harnery 0.33.0 → 0.34.0

package/dist/commands/web.js

@@ -1,7 +1,9 @@
 import { spawn, spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
+import { createServer } from "node:net";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
 import { lazyFetchWebRoot, webRunner } from "./web-fetch.js";
 /**
  * `harn web`: Next.js dashboard for harnery's coord state.
@@ -83,6 +85,46 @@ function resolveWebRoot(emit, allowFetch) {
     });
     return null;
 }
+/**
+ * Probe the exact localhost socket Next will claim. This is deliberately a
+ * check-and-report step, not an alternate-port allocator: Harnery keeps one
+ * memorable URL and asks the caller to resolve a real conflict explicitly.
+ */
+export async function isWebPortAvailable(port) {
+    return await new Promise((resolve, reject) => {
+        const server = createServer();
+        server.unref();
+        server.once("error", (error) => {
+            if (error.code === "EADDRINUSE" || error.code === "EACCES") {
+                resolve(false);
+                return;
+            }
+            reject(error);
+        });
+        server.listen({ host: "127.0.0.1", port, exclusive: true }, () => {
+            server.close((error) => (error ? reject(error) : resolve(true)));
+        });
+    });
+}
+function reportInvalidPort(emit, error) {
+    emit.error({
+        code: "invalid_web_port",
+        message: error instanceof Error ? error.message : "invalid web port",
+        hint: `Use an integer from 1024 through 65535; the default is ${DEFAULT_WEB_PORT}.`,
+    });
+    process.exitCode = 1;
+}
+async function requireAvailablePort(emit, port) {
+    if (await isWebPortAvailable(port))
+        return true;
+    emit.error({
+        code: "web_port_in_use",
+        message: `port ${port} is already in use`,
+        hint: `Stop the process using ${port}, or choose a deliberate override with \`harn web up --port <port>\`.`,
+    });
+    process.exitCode = 1;
+    return false;
+}
 export function registerWebCommand(program, emit) {
     const web = program
         .command("web")
@@ -91,7 +133,7 @@ export function registerWebCommand(program, emit) {
         .command("up")
         .description("Start the dashboard. Default: dev mode (HMR, no build needed). With " +
         "--prod, runs next start (requires a prior `harn web build`).")
-        .option("-p, --port <port>", "Listen port", "9000")
+        .option("-p, --port <port>", `Listen port (default ${DEFAULT_WEB_PORT})`)
         .option("--coord-root <dir>", "Override the coord root (default: cwd; web walks up looking for .harnery/)")
         .option("--prod", "Use next start instead of next dev (requires prior build)")
         .option("--no-fetch", "Don't auto-fetch the dashboard if it's missing (npm installs)")
@@ -103,7 +145,14 @@ export function registerWebCommand(program, emit) {
             return;
         }
         const coordRoot = opts.coordRoot ?? process.cwd();
-        const port = String(opts.port);
+        let port;
+        try {
+            port = resolveWebPort(opts.port, opts.coordRoot);
+        }
+        catch (error) {
+            reportInvalidPort(emit, error);
+            return;
+        }
         const mode = opts.prod ? "start" : "dev";
         if (opts.prod) {
             const nextDir = path.join(root, ".next");
@@ -117,6 +166,8 @@ export function registerWebCommand(program, emit) {
                 return;
             }
         }
+        if (!(await requireAvailablePort(emit, port)))
+            return;
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (${mode})`, "info");
         emit.log(`files origin · http://harnery-files.localhost:${port}`, "info");
@@ -128,7 +179,7 @@ export function registerWebCommand(program, emit) {
             env: {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
-                HARNERY_WEB_PORT: port,
+                HARNERY_WEB_PORT: String(port),
                 ...(nodeOptionsWithHeapCap(heapMb)
                     ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
                     : {}),
@@ -171,11 +222,11 @@ export function registerWebCommand(program, emit) {
     web
         .command("start")
         .description("Start the production server (next start). Requires prior `harn web build`.")
-        .option("-p, --port <port>", "Listen port", "9000")
+        .option("-p, --port <port>", `Listen port (default ${DEFAULT_WEB_PORT})`)
         .option("--coord-root <dir>", "Override the coord root")
         .option("--no-fetch", "Don't auto-fetch the dashboard if it's missing (npm installs)")
         .option("--max-old-space <mb>", `V8 old-space ceiling in MB; 0 restores Next's own sizing (default ${DEFAULT_MAX_OLD_SPACE_MB}, env HARNERY_WEB_MAX_OLD_SPACE)`)
-        .action((opts) => {
+        .action(async (opts) => {
         const root = resolveWebRoot(emit, opts.fetch !== false);
         if (!root) {
             process.exitCode = 1;
@@ -192,7 +243,16 @@ export function registerWebCommand(program, emit) {
             return;
         }
         const coordRoot = opts.coordRoot ?? process.cwd();
-        const port = String(opts.port);
+        let port;
+        try {
+            port = resolveWebPort(opts.port, opts.coordRoot);
+        }
+        catch (error) {
+            reportInvalidPort(emit, error);
+            return;
+        }
+        if (!(await requireAvailablePort(emit, port)))
+            return;
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (start)`, "info");
         emit.log(`reading .harnery/ from: ${coordRoot}`, "info");
@@ -203,7 +263,7 @@ export function registerWebCommand(program, emit) {
             env: {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
-                HARNERY_WEB_PORT: port,
+                HARNERY_WEB_PORT: String(port),
                 ...(nodeOptionsWithHeapCap(heapMb)
                     ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
                     : {}),

package/dist/commands/work.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work.d.ts","sourceRoot":"","sources":["../../src/commands/work.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAWnD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAwC/B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAqG7E;AAwPD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAM7D;AAkBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAK9D"}
+{"version":3,"file":"work.d.ts","sourceRoot":"","sources":["../../src/commands/work.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAWnD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAwC/B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAgH7E;AA4PD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAM7D;AA0BD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAK9D"}

package/dist/commands/work.js

@@ -4,7 +4,7 @@ import { workflowSubscriptionOnly } from "../core/config.js";
 import { findCompletedMissionGoverning, reopenGovernorMission } from "../core/governor/index.js";
 import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
 import { loadPolicyFile } from "../core/policy/index.js";
-import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItems, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
+import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItemsWithWarnings, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
 import { WorkflowParkedError } from "../core/workflow/index.js";
 const MAX_ATTEMPT_TRANSCRIPT_ERROR_RENDER = 240;
 export function registerWorkCommand(program, emit) {
@@ -53,16 +53,23 @@ export function registerWorkCommand(program, emit) {
         .option("--json", "Emit complete work records as JSON")
         .action((opts) => {
         withWorkRoot(emit, (coordRoot) => {
-            const records = listWorkItems(coordRoot).filter((record) => !opts.state || record.projection.state === opts.state);
+            const result = listWorkItemsWithWarnings(coordRoot);
+            const records = result.records.filter((record) => !opts.state || record.projection.state === opts.state);
             if (opts.json) {
                 emit.config({ format: "json" });
                 emit.data(records);
+                for (const warning of result.warnings) {
+                    emit.log(renderWorkListWarning(warning.work_id, warning.reason), "warn");
+                }
             }
-            else if (records.length === 0) {
+            else if (records.length === 0 && result.warnings.length === 0) {
                 emit.text("no durable work\n");
             }
             else {
-                emit.text(`${records.map(renderWorkRow).join("\n")}\n`);
+                emit.text(`${[
+                    ...records.map(renderWorkRow),
+                    ...result.warnings.map((warning) => renderWorkListWarning(warning.work_id, warning.reason)),
+                ].join("\n")}\n`);
             }
         });
     });
@@ -229,7 +236,11 @@ function registerGovernanceCommand(work, name, emit) {
             // mission too, or the item lands in ready_work that the governor will never
             // dispatch. Resolve the goal BEFORE touching the work item so a refusal leaves
             // nothing half-done.
-            const goalId = name === "reopen" ? findCompletedMissionGoverning(coordRoot, workId) : undefined;
+            const goalId = name === "reopen"
+                ? findCompletedMissionGoverning(coordRoot, workId, (warning) => {
+                    emit.log(renderGovernorEnumerationWarning(warning.goal_id, warning.reason), "warn");
+                })
+                : undefined;
             const record = fn(coordRoot, workId, {
                 ...opts,
                 ...(opts.finding?.length ? { findings: opts.finding } : {}),
@@ -316,6 +327,12 @@ function renderWorkRow(record) {
     const projection = record.projection;
     return `${record.intent.id}  ${projection.state.padEnd(17)}  ${renderAttemptBudget(record).padEnd(18)}  ${projection.next_action.padEnd(21)}  ${record.intent.title}`;
 }
+function renderWorkListWarning(workId, reason) {
+    return `warning  ${workId}  unreadable: ${reason}`;
+}
+function renderGovernorEnumerationWarning(goalId, reason) {
+    return `skipped unreadable governor ${goalId}: ${reason}`;
+}
 // `max_attempts` budgets CHARGED attempts (ADR 0046), so the budget is
 // charged/max, not the raw attempt count. When uncharged environment/upstream
 // attempts happened, surface them as a suffix rather than folding them into the

package/dist/core/adapter.d.ts

@@ -0,0 +1,5 @@
+/** First-party harness adapters supported by Harnery's canonical V3 ledger. */
+export type Adapter = "claude-code" | "cursor" | "codex";
+/** Canonical producer classes used by V3 provenance. */
+export type EventSource = "agent-hooks" | "agent-coord" | "user" | "system";
+//# sourceMappingURL=adapter.d.ts.map

package/dist/core/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/core/adapter.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,wDAAwD;AACxD,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC"}

package/dist/core/adapter.js

@@ -0,0 +1 @@
+export {};

package/dist/core/adapters/attest.d.ts

@@ -1,9 +1,11 @@
 /**
  * The opt-in live probe that produces an attestation (ADR 0038).
  *
- * One bounded turn per adapter, through the same `spawn` the workflow engine
+ * One bounded probe per adapter, through the same `spawn` the workflow engine
  * uses, so what gets attested is the path production takes rather than a
- * parallel test rig.
+ * parallel test rig. The probe permits a small tool-iteration budget because
+ * repository instructions can require workflow children to register before
+ * replying; a one-iteration ceiling made a healthy Claude CLI look unreachable.
  */
 import type { SpawnResult } from "../workflow/types.js";
 import { probeFilesystemProjection } from "./attest-projection.js";
@@ -14,6 +16,7 @@ import type { AdapterId, CapabilitySupport } from "./types.js";
  * the turn stays as cheap as a turn can be. */
 export declare const ATTESTATION_PROMPT = "Reply with the single word: ok";
 export declare const DEFAULT_ATTESTATION_TIMEOUT_MS = 120000;
+export declare const ATTESTATION_MAX_TURNS = 4;
 export type AttestationOutcome = "recorded" | "skipped" | "unreachable" | "failed";
 export interface AdapterAttestationResult {
     adapter: AdapterId;

package/dist/core/adapters/attest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/attest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/D;+CAC+C;AAC/C,eAAO,MAAM,kBAAkB,mCAAmC,CAAC;AAEnE,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAqBtD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;8DAC0D;IAC1D,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;mDAG+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxF,2DAA2D;IAC3D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/C;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACnD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyGnC"}
+{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQhF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/D;+CAC+C;AAC/C,eAAO,MAAM,kBAAkB,mCAAmC,CAAC;AAEnE,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAGtD,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAqBvC,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEnF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;8DAC0D;IAC1D,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;mDAG+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxF,2DAA2D;IAC3D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/C;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACnD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyGnC"}

package/dist/core/adapters/attest.js

@@ -1,9 +1,11 @@
 /**
  * The opt-in live probe that produces an attestation (ADR 0038).
  *
- * One bounded turn per adapter, through the same `spawn` the workflow engine
+ * One bounded probe per adapter, through the same `spawn` the workflow engine
  * uses, so what gets attested is the path production takes rather than a
- * parallel test rig.
+ * parallel test rig. The probe permits a small tool-iteration budget because
+ * repository instructions can require workflow children to register before
+ * replying; a one-iteration ceiling made a healthy Claude CLI look unreachable.
  */
 import { probeFilesystemProjection } from "./attest-projection.js";
 import { ATTESTATION_SCHEMA_VERSION, profileDigest, sealAttestation, writeAttestation, } from "./attestation.js";
@@ -12,6 +14,9 @@ import { probeBinaryVersion } from "./bench.js";
  * the turn stays as cheap as a turn can be. */
 export const ATTESTATION_PROMPT = "Reply with the single word: ok";
 export const DEFAULT_ATTESTATION_TIMEOUT_MS = 120_000;
+// Claude may consume three iterations on repository-required set-task,
+// identity recovery, and end-turn status before it can return the probe word.
+export const ATTESTATION_MAX_TURNS = 4;
 /** Vendor failures arrive as whole console transcripts, banner and prompt echo
  * included. Reports are bounded evidence, so the reason is collapsed to one
  * short line and the echoed prompt is removed. */
@@ -57,7 +62,7 @@ export async function runAdapterAttestation(registry, opts = {}) {
                 : await adapter.spawn({
                     prompt: ATTESTATION_PROMPT,
                     timeoutMs,
-                    maxTurns: 1,
+                    maxTurns: ATTESTATION_MAX_TURNS,
                     cwd,
                     subscriptionOnly,
                 });

package/dist/core/adapters/profiles.d.ts

@@ -14,8 +14,8 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "claude";
         readonly effortValues: readonly ["low", "medium", "high", "xhigh", "max"];
         readonly verified: {
-            readonly date: "2026-07-25";
-            readonly version: "2.1.197 (Claude Code)";
+            readonly date: "2026-08-18";
+            readonly version: "2.1.233 (Claude Code)";
         };
         readonly capabilities: AdapterCapabilities;
     };
@@ -31,7 +31,7 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "gpt";
         readonly effortValues: readonly ["none", "minimal", "low", "medium", "high", "xhigh"];
         readonly verified: {
-            readonly date: "2026-07-25";
+            readonly date: "2026-08-04";
             readonly version: "codex-cli 0.144.5";
         };
         readonly sandboxProjection: {
@@ -55,14 +55,14 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
         readonly modelFamily: "multi";
         readonly effortValues: readonly [];
         readonly verified: {
-            readonly date: "2026-07-25";
-            readonly version: "2026.07.23-e383d2b";
+            readonly date: "2026-08-18";
+            readonly version: "2026.08.11-e8db854";
         };
         readonly capabilities: AdapterCapabilities;
     };
 };
 export type BuiltinAdapterId = keyof typeof BUILTIN_ADAPTER_PROFILES;
-export declare const BUILTIN_ADAPTER_IDS: readonly ("claude-code" | "codex" | "cursor")[];
+export declare const BUILTIN_ADAPTER_IDS: readonly ("claude-code" | "cursor" | "codex")[];
 export declare function isBuiltinAdapter(id: string): id is BuiltinAdapterId;
 export declare function builtinAdapterProfile(id: string): AdapterProfile | undefined;
 export declare function validateAdapterEffort(id: string, effort: string | undefined): void;

package/dist/core/adapters/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Fc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,iDAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyFc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,iDAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}

package/dist/core/adapters/profiles.js

@@ -40,7 +40,7 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "claude",
         effortValues: ["low", "medium", "high", "xhigh", "max"],
-        verified: { date: "2026-07-25", version: "2.1.197 (Claude Code)" },
+        verified: { date: "2026-08-18", version: "2.1.233 (Claude Code)" },
         capabilities: capabilities({
             effortSelection: supported("Mapped to `--effort <level>`."),
             maxTurns: supported("Mapped to `--max-turns <n>`."),
@@ -62,7 +62,7 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "gpt",
         effortValues: ["none", "minimal", "low", "medium", "high", "xhigh"],
-        verified: { date: "2026-07-25", version: "codex-cli 0.144.5" },
+        verified: { date: "2026-08-04", version: "codex-cli 0.144.5" },
         // Verified against codex-cli 0.144.5: `--sandbox <mode>` plus
         // `sandbox_workspace_write.writable_roots`. Without the writable-root entry
         // a workspace-write child still cannot write a repository's .git directory.
@@ -92,14 +92,14 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "multi",
         effortValues: [],
-        verified: { date: "2026-07-25", version: "2026.07.23-e383d2b" },
+        verified: { date: "2026-08-18", version: "2026.08.11-e8db854" },
         capabilities: capabilities({
             effortSelection: unsupported("Cursor embeds effort in some parameterized model ids; Harnery does not rewrite model ids."),
             maxTurns: unsupported("cursor-agent exposes no turn-ceiling flag."),
             sessionId: supported("Read from the JSON result envelope."),
             cost: unsupported("The JSON result envelope carries no cost."),
             contextTelemetry: unknown("No stable Cursor context-usage payload has been certified."),
-            preCompactionSignal: unsupported("Harnery does not wire an unverified Cursor preCompact hook."),
+            preCompactionSignal: supported("Cursor preCompact is wired to a durable checkpoint."),
             postCompactionSignal: unsupported("Harnery does not wire an unverified Cursor postCompact hook."),
         }),
     },

package/dist/core/agents/canonical-emit.d.ts

@@ -1,34 +1,36 @@
 /**
- * Emit canonical events by spawning `agent-coord emit-event`. Used by every
- * `agents …` / `journal` / `presence` write that has a canonical state event.
+ * Emit canonical V3 observations by spawning `agent-coord emit-event`. Used by
+ * coordination commands whose durable state change also has a V3 audit event.
  *
  * Soft-fails: never throws into the caller. A failed emit logs to stderr
  * (visible to operators in their terminal) but never breaks the CLI flow.
  *
- * Synchronous spawn: the projector runs before the CLI returns. ~20ms
- * latency budget per call.
+ * Synchronous spawn: the projector runs before the CLI returns. The child has
+ * a 15-second safety budget; loaded-host checks normally finish in a few
+ * seconds and record the observation before the parent command exits.
  */
-export interface CanonicalEmitInput {
-    type: string;
+import type { LiveCoordinationObservationV3 } from "../events/v3/live-observation.js";
+export type EventV3EmitObservation = LiveCoordinationObservationV3 | {
+    event_type: "coord.lifecycle_changed";
+    new_state: "active" | "blocked" | "done";
+    reason?: string;
+    suggested_session_name?: string;
+};
+export interface EventV3EmitInput {
     owner: string;
     session: string;
     adapter: "claude-code" | "cursor" | "codex";
-    data: Record<string, unknown>;
-    turnId?: string;
-    parentSessionId?: string;
-    parentTurnId?: string;
+    observation: EventV3EmitObservation;
 }
 /**
  * Resolve the coord root for a canonical emit.
  *
  * Delegates to `resolveCoordRoot()`, the single resolution the hooks and the
- * CLI's reads also use. An emit resolved any other way is an emit the Stop hook
- * cannot see: the hook reads `state.status_checked` from the stream under ITS
- * root, so a divergent emit root blocks rule 1/3 on a turn that did run
- * `agents status`, and no sequence of CLI commands can satisfy it.
+ * CLI's reads also use. An observation resolved any other way can disappear
+ * from the live V3 generation even though the command itself succeeded.
  */
 export declare function resolveEmitRoot(start?: string): string | null;
-export declare function emitCanonical(input: CanonicalEmitInput): boolean;
+export declare function emitEventV3(input: EventV3EmitInput): boolean;
 /**
  * Normalize the heartbeat's `platform` field to the canonical Adapter type.
  */

package/dist/core/agents/canonical-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAwChE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG"}
+{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAItF,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B;IACE,UAAU,EAAE,yBAAyB,CAAC;IACtC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA4C5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG"}

package/dist/core/agents/canonical-emit.js

@@ -1,12 +1,13 @@
 /**
- * Emit canonical events by spawning `agent-coord emit-event`. Used by every
- * `agents …` / `journal` / `presence` write that has a canonical state event.
+ * Emit canonical V3 observations by spawning `agent-coord emit-event`. Used by
+ * coordination commands whose durable state change also has a V3 audit event.
  *
  * Soft-fails: never throws into the caller. A failed emit logs to stderr
  * (visible to operators in their terminal) but never breaks the CLI flow.
  *
- * Synchronous spawn: the projector runs before the CLI returns. ~20ms
- * latency budget per call.
+ * Synchronous spawn: the projector runs before the CLI returns. The child has
+ * a 15-second safety budget; loaded-host checks normally finish in a few
+ * seconds and record the observation before the parent command exits.
  */
 import { spawnSync } from "node:child_process";
 import { coordBinPath } from "./coord-bin.js";
@@ -15,15 +16,13 @@ import { resolveCoordRoot } from "./coord-client.js";
  * Resolve the coord root for a canonical emit.
  *
  * Delegates to `resolveCoordRoot()`, the single resolution the hooks and the
- * CLI's reads also use. An emit resolved any other way is an emit the Stop hook
- * cannot see: the hook reads `state.status_checked` from the stream under ITS
- * root, so a divergent emit root blocks rule 1/3 on a turn that did run
- * `agents status`, and no sequence of CLI commands can satisfy it.
+ * CLI's reads also use. An observation resolved any other way can disappear
+ * from the live V3 generation even though the command itself succeeded.
  */
 export function resolveEmitRoot(start = process.cwd()) {
     return resolveCoordRoot(start);
 }
-export function emitCanonical(input) {
+export function emitEventV3(input) {
     const root = resolveEmitRoot();
     if (!root)
         return false;
@@ -34,34 +33,35 @@ export function emitCanonical(input) {
         const args = [
             "emit-event",
             "--type",
-            input.type,
+            input.observation.event_type,
             "--owner",
             input.owner,
             "--session",
             input.session,
             "--adapter",
             input.adapter,
-            "--data-json",
-            JSON.stringify(input.data),
+            "--data-stdin",
         ];
-        if (input.turnId)
-            args.push("--turn-id", input.turnId);
-        if (input.parentSessionId)
-            args.push("--parent-session-id", input.parentSessionId);
-        if (input.parentTurnId)
-            args.push("--parent-turn-id", input.parentTurnId);
         // Pin cwd + HARNERY_COORD_ROOT_OVERRIDE so the child writes to the SAME
         // stream we resolved, regardless of where the caller's shell is cd'd.
         const result = spawnSync(binary, args, {
             encoding: "utf8",
-            stdio: "ignore",
-            timeout: 3000,
+            stdio: ["pipe", "ignore", "pipe"],
+            input: JSON.stringify(input.observation),
+            // Budget the append generously. Under multi-agent contention a single
+            // `agent-coord emit-event` has been measured at 3.4-4.1s on a loaded
+            // host, so a 3s cap timed out every emit and blocked end-of-turn checks
+            // -- exactly the failure this module's doc warns about.
+            timeout: 15000,
             cwd: root,
             env: { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: root },
         });
         if (result.error || result.status !== 0) {
-            const why = result.error ? result.error.message : `exit ${result.status}`;
-            process.stderr.write(`emitCanonical: ${input.type} emit failed (${why})\n`); // lint-ok-emission: soft-fail diagnostic promised by the module doc; silent drops cost blocked turns
+            const detail = typeof result.stderr === "string" ? result.stderr.trim() : "";
+            const why = result.error
+                ? result.error.message
+                : `exit ${result.status}${detail ? `: ${detail}` : ""}`;
+            process.stderr.write(`emitEventV3: ${input.observation.event_type} emit failed (${why})\n`); // lint-ok-emission: soft-fail diagnostic promised by the module doc; silent drops cost blocked turns
             return false;
         }
         return true;