. */
     /** `about` is the request the line answered (its question), null for words that answered none —
      *  the key the screen groups on, so one question is one row however many times it was answered. */
-    lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), summary: external_exports.string().optional(), about: external_exports.string().nullable().optional() }))
+    /** `reply` is the reply the line makes up (an answer, an ok, a deferral), so one reply is one row
+     *  however many lines it cites; `at` is the call lines it came from, so a filed line an answer already
+     *  said is not drawn again (owner, 2026-10-07: "fix them all"); `replyKind` says which replies are answers. */
+    lines: external_exports.array(external_exports.object({
+      entryId: external_exports.string().uuid(),
+      words: external_exports.string(),
+      summary: external_exports.string().optional(),
+      about: external_exports.string().nullable().optional(),
+      reply: external_exports.string().nullable().optional(),
+      replyKind: external_exports.string().nullable().optional(),
+      at: external_exports.array(external_exports.number()).optional()
+    }))
   })),
   unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+  /** THE PUBLIC TRANSCRIPT — every line said on the call, in the order it was said, and WHO SAID IT
+   *  (owner, 2026-10-08: "the public view should only have the lines and who said them, and that's
+   *  it"; `docs/brain/phase-three/modular.md` build step 3). `speaker` is the role: "user" is the
+   *  person, "agent" an agent speaking, named in `agent`. The timeline's action lines are ours, not
+   *  theirs, and are not here; nor is a sealed line, which the server has no words for. It stands
+   *  BESIDE `topics` and `unfiled` — what the call did with the words — never instead of them. */
+  said: external_exports.array(external_exports.object({
+    lineId: external_exports.string().uuid(),
+    speaker: external_exports.enum(["user", "agent"]),
+    agent: external_exports.object({ id: external_exports.string().nullable(), name: external_exports.string().nullable() }).nullable(),
+    words: external_exports.string(),
+    atMs: external_exports.number()
+  })),
   more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
 });
 function sessionSlot(sessionId2) {
@@ -12283,7 +12401,8 @@ var CATALOG = [
     authProbe: ["claude", "auth", "status"],
     loginHint: "Run `claude` once in a terminal and sign in.",
     installCli: "curl -fsSL https://claude.ai/install.sh | bash",
-    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp"
+    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp",
+    models: ["claude-3-5-sonnet-20241022", "claude-3-5-haiku-20241022", "claude-3-opus-20240229"]
   },
   {
     name: "codex",
@@ -12293,7 +12412,8 @@ var CATALOG = [
     authProbe: ["codex", "login", "status"],
     loginHint: "Run `codex login` to authenticate.",
     installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
-    installAdapter: "npm install -g @agentclientprotocol/codex-acp"
+    installAdapter: "npm install -g @agentclientprotocol/codex-acp",
+    models: ["gpt-4o", "gpt-4o-mini", "o1", "o1-mini"]
   },
   {
     name: "agy",
@@ -12303,7 +12423,8 @@ var CATALOG = [
     adapter: "paigy-agy-acp",
     authProbe: ["agy", "help"],
     loginHint: "Install and set up Antigravity (`agy`).",
-    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
+    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash",
+    models: ["gemini-1.5-pro", "gemini-1.5-flash", "gemini-2.0-pro-exp"]
   }
 ];
 function probeDirs(home = homedir3()) {
@@ -12339,7 +12460,7 @@ function runProbe(argv) {
 function detect(entry, deps = {}) {
   const find = deps.which ?? which;
   const probe = deps.probe ?? runProbe;
-  const base = { name: entry.name, label: entry.label };
+  const base = { name: entry.name, label: entry.label, models: entry.models };
   const cliPath = find(entry.cli);
   if (!cliPath) return { ...base, status: "missing", hint: `${entry.label} is not installed.`, install: entry.installCli };
   const adapterPath = entry.adapter ? find(entry.adapter) : null;
@@ -13059,10 +13180,14 @@ function localHolderPids(deps = {}) {
     if (!/^\d+\.json$/.test(file)) continue;
     let row;
     try {
-      row = JSON.parse(read3(join6(dir, file)));
+      row = parseSessionRecord(read3(join6(dir, file)));
     } catch {
       continue;
     }
+    if (!row) {
+      deps.unreadable?.(file);
+      continue;
+    }
     const pid = typeof row.pid === "number" ? row.pid : Number(file.slice(0, -5));
     if (typeof row.sessionId !== "string" || !row.sessionId.trim() || !Number.isInteger(pid) || pid <= 0) continue;
     if (!holds(pid, row.procStart, check)) continue;
@@ -13104,10 +13229,14 @@ function localHolders(deps = {}) {
     if (!/^\d+\.json$/.test(file)) continue;
     let row;
     try {
-      row = JSON.parse(read3(join6(dir, file)));
+      row = parseSessionRecord(read3(join6(dir, file)));
     } catch {
       continue;
     }
+    if (!row) {
+      deps.unreadable?.(file);
+      continue;
+    }
     const pid = typeof row.pid === "number" ? row.pid : Number(file.slice(0, -5));
     if (typeof row.sessionId !== "string" || !row.sessionId.trim() || !Number.isInteger(pid) || pid <= 0) continue;
     const slot = sessionSlot(row.sessionId);
@@ -14643,8 +14772,41 @@ var UpdateInputSchema2 = external_exports.object({
   message: external_exports.string().trim().min(1).describe(`The one point, at most ${ASK_MAX2} characters; the context goes in units.`),
   goalIds: external_exports.array(external_exports.string().uuid()).min(1).max(10).describe("The Goals it is about, each one that exists: the one it is mainly about first."),
   units: units2,
+  // A REPORT KEEPS ITS TAP (#2799, #3260; owner, 2026-10-08, settling #2776: "keep the reports open
+  // until the user acknowledges them"). A report asks nothing, so it opens no Question -- but it
+  // still waits to be acknowledged, and it carries the ONE tap that closes it. Never a decision: the
+  // tap lands as a contribution, the person's own words on the Goal, because there is no Question
+  // for it to answer.
+  //
+  // AND ITS WORDS ARE WRITTEN FOR THIS REPORT (owner, 2026-10-08, Goal 3c12d3c6: "Agent
+  // acknowledgments vary (e.g. 'sounds good, I will test later') instead of always 'got it'"). `Got
+  // it` and `Noted` say only that a card was cleared, where "Sounds good, I'll test later" says the
+  // work was RECEIVED and not verified -- the distinction a session spent an hour recovering from a
+  // call transcript on 2026-10-07, having read "not quite" as a defect report when it meant *not
+  // tested yet*. The words are worth writing because the agent reads them back.
+  //
+  // ONE STRING, NOT A LIST (owner, 2026-10-08 15:47, Goal 31a1e2ac, asked whether an agent should
+  // write up to four of them: "just on the cards, but it should be more like just they should only
+  // get one basically string value that they can enter that replaces got it"). A report has exactly
+  // one way to close, so the only thing an agent writes is what that button SAYS. #3260's 1..6
+  // `options` and this field are one job: the list is deleted, not deprecated (ONE JOB, ONE
+  // MECHANISM). It rides the door as the report's single stored option (`storedOption`,
+  // `apps/api/src/goal/router.ts`), so no reader below the door learns a second shape.
+  reply: external_exports.string().trim().min(1).describe(
+    `What this report's button says instead of "Got it", at most ${OPTION_LABEL_MAX2} characters, written in THEIR voice for THIS report ("Sounds good, I'll test later") -- the care you give a question's options, so what they tap tells you whether they verified your work or only received it. One tap sends exactly these words back to you. Words that would CHANGE what happens next are a question, not a reply to a report: it still asks nothing and still owes you no answer. Left out, the button says "Got it", as every card did.`
+  ).optional(),
   userExplicitlyRequested: userExplicitlyRequested2
-}).strict().superRefine((u, ctx) => refuseOverCaps2(u.message, u.units, "message", ctx));
+}).strict().superRefine((u, ctx) => {
+  refuseOverCaps2(u.message, u.units, "message", ctx);
+  if (u.reply && u.reply.length > OPTION_LABEL_MAX2) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["reply"],
+      params: { refusal: "reply_too_long", length: u.reply.length, cap: OPTION_LABEL_MAX2 },
+      message: `reply_too_long: the reply is ${u.reply.length} characters; the cap is ${OPTION_LABEL_MAX2}. It is a button's words, so say it in a breath.`
+    });
+  }
+});
 var questionFields2 = {
   question: external_exports.string().trim().min(1).describe(
     `ONE question, in at most ${ASK_MAX2} characters, and only what is needed to answer it; the context goes in units. Several questions are several objects, one each: an answer settles the one question it was given, so a person who answers the part of a bundled question that interested them settles nothing and is asked again. Separate questions cost nothing: ANY contact for a person already on a call JOINS that call, so several arrive as one call.`
@@ -14728,6 +14890,8 @@ QUESTIONS: one question per object; several questions are several objects in one
 
 CUT A LONG MESSAGE BEFORE YOU SEND IT: a question, an update's message or an answer is the one point, in at most ${ASK_MAX2} characters; everything else it needs goes in 'units', up to ${UNITS_MAX2} {title, body} in reading order, one idea each, every title at most ${UNIT_TITLE_MAX2} characters and every body at most ${UNIT_BODY_MAX2}. The person sees the main text and the titles, and opens a unit to read its body. Over a cap is refused by name (ask_too_long, too_many_units, unit_title_too_long, unit_body_too_long) and nothing is sent.
 
+GIVE A REPORT ITS REPLY: an update takes \`reply\` too, one line the person can tap instead of typing, written in THEIR voice for THAT report ("Sounds good, I'll test later") \u2014 the same care you give a question's options. It is what their button says instead of "Got it", and what they tap is what you read back, which tells you whether they verified your work or only received it. One line, because a report has one way to close, and it may not change what happens next: a reply that would is a question. Nothing is owed on it either way, and a report that writes none offers "Got it".
+
 UPDATES ask nothing, so no answer is owed and none should be awaited. An update reaches the person only when they asked you for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; any other is recorded as the Goal's progress and nobody is notified. So when the work is finished, mark the Goal done first (manage_goals), then send one update saying what is done and anything they need to do or check. On a Goal whose report card is still open, an update that reaches them is added to that card, with no new push. If the person is already on a call, anything that reaches them joins that call, with no ring.
 
 RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of what is addressed to you (not a history page): \`question\`, a Question you owe (answer it in answers, with its questionId); \`update\`, something new on one of your Goals (a reply, an answer: read it with get_goal); \`instruction\`, a request or note sent to you. \`hasMore\` says more are waiting. Reading acknowledges nothing: once you have handled events, confirm their eventIds with contact({ackEventIds}), and the next batch can come. contact({}) waits up to about 45 seconds for something to arrive; contact({wait:false}) returns at once. It also lists work given to you that nobody has started (\`assigned\`; your first write to it starts it) and your work gone quiet (\`stalled\`).`;
@@ -15082,8 +15246,10 @@ var DISTILLER_DEFECTS2 = [
   // something the person answered or asked for did not save, was refused or dropped
   "ignored",
   // the person asked or said something and was never answered (the critic's ignored_a_question)
-  "promised"
+  "promised",
   // said it did or would do something, and nothing shows it done (the critic's broken_promise)
+  "dropped"
+  // something it had to say never played and was never said later (owner, 2026-10-08, call 65433a9d)
 ];
 var DistillerReplySchema2 = external_exports.object({
   defects: external_exports.array(external_exports.object({
@@ -15131,6 +15297,8 @@ function entryWords(entry) {
 }
 var LIVE_MS2 = 3 * 6e4;
 var WORKING_MS2 = 60 * 6e4;
+var WORKING_TIER_MS2 = 2 * 60 * 6e4;
+var RECENT_TIER_MS2 = 24 * 60 * 6e4;
 var ContextSchema2 = external_exports.object({
   title: external_exports.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
   description: external_exports.array(external_exports.string().min(1)).describe(
@@ -15475,6 +15643,10 @@ var AgendaTurnSchema2 = external_exports.object({
    *  so "who said that" survives the call, and it rides PER TURN because a coalesced call
    *  speaks for several agents — the turn is the only place that knows which. */
   agentId: external_exports.string().optional(),
+  /** ITS QUESTION IS ON THE TABLE (#3292): a talker line about a question the person owes. The walk tells
+   *  the phone (`asking`, so the agenda goes gold and its options show) without treating the line as a
+   *  question turn — the talker owns re-asking and the waits, so `question` stays null. */
+  onTable: external_exports.boolean().optional(),
   select: SelectShapeSchema2.optional(),
   options: external_exports.array(OptionSchema2.omit({ id: true })).optional(),
   /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
@@ -15549,9 +15721,16 @@ var InboxItemSchema2 = external_exports.object({
     /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
      *  its need offers, exactly as its own card carries them, present only when one of them has a
      *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-     *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
-     *  says those, and the list stays small (an `html` is up to 16 KB). */
-    options: external_exports.array(OptionSchema2).optional()
+     *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+    options: external_exports.array(OptionSchema2).optional(),
+    /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+     *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+     *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+     *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+     *  preview layout for any `options`, and must see exactly what it did. */
+    choices: external_exports.array(OptionSchema2).optional(),
+    /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+    select: external_exports.enum(["one", "many", "rank"]).optional()
   })).optional(),
   visuals: external_exports.array(VisualSchema2).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
@@ -15988,7 +16167,11 @@ var QueueItemSchema2 = external_exports.object({
     from: external_exports.enum(["person", "agent"]),
     said: external_exports.string(),
     at: external_exports.string(),
-    entryId: external_exports.string()
+    entryId: external_exports.string(),
+    /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+     *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+     *  none was. The Work row reads it before `said`. */
+    summary: external_exports.string().optional()
   }).nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
@@ -16323,6 +16506,9 @@ var CallRecapSchema2 = external_exports.object({
     title: external_exports.string(),
     owner: external_exports.string(),
     state: external_exports.string(),
+    /** Whether the call put it to the person. An item it carried and never said has no row on the
+     *  review (owner, 2026-10-08: "why do we get the third one when it didn't happen in the call?"). */
+    presented: external_exports.boolean(),
     questions: external_exports.array(external_exports.object({ id: external_exports.string().uuid(), state: external_exports.string(), title: external_exports.string() })),
     /** `words` is always what they SAID, verbatim — the record, never replaced. `summary` is what
      *  the line says in ten words (owner, 2026-10-07): the filer's, or the talker's for the answer it
@@ -16330,9 +16516,33 @@ var CallRecapSchema2 = external_exports.object({
      *  neither wrote one. */
     /** `about` is the request the line answered (its question), null for words that answered none —
      *  the key the screen groups on, so one question is one row however many times it was answered. */
-    lines: external_exports.array(external_exports.object({ entryId: external_exports.string().uuid(), words: external_exports.string(), summary: external_exports.string().optional(), about: external_exports.string().nullable().optional() }))
+    /** `reply` is the reply the line makes up (an answer, an ok, a deferral), so one reply is one row
+     *  however many lines it cites; `at` is the call lines it came from, so a filed line an answer already
+     *  said is not drawn again (owner, 2026-10-07: "fix them all"); `replyKind` says which replies are answers. */
+    lines: external_exports.array(external_exports.object({
+      entryId: external_exports.string().uuid(),
+      words: external_exports.string(),
+      summary: external_exports.string().optional(),
+      about: external_exports.string().nullable().optional(),
+      reply: external_exports.string().nullable().optional(),
+      replyKind: external_exports.string().nullable().optional(),
+      at: external_exports.array(external_exports.number()).optional()
+    }))
   })),
   unfiled: external_exports.array(external_exports.object({ lineId: external_exports.string().uuid(), words: external_exports.string(), atMs: external_exports.number() })),
+  /** THE PUBLIC TRANSCRIPT — every line said on the call, in the order it was said, and WHO SAID IT
+   *  (owner, 2026-10-08: "the public view should only have the lines and who said them, and that's
+   *  it"; `docs/brain/phase-three/modular.md` build step 3). `speaker` is the role: "user" is the
+   *  person, "agent" an agent speaking, named in `agent`. The timeline's action lines are ours, not
+   *  theirs, and are not here; nor is a sealed line, which the server has no words for. It stands
+   *  BESIDE `topics` and `unfiled` — what the call did with the words — never instead of them. */
+  said: external_exports.array(external_exports.object({
+    lineId: external_exports.string().uuid(),
+    speaker: external_exports.enum(["user", "agent"]),
+    agent: external_exports.object({ id: external_exports.string().nullable(), name: external_exports.string().nullable() }).nullable(),
+    words: external_exports.string(),
+    atMs: external_exports.number()
+  })),
   more: external_exports.object({ lines: external_exports.number(), entries: external_exports.number(), topics: external_exports.number() })
 });
 
@@ -16734,7 +16944,8 @@ function startSession(opts) {
   if (!existsSync4(cwd)) {
     queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
   }
-  const codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  let codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  if (opts.model && opts.harness === "codex") codexConfig = { ...codexConfig, model: opts.model };
   if (codexConfig) {
     const key3 = "mcp_servers.paigy.env_vars";
     const configPath = join9(process.env.CODEX_HOME || join9(homedir9(), ".codex"), "config.toml");
@@ -16760,6 +16971,8 @@ function startSession(opts) {
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter3),
       ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
       ...opts.instance ? { PAIGY_INSTANCE_ID: opts.instance } : {},
+      ...opts.model && opts.harness === "claude" ? { CLAUDE_MODEL_CONFIG: JSON.stringify({ provider: "anthropic", model: opts.model }) } : {},
+      ...opts.model && opts.harness === "agy" ? { AGY_MODEL_CONFIG: JSON.stringify({ model: opts.model }) } : {},
       ...codexConfig ? { CODEX_CONFIG: JSON.stringify(codexConfig) } : {},
       ...opts.session ?? opts.resume ? { PAIGY_SESSION_ID: opts.session ?? opts.resume } : {},
       // A PUMP DRIVES THIS PROCESS (2026-09-22, #2265): every run `runHarness` starts has the
@@ -17728,7 +17941,7 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-var launchRun = (spec) => ({ session: spec.sessionId });
+var launchRun = (spec) => ({ session: spec.sessionId, model: spec.model });
 var BOUND_ELSEWHERE_MS = 10 * 6e4;
 var boundElsewhere = /* @__PURE__ */ new Map();
 var BOUND_SKIP = "is bound to the session it was paired in, which this host cannot name \u2014 run `paigy-harness handoff` as it, in its folder, to record it";
@@ -17837,7 +18050,7 @@ function startHost(opts) {
     });
     void heartbeat({
       version: VERSION,
-      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
+      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status, models: a.models })),
       workspaces: listWorkspaces(opts.wsDeps),
       // The repos inside them, so a session started for work on one opens IN it (Goal 26982211).
       repos: listRepos(opts.wsDeps)
@@ -17929,9 +18142,14 @@ function startHost(opts) {
   let lastPresence = /* @__PURE__ */ new Map();
   async function evidence() {
     const presence = await presenceMap();
-    lastHolders = localHolders();
+    lastHolders = localHolders({ unreadable: (file) => {
+      if (unreadable.has(file)) return;
+      unreadable.add(file);
+      opts.log(`\u25CC session record ${file} has no object in it \u2014 the process it names reads as not running here`);
+    } });
     return { presence, holders: lastHolders };
   }
+  const unreadable = /* @__PURE__ */ new Set();
   let lastHolders = /* @__PURE__ */ new Map();
   async function wakeSlot(slot, { presence, holders }, cause = "sweep") {
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paigy/harness",
-  "version": "0.3.37",
+  "version": "0.3.38",
   "description": "Run Claude Code / Codex on this machine, bridged to Paigy — launchable from your phone.",
   "license": "MIT",
   "type": "module",