harnery 0.31.6 → 0.32.0

package/dist/core/config.d.ts

@@ -7,7 +7,7 @@
  *   2. `<project-root>/.harnery/config.jsonc` — project override (authoritative)
  *
  * Fields owned here: `binName` (host CLI name for agent-facing strings),
- * `hooksSetupHint`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
+ * `hooksSetupHint`, `agents`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
  * `coord` (heartbeat freshness), `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), and `sync` (rclone
  * remote/prefix) sections. The `files` deny/override section
@@ -21,6 +21,11 @@
 export declare const DEFAULT_BIN_NAME = "harn";
 /** Heartbeat-freshness default (seconds): the sweep window when nothing overrides it. */
 export declare const DEFAULT_FRESHNESS_SECS = 600;
+export type AgentFinalizationDisposition = "git" | "output";
+export interface AgentFinalizationRoot {
+    path: string;
+    disposition: AgentFinalizationDisposition;
+}
 /** Strip `//` and `/* *​/` comments from JSONC, ignoring comment-like runs inside strings. */
 export declare function stripJsonComments(input: string): string;
 /**
@@ -49,6 +54,29 @@ export declare function pinnedBinName(projectRoot: string): string | null;
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.
  */
 export declare function resolveHooksSetupHint(coordRoot?: string | null): string | null;
+/**
+ * Whether the host requires the guarded Git check at the end of tool-using
+ * turns. Default false: Harnery exposes `agents status --end-turn` as a capability
+ * but does not impose a commit-and-push policy on embedding projects.
+ *
+ * `.harnery/config.jsonc`:
+ * `{ "agents": { "requireGitFinalization": true } }`
+ *
+ * `HARNERY_AGENTS_REQUIRE_GIT_FINALIZATION=1|0` overrides per process.
+ */
+export declare function agentsRequireGitFinalization(coordRoot?: string | null): boolean;
+/**
+ * Extra roots whose guarded writes have an explicit end-turn disposition.
+ *
+ * This trust boundary comes only from the project config. A user-global config
+ * may tune ordinary behavior, but it cannot grant one project filesystem
+ * authority outside its coordination root. Paths may be absolute or relative
+ * to the coordination root. Invalid entries are ignored here and fail closed
+ * when the finalization policy validates them.
+ */
+export declare function agentsFinalizationRoots(coordRoot?: string | null): AgentFinalizationRoot[];
+/** The status command automatic prompts and Stop remediation should request. */
+export declare function endOfTurnStatusCommand(coordRoot?: string | null): string;
 /**
  * Whether the host project consented to automatic ripgrep provisioning:
  * `.harnery/config.jsonc` `{ "tools": { "ripgrep": { "autoInstall": true } } }`.
@@ -86,7 +114,7 @@ export declare function presenceRelayUrl(coordRoot?: string | null): string | nu
  * The heartbeat-freshness window (seconds): the age above which the sweeper
  * prunes an agent, and the cutoff the `agents` surface uses to fold stale peers.
  * Precedence:
- *   1. `HARNERY_AGENT_COORD_FRESHNESS` env (canonical), or `HARNERY_AGENT_FRESHNESS` (legacy alias)
+ *   1. `HARNERY_AGENT_COORD_FRESHNESS` env
  *   2. `.harnery/config.jsonc` `coord.freshness_seconds`
  *   3. `600` (10 minutes)
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAsE1C,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AAwFD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAWzE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASvE;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe9E;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAmBpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS3C"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,MAAM,4BAA4B,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,4BAA4B,CAAC;CAC3C;AA+ED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AAuGD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,EAAE,CAY1F;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAIxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAWzE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASvE;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe9E;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAmBpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS3C"}

package/dist/core/config.js

@@ -7,7 +7,7 @@
  *   2. `<project-root>/.harnery/config.jsonc` — project override (authoritative)
  *
  * Fields owned here: `binName` (host CLI name for agent-facing strings),
- * `hooksSetupHint`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
+ * `hooksSetupHint`, `agents`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
  * `coord` (heartbeat freshness), `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), and `sync` (rclone
  * remote/prefix) sections. The `files` deny/override section
@@ -86,6 +86,16 @@ function statMtime(p) {
         return -1;
     }
 }
+/** Cache signature, or null when the file can't be stat'd (missing). */
+function statSignature(p) {
+    try {
+        const stat = statSync(p);
+        return `${stat.mtimeMs}:${stat.ctimeMs}:${stat.size}`;
+    }
+    catch {
+        return null;
+    }
+}
 /** Parse one JSONC config file to an object; missing/unparseable → `{}`. */
 function parseConfigFile(p) {
     try {
@@ -114,7 +124,7 @@ function mergeConfig(base, override) {
     }
     return out;
 }
-// mtime-keyed per-process cache (both layers): a stat is cheap, a parse on every render isn't.
+// Stat-signature-keyed per-process cache (both layers): a stat is cheap, a parse on every render isn't.
 let cache = null;
 /**
  * The effective config for `root`: user-global (`~/.config/harnery/config.jsonc`)
@@ -124,18 +134,18 @@ let cache = null;
 function readConfig(root) {
     const projPath = join(root, ".harnery", "config.jsonc");
     const userPath = userConfigPath();
-    const projMtime = statMtime(projPath);
-    const userMtime = statMtime(userPath);
+    const projSignature = statSignature(projPath);
+    const userSignature = statSignature(userPath);
     if (cache &&
         cache.root === root &&
-        cache.projMtime === projMtime &&
-        cache.userMtime === userMtime) {
+        cache.projSignature === projSignature &&
+        cache.userSignature === userSignature) {
         return cache.cfg;
     }
-    const user = userMtime === -1 ? {} : parseConfigFile(userPath);
-    const project = projMtime === -1 ? {} : parseConfigFile(projPath);
+    const user = userSignature === null ? {} : parseConfigFile(userPath);
+    const project = projSignature === null ? {} : parseConfigFile(projPath);
     const cfg = mergeConfig(user, project);
-    cache = { root, projMtime, userMtime, cfg };
+    cache = { root, projSignature, userSignature, cfg };
     return cfg;
 }
 /**
@@ -193,6 +203,59 @@ export function resolveHooksSetupHint(coordRoot) {
     const hint = readConfig(root).hooksSetupHint;
     return typeof hint === "string" && hint.trim() ? hint.trim() : null;
 }
+/**
+ * Whether the host requires the guarded Git check at the end of tool-using
+ * turns. Default false: Harnery exposes `agents status --end-turn` as a capability
+ * but does not impose a commit-and-push policy on embedding projects.
+ *
+ * `.harnery/config.jsonc`:
+ * `{ "agents": { "requireGitFinalization": true } }`
+ *
+ * `HARNERY_AGENTS_REQUIRE_GIT_FINALIZATION=1|0` overrides per process.
+ */
+export function agentsRequireGitFinalization(coordRoot) {
+    const env = coordEnv("AGENTS_REQUIRE_GIT_FINALIZATION");
+    if (env === "1")
+        return true;
+    if (env === "0")
+        return false;
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return false;
+    return readConfig(root).agents?.requireGitFinalization === true;
+}
+/**
+ * Extra roots whose guarded writes have an explicit end-turn disposition.
+ *
+ * This trust boundary comes only from the project config. A user-global config
+ * may tune ordinary behavior, but it cannot grant one project filesystem
+ * authority outside its coordination root. Paths may be absolute or relative
+ * to the coordination root. Invalid entries are ignored here and fail closed
+ * when the finalization policy validates them.
+ */
+export function agentsFinalizationRoots(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return [];
+    const entries = readProjectConfig(root).agents?.finalizationRoots;
+    if (!Array.isArray(entries))
+        return [];
+    return entries.flatMap((entry) => {
+        if (!entry || typeof entry !== "object")
+            return [];
+        const path = typeof entry.path === "string" ? entry.path.trim() : "";
+        const disposition = entry.disposition;
+        if (!path || (disposition !== "git" && disposition !== "output"))
+            return [];
+        return [{ path, disposition }];
+    });
+}
+/** The status command automatic prompts and Stop remediation should request. */
+export function endOfTurnStatusCommand(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    const suffix = agentsRequireGitFinalization(root) ? " --end-turn" : "";
+    return `${resolveBinName(root)} agents status${suffix}`;
+}
 /**
  * Whether the host project consented to automatic ripgrep provisioning:
  * `.harnery/config.jsonc` `{ "tools": { "ripgrep": { "autoInstall": true } } }`.
@@ -278,13 +341,13 @@ function posIntOr(v, fallback) {
  * The heartbeat-freshness window (seconds): the age above which the sweeper
  * prunes an agent, and the cutoff the `agents` surface uses to fold stale peers.
  * Precedence:
- *   1. `HARNERY_AGENT_COORD_FRESHNESS` env (canonical), or `HARNERY_AGENT_FRESHNESS` (legacy alias)
+ *   1. `HARNERY_AGENT_COORD_FRESHNESS` env
  *   2. `.harnery/config.jsonc` `coord.freshness_seconds`
  *   3. `600` (10 minutes)
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.
  */
 export function coordFreshnessSeconds(coordRoot) {
-    const env = coordEnv("AGENT_COORD_FRESHNESS") ?? coordEnv("AGENT_FRESHNESS");
+    const env = coordEnv("AGENT_COORD_FRESHNESS");
     if (env !== undefined) {
         const n = Number.parseInt(env, 10);
         if (Number.isFinite(n) && n > 0)

package/dist/core/governor/planning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"planning.d.ts","sourceRoot":"","sources":["../../../src/core/governor/planning.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,UAAU,EAQhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAIL,KAAK,mBAAmB,EAUzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAUjD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAsM9B;AAkMD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,CAkHtB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAYtB;AAED;;;;;;;;gEAQgE;AAChE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAoBtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CA4CtB"}
+{"version":3,"file":"planning.d.ts","sourceRoot":"","sources":["../../../src/core/governor/planning.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,UAAU,EAQhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAIL,KAAK,mBAAmB,EAUzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAYjD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAsM9B;AAkMD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,CAkHtB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAYtB;AAED;;;;;;;;gEAQgE;AAChE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAoBtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CA4CtB"}

package/dist/core/governor/planning.js

@@ -10,7 +10,8 @@ const TEMPLATE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 const MAX_RECORD_BYTES = 256 * 1024;
 const MAX_EVENTS_BYTES = 512 * 1024;
 const MAX_REASON = 2_000;
-const PROPOSAL_ROOT_RULE = "proposal.root names one newly proposed work key using a root-capable template; it does not preserve or repeat active_root, which is context only";
+const PROPOSAL_ROOT_RULE = "proposal.root is inferred by Harnery as the single final outcome that no other proposed item depends on; it must use a root-capable template and depend transitively on every other proposed item; it never preserves or repeats active_root, which is context only";
+const PLANNER_ROOT_RULE = "Dependencies point from later work to earlier prerequisites. Do not return proposal.root. Harnery infers it as the single final outcome that no other proposed item depends on; make that outcome use a root-capable template and depend transitively on every other proposed item.";
 export async function runGovernorPlanner(input) {
     const coordRoot = resolve(input.coordRoot);
     const policy = input.record.intent.replanning;
@@ -527,7 +528,7 @@ function plannerScript(coordRoot, record, planId, trigger) {
             : "Return decision=apply with a replacement immutable root graph, or decision=attention when human judgment is required.",
         "Never claim mission completion unless the frozen mission acceptance is met. Never request a workflow outside the frozen template catalog.",
         "Dependencies may name an active work ID or an earlier key in your proposed work array.",
-        `Every proposed item must be reachable from root. ${PROPOSAL_ROOT_RULE}.`,
+        PLANNER_ROOT_RULE,
         "Work keys are lowercase identifiers no longer than 32 characters. Keep titles within 200 characters, objectives within 4000 characters, and each acceptance criterion within 500 characters.",
         `Plan id: ${planId}`,
         `Planning trigger: ${trigger}`,
@@ -1040,12 +1041,6 @@ function planProposalSchema(record, trigger) {
     const applyProperties = {
         decision: { type: "string", enum: ["apply"] },
         rationale,
-        root: {
-            type: "string",
-            minLength: 1,
-            maxLength: 32,
-            pattern: "^[a-z][a-z0-9-]{0,31}$",
-        },
         work: {
             type: "array",
             minItems: 1,
@@ -1053,7 +1048,7 @@ function planProposalSchema(record, trigger) {
             items: workItem,
         },
     };
-    const applyRequired = ["decision", "rationale", "root", "work"];
+    const applyRequired = ["decision", "rationale", "work"];
     if (record.intent.mission) {
         applyProperties.milestone = milestone;
         applyRequired.push("milestone");
@@ -1094,11 +1089,11 @@ function normalizeProposal(planId, raw, record, previouslyApplied, trigger, pres
     const proposedAt = preservedProposedAt ?? new Date().toISOString();
     const decision = enumValue(value.decision, ["apply", "complete", "attention"], "plan decision");
     const rationale = bounded(value.rationale, "plan rationale", MAX_REASON);
-    const root = typeof value.root === "string" ? value.root.trim() : "";
+    const terminalRoot = typeof value.root === "string" ? value.root.trim() : "";
     if (!Array.isArray(value.work))
         throw new Error("plan work must be an array");
     if (decision === "attention" || decision === "complete") {
-        if (root || value.work.length > 0 || value.milestone !== undefined) {
+        if (terminalRoot || value.work.length > 0 || value.milestone !== undefined) {
             throw new Error(`${decision} plan must not contain work or milestone data`);
         }
         if (decision === "complete" && (!record.intent.mission || trigger !== "milestone")) {
@@ -1170,8 +1165,12 @@ function normalizeProposal(planId, raw, record, previouslyApplied, trigger, pres
             template,
         };
     });
-    if (!seen.has(root))
-        throw new Error(`plan root ${root || "(empty)"} is not a proposed key`);
+    const dependedOn = new Set(work.flatMap((item) => item.dependencies.filter((dependency) => seen.has(dependency))));
+    const terminalOutcomes = work.filter((item) => !dependedOn.has(item.key));
+    if (terminalOutcomes.length !== 1) {
+        throw new Error(`plan must have exactly one final outcome; found ${terminalOutcomes.map((item) => item.key).join(", ")}`);
+    }
+    const root = terminalOutcomes[0].key;
     const rootSpec = work.find((item) => item.key === root);
     if (!rootSpec || !policy.templates[rootSpec.template]?.root) {
         throw new Error(`plan root ${root} must use a root-capable template`);

package/dist/core/hooks/adapter/detect.d.ts

@@ -2,10 +2,8 @@ import type { Adapter } from "../events/schema.js";
 /**
  * Resolve the adapter firing the hook. The dispatcher binary is always
  * invoked with `--adapter <name>` per the current wiring in each adapter's
- * settings file. `--harness` remains an accepted alias because settings files
- * written by older releases survive a package upgrade until the consumer
- * re-runs `harn init`. Returns null when neither flag is present; caller falls
- * through to the env-based fallback or skips emission.
+ * settings file. Returns null when the flag is absent; caller falls through to
+ * the environment fallback or skips emission.
  */
 export declare function detectAdapter(argv: readonly string[]): Adapter | null;
 //# sourceMappingURL=detect.d.ts.map

package/dist/core/hooks/adapter/detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/detect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GAAG,IAAI,CAcrE"}
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/detect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GAAG,IAAI,CAWrE"}

package/dist/core/hooks/adapter/detect.js

@@ -2,33 +2,23 @@ import { coordEnv } from "../../../lib/env.js";
 /**
  * Resolve the adapter firing the hook. The dispatcher binary is always
  * invoked with `--adapter <name>` per the current wiring in each adapter's
- * settings file. `--harness` remains an accepted alias because settings files
- * written by older releases survive a package upgrade until the consumer
- * re-runs `harn init`. Returns null when neither flag is present; caller falls
- * through to the env-based fallback or skips emission.
+ * settings file. Returns null when the flag is absent; caller falls through to
+ * the environment fallback or skips emission.
  */
 export function detectAdapter(argv) {
     for (let i = 0; i < argv.length; i++) {
         const a = argv[i];
-        if (a === "--adapter" || a === "--harness") {
+        if (a === "--adapter") {
             return validate(argv[i + 1]);
         }
         if (a.startsWith("--adapter=")) {
             return validate(a.slice("--adapter=".length));
         }
-        if (a.startsWith("--harness=")) {
-            return validate(a.slice("--harness=".length));
-        }
     }
-    return validate(coordEnv("AGENT_COORD_ADAPTER") ?? coordEnv("AGENT_COORD_HARNESS"));
+    return validate(coordEnv("AGENT_COORD_ADAPTER"));
 }
 function validate(v) {
     if (v === "claude-code" || v === "cursor" || v === "codex")
         return v;
-    // Legacy: some adapters use `claude_code` (underscore). Map
-    // it through so the env-based fallback works for callers that haven't
-    // updated yet.
-    if (v === "claude_code")
-        return "claude-code";
     return null;
 }

package/dist/core/hooks/adapter/output.d.ts

@@ -48,5 +48,5 @@ export declare function emitDeny(adapter: Adapter, reason: string): void;
 export declare function emitStopBlock(adapter: Adapter, verdict: {
     reason?: string;
     rule: string;
-}): 0 | 2;
+}, coordRoot?: string): 0 | 2;
 //# sourceMappingURL=output.d.ts.map

package/dist/core/hooks/adapter/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEhF,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIpF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,CAAC,GAAG,CAAC,CAuBjG"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEhF,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIpF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1C,SAAS,CAAC,EAAE,MAAM,GACjB,CAAC,GAAG,CAAC,CAwBP"}

package/dist/core/hooks/adapter/output.js

@@ -18,7 +18,7 @@
  * fire-and-forget. Empty text → no-op (no JSON written).
  */
 import { STOP_REMEDIATION_MARKER } from "../../agents/rules/stop-hook.js";
-import { resolveBinName } from "../../config.js";
+import { endOfTurnStatusCommand, resolveBinName } from "../../config.js";
 /** Emit a context-injection (peer table, wiring check, council pending, …). */
 export function emitContext(adapter, event, text) {
     if (!text || text.length === 0)
@@ -55,7 +55,7 @@ export function emitDeny(adapter, reason) {
  *   We exit 0 so Cursor treats the run as a success and honors the output.
  *   (Confirmed against cursor.com/docs/agent/hooks.)
  */
-export function emitStopBlock(adapter, verdict) {
+export function emitStopBlock(adapter, verdict, coordRoot) {
     if (adapter === "codex")
         return 0;
     const reason = verdict.reason ?? "End-of-turn coordination ritual incomplete.";
@@ -65,11 +65,12 @@ export function emitStopBlock(adapter, verdict) {
         // see in chat that the message came from Harnery rather than from them.
         // Both commands are named because one message that repairs the whole ritual
         // ends the chain in a single followup; the failing rule is context.
-        const bin = resolveBinName();
+        const bin = resolveBinName(coordRoot);
+        const statusCommand = endOfTurnStatusCommand(coordRoot);
         const message = [
             `${STOP_REMEDIATION_MARKER} rule=${verdict.rule}]`,
             reason,
-            `Repair the ritual in this turn: run \`${bin} agents set-task "<short focus>"\` and then \`${bin} agents status\` as your last tool call.`,
+            `Repair the ritual in this turn: run \`${bin} agents set-task "<short focus>"\` and then \`${statusCommand}\` as your last tool call.`,
         ].join("\n");
         process.stdout.write(`${JSON.stringify({ followup_message: message })}\n`);
         return 0;

package/dist/core/hooks/adapter/wiring.d.ts

@@ -84,6 +84,29 @@ export interface AdapterWiringStatus {
  * with no settings file at all, or an unparseable one, is skipped.
  */
 export declare function loadAdapterWiring(projectRoot: string): AdapterWiringStatus[];
+export interface AdapterWiringSummary {
+    /** Adapters carrying at least one harnery hook. */
+    wired: AdapterId[];
+    /**
+     * Adapters carrying none: no settings file at all, or a settings file with
+     * none of ours in it. An unparseable file lands in neither list, since
+     * `loadAdapterWiring` already reports that as drift.
+     */
+    unwired: AdapterId[];
+}
+/**
+ * Classify every known adapter as wired or unwired, without judging whether an
+ * unwired one is a problem.
+ *
+ * `loadAdapterWiring` stays deliberately silent about an adapter with zero
+ * harnery hooks, because a bare settings file is not an opt-out signal and
+ * nagging about it would false-warn every session. That silence is right in
+ * isolation and wrong once you also know the adapter's CLI is installed: then
+ * an agent can start a session here and register nothing. Splitting the fact
+ * from the judgement lets a caller holding both (doctor) tell "not used here"
+ * from "never wired" without changing what counts as drift.
+ */
+export declare function summarizeAdapterWiring(projectRoot: string): AdapterWiringSummary;
 /**
  * Resolve the harnery package version for context in nudges/checks. Walks up
  * from this module to the package root (works under Bun from `src/` and Node

package/dist/core/hooks/adapter/wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5C;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAE3E;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEnF;AAQD,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CA2ChF;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAwC5E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAkBvC"}
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5C;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAE3E;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEnF;AAQD,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CA2ChF;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAwC5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAkBhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAkBvC"}

package/dist/core/hooks/adapter/wiring.js

@@ -136,6 +136,38 @@ export function loadAdapterWiring(projectRoot) {
     }
     return out;
 }
+/**
+ * Classify every known adapter as wired or unwired, without judging whether an
+ * unwired one is a problem.
+ *
+ * `loadAdapterWiring` stays deliberately silent about an adapter with zero
+ * harnery hooks, because a bare settings file is not an opt-out signal and
+ * nagging about it would false-warn every session. That silence is right in
+ * isolation and wrong once you also know the adapter's CLI is installed: then
+ * an agent can start a session here and register nothing. Splitting the fact
+ * from the judgement lets a caller holding both (doctor) tell "not used here"
+ * from "never wired" without changing what counts as drift.
+ */
+export function summarizeAdapterWiring(projectRoot) {
+    const wired = [];
+    const unwired = [];
+    for (const [id, spec] of Object.entries(ADAPTER_SPECS)) {
+        const settingsPath = resolve(projectRoot, spec.settingsFile);
+        if (!existsSync(settingsPath)) {
+            unwired.push(id);
+            continue;
+        }
+        let settings;
+        try {
+            settings = JSON.parse(readFileSync(settingsPath, "utf8"));
+        }
+        catch {
+            continue; // unparseable → already surfaced by loadAdapterWiring
+        }
+        (diffWiring(settings, spec).present.length > 0 ? wired : unwired).push(id);
+    }
+    return { wired, unwired };
+}
 /**
  * Resolve the harnery package version for context in nudges/checks. Walks up
  * from this module to the package root (works under Bun from `src/` and Node

package/dist/core/hooks/cli.d.ts

@@ -1,6 +1,5 @@
 /**
- * `agent-hook` CLI entry point. Phase 2: real canonical-event emission
- * alongside the legacy stream.
+ * `agent-hook` CLI entry point for canonical event emission.
  *
  * Flow:
  *   1. Parse argv → event-name + adapter.

package/dist/core/hooks/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}