@osfactory/har 1.16.2 → 1.18.0

package/dist/index.js

@@ -36568,6 +36568,29 @@ var init_control_config = __esm({
   }
 });
 
+// src/core/portal-hosts.ts
+function kernoApiUrlFor(portalUrl) {
+  const override = process.env.HAR_API_URL?.trim().replace(/\/+$/, "");
+  if (override) return override;
+  try {
+    return KERNO_API_BY_PORTAL_HOST[new URL(portalUrl).hostname];
+  } catch {
+    return void 0;
+  }
+}
+var KERNO_API_BY_PORTAL_HOST;
+var init_portal_hosts = __esm({
+  "src/core/portal-hosts.ts"() {
+    "use strict";
+    KERNO_API_BY_PORTAL_HOST = {
+      "portal.kerno.io": "https://api.kerno.io",
+      "app.harhq.com": "https://api.kerno.io",
+      "portal.dev.kerno.io": "https://api.dev.kerno.io",
+      "app.dev.harhq.com": "https://api.dev.kerno.io"
+    };
+  }
+});
+
 // src/core/commit-bindings.ts
 function bindingsDir(harnessRoot) {
   return path11.join(harnessRoot, ".har", COMMIT_BINDINGS_DIR);
@@ -44307,7 +44330,8 @@ function rewindSince(since) {
   return new Date(new Date(since).getTime() - overlap).toISOString();
 }
 function watermarkKeyForTarget(target) {
-  return target.identityKey;
+  const apiUrl = kernoApiUrlFor(target.url);
+  return apiUrl ? `${apiUrl}|${target.identityKey}` : target.identityKey;
 }
 function legacyWatermarkKeysForTarget(target) {
   return target.url === target.identityKey ? [] : [target.url];
@@ -44397,9 +44421,14 @@ async function postJson(url, body, dryRun) {
   }
   return await response.json();
 }
+function portalEndpointUrl(target, endpoint) {
+  const apiUrl = kernoApiUrlFor(target.url);
+  if (!apiUrl) return `${target.url}${endpoint}`;
+  return `${apiUrl}${KERNO_INGEST_PREFIX}${endpoint.slice(PORTAL_API_PREFIX.length)}`;
+}
 function postPortalOnce(target, endpoint, body) {
   return postForResponse(
-    `${target.url}${endpoint}`,
+    portalEndpointUrl(target, endpoint),
     {
       "Content-Type": "application/json",
       Authorization: `Bearer ${target.token}`
@@ -44411,7 +44440,7 @@ async function refreshPortalToken(target) {
   if (!target.refreshToken) return false;
   let response;
   try {
-    response = await fetch(`${target.url}/api/cli/refresh`, {
+    response = await fetch(portalEndpointUrl(target, "/api/cli/refresh"), {
       method: "POST",
       headers: { Authorization: `Bearer ${target.refreshToken}` }
     });
@@ -45167,7 +45196,7 @@ async function syncRunWithControlAsync(repoPath, run2) {
   if (!isRepoPortalSyncEnabled(canonical)) return;
   for (const portal of resolved.targets) {
     try {
-      if (!await isControlApiReachable(portal.url)) continue;
+      if (!kernoApiUrlFor(portal.url) && !await isControlApiReachable(portal.url)) continue;
       await postPortal(portal, "/api/sync", { path: canonical, runs: [run2] });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -45176,7 +45205,7 @@ async function syncRunWithControlAsync(repoPath, run2) {
     }
   }
 }
-var path48, DEFAULT_MAX_BATCH_BYTES, DEFAULT_SYNC_OVERLAP_MS, MAX_FETCH_ATTEMPTS, SYNC_TIMEOUT_MS, EXPLICIT_SYNC_TIMEOUT_MS;
+var path48, DEFAULT_MAX_BATCH_BYTES, DEFAULT_SYNC_OVERLAP_MS, MAX_FETCH_ATTEMPTS, PORTAL_API_PREFIX, KERNO_INGEST_PREFIX, SYNC_TIMEOUT_MS, EXPLICIT_SYNC_TIMEOUT_MS;
 var init_control_sync = __esm({
   "src/core/control-sync.ts"() {
     "use strict";
@@ -45185,6 +45214,7 @@ var init_control_sync = __esm({
     init_stages();
     init_schema2();
     init_control_config();
+    init_portal_hosts();
     init_control_registry();
     init_portal_credentials();
     init_portal_targets();
@@ -45207,6 +45237,8 @@ var init_control_sync = __esm({
     DEFAULT_MAX_BATCH_BYTES = 4 * 1024 * 1024;
     DEFAULT_SYNC_OVERLAP_MS = 6e4;
     MAX_FETCH_ATTEMPTS = 3;
+    PORTAL_API_PREFIX = "/api";
+    KERNO_INGEST_PREFIX = "/api/har/ingest";
     SYNC_TIMEOUT_MS = 15e3;
     EXPLICIT_SYNC_TIMEOUT_MS = 12e4;
   }

package/dist/templates/AGENTS.md.template

@@ -17,10 +17,16 @@ harness or report it; do not fall back to ad-hoc commands.
    `har env verify <id> --full`. Commit in the session worktree.
 3. **Stop at handoff** — report summary, session branch and preview URLs, then
    wait. Never autonomously `complete`, `teardown`, push, or open a PR.
-
-Occupied slots always block: `complete` / `teardown`, then launch. Customize the
-harness only through `harness.env`, `stages.json` + `.har/stages/`, `.har/hooks/`
-and `.har/plugins/` — there is no generated `.har/*.sh` entry-point surface.
+4. **All slots taken?** Occupied slots always block a launch, and you never free
+   one yourself. Run `har env status`, then show the user every slot — branch,
+   work unit, what it achieves, last verify, and whether its commits are merged,
+   pushed or unpushed — and recommend which to close: merged or abandoned work
+   with nothing left to do first; never one with unpushed commits. On approval:
+   `complete` / `teardown <id>`, then launch.
+
+Customize the harness only through `harness.env`, `stages.json` + `.har/stages/`,
+`.har/hooks/` and `.har/plugins/` — there is no generated `.har/*.sh` entry-point
+surface.
 
 Full detail — slot environment, readiness, definition of done, project commands,
 commit gate: [`.har/README.md`](.har/README.md) and [`.har/stages.json`](.har/stages.json).

package/dist/templates/agent-skills/har-wt.md

@@ -12,6 +12,7 @@ har env status        # or ./.har/agent-cli.sh 1 status
 
 - One slot ≈ one task. If slot 1 is occupied by unrelated work, use slot 2+ (limit: `agentSlots` in `.har/stages.json`).
 - Occupied slots always block a new launch: run `har env teardown <id>` (or `complete <id>`) first, then launch again.
+- All slots occupied? Never free one on your own. Show the user each slot (branch, work unit, what it achieves, last verify, merged / pushed / unpushed commits) and recommend which to close — merged or abandoned work with nothing left to do first, never one with unpushed commits. Free it only after approval.
 
 ## 2. Launch — BEFORE editing any file
 

package/dist/templates/shared-docs/readme/session-lifecycle.md

@@ -11,6 +11,12 @@ never in the main checkout.
 - Occupied slots always block a new launch: `har env complete <id>` (or `teardown <id>`),
   then `har env launch <id>`. A new launch never chooses `main` for you — switch the
   main checkout to your intended base first.
+- When every slot is occupied, do not pick one to free on your own. Run
+  `har env status` and give the user a slot-by-slot summary: branch, bound work
+  unit, what the session achieves, last verify, and whether its commits are merged,
+  pushed, or unpushed (`git log <base>..<branch>`, PR state). Recommend which slot
+  to close — merged or abandoned work with nothing left to do first; never one with
+  unpushed commits — and free it with `complete` / `teardown` only after approval.
 - `teardown` removes the worktree but **keeps the session branch** so you can push it
   or open a PR (`--delete-branch` to drop it).
 - If launch fails after creating a worktree/env file, the registry records `status: failed`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osfactory/har",
-  "version": "1.16.2",
+  "version": "1.18.0",
   "description": "HAR: open agent harness CLI and MCP server for coding agents, isolated worktrees, and software-factory workflows",
   "keywords": [
     "har",