@gethmy/mcp 3.7.0 → 3.8.0

package/README.md

@@ -5,7 +5,7 @@ Claude Code, OpenAI Codex, Cursor, and any MCP client claim cards, report progre
 
 ## Features
 
-- **79 MCP Tools** for full board control, knowledge graph, and workflow plans
+- **80 MCP Tools** for full board control, knowledge graph, and workflow plans
 - **Global Skills** — installable in one command, served from the DB-backed [skill hub](../../docs/skills.md) with auto-update and admin-managed versioning
 - **Knowledge Graph Memory** — Phase 1 surface: hybrid retrieval (vector + lexical + RRF), session-scoped working memory, activity feed. See [docs/memory.md](../../docs/memory.md)
 - **GSD Workflow Plans** - plan/execute/verify/done lifecycle with auto card creation
@@ -89,7 +89,7 @@ If you prefer to configure manually (e.g., in Claude.ai's UI):
 1. Get an API key from [Harmony](https://gethmy.com/user/keys)
 2. In Claude.ai, add a remote MCP server with URL `https://mcp.gethmy.com/mcp`
 3. Set the Authorization header to `Bearer hmy_your_key_here`
-4. All 79 Harmony tools become available in your conversation
+4. All 80 Harmony tools become available in your conversation
 
 **Session management** is automatic - sessions have a 1-hour TTL and are created/renewed transparently.
 

package/dist/cli.js

@@ -31,7 +31,7 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
@@ -2204,6 +2204,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var MAX_INPUT_CHARS = 2000;
 var MAX_OUTPUT_CHARS = 4000;
@@ -2724,6 +2778,15 @@ class HarmonyApiClient {
   async registerWorkspaceAgent(workspaceId, data) {
     return this.request("POST", `/workspaces/${workspaceId}/agents`, data);
   }
+  async reportAgentConfig(workspaceId, agentId, config) {
+    return this.request("POST", `/workspaces/${workspaceId}/agents/${agentId}/reported-config`, { config });
+  }
+  async getWorkspaceModelConfig(workspaceId) {
+    return this.request("GET", `/workspaces/${workspaceId}/model-config`);
+  }
+  async getModelCatalog() {
+    return this.request("GET", "/model-catalog");
+  }
   async listProjects(workspaceId) {
     return this.request("GET", `/workspaces/${workspaceId}/projects`);
   }
@@ -2872,6 +2935,9 @@ class HarmonyApiClient {
       title
     });
   }
+  async removeExternalLink(cardId, linkId) {
+    return this.request("DELETE", `/cards/${cardId}/external-links/${linkId}`);
+  }
   async uploadArtifact(data) {
     return this.request("POST", "/artifacts", data);
   }
@@ -2964,7 +3030,10 @@ class HarmonyApiClient {
     return this.request("DELETE", `/cards/${cardId}/agent-context`, data);
   }
   async appendAgentRunEvents(cardId, data) {
-    return this.request("POST", `/cards/${cardId}/agent-run-events`, data);
+    return this.request("POST", `/cards/${cardId}/agent-run-events`, {
+      ...data,
+      events: data.events.map((event) => sanitizeRunEventDraft(event))
+    });
   }
   async getPendingUserMessages(cardId, sessionId, sinceSeq) {
     return this.request("GET", `/cards/${cardId}/agent-messages?sessionId=${sessionId}&sinceSeq=${sinceSeq}`);
@@ -5654,6 +5723,23 @@ var TOOLS = {
       required: ["cardId", "url"]
     }
   },
+  harmony_remove_external_link: {
+    description: "Remove an external reference URL from a card — the counterpart to harmony_add_external_link. Takes the link id from harmony_get_card_external_links, not the URL.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        cardId: {
+          type: "string",
+          description: "Card UUID"
+        },
+        linkId: {
+          type: "string",
+          description: "External link UUID, as returned by harmony_get_card_external_links"
+        }
+      },
+      required: ["cardId", "linkId"]
+    }
+  },
   harmony_create_subtask: {
     description: "Create a subtask on a card",
     inputSchema: {
@@ -7548,6 +7634,11 @@ ${list}
       const result = await client3.addExternalLink(cardId, url, title);
       return { success: true, ...result };
     }
+    case "harmony_remove_external_link": {
+      const cardId = z.string().uuid().parse(args.cardId);
+      const linkId = z.string().uuid().parse(args.linkId);
+      return await client3.removeExternalLink(cardId, linkId);
+    }
     case "harmony_classify_card":
       return deprecatedRemovedToolResult("harmony_classify_card");
     case "harmony_create_subtask": {

package/dist/index.js

@@ -31,7 +31,7 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
@@ -1987,6 +1987,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var MAX_INPUT_CHARS = 2000;
 var MAX_OUTPUT_CHARS = 4000;
@@ -2507,6 +2561,15 @@ class HarmonyApiClient {
   async registerWorkspaceAgent(workspaceId, data) {
     return this.request("POST", `/workspaces/${workspaceId}/agents`, data);
   }
+  async reportAgentConfig(workspaceId, agentId, config) {
+    return this.request("POST", `/workspaces/${workspaceId}/agents/${agentId}/reported-config`, { config });
+  }
+  async getWorkspaceModelConfig(workspaceId) {
+    return this.request("GET", `/workspaces/${workspaceId}/model-config`);
+  }
+  async getModelCatalog() {
+    return this.request("GET", "/model-catalog");
+  }
   async listProjects(workspaceId) {
     return this.request("GET", `/workspaces/${workspaceId}/projects`);
   }
@@ -2655,6 +2718,9 @@ class HarmonyApiClient {
       title
     });
   }
+  async removeExternalLink(cardId, linkId) {
+    return this.request("DELETE", `/cards/${cardId}/external-links/${linkId}`);
+  }
   async uploadArtifact(data) {
     return this.request("POST", "/artifacts", data);
   }
@@ -2747,7 +2813,10 @@ class HarmonyApiClient {
     return this.request("DELETE", `/cards/${cardId}/agent-context`, data);
   }
   async appendAgentRunEvents(cardId, data) {
-    return this.request("POST", `/cards/${cardId}/agent-run-events`, data);
+    return this.request("POST", `/cards/${cardId}/agent-run-events`, {
+      ...data,
+      events: data.events.map((event) => sanitizeRunEventDraft(event))
+    });
   }
   async getPendingUserMessages(cardId, sessionId, sinceSeq) {
     return this.request("GET", `/cards/${cardId}/agent-messages?sessionId=${sessionId}&sinceSeq=${sinceSeq}`);
@@ -5437,6 +5506,23 @@ var TOOLS = {
       required: ["cardId", "url"]
     }
   },
+  harmony_remove_external_link: {
+    description: "Remove an external reference URL from a card — the counterpart to harmony_add_external_link. Takes the link id from harmony_get_card_external_links, not the URL.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        cardId: {
+          type: "string",
+          description: "Card UUID"
+        },
+        linkId: {
+          type: "string",
+          description: "External link UUID, as returned by harmony_get_card_external_links"
+        }
+      },
+      required: ["cardId", "linkId"]
+    }
+  },
   harmony_create_subtask: {
     description: "Create a subtask on a card",
     inputSchema: {
@@ -7331,6 +7417,11 @@ ${list}
       const result = await client3.addExternalLink(cardId, url, title);
       return { success: true, ...result };
     }
+    case "harmony_remove_external_link": {
+      const cardId = z.string().uuid().parse(args.cardId);
+      const linkId = z.string().uuid().parse(args.linkId);
+      return await client3.removeExternalLink(cardId, linkId);
+    }
     case "harmony_classify_card":
       return deprecatedRemovedToolResult("harmony_classify_card");
     case "harmony_create_subtask": {

package/dist/lib/api-client.js

@@ -32,7 +32,7 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
@@ -1014,6 +1014,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var REDACTION_MARK = "«redacted»";
 var CONFIG_SCOPED_SEGMENTS = new Set([
@@ -1395,6 +1449,15 @@ class HarmonyApiClient {
   async registerWorkspaceAgent(workspaceId, data) {
     return this.request("POST", `/workspaces/${workspaceId}/agents`, data);
   }
+  async reportAgentConfig(workspaceId, agentId, config) {
+    return this.request("POST", `/workspaces/${workspaceId}/agents/${agentId}/reported-config`, { config });
+  }
+  async getWorkspaceModelConfig(workspaceId) {
+    return this.request("GET", `/workspaces/${workspaceId}/model-config`);
+  }
+  async getModelCatalog() {
+    return this.request("GET", "/model-catalog");
+  }
   async listProjects(workspaceId) {
     return this.request("GET", `/workspaces/${workspaceId}/projects`);
   }
@@ -1543,6 +1606,9 @@ class HarmonyApiClient {
       title
     });
   }
+  async removeExternalLink(cardId, linkId) {
+    return this.request("DELETE", `/cards/${cardId}/external-links/${linkId}`);
+  }
   async uploadArtifact(data) {
     return this.request("POST", "/artifacts", data);
   }
@@ -1635,7 +1701,10 @@ class HarmonyApiClient {
     return this.request("DELETE", `/cards/${cardId}/agent-context`, data);
   }
   async appendAgentRunEvents(cardId, data) {
-    return this.request("POST", `/cards/${cardId}/agent-run-events`, data);
+    return this.request("POST", `/cards/${cardId}/agent-run-events`, {
+      ...data,
+      events: data.events.map((event) => sanitizeRunEventDraft(event))
+    });
   }
   async getPendingUserMessages(cardId, sessionId, sinceSeq) {
     return this.request("GET", `/cards/${cardId}/agent-messages?sessionId=${sessionId}&sinceSeq=${sinceSeq}`);

package/dist/lib/config.js

@@ -32,7 +32,7 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);

package/dist/lib/oauth-refresh.js

@@ -32,7 +32,7 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);

package/dist/run-hook-cli.js

@@ -588,6 +588,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var MAX_INPUT_CHARS = 2000;
 var MAX_OUTPUT_CHARS = 4000;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gethmy/mcp",
-  "version": "3.7.0",
-  "description": "MCP server for Harmony, the shared surface for human–agent teams — agents claim cards, report progress, and move work on your board.",
+  "version": "3.8.0",
+  "description": "MCP server for Harmony, the shared surface for human\u2013agent teams \u2014 agents claim cards, report progress, and move work on your board.",
   "publishConfig": {
     "access": "public"
   },

package/src/api-client.ts

@@ -6,6 +6,7 @@ import {
   type PlaybookVersionDef,
   type StageGateEvidenceInsert,
   type StageGateEvidenceRow,
+  sanitizeRunEventDraft,
   serializeCommentThread,
   untrustedDataBlock,
   type WorkspaceAgent,
@@ -19,6 +20,16 @@ export interface ApiResponse<T = unknown> {
   [key: string]: T | boolean | string | undefined;
 }
 
+/** One `model_catalog` row (#1104). See `getModelCatalog`. */
+export interface ModelCatalogRow {
+  id: string;
+  display_name?: string | null;
+  status: "available" | "deprecated" | "withdrawn";
+  replaced_by?: string | null;
+  sort_order?: number;
+  notes?: string | null;
+}
+
 // Retry configuration
 const RETRY_CONFIG = {
   maxRetries: 3,
@@ -559,6 +570,46 @@ export class HarmonyApiClient {
     return this.request("POST", `/workspaces/${workspaceId}/agents`, data);
   }
 
+  /**
+   * Report the effective model config this daemon resolved (#1104). Advisory:
+   * the board renders it, nothing routes on it, so a failure here must never
+   * stop a daemon from starting.
+   */
+  async reportAgentConfig(
+    workspaceId: string,
+    agentId: string,
+    config: unknown,
+  ): Promise<{ agent: WorkspaceAgent }> {
+    return this.request(
+      "POST",
+      `/workspaces/${workspaceId}/agents/${agentId}/reported-config`,
+      { config },
+    );
+  }
+
+  /**
+   * The workspace's own model layer (#1104) — `GET /v1/workspaces/:id/model-config`.
+   * `config` is `null` when the workspace has not set one. Deliberately untyped
+   * (`Record<string, unknown>`, not `WorkspaceModelConfig`): this client has no
+   * dependency on `@gethmy/agent`, so the caller (`workspace-model-cache.ts`)
+   * parses the blob into its own shape.
+   */
+  async getWorkspaceModelConfig(
+    workspaceId: string,
+  ): Promise<{ config: Record<string, unknown> | null }> {
+    return this.request("GET", `/workspaces/${workspaceId}/model-config`);
+  }
+
+  /**
+   * The platform-owned supported-model catalog (#1104) — `GET /v1/model-catalog`.
+   * Open to any authenticated caller; a model id is not a secret. The daemon
+   * derives a withdrawn→replacement map from the `withdrawn` rows here and
+   * hands it to `chooseImplementModel`'s `catalog` parameter.
+   */
+  async getModelCatalog(): Promise<{ models: ModelCatalogRow[] }> {
+    return this.request("GET", "/model-catalog");
+  }
+
   // ============ PROJECT OPERATIONS ============
 
   async listProjects(workspaceId: string): Promise<{ projects: unknown[] }> {
@@ -924,6 +975,13 @@ export class HarmonyApiClient {
     });
   }
 
+  async removeExternalLink(
+    cardId: string,
+    linkId: string,
+  ): Promise<{ success: boolean }> {
+    return this.request("DELETE", `/cards/${cardId}/external-links/${linkId}`);
+  }
+
   // ============ ARTIFACTS (hosted HTML documents) ============
 
   async uploadArtifact(data: {
@@ -1409,6 +1467,26 @@ export class HarmonyApiClient {
   /**
    * Append events to a run's agent_run_events stream (card #417). Send drafts in
    * chronological order — the server's seq trigger assigns the monotonic per-run order.
+   *
+   * **Every draft is sanitized here, because this is the one place all three
+   * writers meet (#1110).** `agent_run_events.payload` is JSONB, and Postgres
+   * refuses a JSON string carrying U+0000 or a lone surrogate — it rejects the
+   * whole statement rather than truncating. Measured 75 times in the 2026-09-06
+   * daemon log as `unsupported Unicode escape sequence`, and tool output is
+   * exactly where such a byte comes from (a `grep` over a binary, a compiler
+   * dumping a fixture).
+   *
+   * Three callers reach this method and they fail in different ways, which is
+   * why the repair belongs here rather than at any one of them:
+   *   - `CliAgentRunner.enqueue` (harmony-agent) retries three times, bisects,
+   *     and drops the single bad event — correct handling, still a lost row.
+   *   - `RunEventForwarder.flush` (the MCP `PostToolUse` hook) leaves the batch
+   *     on disk and retries with backoff for ~10 minutes, BLOCKING every later
+   *     tool call queued behind it, then drops the pair.
+   *   - `ci-repair.ts` posts a `detail` built from CI output.
+   * The runner sanitizes again on its own path, above its size check, so a NUL
+   * never costs bytes against the ceiling; that is defence in depth, not a
+   * duplicate — this is the boundary a fourth writer gets for free.
    */
   async appendAgentRunEvents(
     cardId: string,
@@ -1417,7 +1495,10 @@ export class HarmonyApiClient {
       events: (AgentRunEventDraft & { createdAt?: string })[];
     },
   ): Promise<{ inserted: number }> {
-    return this.request("POST", `/cards/${cardId}/agent-run-events`, data);
+    return this.request("POST", `/cards/${cardId}/agent-run-events`, {
+      ...data,
+      events: data.events.map((event) => sanitizeRunEventDraft(event)),
+    });
   }
 
   /**

package/src/config.ts

@@ -105,13 +105,30 @@ function noteLegacyConfigDir(path: string): void {
   );
 }
 
-/** Said once when a repo pin is read under the old name. */
+/**
+ * Said once when a repo pin is read under the old name.
+ *
+ * It names the COMMAND, not the outcome (#1108). "Rename it to `.hmy.json`"
+ * described a result and left every operator doing it by hand in every repo —
+ * eight of them on the author's machine, none migrated — while
+ * `harmony-agent doctor --fix` had to be found by reading the source. A notice
+ * for a temporary fallback is worth nothing if acting on it is the hard part.
+ *
+ * The manual rename stays beside it, for two readers the command does not
+ * serve: `harmony-agent` is the bin of `@gethmy/agent`, so a client running
+ * `@gethmy/mcp` alone does not have it — and an INSTALLED agent older than
+ * #1108 accepts the unknown `--fix`, prints `preflight ok` and exits 0 without
+ * migrating anything, which is a false green the notice must not lead a reader
+ * into trusting.
+ */
 export function noteLegacyLocalPin(path: string): void {
   if (warnedLegacyLocalPin) return;
   warnedLegacyLocalPin = true;
   console.error(
     `Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` +
-      `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`,
+      `Run \`harmony-agent doctor --fix\` in this repo to write ` +
+      `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` +
+      `The fallback that finds it is temporary.`,
   );
 }
 

package/src/server.ts

@@ -1299,6 +1299,25 @@ export const TOOLS = {
       required: ["cardId", "url"],
     },
   },
+  harmony_remove_external_link: {
+    description:
+      "Remove an external reference URL from a card — the counterpart to harmony_add_external_link. Takes the link id from harmony_get_card_external_links, not the URL.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        cardId: {
+          type: "string",
+          description: "Card UUID",
+        },
+        linkId: {
+          type: "string",
+          description:
+            "External link UUID, as returned by harmony_get_card_external_links",
+        },
+      },
+      required: ["cardId", "linkId"],
+    },
+  },
 
   // Subtask operations
   harmony_create_subtask: {
@@ -3775,6 +3794,14 @@ export async function handleToolCall(
       return { success: true, ...result };
     }
 
+    case "harmony_remove_external_link": {
+      const cardId = z.string().uuid().parse(args.cardId);
+      const linkId = z.string().uuid().parse(args.linkId);
+      // The route already answers `{ success: true }`, so this returns it
+      // as-is rather than re-spreading a second `success` over it.
+      return await client.removeExternalLink(cardId, linkId);
+    }
+
     // Removed — dropped from the advertised TOOLS list; the case remains so an
     // older `hmy-new` install that still calls it gets a legible notice rather
     // than an unknown-tool error.