harnery 0.31.3 → 0.31.5

package/README.md

@@ -7,28 +7,28 @@
 
 # Harnery
 
-> Multi-agent coordination for AI coding agents — Claude Code, Cursor, and Codex.
+> Multi-agent coordination for AI coding agents: Claude Code, Cursor, and Codex.
 
 [![CI](https://github.com/ryanjkelly/harnery/actions/workflows/ci.yml/badge.svg)](https://github.com/ryanjkelly/harnery/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/harnery.svg)](https://www.npmjs.com/package/harnery)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
-> ⚠️ **Pre-1.0.** API surface is still settling. Pin a specific minor version (`harnery@^0.7.0`) and read the [CHANGELOG](CHANGELOG.md) before each upgrade.
+> ⚠️ **Pre-1.0.** API surface is still settling. Pin a specific minor version (`harnery@^0.31.0`) and read the [CHANGELOG](CHANGELOG.md) before each upgrade.
 
 ## What it is
 
-`harnery` keeps multiple AI coding agents from stepping on each other in a shared checkout. It was extracted from years of running several Claude Code / Cursor / Codex sessions at once against the same monorepo:
+`harnery` keeps multiple AI coding agents from stepping on each other in a shared checkout. It came out of years of running several Claude Code / Cursor / Codex sessions at once against the same monorepo.
 
-- **Multi-agent coordination:** per-agent heartbeats in `.harnery/active/`, claim-time and commit-time guards, the canonical event stream, councils, a decision docket, per-agent journals, and adapter adapters for Claude Code / Cursor / Codex.
-- **Cross-machine presence:** sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay — the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
-- **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless adapter-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with `ALLOW`, `ASK`, and `DENY`; CLI `ASK` requests park durably for an explicit approve/deny and same-run resume, while library callers remain fail-closed by default.
-- **Optional isolated workspaces:** add `--isolation worktree --workspace-root <dir>` to run a workflow in a host-owned local Git worktree. Harnery freezes the allocation and provider identity, verifies the workspace before execution and resume, requires review and policy authority before fast-forward integration, and keeps cleanup conservative. Inspect with `harn workflow workspace`, then use the separate `workflow integration prepare`, `integration apply`, and `cleanup` phases; shared execution remains the default.
-- **Durable work above attempts:** `harn work` preserves an objective across bounded workflow attempts, dependencies, approval parks, failures, and review. Reusable workflow code receives the exact work ID, title, objective, acceptance criteria, and attempt identity as frozen typed context. A retry also receives the prior run's bounded error and unresolved proof criteria, while retry authority and attempt ceilings remain unchanged. The manifest, proof, and append-only ledger bind the same context, and the one-shot reconciler reports the next explicit action without silently spawning, retrying, or accepting work.
-- **Bounded goal supervision:** `harn supervisor` freezes a mission or existing root graph, specialist team, and safety limits, then runs scheduling cycles until reviewed mission success, human attention, no progress, or budget exhaustion. Its optional planner can create the first milestone, reassess accepted milestone proof, or recover a terminal graph using only a frozen workflow-template catalog. Plans can require independent bounded specialist review before ordinary approval or auto-apply authority, old generations remain immutable evidence, and all attempts still consume the goal budget. Use explicit foreground ticks or enroll goals in the optional heartbeat-backed background service.
-- **Standalone web UI:** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
-- **Backup + sync:** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).
+- **Multi-agent coordination.** Per-agent heartbeats in `.harnery/active/`, claim-time and commit-time guards, the canonical event stream, councils, a decision docket, per-agent journals, and adapter adapters for Claude Code / Cursor / Codex.
+- **Cross-machine presence.** Sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay: the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
+- **Coordination-aware workflows.** `harn workflow run <script>` runs bounded, schema-gated multi-subagent workflow scripts. Plain JS stages fan out to headless adapter-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), and deterministic code decides the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with `ALLOW`, `ASK`, and `DENY`. CLI `ASK` requests park durably for an explicit approve/deny and same-run resume; library callers stay fail-closed by default.
+- **Optional isolated workspaces.** Add `--isolation worktree --workspace-root <dir>` to run a workflow in a host-owned local Git worktree. Harnery freezes the allocation and provider identity, verifies the workspace before execution and resume, requires review and policy authority before fast-forward integration, and keeps cleanup conservative. Inspect with `harn workflow workspace`, then use the separate `workflow integration prepare`, `integration apply`, and `cleanup` phases. Shared execution remains the default.
+- **Durable work above attempts.** `harn work` keeps an objective alive across bounded workflow attempts, dependencies, approval parks, failures, and review. Reusable workflow code receives the exact work ID, title, objective, acceptance criteria, and attempt identity as frozen typed context. A retry also receives the prior run's bounded error and unresolved proof criteria; retry authority and attempt ceilings stay unchanged. The manifest, proof, and append-only ledger bind the same context, and the one-shot reconciler reports the next explicit action without silently spawning, retrying, or accepting work.
+- **Bounded goal supervision.** `harn supervisor` freezes a mission or existing root graph, specialist team, and safety limits, then runs scheduling cycles until reviewed mission success, human attention, no progress, or budget exhaustion. Its optional planner can create the first milestone, reassess accepted milestone proof, or recover a terminal graph using only a frozen workflow-template catalog. Plans can require independent bounded specialist review before ordinary approval or auto-apply authority. Old generations stay immutable evidence, and all attempts still consume the goal budget. Use explicit foreground ticks or enroll goals in the optional heartbeat-backed background service.
+- **Standalone web UI.** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
+- **Backup + sync.** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).
 
-The CLI also ships batteries: portable utility commands (`tokens`, `eml`, `env`, `grep` — parallel, ripgrep-accelerated monorepo search — `docs`, `browse`, `fetch`, `read`, `devtools`, and more) plus the library toolkit they're built from. Useful, cross-platform, dependency-light — and deliberately not the headline. Coordination is why harnery exists; the toolkit exists because the CLI needed it (see [Public surface tiers](#public-surface-tiers)).
+The CLI also ships batteries: portable utility commands (`tokens`, `eml`, `env`, `grep` for parallel, ripgrep-accelerated monorepo search, plus `docs`, `browse`, `fetch`, `read`, `devtools`, and more) and the library toolkit they're built from. Useful, cross-platform, and dependency-light, but deliberately not the headline. Coordination is why harnery exists; the toolkit exists because the CLI needed it (see [Public surface tiers](#public-surface-tiers)).
 
 ## Install
 
@@ -36,7 +36,7 @@ The CLI also ships batteries: portable utility commands (`tokens`, `eml`, `env`,
 curl -fsSL https://harnery.com/install.sh | bash
 ```
 
-One line, no clone: it installs the `harn` CLI globally (npm preferred, Bun fallback), puts it on your `PATH`, and verifies it. Or drive your package manager directly — `npm install -g harnery` / `bun add -g harnery` (or `npm install harnery` for a project dep). Then wire a project:
+One line, no clone: it installs the `harn` CLI globally (npm preferred, Bun fallback), puts it on your `PATH`, and verifies it. Or drive your package manager directly: `npm install -g harnery` / `bun add -g harnery` (or `npm install harnery` for a project dep). Then wire a project:
 
 ```bash
 harn init     # creates .harnery/ + registers the adapter hooks
@@ -62,7 +62,7 @@ harn deinit --purge-state   # also delete .harnery/ (destructive)
 curl -fsSL https://harnery.com/uninstall.sh | bash
 ```
 
-From a git clone, `./scripts/teardown.sh` is the mirror of `./scripts/setup.sh`: it runs `harn deinit`, removes the `PATH` symlinks, and — on a terminal — asks whether to also delete this project's `.harnery/` history and the clone itself. Both default to no; pre-answer with `--purge-state` and `--remove-clone` for unattended runs.
+From a git clone, `./scripts/teardown.sh` is the mirror of `./scripts/setup.sh`: it runs `harn deinit`, removes the `PATH` symlinks, and (on a terminal) asks whether to also delete this project's `.harnery/` history and the clone itself. Both default to no; pre-answer with `--purge-state` and `--remove-clone` for unattended runs.
 
 ## Use as a CLI library
 
@@ -90,8 +90,8 @@ await program.parseAsync(process.argv);
 
 The exports map draws the line between what harnery *is* and what it *ships with*:
 
-- **Product tier** — `harnery`, `harnery/commander`, `harnery/core/*`: the coordination layer and CLI composition. This is the API to build against, and the reason to install harnery.
-- **Toolkit tier** — every `harnery/lib/*` subpath (`http`, `cookies`, `format`, `readability`, `browser`, `machine`, …): the supporting utilities harnery's own CLI is built from, exposed for embedding hosts that want to lean on them. Supported, but secondary: it can evolve faster than the product tier, and it isn't a reason to adopt harnery on its own.
+- **Product tier** (`harnery`, `harnery/commander`, `harnery/core/*`): the coordination layer and CLI composition. This is the API to build against, and the reason to install harnery.
+- **Toolkit tier** (every `harnery/lib/*` subpath: `http`, `cookies`, `format`, `readability`, `browser`, `machine`, …): the supporting utilities harnery's own CLI is built from, exposed for embedding hosts that want to lean on them. Supported, but secondary: it can evolve faster than the product tier, and it isn't a reason to adopt harnery on its own.
 
 The boundary is enforced, not aspirational: CI verifies that no `harnery/lib/*` export imports the coordination core, directly or transitively (`scripts/check-layering.ts`), so pulling a toolkit module never drags in coordination state. Details: [Embedding + surface tiers](https://harnery.com/concepts/embedding/).
 

package/dist/core/agents/rules/stop-hook.d.ts

@@ -15,6 +15,12 @@
  * Pure-prose-turn exemption: when zero `tool.pre_use` events fire in
  * the current turn, rules 1/3 and 3/3 do not apply. Rule 2/3 still applies
  * as a user-visible mobile cue.
+ *
+ * Remediation continuity: an adapter whose Stop channel re-prompts by
+ * submitting a new user message (Cursor's `followup_message`) opens a fresh
+ * turn to repair the previous one. Such a turn inherits the window of the turn
+ * it repairs, so ritual events accumulate instead of alternating. See
+ * `resolveTurnStartMs`.
  */
 export type { VerdictResult } from "./verdict.js";
 import type { VerdictResult } from "./verdict.js";
@@ -43,6 +49,16 @@ export interface StopHookRequest {
      * event capture on: the child stays visible to peers and the coord layer. */
     workflow_child?: boolean;
 }
+/**
+ * Machine marker that opens a Stop-remediation message. Written by
+ * `hooks/adapter/output.ts` on the adapters whose Stop channel is a new user
+ * message, and read back here off `user_prompt.submit.data.prompt_text` to
+ * recognize a turn Harnery itself opened.
+ *
+ * Leading position is deliberate: `prompt_text` is clamped when recorded, so a
+ * trailing marker could be truncated away on a long reason.
+ */
+export declare const STOP_REMEDIATION_MARKER = "[harnery:stop-remediation";
 /**
  * Evaluate the Stop-hook verdict. Returns the first failing rule (or allow
  * when all three pass). Soft-fails open when the event stream isn't

package/dist/core/agents/rules/stop-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAclD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;4EACwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yFAAyF;IACzF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;iFAM6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA+BD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CAmHvF"}
+{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAclD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;4EACwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yFAAyF;IACzF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;iFAM6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA+BD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAwEnE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CAqHvF"}

package/dist/core/agents/rules/stop-hook.js

@@ -15,6 +15,12 @@
  * Pure-prose-turn exemption: when zero `tool.pre_use` events fire in
  * the current turn, rules 1/3 and 3/3 do not apply. Rule 2/3 still applies
  * as a user-visible mobile cue.
+ *
+ * Remediation continuity: an adapter whose Stop channel re-prompts by
+ * submitting a new user message (Cursor's `followup_message`) opens a fresh
+ * turn to repair the previous one. Such a turn inherits the window of the turn
+ * it repairs, so ritual events accumulate instead of alternating. See
+ * `resolveTurnStartMs`.
  */
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
@@ -23,6 +29,80 @@ function ackSignalFor(adapter) {
     return adapter === "cursor" ? "status_checked" : "status_box_present";
 }
 const RECENT_EVENT_WINDOW_LINES = 5_000;
+/**
+ * Machine marker that opens a Stop-remediation message. Written by
+ * `hooks/adapter/output.ts` on the adapters whose Stop channel is a new user
+ * message, and read back here off `user_prompt.submit.data.prompt_text` to
+ * recognize a turn Harnery itself opened.
+ *
+ * Leading position is deliberate: `prompt_text` is clamped when recorded, so a
+ * trailing marker could be truncated away on a long reason.
+ */
+export const STOP_REMEDIATION_MARKER = "[harnery:stop-remediation";
+/**
+ * The pre-marker message shape, still recognized on purpose.
+ *
+ * A followup already sitting in the stream was written by whichever build was
+ * running when it fired. An agent whose session spans an upgrade would otherwise
+ * keep alternating until the first new-format followup appeared, which is the
+ * exact failure this change removes. Recognizing the older trailing form closes
+ * that rollout window at no cost: it only ever appears in a `prompt_text`
+ * because Harnery put it there.
+ */
+const STOP_REMEDIATION_LEGACY_MARKER = "[agent-hook stop]: rule=";
+/** How far back the remediation walk may travel. Adapters cap their own
+ * followup chains (Cursor's `loop_limit`), and each prompt can appear once per
+ * observing adapter, so this only guards a pathological stream. */
+const MAX_REMEDIATION_WALK_BACK = 16;
+function isStopRemediationPrompt(event) {
+    const text = event.data.prompt_text;
+    if (typeof text !== "string")
+        return false;
+    return text.includes(STOP_REMEDIATION_MARKER) || text.includes(STOP_REMEDIATION_LEGACY_MARKER);
+}
+/**
+ * Start of the window this Stop verdict judges.
+ *
+ * Normally the most recent `user_prompt.submit`. The exception is the
+ * remediation chain: Cursor does not continue a turn on Stop, it auto-submits
+ * our message as a new user turn (`followup_message`). Scoping the verdict to
+ * that new turn alone makes the ritual unsatisfiable in one pass, because
+ * remediation itself runs a tool, so the repair turn needs every rule again
+ * while the signal from the previous turn sits just outside the window. Running
+ * `set-task` then clears rule 3/3 and fails rule 1/3, running `status` clears
+ * 1/3 and fails 3/3, and the pair alternates until the adapter's loop cap.
+ *
+ * Anchoring the window at the last prompt Harnery did not author makes progress
+ * monotonic: each repair adds a signal and none are lost, so the chain ends.
+ * A genuine human prompt always anchors a fresh window, so this cannot be used
+ * to inherit ritual credit across real turns.
+ */
+function resolveTurnStartMs(ownerEvents, nowMs, fallbackMs) {
+    // Honor the cutoff: `now_ms` marks what is relevant yet, so a prompt after it
+    // cannot anchor this turn. In production the cutoff is the clock and nothing
+    // follows it, but a replay over recorded history passes a past cutoff, and an
+    // unclamped search would anchor on a later turn and hand back an empty window.
+    const prompts = ownerEvents.filter((e) => {
+        if (e.event_type !== "user_prompt.submit")
+            return false;
+        const t = Date.parse(e.ts);
+        return Number.isFinite(t) && t <= nowMs;
+    });
+    if (prompts.length === 0)
+        return fallbackMs;
+    let index = prompts.length - 1;
+    let hops = 0;
+    while (index > 0 && hops < MAX_REMEDIATION_WALK_BACK) {
+        const prompt = prompts[index];
+        if (!prompt || !isStopRemediationPrompt(prompt))
+            break;
+        index -= 1;
+        hops += 1;
+    }
+    const anchor = prompts[index];
+    const parsed = anchor ? Date.parse(anchor.ts) : Number.NaN;
+    return Number.isFinite(parsed) ? parsed : fallbackMs;
+}
 /**
  * Evaluate the Stop-hook verdict. Returns the first failing rule (or allow
  * when all three pass). Soft-fails open when the event stream isn't
@@ -81,17 +161,19 @@ export function evaluateStopHook(coordRoot, req) {
         };
     }
     // Turn window: from the most recent user_prompt.submit (this owner) up to
-    // either the explicit now_ms or the last event we see. Fall back to a
+    // either the explicit now_ms or the last event we see, walking back over any
+    // Harnery-authored Stop-remediation prompts so a repair turn is judged
+    // together with the turn it repairs (see `resolveTurnStartMs`). Fall back to a
     // 5-minute window when no user_prompt.submit is in scope (fresh wiring,
     // out-of-window prompt, etc.) so a stale stream doesn't silently pass.
     const nowMs = req.now_ms ?? Date.now();
-    const lastUserPrompt = [...ownerEvents]
-        .reverse()
-        .find((e) => e.event_type === "user_prompt.submit");
-    const startMs = lastUserPrompt ? Date.parse(lastUserPrompt.ts) : nowMs - 5 * 60 * 1000;
+    const startMs = req.turn_window
+        ? req.turn_window.start_ms
+        : resolveTurnStartMs(ownerEvents, nowMs, nowMs - 5 * 60 * 1000);
+    const endMs = req.turn_window ? req.turn_window.end_ms : nowMs;
     const inTurn = ownerEvents.filter((e) => {
         const t = Date.parse(e.ts);
-        return Number.isFinite(t) && t >= startMs && t <= nowMs;
+        return Number.isFinite(t) && t >= startMs && t <= endMs;
     });
     const toolPreUseInTurn = inTurn.some((e) => e.event_type === "tool.pre_use");
     const statusChecked = inTurn.some((e) => e.event_type === "state.status_checked");

package/dist/core/agents/state/heartbeat-writer.d.ts

@@ -70,6 +70,33 @@ export declare function groupUnclaim(coordRoot: string, groupId: string, path: s
 export declare function killHeartbeat(coordRoot: string, instanceId: string): boolean;
 export declare function healPidmap(coordRoot: string, instanceId: string, pid: number): void;
 export declare function healHeartbeat(coordRoot: string, instanceId: string, sessionId?: string, model?: string, adapter?: string): Heartbeat | null;
+/**
+ * Register a workflow child in the coordination layer from the ENGINE side.
+ *
+ * Previously a spawned child was visible only if its adapter fired Harnery's
+ * hooks, which made coordination visibility a property of the vendor CLI
+ * rather than of the engine. Headless `codex exec` fires no hooks, so codex
+ * children never appeared in `harn agents list` and rendered as "no live
+ * session" on the run page while actively working — for the entire length of
+ * a multi-minute stage.
+ *
+ * The engine already knows every fact a heartbeat needs at spawn time, so it
+ * writes one itself. Hook-firing adapters keep enriching the same file
+ * (last_tool, files_touched); non-hook adapters at least become visible and
+ * attributable. Pair with `killHeartbeat` when the child ends.
+ *
+ * Idempotent: re-registering refreshes in place and preserves `started_at`
+ * and any claims a hook already recorded.
+ */
+export declare function registerWorkflowChild(coordRoot: string, opts: {
+    instanceId: string;
+    runId: string;
+    agentId: string;
+    sessionId?: string;
+    adapter?: string;
+    label?: string;
+    model?: string;
+}): Heartbeat;
 /**
  * Stamp the heartbeat with the most-recent tool name + target. Written from
  * the post-tool-use hook.

package/dist/core/agents/state/heartbeat-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA6DH,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAiBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQrF;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAS7F;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAKxF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAYlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAsChG;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS5E;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAuBnF;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,SAAS,GAAG,IAAI,CAsDlB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CAOlB"}
+{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA6DH,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAiBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQrF;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAS7F;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAKxF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAYlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAsChG;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS5E;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAuBnF;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,SAAS,GAAG,IAAI,CAsDlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,SAAS,CAwBX;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CAOlB"}

package/dist/core/agents/state/heartbeat-writer.js

@@ -280,6 +280,49 @@ export function healHeartbeat(coordRoot, instanceId, sessionId, model, adapter)
     });
     return hb;
 }
+/**
+ * Register a workflow child in the coordination layer from the ENGINE side.
+ *
+ * Previously a spawned child was visible only if its adapter fired Harnery's
+ * hooks, which made coordination visibility a property of the vendor CLI
+ * rather than of the engine. Headless `codex exec` fires no hooks, so codex
+ * children never appeared in `harn agents list` and rendered as "no live
+ * session" on the run page while actively working — for the entire length of
+ * a multi-minute stage.
+ *
+ * The engine already knows every fact a heartbeat needs at spawn time, so it
+ * writes one itself. Hook-firing adapters keep enriching the same file
+ * (last_tool, files_touched); non-hook adapters at least become visible and
+ * attributable. Pair with `killHeartbeat` when the child ends.
+ *
+ * Idempotent: re-registering refreshes in place and preserves `started_at`
+ * and any claims a hook already recorded.
+ */
+export function registerWorkflowChild(coordRoot, opts) {
+    const now = nowIsoSeconds();
+    const prior = readHeartbeat(coordRoot, opts.instanceId);
+    const hb = {
+        ...(prior ?? {}),
+        schema_version: 1,
+        instance_id: opts.instanceId,
+        // The reader keys children by session_id and skips any heartbeat missing
+        // one, so it must always be set even before the adapter mints a real id.
+        session_id: prior?.session_id ?? opts.sessionId ?? opts.instanceId,
+        name: opts.label || opts.agentId,
+        kind: "workflow-child",
+        agent_id: opts.agentId,
+        model: opts.model ?? prior?.model ?? "",
+        platform: adapterToPlatform(opts.adapter),
+        started_at: prior?.started_at ?? now,
+        last_heartbeat: now,
+        files_touched: prior?.files_touched ?? [],
+        task: opts.label ?? "",
+        workflow_run_id: opts.runId,
+        workflow_agent_id: opts.agentId,
+    };
+    atomicWrite(heartbeatPath(coordRoot, opts.instanceId), JSON.stringify(hb, null, 2));
+    return hb;
+}
 /**
  * Stamp the heartbeat with the most-recent tool name + target. Written from
  * the post-tool-use hook.

package/dist/core/hooks/adapter/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEhF,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIpF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,CAAC,GAAG,CAAC,CAYjG"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEhF,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIpF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,CAAC,GAAG,CAAC,CAuBjG"}

package/dist/core/hooks/adapter/output.js

@@ -17,6 +17,8 @@
  * Every helper writes to process.stdout + newline-terminates so callers can
  * fire-and-forget. Empty text → no-op (no JSON written).
  */
+import { STOP_REMEDIATION_MARKER } from "../../agents/rules/stop-hook.js";
+import { resolveBinName } from "../../config.js";
 /** Emit a context-injection (peer table, wiring check, council pending, …). */
 export function emitContext(adapter, event, text) {
     if (!text || text.length === 0)
@@ -56,12 +58,25 @@ export function emitDeny(adapter, reason) {
 export function emitStopBlock(adapter, verdict) {
     if (adapter === "codex")
         return 0;
-    const message = `${verdict.reason ?? "End-of-turn coordination ritual incomplete."}\n[agent-hook stop]: rule=${verdict.rule}`;
+    const reason = verdict.reason ?? "End-of-turn coordination ritual incomplete.";
     if (adapter === "cursor") {
+        // The marker leads the message so the Stop verdict can recognize the turn
+        // Cursor opens from it (`STOP_REMEDIATION_MARKER`), and so the operator can
+        // see in chat that the message came from Harnery rather than from them.
+        // Both commands are named because one message that repairs the whole ritual
+        // ends the chain in a single followup; the failing rule is context.
+        const bin = resolveBinName();
+        const message = [
+            `${STOP_REMEDIATION_MARKER} rule=${verdict.rule}]`,
+            reason,
+            `Repair the ritual in this turn: run \`${bin} agents set-task "<short focus>"\` and then \`${bin} agents status\` as your last tool call.`,
+        ].join("\n");
         process.stdout.write(`${JSON.stringify({ followup_message: message })}\n`);
         return 0;
     }
-    process.stderr.write(`${message}\n`);
+    // Claude Code continues the SAME turn on exit 2, so the single failing rule is
+    // both accurate and sufficient there. Left unchanged deliberately.
+    process.stderr.write(`${reason}\n[agent-hook stop]: rule=${verdict.rule}\n`);
     return 2;
 }
 function buildContextJson(adapter, event, text) {

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA0CH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAYV,MAAM,YAAY,CAAC;AAsCpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA2CH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAYV,MAAM,YAAY,CAAC;AAiDpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}

package/dist/core/workflow/engine.js

@@ -28,6 +28,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+import { killHeartbeat, registerWorkflowChild } from "../agents/state/heartbeat-writer.js";
 import { snapshotRepo } from "../context/index.js";
 import { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "../policy/index.js";
 import { assertWorkflowRunId, createWorkflowApproval } from "./approvals.js";
@@ -60,6 +61,16 @@ const DEFAULT_MAX_AGENTS = 50;
 const DEFAULT_CONCURRENCY = 4;
 const DEFAULT_MAX_ATTEMPTS = 2;
 const DEFAULT_TIMEOUT_MS = 300_000;
+/**
+ * Deterministic coordination identity for a spawned child.
+ *
+ * Stable per (run, agent) so a re-register refreshes one heartbeat instead of
+ * accumulating duplicates, and so an orphan left by a killed engine is
+ * greppable straight back to the run that owned it.
+ */
+function childInstanceId(runId, agentId) {
+    return `${runId}-${agentId}`;
+}
 const DEFAULT_MAX_TURNS = 25;
 const DEFAULT_POLICY_ASK_TIMEOUT_MS = 60_000;
 const MAX_POLICY_DECISIONS = 50;
@@ -790,6 +801,24 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 effort: agentOpts.effort ?? null,
             });
             log(`[${name}] ${currentStage || "(no stage)"} → ${id} [${adapter}] ${label}`);
+            // Register the child ourselves rather than trusting its adapter to fire
+            // Harnery's hooks. Headless `codex exec` fires none, so codex children
+            // were invisible to `harn agents list` and the run page for the whole
+            // duration of a stage. The engine knows everything the heartbeat needs.
+            // Best-effort: coordination visibility must never fail a run.
+            try {
+                registerWorkflowChild(opts.coordRoot, {
+                    instanceId: childInstanceId(runId, id),
+                    runId,
+                    agentId: id,
+                    adapter,
+                    label,
+                    model: agentOpts.model,
+                });
+            }
+            catch {
+                /* visibility is not worth failing a spawn over */
+            }
             let attemptPrompt = dispatchPrompt;
             let last = null;
             let agentCostUsd = 0;
@@ -893,6 +922,15 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
         }
         finally {
             reservedCostUsd = Math.max(0, reservedCostUsd - reservedForDispatch);
+            // Deregister on every exit path, including throw. A child heartbeat that
+            // outlives its process reads as a live agent forever and blocks peers on
+            // its stale claims. The transcript remains the durable record.
+            try {
+                killHeartbeat(opts.coordRoot, childInstanceId(runId, id));
+            }
+            catch {
+                /* already gone, or swept */
+            }
             release();
         }
     };

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CAyBzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA6DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAoDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA8BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA6DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAoDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}

package/dist/core/workflow/proof.js

@@ -68,7 +68,12 @@ export function createEvidenceRecord(input) {
         recorded_at: input.recordedAt ?? new Date().toISOString(),
         kind: enumValue(value.kind, EVIDENCE_KINDS, "evidence kind"),
         status: enumValue(value.status, ["passed", "failed", "observed", "unknown"], "evidence status"),
-        label: boundedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
+        // Truncate rather than throw. A label is a display string; the substance
+        // lives in `summary` and `ref`. Throwing here discards the whole run at
+        // the point evidence is recorded, which is the END of the work — a real
+        // three-agent review was lost because its label ran 31 characters long.
+        // Same posture the transcript writer already takes: shrink and say so.
+        label: truncatedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
         summary: boundedOptional(value.summary, "evidence summary", MAX_SUMMARY_CHARS),
         ref: boundedOptional(value.ref, "evidence ref", MAX_REF_CHARS),
         stage: boundedOptional(input.stage, "evidence stage", MAX_LABEL_CHARS),
@@ -442,6 +447,24 @@ function boundedRequired(value, field, max) {
         throw new Error(`${field} exceeds ${max} characters`);
     return normalized;
 }
+/**
+ * Like `boundedRequired`, but shortens an over-long value instead of throwing.
+ *
+ * For fields where the string is a display label rather than load-bearing
+ * content: losing the tail of a label is trivial, losing the run that produced
+ * it is not. The marker keeps the truncation visible so a reader never mistakes
+ * a shortened label for the whole thing. Still throws when the value is missing
+ * or blank — that is a caller bug, not an overflow.
+ */
+function truncatedRequired(value, field, max) {
+    if (typeof value !== "string" || value.trim() === "")
+        throw new Error(`${field} is required`);
+    const normalized = value.trim();
+    if (normalized.length <= max)
+        return normalized;
+    const marker = "…[truncated]";
+    return `${normalized.slice(0, Math.max(0, max - marker.length))}${marker}`;
+}
 function boundedOptional(value, field, max) {
     if (value === undefined)
         return undefined;

package/dist/lib/browser/client.d.ts

@@ -34,6 +34,12 @@ export interface BrowserOptions {
     };
     /** Default navigation timeout in ms. Default 30000. */
     navigationTimeout?: number;
+    /**
+     * Max ms to wait for Chromium to start (`launchPersistentContext` timeout).
+     * When unset, Playwright's default (30s) applies. Tests that need a faster
+     * fail→retry loop should set this explicitly (e.g. 10_000).
+     */
+    launchTimeout?: number;
     /**
      * `wait_until` strategy for `navigate`. Default `"load"`.
      * Use `"domcontentloaded"` for sites with long-running analytics scripts

package/dist/lib/browser/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/browser/client.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,IAAI,EAGV,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAuB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAoB,MAAM,cAAc,CAAC;AACpF,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,cAAc;IAC7B,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sEAAsE;IACtE,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,aAAa,GAAG,QAAQ,CAAC;IACnE;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gHAAgH;IAChH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;8BAE0B;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAoCD,qBAAa,OAAO;IAQN,OAAO,CAAC,IAAI;IAPxB,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,IAAI,CAAqB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,cAAc,CAAuB;gBAEzB,IAAI,GAAE,cAAmB;IAI7C,oEAAoE;IACpE,IAAI,WAAW,IAAI,IAAI,CAKtB;IAED;;;OAGG;YACW,QAAQ;IA4CtB;;;;;;;;;OASG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsC3B;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IA0CjC;;;OAGG;IACH,WAAW,IAAI,WAAW;IAUpB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAUpD;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAUvC,gEAAgE;IAC1D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAMlF,yEAAyE;IACnE,WAAW,IAAI,OAAO,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAYF,6EAA6E;IACvE,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjD,mFAAmF;IAC7E,oBAAoB,CAAC,IAAI,EAAE;QAC/B,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,CAAC;IAKnB,4FAA4F;IACtF,YAAY,CAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAsBzF;;;;;;OAMG;IACG,wBAAwB,CAAC,CAAC,GAAG,OAAO,EACxC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAChC,OAAO,CAAC;QACT,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,CAAC,CAAC;QACd,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,QAAQ,EAAE;YACR,SAAS,EAAE,OAAO,CAAC;YACnB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;YACnB,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;YACnB,iBAAiB,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACrD,kBAAkB,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACtD,iCAAiC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACrE,gCAAgC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACpE,gCAAgC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACpE,UAAU,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;SAC9D,CAAC;KACH,CAAC;IAoGF;;;;OAIG;IACG,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUtD,8DAA8D;IACxD,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAU/C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE,yEAAyE;IACnE,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAIvD;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAmBtC;;;;;;;OAOG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EAAE,EACnB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAO9B,iFAAiF;IAC3E,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,6CAA6C;IACvC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;OAKG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAI7D;;;;;OAKG;IACG,aAAa,CAAC,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IAMjF;;;;OAIG;IACG,UAAU,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAO/F,wEAAwE;IAClE,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,uCAAuC;IACjC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,uFAAuF;IACjF,cAAc,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,WAAW,EAAE,CAAC;QACtB,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjB,yCAAyC;IACnC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C,oFAAoF;IAC9E,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E,8EAA8E;IACxE,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,4CAA4C;IACtC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD,kGAAkG;IAC5F,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/E,8FAA8F;IACxF,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIhE,uEAAuE;IACjE,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,wCAAwC;IAClC,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;OAIG;IACG,eAAe,CACnB,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAC/B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAc9B,gEAAgE;IAC1D,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,sCAAsC;IAChC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlD;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB7B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/browser/client.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,IAAI,EAGV,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAuB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAoB,MAAM,cAAc,CAAC;AACpF,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,cAAc;IAC7B,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sEAAsE;IACtE,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,aAAa,GAAG,QAAQ,CAAC;IACnE;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gHAAgH;IAChH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;8BAE0B;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAoCD,qBAAa,OAAO;IAQN,OAAO,CAAC,IAAI;IAPxB,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,IAAI,CAAqB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,cAAc,CAAuB;gBAEzB,IAAI,GAAE,cAAmB;IAI7C,oEAAoE;IACpE,IAAI,WAAW,IAAI,IAAI,CAKtB;IAED;;;OAGG;YACW,QAAQ;IA6CtB;;;;;;;;;OASG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsC3B;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IA0CjC;;;OAGG;IACH,WAAW,IAAI,WAAW;IAUpB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAUpD;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAUvC,gEAAgE;IAC1D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAMlF,yEAAyE;IACnE,WAAW,IAAI,OAAO,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAYF,6EAA6E;IACvE,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjD,mFAAmF;IAC7E,oBAAoB,CAAC,IAAI,EAAE;QAC/B,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,CAAC;IAKnB,4FAA4F;IACtF,YAAY,CAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAsBzF;;;;;;OAMG;IACG,wBAAwB,CAAC,CAAC,GAAG,OAAO,EACxC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAChC,OAAO,CAAC;QACT,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,CAAC,CAAC;QACd,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,QAAQ,EAAE;YACR,SAAS,EAAE,OAAO,CAAC;YACnB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;YACnB,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;YACnB,iBAAiB,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACrD,kBAAkB,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACtD,iCAAiC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACrE,gCAAgC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACpE,gCAAgC,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACpE,UAAU,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;SAC9D,CAAC;KACH,CAAC;IAoGF;;;;OAIG;IACG,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUtD,8DAA8D;IACxD,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAU/C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE,yEAAyE;IACnE,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAIvD;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAmBtC;;;;;;;OAOG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EAAE,EACnB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAO9B,iFAAiF;IAC3E,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,6CAA6C;IACvC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;OAKG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAI7D;;;;;OAKG;IACG,aAAa,CAAC,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IAMjF;;;;OAIG;IACG,UAAU,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAO/F,wEAAwE;IAClE,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,uCAAuC;IACjC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5C,uFAAuF;IACjF,cAAc,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,WAAW,EAAE,CAAC;QACtB,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;QAChC,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjB,yCAAyC;IACnC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C,oFAAoF;IAC9E,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E,8EAA8E;IACxE,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,4CAA4C;IACtC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD,kGAAkG;IAC5F,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/E,8FAA8F;IACxF,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIhE,uEAAuE;IACjE,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,wCAAwC;IAClC,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;OAIG;IACG,eAAe,CACnB,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAC/B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAc9B,gEAAgE;IAC1D,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,sCAAsC;IAChC,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlD;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB7B"}

package/dist/lib/browser/client.js

@@ -68,6 +68,7 @@ export class Browser {
             this.context = await chromium.launchPersistentContext(this.profileDir, {
                 headless: !this.opts.headed,
                 viewport: this.opts.viewport ?? { width: 1280, height: 800 },
+                ...(this.opts.launchTimeout !== undefined ? { timeout: this.opts.launchTimeout } : {}),
                 ...(this.opts.launchArgs && this.opts.launchArgs.length > 0
                     ? { args: this.opts.launchArgs }
                     : {}),

package/dist/lib/instructions/splice.d.ts

@@ -14,7 +14,7 @@
  *   2. A **fully-owned file** harnery creates whole (a shipped skill's
  *      `SKILL.md`), carrying an ownership header comment so `deinit` deletes
  *      only files harnery generated and `--check` flags a hand-edit:
- *        <!-- harnery:generated <name> v=<hash> — machine-owned … -->
+ *        <!-- harnery:generated <name> v=<hash>; machine-owned … -->
  *
  * Modeled on the first host's HTML-theme splicer (regenerate + byte-compare,
  * sha256-8 hash, content outside the region untouchable). Pure (no fs) so it's

package/dist/lib/instructions/splice.js

@@ -14,7 +14,7 @@
  *   2. A **fully-owned file** harnery creates whole (a shipped skill's
  *      `SKILL.md`), carrying an ownership header comment so `deinit` deletes
  *      only files harnery generated and `--check` flags a hand-edit:
- *        <!-- harnery:generated <name> v=<hash> — machine-owned … -->
+ *        <!-- harnery:generated <name> v=<hash>; machine-owned … -->
  *
  * Modeled on the first host's HTML-theme splicer (regenerate + byte-compare,
  * sha256-8 hash, content outside the region untouchable). Pure (no fs) so it's
@@ -103,7 +103,7 @@ export function buildOwnedSkill(opts) {
         "---",
     ].join("\n");
     const body = opts.body.trim();
-    const marker = `<!-- harnery:generated ${opts.name} v=${shortHash(body)} — machine-owned; ` +
+    const marker = `<!-- harnery:generated ${opts.name} v=${shortHash(body)}; machine-owned; ` +
         `regenerated by \`${opts.binName} init\`, removed by \`${opts.binName} deinit\`. ` +
         `Edit the harnery template, not this file. -->`;
     return `${fm}\n${marker}\n\n${body}\n`;

package/dist/lib/instructions/templates.js

@@ -115,7 +115,7 @@ surfaces prior decisions, so check for precedent before re-deciding. ${decidePoi
 function decideBody(b) {
     return `The decision docket is a persistent queue for decisions you would otherwise
 route to a human. It's built on the \`${b} decision\` engine. This skill is the
-mechanics — file, find precedent, claim, and resolve with evidence. *When* a
+mechanics: file, find precedent, claim, and resolve with evidence. *When* a
 decision needs a human at all (versus one you settle yourself) is host policy;
 if this project defines that rubric, follow it.
 
@@ -128,7 +128,7 @@ if this project defines that rubric, follow it.
 ## Capture (default)
 
 1. **Check precedent first.** \`${b} decision search "<key terms>"\`. If a resolved
-   decision already answers this, cite it — don't re-litigate.
+   decision already answers this, cite it; don't re-litigate.
 2. **File it** when the choice has a second consumer (a human will want to see it,
    or a future agent will face it again) or reversal is expensive. Skip the
    docket for pure local mechanics (a variable name, one of two equivalent idioms).
@@ -141,7 +141,7 @@ if this project defines that rubric, follow it.
 
    For a decision with real substance, write a brief to a file and pass
    \`--brief <path>\` so the reviewer sees options + evidence, not a cold prompt.
-3. **Proceed on your default.** Filing does not mean blocking — note the id in your
+3. **Proceed on your default.** Filing does not mean blocking. Note the id in your
    reply and keep working.
 
 ## Resolve (\`resolve <id>\`)
@@ -151,7 +151,7 @@ ${b} decision show <id>     # read the question + context + any brief
 ${b} decision claim <id>    # mark it deliberating (claimed by you)
 \`\`\`
 
-Research it for real — run the queries, read the files, compute the costs. Then
+Research it for real: run the queries, read the files, compute the costs. Then
 resolve with **cited evidence** (the engine rejects an evidence-free resolution):
 
 \`\`\`bash
@@ -210,7 +210,7 @@ ${b} council list --mine --json
 
 One section per council you're a member of: id + objective, round N (open /
 collected) with N/M contributors, and your status (awaiting prompt / prompt ready
-/ already contributed) with the next command to run. Stop after listing — don't
+/ already contributed) with the next command to run. Stop after listing; don't
 auto-route into contribute.
 
 ## Create (\`create <objective>\`)
@@ -224,18 +224,18 @@ http://localhost:9000/councils/new?objective=<encoded>
 
 If the dev server isn't up, start it with \`${b} web up\`.
 
-## Contribute (\`contribute <id>\`) — the guarded flow
+## Contribute (\`contribute <id>\`): the guarded flow
 
 Run these checks in order; refuse with a specific reason if any fails.
 
-1. **Membership.** If your \`whoami\` name isn't in \`manifest.members\`, refuse — the
-   router likely meant a different agent's session.
-2. **Already contributed.** If you're in \`current_round_contributors\`, refuse —
-   wait for the steward to advance the round.
+1. **Membership.** If your \`whoami\` name isn't in \`manifest.members\`, refuse.
+   The router likely meant a different agent's session.
+2. **Already contributed.** If you're in \`current_round_contributors\`, refuse.
+   Wait for the steward to advance the round.
 3. **Prompt routing.** Find your entry in \`current_round_prompts\`. If none is
    drafted for you, refuse (the steward must write one first). If the routed body
    carries a \`<!-- council-route … member: <name> -->\` header naming a *different*
-   agent, refuse — the wrong prompt was pasted into your session.
+   agent, refuse: the wrong prompt was pasted into your session.
 4. **Compose** per your prompt (read \`manifest.target_doc\` in full if set; strip
    the route header before treating the body as instructions).
 5. **Submit:**
@@ -250,20 +250,20 @@ Run these checks in order; refuse with a specific reason if any fails.
    \`<trivial>\` angle-bracket tag on the final line (the exit-criterion parser keys
    on it). When in doubt, lean \`<trivial>\`.
 
-## Prompts (\`prompts <id>\`) — steward
+## Prompts (\`prompts <id>\`): steward
 
 1. **Authority.** If your \`whoami\` name ≠ the council's \`steward\`, stop.
 2. **Plan the round** from the target doc + prior rounds. Round 1 must include a
-   completeness critic — assign one member the explicit charge: "What important
-   thing is NOT in this document at all — a missing dimension, not a flaw in what's
-   written?" Lens-scoped reviewers reliably miss whole absent dimensions.
+   completeness critic. Assign one member the explicit charge: "What important
+   thing is NOT in this document at all (a missing dimension, not a flaw in what's
+   written)?" Lens-scoped reviewers reliably miss whole absent dimensions.
 3. **Draft + write** one prompt per member missing from \`current_round_prompts\`:
 
    \`\`\`bash
    ${b} council prompt <id> agent-<Name> --message "..."   # or --file <path>
    \`\`\`
 
-   The CLI auto-prepends the \`<!-- council-route … -->\` header — never write it by
+   The CLI auto-prepends the \`<!-- council-route … -->\` header; never write it by
    hand. Every prompt must instruct the member to end with the literal
    \`<substantive>\` / \`<trivial>\` tag.
 
@@ -280,7 +280,7 @@ export const SKILLS = [
         relPath: "harn-decide/SKILL.md",
         render: (binName) => buildOwnedSkill({
             name: "harn-decide",
-            description: "File a decision into the docket instead of blocking on a human — search precedent, file it, and proceed on a reversible default; or pick up and resolve an open decision with cited evidence. Use whenever you're about to ask a human a decision-shaped question you could resolve yourself.",
+            description: "File a decision into the docket instead of blocking on a human: search precedent, file it, and proceed on a reversible default; or pick up and resolve an open decision with cited evidence. Use whenever you're about to ask a human a decision-shaped question you could resolve yourself.",
             argumentHint: "[<the decision / question you're facing> | resolve <id> | review]",
             binName,
             body: decideBody(binName),
@@ -291,7 +291,7 @@ export const SKILLS = [
         relPath: "harn-council/SKILL.md",
         render: (binName) => buildOwnedSkill({
             name: "harn-council",
-            description: "Interact with the multi-agent council system: list / create / show / prompts (steward) / contribute (member). Guards against misrouting — refuses to contribute when you aren't a member, have already contributed, or weren't routed a prompt.",
+            description: "Interact with the multi-agent council system: list / create / show / prompts (steward) / contribute (member). Guards against misrouting: refuses to contribute when you aren't a member, have already contributed, or weren't routed a prompt.",
             argumentHint: "[<id-or-fragment> | create <objective> | contribute <id> | prompts <id> | show <id>]",
             binName,
             body: councilBody(binName),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnery",
-  "version": "0.31.3",
+  "version": "0.31.5",
   "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",

package/src/core/agents/rules/stop-hook.ts

@@ -15,6 +15,12 @@
  * Pure-prose-turn exemption: when zero `tool.pre_use` events fire in
  * the current turn, rules 1/3 and 3/3 do not apply. Rule 2/3 still applies
  * as a user-visible mobile cue.
+ *
+ * Remediation continuity: an adapter whose Stop channel re-prompts by
+ * submitting a new user message (Cursor's `followup_message`) opens a fresh
+ * turn to repair the previous one. Such a turn inherits the window of the turn
+ * it repairs, so ritual events accumulate instead of alternating. See
+ * `resolveTurnStartMs`.
  */
 
 import { existsSync, readFileSync } from "node:fs";
@@ -89,6 +95,87 @@ function ackSignalFor(adapter?: string): AckSignal {
 
 const RECENT_EVENT_WINDOW_LINES = 5_000;
 
+/**
+ * Machine marker that opens a Stop-remediation message. Written by
+ * `hooks/adapter/output.ts` on the adapters whose Stop channel is a new user
+ * message, and read back here off `user_prompt.submit.data.prompt_text` to
+ * recognize a turn Harnery itself opened.
+ *
+ * Leading position is deliberate: `prompt_text` is clamped when recorded, so a
+ * trailing marker could be truncated away on a long reason.
+ */
+export const STOP_REMEDIATION_MARKER = "[harnery:stop-remediation";
+
+/**
+ * The pre-marker message shape, still recognized on purpose.
+ *
+ * A followup already sitting in the stream was written by whichever build was
+ * running when it fired. An agent whose session spans an upgrade would otherwise
+ * keep alternating until the first new-format followup appeared, which is the
+ * exact failure this change removes. Recognizing the older trailing form closes
+ * that rollout window at no cost: it only ever appears in a `prompt_text`
+ * because Harnery put it there.
+ */
+const STOP_REMEDIATION_LEGACY_MARKER = "[agent-hook stop]: rule=";
+
+/** How far back the remediation walk may travel. Adapters cap their own
+ * followup chains (Cursor's `loop_limit`), and each prompt can appear once per
+ * observing adapter, so this only guards a pathological stream. */
+const MAX_REMEDIATION_WALK_BACK = 16;
+
+function isStopRemediationPrompt(event: CanonicalEvent): boolean {
+  const text = event.data.prompt_text;
+  if (typeof text !== "string") return false;
+  return text.includes(STOP_REMEDIATION_MARKER) || text.includes(STOP_REMEDIATION_LEGACY_MARKER);
+}
+
+/**
+ * Start of the window this Stop verdict judges.
+ *
+ * Normally the most recent `user_prompt.submit`. The exception is the
+ * remediation chain: Cursor does not continue a turn on Stop, it auto-submits
+ * our message as a new user turn (`followup_message`). Scoping the verdict to
+ * that new turn alone makes the ritual unsatisfiable in one pass, because
+ * remediation itself runs a tool, so the repair turn needs every rule again
+ * while the signal from the previous turn sits just outside the window. Running
+ * `set-task` then clears rule 3/3 and fails rule 1/3, running `status` clears
+ * 1/3 and fails 3/3, and the pair alternates until the adapter's loop cap.
+ *
+ * Anchoring the window at the last prompt Harnery did not author makes progress
+ * monotonic: each repair adds a signal and none are lost, so the chain ends.
+ * A genuine human prompt always anchors a fresh window, so this cannot be used
+ * to inherit ritual credit across real turns.
+ */
+function resolveTurnStartMs(
+  ownerEvents: CanonicalEvent[],
+  nowMs: number,
+  fallbackMs: number,
+): number {
+  // Honor the cutoff: `now_ms` marks what is relevant yet, so a prompt after it
+  // cannot anchor this turn. In production the cutoff is the clock and nothing
+  // follows it, but a replay over recorded history passes a past cutoff, and an
+  // unclamped search would anchor on a later turn and hand back an empty window.
+  const prompts = ownerEvents.filter((e) => {
+    if (e.event_type !== "user_prompt.submit") return false;
+    const t = Date.parse(e.ts);
+    return Number.isFinite(t) && t <= nowMs;
+  });
+  if (prompts.length === 0) return fallbackMs;
+
+  let index = prompts.length - 1;
+  let hops = 0;
+  while (index > 0 && hops < MAX_REMEDIATION_WALK_BACK) {
+    const prompt = prompts[index];
+    if (!prompt || !isStopRemediationPrompt(prompt)) break;
+    index -= 1;
+    hops += 1;
+  }
+
+  const anchor = prompts[index];
+  const parsed = anchor ? Date.parse(anchor.ts) : Number.NaN;
+  return Number.isFinite(parsed) ? parsed : fallbackMs;
+}
+
 /**
  * Evaluate the Stop-hook verdict. Returns the first failing rule (or allow
  * when all three pass). Soft-fails open when the event stream isn't
@@ -151,18 +238,20 @@ export function evaluateStopHook(coordRoot: string, req: StopHookRequest): Verdi
   }
 
   // Turn window: from the most recent user_prompt.submit (this owner) up to
-  // either the explicit now_ms or the last event we see. Fall back to a
+  // either the explicit now_ms or the last event we see, walking back over any
+  // Harnery-authored Stop-remediation prompts so a repair turn is judged
+  // together with the turn it repairs (see `resolveTurnStartMs`). Fall back to a
   // 5-minute window when no user_prompt.submit is in scope (fresh wiring,
   // out-of-window prompt, etc.) so a stale stream doesn't silently pass.
   const nowMs = req.now_ms ?? Date.now();
-  const lastUserPrompt = [...ownerEvents]
-    .reverse()
-    .find((e) => e.event_type === "user_prompt.submit");
-  const startMs = lastUserPrompt ? Date.parse(lastUserPrompt.ts) : nowMs - 5 * 60 * 1000;
+  const startMs = req.turn_window
+    ? req.turn_window.start_ms
+    : resolveTurnStartMs(ownerEvents, nowMs, nowMs - 5 * 60 * 1000);
+  const endMs = req.turn_window ? req.turn_window.end_ms : nowMs;
 
   const inTurn = ownerEvents.filter((e) => {
     const t = Date.parse(e.ts);
-    return Number.isFinite(t) && t >= startMs && t <= nowMs;
+    return Number.isFinite(t) && t >= startMs && t <= endMs;
   });
 
   const toolPreUseInTurn = inTurn.some((e) => e.event_type === "tool.pre_use");

package/src/core/agents/state/heartbeat-writer.ts

@@ -347,6 +347,61 @@ export function healHeartbeat(
   return hb;
 }
 
+/**
+ * Register a workflow child in the coordination layer from the ENGINE side.
+ *
+ * Previously a spawned child was visible only if its adapter fired Harnery's
+ * hooks, which made coordination visibility a property of the vendor CLI
+ * rather than of the engine. Headless `codex exec` fires no hooks, so codex
+ * children never appeared in `harn agents list` and rendered as "no live
+ * session" on the run page while actively working — for the entire length of
+ * a multi-minute stage.
+ *
+ * The engine already knows every fact a heartbeat needs at spawn time, so it
+ * writes one itself. Hook-firing adapters keep enriching the same file
+ * (last_tool, files_touched); non-hook adapters at least become visible and
+ * attributable. Pair with `killHeartbeat` when the child ends.
+ *
+ * Idempotent: re-registering refreshes in place and preserves `started_at`
+ * and any claims a hook already recorded.
+ */
+export function registerWorkflowChild(
+  coordRoot: string,
+  opts: {
+    instanceId: string;
+    runId: string;
+    agentId: string;
+    sessionId?: string;
+    adapter?: string;
+    label?: string;
+    model?: string;
+  },
+): Heartbeat {
+  const now = nowIsoSeconds();
+  const prior = readHeartbeat(coordRoot, opts.instanceId);
+  const hb: Heartbeat = {
+    ...(prior ?? {}),
+    schema_version: 1,
+    instance_id: opts.instanceId,
+    // The reader keys children by session_id and skips any heartbeat missing
+    // one, so it must always be set even before the adapter mints a real id.
+    session_id: prior?.session_id ?? opts.sessionId ?? opts.instanceId,
+    name: opts.label || opts.agentId,
+    kind: "workflow-child",
+    agent_id: opts.agentId,
+    model: opts.model ?? prior?.model ?? "",
+    platform: adapterToPlatform(opts.adapter),
+    started_at: prior?.started_at ?? now,
+    last_heartbeat: now,
+    files_touched: prior?.files_touched ?? [],
+    task: opts.label ?? "",
+    workflow_run_id: opts.runId,
+    workflow_agent_id: opts.agentId,
+  };
+  atomicWrite(heartbeatPath(coordRoot, opts.instanceId), JSON.stringify(hb, null, 2));
+  return hb;
+}
+
 /**
  * Stamp the heartbeat with the most-recent tool name + target. Written from
  * the post-tool-use hook.

package/src/core/hooks/adapter/output.ts

@@ -18,6 +18,8 @@
  * fire-and-forget. Empty text → no-op (no JSON written).
  */
 
+import { STOP_REMEDIATION_MARKER } from "../../agents/rules/stop-hook.ts";
+import { resolveBinName } from "../../config.ts";
 import type { Adapter } from "../events/schema.ts";
 
 export type SystemEvent = "SessionStart" | "UserPromptSubmit" | "SubagentStart";
@@ -61,14 +63,25 @@ export function emitDeny(adapter: Adapter, reason: string): void {
 export function emitStopBlock(adapter: Adapter, verdict: { reason?: string; rule: string }): 0 | 2 {
   if (adapter === "codex") return 0;
 
-  const message = `${
-    verdict.reason ?? "End-of-turn coordination ritual incomplete."
-  }\n[agent-hook stop]: rule=${verdict.rule}`;
+  const reason = verdict.reason ?? "End-of-turn coordination ritual incomplete.";
   if (adapter === "cursor") {
+    // The marker leads the message so the Stop verdict can recognize the turn
+    // Cursor opens from it (`STOP_REMEDIATION_MARKER`), and so the operator can
+    // see in chat that the message came from Harnery rather than from them.
+    // Both commands are named because one message that repairs the whole ritual
+    // ends the chain in a single followup; the failing rule is context.
+    const bin = resolveBinName();
+    const message = [
+      `${STOP_REMEDIATION_MARKER} rule=${verdict.rule}]`,
+      reason,
+      `Repair the ritual in this turn: run \`${bin} agents set-task "<short focus>"\` and then \`${bin} agents status\` as your last tool call.`,
+    ].join("\n");
     process.stdout.write(`${JSON.stringify({ followup_message: message })}\n`);
     return 0;
   }
-  process.stderr.write(`${message}\n`);
+  // Claude Code continues the SAME turn on exit 2, so the single failing rule is
+  // both accurate and sufficient there. Left unchanged deliberately.
+  process.stderr.write(`${reason}\n[agent-hook stop]: rule=${verdict.rule}\n`);
   return 2;
 }
 

package/src/core/workflow/engine.ts

@@ -21,6 +21,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
 import { isAbsolute, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+import { killHeartbeat, registerWorkflowChild } from "../agents/state/heartbeat-writer.ts";
 import { snapshotRepo } from "../context/index.ts";
 import type {
   ExternalMutationRequest,
@@ -109,6 +110,17 @@ const DEFAULT_MAX_AGENTS = 50;
 const DEFAULT_CONCURRENCY = 4;
 const DEFAULT_MAX_ATTEMPTS = 2;
 const DEFAULT_TIMEOUT_MS = 300_000;
+
+/**
+ * Deterministic coordination identity for a spawned child.
+ *
+ * Stable per (run, agent) so a re-register refreshes one heartbeat instead of
+ * accumulating duplicates, and so an orphan left by a killed engine is
+ * greppable straight back to the run that owned it.
+ */
+function childInstanceId(runId: string, agentId: string): string {
+  return `${runId}-${agentId}`;
+}
 const DEFAULT_MAX_TURNS = 25;
 const DEFAULT_POLICY_ASK_TIMEOUT_MS = 60_000;
 const MAX_POLICY_DECISIONS = 50;
@@ -935,6 +947,24 @@ async function executeWorkflow(
       });
       log(`[${name}] ${currentStage || "(no stage)"} → ${id} [${adapter}] ${label}`);
 
+      // Register the child ourselves rather than trusting its adapter to fire
+      // Harnery's hooks. Headless `codex exec` fires none, so codex children
+      // were invisible to `harn agents list` and the run page for the whole
+      // duration of a stage. The engine knows everything the heartbeat needs.
+      // Best-effort: coordination visibility must never fail a run.
+      try {
+        registerWorkflowChild(opts.coordRoot, {
+          instanceId: childInstanceId(runId, id),
+          runId,
+          agentId: id,
+          adapter,
+          label,
+          model: agentOpts.model,
+        });
+      } catch {
+        /* visibility is not worth failing a spawn over */
+      }
+
       let attemptPrompt = dispatchPrompt;
       let last: SpawnResult | null = null;
       let agentCostUsd = 0;
@@ -1047,6 +1077,14 @@ async function executeWorkflow(
       throw error;
     } finally {
       reservedCostUsd = Math.max(0, reservedCostUsd - reservedForDispatch);
+      // Deregister on every exit path, including throw. A child heartbeat that
+      // outlives its process reads as a live agent forever and blocks peers on
+      // its stale claims. The transcript remains the durable record.
+      try {
+        killHeartbeat(opts.coordRoot, childInstanceId(runId, id));
+      } catch {
+        /* already gone, or swept */
+      }
       release();
     }
   };

package/src/core/workflow/proof.ts

@@ -173,7 +173,12 @@ export function createEvidenceRecord(input: {
     recorded_at: input.recordedAt ?? new Date().toISOString(),
     kind: enumValue(value.kind, EVIDENCE_KINDS, "evidence kind"),
     status: enumValue(value.status, ["passed", "failed", "observed", "unknown"], "evidence status"),
-    label: boundedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
+    // Truncate rather than throw. A label is a display string; the substance
+    // lives in `summary` and `ref`. Throwing here discards the whole run at
+    // the point evidence is recorded, which is the END of the work — a real
+    // three-agent review was lost because its label ran 31 characters long.
+    // Same posture the transcript writer already takes: shrink and say so.
+    label: truncatedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
     summary: boundedOptional(value.summary, "evidence summary", MAX_SUMMARY_CHARS),
     ref: boundedOptional(value.ref, "evidence ref", MAX_REF_CHARS),
     stage: boundedOptional(input.stage, "evidence stage", MAX_LABEL_CHARS),
@@ -584,6 +589,23 @@ function boundedRequired(value: unknown, field: string, max: number): string {
   return normalized;
 }
 
+/**
+ * Like `boundedRequired`, but shortens an over-long value instead of throwing.
+ *
+ * For fields where the string is a display label rather than load-bearing
+ * content: losing the tail of a label is trivial, losing the run that produced
+ * it is not. The marker keeps the truncation visible so a reader never mistakes
+ * a shortened label for the whole thing. Still throws when the value is missing
+ * or blank — that is a caller bug, not an overflow.
+ */
+function truncatedRequired(value: unknown, field: string, max: number): string {
+  if (typeof value !== "string" || value.trim() === "") throw new Error(`${field} is required`);
+  const normalized = value.trim();
+  if (normalized.length <= max) return normalized;
+  const marker = "…[truncated]";
+  return `${normalized.slice(0, Math.max(0, max - marker.length))}${marker}`;
+}
+
 function boundedOptional(value: unknown, field: string, max: number): string | undefined {
   if (value === undefined) return undefined;
   if (typeof value !== "string") throw new Error(`${field} must be a string`);

package/src/lib/browser/client.ts

@@ -81,6 +81,12 @@ export interface BrowserOptions {
   viewport?: { width: number; height: number };
   /** Default navigation timeout in ms. Default 30000. */
   navigationTimeout?: number;
+  /**
+   * Max ms to wait for Chromium to start (`launchPersistentContext` timeout).
+   * When unset, Playwright's default (30s) applies. Tests that need a faster
+   * fail→retry loop should set this explicitly (e.g. 10_000).
+   */
+  launchTimeout?: number;
   /**
    * `wait_until` strategy for `navigate`. Default `"load"`.
    * Use `"domcontentloaded"` for sites with long-running analytics scripts
@@ -213,6 +219,7 @@ export class Browser {
       this.context = await chromium.launchPersistentContext(this.profileDir, {
         headless: !this.opts.headed,
         viewport: this.opts.viewport ?? { width: 1280, height: 800 },
+        ...(this.opts.launchTimeout !== undefined ? { timeout: this.opts.launchTimeout } : {}),
         ...(this.opts.launchArgs && this.opts.launchArgs.length > 0
           ? { args: this.opts.launchArgs }
           : {}),

package/src/lib/instructions/splice.ts

@@ -14,7 +14,7 @@
  *   2. A **fully-owned file** harnery creates whole (a shipped skill's
  *      `SKILL.md`), carrying an ownership header comment so `deinit` deletes
  *      only files harnery generated and `--check` flags a hand-edit:
- *        <!-- harnery:generated <name> v=<hash> — machine-owned … -->
+ *        <!-- harnery:generated <name> v=<hash>; machine-owned … -->
  *
  * Modeled on the first host's HTML-theme splicer (regenerate + byte-compare,
  * sha256-8 hash, content outside the region untouchable). Pure (no fs) so it's
@@ -133,7 +133,7 @@ export function buildOwnedSkill(opts: {
   ].join("\n");
   const body = opts.body.trim();
   const marker =
-    `<!-- harnery:generated ${opts.name} v=${shortHash(body)} — machine-owned; ` +
+    `<!-- harnery:generated ${opts.name} v=${shortHash(body)}; machine-owned; ` +
     `regenerated by \`${opts.binName} init\`, removed by \`${opts.binName} deinit\`. ` +
     `Edit the harnery template, not this file. -->`;
   return `${fm}\n${marker}\n\n${body}\n`;

package/src/lib/instructions/templates.ts

@@ -146,7 +146,7 @@ export interface SkillTemplate {
 function decideBody(b: string): string {
   return `The decision docket is a persistent queue for decisions you would otherwise
 route to a human. It's built on the \`${b} decision\` engine. This skill is the
-mechanics — file, find precedent, claim, and resolve with evidence. *When* a
+mechanics: file, find precedent, claim, and resolve with evidence. *When* a
 decision needs a human at all (versus one you settle yourself) is host policy;
 if this project defines that rubric, follow it.
 
@@ -159,7 +159,7 @@ if this project defines that rubric, follow it.
 ## Capture (default)
 
 1. **Check precedent first.** \`${b} decision search "<key terms>"\`. If a resolved
-   decision already answers this, cite it — don't re-litigate.
+   decision already answers this, cite it; don't re-litigate.
 2. **File it** when the choice has a second consumer (a human will want to see it,
    or a future agent will face it again) or reversal is expensive. Skip the
    docket for pure local mechanics (a variable name, one of two equivalent idioms).
@@ -172,7 +172,7 @@ if this project defines that rubric, follow it.
 
    For a decision with real substance, write a brief to a file and pass
    \`--brief <path>\` so the reviewer sees options + evidence, not a cold prompt.
-3. **Proceed on your default.** Filing does not mean blocking — note the id in your
+3. **Proceed on your default.** Filing does not mean blocking. Note the id in your
    reply and keep working.
 
 ## Resolve (\`resolve <id>\`)
@@ -182,7 +182,7 @@ ${b} decision show <id>     # read the question + context + any brief
 ${b} decision claim <id>    # mark it deliberating (claimed by you)
 \`\`\`
 
-Research it for real — run the queries, read the files, compute the costs. Then
+Research it for real: run the queries, read the files, compute the costs. Then
 resolve with **cited evidence** (the engine rejects an evidence-free resolution):
 
 \`\`\`bash
@@ -242,7 +242,7 @@ ${b} council list --mine --json
 
 One section per council you're a member of: id + objective, round N (open /
 collected) with N/M contributors, and your status (awaiting prompt / prompt ready
-/ already contributed) with the next command to run. Stop after listing — don't
+/ already contributed) with the next command to run. Stop after listing; don't
 auto-route into contribute.
 
 ## Create (\`create <objective>\`)
@@ -256,18 +256,18 @@ http://localhost:9000/councils/new?objective=<encoded>
 
 If the dev server isn't up, start it with \`${b} web up\`.
 
-## Contribute (\`contribute <id>\`) — the guarded flow
+## Contribute (\`contribute <id>\`): the guarded flow
 
 Run these checks in order; refuse with a specific reason if any fails.
 
-1. **Membership.** If your \`whoami\` name isn't in \`manifest.members\`, refuse — the
-   router likely meant a different agent's session.
-2. **Already contributed.** If you're in \`current_round_contributors\`, refuse —
-   wait for the steward to advance the round.
+1. **Membership.** If your \`whoami\` name isn't in \`manifest.members\`, refuse.
+   The router likely meant a different agent's session.
+2. **Already contributed.** If you're in \`current_round_contributors\`, refuse.
+   Wait for the steward to advance the round.
 3. **Prompt routing.** Find your entry in \`current_round_prompts\`. If none is
    drafted for you, refuse (the steward must write one first). If the routed body
    carries a \`<!-- council-route … member: <name> -->\` header naming a *different*
-   agent, refuse — the wrong prompt was pasted into your session.
+   agent, refuse: the wrong prompt was pasted into your session.
 4. **Compose** per your prompt (read \`manifest.target_doc\` in full if set; strip
    the route header before treating the body as instructions).
 5. **Submit:**
@@ -282,20 +282,20 @@ Run these checks in order; refuse with a specific reason if any fails.
    \`<trivial>\` angle-bracket tag on the final line (the exit-criterion parser keys
    on it). When in doubt, lean \`<trivial>\`.
 
-## Prompts (\`prompts <id>\`) — steward
+## Prompts (\`prompts <id>\`): steward
 
 1. **Authority.** If your \`whoami\` name ≠ the council's \`steward\`, stop.
 2. **Plan the round** from the target doc + prior rounds. Round 1 must include a
-   completeness critic — assign one member the explicit charge: "What important
-   thing is NOT in this document at all — a missing dimension, not a flaw in what's
-   written?" Lens-scoped reviewers reliably miss whole absent dimensions.
+   completeness critic. Assign one member the explicit charge: "What important
+   thing is NOT in this document at all (a missing dimension, not a flaw in what's
+   written)?" Lens-scoped reviewers reliably miss whole absent dimensions.
 3. **Draft + write** one prompt per member missing from \`current_round_prompts\`:
 
    \`\`\`bash
    ${b} council prompt <id> agent-<Name> --message "..."   # or --file <path>
    \`\`\`
 
-   The CLI auto-prepends the \`<!-- council-route … -->\` header — never write it by
+   The CLI auto-prepends the \`<!-- council-route … -->\` header; never write it by
    hand. Every prompt must instruct the member to end with the literal
    \`<substantive>\` / \`<trivial>\` tag.
 
@@ -315,7 +315,7 @@ export const SKILLS: SkillTemplate[] = [
       buildOwnedSkill({
         name: "harn-decide",
         description:
-          "File a decision into the docket instead of blocking on a human — search precedent, file it, and proceed on a reversible default; or pick up and resolve an open decision with cited evidence. Use whenever you're about to ask a human a decision-shaped question you could resolve yourself.",
+          "File a decision into the docket instead of blocking on a human: search precedent, file it, and proceed on a reversible default; or pick up and resolve an open decision with cited evidence. Use whenever you're about to ask a human a decision-shaped question you could resolve yourself.",
         argumentHint: "[<the decision / question you're facing> | resolve <id> | review]",
         binName,
         body: decideBody(binName),
@@ -328,7 +328,7 @@ export const SKILLS: SkillTemplate[] = [
       buildOwnedSkill({
         name: "harn-council",
         description:
-          "Interact with the multi-agent council system: list / create / show / prompts (steward) / contribute (member). Guards against misrouting — refuses to contribute when you aren't a member, have already contributed, or weren't routed a prompt.",
+          "Interact with the multi-agent council system: list / create / show / prompts (steward) / contribute (member). Guards against misrouting: refuses to contribute when you aren't a member, have already contributed, or weren't routed a prompt.",
         argumentHint:
           "[<id-or-fragment> | create <objective> | contribute <id> | prompts <id> | show <id>]",
         binName,