@paigy/harness 0.3.7 → 0.3.9

package/dist/cli.js

@@ -14929,7 +14929,7 @@ var require_mock_interceptor = __commonJS({
 var require_mock_client = __commonJS({
   "../../node_modules/.pnpm/undici@6.27.0/node_modules/undici/lib/mock/mock-client.js"(exports, module) {
     "use strict";
-    var { promisify } = __require("util");
+    var { promisify: promisify2 } = __require("util");
     var Client = require_client();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -14969,7 +14969,7 @@ var require_mock_client = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify(this[kOriginalClose])();
+        await promisify2(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -14982,7 +14982,7 @@ var require_mock_client = __commonJS({
 var require_mock_pool = __commonJS({
   "../../node_modules/.pnpm/undici@6.27.0/node_modules/undici/lib/mock/mock-pool.js"(exports, module) {
     "use strict";
-    var { promisify } = __require("util");
+    var { promisify: promisify2 } = __require("util");
     var Pool = require_pool();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -15022,7 +15022,7 @@ var require_mock_pool = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify(this[kOriginalClose])();
+        await promisify2(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -24062,7 +24062,7 @@ async function subscribeWake(onNudge, opts = {}) {
     }
   };
 }
-var import_undici, require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, StartContactSchema, ContactSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, CreateGoalToolSchema, CREATE_GOAL_DESCRIPTION, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, GetGoalSchema, GET_GOAL_DESCRIPTION, UPDATE_GOAL_DESCRIPTION, CLAIM_GOAL_DESCRIPTION, CHECK_REPLIES_DESCRIPTION, CheckRepliesSchema, GetThreadSchema, GET_THREAD_DESCRIPTION, SearchThreadsSchema, SEARCH_THREADS_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, CallbackTriggerSchema, NotifyResponseSchema, NotifyPlanUnitSchema, NotifyPlanSchema, UserResponseSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, SnoozeRequestSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, CreateRequestSchema, QueueQuestionSchema, QueueItemSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, CreateNoteSchema, RecordDecisionSchema, AssignNoteSchema, TriageVerdictSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, StatusSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeRequestSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenRequestSchema, DeviceTokenSchema, DeviceCommitRequestSchema, DevicePeerCommitSchema, SupportRequestSchema, NotificationFeedbackKindSchema, NotificationFeedbackSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, ApiError, AWAIT_WINDOW_MS, tokenOverride, authToken, HEARTBEAT_MS, RETRY_MS, JOIN, lines;
+var import_undici, require2, __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __require2, __commonJS2, __copyProps2, __toESM2, require_nacl_fast, BACKEND_URL, NETWORK_MSG, PROXY_ENV, agent, INSTANCE_ID, WORKSPACE_ID, envSession, SESSION_ID, ignoreOverride, defaultOptions, getDefaultOptions, getRefs, getRelativePath, parseCatchDef, integerDateParser, isJsonSchema7AllOfType, emojiRegex2, zodPatterns, ALPHA_NUMERIC, primitiveMappings, asAnyOf, parseOptionalDef, parsePipelineDef, parseReadonlyDef, selectParser, get$ref, addMeta, zodToJsonSchema, OPTIONS_MIN, OPTIONS_MAX, StartContactSchema, ContactSchema, CONTACT_SCHEMA, CONTACT_DESCRIPTION, CreateGoalSchema, CreateGoalToolSchema, CREATE_GOAL_DESCRIPTION, UpdateGoalSchema, UpdateGoalToolSchema, ClaimGoalSchema, GetGoalSchema, GET_GOAL_DESCRIPTION, UPDATE_GOAL_DESCRIPTION, CLAIM_GOAL_DESCRIPTION, CHECK_REPLIES_DESCRIPTION, CheckRepliesSchema, GetThreadSchema, GET_THREAD_DESCRIPTION, SearchThreadsSchema, SEARCH_THREADS_DESCRIPTION, AGENT_TOOLS, AGENT_TOOL_NAMES, ContextSchema, ParticipantSchema, TransformSchema, OptionSchema, VisualSchema, NotifyLevelSchema, SelectShapeSchema, ReceiptEventSchema, AttentionSchema, NotifyRequestFields, NotifyRequestSchema, NotifyStatusSchema, AgentStateSchema, TurnSchema, UserAnswerSchema, IntentSchema, RideAlongSchema, AwaitItemSchema, VoiceKeySchema, AgendaTurnSchema, CLAIM_STALE_MS, InboxItemSchema, APNS_TOKEN_RE, PushTokenSchema, MissedCallSchema, BrokerTuningSchema, UserSettingsSchema, HistoryItemSchema, ACTIVITY_LINES, ACTIVITY_LINE_MAX, AgentActivitySchema, ConnectionSummarySchema, LedgerItemSchema, AgentLedgerSchema, ReassignResultSchema, MoveRingSchema, MoveSchema, QueueQuestionSchema, QueueItemSchema, NoteSourceSchema, NoteStatusSchema, NoteRepeatSchema, DecisionSchema, NoteSchema, TriageItemSchema, TriageAssignmentSchema, TriageStatusSchema, SubmitTriageSchema, TriageProposalSchema, AcceptTriageSchema, AcceptTriageResultSchema, DeliveryModeSchema, WAKE_EVENT, wakeChannel, RegisterDeliverySchema, OAuthStartSchema, DeliveryConfigSchema, StatusSchema, EnvelopeRecipientSchema, EnvelopeHeaderSchema, EnvelopeSchema, SealedAnswerSchema, DeviceCredentialSchema, DeviceRosterSchema, WakeNudgeSchema, PairingStatusSchema, PairingRevealSchema, DeviceCodeSchema, DeviceInfoSchema, DeviceTokenSchema, SupportRequestSchema, NotificationFeedbackKindSchema, FeedbackResolutionSchema, FeedbackOutcomeSchema, import_tweetnacl, import_tweetnacl2, import_tweetnacl3, import_tweetnacl4, import_tweetnacl5, AGENT_NAME, TOKEN_PATH, KEY_PATH, sleep, UnpairedError, ApiError, AWAIT_WINDOW_MS, tokenOverride, authToken, HEARTBEAT_MS, RETRY_MS, JOIN, lines;
 var init_dist = __esm({
   "../../packages/sdk/dist/index.js"() {
     "use strict";
@@ -26774,9 +26774,9 @@ var init_dist = __esm({
     ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
     GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
     GET_GOAL_DESCRIPTION = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-    UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+    UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. Returns the new revision and a prose summary.";
     CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-    CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+    CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
     CheckRepliesSchema = external_exports.object({}).strict();
     GetThreadSchema = external_exports.object({
       parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -27155,67 +27155,6 @@ var init_dist = __esm({
         inFlight: external_exports.boolean().optional()
       })
     ]);
-    CallbackTriggerSchema = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-    NotifyResponseSchema = external_exports.object({
-      notificationId: external_exports.string(),
-      workId: external_exports.string().uuid().optional(),
-      decisionId: external_exports.string().uuid().optional(),
-      status: NotifyStatusSchema,
-      createdAt: external_exports.string().datetime(),
-      answer: UserAnswerSchema.optional(),
-      answeredAt: external_exports.string().datetime().optional(),
-      /** Ride-alongs for THIS agent — pending work it should pick up when it's done with
-       *  what it came for. Present on any reply, because an unwakeable agent's only
-       *  reliable moment is one it initiated. Absent/empty = nothing owed. */
-      also: external_exports.array(RideAlongSchema).optional()
-    });
-    NotifyPlanUnitSchema = external_exports.object({
-      notificationId: external_exports.string(),
-      /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
-      title: external_exports.string(),
-      /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
-      level: NotifyLevelSchema,
-      /** Answered from something the user already decided: nobody is interrupted, and a trail card
-       *  says so. The agent should not wait on this one. */
-      settled: external_exports.literal(true).optional(),
-      /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
-       *  agent — nothing here changed the ask, and ignoring it costs nothing. */
-      needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
-      /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
-       *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
-       *  broker that DECIDES that destroys the only fact separating a statement from a real ask
-       *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
-       *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
-      proposal: external_exports.object({
-        select: SelectShapeSchema,
-        options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
-      }).optional(),
-      /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
-       *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
-       *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
-       *  shape — the read RAISES (a decision always asks) and never silences a question the
-       *  agent declared (#731, #923). */
-      wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
-    });
-    NotifyPlanSchema = external_exports.object({
-      units: external_exports.array(NotifyPlanUnitSchema),
-      /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
-       *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
-      speaks: external_exports.string().optional()
-    });
-    UserResponseSchema = external_exports.object({
-      requestId: external_exports.string(),
-      answer: UserAnswerSchema,
-      answeredAt: external_exports.string().datetime(),
-      transcript: external_exports.string().optional(),
-      /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the item was
-       *  E2EE-sealed. Present → the server persists it opaquely and branches status on `ignored`;
-       *  the plaintext `answer` is a placeholder (`{ kind: "ignored" }`) the server ignores for a
-       *  sealed row. Absent = today's plaintext answer, unchanged. */
-      sealed: external_exports.lazy(() => SealedAnswerSchema).optional(),
-      /** Coverage report (#396): which of the ask's declared `points` were addressed. */
-      covered: external_exports.array(external_exports.string()).optional()
-    });
     VoiceKeySchema = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
     AgendaTurnSchema = external_exports.object({
       /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
@@ -27399,10 +27338,6 @@ var init_dist = __esm({
         goalState: external_exports.string().optional()
       }).optional()
     });
-    SnoozeRequestSchema = external_exports.object({
-      requestId: external_exports.string(),
-      until: external_exports.string().datetime()
-    });
     APNS_TOKEN_RE = /^[0-9a-fA-F]{64}$/;
     PushTokenSchema = external_exports.object({
       voipToken: external_exports.string().min(1).optional(),
@@ -27558,6 +27493,9 @@ var init_dist = __esm({
        *  harness availabilities + granted workspaces — the option set the phone's
        *  "new session" sheet offers. Absent for ordinary MCP agents. */
       runtime: external_exports.object({
+        /** The @paigy/harness this host is running — a machine the self-update has not reached
+         *  shows its age here (`apps/desktop/src/update.ts`). */
+        version: external_exports.string().optional(),
         harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
         workspaces: external_exports.array(external_exports.string()).optional()
       }).optional(),
@@ -27620,19 +27558,6 @@ var init_dist = __esm({
        *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
       learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
     });
-    CreateRequestSchema = external_exports.object({
-      /** The connection (token id) to send to, from GET /api/tokens. */
-      tokenId: external_exports.string(),
-      /** The user's message to the agent. */
-      text: external_exports.string().min(1),
-      /** Land the request on an existing conversation thread (History → "Continue")
-       *  instead of minting a fresh one. Must belong to the requesting user. */
-      parentId: external_exports.string().optional(),
-      /** Point the agent at a past conversation (possibly with a different agent) as
-       *  starting context (History → "New session from this"). A reference, not a copy —
-       *  the agent reads it via get_thread. Must belong to the requesting user. */
-      contextParentId: external_exports.string().optional()
-    });
     QueueQuestionSchema = external_exports.object({
       /** The decision need's id — what an answer is accepted against. */
       id: external_exports.string(),
@@ -27724,38 +27649,6 @@ var init_dist = __esm({
       lastRideAt: external_exports.string().nullable().default(null),
       createdAt: external_exports.string()
     });
-    CreateNoteSchema = external_exports.object({
-      /** The intent, in the user's own words. Stored verbatim; the broker only titles it. */
-      text: external_exports.string().min(1).max(4e3),
-      /** Capture it as a REMINDER — a note assigned to the user themselves, which rides
-       *  their next call instead of being handed to an agent. Everything else about the
-       *  note is identical; this is the one parameter that separates the two. */
-      forMe: external_exports.boolean().optional(),
-      /** The not-before, when the user already said one. Absent = the very next call. */
-      dueAt: external_exports.string().datetime().optional(),
-      repeat: NoteRepeatSchema.optional()
-    });
-    RecordDecisionSchema = external_exports.object({
-      /** An open decision (from /clarify) to answer. */
-      decisionId: external_exports.string().optional(),
-      /** For an ad-hoc decision: what was ambiguous. Required without `decisionId`. */
-      question: external_exports.string().min(1).max(500).optional(),
-      /** The ruling. */
-      answer: external_exports.string().min(1).max(2e3)
-    }).refine((d) => d.decisionId || d.question, { message: "decisionId or question required" });
-    AssignNoteSchema = external_exports.object({
-      /** An EXISTING agent: token id or nickname. Omit when spawning fresh. */
-      target: external_exports.string().min(1).optional(),
-      /** Spawn a NEW session for this note (companion.md §2.2): the assignee doesn't
-       *  exist yet — mint it on a live desktop that advertises the harness+workspace,
-       *  named after the note. The brief arrives as its opening request. */
-      spawn: external_exports.object({
-        hostTokenId: external_exports.string().uuid(),
-        harness: external_exports.string().min(1),
-        workspace: external_exports.string().min(1)
-      }).optional()
-    }).refine((a) => !!a.target !== !!a.spawn, { message: "exactly one of target or spawn" });
-    TriageVerdictSchema = external_exports.enum(["keep", "stale", "close", "assign"]);
     TriageItemSchema = external_exports.object({
       noteId: external_exports.string(),
       /** The note's headline at run time. */
@@ -27891,20 +27784,6 @@ var init_dist = __esm({
       ed25519: external_exports.string(),
       nonce: external_exports.string()
     });
-    DeviceCodeRequestSchema = external_exports.object({
-      /** The agent's suggested name for the pairing — the human sees it pre-filled at
-       *  approval and can override. Optional; blank → a default silly name server-side. */
-      suggestedName: external_exports.string().optional(),
-      /** Legacy alias for suggestedName (older MCPs sent `agent`). Accepted for
-       *  back-compat; `suggestedName` wins when both are present. ponytail: drop once no
-       *  pre-`name` MCP is in the wild. */
-      agent: external_exports.union([external_exports.string(), external_exports.object({ name: external_exports.string().optional() })]).optional(),
-      device: external_exports.string().optional(),
-      proto: external_exports.string().optional(),
-      // compiled-in tag, e.g. "paigy-pair-v2|sas=24"
-      commitment: external_exports.string().optional()
-      // agent's Ca
-    });
     DeviceCodeSchema = external_exports.object({
       device_code: external_exports.string(),
       user_code: external_exports.string(),
@@ -27938,11 +27817,6 @@ var init_dist = __esm({
       phone_reveal: PairingRevealSchema.nullable().optional(),
       uik_pub: external_exports.string().nullable().optional()
     });
-    DeviceTokenRequestSchema = external_exports.object({
-      device_code: external_exports.string(),
-      reveal: PairingRevealSchema.optional()
-      // agent's reveal {x25519, ed25519, nonce}
-    });
     DeviceTokenSchema = external_exports.object({
       access_token: external_exports.string(),
       /** The pairing's single name (user-typed at approval, the agent's suggestion, or
@@ -27964,14 +27838,6 @@ var init_dist = __esm({
       // present once the phone reveals
       uik_pub: external_exports.string().nullable().optional()
     });
-    DeviceCommitRequestSchema = external_exports.object({
-      code: external_exports.string(),
-      commitment: external_exports.string()
-      // Cb
-    });
-    DevicePeerCommitSchema = external_exports.object({
-      commitment: external_exports.string().nullable()
-    });
     SupportRequestSchema = external_exports.object({
       email: external_exports.string().email().max(320),
       message: external_exports.string().trim().min(1).max(5e3),
@@ -27991,15 +27857,6 @@ var init_dist = __esm({
       "other"
       // anything else — the note carries it.
     ]);
-    NotificationFeedbackSchema = external_exports.object({
-      notificationId: external_exports.string(),
-      kind: NotificationFeedbackKindSchema,
-      /** Optional free-text elaboration for a preset; required (non-empty) for 'other'. */
-      note: external_exports.string().trim().max(2e3).optional()
-    }).superRefine((r, ctx) => {
-      if (r.kind === "other" && !r.note)
-        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["note"], message: "note is required for 'other' feedback" });
-    });
     FeedbackResolutionSchema = external_exports.enum(["broker_fixed", "sent_to_agent"]);
     FeedbackOutcomeSchema = external_exports.object({
       resolution: FeedbackResolutionSchema,
@@ -33270,15 +33127,28 @@ function parseArgs(argv) {
   return args;
 }
 var ENABLE_TOOLS_COMMAND = "npx -y -p @paigy/mcp@latest paigy-enable-tools";
+function onEnter(input, onLine) {
+  if (!input.isTTY) return () => {
+  };
+  const listen = (chunk) => {
+    if (/[\r\n]/.test(String(chunk))) onLine();
+  };
+  input.on("data", listen);
+  input.resume();
+  return () => {
+    input.off("data", listen);
+    input.pause();
+  };
+}
 
 // src/cli.ts
 init_dist();
 var import_qrcode = __toESM(require_lib(), 1);
 import { hostname } from "os";
 import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { execSync } from "child_process";
+import { execFile as execFile2, execSync } from "child_process";
 import { homedir as homedir7 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // src/harness/session.ts
 import { spawn } from "child_process";
@@ -34971,9 +34841,9 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. Returns the new revision and a prose summary.";
 var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
 var GetThreadSchema2 = external_exports.object({
   parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -35367,67 +35237,6 @@ var AwaitItemSchema2 = external_exports.discriminatedUnion("type", [
     inFlight: external_exports.boolean().optional()
   })
 ]);
-var CallbackTriggerSchema2 = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-var NotifyResponseSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  workId: external_exports.string().uuid().optional(),
-  decisionId: external_exports.string().uuid().optional(),
-  status: NotifyStatusSchema2,
-  createdAt: external_exports.string().datetime(),
-  answer: UserAnswerSchema2.optional(),
-  answeredAt: external_exports.string().datetime().optional(),
-  /** Ride-alongs for THIS agent — pending work it should pick up when it's done with
-   *  what it came for. Present on any reply, because an unwakeable agent's only
-   *  reliable moment is one it initiated. Absent/empty = nothing owed. */
-  also: external_exports.array(RideAlongSchema2).optional()
-});
-var NotifyPlanUnitSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
-  title: external_exports.string(),
-  /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
-  level: NotifyLevelSchema2,
-  /** Answered from something the user already decided: nobody is interrupted, and a trail card
-   *  says so. The agent should not wait on this one. */
-  settled: external_exports.literal(true).optional(),
-  /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
-   *  agent — nothing here changed the ask, and ignoring it costs nothing. */
-  needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
-  /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
-   *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
-   *  broker that DECIDES that destroys the only fact separating a statement from a real ask
-   *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
-   *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
-  proposal: external_exports.object({
-    select: SelectShapeSchema2,
-    options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
-  }).optional(),
-  /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
-   *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
-   *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
-   *  shape — the read RAISES (a decision always asks) and never silences a question the
-   *  agent declared (#731, #923). */
-  wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
-});
-var NotifyPlanSchema2 = external_exports.object({
-  units: external_exports.array(NotifyPlanUnitSchema2),
-  /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
-   *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
-  speaks: external_exports.string().optional()
-});
-var UserResponseSchema2 = external_exports.object({
-  requestId: external_exports.string(),
-  answer: UserAnswerSchema2,
-  answeredAt: external_exports.string().datetime(),
-  transcript: external_exports.string().optional(),
-  /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the item was
-   *  E2EE-sealed. Present → the server persists it opaquely and branches status on `ignored`;
-   *  the plaintext `answer` is a placeholder (`{ kind: "ignored" }`) the server ignores for a
-   *  sealed row. Absent = today's plaintext answer, unchanged. */
-  sealed: external_exports.lazy(() => SealedAnswerSchema2).optional(),
-  /** Coverage report (#396): which of the ask's declared `points` were addressed. */
-  covered: external_exports.array(external_exports.string()).optional()
-});
 var VoiceKeySchema2 = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
 var AgendaTurnSchema2 = external_exports.object({
   /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
@@ -35611,10 +35420,6 @@ var InboxItemSchema2 = external_exports.object({
     goalState: external_exports.string().optional()
   }).optional()
 });
-var SnoozeRequestSchema2 = external_exports.object({
-  requestId: external_exports.string(),
-  until: external_exports.string().datetime()
-});
 var APNS_TOKEN_RE2 = /^[0-9a-fA-F]{64}$/;
 var PushTokenSchema2 = external_exports.object({
   voipToken: external_exports.string().min(1).optional(),
@@ -35770,6 +35575,9 @@ var ConnectionSummarySchema2 = external_exports.object({
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
   runtime: external_exports.object({
+    /** The @paigy/harness this host is running — a machine the self-update has not reached
+     *  shows its age here (`apps/desktop/src/update.ts`). */
+    version: external_exports.string().optional(),
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional()
   }).optional(),
@@ -35832,19 +35640,6 @@ var MoveSchema2 = external_exports.object({
    *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
   learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
 });
-var CreateRequestSchema2 = external_exports.object({
-  /** The connection (token id) to send to, from GET /api/tokens. */
-  tokenId: external_exports.string(),
-  /** The user's message to the agent. */
-  text: external_exports.string().min(1),
-  /** Land the request on an existing conversation thread (History → "Continue")
-   *  instead of minting a fresh one. Must belong to the requesting user. */
-  parentId: external_exports.string().optional(),
-  /** Point the agent at a past conversation (possibly with a different agent) as
-   *  starting context (History → "New session from this"). A reference, not a copy —
-   *  the agent reads it via get_thread. Must belong to the requesting user. */
-  contextParentId: external_exports.string().optional()
-});
 var QueueQuestionSchema2 = external_exports.object({
   /** The decision need's id — what an answer is accepted against. */
   id: external_exports.string(),
@@ -35936,38 +35731,6 @@ var NoteSchema2 = external_exports.object({
   lastRideAt: external_exports.string().nullable().default(null),
   createdAt: external_exports.string()
 });
-var CreateNoteSchema2 = external_exports.object({
-  /** The intent, in the user's own words. Stored verbatim; the broker only titles it. */
-  text: external_exports.string().min(1).max(4e3),
-  /** Capture it as a REMINDER — a note assigned to the user themselves, which rides
-   *  their next call instead of being handed to an agent. Everything else about the
-   *  note is identical; this is the one parameter that separates the two. */
-  forMe: external_exports.boolean().optional(),
-  /** The not-before, when the user already said one. Absent = the very next call. */
-  dueAt: external_exports.string().datetime().optional(),
-  repeat: NoteRepeatSchema2.optional()
-});
-var RecordDecisionSchema2 = external_exports.object({
-  /** An open decision (from /clarify) to answer. */
-  decisionId: external_exports.string().optional(),
-  /** For an ad-hoc decision: what was ambiguous. Required without `decisionId`. */
-  question: external_exports.string().min(1).max(500).optional(),
-  /** The ruling. */
-  answer: external_exports.string().min(1).max(2e3)
-}).refine((d) => d.decisionId || d.question, { message: "decisionId or question required" });
-var AssignNoteSchema2 = external_exports.object({
-  /** An EXISTING agent: token id or nickname. Omit when spawning fresh. */
-  target: external_exports.string().min(1).optional(),
-  /** Spawn a NEW session for this note (companion.md §2.2): the assignee doesn't
-   *  exist yet — mint it on a live desktop that advertises the harness+workspace,
-   *  named after the note. The brief arrives as its opening request. */
-  spawn: external_exports.object({
-    hostTokenId: external_exports.string().uuid(),
-    harness: external_exports.string().min(1),
-    workspace: external_exports.string().min(1)
-  }).optional()
-}).refine((a) => !!a.target !== !!a.spawn, { message: "exactly one of target or spawn" });
-var TriageVerdictSchema2 = external_exports.enum(["keep", "stale", "close", "assign"]);
 var TriageItemSchema2 = external_exports.object({
   noteId: external_exports.string(),
   /** The note's headline at run time. */
@@ -36101,20 +35864,6 @@ var PairingRevealSchema2 = external_exports.object({
   ed25519: external_exports.string(),
   nonce: external_exports.string()
 });
-var DeviceCodeRequestSchema2 = external_exports.object({
-  /** The agent's suggested name for the pairing — the human sees it pre-filled at
-   *  approval and can override. Optional; blank → a default silly name server-side. */
-  suggestedName: external_exports.string().optional(),
-  /** Legacy alias for suggestedName (older MCPs sent `agent`). Accepted for
-   *  back-compat; `suggestedName` wins when both are present. ponytail: drop once no
-   *  pre-`name` MCP is in the wild. */
-  agent: external_exports.union([external_exports.string(), external_exports.object({ name: external_exports.string().optional() })]).optional(),
-  device: external_exports.string().optional(),
-  proto: external_exports.string().optional(),
-  // compiled-in tag, e.g. "paigy-pair-v2|sas=24"
-  commitment: external_exports.string().optional()
-  // agent's Ca
-});
 var DeviceCodeSchema2 = external_exports.object({
   device_code: external_exports.string(),
   user_code: external_exports.string(),
@@ -36148,11 +35897,6 @@ var DeviceInfoSchema2 = external_exports.object({
   phone_reveal: PairingRevealSchema2.nullable().optional(),
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceTokenRequestSchema2 = external_exports.object({
-  device_code: external_exports.string(),
-  reveal: PairingRevealSchema2.optional()
-  // agent's reveal {x25519, ed25519, nonce}
-});
 var DeviceTokenSchema2 = external_exports.object({
   access_token: external_exports.string(),
   /** The pairing's single name (user-typed at approval, the agent's suggestion, or
@@ -36174,14 +35918,6 @@ var DeviceTokenSchema2 = external_exports.object({
   // present once the phone reveals
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceCommitRequestSchema2 = external_exports.object({
-  code: external_exports.string(),
-  commitment: external_exports.string()
-  // Cb
-});
-var DevicePeerCommitSchema2 = external_exports.object({
-  commitment: external_exports.string().nullable()
-});
 var SupportRequestSchema2 = external_exports.object({
   email: external_exports.string().email().max(320),
   message: external_exports.string().trim().min(1).max(5e3),
@@ -36201,15 +35937,6 @@ var NotificationFeedbackKindSchema2 = external_exports.enum([
   "other"
   // anything else — the note carries it.
 ]);
-var NotificationFeedbackSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  kind: NotificationFeedbackKindSchema2,
-  /** Optional free-text elaboration for a preset; required (non-empty) for 'other'. */
-  note: external_exports.string().trim().max(2e3).optional()
-}).superRefine((r, ctx) => {
-  if (r.kind === "other" && !r.note)
-    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["note"], message: "note is required for 'other' feedback" });
-});
 var FeedbackResolutionSchema2 = external_exports.enum(["broker_fixed", "sent_to_agent"]);
 var FeedbackOutcomeSchema2 = external_exports.object({
   resolution: FeedbackResolutionSchema2,
@@ -36511,7 +36238,7 @@ init_dist();
 init_catalog();
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 
 // src/workspaces.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
@@ -36550,8 +36277,67 @@ function resolveWakeDir(pinned, deps) {
   return listWorkspaces(deps)[0];
 }
 
+// src/update.ts
+import { execFile } from "child_process";
+import { createRequire } from "module";
+import { dirname as dirname3, join as join4 } from "path";
+import { promisify } from "util";
+var SERVICE_LABEL = "ai.paigy.harness";
+var VERSION = createRequire(import.meta.url)("../package.json").version;
+var REGISTRY = "https://registry.npmjs.org/@paigy/harness/latest";
+var CHECK_MS = 60 * 6e4;
+function newer(latest, current) {
+  const parts = (v) => /^\d+\.\d+\.\d+$/.test(v) ? v.split(".").map(Number) : null;
+  const [a, b] = [parts(latest), parts(current)];
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
+  return false;
+}
+function updateAction(o) {
+  if (!o.service || !o.latest || o.latest === o.failed || !newer(o.latest, o.current)) return "none";
+  return o.sessions > 0 ? "wait" : "install";
+}
+async function latestVersion() {
+  const res = await fetch(REGISTRY, { signal: AbortSignal.timeout(1e4) });
+  return res.ok ? (await res.json()).version ?? null : null;
+}
+async function install(version) {
+  const bin = dirname3(process.execPath);
+  await promisify(execFile)(join4(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+    env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
+    timeout: 5 * 6e4
+  });
+}
+function selfUpdater(deps) {
+  const service = deps.service ?? process.env.XPC_SERVICE_NAME === SERVICE_LABEL;
+  let latest = null;
+  let checkedAt = -Infinity;
+  let failed;
+  let waiting = false;
+  return async () => {
+    if (!service) return;
+    const now = (deps.now ?? Date.now)();
+    if (now - checkedAt >= CHECK_MS) {
+      checkedAt = now;
+      latest = await (deps.latest ?? latestVersion)().catch(() => latest);
+    }
+    const action = updateAction({ current: VERSION, latest, service, sessions: deps.sessions(), failed });
+    if (action === "wait" && !waiting) deps.log(`\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running`);
+    waiting = action === "wait";
+    if (action !== "install" || !latest) return;
+    try {
+      await (deps.install ?? install)(latest);
+      deps.log(`\u21E1 updated @paigy/harness ${VERSION} \u2192 ${latest} \u2014 restarting`);
+      (deps.exit ?? (() => process.exit(0)))();
+    } catch (e) {
+      failed = latest;
+      deps.log(`\u26A0 could not update to @paigy/harness ${latest}: ${e.message.split("\n")[0]} \u2014 run: npm install -g @paigy/harness`);
+    }
+  };
+}
+
 // src/host.ts
-var HOST_FILE = join4(homedir5(), ".paigy", "host.json");
+var HOST_FILE = join5(homedir5(), ".paigy", "host.json");
 var runKey = (slot) => `slot:${slot}`;
 var claimedRun = (sessionId2) => {
   const slot = sessionSlot(sessionId2);
@@ -36581,11 +36367,15 @@ function startHost(opts) {
       }
     }
   };
+  const update = selfUpdater({ sessions: () => runs.size, log: opts.log });
   const beat = () => {
     void refreshIdentities();
+    void update().catch(() => {
+    });
     for (const r of runs.values()) if (r.token) void heartbeat(void 0, { token: r.token }).catch(() => {
     });
     void heartbeat({
+      version: VERSION,
       harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
       workspaces: listWorkspaces(opts.wsDeps)
     }, asHost).catch(() => {
@@ -36869,13 +36659,37 @@ function bridgeLine(r) {
 
 // src/cli.ts
 var STATUS_MARK = { ready: "\u2713", login: "\u25D0", "adapter-missing": "\u25D0", missing: "\u2717" };
-function printConnectLines(link, userCode) {
+function printConnectLines(link, userCode, enter) {
   console.log("Connect this computer from your phone");
-  console.log(`  Open   ${link}`);
+  console.log(`  Open   ${link}${enter ? "   (press Enter to open it here)" : ""}`);
   console.log(`  or scan the QR above \xB7 or type ${userCode} in Paigy \u2192 Devices \u2192 Connect a computer`);
 }
+async function pairThisMachine() {
+  const host = hostname().replace(/\.local$/, "");
+  const code = await requestCode(host, void 0, host);
+  const link = code.verification_uri_complete;
+  console.log(await import_qrcode.default.toString(link, { type: "terminal", small: true }));
+  printConnectLines(link, code.user_code, !!process.stdin.isTTY);
+  const opener = process.platform === "darwin" ? "open" : "xdg-open";
+  const stop2 = onEnter(process.stdin, () => execFile2(opener, [link], () => {
+  }));
+  try {
+    const deadline = Date.now() + code.expires_in * 1e3;
+    while (Date.now() < deadline) {
+      const token = await pollToken(code.device_code).catch(() => null);
+      if (token) {
+        saveToken(token, "Desktop");
+        return token.name;
+      }
+      await sleep(code.interval * 1e3);
+    }
+    return null;
+  } finally {
+    stop2();
+  }
+}
 function forwardCodexThreadId() {
-  const cfg = join5(process.env.CODEX_HOME || join5(homedir7(), ".codex"), "config.toml");
+  const cfg = join6(process.env.CODEX_HOME || join6(homedir7(), ".codex"), "config.toml");
   if (!existsSync5(cfg)) return;
   const text = readFileSync4(cfg, "utf8");
   const head = "[mcp_servers.paigy]\n";
@@ -36961,23 +36775,12 @@ async function main() {
     const live = held ? await credentialWorks(held) : false;
     if (held && !live) console.log("\u26A0 this machine was logged out \u2014 reconnecting it now");
     if (!live) {
-      const code = await requestCode(hostname().replace(/\.local$/, ""), void 0, hostname().replace(/\.local$/, ""));
-      console.log(await import_qrcode.default.toString(code.verification_uri_complete, { type: "terminal", small: true }));
-      printConnectLines(code.verification_uri_complete, code.user_code);
-      const deadline = Date.now() + code.expires_in * 1e3;
-      let paired = false;
-      while (!paired && Date.now() < deadline) {
-        const token = await pollToken(code.device_code).catch(() => null);
-        if (token) {
-          saveToken(token, "Desktop");
-          console.log(`\u2713 paired as "${token.name}"`);
-          paired = true;
-        } else await sleep(code.interval * 1e3);
-      }
-      if (!paired) {
+      const name = await pairThisMachine();
+      if (name === null) {
         console.error("Pairing code expired \u2014 run `paigy-harness setup` again.");
         process.exit(1);
       }
+      console.log(`\u2713 paired as "${name}"`);
     } else console.log("\u2713 already paired as this machine");
     for (const a of detected) {
       if (a.status === "adapter-missing" && a.install) continue;
@@ -36988,7 +36791,7 @@ async function main() {
     const wsDeps = { file: workspacesFile() };
     for (const dir of parsed.grant) addWorkspace(dir, wsDeps);
     if (!listWorkspaces(wsDeps).length) {
-      const guess = join5(homedir7(), "projects");
+      const guess = join6(homedir7(), "projects");
       if (existsSync5(guess)) {
         addWorkspace(guess, wsDeps);
         console.log(`\u2713 workspace granted: ${guess} (change with --grant DIR)`);
@@ -37029,7 +36832,7 @@ async function main() {
       }
     }
     try {
-      const settings = join5(homedir7(), ".claude", "settings.json");
+      const settings = join6(homedir7(), ".claude", "settings.json");
       if (which("claude") && existsSync5(settings)) {
         const cfg = JSON.parse(readFileSync4(settings, "utf8"));
         if (!cfg["statusLine"]) {
@@ -37058,22 +36861,14 @@ async function main() {
       return;
     }
     if (existing) console.log("\u26A0 this machine was logged out \u2014 reconnecting it now");
-    const code = await requestCode(hostname().replace(/\.local$/, ""), void 0, hostname().replace(/\.local$/, ""));
-    console.log(await import_qrcode.default.toString(code.verification_uri_complete, { type: "terminal", small: true }));
-    printConnectLines(code.verification_uri_complete, code.user_code);
-    const deadline = Date.now() + code.expires_in * 1e3;
-    while (Date.now() < deadline) {
-      const token = await pollToken(code.device_code).catch(() => null);
-      if (token) {
-        saveToken(token, "Desktop");
-        console.log(`\u2713 paired as "${token.name}" \u2014 this machine is now launchable from your phone`);
-        console.log("  next:  paigy-harness host --grant ~/your/projects   (or: paigy-harness service)");
-        return;
-      }
-      await sleep(code.interval * 1e3);
+    const name = await pairThisMachine();
+    if (name === null) {
+      console.error("Pairing code expired \u2014 run `paigy-harness pair` again.");
+      process.exit(1);
     }
-    console.error("Pairing code expired \u2014 run `paigy-harness pair` again.");
-    process.exit(1);
+    console.log(`\u2713 paired as "${name}" \u2014 this machine is now launchable from your phone`);
+    console.log("  next:  paigy-harness host --grant ~/your/projects   (or: paigy-harness service)");
+    return;
   }
   if (parsed.service) {
     if (process.platform !== "darwin") {
@@ -37084,7 +36879,7 @@ async function main() {
     const plist = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
-  <key>Label</key><string>ai.paigy.harness</string>
+  <key>Label</key><string>${SERVICE_LABEL}</string>
   <key>ProgramArguments</key><array>
     <string>${process.execPath}</string>
     <string>${bin}</string>
@@ -37095,13 +36890,13 @@ async function main() {
   <key>SoftResourceLimits</key><dict>
     <key>NumberOfFiles</key><integer>65536</integer>
   </dict>
-  <key>StandardOutPath</key><string>${join5(homedir7(), ".paigy", "host.log")}</string>
-  <key>StandardErrorPath</key><string>${join5(homedir7(), ".paigy", "host.log")}</string>
+  <key>StandardOutPath</key><string>${join6(homedir7(), ".paigy", "host.log")}</string>
+  <key>StandardErrorPath</key><string>${join6(homedir7(), ".paigy", "host.log")}</string>
 </dict></plist>
 `;
-    const dir = join5(homedir7(), "Library", "LaunchAgents");
+    const dir = join6(homedir7(), "Library", "LaunchAgents");
     mkdirSync3(dir, { recursive: true });
-    const path = join5(dir, "ai.paigy.harness.plist");
+    const path = join6(dir, `${SERVICE_LABEL}.plist`);
     writeFileSync4(path, plist);
     execSync(`launchctl unload ${path} 2>/dev/null; launchctl load ${path}`, { shell: "/bin/sh" });
     console.log(`\u2713 host installed as a login service (${path}) \u2014 logs at ~/.paigy/host.log`);
@@ -37245,10 +37040,11 @@ async function main() {
 void main();
 async function credentialWorks(token) {
   try {
-    const res = await fetch(`${process.env.PAIGY_API_URL ?? "https://paigy.ai"}/api/identity`, {
+    const res = await fetch(`${process.env.PAIGY_API_URL ?? "https://paigy.ai"}/api/presence`, {
+      method: "POST",
       headers: { authorization: `Bearer ${token}` }
     });
-    return res.ok;
+    return res.status !== 401 && res.status !== 403;
   } catch {
     return true;
   }