harnery 0.14.0 → 0.16.0

package/README.md

@@ -23,6 +23,7 @@
 - **Cross-machine presence:** sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay — the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
 - **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless harness-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with `ALLOW`, `ASK`, and `DENY`; CLI `ASK` requests park durably for an explicit approve/deny and same-run resume, while library callers remain fail-closed by default.
 - **Durable work above attempts:** `harn work` preserves an objective across bounded workflow attempts, dependencies, approval parks, failures, and review. Its one-shot reconciler derives state from append-only local evidence and reports the next explicit action without silently spawning, retrying, or accepting work.
+- **Bounded goal supervision:** `harn supervisor` freezes a specialist team and safety limits around a root durable-work graph, then runs scheduling cycles until success, human attention, no progress, or budget exhaustion. Use explicit foreground ticks or enroll goals in the optional heartbeat-backed background service; specialist roles survive as configuration while every child remains a bounded process.
 - **Standalone web UI:** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
 - **Backup + sync:** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).
 

package/dist/commander.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAmD3E"}
+{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAoD3E"}

package/dist/commander.js

@@ -47,6 +47,7 @@ import { registerReadCommand } from "./commands/read.js";
 import { registerRelayCommand } from "./commands/relay.js";
 import { registerScratchCommand } from "./commands/scratch.js";
 import { registerSessionCommand } from "./commands/session.js";
+import { registerSupervisorCommand } from "./commands/supervisor.js";
 import { registerSyncCommand } from "./commands/sync.js";
 import { registerSectionCommand, registerTocCommand } from "./commands/toc.js";
 import { registerTokensCommand } from "./commands/tokens.js";
@@ -134,6 +135,7 @@ export function createHarneryProgram(opts = {}) {
     registerSyncCommand(program, emit);
     registerWorkflowCommand(program, emit);
     registerWorkCommand(program, emit);
+    registerSupervisorCommand(program, emit);
     if (include("web"))
         registerWebCommand(program, emit);
     return program;

package/dist/commands/supervisor.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { EmitContext } from "../commander.js";
+export declare function registerSupervisorCommand(program: Command, emit: EmitContext): void;
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/commands/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/commands/supervisor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA4DnD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA2FnF"}

package/dist/commands/supervisor.js

@@ -0,0 +1,446 @@
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { workflowSubscriptionOnly } from "../core/config.js";
+import { createBuiltinHarnessRegistry } from "../core/harnesses/index.js";
+import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
+import { loadPolicyFile } from "../core/policy/index.js";
+import { configureSupervisorService, createSupervisor, listSupervisors, readSupervisor, readSupervisorServiceConfig, readSupervisorServiceStatus, requestSupervisorServiceStop, runSupervisor, runSupervisorServiceDaemon, spawnSupervisorService, supervisorServiceLogPath, } from "../core/supervisor/index.js";
+export function registerSupervisorCommand(program, emit) {
+    const registry = createBuiltinHarnessRegistry();
+    const supervisor = program
+        .command("supervisor")
+        .description("Run a bounded specialist team over a durable-work dependency graph.");
+    supervisor
+        .command("create <root-work-id>")
+        .description("Freeze a goal, specialist team, automation policy, and execution limits.")
+        .requiredOption("--team <file>", "JSON object mapping specialist ids to profiles")
+        .option("--id <goal-id>", "Stable goal id (generated by default)")
+        .option("--title <text>", "Goal title (defaults to root work title)")
+        .option("--max-cycles <n>", "Foreground cycle ceiling (default 50)")
+        .option("--max-runtime-ms <n>", "Foreground wall-time ceiling (default 14400000)")
+        .option("--max-parallel-work <n>", "Concurrent work-item ceiling (default 1)")
+        .option("--max-total-attempts <n>", "Graph-wide attempt ceiling (default 100)")
+        .option("--max-agents-per-work <n>", "Child-agent ceiling per work item (default 20)")
+        .option("--agent-concurrency <n>", "Child concurrency per work item (default 4)")
+        .option("--accept-passing-proof", "Allow the supervisor to explicitly accept passing proof")
+        .option("--no-resume-approved", "Stop after an approval instead of resuming its parked run")
+        .option("--retry-blocked", "Allow bounded retry of blocked work")
+        .option("--json", "Emit the complete supervisor record as JSON")
+        .action((rootWorkId, opts) => {
+        withSupervisorRoot(emit, (coordRoot) => {
+            const specialists = readTeamFile(opts.team);
+            for (const [id, profile] of Object.entries(specialists)) {
+                if (profile.harness && !registry.get(profile.harness)) {
+                    throw new Error(`specialist ${id} names unknown harness ${JSON.stringify(profile.harness)}`);
+                }
+            }
+            emitSupervisor(createSupervisor({
+                coordRoot,
+                rootWorkId,
+                specialists,
+                id: opts.id,
+                title: opts.title,
+                limits: {
+                    max_cycles: integer(opts.maxCycles),
+                    max_runtime_ms: integer(opts.maxRuntimeMs),
+                    max_parallel_work: integer(opts.maxParallelWork),
+                    max_total_attempts: integer(opts.maxTotalAttempts),
+                    max_agents_per_work: integer(opts.maxAgentsPerWork),
+                    agent_concurrency: integer(opts.agentConcurrency),
+                },
+                automation: {
+                    accept_passing_proof: opts.acceptPassingProof,
+                    resume_approved: opts.resumeApproved,
+                    retry_blocked: opts.retryBlocked,
+                },
+            }), opts.json, emit, true);
+        });
+    });
+    supervisor
+        .command("list")
+        .description("List durable goals and their derived next action.")
+        .option("--json", "Emit complete supervisor records as JSON")
+        .action((opts) => {
+        withSupervisorRoot(emit, (coordRoot) => {
+            const records = listSupervisors(coordRoot);
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(records);
+            }
+            else if (records.length === 0) {
+                emit.text("no durable supervisors\n");
+            }
+            else {
+                emit.text(`${records.map(renderSupervisorRow).join("\n")}\n`);
+            }
+        });
+    });
+    supervisor
+        .command("show <goal-id>")
+        .description("Show one goal, frozen team, bounds, graph state, and next action.")
+        .option("--json", "Emit the complete supervisor record as JSON")
+        .action((goalId, opts) => {
+        withSupervisorRoot(emit, (coordRoot) => {
+            emitSupervisor(readSupervisor(coordRoot, goalId), opts.json, emit, true);
+        });
+    });
+    registerServiceCommand(supervisor, registry, emit);
+    registerRunCommand(supervisor, "tick", registry, emit);
+    registerRunCommand(supervisor, "run", registry, emit);
+}
+function registerServiceCommand(supervisor, registry, emit) {
+    const service = supervisor
+        .command("service")
+        .description("Run explicitly enrolled durable goals in a restartable background service.");
+    addServiceOptions(service
+        .command("start [goal-ids...]")
+        .description("Configure and start the detached per-repository supervisor service."))
+        .option("--json", "Emit complete service status as JSON")
+        .action(async (goalIds, opts) => {
+        await withSupervisorRootAsync(emit, async (coordRoot) => {
+            prepareServiceConfig(coordRoot, goalIds, opts, registry);
+            const status = await spawnSupervisorService(coordRoot);
+            emitServiceStatus(status, opts.json, emit);
+        });
+    });
+    addServiceOptions(service
+        .command("run [goal-ids...]")
+        .description("Run the persistent service loop in the foreground for a process manager."))
+        .option("--json", "Emit terminal service status as JSON")
+        .action(async (goalIds, opts) => {
+        await withSupervisorRootAsync(emit, async (coordRoot) => {
+            const config = prepareServiceConfig(coordRoot, goalIds, opts, registry);
+            const status = await runSupervisorServiceDaemon({
+                coordRoot,
+                engine: serviceEngine(config, registry),
+                onLog: opts.json ? undefined : (line) => emit.text(`${line}\n`),
+            });
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(status);
+            }
+        });
+    });
+    service
+        .command("status")
+        .description("Show service liveness, heartbeat, enrolled goals, and durable wake state.")
+        .option("--json", "Emit complete service status as JSON")
+        .action((opts) => {
+        withSupervisorRoot(emit, (coordRoot) => {
+            emitServiceStatus(readSupervisorServiceStatus(coordRoot), opts.json, emit);
+        });
+    });
+    service
+        .command("stop")
+        .description("Request a graceful stop; an active goal tick is allowed to finish safely.")
+        .option("--json", "Emit complete service status as JSON")
+        .action(async (opts) => {
+        await withSupervisorRootAsync(emit, async (coordRoot) => {
+            let status = requestSupervisorServiceStop(coordRoot);
+            const deadline = Date.now() + 5_000;
+            while (status.running && Date.now() < deadline) {
+                await delay(50);
+                status = readSupervisorServiceStatus(coordRoot);
+            }
+            emitServiceStatus(status, opts.json, emit);
+        });
+    });
+    service
+        .command("logs")
+        .description("Show the tail of the private background-service log.")
+        .option("--lines <n>", "Number of lines to show (default 50)", "50")
+        .action((opts) => {
+        withSupervisorRoot(emit, (coordRoot) => {
+            const lines = integer(opts.lines) ?? 50;
+            if (lines > 10_000)
+                throw new Error("service log lines must not exceed 10000");
+            const path = supervisorServiceLogPath(coordRoot);
+            if (!existsSync(path)) {
+                emit.text("no supervisor service log\n");
+                return;
+            }
+            const selected = readFileSync(path, "utf8")
+                .split("\n")
+                .slice(-(lines + 1))
+                .join("\n");
+            emit.text(selected.endsWith("\n") ? selected : `${selected}\n`);
+        });
+    });
+    service
+        .command("daemon", { hidden: true })
+        .description("Internal detached service entrypoint.")
+        .action(async () => {
+        await withSupervisorRootAsync(emit, async (coordRoot) => {
+            const config = readSupervisorServiceConfig(coordRoot);
+            await runSupervisorServiceDaemon({
+                coordRoot,
+                engine: serviceEngine(config, registry),
+                onLog: (line) => emit.text(`${line}\n`),
+            });
+        });
+    });
+}
+function addServiceOptions(command) {
+    return command
+        .option("--wake-interval-ms <n>", "State-change poll interval (default 5000)")
+        .option("--heartbeat-interval-ms <n>", "Heartbeat interval (default 2000)")
+        .option("--error-backoff-base-ms <n>", "Initial service-error backoff (default 2000)")
+        .option("--error-backoff-max-ms <n>", "Maximum service-error backoff (default 300000)")
+        .option("--harness <name>", "Fallback harness for agent calls without a specialist")
+        .option("--cwd <dir>", "Working directory for child agents")
+        .option("--subscription-only", "Require stored harness-login billing")
+        .option("--allow-api-billing", "Permit API-key override billing")
+        .option("--policy <file>", "Host policy JSON/JSONC")
+        .option("--isolation <mode>", "shared | worktree | sandbox | remote")
+        .option("--approval-to <address>", "Address durable ASK requests");
+}
+function prepareServiceConfig(coordRoot, goalIds, opts, registry) {
+    if (goalIds.length === 0) {
+        if (hasServiceConfigOverrides(opts)) {
+            throw new Error("goal ids are required when changing supervisor service options");
+        }
+        return readSupervisorServiceConfig(coordRoot);
+    }
+    if (opts.harness && !registry.get(opts.harness)) {
+        throw new Error(`unknown harness ${JSON.stringify(opts.harness)}`);
+    }
+    const policy = opts.policy ? loadPolicyFile(opts.policy) : undefined;
+    return configureSupervisorService({
+        coordRoot,
+        goalIds,
+        wakeIntervalMs: integer(opts.wakeIntervalMs),
+        heartbeatIntervalMs: integer(opts.heartbeatIntervalMs),
+        errorBackoffBaseMs: integer(opts.errorBackoffBaseMs),
+        errorBackoffMaxMs: integer(opts.errorBackoffMaxMs),
+        engine: {
+            default_harness: opts.harness,
+            cwd: opts.cwd,
+            subscription_only: opts.subscriptionOnly === true ? true : workflowSubscriptionOnly(coordRoot),
+            allow_api_billing: opts.allowApiBilling,
+            policy,
+            isolation: opts.isolation,
+            approval_addressee: opts.approvalTo,
+        },
+    });
+}
+function hasServiceConfigOverrides(opts) {
+    return Boolean(opts.wakeIntervalMs ||
+        opts.heartbeatIntervalMs ||
+        opts.errorBackoffBaseMs ||
+        opts.errorBackoffMaxMs ||
+        opts.harness ||
+        opts.cwd ||
+        opts.subscriptionOnly ||
+        opts.allowApiBilling ||
+        opts.policy ||
+        opts.isolation ||
+        opts.approvalTo);
+}
+function serviceEngine(config, registry) {
+    return {
+        spawners: registry.spawners(),
+        defaultHarness: config.engine.default_harness,
+        cwd: config.engine.cwd,
+        subscriptionOnly: config.engine.subscription_only,
+        allowApiBilling: config.engine.allow_api_billing,
+        harnessEvidence: Object.fromEntries(registry
+            .list()
+            .map((adapter) => [
+            adapter.profile.id,
+            { toolEvidence: adapter.profile.capabilities.toolEvidence },
+        ])),
+        policy: config.engine.policy,
+        approvalMode: "park",
+        approvalAddressee: config.engine.approval_addressee,
+        isolation: config.engine.isolation,
+        networkAccess: "enabled",
+    };
+}
+function emitServiceStatus(status, json, emit) {
+    if (json) {
+        emit.config({ format: "json" });
+        emit.data(status);
+        return;
+    }
+    if (!status.config && !status.record) {
+        emit.text("supervisor service: unconfigured\n");
+        return;
+    }
+    const state = status.running
+        ? (status.record?.state ?? "running")
+        : status.stale
+            ? "stale"
+            : "stopped";
+    const lines = [
+        `supervisor service: ${state}`,
+        `goals: ${status.config?.goal_ids.join(", ") || "none"}`,
+    ];
+    if (status.record) {
+        lines.push(`pid: ${status.record.pid} on ${status.record.host}`);
+        lines.push(`heartbeat: ${status.record.heartbeat_at}`);
+        lines.push(`sweeps: ${status.record.sweep_count}`);
+        if (status.record.active_goal_id)
+            lines.push(`active: ${status.record.active_goal_id}`);
+        if (status.record.next_wake_at)
+            lines.push(`next wake: ${status.record.next_wake_at}`);
+        if (status.record.last_error)
+            lines.push(`error: ${status.record.last_error}`);
+    }
+    const backingOff = Object.entries(status.runtime?.goals ?? {}).filter(([, runtime]) => runtime.state === "backoff");
+    if (backingOff.length) {
+        lines.push(`backoff: ${backingOff.map(([goalId]) => goalId).join(", ")}`);
+    }
+    emit.text(`${lines.join("\n")}\n`);
+}
+function registerRunCommand(supervisor, mode, registry, emit) {
+    supervisor
+        .command(`${mode} <goal-id>`)
+        .description(mode === "tick"
+        ? "Perform at most one bounded scheduling cycle."
+        : "Run bounded cycles until success, attention, no progress, or budget exhaustion.")
+        .option("--harness <name>", "Fallback harness for agent calls without a specialist")
+        .option("--cwd <dir>", "Working directory for child agents")
+        .option("--subscription-only", "Require stored harness-login billing")
+        .option("--allow-api-billing", "Permit API-key override billing")
+        .option("--policy <file>", "Host policy JSON/JSONC")
+        .option("--isolation <mode>", "shared | worktree | sandbox | remote")
+        .option("--approval-to <address>", "Address durable ASK requests")
+        .option("--actor <name>", "Actor recorded on supervisor work decisions")
+        .option("--json", "Emit the complete run report as JSON")
+        .action(async (goalId, opts) => {
+        await withSupervisorRootAsync(emit, async (coordRoot) => {
+            if (opts.harness && !registry.get(opts.harness)) {
+                throw new Error(`unknown harness ${JSON.stringify(opts.harness)}`);
+            }
+            const report = await runSupervisor({
+                coordRoot,
+                goalId,
+                mode,
+                actor: opts.actor,
+                onLog: opts.json ? undefined : (line) => emit.text(`${line}\n`),
+                engine: {
+                    spawners: registry.spawners(),
+                    defaultHarness: opts.harness,
+                    cwd: opts.cwd,
+                    subscriptionOnly: opts.subscriptionOnly === true ? true : workflowSubscriptionOnly(coordRoot),
+                    allowApiBilling: opts.allowApiBilling,
+                    harnessEvidence: Object.fromEntries(registry
+                        .list()
+                        .map((adapter) => [
+                        adapter.profile.id,
+                        { toolEvidence: adapter.profile.capabilities.toolEvidence },
+                    ])),
+                    policy: opts.policy ? loadPolicyFile(opts.policy) : undefined,
+                    approvalMode: "park",
+                    approvalAddressee: opts.approvalTo,
+                    isolation: opts.isolation,
+                    networkAccess: "enabled",
+                },
+            });
+            emitSupervisorReport(report, opts.json, emit);
+        });
+    });
+}
+function readTeamFile(path) {
+    const absolute = resolve(path);
+    let value;
+    try {
+        value = JSON.parse(readFileSync(absolute, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`cannot read supervisor team at ${absolute}: ${error.message}`);
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("supervisor team must be a JSON object keyed by specialist id");
+    }
+    return value;
+}
+function emitSupervisor(record, json, emit, detail = false) {
+    if (json) {
+        emit.config({ format: "json" });
+        emit.data(record);
+        return;
+    }
+    if (!detail) {
+        emit.text(`${renderSupervisorRow(record)}\n`);
+        return;
+    }
+    const projection = record.projection;
+    const lines = [
+        `${record.intent.id}: ${record.intent.title}`,
+        `state: ${projection.state}`,
+        `root: ${record.intent.root_work_id}`,
+        `reason: ${projection.reason}`,
+        `next: ${projection.next_action}`,
+        `work: ${projection.work_ids.length}`,
+        `attempts: ${projection.attempts_used}/${record.intent.limits.max_total_attempts}`,
+        `specialists: ${projection.specialists.join(", ") || "none"}`,
+        `automation: accept=${record.intent.automation.accept_passing_proof}, ` +
+            `resume=${record.intent.automation.resume_approved}, retry=${record.intent.automation.retry_blocked}`,
+    ];
+    if (projection.attention_work.length) {
+        lines.push(`attention: ${projection.attention_work.join(", ")}`);
+    }
+    emit.text(`${lines.join("\n")}\n`);
+}
+function emitSupervisorReport(report, json, emit) {
+    if (json) {
+        emit.config({ format: "json" });
+        emit.data(report);
+        return;
+    }
+    emit.text(`supervisor ${report.goal_id}: ${report.stop_reason}\n` +
+        `reason: ${report.reason}\n` +
+        `cycles: ${report.cycles}; dispatches: ${report.dispatches}; acceptances: ${report.acceptances}\n` +
+        `state: ${report.projection.state}; next: ${report.projection.next_action}\n`);
+}
+function renderSupervisorRow(record) {
+    const projection = record.projection;
+    return `${record.intent.id}  ${projection.state.padEnd(20)}  ${projection.attempts_used}/${record.intent.limits.max_total_attempts}  ${projection.next_action.padEnd(18)}  ${record.intent.title}`;
+}
+function integer(value) {
+    if (value === undefined)
+        return undefined;
+    if (!/^\d+$/.test(value))
+        throw new Error(`expected a positive integer, got ${JSON.stringify(value)}`);
+    return Number.parseInt(value, 10);
+}
+function delay(ms) {
+    return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
+}
+function withSupervisorRoot(emit, fn) {
+    const coordRoot = findCoordRoot();
+    if (!coordRoot) {
+        emit.error({
+            code: "no_coord_root",
+            message: "no .harnery/ coordination root found; run `init` first",
+        });
+        emit.setExitCode(1);
+        return;
+    }
+    try {
+        fn(coordRoot);
+    }
+    catch (error) {
+        emit.error({ code: "supervisor_failed", message: error.message });
+        emit.setExitCode(1);
+    }
+}
+async function withSupervisorRootAsync(emit, fn) {
+    const coordRoot = findCoordRoot();
+    if (!coordRoot) {
+        emit.error({
+            code: "no_coord_root",
+            message: "no .harnery/ coordination root found; run `init` first",
+        });
+        emit.setExitCode(1);
+        return;
+    }
+    try {
+        await fn(coordRoot);
+    }
+    catch (error) {
+        emit.error({ code: "supervisor_failed", message: error.message });
+        emit.setExitCode(1);
+    }
+}

package/dist/core/supervisor/index.d.ts

@@ -0,0 +1,4 @@
+export { type RunSupervisorInput, runSupervisor, type SupervisorDispatchOutcome, type SupervisorRunReport, type SupervisorStopReason, } from "./runner.js";
+export { type ConfigureSupervisorServiceInput, configureSupervisorService, type RunSupervisorServiceDaemonInput, type RunSupervisorServiceSweepInput, readSupervisorServiceConfig, readSupervisorServiceRuntime, readSupervisorServiceStatus, requestSupervisorServiceStop, runSupervisorServiceDaemon, runSupervisorServiceSweep, SUPERVISOR_SERVICE_CONFIG_SCHEMA_VERSION, SUPERVISOR_SERVICE_RUNTIME_SCHEMA_VERSION, SUPERVISOR_SERVICE_STATUS_SCHEMA_VERSION, type SupervisorServiceConfig, type SupervisorServiceEngineConfig, type SupervisorServiceGoalRuntime, type SupervisorServiceGoalState, type SupervisorServiceProcessState, type SupervisorServiceRuntime, type SupervisorServiceStatus, type SupervisorServiceStatusRecord, type SupervisorServiceSweepOutcome, type SupervisorServiceSweepReport, spawnSupervisorService, supervisorServiceLogPath, } from "./service.js";
+export { assertSupervisorId, type CreateSupervisorInput, collectSupervisorWork, createSupervisor, listSupervisors, newSupervisorId, readSupervisor, SUPERVISOR_INTENT_SCHEMA_VERSION, type SupervisorAutomationPolicy, type SupervisorIntent, type SupervisorLimits, type SupervisorNextAction, type SupervisorProjection, type SupervisorRecord, type SupervisorState, } from "./state.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/supervisor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,+BAA+B,EACpC,0BAA0B,EAC1B,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,yBAAyB,EACzB,wCAAwC,EACxC,yCAAyC,EACzC,wCAAwC,EACxC,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,EACd,gCAAgC,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC"}

package/dist/core/supervisor/index.js

@@ -0,0 +1,3 @@
+export { runSupervisor, } from "./runner.js";
+export { configureSupervisorService, readSupervisorServiceConfig, readSupervisorServiceRuntime, readSupervisorServiceStatus, requestSupervisorServiceStop, runSupervisorServiceDaemon, runSupervisorServiceSweep, SUPERVISOR_SERVICE_CONFIG_SCHEMA_VERSION, SUPERVISOR_SERVICE_RUNTIME_SCHEMA_VERSION, SUPERVISOR_SERVICE_STATUS_SCHEMA_VERSION, spawnSupervisorService, supervisorServiceLogPath, } from "./service.js";
+export { assertSupervisorId, collectSupervisorWork, createSupervisor, listSupervisors, newSupervisorId, readSupervisor, SUPERVISOR_INTENT_SCHEMA_VERSION, } from "./state.js";

package/dist/core/supervisor/read.d.ts

@@ -0,0 +1,4 @@
+export type { SupervisorServiceConfig, SupervisorServiceGoalRuntime, SupervisorServiceGoalState, SupervisorServiceProcessState, SupervisorServiceRuntime, SupervisorServiceStatus, SupervisorServiceStatusRecord, } from "./service.js";
+export { readSupervisorServiceConfig, readSupervisorServiceRuntime, readSupervisorServiceStatus, supervisorServiceLogPath, } from "./service-read.js";
+export { assertSupervisorId, collectSupervisorWork, listSupervisors, readSupervisor, SUPERVISOR_INTENT_SCHEMA_VERSION, type SupervisorAutomationPolicy, type SupervisorIntent, type SupervisorLimits, type SupervisorNextAction, type SupervisorProjection, type SupervisorRecord, type SupervisorState, } from "./state.js";
+//# sourceMappingURL=read.d.ts.map

package/dist/core/supervisor/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/read.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,gCAAgC,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC"}

package/dist/core/supervisor/read.js

@@ -0,0 +1,2 @@
+export { readSupervisorServiceConfig, readSupervisorServiceRuntime, readSupervisorServiceStatus, supervisorServiceLogPath, } from "./service-read.js";
+export { assertSupervisorId, collectSupervisorWork, listSupervisors, readSupervisor, SUPERVISOR_INTENT_SCHEMA_VERSION, } from "./state.js";

package/dist/core/supervisor/runner.d.ts

@@ -0,0 +1,34 @@
+import { type RunWorkItemInput } from "../work/index.js";
+import { type SupervisorProjection } from "./state.js";
+export type SupervisorStopReason = "succeeded" | "awaiting_attention" | "blocked" | "budget_exhausted" | "no_progress" | "tick_complete";
+export interface SupervisorDispatchOutcome {
+    work_id: string;
+    action: "run" | "resume" | "retry";
+    status: "completed" | "parked" | "failed";
+    run_id?: string;
+    error?: string;
+}
+export interface SupervisorRunReport {
+    goal_id: string;
+    mode: "tick" | "run";
+    stop_reason: SupervisorStopReason;
+    reason: string;
+    started_at: string;
+    ended_at: string;
+    duration_ms: number;
+    cycles: number;
+    dispatches: number;
+    acceptances: number;
+    outcomes: SupervisorDispatchOutcome[];
+    projection: SupervisorProjection;
+}
+export interface RunSupervisorInput {
+    coordRoot: string;
+    goalId: string;
+    mode?: "tick" | "run";
+    actor?: string;
+    engine: Omit<RunWorkItemInput["engine"], "maxAgents" | "concurrency" | "specialists">;
+    onLog?: (line: string) => void;
+}
+export declare function runSupervisor(input: RunSupervisorInput): Promise<SupervisorRunReport>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/core/supervisor/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EAItB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,aAAa,GACb,eAAe,CAAC;AAEpB,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACtC,UAAU,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IACtF,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAQD,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuJ3F"}