harnery 0.30.0 → 0.31.1

package/dist/core/agents/render/prompt-context.js

@@ -1,19 +1,25 @@
 /**
  * UserPromptSubmit UX renderer. Combines the peer-refresh dedup, the
- * council-pending hash-dedup, and the Cursor set-task staleness nudge.
+ * council-pending hash-dedup, the cross-adapter first-session naming nudge,
+ * the Cursor/Codex set-task staleness nudge, and the Codex status-footer
+ * reminder.
  * agent-hook's user_prompt.submit post-emit handler calls this
- * and forwards the result as the harness-shaped additionalContext payload.
+ * and forwards the result as the adapter-shaped additionalContext payload.
  *
- * Three hash-dedup'd subsections combined into one additionalContext payload:
+ * Four subsections combined into one additionalContext payload:
  *   1. Peer table: semantically-relevant peer fields hashed; only re-emits
  *      when peers change (name + instance_id + session_id + kind + started_at
  *      + sorted(files_touched) + platform, sorted by instance_id).
  *   2. Council pending: pending open-council IDs hashed; re-emits when the
  *      ID set changes.
- *   3. Task staleness nudge (cursor only, since CC enforces via the Stop hook
- *      transcript scan). Fires when `task` is null or `task_updated_at` is
- *      older than HARNERY_TASK_STALE_SECONDS (default 1800 = 30 min). Hash-deduped
- *      against the previous nudge state.
+ *   3. Focus nudge. Before the first set-task in a human-facing session, tells
+ *      every adapter to reproduce set-task's suggested session name in a fenced
+ *      code block. Cursor/Codex additionally get the existing unset/stale-task
+ *      reminder because their Stop hooks do not enforce task declarations as
+ *      reliably as Claude Code's.
+ *   4. Codex status footer: a non-deduplicated reminder to put the live status
+ *      box after the substantive answer. Stop stays observe-only, so missing the
+ *      footer can never trigger a replacement response.
  *
  * Hash files live at:
  *   .harnery/.last-peer-hash.<instance_id>
@@ -26,6 +32,7 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
 import { coordEnv } from "../../../lib/env.js";
+import { resolveBinName } from "../../config.js";
 import { readRemoteMachines } from "../../presence/index.js";
 import { formatPendingCouncils } from "./session-context.js";
 /**
@@ -37,7 +44,7 @@ import { formatPendingCouncils } from "./session-context.js";
  * councils are pending, matching the bash behavior).
  */
 export function renderPromptContext(opts) {
-    const { coordRoot, instanceId, sessionId, agentName, taskNudge } = opts;
+    const { coordRoot, instanceId, sessionId, agentName, sessionNameNudge, taskNudge, statusFooterNudge, } = opts;
     const sections = [];
     // 1. Peer table with hash dedup.
     const peerTable = computePeerTableIfChanged(coordRoot, instanceId, sessionId);
@@ -49,19 +56,42 @@ export function renderPromptContext(opts) {
         if (councilMsg)
             sections.push(councilMsg);
     }
-    // 3. Task staleness nudge (cursor only).
-    if (taskNudge) {
-        const nudgeMsg = computeTaskNudgeIfChanged(coordRoot, instanceId);
+    // 3. First-session naming for every adapter, plus unset/stale-task reminders
+    // for Cursor/Codex. One state machine avoids a second generic "task unset"
+    // reminder immediately after the first-session reminder has been deduped.
+    if (sessionNameNudge || taskNudge) {
+        const nudgeMsg = computeFocusNudgeIfChanged(coordRoot, instanceId, {
+            sessionNameNudge: sessionNameNudge ?? false,
+            taskNudge: taskNudge ?? false,
+        });
         if (nudgeMsg)
             sections.push(nudgeMsg);
     }
+    // 4. Codex gets this on every prompt. It is intentionally not hash-deduped:
+    // the reminder must be fresh in the model's context when it writes the reply.
+    // Missing it is harmless because Codex Stop enforcement remains observe-only.
+    if (statusFooterNudge) {
+        const statusMsg = renderStatusFooterReminder(coordRoot, instanceId);
+        if (statusMsg)
+            sections.push(statusMsg);
+    }
     return sections.join("\n\n");
 }
-/** The set-task staleness nudge for Cursor.
- * Emits a one-line reminder when `task` is null or `task_updated_at` is older
- * than HARNERY_TASK_STALE_SECONDS (default 1800). Hash-deduped against previous
- * nudge state. */
-function computeTaskNudgeIfChanged(coordRoot, selfInstanceId) {
+function renderStatusFooterReminder(coordRoot, selfInstanceId) {
+    const hb = readHeartbeat(join(coordRoot, ".harnery", "active", `${selfInstanceId}.json`));
+    if (!hb || hb.kind === "subagent" || hb.kind === "transient" || hb.workflow_run_id)
+        return "";
+    const bin = resolveBinName(coordRoot);
+    return ("Codex status footer: complete the user's request first. " +
+        `Then run \`${bin} agents status\` as your final shell call and append its stdout verbatim in a fenced code block at the bottom of the same substantive reply. ` +
+        "Keep the answer intact. If the footer is missed, do not retry or replace the reply; the Stop hook is observe-only.");
+}
+/**
+ * First-session naming for every adapter, followed by Cursor/Codex task
+ * staleness checks. The absence of `task_updated_at` is the same invariant
+ * `agents set-task` uses for `first_of_session`; clears still stamp the field.
+ */
+function computeFocusNudgeIfChanged(coordRoot, selfInstanceId, opts) {
     const hbPath = join(coordRoot, ".harnery", "active", `${selfInstanceId}.json`);
     if (!existsSync(hbPath))
         return "";
@@ -72,39 +102,52 @@ function computeTaskNudgeIfChanged(coordRoot, selfInstanceId) {
     catch {
         return "";
     }
+    const hashFile = join(coordRoot, ".harnery", `.last-task-nudge-hash.${selfInstanceId}`);
+    // Subagents and workflow children have no human-owned session/tab to rename.
+    if (hb.kind === "subagent" || hb.kind === "transient" || hb.workflow_run_id) {
+        clearHashFile(hashFile);
+        return "";
+    }
+    const bin = resolveBinName(coordRoot);
     const threshold = Number.parseInt(coordEnv("TASK_STALE_SECONDS") ?? "1800", 10);
     const taskValue = hb.task ?? "";
     let needsNudge = false;
     let message = "";
-    if (!taskValue) {
+    let nudgeKind = "";
+    if (opts.sessionNameNudge && !hb.task_updated_at) {
+        needsNudge = true;
+        nudgeKind = "session-name";
+        message =
+            `New session: run \`${bin} agents set-task "<2-5 word session topic>"\` as your first tool call. ` +
+                "When it returns `first_of_session: true`, reproduce its `suggested_session_name` value by itself inside a fenced code block at the very top of your reply so the operator can one-click-copy it as the session/tab title. " +
+                "Then continue with the task; that first `set-task` also satisfies this turn's focus declaration.";
+    }
+    else if (opts.taskNudge && !taskValue) {
         needsNudge = true;
+        nudgeKind = "task-unset";
         message =
-            "Heads up: your `task` field is unset. Run `agents set-task \"<short focus>\"` so peers + the coord dashboard can see what you're working on. (Cursor sessions can't enforce this from the Stop hook the way Claude Code does, so this is a one-time soft reminder per staleness state.)";
+            `Heads up: your \`task\` field is unset. Run \`${bin} agents set-task "<short focus>"\` so peers + the coord dashboard can see what you're working on. ` +
+                "(This adapter cannot enforce the declaration from its Stop hook as reliably as Claude Code, so this is a one-time soft reminder per staleness state.)";
     }
-    else if (hb.task_updated_at) {
+    else if (opts.taskNudge && hb.task_updated_at) {
         const updatedSec = Math.floor(Date.parse(hb.task_updated_at) / 1000);
         const nowSec = Math.floor(Date.now() / 1000);
         if (Number.isFinite(updatedSec) && updatedSec > 0) {
             const ageSec = nowSec - updatedSec;
             if (ageSec > threshold) {
                 needsNudge = true;
-                message = `Heads up: your \`task\` field hasn't changed in ${ageSec}s (threshold ${threshold}s). If you've moved on from "${taskValue.slice(0, 60)}", update via \`agents set-task "<new focus>"\`. Pass an empty string to clear.`;
+                nudgeKind = "task-stale";
+                message = `Heads up: your \`task\` field hasn't changed in ${ageSec}s (threshold ${threshold}s). If you've moved on from "${taskValue.slice(0, 60)}", update via \`${bin} agents set-task "<new focus>"\`. Pass an empty string to clear.`;
             }
         }
     }
-    const hashFile = join(coordRoot, ".harnery", `.last-task-nudge-hash.${selfInstanceId}`);
     if (!needsNudge) {
-        try {
-            if (existsSync(hashFile))
-                rmSync(hashFile, { force: true });
-        }
-        catch {
-            /* swallow */
-        }
+        clearHashFile(hashFile);
         return "";
     }
-    // Dedup on a state-hash (task value + threshold) so same-state turns don't re-nudge.
-    const state = `${taskValue}|stale=1|threshold=${threshold}`;
+    // Dedup on kind + task state so the first-session reminder does not turn into
+    // a generic "task unset" reminder on the next prompt before set-task runs.
+    const state = `${nudgeKind}|task=${taskValue}|updated=${hb.task_updated_at ?? ""}|threshold=${threshold}`;
     const newHash = sha256Hex16(state);
     const oldHash = safeRead(hashFile);
     if (oldHash && oldHash === newHash)
@@ -269,6 +312,15 @@ function safeRead(path) {
         return "";
     }
 }
+function clearHashFile(path) {
+    try {
+        if (existsSync(path))
+            rmSync(path, { force: true });
+    }
+    catch {
+        /* swallow */
+    }
+}
 function sha256Hex16(input) {
     return createHash("sha256").update(input).digest("hex").slice(0, 16);
 }

package/dist/core/agents/render/session-context.d.ts

@@ -12,7 +12,7 @@ export interface RenderOpts {
     instanceId: string;
     sessionId: string;
     agentName?: string;
-    /** Harness label rendered in parens after the self-name (e.g. "Cursor", "Codex").
+    /** Adapter label rendered in parens after the self-name (e.g. "Cursor", "Codex").
      * Claude Code omits it. */
     platformLabel?: string;
 }

package/dist/core/agents/render/session-context.js

@@ -10,7 +10,7 @@ import { spawnSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { resolveBinName, resolveHooksSetupHint } from "../../config.js";
-import { harneryVersion, loadHarnessWiring } from "../../hooks/harness/wiring.js";
+import { harneryVersion, loadAdapterWiring } from "../../hooks/adapter/wiring.js";
 import { readRemoteMachines } from "../../presence/index.js";
 /**
  * Build the combined SessionStart systemMessage. Returns the additionalContext
@@ -52,11 +52,11 @@ export function renderSessionContext(opts) {
         const wiringSummary = `Coordination hooks are NOT wired: the E-guard will not block conflicting commits, and post-commit claim pruning will not run. ${fix} Detected:\n${wiringIssues.map((i) => `  - ${i}`).join("\n")}`;
         messages.push(wiringSummary);
     }
-    // 5. Harness-hook drift: a harnery upgrade changed the hook set, but this
-    // project's settings file hasn't been re-wired. Only fires for a harness the
+    // 5. Adapter-hook drift: a harnery upgrade changed the hook set, but this
+    // project's settings file hasn't been re-wired. Only fires for a adapter the
     // project already opted into (≥1 hook wired), so it never nags a project that
     // simply has a settings file. Remedy is always `<bin> init` (idempotent).
-    const drift = loadHarnessWiring(coordRoot);
+    const drift = loadAdapterWiring(coordRoot);
     if (drift.length > 0) {
         const bin = resolveBinName(coordRoot);
         const ver = harneryVersion();
@@ -69,7 +69,7 @@ export function renderSessionContext(opts) {
                 bits.push(`orphaned: ${d.orphans.join(", ")}`);
             return `  - ${d.settingsFile} — ${bits.join("; ")}`;
         });
-        messages.push(`Harnery hook wiring is out of date${verPart}: an upgrade changed the hook set but the harness ` +
+        messages.push(`Harnery hook wiring is out of date${verPart}: an upgrade changed the hook set but the adapter ` +
             `settings file hasn't been re-wired, so the new hook(s) won't fire. Run \`${bin} init\` to wire them ` +
             `(idempotent, additive).\n${lines.join("\n")}`);
     }

package/dist/core/agents/rules/claim-conflict.d.ts

@@ -13,12 +13,8 @@
  * Reads from `.harnery/active/<id>.json`, the single canonical heartbeat
  * location after Phase 8 collapsed the v1/v2 dual-write.
  */
-export type VerdictResult = {
-    allow: boolean;
-    exit_code: 0 | 2;
-    rule: string;
-    reason?: string;
-};
+export type { VerdictResult } from "./verdict.js";
+import type { VerdictResult } from "./verdict.js";
 export interface ClaimRequest {
     rule: "claim";
     instance_id: string;

package/dist/core/agents/rules/claim-conflict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claim-conflict.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/claim-conflict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAeF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,aAAa,CAoGjF"}
+{"version":3,"file":"claim-conflict.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/claim-conflict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAelD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,aAAa,CAoGjF"}

package/dist/core/agents/rules/claim-conflict.js

@@ -290,7 +290,7 @@ function pruneClaimFromPeer(coordRoot, instanceId, relPath) {
                 event_type: "claim.release",
                 instance_id: instanceId,
                 session_id: body.session_id ?? instanceId,
-                harness: platform === "cursor" ? "cursor" : platform === "codex" ? "codex" : "claude-code",
+                adapter: platform === "cursor" ? "cursor" : platform === "codex" ? "codex" : "claude-code",
                 source: "agent-coord",
                 data: { path: target, reason: "heal" },
                 // eslint-disable-next-line @typescript-eslint/consistent-type-assertions

package/dist/core/agents/rules/commit-conflict.js

@@ -20,8 +20,8 @@
  * in that set are matched with the staged-is-gitlink rule.
  */
 import { spawnSync } from "node:child_process";
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { appendFileSync, existsSync, readdirSync, readFileSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
 import { coordFreshnessSeconds } from "../../config.js";
 import { instanceHasLivePid } from "../state/pidmap.js";
 export function evaluateCommit(coordRoot, req) {
@@ -134,12 +134,37 @@ function findOverlap(staged, files, coordRoot, stagedIsGitlink) {
     }
     return null;
 }
+/**
+ * Repository-discovery environment that git exports to its own hooks.
+ *
+ * A hook runs with GIT_DIR (and friends) already pointing at the repository
+ * being committed, and every child inherits them. That silently outranks `cwd`,
+ * so a probe launched from some other directory still interrogates the hook's
+ * repository. Committing inside a submodule therefore asked the submodule about
+ * superproject paths and vice versa, and the answers were wrong in whichever
+ * direction did not match. Scrubbing these lets git rediscover the repository
+ * from `cwd`, which is the whole point of choosing a `cwd` per path.
+ */
+const GIT_DISCOVERY_VARS = [
+    "GIT_DIR",
+    "GIT_WORK_TREE",
+    "GIT_COMMON_DIR",
+    "GIT_INDEX_FILE",
+    "GIT_OBJECT_DIRECTORY",
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+    "GIT_PREFIX",
+    "GIT_NAMESPACE",
+];
+/** Run a read-only git probe in `cwd`, free of the caller's repo environment. */
+function gitProbe(args, cwd) {
+    const env = { ...process.env };
+    for (const v of GIT_DISCOVERY_VARS)
+        delete env[v];
+    const result = spawnSync("git", args, { cwd, env, encoding: "utf8", timeout: 2000 });
+    return { status: result.status ?? 1, stdout: result.stdout ?? "" };
+}
 function isGitlinkInIndex(coordRoot, path) {
-    const result = spawnSync("git", ["ls-files", "--stage", "--", path], {
-        cwd: coordRoot,
-        encoding: "utf8",
-        timeout: 2000,
-    });
+    const result = gitProbe(["ls-files", "--stage", "--", path], coordRoot);
     if (result.status !== 0)
         return false;
     // ls-files --stage emits "<mode> <sha> <stage>\t<path>"; mode 160000 = gitlink.
@@ -147,43 +172,94 @@ function isGitlinkInIndex(coordRoot, path) {
 }
 function isHolderSelfAttributed(coordRoot, holderId, stagedSet, peers) {
     // Gate B (cheaper): live foreign pid-map entry blocks self-attribution.
-    if (holderHasLiveForeignPid(coordRoot, holderId))
+    if (holderHasLiveForeignPid(coordRoot, holderId)) {
+        debugGate(coordRoot, { holder: holderId, gate: "B", reason: "live_pid_anchor" });
         return false;
+    }
     // Gate A: every held path is either in the staged set or already clean in HEAD.
     const holder = peers.find((p) => p.instance_id === holderId);
-    if (!holder)
+    if (!holder) {
+        debugGate(coordRoot, { holder: holderId, gate: "A", reason: "holder_not_found" });
         return false;
+    }
     const files = holder.files_touched ?? [];
-    if (files.length === 0)
+    if (files.length === 0) {
+        debugGate(coordRoot, { holder: holderId, gate: "A", reason: "holder_holds_nothing" });
         return false;
+    }
     for (const held of files) {
         if (stagedSet.has(held))
             continue;
         if (isPathCleanInHead(coordRoot, held))
             continue;
+        if (isPathIgnoredByGit(coordRoot, held))
+            continue;
+        debugGate(coordRoot, { holder: holderId, gate: "A", reason: "path_unverifiable", path: held });
         return false;
     }
     return true;
 }
+/**
+ * Append one line explaining a refused gate, when HARNERY_COORD_DEBUG is set.
+ *
+ * Worth carrying permanently: the deciding state lives inside a git hook, whose
+ * stderr the caller discards and whose process is gone before anyone can look.
+ * Reconstructing a refusal afterwards means guessing, because the holder's claim
+ * set has moved on by then. This turns that into evidence.
+ */
+function debugGate(coordRoot, detail) {
+    if (!process.env.HARNERY_COORD_DEBUG)
+        return;
+    try {
+        appendFileSync(join(coordRoot, ".harnery", "coord-debug.ndjson"), `${JSON.stringify({ event: "self_attribution_refused", pid: process.pid, ...detail })}\n`, "utf8");
+    }
+    catch {
+        /* diagnostics never break a verdict */
+    }
+}
+/**
+ * Does git ignore this path?
+ *
+ * Such a claim is safe to look past. Agents write journal files into ignored
+ * directories constantly, and each one used to leave a claim that Gate A could
+ * never vouch for: not staged, not tracked, therefore "unknown", therefore
+ * blocked. That defeated self-attribution for the rest of a session and taught
+ * agents to reach for the bypass. An ignored path cannot enter anyone's commit,
+ * so it cannot be work this commit might clobber. A merely untracked path is a
+ * different matter and still counts against the holder, since anybody could add
+ * it.
+ */
+function isPathIgnoredByGit(coordRoot, relPath) {
+    const abs = join(coordRoot, relPath);
+    const cwd = dirname(abs);
+    if (!existsSync(cwd))
+        return false;
+    // check-ignore exits 0 when the path is ignored, 1 when it is not.
+    return gitProbe(["check-ignore", "--quiet", "--", basename(abs)], cwd).status === 0;
+}
 function holderHasLiveForeignPid(coordRoot, holderId) {
     return instanceHasLivePid(coordRoot, holderId);
 }
 function isPathCleanInHead(coordRoot, relPath) {
     // Path is tracked + diff-clean against HEAD = "already committed, holder
     // hasn't released the claim yet". Counts as self-attributable.
-    const tracked = spawnSync("git", ["ls-files", "--error-unmatch", "--", relPath], {
-        cwd: coordRoot,
-        encoding: "utf8",
-        timeout: 2000,
-    });
-    if (tracked.status !== 0)
+    //
+    // Ask the repository that actually tracks the path, by running git from the
+    // file's own directory instead of the coord root. Claims are recorded
+    // monorepo-relative, so a submodule file arrives here as `sub/src/x.ts`, and
+    // the superproject does not track submodule contents: asking it always
+    // answered "not tracked". Gate A therefore failed for every submodule path,
+    // self-attribution never suppressed a submodule commit, and the operator paid
+    // a HARNERY_AGENT_COORD_BYPASS=1 per commit. Running from the file's directory
+    // lands in the submodule's own repo and handles any nesting depth.
+    const abs = join(coordRoot, relPath);
+    const cwd = dirname(abs);
+    const base = basename(abs);
+    if (!existsSync(cwd))
+        return false;
+    if (gitProbe(["ls-files", "--error-unmatch", "--", base], cwd).status !== 0)
         return false;
-    const diff = spawnSync("git", ["diff", "--quiet", "HEAD", "--", relPath], {
-        cwd: coordRoot,
-        encoding: "utf8",
-        timeout: 2000,
-    });
-    return diff.status === 0;
+    return gitProbe(["diff", "--quiet", "HEAD", "--", base], cwd).status === 0;
 }
 function readActivePeers(coordRoot) {
     const dir = join(coordRoot, ".harnery", "active");

package/dist/core/agents/rules/stop-hook.d.ts

@@ -2,6 +2,10 @@
  * Stop-hook verdict: rule 1/3, 2/3, 3/3 enforcement evaluated
  * from the canonical event stream alone (no transcript scan).
  *
+ * Codex is observe-only: its Stop continuation can replace the user-facing
+ * answer in clients that retain only the final continuation response.
+ *
+ * Enforced adapters:
  * Rule 1/3: `state.status_checked` event with matching turn boundary exists.
  * Rule 2/3: latest `turn.stop` event has `status_box_present: true` (or the
  *            stop currently firing carries that field via the in-flight event
@@ -12,19 +16,15 @@
  * the current turn, rules 1/3 and 3/3 do not apply. Rule 2/3 still applies
  * as a user-visible mobile cue.
  */
-export type VerdictResult = {
-    allow: boolean;
-    exit_code: 0 | 2;
-    rule: string;
-    reason?: string;
-};
+export type { VerdictResult } from "./verdict.js";
+import type { VerdictResult } from "./verdict.js";
 export interface StopHookRequest {
     rule: "stop-hook";
     instance_id: string;
     session_id?: string;
-    /** Firing harness. Selects the end-of-turn ack signal (see `ackSignalFor`).
+    /** Firing adapter. Selects the end-of-turn ack signal (see `ackSignalFor`).
      * Undefined → Claude Code semantics (transcript-scanned status box). */
-    harness?: string;
+    adapter?: string;
     /** Wall-clock cutoff for the current turn; events strictly after this are not yet relevant. */
     now_ms?: number;
     /** Override the turn-window discovery (used by tests). */
@@ -36,7 +36,7 @@ export interface StopHookRequest {
     bypass?: boolean;
     /** Headless child spawned by `harn workflow` (HARNERY_WORKFLOW_CHILD=1).
      * The end-of-turn ritual exists to surface status to a HUMAN reader; a
-     * workflow child reports to the engine's journal instead, so the ritual is
+     * workflow child reports to the engine's transcript instead, so the ritual is
      * meaningless there — worse, blocking burns the child's turn budget on
      * re-prompts (observed as error_max_turns in the Phase 1 spike). Exempting
      * here, rather than disabling the child's hooks wholesale, keeps heartbeat +

package/dist/core/agents/rules/stop-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAcF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;4EACwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yFAAyF;IACzF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;iFAM6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA+BD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CAoGvF"}
+{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAclD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;4EACwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yFAAyF;IACzF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;iFAM6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA+BD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CAmHvF"}

package/dist/core/agents/rules/stop-hook.js

@@ -2,6 +2,10 @@
  * Stop-hook verdict: rule 1/3, 2/3, 3/3 enforcement evaluated
  * from the canonical event stream alone (no transcript scan).
  *
+ * Codex is observe-only: its Stop continuation can replace the user-facing
+ * answer in clients that retain only the final continuation response.
+ *
+ * Enforced adapters:
  * Rule 1/3: `state.status_checked` event with matching turn boundary exists.
  * Rule 2/3: latest `turn.stop` event has `status_box_present: true` (or the
  *            stop currently firing carries that field via the in-flight event
@@ -15,8 +19,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { resolveBinName } from "../../config.js";
-function ackSignalFor(harness) {
-    return harness === "cursor" ? "status_checked" : "status_box_present";
+function ackSignalFor(adapter) {
+    return adapter === "cursor" ? "status_checked" : "status_box_present";
 }
 const RECENT_EVENT_WINDOW_LINES = 5_000;
 /**
@@ -41,6 +45,20 @@ export function evaluateStopHook(coordRoot, req) {
             reason: "HARNERY_WORKFLOW_CHILD=1: headless workflow child; ritual not applicable",
         };
     }
+    // A blocked Codex Stop does not reject the turn. Codex creates a continuation
+    // prompt and asks the model to answer again. Some clients retain only that
+    // final continuation response, so a coordination reminder can replace a
+    // correct user-facing answer with status output. The Stop path has already
+    // emitted turn.stop and projected the coordination state before this verdict
+    // runs. Keep that telemetry, but never continue a Codex turn for this ritual.
+    if (req.adapter === "codex") {
+        return {
+            allow: true,
+            exit_code: 0,
+            rule: "stop-hook.codex_observe_only",
+            reason: "Codex Stop continuations must not replace the user-facing answer",
+        };
+    }
     let events;
     try {
         events = readRecentEvents(coordRoot, RECENT_EVENT_WINDOW_LINES);
@@ -84,15 +102,15 @@ export function evaluateStopHook(coordRoot, req) {
     // fired turn.stop is already in the stream.
     const latestTurnStop = [...inTurn].reverse().find((e) => e.event_type === "turn.stop");
     const boxPresent = latestTurnStop ? Boolean(latestTurnStop.data.status_box_present) : false;
-    // Harness-aware end-of-turn ack signal (see `ackSignalFor`). On Cursor the
+    // Adapter-aware end-of-turn ack signal (see `ackSignalFor`). On Cursor the
     // ack is `status_checked` (running `harn agents status` shows the box inline);
     // on Claude Code / Codex it's the transcript-scanned `status_box_present`.
     // The matching block helper carries the right "how to fix" message.
-    const ackSignal = ackSignalFor(req.harness);
+    const ackSignal = ackSignalFor(req.adapter);
     const ackPresent = ackSignal === "status_checked" ? statusChecked : boxPresent;
     const ackBlock = ackSignal === "status_checked" ? rule13Block : rule23Block;
     // Pure-prose-turn exemption: only the ack signal applies. Parity
-    // across harnesses: CC requires the box; Cursor requires status_checked.
+    // across adapters: CC requires the box; Cursor requires status_checked.
     if (!toolPreUseInTurn) {
         if (!ackPresent) {
             return ackBlock();

package/dist/core/agents/rules/verdict.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The shape every coordination rule returns.
+ *
+ * Declared here once. The claim-conflict and stop-hook rules each carried a
+ * byte-identical private copy, which is how two rules drift into disagreeing
+ * about what a verdict is.
+ */
+export type VerdictResult = {
+    allow: boolean;
+    exit_code: 0 | 2;
+    rule: string;
+    reason?: string;
+};
+//# sourceMappingURL=verdict.d.ts.map

package/dist/core/agents/rules/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/core/agents/rules/verdict.js

@@ -0,0 +1 @@
+export {};

package/dist/core/agents/session-events.js

@@ -11,7 +11,7 @@ import { randomBytes } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 // Kept dependency-light: vendored verbatim into a downstream consumer, so no coordEnv import.
-import { normalizeHarness, resolveEmitRoot } from "./canonical-emit.js";
+import { normalizeAdapter, resolveEmitRoot } from "./canonical-emit.js";
 import { emit } from "./events/emit.js";
 /**
  * Resolved path of the ndjson sidecar file. Lives inside `.harnery/` so a
@@ -100,7 +100,7 @@ function enrichFromHeartbeat(coordRoot, instanceId) {
         const hb = JSON.parse(readFileSync(hbPath, "utf8"));
         const enrichment = {
             session_id: hb.session_id || instanceId,
-            harness: normalizeHarness(hb.platform),
+            adapter: normalizeAdapter(hb.platform),
             at: now,
         };
         enrichCache.set(instanceId, enrichment);
@@ -151,7 +151,7 @@ function emitCanonicalCommand(type, fields) {
             event_type: eventType,
             instance_id: instanceId,
             session_id: enrich.session_id,
-            harness: enrich.harness,
+            adapter: enrich.adapter,
             data: canonicalData(type, fields),
         });
     }

package/dist/core/agents/state/council.d.ts

@@ -7,7 +7,7 @@
  *
  * This module owns: lifecycle (advance, close, archive, unarchive, delete)
  * and steward reassignment. Council CREATION + contribution writes stay
- * separate (operator-side, harness-agnostic).
+ * separate (operator-side, adapter-agnostic).
  */
 export declare function advanceCouncil(coordRoot: string, councilId: string, opts?: {
     force?: boolean;

package/dist/core/agents/state/council.js

@@ -7,7 +7,7 @@
  *
  * This module owns: lifecycle (advance, close, archive, unarchive, delete)
  * and steward reassignment. Council CREATION + contribution writes stay
- * separate (operator-side, harness-agnostic).
+ * separate (operator-side, adapter-agnostic).
  */
 import { cpSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";

package/dist/core/agents/state/heartbeat-projector.d.ts

@@ -12,7 +12,7 @@ import type { CanonicalEvent } from "../events/consume.js";
 export interface V2Heartbeat {
     instance_id: string;
     session_id: string;
-    harness: string;
+    adapter: string;
     agent_id?: string;
     name?: string;
     kind?: "session" | "subagent" | "transient";
@@ -20,8 +20,9 @@ export interface V2Heartbeat {
     platform?: string;
     subagent_call_id?: string;
     parent_session_id?: string;
-    /** Set iff this owner is a `workflow run` child (joins to the run journal). */
+    /** Set iff this owner is a `workflow run` child (joins to the run transcript). */
     workflow_run_id?: string;
+    workflow_agent_id?: string;
     started_at?: string;
     last_heartbeat: string;
     last_tool?: string;

package/dist/core/agents/state/heartbeat-projector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat-projector.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-projector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE;QACP,cAAc,EAAE,CAAC,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,cAAc,EAAE,GAChC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,CAoD9D;AAyXD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3E"}
+{"version":3,"file":"heartbeat-projector.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-projector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kFAAkF;IAClF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE;QACP,cAAc,EAAE,CAAC,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,cAAc,EAAE,GAChC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAAE,CAoD9D;AA4XD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3E"}