@paigy/harness 0.3.41 → 0.3.42

package/dist/main.js

@@ -11041,6 +11041,31 @@ var AgendaTurnSchema = external_exports.object({
   ifSilent: external_exports.boolean().optional()
 });
 var CLAIM_STALE_MS = 30 * 6e4;
+var CallQuestionSchema = external_exports.object({
+  id: external_exports.string(),
+  entryId: external_exports.string(),
+  title: external_exports.string(),
+  state: external_exports.enum(["open", "answered"]),
+  answer: external_exports.string().nullable(),
+  /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+   *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+   *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+   *  author is not an agent this account holds (unpaired since, or a person). */
+  agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema.optional() }).optional(),
+  /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
+   *  its need offers, exactly as its own card carries them, present only when one of them has a
+   *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
+   *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+  options: external_exports.array(OptionSchema).optional(),
+  /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+   *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+   *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+   *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+   *  preview layout for any `options`, and must see exactly what it did. */
+  choices: external_exports.array(OptionSchema).optional(),
+  /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+  select: external_exports.enum(["one", "many", "rank"]).optional()
+});
 var InboxItemSchema = external_exports.object({
   id: external_exports.string(),
   tokenId: external_exports.string().optional(),
@@ -11082,31 +11107,10 @@ var InboxItemSchema = external_exports.object({
    *  `turn` topic (`asking`, `settled`), because the bot never sees a DecisionNeed id. `title` is
    *  the card's own concise heading; `answer` the accepted answer in words, null while open. It
    *  REPLACED `agenda` (turns), which nothing ever filled. */
-  questions: external_exports.array(external_exports.object({
-    id: external_exports.string(),
-    entryId: external_exports.string(),
-    title: external_exports.string(),
-    state: external_exports.enum(["open", "answered"]),
-    answer: external_exports.string().nullable(),
-    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
-     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
-     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
-     *  author is not an agent this account holds (unpaired since, or a person). */
-    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema.optional() }).optional(),
-    /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
-     *  its need offers, exactly as its own card carries them, present only when one of them has a
-     *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-     *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
-    options: external_exports.array(OptionSchema).optional(),
-    /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
-     *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
-     *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
-     *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
-     *  preview layout for any `options`, and must see exactly what it did. */
-    choices: external_exports.array(OptionSchema).optional(),
-    /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
-    select: external_exports.enum(["one", "many", "rank"]).optional()
-  })).optional(),
+  questions: external_exports.array(CallQuestionSchema).optional(),
+  /** The same call carrying order, including request Entries with no DecisionNeed as reports.
+   *  Additive: questions stays decision-only for every other surface and older bundles. */
+  callItems: external_exports.array(CallQuestionSchema.extend({ state: external_exports.enum(["open", "answered", "report"]) })).optional(),
   visuals: external_exports.array(VisualSchema).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
    *  agent's suggestion, or a default silly name). */
@@ -11305,12 +11309,29 @@ var UserSettingsSchema = external_exports.object({
    *  clobber guard as voiceMode: absent = leave unchanged on write. */
   broker: BrokerTuningSchema.optional()
 });
+var GoalLatestSchema = external_exports.object({
+  from: external_exports.enum(["person", "agent"]),
+  said: external_exports.string(),
+  at: external_exports.string(),
+  entryId: external_exports.string(),
+  /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+   *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+   *  none was. The Work row reads it before `said`. */
+  summary: external_exports.string().optional(),
+  /** AN AGENT'S UPDATE OR QUESTION AS ITS UNITS' TITLES (owner, 2026-10-08: "send the 50 chars from the title
+   *  of each unit"): each at most 50 characters, in order; absent when it has none. */
+  titles: external_exports.array(external_exports.string()).optional(),
+  /** A PROGRESS NOTE'S ONE POINT ("An agent's progress note -> maybe let's cap it at 200 chars"): the
+   *  update's own line, before its units; the row caps it at 200. Absent on anything else. */
+  line: external_exports.string().optional()
+});
 var HistoryWorkSchema = external_exports.object({
   id: external_exports.string(),
   title: external_exports.string(),
   state: external_exports.enum(["done", "cancelled"]),
   /** Who held it (`agent:<tokenId>` or `human:<userId>`). */
-  assignee: external_exports.string()
+  assignee: external_exports.string(),
+  latest: GoalLatestSchema.nullable().optional()
 });
 var HistoryEntrySchema = external_exports.union([
   external_exports.object({ at: external_exports.string(), card: InboxItemSchema }),
@@ -11378,7 +11399,7 @@ var ConnectionSummarySchema = external_exports.object({
     /** The @paigy/harness this host is running — a machine the self-update has not reached
      *  shows its age here (`apps/desktop/src/update.ts`). */
     version: external_exports.string().optional(),
-    harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
+    harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string(), models: external_exports.array(external_exports.string()).optional() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional(),
     /** THE GIT REPOS IN THOSE FOLDERS (2026-10-01, Goal 26982211): each granted folder that is a
      *  repo, and each repo directly inside one, with its `origin` remote. A session started for
@@ -11538,22 +11559,7 @@ var QueueItemSchema = external_exports.object({
    *  shows the moment it is written, and the agent's reply or next note replaces it by being newer.
    *  `said` is bounded to 280 characters server-side (a line, not the conversation). Null when the
    *  Goal carries no readable Entry; optional, so hand-built queues need not spell it. */
-  latest: external_exports.object({
-    from: external_exports.enum(["person", "agent"]),
-    said: external_exports.string(),
-    at: external_exports.string(),
-    entryId: external_exports.string(),
-    /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
-     *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
-     *  none was. The Work row reads it before `said`. */
-    summary: external_exports.string().optional(),
-    /** AN AGENT'S UPDATE OR QUESTION AS ITS UNITS' TITLES (owner, 2026-10-08: "send the 50 chars from the title
-     *  of each unit"): each at most 50 characters, in order; absent when it has none. */
-    titles: external_exports.array(external_exports.string()).optional(),
-    /** A PROGRESS NOTE'S ONE POINT ("An agent's progress note -> maybe let's cap it at 200 chars"): the
-     *  update's own line, before its units; the row caps it at 200. Absent on anything else. */
-    line: external_exports.string().optional()
-  }).nullable().optional(),
+  latest: GoalLatestSchema.nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
    *  answer to a question, a voice note filed as work. Null when the only hands on it have been its
@@ -12397,7 +12403,8 @@ var CATALOG = [
     authProbe: ["claude", "auth", "status"],
     loginHint: "Run `claude` once in a terminal and sign in.",
     installCli: "curl -fsSL https://claude.ai/install.sh | bash",
-    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp"
+    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp",
+    models: ["claude-3-5-sonnet-20241022", "claude-3-5-haiku-20241022", "claude-3-opus-20240229"]
   },
   {
     name: "codex",
@@ -12407,7 +12414,8 @@ var CATALOG = [
     authProbe: ["codex", "login", "status"],
     loginHint: "Run `codex login` to authenticate.",
     installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
-    installAdapter: "npm install -g @agentclientprotocol/codex-acp"
+    installAdapter: "npm install -g @agentclientprotocol/codex-acp",
+    models: ["gpt-4o", "gpt-4o-mini", "o1", "o1-mini"]
   },
   {
     name: "agy",
@@ -12417,7 +12425,8 @@ var CATALOG = [
     adapter: "paigy-agy-acp",
     authProbe: ["agy", "help"],
     loginHint: "Install and set up Antigravity (`agy`).",
-    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
+    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash",
+    models: ["gemini-1.5-pro", "gemini-1.5-flash", "gemini-2.0-pro-exp"]
   }
 ];
 function probeDirs(home = homedir3()) {
@@ -12453,7 +12462,7 @@ function runProbe(argv) {
 function detect(entry, deps = {}) {
   const find = deps.which ?? which;
   const probe = deps.probe ?? runProbe;
-  const base = { name: entry.name, label: entry.label };
+  const base = { name: entry.name, label: entry.label, models: entry.models };
   const cliPath = find(entry.cli);
   if (!cliPath) return { ...base, status: "missing", hint: `${entry.label} is not installed.`, install: entry.installCli };
   const adapterPath = entry.adapter ? find(entry.adapter) : null;
@@ -14852,6 +14861,31 @@ var AgendaTurnSchema2 = external_exports.object({
   ifSilent: external_exports.boolean().optional()
 });
 var CLAIM_STALE_MS2 = 30 * 6e4;
+var CallQuestionSchema2 = external_exports.object({
+  id: external_exports.string(),
+  entryId: external_exports.string(),
+  title: external_exports.string(),
+  state: external_exports.enum(["open", "answered"]),
+  answer: external_exports.string().nullable(),
+  /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
+   *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
+   *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
+   *  author is not an agent this account holds (unpaired since, or a person). */
+  agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema2.optional() }).optional(),
+  /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
+   *  its need offers, exactly as its own card carries them, present only when one of them has a
+   *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
+   *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
+  options: external_exports.array(OptionSchema2).optional(),
+  /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
+   *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
+   *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
+   *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
+   *  preview layout for any `options`, and must see exactly what it did. */
+  choices: external_exports.array(OptionSchema2).optional(),
+  /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
+  select: external_exports.enum(["one", "many", "rank"]).optional()
+});
 var InboxItemSchema2 = external_exports.object({
   id: external_exports.string(),
   tokenId: external_exports.string().optional(),
@@ -14893,31 +14927,10 @@ var InboxItemSchema2 = external_exports.object({
    *  `turn` topic (`asking`, `settled`), because the bot never sees a DecisionNeed id. `title` is
    *  the card's own concise heading; `answer` the accepted answer in words, null while open. It
    *  REPLACED `agenda` (turns), which nothing ever filled. */
-  questions: external_exports.array(external_exports.object({
-    id: external_exports.string(),
-    entryId: external_exports.string(),
-    title: external_exports.string(),
-    state: external_exports.enum(["open", "answered"]),
-    answer: external_exports.string().nullable(),
-    /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
-     *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
-     *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
-     *  author is not an agent this account holds (unpaired since, or a person). */
-    agent: external_exports.object({ tokenId: external_exports.string(), name: external_exports.string(), voice: VoiceKeySchema2.optional() }).optional(),
-    /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
-     *  its need offers, exactly as its own card carries them, present only when one of them has a
-     *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
-     *  never re-sent as a second card to be seen mid-call. Words-only options are `choices`. */
-    options: external_exports.array(OptionSchema2).optional(),
-    /** ITS OPTIONS WHEN THEY ARE WORDS (owner, 2026-10-02, on a call: "whenever there are pre-made
-     *  options … now for a checklist, we should also show them on the screen"; design C, 2026-10-08):
-     *  numbered chips above the call's controls, so a checklist is never only something read aloud. A
-     *  field of its own so `options` keeps meaning "previews": a phone on an older bundle opens the
-     *  preview layout for any `options`, and must see exactly what it did. */
-    choices: external_exports.array(OptionSchema2).optional(),
-    /** HOW MANY MAY BE PICKED, beside its `choices`: one, any (`many`) or an order (`rank`). */
-    select: external_exports.enum(["one", "many", "rank"]).optional()
-  })).optional(),
+  questions: external_exports.array(CallQuestionSchema2).optional(),
+  /** The same call carrying order, including request Entries with no DecisionNeed as reports.
+   *  Additive: questions stays decision-only for every other surface and older bundles. */
+  callItems: external_exports.array(CallQuestionSchema2.extend({ state: external_exports.enum(["open", "answered", "report"]) })).optional(),
   visuals: external_exports.array(VisualSchema2).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
    *  agent's suggestion, or a default silly name). */
@@ -15116,12 +15129,29 @@ var UserSettingsSchema2 = external_exports.object({
    *  clobber guard as voiceMode: absent = leave unchanged on write. */
   broker: BrokerTuningSchema2.optional()
 });
+var GoalLatestSchema2 = external_exports.object({
+  from: external_exports.enum(["person", "agent"]),
+  said: external_exports.string(),
+  at: external_exports.string(),
+  entryId: external_exports.string(),
+  /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
+   *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
+   *  none was. The Work row reads it before `said`. */
+  summary: external_exports.string().optional(),
+  /** AN AGENT'S UPDATE OR QUESTION AS ITS UNITS' TITLES (owner, 2026-10-08: "send the 50 chars from the title
+   *  of each unit"): each at most 50 characters, in order; absent when it has none. */
+  titles: external_exports.array(external_exports.string()).optional(),
+  /** A PROGRESS NOTE'S ONE POINT ("An agent's progress note -> maybe let's cap it at 200 chars"): the
+   *  update's own line, before its units; the row caps it at 200. Absent on anything else. */
+  line: external_exports.string().optional()
+});
 var HistoryWorkSchema2 = external_exports.object({
   id: external_exports.string(),
   title: external_exports.string(),
   state: external_exports.enum(["done", "cancelled"]),
   /** Who held it (`agent:<tokenId>` or `human:<userId>`). */
-  assignee: external_exports.string()
+  assignee: external_exports.string(),
+  latest: GoalLatestSchema2.nullable().optional()
 });
 var HistoryEntrySchema2 = external_exports.union([
   external_exports.object({ at: external_exports.string(), card: InboxItemSchema2 }),
@@ -15189,7 +15219,7 @@ var ConnectionSummarySchema2 = external_exports.object({
     /** The @paigy/harness this host is running — a machine the self-update has not reached
      *  shows its age here (`apps/desktop/src/update.ts`). */
     version: external_exports.string().optional(),
-    harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
+    harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string(), models: external_exports.array(external_exports.string()).optional() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional(),
     /** THE GIT REPOS IN THOSE FOLDERS (2026-10-01, Goal 26982211): each granted folder that is a
      *  repo, and each repo directly inside one, with its `origin` remote. A session started for
@@ -15349,22 +15379,7 @@ var QueueItemSchema2 = external_exports.object({
    *  shows the moment it is written, and the agent's reply or next note replaces it by being newer.
    *  `said` is bounded to 280 characters server-side (a line, not the conversation). Null when the
    *  Goal carries no readable Entry; optional, so hand-built queues need not spell it. */
-  latest: external_exports.object({
-    from: external_exports.enum(["person", "agent"]),
-    said: external_exports.string(),
-    at: external_exports.string(),
-    entryId: external_exports.string(),
-    /** ITS SUMMARY IN AT MOST TEN WORDS (owner, 2026-10-08: "the same switch to the more summarized sources
-     *  at the work tab top level screen too"): what the talker or filer wrote on the Entry; absent when
-     *  none was. The Work row reads it before `said`. */
-    summary: external_exports.string().optional(),
-    /** AN AGENT'S UPDATE OR QUESTION AS ITS UNITS' TITLES (owner, 2026-10-08: "send the 50 chars from the title
-     *  of each unit"): each at most 50 characters, in order; absent when it has none. */
-    titles: external_exports.array(external_exports.string()).optional(),
-    /** A PROGRESS NOTE'S ONE POINT ("An agent's progress note -> maybe let's cap it at 200 chars"): the
-     *  update's own line, before its units; the row caps it at 200. Absent on anything else. */
-    line: external_exports.string().optional()
-  }).nullable().optional(),
+  latest: GoalLatestSchema2.nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
    *  answer to a question, a voice note filed as work. Null when the only hands on it have been its
@@ -15692,6 +15707,8 @@ var CallRecapSchema2 = external_exports.object({
 
 // src/host.ts
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { execSync } from "child_process";
+import { randomBytes } from "crypto";
 import { homedir as homedir9 } from "os";
 import { join as join11 } from "path";
 
@@ -16417,7 +16434,8 @@ function startSession(opts) {
   if (!existsSync4(cwd)) {
     queueMicrotask(() => opts.onEvent({ kind: "error", message: `workspace does not exist: ${cwd}` }));
   }
-  const codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  let codexConfig = opts.harness === "codex" ? JSON.parse(process.env.CODEX_CONFIG || "{}") : null;
+  if (opts.model && opts.harness === "codex") codexConfig = { ...codexConfig, model: opts.model };
   if (codexConfig) {
     const key3 = "mcp_servers.paigy.env_vars";
     const configPath = join9(process.env.CODEX_HOME || join9(homedir8(), ".codex"), "config.toml");
@@ -16443,6 +16461,8 @@ function startSession(opts) {
       PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter2),
       ...opts.token ? { PAIGY_TOKEN: opts.token } : {},
       ...opts.instance ? { PAIGY_INSTANCE_ID: opts.instance } : {},
+      ...opts.model && opts.harness === "claude" ? { CLAUDE_MODEL_CONFIG: JSON.stringify({ provider: "anthropic", model: opts.model }) } : {},
+      ...opts.model && opts.harness === "agy" ? { AGY_MODEL_CONFIG: JSON.stringify({ model: opts.model }) } : {},
       ...codexConfig ? { CODEX_CONFIG: JSON.stringify(codexConfig) } : {},
       ...opts.session ?? opts.resume ? { PAIGY_SESSION_ID: opts.session ?? opts.resume } : {},
       // A PUMP DRIVES THIS PROCESS (2026-09-22, #2265): every run `runHarness` starts has the
@@ -16457,19 +16477,56 @@ function startSession(opts) {
     stdio: ["pipe", "pipe", "pipe"]
   });
   let ended2 = false;
-  child.stdin?.on("error", () => {
-  });
+  let failure;
+  let hush;
+  const pending = /* @__PURE__ */ new Set();
+  const end = (error) => {
+    ended2 = true;
+    failure ??= error;
+    clearTimeout(hush);
+    for (const receipt of pending) receipt.reject(failure);
+    pending.clear();
+  };
+  const broken = (error) => {
+    if (ended2) return;
+    end(new Error(`session_write_failed: ${error.message}`));
+    opts.onEvent({ kind: "error", message: failure.message });
+    child.kill();
+  };
+  child.stdin?.on("error", broken);
   const write = (frames) => {
     if (ended2) return;
-    for (const f of frames) child.stdin?.write(`${f}
-`);
-    if (frames.length) listen();
+    for (const f of frames) {
+      if (ended2) break;
+      if (!child.stdin || child.stdin.destroyed || !child.stdin.writable) {
+        broken(new Error("stdin unavailable"));
+        break;
+      }
+      const frame3 = JSON.parse(f);
+      const receipts2 = frame3.method === "session/prompt" ? [...pending].filter((receipt) => !receipt.writing).slice(0, frame3.params.prompt.length) : [];
+      for (const receipt of receipts2) receipt.writing = true;
+      try {
+        child.stdin.write(`${f}
+`, (error) => {
+          if (error) {
+            broken(error);
+            return;
+          }
+          if (ended2) return;
+          for (const receipt of receipts2) if (pending.delete(receipt)) receipt.resolve();
+        });
+      } catch (error) {
+        broken(error instanceof Error ? error : new Error(String(error)));
+      }
+    }
+    if (frames.length && !ended2) listen();
   };
   const apply = ({ events, writes }) => {
+    const fatal = events.find((event) => event.kind === "error" && event.fatal);
+    if (fatal?.kind === "error") end(new Error(fatal.message));
     write(writes);
     for (const event of events) opts.onEvent(event);
   };
-  let hush;
   const listen = () => {
     clearTimeout(hush);
     if (!ended2) hush = setTimeout(() => apply(driver.quiet(QUIET_MS)), QUIET_MS);
@@ -16479,12 +16536,12 @@ function startSession(opts) {
     if (text) opts.onEvent({ kind: "error", message: text });
   });
   child.on("exit", (code) => {
-    ended2 = true;
-    clearTimeout(hush);
+    end(new Error(`session_ended: ${code ?? "signal"}`));
     opts.onEvent({ kind: "idle", failed: code !== 0, ...code ? { result: `exited ${code}` } : {} });
     opts.onExit?.();
   });
   child.on("error", (e) => {
+    end(new Error(`session_start_failed: ${e.message}`));
     opts.onEvent({ kind: "error", message: e.message });
     opts.onExit?.();
   });
@@ -16504,15 +16561,24 @@ function startSession(opts) {
   write(driver.open());
   return {
     send(text) {
-      write(driver.send(text));
+      const sent = new Promise((resolve3, reject) => {
+        if (ended2) {
+          reject(failure ?? new Error("session_ended"));
+          return;
+        }
+        pending.add({ resolve: resolve3, reject, writing: false });
+        write(driver.send(text));
+      });
+      void sent.catch(() => {
+      });
+      return sent;
     },
     respond(id3, decision) {
       write(driver.respond(id3, decision));
     },
     stop() {
       write(driver.close());
-      ended2 = true;
-      clearTimeout(hush);
+      end(new Error("session_stopped"));
       child.kill();
     }
   };
@@ -16672,12 +16738,13 @@ var LIMITS = episodes();
 // src/paigy/bridge.ts
 function railFor(opts) {
   return {
-    next: async () => {
-      const waiting = await receive(opts);
+    next: async (alreadyRead) => {
+      const waiting = alreadyRead ?? await receive(opts);
       const goalId = waiting.claimable?.goalId ?? waiting.review?.[0]?.goalId;
       return goalId ? getGoals([goalId], opts).then(([goal]) => goal) : { state: "idle", message: "" };
     },
     read: (goalId) => getGoals([goalId], opts).then(([goal]) => goal),
+    delivery: (deliveryId) => readDelivery(deliveryId, opts),
     complete: async (goalId, revision) => {
       const done = await manageGoals({ changes: [{ kind: "state", goalId, state: "completed", ...revision !== void 0 ? { revision } : {} }] }, opts);
       const result = done.results[0];
@@ -16858,7 +16925,7 @@ function beat() {
 }
 var BEAT_REPORT_MS = 10 * 6e4;
 var ended = (state) => state === "done" || state === "cancelled";
-function unheard(brief, state, since = null, after = -1, reviewSince) {
+function unheard(brief, state, since = null, after = -1, reviewSince, gathered) {
   const seen = state.seen ??= /* @__PURE__ */ new Set();
   const words = [];
   const pendingAt = reviewSince ? Date.parse(reviewSince) : null;
@@ -16873,10 +16940,13 @@ function unheard(brief, state, since = null, after = -1, reviewSince) {
       continue;
     }
     if (since !== null && Date.parse(e.createdAt) <= Date.parse(since)) continue;
-    seen.add(e.entryId);
     if (e.aboutId && seen.has(e.aboutId) && brief.answers?.some((a) => a.requestEntryId === e.aboutId)) continue;
+    seen.add(e.entryId);
     const text = entryWords(e).trim();
-    if (text) words.push(text);
+    if (text) {
+      words.push(text);
+      gathered?.add(e.entryId);
+    }
   }
   if (pendingAt !== null) for (const answer of brief.answers ?? []) {
     const key3 = `answer:${answer.decisionNeedId}`;
@@ -16917,12 +16987,28 @@ function named(goalId, title, brief) {
   const name = line.length > 80 ? `${line.slice(0, 79)}\u2026` : line;
   return name ? `On Goal "${name}" (${goalId}):` : `On Goal ${goalId}:`;
 }
-async function gather(state, rail, held) {
-  const looks = /* @__PURE__ */ new Map([[state.goal.id, { via: "held", brief: held }]]);
+async function gather(state, rail, held, alreadyRead, log2) {
+  const looks = /* @__PURE__ */ new Map();
+  if (held && state.goal) looks.set(state.goal.id, { via: "held", brief: held });
   const look2 = (goalId, via, title, since) => {
     if (!looks.has(goalId)) looks.set(goalId, { via, ...title ? { title } : {}, ...since !== void 0 ? { since } : {} });
   };
-  const waiting = await rail.waiting().catch(() => null);
+  const waiting = alreadyRead ?? await rail.waiting().catch(() => null);
+  const direct = [];
+  const staged = new Set(state.seen);
+  const deliveries = /* @__PURE__ */ new Set();
+  for (const d of waiting?.deliveries ?? []) {
+    if (d.goalIds.length || deliveries.has(d.deliveryId) || state.acked?.get(`delivery:${d.deliveryId}`) === "handled") continue;
+    deliveries.add(d.deliveryId);
+    try {
+      const full = await rail.delivery(d.deliveryId);
+      const entries = full.entries.map((e) => ({ id: e.entryId, words: entryWords(e) }));
+      if (!entries.length || entries.some((e) => !e.words.trim())) continue;
+      direct.push({ eventId: d.deliveryId, entries, entryIds: entries.map((e) => e.id), words: [] });
+    } catch (error) {
+      log2?.(`\u26A0 could not read instruction ${d.deliveryId.slice(0, 8)}: ${error.message}`);
+    }
+  }
   const listed = /* @__PURE__ */ new Map();
   const list = (goalId, eventId) => {
     const ids = listed.get(goalId) ?? [];
@@ -16930,19 +17016,21 @@ async function gather(state, rail, held) {
     listed.set(goalId, ids);
   };
   const announced = state.announced ??= /* @__PURE__ */ new Set();
-  if (waiting) {
-    for (const id3 of announced) if (!(waiting.assigned ?? []).some((g) => g.goalId === id3)) announced.delete(id3);
-  }
-  for (const g of waiting?.assigned ?? []) if (g.goalId !== state.goal.id && !announced.has(g.goalId)) look2(g.goalId, "assigned", g.title);
-  for (const g of waiting?.review ?? []) {
-    list(g.goalId, g.eventId);
-    look2(g.goalId, "waiting work", g.title);
-  }
-  for (const d of waiting?.deliveries ?? []) for (const id3 of d.goalIds) {
-    list(id3, d.deliveryId);
-    look2(id3, "waiting work");
+  if (held) {
+    if (waiting) {
+      for (const id3 of announced) if (!(waiting.assigned ?? []).some((g) => g.goalId === id3)) announced.delete(id3);
+    }
+    for (const g of waiting?.assigned ?? []) if (g.goalId !== state.goal.id && !announced.has(g.goalId)) look2(g.goalId, "assigned", g.title);
+    for (const g of waiting?.review ?? []) {
+      list(g.goalId, g.eventId);
+      look2(g.goalId, "waiting work", g.title);
+    }
+    for (const d of waiting?.deliveries ?? []) for (const id3 of d.goalIds) {
+      list(id3, d.deliveryId);
+      look2(id3, "waiting work");
+    }
   }
-  const moved = movedBelow(held, state);
+  const moved = held ? movedBelow(held, state) : [];
   for (const { goal, since } of moved) look2(goal.goalId, "subtree", goal.title, since);
   const heard = [];
   const read3 = /* @__PURE__ */ new Set();
@@ -16959,10 +17047,15 @@ async function gather(state, rail, held) {
     read3.add(goalId);
     const fresh = !brief.reviewSince && (found.via === "waiting work" || found.via === "assigned") ? sinceTheWork(brief) : { after: -1 };
     if (found.via === "assigned") announced.add(goalId);
-    heard.push({ goalId, ...found, brief, words: unheard(brief, state, brief.reviewSince ? null : since ?? null, fresh.after, brief.reviewSince), ...fresh.note ? { note: fresh.note } : {} });
+    heard.push({ goalId, ...found, brief, words: unheard(brief, state, brief.reviewSince ? null : since ?? null, fresh.after, brief.reviewSince, staged), ...fresh.note ? { note: fresh.note } : {} });
   }
+  for (const d of direct) d.words = d.entries.filter((e) => {
+    if (staged.has(e.id)) return false;
+    staged.add(e.id);
+    return true;
+  }).map((e) => e.words);
   for (const { goal, since } of moved) if (read3.has(goal.goalId)) state.below.goals.set(goal.goalId, { since, at: goal.updatedAt ?? null });
-  return { heard, listed };
+  return { heard, listed, direct };
 }
 var GIVEN = "This Goal was given to you, and nobody has started it. Carry on with what you're doing unless it changes that; your first write to it (a contact update naming it) starts it when you take it up.";
 var says = (h) => h.words.length > 0 || h.via === "assigned";
@@ -16980,12 +17073,21 @@ var block = (h) => [
 ].join("\n\n");
 var short = (ids) => ids.map((id3) => id3.slice(0, 8)).join(", ");
 var given = (heard) => heard.filter((h) => h.via === "assigned").map((h) => h.goalId);
-async function hear(session, state, rail, held, opts) {
+async function hear(session, state, rail, held, opts, waiting) {
   const log2 = opts?.log;
-  const { heard, listed } = await gather(state, rail, held);
+  const { heard, listed, direct } = await gather(state, rail, held, waiting, log2);
   const said = heard.filter(says);
-  if (said.length) {
-    send2(session, state, said.map(block).join("\n\n"));
+  const words = [...direct.flatMap((d) => d.words), ...said.map(block)];
+  if (words.length) {
+    const text = words.join("\n\n");
+    try {
+      await send2(session, state, text);
+    } catch (error) {
+      (state.noted ??= []).push({ name: "", goals: said.map((h) => h.goalId), words: text, eventIds: direct.map((d) => d.eventId), at: Date.now(), cause: "read" });
+      for (const d of direct) for (const id3 of d.entryIds) (state.seen ??= /* @__PURE__ */ new Set()).add(id3);
+      throw error;
+    }
+    for (const d of direct) for (const id3 of d.entryIds) (state.seen ??= /* @__PURE__ */ new Set()).add(id3);
     const worded = said.filter((h) => h.words.length);
     if (worded.length) log2?.(`\u25B8 typed the person's words from ${worded.map((h) => `${h.goalId.slice(0, 8)} (via ${h.via})`).join(", ")}`);
     const goals = given(said);
@@ -16994,18 +17096,21 @@ async function hear(session, state, rail, held, opts) {
       if (opts?.tally) opts.tally.announced += goals.length;
     }
   }
+  await acknowledgeDirect(direct.map((d) => d.eventId), state, rail, log2);
   for (const h of heard) {
     const events = listed.get(h.goalId);
     if (events) await acknowledge2(h.goalId, h.brief, events, state, rail, log2);
   }
+  return direct.length > 0 || said.length > 0;
 }
 var NOTED = "New from the person while you work. Carry on unless it changes what you're doing: it comes back to you as your next turn when this one ends.";
 var SEEN_MID_TURN = "While you worked, the person said this, and you saw it mid-task. Act on it now, unless you already have.";
-async function note(state, rail, held, inbox, how) {
-  const { heard } = await gather(state, rail, held);
+async function note(state, rail, held, inbox, how, waiting) {
+  const { heard, direct } = await gather(state, rail, held, waiting, how.log);
   const said = heard.filter(says);
-  if (!said.length) return 0;
-  const words = said.map(block).join("\n\n");
+  const parts = [...direct.flatMap((d) => d.words), ...said.map(block)];
+  if (!parts.length) return 0;
+  const words = parts.join("\n\n");
   const goals = said.map((h) => h.goalId);
   const assigned = given(said);
   if (how.tally) how.tally.announced += assigned.length;
@@ -17019,7 +17124,8 @@ ${words}`);
   } catch (error) {
     how.log?.(`\u26A0 could not note mid-turn (${error.message}): ${short(goals)} wait for the turn's end`);
   }
-  (state.noted ??= []).push({ name, goals, words, at: how.now(), cause: how.cause === "wake" ? "wake" : "read" });
+  (state.noted ??= []).push({ name, goals, words, eventIds: direct.map((d) => d.eventId), at: how.now(), cause: how.cause === "wake" ? "wake" : "read" });
+  for (const d of direct) for (const id3 of d.entryIds) (state.seen ??= /* @__PURE__ */ new Set()).add(id3);
   return 1;
 }
 function receipts(state, inbox, log2) {
@@ -17034,15 +17140,33 @@ function receipts(state, inbox, log2) {
   }
   return seen;
 }
-function settle(session, state, inbox, log2) {
+async function settle(session, state, rail, inbox, log2) {
   const batches = state.noted ?? [];
-  state.noted = [];
   const seen = [];
   const unseen = [];
   for (const b of batches) (b.name && inbox?.settle(b.name) === "taken" ? seen : unseen).push(b);
-  send2(session, state, [...seen.length ? [SEEN_MID_TURN, ...seen.map((b) => b.words)] : [], ...unseen.map((b) => b.words)].join("\n\n"));
+  await send2(session, state, [...seen.length ? [SEEN_MID_TURN, ...seen.map((b) => b.words)] : [], ...unseen.map((b) => b.words)].join("\n\n"));
+  state.noted = [];
+  await acknowledgeDirect(batches.flatMap((b) => b.eventIds ?? []), state, rail, log2);
   log2?.(`\u25B8 typed the person's words from ${short([...new Set(batches.flatMap((b) => b.goals))])} (noted mid-turn: ${seen.length} seen by the hook, ${unseen.length} not)`);
 }
+async function acknowledgeDirect(events, state, rail, log2) {
+  const acked = state.acked ??= /* @__PURE__ */ new Map();
+  const ids = [...new Set(events)].filter((id3) => acked.get(`delivery:${id3}`) !== "handled");
+  for (let at = 0; at < ids.length; at += 100) {
+    const batch = ids.slice(at, at + 100);
+    try {
+      const results = await rail.ack(batch);
+      for (const id3 of batch) {
+        const result = results.find((r) => r.eventId === id3);
+        if (result?.acknowledged) acked.set(`delivery:${id3}`, "handled");
+        else log2?.(`\u26A0 could not acknowledge ${id3.slice(0, 8)}: ${result?.refused ?? "no result"} \u2014 its words are typed in; it stays listed until acknowledged`);
+      }
+    } catch (error) {
+      log2?.(`\u26A0 could not acknowledge instructions: ${error.message} \u2014 their words are typed in; they stay listed until acknowledged`);
+    }
+  }
+}
 async function acknowledge2(goalId, brief, events, state, rail, log2) {
   const ids = [.../* @__PURE__ */ new Set([...brief.reviewEventId ? [brief.reviewEventId] : [], ...events])];
   if (!ids.length) return;
@@ -17068,17 +17192,23 @@ async function step(session, state, rail, opts) {
     state.carryOn = true;
   }
   await look(session, state, rail, opts);
-  if (state.carryOn && state.resting && !state.asks?.size) send2(session, state, "");
+  if (state.carryOn && state.resting && !state.asks?.size) await send2(session, state, "");
 }
 async function look(session, state, rail, opts) {
   if (opts?.inbox) {
     const seen = receipts(state, opts.inbox, opts.log);
     if (opts.tally) opts.tally.seen += seen;
   }
-  if (state.resting && state.noted?.length && !state.asks?.size) return settle(session, state, opts?.inbox, opts?.log);
+  if (state.resting && state.noted?.length && !state.asks?.size) return settle(session, state, rail, opts?.inbox, opts?.log);
   if (!state.goal) {
+    if (state.asks?.size || !state.resting && !opts?.inbox) return;
+    const waiting = await rail.waiting();
+    if (waiting.deliveries.some((d) => !d.goalIds.length && state.acked?.get(`delivery:${d.deliveryId}`) !== "handled")) {
+      const handled = state.resting ? await hear(session, state, rail, void 0, opts, waiting) : await note(state, rail, void 0, opts.inbox, { cause: opts?.cause ?? "safety", now: opts?.now ?? Date.now, log: opts?.log, tally: opts?.tally }, waiting);
+      if (handled) return;
+    }
     if (!state.resting) return;
-    let brief2 = await rail.next();
+    let brief2 = await rail.next(waiting);
     if (!brief2.goalId || brief2.revision === void 0) {
       if (opts?.initialPrompt?.trim()) {
         const prompt = opts.initialPrompt.trim();
@@ -17087,7 +17217,7 @@ async function look(session, state, rail, opts) {
         brief2 = await rail.next();
         if (!brief2.goalId || brief2.revision === void 0) {
           state.goal = { id: admitted.goalId, revision: admitted.revision };
-          send2(session, state, [HARNESS_INSTRUCTION, named(admitted.goalId, void 0, { outcome: prompt }), prompt].join("\n\n"));
+          await send2(session, state, [HARNESS_INSTRUCTION, named(admitted.goalId, void 0, { outcome: prompt }), prompt].join("\n\n"));
           return;
         }
       } else {
@@ -17105,7 +17235,7 @@ async function look(session, state, rail, opts) {
     const left = brief2.earlier ? brief2.earlier.omitted + brief2.earlier.shortened : 0;
     const earlier = left ? `(${left} earlier entries on this Goal are left out or shortened; get_goals with history: true reads them in full.)` : "";
     const fullText = [outcome2, earlier, ...said].filter(Boolean).join("\n\n");
-    send2(session, state, [HARNESS_INSTRUCTION, named(brief2.goalId, void 0, brief2), fullText].filter(Boolean).join("\n\n"));
+    await send2(session, state, [HARNESS_INSTRUCTION, named(brief2.goalId, void 0, brief2), fullText].filter(Boolean).join("\n\n"));
     if (ended(brief2.state)) await acknowledge2(brief2.goalId, brief2, [], state, rail, opts?.log);
     return;
   }
@@ -17134,19 +17264,27 @@ async function look(session, state, rail, opts) {
   }
   await hear(session, state, rail, brief, { ...opts?.log ? { log: opts.log } : {}, ...opts?.tally ? { tally: opts.tally } : {} });
 }
-function send2(session, state, text) {
-  state.resting = false;
+async function send2(session, state, text) {
   let words = text;
   if (state.carryOn) {
-    state.carryOn = false;
-    state.carriedOn = true;
     const owed = state.owed;
-    state.owed = void 0;
     words = [owed, text].filter(Boolean).join("\n\n");
     text = [CARRY_ON, ...owed ? [OWED, owed] : [], text].filter(Boolean).join("\n\n");
   }
+  const resting = state.resting;
+  state.resting = false;
+  try {
+    await session.send(text);
+  } catch (error) {
+    state.resting = resting;
+    throw error;
+  }
   state.typed = words || void 0;
-  session.send(text);
+  if (state.carryOn) {
+    state.carryOn = false;
+    state.carriedOn = true;
+    state.owed = void 0;
+  }
 }
 async function pump(session, state, rail, opts) {
   const clock5 = opts.beat ?? beat();
@@ -17286,9 +17424,6 @@ ${event.message}`, state, rail, { log: opts.log });
     opts.log("\u25A0 stopped");
   }
   return {
-    send(text) {
-      session?.send(text);
-    },
     working: () => running && state.resting !== true,
     // Paused by a usage limit, the activity line says so: the quiet place the pause is shown.
     tail: () => state.paused ? [pausedLine(state.paused)] : [...tail],
@@ -17411,7 +17546,7 @@ var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
   return { slot, key: runKey(slot) };
 };
-var launchRun = (spec) => ({ session: spec.sessionId });
+var launchRun = (spec) => ({ session: spec.sessionId, model: spec.model });
 var BOUND_ELSEWHERE_MS = 10 * 6e4;
 var boundElsewhere = /* @__PURE__ */ new Map();
 var BOUND_SKIP = "is bound to the session it was paired in, which this host cannot name \u2014 run `paigy-harness handoff` as it, in its folder, to record it";
@@ -17519,7 +17654,7 @@ function startHost(opts) {
     });
     void heartbeat({
       version: VERSION,
-      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
+      harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status, models: a.models })),
       workspaces: listWorkspaces(opts.wsDeps),
       // The repos inside them, so a session started for work on one opens IN it (Goal 26982211).
       repos: listRepos(opts.wsDeps)
@@ -17532,6 +17667,17 @@ function startHost(opts) {
     const specs = await claimSessions(asHost).catch(() => []);
     for (const spec of specs) {
       const label = spec.name ?? spec.harness;
+      let workspace = spec.workspace;
+      if (spec.worktree) {
+        const suffix = randomBytes(4).toString("hex");
+        const newWt = `/tmp/paigy-${spec.harness}-${suffix}`;
+        try {
+          execSync(`git worktree add ${newWt} -b paigy-${suffix}`, { cwd: workspace, stdio: "ignore" });
+          workspace = newWt;
+        } catch (e) {
+          opts.log(`[${label}] Failed to create worktree, falling back to ${workspace}`);
+        }
+      }
       const { slot, key: key3 } = claimedRun(spec.sessionId);
       const log2 = (line) => opts.log(`[${label}] ${line}`);
       try {
@@ -17549,7 +17695,7 @@ function startHost(opts) {
       }
       const run = runHarness({
         harness: spec.harness,
-        cwd: spec.workspace,
+        cwd: workspace,
         mode: "bypass",
         prompt: "",
         token: spec.token,