From f7a0ffcd4c5450a003df5bbba56d6fa5b8b97042 Mon Sep 17 00:00:00 2001
From: Ian Gulliver <git@flamingcow.io>
Date: Thu, 15 Oct 2026 22:36:08 -0700
Subject: [PATCH] Fix inbox questions vanishing

---
 docs/operations.md      |  2 +-
 internal/store/inbox.go | 27 ---------------------------
 2 files changed, 1 insertion(+), 28 deletions(-)

diff --git a/docs/operations.md b/docs/operations.md
index dbba776..2c3ca5e 100644
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -199,7 +199,7 @@ Markdown images (`![alt](src)`, or `![alt](<src>)`; the plain form also accepts
 
 A code block fenced as `mermaid`, and an inbox `diagram` attachment, render as a Mermaid diagram (`web/src/mermaid.ts`). The library is vendored: `web/package.json` pins `mermaid` as a devDependency, and `go generate ./web` copies `node_modules/mermaid/dist/mermaid.min.js` and its LICENSE into `web/vendor/`, which is committed and embedded. To upgrade, change the pinned version, `npm --prefix web install`, and regenerate. Nothing loads it until the first diagram is drawn; that injects one `<script src="/vendor/mermaid.min.js">` and initializes Mermaid with `securityLevel: "strict"` and the `base` theme, coloured from the custom properties in `web/style.css` as they resolve at that moment (so a light/dark switch applies from the next page load). Each diagram shows its source until its SVG is ready; source Mermaid rejects stays as source with "diagram not rendered: <error>" under it. The endpoint (`internal/server/images.go`) serves PNG, JPEG, GIF, WebP and SVG by extension, resolves symlinks on both the worktree and the file and answers 403 for anything outside the worktree, 404 for a missing file, 400 for another extension or a non-file, and 409 once the task is closed (its worktree is gone). Responses carry `X-Content-Type-Options: nosniff` and a sandboxing `Content-Security-Policy`, so an SVG opened directly runs no script, and `Cache-Control: no-cache` with `Last-Modified`, so a changed file is refetched.
 
-Answers reach the agent as one message, listing each answer under the question or error it responds to, once the session is idle and none of its blocking questions are still waiting for the human. An `other` answer to a question tells the agent that if it asks something back, it should answer with `ask_human` using the item's `thread_id`. Every item change is an `inbox.created` or `inbox.updated` event carrying the whole item, including who resolved it.
+Answers reach the agent as one message, listing each answer under the question or error it responds to, once the session is idle and none of its blocking questions are still waiting for the human. An `other` answer to a question tells the agent that if it asks something back, it should answer with `ask_human` using the item's `thread_id`. `thread_id` only groups items: filing an item never changes any other, so several questions on one thread stay open until each is answered, withdrawn or dismissed. Nothing sets the `superseded` state; it stays in the spec because old items hold it. Every item change is an `inbox.created` or `inbox.updated` event carrying the whole item, including who resolved it.
 
 ## Changes
 
diff --git a/internal/store/inbox.go b/internal/store/inbox.go
index 7213ee6..14be5be 100644
--- a/internal/store/inbox.go
+++ b/internal/store/inbox.go
@@ -32,33 +32,6 @@ func DeliverableResponse(t api.InboxResponseType) bool {
 
 func (s *Store) CreateInboxItem(ctx context.Context, item api.InboxItem) error {
 	return s.write(ctx, func(tx *sql.Tx, emit emitFunc) error {
-		superseded := []string{}
-		rows, err := tx.QueryContext(ctx, `SELECT id FROM inbox_items WHERE thread_id = ? AND state = ?`, item.ThreadId, string(api.Open))
-		if err != nil {
-			return err
-		}
-		for rows.Next() {
-			id := ""
-			err = rows.Scan(&id)
-			if err != nil {
-				rows.Close()
-				return err
-			}
-			superseded = append(superseded, id)
-		}
-		rows.Close()
-
-		for _, id := range superseded {
-			_, err = tx.ExecContext(ctx, `UPDATE inbox_items SET state = ? WHERE id = ?`, string(api.Superseded), id)
-			if err != nil {
-				return err
-			}
-			err = emitItem(ctx, tx, emit, "inbox.updated", id, agentActor)
-			if err != nil {
-				return err
-			}
-		}
-
 		payload, err := json.Marshal(item.Payload)
 		if err != nil {
 			return err