harnery 0.32.0 → 0.34.0

package/dist/commands/ledger-v3.js

@@ -0,0 +1,91 @@
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { initializeEventLedgerV3, readEventV3ControlState, recoverInvalidEventLedgerV3, sha256V3, } from "../core/events/v3/index.js";
+/** Inspect or initialize the universal V3 event ledger. */
+export function registerLedgerV3Command(program, emit, context) {
+    const command = program
+        .command("ledger-v3")
+        .description("Inspect or initialize the universal event-ledger V3 epoch");
+    command
+        .command("status")
+        .description("Read the V3 control boundary without changing it")
+        .action(() => {
+        try {
+            emit.data(readEventV3ControlState(coordRoot(context)));
+        }
+        catch (error) {
+            emitFailure(emit, "ledger_v3_status_failed", error);
+        }
+    });
+    command
+        .command("initialize")
+        .description("Create V3 control state, or archive and replace the current V3 epoch")
+        .option("--root <path>", "Explicit coordination root")
+        .requiredOption("--approval-record-id <id>", "Durable approval record identifier")
+        .option("--force-new-epoch", "Archive the current V3 epoch and create a new one")
+        .action((options) => {
+        try {
+            const root = resolve(options.root ?? coordRoot(context));
+            emit.data(initializeEventLedgerV3({
+                coordRoot: root,
+                harneryBuild: repositoryBuild(resolve(import.meta.dir, "..", "..")),
+                hostBuild: repositoryBuild(root),
+                configDigest: configDigest(root),
+                approvalRecordId: options.approvalRecordId,
+                forceNewEpoch: options.forceNewEpoch === true,
+            }));
+        }
+        catch (error) {
+            emitFailure(emit, "ledger_v3_initialize_failed", error);
+        }
+    });
+    command
+        .command("recover")
+        .description("Quarantine one invalid active authority and start a clean V3 epoch")
+        .option("--root <path>", "Explicit coordination root")
+        .requiredOption("--approval-record-id <id>", "Durable approval record identifier")
+        .option("--yes", "Confirm the failed authority should be quarantined")
+        .action((options) => {
+        try {
+            if (!options.yes)
+                throw new Error("--yes is required to recover an invalid V3 authority");
+            const root = resolve(options.root ?? coordRoot(context));
+            emit.data(recoverInvalidEventLedgerV3({
+                coordRoot: root,
+                harneryBuild: repositoryBuild(resolve(import.meta.dir, "..", "..")),
+                hostBuild: repositoryBuild(root),
+                configDigest: configDigest(root),
+                approvalRecordId: options.approvalRecordId,
+            }));
+        }
+        catch (error) {
+            emitFailure(emit, "ledger_v3_recovery_failed", error);
+        }
+    });
+}
+function coordRoot(context) {
+    return resolve(context?.resolveCoordRoot?.() ??
+        context?.repoRoot ??
+        process.env.HARNERY_COORD_ROOT ??
+        process.cwd());
+}
+function repositoryBuild(root) {
+    const result = spawnSync("git", ["-C", root, "rev-parse", "HEAD"], {
+        encoding: "utf8",
+        timeout: 5000,
+    });
+    const commit = result.status === 0 ? result.stdout.trim() : "";
+    if (/^[0-9a-f]{40,64}$/.test(commit))
+        return commit;
+    return createHash("sha256").update(resolve(root)).digest("hex");
+}
+function configDigest(root) {
+    const path = resolve(root, ".harnery", "config.jsonc");
+    return sha256V3(existsSync(path) ? readFileSync(path) : Buffer.from("{}\n"));
+}
+function emitFailure(emit, code, error) {
+    emit.error({ code, message: error instanceof Error ? error.message : String(error) });
+    throw error;
+}

package/dist/commands/presence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presence.d.ts","sourceRoot":"","sources":["../../src/commands/presence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0BnD;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAwKjF"}
+{"version":3,"file":"presence.d.ts","sourceRoot":"","sources":["../../src/commands/presence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAsBnD;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA8KjF"}

package/dist/commands/presence.js

@@ -1,5 +1,6 @@
 import { monorepoRoot } from "../core/agents/coord-client.js";
-import { emitCanonical, normalizeAdapter, readHeartbeat, resolveOwner, } from "../core/agents/index.js";
+import { emitEventV3, normalizeAdapter, resolveOwner } from "../core/agents/index.js";
+import { readLiveCoordinationRow } from "../core/agents/state/live-coordination-view.js";
 import { fetchPresence, publishPresence, readRemoteMachines, relayDaemonStatus, runRelayDaemon, } from "../core/presence/index.js";
 import { ageSeconds, applyDetection, clearPresence, formatAge, presenceFilePath, readPresence, writePresence, } from "../lib/presence.js";
 /**
@@ -133,7 +134,10 @@ export function registerPresenceCommand(program, emit) {
             for (const a of m.agents) {
                 const task = a.task ? `  "${a.task.slice(0, 70)}"` : "";
                 const files = a.files_touched?.length ? `  [${a.files_touched.length} files]` : "";
-                emit.text(`  agent-${a.name ?? a.instance_id.slice(0, 8)}${task}${files}\n`);
+                const lifecycle = a.task_state === "blocked" && a.task_state_reason
+                    ? `${a.task_state}: ${a.task_state_reason}`
+                    : a.task_state;
+                emit.text(`  agent-${a.name ?? a.instance_id.slice(0, 8)}${task}${files}  activity=${a.activity} lifecycle=${lifecycle}\n`);
             }
         }
     });
@@ -195,12 +199,17 @@ function emitPresenceChange(from, to, source) {
     const owner = resolveOwner();
     if (!owner)
         return;
-    const hb = readHeartbeat(owner);
-    emitCanonical({
-        type: "state.presence_change",
+    const root = monorepoRoot();
+    const hb = root ? readLiveCoordinationRow(root, owner) : null;
+    emitEventV3({
         owner,
         session: hb?.session_id ?? owner,
         adapter: normalizeAdapter(hb?.platform),
-        data: { from, to, source },
+        observation: {
+            event_type: "coord.presence_changed",
+            prior_state: from,
+            new_state: to,
+            reason: `presence_${source}`,
+        },
     });
 }

package/dist/commands/sync.d.ts

@@ -4,7 +4,7 @@
  *
  * Scope: a deliberately small set of file types: durable identities,
  * archived journals, council manifests. The high-churn machine-local
- * stuff (events.ndjson, .pid-map/, active/, .last-intent.*) stays put.
+ * state (ledgers/, .pid-map/, active/, .last-intent.*) stays put.
  *
  * Subcommands:
  *   init:    interactive: `rclone config` walks through Google OAuth, then

package/dist/commands/sync.js

@@ -4,7 +4,7 @@
  *
  * Scope: a deliberately small set of file types: durable identities,
  * archived journals, council manifests. The high-churn machine-local
- * stuff (events.ndjson, .pid-map/, active/, .last-intent.*) stays put.
+ * state (ledgers/, .pid-map/, active/, .last-intent.*) stays put.
  *
  * Subcommands:
  *   init:    interactive: `rclone config` walks through Google OAuth, then

package/dist/commands/web.d.ts

@@ -19,5 +19,11 @@ export declare function resolveMaxOldSpaceMb(flag?: string): number;
  * wins without clobbering flags the caller set (source maps, inspector, …).
  */
 export declare function nodeOptionsWithHeapCap(mb: number): string | undefined;
+/**
+ * Probe the exact localhost socket Next will claim. This is deliberately a
+ * check-and-report step, not an alternate-port allocator: Harnery keeps one
+ * memorable URL and asks the caller to resolve a real conflict explicitly.
+ */
+export declare function isWebPortAvailable(port: number): Promise<boolean>;
 export declare function registerWebCommand(program: Command, emit: EmitContext): void;
 //# sourceMappingURL=web.d.ts.map

package/dist/commands/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAgCnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AA8BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA2J5E"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAiCnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AA8BD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA0K5E"}

package/dist/commands/web.js

@@ -1,7 +1,9 @@
 import { spawn, spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
+import { createServer } from "node:net";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
 import { lazyFetchWebRoot, webRunner } from "./web-fetch.js";
 /**
  * `harn web`: Next.js dashboard for harnery's coord state.
@@ -83,6 +85,46 @@ function resolveWebRoot(emit, allowFetch) {
     });
     return null;
 }
+/**
+ * Probe the exact localhost socket Next will claim. This is deliberately a
+ * check-and-report step, not an alternate-port allocator: Harnery keeps one
+ * memorable URL and asks the caller to resolve a real conflict explicitly.
+ */
+export async function isWebPortAvailable(port) {
+    return await new Promise((resolve, reject) => {
+        const server = createServer();
+        server.unref();
+        server.once("error", (error) => {
+            if (error.code === "EADDRINUSE" || error.code === "EACCES") {
+                resolve(false);
+                return;
+            }
+            reject(error);
+        });
+        server.listen({ host: "127.0.0.1", port, exclusive: true }, () => {
+            server.close((error) => (error ? reject(error) : resolve(true)));
+        });
+    });
+}
+function reportInvalidPort(emit, error) {
+    emit.error({
+        code: "invalid_web_port",
+        message: error instanceof Error ? error.message : "invalid web port",
+        hint: `Use an integer from 1024 through 65535; the default is ${DEFAULT_WEB_PORT}.`,
+    });
+    process.exitCode = 1;
+}
+async function requireAvailablePort(emit, port) {
+    if (await isWebPortAvailable(port))
+        return true;
+    emit.error({
+        code: "web_port_in_use",
+        message: `port ${port} is already in use`,
+        hint: `Stop the process using ${port}, or choose a deliberate override with \`harn web up --port <port>\`.`,
+    });
+    process.exitCode = 1;
+    return false;
+}
 export function registerWebCommand(program, emit) {
     const web = program
         .command("web")
@@ -91,7 +133,7 @@ export function registerWebCommand(program, emit) {
         .command("up")
         .description("Start the dashboard. Default: dev mode (HMR, no build needed). With " +
         "--prod, runs next start (requires a prior `harn web build`).")
-        .option("-p, --port <port>", "Listen port", "9000")
+        .option("-p, --port <port>", `Listen port (default ${DEFAULT_WEB_PORT})`)
         .option("--coord-root <dir>", "Override the coord root (default: cwd; web walks up looking for .harnery/)")
         .option("--prod", "Use next start instead of next dev (requires prior build)")
         .option("--no-fetch", "Don't auto-fetch the dashboard if it's missing (npm installs)")
@@ -103,7 +145,14 @@ export function registerWebCommand(program, emit) {
             return;
         }
         const coordRoot = opts.coordRoot ?? process.cwd();
-        const port = String(opts.port);
+        let port;
+        try {
+            port = resolveWebPort(opts.port, opts.coordRoot);
+        }
+        catch (error) {
+            reportInvalidPort(emit, error);
+            return;
+        }
         const mode = opts.prod ? "start" : "dev";
         if (opts.prod) {
             const nextDir = path.join(root, ".next");
@@ -117,6 +166,8 @@ export function registerWebCommand(program, emit) {
                 return;
             }
         }
+        if (!(await requireAvailablePort(emit, port)))
+            return;
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (${mode})`, "info");
         emit.log(`files origin · http://harnery-files.localhost:${port}`, "info");
@@ -128,7 +179,7 @@ export function registerWebCommand(program, emit) {
             env: {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
-                HARNERY_WEB_PORT: port,
+                HARNERY_WEB_PORT: String(port),
                 ...(nodeOptionsWithHeapCap(heapMb)
                     ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
                     : {}),
@@ -171,11 +222,11 @@ export function registerWebCommand(program, emit) {
     web
         .command("start")
         .description("Start the production server (next start). Requires prior `harn web build`.")
-        .option("-p, --port <port>", "Listen port", "9000")
+        .option("-p, --port <port>", `Listen port (default ${DEFAULT_WEB_PORT})`)
         .option("--coord-root <dir>", "Override the coord root")
         .option("--no-fetch", "Don't auto-fetch the dashboard if it's missing (npm installs)")
         .option("--max-old-space <mb>", `V8 old-space ceiling in MB; 0 restores Next's own sizing (default ${DEFAULT_MAX_OLD_SPACE_MB}, env HARNERY_WEB_MAX_OLD_SPACE)`)
-        .action((opts) => {
+        .action(async (opts) => {
         const root = resolveWebRoot(emit, opts.fetch !== false);
         if (!root) {
             process.exitCode = 1;
@@ -192,7 +243,16 @@ export function registerWebCommand(program, emit) {
             return;
         }
         const coordRoot = opts.coordRoot ?? process.cwd();
-        const port = String(opts.port);
+        let port;
+        try {
+            port = resolveWebPort(opts.port, opts.coordRoot);
+        }
+        catch (error) {
+            reportInvalidPort(emit, error);
+            return;
+        }
+        if (!(await requireAvailablePort(emit, port)))
+            return;
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (start)`, "info");
         emit.log(`reading .harnery/ from: ${coordRoot}`, "info");
@@ -203,7 +263,7 @@ export function registerWebCommand(program, emit) {
             env: {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
-                HARNERY_WEB_PORT: port,
+                HARNERY_WEB_PORT: String(port),
                 ...(nodeOptionsWithHeapCap(heapMb)
                     ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
                     : {}),

package/dist/commands/work.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work.d.ts","sourceRoot":"","sources":["../../src/commands/work.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAWnD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAwC/B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAqG7E;AAwPD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAM7D;AAkBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAK9D"}
+{"version":3,"file":"work.d.ts","sourceRoot":"","sources":["../../src/commands/work.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAWnD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAwC/B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAgH7E;AA4PD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAM7D;AA0BD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAK9D"}

package/dist/commands/work.js

@@ -4,7 +4,7 @@ import { workflowSubscriptionOnly } from "../core/config.js";
 import { findCompletedMissionGoverning, reopenGovernorMission } from "../core/governor/index.js";
 import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
 import { loadPolicyFile } from "../core/policy/index.js";
-import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItems, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
+import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItemsWithWarnings, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
 import { WorkflowParkedError } from "../core/workflow/index.js";
 const MAX_ATTEMPT_TRANSCRIPT_ERROR_RENDER = 240;
 export function registerWorkCommand(program, emit) {
@@ -53,16 +53,23 @@ export function registerWorkCommand(program, emit) {
         .option("--json", "Emit complete work records as JSON")
         .action((opts) => {
         withWorkRoot(emit, (coordRoot) => {
-            const records = listWorkItems(coordRoot).filter((record) => !opts.state || record.projection.state === opts.state);
+            const result = listWorkItemsWithWarnings(coordRoot);
+            const records = result.records.filter((record) => !opts.state || record.projection.state === opts.state);
             if (opts.json) {
                 emit.config({ format: "json" });
                 emit.data(records);
+                for (const warning of result.warnings) {
+                    emit.log(renderWorkListWarning(warning.work_id, warning.reason), "warn");
+                }
             }
-            else if (records.length === 0) {
+            else if (records.length === 0 && result.warnings.length === 0) {
                 emit.text("no durable work\n");
             }
             else {
-                emit.text(`${records.map(renderWorkRow).join("\n")}\n`);
+                emit.text(`${[
+                    ...records.map(renderWorkRow),
+                    ...result.warnings.map((warning) => renderWorkListWarning(warning.work_id, warning.reason)),
+                ].join("\n")}\n`);
             }
         });
     });
@@ -229,7 +236,11 @@ function registerGovernanceCommand(work, name, emit) {
             // mission too, or the item lands in ready_work that the governor will never
             // dispatch. Resolve the goal BEFORE touching the work item so a refusal leaves
             // nothing half-done.
-            const goalId = name === "reopen" ? findCompletedMissionGoverning(coordRoot, workId) : undefined;
+            const goalId = name === "reopen"
+                ? findCompletedMissionGoverning(coordRoot, workId, (warning) => {
+                    emit.log(renderGovernorEnumerationWarning(warning.goal_id, warning.reason), "warn");
+                })
+                : undefined;
             const record = fn(coordRoot, workId, {
                 ...opts,
                 ...(opts.finding?.length ? { findings: opts.finding } : {}),
@@ -316,6 +327,12 @@ function renderWorkRow(record) {
     const projection = record.projection;
     return `${record.intent.id}  ${projection.state.padEnd(17)}  ${renderAttemptBudget(record).padEnd(18)}  ${projection.next_action.padEnd(21)}  ${record.intent.title}`;
 }
+function renderWorkListWarning(workId, reason) {
+    return `warning  ${workId}  unreadable: ${reason}`;
+}
+function renderGovernorEnumerationWarning(goalId, reason) {
+    return `skipped unreadable governor ${goalId}: ${reason}`;
+}
 // `max_attempts` budgets CHARGED attempts (ADR 0046), so the budget is
 // charged/max, not the raw attempt count. When uncharged environment/upstream
 // attempts happened, surface them as a suffix rather than folding them into the

package/dist/core/adapter.d.ts

@@ -0,0 +1,5 @@
+/** First-party harness adapters supported by Harnery's canonical V3 ledger. */
+export type Adapter = "claude-code" | "cursor" | "codex";
+/** Canonical producer classes used by V3 provenance. */
+export type EventSource = "agent-hooks" | "agent-coord" | "user" | "system";
+//# sourceMappingURL=adapter.d.ts.map

package/dist/core/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/core/adapter.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,wDAAwD;AACxD,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC"}

package/dist/core/adapter.js

@@ -0,0 +1 @@
+export {};

package/dist/core/adapters/attest.d.ts

@@ -1,9 +1,11 @@
 /**
  * The opt-in live probe that produces an attestation (ADR 0038).
  *
- * One bounded turn per adapter, through the same `spawn` the workflow engine
+ * One bounded probe per adapter, through the same `spawn` the workflow engine
  * uses, so what gets attested is the path production takes rather than a
- * parallel test rig.
+ * parallel test rig. The probe permits a small tool-iteration budget because
+ * repository instructions can require workflow children to register before
+ * replying; a one-iteration ceiling made a healthy Claude CLI look unreachable.
  */
 import type { SpawnResult } from "../workflow/types.js";
 import { probeFilesystemProjection } from "./attest-projection.js";
@@ -14,6 +16,7 @@ import type { AdapterId, CapabilitySupport } from "./types.js";
  * the turn stays as cheap as a turn can be. */
 export declare const ATTESTATION_PROMPT = "Reply with the single word: ok";
 export declare const DEFAULT_ATTESTATION_TIMEOUT_MS = 120000;
+export declare const ATTESTATION_MAX_TURNS = 4;
 export type AttestationOutcome = "recorded" | "skipped" | "unreachable" | "failed";
 export interface AdapterAttestationResult {
     adapter: AdapterId;

package/dist/core/adapters/attest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/attest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/D;+CAC+C;AAC/C,eAAO,MAAM,kBAAkB,mCAAmC,CAAC;AAEnE,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAqBtD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;8DAC0D;IAC1D,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;mDAG+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxF,2DAA2D;IAC3D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/C;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACnD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyGnC"}
+{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/D;+CAC+C;AAC/C,eAAO,MAAM,kBAAkB,mCAAmC,CAAC;AAEnE,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAGtD,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAqBvC,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;8DAC0D;IAC1D,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;mDAG+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxF,2DAA2D;IAC3D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/C;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACnD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyGnC"}

package/dist/core/adapters/attest.js

@@ -1,9 +1,11 @@
 /**
  * The opt-in live probe that produces an attestation (ADR 0038).
  *
- * One bounded turn per adapter, through the same `spawn` the workflow engine
+ * One bounded probe per adapter, through the same `spawn` the workflow engine
  * uses, so what gets attested is the path production takes rather than a
- * parallel test rig.
+ * parallel test rig. The probe permits a small tool-iteration budget because
+ * repository instructions can require workflow children to register before
+ * replying; a one-iteration ceiling made a healthy Claude CLI look unreachable.
  */
 import { probeFilesystemProjection } from "./attest-projection.js";
 import { ATTESTATION_SCHEMA_VERSION, profileDigest, sealAttestation, writeAttestation, } from "./attestation.js";
@@ -12,6 +14,9 @@ import { probeBinaryVersion } from "./bench.js";
  * the turn stays as cheap as a turn can be. */
 export const ATTESTATION_PROMPT = "Reply with the single word: ok";
 export const DEFAULT_ATTESTATION_TIMEOUT_MS = 120_000;
+// Claude may consume three iterations on repository-required set-task,
+// identity recovery, and end-turn status before it can return the probe word.
+export const ATTESTATION_MAX_TURNS = 4;
 /** Vendor failures arrive as whole console transcripts, banner and prompt echo
  * included. Reports are bounded evidence, so the reason is collapsed to one
  * short line and the echoed prompt is removed. */
@@ -57,7 +62,7 @@ export async function runAdapterAttestation(registry, opts = {}) {
                 : await adapter.spawn({
                     prompt: ATTESTATION_PROMPT,
                     timeoutMs,
-                    maxTurns: 1,
+                    maxTurns: ATTESTATION_MAX_TURNS,
                     cwd,
                     subscriptionOnly,
                 });

package/dist/core/adapters/profiles.d.ts

@@ -14,8 +14,8 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "claude";
         readonly effortValues: readonly ["low", "medium", "high", "xhigh", "max"];
         readonly verified: {
-            readonly date: "2026-07-25";
-            readonly version: "2.1.197 (Claude Code)";
+            readonly date: "2026-08-18";
+            readonly version: "2.1.233 (Claude Code)";
         };
         readonly capabilities: AdapterCapabilities;
     };
@@ -31,7 +31,7 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "gpt";
         readonly effortValues: readonly ["none", "minimal", "low", "medium", "high", "xhigh"];
         readonly verified: {
-            readonly date: "2026-07-25";
+            readonly date: "2026-08-04";
             readonly version: "codex-cli 0.144.5";
         };
         readonly sandboxProjection: {
@@ -55,14 +55,14 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "multi";
         readonly effortValues: readonly [];
         readonly verified: {
-            readonly date: "2026-07-25";
-            readonly version: "2026.07.23-e383d2b";
+            readonly date: "2026-08-18";
+            readonly version: "2026.08.11-e8db854";
         };
         readonly capabilities: AdapterCapabilities;
     };
 };
 export type BuiltinAdapterId = keyof typeof BUILTIN_ADAPTER_PROFILES;
-export declare const BUILTIN_ADAPTER_IDS: readonly ("claude-code" | "codex" | "cursor")[];
+export declare const BUILTIN_ADAPTER_IDS: readonly ("claude-code" | "cursor" | "codex")[];
 export declare function isBuiltinAdapter(id: string): id is BuiltinAdapterId;
 export declare function builtinAdapterProfile(id: string): AdapterProfile | undefined;
 export declare function validateAdapterEffort(id: string, effort: string | undefined): void;

package/dist/core/adapters/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Fc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,iDAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyFc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,iDAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}

package/dist/core/adapters/profiles.js

@@ -40,7 +40,7 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "claude",
         effortValues: ["low", "medium", "high", "xhigh", "max"],
-        verified: { date: "2026-07-25", version: "2.1.197 (Claude Code)" },
+        verified: { date: "2026-08-18", version: "2.1.233 (Claude Code)" },
         capabilities: capabilities({
             effortSelection: supported("Mapped to `--effort <level>`."),
             maxTurns: supported("Mapped to `--max-turns <n>`."),
@@ -62,7 +62,7 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "gpt",
         effortValues: ["none", "minimal", "low", "medium", "high", "xhigh"],
-        verified: { date: "2026-07-25", version: "codex-cli 0.144.5" },
+        verified: { date: "2026-08-04", version: "codex-cli 0.144.5" },
         // Verified against codex-cli 0.144.5: `--sandbox <mode>` plus
         // `sandbox_workspace_write.writable_roots`. Without the writable-root entry
         // a workspace-write child still cannot write a repository's .git directory.
@@ -92,14 +92,14 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "multi",
         effortValues: [],
-        verified: { date: "2026-07-25", version: "2026.07.23-e383d2b" },
+        verified: { date: "2026-08-18", version: "2026.08.11-e8db854" },
         capabilities: capabilities({
             effortSelection: unsupported("Cursor embeds effort in some parameterized model ids; Harnery does not rewrite model ids."),
             maxTurns: unsupported("cursor-agent exposes no turn-ceiling flag."),
             sessionId: supported("Read from the JSON result envelope."),
             cost: unsupported("The JSON result envelope carries no cost."),
             contextTelemetry: unknown("No stable Cursor context-usage payload has been certified."),
-            preCompactionSignal: unsupported("Harnery does not wire an unverified Cursor preCompact hook."),
+            preCompactionSignal: supported("Cursor preCompact is wired to a durable checkpoint."),
             postCompactionSignal: unsupported("Harnery does not wire an unverified Cursor postCompact hook."),
         }),
     },

package/dist/core/agents/canonical-emit.d.ts

@@ -1,34 +1,36 @@
 /**
- * Emit canonical events by spawning `agent-coord emit-event`. Used by every
- * `agents …` / `journal` / `presence` write that has a canonical state event.
+ * Emit canonical V3 observations by spawning `agent-coord emit-event`. Used by
+ * coordination commands whose durable state change also has a V3 audit event.
  *
  * Soft-fails: never throws into the caller. A failed emit logs to stderr
  * (visible to operators in their terminal) but never breaks the CLI flow.
  *
- * Synchronous spawn: the projector runs before the CLI returns. ~20ms
- * latency budget per call.
+ * Synchronous spawn: the projector runs before the CLI returns. The child has
+ * a 15-second safety budget; loaded-host checks normally finish in a few
+ * seconds and record the observation before the parent command exits.
  */
-export interface CanonicalEmitInput {
-    type: string;
+import type { LiveCoordinationObservationV3 } from "../events/v3/live-observation.js";
+export type EventV3EmitObservation = LiveCoordinationObservationV3 | {
+    event_type: "coord.lifecycle_changed";
+    new_state: "active" | "blocked" | "done";
+    reason?: string;
+    suggested_session_name?: string;
+};
+export interface EventV3EmitInput {
     owner: string;
     session: string;
     adapter: "claude-code" | "cursor" | "codex";
-    data: Record<string, unknown>;
-    turnId?: string;
-    parentSessionId?: string;
-    parentTurnId?: string;
+    observation: EventV3EmitObservation;
 }
 /**
  * Resolve the coord root for a canonical emit.
  *
  * Delegates to `resolveCoordRoot()`, the single resolution the hooks and the
- * CLI's reads also use. An emit resolved any other way is an emit the Stop hook
- * cannot see: the hook reads `state.status_checked` from the stream under ITS
- * root, so a divergent emit root blocks rule 1/3 on a turn that did run
- * `agents status`, and no sequence of CLI commands can satisfy it.
+ * CLI's reads also use. An observation resolved any other way can disappear
+ * from the live V3 generation even though the command itself succeeded.
  */
 export declare function resolveEmitRoot(start?: string): string | null;
-export declare function emitCanonical(input: CanonicalEmitInput): void;
+export declare function emitEventV3(input: EventV3EmitInput): boolean;
 /**
  * Normalize the heartbeat's `platform` field to the canonical Adapter type.
  */

package/dist/core/agents/canonical-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAsC7D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG"}
+{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAItF,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B;IACE,UAAU,EAAE,yBAAyB,CAAC;IACtC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA4C5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG"}