harnery 0.33.0 → 0.34.0

package/src/core/events/v3/live-feed.ts

@@ -0,0 +1,319 @@
+import { randomUUID } from "node:crypto";
+import {
+  chmodSync,
+  closeSync,
+  existsSync,
+  mkdirSync,
+  openSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeSync,
+} from "node:fs";
+import { basename, join, resolve } from "node:path";
+
+const DEFAULT_TTL_MS = 15 * 60 * 1_000;
+const HARD_MAX_TTL_MS = 60 * 60 * 1_000;
+const MAX_INTENT_CHARS = 240;
+const MAX_TARGET_LABELS = 16;
+const MAX_TARGET_CHARS = 160;
+const MAX_ROW_BYTES = 8 * 1_024;
+const GENERATION_PATTERN =
+  /^gen_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const EVENT_PATTERN = /^evt_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const EXECUTABLE_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._+-]{0,63}$/;
+const TARGET_PATTERN = /^[a-zA-Z0-9._@+-]+(?:\/[a-zA-Z0-9._@+ -]+)*$/;
+
+export const EVENT_V3_LIVE_RELATIVE_ROOT = ".harnery/live/v3" as const;
+
+export interface LiveDisplayInputV3 {
+  generation_id: string;
+  event_id: string;
+  executable?: string;
+  intent_display?: string;
+  target_labels?: string[];
+  ttl_ms?: number;
+}
+
+export interface LiveDisplayRowV3 {
+  format: "harnery-event-v3-live-display";
+  format_version: 1;
+  row_id: `live_${string}`;
+  generation_id: string;
+  event_id: string;
+  written_at: string;
+  expires_at: string;
+  executable?: string;
+  intent_display?: string;
+  target_labels?: string[];
+}
+
+export interface LiveDisplayJanitorResultV3 {
+  scanned: number;
+  removed: number;
+  retained: number;
+}
+
+/**
+ * Append one best-effort operator-display row. The narrow input shape has no
+ * fields for prompts, argv, tool input, output, exception bodies, or messages.
+ */
+export function writeLiveDisplayV3(
+  coordRoot: string,
+  input: LiveDisplayInputV3,
+  now: () => Date = () => new Date(),
+): LiveDisplayRowV3 {
+  assertLiveIds(input.generation_id, input.event_id);
+  const ttlMs = input.ttl_ms ?? DEFAULT_TTL_MS;
+  if (!Number.isSafeInteger(ttlMs) || ttlMs <= 0 || ttlMs > HARD_MAX_TTL_MS) {
+    throw new Error("V3 live-display TTL must be between 1 ms and 1 hour");
+  }
+  if (input.executable !== undefined && !EXECUTABLE_PATTERN.test(input.executable)) {
+    throw new Error("V3 live-display executable is invalid");
+  }
+  const writtenAt = now();
+  const intentDisplay = safeIntentDisplayV3(input.intent_display);
+  const targetLabels = safeTargetLabels(input.target_labels);
+  const row: LiveDisplayRowV3 = {
+    format: "harnery-event-v3-live-display",
+    format_version: 1,
+    row_id: `live_${randomUUID()}`,
+    generation_id: input.generation_id,
+    event_id: input.event_id,
+    written_at: writtenAt.toISOString(),
+    expires_at: new Date(writtenAt.getTime() + ttlMs).toISOString(),
+    ...(input.executable ? { executable: input.executable } : {}),
+    ...(intentDisplay ? { intent_display: intentDisplay } : {}),
+    ...(targetLabels.length > 0 ? { target_labels: targetLabels } : {}),
+  };
+  const serialized = `${JSON.stringify(row)}\n`;
+  if (Buffer.byteLength(serialized, "utf8") > MAX_ROW_BYTES) {
+    throw new Error("V3 live-display row exceeds its bounded size");
+  }
+  const root = liveRoot(coordRoot);
+  mkdirSync(root, { recursive: true, mode: 0o700 });
+  chmodSync(root, 0o700);
+  const path = join(root, `${input.generation_id}.ndjson`);
+  const fd = openSync(path, "a", 0o600);
+  try {
+    writeSync(fd, serialized, undefined, "utf8");
+  } finally {
+    closeSync(fd);
+  }
+  chmodSync(path, 0o600);
+  return row;
+}
+
+/**
+ * Best-effort overlay write for producers. Never throws: the live feed is
+ * presentation-only and must not fail a durable ledger append.
+ */
+export function tryWriteLiveDisplayV3(
+  coordRoot: string,
+  input: LiveDisplayInputV3,
+  now: () => Date = () => new Date(),
+): LiveDisplayRowV3 | undefined {
+  try {
+    return writeLiveDisplayV3(coordRoot, input, now);
+  } catch {
+    return undefined;
+  }
+}
+
+/** Return every unexpired live-display row across generations. */
+export function listLiveDisplayV3(
+  coordRoot: string,
+  now: () => Date = () => new Date(),
+): LiveDisplayRowV3[] {
+  const root = liveRoot(coordRoot);
+  if (!existsSync(root)) return [];
+  const rows: LiveDisplayRowV3[] = [];
+  for (const name of readdirSync(root)) {
+    if (!name.endsWith(".ndjson")) continue;
+    const generationId = name.slice(0, -".ndjson".length);
+    if (!GENERATION_PATTERN.test(generationId)) continue;
+    rows.push(...readLiveDisplayV3(coordRoot, generationId, now));
+  }
+  return rows;
+}
+
+/** Return only unexpired, structurally valid rows. Expiry is enforced before cleanup. */
+export function readLiveDisplayV3(
+  coordRoot: string,
+  generationId: string,
+  now: () => Date = () => new Date(),
+): LiveDisplayRowV3[] {
+  if (!GENERATION_PATTERN.test(generationId))
+    throw new Error("V3 live-display generation ID is invalid");
+  const path = join(liveRoot(coordRoot), `${generationId}.ndjson`);
+  if (!existsSync(path)) return [];
+  const nowMs = now().getTime();
+  return readFileSync(path, "utf8")
+    .split("\n")
+    .filter(Boolean)
+    .flatMap((frame) => {
+      try {
+        const row = validateLiveRow(JSON.parse(frame));
+        const writtenMs = Date.parse(row.written_at);
+        const expiresMs = Date.parse(row.expires_at);
+        if (expiresMs <= nowMs || writtenMs + HARD_MAX_TTL_MS <= nowMs) return [];
+        return [row];
+      } catch {
+        return [];
+      }
+    });
+}
+
+/** Remove fully expired generation files; malformed residue is bounded by the hard maximum. */
+export function janitorLiveDisplayV3(
+  coordRoot: string,
+  now: () => Date = () => new Date(),
+): LiveDisplayJanitorResultV3 {
+  const root = liveRoot(coordRoot);
+  if (!existsSync(root)) return { scanned: 0, removed: 0, retained: 0 };
+  const nowMs = now().getTime();
+  let scanned = 0;
+  let removed = 0;
+  let retained = 0;
+  for (const name of readdirSync(root)) {
+    if (!name.endsWith(".ndjson")) continue;
+    scanned += 1;
+    const path = join(root, basename(name));
+    const visible = GENERATION_PATTERN.test(name.slice(0, -".ndjson".length))
+      ? readLiveDisplayV3(coordRoot, name.slice(0, -".ndjson".length), now)
+      : [];
+    const hardExpired = statSync(path).mtimeMs + HARD_MAX_TTL_MS <= nowMs;
+    if (visible.length === 0 || hardExpired) {
+      rmSync(path, { force: true });
+      removed += 1;
+    } else {
+      retained += 1;
+    }
+  }
+  return { scanned, removed, retained };
+}
+
+/** Conservative allowlist scrubber: uncertainty omits the display instead of partially rendering it. */
+export function safeIntentDisplayV3(value: string | undefined): string | undefined {
+  if (value === undefined) return undefined;
+  const normalized = value.normalize("NFC").replace(/\s+/g, " ").trim();
+  if (normalized.length === 0 || normalized.length > MAX_INTENT_CHARS) return undefined;
+  if (
+    [...normalized].some((character) => {
+      const codePoint = character.codePointAt(0) ?? 0;
+      return codePoint < 32 || codePoint === 127;
+    })
+  ) {
+    return undefined;
+  }
+  if (
+    /\b(?:password|passwd|secret|token|api[_-]?key|authorization|cookie)\s*[:=]/i.test(normalized)
+  ) {
+    return undefined;
+  }
+  if (
+    /\b(?:sk-[a-z0-9_-]{8,}|gh[pousr]_[a-z0-9]{8,}|xox[baprs]-|AKIA[A-Z0-9]{12}|AIza[\w-]{12,})/i.test(
+      normalized,
+    )
+  ) {
+    return undefined;
+  }
+  if (
+    /-----BEGIN [A-Z ]+PRIVATE KEY-----|\beyJ[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{8,}/.test(normalized)
+  ) {
+    return undefined;
+  }
+  if (/\b[A-Za-z0-9_+/=-]{32,}\b/.test(normalized)) return undefined;
+  if (/\b[\w.+-]+@[\w.-]+\.[A-Za-z]{2,}\b/.test(normalized)) return undefined;
+  if (/(?:^|\s)(?:\/[A-Za-z]|[A-Za-z]:\\|\\\\|\/\/wsl)/.test(normalized)) return undefined;
+  if (/[`]|\$\(|&&|\|\||(?:^|\s)--[a-z]/.test(normalized)) return undefined;
+  return normalized;
+}
+
+function safeTargetLabels(values: string[] | undefined): string[] {
+  if (!values || values.length > MAX_TARGET_LABELS) return [];
+  const safe = values
+    .map((value) => value.normalize("NFC").trim())
+    .filter(
+      (value) =>
+        value.length > 0 &&
+        value.length <= MAX_TARGET_CHARS &&
+        TARGET_PATTERN.test(value) &&
+        !value.startsWith("/") &&
+        !value.split("/").includes("..") &&
+        safeIntentDisplayV3(value) !== undefined,
+    );
+  return [...new Set(safe)];
+}
+
+function validateLiveRow(value: unknown): LiveDisplayRowV3 {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("invalid live-display row");
+  }
+  const row = value as Record<string, unknown>;
+  const allowed = new Set([
+    "format",
+    "format_version",
+    "row_id",
+    "generation_id",
+    "event_id",
+    "written_at",
+    "expires_at",
+    "executable",
+    "intent_display",
+    "target_labels",
+  ]);
+  if (Object.keys(row).some((key) => !allowed.has(key)))
+    throw new Error("invalid live-display row");
+  if (
+    row.format !== "harnery-event-v3-live-display" ||
+    row.format_version !== 1 ||
+    typeof row.row_id !== "string" ||
+    !/^live_[0-9a-f-]{36}$/.test(row.row_id) ||
+    typeof row.generation_id !== "string" ||
+    typeof row.event_id !== "string" ||
+    typeof row.written_at !== "string" ||
+    typeof row.expires_at !== "string"
+  ) {
+    throw new Error("invalid live-display row");
+  }
+  assertLiveIds(row.generation_id, row.event_id);
+  if (typeof row.executable === "string" && !EXECUTABLE_PATTERN.test(row.executable)) {
+    throw new Error("invalid live-display row");
+  }
+  if (
+    typeof row.intent_display === "string" &&
+    safeIntentDisplayV3(row.intent_display) !== row.intent_display
+  ) {
+    throw new Error("invalid live-display row");
+  }
+  if (
+    row.target_labels !== undefined &&
+    (!Array.isArray(row.target_labels) ||
+      safeTargetLabels(row.target_labels as string[]).length !== row.target_labels.length)
+  ) {
+    throw new Error("invalid live-display row");
+  }
+  const writtenMs = Date.parse(row.written_at);
+  const expiresMs = Date.parse(row.expires_at);
+  if (
+    Number.isNaN(writtenMs) ||
+    Number.isNaN(expiresMs) ||
+    expiresMs <= writtenMs ||
+    expiresMs - writtenMs > HARD_MAX_TTL_MS
+  ) {
+    throw new Error("invalid live-display row");
+  }
+  return row as unknown as LiveDisplayRowV3;
+}
+
+function assertLiveIds(generationId: string, eventId: string): void {
+  if (!GENERATION_PATTERN.test(generationId) || !EVENT_PATTERN.test(eventId)) {
+    throw new Error("V3 live-display identity is invalid");
+  }
+}
+
+function liveRoot(coordRoot: string): string {
+  return join(resolve(coordRoot), EVENT_V3_LIVE_RELATIVE_ROOT);
+}

package/src/core/events/v3/live-observation.ts

@@ -0,0 +1,39 @@
+/**
+ * Privacy-bounded coordination observations accepted by live V3 emitters.
+ *
+ * This is a dependency-free shared contract so downstream mirrors can type
+ * their emit surfaces without importing the authority implementation.
+ */
+export type LiveCoordinationObservationV3 =
+  | {
+      event_type: "coord.status_observed";
+      status: string;
+      subject?: string;
+    }
+  | {
+      event_type: "coord.presence_changed";
+      prior_state?: string;
+      new_state: string;
+      reason: string;
+    }
+  | {
+      event_type: "coord.message_observed";
+      message_id?: string;
+      direction: "sent" | "received";
+      body: string;
+      subject?: string;
+    }
+  | {
+      event_type: "council.state_changed";
+      council_id: string;
+      prior_state?: string;
+      new_state: string;
+      record: unknown;
+    }
+  | {
+      event_type: "decision.state_changed";
+      decision_id: string;
+      prior_state?: string;
+      new_state: string;
+      record: unknown;
+    };

package/src/core/events/v3/live-routing.ts

@@ -0,0 +1,135 @@
+import { createHash } from "node:crypto";
+import type { Adapter } from "../../adapter.ts";
+import type { ParsedPayload } from "../../hooks/adapter/parse.ts";
+import {
+  type EventV3WriteMode,
+  readEventV3ControlState,
+  repairEventV3ControlPair,
+} from "./control.ts";
+import type { HookSignalV3 } from "./producers/hook.ts";
+import type { TurnRitualEvidenceV3 } from "./producers/hook-base.ts";
+import { type RecordHookSignalV3Result, recordHookSignalV3 } from "./producers/recorder.ts";
+
+export const LIVE_HOOK_V3_PRODUCER_ID = "prd_agent-hook" as const;
+export const LIVE_COMMAND_V3_PRODUCER_ID = "prd_session-tee" as const;
+
+export type LiveEventLedgerRouteV3 =
+  | { state: "v3"; mode: EventV3WriteMode; build_id: `build_${string}` }
+  | { state: "blocked"; reason: string };
+
+/**
+ * Resolve the V3-only ledger route. A root without an initialized V3 control
+ * packet is blocked; no producer or consumer may fall back to an older ledger.
+ * Manifest-first crashes are repaired from the immutable packet and every
+ * other invalid state closes the writer gate.
+ */
+export function resolveLiveEventLedgerRouteV3(coordRoot: string): LiveEventLedgerRouteV3 {
+  let control = readEventV3ControlState(coordRoot);
+  if (control.state === "closed") return { state: "blocked", reason: "v3_not_initialized" };
+  if (control.state === "repairable") control = repairEventV3ControlPair(coordRoot);
+  if (control.state !== "candidate" && control.state !== "active") {
+    return { state: "blocked", reason: `${control.state}:${control.reason}` };
+  }
+  const buildId = liveEventV3BuildId(control.genesis.profile.harnery_commit);
+  if (!control.genesis.profile.producer_build_ids.includes(buildId)) {
+    return { state: "blocked", reason: "live_producer_build_not_approved" };
+  }
+  return { state: "v3", mode: control.state, build_id: buildId };
+}
+
+export function liveEventV3BuildId(harneryCommit: string): `build_${string}` {
+  const exact = harneryCommit.normalize("NFC");
+  if (/^[a-zA-Z0-9._-]{1,120}$/.test(exact)) return `build_${exact}`;
+  return `build_${createHash("sha256").update(exact).digest("hex")}`;
+}
+
+export function liveInstanceIdV3(instanceId: string): `inst_${string}` {
+  if (/^inst_[a-zA-Z0-9._-]{1,128}$/.test(instanceId)) return instanceId as `inst_${string}`;
+  if (/^[a-zA-Z0-9._-]{1,128}$/.test(instanceId)) return `inst_${instanceId}`;
+  return `inst_${createHash("sha256").update(instanceId.normalize("NFC")).digest("hex")}`;
+}
+
+/**
+ * The adapter-native id a canonical `inst_*` id carries, for display and for
+ * joins against native-keyed records. Only the direct prefix form round-trips:
+ * a hashed id has no recoverable native form and is returned unchanged, so
+ * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ */
+export function nativeInstanceIdV3(instanceId: string): string {
+  return instanceId.startsWith("inst_") ? instanceId.slice("inst_".length) : instanceId;
+}
+
+export function hookSignalV3(eventName: string): HookSignalV3 | undefined {
+  switch (eventName) {
+    case "session-start":
+    case "session-end":
+    case "user-prompt-submit":
+    case "stop":
+    case "stop-failure":
+    case "pre-tool-use":
+    case "post-tool-use":
+    case "post-tool-use-failure":
+    case "permission-request":
+    case "sub-agent-start":
+    case "sub-agent-stop":
+    case "pre-compact":
+    case "post-compact":
+      return eventName;
+    case "before-shell-execution":
+      return "pre-tool-use";
+    case "after-shell-execution":
+      return "post-tool-use";
+    default:
+      return undefined;
+  }
+}
+
+export function recordLiveHookSignalV3(input: {
+  coordRoot: string;
+  route: Extract<LiveEventLedgerRouteV3, { state: "v3" }>;
+  eventName: string;
+  payload: ParsedPayload | null;
+  adapter: Adapter;
+  instanceId: string;
+  run_id?: `run_${string}`;
+  workflow_id?: `wf_${string}`;
+  workflow_agent_id?: string;
+  bridge?: "codex-wsl";
+  monotonic_ns?: string;
+  hook_name?: string;
+  hook_duration_ms?: number;
+  stop_remediation?: boolean;
+  turn_ritual?: TurnRitualEvidenceV3;
+  defer_drain?: boolean;
+}): RecordHookSignalV3Result | { state: "ignored" } {
+  const signal = hookSignalV3(input.eventName);
+  if (!signal) return { state: "ignored" };
+  return recordHookSignalV3({
+    coordRoot: input.coordRoot,
+    mode: input.route.mode,
+    signal,
+    payload: input.payload ?? { raw: {} },
+    adapter: input.adapter,
+    instance_id: liveInstanceIdV3(input.instanceId),
+    run_id: input.run_id,
+    workflow_id: input.workflow_id,
+    workflow_agent_id: input.workflow_agent_id,
+    producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+    build_id: input.route.build_id,
+    platform: livePlatformV3(),
+    ...(input.bridge ? { bridge: input.bridge } : {}),
+    monotonic_ns: input.monotonic_ns,
+    hook_name: input.hook_name,
+    hook_duration_ms: input.hook_duration_ms,
+    stop_remediation: input.stop_remediation,
+    turn_ritual: input.turn_ritual,
+    ...(input.defer_drain ? { writerOptions: { deferDrain: true } } : {}),
+  });
+}
+
+export function livePlatformV3(): "linux" | "windows" | "macos" | "unknown" {
+  if (process.platform === "linux") return "linux";
+  if (process.platform === "win32") return "windows";
+  if (process.platform === "darwin") return "macos";
+  return "unknown";
+}