@paigy/harness 0.3.7 → 0.3.9

package/dist/main.js

@@ -4580,7 +4580,7 @@ import { app, BrowserWindow, dialog, ipcMain } from "electron";
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync4 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname3, join as join5 } from "path";
+import { dirname as dirname4, join as join6 } from "path";
 
 // ../../packages/sdk/dist/index.js
 import { createRequire as __sdkCreateRequire } from "module";
@@ -12234,9 +12234,9 @@ var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({
 var ClaimGoalSchema = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+var UPDATE_GOAL_DESCRIPTION = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. Returns the new revision and a prose summary.";
 var CLAIM_GOAL_DESCRIPTION = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+var CHECK_REPLIES_DESCRIPTION = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema = external_exports.object({}).strict();
 var GetThreadSchema = external_exports.object({
   parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -12670,67 +12670,6 @@ var AwaitItemSchema = external_exports.discriminatedUnion("type", [
     inFlight: external_exports.boolean().optional()
   })
 ]);
-var CallbackTriggerSchema = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-var NotifyResponseSchema = external_exports.object({
-  notificationId: external_exports.string(),
-  workId: external_exports.string().uuid().optional(),
-  decisionId: external_exports.string().uuid().optional(),
-  status: NotifyStatusSchema,
-  createdAt: external_exports.string().datetime(),
-  answer: UserAnswerSchema.optional(),
-  answeredAt: external_exports.string().datetime().optional(),
-  /** Ride-alongs for THIS agent — pending work it should pick up when it's done with
-   *  what it came for. Present on any reply, because an unwakeable agent's only
-   *  reliable moment is one it initiated. Absent/empty = nothing owed. */
-  also: external_exports.array(RideAlongSchema).optional()
-});
-var NotifyPlanUnitSchema = external_exports.object({
-  notificationId: external_exports.string(),
-  /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
-  title: external_exports.string(),
-  /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
-  level: NotifyLevelSchema,
-  /** Answered from something the user already decided: nobody is interrupted, and a trail card
-   *  says so. The agent should not wait on this one. */
-  settled: external_exports.literal(true).optional(),
-  /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
-   *  agent — nothing here changed the ask, and ignoring it costs nothing. */
-  needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
-  /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
-   *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
-   *  broker that DECIDES that destroys the only fact separating a statement from a real ask
-   *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
-   *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
-  proposal: external_exports.object({
-    select: SelectShapeSchema,
-    options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
-  }).optional(),
-  /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
-   *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
-   *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
-   *  shape — the read RAISES (a decision always asks) and never silences a question the
-   *  agent declared (#731, #923). */
-  wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
-});
-var NotifyPlanSchema = external_exports.object({
-  units: external_exports.array(NotifyPlanUnitSchema),
-  /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
-   *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
-  speaks: external_exports.string().optional()
-});
-var UserResponseSchema = external_exports.object({
-  requestId: external_exports.string(),
-  answer: UserAnswerSchema,
-  answeredAt: external_exports.string().datetime(),
-  transcript: external_exports.string().optional(),
-  /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the item was
-   *  E2EE-sealed. Present → the server persists it opaquely and branches status on `ignored`;
-   *  the plaintext `answer` is a placeholder (`{ kind: "ignored" }`) the server ignores for a
-   *  sealed row. Absent = today's plaintext answer, unchanged. */
-  sealed: external_exports.lazy(() => SealedAnswerSchema).optional(),
-  /** Coverage report (#396): which of the ask's declared `points` were addressed. */
-  covered: external_exports.array(external_exports.string()).optional()
-});
 var VoiceKeySchema = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
 var AgendaTurnSchema = external_exports.object({
   /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
@@ -12914,10 +12853,6 @@ var InboxItemSchema = external_exports.object({
     goalState: external_exports.string().optional()
   }).optional()
 });
-var SnoozeRequestSchema = external_exports.object({
-  requestId: external_exports.string(),
-  until: external_exports.string().datetime()
-});
 var APNS_TOKEN_RE = /^[0-9a-fA-F]{64}$/;
 var PushTokenSchema = external_exports.object({
   voipToken: external_exports.string().min(1).optional(),
@@ -13073,6 +13008,9 @@ var ConnectionSummarySchema = external_exports.object({
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
   runtime: external_exports.object({
+    /** The @paigy/harness this host is running — a machine the self-update has not reached
+     *  shows its age here (`apps/desktop/src/update.ts`). */
+    version: external_exports.string().optional(),
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional()
   }).optional(),
@@ -13135,19 +13073,6 @@ var MoveSchema = external_exports.object({
    *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
   learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
 });
-var CreateRequestSchema = external_exports.object({
-  /** The connection (token id) to send to, from GET /api/tokens. */
-  tokenId: external_exports.string(),
-  /** The user's message to the agent. */
-  text: external_exports.string().min(1),
-  /** Land the request on an existing conversation thread (History → "Continue")
-   *  instead of minting a fresh one. Must belong to the requesting user. */
-  parentId: external_exports.string().optional(),
-  /** Point the agent at a past conversation (possibly with a different agent) as
-   *  starting context (History → "New session from this"). A reference, not a copy —
-   *  the agent reads it via get_thread. Must belong to the requesting user. */
-  contextParentId: external_exports.string().optional()
-});
 var QueueQuestionSchema = external_exports.object({
   /** The decision need's id — what an answer is accepted against. */
   id: external_exports.string(),
@@ -13239,38 +13164,6 @@ var NoteSchema = external_exports.object({
   lastRideAt: external_exports.string().nullable().default(null),
   createdAt: external_exports.string()
 });
-var CreateNoteSchema = external_exports.object({
-  /** The intent, in the user's own words. Stored verbatim; the broker only titles it. */
-  text: external_exports.string().min(1).max(4e3),
-  /** Capture it as a REMINDER — a note assigned to the user themselves, which rides
-   *  their next call instead of being handed to an agent. Everything else about the
-   *  note is identical; this is the one parameter that separates the two. */
-  forMe: external_exports.boolean().optional(),
-  /** The not-before, when the user already said one. Absent = the very next call. */
-  dueAt: external_exports.string().datetime().optional(),
-  repeat: NoteRepeatSchema.optional()
-});
-var RecordDecisionSchema = external_exports.object({
-  /** An open decision (from /clarify) to answer. */
-  decisionId: external_exports.string().optional(),
-  /** For an ad-hoc decision: what was ambiguous. Required without `decisionId`. */
-  question: external_exports.string().min(1).max(500).optional(),
-  /** The ruling. */
-  answer: external_exports.string().min(1).max(2e3)
-}).refine((d) => d.decisionId || d.question, { message: "decisionId or question required" });
-var AssignNoteSchema = external_exports.object({
-  /** An EXISTING agent: token id or nickname. Omit when spawning fresh. */
-  target: external_exports.string().min(1).optional(),
-  /** Spawn a NEW session for this note (companion.md §2.2): the assignee doesn't
-   *  exist yet — mint it on a live desktop that advertises the harness+workspace,
-   *  named after the note. The brief arrives as its opening request. */
-  spawn: external_exports.object({
-    hostTokenId: external_exports.string().uuid(),
-    harness: external_exports.string().min(1),
-    workspace: external_exports.string().min(1)
-  }).optional()
-}).refine((a) => !!a.target !== !!a.spawn, { message: "exactly one of target or spawn" });
-var TriageVerdictSchema = external_exports.enum(["keep", "stale", "close", "assign"]);
 var TriageItemSchema = external_exports.object({
   noteId: external_exports.string(),
   /** The note's headline at run time. */
@@ -13406,20 +13299,6 @@ var PairingRevealSchema = external_exports.object({
   ed25519: external_exports.string(),
   nonce: external_exports.string()
 });
-var DeviceCodeRequestSchema = external_exports.object({
-  /** The agent's suggested name for the pairing — the human sees it pre-filled at
-   *  approval and can override. Optional; blank → a default silly name server-side. */
-  suggestedName: external_exports.string().optional(),
-  /** Legacy alias for suggestedName (older MCPs sent `agent`). Accepted for
-   *  back-compat; `suggestedName` wins when both are present. ponytail: drop once no
-   *  pre-`name` MCP is in the wild. */
-  agent: external_exports.union([external_exports.string(), external_exports.object({ name: external_exports.string().optional() })]).optional(),
-  device: external_exports.string().optional(),
-  proto: external_exports.string().optional(),
-  // compiled-in tag, e.g. "paigy-pair-v2|sas=24"
-  commitment: external_exports.string().optional()
-  // agent's Ca
-});
 var DeviceCodeSchema = external_exports.object({
   device_code: external_exports.string(),
   user_code: external_exports.string(),
@@ -13453,11 +13332,6 @@ var DeviceInfoSchema = external_exports.object({
   phone_reveal: PairingRevealSchema.nullable().optional(),
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceTokenRequestSchema = external_exports.object({
-  device_code: external_exports.string(),
-  reveal: PairingRevealSchema.optional()
-  // agent's reveal {x25519, ed25519, nonce}
-});
 var DeviceTokenSchema = external_exports.object({
   access_token: external_exports.string(),
   /** The pairing's single name (user-typed at approval, the agent's suggestion, or
@@ -13479,14 +13353,6 @@ var DeviceTokenSchema = external_exports.object({
   // present once the phone reveals
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceCommitRequestSchema = external_exports.object({
-  code: external_exports.string(),
-  commitment: external_exports.string()
-  // Cb
-});
-var DevicePeerCommitSchema = external_exports.object({
-  commitment: external_exports.string().nullable()
-});
 var SupportRequestSchema = external_exports.object({
   email: external_exports.string().email().max(320),
   message: external_exports.string().trim().min(1).max(5e3),
@@ -13506,15 +13372,6 @@ var NotificationFeedbackKindSchema = external_exports.enum([
   "other"
   // anything else — the note carries it.
 ]);
-var NotificationFeedbackSchema = external_exports.object({
-  notificationId: external_exports.string(),
-  kind: NotificationFeedbackKindSchema,
-  /** Optional free-text elaboration for a preset; required (non-empty) for 'other'. */
-  note: external_exports.string().trim().max(2e3).optional()
-}).superRefine((r, ctx) => {
-  if (r.kind === "other" && !r.note)
-    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["note"], message: "note is required for 'other' feedback" });
-});
 var FeedbackResolutionSchema = external_exports.enum(["broker_fixed", "sent_to_agent"]);
 var FeedbackOutcomeSchema = external_exports.object({
   resolution: FeedbackResolutionSchema,
@@ -13924,6 +13781,146 @@ async function subscribeWake(onNudge, opts = {}) {
   };
 }
 
+// src/main.ts
+var import_qrcode = __toESM(require_lib(), 1);
+import { homedir as homedir7, hostname } from "os";
+
+// src/harness/catalog.ts
+import { spawnSync } from "child_process";
+import { existsSync as existsSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { delimiter, dirname, join as join2 } from "path";
+var CATALOG = [
+  {
+    name: "claude",
+    label: "Claude Code",
+    cli: "claude",
+    adapter: "claude-agent-acp",
+    authProbe: ["claude", "auth", "status"],
+    loginHint: "Run `claude` once in a terminal and sign in.",
+    installCli: "curl -fsSL https://claude.ai/install.sh | bash",
+    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp"
+  },
+  {
+    name: "codex",
+    label: "Codex",
+    cli: "codex",
+    adapter: "codex-acp",
+    authProbe: ["codex", "login", "status"],
+    loginHint: "Run `codex login` to authenticate.",
+    installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
+    installAdapter: "npm install -g @agentclientprotocol/codex-acp"
+  },
+  {
+    name: "agy",
+    label: "Antigravity",
+    cli: "agy",
+    authProbe: ["agy", "help"],
+    loginHint: "Install and set up Antigravity (`agy`).",
+    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
+  }
+];
+function probeDirs(home = homedir2()) {
+  return [
+    dirname(process.execPath),
+    join2(home, ".local", "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin",
+    join2(home, ".npm-global", "bin")
+  ];
+}
+function which(bin) {
+  const hit = spawnSync("which", [bin], { encoding: "utf8" });
+  const fromPath = hit.status === 0 ? hit.stdout.trim() : "";
+  if (fromPath) return fromPath;
+  for (const dir of probeDirs()) {
+    const candidate = join2(dir, bin);
+    if (existsSync2(candidate)) return candidate;
+  }
+  return null;
+}
+function runProbe(argv) {
+  const [cmd, ...args] = argv;
+  if (!cmd) return false;
+  const resolved = which(cmd);
+  if (!resolved) return false;
+  return spawnSync(resolved, args, {
+    timeout: 1e4,
+    stdio: "ignore",
+    env: { ...process.env, PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter) }
+  }).status === 0;
+}
+function detect(entry, deps = {}) {
+  const find = deps.which ?? which;
+  const probe = deps.probe ?? runProbe;
+  const base = { name: entry.name, label: entry.label };
+  const cliPath = find(entry.cli);
+  if (!cliPath) return { ...base, status: "missing", hint: `${entry.label} is not installed.`, install: entry.installCli };
+  const adapterPath = entry.adapter ? find(entry.adapter) : null;
+  if (entry.adapter && !adapterPath) {
+    return {
+      ...base,
+      status: "adapter-missing",
+      hint: `${entry.label} is installed, but its ACP adapter (${entry.adapter}) is not.`,
+      ...entry.installAdapter ? { install: entry.installAdapter } : {}
+    };
+  }
+  const bin = adapterPath ?? cliPath;
+  if (!probe(entry.authProbe)) return { ...base, status: "login", bin, hint: entry.loginHint };
+  return { ...base, status: "ready", bin };
+}
+function detectAll(deps = {}) {
+  return CATALOG.map((entry) => detect(entry, deps));
+}
+
+// src/host.ts
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join5 } from "path";
+
+// src/workspaces.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname2, join as join3, resolve } from "path";
+import { homedir as homedir3 } from "os";
+function workspacesFile() {
+  return join3(homedir3(), ".paigy", "workspaces.json");
+}
+function listWorkspaces(deps) {
+  try {
+    const parsed = JSON.parse(readFileSync2(deps.file, "utf8"));
+    return Array.isArray(parsed) ? parsed.filter((w) => typeof w === "string") : [];
+  } catch {
+    return [];
+  }
+}
+function addWorkspace(dir, deps) {
+  const next = resolve(dir.replace(/^~(?=$|\/)/, homedir3()));
+  const all = listWorkspaces(deps);
+  if (!all.includes(next)) {
+    all.push(next);
+    mkdirSync2(dirname2(deps.file), { recursive: true });
+    writeFileSync2(deps.file, JSON.stringify(all, null, 2));
+  }
+  return all;
+}
+function removeWorkspace(dir, deps) {
+  const all = listWorkspaces(deps).filter((w) => w !== dir);
+  mkdirSync2(dirname2(deps.file), { recursive: true });
+  writeFileSync2(deps.file, JSON.stringify(all, null, 2));
+  return all;
+}
+function allowed(cwd, deps) {
+  const target = resolve(cwd.replace(/^~(?=$|\/)/, homedir3()));
+  return listWorkspaces(deps).some((w) => target === w || target.startsWith(`${w}/`));
+}
+function resolveWakeDir(pinned, deps) {
+  if (pinned && allowed(pinned, deps)) {
+    const dir = resolve(pinned.replace(/^~(?=$|\/)/, homedir3()));
+    if ((deps.exists ?? existsSync3)(dir)) return dir;
+  }
+  return listWorkspaces(deps)[0];
+}
+
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride2 = /* @__PURE__ */ Symbol("Let zodToJsonSchema decide on which parser to use");
 var defaultOptions2 = {
@@ -15307,9 +15304,9 @@ var UpdateGoalToolSchema2 = UpdateGoalSchema2.omit({ operationId: true }).extend
 var ClaimGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid().optional() }).strict();
 var GetGoalSchema2 = external_exports.object({ goalId: external_exports.string().uuid() }).strict();
 var GET_GOAL_DESCRIPTION2 = "Read the current authorized Goal brief: state, owner, blockers, open decisions, progress, and the next operation. Foreign or sibling-owned Goals are not disclosed.";
-var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. Returns the new revision and a prose summary.";
+var UPDATE_GOAL_DESCRIPTION2 = "Update an owned Goal at an exact revision. State, ownership, dependencies, children, progress, and review acknowledgement are explicit; stale revisions are rejected. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. Returns the new revision and a prose summary.";
 var CLAIM_GOAL_DESCRIPTION2 = "Claim the oldest runnable or review-pending Goal you own, or pass goalId to claim that Goal. Returns a Goal-scoped brief, current revision, blockers, and the next valid operation. Claiming creates or renews the execution lease.";
-var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 each with its durable Entries, accepted decisions and open decision needs, in the same shape a contact read returns. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it with contact({deliveryId}). Your runnable and review-pending Goals come from claim_goal, not from here.";
+var CHECK_REPLIES_DESCRIPTION2 = "Your open Deliveries: every Notification or Call currently addressed to you \u2014 a request the user started toward you, an answer relayed to something you asked, a handoff \u2014 one row each: its Goals, the newest words in brief, accepted decisions and open decision needs, without the Entries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread it in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true closes the Deliveries addressed to you on that Goal. Your runnable and review-pending Goals come from claim_goal, not from here.";
 var CheckRepliesSchema2 = external_exports.object({}).strict();
 var GetThreadSchema2 = external_exports.object({
   parentId: external_exports.string().describe("The Thread to read \u2014 the threadId a Delivery returned, or the parentId of a search hit.")
@@ -15703,67 +15700,6 @@ var AwaitItemSchema2 = external_exports.discriminatedUnion("type", [
     inFlight: external_exports.boolean().optional()
   })
 ]);
-var CallbackTriggerSchema2 = external_exports.enum(["on_done", "on_blocked", "scheduled"]);
-var NotifyResponseSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  workId: external_exports.string().uuid().optional(),
-  decisionId: external_exports.string().uuid().optional(),
-  status: NotifyStatusSchema2,
-  createdAt: external_exports.string().datetime(),
-  answer: UserAnswerSchema2.optional(),
-  answeredAt: external_exports.string().datetime().optional(),
-  /** Ride-alongs for THIS agent — pending work it should pick up when it's done with
-   *  what it came for. Present on any reply, because an unwakeable agent's only
-   *  reliable moment is one it initiated. Absent/empty = nothing owed. */
-  also: external_exports.array(RideAlongSchema2).optional()
-});
-var NotifyPlanUnitSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  /** The unit's own heading, so the agent can tell which of its paragraphs this became. */
-  title: external_exports.string(),
-  /** How loudly this unit was arbitrated to arrive — per unit, which is the point of units. */
-  level: NotifyLevelSchema2,
-  /** Answered from something the user already decided: nobody is interrupted, and a trail card
-   *  says so. The agent should not wait on this one. */
-  settled: external_exports.literal(true).optional(),
-  /** What this unit would need to be answerable and does not carry (#894). A PROPOSAL to the
-   *  agent — nothing here changed the ask, and ignoring it costs nothing. */
-  needs: external_exports.array(external_exports.enum(["options", "visuals"])).optional(),
-  /** The SHAPE the broker would give this unit, for the agent to ratify (#886/#894). The
-   *  split layer reads prose and can see that a paragraph is a yes/no or a pick-one — but a
-   *  broker that DECIDES that destroys the only fact separating a statement from a real ask
-   *  (#731), so it is offered, never applied: the unit is stored `text` until the agent
-   *  confirms the shape (POST /notify/:id/confirm). Ignoring it costs nothing. */
-  proposal: external_exports.object({
-    select: SelectShapeSchema2,
-    options: external_exports.array(external_exports.object({ label: external_exports.string().min(1) })).optional()
-  }).optional(),
-  /** What the broker READ this unit as wanting from the human (#952 layer 2): a `decision`
-   *  between alternatives, an `approval` the agent is blocked on, or `knowledge` it just
-   *  needs to know. Reported so the agent can correct a misread the same way it ratifies a
-   *  shape — the read RAISES (a decision always asks) and never silences a question the
-   *  agent declared (#731, #923). */
-  wants: external_exports.enum(["decision", "approval", "knowledge"]).optional()
-});
-var NotifyPlanSchema2 = external_exports.object({
-  units: external_exports.array(NotifyPlanUnitSchema2),
-  /** Which unit is this arrival's ONE interruption (units-design.md D23). Absent means nobody
-   *  was interrupted — every unit was either settled or quiet enough to sit in the inbox. */
-  speaks: external_exports.string().optional()
-});
-var UserResponseSchema2 = external_exports.object({
-  requestId: external_exports.string(),
-  answer: UserAnswerSchema2,
-  answeredAt: external_exports.string().datetime(),
-  transcript: external_exports.string().optional(),
-  /** E2EE: the sealed answer (opaque envelope + plaintext `ignored` hint) when the item was
-   *  E2EE-sealed. Present → the server persists it opaquely and branches status on `ignored`;
-   *  the plaintext `answer` is a placeholder (`{ kind: "ignored" }`) the server ignores for a
-   *  sealed row. Absent = today's plaintext answer, unchanged. */
-  sealed: external_exports.lazy(() => SealedAnswerSchema2).optional(),
-  /** Coverage report (#396): which of the ask's declared `points` were addressed. */
-  covered: external_exports.array(external_exports.string()).optional()
-});
 var VoiceKeySchema2 = external_exports.enum(["rachel", "george", "jessica", "brian", "lily"]);
 var AgendaTurnSchema2 = external_exports.object({
   /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
@@ -15947,10 +15883,6 @@ var InboxItemSchema2 = external_exports.object({
     goalState: external_exports.string().optional()
   }).optional()
 });
-var SnoozeRequestSchema2 = external_exports.object({
-  requestId: external_exports.string(),
-  until: external_exports.string().datetime()
-});
 var APNS_TOKEN_RE2 = /^[0-9a-fA-F]{64}$/;
 var PushTokenSchema2 = external_exports.object({
   voipToken: external_exports.string().min(1).optional(),
@@ -16106,6 +16038,9 @@ var ConnectionSummarySchema2 = external_exports.object({
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
   runtime: external_exports.object({
+    /** The @paigy/harness this host is running — a machine the self-update has not reached
+     *  shows its age here (`apps/desktop/src/update.ts`). */
+    version: external_exports.string().optional(),
     harnesses: external_exports.array(external_exports.object({ name: external_exports.string(), label: external_exports.string(), status: external_exports.string() })).optional(),
     workspaces: external_exports.array(external_exports.string()).optional()
   }).optional(),
@@ -16168,19 +16103,6 @@ var MoveSchema2 = external_exports.object({
    *  distilled from a clarify ruling (those carry no agent) or one whose source rows are gone. */
   learnedFrom: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable()
 });
-var CreateRequestSchema2 = external_exports.object({
-  /** The connection (token id) to send to, from GET /api/tokens. */
-  tokenId: external_exports.string(),
-  /** The user's message to the agent. */
-  text: external_exports.string().min(1),
-  /** Land the request on an existing conversation thread (History → "Continue")
-   *  instead of minting a fresh one. Must belong to the requesting user. */
-  parentId: external_exports.string().optional(),
-  /** Point the agent at a past conversation (possibly with a different agent) as
-   *  starting context (History → "New session from this"). A reference, not a copy —
-   *  the agent reads it via get_thread. Must belong to the requesting user. */
-  contextParentId: external_exports.string().optional()
-});
 var QueueQuestionSchema2 = external_exports.object({
   /** The decision need's id — what an answer is accepted against. */
   id: external_exports.string(),
@@ -16272,38 +16194,6 @@ var NoteSchema2 = external_exports.object({
   lastRideAt: external_exports.string().nullable().default(null),
   createdAt: external_exports.string()
 });
-var CreateNoteSchema2 = external_exports.object({
-  /** The intent, in the user's own words. Stored verbatim; the broker only titles it. */
-  text: external_exports.string().min(1).max(4e3),
-  /** Capture it as a REMINDER — a note assigned to the user themselves, which rides
-   *  their next call instead of being handed to an agent. Everything else about the
-   *  note is identical; this is the one parameter that separates the two. */
-  forMe: external_exports.boolean().optional(),
-  /** The not-before, when the user already said one. Absent = the very next call. */
-  dueAt: external_exports.string().datetime().optional(),
-  repeat: NoteRepeatSchema2.optional()
-});
-var RecordDecisionSchema2 = external_exports.object({
-  /** An open decision (from /clarify) to answer. */
-  decisionId: external_exports.string().optional(),
-  /** For an ad-hoc decision: what was ambiguous. Required without `decisionId`. */
-  question: external_exports.string().min(1).max(500).optional(),
-  /** The ruling. */
-  answer: external_exports.string().min(1).max(2e3)
-}).refine((d) => d.decisionId || d.question, { message: "decisionId or question required" });
-var AssignNoteSchema2 = external_exports.object({
-  /** An EXISTING agent: token id or nickname. Omit when spawning fresh. */
-  target: external_exports.string().min(1).optional(),
-  /** Spawn a NEW session for this note (companion.md §2.2): the assignee doesn't
-   *  exist yet — mint it on a live desktop that advertises the harness+workspace,
-   *  named after the note. The brief arrives as its opening request. */
-  spawn: external_exports.object({
-    hostTokenId: external_exports.string().uuid(),
-    harness: external_exports.string().min(1),
-    workspace: external_exports.string().min(1)
-  }).optional()
-}).refine((a) => !!a.target !== !!a.spawn, { message: "exactly one of target or spawn" });
-var TriageVerdictSchema2 = external_exports.enum(["keep", "stale", "close", "assign"]);
 var TriageItemSchema2 = external_exports.object({
   noteId: external_exports.string(),
   /** The note's headline at run time. */
@@ -16437,20 +16327,6 @@ var PairingRevealSchema2 = external_exports.object({
   ed25519: external_exports.string(),
   nonce: external_exports.string()
 });
-var DeviceCodeRequestSchema2 = external_exports.object({
-  /** The agent's suggested name for the pairing — the human sees it pre-filled at
-   *  approval and can override. Optional; blank → a default silly name server-side. */
-  suggestedName: external_exports.string().optional(),
-  /** Legacy alias for suggestedName (older MCPs sent `agent`). Accepted for
-   *  back-compat; `suggestedName` wins when both are present. ponytail: drop once no
-   *  pre-`name` MCP is in the wild. */
-  agent: external_exports.union([external_exports.string(), external_exports.object({ name: external_exports.string().optional() })]).optional(),
-  device: external_exports.string().optional(),
-  proto: external_exports.string().optional(),
-  // compiled-in tag, e.g. "paigy-pair-v2|sas=24"
-  commitment: external_exports.string().optional()
-  // agent's Ca
-});
 var DeviceCodeSchema2 = external_exports.object({
   device_code: external_exports.string(),
   user_code: external_exports.string(),
@@ -16484,11 +16360,6 @@ var DeviceInfoSchema2 = external_exports.object({
   phone_reveal: PairingRevealSchema2.nullable().optional(),
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceTokenRequestSchema2 = external_exports.object({
-  device_code: external_exports.string(),
-  reveal: PairingRevealSchema2.optional()
-  // agent's reveal {x25519, ed25519, nonce}
-});
 var DeviceTokenSchema2 = external_exports.object({
   access_token: external_exports.string(),
   /** The pairing's single name (user-typed at approval, the agent's suggestion, or
@@ -16510,14 +16381,6 @@ var DeviceTokenSchema2 = external_exports.object({
   // present once the phone reveals
   uik_pub: external_exports.string().nullable().optional()
 });
-var DeviceCommitRequestSchema2 = external_exports.object({
-  code: external_exports.string(),
-  commitment: external_exports.string()
-  // Cb
-});
-var DevicePeerCommitSchema2 = external_exports.object({
-  commitment: external_exports.string().nullable()
-});
 var SupportRequestSchema2 = external_exports.object({
   email: external_exports.string().email().max(320),
   message: external_exports.string().trim().min(1).max(5e3),
@@ -16537,15 +16400,6 @@ var NotificationFeedbackKindSchema2 = external_exports.enum([
   "other"
   // anything else — the note carries it.
 ]);
-var NotificationFeedbackSchema2 = external_exports.object({
-  notificationId: external_exports.string(),
-  kind: NotificationFeedbackKindSchema2,
-  /** Optional free-text elaboration for a preset; required (non-empty) for 'other'. */
-  note: external_exports.string().trim().max(2e3).optional()
-}).superRefine((r, ctx) => {
-  if (r.kind === "other" && !r.note)
-    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["note"], message: "note is required for 'other' feedback" });
-});
 var FeedbackResolutionSchema2 = external_exports.enum(["broker_fixed", "sent_to_agent"]);
 var FeedbackOutcomeSchema2 = external_exports.object({
   resolution: FeedbackResolutionSchema2,
@@ -16554,146 +16408,6 @@ var FeedbackOutcomeSchema2 = external_exports.object({
   childIds: external_exports.array(external_exports.string()).optional()
 });
 
-// src/main.ts
-var import_qrcode = __toESM(require_lib(), 1);
-import { homedir as homedir7, hostname } from "os";
-
-// src/harness/catalog.ts
-import { spawnSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { delimiter, dirname, join as join2 } from "path";
-var CATALOG = [
-  {
-    name: "claude",
-    label: "Claude Code",
-    cli: "claude",
-    adapter: "claude-agent-acp",
-    authProbe: ["claude", "auth", "status"],
-    loginHint: "Run `claude` once in a terminal and sign in.",
-    installCli: "curl -fsSL https://claude.ai/install.sh | bash",
-    installAdapter: "npm install -g @agentclientprotocol/claude-agent-acp"
-  },
-  {
-    name: "codex",
-    label: "Codex",
-    cli: "codex",
-    adapter: "codex-acp",
-    authProbe: ["codex", "login", "status"],
-    loginHint: "Run `codex login` to authenticate.",
-    installCli: "curl -fsSL https://chatgpt.com/codex/install.sh | sh",
-    installAdapter: "npm install -g @agentclientprotocol/codex-acp"
-  },
-  {
-    name: "agy",
-    label: "Antigravity",
-    cli: "agy",
-    authProbe: ["agy", "help"],
-    loginHint: "Install and set up Antigravity (`agy`).",
-    installCli: "curl -fsSL https://antigravity.dev/install.sh | bash"
-  }
-];
-function probeDirs(home = homedir2()) {
-  return [
-    dirname(process.execPath),
-    join2(home, ".local", "bin"),
-    "/usr/local/bin",
-    "/opt/homebrew/bin",
-    join2(home, ".npm-global", "bin")
-  ];
-}
-function which(bin) {
-  const hit = spawnSync("which", [bin], { encoding: "utf8" });
-  const fromPath = hit.status === 0 ? hit.stdout.trim() : "";
-  if (fromPath) return fromPath;
-  for (const dir of probeDirs()) {
-    const candidate = join2(dir, bin);
-    if (existsSync2(candidate)) return candidate;
-  }
-  return null;
-}
-function runProbe(argv) {
-  const [cmd, ...args] = argv;
-  if (!cmd) return false;
-  const resolved = which(cmd);
-  if (!resolved) return false;
-  return spawnSync(resolved, args, {
-    timeout: 1e4,
-    stdio: "ignore",
-    env: { ...process.env, PATH: [process.env.PATH, ...probeDirs()].filter(Boolean).join(delimiter) }
-  }).status === 0;
-}
-function detect(entry, deps = {}) {
-  const find = deps.which ?? which;
-  const probe = deps.probe ?? runProbe;
-  const base = { name: entry.name, label: entry.label };
-  const cliPath = find(entry.cli);
-  if (!cliPath) return { ...base, status: "missing", hint: `${entry.label} is not installed.`, install: entry.installCli };
-  const adapterPath = entry.adapter ? find(entry.adapter) : null;
-  if (entry.adapter && !adapterPath) {
-    return {
-      ...base,
-      status: "adapter-missing",
-      hint: `${entry.label} is installed, but its ACP adapter (${entry.adapter}) is not.`,
-      ...entry.installAdapter ? { install: entry.installAdapter } : {}
-    };
-  }
-  const bin = adapterPath ?? cliPath;
-  if (!probe(entry.authProbe)) return { ...base, status: "login", bin, hint: entry.loginHint };
-  return { ...base, status: "ready", bin };
-}
-function detectAll(deps = {}) {
-  return CATALOG.map((entry) => detect(entry, deps));
-}
-
-// src/host.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join4 } from "path";
-
-// src/workspaces.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2, join as join3, resolve } from "path";
-import { homedir as homedir3 } from "os";
-function workspacesFile() {
-  return join3(homedir3(), ".paigy", "workspaces.json");
-}
-function listWorkspaces(deps) {
-  try {
-    const parsed = JSON.parse(readFileSync2(deps.file, "utf8"));
-    return Array.isArray(parsed) ? parsed.filter((w) => typeof w === "string") : [];
-  } catch {
-    return [];
-  }
-}
-function addWorkspace(dir, deps) {
-  const next = resolve(dir.replace(/^~(?=$|\/)/, homedir3()));
-  const all = listWorkspaces(deps);
-  if (!all.includes(next)) {
-    all.push(next);
-    mkdirSync2(dirname2(deps.file), { recursive: true });
-    writeFileSync2(deps.file, JSON.stringify(all, null, 2));
-  }
-  return all;
-}
-function removeWorkspace(dir, deps) {
-  const all = listWorkspaces(deps).filter((w) => w !== dir);
-  mkdirSync2(dirname2(deps.file), { recursive: true });
-  writeFileSync2(deps.file, JSON.stringify(all, null, 2));
-  return all;
-}
-function allowed(cwd, deps) {
-  const target = resolve(cwd.replace(/^~(?=$|\/)/, homedir3()));
-  return listWorkspaces(deps).some((w) => target === w || target.startsWith(`${w}/`));
-}
-function resolveWakeDir(pinned, deps) {
-  if (pinned && allowed(pinned, deps)) {
-    const dir = resolve(pinned.replace(/^~(?=$|\/)/, homedir3()));
-    if ((deps.exists ?? existsSync3)(dir)) return dir;
-  }
-  return listWorkspaces(deps)[0];
-}
-
 // src/paigy/activity.ts
 function shortenPaths(s) {
   return s.replace(/(?<![\w.@+-])(?:\/[\w.@+-]+){3,}/g, (p) => {
@@ -17274,8 +16988,67 @@ function runHarness(opts) {
   };
 }
 
+// src/update.ts
+import { execFile } from "child_process";
+import { createRequire } from "module";
+import { dirname as dirname3, join as join4 } from "path";
+import { promisify } from "util";
+var SERVICE_LABEL = "ai.paigy.harness";
+var VERSION = createRequire(import.meta.url)("../package.json").version;
+var REGISTRY = "https://registry.npmjs.org/@paigy/harness/latest";
+var CHECK_MS = 60 * 6e4;
+function newer(latest, current) {
+  const parts = (v) => /^\d+\.\d+\.\d+$/.test(v) ? v.split(".").map(Number) : null;
+  const [a, b] = [parts(latest), parts(current)];
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) if (a[i] !== b[i]) return a[i] > b[i];
+  return false;
+}
+function updateAction(o) {
+  if (!o.service || !o.latest || o.latest === o.failed || !newer(o.latest, o.current)) return "none";
+  return o.sessions > 0 ? "wait" : "install";
+}
+async function latestVersion() {
+  const res = await fetch(REGISTRY, { signal: AbortSignal.timeout(1e4) });
+  return res.ok ? (await res.json()).version ?? null : null;
+}
+async function install(version) {
+  const bin = dirname3(process.execPath);
+  await promisify(execFile)(join4(bin, "npm"), ["install", "-g", `@paigy/harness@${version}`], {
+    env: { ...process.env, PATH: `${bin}:${process.env.PATH ?? ""}`, npm_config_update_notifier: "false" },
+    timeout: 5 * 6e4
+  });
+}
+function selfUpdater(deps) {
+  const service = deps.service ?? process.env.XPC_SERVICE_NAME === SERVICE_LABEL;
+  let latest = null;
+  let checkedAt = -Infinity;
+  let failed;
+  let waiting = false;
+  return async () => {
+    if (!service) return;
+    const now = (deps.now ?? Date.now)();
+    if (now - checkedAt >= CHECK_MS) {
+      checkedAt = now;
+      latest = await (deps.latest ?? latestVersion)().catch(() => latest);
+    }
+    const action = updateAction({ current: VERSION, latest, service, sessions: deps.sessions(), failed });
+    if (action === "wait" && !waiting) deps.log(`\u21E1 @paigy/harness ${latest} is out \u2014 updating once no session is running`);
+    waiting = action === "wait";
+    if (action !== "install" || !latest) return;
+    try {
+      await (deps.install ?? install)(latest);
+      deps.log(`\u21E1 updated @paigy/harness ${VERSION} \u2192 ${latest} \u2014 restarting`);
+      (deps.exit ?? (() => process.exit(0)))();
+    } catch (e) {
+      failed = latest;
+      deps.log(`\u26A0 could not update to @paigy/harness ${latest}: ${e.message.split("\n")[0]} \u2014 run: npm install -g @paigy/harness`);
+    }
+  };
+}
+
 // src/host.ts
-var HOST_FILE = join4(homedir5(), ".paigy", "host.json");
+var HOST_FILE = join5(homedir5(), ".paigy", "host.json");
 function readHostState() {
   try {
     const s = JSON.parse(readFileSync3(HOST_FILE, "utf8"));
@@ -17323,11 +17096,15 @@ function startHost(opts) {
       }
     }
   };
+  const update = selfUpdater({ sessions: () => runs.size, log: opts.log });
   const beat = () => {
     void refreshIdentities();
+    void update().catch(() => {
+    });
     for (const r of runs.values()) if (r.token) void heartbeat(void 0, { token: r.token }).catch(() => {
     });
     void heartbeat({
+      version: VERSION,
       harnesses: detectAll().map((a) => ({ name: a.name, label: a.label, status: a.status })),
       workspaces: listWorkspaces(opts.wsDeps)
     }, asHost).catch(() => {
@@ -18112,7 +17889,7 @@ async function brokerView(deps) {
 }
 
 // src/main.ts
-var here = dirname3(fileURLToPath(import.meta.url));
+var here = dirname4(fileURLToPath(import.meta.url));
 var wsDeps = { file: workspacesFile() };
 var DEVICE_SLOT = "Desktop";
 var deviceToken = () => readToken(DEVICE_SLOT);
@@ -18120,7 +17897,7 @@ var win = null;
 function log(message) {
   win?.webContents.send("paigy:log", message);
 }
-var ICON = join5(here, "..", "assets", "icon.png");
+var ICON = join6(here, "..", "assets", "icon.png");
 function createWindow() {
   win = new BrowserWindow({
     // Sized for the working log, which is now the window's centerpiece; the layout is a
@@ -18132,9 +17909,9 @@ function createWindow() {
     minHeight: 520,
     icon: ICON,
     // Windows/Linux window icon; macOS uses the dock icon below
-    webPreferences: { preload: join5(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
+    webPreferences: { preload: join6(here, "preload.cjs"), contextIsolation: true, nodeIntegration: false }
   });
-  void win.loadFile(join5(here, "..", "renderer", "index.html"));
+  void win.loadFile(join6(here, "..", "renderer", "index.html"));
 }
 var host = null;
 app.whenReady().then(() => {
@@ -18187,13 +17964,6 @@ ipcMain.handle("paigy:beacon", async () => {
   })();
   return { qr, code: code.user_code };
 });
-function waitingLine(d) {
-  for (let i = d.entries.length - 1; i >= 0; i -= 1) {
-    const words2 = entryWords(d.entries[i]).trim();
-    if (words2) return words2.split("\n")[0];
-  }
-  return d.message.split("\n")[0] ?? "";
-}
 ipcMain.handle("paigy:agent", async (_e, name) => {
   const entry = (host?.roster() ?? readHostState()?.roster ?? []).find((a) => a.name === name);
   if (!entry) return null;
@@ -18203,17 +17973,14 @@ ipcMain.handle("paigy:agent", async (_e, name) => {
     ...entry,
     pending: open ? {
       // The same two facts, from the one list: what is waiting, and how much.
-      requests: open.slice(0, 5).map((d) => ({
-        line: waitingLine(d).slice(0, 140),
-        at: d.entries[d.entries.length - 1]?.createdAt ?? ""
-      })),
+      requests: open.slice(0, 5).map((d) => ({ line: (d.about || d.message.split("\n")[0] || "").slice(0, 140) })),
       replies: open.length
     } : null
   };
 });
 ipcMain.handle("paigy:agent-log", (_e, name) => {
   try {
-    const all = readFileSync4(join5(homedir7(), ".paigy", "host.log"), "utf8").split("\n");
+    const all = readFileSync4(join6(homedir7(), ".paigy", "host.log"), "utf8").split("\n");
     const mine = all.filter((l) => l.includes(`[${name}]`) || /[▶✖◉⚠]/.test(l) && l.includes(name));
     return mine.slice(-500).join("\n");
   } catch {