harnery 0.15.0 → 0.17.0

package/dist/core/supervisor/state.d.ts

@@ -1,5 +1,6 @@
 import { type WorkRecord } from "../work/read.js";
 import type { WorkflowSpecialistProfile } from "../workflow/types.js";
+import { type CreateSupervisorReplanningInput, type SupervisorPlanRecord, type SupervisorReplanningPolicy } from "./plan-types.js";
 export declare const SUPERVISOR_INTENT_SCHEMA_VERSION: 1;
 export interface SupervisorLimits {
     max_cycles: number;
@@ -22,10 +23,11 @@ export interface SupervisorIntent {
     specialists: Record<string, WorkflowSpecialistProfile>;
     limits: SupervisorLimits;
     automation: SupervisorAutomationPolicy;
+    replanning?: SupervisorReplanningPolicy;
     created_at: string;
 }
 export type SupervisorState = "ready" | "running" | "awaiting_attention" | "blocked" | "budget_exhausted" | "succeeded";
-export type SupervisorNextAction = "run" | "wait_for_run" | "resolve_approval" | "review" | "retry" | "none";
+export type SupervisorNextAction = "run" | "wait_for_run" | "resolve_approval" | "review" | "retry" | "replan" | "review_plan" | "none";
 export interface SupervisorProjection {
     id: string;
     title: string;
@@ -41,11 +43,18 @@ export interface SupervisorProjection {
     attempts_used: number;
     attempts_remaining: number;
     specialists: string[];
+    plan_generation: number;
+    replans_used: number;
+    replans_remaining: number;
+    pending_plan_id?: string;
+    latest_plan_status?: SupervisorPlanRecord["status"];
+    governed_work_ids: string[];
 }
 export interface SupervisorRecord {
     intent: SupervisorIntent;
     projection: SupervisorProjection;
     work: WorkRecord[];
+    plans: SupervisorPlanRecord[];
 }
 export interface CreateSupervisorInput {
     coordRoot: string;
@@ -55,6 +64,7 @@ export interface CreateSupervisorInput {
     id?: string;
     limits?: Partial<SupervisorLimits>;
     automation?: Partial<SupervisorAutomationPolicy>;
+    replanning?: CreateSupervisorReplanningInput;
 }
 export declare function createSupervisor(input: CreateSupervisorInput): SupervisorRecord;
 export declare function readSupervisor(coordRoot: string, goalId: string): SupervisorRecord;

package/dist/core/supervisor/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/state.ts"],"names":[],"mappings":"AAeA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAO3D,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,0BAA0B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,WAAW,CAAC;AAEhB,MAAM,MAAM,oBAAoB,GAC5B,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,UAAU,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAClD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAqB/E;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAElF;AAED,gFAAgF;AAChF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAE/F;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAWrE;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAezF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0CpF"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/state.ts"],"names":[],"mappings":"AAeA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EACL,KAAK,+BAA+B,EAEpC,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAEhC,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAS3D,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,0BAA0B,CAAC;IACvC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,WAAW,CAAC;AAEhB,MAAM,MAAM,oBAAoB,GAC5B,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,aAAa,GACb,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,oBAAoB,CAAC;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACpD,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACjD,UAAU,CAAC,EAAE,+BAA+B,CAAC;CAC9C;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAyB/E;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAElF;AAED,gFAAgF;AAChF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAE/F;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAWrE;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAezF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0CpF"}

package/dist/core/supervisor/state.js

@@ -1,13 +1,18 @@
 import { randomBytes, randomUUID } from "node:crypto";
 import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
-import { dirname, join, resolve } from "node:path";
+import { dirname, isAbsolute, join, resolve } from "node:path";
 import { assertWorkId, readWorkItem } from "../work/read.js";
+import { workflowScriptDigest } from "../workflow/run-state.js";
 import { normalizeWorkflowSpecialists } from "../workflow/specialists.js";
+import { readSupervisorPlans } from "./plan-read.js";
+import { supervisorGraphFingerprint, } from "./plan-types.js";
 export const SUPERVISOR_INTENT_SCHEMA_VERSION = 1;
 const GOAL_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
 const MAX_TITLE = 200;
 const MAX_INTENT_BYTES = 256 * 1024;
+const MAX_TEMPLATES = 20;
+const TEMPLATE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 const FOREIGN_LEASE_STALE_MS = 24 * 60 * 60 * 1_000;
 export function createSupervisor(input) {
     const coordRoot = resolve(input.coordRoot);
@@ -15,6 +20,9 @@ export function createSupervisor(input) {
     const root = readWorkItem(coordRoot, input.rootWorkId);
     const id = input.id ?? newSupervisorId();
     assertSupervisorId(id);
+    const replanning = input.replanning
+        ? normalizeReplanning(input.replanning, input.specialists)
+        : undefined;
     const intent = {
         schema_version: SUPERVISOR_INTENT_SCHEMA_VERSION,
         id,
@@ -23,6 +31,7 @@ export function createSupervisor(input) {
         specialists: normalizeWorkflowSpecialists(input.specialists),
         limits: normalizeLimits(input.limits),
         automation: normalizeAutomation(input.automation),
+        ...(replanning ? { replanning } : {}),
         created_at: new Date().toISOString(),
     };
     const path = supervisorIntentPath(coordRoot, id);
@@ -126,18 +135,21 @@ export function acquireSupervisorLease(coordRoot, goalId) {
 function readSupervisorInternal(coordRootRaw, goalId, ignoreLease) {
     const coordRoot = resolve(coordRootRaw);
     const intent = readSupervisorIntent(coordRoot, goalId);
-    const work = collectSupervisorWork(coordRoot, intent.root_work_id);
+    const plans = readSupervisorPlans(coordRoot, intent.id, intent.root_work_id);
+    const work = collectSupervisorWork(coordRoot, plans.active_root_work_id);
+    const governed = collectGovernedWork(coordRoot, intent.root_work_id, plans, work);
     return {
         intent,
         work,
-        projection: deriveProjection(coordRoot, intent, work, ignoreLease),
+        plans: plans.plans,
+        projection: deriveProjection(coordRoot, intent, work, governed, plans, ignoreLease),
     };
 }
-function deriveProjection(coordRoot, intent, work, ignoreLease) {
-    const root = work.find((record) => record.intent.id === intent.root_work_id);
+function deriveProjection(coordRoot, intent, work, governed, plans, ignoreLease) {
+    const root = work.find((record) => record.intent.id === plans.active_root_work_id);
     if (!root)
         throw new Error(`supervisor ${intent.id} root work is missing`);
-    const attemptsUsed = work.reduce((sum, record) => sum + record.projection.attempts_used, 0);
+    const attemptsUsed = governed.reduce((sum, record) => sum + record.projection.attempts_used, 0);
     const readyWork = work
         .filter((record) => record.projection.state === "ready")
         .map((record) => record.intent.id);
@@ -172,7 +184,7 @@ function deriveProjection(coordRoot, intent, work, ignoreLease) {
     const base = {
         id: intent.id,
         title: intent.title,
-        root_work_id: intent.root_work_id,
+        root_work_id: plans.active_root_work_id,
         work_ids: work.map((record) => record.intent.id),
         ready_work: readyWork,
         resumable_work: resumableWork,
@@ -181,6 +193,12 @@ function deriveProjection(coordRoot, intent, work, ignoreLease) {
         attempts_used: attemptsUsed,
         attempts_remaining: Math.max(0, intent.limits.max_total_attempts - attemptsUsed),
         specialists: Object.keys(intent.specialists),
+        plan_generation: plans.generation,
+        replans_used: plans.plans.length,
+        replans_remaining: Math.max(0, (intent.replanning?.max_replans ?? 0) - plans.plans.length),
+        pending_plan_id: plans.latest?.status === "proposed" ? plans.latest.request.id : undefined,
+        latest_plan_status: plans.latest?.status,
+        governed_work_ids: governed.map((record) => record.intent.id),
     };
     if (!ignoreLease && supervisorLeaseIsLive(coordRoot, intent.id)) {
         return {
@@ -198,6 +216,30 @@ function deriveProjection(coordRoot, intent, work, ignoreLease) {
             next_action: "none",
         };
     }
+    if (plans.latest?.status === "proposed") {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: `replacement plan ${plans.latest.request.id} awaits explicit review`,
+            next_action: "review_plan",
+        };
+    }
+    if (plans.latest?.status === "awaiting_approval") {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: `planner workflow awaits approval ${plans.latest.approval_id}`,
+            next_action: "resolve_approval",
+        };
+    }
+    if (plans.latest?.status === "resumable") {
+        return {
+            ...base,
+            state: "ready",
+            reason: `planner workflow ${plans.latest.request.workflow_run_id} is resumable`,
+            next_action: "replan",
+        };
+    }
     const resumableDispatchable = intent.automation.resume_approved ? resumableWork : [];
     const attemptDispatchable = [
         ...readyWork,
@@ -268,6 +310,54 @@ function deriveProjection(coordRoot, intent, work, ignoreLease) {
             next_action: "retry",
         };
     }
+    if (attemptsUsed >= intent.limits.max_total_attempts && cancelled.length === 0) {
+        return {
+            ...base,
+            state: "budget_exhausted",
+            reason: `goal exhausted its ${intent.limits.max_total_attempts} total attempts`,
+            next_action: "none",
+        };
+    }
+    const triggerFingerprint = supervisorGraphFingerprint({
+        rootWorkId: plans.active_root_work_id,
+        generation: plans.generation,
+        work,
+    });
+    const latestHandledSameGraph = plans.latest?.request.trigger_fingerprint === triggerFingerprint &&
+        plans.latest.request.prior_root_work_id === plans.active_root_work_id &&
+        plans.latest.status === "attention";
+    const canReplan = intent.replanning !== undefined &&
+        plans.plans.length < intent.replanning.max_replans &&
+        cancelled.length === 0 &&
+        !latestHandledSameGraph;
+    if (canReplan) {
+        return {
+            ...base,
+            state: "ready",
+            reason: terminalBlocked.length
+                ? `${terminalBlocked.length} terminally blocked work item${terminalBlocked.length === 1 ? " can" : "s can"} be replanned`
+                : "the active graph has no legal progress action and may be replanned",
+            next_action: "replan",
+        };
+    }
+    if (intent.replanning &&
+        plans.plans.length >= intent.replanning.max_replans &&
+        cancelled.length === 0) {
+        return {
+            ...base,
+            state: "budget_exhausted",
+            reason: `goal exhausted its ${intent.replanning.max_replans} replans`,
+            next_action: "none",
+        };
+    }
+    if (latestHandledSameGraph && plans.latest) {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: plans.latest.reason ?? `plan ${plans.latest.request.id} requires attention`,
+            next_action: "none",
+        };
+    }
     return {
         ...base,
         state: "blocked",
@@ -314,6 +404,8 @@ function validateIntent(intent, goalId) {
     if (JSON.stringify(normalizeAutomation(intent.automation)) !== JSON.stringify(intent.automation)) {
         throw new Error(`supervisor intent ${goalId} automation policy is not canonical`);
     }
+    if (intent.replanning)
+        validateReplanning(intent.replanning, specialists, goalId);
 }
 function normalizeLimits(input) {
     return {
@@ -332,6 +424,93 @@ function normalizeAutomation(input) {
         retry_blocked: boolean(input?.retry_blocked ?? false, "retry_blocked"),
     };
 }
+function normalizeReplanning(input, specialistsInput) {
+    const specialists = normalizeWorkflowSpecialists(specialistsInput);
+    const plannerSpecialist = bounded(input.plannerSpecialist, "planner specialist", 100);
+    if (!specialists[plannerSpecialist]) {
+        throw new Error(`planner specialist ${plannerSpecialist} is not present in the frozen team`);
+    }
+    const entries = Object.entries(input.templates);
+    if (entries.length < 1 || entries.length > MAX_TEMPLATES) {
+        throw new Error(`replanning templates must contain 1 to ${MAX_TEMPLATES} entries`);
+    }
+    const templates = Object.fromEntries(entries
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([id, template]) => {
+        if (!TEMPLATE_ID.test(id))
+            throw new Error(`invalid replanning template id ${id}`);
+        const path = resolve(template.workflowPath);
+        if (!existsSync(path))
+            throw new Error(`replanning template ${id} does not exist at ${path}`);
+        const maxAttempts = positive(template.maxAttempts ?? 3, `replanning template ${id} maxAttempts`, 100);
+        return [
+            id,
+            {
+                workflow: { path, sha256: workflowScriptDigest(path) },
+                max_attempts: maxAttempts,
+                root: boolean(template.root ?? false, `replanning template ${id} root`),
+            },
+        ];
+    }));
+    if (!Object.values(templates).some((template) => template.root)) {
+        throw new Error("replanning requires at least one root-capable template");
+    }
+    const maxWorkItemsPerPlan = positive(input.maxWorkItemsPerPlan ?? 8, "replanning max_work_items_per_plan", 25);
+    const maxTotalWorkItems = positive(input.maxTotalWorkItems ?? 25, "replanning max_total_work_items", 100);
+    if (maxWorkItemsPerPlan > maxTotalWorkItems) {
+        throw new Error("replanning max_work_items_per_plan cannot exceed max_total_work_items");
+    }
+    return {
+        planner_specialist: plannerSpecialist,
+        auto_apply: boolean(input.autoApply ?? false, "replanning auto_apply"),
+        max_replans: positive(input.maxReplans ?? 5, "replanning max_replans", 100),
+        max_work_items_per_plan: maxWorkItemsPerPlan,
+        max_total_work_items: maxTotalWorkItems,
+        templates,
+    };
+}
+function validateReplanning(policy, specialists, goalId) {
+    if (!specialists[policy.planner_specialist]) {
+        throw new Error(`supervisor ${goalId} planner specialist is not in the frozen team`);
+    }
+    boolean(policy.auto_apply, "replanning auto_apply");
+    positive(policy.max_replans, "replanning max_replans", 100);
+    positive(policy.max_work_items_per_plan, "replanning max_work_items_per_plan", 25);
+    positive(policy.max_total_work_items, "replanning max_total_work_items", 100);
+    if (policy.max_work_items_per_plan > policy.max_total_work_items) {
+        throw new Error(`supervisor ${goalId} replanning work-item bounds are inconsistent`);
+    }
+    const entries = Object.entries(policy.templates ?? {});
+    if (entries.length < 1 || entries.length > MAX_TEMPLATES) {
+        throw new Error(`supervisor ${goalId} has invalid replanning templates`);
+    }
+    let rootCapable = false;
+    for (const [id, template] of entries) {
+        if (!TEMPLATE_ID.test(id) ||
+            !isAbsolute(template.workflow?.path) ||
+            !/^[a-f0-9]{64}$/.test(template.workflow?.sha256) ||
+            !Number.isSafeInteger(template.max_attempts) ||
+            template.max_attempts < 1 ||
+            template.max_attempts > 100 ||
+            typeof template.root !== "boolean") {
+            throw new Error(`supervisor ${goalId} replanning template ${id} is invalid`);
+        }
+        rootCapable ||= template.root;
+    }
+    if (!rootCapable)
+        throw new Error(`supervisor ${goalId} has no root-capable replanning template`);
+}
+function collectGovernedWork(coordRoot, originalRootWorkId, plans, active) {
+    const governed = new Map();
+    for (const record of collectSupervisorWork(coordRoot, originalRootWorkId)) {
+        governed.set(record.intent.id, record);
+    }
+    for (const workId of plans.applied_work_ids)
+        governed.set(workId, readWorkItem(coordRoot, workId));
+    for (const record of active)
+        governed.set(record.intent.id, record);
+    return [...governed.values()];
+}
 function supervisorDir(coordRoot, goalId) {
     assertSupervisorId(goalId);
     return join(resolve(coordRoot), ".harnery", "supervisors", goalId);

package/dist/lib/tunnel/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/gate.ts"],"names":[],"mappings":"AAiBA,iBAAS,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlD;AAED,QAAA,MAAM,KAAK,aAKV,CAAC;AACF,QAAA,MAAM,MAAM,QAAwD,CAAC;AACrE,QAAA,MAAM,KAAK,QAAkD,CAAC;AAC9D,QAAA,MAAM,IAAI,QAA0E,CAAC;AACrF,QAAA,MAAM,MAAM,QAA8D,CAAC;AAE3E,QAAA,MAAM,aAAa,QAAqB,CAAC;AACzC,QAAA,MAAM,WAAW,QAAmB,CAAC;AAErC,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,QAAA,MAAM,MAAM,oBAsEV,CAAC"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/gate.ts"],"names":[],"mappings":"AAiBA,iBAAS,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlD;AAED,QAAA,MAAM,KAAK,aAKV,CAAC;AACF,QAAA,MAAM,MAAM,QAAwD,CAAC;AACrE,QAAA,MAAM,KAAK,QAAkD,CAAC;AAC9D,QAAA,MAAM,IAAI,QAA0E,CAAC;AACrF,QAAA,MAAM,MAAM,QAA8D,CAAC;AAE3E,QAAA,MAAM,aAAa,QAAqB,CAAC;AACzC,QAAA,MAAM,WAAW,QAAmB,CAAC;AAErC,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,QAAA,MAAM,MAAM,oBA4EV,CAAC"}

package/dist/lib/tunnel/gate.js

@@ -38,13 +38,18 @@ const server = Bun.serve({
     // Bun's max, and beyond any realistic single-turn delay.
     idleTimeout: 255,
     async fetch(req, server) {
+        const url = new URL(req.url);
         if (ACCESS === "cloudflare-allowlist") {
             const ip = req.headers.get("cf-connecting-ip") ?? "";
             if (!ALLOW.has(ip)) {
+                // Log denials so operators can whitelist a phone/laptop that just
+                // hit 403 without asking the human to dig up their public IP.
+                console.log(
+                // lint-ok-emission: detached worker, see file note above
+                `deny: ${ip || "(missing-cf-connecting-ip)"} ${req.method} ${url.pathname}`);
                 return new Response("403 Forbidden\n", { status: 403 });
             }
         }
-        const url = new URL(req.url);
         if (req.headers.get("upgrade")?.toLowerCase() === "websocket") {
             if (server.upgrade(req, { data: { path: url.pathname + url.search } })) {
                 return undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnery",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",