harnery 0.31.6 → 0.33.0

package/dist/core/hooks/codex-authorization.js

@@ -0,0 +1,199 @@
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline";
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringArray(value) {
+    return Array.isArray(value)
+        ? value.filter((item) => typeof item === "string")
+        : [];
+}
+function trustStatus(value) {
+    return value === "managed" || value === "trusted" || value === "untrusted" || value === "modified"
+        ? value
+        : null;
+}
+function normalizedPath(value) {
+    return value.replaceAll("\\", "/").replace(/\/$/, "").toLowerCase();
+}
+/**
+ * Convert Codex app-server's `hooks/list` response into the one authorization
+ * state doctor needs. This is intentionally read-only: hashes are observed but
+ * never persisted, and only commands containing Harnery's `agent-hook` binary
+ * are included in the result.
+ */
+export function assessCodexHookList(response, cwd) {
+    if (!isObject(response) || !isObject(response.result) || !Array.isArray(response.result.data)) {
+        return {
+            status: "error",
+            detail: "Codex hooks/list returned an invalid response",
+            hookCount: 0,
+            disabledCount: 0,
+            trustCounts: {},
+        };
+    }
+    const entries = response.result.data.filter(isObject);
+    const expected = normalizedPath(cwd);
+    const entry = entries.find((candidate) => {
+        const candidateCwd = candidate.cwd;
+        return typeof candidateCwd === "string" && normalizedPath(candidateCwd) === expected;
+    }) ?? (entries.length === 1 ? entries[0] : undefined);
+    if (!entry) {
+        return {
+            status: "error",
+            detail: "Codex hooks/list omitted the requested workspace",
+            hookCount: 0,
+            disabledCount: 0,
+            trustCounts: {},
+        };
+    }
+    const errors = stringArray(entry.errors);
+    if (errors.length > 0) {
+        return {
+            status: "error",
+            detail: `Codex could not load hooks: ${errors.join("; ")}`,
+            hookCount: 0,
+            disabledCount: 0,
+            trustCounts: {},
+        };
+    }
+    const hooks = Array.isArray(entry.hooks) ? entry.hooks.filter(isObject) : [];
+    const harneryHooks = hooks.filter((hook) => typeof hook.command === "string" && /(?:^|[\\/\s])agent-hook(?:\s|$)/.test(hook.command));
+    if (harneryHooks.length === 0) {
+        return {
+            status: "not_wired",
+            detail: "Codex discovered no Harnery hooks",
+            hookCount: 0,
+            disabledCount: 0,
+            trustCounts: {},
+        };
+    }
+    const counts = {};
+    let disabledCount = 0;
+    for (const hook of harneryHooks) {
+        const status = trustStatus(hook.trustStatus);
+        if (!status) {
+            return {
+                status: "error",
+                detail: "Codex returned an unknown hook trust state",
+                hookCount: harneryHooks.length,
+                disabledCount,
+                trustCounts: counts,
+            };
+        }
+        counts[status] = (counts[status] ?? 0) + 1;
+        if (hook.enabled !== true)
+            disabledCount += 1;
+    }
+    const reviewCount = (counts.untrusted ?? 0) + (counts.modified ?? 0);
+    const warnings = stringArray(entry.warnings);
+    const warningSuffix = warnings.length > 0 ? `; ${warnings.length} Codex warning(s)` : "";
+    if (reviewCount > 0) {
+        return {
+            status: "review_required",
+            detail: `${reviewCount} of ${harneryHooks.length} Harnery hooks require review` +
+                ` (${counts.untrusted ?? 0} new, ${counts.modified ?? 0} modified)${warningSuffix}`,
+            hookCount: harneryHooks.length,
+            disabledCount,
+            trustCounts: counts,
+        };
+    }
+    if (disabledCount > 0) {
+        return {
+            status: "disabled",
+            detail: `${disabledCount} of ${harneryHooks.length} trusted Harnery hooks are disabled${warningSuffix}`,
+            hookCount: harneryHooks.length,
+            disabledCount,
+            trustCounts: counts,
+        };
+    }
+    return {
+        status: "runnable",
+        detail: `${harneryHooks.length} Harnery hooks trusted and enabled${warningSuffix}`,
+        hookCount: harneryHooks.length,
+        disabledCount: 0,
+        trustCounts: counts,
+    };
+}
+/**
+ * Ask the active Codex CLI for hook authorization through its app-server
+ * protocol. The child is closed as soon as `hooks/list` responds. Harnery never
+ * calls the trust-write method and never reads Codex's private config format.
+ */
+export function probeCodexHookAuthorization(options) {
+    const codexBin = options.codexBin ?? "codex";
+    const args = options.appServerArgs ?? ["app-server"];
+    const timeoutMs = options.timeoutMs ?? 5_000;
+    return new Promise((resolve) => {
+        const child = spawn(codexBin, args, {
+            cwd: options.cwd,
+            env: options.env ?? process.env,
+            stdio: ["pipe", "pipe", "pipe"],
+            windowsHide: true,
+        });
+        const lines = createInterface({ input: child.stdout });
+        let settled = false;
+        let stderr = "";
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            lines.close();
+            child.stdin.end();
+            child.kill();
+            resolve(result);
+        };
+        const fail = (detail) => finish({ status: "error", detail, hookCount: 0, disabledCount: 0, trustCounts: {} });
+        const timer = setTimeout(() => {
+            fail(`Codex hooks/list timed out after ${timeoutMs}ms`);
+        }, timeoutMs);
+        child.stderr.on("data", (chunk) => {
+            if (stderr.length < 4_096)
+                stderr += chunk.toString();
+        });
+        child.stdin.on("error", (error) => fail(`Codex app-server input failed: ${error.message}`));
+        child.on("error", (error) => fail(`could not start Codex app-server: ${error.message}`));
+        child.on("close", (code) => {
+            if (!settled) {
+                const suffix = stderr.trim() ? `: ${stderr.trim().slice(0, 500)}` : "";
+                fail(`Codex app-server exited before hooks/list completed (exit ${code ?? "unknown"})${suffix}`);
+            }
+        });
+        lines.on("line", (line) => {
+            let message;
+            try {
+                const parsed = JSON.parse(line);
+                if (!isObject(parsed))
+                    return;
+                message = parsed;
+            }
+            catch {
+                return;
+            }
+            if (message.id === 0) {
+                if (message.error) {
+                    fail("Codex app-server rejected initialization");
+                    return;
+                }
+                child.stdin.write(`${JSON.stringify({ method: "initialized" })}\n`);
+                child.stdin.write(`${JSON.stringify({ method: "hooks/list", id: 1, params: { cwds: [options.cwd] } })}\n`);
+                return;
+            }
+            if (message.id === 1) {
+                if (message.error) {
+                    fail("Codex app-server rejected hooks/list");
+                    return;
+                }
+                finish(assessCodexHookList(message, options.cwd));
+            }
+        });
+        child.stdin.write(`${JSON.stringify({
+            method: "initialize",
+            id: 0,
+            params: {
+                clientInfo: { name: "harnery_doctor", title: "Harnery Doctor", version: "0.0.0" },
+            },
+        })}\n`);
+    });
+}

package/dist/core/hooks/codex-wsl-bridge.d.ts

@@ -0,0 +1,46 @@
+export interface CodexWslBridgeStatus {
+    ok: boolean;
+    detail: string;
+    threadIdPresent: boolean;
+    wslenvForwardsThreadId: boolean;
+}
+export interface CodexWslBridgeOptions {
+    /** The caller already knows this is a Codex adapter process. */
+    expected?: boolean;
+}
+export interface CodexWslWorkspaceLinkMapping {
+    /** Absolute path seen by Linux-side tools. */
+    linuxRoot: string;
+    /** Forward-slash UNC path that Codex Desktop can use as a Markdown destination. */
+    hostRoot: string;
+    distro: string;
+}
+export interface CodexWslFileLinkTelemetry {
+    /** Markdown destinations that still use the Linux root in a Windows-hosted WSL task. */
+    wsl_linux_file_link_count: number;
+    /** Bounded examples for local diagnosis; omitted when the count is zero. */
+    wsl_linux_file_link_examples?: string[];
+}
+/** Whether an adapter-reported workspace is a Linux path exposed through WSL UNC. */
+export declare function isWslUncPath(value: unknown): boolean;
+/**
+ * Derive the Linux-to-host path pair from the actual adapter workspace. The
+ * roots must overlap so an unrelated WSL UNC path cannot authorize a mapping
+ * for some other checkout.
+ */
+export declare function codexWslWorkspaceLinkMapping(coordRootRaw: string, workspaceCwd: unknown): CodexWslWorkspaceLinkMapping | null;
+/** Fresh adapter context for the model. Shell paths stay Linux-native; only
+ * Markdown destinations use the host-visible root. */
+export declare function renderCodexWslFileLinkContext(coordRoot: string, workspaceCwd: unknown): string;
+/**
+ * Count Markdown links that point at the Linux workspace root even though the
+ * adapter workspace is Windows-visible UNC. This is telemetry only: the Stop
+ * hook must not replace or retry an otherwise complete Codex reply.
+ */
+export declare function codexWslFileLinkTelemetry(coordRoot: string, workspaceCwd: unknown, assistantMessage: string): CodexWslFileLinkTelemetry | null;
+/**
+ * Inspect the environment contract used when Windows-native Codex launches a
+ * Harnery hook or shell inside WSL. Returns null outside that hybrid mode.
+ */
+export declare function inspectCodexWslBridge(env?: NodeJS.ProcessEnv, options?: CodexWslBridgeOptions): CodexWslBridgeStatus | null;
+//# sourceMappingURL=codex-wsl-bridge.d.ts.map

package/dist/core/hooks/codex-wsl-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-wsl-bridge.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/codex-wsl-bridge.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,wFAAwF;IACxF,yBAAyB,EAAE,MAAM,CAAC;IAClC,4EAA4E;IAC5E,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;CACzC;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMpD;AA2BD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,OAAO,GACpB,4BAA4B,GAAG,IAAI,CAarC;AAED;sDACsD;AACtD,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,MAAM,CAS9F;AAmCD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,OAAO,EACrB,gBAAgB,EAAE,MAAM,GACvB,yBAAyB,GAAG,IAAI,CAYlC;AAOD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,GAAG,IAAI,CAsB7B"}

package/dist/core/hooks/codex-wsl-bridge.js

@@ -0,0 +1,137 @@
+/** Whether an adapter-reported workspace is a Linux path exposed through WSL UNC. */
+export function isWslUncPath(value) {
+    if (typeof value !== "string")
+        return false;
+    return (/^\\\\(?:wsl\.localhost|wsl\$)\\/i.test(value) ||
+        /^\\\\\?\\unc\\(?:wsl\.localhost|wsl\$)\\/i.test(value));
+}
+function parseWslUncPath(value) {
+    if (typeof value !== "string")
+        return null;
+    const ordinary = value.replace(/^\\\\\?\\UNC\\/i, "\\\\");
+    const match = ordinary.match(/^\\\\(wsl\.localhost|wsl\$)\\([^\\]+)(?:\\(.*))?$/i);
+    if (!match)
+        return null;
+    const host = match[1];
+    const distro = match[2];
+    const tail = (match[3] ?? "").split("\\").filter(Boolean).join("/");
+    return { host, distro, linuxPath: tail ? `/${tail}` : "/" };
+}
+function trimTrailingSlash(path) {
+    return path === "/" ? path : path.replace(/\/+$/, "");
+}
+function isWithinOrEqual(path, root) {
+    return path === root || path.startsWith(`${root}/`);
+}
+/**
+ * Derive the Linux-to-host path pair from the actual adapter workspace. The
+ * roots must overlap so an unrelated WSL UNC path cannot authorize a mapping
+ * for some other checkout.
+ */
+export function codexWslWorkspaceLinkMapping(coordRootRaw, workspaceCwd) {
+    const parsed = parseWslUncPath(workspaceCwd);
+    const linuxRoot = trimTrailingSlash(coordRootRaw.replace(/\\/g, "/"));
+    if (!parsed || !linuxRoot.startsWith("/"))
+        return null;
+    const linuxCwd = trimTrailingSlash(parsed.linuxPath);
+    if (!isWithinOrEqual(linuxCwd, linuxRoot) && !isWithinOrEqual(linuxRoot, linuxCwd)) {
+        return null;
+    }
+    return {
+        linuxRoot,
+        hostRoot: `//${parsed.host}/${parsed.distro}${linuxRoot}`,
+        distro: parsed.distro,
+    };
+}
+/** Fresh adapter context for the model. Shell paths stay Linux-native; only
+ * Markdown destinations use the host-visible root. */
+export function renderCodexWslFileLinkContext(coordRoot, workspaceCwd) {
+    const mapping = codexWslWorkspaceLinkMapping(coordRoot, workspaceCwd);
+    if (!mapping)
+        return "";
+    return ("Codex WSL file links: this task is hosted by Windows while tools run inside WSL. " +
+        `For clickable local-file Markdown links, replace the Linux workspace root \`${mapping.linuxRoot}\` with the host-visible root \`${mapping.hostRoot}\`. ` +
+        `Example: \`[label](<${mapping.hostRoot}/path/to/file>)\`. ` +
+        "Keep Linux paths unchanged in shell commands and tool inputs.");
+}
+function withoutMarkdownCode(text) {
+    const output = [];
+    let fence = null;
+    for (const line of text.split(/\r?\n/)) {
+        const candidate = line.match(/^\s{0,3}(`{3,}|~{3,})/);
+        if (fence) {
+            if (candidate && candidate[1][0] === fence.marker && candidate[1].length >= fence.length) {
+                fence = null;
+            }
+            output.push("");
+            continue;
+        }
+        if (candidate) {
+            fence = { marker: candidate[1][0], length: candidate[1].length };
+            output.push("");
+            continue;
+        }
+        output.push(line.replace(/(`+)([^`\n]*?)\1/g, ""));
+    }
+    return output.join("\n");
+}
+function markdownDestinations(text) {
+    const out = [];
+    const visible = withoutMarkdownCode(text);
+    const re = /!?\[[^\]\n]*\]\(\s*(?:<([^>\n]+)>|([^\s)\n]+))/g;
+    for (const match of visible.matchAll(re)) {
+        const target = match[1] ?? match[2];
+        if (target)
+            out.push(target);
+    }
+    return out;
+}
+/**
+ * Count Markdown links that point at the Linux workspace root even though the
+ * adapter workspace is Windows-visible UNC. This is telemetry only: the Stop
+ * hook must not replace or retry an otherwise complete Codex reply.
+ */
+export function codexWslFileLinkTelemetry(coordRoot, workspaceCwd, assistantMessage) {
+    const mapping = codexWslWorkspaceLinkMapping(coordRoot, workspaceCwd);
+    if (!mapping)
+        return null;
+    const mismatches = markdownDestinations(assistantMessage).filter((target) => isWithinOrEqual(target, mapping.linuxRoot));
+    return {
+        wsl_linux_file_link_count: mismatches.length,
+        ...(mismatches.length > 0
+            ? { wsl_linux_file_link_examples: mismatches.slice(0, 3).map((path) => path.slice(0, 240)) }
+            : {}),
+    };
+}
+function wslenvForwards(wslenv, variable) {
+    if (!wslenv)
+        return false;
+    return wslenv.split(":").some((entry) => entry.split("/", 1)[0] === variable);
+}
+/**
+ * Inspect the environment contract used when Windows-native Codex launches a
+ * Harnery hook or shell inside WSL. Returns null outside that hybrid mode.
+ */
+export function inspectCodexWslBridge(env = process.env, options = {}) {
+    const inWsl = Boolean(env.WSL_DISTRO_NAME?.trim() || env.WSL_INTEROP?.trim());
+    if (!inWsl)
+        return null;
+    const threadIdPresent = Boolean(env.CODEX_THREAD_ID?.trim());
+    const wslenvForwardsThreadId = wslenvForwards(env.WSLENV, "CODEX_THREAD_ID");
+    if (!options.expected && !threadIdPresent && !wslenvForwardsThreadId)
+        return null;
+    const problems = [];
+    if (!threadIdPresent)
+        problems.push("CODEX_THREAD_ID did not reach WSL");
+    if (!wslenvForwardsThreadId)
+        problems.push("WSLENV does not forward CODEX_THREAD_ID");
+    const distro = env.WSL_DISTRO_NAME?.trim();
+    return {
+        ok: problems.length === 0,
+        detail: problems.length === 0
+            ? `thread identity forwarded through WSLENV${distro ? ` (${distro})` : ""}`
+            : problems.join("; "),
+        threadIdPresent,
+        wslenvForwardsThreadId,
+    };
+}

package/dist/core/hooks/effects/index.d.ts

@@ -40,7 +40,7 @@ export declare function journalArchive(repoRoot: string, owner: string): void;
  * Fire the optional host session-sync extension on turn stop / session end.
  * harnery core has no session-telemetry sink of its own; a host that wants one
  * drops an executable at
- * `scripts/hooks/adapter/claude_code/extensions/session-sync.sh` under the coord
+ * `scripts/hooks/harness/claude-code/extensions/session-sync.sh` under the coord
  * root, and core runs it detached + unref'd so a slow sink never blocks the
  * hook. `force` arrives as argv $1 ("1" on session end, "0" on turn stop) so the
  * host can rate-limit the stop path and force-flush on end. No-op when the

package/dist/core/hooks/effects/index.js

@@ -113,7 +113,7 @@ export function journalArchive(repoRoot, owner) {
  * Fire the optional host session-sync extension on turn stop / session end.
  * harnery core has no session-telemetry sink of its own; a host that wants one
  * drops an executable at
- * `scripts/hooks/adapter/claude_code/extensions/session-sync.sh` under the coord
+ * `scripts/hooks/harness/claude-code/extensions/session-sync.sh` under the coord
  * root, and core runs it detached + unref'd so a slow sink never blocks the
  * hook. `force` arrives as argv $1 ("1" on session end, "0" on turn stop) so the
  * host can rate-limit the stop path and force-flush on end. No-op when the
@@ -123,7 +123,7 @@ export function journalArchive(repoRoot, owner) {
  */
 export function runSessionSyncExtension(repoRoot, force) {
     try {
-        const script = join(repoRoot, "scripts", "hooks", "adapter", "claude_code", "extensions", "session-sync.sh");
+        const script = join(repoRoot, "scripts", "hooks", "harness", "claude-code", "extensions", "session-sync.sh");
         if (!existsSync(script))
             return;
         const child = spawn("bash", [script, force ? "1" : "0"], {
@@ -147,7 +147,7 @@ export function runTurnSummary(repoRoot, owner, sessionId, transcriptPath) {
     try {
         if (!transcriptPath || !existsSync(transcriptPath))
             return;
-        const script = join(repoRoot, "scripts", "hooks", "adapter", "claude_code", "extensions", "turn-summary.sh");
+        const script = join(repoRoot, "scripts", "hooks", "harness", "claude-code", "extensions", "turn-summary.sh");
         if (!existsSync(script))
             return;
         const child = spawn("bash", [script, owner, sessionId, transcriptPath], {

package/dist/core/hooks/events/schema.d.ts

@@ -41,6 +41,14 @@ export type SessionStart = EventEnvelope<"session.start", {
     cwd: string;
     model?: string;
     pid: number;
+    /** Content hash of every repo-authored instruction/config file this
+     * adapter can load for the session's working-path profile. */
+    instruction_bundle_id?: string;
+    /** Parallel hash of canonical AGENTS.md + .agents sources. This diagnoses
+     * sync drift without splitting behavior cohorts when rendered bytes match. */
+    instruction_source_id?: string;
+    instruction_profile_root?: string;
+    instruction_component_count?: number;
     /** Present iff this session is a `workflow run` child: the run id whose
      * transcript owns it (child env HARNERY_WORKFLOW_RUN_ID). Optional-field
      * addition per the schema evolution rules (minor bump). */
@@ -65,10 +73,45 @@ export type UserPromptSubmit = EventEnvelope<"user_prompt.submit", {
     prompt_text: string;
     truncated?: boolean;
 }>;
+/** Direct adapter evidence that the session is waiting for operator input. */
+export type InteractionInputRequested = EventEnvelope<"interaction.input_requested", {
+    request_kind: "permission";
+    tool_name?: string;
+    reason?: string;
+}>;
 export type TurnStop = EventEnvelope<"turn.stop", {
     tool_call_count: number;
     text_length: number;
     status_box_present: boolean;
+    /** Strict variant of status_box_present: assistant text blocks only, so a
+     * tool_result carrying the box (the status command's own output) does not
+     * count. Shadow telemetry while the rule-2/3 detector decision is open;
+     * the Stop verdict does not read it yet. */
+    status_box_present_strict?: boolean;
+    /** Whether the session's suggested name is satisfied as of this turn:
+     * either this reply showed it, or an earlier reply did. Present whenever a
+     * suggested name exists, since the Stop verdict reads it per turn. */
+    session_name_present?: boolean;
+    /** Which suggested name `session_name_present` refers to. A projector
+     * rebuild attributes the sighting to this name instead of to whichever
+     * name is current during the replay. */
+    session_name_present_for?: string;
+    /** Shadow telemetry for Windows-hosted Codex workspaces: Markdown link
+     * destinations that still use the Linux coordination root. */
+    wsl_linux_file_link_count?: number;
+    /** Up to three bounded examples for diagnosing the mismatches locally. */
+    wsl_linux_file_link_examples?: string[];
+}>;
+/** The evaluated end-turn policy outcome. One row per Stop evaluation makes
+ * the future bounce denominator explicit and keeps repeated remediation nags
+ * from being mistaken for additional human turns. */
+export type StopVerdict = EventEnvelope<"stop.verdict", {
+    allow: boolean;
+    rule: string;
+    reason?: string;
+    enforcement_mode: "enforced" | "observe_only" | "exempt" | "fail_open";
+    eligible: boolean;
+    nag_delivered: boolean;
 }>;
 export type CommandStart = EventEnvelope<"command.start", {
     cmd_id: string;
@@ -164,6 +207,10 @@ export type ContextRecoveryInjected = EventEnvelope<"context.recovery.injected",
 export type ClaimAcquire = EventEnvelope<"claim.acquire", {
     path: string;
     mode: "read" | "write";
+    finalization?: {
+        disposition: "git" | "output";
+        root: string;
+    };
 }>;
 export type ClaimRelease = EventEnvelope<"claim.release", {
     path: string;
@@ -177,6 +224,15 @@ export type ClaimConflict = EventEnvelope<"claim.conflict", {
 export type StateTaskSet = EventEnvelope<"state.task_set", {
     task: string;
     cleared: boolean;
+    /** True exactly when this call produced the session name (first non-empty
+     * declaration of a human-facing session); never true with a null name. */
+    first_of_session?: boolean;
+    /** The name produced by this call, for the Stop-hook naming rule. */
+    suggested_session_name?: string | null;
+}>;
+export type StateTaskState = EventEnvelope<"state.task_state", {
+    state: "active" | "blocked" | "done";
+    reason?: string;
 }>;
 export type StateStatusChecked = EventEnvelope<"state.status_checked", {
     format: "box" | "json" | "table";
@@ -270,7 +326,7 @@ export type HealthVerdictFailure = EventEnvelope<"health.verdict_failure", {
     timeout_ms?: number;
     fallback: "allow";
 }>;
-export type Event = SessionStart | SessionEnd | SubagentStart | SubagentStop | UserPromptSubmit | TurnStop | CommandStart | CommandOutput | CommandEnd | Narration | ToolPreUse | ToolPostUse | ToolPostUseFailure | ToolOutputChunk | ImageCaptured | ContextSampled | ContextCheckpointCreated | ContextCompactionStarted | ContextCompactionCompleted | ContextRecoveryInjected | ClaimAcquire | ClaimRelease | ClaimConflict | StateTaskSet | StateStatusChecked | StateJournalAppend | StatePresenceChange | StateHeartbeat | IdentityAssumed | CouncilOpen | CouncilRoundOpen | CouncilContribution | CouncilRoundClose | CouncilClose | CouncilArchive | DecisionBlock | DecisionWarn | DecisionAllow | HealthHeartbeatHeal | HealthPidmapHeal | HealthHeartbeatSwept | HealthVerdictFailure;
+export type Event = SessionStart | SessionEnd | SubagentStart | SubagentStop | UserPromptSubmit | InteractionInputRequested | TurnStop | StopVerdict | CommandStart | CommandOutput | CommandEnd | Narration | ToolPreUse | ToolPostUse | ToolPostUseFailure | ToolOutputChunk | ImageCaptured | ContextSampled | ContextCheckpointCreated | ContextCompactionStarted | ContextCompactionCompleted | ContextRecoveryInjected | ClaimAcquire | ClaimRelease | ClaimConflict | StateTaskSet | StateTaskState | StateStatusChecked | StateJournalAppend | StatePresenceChange | StateHeartbeat | IdentityAssumed | CouncilOpen | CouncilRoundOpen | CouncilContribution | CouncilRoundClose | CouncilClose | CouncilArchive | DecisionBlock | DecisionWarn | DecisionAllow | HealthHeartbeatHeal | HealthPidmapHeal | HealthHeartbeatSwept | HealthVerdictFailure;
 export type EventType = Event["event_type"];
 /**
  * Redaction marker that may be attached to any `data` payload during emission.

package/dist/core/hooks/events/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC;;;4CAG4C;AAC5C,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IACxD,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb;AAKD,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;;+DAE2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;iEAE6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,WAAW,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,aAAa,CAClC,WAAW,EACX;IACE,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,aAAa,CACnC,WAAW,EACX;IACE,OAAO,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,cAAc,EACd;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,eAAe,EACf;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,uBAAuB,EACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,mBAAmB,EACnB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CACF,CAAC;AAGF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IACjF,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;CAChD,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,CAAC;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,aAAa,CACpD,8BAA8B,EAC9B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,CACjD,2BAA2B,EAC3B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,cAAc,GAAG,kBAAkB,CAAC;CACtD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;CAC1D,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAErF;iFACiF;AACjF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,kBAAkB,EAClB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAGF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,sBAAsB,EACtB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAC3C,qBAAqB,EACrB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,UAAU,EAAE,MAAM,CAAC;CACpB,CACF,CAAC;AAGF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,YAAY,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB,CACF,CAAC;AAIF,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,cAAc,GACd,wBAAwB,GACxB,wBAAwB,GACxB,0BAA0B,GAC1B,uBAAuB,GACvB,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,YAAY,GACZ,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,cAAc,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC;;;4CAG4C;AAC5C,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IACxD,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb;AAKD,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;kEAC8D;IAC9D,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;kFAC8E;IAC9E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;+DAE2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;iEAE6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,WAAW,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,yBAAyB,GAAG,aAAa,CACnD,6BAA6B,EAC7B;IACE,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,aAAa,CAClC,WAAW,EACX;IACE,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;gDAG4C;IAC5C,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;;0EAEsE;IACtE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;4CAEwC;IACxC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;kEAC8D;IAC9D,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;CACzC,CACF,CAAC;AAEF;;qDAEqD;AACrD,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,UAAU,GAAG,cAAc,GAAG,QAAQ,GAAG,WAAW,CAAC;IACvE,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,aAAa,CACnC,WAAW,EACX;IACE,OAAO,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,cAAc,EACd;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,eAAe,EACf;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,uBAAuB,EACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,mBAAmB,EACnB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CACF,CAAC;AAGF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IACjF,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;CAChD,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,CAAC;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAClD,4BAA4B,EAC5B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,aAAa,CACpD,8BAA8B,EAC9B;IACE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,CACjD,2BAA2B,EAC3B;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,cAAc,GAAG,kBAAkB,CAAC;CACtD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,KAAK,GAAG,QAAQ,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;CAC1D,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,kBAAkB,EAClB;IACE,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAErF;iFACiF;AACjF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,kBAAkB,EAClB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CACF,CAAC;AAGF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,sBAAsB,EACtB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAC3C,qBAAqB,EACrB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,UAAU,EAAE,MAAM,CAAC;CACpB,CACF,CAAC;AAGF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,YAAY,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB,CACF,CAAC;AAIF,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,yBAAyB,GACzB,QAAQ,GACR,WAAW,GACX,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,cAAc,GACd,wBAAwB,GACxB,wBAAwB,GACxB,0BAA0B,GAC1B,uBAAuB,GACvB,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,YAAY,GACZ,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,cAAc,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/core/hooks/resolve/owner.d.ts

@@ -11,6 +11,12 @@
  *      events; session_id is the parent-shape default.
  *   3. PID-map lookup at `.harnery/pid-map/<pid>` for our own pid, then ppid
  *      chain (up to 20 hops).
+ *   4. `CODEX_THREAD_ID` env var, accepted only when a live heartbeat by that
+ *      id exists under `.harnery/active/`. Codex sessions use their thread id
+ *      as the heartbeat instance_id, and a Windows→WSL bridge forwards the
+ *      var into process trees that descend from no registered process — the
+ *      one place the pid walk can never land. Validated so a garbage value
+ *      cannot fabricate an identity.
  *
  * Returns null when nothing resolves. Callers must treat null as "no owner"
  * and skip the event (Phase 2 fail-safe; Phase 3 will mint a temporary owner
@@ -21,7 +27,7 @@ export declare function resolveOwner(opts: {
     coordRoot: string;
 }): {
     instance_id: string;
-    source: "env" | "payload" | "pidmap-self" | "pidmap-ancestor";
+    source: "env" | "payload" | "pidmap-self" | "pidmap-ancestor" | "codex-env";
 } | null;
 /**
  * Find the parent owner for a subagent invocation. The per-shell marker at

package/dist/core/hooks/resolve/owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,iBAAiB,CAAA;CAAE,GAAG,IAAI,CAoDhG;AA2BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUxF;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}
+{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,iBAAiB,GAAG,WAAW,CAAC;CAC7E,GAAG,IAAI,CAgEP;AA2BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUxF;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}

package/dist/core/hooks/resolve/owner.js

@@ -16,6 +16,12 @@ import { checkPidToken } from "../../agents/state/proc-start.js";
  *      events; session_id is the parent-shape default.
  *   3. PID-map lookup at `.harnery/pid-map/<pid>` for our own pid, then ppid
  *      chain (up to 20 hops).
+ *   4. `CODEX_THREAD_ID` env var, accepted only when a live heartbeat by that
+ *      id exists under `.harnery/active/`. Codex sessions use their thread id
+ *      as the heartbeat instance_id, and a Windows→WSL bridge forwards the
+ *      var into process trees that descend from no registered process — the
+ *      one place the pid walk can never land. Validated so a garbage value
+ *      cannot fabricate an identity.
  *
  * Returns null when nothing resolves. Callers must treat null as "no owner"
  * and skip the event (Phase 2 fail-safe; Phase 3 will mint a temporary owner
@@ -71,6 +77,15 @@ export function resolveOwner(opts) {
             hops++;
         }
     }
+    // Tier 4: Codex thread id, heartbeat-validated. Last because the pid map is
+    // more specific when it answers — an inherited env var can outlive the
+    // process tree it described, a live pid-map row cannot.
+    const codexThreadId = process.env.CODEX_THREAD_ID?.trim();
+    if (codexThreadId &&
+        /^[A-Za-z0-9-]+$/.test(codexThreadId) &&
+        existsSync(join(opts.coordRoot, ".harnery", "active", `${codexThreadId}.json`))) {
+        return { instance_id: codexThreadId, source: "codex-env" };
+    }
     return null;
 }
 function readPpid(pid) {