harnery 0.13.0 → 0.14.0

package/README.md

@@ -22,6 +22,7 @@
 - **Multi-agent coordination:** per-agent heartbeats in `.harnery/active/`, claim-time and commit-time guards, the canonical event stream, councils, a decision docket, per-agent scratchpads, and harness adapters for Claude Code / Cursor / Codex.
 - **Cross-machine presence:** sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay — the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
 - **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless harness-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with `ALLOW`, `ASK`, and `DENY`; CLI `ASK` requests park durably for an explicit approve/deny and same-run resume, while library callers remain fail-closed by default.
+- **Durable work above attempts:** `harn work` preserves an objective across bounded workflow attempts, dependencies, approval parks, failures, and review. Its one-shot reconciler derives state from append-only local evidence and reports the next explicit action without silently spawning, retrying, or accepting work.
 - **Standalone web UI:** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
 - **Backup + sync:** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).
 

package/dist/commander.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAkD3E"}
+{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAmD3E"}

package/dist/commander.js

@@ -52,6 +52,7 @@ import { registerSectionCommand, registerTocCommand } from "./commands/toc.js";
 import { registerTokensCommand } from "./commands/tokens.js";
 import { registerTunnelCommand } from "./commands/tunnel.js";
 import { registerWebCommand } from "./commands/web.js";
+import { registerWorkCommand } from "./commands/work.js";
 import { registerWorkflowCommand } from "./commands/workflow.js";
 export const defaultEmit = {
     config() {
@@ -132,6 +133,7 @@ export function createHarneryProgram(opts = {}) {
     registerClaudeDesktopCommand(program, emit);
     registerSyncCommand(program, emit);
     registerWorkflowCommand(program, emit);
+    registerWorkCommand(program, emit);
     if (include("web"))
         registerWebCommand(program, emit);
     return program;

package/dist/commands/work.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { EmitContext } from "../commander.js";
+export declare function registerWorkCommand(program: Command, emit: EmitContext): void;
+//# sourceMappingURL=work.d.ts.map

package/dist/commands/work.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work.d.ts","sourceRoot":"","sources":["../../src/commands/work.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAmDnD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA8F7E"}

package/dist/commands/work.js

@@ -0,0 +1,281 @@
+import { workflowSubscriptionOnly } from "../core/config.js";
+import { createBuiltinHarnessRegistry } from "../core/harnesses/index.js";
+import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
+import { loadPolicyFile } from "../core/policy/index.js";
+import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItems, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
+import { WorkflowParkedError } from "../core/workflow/index.js";
+export function registerWorkCommand(program, emit) {
+    const registry = createBuiltinHarnessRegistry();
+    const harnesses = registry.ids();
+    const work = program
+        .command("work")
+        .description("Track durable objectives across bounded workflow attempts.");
+    work
+        .command("create <title> <workflow>")
+        .description("Create an immutable durable-work intent linked to a workflow script.")
+        .requiredOption("--objective <text>", "Objective that must survive execution attempts")
+        .option("--id <work-id>", "Stable work id (generated by default)")
+        .option("--accept <text>", "Acceptance statement; repeat for more than one", collect, [])
+        .option("--depends-on <ids>", "Comma-separated prerequisite work ids")
+        .option("--max-attempts <n>", "Attempt ceiling (default 3)")
+        .option("--source-kind <kind>", "human | workflow | external", "human")
+        .option("--source-ref <ref>", "Bounded source reference")
+        .option("--actor <name>", "Actor recorded in the creation receipt")
+        .option("--json", "Emit the complete work record as JSON")
+        .action((title, workflowPath, opts) => {
+        withWorkRoot(emit, (coordRoot) => {
+            const record = createWorkItem({
+                coordRoot,
+                id: opts.id,
+                title,
+                objective: opts.objective,
+                workflowPath,
+                acceptance: opts.accept,
+                dependencies: splitIds(opts.dependsOn),
+                maxAttempts: opts.maxAttempts ? Number.parseInt(opts.maxAttempts, 10) : undefined,
+                source: opts.sourceKind ? { kind: opts.sourceKind, ref: opts.sourceRef } : undefined,
+                actor: opts.actor,
+            });
+            emitWork(record, opts.json, emit);
+        });
+    });
+    work
+        .command("list")
+        .description("List durable work with its currently derived state.")
+        .option("--state <state>", "Filter by derived state")
+        .option("--json", "Emit complete work records as JSON")
+        .action((opts) => {
+        withWorkRoot(emit, (coordRoot) => {
+            const records = listWorkItems(coordRoot).filter((record) => !opts.state || record.projection.state === opts.state);
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(records);
+            }
+            else if (records.length === 0) {
+                emit.text("no durable work\n");
+            }
+            else {
+                emit.text(`${records.map(renderWorkRow).join("\n")}\n`);
+            }
+        });
+    });
+    work
+        .command("show <work-id>")
+        .description("Show one work item, its attempts, and the next explicit action.")
+        .option("--json", "Emit the complete work record as JSON")
+        .action((workId, opts) => {
+        withWorkRoot(emit, (coordRoot) => {
+            emitWork(readWorkItem(coordRoot, workId), opts.json, emit, true);
+        });
+    });
+    work
+        .command("reconcile [work-id]")
+        .description("Derive state from durable evidence without starting or retrying work.")
+        .option("--actor <name>", "Actor recorded on changed reconciliation receipts")
+        .option("--json", "Emit reconciled work records as JSON")
+        .action((workId, opts) => {
+        withWorkRoot(emit, (coordRoot) => {
+            const records = workId
+                ? [reconcileWorkItem(coordRoot, workId, opts.actor)]
+                : reconcileAllWorkItems(coordRoot, opts.actor);
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(workId ? records[0] : records);
+            }
+            else if (records.length === 0) {
+                emit.text("no durable work\n");
+            }
+            else {
+                emit.text(`${records.map(renderWorkRow).join("\n")}\n`);
+            }
+        });
+    });
+    registerRunCommand(work, "run", false, registry, harnesses, emit);
+    registerRunCommand(work, "retry", true, registry, harnesses, emit);
+    registerGovernanceCommand(work, "accept", emit);
+    registerGovernanceCommand(work, "cancel", emit);
+    registerGovernanceCommand(work, "reopen", emit);
+}
+function registerRunCommand(work, name, retry, registry, harnesses, emit) {
+    work
+        .command(`${name} <work-id>`)
+        .description(retry
+        ? "Start a new bounded attempt after a blocked run."
+        : "Start ready work or resume its resolved parked attempt.")
+        .option("--max-agents <n>", "Total-agent ceiling for the workflow")
+        .option("--concurrency <n>", "Concurrent-subagent cap")
+        .option("--cwd <dir>", "Working directory children spawn in")
+        .option("--harness <name>", `Default harness: ${harnesses.join(" | ")}`)
+        .option("--subscription-only", "Require stored harness-login billing")
+        .option("--allow-api-billing", "Permit API-key override billing")
+        .option("--policy <file>", "Host policy JSON/JSONC")
+        .option("--isolation <mode>", "shared | worktree | sandbox | remote")
+        .option("--approval-to <address>", "Address durable ASK requests")
+        .option("--actor <name>", "Actor recorded in attempt receipts")
+        .option("--json", "Emit the workflow report or parked result as JSON")
+        .action(async (workId, opts) => {
+        await withWorkRootAsync(emit, async (coordRoot) => {
+            if (opts.harness && !registry.get(opts.harness)) {
+                throw new Error(`unknown harness ${JSON.stringify(opts.harness)}`);
+            }
+            try {
+                const report = await runWorkItem({
+                    coordRoot,
+                    workId,
+                    retry,
+                    actor: opts.actor,
+                    engine: {
+                        spawners: registry.spawners(),
+                        defaultHarness: opts.harness,
+                        maxAgents: opts.maxAgents ? Number.parseInt(opts.maxAgents, 10) : undefined,
+                        concurrency: opts.concurrency ? Number.parseInt(opts.concurrency, 10) : undefined,
+                        cwd: opts.cwd,
+                        subscriptionOnly: opts.subscriptionOnly === true ? true : workflowSubscriptionOnly(coordRoot),
+                        allowApiBilling: opts.allowApiBilling,
+                        harnessEvidence: Object.fromEntries(registry
+                            .list()
+                            .map((adapter) => [
+                            adapter.profile.id,
+                            { toolEvidence: adapter.profile.capabilities.toolEvidence },
+                        ])),
+                        policy: opts.policy ? loadPolicyFile(opts.policy) : undefined,
+                        approvalMode: "park",
+                        approvalAddressee: opts.approvalTo,
+                        isolation: opts.isolation,
+                        networkAccess: "enabled",
+                    },
+                });
+                if (opts.json) {
+                    emit.config({ format: "json" });
+                    emit.data(report);
+                }
+                else {
+                    emit.text(`work ${workId}: run ${report.runId} finished\nproof: ${report.proofPath}\n` +
+                        `next: harn work reconcile ${workId}\n`);
+                }
+            }
+            catch (error) {
+                if (error instanceof WorkflowParkedError) {
+                    if (opts.json) {
+                        emit.config({ format: "json" });
+                        emit.data({
+                            status: "parked",
+                            workId,
+                            runId: error.runId,
+                            approvalId: error.approvalId,
+                            journalPath: error.journalPath,
+                        });
+                    }
+                    else {
+                        emit.text(`work ${workId}: run ${error.runId} parked\napproval: ${error.approvalId}\n` +
+                            `next: resolve the approval, then harn work run ${workId}\n`);
+                    }
+                    return;
+                }
+                throw error;
+            }
+        });
+    });
+}
+function registerGovernanceCommand(work, name, emit) {
+    work
+        .command(`${name} <work-id>`)
+        .description(name === "accept"
+        ? "Explicitly accept reviewed proof and complete the objective."
+        : name === "cancel"
+            ? "Explicitly cancel unfinished durable work."
+            : "Explicitly reopen terminal or blocked work for a future attempt.")
+        .option("--actor <name>", "Actor recorded in the governance receipt")
+        .option("--reason <text>", "Bounded decision reason")
+        .option("--json", "Emit the complete work record as JSON")
+        .action((workId, opts) => {
+        withWorkRoot(emit, (coordRoot) => {
+            const fn = name === "accept" ? acceptWorkItem : name === "cancel" ? cancelWorkItem : reopenWorkItem;
+            emitWork(fn(coordRoot, workId, opts), opts.json, emit, true);
+        });
+    });
+}
+function emitWork(record, json, emit, detail = false) {
+    if (json) {
+        emit.config({ format: "json" });
+        emit.data(record);
+        return;
+    }
+    if (!detail) {
+        emit.text(`${renderWorkRow(record)}\n`);
+        return;
+    }
+    const projection = record.projection;
+    const lines = [
+        `${record.intent.id}: ${record.intent.title}`,
+        `state: ${projection.state}`,
+        `objective: ${record.intent.objective}`,
+        `reason: ${projection.reason}`,
+        `next: ${projection.next_action}`,
+        `attempts: ${projection.attempts_used}/${record.intent.max_attempts}`,
+    ];
+    if (record.intent.dependencies.length)
+        lines.push(`depends on: ${record.intent.dependencies.join(", ")}`);
+    if (record.intent.acceptance.length) {
+        lines.push("acceptance:", ...record.intent.acceptance.map((item) => `  - ${item}`));
+    }
+    if (projection.attempts.length) {
+        lines.push("attempts:", ...projection.attempts.map((attempt) => `  ${attempt.number}. ${attempt.run_id}  ${attempt.status}`));
+    }
+    if (projection.approval_id)
+        lines.push(`approval: ${projection.approval_id}`);
+    if (projection.proof_path)
+        lines.push(`proof: ${projection.proof_path}`);
+    emit.text(`${lines.join("\n")}\n`);
+}
+function renderWorkRow(record) {
+    const projection = record.projection;
+    return `${record.intent.id}  ${projection.state.padEnd(17)}  ${projection.attempts_used}/${record.intent.max_attempts}  ${projection.next_action.padEnd(21)}  ${record.intent.title}`;
+}
+function withWorkRoot(emit, fn) {
+    const coordRoot = findCoordRoot();
+    if (!coordRoot) {
+        emit.error({
+            code: "no_coord_root",
+            message: "no .harnery/ coordination root found; run `init` first",
+        });
+        emit.setExitCode(1);
+        return;
+    }
+    try {
+        fn(coordRoot);
+    }
+    catch (error) {
+        emit.error({ code: "work_failed", message: error.message });
+        emit.setExitCode(1);
+    }
+}
+async function withWorkRootAsync(emit, fn) {
+    const coordRoot = findCoordRoot();
+    if (!coordRoot) {
+        emit.error({
+            code: "no_coord_root",
+            message: "no .harnery/ coordination root found; run `init` first",
+        });
+        emit.setExitCode(1);
+        return;
+    }
+    try {
+        await fn(coordRoot);
+    }
+    catch (error) {
+        emit.error({ code: "work_failed", message: error.message });
+        emit.setExitCode(1);
+    }
+}
+function splitIds(value) {
+    return value
+        ? value
+            .split(",")
+            .map((item) => item.trim())
+            .filter(Boolean)
+        : [];
+}
+function collect(value, previous) {
+    return [...previous, value];
+}

package/dist/core/work/index.d.ts

@@ -0,0 +1,3 @@
+export { type RunWorkItemInput, runWorkItem } from "./runner.js";
+export { acceptWorkItem, assertWorkId, type CreateWorkItemInput, cancelWorkItem, createWorkItem, listWorkItems, newWorkId, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/work/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/work/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,KAAK,mBAAmB,EACxB,cAAc,EACd,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}

package/dist/core/work/index.js

@@ -0,0 +1,2 @@
+export { runWorkItem } from "./runner.js";
+export { acceptWorkItem, assertWorkId, cancelWorkItem, createWorkItem, listWorkItems, newWorkId, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, } from "./state.js";

package/dist/core/work/read.d.ts

@@ -0,0 +1,2 @@
+export { assertWorkId, listWorkItems, readWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
+//# sourceMappingURL=read.d.ts.map

package/dist/core/work/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/work/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}

package/dist/core/work/read.js

@@ -0,0 +1 @@
+export { assertWorkId, listWorkItems, readWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, } from "./state.js";

package/dist/core/work/runner.d.ts

@@ -0,0 +1,10 @@
+import type { EngineOpts, RunReport } from "../workflow/types.js";
+export interface RunWorkItemInput {
+    coordRoot: string;
+    workId: string;
+    engine: Omit<EngineOpts, "coordRoot" | "runId" | "resumeRunId" | "workItemId">;
+    retry?: boolean;
+    actor?: string;
+}
+export declare function runWorkItem(input: RunWorkItemInput): Promise<RunReport>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/core/work/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/core/work/runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAWlE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CA2D7E"}

package/dist/core/work/runner.js

@@ -0,0 +1,63 @@
+import { resolve } from "node:path";
+import { runWorkflow } from "../workflow/engine.js";
+import { acquireWorkLease, appendReconcileIfChanged, appendWorkEvent, assertWorkflowUnchanged, boundedActor, newWorkflowRunId, readWorkItemIgnoringLease, } from "./state.js";
+export async function runWorkItem(input) {
+    const coordRoot = resolve(input.coordRoot);
+    const release = acquireWorkLease(coordRoot, input.workId);
+    try {
+        const record = readWorkItemIgnoringLease(coordRoot, input.workId);
+        assertWorkflowUnchanged(record.intent);
+        const latest = record.projection.attempts.at(-1);
+        if (record.projection.state === "awaiting_approval" && latest) {
+            if (record.projection.next_action !== "resume") {
+                throw new Error(`work item ${input.workId} is waiting for approval ${latest.approval_id}`);
+            }
+            appendWorkEvent(coordRoot, input.workId, {
+                event: "attempt.resumed",
+                actor: boundedActor(input.actor),
+                reason: "resuming the parked workflow attempt",
+                run_id: latest.run_id,
+                attempt: latest.number,
+            });
+            return await runWorkflow(record.intent.workflow.path, {
+                ...input.engine,
+                coordRoot,
+                resumeRunId: latest.run_id,
+                workItemId: input.workId,
+            });
+        }
+        if (record.projection.state === "blocked" && !input.retry) {
+            throw new Error(`work item ${input.workId} is blocked; use an explicit retry`);
+        }
+        if (!(record.projection.state === "ready" || record.projection.state === "blocked")) {
+            throw new Error(`work item ${input.workId} cannot run from state ${record.projection.state}`);
+        }
+        if (record.projection.attempts_used >= record.intent.max_attempts) {
+            throw new Error(`work item ${input.workId} exhausted its ${record.intent.max_attempts} attempts`);
+        }
+        const attempt = record.projection.attempts_used + 1;
+        const runId = newWorkflowRunId();
+        appendWorkEvent(coordRoot, input.workId, {
+            event: "attempt.started",
+            actor: boundedActor(input.actor),
+            reason: input.retry ? "explicit retry started" : "workflow attempt started",
+            run_id: runId,
+            attempt,
+        });
+        return await runWorkflow(record.intent.workflow.path, {
+            ...input.engine,
+            coordRoot,
+            runId,
+            workItemId: input.workId,
+        });
+    }
+    finally {
+        try {
+            const current = readWorkItemIgnoringLease(coordRoot, input.workId);
+            appendReconcileIfChanged(coordRoot, current, boundedActor(input.actor, "work-runner"));
+        }
+        finally {
+            release();
+        }
+    }
+}

package/dist/core/work/state.d.ts

@@ -0,0 +1,109 @@
+export declare const WORK_INTENT_SCHEMA_VERSION: 1;
+export declare const WORK_EVENT_SCHEMA_VERSION: 1;
+export type WorkState = "waiting" | "ready" | "running" | "awaiting_approval" | "in_review" | "blocked" | "succeeded" | "cancelled";
+export type WorkNextAction = "wait_for_dependencies" | "run" | "wait_for_run" | "resolve_approval" | "resume" | "retry" | "review" | "none";
+export interface WorkIntent {
+    schema_version: typeof WORK_INTENT_SCHEMA_VERSION;
+    id: string;
+    title: string;
+    objective: string;
+    acceptance: string[];
+    dependencies: string[];
+    workflow: {
+        path: string;
+        sha256: string;
+    };
+    max_attempts: number;
+    source?: {
+        kind: "human" | "workflow" | "external";
+        ref?: string;
+    };
+    created_at: string;
+}
+export type WorkEventType = "work.created" | "work.reconciled" | "attempt.started" | "attempt.resumed" | "work.accepted" | "work.cancelled" | "work.reopened";
+export interface WorkEvent {
+    schema_version: typeof WORK_EVENT_SCHEMA_VERSION;
+    work_id: string;
+    seq: number;
+    ts: string;
+    event: WorkEventType;
+    actor: string;
+    reason?: string;
+    run_id?: string;
+    attempt?: number;
+    state?: WorkState;
+    next_action?: WorkNextAction;
+}
+export interface WorkAttempt {
+    number: number;
+    run_id: string;
+    started_at: string;
+    status: "running" | "parked" | "succeeded" | "failed" | "lost";
+    approval_id?: string;
+    proof_path?: string;
+}
+export interface WorkProjection {
+    id: string;
+    title: string;
+    state: WorkState;
+    reason: string;
+    next_action: WorkNextAction;
+    unresolved_dependencies: string[];
+    attempts: WorkAttempt[];
+    attempts_used: number;
+    attempts_remaining: number;
+    latest_run_id?: string;
+    approval_id?: string;
+    proof_path?: string;
+    updated_at: string;
+}
+export interface WorkRecord {
+    intent: WorkIntent;
+    events: WorkEvent[];
+    projection: WorkProjection;
+}
+export interface CreateWorkItemInput {
+    coordRoot: string;
+    title: string;
+    objective: string;
+    workflowPath: string;
+    acceptance?: string[];
+    dependencies?: string[];
+    maxAttempts?: number;
+    source?: WorkIntent["source"];
+    id?: string;
+    actor?: string;
+}
+export declare function createWorkItem(input: CreateWorkItemInput): WorkRecord;
+export declare function readWorkItem(coordRoot: string, workId: string): WorkRecord;
+export declare function listWorkItems(coordRoot: string): WorkRecord[];
+export declare function reconcileWorkItem(coordRoot: string, workId: string, actor?: string): WorkRecord;
+export declare function reconcileAllWorkItems(coordRoot: string, actor?: string): WorkRecord[];
+export declare function acceptWorkItem(coordRoot: string, workId: string, input?: {
+    actor?: string;
+    reason?: string;
+}): WorkRecord;
+export declare function cancelWorkItem(coordRoot: string, workId: string, input?: {
+    actor?: string;
+    reason?: string;
+}): WorkRecord;
+export declare function reopenWorkItem(coordRoot: string, workId: string, input?: {
+    actor?: string;
+    reason?: string;
+}): WorkRecord;
+export declare function assertWorkId(workId: string): void;
+export declare function newWorkId(): string;
+export declare function newWorkflowRunId(): string;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function appendReconcileIfChanged(coordRoot: string, record: WorkRecord, actor: string): void;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function appendWorkEvent(coordRoot: string, workId: string, input: Omit<WorkEvent, "schema_version" | "work_id" | "seq" | "ts">): WorkEvent;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function readWorkItemIgnoringLease(coordRoot: string, workId: string): WorkRecord;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function assertWorkflowUnchanged(intent: WorkIntent): void;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function acquireWorkLease(coordRoot: string, workId: string): () => void;
+/** @internal Runner seam; not a separate persistence contract. */
+export declare function boundedActor(value?: string, fallback?: string): string;
+//# sourceMappingURL=state.d.ts.map

package/dist/core/work/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/work/state.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAkBpD,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,OAAO,GACP,SAAS,GACT,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,cAAc,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CA0DrE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAS7D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAmC/F;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAIrF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAEZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAkMD,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,GACZ,IAAI,CAgBN;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,GAClE,SAAS,CAgCX;AAkCD,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAIvF;AAqHD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAMhE;AAkBD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0C9E;AAiGD,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,MAAM,CAE1E"}