harnery 0.32.0 → 0.33.0

package/dist/core/agents/state/heartbeat-writer.d.ts

@@ -12,6 +12,7 @@
  * Owner identity invariant: every action operates on `.harnery/active/<instance_id>.json`
  * (the file IS the heartbeat). No mutations happen elsewhere.
  */
+import { type AgentActivity, type SessionStateEvidenceEvent, type TaskState } from "./session-state.js";
 export interface Heartbeat {
     schema_version?: number;
     instance_id: string;
@@ -27,6 +28,12 @@ export interface Heartbeat {
     files_touched: string[];
     task?: string;
     task_updated_at?: string | null;
+    activity?: AgentActivity;
+    activity_updated_at?: string;
+    activity_source?: string;
+    task_state?: TaskState;
+    task_state_updated_at?: string;
+    task_state_reason?: string;
     /** Session name built on the first non-empty set-task (never rebuilt). Its
      * presence is the "this session has been named" signal the prompt-context
      * nudge and the Stop-hook naming rule key on. */
@@ -50,6 +57,12 @@ export interface Heartbeat {
     [extra: string]: unknown;
 }
 export declare function readHeartbeat(coordRoot: string, instanceId: string): Heartbeat | null;
+/** Apply one evidence event to the live state fields without draining the
+ * global event stream. This keeps permission prompts current while avoiding
+ * unrelated projector side effects before a tool authorization verdict. */
+export declare function stampSessionStateEvent(coordRoot: string, instanceId: string, event: Omit<SessionStateEvidenceEvent, "data"> & {
+    data: unknown;
+}): Heartbeat | null;
 export declare function setTask(coordRoot: string, instanceId: string, task: string): Heartbeat | null;
 /**
  * Build the copy-pasteable session name from the coord identity + the agent's
@@ -60,6 +73,8 @@ export declare function buildSuggestedName(agentName: string, descriptionParts:
     suggestedName: string;
     description: string;
 } | null;
+/** Build the operator-facing title projected from an explicit task lifecycle. */
+export declare function buildLifecycleSuggestedName(agentName: string, task: string | undefined, state: TaskState): string | null;
 /** Stamp the sighting once the suggested name has been observed in assistant
  * reply text; later turns skip the transcript scan. Records WHICH name was seen,
  * because the skip is only valid for that one: if a later set-task mints a

package/dist/core/agents/state/heartbeat-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA4DH,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;qDAEiD;IACjD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;oDACgD;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;qEAEiE;IACjE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAiBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQrF;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAmB7F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAYlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAsChG;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS5E;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAuBnF;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,SAAS,GAAG,IAAI,CAsElB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,SAAS,CAwBX;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CAOlB"}
+{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,yBAAyB,EAC9B,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAgD5B,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;qDAEiD;IACjD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;oDACgD;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;qEAEiE;IACjE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAiBD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAQrF;AAED;;2EAE2E;AAC3E,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjE,SAAS,GAAG,IAAI,CAiBlB;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAmB7F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED,iFAAiF;AACjF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,SAAS,GACf,MAAM,GAAG,IAAI,CAMf;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAYlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAsChG;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS5E;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAuBnF;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,SAAS,GAAG,IAAI,CAsElB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,SAAS,CAwBX;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CAOlB"}

package/dist/core/agents/state/heartbeat-writer.js

@@ -15,6 +15,7 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
 import { emit } from "../events/emit.js";
+import { applySessionStateEvent, } from "./session-state.js";
 /** Inline adapter normalizer (mirrors canonical-emit.normalizeAdapter), kept
  * local so the writer's only cross-module dep is the in-process emit(). */
 function adapterOf(platform) {
@@ -80,6 +81,26 @@ export function readHeartbeat(coordRoot, instanceId) {
         return null;
     }
 }
+/** Apply one evidence event to the live state fields without draining the
+ * global event stream. This keeps permission prompts current while avoiding
+ * unrelated projector side effects before a tool authorization verdict. */
+export function stampSessionStateEvent(coordRoot, instanceId, event) {
+    return mutate(coordRoot, instanceId, (heartbeat) => {
+        const data = typeof event.data === "object" && event.data !== null && !Array.isArray(event.data)
+            ? event.data
+            : {};
+        const state = applySessionStateEvent(heartbeat, { ...event, data });
+        return {
+            ...heartbeat,
+            activity: state.activity,
+            activity_updated_at: state.activity_updated_at,
+            activity_source: state.activity_source,
+            task_state: state.task_state,
+            task_state_updated_at: state.task_state_updated_at,
+            task_state_reason: state.task_state_reason,
+        };
+    });
+}
 function mutate(coordRoot, instanceId, fn) {
     const hb = readHeartbeat(coordRoot, instanceId);
     if (!hb)
@@ -120,6 +141,17 @@ export function buildSuggestedName(agentName, descriptionParts) {
     const name = agentName?.trim() || "unknown";
     return { suggestedName: `Agent ${name} - ${description}`, description };
 }
+/** Build the operator-facing title projected from an explicit task lifecycle. */
+export function buildLifecycleSuggestedName(agentName, task, state) {
+    const built = buildSuggestedName(agentName, task ? [task] : []);
+    if (!built)
+        return null;
+    if (state === "blocked")
+        return `[BLOCKED] - ${built.suggestedName}`;
+    if (state === "done")
+        return `[DONE] - ${built.suggestedName}`;
+    return built.suggestedName;
+}
 /** Stamp the sighting once the suggested name has been observed in assistant
  * reply text; later turns skip the transcript scan. Records WHICH name was seen,
  * because the skip is only valid for that one: if a later set-task mints a

package/dist/core/agents/state/session-state.d.ts

@@ -0,0 +1,44 @@
+/** What the agent is doing now. `unknown` is evidence-safe, not an error. */
+export type AgentActivity = "unknown" | "working" | "needs_input" | "idle";
+/** Whether the declared task remains open. Activity never changes this axis. */
+export type TaskState = "active" | "blocked" | "done";
+/** Raw fields stored in a live heartbeat and rebuilt from canonical events. */
+export interface SessionStateFields {
+    activity?: AgentActivity;
+    activity_updated_at?: string;
+    activity_source?: string;
+    task_state?: TaskState;
+    task_state_updated_at?: string;
+    task_state_reason?: string;
+}
+/** Reader-facing state with compatibility defaults applied. */
+export interface SessionState extends SessionStateFields {
+    activity: AgentActivity;
+    task_state: TaskState;
+}
+export interface SessionStateSelector {
+    instance_id?: string;
+    session_id?: string;
+}
+export interface SessionStateEvidenceEvent {
+    event_type: string;
+    ts: string;
+    data?: Record<string, unknown>;
+    instance_id?: string;
+    session_id?: string;
+}
+/**
+ * Apply one canonical event to the two independent state axes.
+ *
+ * The table is deliberately evidence-only. Output chunks, post-tool events,
+ * narration, coordination commands, and elapsed time cannot clear an observed
+ * input wait. A command start only counts as progress when the session was
+ * already inside an open turn (`working` or `needs_input`).
+ */
+export declare function applySessionStateEvent(current: Readonly<SessionStateFields>, event: SessionStateEvidenceEvent): SessionStateFields;
+/**
+ * Rebuild both axes from canonical events after a heartbeat has disappeared.
+ * Events may be the whole ledger or an already-filtered session slice.
+ */
+export declare function foldSessionState(events: readonly SessionStateEvidenceEvent[], selector?: SessionStateSelector): SessionState;
+//# sourceMappingURL=session-state.d.ts.map

package/dist/core/agents/state/session-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-state.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/session-state.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,CAAC;AAE3E,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EACrC,KAAK,EAAE,yBAAyB,GAC/B,kBAAkB,CAkCpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,yBAAyB,EAAE,EAC5C,QAAQ,GAAE,oBAAyB,GAClC,YAAY,CAcd"}

package/dist/core/agents/state/session-state.js

@@ -0,0 +1,81 @@
+const TERMINAL_ACTIVITY_EVENTS = new Set(["session.end", "subagent.stop", "turn.stop"]);
+/**
+ * Apply one canonical event to the two independent state axes.
+ *
+ * The table is deliberately evidence-only. Output chunks, post-tool events,
+ * narration, coordination commands, and elapsed time cannot clear an observed
+ * input wait. A command start only counts as progress when the session was
+ * already inside an open turn (`working` or `needs_input`).
+ */
+export function applySessionStateEvent(current, event) {
+    const next = { ...current };
+    if (event.event_type === "session.start" || event.event_type === "subagent.start") {
+        setActivity(next, "idle", event);
+    }
+    else if (event.event_type === "user_prompt.submit" || event.event_type === "tool.pre_use") {
+        setActivity(next, "working", event);
+    }
+    else if (event.event_type === "interaction.input_requested") {
+        setActivity(next, "needs_input", event);
+    }
+    else if (event.event_type === "command.start" &&
+        (current.activity === "working" || current.activity === "needs_input")) {
+        setActivity(next, "working", event);
+    }
+    else if (TERMINAL_ACTIVITY_EVENTS.has(event.event_type)) {
+        setActivity(next, "idle", event);
+    }
+    if (event.event_type === "state.task_state") {
+        const data = event.data ?? {};
+        const state = field(data, "state");
+        if (state === "active" || state === "blocked" || state === "done") {
+            next.task_state = state;
+            next.task_state_updated_at = event.ts;
+            const reason = field(data, "reason");
+            if (typeof reason === "string" && reason.length > 0) {
+                next.task_state_reason = reason;
+            }
+            else {
+                delete next.task_state_reason;
+            }
+        }
+    }
+    return next;
+}
+/**
+ * Rebuild both axes from canonical events after a heartbeat has disappeared.
+ * Events may be the whole ledger or an already-filtered session slice.
+ */
+export function foldSessionState(events, selector = {}) {
+    const ordered = events
+        .map((event, index) => ({ event, index }))
+        .filter(({ event }) => matches(event, selector))
+        .sort((a, b) => timestamp(a.event) - timestamp(b.event) || a.index - b.index);
+    let fields = {};
+    for (const { event } of ordered)
+        fields = applySessionStateEvent(fields, event);
+    return {
+        ...fields,
+        activity: fields.activity ?? "unknown",
+        task_state: fields.task_state ?? "active",
+    };
+}
+function setActivity(target, activity, event) {
+    target.activity = activity;
+    target.activity_updated_at = event.ts;
+    target.activity_source = event.event_type;
+}
+function matches(event, selector) {
+    if (selector.instance_id && event.instance_id !== selector.instance_id)
+        return false;
+    if (selector.session_id && event.session_id !== selector.session_id)
+        return false;
+    return true;
+}
+function timestamp(event) {
+    const parsed = Date.parse(event.ts);
+    return Number.isFinite(parsed) ? parsed : 0;
+}
+function field(data, key) {
+    return data[key];
+}

package/dist/core/hooks/adapter/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAYzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAWpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAUnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAI1C,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAWpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAqBxD,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAYzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAWpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAWnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAI1C,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAWpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAqBxD,CAAC"}

package/dist/core/hooks/adapter/events.js

@@ -42,6 +42,7 @@ export const CURSOR_EVENTS = [
 export const CODEX_EVENTS = [
     { settingsKey: "SessionStart", subcommand: "session-start" },
     { settingsKey: "PreToolUse", subcommand: "pre-tool-use" },
+    { settingsKey: "PermissionRequest", subcommand: "permission-request" },
     { settingsKey: "PostToolUse", subcommand: "post-tool-use" },
     { settingsKey: "UserPromptSubmit", subcommand: "user-prompt-submit" },
     { settingsKey: "SubagentStart", subcommand: "sub-agent-start" },

package/dist/core/hooks/adapter/parse.d.ts

@@ -63,5 +63,5 @@ export declare function normalizeEventName(eventName: string): {
     event_type: NormalizedEventType;
     intra_turn: boolean;
 } | null;
-export type NormalizedEventType = "session.start" | "session.end" | "user_prompt.submit" | "turn.stop" | "subagent.start" | "subagent.stop" | "tool.pre_use" | "tool.post_use" | "tool.post_use_failure" | "context.compaction.started" | "context.compaction.completed";
+export type NormalizedEventType = "session.start" | "session.end" | "user_prompt.submit" | "turn.stop" | "subagent.start" | "subagent.stop" | "tool.pre_use" | "interaction.input_requested" | "tool.post_use" | "tool.post_use_failure" | "context.compaction.started" | "context.compaction.completed";
 //# sourceMappingURL=parse.d.ts.map

package/dist/core/hooks/adapter/parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CA+ChF;AAQD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,EAAE,OAAO,GACjB,MAAM,GAAG,SAAS,CASpB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAO7E;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB;IAAE,UAAU,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAiCjE;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,WAAW,GACX,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,eAAe,GACf,uBAAuB,GACvB,4BAA4B,GAC5B,8BAA8B,CAAC"}
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CA+ChF;AAQD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,EAAE,OAAO,GACjB,MAAM,GAAG,SAAS,CASpB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAO7E;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB;IAAE,UAAU,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAmCjE;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,WAAW,GACX,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,6BAA6B,GAC7B,eAAe,GACf,uBAAuB,GACvB,4BAA4B,GAC5B,8BAA8B,CAAC"}

package/dist/core/hooks/adapter/parse.js

@@ -139,6 +139,8 @@ export function normalizeEventName(eventName) {
         case "pre-tool-use":
         case "before-shell-execution":
             return { event_type: "tool.pre_use", intra_turn: true };
+        case "permission-request":
+            return { event_type: "interaction.input_requested", intra_turn: true };
         case "post-tool-use":
             return { event_type: "tool.post_use", intra_turn: true };
         case "post-tool-use-failure":

package/dist/core/hooks/cli.js

@@ -20,12 +20,14 @@ import { spawnSync } from "node:child_process";
 import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { coordEnv } from "../../lib/env.js";
+import { buildInstructionBundle } from "../../lib/instructions/bundle.js";
 import { replayCodexJsonl } from "../agents/codex-replay.js";
 import { coordBinPath } from "../agents/coord-bin.js";
 import { consumeSince, writeCursor } from "../agents/events/consume.js";
 import { classifyWriteClaimFinalization, formatWriteClaimFinalizationDenial, } from "../agents/finalization.js";
 import { evaluateStopHook } from "../agents/rules/stop-hook.js";
 import { projectHeartbeats } from "../agents/state/heartbeat-projector.js";
+import { stampSessionStateEvent } from "../agents/state/heartbeat-writer.js";
 import { writePidmapRow } from "../agents/state/pidmap.js";
 import { shellMutationPaths } from "../agents/state/shell-mutation.js";
 import { agentsRequireGitFinalization, resolveBinName } from "../config.js";
@@ -210,6 +212,7 @@ function buildEventData(eventType, ctx) {
             if (adapterPid) {
                 writePidmapViaAgentCoord(ctx.coordRoot, adapterPid, ctx.instanceId, adapterPlatform);
             }
+            const bundle = safeInstructionBundle(ctx.coordRoot, p?.cwd ?? process.cwd(), ctx.adapter);
             return {
                 started_at: new Date().toISOString(),
                 cwd: p?.cwd ?? process.cwd(),
@@ -223,6 +226,14 @@ function buildEventData(eventType, ctx) {
                 name: assigned?.name,
                 kind: "session",
                 agent_id: ctx.instanceId,
+                ...(bundle
+                    ? {
+                        instruction_bundle_id: bundle.instruction_bundle_id,
+                        instruction_source_id: bundle.canonical_source_id,
+                        instruction_profile_root: bundle.profile_root,
+                        instruction_component_count: bundle.components.length,
+                    }
+                    : {}),
                 // Recorded fork lineage rides the canonical event too, so full replay
                 // and derived readers converge on the same parent linkage that
                 // .name-history carries (the ADR 0017 dual-write pattern).
@@ -340,6 +351,15 @@ function buildEventData(eventType, ctx) {
                 ...(clamped.truncated ? { truncated: true } : {}),
             };
         }
+        case "interaction.input_requested": {
+            const description = extractToolDescription(p?.tool_input);
+            const reason = description ? clampString(description, 500).value : undefined;
+            return {
+                request_kind: "permission",
+                tool_name: p?.tool_name,
+                ...(reason ? { reason } : {}),
+            };
+        }
         case "tool.post_use": {
             const toolName = p?.tool_name ?? "unknown";
             const summary = summarizeOutput(p?.tool_response);
@@ -386,6 +406,15 @@ function buildEventData(eventType, ctx) {
         }
     }
 }
+function safeInstructionBundle(coordRoot, cwd, adapter) {
+    try {
+        return buildInstructionBundle({ coordRoot, cwd, adapter });
+    }
+    catch (err) {
+        logError(coordRoot, err, { phase: "instruction-bundle-identity" });
+        return null;
+    }
+}
 function objectRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value)
         ? value
@@ -488,6 +517,19 @@ async function main() {
         owner_source: owner.source,
         event_id: envelope.event_id,
     });
+    // Activity is only useful while it is current. Stamp prompt and permission
+    // evidence directly from this envelope rather than draining the global
+    // projector: a drain here could apply a tool event before its authorization
+    // verdict. Tool progress is stamped later, after the guard allows it.
+    if (norm.event_type === "user_prompt.submit" ||
+        norm.event_type === "interaction.input_requested") {
+        try {
+            stampSessionStateEvent(coordRoot, owner.instance_id, envelope);
+        }
+        catch (err) {
+            logError(coordRoot, err, { phase: "activity-projection" });
+        }
+    }
     // Context telemetry is opportunistic and truthful: only persist a sample
     // when the adapter payload actually exposes usage/window data. Identical
     // measurements are de-duplicated before they reach the canonical stream.
@@ -811,6 +853,23 @@ async function main() {
             bypass: coordEnv("AGENT_COORD_BYPASS_STOP") === "1",
             workflow_child: coordEnv("WORKFLOW_CHILD") === "1",
         });
+        const enforcementMode = stopEnforcementMode(verdict.rule);
+        emit(coordRoot, {
+            event_type: "stop.verdict",
+            instance_id: owner.instance_id,
+            session_id: sessionId,
+            turn_id: payload?.turn_id,
+            parent_turn_id: payload?.parent_turn_id,
+            adapter,
+            data: {
+                allow: verdict.allow,
+                rule: verdict.rule,
+                ...(verdict.reason ? { reason: verdict.reason } : {}),
+                enforcement_mode: enforcementMode,
+                eligible: enforcementMode === "enforced",
+                nag_delivered: enforcementMode === "enforced" && !verdict.allow,
+            },
+        });
         if (!verdict.allow) {
             // Adapter-aware enforcement channel: Claude Code / Codex honor exit-2 +
             // stderr as a turn block; Cursor ignores exit codes (fail-open) and
@@ -894,12 +953,21 @@ async function main() {
         // apply_patch (codex) parses paths from the patch body and runs verdict
         // per-path; Edit/Write/NotebookEdit resolve a single target. Non-write tools
         // (incl. Agent) yield no targets and pass through with no deny.
+        let guardAllowed = true;
         try {
-            await runPreToolUseGuard(coordRoot, owner.instance_id, sessionId, data, adapter);
+            guardAllowed = await runPreToolUseGuard(coordRoot, owner.instance_id, sessionId, data, adapter);
         }
         catch (err) {
             logError(coordRoot, err, { phase: "pre-tool-use-guard" });
         }
+        if (guardAllowed) {
+            try {
+                stampSessionStateEvent(coordRoot, owner.instance_id, envelope);
+            }
+            catch (err) {
+                logError(coordRoot, err, { phase: "activity-projection" });
+            }
+        }
         // Shell-mutation warn (warn-only, never blocks). Was the cursor
         // beforeShellExecution + codex preToolUse-Bash shell-mutation-claim-log in
         // the per-adapter shell adapters. Cursor sends the command at payload.command;
@@ -974,11 +1042,20 @@ async function main() {
     }
     return 0;
 }
+function stopEnforcementMode(rule) {
+    if (rule === "stop-hook.codex_observe_only")
+        return "observe_only";
+    if (rule === "stop-hook.fail_open" || rule === "stop-hook.no_history")
+        return "fail_open";
+    if (rule === "stop-hook.bypass" || rule === "stop-hook.workflow_child")
+        return "exempt";
+    return "enforced";
+}
 async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapter) {
     const toolName = data.tool_name ?? "";
     const rawTargets = collectGuardTargets(toolName, data);
     if (rawTargets.length === 0)
-        return;
+        return true;
     let targets;
     if (agentsRequireGitFinalization(coordRoot)) {
         const decisions = rawTargets.map((path) => classifyWriteClaimFinalization(coordRoot, path));
@@ -986,7 +1063,7 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
         if (denied && !denied.allow) {
             const { emitDeny } = await import("./adapter/output.js");
             emitDeny(adapter, formatWriteClaimFinalizationDenial(denied, resolveBinName(coordRoot)));
-            return;
+            return false;
         }
         const allowed = decisions.filter((decision) => decision.allow);
         targets = allowed.map((decision) => ({
@@ -1001,14 +1078,15 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
             .map((path) => ({ path }));
     }
     if (targets.length === 0)
-        return;
+        return true;
     const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
     if (!existsSync(agentCoordBin)) {
         if (agentsRequireGitFinalization(coordRoot)) {
             const { emitDeny } = await import("./adapter/output.js");
             emitDeny(adapter, "Harnery denied the write before mutation because the claim coordinator is unavailable; repair the project's Harnery installation and retry.");
+            return false;
         }
-        return;
+        return true;
     }
     // For apply_patch (multi-file), collect siblings so the deny reason names
     // them. For single-file tools the array has one entry.
@@ -1048,7 +1126,7 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
             }
             const { emitDeny } = await import("./adapter/output.js");
             emitDeny(adapter, reason);
-            return;
+            return false;
         }
         // The verdict mutates the live heartbeat immediately, but that file is a
         // projection and can be rebuilt at any later hook. Persist the acquisition
@@ -1068,6 +1146,7 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
             },
         });
     }
+    return true;
 }
 /** Canonicalize a path to monorepo-relative form. Absolute paths under
  * coordRoot get the prefix stripped; relative paths pass through (assumed
@@ -1384,11 +1463,16 @@ async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionI
         // staleness nudges; Claude Code enforces those via its Stop transcript.
         // Codex gets a fresh status-footer reminder on every prompt. Its Stop hook
         // stays observe-only, so missing the footer never replaces the answer.
+        // Claude Code + Cursor (the Stop-ENFORCING adapters) get a fresh per-turn
+        // ritual reminder: satisfying the contract up front is far cheaper than
+        // the bounce-and-retry the Stop hook otherwise forces.
         args.push("--session-name-nudge");
         if (adapter === "cursor" || adapter === "codex")
             args.push("--task-nudge");
         if (adapter === "codex")
             args.push("--status-footer-nudge");
+        if (adapter === "claude-code" || adapter === "cursor")
+            args.push("--turn-ritual-nudge", adapter);
         const result = spawnSync(agentCoordBin, args, { encoding: "utf8", timeout: 3000 });
         if (result.status === 0 && result.stdout)
             additionalContext = result.stdout.trim();

package/dist/core/hooks/codex-authorization.d.ts

@@ -0,0 +1,30 @@
+export type CodexHookTrustStatus = "managed" | "trusted" | "untrusted" | "modified";
+export type CodexHookAuthorizationStatus = "runnable" | "review_required" | "disabled" | "not_wired" | "error";
+export interface CodexHookAuthorizationResult {
+    status: CodexHookAuthorizationStatus;
+    detail: string;
+    hookCount: number;
+    disabledCount: number;
+    trustCounts: Partial<Record<CodexHookTrustStatus, number>>;
+}
+export interface CodexHookAuthorizationProbeOptions {
+    cwd: string;
+    codexBin?: string;
+    appServerArgs?: string[];
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}
+/**
+ * Convert Codex app-server's `hooks/list` response into the one authorization
+ * state doctor needs. This is intentionally read-only: hashes are observed but
+ * never persisted, and only commands containing Harnery's `agent-hook` binary
+ * are included in the result.
+ */
+export declare function assessCodexHookList(response: unknown, cwd: string): CodexHookAuthorizationResult;
+/**
+ * Ask the active Codex CLI for hook authorization through its app-server
+ * protocol. The child is closed as soon as `hooks/list` responds. Harnery never
+ * calls the trust-write method and never reads Codex's private config format.
+ */
+export declare function probeCodexHookAuthorization(options: CodexHookAuthorizationProbeOptions): Promise<CodexHookAuthorizationResult>;
+//# sourceMappingURL=codex-authorization.d.ts.map

package/dist/core/hooks/codex-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-authorization.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/codex-authorization.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpF,MAAM,MAAM,4BAA4B,GACpC,UAAU,GACV,iBAAiB,GACjB,UAAU,GACV,WAAW,GACX,OAAO,CAAC;AAEZ,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,4BAA4B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA0BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,4BAA4B,CAqGhG;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,CAoFvC"}