tryharness 0.7.16 → 0.7.22

package/lib/daemon.mjs

@@ -13,9 +13,10 @@ import { parseSessionFile } from "./parsers.mjs";
 import { historyRoots, paths } from "./paths.mjs";
 import { openStore } from "./store.mjs";
 import { readRunSteps, runAgentTask, runningPids, stopAgentTask } from "./runner.mjs";
-import { createSwarm, nativeSessionId } from "./swarm.mjs";
+import { PROCESS_NAMES, createSwarm, nativeSessionId } from "./swarm.mjs";
 import { createCoordinator } from "./coordinator.mjs";
 import { createWorktrees } from "./worktrees.mjs";
+import { createFolders } from "./folders.mjs";
 import { notificationFor, notifyDesktop } from "./notify.mjs";
 import { secretReason } from "./secrets.mjs";
 import { provenanceFor, provenanceLine } from "./provenance.mjs";
@@ -27,11 +28,13 @@ import { ASKED_BY_TASK, CLOUD_HOMED, MACHINE_RUNNERS, TARGETS, aboutOf, member,
 import { fingerprint, openBound, openBytes, relayKey, sealBound, sealBytes } from "./sealed.mjs";
 import { claudeMemNotes } from "./claudemem.mjs";
 import { machineActivity } from "./activity.mjs";
-import { LIVE_AGENTS, focusTerminal, hostApp, liveSessions, processTable, sessionFeed, sessionFile, sessionOfProcess, workingDirectories } from "./live.mjs";
-import { EDITOR_IDS, agentCommand, editorFolder, editorInstall, editorName, editorTerminalStarts, openEditorFolder, panelLink, placeEnv, placeFrom, placeKey, processEnv, resumeLine, t3App, t3Link, t3Model, t3Open, t3OpensLinks, t3Project, t3Provider, t3Runs, t3Thread } from "./places.mjs";
+import { LIVE_AGENTS, focusTerminal, hostApp, liveSessions, opencodeFeed, processTable, sessionFeed, sessionFile, sessionOfProcess, workingDirectories } from "./live.mjs";
+import { EDITOR_IDS, agentCommand, editorFolder, editorInstall, editorName, editorRunsOpenTasks, editorSessionWorkspace, editorTerminalStarts, openEditorFolder, panelLink, placeEnv, placeFrom, placeKey, processEnv, resumeLine, t3App, t3Link, t3Model, t3Open, t3OpensLinks, t3Project, t3Provider, t3Runs, t3Thread } from "./places.mjs";
 import { detectAgentApps, detectMcpClients } from "./adapters.mjs";
-import { cardLine, swarmBlock, swarmCards, swarmDigest } from "./cards.mjs";
+import { cardLine, modelOf, swarmBlock, swarmCards, swarmDigest } from "./cards.mjs";
+import { PICKABLE, createModelRouter, picksIn, refreshCatalogs, resolvePick, setRunPick } from "./models.mjs";
 import { forgetT3, handedToT3, runInT3, sendToT3, startT3SignIn, t3Access } from "./t3.mjs";
+import { createNetwork } from "./network.mjs";
 
 // What may be referenced on a thread with another person (the server's rule, src/server/relay/refs.ts, kept
 // here since a sealed request is opened only on the machines).
@@ -301,6 +304,8 @@ export async function startDaemon() {
     try { if (fs.existsSync(paths.socket)) fs.unlinkSync(paths.socket); } catch {}
   }
   let socket = null;
+  // What the Harness this machine is connected to says it can do, told when the connection opens.
+  let serverFeatures = new Set();
   const relayWaiters = new Map();
   const cloudSeen = new Map();
   const send = (message) => {
@@ -464,15 +469,15 @@ export async function startDaemon() {
   // as themselves, never as a root. Anything another agent wrote never starts. Links are followed, so no path inside a
   // covered folder leads out of it.
   const RUNNERS = new Set(MACHINE_RUNNERS);
-  const POSTERS_WITH_FOLDER = new Set(["claude-code", "codex"]);
-  // A session the person typed in: its prompt hook names the agent process, the parent of the board MCP it posts through.
+  // A session the person typed in: its prompt hook (Claude Code, Codex) or its extension or plugin (pi, OpenCode) names
+  // the agent process, the parent of the board MCP it posts through.
   // A run this daemon started is never one (the daemon is its parent), and an agent holding another agent's task writes
   // as an agent until it reports.
   const promptedBy = new Map();
   // Unknown parent: not the person's.
   const parentOf = (pid) => Number(spawnSync(PS, ["-o", "ppid=", "-p", String(pid)], { encoding: "utf8" }).stdout?.trim()) || null;
   const personSession = (agent, pid) => {
-    if (!POSTERS_WITH_FOLDER.has(agent) || !Number.isInteger(pid) || promptedBy.get(pid) !== agent) return false;
+    if (!RUNNERS.has(agent) || !Number.isInteger(pid) || promptedBy.get(pid) !== agent) return false;
     const parent = parentOf(pid);
     return parent !== null && parent !== process.pid && !store.holdsAgentTask(agent);
   };
@@ -586,12 +591,18 @@ export async function startDaemon() {
   };
   // Work a thread starts on its own runs on the thread's authority only when the person gave it: a thread they set, or,
   // for a task's room, their go on that task. Anything else waits for the person's Start like any agent-written run.
-  // Work another agent asked for runs on a goal's authority only where it can be held in (docs/member-runs.md): Claude
-  // Code in restricted mode, in a copy of the folder this daemon made. Anything else waits for the person's Start.
+  // In such a thread, the person's own agents asking for work carry the person's go, as their @mention does (owner,
+  // October 13; docs/member-runs.md): Harness and its agents on its server (Bankr, Quotient), and the coding agents on
+  // this computer; full permissions, Stop always there. An agent the person set to wait still waits. Work another agent
+  // asked for (Grok Bot, Muse, another person's agent, a call through Harness) runs on a goal's authority only where it
+  // can be held in: Claude Code in restricted mode, in a copy of the folder this daemon made. Anything else waits.
   const worktreeRoot = path.join(paths.home, "worktrees");
   const restrictable = (agent, folder) => agent === "claude-code" && Boolean(folder) && within(folder, worktreeRoot);
-  const restrictedWait = (agent) => agent === "claude-code"
-    ? `${nameOf(agent)} would work in your own folder here, not a copy, so work another agent asked for waits for your Start.`
+  const setToWait = (agent) => standingRules().find((rule) => rule.agent === agent)?.mode === "off";
+  const personsGo = (asker, agent, { hosted = false } = {}) => asker === "user"
+    || ((member(asker)?.runs === "server" || (!hosted && member(asker)?.runs === "machine")) && !setToWait(agent));
+  const restrictedWait = (agent) => setToWait(agent) ? `${nameOf(agent)} is set to wait for your Start.`
+    : agent === "claude-code" ? `${nameOf(agent)} would work in your own folder here, not a copy, so work another agent asked for waits for your Start.`
     : `${nameOf(agent)} has no restricted mode, so work another agent asked of it waits for your Start.`;
   const threadMayRun = (goal) => {
     if (goal.trust !== "user") return false;
@@ -601,24 +612,54 @@ export async function startDaemon() {
   const roomDigest = (goalId, limit = 30) => store.roomPosts(goalId).slice(-limit).map((post) => `[${post.seq}] ${post.author}${post.kind !== "post" ? ` (${post.kind})` : ""}: ${post.text.slice(0, 1_200)}`).join("\n");
   // A thread's coding agent works in T3 Code when the person uses it there: its home is T3, Harness may send into T3,
   // T3 is open with a project for the thread's folder, and the agent has run in T3 before (its model there is the
-  // person's last choice). A thread already in Harness's own copy, or carrying on a session in place, stays there; one
-  // in T3 stays in T3, and a turn T3 can't take then fails saying why. Reviews keep the agent's read-only switch here.
+  // person's last choice). A thread in Harness's own copy moves into T3 on its next turn, in that same checkout (a git
+  // worktree of T3's project, which T3 takes as it is); one carrying on a session in place stays there; one in T3 stays
+  // in T3, and a turn T3 can't take then fails saying why. Reviews keep the agent's read-only switch here.
   const inT3 = (thread, agent, review) => {
     if (review || !t3Provider(agent) || !thread.goal.workspace) return false;
-    const tree = worktrees.get(thread.id)?.state ?? null;
-    if (tree === "t3") return true;
-    return tree === null && t3Access()?.state === "send" && homeOf(agent)?.kind === "t3" && t3Open() && Boolean(t3Project(thread.goal.workspace)) && Boolean(t3Model(agent));
+    const tree = worktrees.get(thread.id);
+    if (tree?.state === "t3") return true;
+    // A task's room works in place, which T3 does in its project's own checkout; a thread carrying on a terminal
+    // session in place resumes that session here.
+    const movable = !tree || (tree.state === "open" && fs.existsSync(tree.path)) || (tree.state === "in_place" && Boolean(store.meta(`task-room:${thread.id}`)));
+    return movable && homeOf(agent)?.kind === "t3" && !t3Gap(agent, thread.goal.workspace);
+  };
+  // Why an agent the person uses in T3 Code would not run there in a folder; null when it would, or when its home is not T3.
+  const t3Gap = (agent, folder) => {
+    if (!t3Provider(agent) || homeOf(agent)?.kind !== "t3") return null;
+    if (t3Access()?.state !== "send") return "Harness isn't approved to send into T3 Code";
+    if (!t3Open()) return "T3 Code isn't open";
+    if (!t3Project(folder)) return `T3 Code has no project for ${path.basename(folder)}`;
+    if (!t3Model(agent)) return `${nameOf(agent)} hasn't run in T3 Code yet`;
+    return null;
+  };
+  // Where an agent's turns in a folder run, for the composer: in T3 Code, or here, with why not T3 when it is the agent's home.
+  const runsIn = (agent, folder) => {
+    const gap = t3Gap(agent, folder);
+    return homeOf(agent)?.kind === "t3" && !gap ? { in: "t3", why: null } : { in: "here", why: gap };
+  };
+  // A task's own run (its room's first job) goes where its room's turns go: into T3 Code when the person uses the agent
+  // there. Not when it would run restricted (work another agent asked for on a goal's authority): only this computer
+  // holds a run to that.
+  const taskInT3 = (task, agent) => {
+    const room = task.parent_id ? store.getTask(task.parent_id) : null;
+    if (task.kind !== "task" || room?.kind !== "goal" || store.meta(`task-room:${room.id}`) !== task.id || !task.run_workspace) return false;
+    const restricted = task.trust !== "user" && task.run_authorized_by === "goal" && store.meta(`person-wake:${task.id}`) !== "1";
+    return !restricted && inT3(room, agent, store.meta(`review:${task.id}`) === "1");
   };
   // A turn T3 carries out (t3.mjs runInT3): into the agent's T3 thread in this thread, else a new one in T3's project
   // for the folder, on the thread's T3 checkout. The thread works in T3 from its first launch.
-  const t3Turn = (task, agent) => {
+  // A model the relay chose goes to T3 as its selection, effort under the option name T3 gives each agent.
+  const t3Turn = (task, agent, chosen) => {
     const thread = store.getTask(task.parent_id);
     const key = `t3-thread:${thread.id}:${agent}`;
     const model = t3Model(agent);
     const project = t3Project(thread.goal.workspace);
+    const effort = chosen.effort ? [{ id: agent === "codex" ? "reasoningEffort" : "effort", value: chosen.effort }] : [];
     return {
       threadId: store.meta(key) || null,
       title: thread.objective.slice(0, 120),
+      model: chosen.model ? { instanceId: t3Provider(agent), model: chosen.model, options: effort } : null,
       launch: { ...(project ? { projectId: project.id } : {}), ...(model ? { modelSelection: model } : {}), workspaceStrategy: worktrees.t3Workspace(thread) },
       onThread: (threadId) => { store.meta(key, threadId); worktrees.inT3(thread.id); },
       onWorktree: (where, branch) => worktrees.inT3(thread.id, where, branch),
@@ -627,33 +668,46 @@ export async function startDaemon() {
   // Wake one teammate. A coding agent here gets a run in the goal's folder that resumes its last session on this goal;
   // Harness and agents that cannot be started here learn of it through the board change and their own reads.
   const pendingWakes = new Map();
-  // byPerson: the person's own post named this agent, which is their go for this turn; any other wake (the coordinator,
-  // another agent) is work another agent asked for and runs restricted or waits (docs/member-runs.md).
-  const wakeAgent = (goalId, agent, reason, { review = false, byPerson = false } = {}) => {
+  // go: the person's go for this turn (personsGo), their own post naming this agent or one of their agents here asking;
+  // any other wake is work another agent asked for and runs restricted or waits (docs/member-runs.md).
+  // asker: who asked for this turn, the person or an agent, named on the card that waits for the person.
+  // pick: the model and effort the post named for this turn (models.mjs).
+  const wakeAgent = (goalId, agent, reason, { review = false, go = false, asker = "harness", pick = null } = {}) => {
     const task = store.getTask(goalId);
     if (!task || task.status !== "open" || !RUNNERS.has(agent) || !installedAgents.includes(agent)) return;
     const goal = task.goal;
     if (!goal.workspace) {
       if (!store.meta(`goal-folder-note:${goalId}:${agent}`)) {
         store.meta(`goal-folder-note:${goalId}:${agent}`, "1");
-        store.roomPost({ goalId, author: "harness", kind: "note", text: `${nameOf(agent)} cannot start: this thread has no folder to work in. Add one with: npx tryharness goal folder ${goalId} <dir>` });
+        store.roomPost({ goalId, author: "harness", kind: "note", text: `${nameOf(agent)} cannot start: this thread has no folder to work in. Choose one for the thread in Harness, or: npx tryharness goal folder ${goalId} <dir>` });
       }
       return;
     }
-    if (store.openWake(goalId, agent)) { pendingWakes.set(`${goalId}:${agent}`, { reason, byPerson: byPerson || Boolean(pendingWakes.get(`${goalId}:${agent}`)?.byPerson) }); return; }
+    if (store.openWake(goalId, agent)) { pendingWakes.set(`${goalId}:${agent}`, { reason, asker, go: go || Boolean(pendingWakes.get(`${goalId}:${agent}`)?.go), pick: pick ?? pendingWakes.get(`${goalId}:${agent}`)?.pick ?? null }); return; }
     if (store.wakeCount(goalId, agent) >= goal.max_wakes) { pauseGoal(goalId, `${agent} was woken ${goal.max_wakes} times`); return; }
     const brief = swarmBrief(task, agent, reason, { review });
     // A coding thread in a repository works in its own worktree, so threads never share a checkout; one whose agents the
     // person uses in T3 Code works in T3 (inT3), where T3 makes and keeps the checkout.
     const t3 = inT3(task, agent, review);
+    // The person uses this agent in T3 Code but this turn runs here: the thread says why, once for each reason.
+    const gap = t3 || review ? null : t3Gap(agent, goal.workspace);
+    if (gap && !store.meta(`t3-gap-note:${goalId}:${agent}:${gap}`)) {
+      store.meta(`t3-gap-note:${goalId}:${agent}:${gap}`, "1");
+      store.roomPost({ goalId, author: "harness", kind: "note", text: `${nameOf(agent)} is working on this computer, not in T3 Code: ${gap}.` });
+    }
     let folder = goal.workspace;
     if (!t3) try { folder = worktrees.folderFor(task); } catch (error) { store.roomPost({ goalId, author: "harness", kind: "note", text: `${agent} cannot start: ${error.message}` }); notifyBoard(store.getTask(goalId)); return; }
-    const wake = store.postTask({ objective: `Room: ${task.objective}`.slice(0, 500), brief, originAgent: "harness", provenance: { trust: "agent", chain: ["room"] }, targetAgent: agent, parentId: goalId, runWorkspace: folder, kind: "wake" });
+    // Whose words the turn carries: whoever wrote the thread when an agent did, then the agent that asked. The person's
+    // own ask in their own thread names no one; Harness posts every wake.
+    const writers = task.trust === "agent" ? task.origin_chain : [];
+    const chain = asker === "user" || writers.at(-1) === asker ? writers : [...writers, asker];
+    const wake = store.postTask({ objective: `Room: ${task.objective}`.slice(0, 500), brief, originAgent: "harness", provenance: { trust: "agent", chain: chain.slice(-16) }, targetAgent: agent, parentId: goalId, runWorkspace: folder, kind: "wake" });
     if (t3) store.meta(`t3-run:${wake.id}`, "1");
+    if (pick) setRunPick(store, wake.id, pick, asker);
     // A review runs with the agent's own read-only switch (runner.mjs); only Claude Code and Codex have one.
     if (review) store.meta(`review:${wake.id}`, "1");
     if (threadMayRun(task)) {
-      if (byPerson) { store.meta(`person-wake:${wake.id}`, "1"); store.authorizeGoalRun(wake.id); }
+      if (go) { store.meta(`person-wake:${wake.id}`, "1"); store.authorizeGoalRun(wake.id); }
       else if (restrictable(agent, folder)) store.authorizeGoalRun(wake.id);
       else if (!store.meta(`restricted-note:${goalId}:${agent}`)) {
         store.meta(`restricted-note:${goalId}:${agent}`, "1");
@@ -662,9 +716,13 @@ export async function startDaemon() {
     }
     notifyBoard(store.getTask(wake.id));
   };
+  // Harness asked by name answers from the person's open Harness window with its own tools (src/main/agents/harnessInbox.ts):
+  // the words whole and where to read the rest. With no window open the ask waits on the board.
+  const harnessAsk = (task, words) => `Asked in the thread "${task.objective}" (thread ${task.id}):\n\n${words}\n\n`
+    + `Read the thread with read_goal_room (id ${task.id}) before you answer. Your answer here goes back into the thread.`;
   // Ask an agent that is not started here: the ask is a task in the thread, posted in the asker's name, so its
   // authority is the asker's (an agent's ask to Bankr waits for the person). One open ask per agent per thread.
-  const askAgent = (goalId, agent, reason, asker) => {
+  const askAgent = (goalId, agent, reason, asker, words = reason) => {
     const task = store.getTask(goalId);
     if (!task || task.status !== "open") return;
     if (store.threadRuns(goalId).some((run) => run.target_agent === agent && ["open", "claimed", "running", "needs_input"].includes(run.status))) return;
@@ -673,18 +731,48 @@ export async function startDaemon() {
     // with money (Bankr, Quotient) waits for the person under its own rules.
     const written = from === "user" ? {} : { provenance: { trust: "agent", chain: [...(task.origin_chain || []), from].slice(-16) } };
     const posted = boardCommand({ command: "board.post", agent: from, objective: `Asked in "${task.objective}": ${reason}`.slice(0, 500),
-      brief: swarmBrief(task, agent, reason, { ask: true }), targetAgent: agent, parentId: goalId, ...written });
+      brief: agent === "harness" ? harnessAsk(task, words) : swarmBrief(task, agent, reason, { ask: true }), targetAgent: agent, parentId: goalId, ...written });
     const failed = (error) => { store.roomPost({ goalId, author: task.goal.facilitator, kind: "note", text: `${nameOf(agent)} could not be asked: ${error}` }); notifyBoard(store.getTask(goalId)); };
     if (posted?.pending) posted.pending.catch((error) => failed(error.message));
     else if (posted && !posted.ok) failed(posted.error);
+    else if (agent === "harness" && posted?.task) offerToServer(task, posted.task.id, from, words);
   };
-  const wakeFor = (goalId, post, author, names = post.mentions) => {
+  // Harness's server takes a task given to Harness in a thread while no Harness window is open (src/server/swarm/harnessTask.ts),
+  // only while this computer's coordinator runs on Harness: on the privacy setting the thread's words stay here and the task
+  // waits for a window. Harness holds it meanwhile, so a window that opens does not take it too; what the server leaves for
+  // the browser goes back on the board, and the window takes it over when it next opens (owner, October 14).
+  const offerToServer = (goal, taskId, asker, words) => {
+    if (coordinatorMode() !== "harness" || !state.connected || !serverFeatures.has("harness_task")) return;
+    if (!boardCommand({ command: "board.claim", agent: "harness", id: taskId })?.ok) return;
+    const transcript = store.roomPosts(goal.id, 0, 500).filter((post) => !["note", "held", "round"].includes(post.kind)).slice(-30)
+      .map((post) => ({ author: post.author, kind: post.kind, text: post.text.slice(0, 20_000) }));
+    // Back to the board for a window, as the person would put it back, with what the thread should hear.
+    const back = (post) => {
+      if (post) store.roomPost({ goalId: goal.id, author: "harness", ...post });
+      boardCommand({ command: "board.release", agent: "user", id: taskId });
+      notifyBoard(store.getTask(goal.id));
+    };
+    const waits = (why) => back({ kind: "note", text: `This waits for your Harness window: ${why}.` });
+    askHarness("harness_task", { taskId, thread: { id: goal.id, title: goal.objective.slice(0, 500) }, asker, words: String(words).slice(0, 20_000), transcript }, null).then((reply) => {
+      // askHarness spreads Harness's answer into the reply.
+      const outcome = reply?.ok ? reply : null;
+      if (!outcome) return waits(`Harness could not take it here (${reply?.error || "no answer"})`);
+      if (!outcome.taken) return outcome.why === "window_open" ? back(null) : waits(outcome.detail || "Harness could not take it here");
+      if (outcome.status === "done") return boardCommand({ command: "board.report", agent: "harness", id: taskId, status: "done", result: outcome.text });
+      if (outcome.status === "window") return back({ kind: "post", text: `${outcome.text}\n\nThe rest needs your browser: ${outcome.windowOpen ? "your Harness window is taking it over" : "Harness takes it over when your Harness window next opens"}.` });
+      waits(`Harness could not finish it here${outcome.text ? ` (${outcome.text.slice(0, 300)})` : ""}`);
+    }, (error) => waits(`Harness could not take it here (${error.message})`));
+  };
+  const wakeFor = (goalId, post, author, names = post.mentions, { hosted = false } = {}) => {
     const goal = store.goal(goalId);
+    const { picks } = picksIn(store, post.text, names);
     for (const agent of names) {
       if (agent === author) continue;
       const reason = `${author} mentioned you: ${post.text.slice(0, 300)}`;
-      if (RUNNERS.has(agent)) wakeAgent(goalId, agent, reason, { byPerson: author === "user" });
+      if (RUNNERS.has(agent)) wakeAgent(goalId, agent, reason, { go: personsGo(author, agent, { hosted }), asker: author, pick: picks.get(agent) });
       else if (ASKABLE.has(agent)) askAgent(goalId, agent, reason, author);
+      // Harness by name: the person's @harness or an agent's ask. A message naming no one falls to Harness as coordinator.
+      else if (agent === "harness" && post.kind === "post" && (author !== "user" || mentionsIn(post.text, [agent]).length)) askAgent(goalId, agent, reason, author, post.text);
     }
     // Harness follows through the board change; it is woken by mentions, results and questions, not by every note.
     if (goal && names.includes(goal.facilitator)) notifyBoard(store.getTask(goalId));
@@ -698,7 +786,7 @@ export async function startDaemon() {
     const stopped = kind === "failed" && store.getTask(goalId)?.status !== "open";
     if (!stopped && !store.postsBy(goalId, task.target_agent, startedAt) && text) store.roomPost({ goalId, author: task.target_agent, kind: kind === "done" ? "post" : "failed", text: kind === "done" ? text : `run failed: ${text}` });
     const pending = pendingWakes.get(`${goalId}:${task.target_agent}`);
-    if (pending) { pendingWakes.delete(`${goalId}:${task.target_agent}`); wakeAgent(goalId, task.target_agent, pending.reason, { byPerson: pending.byPerson }); }
+    if (pending) { pendingWakes.delete(`${goalId}:${task.target_agent}`); wakeAgent(goalId, task.target_agent, pending.reason, { go: pending.go, asker: pending.asker, pick: pending.pick }); }
     notifyBoard(store.getTask(goalId));
   };
   // A job under a goal changed: its result or question lands in the room and wakes whoever posted it.
@@ -709,8 +797,10 @@ export async function startDaemon() {
     const who = task.claimed_by || task.target_agent || "an agent";
     // A task's own job reports to whoever posted it the way any task does; it does not wake them.
     const root = store.meta(`task-room:${goal.id}`) === task.id;
+    // An answer to an ask (askAgent) follows the ask in the thread, so it stands as said; a job's result names the job.
+    const answer = task.status !== "failed" && String(task.result || "").trim() && task.objective.startsWith(`Asked in "${goal.objective}": `);
     const post = store.roomPost({ goalId: goal.id, author: who, kind: task.status === "needs_input" ? "question" : "result",
-      text: `${task.status === "done" ? "Finished" : task.status === "failed" ? "Could not finish" : "Asks about"} job "${task.objective}": ${task.result || ""}`.slice(0, 20_000),
+      text: (answer ? task.result : `${task.status === "done" ? "Finished" : task.status === "failed" ? "Could not finish" : "Asks about"} job "${task.objective}": ${task.result || ""}`).slice(0, 20_000),
       mentions: root ? [] : [task.origin_agent].filter((agent) => goal.goal.team.includes(agent)) });
     // A room where only the task's own agent worked closes with the task; one that grew into a conversation stays open.
     if (root && task.status !== "needs_input" && goal.status === "open" && !store.roomPosts(goal.id, 0, 500).some((entry) => entry.kind === "post")
@@ -766,6 +856,9 @@ export async function startDaemon() {
       if (goal.status !== "open") return { ok: false, error: `the goal is ${goal.status}` };
       const text = String(request.text || "").trim().slice(0, 20_000);
       if (!text) return { ok: false, error: "a post needs text" };
+      // A model named for an agent (`@codex:gpt-6-luna/high`) must be one it lists, or the post is refused saying why.
+      const picked = picksIn(store, text, ROOM_AGENTS);
+      if (picked.error) return { ok: false, error: picked.error };
       const flag = secretReason(text);
       if (flag) {
         const held = store.roomPost({ goalId: goal.id, author: agent, kind: "held", text });
@@ -794,7 +887,7 @@ export async function startDaemon() {
         if (sent.ok && sent.message.state === "sent") sendThreadMessage(sent.message);
       }
       if (store.roomCount(goal.id) >= goal.goal.max_posts) { pauseGoal(goal.id, `the room reached ${goal.goal.max_posts} posts`); return { ok: true, post, paused: true }; }
-      wakeFor(goal.id, post, agent, wakes);
+      wakeFor(goal.id, post, agent, wakes, { hosted: request.hostedCaller === true });
       notifyBoard(store.getTask(goal.id));
       const notes = [...(unwoken.length ? [`Named ${unwoken.map((name) => `@${name}`).join(", ")} without asking, so not woken. To ask an agent, put its name in ask.`] : []), ...wakes.map(setupNote).filter(Boolean)];
       return { ok: true, post, ...(notes.length ? { note: notes.join(" ") } : {}) };
@@ -837,11 +930,10 @@ export async function startDaemon() {
         notifyBoard(task);
         return { ok: true, task };
       }
+      // The same move as the composer's (swarm.mjs board.swarm.folder): between turns, each agent fresh in the new folder.
       if (request.command === "board.goal.folder") {
-        const workspace = String(request.workspace || "");
-        if (!path.isAbsolute(workspace) || !fs.statSync(workspace, { throwIfNoEntry: false })?.isDirectory()) return { ok: false, error: `${workspace} is not an absolute path to a folder` };
-        store.setGoalFolder(goal.id, path.resolve(workspace));
-        return { ok: true, task: store.getTask(goal.id) };
+        const moved = swarmCommand({ command: "board.swarm.folder", id: goal.id, folder: String(request.workspace || "") }, "user");
+        return moved.ok ? { ok: true, task: store.getTask(goal.id) } : moved;
       }
       if (goal.status !== "paused") return { ok: false, error: `the goal is ${goal.status}` };
       const task = store.setGoalState(goal.id, { status: "open", maxPosts: Number.isInteger(request.maxPosts) && request.maxPosts > 0 ? request.maxPosts : undefined });
@@ -863,10 +955,23 @@ export async function startDaemon() {
   // "harness" (default): rounds go to Harness, Jev decides. "local": an agent on this machine decides with its tools off.
   const coordinatorMode = () => (readJson(paths.config, {}).coordinator === "local" ? "local" : "harness");
   const setCoordinatorMode = (mode) => writeJsonAtomic(paths.config, { ...readJson(paths.config, {}), coordinator: mode });
+  // The model each run starts with (models.mjs). Auto asks Harness, never on the privacy setting, and only a Harness that
+  // said it can pick models: one from before that would leave the run waiting for an answer that never comes.
+  // Each agent's own list of models, asked at start, once a day and when the person asks (models.mjs).
+  const listModels = () => refreshCatalogs(store, installedAgents.filter((agent) => PICKABLE.has(agent)), log);
+  // What Auto reads: the work itself, not the brief's instructions; a thread's turn is its request and its recent posts.
+  const workOf = (task) => {
+    if (task.kind !== "wake") return { work: `${task.objective}\n\n${task.brief}`.trim(), transcript: [] };
+    const thread = store.getTask(task.parent_id);
+    return { work: `${thread.objective}${thread.brief ? `\n\n${thread.brief}` : ""}`,
+      transcript: store.roomPosts(thread.id, 0, 500).filter((post) => !["note", "held", "round"].includes(post.kind)).slice(-30).map((post) => ({ author: post.author, text: post.text.slice(0, 20_000) })) };
+  };
+  const modelForRun = createModelRouter({ store, askHarness, canAsk: () => state.connected && serverFeatures.has("route_model"), privacy: () => coordinatorMode() === "local", ownModel: (agent) => modelOf(agent), workOf, log });
   const coordinator = createCoordinator({
-    store, mode: coordinatorMode, askHarness, connected: () => state.connected, localAgents: () => installedAgents.filter((agent) => RUNNERS.has(agent)),
-    roster: () => cardsFor(available().filter((agent) => agent !== "harness" && setupOf(agent)?.state !== "not_set_up")),
-    handOn: (goalId, agent, reason, { review }) => (RUNNERS.has(agent) ? wakeAgent(goalId, agent, reason, { review }) : askAgent(goalId, agent, reason, "harness")),
+    store, mode: coordinatorMode, askHarness, connected: () => state.connected, serverHas: (feature) => serverFeatures.has(feature), localAgents: () => installedAgents.filter((agent) => RUNNERS.has(agent)),
+    // Harness is one of them (owner, October 14): handed work, its open window or Harness's server takes it (offerToServer).
+    roster: () => cardsFor(available().filter((agent) => setupOf(agent)?.state !== "not_set_up")),
+    handOn: (goalId, agent, reason, { review, words }) => (RUNNERS.has(agent) ? wakeAgent(goalId, agent, reason, { review, go: personsGo("harness", agent) }) : askAgent(goalId, agent, reason, "harness", words)),
     pauseGoal, notifyBoard, searchContext, log,
   });
   const swarmCommand = createSwarm({
@@ -875,7 +980,10 @@ export async function startDaemon() {
     coordinator: { mode: coordinatorMode, setMode: setCoordinatorMode, state: (id) => coordinator.state(id) },
     roster: () => available().map((id) => ({ id, about: aboutOf(id), setup: setupOf(id) })),
     worktrees,
+    folders: createFolders({ store, askHarness, canAsk: () => state.connected && serverFeatures.has("pick_folder"), privacy: () => coordinatorMode() === "local", log }),
+    runsIn,
     authorizeRun: (id) => boardCommand({ command: "board.run", agent: "user", id }),
+    pickable: () => installedAgents.filter((agent) => PICKABLE.has(agent)), listModels,
   });
 
   // The person's own sessions running now (live.mjs), and what they sent one from Harness: it waits here until that
@@ -925,6 +1033,8 @@ export async function startDaemon() {
     let env = placeEnv(request.env);
     let host = pids.map((pid) => hostApp(table, pid)).find(Boolean) ?? null;
     let tty = pids.map((pid) => table.get(pid)?.tty).find(Boolean) ?? null;
+    // The agent's own process (not the shell a hook ran in), kept with the place: the session runs while it does.
+    let agentPid = pids.find((pid) => path.basename(table.get(pid).comm) === PROCESS_NAMES[agentId]) ?? null;
     if (agentId === "codex" && pids.length && !host && !tty) {
       const clients = [...table].filter(([, row]) => path.basename(row.comm) === "codex" && row.tty).map(([pid]) => pid);
       const cwds = workingDirectories(clients);
@@ -933,8 +1043,11 @@ export async function startDaemon() {
       env = processEnv(client);
       host = hostApp(table, client);
       tty = table.get(client).tty;
+      // Codex's shared server outlives its sessions; the terminal's Codex is this one.
+      agentPid = client;
     }
-    return placeFrom({ env, host, tty, folder });
+    const place = placeFrom({ env, host, tty, folder });
+    return place && agentPid ? { ...place, pid: agentPid, comm: table.get(agentPid).comm } : place;
   };
   // A custom harness may say how one of its sessions opens again: a page it serves on this computer, or a command to type.
   const reopenOf = (value) => {
@@ -954,7 +1067,10 @@ export async function startDaemon() {
     };
     const linksOk = t3LinksOk();
     const handed = handedToT3();
-    const sessions = liveSessions({ exclude: new Set(runningPids()), recent })
+    // The sessions that named their own process when they started (pi's extension, OpenCode's plugin, hooks).
+    const reported = LIVE_AGENTS.flatMap((agentId) => Object.entries(placesOf(agentId)).filter(([, place]) => Number.isInteger(place.pid))
+      .map(([sessionId, place]) => ({ agent: agentId, sessionId, folder: place.folder || null, pid: place.pid, comm: place.comm, at: place.at })));
+    const sessions = liveSessions({ exclude: new Set(runningPids()), recent, reported })
       // A T3 thread running a turn Harness handed it is Harness's run, shown in its thread.
       .filter((session) => !handed.has(session.t3Thread))
       // A T3 Code that cannot open links is brought forward instead, and messages reach its sessions through their hooks.
@@ -1020,34 +1136,51 @@ export async function startDaemon() {
   const ownSession = (row) => !String(row.cwd || "").startsWith(paths.home + path.sep);
   const short = (name) => String(name || "").replace(/ \(.*\)$/, "");
 
+  /** Whether one of Harness's runs is still working in this session: it is not resumed beside it. */
+  const runBusy = (sessionId) => Boolean(sessionId) && [...activeRuns.values()].some(({ id }) => store.getTask(id)?.session_id === sessionId);
   /** How a session opens in one place (or the agent itself, with no session); null when that place cannot show it. */
   const placePlan = (agentId, place, sessionId, folder, act) => {
     if (!place) return null;
     const name = short(place.name);
+    const busy = runBusy(sessionId)
+      ? `${nameOf(agentId)} is still working on this${folder ? ` in ${path.basename(folder)}` : ""}; Open it again once it's done to carry on in the same session.` : null;
     if (place.kind === "t3") {
       if (!place.app) return null;
       const thread = sessionId ? t3Thread(sessionId) : null;
       if (thread && t3OpensLinks(place.app)) return { opensIn: "T3 Code", link: t3Link(thread) };
       if (thread || !sessionId) return { opensIn: "T3 Code", app: place.app, ...(thread ? { note: T3_OLD } : {}) };
       // A session T3 never had (a run Harness started in its own folder, say): T3 comes forward as it is, saying so,
-      // and the session can still be resumed in a terminal instead.
+      // and the session can still be resumed in a terminal instead. Until Harness may send into T3, its threads run in
+      // that copy: approving it is what moves them into T3 (inT3).
       return { opensIn: "T3 Code", app: place.app, resumable: true, note: harnessRun(folder)
-        ? "This run happened in Harness's own copy of the repo, which T3 Code doesn't list, so T3 Code is in front as it is."
+        ? `This run happened in Harness's own copy of the repo, which T3 Code doesn't list, so T3 Code is in front as it is.${t3Access()?.state === "send" ? "" : " Approve Harness in T3 Code and this thread's next turns run there, where Open finds them."}`
         : "T3 Code doesn't list this session, so it is in front as it is." };
     }
     if (place.kind === "editor") {
-      // Its window first (the folder the editor has open around the session's), so a panel link lands there.
+      // Its window (the folder the editor has open around the session's), first when a panel link is to land there.
       const window = editorFolder(place.editor, folder);
-      if (act && window) openEditorFolder(place, window);
+      // Not in its panel or a terminal beside a run still working in it: its folder comes up, and the buddy shows the work.
+      if (busy && place.app) { if (act && window) openEditorFolder(place, window); return { opensIn: name, app: place.app, note: busy }; }
       const link = sessionId ? panelLink(agentId, place.editor, sessionId) : null;
-      if (link) return { opensIn: name, link };
+      if (link) { if (act && window) openEditorFolder(place, window); return { opensIn: name, link }; }
       if (!place.app) return null;
-      // An editor's terminal takes no command from another app: the session's own command is copied to paste there.
       const line = sessionId ? resumeLine(agentId, sessionId, folder) : null;
+      // The session itself, resumed in the editor's own terminal in a window on its folder: a workspace whose task runs
+      // when the window opens (the editor asks once). The command is copied too, should the person not allow it.
+      if (line && editorRunsOpenTasks(place.editor)) {
+        if (act) openEditorFolder(place, editorSessionWorkspace(agentId, sessionId, folder, window));
+        return { opensIn: name, app: place.app, copy: line, note: `${name} opens ${path.basename(window || folder)} with this session in its terminal. The first time, it asks you to trust the folder and to allow the task that resumes it; the command is copied too.` };
+      }
+      // Automatic tasks turned off there: the session's own command is copied to paste in its terminal.
+      if (act && window) openEditorFolder(place, window);
       return { opensIn: name, app: place.app, ...(line ? { copy: line, note: `${name} is up${window ? ` on ${path.basename(window)}` : ""}. The command that resumes this session is copied: paste it in a terminal there.` } : {}) };
     }
     if (place.kind === "codex-app") return agentId === "codex" && sessionId ? { opensIn: "Codex", link: `codex://threads/${sessionId}` } : place.app ? { opensIn: "Codex", app: place.app } : null;
-    if (place.kind === "terminal") return CODING_AGENTS.includes(agentId) ? { opensIn: name, resume: { agent: agentId, session: sessionId ?? null, cwd: folder ?? null, app: place.app ?? null } } : null;
+    if (place.kind === "terminal") {
+      if (!CODING_AGENTS.includes(agentId)) return null;
+      if (busy) return place.app ? { opensIn: name, app: place.app, note: busy } : { opensIn: name, note: busy };
+      return { opensIn: name, resume: { agent: agentId, session: sessionId ?? null, cwd: folder ?? null, app: place.app ?? null } };
+    }
     return place.app ? { opensIn: name, app: place.app } : null;
   };
   /** A running session, where it runs: its T3 thread, its panel, its editor's window, its terminal pane and tab. */
@@ -1123,7 +1256,8 @@ export async function startDaemon() {
     // A session's latest messages and steps, from its own file (running or not).
     if (request.command === "board.live.read") {
       const agentId = String(request.to || "");
-      if (!LIVE_AGENTS.includes(agentId) && agentId !== "pi") return { ok: false, error: "only a coding agent's session can be read here" };
+      if (!LIVE_AGENTS.includes(agentId)) return { ok: false, error: "only a coding agent's session can be read here" };
+      if (agentId === "opencode") return { ok: true, items: opencodeFeed(opencodeExecutable || "opencode", sessionId, Math.min(200, Number(request.limit) || 80)) };
       const file = sessionFile(agentId, sessionId, folderOf(request), store.recentSessions(200));
       if (!file) return { ok: true, items: [] };
       return { ok: true, items: sessionFeed(agentId, file, Math.min(200, Number(request.limit) || 80)) };
@@ -1160,6 +1294,8 @@ export async function startDaemon() {
   // Lid-Closed Mode's Standby: when anything last came in (a phone message, a wake, a new task).
   let listenerAt = Date.now();
   const touchListener = () => { listenerAt = Date.now(); };
+  // Swarms talking to swarms (network.mjs): set once the relay's helpers below exist.
+  let network = null;
   const boardCommand = (request) => {
     if (!validAgent(request.agent)) return { ok: false, error: "board requests need an agent name" };
     if (request.command === "board.post") touchListener();
@@ -1171,6 +1307,7 @@ export async function startDaemon() {
     let outcome;
     if (String(request.command).startsWith("board.goal.") || String(request.command).startsWith("board.room.")) return goalCommand(request, agent);
     if (String(request.command).startsWith("board.swarm.")) return swarmCommand(request, agent);
+    if (String(request.command).startsWith("board.relay.")) return network ? network.command(request, agent) : { ok: false, error: "the daemon is still starting" };
     if (request.command === "board.prompted") {
       for (const pid of Array.isArray(request.pids) ? request.pids.slice(0, 2) : []) if (Number.isInteger(pid) && pid > 1) promptedBy.set(pid, agent);
       // A session that started before its hook said where it runs says so on its next prompt.
@@ -1189,9 +1326,12 @@ export async function startDaemon() {
     if (request.command === "board.post") {
       const objective = String(request.objective || "").trim();
       if (!objective) return { ok: false, error: "a task needs an objective" };
+      // A thread with another person themselves (not one of their agents) is the person's own: no agent here claims or runs it.
+      const personThread = Boolean(request.thread) && request.targetAgent === "person";
+      if (personThread) request = { ...request, targetAgent: "user" };
       // A target is named the way people write it ("Grok", "Claude Code") and resolved through the roster; a name
       // several members start ("claude") or none matches is refused with who it could be, never guessed.
-      if (request.targetAgent != null && !String(request.targetAgent).includes("/")) {
+      if (request.targetAgent != null && !personThread && !String(request.targetAgent).includes("/")) {
         const named = resolveMember(request.targetAgent, { extra: store.agentsSeen().map((row) => row.agent).filter((seen) => !member(seen)) });
         if (!named.ok) {
           return { ok: false, code: "unknown_agent", candidates: named.candidates, error: named.candidates.length
@@ -1202,6 +1342,14 @@ export async function startDaemon() {
         request = { ...request, targetAgent: named.id };
       }
       if (request.targetAgent != null && !validAgent(request.targetAgent)) return { ok: false, error: "invalid target agent" };
+      // The model and effort the poster names for the run, checked against the agent's own list (models.mjs).
+      let pick = null;
+      if (request.model) {
+        if (!PICKABLE.has(String(request.targetAgent || ""))) return { ok: false, error: "a model can be named only for one of claude-code, codex, pi or opencode, as target_agent" };
+        const resolved = resolvePick(store, String(request.targetAgent), request.model, request.effort);
+        if (!resolved.ok) return { ok: false, error: resolved.error };
+        pick = resolved.pick;
+      }
       // Provenance is code's: the local parent's label and what Harness sent from above the poster can only tighten it.
       const parentTask = request.parentId ? store.getTask(String(request.parentId)) : null;
       const claimed = request.provenance && typeof request.provenance === "object" && request.provenance.trust === "agent" ? request.provenance : null;
@@ -1223,8 +1371,8 @@ export async function startDaemon() {
         return forwardToHarness({ ...request, provenance: upstream });
       }
       // Left out, a task from a coding agent for a coding agent runs in the folder the poster works in (its stdio MCP's,
-      // which Claude Code and Codex start in the session's folder); never home or above it.
-      const posterFolder = !request.thread && !goalParent && request.inSession !== true && POSTERS_WITH_FOLDER.has(agent) && RUNNERS.has(String(request.targetAgent || ""))
+      // which each agent starts in the session's folder); never home or above it.
+      const posterFolder = !request.thread && !goalParent && request.inSession !== true && RUNNERS.has(agent) && RUNNERS.has(String(request.targetAgent || ""))
         && typeof request.posterCwd === "string" && path.isAbsolute(request.posterCwd) && !aboveHome(request.posterCwd) ? request.posterCwd : null;
       // The person's own task for a coding agent that names no folder runs in that agent's scratch folder, so it starts like
       // any covered run (same daily limit, same off switch) instead of waiting for a session to look at the board.
@@ -1265,14 +1413,18 @@ export async function startDaemon() {
         originAgent: agent, provenance, targetAgent: request.targetAgent ? String(request.targetAgent) : null, parentId: request.parentId ? String(request.parentId) : null, contextRefs: refs,
         // Asking for a run in a folder is the person's Start; a scratch folder they never asked for goes by standing permission.
         runWorkspace: thread ? null : runWorkspace, runAuthorizedBy: !thread && runWorkspace && !scratch && agent === "user" ? "user" : null });
-      if (thread) store.openThread(task.id, { withAgent: String(thread.with), role: thread.role, peerKey: thread[OPENED] && thread.peerKey ? String(thread.peerKey) : null });
-      // A job in a goal's room runs on the goal's authority; anywhere else, standing permission decides. Until runs
-      // started by members are restricted, the goal covers jobs from the person, Harness and the coding agents on this
-      // machine; a job from a member that runs elsewhere (Grok Bot, Muse, a connected app) waits for the person's Start.
+      if (thread) { store.openThread(task.id, { withAgent: String(thread.with), role: thread.role, peerKey: thread[OPENED] && thread.peerKey ? String(thread.peerKey) : null }); network?.opened(task.id); }
+      if (pick) setRunPick(store, task.id, pick, agent);
+      // A job in a goal's room runs on the goal's authority; anywhere else, standing permission decides. The goal covers
+      // jobs from the person, Harness and the coding agents on this machine, with the person's go (personsGo) unless an
+      // agent's words came from above the poster; a job from a member that runs elsewhere (Grok Bot, Muse, a connected
+      // app) waits for the person's Start.
       const onGoal = agent === "user" || agent === "harness" || (!request.hostedCaller && member(agent)?.runs === "machine");
       const agentWritten = task.trust !== "user";
-      const mayStart = goalParent && task.run_workspace && threadMayRun(goalParent) && onGoal && (!agentWritten || restrictable(task.target_agent, task.run_workspace));
-      const standing = thread ? undefined : goalParent ? (!task.run_workspace ? undefined : mayStart && store.authorizeGoalRun(task.id) ? { started: true, by: "goal", ...(agentWritten ? { restricted: true } : {}) }
+      const go = onGoal && (!agentWritten || (!claimed && !setToWait(String(task.target_agent))));
+      const mayStart = goalParent && task.run_workspace && threadMayRun(goalParent) && (go || (onGoal && restrictable(task.target_agent, task.run_workspace)));
+      const startOnGoal = () => { if (go) store.meta(`person-wake:${task.id}`, "1"); return store.authorizeGoalRun(task.id); };
+      const standing = thread ? undefined : goalParent ? (!task.run_workspace ? undefined : mayStart && startOnGoal() ? { started: true, by: "goal", ...(go ? {} : { restricted: true }) }
         : !threadMayRun(goalParent) ? undefined
         : { started: false, reason: !onGoal ? `${nameOf(agent)} does not run on this machine, so its job waits for the person's Start.` : restrictedWait(String(task.target_agent)) }) : applyStanding(task);
       if (!thread && !goalParent && !request.parentId && task.target_agent && task.target_agent !== "harness" && ROOM_AGENTS.includes(task.target_agent)) openTaskRoom(store.getTask(task.id), agent, provenance, { hosted: Boolean(request.hostedCaller) });
@@ -1399,7 +1551,8 @@ export async function startDaemon() {
       outcome = store.claimTask(id, agent, expected, Number.isInteger(request.leaseMinutes) ? request.leaseMinutes : 60);
       // The person's own session that took it, so the task opens there (its MCP server is a child of that session).
       const claimed = outcome?.ok ? store.getTask(id) : null;
-      const session = claimed && !claimed.session_id && LIVE_AGENTS.includes(agent) ? sessionOfProcess(agent, request.claimerPid, store.recentSessions(200)) : null;
+      const reportedBy = (pid) => Object.entries(placesOf(agent)).find(([, place]) => place.pid === pid)?.[0] ?? null;
+      const session = claimed && !claimed.session_id && LIVE_AGENTS.includes(agent) ? sessionOfProcess(agent, request.claimerPid, store.recentSessions(200)) ?? reportedBy(request.claimerPid) : null;
       if (session) { store.setRunSession(id, session); outcome = { ...outcome, task: store.getTask(id) }; }
     }
     else if (request.command === "board.report") outcome = store.reportTask(id, agent, { status: String(request.status || ""), result: String(request.result || "").slice(0, 200_000) }, expected);
@@ -1452,6 +1605,8 @@ export async function startDaemon() {
     // One run per folder at a time: each thread's worktree is its own folder, so threads run side by side.
     for (const task of store.runnableTasks(installedAgents)) {
       const agent = task.target_agent;
+      // Where a task runs is settled once, before its slot: a run T3 carries out holds its thread, not a folder.
+      if (task.kind === "task" && store.meta(`t3-run:${task.id}`) === null) store.meta(`t3-run:${task.id}`, taskInT3(task, agent) ? "1" : "0");
       const slot = slotOf(task);
       if (activeRuns.has(slot)) continue;
       const claimed = store.claimTask(task.id, agent, task.version, null);
@@ -1487,10 +1642,15 @@ export async function startDaemon() {
     const resumeSession = wake ? store.goal(task.parent_id)?.sessions[agent] : stoppedFor ? task.session_id || undefined : undefined;
     const again = stoppedFor ? `This task was stopped partway because ${stoppedFor}. Continue from where you left off; check the folder for what you already changed.` : "";
     const readOnly = store.meta(`review:${task.id}`) === "1";
-    // Another agent's words on a goal's authority, not the person's tap: restricted (docs/member-runs.md).
+    // Another agent's words on a goal's authority, without the person's tap or go (person-wake): restricted (docs/member-runs.md).
     const restricted = task.trust !== "user" && task.run_authorized_by === "goal" && store.meta(`person-wake:${task.id}`) !== "1";
-    const t3 = wake && store.meta(`t3-run:${task.id}`) === "1" ? t3Turn(task, agent) : null;
-    startTask({ runId: task.id, agent, title: task.objective.slice(0, 120), brief: resumeSession && again && !wake ? again : [again, brief].filter(Boolean).join("\n\n"), cwd: task.run_workspace, ...(stoppedFor ? { again: true } : {}), ...(resumeSession && !t3 ? { resumeSession } : {}), ...(readOnly ? { readOnly } : {}), ...(restricted ? { restricted } : {}), ...(t3 ? { t3 } : {}) }, (kind, text, extra) => {
+    // The model and effort it starts with (models.mjs), kept on the run with who chose them; without a choice, the model
+    // the agent's own settings name, so each model's record covers every run.
+    const chosen = await modelForRun(task, agent);
+    const { model = null, effort = null } = chosen ?? {};
+    store.setRunModel(task.id, { ...chosen, model: model ?? modelOf(agent), effort, by: model ? chosen.by : chosen?.by ?? "its settings", ...(model ? {} : { ownSettings: true }) });
+    const t3 = store.meta(`t3-run:${task.id}`) === "1" ? t3Turn(task, agent, { model, effort }) : null;
+    startTask({ runId: task.id, agent, title: task.objective.slice(0, 120), brief: resumeSession && again && !wake ? again : [again, brief].filter(Boolean).join("\n\n"), cwd: task.run_workspace, ...(model ? { model } : {}), ...(effort ? { effort } : {}), ...(stoppedFor ? { again: true } : {}), ...(resumeSession && !t3 ? { resumeSession } : {}), ...(readOnly ? { readOnly } : {}), ...(restricted ? { restricted } : {}), ...(t3 ? { t3 } : {}) }, (kind, text, extra) => {
       // The agent's session in a thread is resumed when the thread calls on it again; in T3 it is the agent's T3 thread.
       if (kind === "session" && text) { store.setRunSession(task.id, text); if (!t3 && (wake || room?.kind === "goal")) store.setGoalSession(task.parent_id, agent, text); notifyBoard(store.getTask(task.id)); }
       // A step the agent took: whoever has the thread open reads it again, at most once a second per run.
@@ -1600,6 +1760,7 @@ export async function startDaemon() {
     const opened = await openBound(await relayKey(relayIdentity.privateKey, peer), `request|${sealed.sealId}`, sealed);
     return { about: String(opened.about || "").slice(0, 500), fingerprint: await fingerprint(peer) };
   };
+  network = createNetwork({ store, askHarness, relayRequest, openRelayRequest, fingerprint, myKey: () => relayIdentity?.publicKey ?? null });
 
   // Once a browser is paired (store.sealedOnly), Harness's plain calls get metadata only: who, which state,
   // when, the same as every board_changed already carries, and never the words (objectives, briefs,
@@ -1891,6 +2052,7 @@ export async function startDaemon() {
         offlineSince = null;
         state.connected = true;
         state.lastError = null;
+        serverFeatures = new Set();
         saveStatus();
         send({ type: "hello", protocolVersion: PROTOCOL_VERSION, daemonVersion: DAEMON_VERSION, agents: installedAgents, health: state.agents, capabilities: ["sessions.search", "sessions.read", "tasks.status", "board", "threads", "sealed", "sealed_threads", "sealed_files"], identityKey: relayIdentity?.publicKey });
         // Threads that went quiet while Harness was out of reach get their round now.
@@ -1905,6 +2067,7 @@ export async function startDaemon() {
           return;
         }
         if (message.type === "sync") { void sync(); return; }
+        if (message.type === "server_features" && Array.isArray(message.features)) { serverFeatures = new Set(message.features.map(String)); return; }
         if (message.type === "agent_setup" && Array.isArray(message.agents)) {
           cloudSetup = new Map(message.agents.filter((entry) => entry && typeof entry.agent === "string" && SETUP_STATES.includes(entry.state))
             .map((entry) => [entry.agent, { state: entry.state, how: typeof entry.how === "string" ? entry.how : null, detail: typeof entry.detail === "string" ? entry.detail : null }]));
@@ -1976,7 +2139,7 @@ export async function startDaemon() {
                 store.roomPost({ goalId: guestGoal, author: String(input.from || "guest"), kind: "guest", text: words.text.slice(0, 20_000) });
                 notifyBoard(store.getTask(guestGoal));
               }
-              if (notificationsOn()) notifyDesktop(`${input.from} replied on: ${String(task?.objective || "").slice(0, 80)}`);
+              if (notificationsOn()) notifyDesktop(String(input.from || "").endsWith("/person") ? `${handleOf(input.from)} wrote to you: ${words.text.slice(0, 100)}` : `${input.from} replied on: ${String(task?.objective || "").slice(0, 80)}`);
             }
           })().catch((error) => send({ type: "bridge_response", requestId: message.requestId, ok: false, error: error.message }));
           return;
@@ -1997,6 +2160,12 @@ export async function startDaemon() {
           return;
         }
         if (message.type === "thread_ack") { store.markDelivered(String(message.messageId || "")); return; }
+        // Someone asked to reach this person's swarm (network.mjs lists it): told on the desktop, answered in Swarms.
+        if (message.type === "relay_requested") {
+          const input = message.input || {};
+          if (notificationsOn() && validAgent(input.from)) notifyDesktop(`${input.from} asked to reach ${input.to === "person" ? "you" : `your ${nameOf(String(input.to || ""))}`}. Answer it in Swarms.`);
+          return;
+        }
         if (message.type === "bridge_response" && relayWaiters.has(message.requestId)) {
           relayWaiters.get(message.requestId)(message.ok ? { ok: true, ...(message.result || {}) } : { ok: false, error: message.error || "Harness refused the request" });
           relayWaiters.delete(message.requestId);
@@ -2089,12 +2258,15 @@ export async function startDaemon() {
     }
   }
   setImmediate(() => void sync());
+  setImmediate(() => void listModels());
+  const relist = setInterval(() => void listModels(), 24 * 60 * 60_000);
 
   const shutdown = () => {
     clearInterval(heartbeat);
     clearInterval(staleCheck);
     clearInterval(embedTimer);
     clearInterval(rescan);
+    clearInterval(relist);
     for (const watcher of watchers) watcher.close();
     try { socket?.close(); } catch {}
     try { opencodeProcess?.kill(); } catch {}