@paigy/mcp 0.40.24 → 0.40.26

package/dist/{chunk-VUKR2E24.js → chunk-7LQKX73K.js}

@@ -1,11 +1,15 @@
 // ../../packages/schema/dist/index.js
-import { z as z5 } from "zod";
+import { z as z7 } from "zod";
 import { z } from "zod";
 import { z as z3 } from "zod";
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { z as z2 } from "zod";
 import { z as z4 } from "zod";
 import { zodToJsonSchema as zodToJsonSchema2 } from "zod-to-json-schema";
+import { z as z5 } from "zod";
+import { zodToJsonSchema as zodToJsonSchema3 } from "zod-to-json-schema";
+import { z as z6 } from "zod";
+import { zodToJsonSchema as zodToJsonSchema4 } from "zod-to-json-schema";
 var OPTIONS_MIN = 2;
 var OPTIONS_MAX = 6;
 var OptionSchema = z.object({
@@ -15,14 +19,20 @@ var OptionSchema = z.object({
   // .describe() flows into the MCP contact JSON schema (zodToJsonSchema), so
   // the constraints below are what an agent reads when deciding to use these.
   html: z.string().max(16384).describe(
-    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."
+    "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Rendered edge-to-edge in a responsive card that is 200pt tall (about 320pt wide on a phone, with the next option peeking beside it); make your HTML fit that viewport. Use for layout/CSS mockups, tables, diffs. For a hosted image use the image URL instead."
   ).optional(),
   image: z.string().url().describe(
-    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use `html` instead."
+    "Optional image URL rendered as the option's preview (plain image, not sandboxed). For agent-generated HTML/CSS mockups, use the HTML preview instead."
   ).optional()
 });
-var OptionInputSchema = OptionSchema.omit({ id: true }).extend({
-  label: z.string().trim().min(1).max(1e3)
+var OptionInputSchema = z.object({
+  id: z.string().trim().min(1).max(64).regex(/^[A-Za-z0-9_.:-]+$/).optional().describe(
+    `Optional: this option's own id, which answers name it by (selectedOptionIds). Give every option one, or none: without them the options are numbered "1", "2", \u2026 in order.`
+  ),
+  label: z.string().trim().min(1).max(1e3),
+  hint: OptionSchema.shape.hint,
+  htmlPreview: OptionSchema.shape.html,
+  imgUrl: OptionSchema.shape.image
 }).strict();
 var NIGHT = { from: 23, to: 7 };
 function draft2020(node) {
@@ -54,33 +64,162 @@ function mcpInputSchema(s) {
   delete schema.$schema;
   return draft2020(schema);
 }
-var AskInputSchema = z2.object({
-  id: z2.string().optional().describe("Optional idempotency key or client-side ID for this specific ask."),
-  parentId: z2.string().uuid().optional().describe("The Goal this question is about \u2014 usually the one you are working on. The question goes onto that Goal and its answer comes back there. Omit it and the question starts a new Goal of yours."),
-  repo: z2.string().optional().describe("Optional repository context."),
-  ask: z2.string().trim().min(1).max(1e4).describe(
-    "ONE question, and only what is needed to answer it. Several questions are several asks in the array, one each: an answer settles the one ask it was given in the shape that ask declares, so a person who answers the part of a bundled ask that interested them settles nothing and is asked again. Paigy sends each ask exactly as you wrote it: a bundled ask arrives as one card. News, progress and findings are their own contact; ANY contact for a person already on a call JOINS that call, whatever channel you asked for, so several arrive as one call."
+var ASK_MAX = 250;
+var UNITS_MAX = 12;
+var UNIT_TITLE_MAX = 50;
+var UNIT_BODY_MAX = 200;
+var UnitInputSchema = z2.object({
+  title: z2.string().trim().min(1).describe(`What this unit is about, at most ${UNIT_TITLE_MAX} characters. The app lists the titles; the person taps one to read its body.`),
+  body: z2.string().trim().min(1).describe(`The unit itself, at most ${UNIT_BODY_MAX} characters.`)
+}).strict();
+function capRefusals(text, units2, field) {
+  const out = [];
+  const name = field === "text" ? "answer" : field;
+  if (text.length > ASK_MAX) out.push({
+    refusal: "ask_too_long",
+    length: text.length,
+    cap: ASK_MAX,
+    path: field === "text" ? ["answer", "text"] : [field],
+    message: `ask_too_long: the ${name} is ${text.length} characters; the cap is ${ASK_MAX}. Keep the one point in the ${name} and move the context into units.`
+  });
+  const all = units2 ?? [];
+  if (all.length > UNITS_MAX) out.push({
+    refusal: "too_many_units",
+    length: all.length,
+    cap: UNITS_MAX,
+    path: ["units"],
+    message: `too_many_units: ${all.length} units; the cap is ${UNITS_MAX}. Keep only the context this ${name} needs.`
+  });
+  all.forEach((unit, index) => {
+    if (unit.title.length > UNIT_TITLE_MAX) out.push({
+      refusal: "unit_title_too_long",
+      index,
+      length: unit.title.length,
+      cap: UNIT_TITLE_MAX,
+      path: ["units", index, "title"],
+      message: `unit_title_too_long: units[${index}]'s title is ${unit.title.length} characters; the cap is ${UNIT_TITLE_MAX}.`
+    });
+    if (unit.body.length > UNIT_BODY_MAX) out.push({
+      refusal: "unit_body_too_long",
+      index,
+      length: unit.body.length,
+      cap: UNIT_BODY_MAX,
+      path: ["units", index, "body"],
+      message: `unit_body_too_long: units[${index}]'s body is ${unit.body.length} characters; the cap is ${UNIT_BODY_MAX}. Cut it into two units.`
+    });
+  });
+  return out;
+}
+function refuseOverCaps(text, units2, field, ctx) {
+  for (const { path, message, ...params } of capRefusals(text, units2, field)) ctx.addIssue({ code: z2.ZodIssueCode.custom, path, message, params });
+}
+var questionHandle = z2.string().trim().regex(/^[0-9a-fA-F-]{8,36}$/, "a question id, whole or its first eight characters");
+var NodeRef = z2.object({
+  type: z2.enum(["goal", "question"]),
+  id: z2.string().uuid()
+}).strict().describe("A Goal or a Question, by its id.");
+var BlockedAction = z2.enum(["start", "complete", "answer"]).describe("What waits: starting or completing a Goal, or answering a Question.");
+var reason = z2.string().trim().min(1).max(500).describe("Why, as an explanation, never as policy.");
+var actionFits = (b) => b.blocked.type === "goal" === (b.action !== "answer");
+var ACTION_FITS = "a goal is blocked from start or complete; a question from answer";
+var userExplicitlyRequested = z2.enum(["any", "call"]).optional().describe(
+  `Only what the person said about THIS message, in so many words: "any" when they asked you to send it to them ("send it to my phone", "message me the result"), "call" when they asked to be called about it. It is then delivered (a call rings for the whole contact, and carries everything waiting on them); omitted, an update is only recorded as the Goal's progress unless the person needs it. Never set it to make a message louder.`
+);
+var units = z2.array(UnitInputSchema).optional().describe(
+  `The context this message needs, as up to ${UNITS_MAX} units in reading order, each {title, body}: a title of at most ${UNIT_TITLE_MAX} characters and a body of at most ${UNIT_BODY_MAX}. One idea per unit. Leave it out when the main text says it all.`
+);
+var UpdateInputSchema = z2.object({
+  message: z2.string().trim().min(1).describe(`The one point, at most ${ASK_MAX} characters; the context goes in units.`),
+  goalIds: z2.array(z2.string().uuid()).min(1).max(10).describe("The Goals it is about, each one that exists: the one it is mainly about first."),
+  units,
+  userExplicitlyRequested
+}).strict().superRefine((u, ctx) => refuseOverCaps(u.message, u.units, "message", ctx));
+var questionFields = {
+  question: z2.string().trim().min(1).describe(
+    `ONE question, in at most ${ASK_MAX} characters, and only what is needed to answer it; the context goes in units. Several questions are several objects, one each: an answer settles the one question it was given, so a person who answers the part of a bundled question that interested them settles nothing and is asked again. Separate questions cost nothing: ANY contact for a person already on a call JOINS that call, so several arrive as one call.`
   ),
-  options: z2.array(OptionInputSchema).min(1).max(6).optional(),
+  goalId: z2.string().uuid().describe("The Goal the question is about, which must exist (create it with manage_goals first). Its answer comes back there."),
+  units,
+  options: z2.array(OptionInputSchema).min(1).max(6).optional().describe("The choices, when you have them. Each label stands on its own."),
   // HOW THE OPTIONS ARE ANSWERED, SAID BY THE AGENT (owner, 2026-10-02: "one and many makes sense";
-  // brain_prompts.md §1: structured agent questions need no model). Every card was pick-one while no
-  // agent sent this; no read reshapes cards any more, so this is the card's shape, and the
-  // description says so plainly.
-  select: z2.enum(["one", "many"]).optional().describe(
-    'How the options are answered: "many" makes a checklist (they may want several, e.g. independent fixes), "one" (the default) a pick (choosing one rules out the others). Send "many" whenever more than one option could be wanted at once. The person can always answer in their own words as well. Ignored without options.'
+  // brain_prompts.md §1: structured agent questions need no model). The app draws all three.
+  pickMode: z2.enum(["one", "many", "rank"]).optional().describe(
+    'How the options are answered: "one" (the default) a pick, for alternatives; "many" a checklist, for independent options they may want several of; "rank" an order of all of them. Only with options.'
+  ),
+  // WHAT THE QUESTION HOLDS UP (brain_prompts.md §2.1): replaces `waiting: 'hard'`. A question that
+  // blocks work asks for a call (the person's settings and ring cooldowns still decide).
+  workItBlocks: z2.array(z2.object({ blocked: NodeRef, action: BlockedAction, reason: reason.optional() }).strict().refine(actionFits, ACTION_FITS)).min(1).max(10).optional().describe(
+    "The work that cannot go on until this is answered: a Goal's start or completion, or another Question's answer. Only for work truly blocked; it asks for a call. Leave it out for a question you can keep working around."
   ),
-  answers: z2.string().trim().regex(/^[0-9a-fA-F-]{8,36}$/).optional().describe(
-    "Your reply answers a question the person asked you: the id the conversation shows for it (8 characters or whole). Their question closes with this reply as its answer, and any decision of yours it was holding back goes back to them. parentId is optional here: the question's own Goal is used. The reply is sent to them as it is; to also ask something new, send that as its own ask."
+  userExplicitlyRequested
+};
+var refineQuestion = (q, ctx) => {
+  refuseOverCaps(q.question, q.units, "question", ctx);
+  if (q.pickMode && !q.options) ctx.addIssue({ code: z2.ZodIssueCode.custom, path: ["pickMode"], message: "pickMode comes only with options" });
+  const ids = (q.options ?? []).map((o) => o.id);
+  if (ids.some((id2) => id2) && (ids.some((id2) => !id2) || new Set(ids).size !== ids.length)) {
+    ctx.addIssue({ code: z2.ZodIssueCode.custom, path: ["options"], message: "give every option a distinct id, or none" });
+  }
+};
+var QuestionInputSchema = z2.object({
+  questionId: z2.string().uuid().optional().describe("Optional: your own stable id for this question (a UUID), so a resend is the same question. Minted for you when omitted; the result returns it."),
+  ...questionFields
+}).strict().superRefine(refineQuestion);
+var QuestionWireSchema = z2.object({ questionId: z2.string().uuid(), ...questionFields }).strict().superRefine(refineQuestion);
+var AnswerInputSchema = z2.object({
+  questionId: questionHandle.describe("The Question you answer: its id as the event or the conversation shows it (8 characters or whole)."),
+  answer: z2.object({
+    text: z2.string().trim().min(1).describe(`Your answer in your own words, at most ${ASK_MAX} characters; the context goes in units.`),
+    selectedOptionIds: z2.array(z2.string().trim().min(1)).min(1).max(6).optional().describe("The ids of the options you choose, when the Question offered options (in order, for a ranking).")
+  }).strict(),
+  units
+}).strict().superRefine((a, ctx) => refuseOverCaps(a.answer.text, a.units, "text", ctx));
+var QuestionDependencySchema = z2.object({
+  questionId: questionHandle.describe("A Question you asked."),
+  change: z2.enum(["add", "remove"]),
+  blocked: NodeRef,
+  action: BlockedAction,
+  reason: reason.optional()
+}).strict().refine(actionFits, ACTION_FITS);
+var sendFields = {
+  updates: z2.array(UpdateInputSchema).min(1).max(20).optional().describe(
+    "News: progress, findings, a result. An update asks nothing. It reaches the person only when they asked for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; otherwise it is recorded as the Goal's progress and nobody is notified."
+  ),
+  answers: z2.array(AnswerInputSchema).min(1).max(20).optional().describe("Answers to Questions addressed to you."),
+  withdrawQuestionIds: z2.array(questionHandle).min(1).max(10).optional().describe(
+    "Questions you asked that no longer need an answer: you acted on them yourself, they no longer matter, or you asked wrongly. Each is cancelled, not answered: its card closes and nothing rings for it."
+  ),
+  questionDependencies: z2.array(QuestionDependencySchema).min(1).max(20).optional().describe(
+    "Add or remove what a Question you asked holds up, after asking it."
+  )
+};
+var ContactSchema = z2.object({
+  ...sendFields,
+  questions: z2.array(QuestionInputSchema).min(1).max(20).optional().describe("Questions for the person, one per object."),
+  /** RECEIVING (2I, I2; brain_prompts.md §2.2): the events this agent handled. */
+  ackEventIds: z2.array(z2.string().uuid()).min(1).max(100).optional().describe(
+    "The exact eventIds of the events you have handled: an acknowledgment (ACK). Reading alone acknowledges nothing, so an event comes back until you acknowledge it; after that the next batch can come. Each recipient acknowledges separately, for itself only. A Question you owe is answered (answers), never acknowledged away."
+  ),
+  wait: z2.boolean().optional().describe(
+    "Only controls when this returns. Sending: false (the default) returns at once; true waits up to about 45 seconds for a response to what you sent. Sending nothing: true (the default) waits up to about 45 seconds for anything addressed to you; false returns what is waiting now. It does not mean work is blocked, set urgency, or ask for a call. `waitOutcome` says which happened: `available`, `expired` (nothing arrived; wait again without sending again), or `not_waited`."
   )
 }).strict();
-var StartContactSchema = z2.object({
-  asks: z2.array(AskInputSchema).min(1).describe("The questions to pose, one per object. An ask with a parentId is filed on that Goal as it is; an ask naming no Goal starts a new Goal of yours."),
-  waiting: z2.enum(["none", "hard"]).default("none").describe("hard requests a call even when channel is notification; user permissions and ring cooldowns still apply."),
-  channel: z2.enum(["notification", "call"]).default("notification")
-}).strict();
-var ContactSchema = z2.union([StartContactSchema, z2.object({ deliveryId: z2.string().uuid() }).strict()]);
+var sendsAnything = (c) => !!(c.updates?.length || c.questions?.length || c.answers?.length || c.withdrawQuestionIds?.length || c.questionDependencies?.length);
+var ContactWireSchema = z2.object({
+  operationId: z2.string().uuid(),
+  ...sendFields,
+  questions: z2.array(QuestionWireSchema).min(1).max(20).optional()
+}).strict().refine(sendsAnything, "a contact sends at least one update, question, answer, withdrawal or question dependency");
 var CONTACT_SCHEMA = { type: "object", ...mcpInputSchema(ContactSchema) };
-var CONTACT_DESCRIPTION = "Contact the user with one or more asks/questions. Pass an array of asks (each with 'ask', optional 'options', 'select', 'id', 'parentId', 'repo'), plus channel:'notification'|'call', and waiting:'none'|'hard'. An ask that names a Goal (parentId) goes onto that Goal; one that names none starts a new Goal of yours. Notification returns immediately; collect durable answers with check_replies. On stdio, a Call holds one cancellable ~45s window; continue with ONLY {deliveryId}. One question per 'ask'; several questions are several objects in 'asks'. Each ask is sent exactly as written, with no reading in between: a bundled ask arrives as one card, so separate questions are separate asks. An ask with no options that is not blocking is a report, and a report is an UPDATE, never a claim on them: it reaches them and is listed apart from what waits on them, so no answer is owed and none should be awaited. On a Goal whose report card is still open it is added to that card, with no new push; Where your work stands while under way is progress: report it with update_goal, not contact. Send options (or waiting:'hard') when you actually need an answer. Each option's label must stand on its own \u2014 the person may see only the labels \u2014 so never a label that points into your text ('All three', 'Option 2', '1 and 3 only'). select:'many' makes the card a checklist, for independent options they may want several of; select:'one' (the default) a pick, for alternatives. The person can always answer in their own words, so never add an 'Other' option. If the person is already on a call, your contact joins that call automatically \u2014 whatever channel you asked for, with no ring \u2014 and the Delivery it returns IS that call: reread it with contact({deliveryId}) to see everything answered on it so far, and contact again while it is live to add information or a further question to the same call.";
+var CONTACT_DESCRIPTION = `Send to and receive from the person: updates, questions, answers to questions addressed to you, withdrawals of your own questions, and what a question holds up. Every Goal you name must already exist: create it with manage_goals first; an unknown Goal is refused and nothing is sent. Every item applies on its own: read \`results\`, where a failed item names why while the rest still apply.
+
+QUESTIONS: one question per object; several questions are several objects in one contact, so each can be answered on its own. Each is sent exactly as written, with no reading in between: a bundled question arrives as one card. Give options when you have them. Each option's label must stand on its own \u2014 the person may see only the labels \u2014 so never a label that points into your text ('All three', 'Option 2', '1 and 3 only'). pickMode:'one' (the default) makes a pick, for alternatives; 'many' a checklist, for independent options they may want several of; 'rank' an ordering. The person can always answer in their own words, so never add an 'Other' option. workItBlocks names the work a question holds up, only when you are truly blocked: it asks for a call. Answers land on the question's Goal: collect them by receiving (below) or with get_goal.
+
+CUT A LONG MESSAGE BEFORE YOU SEND IT: a question, an update's message or an answer is the one point, in at most ${ASK_MAX} characters; everything else it needs goes in 'units', up to ${UNITS_MAX} {title, body} in reading order, one idea each, every title at most ${UNIT_TITLE_MAX} characters and every body at most ${UNIT_BODY_MAX}. The person sees the main text and the titles, and opens a unit to read its body. Over a cap is refused by name (ask_too_long, too_many_units, unit_title_too_long, unit_body_too_long) and nothing is sent.
+
+UPDATES ask nothing, so no answer is owed and none should be awaited. An update reaches the person only when they asked you for it (userExplicitlyRequested), when it answers something they said, or once its Goal is done; any other is recorded as the Goal's progress and nobody is notified. So when the work is finished, mark the Goal done first (manage_goals), then send one update saying what is done and anything they need to do or check. On a Goal whose report card is still open, an update that reaches them is added to that card, with no new push. If the person is already on a call, anything that reaches them joins that call, with no ring.
+
+RECEIVING: a contact that sends nothing returns \`events\`, a limited batch of what is addressed to you (not a history page): \`question\`, a Question you owe (answer it in answers, with its questionId); \`update\`, something new on one of your Goals (a reply, an answer: read it with get_goal); \`instruction\`, a request or note sent to you. \`hasMore\` says more are waiting. Reading acknowledges nothing: once you have handled events, confirm their eventIds with contact({ackEventIds}), and the next batch can come. contact({}) waits up to about 45 seconds for something to arrive; contact({wait:false}) returns at once. It also lists work given to you that nobody has started (\`assigned\`; claim_goal starts it) and your work gone quiet (\`stalled\`).`;
 var CreateGoalSchema = z3.object({
   outcome: z3.string().trim().min(1).max(1e4),
   /** The work's NAME (#2115) — one to five words, how a person refers to it out loud ("the night
@@ -100,10 +239,6 @@ var CreateGoalSchema = z3.object({
    *  repo name. Delegated work inherits this from its parent Goal when omitted. */
   repo: z3.string().trim().min(1).max(200).optional()
 });
-var CreateGoalToolSchema = CreateGoalSchema.extend({
-  idempotencyKey: CreateGoalSchema.shape.idempotencyKey.optional().describe("Optional. One is minted per call; pass your own only so a retry lands on the same Goal.")
-}).strict();
-var CREATE_GOAL_DESCRIPTION = 'Create a durable Goal for an outcome. Without parentGoalId it is placed against your open Goals: if one already IS this work, that Goal comes back (existing: true) and nothing new is created \u2014 continue it; if the work belongs under one, it is created there (parentGoalId in the receipt); otherwise it is a root. Pass parentGoalId yourself to put it under a specific Goal. Pass repo to anchor the work to a specific repository ("owner/repo" or repo name); delegated children inherit it. Pass title to name it in one to five words, as a person would refer to it out loud ("the night rings") \u2014 it heads every list and is spoken on a call; without one the brain writes it. Admission only: claim it before doing work, then update it as it advances. Returns an admission receipt with goalId, current state, revision, ownerParticipant, and the next step; no Goal content or execution lease.';
 var UpdateGoalSchema = z3.object({
   revision: z3.number().int().positive(),
   changes: z3.object({
@@ -118,16 +253,64 @@ var UpdateGoalSchema = z3.object({
     state: z3.enum(["active", "done", "cancelled"]).optional(),
     progress: z3.string().trim().min(1).max(1e4).optional(),
     reviewed: z3.literal(true).optional(),
-    dueAt: z3.string().datetime({ offset: true }).nullable().optional(),
-    /** WITHDRAW YOUR OWN QUESTION (#2777, owner 2026-09-30). The question's id as every read shows it
-     *  (the conversation's `id`, eight characters, or the whole request Entry id), on THIS Goal, asked
-     *  by you and still open. It is cancelled, not answered: its cards close and nothing rings for it. */
-    withdraw: z3.array(z3.string().trim().regex(/^[0-9a-fA-F-]{8,36}$/)).min(1).max(10).optional()
+    dueAt: z3.string().datetime({ offset: true }).nullable().optional()
   }).strict().refine((v) => Object.keys(v).length > 0),
   reason: z3.string().trim().min(1).max(2e3),
   operationId: z3.string().uuid().optional()
 }).strict();
-var UpdateGoalToolSchema = UpdateGoalSchema.omit({ operationId: true }).extend({ goalId: z3.string().uuid() }).strict();
+var changedGoal = z3.string().uuid().describe("The Goal to change, as a read shows it.");
+var goalTitle = z3.string().trim().min(1).max(80).describe("The Goal's short display name: one to five words, how a person refers to it out loud.");
+var goalOutcome = z3.string().trim().min(1).max(1e4).describe("The full desired result. There is no third description field.");
+var CreateChange = z3.object({
+  kind: z3.literal("create"),
+  title: goalTitle,
+  outcome: goalOutcome,
+  ownerId: z3.string().trim().min(1).optional().describe("Who owns the work: an agent's participant (as who_is_working shows it) or the person's. Omitted: you."),
+  parentGoalId: z3.string().uuid().optional().describe("The Goal it belongs under. Omitted: a root."),
+  sourceEntryIds: z3.array(z3.string().uuid()).max(20).optional().describe("The whole Entries the work came from, ones you can read.")
+}).strict();
+var EditChange = z3.object({ kind: z3.literal("edit"), goalId: changedGoal, title: goalTitle.optional(), outcome: goalOutcome.optional() }).strict();
+var StateChange = z3.object({ kind: z3.literal("state"), goalId: changedGoal, state: z3.enum(["open", "completed", "canceled"]).describe(
+  "completed: the Goal's own work is done now (refused while required children are open); open: reopen it; canceled: it will not be done."
+) }).strict();
+var AssignChange = z3.object({ kind: z3.literal("assign"), goalId: changedGoal, ownerId: z3.string().trim().min(1).describe("The new owner's participant.") }).strict();
+var DeferChange = z3.object({ kind: z3.literal("defer"), goalId: changedGoal, until: z3.string().datetime({ offset: true }).nullable().describe(
+  "Postpone it until this instant: it waits until then, and its owner is woken when it passes (a promise to follow up later). null takes the postponement back."
+) }).strict();
+var MoveChange = z3.object({ kind: z3.literal("move"), goalId: changedGoal, parentGoalId: z3.string().uuid().nullable().describe(
+  "Its new parent, or null for a root. Only this Goal moves; its new parent's other children stay."
+) }).strict();
+var DependencyChange = z3.object({
+  kind: z3.literal("dependency"),
+  change: z3.enum(["add", "remove"]),
+  goalId: changedGoal,
+  dependsOnGoalId: z3.string().uuid().describe("The Goal it waits on."),
+  action: z3.enum(["start", "complete"]).describe("What waits: starting goalId, or completing it."),
+  reason: z3.string().trim().min(1).max(2e3).optional().describe("Why, as an explanation, never as policy.")
+}).strict();
+var read = { revision: z3.number().int().positive().optional() };
+var GoalChangeSchema = z3.discriminatedUnion("kind", [
+  CreateChange,
+  EditChange.extend(read),
+  StateChange.extend(read),
+  AssignChange.extend(read),
+  DeferChange.extend(read),
+  MoveChange.extend(read),
+  DependencyChange
+]);
+var editNames = (changes, ctx) => changes.forEach((c, i) => {
+  if (c.kind === "edit" && c.title === void 0 && c.outcome === void 0) {
+    ctx.addIssue({ code: z3.ZodIssueCode.custom, path: ["changes", i], message: "an edit supplies title, outcome, or both" });
+  }
+});
+var ManageGoalsSchema = z3.object({
+  requestId: z3.string().uuid().optional(),
+  changes: z3.array(GoalChangeSchema).min(1).max(50)
+}).strict().superRefine((v, ctx) => editNames(v.changes, ctx));
+var ManageGoalsToolSchema = z3.object({
+  changes: z3.array(z3.discriminatedUnion("kind", [CreateChange, EditChange, StateChange, AssignChange, DeferChange, MoveChange, DependencyChange])).min(1).max(50).describe("The changes, applied in order, each on its own.")
+}).strict().superRefine((v, ctx) => editNames(v.changes, ctx));
+var MANAGE_GOALS_DESCRIPTION = "Create, edit, assign, organize or close work. Every change here changes Goals; answering, withdrawing or asking Questions stays in contact. Each change applies independently: a refused one names why (`results[i].error`, e.g. goal_revision_conflict, goal_children_open, goal_not_joined, goal_not_found) and the rest still apply, so read every result: a partial result is never a complete success. Kinds: create (title, outcome, ownerId, parentGoalId, sourceEntryIds) returns the new Goal's id in `results[i].goalId`, in the order requested, to use in later calls; edit (title and/or outcome); state (open, completed, canceled); assign (ownerId); defer (until: the Goal waits until then and its owner is woken when it passes; null takes it back); move (parentGoalId, or null for a root: only this Goal moves); dependency (add or remove: goalId waits on dependsOnGoalId to start or to complete). A Goal cannot be completed while its required children or dependencies remain open: finish or move them first. Finishing the children does not prove the parent's own work is done. An edit applies at the version you last read: if someone changed the Goal since, it is refused as goal_revision_conflict, so read it again (get_goal) and reconsider. You may change a Goal you own or have written on. Returns `ok` (every change applied), `results` per change (applied or failed), and `goals`, each changed Goal's id, state, title, outcome and revision.";
 var ClaimGoalSchema = z3.object({ goalId: z3.string().uuid().optional() }).strict();
 var GetGoalSchema = z3.object({
   goalId: z3.string().uuid(),
@@ -140,32 +323,44 @@ var GetGoalSchema = z3.object({
   diagnose: z3.boolean().optional()
 }).strict();
 var GET_GOAL_DESCRIPTION = "Read one Goal without claiming it, including others (the ten most recent other contributors, with names, latest entry headlines and times): its outcome, state, revision, progress, blockers, the conversation on it (each question with its options and what was decided), `next`, the one step to take, and `more`, where to read further. A question in that conversation reads `open` (nothing yet), `answered` (a choice was made, and `answer` carries it), `replied` (they said something and the read settled the question on their words \u2014 NO option of yours was chosen, and the words are the reply line beside it, so read that before you act), or `closed`. The conversation carries everything the person said, every open question and your newest entry; your older entries are left out and counted \u2014 history: true reads every entry in full. Every Goal of your person is readable, whichever of their agents owns it; another account's Goals are not disclosed.\n\ndiagnose: true is for when a read has CONFUSED you \u2014 not for the working loop. It adds `diagnosis`, which asks every reader that already answers a question about your work and NAMES the reader behind every value, so you never guess which of two places to look: what state your work is really in (the stored `goals.state` beside the derived `goal_execution_state`, which can differ); whether anything is armed to ring and when (`ladder_candidates`, with the ladder's own last decision); whether a wake fired for you and what it did (durable `wake.*` events, beside when your process was last heard from); and what has reached you (`list_waiting` \u2014 review flags, unstarted work, open questions, the person's newest words). Read `diagnosis.disagreements` FIRST: each one is two readers giving different values for the same fact, with both values and both sources, and it never chooses between them \u2014 that is yours to do, from the Goal's own history. `diagnosis.looked` names every reader asked, including any that could not answer, so an empty answer is never confused with a broken one.";
-var UPDATE_GOAL_DESCRIPTION = `Update a Goal you are on at an exact revision. You are on a Goal you own, or one you have written on (an update with progress, or a contact on it); any of your person's agents may write on any of their Goals, and one that never touched a Goal is refused (409 goal_not_joined). State, ownership, dependencies, children, progress, title, and review acknowledgement are explicit; stale revisions are rejected. A CONTACT ON THIS GOAL MOVES ITS REVISION: a question filed on a Goal is a change to it, so an update prepared before a contact and sent after it is refused as stale (409 goal_revision_conflict) \u2014 re-read the Goal, then write. title is the work's name in one to five words, as a person would refer to it out loud (it is spoken on a call and heads every list); null clears it. reviewed: true acknowledges new evidence and closes the Deliveries addressed to you on that Goal, never over an open decision. dueAt (an ISO instant, or null) makes the Goal wait until then; when it passes you are woken for it \u2014 use it for a promise to follow up later. withdraw: [questionId] takes back a question YOU asked on this Goal that is still open \u2014 because you acted on it yourself, it no longer matters, or you asked it wrongly (e.g. waiting: hard when nothing was blocked): it is cancelled, not answered, its card closes and it stops ringing; the id is the one the conversation shows. state: done means the work was accomplished, and it can be reopened: when the person says it is not done ("it's not working"), set state: active on that same Goal instead of starting a new one; its parent reopens with it. state: done while children are still open records your part as done: the Goal waits and closes by itself when its last open child closes. cancelled is final. Returns the Goal as get_goal reads it, at its new revision.`;
-var CLAIM_GOAL_DESCRIPTION = "Claim a pending answer to your question or the oldest runnable or review-pending Goal you own. Pass goalId to join any Goal of your person; its assignment stays unchanged. Read others before overlapping another agent\u2019s work. Joining lets you contribute and change its state; use update_goal with ownerParticipant when the assignment itself should change. Returns the Goal as get_goal reads it, and marks you as on it, which never shuts another agent out: other agents of your person may write on it and change it too, and two changes at once are told apart by revision (409 goal_revision_conflict).";
-var CHECK_REPLIES_DESCRIPTION = "What is waiting for you: your open Deliveries (a request the user started toward you, a handoff), one row each with its Goals, how many decisions are still open, and the newest words in brief; `assigned`, your Goals nobody has started yet, however they became yours (claim_goal({goalId}) starts one); and `review`, your Goals with something new on them \u2014 the user's answers and notes are Entries on the Goal, not Deliveries. A pure read with no arguments: nothing is consumed, acknowledged or claimed by reading it, so call it on startup, after a long wait, or whenever you want to know what is outstanding. To act on one, claim its Goal (claim_goal) or reread a Delivery in full with contact({deliveryId}). Once you have acted on what arrived, update_goal with reviewed: true clears the Goal from `review` and closes the Deliveries addressed to you on it.";
-var CheckRepliesSchema = z3.object({}).strict();
+var CLAIM_GOAL_DESCRIPTION = "Claim a pending answer to your question or the oldest runnable or review-pending Goal you own. Pass goalId to join any Goal of your person; its assignment stays unchanged. Read others before overlapping another agent\u2019s work. Joining lets you contribute and change it; use manage_goals (assign) when the assignment itself should change. Returns the Goal as get_goal reads it, and marks you as on it, which never shuts another agent out: other agents of your person may write on it and change it too, and two changes at once are told apart by revision (409 goal_revision_conflict).";
+var SearchToolSchema = z3.object({
+  query: z3.string().trim().min(1).max(500),
+  types: z3.array(z3.enum(["entry", "goal", "answer"])).min(1).optional(),
+  goalId: z3.string().uuid().optional(),
+  limit: z3.number().int().min(1).max(20).optional()
+}).strict();
+var SEARCH_DESCRIPTION = "Search your person's history across all of their agents: Entries (what anyone said or wrote, typed or spoken on a call), Goals (by title and outcome) and Answers (found by their Question or by the words that gave them). query is words to look for; records sharing more of its words rank first, and exact names work. types narrows it to entry, goal and/or answer (default: all three). goalId searches under one Goal: its Entries, its Questions' Answers, and it and its immediate children. limit is matches per type, 1 to 20 (default 8). Read-only. Each match carries its whole saved words, its ID and its links (an Answer carries its Question, the choice made and the Entries that support it); `omitted` counts what matched but was left out, so narrow the words or add a goalId to see it. Nothing found is not proof that nothing exists; a refused search says why. Sealed (encrypted) content is never searched or returned.";
+var WhoIsWorkingSchema = z3.object({}).strict();
+var FEEDBACK_TEXT_MAX = 5e4;
+var SendFeedbackSchema = z3.object({
+  text: z3.string().trim().min(1).max(FEEDBACK_TEXT_MAX).describe(`The report, in markdown: what happened, what was expected, how to reproduce it, versions, evidence. At most ${FEEDBACK_TEXT_MAX} characters.`),
+  title: z3.string().trim().min(1).max(200).optional().describe("One line naming it."),
+  kind: z3.enum(["bug", "idea", "other"]).default("other").describe("bug: something Paigy does wrong. idea: something it should do. other: anything else.")
+}).strict();
+var SEND_FEEDBACK_DESCRIPTION = "Send feedback about Paigy itself (a bug report, an idea) straight to the Paigy team. Send it only when the person asked you to, or agreed when you offered: it goes to Paigy, never to the person, and nobody answers it here. Not for your work or a question for the person: use contact for those. Returns whether it was stored.";
 var AGENT_TOOLS = [
-  { name: "who_is_working", description: "Read your person's agents that contributed in the last 24 hours, newest first: at most 30 agents and their five most recently touched Goals, with their latest entry headline and time. Use get_goal to read a Goal and its other contributors before starting overlapping work. Read-only; no arguments.", inputSchema: mcpInputSchema(CheckRepliesSchema) },
+  { name: "who_is_working", description: "Read your person's agents that contributed in the last 24 hours, newest first: at most 30 agents and their five most recently touched Goals, with their latest entry headline and time. Use get_goal to read a Goal and its other contributors before starting overlapping work. Read-only; no arguments.", inputSchema: mcpInputSchema(WhoIsWorkingSchema) },
   { name: "contact", description: CONTACT_DESCRIPTION, inputSchema: CONTACT_SCHEMA },
-  { name: "check_replies", description: CHECK_REPLIES_DESCRIPTION, inputSchema: mcpInputSchema(CheckRepliesSchema) },
-  { name: "create_goal", description: CREATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(CreateGoalToolSchema) },
+  { name: "manage_goals", description: MANAGE_GOALS_DESCRIPTION, inputSchema: mcpInputSchema(ManageGoalsToolSchema) },
   { name: "claim_goal", description: CLAIM_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(ClaimGoalSchema) },
   { name: "get_goal", description: GET_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(GetGoalSchema) },
-  { name: "update_goal", description: UPDATE_GOAL_DESCRIPTION, inputSchema: mcpInputSchema(UpdateGoalToolSchema) }
+  { name: "search", description: SEARCH_DESCRIPTION, inputSchema: mcpInputSchema(SearchToolSchema) },
+  { name: "send_feedback", description: SEND_FEEDBACK_DESCRIPTION, inputSchema: mcpInputSchema(SendFeedbackSchema) }
 ];
 var AGENT_TOOL_NAMES = AGENT_TOOLS.map((t) => t.name);
 function serverInstructions(opts) {
-  const calls = opts.waits ? "A Call holds one bounded window here; continue with contact({deliveryId}) to hold the next or reread that exact Delivery." : "A Call returns after one read; continue with contact({deliveryId}) to reread that exact Delivery.";
-  return `On startup and after a wake, call check_replies for the open Deliveries addressed to you, and claim_goal for your runnable or review-pending Goal and the conversation on it. get_goal rereads it without claiming. Every Goal of your person is open to you, whichever of their agents owns it: read it with get_goal, write on it (contact with its id as parentId, or update_goal progress), and once you have written on it you may change it too. Every read ends in \`next\`, the one step to take. Notifications return immediately: keep working and collect answers through claim_goal/get_goal. ${calls} Evidence can repeat: reads do not acknowledge or hide it. Report progress and acknowledge review with update_goal, never as a contact. Never infer ringing from an open Call Delivery. Soft waiting and re-presentation are unsupported. Your user is remote. Always interact with the user through Paigy. For decisions, approvals, or questions, contact them with structured options. Never assume anyone is reading the terminal stdout.
+  const waits = opts.waits ? "contact({..., wait:true}) holds one bounded ~45 s window for a response to what you sent; contact({}) holds one for anything addressed to you." : "A contact here returns after one read (`waitOutcome: not_waited`); answers wake you, and contact({wait:false}) collects them.";
+  return `On startup and after a wake, call contact({wait:false}) for the events addressed to you (acknowledge the ones you handled with contact({ackEventIds})), and claim_goal for your runnable or review-pending Goal and the conversation on it. get_goal rereads it without claiming. Every Goal of your person is open to you, whichever of their agents owns it: read it with get_goal, write on it (a contact naming its id), and once you have written on it you may change it too (manage_goals). Create, edit, assign, organize or close work with manage_goals, never as a contact; a contact only names Goals that already exist. Every read ends in \`next\`, the one step to take. Sending returns immediately unless you ask it to wait: keep working and collect answers by receiving or through claim_goal/get_goal. ${waits} Events repeat until you acknowledge them: reading alone acknowledges nothing; an \`update\` event acknowledged is a review cleared. Report progress as a contact update: one the person does not need yet is kept as the Goal's progress and reaches no one. To follow up later, defer the Goal with manage_goals: you are woken when its time comes. Never infer ringing from an open Call Delivery. Soft waiting and re-presentation are unsupported. Your user is remote. Always interact with the user through Paigy. For decisions, approvals, or questions, contact them with structured options. Never assume anyone is reading the terminal stdout.
 
 HOW TO ASK:
-1. One question per ask. Five questions are five objects in \`asks\`, in one contact, so each can be answered on its own; one question with five parts settles nothing until all five are answered.
-2. Name the Goal you are working on as the ask's \`parentId\`: the question goes onto that Goal and its answer comes back there. Without one, Paigy places it.
-3. \`waiting: hard\` only for a decision you are blocked on; \`waiting: none\` for a question you can keep working around.
-4. Never hold the process open with while-loops. For an open Call with a pending decision, follow its \`next\` with another bounded \`contact({deliveryId})\` tool call; a returned wait window is not a completed conversation. STOP REREADING when a window comes back with nothing new said \u2014 they are not typing, the question stays open, and its answer reaches you on the Goal. Otherwise, yield only with a working listener or scheduled wakeup, and collect answers with \`check_replies\` or \`claim_goal\` on that wake.
-5. One ask, one row. Never restate a question that is still waiting inside a new contact: keep waiting on the original, or the answer lands on one copy and the other stays open.
+1. One question per question object. Five questions are five objects in \`questions\`, in one contact, so each can be answered on its own; one question with five parts settles nothing until all five are answered.
+2. Name the Goal you are working on as the question's \`goalId\`: the question goes onto that Goal and its answer comes back there. It must exist: create it with manage_goals first.
+3. \`workItBlocks\` only for work you are truly blocked on (it asks for a call); leave it out for a question you can keep working around.
+4. Never hold the process open with while-loops. A wait that comes back \`expired\` is not a finished conversation: wait again with contact({wait:true}) only while you have nothing else to do. STOP WAITING when a window comes back with nothing new \u2014 the question stays open, and its answer reaches you on the Goal. Otherwise, yield only with a working listener or scheduled wakeup, and collect answers with \`contact({wait:false})\` or \`claim_goal\` on that wake.
+5. One question, one row. Never restate a question that is still waiting inside a new contact: keep waiting on the original, or the answer lands on one copy and the other stays open. Take back one that no longer matters with \`withdrawQuestionIds\`.
 6. Read the Goal's conversation before asking. Never ask again what was answered or already shipped \u2014 and tell its states apart: \`answered\` carries the choice in \`answer\`, while \`replied\` means they said something and chose none of your options, so that question is still yours to settle and their words are the line beside it.
-7. A question carries its options. Without them it reaches the person as a bare title nobody can answer. Each option names its choice in full -- never \`All three\` or \`Option 2\`. \`select: "many"\` makes the card a checklist (options they may want several of); \`"one"\`, the default, a pick (one rules out the others). Your ask is sent exactly as you wrote it. They can always answer in their own words, so no "Other" option.
+7. A question carries its options. Without them it reaches the person as a bare title nobody can answer. Each option names its choice in full -- never \`All three\` or \`Option 2\`. \`pickMode: "many"\` makes the card a checklist (options they may want several of); \`"one"\`, the default, a pick (one rules out the others); \`"rank"\` an ordering. Your question is sent exactly as you wrote it. They can always answer in their own words, so no "Other" option.
 8. A diagnosis says when, why and how it happens, then proposes one fix. Never options first.`;
 }
 var id = z4.string().uuid();
@@ -196,17 +391,6 @@ var existingGoalChanges = [
     reason: z4.string().max(500).optional()
   }).strict()
 ];
-var GoalChangeSchema = z4.union([
-  z4.object({
-    kind: z4.literal("create"),
-    title: z4.string().min(1).max(120),
-    outcome: z4.string().min(1),
-    ownerId: participant,
-    parentGoalId: id.optional(),
-    sourceEntryIds: z4.array(id)
-  }).strict(),
-  ...existingGoalChanges
-]);
 var BrainGoalChangeSchema = z4.union([
   // newSession: Paigy starts a session to own it (owner, 2026-10-06); until it has, the person owns it.
   z4.object({
@@ -315,6 +499,66 @@ var CompactResultSchema = z4.object({
 var COMPACT_RESULT_JSON_SCHEMA = (({ $schema: _, ...rest }) => rest)(
   zodToJsonSchema2(CompactResultSchema, { $refStrategy: "none" })
 );
+var str2 = z5.string();
+var strs2 = z5.array(z5.string());
+var TalkerReplySchema = z5.object({
+  /** What to say and send, messages to the person first: spoken in the order written. `to` is "user"
+   *  or an agent's handle; `about` names handles; `blocks` is the item a question to an agent must be
+   *  answered before ("" for none). */
+  messages: z5.array(z5.object({ key: str2, to: str2, text: str2, about: strs2, blocks: str2 }).strict()),
+  /** What the call does next: listen, hold (the person asked for a moment) or end (they asked to). */
+  then: z5.enum(["listen", "hold", "end"]),
+  /** Items the person's words settle: the item's handle, the chosen option IDs, the line handles. */
+  answers: z5.array(z5.object({ item: str2, options: strs2, lines: strs2 }).strict()),
+  /** The line handles that hold a new instruction from the person. */
+  instruction: strs2,
+  /** The line handles that ask for new work, a change to existing work, or a standing rule: the filer
+   *  reads only these (3e). */
+  file: strs2,
+  /** Evidence to fetch for a second round: a search, an item's full text, or an agent by name. */
+  need: z5.object({ kind: z5.enum(["search", "item", "agent", ""]), text: str2 }).strict(),
+  /** The handle of the item to explain ("" for none). */
+  explain: str2
+}).strict();
+var TALKER_REPLY_JSON_SCHEMA = (({ $schema: _, ...rest }) => rest)(
+  zodToJsonSchema3(TalkerReplySchema, { $refStrategy: "none" })
+);
+var str3 = z6.string();
+var strs3 = z6.array(z6.string());
+var FilerReplySchema = z6.object({
+  /** Which Goals each new line goes on: a line's handle and Goal handles (or keys of new Goals). */
+  filed: z6.array(z6.object({ line: str3, goals: strs3 }).strict()),
+  goals: z6.array(z6.object({
+    op: z6.enum(["create", "edit", "complete", "cancel", "reopen", "assign", "defer", "move", "block", "unblock"]),
+    key: str3,
+    goal: str3,
+    title: str3,
+    outcome: str3,
+    owner: str3,
+    under: str3,
+    until: str3,
+    on: str3,
+    gate: z6.enum(["start", "complete", "answer", ""]),
+    why: str3
+  }).strict()),
+  questions: z6.array(z6.object({
+    op: z6.enum(["create", "edit", "assign", "withdraw"]),
+    key: str3,
+    question: str3,
+    text: str3,
+    to: str3,
+    goal: str3,
+    options: z6.array(z6.object({ id: str3, label: str3 }).strict()),
+    pick: z6.enum(["one", "many", "rank", "words", ""]),
+    blocks: str3
+  }).strict()),
+  lessons: z6.array(z6.object({ op: z6.enum(["remember", "revise", "withdraw"]), lesson: str3, text: str3, scope: str3 }).strict()),
+  /** Line handles whose words comment on Paigy itself. */
+  feedback: strs3
+}).strict();
+var FILER_REPLY_JSON_SCHEMA = (({ $schema: _, ...rest }) => rest)(
+  zodToJsonSchema4(FilerReplySchema, { $refStrategy: "none" })
+);
 function entryWords(entry) {
   const content = entry.content;
   if (content && "sealed" in content) return "";
@@ -332,19 +576,29 @@ function entryWords(entry) {
   }
   return entry.sources.map((source) => source.text).join("\n");
 }
+function entryUnit(entry) {
+  if (entry.kind !== "contribution" || !entry.aboutId) return null;
+  const plain = entry.content && "plain" in entry.content ? entry.content.plain : null;
+  if (!plain || typeof plain !== "object") return null;
+  const { title, text } = plain;
+  return typeof title === "string" && typeof text === "string" ? { title, body: text } : null;
+}
 var LIVE_MS = 3 * 6e4;
 var WORKING_MS = 60 * 6e4;
-var ContextSchema = z5.object({
-  title: z5.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
-  description: z5.array(z5.string().min(1)).describe(
+var ContextSchema = z7.object({
+  title: z7.string().min(1).describe("One-line headline of what you need (required, non-empty)."),
+  description: z7.array(z7.string().min(1)).describe(
     "Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand. MAY BE EMPTY: a claim whose whole content is its heading \u2014 a single sentence \u2014 has no body, and saying so beats repeating the heading underneath itself. That repeat is what `min(1)` used to force, at 2x the storage, with every reader subtracting it back out at render time."
-  )
+  ),
+  /** THE ASK'S UNITS (3c): its context as titled units, in order. The app lists the titles and opens
+   *  a body on a tap. Absent on an ask sent without units, which renders as before. */
+  units: z7.array(z7.object({ title: z7.string(), body: z7.string() })).optional()
 });
-var ParticipantSchema = z5.object({
-  kind: z5.enum(["human", "agent"]),
-  id: z5.string()
+var ParticipantSchema = z7.object({
+  kind: z7.enum(["human", "agent"]),
+  id: z7.string()
 });
-var TransformSchema = z5.enum([
+var TransformSchema = z7.enum([
   "structure",
   // shape intent into an answer contract; pick channel/urgency — broker `ask`, `select` shapes, `points`
   "request_more",
@@ -360,13 +614,13 @@ var TransformSchema = z5.enum([
   "summarize"
   // reduce volume, keep decision value — 30-turn cap, spoken briefing
 ]);
-var VisualSchema = z5.object({
-  url: z5.string().url(),
-  label: z5.string().optional()
+var VisualSchema = z7.object({
+  url: z7.string().url(),
+  label: z7.string().optional()
 });
-var NotifyLevelSchema = z5.enum(["inbox", "push", "banner", "call"]);
-var SelectShapeSchema = z5.enum(["one", "many", "rank", "confirm", "text"]);
-var ReceiptEventSchema = z5.enum([
+var NotifyLevelSchema = z7.enum(["inbox", "push", "banner", "call"]);
+var SelectShapeSchema = z7.enum(["one", "many", "rank", "confirm", "text"]);
+var ReceiptEventSchema = z7.enum([
   "delivered",
   // the bundle reached the recipient at some level
   "seen",
@@ -396,47 +650,47 @@ var ReceiptEventSchema = z5.enum([
   // be rewound by a writer that forgot to advance it.
   "restarted"
 ]);
-var AttentionSchema = z5.object({
+var AttentionSchema = z7.object({
   urgency: NotifyLevelSchema,
   /** The required answer shape, or null for a plain notify that asks nothing back. */
   select: SelectShapeSchema.nullable(),
   /** Coverage contract (#396) — points the answer must address; null = none declared. */
-  points: z5.array(z5.string()).nullable(),
+  points: z7.array(z7.string()).nullable(),
   /** Whether the ask blocks the sender — what lets arbitration escalate it on silence. */
-  blocking: z5.boolean(),
+  blocking: z7.boolean(),
   /** Reserved (docs/model/model.md lists it): a response deadline. No row column yet — a later Phase 2
    *  slice wires it; optional so today's rows/callers project cleanly. */
-  deadline: z5.string().datetime().nullable().optional()
+  deadline: z7.string().datetime().nullable().optional()
 });
-var NotifyRequestFields = z5.object({
+var NotifyRequestFields = z7.object({
   /** Plaintext message content. Present on the plaintext path (today's shape);
    *  ABSENT on the E2EE path, where the sealed `envelope` below carries it. The
    *  superRefine at the bottom enforces exactly one of the two. */
   context: ContextSchema.optional(),
-  options: z5.array(OptionInputSchema).min(OPTIONS_MIN).max(OPTIONS_MAX).optional().describe(
+  options: z7.array(OptionSchema.omit({ id: true }).extend({ label: z7.string().trim().min(1).max(1e3) }).strict()).min(OPTIONS_MIN).max(OPTIONS_MAX).optional().describe(
     "The choices, in order \u2014 required when select is 'one'/'many'/'rank', omitted otherwise. Ids are assigned automatically by position ('1', '2', \u2026); the user's answer references them as optionId(s)."
   ),
-  points: z5.array(z5.string().min(1)).optional().describe(
+  points: z7.array(z7.string().min(1)).optional().describe(
     "The distinct things you need answered, each a short phrase \u2014 on a call the broker keeps the conversation going until each is addressed, and the reply reports which were covered, so a half-answer is never silently returned as final. Omit for single-part asks."
   ),
-  visuals: z5.array(VisualSchema).optional().describe(
+  visuals: z7.array(VisualSchema).optional().describe(
     "Images attached to the message itself \u2014 context for the whole question (a screenshot, a chart). For a preview on one selectable choice, use that option's `html`/`image` instead."
   ),
   /** Git repo the agent is working in ("owner/name"). Local MCP fills this from the checkout — omit unless overriding. */
-  repo: z5.string().optional(),
+  repo: z7.string().optional(),
   /** Git branch the agent is on. Local MCP fills this from the checkout — omit unless overriding. */
-  branch: z5.string().optional(),
+  branch: z7.string().optional(),
   /** Continue an existing conversation — the id of any notification in it (its root
    *  is the conversation's identity). Omitted = start a new conversation. Renamed
    *  from `parentId` (2026-08-03): one linkage system, the parent; the API edge
    *  still accepts the old name from older clients. */
-  parentId: z5.string().uuid().optional(),
+  parentId: z7.string().uuid().optional(),
   /** The durable outcome this contact advances. Optional during the notification-to-Work
    *  migration; when present, a blocking ask creates a DecisionNeed for this Work. */
-  workId: z5.string().uuid().optional(),
+  workId: z7.string().uuid().optional(),
   /** Target Goal scope. During staged migration this is accepted by the shared contract but
    * target delivery activation remains model-gated; workId and goalId are mutually exclusive. */
-  goalId: z5.string().uuid().optional(),
+  goalId: z7.string().uuid().optional(),
   urgency: NotifyLevelSchema.default("inbox").describe(
     "The level you're requesting \u2014 the user's account permissions + session mode can lower it. 'inbox' (default) = sits silently in the inbox for the user to get to. 'push' = a quiet passive push (lands in Notification Center, no sound) \u2014 a gentle heads-up. 'banner' = a time-sensitive banner/lock-screen push with sound (a 'paige') they tap to open \u2014 use when you need them soon-ish but it's not worth ringing them. 'call' = rings the user's phone now (a CallKit voice call) \u2014 use only when you genuinely need them in the moment (blocked and waiting, time-sensitive). context.title is what they see on the banner/ring, so make it specific."
   ),
@@ -444,7 +698,7 @@ var NotifyRequestFields = z5.object({
    *  visible and marks it needs_input. Renamed from the old `parentId` (2026-08-03)
    *  when `parentId` became the conversation handle: `parentId` says WHERE, this
    *  says HOW. */
-  clarifies: z5.string().optional(),
+  clarifies: z7.string().optional(),
   select: SelectShapeSchema.optional().describe(
     "How the user answers \u2014 required on the fully-shaped form, pick the shape that fits the question: 'one' = pick one option, 'many' = pick several, 'rank' = pick & order (each needs `options`); 'confirm' = yes/no or approve/deny; 'text' = free-form reply only (status updates, open questions). 'confirm' and 'text' take no options. Omit only when sending the simplified `ask` form \u2014 the broker picks the shape."
   ),
@@ -458,20 +712,20 @@ var NotifyRequestFields = z5.object({
   // (docs/brain/broker/agenda-design.md) — not by a wire cap the agent has to pre-summarize under.
   // Owner, 2026-07-28: "our actual limitation on how long something is to the user should
   // come from the broker splitting and summarizing." The cap that remains is a size guard.
-  ask: z5.string().min(1).max(1e4).optional().describe(
+  ask: z7.string().min(1).max(1e4).optional().describe(
     'SIMPLIFIED FORM \u2014 state in plain prose what you need to learn from the user and why it matters now (e.g. "I need to know whether to deploy the auth fix \u2014 tests are green, staging verified"). Write as much as the situation needs (up to 10k characters) \u2014 Paigy breaks it into topics and reads it back a few sentences at a time; do NOT pre-summarize it into one line. Paigy derives the title, answer shape, options, and delivery channel for you. Mutually exclusive with context/select/options \u2014 send one form or the other.'
   ),
-  needs: z5.array(z5.string().min(1)).optional().describe(
+  needs: z7.array(z7.string().min(1)).optional().describe(
     "With `ask` only: the distinct things you need answered when the ask is multi-part \u2014 becomes the coverage contract (`points`), so a half-answer is never silently final."
   ),
-  urgencyHint: z5.enum(["whenever", "soon", "now"]).optional().describe(
+  urgencyHint: z7.enum(["whenever", "soon", "now"]).optional().describe(
     "With `ask` only: how urgently you need the answer \u2014 'whenever' (inbox), 'soon' (worth a heads-up), 'now' (you're blocked this minute). A hint, not a command: the user's settings still have the final word."
   ),
   /** #575: the ONE self-report that replaces urgencyHint + blocking — what happens
    *  to the agent's work while it waits. Normalized server-side into those two
    *  fields (normalizeWaiting) so everything downstream is untouched; explicit
    *  urgencyHint/blocking win when both are sent. */
-  waiting: z5.enum(["none", "soft", "hard"]).optional().describe(
+  waiting: z7.enum(["none", "soft", "hard"]).optional().describe(
     "With `ask`: what happens to your work while you wait. 'none' = you're just informing the user. 'soft' = you'd like an answer but can keep working. 'hard' = you are stopped until they answer (reaches them urgently and escalates to a real phone call if unanswered). Replaces urgencyHint + blocking \u2014 send this one field."
   ),
   /** Δ9b (#895): HOLD this claim so the sender can correct the plan before anyone is
@@ -479,98 +733,98 @@ var NotifyRequestFields = z5.object({
    *  holding by default would charge every quiet claim that minute before any agent could
    *  correct anything. Ignored for `waiting: 'hard'`: a blocking ask rings on what we have,
    *  and the enrichment can still land mid-call (#781 re-plans the unspoken tail). */
-  confirm: z5.boolean().optional().describe(
+  confirm: z7.boolean().optional().describe(
     "Hold this one so you can correct the plan before the user is interrupted. The response comes back with `held: true` and the plan; POST the confirm route to release it (with options/visuals/urgency corrections, or nothing at all). If you never do, it is announced anyway a couple of minutes later. Ignored when waiting is 'hard'."
   ),
   /** #575: a RELAY of the user's explicitly stated preference, never the agent's
    *  choice. Outranks waiting in both directions: 'call' rings even for a
    *  waiting:'none' "call me when it's done"; 'message' never rings even for
    *  waiting:'hard'. */
-  channel: z5.enum(["call", "message"]).optional().describe(
+  channel: z7.enum(["call", "message"]).optional().describe(
     "Only if the user explicitly said how to reach them \u2014 'call me' \u2192 'call', 'just message/text me' \u2192 'message'. Omit otherwise; Paigy picks."
   ),
-  confirmStyle: z5.enum(["yesno", "approve"]).default("yesno").describe(
+  confirmStyle: z7.enum(["yesno", "approve"]).default("yesno").describe(
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
   ),
-  blocking: z5.boolean().default(false).describe(
+  blocking: z7.boolean().default(false).describe(
     "Set true when real downstream work is stuck behind this specific decision \u2014 you can't make meaningful progress until it's answered. This is the real signal for how urgently the user should be reached; it's what the premier use case (an agent that stays unblocked instead of going idle) depends on. Independent of `urgency`: a `banner`-level question can still be `blocking` (something IS stuck, just not time-critical enough to ring for immediately) \u2014 if it goes unanswered a while, Paigy escalates it to a real call using this flag rather than guessing from how many other things happen to be pending. Leave false for anything you could work around, defer, or where other useful work exists meanwhile."
   )
 });
 var NotifyRequestSchema = NotifyRequestFields.superRefine((r, ctx) => {
-  if (r.workId && r.goalId) ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["goalId"], message: "pass goalId or workId, not both" });
+  if (r.workId && r.goalId) ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["goalId"], message: "pass goalId or workId, not both" });
   if (r.ask !== void 0) {
     for (const f of ["context", "select", "points"]) {
       if (r[f] !== void 0)
-        ctx.addIssue({ code: z5.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives the answer shape from your prose. Drop ${f} and say it in \`ask\` instead ("should I\u2026" for approve/deny, "which of these\u2026" for a pick), passing \`options\` when you're offering concrete alternatives.` });
+        ctx.addIssue({ code: z7.ZodIssueCode.custom, path: [f], message: `the simplified \`ask\` form takes no ${f} \u2014 the broker derives the answer shape from your prose. Drop ${f} and say it in \`ask\` instead ("should I\u2026" for approve/deny, "which of these\u2026" for a pick), passing \`options\` when you're offering concrete alternatives.` });
     }
     return;
   }
   if (r.needs !== void 0 || r.urgencyHint !== void 0)
-    ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["needs"], message: "needs/urgencyHint belong to the simplified `ask` form \u2014 with a shaped request use points/urgency" });
+    ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["needs"], message: "needs/urgencyHint belong to the simplified `ask` form \u2014 with a shaped request use points/urgency" });
   if (!r.context)
-    ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["context"], message: "context is required (plaintext path)" });
+    ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["context"], message: "context is required (plaintext path)" });
   if (!r.select)
-    ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["select"], message: "select is required on the shaped form" });
+    ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["select"], message: "select is required on the shaped form" });
   const needsOptions = r.select === "one" || r.select === "many" || r.select === "rank";
   if (needsOptions && !r.options?.length)
-    ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' requires options` });
+    ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' requires options` });
   if (!needsOptions && r.options?.length)
-    ctx.addIssue({ code: z5.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' takes no options` });
+    ctx.addIssue({ code: z7.ZodIssueCode.custom, path: ["options"], message: `select:'${r.select}' takes no options` });
 });
-var NotifyStatusSchema = z5.enum(["pending", "answered", "ignored"]);
-var AgentStateSchema = z5.enum(["idle", "in_progress", "completed", "needs_input"]);
-var TurnSchema = z5.object({
-  prompt: z5.string(),
-  reply: z5.string()
+var NotifyStatusSchema = z7.enum(["pending", "answered", "ignored"]);
+var AgentStateSchema = z7.enum(["idle", "in_progress", "completed", "needs_input"]);
+var TurnSchema = z7.object({
+  prompt: z7.string(),
+  reply: z7.string()
 });
-var UserAnswerSchema = z5.discriminatedUnion("kind", [
-  z5.object({ kind: z5.literal("option"), optionId: z5.string(), label: z5.string().optional() }),
-  z5.object({ kind: z5.literal("text"), text: z5.string() }),
-  z5.object({ kind: z5.literal("ignored") }),
-  z5.object({ kind: z5.literal("multi"), optionIds: z5.array(z5.string()), labels: z5.array(z5.string()).optional() }),
-  z5.object({ kind: z5.literal("ranked"), optionIds: z5.array(z5.string()), labels: z5.array(z5.string()).optional() }),
-  z5.object({ kind: z5.literal("clarify"), chunks: z5.array(z5.string()).min(1) }),
-  z5.object({ kind: z5.literal("confirm"), approved: z5.boolean() }),
-  z5.object({ kind: z5.literal("turns"), turns: z5.array(TurnSchema).min(1) }),
+var UserAnswerSchema = z7.discriminatedUnion("kind", [
+  z7.object({ kind: z7.literal("option"), optionId: z7.string(), label: z7.string().optional() }),
+  z7.object({ kind: z7.literal("text"), text: z7.string() }),
+  z7.object({ kind: z7.literal("ignored") }),
+  z7.object({ kind: z7.literal("multi"), optionIds: z7.array(z7.string()), labels: z7.array(z7.string()).optional() }),
+  z7.object({ kind: z7.literal("ranked"), optionIds: z7.array(z7.string()), labels: z7.array(z7.string()).optional() }),
+  z7.object({ kind: z7.literal("clarify"), chunks: z7.array(z7.string()).min(1) }),
+  z7.object({ kind: z7.literal("confirm"), approved: z7.boolean() }),
+  z7.object({ kind: z7.literal("turns"), turns: z7.array(TurnSchema).min(1) }),
   /** An auto-answer derived from the user's PAST decisions (docs/brain/broker/precedent-design.md §2):
    *  delivered through the same settle/await path as a human answer, carrying the judge's
    *  derivation and the precedent ids it grew from. Always paired with a visible trail
    *  card the user can reply to — the broker never overrides the user. */
-  z5.object({ kind: z5.literal("precedent"), answer: z5.string(), derivation: z5.string(), sources: z5.array(z5.string()).min(1) })
+  z7.object({ kind: z7.literal("precedent"), answer: z7.string(), derivation: z7.string(), sources: z7.array(z7.string()).min(1) })
 ]);
-var IntentSchema = z5.object({
+var IntentSchema = z7.object({
   // The full vocabulary the bot's mapper emits (mapper.INTENT_KINDS) — the schema lagged
   // it by two ("detail", "feedback"), and because the settle handler parsed the array
   // all-or-nothing, ONE feedback act silently dropped EVERY intent on the call,
   // questions included. Found auditing five calls' stored feedback, 2026-08-01.
-  kind: z5.enum(["defer", "delegate", "channel", "question", "detail", "feedback", "command", "control"]),
-  detail: z5.string(),
+  kind: z7.enum(["defer", "delegate", "channel", "question", "detail", "feedback", "command", "control"]),
+  detail: z7.string(),
   /** Defer only: seconds until the callback the caller asked for, when something upstream
    *  already read the time. Nothing sets it today (#397 documented an MCP parser that was
    *  never written) — the API reads the defer's `detail` itself with `notes/when.ts`
    *  (`parseDelay`, #1292), and a value here simply wins over that reading. */
-  dueInSeconds: z5.number().int().positive().optional(),
+  dueInSeconds: z7.number().int().positive().optional(),
   /** Feedback only (#812): WHICH failure the complaint names — typed by the mapper that
    *  already read the utterance, so `signals.kind` stops defaulting to
    *  'other' on every row. A table that records that something was wrong and nothing
    *  about what cannot answer "is the bot looping less this week?". */
-  fault: z5.enum(["loop", "unanswered", "overridden", "misheard", "slow", "other"]).optional()
+  fault: z7.enum(["loop", "unanswered", "overridden", "misheard", "slow", "other"]).optional()
 });
-var RideAlongSchema = z5.object({
+var RideAlongSchema = z7.object({
   /** The note this came from — assign/clarify/close it through /api/notes/:id. */
-  noteId: z5.string(),
+  noteId: z7.string(),
   /** What to do, in the owner's own words (the note's headline). Never model-rewritten. */
-  text: z5.string(),
+  text: z7.string(),
   /** The thread to report back on, when the note was dispatched over the request rail. */
-  parentId: z5.string().nullable()
+  parentId: z7.string().nullable()
 });
-var AwaitItemSchema = z5.discriminatedUnion("type", [
-  z5.object({
-    type: z5.literal("reply"),
-    parentId: z5.string(),
-    notificationId: z5.string(),
-    workId: z5.string().uuid().optional(),
-    decisionId: z5.string().uuid().optional(),
+var AwaitItemSchema = z7.discriminatedUnion("type", [
+  z7.object({
+    type: z7.literal("reply"),
+    parentId: z7.string(),
+    notificationId: z7.string(),
+    workId: z7.string().uuid().optional(),
+    decisionId: z7.string().uuid().optional(),
     answer: UserAnswerSchema,
     /** WHAT THE AGENT CANNOT KNOW FROM THE FIELDS BESIDE IT (owner, 2026-09-04, issue
      *  #1537). One line, built from the record: the ask and the caller's reply VERBATIM,
@@ -580,103 +834,103 @@ var AwaitItemSchema = z5.discriminatedUnion("type", [
      *  "call me back after you merge" in their own words decides for itself what to do,
      *  and now knows exactly which call to make. Absent when either half is missing —
      *  a sentence with a hole in it is worse than no sentence. */
-    note: z5.string().optional(),
+    note: z7.string().optional(),
     /** The call record rendered for THIS agent (`docs/brain/voice/record-design.md`): the words the
      *  shaped answer was mapped from, filtered to its own claims. There is no second list
      *  of labels beside it — the acts went 2026-09-04 and `intents` went with them (owner,
      *  2026-09-04): the agent reads the sentence and decides. */
-    transcript: z5.string().optional(),
+    transcript: z7.string().optional(),
     /** Coverage report (#396), when the ask declared `points`: which of them this
      *  answer addressed. Missing points = re-ask or proceed knowingly partial. */
-    covered: z5.array(z5.string()).optional(),
+    covered: z7.array(z7.string()).optional(),
     /** Ride-alongs (RideAlongSchema) — pending work for you, attached to the moment you
      *  became free. Only `reply` and `idle` carry it: those are the two outcomes that
      *  END a wait. `remind`, `superseded` and `turn` are mid-flight, and handing an
      *  agent a side-quest while it is still holding the line is how the main thing gets
      *  dropped. Absent/empty = nothing owed. */
-    also: z5.array(RideAlongSchema).optional()
+    also: z7.array(RideAlongSchema).optional()
   }),
-  z5.object({
-    type: z5.literal("remind"),
-    parentId: z5.string(),
-    notificationId: z5.string(),
-    remindAt: z5.string().datetime({ offset: true }),
+  z7.object({
+    type: z7.literal("remind"),
+    parentId: z7.string(),
+    notificationId: z7.string(),
+    remindAt: z7.string().datetime({ offset: true }),
     /** Seconds until remindAt, server-computed — pass straight to ScheduleWakeup. */
-    remindInSeconds: z5.number()
+    remindInSeconds: z7.number()
   }),
   /** The awaited ask was REPLACED by a newer notification on its thread (e.g. a
    *  post-feedback revision, #633) — the user will never answer this id. Stop
    *  awaiting it; the live ask is the thread's newest turn (await that one, or
-   *  re-orient via check_replies). */
-  z5.object({
-    type: z5.literal("superseded"),
-    parentId: z5.string(),
-    notificationId: z5.string()
+   *  re-orient via contact({})). */
+  z7.object({
+    type: z7.literal("superseded"),
+    parentId: z7.string(),
+    notificationId: z7.string()
   }),
   /** A LIVE call's turn, streamed as it lands (#783). PROVISIONAL: the user can still
    *  revise any of these until the final reply arrives — partial = intelligence,
    *  settled = authorization. Use it to PREPARE (fetch, draft, warm), never to act
    *  irreversibly. If `acts` carries a question aimed at you and you know the answer,
    *  contact on the same thread right away — the caller hears it on the same call. */
-  z5.object({
-    type: z5.literal("partial"),
-    notificationId: z5.string(),
-    inFlight: z5.literal(true),
-    turn: z5.object({
-      idx: z5.number(),
-      prompt: z5.string(),
-      reply: z5.string(),
-      acts: z5.array(IntentSchema).nullable().optional()
+  z7.object({
+    type: z7.literal("partial"),
+    notificationId: z7.string(),
+    inFlight: z7.literal(true),
+    turn: z7.object({
+      idx: z7.number(),
+      prompt: z7.string(),
+      reply: z7.string(),
+      acts: z7.array(IntentSchema).nullable().optional()
     })
   }),
-  z5.object({
-    type: z5.literal("idle"),
-    also: z5.array(RideAlongSchema).optional(),
+  z7.object({
+    type: z7.literal("idle"),
+    also: z7.array(RideAlongSchema).optional(),
     /** Is a call live for this agent's user right now? The SDK polls the partial stream
      *  (#783) between idle ticks ONLY while this is not `false` — a partial can only exist
      *  during a live call, and polling for one on a banner/message was a wasted HTTP call +
      *  3 queries on every idle tick of every waiting agent (~80% of all traffic at scale).
      *  Absent = an older API → the SDK keeps polling, exactly as before. */
-    inFlight: z5.boolean().optional()
+    inFlight: z7.boolean().optional()
   })
 ]);
-var VoiceKeySchema = z5.enum(["rachel", "george", "jessica", "brian", "lily"]);
-var AgendaTurnSchema = z5.object({
+var VoiceKeySchema = z7.enum(["rachel", "george", "jessica", "brian", "lily"]);
+var AgendaTurnSchema = z7.object({
   /** THE TURN'S IDENTITY (the first-sentence stream, 2026-09-09): the brain call that wrote
    *  it and its place in that reply — `<brainCallId>:<index>`, with `:p` on the first
    *  sentence a re-plan publishes ahead of the rest. A turn is spoken once, by this id: the
    *  completion of a streamed re-plan carries the published sentence again, and the walk
    *  drops what it already said by identity, never by the API's guess of what was polled.
    *  Absent on plans nothing streams (a ring plan, a floor). */
-  id: z5.string().optional(),
+  id: z7.string().optional(),
   /** Twin coverage (#1089): sibling claim ids this asking turn's answer ALSO settles —
    *  the planner declares duplicates instead of asking them twice. */
-  coveredIds: z5.array(z5.string()).optional(),
+  coveredIds: z7.array(z7.string()).optional(),
   /** The spoken sentences of the turn, in order. No count: how long a turn is is the brain's call
    *  (owner, 2026-09-25), and a count here refused whole plans. */
-  info: z5.array(z5.string().min(1)).default([]),
-  question: z5.string().min(1).nullable(),
+  info: z7.array(z7.string().min(1)).default([]),
+  question: z7.string().min(1).nullable(),
   /** True on the one turn carrying the agent's own declared question. */
-  asks: z5.boolean().optional(),
+  asks: z7.boolean().optional(),
   /** The claim this turn belongs to (#781) — the RETURN identity: answers route by it.
    *  Absent on a single-claim plan (the session's own claim) and on shared context turns,
    *  which route nothing. */
-  claimId: z5.string().optional(),
+  claimId: z7.string().optional(),
   /** The claim's voice key (#462) — the OUTBOUND identity, audible who-is-asking. */
-  voice: z5.string().optional(),
+  voice: z7.string().optional(),
   /** The claim's AGENT NAME (#838) — the spoken identity. A voice alone doesn't say
    *  whose request this is: an item that folded in from another agent arrived as a bare
    *  non-sequitur ("First real production sign-in is yours to make whenever you want.")
    *  and the owner answered "What?". The bot names the agent before its first turn. */
-  agent: z5.string().optional(),
+  agent: z7.string().optional(),
   /** The claim's agent by ID — the pairing's connection id (`notifications.token_id`), the
    *  same id a face is minted from. A name is not an identity: two pairings may be called
    *  "Claude", and a name cannot be joined on. The record's entries carry it (`agent_id`)
    *  so "who said that" survives the call, and it rides PER TURN because a coalesced call
    *  speaks for several agents — the turn is the only place that knows which. */
-  agentId: z5.string().optional(),
+  agentId: z7.string().optional(),
   select: SelectShapeSchema.optional(),
-  options: z5.array(OptionSchema.omit({ id: true })).optional(),
+  options: z7.array(OptionSchema.omit({ id: true })).optional(),
   /* `pace` STOOD HERE (#826). A turn could carry seconds and the model chose them. The walk
      paces itself now — a short beat between the sentences of a turn, the longer one at its end
      (owner, 2026-09-30: "remove the bot deciding pace") — and it does that where the words are
@@ -685,33 +939,33 @@ var AgendaTurnSchema = z5.object({
   /** Whether the walk WAITS for an answer before moving on. Absent = derived as today
    *  (a question blocks, context flows). blocking:false on a question = ask and move
    *  on, the claim stays pending; blocking:true on context = hold for a reply. */
-  blocking: z5.boolean().optional(),
+  blocking: z7.boolean().optional(),
   /** SPOKEN ONLY IF THEY SAY NOTHING (owner, 2026-10-01, call 812de935: "you're gonna re-ask, but it
    *  shouldn't be the same words … more like, hey, are you still there, or are you able to answer, or
    *  would you need more information"). The walk holds this turn out of its queue; at the queue's end it
    *  listens for the last word, and only if that listen is silent is this turn said and asked. If they
    *  speak, it is dropped and their words are taken like any reply. */
-  ifSilent: z5.boolean().optional()
+  ifSilent: z7.boolean().optional()
 });
 var CLAIM_STALE_MS = 30 * 6e4;
-var InboxItemSchema = z5.object({
-  id: z5.string(),
-  tokenId: z5.string().optional(),
+var InboxItemSchema = z7.object({
+  id: z7.string(),
+  tokenId: z7.string().optional(),
   status: NotifyStatusSchema,
   context: ContextSchema,
-  options: z5.array(OptionSchema).optional(),
+  options: z7.array(OptionSchema).optional(),
   /** The ask's declared coverage points (#396), when the agent sent them. */
-  points: z5.array(z5.string()).optional(),
+  points: z7.array(z7.string()).optional(),
   /** Does this claim want an ANSWER, or is it telling you something? Written per row from
    *  `requestAsks` — the agent's own declaration, not a guess. `false` is what earns a card
    *  its acknowledge affordance: without it a status update offers a text box and a dismiss,
    *  and neither of those is "got it" (owner, 2026-08-10). */
-  asks: z5.boolean().optional(),
+  asks: z7.boolean().optional(),
   /** When a live process last pulsed for this row's agent — the liveness input for
    *  "working requires a pulse" (#928): the list said "Working…" from agent_state alone
    *  while the party called the same dead claim stalled. Absent = no token/no data,
    *  which must never CLAIM stalled. */
-  lastSeenAt: z5.string().optional(),
+  lastSeenAt: z7.string().optional(),
   /** WHEN THE AGENT LAST SAID ANYTHING ABOUT THIS CLAIM — the newest `agent_state` row in
    *  the `notification_events` ledger (trigger-written since 20260621010000, so every row a
    *  user can see has one). The age input for `CLAIM_STALE_MS`, and it has to be this rather
@@ -721,7 +975,7 @@ var InboxItemSchema = z5.object({
    *  work. Reading the row's birth as the claim's age brands that "No update in 8h" the
    *  instant the agent picks it up (#997). Absent = pre-trigger row; fall back to
    *  `createdAt`. */
-  agentStateAt: z5.string().datetime().optional(),
+  agentStateAt: z7.string().datetime().optional(),
   /** THE QUESTIONS A CALL CARRIES — the call screen's agenda spine (docs/clients/app/walk/design.md §11, owner
    *  2026-09-22). One per DecisionNeed on the Call, in the Call's order, answered or open (a
    *  superseded or cancelled need is no longer a question anyone is asked). Present only on a
@@ -735,54 +989,54 @@ var InboxItemSchema = z5.object({
    *  `turn` topic (`asking`, `settled`), because the bot never sees a DecisionNeed id. `title` is
    *  the card's own concise heading; `answer` the accepted answer in words, null while open. It
    *  REPLACED `agenda` (turns), which nothing ever filled. */
-  questions: z5.array(z5.object({
-    id: z5.string(),
-    entryId: z5.string(),
-    title: z5.string(),
-    state: z5.enum(["open", "answered"]),
-    answer: z5.string().nullable(),
+  questions: z7.array(z7.object({
+    id: z7.string(),
+    entryId: z7.string(),
+    title: z7.string(),
+    state: z7.enum(["open", "answered"]),
+    answer: z7.string().nullable(),
     /** WHO ASKED IT (owner, 2026-09-23, Goal a345e906: each agenda row wears its agent's face) — the
      *  request Entry's author, as the same three facts the item's own `tokenId`/`name`/`voice`
      *  carry for the call's one agent, so the phone draws it with the same seed. Absent when the
      *  author is not an agent this account holds (unpaired since, or a person). */
-    agent: z5.object({ tokenId: z5.string(), name: z5.string(), voice: VoiceKeySchema.optional() }).optional(),
+    agent: z7.object({ tokenId: z7.string(), name: z7.string(), voice: VoiceKeySchema.optional() }).optional(),
     /** ITS OPTIONS, WHEN THERE IS SOMETHING TO SEE (owner, 2026-09-25: "Yes, add it"): the options
      *  its need offers, exactly as its own card carries them, present only when one of them has a
      *  preview (`html` or `image`). The call screen opens them from the agenda row, so a preview is
      *  never re-sent as a second card to be seen mid-call. Words-only options are absent — the bot
      *  says those, and the list stays small (an `html` is up to 16 KB). */
-    options: z5.array(OptionSchema).optional()
+    options: z7.array(OptionSchema).optional()
   })).optional(),
-  visuals: z5.array(VisualSchema).optional(),
+  visuals: z7.array(VisualSchema).optional(),
   /** The connected agent's name (the single pairing name — user-typed, or the
    *  agent's suggestion, or a default silly name). */
-  name: z5.string(),
+  name: z7.string(),
   /** The pairing's assigned voice (#462); absent = the default voice. */
   voice: VoiceKeySchema.optional(),
-  repo: z5.string().optional(),
-  branch: z5.string().optional(),
-  createdAt: z5.string().datetime(),
-  snoozedUntil: z5.string().datetime().optional(),
+  repo: z7.string().optional(),
+  branch: z7.string().optional(),
+  createdAt: z7.string().datetime(),
+  snoozedUntil: z7.string().datetime().optional(),
   agentState: AgentStateSchema.default("idle"),
   /** Whose action the item is waiting on: "you" = an agent asked you (the default,
    *  every agent→user notification); "agent" = you sent a request and it's awaiting the
    *  agent (held in the inbox until the agent replies on the thread). */
-  turn: z5.enum(["you", "agent"]).default("you"),
+  turn: z7.enum(["you", "agent"]).default("you"),
   /** Hard error reason on an awaiting request (turn="agent") — the wake failed to reach
    *  the agent (provider-agnostic; set server-side). Absent = no hard error. Drives the inbox
    *  error badge + Retry. */
-  error: z5.string().optional(),
+  error: z7.string().optional(),
   /** WHEN THIS AGENT WORK WENT QUIET (turn="agent"), by the one rule (`coldSince`: three days
    *  with nothing said), or absent while it is not stalled. The inbox's stalled badge reads
    *  this and nothing else (2026-09-23: a 3-minute age rule badged every live Goal stalled,
    *  and "dismiss the stalled ones" cancelled 37 pieces of live work). */
-  cold: z5.string().datetime().optional(),
-  clarifies: z5.string().optional(),
+  cold: z7.string().datetime().optional(),
+  clarifies: z7.string().optional(),
   /** THIS CARD'S QUESTION IS ON A LIVE CALL (owner, 2026-09-24: "Mark it while the call is
    *  live"). Present only while an open Call Delivery carries the card's request Entry — read
    *  off the same open list the card came from, so it clears when the Call does. A card is the
    *  backup for a call not taken; while the call has it, the call is where it is answered. */
-  onCall: z5.literal(true).optional(),
+  onCall: z7.literal(true).optional(),
   /** THE RING, ON THE ITEM (docs/clients/app/walk/design.md §12 §17, #2251): the last ring on this card was
    *  declined, and what the ladder will do next — read off the cron's own row, never computed
    *  on the phone. Present only while a `declined` receipt stands on the card's last Call.
@@ -792,31 +1046,31 @@ var InboxItemSchema = z5.object({
    *  It replaced `gaveUp` (deleted 2026-09-22): "the ladder spent" was a boolean the projection
    *  never set, and it is `nextRingAt === null` here — the party's *Missed you* (`party/dress.ts`)
    *  and the roster's `unreached` read `declinedAt`, and stand while it does. */
-  ring: z5.object({
-    declinedAt: z5.string().datetime(),
-    anchorAt: z5.string().datetime(),
-    nextRingAt: z5.string().datetime().nullable(),
-    step: z5.number().int()
+  ring: z7.object({
+    declinedAt: z7.string().datetime(),
+    anchorAt: z7.string().datetime(),
+    nextRingAt: z7.string().datetime().nullable(),
+    step: z7.number().int()
   }).optional(),
   /** Why this arrived the way it did, read back off the delivery receipt (`notify/why.ts`).
    *  Absent for anything never delivered through a push, and for older rows written before
    *  the reason was recorded. Deliberately a debug affordance, shown small (owner,
    *  2026-08-07) — its real job is to give "this didn't need a call" something to be
    *  feedback ABOUT. */
-  why: z5.object({
+  why: z7.object({
     asked: NotifyLevelSchema,
     got: NotifyLevelSchema,
-    because: z5.enum(["unresponsive", "dismissed", "not_permitted", "silent", "coalesced", "agent_capped", "unplanned", "learned_raise"]).optional(),
-    line: z5.string()
+    because: z7.enum(["unresponsive", "dismissed", "not_permitted", "silent", "coalesced", "agent_capped", "unplanned", "learned_raise"]).optional(),
+    line: z7.string()
   }).optional(),
-  select: z5.enum(["one", "many", "rank", "confirm", "text"]).default("one"),
-  confirmStyle: z5.enum(["yesno", "approve"]).default("yesno").describe(
+  select: z7.enum(["one", "many", "rank", "confirm", "text"]).default("one"),
+  confirmStyle: z7.enum(["yesno", "approve"]).default("yesno").describe(
     "Labels for a select:'confirm' paige \u2014 'yesno' (Yes/No) or 'approve' (Approve/Deny). Ignored unless select is 'confirm'."
   ),
   /** Real downstream work is stuck behind this one — set by the agent, independent of
    *  urgency (see the main README's "premier use case" + docs/delivery/notify/states.md). Drives the
    *  inbox's blocking badge and the extra confirm step before dismissing it. */
-  blocking: z5.boolean().default(false),
+  blocking: z7.boolean().default(false),
   /** The user's locked-in answer; present only for replied items (GET /api/replied/:id). */
   answer: UserAnswerSchema.optional(),
   /** THE TARGET FACTS A CARD RENDERS (#1796 point 5, 2026-09-11): the Delivery it is a view of,
@@ -824,17 +1078,17 @@ var InboxItemSchema = z5.object({
    *  for a request that asks nothing), whether its content is sealed, and that Goal's state. The
    *  answer writer (`POST /api/entries`) and the disposition (`close_delivery`) take their ids from
    *  here. The server projects it (`apps/api/src/inbox/project.ts`); a client never builds it. */
-  communication: z5.object({
-    deliveryId: z5.string(),
-    kind: z5.enum(["notification", "call"]),
-    entryId: z5.string(),
-    goalIds: z5.array(z5.string()),
-    decisionNeedId: z5.string().optional(),
-    sealed: z5.boolean(),
-    goalState: z5.string().optional(),
+  communication: z7.object({
+    deliveryId: z7.string(),
+    kind: z7.enum(["notification", "call"]),
+    entryId: z7.string(),
+    goalIds: z7.array(z7.string()),
+    decisionNeedId: z7.string().optional(),
+    sealed: z7.boolean(),
+    goalState: z7.string().optional(),
     /** THAT GOAL'S NAME (#2416) — what Activity's row is headed by, since a row there is one Goal
      *  and the cards it holds sit behind it. Stamped by the same read as `goalState`. */
-    goalTitle: z5.string().optional()
+    goalTitle: z7.string().optional()
   }).optional(),
   /** WHAT THIS CARD IS, IN TWELVE CHARACTERS (#3019) — the hash of every other field on it, stamped
    *  by the one read that serves the open list (`apps/api/src/inbox/project.ts` `inboxFor`). It is
@@ -846,27 +1100,27 @@ var InboxItemSchema = z5.object({
    *  own moves (its Goal's state and name, how cold the work behind it has gone, whether a ring is
    *  live). Optional, so a fixture, the demo and the archive lens need not spell one, and a card
    *  with no rev is simply always re-sent. */
-  rev: z5.string().optional()
+  rev: z7.string().optional()
 });
 var APNS_TOKEN_RE = /^[0-9a-fA-F]{64}$/;
-var PushTokenSchema = z5.object({
-  voipToken: z5.string().min(1).optional(),
-  alertToken: z5.string().min(1).optional(),
-  fcmToken: z5.string().min(1).optional(),
-  platform: z5.enum(["ios", "android"])
+var PushTokenSchema = z7.object({
+  voipToken: z7.string().min(1).optional(),
+  alertToken: z7.string().min(1).optional(),
+  fcmToken: z7.string().min(1).optional(),
+  platform: z7.enum(["ios", "android"])
 }).superRefine((v, ctx) => {
   if (v.platform !== "ios") return;
   for (const field of ["voipToken", "alertToken"]) {
     const token = v[field];
     if (token === void 0 || APNS_TOKEN_RE.test(token)) continue;
     ctx.addIssue({
-      code: z5.ZodIssueCode.custom,
+      code: z7.ZodIssueCode.custom,
       path: [field],
       message: `not an APNs device token (want 64 hex chars, got ${token.length})`
     });
   }
 });
-var MissedCallSchema = z5.enum([
+var MissedCallSchema = z7.enum([
   "retry_10m",
   "retry_30m",
   "retry_60m",
@@ -878,31 +1132,31 @@ var MissedCallSchema = z5.enum([
 ]);
 var clock = (h) => h === 0 ? "midnight" : h === 12 ? "noon" : h < 12 ? `${h} am` : `${h - 12} pm`;
 var QUIET = ` Nothing rings from ${clock(NIGHT.from)} to ${clock(NIGHT.to)} your time; the count waits for morning.`;
-var BrokerTuningSchema = z5.object({
+var BrokerTuningSchema = z7.object({
   /** 'none' = skip the spoken ack after a mapped answer (power users find it slow). */
-  ackVerbosity: z5.enum(["normal", "none"]).optional(),
+  ackVerbosity: z7.enum(["normal", "none"]).optional(),
   /** How readily the mapper asks its one clarification: 'low' = only when truly
    *  uninterpretable, 'high' = whenever not fully certain. */
-  clarifyEagerness: z5.enum(["low", "normal", "high"]).optional(),
+  clarifyEagerness: z7.enum(["low", "normal", "high"]).optional(),
   /** The user's own shorthand: when they say `say`, they mean `mean`. */
-  phrasebook: z5.array(z5.object({ say: z5.string().min(1).max(60), mean: z5.string().min(1).max(120) })).max(24).optional(),
+  phrasebook: z7.array(z7.object({ say: z7.string().min(1).max(60), mean: z7.string().min(1).max(120) })).max(24).optional(),
   /** The language calls are PLANNED in, when the account has chosen one (#1272). Absent —
    *  which is every account today — means the agent's own words decide, per ask: a call
    *  about an English ask opens in English. This is the only thing that overrides that,
    *  and a live caller who switches language mid-call still outranks it (broker/lang.ts).
    *  Set per user (no UI yet), like `voiceTuning`. */
-  language: z5.enum(["en", "es"]).optional()
+  language: z7.enum(["en", "es"]).optional()
 });
-var UserSettingsSchema = z5.object({
-  permissions: z5.object({
-    call: z5.boolean(),
-    banner: z5.boolean(),
-    push: z5.boolean()
+var UserSettingsSchema = z7.object({
+  permissions: z7.object({
+    call: z7.boolean(),
+    banner: z7.boolean(),
+    push: z7.boolean()
   }),
   /** LockedIn / Default / DateNight on screen; the stored words are unchanged on purpose —
    *  they are an enum on a live column across every account, and the rename is a rename of
    *  what people read (owner, 2026-09-30). */
-  sessionMode: z5.enum(["default", "all_calls", "silent"]),
+  sessionMode: z7.enum(["default", "all_calls", "silent"]),
   /** `silentPush` lived here until #2813 and is now GONE, field and column both. It was kept as an
    *  optional long after DateNight stopped reading it, on the theory that a phone on an older
    *  bundle PATCHing the whole settings object would be REFUSED for sending a key we had stopped
@@ -911,7 +1165,7 @@ var UserSettingsSchema = z5.object({
    *  an old bundle's `silentPush` is accepted and ignored. Worth remembering before keeping the
    *  next dead field for the same reason. */
   /** Opt-in (default false) to using your content to improve Paigy and train models. */
-  improveConsent: z5.boolean(),
+  improveConsent: z7.boolean(),
   missedCall: MissedCallSchema.default("backoff_standard"),
   /** Where voice audio is processed. 'hosted' (default) = Paigy's voice services
    *  (ElevenLabs TTS, faster-whisper STT, the call bot); 'on_device' = the phone
@@ -919,17 +1173,17 @@ var UserSettingsSchema = z5.object({
    *  Optional, NOT defaulted: a stale client PATCHing the full settings object
    *  must not silently reset this privacy choice. Absent = leave unchanged on
    *  write, 'hosted' on read (see store.ts). */
-  voiceMode: z5.enum(["hosted", "on_device"]).optional(),
+  voiceMode: z7.enum(["hosted", "on_device"]).optional(),
   /** Talk — after you answer, the next step is read aloud (docs/clients/app/walk/design.md §6). ALWAYS ON until
    *  turned off (owner, 2026-09-18, #2249): a setting, not a per-walk toggle. Optional, NOT
    *  defaulted, for the same reason `voiceMode` is: a stale client PATCHing the full settings
    *  object must not silently turn it back on. Absent = leave unchanged on write, true on
    *  read (see store.ts). */
-  talk: z5.boolean().optional(),
+  talk: z7.boolean().optional(),
   /** CALL DIAGNOSTICS (owner, 2026-10-01): the call report carries each listen and the bot's own
    *  load timings. SERVER-SET, no UI — on for every account that existed on 2026-10-01, off for
    *  newer ones (migration 20261001132859). Read-only here: the settings PATCH never writes it. */
-  callDiagnostics: z5.boolean().optional(),
+  callDiagnostics: z7.boolean().optional(),
   /** Per-user ring budget (#603): calls per rolling day before further calls
    *  degrade to banner. Absent = the global default (25). A number, never a
    *  bypass — every account keeps a ceiling. No UI; set per user for testing. */
@@ -937,7 +1191,7 @@ var UserSettingsSchema = z5.object({
    *  payload['tuning'] (e.g. { silence_s: 3.5 } — a longer pause window for a
    *  slower speaker). No API-side semantics; the bot resolves each key with its
    *  own defaults. Set per user (no UI yet); absent = bot defaults. */
-  voiceTuning: z5.record(z5.string(), z5.union([z5.number(), z5.string()])).optional(),
+  voiceTuning: z7.record(z7.string(), z7.union([z7.number(), z7.string()])).optional(),
   /** The user's IANA timezone (e.g. "America/Bogota"), recorded by the app — it is the
    *  only party that knows it. REMINDERS are why it exists: "remind me at ten" becomes
    *  an absolute `due_at` only if we know whose ten. Optional and never defaulted, for
@@ -946,53 +1200,53 @@ var UserSettingsSchema = z5.object({
    *  that failure reads as the reminder rail being unreliable rather than as a missing
    *  setting. Absent = a spoken time can't be landed, so the reminder rides the next
    *  call — honest about what we know. */
-  timezone: z5.string().min(1).max(64).optional(),
+  timezone: z7.string().min(1).max(64).optional(),
   /** Rung-2 broker tuning (#381). Optional and NOT defaulted, same stale-client
    *  clobber guard as voiceMode: absent = leave unchanged on write. */
   broker: BrokerTuningSchema.optional()
 });
-var HistoryWorkSchema = z5.object({
-  id: z5.string(),
-  title: z5.string(),
-  state: z5.enum(["done", "cancelled"]),
+var HistoryWorkSchema = z7.object({
+  id: z7.string(),
+  title: z7.string(),
+  state: z7.enum(["done", "cancelled"]),
   /** Who held it (`agent:<tokenId>` or `human:<userId>`). */
-  assignee: z5.string()
+  assignee: z7.string()
 });
-var HistoryEntrySchema = z5.union([
-  z5.object({ at: z5.string(), card: InboxItemSchema }),
-  z5.object({ at: z5.string(), work: HistoryWorkSchema })
+var HistoryEntrySchema = z7.union([
+  z7.object({ at: z7.string(), card: InboxItemSchema }),
+  z7.object({ at: z7.string(), work: HistoryWorkSchema })
 ]);
-var HistoryPageSchema = z5.object({
-  entries: z5.array(HistoryEntrySchema),
-  next: z5.string().nullable()
+var HistoryPageSchema = z7.object({
+  entries: z7.array(HistoryEntrySchema),
+  next: z7.string().nullable()
 });
 var ACTIVITY_LINES = 2;
 var ACTIVITY_LINE_MAX = 80;
-var AgentActivitySchema = z5.object({
+var AgentActivitySchema = z7.object({
   /** Oldest first, so the newest line is last — the one that replaces in place. */
-  lines: z5.array(z5.string().max(ACTIVITY_LINE_MAX)).max(ACTIVITY_LINES),
+  lines: z7.array(z7.string().max(ACTIVITY_LINE_MAX)).max(ACTIVITY_LINES),
   /** When the harness observed this tail. Its own timestamp, not the heartbeat's: a beat
    *  that carries an UNCHANGED tail must not make a stalled agent look like it just moved. */
-  at: z5.string().datetime()
+  at: z7.string().datetime()
 });
-var ConnectionSummarySchema = z5.object({
+var ConnectionSummarySchema = z7.object({
   /** The connection = the agent's token id (used to address a request). */
-  id: z5.string(),
+  id: z7.string(),
   /** The credential kind: "device" = a paired machine (mint-only — it hosts and mints, it
    *  never talks); "agent" = an identity that sends. The roster and devices surfaces split
    *  on this. Optional/absent reads as "agent" (a row predating the kind column). See
    *  docs/server/tokens/devices-vs-agents-design.md. */
-  kind: z5.enum(["device", "agent"]).optional(),
+  kind: z7.enum(["device", "agent"]).optional(),
   /** For an agent, the token id of the DEVICE that minted it — so agents group under their
    *  machine, and revoking a device cascades to them. Null on devices, and on unlinked
    *  agents (phone-launched, provider-managed, or minted before the link existed). */
-  mintedByDevice: z5.string().nullable().optional(),
-  device: z5.string().nullable(),
+  mintedByDevice: z7.string().nullable().optional(),
+  device: z7.string().nullable(),
   /** The agent's display name (the single pairing name). */
-  name: z5.string(),
+  name: z7.string(),
   /** For a managed connection, the provider key (e.g. "cma") that agentOrigin maps to a
    *  label; null for a local connection. Sourced from the token's provider, not the name. */
-  provider: z5.string().nullable(),
+  provider: z7.string().nullable(),
   /** The pairing's assigned voice (#462); null = the default voice. */
   voice: VoiceKeySchema.nullable(),
   /** The LOUDEST this agent may ever reach you — a ceiling on `NOTIFY_LADDER`, set by the
@@ -1003,34 +1257,34 @@ var ConnectionSummarySchema = z5.object({
    *  every surface at once and outranks even `sessionMode: all_calls` — a mode the user
    *  set once must not overrule a rule they set about one agent. */
   reach: NotifyLevelSchema.nullable().optional(),
-  createdAt: z5.string().datetime(),
+  createdAt: z7.string().datetime(),
   /** Most recent notification on this connection, either direction. Null = no contact yet.
    *  Drives the agents-page recency grouping (Today / This week / …). */
-  lastContactAt: z5.string().datetime().nullable(),
+  lastContactAt: z7.string().datetime().nullable(),
   /** Last presence heartbeat from a running agent process (POST /api/presence) — the
    *  desktop app while open. Null = never seen; stale = offline. */
-  lastSeenAt: z5.string().datetime().nullable().optional(),
+  lastSeenAt: z7.string().datetime().nullable().optional(),
   /** WORKING, NOT JUST CONNECTED (owner, 2026-09-30): the last time the agent itself acted on one of
    *  its Goals — took its lease or recorded an operation (`tokens.last_worked_at`). Within
    *  `WORKING_MS` it is working; otherwise it is connected but idle. Null = not seen working yet. */
-  lastWorkedAt: z5.string().datetime().nullable().optional(),
+  lastWorkedAt: z7.string().datetime().nullable().optional(),
   /** The oldest of its Goals that is `ready` for it — work handed to it that nobody has started.
    *  With no work of its own for `WORKING_MS`, an agent sitting on this is not taking its work. */
-  oldestReadyAt: z5.string().datetime().nullable().optional(),
+  oldestReadyAt: z7.string().datetime().nullable().optional(),
   /** What a live desktop can run (docs/clients/desktop/companion.md §2.2), advertised on its heartbeat:
    *  harness availabilities + granted workspaces — the option set the phone's
    *  "new session" sheet offers. Absent for ordinary MCP agents. */
-  runtime: z5.object({
+  runtime: z7.object({
     /** The @paigy/harness this host is running — a machine the self-update has not reached
      *  shows its age here (`apps/desktop/src/update.ts`). */
-    version: z5.string().optional(),
-    harnesses: z5.array(z5.object({ name: z5.string(), label: z5.string(), status: z5.string() })).optional(),
-    workspaces: z5.array(z5.string()).optional(),
+    version: z7.string().optional(),
+    harnesses: z7.array(z7.object({ name: z7.string(), label: z7.string(), status: z7.string() })).optional(),
+    workspaces: z7.array(z7.string()).optional(),
     /** THE GIT REPOS IN THOSE FOLDERS (2026-10-01, Goal 26982211): each granted folder that is a
      *  repo, and each repo directly inside one, with its `origin` remote. A session started for
      *  work on `mauurda/paigy` opens in that repo rather than the folder above it, where the repo's
      *  own AGENTS.md is never read (`workspaceForRepo`). Absent on hosts that predate it. */
-    repos: z5.array(z5.object({ path: z5.string(), remote: z5.string() })).optional()
+    repos: z7.array(z7.object({ path: z7.string(), remote: z7.string() })).optional()
   }).optional(),
   /** The tail of this agent's working log, when a harness is driving it — the agent page's
    *  live strip. Absent for anything the desktop harness isn't running (a hatched identity
@@ -1039,156 +1293,156 @@ var ConnectionSummarySchema = z5.object({
   activity: AgentActivitySchema.optional(),
   /** True = a provider-managed agent running in the provider's cloud (e.g. Anthropic CMA);
    *  false = a local MCP connection running on the user's computer (Claude Code/Codex/…). */
-  managed: z5.boolean()
+  managed: z7.boolean()
 });
-var LedgerItemSchema = z5.object({ id: z5.string(), parentId: z5.string(), title: z5.string(), createdAt: z5.string() });
-var AgentLedgerSchema = z5.object({
+var LedgerItemSchema = z7.object({ id: z7.string(), parentId: z7.string(), title: z7.string(), createdAt: z7.string() });
+var AgentLedgerSchema = z7.object({
   /** Null when the agent has not named itself yet — never a placeholder (owner, 2026-10-01). */
-  agent: z5.object({ id: z5.string(), name: z5.string().nullable(), revokedAt: z5.string().nullable() }),
+  agent: z7.object({ id: z7.string(), name: z7.string().nullable(), revokedAt: z7.string().nullable() }),
   /** Its own questions you have not answered. */
-  asks: z5.array(LedgerItemSchema),
+  asks: z7.array(LedgerItemSchema),
   /** Its questions you answered that nobody acted on — still owed to somebody. */
-  answered: z5.array(LedgerItemSchema),
+  answered: z7.array(LedgerItemSchema),
   /** Requests you sent it that it never took. */
-  requests: z5.array(LedgerItemSchema),
-  goals: z5.array(z5.object({ id: z5.string(), outcome: z5.string(), state: z5.string() })),
-  callbacks: z5.array(z5.object({ id: z5.string(), parentId: z5.string(), trigger: z5.string(), note: z5.string(), dueAt: z5.string().nullable() }))
+  requests: z7.array(LedgerItemSchema),
+  goals: z7.array(z7.object({ id: z7.string(), outcome: z7.string(), state: z7.string() })),
+  callbacks: z7.array(z7.object({ id: z7.string(), parentId: z7.string(), trigger: z7.string(), note: z7.string(), dueAt: z7.string().nullable() }))
 });
-var ReassignResultSchema = z5.object({
-  moved: z5.object({ asks: z5.number(), answered: z5.number(), requests: z5.number(), goals: z5.number(), callbacks: z5.number() }),
-  parentId: z5.string().nullable()
+var ReassignResultSchema = z7.object({
+  moved: z7.object({ asks: z7.number(), answered: z7.number(), requests: z7.number(), goals: z7.number(), callbacks: z7.number() }),
+  parentId: z7.string().nullable()
 });
-var LessonStateSchema = z5.enum(["active", "proposed", "retired"]);
-var LessonViewSchema = z5.object({
-  id: z5.string(),
-  text: z5.string(),
+var LessonStateSchema = z7.enum(["active", "proposed", "retired"]);
+var LessonViewSchema = z7.object({
+  id: z7.string(),
+  text: z7.string(),
   state: LessonStateSchema,
   /** The Goal it is scoped to; null = the whole account. */
-  scopeGoalId: z5.string().nullable(),
-  goalTitle: z5.string().nullable(),
-  version: z5.number(),
-  pinned: z5.boolean(),
+  scopeGoalId: z7.string().nullable(),
+  goalTitle: z7.string().nullable(),
+  version: z7.number(),
+  pinned: z7.boolean(),
   /** When the person last wrote its text themselves. */
-  editedAt: z5.string().nullable(),
-  createdAt: z5.string(),
-  updatedAt: z5.string(),
+  editedAt: z7.string().nullable(),
+  createdAt: z7.string(),
+  updatedAt: z7.string(),
   /** The Entries it came from, oldest first; `words` is null when an Entry has none to show (sealed). */
-  sources: z5.array(z5.object({ entryId: z5.string(), words: z5.string().nullable(), at: z5.string() }))
+  sources: z7.array(z7.object({ entryId: z7.string(), words: z7.string().nullable(), at: z7.string() }))
 });
-var QueueQuestionSchema = z5.object({
+var QueueQuestionSchema = z7.object({
   /** The decision need's id — what an answer is accepted against. */
-  id: z5.string(),
+  id: z7.string(),
   /** The words that were asked, from the request Entry that asked them. */
-  question: z5.string(),
+  question: z7.string(),
   /** Where it was asked — which is where the ruling goes (`POST /api/entries`). Null only
    *  for a need whose request Entry is carried by no interactive Delivery, which nothing
    *  can answer. */
-  deliveryId: z5.string().nullable().default(null),
+  deliveryId: z7.string().nullable().default(null),
   /** The Entry the ruling is about. */
-  aboutId: z5.string().nullable().default(null),
+  aboutId: z7.string().nullable().default(null),
   /** Empty for a free-text question. */
-  options: z5.array(OptionSchema).default([]),
-  select: z5.enum(["one", "many", "rank", "confirm", "text"]).default("text"),
-  askedAt: z5.string(),
+  options: z7.array(OptionSchema).default([]),
+  select: z7.enum(["one", "many", "rank", "confirm", "text"]).default("text"),
+  askedAt: z7.string(),
   /** Null while the question is open — which is how the page tells the two apart. */
-  answeredAt: z5.string().nullable().default(null),
+  answeredAt: z7.string().nullable().default(null),
   /** The ruling in the person's own words, from the contribution that replied — not the
    *  option id, which is not something anyone reads back. Null while it is open, and null
    *  for a settled question whose reply carried nothing readable. */
-  answer: z5.string().nullable().default(null),
+  answer: z7.string().nullable().default(null),
   /** The Goal this question belongs to — a step knows its Goal on its own, not only through
    *  an `InboxItem`'s `communication.goalIds[0]` (docs/clients/app/walk/design.md §12 item 3).
    *  READ BY `apps/client/src/walk/order.ts`, which stamps it onto every `WalkStep`: the walk's
    *  order, its route, home's trees and the list of steps all take a step's Goal from here, so
    *  this is the field they agree through rather than each re-deriving it from the row it
    *  arrived under. Required because the API projects it on every need it sends. */
-  goalId: z5.string(),
+  goalId: z7.string(),
   /** True only while an unmet START gate holds the Goal — a Goal that merely waits to
    *  *finish* does not stop a person from answering (owner, 2026-09-16: "per need gate from
    *  the API"; §4's dashed node). Not the same fact as `QueueItem.blocked`, which counts any
    *  gate at all. */
-  blocked: z5.boolean().default(false)
+  blocked: z7.boolean().default(false)
 });
-var QueueReplySchema = z5.object({
+var QueueReplySchema = z7.object({
   /** The card this note was (`deliveryId:requestEntryId`, minted by the server like every card
    *  id) — so the phone can tell a reply it just sent from one the queue already carries, and the
    *  walk can name it in its zoom. */
-  id: z5.string(),
+  id: z7.string(),
   /** The Goal the note is on. */
-  goalId: z5.string(),
+  goalId: z7.string(),
   /** What the note said. */
-  note: z5.string(),
+  note: z7.string(),
   /** Where it was carried — where a second reply goes (`POST /api/entries`, #2252). */
-  deliveryId: z5.string(),
-  requestEntryId: z5.string(),
-  askedAt: z5.string(),
+  deliveryId: z7.string(),
+  requestEntryId: z7.string(),
+  askedAt: z7.string(),
   /** When the person last replied — the window's start. */
-  repliedAt: z5.string(),
+  repliedAt: z7.string(),
   /** The person's latest words about it; null when there is nothing readable in them. */
-  reply: z5.string().nullable()
+  reply: z7.string().nullable()
 });
-var QueueItemSchema = z5.object({
-  id: z5.string(),
+var QueueItemSchema = z7.object({
+  id: z7.string(),
   /** One-line headline — the first sentence of the outcome. */
-  title: z5.string(),
+  title: z7.string(),
   /** The outcome in full, verbatim: the person's own words are what an assignee sees. */
-  intent: z5.string(),
+  intent: z7.string(),
   /** `ready` | `active` | `waiting` | `done` | `cancelled`, straight off the Goal. */
-  state: z5.string(),
+  state: z7.string(),
   /** Who holds it (a participant ref); null when nobody does yet. */
-  assignee: z5.string().nullable().default(null),
+  assignee: z7.string().nullable().default(null),
   /** What the agent last said it was doing; null if it has said nothing. */
-  progress: z5.string().nullable().default(null),
+  progress: z7.string().nullable().default(null),
   /** HOME'S LINE FOR THAT NOTE (owner, 2026-09-23): a few plain words one read wrote from `progress`,
    *  served only while it was written for the current note. Null means show the Goal's name. */
-  progressLine: z5.string().nullable().optional(),
-  reviewPending: z5.boolean().default(false),
-  dueAt: z5.string().nullable().default(null),
+  progressLine: z7.string().nullable().optional(),
+  reviewPending: z7.boolean().default(false),
+  dueAt: z7.string().nullable().default(null),
   /** WHEN ITS OWNER SAID DONE WHILE CHILDREN WERE OPEN (#2704): its own work is finished and it closes
    *  with its last open child. Null otherwise; optional, so hand-built queues need not spell it. */
-  finishedAt: z5.string().nullable().optional(),
+  finishedAt: z7.string().nullable().optional(),
   /** The Goal this one was opened under; null at the root. */
-  parentGoalId: z5.string().nullable().default(null),
+  parentGoalId: z7.string().nullable().default(null),
   /** Goals opened under this one — only those the same list holds. */
-  childGoalIds: z5.array(z5.string()).default([]),
+  childGoalIds: z7.array(z7.string()).default([]),
   /** Goals this one waits on (start or finish gates). */
-  dependencyGoalIds: z5.array(z5.string()).default([]),
+  dependencyGoalIds: z7.array(z7.string()).default([]),
   /** True while any gate is on a Goal that is not done — the walk draws it dashed. */
-  blocked: z5.boolean().default(false),
+  blocked: z7.boolean().default(false),
   /** Its questions: every OPEN one, and at most ten settled, newest settled first
    *  (20260929133308) — the page decides which of them to show. NOT the whole set: `asked` and
    *  `answered` are, and a settled one's words are a line (280 characters), its body read when the
    *  question is opened. */
-  questions: z5.array(QueueQuestionSchema).default([]),
+  questions: z7.array(QueueQuestionSchema).default([]),
   /** HOW MANY QUESTIONS THIS WORK HAS ASKED, and how many are answered — the Goal's own totals,
    *  bounded at 100 server-side. A tally counted off `questions` is a wrong number that looks
    *  right once the cap bites (`walk/trees.ts` `tallyOf`). Optional, and defaulted from the array
    *  by the projection, so hand-built queues (fixtures, the demo) need not spell them. */
-  asked: z5.number().optional(),
-  answered: z5.number().optional(),
+  asked: z7.number().optional(),
+  answered: z7.number().optional(),
   /** Every note on it the person replied to (`QueueReplySchema`) — the page decides which to show.
    *  Optional, not defaulted: absent is none, and every hand-built queue (fixtures, the demo) need
    *  not spell an empty list. */
-  replies: z5.array(QueueReplySchema).optional(),
+  replies: z7.array(QueueReplySchema).optional(),
   /** The repository or project identifier this Goal belongs to (#2280), null if untracked. */
-  repo: z5.string().nullable().optional(),
-  createdAt: z5.string(),
-  updatedAt: z5.string().nullable().default(null),
-  /** When its owner last SAID something about it (`goals.last_progress_at`, written by every
-   *  `update_goal` that changes `progress`). `updatedAt` moves for reasons nobody chose — a
+  repo: z7.string().nullable().optional(),
+  createdAt: z7.string(),
+  updatedAt: z7.string().nullable().default(null),
+  /** When its owner last SAID something about it (the newest `progress` Entry: a contact update kept
+   *  as progress). `updatedAt` moves for reasons nobody chose — a
    *  state recomputed, a review flag — so it cannot tell work in hand from work gone quiet. */
-  lastProgressAt: z5.string().nullable().optional(),
+  lastProgressAt: z7.string().nullable().optional(),
   /** THE GOAL'S NEWEST WORD, FROM EITHER SIDE (owner, 2026-09-27): the newest Entry on it, of any
    *  kind — what the person added ("Add to this"), their reply, the agent's ask or its progress
    *  note. A progress note is an Entry, so this is already the newer of the two: the person's note
    *  shows the moment it is written, and the agent's reply or next note replaces it by being newer.
    *  `said` is bounded to 280 characters server-side (a line, not the conversation). Null when the
    *  Goal carries no readable Entry; optional, so hand-built queues need not spell it. */
-  latest: z5.object({
-    from: z5.enum(["person", "agent"]),
-    said: z5.string(),
-    at: z5.string(),
-    entryId: z5.string()
+  latest: z7.object({
+    from: z7.enum(["person", "agent"]),
+    said: z7.string(),
+    at: z7.string(),
+    entryId: z7.string()
   }).nullable().optional(),
   /** WHEN THIS PERSON LAST PUT A HAND ON IT THEMSELVES (owner, Paigy Goal 16d18f51, 2026-09-30):
    *  the newest Entry on the Goal they wrote, of any kind — a line they added, a reply to a note, an
@@ -1201,7 +1455,7 @@ var QueueItemSchema = z5.object({
    *  minute after the person speaks erases their instant from it, and the durable traces the client
    *  can see (`replies`, `questions[].answeredAt`) miss a spontaneous note entirely — a `request`
    *  Entry with no `about_id` is in neither. */
-  lastPersonAt: z5.string().nullable().optional(),
+  lastPersonAt: z7.string().nullable().optional(),
   /** WHAT THIS ROW IS, IN TWELVE CHARACTERS (#2928) — the hash of every other field on it, stamped
    *  by the one projection that builds the row (`apps/api/src/goal/queue.ts`). It is how the
    *  incremental read knows a row has not moved: the phone echoes back the revs it holds
@@ -1212,40 +1466,40 @@ var QueueItemSchema = z5.object({
    *  the row shows that no `updated_at` moves for (a lease lapsing, a dependency's state, a
    *  sibling appearing in `childGoalIds`) cannot go unnoticed. Optional because a hand-built
    *  queue (a fixture, the demo) spells none, and a row with no rev is simply always re-sent. */
-  rev: z5.string().optional()
+  rev: z7.string().optional()
 });
-var QueueDeltaSchema = z5.object({
-  ids: z5.array(z5.string()),
-  items: z5.array(QueueItemSchema)
+var QueueDeltaSchema = z7.object({
+  ids: z7.array(z7.string()),
+  items: z7.array(QueueItemSchema)
 });
 var COLD_AFTER_MS = 3 * 24 * 60 * 60 * 1e3;
-var NoteSourceSchema = z5.enum(["app", "call"]);
-var NoteStatusSchema = z5.enum(["open", "assigned", "in_progress", "done"]);
-var NoteRepeatSchema = z5.enum(["once", "until_done"]);
-var DecisionSchema = z5.object({
-  id: z5.string(),
+var NoteSourceSchema = z7.enum(["app", "call"]);
+var NoteStatusSchema = z7.enum(["open", "assigned", "in_progress", "done"]);
+var NoteRepeatSchema = z7.enum(["once", "until_done"]);
+var DecisionSchema = z7.object({
+  id: z7.string(),
   /** The note this decision refines; null = recorded on a bare thread (the
    *  extensibility seam — any conversation can accrue decisions). */
-  noteId: z5.string().nullable(),
+  noteId: z7.string().nullable(),
   /** What was ambiguous — the broker's (or the user's own) question. */
-  question: z5.string(),
+  question: z7.string(),
   /** The user's ruling; null while the question is open. */
-  answer: z5.string().nullable(),
-  decidedAt: z5.string().nullable(),
-  createdAt: z5.string()
+  answer: z7.string().nullable(),
+  decidedAt: z7.string().nullable(),
+  createdAt: z7.string()
 });
-var NoteSchema = z5.object({
-  id: z5.string(),
+var NoteSchema = z7.object({
+  id: z7.string(),
   /** One-line headline (broker-titled; deterministic floor). */
-  title: z5.string(),
+  title: z7.string(),
   /** The original intent, verbatim — assignees always see the user's own words. */
-  intent: z5.string(),
+  intent: z7.string(),
   source: NoteSourceSchema,
   status: NoteStatusSchema,
   /** Who it was assigned to (a participant ref, 'agent:<tokenId>'); null = unassigned. */
-  assignee: z5.string().nullable(),
+  assignee: z7.string().nullable(),
   /** The request thread minted at assignment; null until assigned. */
-  parentId: z5.string().nullable(),
+  parentId: z7.string().nullable(),
   /** REMINDERS (docs/model/notes/reminders-design.md): the NOT-BEFORE this becomes eligible to ride a
    *  call — never a deadline. It only ever comes from the user's own words, so when it
    *  passes Paigy rings ONCE (#1293, owner 2026-08-26: a time said out loud is consent to
@@ -1254,152 +1508,152 @@ var NoteSchema = z5.object({
   //  Defaulted, not required: a Note from an API deploy older than the reminders
   //  migration has none of these, and the defaults ARE what it means — no not-before,
   //  one ride, never ridden. Parsing must not fail across a rolling deploy.
-  dueAt: z5.string().nullable().default(null),
+  dueAt: z7.string().nullable().default(null),
   repeat: NoteRepeatSchema.default("once"),
   /** How many calls have already carried it — the fatigue cap counts rides, not days. */
-  rides: z5.number().int().default(0),
-  lastRideAt: z5.string().nullable().default(null),
-  createdAt: z5.string()
+  rides: z7.number().int().default(0),
+  lastRideAt: z7.string().nullable().default(null),
+  createdAt: z7.string()
 });
-var TriageItemSchema = z5.object({
-  noteId: z5.string(),
+var TriageItemSchema = z7.object({
+  noteId: z7.string(),
   /** The note's headline at run time. */
-  title: z5.string(),
+  title: z7.string(),
   /** WHY, in one short human line, evidence first — this is read on a phone underneath
    *  the note's title: "no movement in 34 days", "worked 3 notes in this repo this week".
    *  Never a model's reasoning transcript, never an id. */
-  why: z5.string()
+  why: z7.string()
 });
-var TriageAssignmentSchema = z5.object({
+var TriageAssignmentSchema = z7.object({
   /** The agent's token id — what `dispatchNote` resolves and what a request is addressed to. */
-  agent: z5.string(),
+  agent: z7.string(),
   /** Its display name at run time (the name on the hatchling's card). Denormalized for the
    *  same reason as `title`: the card must render from the proposal alone. */
-  agentName: z5.string(),
-  notes: z5.array(TriageItemSchema)
+  agentName: z7.string(),
+  notes: z7.array(TriageItemSchema)
 });
-var TriageStatusSchema = z5.enum(["open", "superseded", "dismissed"]);
-var SubmitTriageSchema = z5.object({
+var TriageStatusSchema = z7.enum(["open", "superseded", "dismissed"]);
+var SubmitTriageSchema = z7.object({
   /** Which runtime judged: "ollama" (inference never left the machine) or a harness the
    *  user already runs under their own credentials ("claude" / "codex" / "agy"). Recorded
    *  so the phone can say where the content went — an unattributed privacy claim is worth
    *  nothing, and #1106's promise is precisely "Paigy's servers never see this". */
-  provider: z5.string().min(1).max(60),
+  provider: z7.string().min(1).max(60),
   /** The concrete model when the provider names one (an ollama tag); null otherwise. */
-  model: z5.string().max(200).nullable().optional(),
+  model: z7.string().max(200).nullable().optional(),
   /** How many open notes the run actually looked at — the denominator on the phone
    *  ("6 of 50"), and the honest answer to "did it read the whole queue?". */
-  reviewed: z5.number().int().min(0).max(1e4).default(0),
-  close: z5.array(TriageItemSchema).max(200).default([]),
-  stale: z5.array(TriageItemSchema).max(200).default([]),
-  assign: z5.array(TriageAssignmentSchema).max(50).default([])
+  reviewed: z7.number().int().min(0).max(1e4).default(0),
+  close: z7.array(TriageItemSchema).max(200).default([]),
+  stale: z7.array(TriageItemSchema).max(200).default([]),
+  assign: z7.array(TriageAssignmentSchema).max(50).default([])
 });
 var TriageProposalSchema = SubmitTriageSchema.extend({
-  id: z5.string(),
-  runAt: z5.string(),
+  id: z7.string(),
+  runAt: z7.string(),
   status: TriageStatusSchema,
-  model: z5.string().nullable().default(null)
+  model: z7.string().nullable().default(null)
 });
-var AcceptTriageSchema = z5.discriminatedUnion("group", [
-  z5.object({ group: z5.literal("close"), noteIds: z5.array(z5.string()).max(200).optional() }),
-  z5.object({ group: z5.literal("stale"), noteIds: z5.array(z5.string()).max(200).optional() }),
-  z5.object({
-    group: z5.literal("assign"),
-    agent: z5.string().min(1),
-    noteIds: z5.array(z5.string()).max(200).optional()
+var AcceptTriageSchema = z7.discriminatedUnion("group", [
+  z7.object({ group: z7.literal("close"), noteIds: z7.array(z7.string()).max(200).optional() }),
+  z7.object({ group: z7.literal("stale"), noteIds: z7.array(z7.string()).max(200).optional() }),
+  z7.object({
+    group: z7.literal("assign"),
+    agent: z7.string().min(1),
+    noteIds: z7.array(z7.string()).max(200).optional()
   })
 ]);
-var AcceptTriageResultSchema = z5.object({
-  accepted: z5.array(z5.string()),
-  failed: z5.array(z5.object({ noteId: z5.string(), reason: z5.string() }))
+var AcceptTriageResultSchema = z7.object({
+  accepted: z7.array(z7.string()),
+  failed: z7.array(z7.object({ noteId: z7.string(), reason: z7.string() }))
 });
-var DeliveryModeSchema = z5.enum(["poll", "self_hosted"]);
-var RegisterDeliverySchema = z5.object({ mode: DeliveryModeSchema });
-var OAuthStartSchema = z5.object({
-  provider: z5.enum(["cma"]),
-  returnTo: z5.string().min(1)
+var DeliveryModeSchema = z7.enum(["poll", "self_hosted"]);
+var RegisterDeliverySchema = z7.object({ mode: DeliveryModeSchema });
+var OAuthStartSchema = z7.object({
+  provider: z7.enum(["cma"]),
+  returnTo: z7.string().min(1)
 });
-var DeliveryConfigSchema = z5.object({
-  tokenId: z5.string(),
+var DeliveryConfigSchema = z7.object({
+  tokenId: z7.string(),
   mode: DeliveryModeSchema,
   /** null when the deployment has no anon key configured. `self_hosted` is then REFUSED
    *  (503 `self_hosted_unavailable`) rather than registered, so a self_hosted config always
    *  carries credentials; only a `poll` registration can come back with null here. */
-  realtime: z5.object({ url: z5.string(), anonKey: z5.string() }).nullable()
+  realtime: z7.object({ url: z7.string(), anonKey: z7.string() }).nullable()
 });
-var HostDecisionSchema = z5.object({
+var HostDecisionSchema = z7.object({
   /** The agent's token id: the row's `recipient`. */
-  agent: z5.string().uuid(),
-  decision: z5.enum(["stood_back", "took_over"]),
+  agent: z7.string().uuid(),
+  decision: z7.enum(["stood_back", "took_over"]),
   /** The work it was about: the Goal `claim_goal` would hand that agent next. */
-  goalId: z5.string().uuid().nullable().optional(),
+  goalId: z7.string().uuid().nullable().optional(),
   /** When the server last heard from the agent, as the host read it: the presence it stood back for. */
-  seenAt: z5.string().datetime().nullable().optional(),
-  /** When that work last moved (`claimable.since` on `check_replies`), the fact the bound is judged on. */
-  since: z5.string().datetime().nullable().optional(),
+  seenAt: z7.string().datetime().nullable().optional(),
+  /** When that work last moved (`claimable.since` on an agent's `contact({})` read), the fact the bound is judged on. */
+  since: z7.string().datetime().nullable().optional(),
   /** What the host said, in its log's own words: why it stood back, or what the take-over did. */
-  said: z5.string().max(300).optional()
+  said: z7.string().max(300).optional()
 });
-var WakeNudgeSchema = z5.object({
-  kind: z5.enum(["reply", "request", "callback"]),
-  notificationId: z5.string().optional(),
-  parentId: z5.string()
+var WakeNudgeSchema = z7.object({
+  kind: z7.enum(["reply", "request", "callback"]),
+  notificationId: z7.string().optional(),
+  parentId: z7.string()
 });
-var PairingStatusSchema = z5.enum(["pending", "approved", "denied", "expired"]);
-var DeviceCodeSchema = z5.object({
-  device_code: z5.string(),
-  user_code: z5.string(),
-  verification_uri: z5.string().url(),
-  verification_uri_complete: z5.string().url(),
-  interval: z5.number(),
-  expires_in: z5.number()
+var PairingStatusSchema = z7.enum(["pending", "approved", "denied", "expired"]);
+var DeviceCodeSchema = z7.object({
+  device_code: z7.string(),
+  user_code: z7.string(),
+  verification_uri: z7.string().url(),
+  verification_uri_complete: z7.string().url(),
+  interval: z7.number(),
+  expires_in: z7.number()
 });
-var DeviceInfoSchema = z5.object({
-  code: z5.string(),
+var DeviceInfoSchema = z7.object({
+  code: z7.string(),
   /** The agent's suggested name (from /device/code) — shown on the approval screen,
    *  pre-filling the name field the human can edit. */
-  name: z5.string(),
+  name: z7.string(),
   /** @deprecated Legacy alias of `name` for the pre-#531 embedded bundle in App Store
    *  build 35, whose DeviceFlow renders `info.agent.slice(0, 2)` — without this a FRESH
    *  install crashes on the pairing screen on first launch, before the OTA lands
    *  (seen live: PAIGY-5T, 2026-07-21). Remove once a newer binary is the floor. */
-  agent: z5.string().optional(),
-  device: z5.string().nullable(),
+  agent: z7.string().optional(),
+  device: z7.string().nullable(),
   status: PairingStatusSchema
 });
-var DeviceTokenSchema = z5.object({
-  access_token: z5.string(),
+var DeviceTokenSchema = z7.object({
+  access_token: z7.string(),
   /** The pairing's single name (user-typed at approval, the agent's suggestion, or
    *  a default silly name). */
-  name: z5.string(),
-  device: z5.string().nullable(),
+  name: z7.string(),
+  device: z7.string().nullable(),
   /** The pairing's assigned voice, cached so the desktop can seed the SAME face the phone
    *  draws — voice is the third ingredient of a hatchling's build (party/traits.ts). */
-  voice: z5.string().nullable().optional(),
+  voice: z7.string().nullable().optional(),
   /** The token's server-side id — the face's COLOUR anchor, and the only seed ingredient
    *  that survives a rename. Cached by the host's identity beat. */
-  token_id: z5.string().nullable().optional(),
+  token_id: z7.string().nullable().optional(),
   /** WHERE this identity works — the folder a wake should land it in. Written by the host
    *  at spawn and by `paigy-harness handoff` from a live terminal. Without it every wake
    *  landed in the FIRST granted workspace and the agent rediscovered its own repo from
    *  the thread each time (host.ts, live catch 2026-08-06 — prompt-papered until now). */
-  workspace: z5.string().nullable().optional(),
+  workspace: z7.string().nullable().optional(),
   /** Local host recovery must preserve the launch's runtime and Paigy identity. */
-  harness: z5.enum(["claude", "codex", "agy"]).optional(),
-  session_id: z5.string().uuid().optional(),
+  harness: z7.enum(["claude", "codex", "agy"]).optional(),
+  session_id: z7.string().uuid().optional(),
   /** A conversation the host must not resume: its context is full, so every turn fails
    *  ("Prompt is too long"). Written when a run hits it (`run.ts` `onFull`); the host skips a slot
    *  whose resumable session is this one, so its Goals reach the dead-agent handoff instead of a
    *  copy that types the person's words into a turn that cannot run (Calls, 2026-10-06). */
-  full_session: z5.string().optional(),
-  uik_pub: z5.string().nullable().optional()
+  full_session: z7.string().optional(),
+  uik_pub: z7.string().nullable().optional()
 });
-var SupportRequestSchema = z5.object({
-  email: z5.string().email().max(320),
-  message: z5.string().trim().min(1).max(5e3),
-  name: z5.string().trim().max(120).optional()
+var SupportRequestSchema = z7.object({
+  email: z7.string().email().max(320),
+  message: z7.string().trim().min(1).max(5e3),
+  name: z7.string().trim().max(120).optional()
 });
-var NotificationFeedbackKindSchema = z5.enum([
+var NotificationFeedbackKindSchema = z7.enum([
   "break_down",
   // "This should be more than one ask — break it down."
   "regenerate_options",
@@ -1414,116 +1668,116 @@ var NotificationFeedbackKindSchema = z5.enum([
   // anything else — the note carries it.
 ]);
 var SlimOptionSchema = OptionSchema.omit({ html: true });
-var QuestionRowSchema = z5.object({
+var QuestionRowSchema = z7.object({
   /** The card's id (`deliveryId:needId`, or `deliveryId:entryId` for an update), as the inbox mints it. */
-  id: z5.string(),
-  deliveryId: z5.string(),
-  entryId: z5.string(),
+  id: z7.string(),
+  deliveryId: z7.string(),
+  entryId: z7.string(),
   /** The decision it waits on; null for an update, which asks nothing. */
-  needId: z5.string().nullable(),
-  goalIds: z5.array(z5.string()),
+  needId: z7.string().nullable(),
+  goalIds: z7.array(z7.string()),
   /** The name of the work it is about, when the read could word it. */
-  goalTitle: z5.string().optional(),
-  tokenId: z5.string().optional(),
-  name: z5.string(),
-  title: z5.string(),
-  body: z5.string(),
-  select: z5.enum(["one", "many", "rank", "confirm", "text"]),
-  options: z5.array(SlimOptionSchema),
-  hasPreview: z5.boolean(),
-  blocking: z5.boolean(),
-  askedAt: z5.string().datetime(),
+  goalTitle: z7.string().optional(),
+  tokenId: z7.string().optional(),
+  name: z7.string(),
+  title: z7.string(),
+  body: z7.string(),
+  select: z7.enum(["one", "many", "rank", "confirm", "text"]),
+  options: z7.array(SlimOptionSchema),
+  hasPreview: z7.boolean(),
+  blocking: z7.boolean(),
+  askedAt: z7.string().datetime(),
   ring: InboxItemSchema.shape.ring,
-  onCall: z5.literal(true).optional(),
-  sealed: z5.boolean()
+  onCall: z7.literal(true).optional(),
+  sealed: z7.boolean()
 });
-var WorkStateSchema = z5.enum(["ready", "active", "waiting", "done", "cancelled"]);
-var WorkRowSchema = z5.object({
-  id: z5.string(),
-  parentId: z5.string().nullable(),
-  title: z5.string(),
+var WorkStateSchema = z7.enum(["ready", "active", "waiting", "done", "cancelled"]);
+var WorkRowSchema = z7.object({
+  id: z7.string(),
+  parentId: z7.string().nullable(),
+  title: z7.string(),
   /** Straight off the Goal. */
   state: WorkStateSchema,
-  owner: z5.string().nullable(),
-  revision: z5.number().int(),
+  owner: z7.string().nullable(),
+  revision: z7.number().int(),
   /** Open questions on it, counted to 100. */
-  waiting: z5.number().int(),
+  waiting: z7.number().int(),
   /** Held by a gate on work that is not done. */
-  blocked: z5.boolean(),
-  lastProgressAt: z5.string().datetime().nullable(),
+  blocked: z7.boolean(),
+  lastProgressAt: z7.string().datetime().nullable(),
   /** The line written for its newest progress note, else that note's first words. */
-  line: z5.string().nullable(),
+  line: z7.string().nullable(),
   /** Work directly under it, counted to 100; the list carries up to 12 of them. */
-  children: z5.number().int(),
-  createdAt: z5.string().datetime(),
-  updatedAt: z5.string().datetime(),
+  children: z7.number().int(),
+  createdAt: z7.string().datetime(),
+  updatedAt: z7.string().datetime(),
   /** When anything at or under it last moved — the order the list is in. */
-  activeAt: z5.string().datetime(),
+  activeAt: z7.string().datetime(),
   /** A sealed outcome has no title here; the work's page opens it. */
-  sealed: z5.boolean()
+  sealed: z7.boolean()
 });
 var ComputerRowSchema = ConnectionSummarySchema.omit({ activity: true });
 var AgentRowSchema = ComputerRowSchema.extend({
   /** Open questions it is asking the person, over every open card; null when that read failed. */
-  asking: z5.number().int().nullable(),
-  oldestAskAt: z5.string().datetime().nullable(),
+  asking: z7.number().int().nullable(),
+  oldestAskAt: z7.string().datetime().nullable(),
   /** Up to three of the live Goals it holds, oldest first (the order it picks them up), and how
    *  many in all among the account's 200 most recently active agent-held live Goals
    *  (`agent_holds`); null when that read failed. */
-  holds: z5.array(z5.object({ id: z5.string(), title: z5.string() })).nullable(),
-  held: z5.number().int().nullable(),
+  holds: z7.array(z7.object({ id: z7.string(), title: z7.string() })).nullable(),
+  held: z7.number().int().nullable(),
   /** The earliest instant any Goal it holds went quiet, by the one rule (`coldSince`); null
    *  while none has, or when that read failed. */
-  cold: z5.string().datetime().nullable(),
+  cold: z7.string().datetime().nullable(),
   /** The newest line of its working log, and when the harness saw it. */
-  line: z5.string().nullable(),
-  lineAt: z5.string().datetime().nullable()
+  line: z7.string().nullable(),
+  lineAt: z7.string().datetime().nullable()
 });
-var SnapshotSchema = z5.object({
+var SnapshotSchema = z7.object({
   /** The API's clock, taken before the first read: what a later delta will start from. */
-  at: z5.string().datetime(),
-  questions: z5.object({
+  at: z7.string().datetime(),
+  questions: z7.object({
     /** The newest 30 open cards, questions before updates. */
-    items: z5.array(QuestionRowSchema),
+    items: z7.array(QuestionRowSchema),
     /** Every open question, and apart from them every update, and what was put off. */
-    total: z5.number().int(),
-    updates: z5.number().int(),
-    putOff: z5.number().int()
+    total: z7.number().int(),
+    updates: z7.number().int(),
+    putOff: z7.number().int()
   }).nullable(),
-  agents: z5.object({
+  agents: z7.object({
     /** Up to 60, most recently seen first. */
-    items: z5.array(AgentRowSchema),
-    more: z5.boolean()
+    items: z7.array(AgentRowSchema),
+    more: z7.boolean()
   }).nullable(),
-  work: z5.object({
+  work: z7.object({
     /** The 60 most recently active roots, each followed by up to 12 children; 240 rows at most. */
-    items: z5.array(WorkRowSchema),
+    items: z7.array(WorkRowSchema),
     /** How much work is behind each of the Work tab's four filters, each counted to 100, read with
      *  the rows. `work_list` (20260928023533) owns the predicates: Live is `ready`, `active` or
      *  `waiting`; Waiting on you is live work with an open question or an unmet gate; Not started
      *  is `ready`; Done is `done` or `cancelled`. */
-    counts: z5.object({ live: z5.number().int(), waiting: z5.number().int(), notStarted: z5.number().int(), done: z5.number().int() })
+    counts: z7.object({ live: z7.number().int(), waiting: z7.number().int(), notStarted: z7.number().int(), done: z7.number().int() })
   }).nullable(),
-  you: z5.object({
+  you: z7.object({
     settings: UserSettingsSchema,
-    callable: z5.boolean(),
+    callable: z7.boolean(),
     /** Up to 20 paired computers; null when the roster read failed. */
-    computers: z5.array(ComputerRowSchema).nullable()
+    computers: z7.array(ComputerRowSchema).nullable()
   }).nullable()
 });
-var CallRecapSchema = z5.object({
-  call: z5.object({
-    status: z5.string(),
-    startedAt: z5.string(),
-    durationMs: z5.number().nullable(),
-    agents: z5.array(z5.object({ id: z5.string(), name: z5.string().nullable() }))
+var CallRecapSchema = z7.object({
+  call: z7.object({
+    status: z7.string(),
+    startedAt: z7.string(),
+    durationMs: z7.number().nullable(),
+    agents: z7.array(z7.object({ id: z7.string(), name: z7.string().nullable() }))
   }),
-  topics: z5.array(z5.object({
-    goalId: z5.string().uuid(),
-    title: z5.string(),
-    owner: z5.string(),
-    state: z5.string(),
-    questions: z5.array(z5.object({ id: z5.string().uuid(), state: z5.string(), title: z5.string() })),
+  topics: z7.array(z7.object({
+    goalId: z7.string().uuid(),
+    title: z7.string(),
+    owner: z7.string(),
+    state: z7.string(),
+    questions: z7.array(z7.object({ id: z7.string().uuid(), state: z7.string(), title: z7.string() })),
     /** `words` is always what they SAID, verbatim — the record, never replaced. `headline` is
      *  their answer on one line when the call's read wrote one (owner, 2026-10-01: "render them
      *  summarized like a pre-made option is"), so the row scans like a chosen option and their
@@ -1531,10 +1785,10 @@ var CallRecapSchema = z5.object({
      *  anything that is not an answer. */
     /** `about` is the request the line answered (its question), null for words that answered none —
      *  the key the screen groups on, so one question is one row however many times it was answered. */
-    lines: z5.array(z5.object({ entryId: z5.string().uuid(), words: z5.string(), headline: z5.string().optional(), about: z5.string().nullable().optional() }))
+    lines: z7.array(z7.object({ entryId: z7.string().uuid(), words: z7.string(), headline: z7.string().optional(), about: z7.string().nullable().optional() }))
   })),
-  unfiled: z5.array(z5.object({ lineId: z5.string().uuid(), words: z5.string(), atMs: z5.number() })),
-  more: z5.object({ lines: z5.number(), entries: z5.number(), topics: z5.number() })
+  unfiled: z7.array(z7.object({ lineId: z7.string().uuid(), words: z7.string(), atMs: z7.number() })),
+  more: z7.object({ lines: z7.number(), entries: z7.number(), topics: z7.number() })
 });
 
 // src/listening.ts
@@ -1555,7 +1809,7 @@ function sessionStartHook() {
 [ -f "\${HOME}/.paigy/token.json" ] || exit 0  # not paired on this machine: nothing to listen as
 cat <<'PAIGY'
 Paigy: nothing pushes answers into a session started in a terminal \u2014 an answer waits for your
-next check_replies. Start your own listener now, as a BACKGROUND task whose output you watch
+next contact({ wait: false }). Start your own listener now, as a BACKGROUND task whose output you watch
 (your harness's monitor/background-task tool), and leave it running for this session:
 
   npx -y -p @paigy/mcp@latest paigy-listen
@@ -1591,12 +1845,6 @@ function decideListen(f) {
       message: "Already listening: this session was started by the Paigy harness, whose pump delivers every answer into it as it lands. Nothing to start."
     };
   }
-  if (!f.token) {
-    return {
-      status: "unpaired",
-      message: "Not paired: no token in this session's slot, so there is no identity to listen as \u2014 call onboard first."
-    };
-  }
   if (f.pidAlive && f.pid !== void 0) {
     const connected = f.wake?.ready === true && (f.wake.target.kind !== "codex" || f.wake.target.thread === f.env.CODEX_THREAD_ID);
     return { status: connected ? "listening" : "receiving", via: "daemon", pid: f.pid, ...f.wake ? { wake: f.wake } : {}, message: connected ? `Listener running (pid ${f.pid}); wake adapter ready. A queued message is not proof the agent handled it.` : `Listener running (pid ${f.pid}), but automatic session resume is not confirmed${f.wake?.lastError ? `: ${f.wake.lastError}` : ". Watch its output or configure a supported wake adapter"}. Do not start a second listener.` };
@@ -1656,6 +1904,7 @@ export {
   AGENT_TOOLS,
   serverInstructions,
   entryWords,
+  entryUnit,
   harnessDriven,
   sessionStartHook,
   withSessionStartHook,