harnery 0.30.0 → 0.31.1

package/dist/core/workflow/evidence-preflight.js

@@ -0,0 +1,134 @@
+import { EVIDENCE_KINDS } from "./types.js";
+/** Every literal `evidence({ kind: … })` in this source whose kind is not in the
+ * vocabulary. Computed kinds are invisible here, by design. */
+export function findInvalidEvidenceKinds(source) {
+    const { masked, literals } = maskSource(source);
+    const problems = [];
+    const valid = new Set(EVIDENCE_KINDS);
+    for (const call of evidenceCallRanges(masked)) {
+        // `kind` as an object key, then the value's first character. A quote there
+        // means a literal we can read; anything else is computed, so skip it.
+        const property = /\bkind\s*:\s*/g;
+        property.lastIndex = 0;
+        const slice = masked.slice(call.start, call.end);
+        let match = property.exec(slice);
+        while (match !== null) {
+            const valueAt = call.start + match.index + match[0].length;
+            const literal = literals.get(valueAt);
+            if (literal !== undefined && !valid.has(literal)) {
+                problems.push({ kind: literal, line: lineOf(source, valueAt) });
+            }
+            match = property.exec(slice);
+        }
+    }
+    return problems;
+}
+/** The thrown message, or undefined when the script is clean or unreadable. */
+export function evidencePreflightError(source, scriptPath) {
+    const problems = findInvalidEvidenceKinds(source);
+    if (problems.length === 0)
+        return undefined;
+    const listed = problems
+        .map((problem) => `line ${problem.line}: ${JSON.stringify(problem.kind)}`)
+        .join(", ");
+    return (`${scriptPath}: evidence kind must be one of: ${EVIDENCE_KINDS.join(", ")} ` +
+        `(${listed}). Rejected before running, because an invalid kind would otherwise ` +
+        `throw at the end of the workflow and discard the work every agent had already done.`);
+}
+function maskSource(source) {
+    const out = source.split("");
+    const literals = new Map();
+    let index = 0;
+    const blank = (from, to) => {
+        for (let i = from; i < to && i < out.length; i++) {
+            if (out[i] !== "\n")
+                out[i] = " ";
+        }
+    };
+    while (index < source.length) {
+        const char = source[index];
+        const next = source[index + 1];
+        if (char === "/" && next === "/") {
+            const end = source.indexOf("\n", index);
+            blank(index, end === -1 ? source.length : end);
+            index = end === -1 ? source.length : end;
+            continue;
+        }
+        if (char === "/" && next === "*") {
+            const end = source.indexOf("*/", index + 2);
+            const stop = end === -1 ? source.length : end + 2;
+            blank(index, stop);
+            index = stop;
+            continue;
+        }
+        if (char === '"' || char === "'" || char === "`") {
+            const start = index;
+            let cursor = index + 1;
+            let value = "";
+            while (cursor < source.length) {
+                const inner = source[cursor];
+                if (inner === "\\") {
+                    value += source[cursor + 1] ?? "";
+                    cursor += 2;
+                    continue;
+                }
+                if (inner === char)
+                    break;
+                // An unterminated single- or double-quoted string cannot span lines, so
+                // stop rather than swallowing the rest of the file on a syntax error.
+                if (inner === "\n" && char !== "`")
+                    break;
+                value += inner;
+                cursor++;
+            }
+            const closed = source[cursor] === char;
+            blank(start + 1, cursor);
+            if (closed && char !== "`")
+                literals.set(start, value);
+            index = closed ? cursor + 1 : cursor;
+            continue;
+        }
+        index++;
+    }
+    return { masked: out.join(""), literals };
+}
+/** The argument list of every `evidence(` call, as index ranges into the masked
+ * source. A dotted receiver (`ctx.evidence(`) counts; a longer identifier that
+ * merely ends in "evidence" does not. */
+function evidenceCallRanges(masked) {
+    const ranges = [];
+    const call = /evidence\s*\(/g;
+    let match = call.exec(masked);
+    while (match !== null) {
+        const before = match.index > 0 ? masked[match.index - 1] : "";
+        if (!/[A-Za-z0-9_$]/.test(before)) {
+            const open = match.index + match[0].length - 1;
+            const close = matchingParen(masked, open);
+            if (close > open)
+                ranges.push({ start: open + 1, end: close });
+        }
+        match = call.exec(masked);
+    }
+    return ranges;
+}
+function matchingParen(masked, open) {
+    let depth = 0;
+    for (let i = open; i < masked.length; i++) {
+        if (masked[i] === "(")
+            depth++;
+        else if (masked[i] === ")") {
+            depth--;
+            if (depth === 0)
+                return i;
+        }
+    }
+    return -1;
+}
+function lineOf(source, index) {
+    let line = 1;
+    for (let i = 0; i < index && i < source.length; i++) {
+        if (source[i] === "\n")
+            line++;
+    }
+    return line;
+}

package/dist/core/workflow/index.d.ts

@@ -6,7 +6,7 @@ export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digest
 export type { WorkflowRunManifest } from "./run-state.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
-export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
+export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AdapterEvidenceCapability, AdapterEvidenceCoverage, AdapterName, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
 export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export type { ApplyIntegrationInput, AuthorizedIntegrationPlan, AuthorizedProviderIntegrationInput, CancelWorkspaceInput, CleanupWorkspaceInput, FilesystemIdentity, IntegrationApplyAttempt, IntegrationApplyReceipt, IntegrationAuthorization, IntegrationPlan, IntegrationReviewRecord, IntegrationTarget, LocalGitWorktreeProviderOptions, PrepareIntegrationInput, ProviderIntegrationInput, ProviderIntegrationPreview, ProviderIntegrationResult, ProviderUnknown, ProviderUnsupportedReason, RepositoryBinding, ValidatedFilesystemPath, WorkflowWorkspaceInspection, WorkflowWorkspaceSelection, WorkflowWorkspaceStatus, WorkflowWorkspaceVerification, WorkspaceAllocationRequest, WorkspaceAttestation, WorkspaceBinding, WorkspaceBoundExecutionEvidence, WorkspaceCancellationReceipt, WorkspaceCancellationResult, WorkspaceCleanupAttempt, WorkspaceCleanupIntent, WorkspaceCleanupMode, WorkspaceCleanupReceipt, WorkspaceCleanupResult, WorkspaceCompatibilityExecutionEvidence, WorkspaceExecutionEvidence, WorkspaceIntegrationState, WorkspaceIsolation, WorkspaceLifecycleProjection, WorkspaceLifecycleProjectionInput, WorkspaceLifecycleState, WorkspaceObservation, WorkspaceOwner, WorkspaceProbeInput, WorkspaceProbeResult, WorkspaceProofOutcome, WorkspaceProvider, WorkspaceProviderCapabilities, WorkspaceProviderRef, WorkspaceResourceState, WorkspaceUnsupportedExecutionEvidence, } from "./workspaces/index.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, prepareReclaim, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";

package/dist/core/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}

package/dist/core/workflow/proof.d.ts

@@ -1,6 +1,6 @@
 import type { RepoSnapshot } from "../context/index.js";
 import type { NormalizedPolicy, PolicyDecision, PolicyIsolation, PolicyNetworkAccess } from "../policy/index.js";
-import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, HarnessAttestationCitation, HarnessEvidenceCapability, ResultDigest, SpawnFailureClass, WorkflowAgentProof, WorkflowAttemptContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
+import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, AdapterAttestationCitation, AdapterEvidenceCapability, ResultDigest, SpawnFailureClass, WorkflowAgentProof, WorkflowAttemptContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
 import type { WorkspaceAttestation, WorkspaceBinding, WorkspaceUnsupportedExecutionEvidence } from "./workspaces/index.js";
 export interface NormalizedWorkflowMeta {
     name: string;
@@ -18,23 +18,29 @@ export interface BuildWorkflowProofInput {
     startedAt: string;
     endedAt: string;
     durationMs: number;
-    journalPath: string;
+    transcriptPath: string;
     before: RepoSnapshot;
     after: RepoSnapshot;
     agents: WorkflowAgentProof[];
     evidence: WorkflowEvidenceRecord[];
-    harnessEvidence?: Readonly<Record<string, HarnessEvidenceCapability | undefined>>;
+    adapterEvidence?: Readonly<Record<string, AdapterEvidenceCapability | undefined>>;
     /** Filesystem policy actually projected into children (ADR 0039). */
     sandboxProjection?: WorkflowSandboxProjectionEvidence;
-    /** Live attestations backing each harness's claims (ADR 0038). Injected by
+    /** Live attestations backing each adapter's claims (ADR 0038). Injected by
      * the caller so proof stays free of filesystem lookups. */
-    harnessAttestations?: Readonly<Record<string, HarnessAttestationCitation | undefined>>;
+    adapterAttestations?: Readonly<Record<string, AdapterAttestationCitation | undefined>>;
     policy?: {
         config: Readonly<NormalizedPolicy>;
         decisions: readonly PolicyDecision[];
         isolation: PolicyIsolation;
         networkAccess: PolicyNetworkAccess;
     };
+    /** Set when the script called ctx.blocked(): the run stopped because a human
+     * must rule. Forces run class "decision" regardless of the agents' classes. */
+    blocked?: {
+        reason: string;
+        decisionId?: string;
+    };
     workspaceBinding?: WorkspaceBinding;
     workspaceAttestation?: WorkspaceAttestation;
     workspaceFallback?: WorkspaceUnsupportedExecutionEvidence;

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA6BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CAoDhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAmDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CAyBzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA6DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAoDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}

package/dist/core/workflow/proof.js

@@ -5,7 +5,7 @@ import { policyDigest } from "../policy/index.js";
 import { isCanonicalWorkflowAttemptContext } from "./attempt-context.js";
 import { stableDigest, writeImmutableJson } from "./durable-record.js";
 import { readWorkflowRunManifest } from "./run-state.js";
-import { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
+import { EVIDENCE_KINDS, WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
 import { isCanonicalWorkflowWorkContext } from "./work-context.js";
 import { isWorkspaceBoundExecutionEvidence, isWorkspaceExecutionEvidence, isWorkspaceUnsupportedExecutionEvidence, workspaceProofLifecycle, } from "./workspaces/validate.js";
 const MAX_ACCEPTANCE_CRITERIA = 50;
@@ -66,7 +66,7 @@ export function createEvidenceRecord(input) {
         id: `e${input.sequence}`,
         source: "workflow",
         recorded_at: input.recordedAt ?? new Date().toISOString(),
-        kind: enumValue(value.kind, ["test", "command", "artifact", "change", "review", "observation"], "evidence kind"),
+        kind: enumValue(value.kind, EVIDENCE_KINDS, "evidence kind"),
         status: enumValue(value.status, ["passed", "failed", "observed", "unknown"], "evidence status"),
         label: boundedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
         summary: boundedOptional(value.summary, "evidence summary", MAX_SUMMARY_CHARS),
@@ -148,10 +148,15 @@ export function buildWorkflowProof(input) {
         session_id: clippedOptional(agent.session_id, MAX_REF_CHARS),
         error: clippedOptional(agent.error, MAX_SUMMARY_CHARS),
     }));
-    const harnesses = buildHarnessCoverage(agents, input.harnessEvidence, input.harnessAttestations);
-    const unknowns = buildUnknowns(agents, harnesses, repository);
-    const runClass = deriveRunFailureClass(input.status, agents);
-    const journal = readFileSync(input.journalPath);
+    const adapters = buildAdapterCoverage(agents, input.adapterEvidence, input.adapterAttestations);
+    const unknowns = buildUnknowns(agents, adapters, repository);
+    // A declared stop-on-human beats a derived spawn class. If the script said a
+    // human must rule, that is the true reason the run ended, even when some agent
+    // also happened to hit a flaky vendor on the way there.
+    const runClass = input.status === "failed" && input.blocked
+        ? "decision"
+        : deriveRunFailureClass(input.status, agents);
+    const transcript = readFileSync(input.transcriptPath);
     return {
         schema_version: WORKFLOW_PROOF_SCHEMA_VERSION,
         run: {
@@ -168,6 +173,9 @@ export function buildWorkflowProof(input) {
             error: clippedOptional(input.error, MAX_SUMMARY_CHARS),
             result: input.result === undefined ? undefined : digestResult(input.result),
             ...(runClass ? { class: runClass } : {}),
+            ...(runClass === "decision" && input.blocked?.decisionId
+                ? { decision_id: clipped(input.blocked.decisionId, MAX_REF_CHARS) }
+                : {}),
         },
         acceptance,
         agents,
@@ -178,13 +186,13 @@ export function buildWorkflowProof(input) {
             : input.workspaceFallback,
         repository,
         ...(input.sandboxProjection ? { sandbox_projection: input.sandboxProjection } : {}),
-        harnesses,
+        adapters,
         unknowns,
         integrity: {
-            journal: {
-                path: "journal.jsonl",
-                sha256: createHash("sha256").update(journal).digest("hex"),
-                bytes: journal.byteLength,
+            transcript: {
+                path: "transcript.jsonl",
+                sha256: createHash("sha256").update(transcript).digest("hex"),
+                bytes: transcript.byteLength,
             },
         },
     };
@@ -245,7 +253,8 @@ export function readWorkflowProof(coordRoot, runId) {
         proof.run?.id !== runId ||
         (proof.run.class !== undefined &&
             proof.run.class !== "environment" &&
-            proof.run.class !== "upstream") ||
+            proof.run.class !== "upstream" &&
+            proof.run.class !== "decision") ||
         (proof.run.work_context !== undefined &&
             (!proof.run.work_item_id ||
                 proof.run.work_context.id !== proof.run.work_item_id ||
@@ -326,7 +335,7 @@ export function renderWorkflowProof(proof) {
         for (const unknown of proof.unknowns)
             lines.push(`  - ${unknown.message}`);
     }
-    lines.push(`journal sha256: ${proof.integrity.journal.sha256}`);
+    lines.push(`transcript sha256: ${proof.integrity.transcript.sha256}`);
     return `${lines.join("\n")}\n`;
 }
 function buildRepoEvidence(beforeRaw, afterRaw) {
@@ -363,39 +372,39 @@ function normalizeRepoSnapshot(snapshot) {
         dirty_paths_truncated: snapshot.dirty_paths_truncated,
     };
 }
-function buildHarnessCoverage(agents, claims, attestations) {
-    return [...new Set(agents.map((agent) => agent.harness))].map((harness) => {
-        const harnessAgents = agents.filter((agent) => agent.harness === harness);
+function buildAdapterCoverage(agents, claims, attestations) {
+    return [...new Set(agents.map((agent) => agent.adapter))].map((adapter) => {
+        const adapterAgents = agents.filter((agent) => agent.adapter === adapter);
         return {
-            harness,
-            tool_evidence: claims?.[harness]?.toolEvidence ?? {
+            adapter,
+            tool_evidence: claims?.[adapter]?.toolEvidence ?? {
                 support: "unknown",
-                note: "No harness capability claim was supplied to this workflow run.",
+                note: "No adapter capability claim was supplied to this workflow run.",
             },
             observed: {
-                final_results: harnessAgents.filter((agent) => agent.result).length,
-                session_ids: harnessAgents.filter((agent) => agent.session_id).length,
-                costs: harnessAgents.filter((agent) => agent.cost_usd !== undefined).length,
+                final_results: adapterAgents.filter((agent) => agent.result).length,
+                session_ids: adapterAgents.filter((agent) => agent.session_id).length,
+                costs: adapterAgents.filter((agent) => agent.cost_usd !== undefined).length,
             },
-            ...(attestations?.[harness] ? { attestation: attestations[harness] } : {}),
+            ...(attestations?.[adapter] ? { attestation: attestations[adapter] } : {}),
         };
     });
 }
-function buildUnknowns(agents, harnesses, repository) {
+function buildUnknowns(agents, adapters, repository) {
     const unknowns = [];
-    for (const harness of harnesses) {
-        if (harness.tool_evidence.support === "unknown") {
+    for (const adapter of adapters) {
+        if (adapter.tool_evidence.support === "unknown") {
             unknowns.push({
-                code: "harness_capability_unregistered",
-                harness: harness.harness,
-                message: `${harness.harness}: tool-evidence capability was not registered for this run.`,
+                code: "adapter_capability_unregistered",
+                adapter: adapter.adapter,
+                message: `${adapter.adapter}: tool-evidence capability was not registered for this run.`,
             });
         }
-        else if (harness.tool_evidence.support !== "supported") {
+        else if (adapter.tool_evidence.support !== "supported") {
             unknowns.push({
                 code: "tool_evidence_unavailable",
-                harness: harness.harness,
-                message: `${harness.harness}: adapter-native tool evidence is ${harness.tool_evidence.support}.`,
+                adapter: adapter.adapter,
+                message: `${adapter.adapter}: adapter-native tool evidence is ${adapter.tool_evidence.support}.`,
             });
         }
     }
@@ -403,17 +412,17 @@ function buildUnknowns(agents, harnesses, repository) {
         if (agent.cost_usd === undefined) {
             unknowns.push({
                 code: "agent_cost_unreported",
-                harness: agent.harness,
+                adapter: agent.adapter,
                 agent_id: agent.id,
-                message: `${agent.id}: ${agent.harness} did not report per-run cost.`,
+                message: `${agent.id}: ${agent.adapter} did not report per-run cost.`,
             });
         }
         if (!agent.session_id) {
             unknowns.push({
                 code: "agent_session_unreported",
-                harness: agent.harness,
+                adapter: agent.adapter,
                 agent_id: agent.id,
-                message: `${agent.id}: ${agent.harness} did not report a child session id.`,
+                message: `${agent.id}: ${agent.adapter} did not report a child session id.`,
             });
         }
     }

package/dist/core/workflow/run-state.d.ts

@@ -18,7 +18,7 @@ export interface WorkflowRunManifest {
     repository_before: RepoSnapshot;
     execution: {
         cwd: string;
-        default_harness: string;
+        default_adapter: string;
         max_agents: number;
         concurrency: number;
         subscription_only: boolean;

package/dist/core/workflow/run-state.js

@@ -73,12 +73,12 @@ export function readWorkflowRunManifest(coordRoot, runId) {
 }
 export function assertWorkflowRunResumable(coordRoot, runId) {
     const manifest = readWorkflowRunManifest(coordRoot, runId);
-    const journalPath = join(coordRoot, ".harnery", "workflows", runId, "journal.jsonl");
-    if (!existsSync(journalPath))
-        throw new Error(`workflow run ${runId} has no journal`);
+    const transcriptPath = join(coordRoot, ".harnery", "workflows", runId, "transcript.jsonl");
+    if (!existsSync(transcriptPath))
+        throw new Error(`workflow run ${runId} has no transcript`);
     let approvalId;
     let terminal = false;
-    for (const line of readFileSync(journalPath, "utf8").split("\n")) {
+    for (const line of readFileSync(transcriptPath, "utf8").split("\n")) {
         if (!line.trim())
             continue;
         try {
@@ -90,7 +90,7 @@ export function assertWorkflowRunResumable(coordRoot, runId) {
                 terminal = true;
         }
         catch {
-            throw new Error(`workflow run ${runId} has a malformed journal line`);
+            throw new Error(`workflow run ${runId} has a malformed transcript line`);
         }
     }
     if (terminal)
@@ -195,8 +195,8 @@ function validExecution(value) {
     if (!value || typeof value !== "object")
         return false;
     return (isAbsolute(value.cwd) &&
-        typeof value.default_harness === "string" &&
-        value.default_harness.length > 0 &&
+        typeof value.default_adapter === "string" &&
+        value.default_adapter.length > 0 &&
         positiveSafeInteger(value.max_agents) &&
         positiveSafeInteger(value.concurrency) &&
         typeof value.subscription_only === "boolean" &&

package/dist/core/workflow/sandbox-projection.d.ts

@@ -1,5 +1,5 @@
 /**
- * Project the host's filesystem policy into a harness's own vendor sandbox
+ * Project the host's filesystem policy into a adapter's own vendor sandbox
  * (ADR 0039).
  *
  * Harnery decides where a workflow child may write. Until this existed it never
@@ -13,13 +13,13 @@
  * dropped would leave an operator believing a child was constrained when it was
  * not, which is worse than refusing and worse than never offering the feature.
  */
-import type { HarnessSandboxProjection } from "../harnesses/types.js";
+import type { AdapterSandboxProjection } from "../adapters/types.js";
 import type { GitAdministrativeGrant, SpawnFilesystemPolicy } from "./types.js";
 import type { WorkspaceBinding } from "./workspaces/types.js";
 export declare class SandboxProjectionError extends Error {
-    readonly harness: string;
+    readonly adapter: string;
     readonly reason: "mode_unrepresentable" | "writable_roots_unrepresentable" | "no_projection" | "writable_root_escapes_workspace" | "git_grant_unavailable";
-    constructor(harness: string, reason: SandboxProjectionError["reason"], message: string);
+    constructor(adapter: string, reason: SandboxProjectionError["reason"], message: string);
 }
 export interface ResolvedSandboxProjection {
     /** Vendor-native name for the requested mode. */
@@ -30,7 +30,7 @@ export interface ResolvedSandboxProjection {
  * Resolve a requested policy against what the adapter declares it can carry.
  * Throws rather than degrading; see the module note.
  */
-export declare function resolveSandboxProjection(harness: string, declaration: HarnessSandboxProjection | undefined, policy: SpawnFilesystemPolicy): ResolvedSandboxProjection;
+export declare function resolveSandboxProjection(adapter: string, declaration: AdapterSandboxProjection | undefined, policy: SpawnFilesystemPolicy): ResolvedSandboxProjection;
 /**
  * Refuse a projection that would grant write access outside the root the
  * workspace provider already validated (ADR 0039).
@@ -39,7 +39,7 @@ export declare function resolveSandboxProjection(harness: string, declaration: H
  * the provider never sanctioned would let a projection quietly widen the blast
  * radius of a run that the workspace lifecycle believes it has contained.
  */
-export declare function assertProjectionWithinWorkspace(harness: string, allowedRootRealpath: string, writableRoots: readonly string[]): void;
+export declare function assertProjectionWithinWorkspace(adapter: string, allowedRootRealpath: string, writableRoots: readonly string[]): void;
 /**
  * Resolve a named Git administrative grant into concrete writable roots
  * (ADR 0040).

package/dist/core/workflow/sandbox-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-projection.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/sandbox-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EACX,sBAAsB,GACtB,gCAAgC,GAChC,eAAe,GACf,iCAAiC,GACjC,uBAAuB,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM;CAMvF;AAED,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,wBAAwB,GAAG,SAAS,EACjD,MAAM,EAAE,qBAAqB,GAC5B,yBAAyB,CAoC3B;AASD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAUN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,SAAS,MAAM,EAAE,CAanB"}
+{"version":3,"file":"sandbox-projection.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/sandbox-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EACX,sBAAsB,GACtB,gCAAgC,GAChC,eAAe,GACf,iCAAiC,GACjC,uBAAuB,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM;CAMvF;AAED,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,wBAAwB,GAAG,SAAS,EACjD,MAAM,EAAE,qBAAqB,GAC5B,yBAAyB,CAoC3B;AASD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAUN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,SAAS,MAAM,EAAE,CAanB"}

package/dist/core/workflow/sandbox-projection.js

@@ -1,5 +1,5 @@
 /**
- * Project the host's filesystem policy into a harness's own vendor sandbox
+ * Project the host's filesystem policy into a adapter's own vendor sandbox
  * (ADR 0039).
  *
  * Harnery decides where a workflow child may write. Until this existed it never
@@ -14,12 +14,12 @@
  * not, which is worse than refusing and worse than never offering the feature.
  */
 export class SandboxProjectionError extends Error {
-    harness;
+    adapter;
     reason;
-    constructor(harness, reason, message) {
+    constructor(adapter, reason, message) {
         super(message);
         this.name = "SandboxProjectionError";
-        this.harness = harness;
+        this.adapter = adapter;
         this.reason = reason;
     }
 }
@@ -27,23 +27,23 @@ export class SandboxProjectionError extends Error {
  * Resolve a requested policy against what the adapter declares it can carry.
  * Throws rather than degrading; see the module note.
  */
-export function resolveSandboxProjection(harness, declaration, policy) {
+export function resolveSandboxProjection(adapter, declaration, policy) {
     if (!declaration) {
-        throw new SandboxProjectionError(harness, "no_projection", `${harness} cannot project a filesystem policy into its sandbox; remove the policy or use a harness that can`);
+        throw new SandboxProjectionError(adapter, "no_projection", `${adapter} cannot project a filesystem policy into its sandbox; remove the policy or use a adapter that can`);
     }
     const nativeMode = declaration.modes[policy.mode];
     if (!nativeMode) {
-        throw new SandboxProjectionError(harness, "mode_unrepresentable", `${harness} does not distinguish the "${policy.mode}" filesystem mode, so it cannot be enforced`);
+        throw new SandboxProjectionError(adapter, "mode_unrepresentable", `${adapter} does not distinguish the "${policy.mode}" filesystem mode, so it cannot be enforced`);
     }
     const writableRoots = policy.writableRoots ?? [];
     if (writableRoots.length > 0 && !declaration.writableRoots) {
-        throw new SandboxProjectionError(harness, "writable_roots_unrepresentable", `${harness} does not accept an explicit writable-root set, so ${writableRoots.length} declared path(s) could not be enforced`);
+        throw new SandboxProjectionError(adapter, "writable_roots_unrepresentable", `${adapter} does not accept an explicit writable-root set, so ${writableRoots.length} declared path(s) could not be enforced`);
     }
     for (const root of writableRoots) {
         // Relative paths cannot be validated against the provider's roots and are
         // resolved differently by every vendor, so they are refused outright.
         if (typeof root !== "string" || !root.startsWith("/")) {
-            throw new SandboxProjectionError(harness, "writable_roots_unrepresentable", `writable root ${JSON.stringify(root)} must be an absolute path`);
+            throw new SandboxProjectionError(adapter, "writable_roots_unrepresentable", `writable root ${JSON.stringify(root)} must be an absolute path`);
         }
     }
     return { nativeMode, writableRoots };
@@ -62,10 +62,10 @@ function isWithin(root, candidate) {
  * the provider never sanctioned would let a projection quietly widen the blast
  * radius of a run that the workspace lifecycle believes it has contained.
  */
-export function assertProjectionWithinWorkspace(harness, allowedRootRealpath, writableRoots) {
+export function assertProjectionWithinWorkspace(adapter, allowedRootRealpath, writableRoots) {
     for (const root of writableRoots) {
         if (!isWithin(allowedRootRealpath, root)) {
-            throw new SandboxProjectionError(harness, "writable_root_escapes_workspace", `writable root ${JSON.stringify(root)} is outside the workspace root ${JSON.stringify(allowedRootRealpath)} the provider validated`);
+            throw new SandboxProjectionError(adapter, "writable_root_escapes_workspace", `writable root ${JSON.stringify(root)} is outside the workspace root ${JSON.stringify(allowedRootRealpath)} the provider validated`);
         }
     }
 }

package/dist/core/workflow/spawn-claude.d.ts

@@ -17,9 +17,9 @@
  *    gets HARNERY_WORKFLOW_CHILD=1 and the stop-hook rule exempts it
  *    (stop-hook.ts), keeping heartbeats + events on.
  */
-import type { HarnessInvocation, HarnessRawResult } from "../harnesses/types.js";
+import type { AdapterInvocation, AdapterRawResult } from "../adapters/types.js";
 import type { Spawner, SpawnRequest, SpawnResult } from "./types.js";
-export declare function buildClaudeInvocation(req: SpawnRequest): HarnessInvocation;
-export declare function normalizeClaudeResult(raw: HarnessRawResult): SpawnResult;
+export declare function buildClaudeInvocation(req: SpawnRequest): AdapterInvocation;
+export declare function normalizeClaudeResult(raw: AdapterRawResult): SpawnResult;
 export declare const claudeCodeSpawner: Spawner;
 //# sourceMappingURL=spawn-claude.d.ts.map

package/dist/core/workflow/spawn-claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-claude.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/spawn-claude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAKjF,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYrE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,iBAAiB,CAsB1E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,CA2ExE;AAED,eAAO,MAAM,iBAAiB,EAAE,OAc/B,CAAC"}
+{"version":3,"file":"spawn-claude.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/spawn-claude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAKhF,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYrE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,iBAAiB,CAsB1E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,CA2ExE;AAED,eAAO,MAAM,iBAAiB,EAAE,OAiB/B,CAAC"}

package/dist/core/workflow/spawn-claude.js

@@ -18,16 +18,16 @@
  *    (stop-hook.ts), keeping heartbeats + events on.
  */
 import { exec } from "../../lib/exec.js";
-import { builtinHarnessProfile, validateHarnessEffort } from "../harnesses/profiles.js";
+import { builtinAdapterProfile, validateAdapterEffort } from "../adapters/profiles.js";
+import { notFoundError } from "./adapters.js";
 import { buildChildEnv } from "./child-env.js";
-import { notFoundError } from "./harnesses.js";
 import { resolveSandboxProjection } from "./sandbox-projection.js";
 import { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
 export function buildClaudeInvocation(req) {
-    validateHarnessEffort("claude-code", req.effort);
+    validateAdapterEffort("claude-code", req.effort);
     if (req.filesystemPolicy) {
         // Declared unrepresentable: refuse rather than drop it silently (ADR 0039).
-        resolveSandboxProjection("claude-code", builtinHarnessProfile("claude-code")?.sandboxProjection, req.filesystemPolicy);
+        resolveSandboxProjection("claude-code", builtinAdapterProfile("claude-code")?.sandboxProjection, req.filesystemPolicy);
     }
     const argv = [
         "claude",
@@ -104,7 +104,7 @@ export function normalizeClaudeResult(raw) {
             sessionId: envelope.session_id,
             costUsd: envelope.total_cost_usd,
             durationMs: raw.durationMs,
-            error: `harness error (${envelope.subtype ?? "unknown"}): ${(envelope.errors ?? []).join("; ") || "see envelope"}`,
+            error: `adapter error (${envelope.subtype ?? "unknown"}): ${(envelope.errors ?? []).join("; ") || "see envelope"}`,
             ...(isUpstreamFailureText(envelopeError) ? { class: "upstream" } : {}),
         };
     }
@@ -127,7 +127,10 @@ export const claudeCodeSpawner = async (req) => {
     }
     const r = await exec(invocation.argv, {
         cwd: req.cwd,
-        env: buildChildEnv(req.runId, { subscriptionOnly: req.subscriptionOnly }),
+        env: buildChildEnv(req.runId, {
+            subscriptionOnly: req.subscriptionOnly,
+            agentId: req.agentId,
+        }),
         timeout: req.timeoutMs,
     });
     return normalizeClaudeResult({ ...r, durationMs: Date.now() - t0 });