harnery 0.34.1 → 0.35.0

package/dist/commands/semantic.js

@@ -0,0 +1,147 @@
+import { resolve } from "node:path";
+import { createSemanticAdapters, discoverSemanticReaders, inspectSemanticDocument, readSemanticManifest, readSemanticServiceStatus, requestSemanticServiceStop, runSemanticOnce, runSemanticServiceDaemon, semanticPaths, spawnSemanticService, } from "../core/semantic/index.js";
+export function registerSemanticCommand(program, emit, context) {
+    const semantic = program
+        .command("semantic")
+        .description("Build and inspect evidence-cited semantic readings of active V3 generations");
+    semantic
+        .command("once")
+        .description("Run one bounded semantic pass using each generation's source harness")
+        .option("--root <path>", "Explicit coordination root")
+        .option("--calls-per-hour <count>", "Configured call ceiling below the hard limit", integer)
+        .action(async (options) => {
+        try {
+            emit.data(await runSemanticOnce({
+                coordRoot: resolve(options.root ?? coordRoot(context)),
+                callsPerHour: options.callsPerHour,
+            }));
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_once_failed", error);
+        }
+    });
+    const service = semantic
+        .command("service")
+        .description("Run semantic reading as a singleton service");
+    service
+        .command("start")
+        .description("Start or resume the detached per-root semantic reader service")
+        .option("--root <path>", "Explicit coordination root")
+        .option("--calls-per-hour <count>", "Configured call ceiling below the hard limit", integer)
+        .action(async (options) => {
+        try {
+            emit.data(await spawnSemanticService(resolve(options.root ?? coordRoot(context)), {
+                callsPerHour: options.callsPerHour,
+            }));
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_service_start_failed", error);
+        }
+    });
+    service
+        .command("status")
+        .description("Show singleton liveness, pass metrics, and pending work")
+        .option("--root <path>", "Explicit coordination root")
+        .action((options) => {
+        try {
+            emit.data(readSemanticServiceStatus(resolve(options.root ?? coordRoot(context))));
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_service_status_failed", error);
+        }
+    });
+    service
+        .command("stop")
+        .description("Request a graceful stop after the current model call")
+        .option("--root <path>", "Explicit coordination root")
+        .action(async (options) => {
+        try {
+            const root = resolve(options.root ?? coordRoot(context));
+            let status = requestSemanticServiceStop(root);
+            const deadline = Date.now() + 5_000;
+            while (status.running && Date.now() < deadline) {
+                await new Promise((done) => setTimeout(done, 50));
+                status = readSemanticServiceStatus(root);
+            }
+            emit.data(status);
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_service_stop_failed", error);
+        }
+    });
+    service
+        .command("daemon", { hidden: true })
+        .description("Internal detached semantic service entrypoint")
+        .option("--root <path>", "Explicit coordination root")
+        .option("--calls-per-hour <count>", "Configured call ceiling below the hard limit", integer)
+        .action(async (options) => {
+        try {
+            emit.data(await runSemanticServiceDaemon({
+                coordRoot: resolve(options.root ?? coordRoot(context)),
+                callsPerHour: options.callsPerHour,
+            }));
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_service_daemon_failed", error);
+        }
+    });
+    semantic
+        .command("inspect")
+        .description("Inspect one generation or instance semantic document")
+        .argument("<instance-or-generation>")
+        .option("--root <path>", "Explicit coordination root")
+        .action((instanceOrGeneration, options) => {
+        try {
+            const document = inspectSemanticDocument(resolve(options.root ?? coordRoot(context)), instanceOrGeneration);
+            if (!document)
+                throw new Error(`no semantic document for ${instanceOrGeneration}`);
+            emit.data(document);
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_inspect_failed", error);
+        }
+    });
+    semantic
+        .command("doctor")
+        .description("Inspect semantic reader availability without making a model request")
+        .option("--root <path>", "Explicit coordination root")
+        .action((options) => {
+        try {
+            const root = resolve(options.root ?? coordRoot(context));
+            emit.data({
+                schema_version: 1,
+                root,
+                storage: semanticPaths(root).root,
+                readers: discoverSemanticReaders(createSemanticAdapters()),
+                manifest: readManifestSafe(root),
+            });
+        }
+        catch (error) {
+            emitFailure(emit, "semantic_doctor_failed", error);
+        }
+    });
+}
+function coordRoot(context) {
+    return resolve(context?.resolveCoordRoot?.() ??
+        context?.repoRoot ??
+        process.env.HARNERY_COORD_ROOT ??
+        process.cwd());
+}
+function integer(value) {
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < 1)
+        throw new Error("count must be a positive integer");
+    return parsed;
+}
+function readManifestSafe(root) {
+    try {
+        return readSemanticManifest(root);
+    }
+    catch {
+        return undefined;
+    }
+}
+function emitFailure(emit, code, error) {
+    emit.error({ code, message: error instanceof Error ? error.message : String(error) });
+    throw error;
+}

package/dist/commands/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAiCnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AA8BD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA0K5E"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAkCnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AAyCD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA6K5E"}

package/dist/commands/web.js

@@ -4,6 +4,7 @@ import { createServer } from "node:net";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
+import { ensureSemanticServiceRunning } from "../core/semantic/service.js";
 import { lazyFetchWebRoot, webRunner } from "./web-fetch.js";
 /**
  * `harn web`: Next.js dashboard for harnery's coord state.
@@ -65,6 +66,20 @@ export function nodeOptionsWithHeapCap(mb) {
         return inherited;
     return `${inherited} --max-old-space-size=${mb}`.trim();
 }
+async function startSemanticServiceWithWeb(coordRoot, emit) {
+    const result = await ensureSemanticServiceRunning(coordRoot);
+    if (result.state === "started")
+        emit.log("semantic reader · started automatically", "info");
+    if (result.state === "running")
+        emit.log("semantic reader · already running", "info");
+    if (result.state === "paused")
+        emit.log("semantic reader · paused by operator", "info");
+    if (result.state === "inactive")
+        emit.log("semantic reader · waiting for active V3", "info");
+    if (result.state === "unavailable") {
+        emit.log(`semantic reader · unavailable (${result.error ?? "startup failed"})`, "warn");
+    }
+}
 /**
  * Resolve the web app root. A local `web/` (source checkout / submodule) wins.
  * Otherwise, on an npm install, lazy-fetch it (clone + install) unless the
@@ -168,6 +183,7 @@ export function registerWebCommand(program, emit) {
         }
         if (!(await requireAvailablePort(emit, port)))
             return;
+        await startSemanticServiceWithWeb(coordRoot, emit);
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (${mode})`, "info");
         emit.log(`files origin · http://harnery-files.localhost:${port}`, "info");
@@ -253,6 +269,7 @@ export function registerWebCommand(program, emit) {
         }
         if (!(await requireAvailablePort(emit, port)))
             return;
+        await startSemanticServiceWithWeb(coordRoot, emit);
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
         emit.log(`harn web · http://localhost:${port} (start)`, "info");
         emit.log(`reading .harnery/ from: ${coordRoot}`, "info");

package/dist/core/agents/canonical-emit.d.ts

@@ -10,6 +10,7 @@
  * seconds and record the observation before the parent command exits.
  */
 import type { LiveCoordinationObservationV3 } from "../events/v3/live-observation.js";
+import type { Heartbeat } from "./state/heartbeat-reader.js";
 export type EventV3EmitObservation = LiveCoordinationObservationV3 | {
     event_type: "coord.lifecycle_changed";
     new_state: "active" | "blocked" | "done";
@@ -35,4 +36,6 @@ export declare function emitEventV3(input: EventV3EmitInput): boolean;
  * Normalize the heartbeat's `platform` field to the canonical Adapter type.
  */
 export declare function normalizeAdapter(platform: string | undefined): "claude-code" | "cursor" | "codex";
+/** Producer joins use the private native session ID, never its V3 fingerprint. */
+export declare function nativeSessionIdentity(row: Pick<Heartbeat, "native_session_id" | "session_id"> | null | undefined, fallback: string): string;
 //# sourceMappingURL=canonical-emit.d.ts.map

package/dist/core/agents/canonical-emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAItF,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B;IACE,UAAU,EAAE,yBAAyB,CAAC;IACtC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA4C5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG"}
+{"version":3,"file":"canonical-emit.d.ts","sourceRoot":"","sources":["../../../src/core/agents/canonical-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAGtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,MAAM,sBAAsB,GAC9B,6BAA6B,GAC7B;IACE,UAAU,EAAE,yBAAyB,CAAC;IACtC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5C,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA4C5D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAIjG;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,GAAG,YAAY,CAAC,GAAG,IAAI,GAAG,SAAS,EAC3E,QAAQ,EAAE,MAAM,GACf,MAAM,CAQR"}

package/dist/core/agents/canonical-emit.js

@@ -80,3 +80,15 @@ export function normalizeAdapter(platform) {
         return "codex";
     return "claude-code";
 }
+/** Producer joins use the private native session ID, never its V3 fingerprint. */
+export function nativeSessionIdentity(row, fallback) {
+    if (row?.native_session_id)
+        return row.native_session_id;
+    // A projection-only row carries the privacy-safe canonical session
+    // fingerprint, not the adapter's native session ID needed to join the hook
+    // producer. Until a disposable cache exists, the resolved owner is the only
+    // native identity available to command surfaces.
+    if (row?.session_id && !/^sid_[a-f0-9]{64}$/.test(row.session_id))
+        return row.session_id;
+    return fallback;
+}

package/dist/core/agents/claim-path.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Canonical identity for an authority-bearing write claim.
+ *
+ * Workspace paths stay portable and repository-relative. Approved paths
+ * outside the coordination root become resolved absolute paths so a later
+ * release matches whether the caller supplies the stored dot-dot form or the
+ * absolute target. This is lexical identity only; finalization policy owns the
+ * physical containment and symlink checks before a claim is acquired.
+ */
+export declare function canonicalClaimPath(coordRoot: string, value: string): string;
+//# sourceMappingURL=claim-path.d.ts.map

package/dist/core/agents/claim-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-path.d.ts","sourceRoot":"","sources":["../../../src/core/agents/claim-path.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAO3E"}

package/dist/core/agents/claim-path.js

@@ -0,0 +1,22 @@
+import { isAbsolute, relative, resolve, sep } from "node:path";
+/**
+ * Canonical identity for an authority-bearing write claim.
+ *
+ * Workspace paths stay portable and repository-relative. Approved paths
+ * outside the coordination root become resolved absolute paths so a later
+ * release matches whether the caller supplies the stored dot-dot form or the
+ * absolute target. This is lexical identity only; finalization policy owns the
+ * physical containment and symlink checks before a claim is acquired.
+ */
+export function canonicalClaimPath(coordRoot, value) {
+    const root = resolve(coordRoot);
+    const absolute = resolve(root, value);
+    const fromRoot = relative(root, absolute);
+    const contained = fromRoot !== ".." && !fromRoot.startsWith(`..${sep}`) && !isAbsolute(fromRoot);
+    if (contained)
+        return portable(fromRoot || ".");
+    return portable(absolute);
+}
+function portable(value) {
+    return value.split(sep).join("/");
+}

package/dist/core/agents/coord-client.d.ts

@@ -104,9 +104,10 @@ export declare function pidStartToken(pid: number): string | null;
  * Prefer a row whose platform matches `HARNERY_AGENT_COORD_PLATFORM` (default
  * `claude-code`); otherwise return the first owner seen on the walk.
  *
- * Subagents intentionally do not write pid-map entries; a Bash-tool ppid-walk
- * from inside a subagent therefore resolves to the *parent's* pid-map entry.
- * v1 ships this behavior; a real subagent-aware bridge is out of scope.
+ * Subagents intentionally do not write pid-map entries; a bare Bash-tool
+ * ppid-walk from inside an unbridged child therefore resolves to the parent's
+ * pid-map entry. Native hook bridges supersede this fallback through the
+ * child session environment.
  */
 export declare function resolveOwner(): string | null;
 /**
@@ -120,6 +121,20 @@ export declare function resolveOwnerWithSource(): {
     owner: string | null;
     source: "env" | "pidmap" | "pidmap_fallback" | "session_env" | "active_singleton" | "none";
 };
+/**
+ * The nearest pid-map anchor on our own ppid chain whose start token PROVES the
+ * row still describes the process holding that pid, or null when the nearest
+ * row is unverified, recycled, or absent.
+ *
+ * Nearest matters: in a nested-agent tree (session A spawns a headless session
+ * B whose shell runs this code), both A's and B's adapter processes are
+ * ancestors, and only the innermost one owns this process's tool environment.
+ * Exported for unit testing with an injectable root.
+ */
+export declare function nearestVerifiedSessionAnchor(root: string): {
+    owner: string;
+    platform: string;
+} | null;
 /**
  * Walk our own ppid chain for a pid-map row in ONE given root.
  *
@@ -149,6 +164,17 @@ export declare function sessionIdentityFromEnv(): string | null;
  * Exported for unit testing with an injectable root.
  */
 export declare function resolveOwnerBySessionEnv(root: string): string | null;
+/**
+ * `resolveOwnerBySessionEnv` plus WHICH adapter's producer state the session id
+ * joined. The caller uses the adapter to tell a same-adapter conflict (the env
+ * var is stamped fresh per tool call and outranks a possibly-lagging pid-map
+ * row) from a cross-adapter one (the var is inherited context from an outer
+ * session and the verified row wins).
+ */
+export declare function resolveOwnerBySessionEnvDetailed(root: string): {
+    owner: string;
+    adapters: string[];
+} | null;
 /**
  * Return the native instance label of the sole live V3 generation in this
  * coord root, or null if there are zero or more than one.

package/dist/core/agents/coord-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coord-client.d.ts","sourceRoot":"","sources":["../../../src/core/agents/coord-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAWhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOhF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CA+B7E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAeD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD;AAiED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2CxD;AAgCD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,GAAG,MAAM,CAAC;CAC5F,CA2CA;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,iBAAiB,GAAG,MAAM,CAAC;CAC/C,CAyBA;AAqBD,sFAAsF;AACtF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAuCD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYpE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOpE"}
+{"version":3,"file":"coord-client.d.ts","sourceRoot":"","sources":["../../../src/core/agents/coord-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAWhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOhF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CA+B7E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAeD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD;AAiED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2CxD;AAgCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,GAAG,MAAM,CAAC;CAC5F,CAsEA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsB5C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,iBAAiB,GAAG,MAAM,CAAC;CAC/C,CAyBA;AAqBD,sFAAsF;AACtF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAuCD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAmB9C;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOpE"}

package/dist/core/agents/coord-client.js

@@ -339,9 +339,10 @@ function readPidmapRow(pidmapDir, pid) {
  * Prefer a row whose platform matches `HARNERY_AGENT_COORD_PLATFORM` (default
  * `claude-code`); otherwise return the first owner seen on the walk.
  *
- * Subagents intentionally do not write pid-map entries; a Bash-tool ppid-walk
- * from inside a subagent therefore resolves to the *parent's* pid-map entry.
- * v1 ships this behavior; a real subagent-aware bridge is out of scope.
+ * Subagents intentionally do not write pid-map entries; a bare Bash-tool
+ * ppid-walk from inside an unbridged child therefore resolves to the parent's
+ * pid-map entry. Native hook bridges supersede this fallback through the
+ * child session environment.
  */
 export function resolveOwner() {
     return resolveOwnerWithSource().owner;
@@ -368,9 +369,34 @@ export function resolveOwnerWithSource() {
     // Every supported adapter exports its native session id into subprocesses.
     // Match it against the live V3 producer state, never a disposable cache.
     if (shouldPreferSessionEnv()) {
-        const bySession = resolveOwnerBySessionEnv(root);
+        const bySession = resolveOwnerBySessionEnvDetailed(root);
         if (bySession) {
-            return { owner: bySession, source: "session_env" };
+            // Env vars cross process boundaries that session identity does not: a
+            // nested different-adapter child inherits its spawner's exported id (a
+            // Codex session's CODEX_THREAD_ID survives into a `claude -p` child's
+            // shells untouched), and that stale statement joins the spawner's live
+            // producer. The nearest token-verified pid-map anchor names the session
+            // whose tool environment this process actually runs in, so on a
+            // CROSS-adapter conflict the anchor wins — the anchoring adapter never
+            // stamps another adapter's variable, so a foreign-adapter id here is
+            // inherited context, while the anchor row is re-healed on every tool
+            // call. A SAME-adapter conflict keeps the env: the adapter stamps its
+            // own variable fresh per tool call, and the row may lag one heal (e.g.
+            // a session id change inside one process). Only per-session-process
+            // adapters may anchor (claude-code, codex) — Cursor sessions share one
+            // terminal process, so a verified Cursor row can belong to a sibling
+            // session. Unverified rows keep losing to the env too: without a start
+            // token the row is the guess the env ordering was introduced to beat.
+            // Never for bridge-marked children: a connector crosses a process-tree
+            // boundary, so an anchor in THIS tree is someone else's by definition.
+            const anchor = bridge ? null : nearestVerifiedSessionAnchor(root);
+            if (anchor &&
+                anchor.owner !== bySession.owner &&
+                !bySession.adapters.includes(anchor.platform) &&
+                (anchor.platform === "claude-code" || anchor.platform === "codex")) {
+                return { owner: anchor.owner, source: "pidmap" };
+            }
+            return { owner: bySession.owner, source: "session_env" };
         }
     }
     // Connector children cross process-tree boundaries where pid ancestry is
@@ -394,6 +420,42 @@ export function resolveOwnerWithSource() {
     }
     return { owner: null, source: "none" };
 }
+/**
+ * The nearest pid-map anchor on our own ppid chain whose start token PROVES the
+ * row still describes the process holding that pid, or null when the nearest
+ * row is unverified, recycled, or absent.
+ *
+ * Nearest matters: in a nested-agent tree (session A spawns a headless session
+ * B whose shell runs this code), both A's and B's adapter processes are
+ * ancestors, and only the innermost one owns this process's tool environment.
+ * Exported for unit testing with an injectable root.
+ */
+export function nearestVerifiedSessionAnchor(root) {
+    const pidmapDir = resolve(root, ".harnery", "pid-map");
+    if (!existsSync(pidmapDir))
+        return null;
+    let pid = process.pid;
+    for (let hop = 0; hop < 20; hop++) {
+        if (pid === null)
+            break;
+        const row = readPidmapRow(pidmapDir, pid);
+        if (row) {
+            const owner = parsePidmapRowOwner(row);
+            if (owner && !pidWasRecycled(pid, row)) {
+                // A recycled row is about a dead process's tenure of this pid — walk
+                // past it like the owner walk does. A live row without a provable
+                // token match is the nearest anchor but not a VERIFIED one: stop and
+                // report none, so the session env keeps outranking guesses.
+                const token = parsePidmapRowStartToken(row);
+                if (!token || !pidStartToken(pid))
+                    return null;
+                return { owner, platform: parsePidmapRowPlatform(row) };
+            }
+        }
+        pid = readPpid(pid);
+    }
+    return null;
+}
 /**
  * Walk our own ppid chain for a pid-map row in ONE given root.
  *
@@ -501,19 +563,36 @@ function shouldPreferSessionEnv() {
  * Exported for unit testing with an injectable root.
  */
 export function resolveOwnerBySessionEnv(root) {
+    return resolveOwnerBySessionEnvDetailed(root)?.owner ?? null;
+}
+/**
+ * `resolveOwnerBySessionEnv` plus WHICH adapter's producer state the session id
+ * joined. The caller uses the adapter to tell a same-adapter conflict (the env
+ * var is stamped fresh per tool call and outranks a possibly-lagging pid-map
+ * row) from a cross-adapter one (the var is inherited context from an outer
+ * session and the verified row wins).
+ */
+export function resolveOwnerBySessionEnvDetailed(root) {
     const sessionIds = sessionIdsFromEnv();
     if (sessionIds.length === 0)
         return null;
     const adapters = adapterCandidatesFromEnv();
-    const matches = new Set();
+    const matches = new Map();
     for (const sessionId of sessionIds) {
         for (const adapter of adapters) {
             const state = readHookProducerStateV3(root, adapter, sessionId);
-            if (state && !state.terminal)
-                matches.add(nativeOwnerForV3Instance(root, state.instance_id));
+            if (state && !state.terminal) {
+                const owner = nativeOwnerForV3Instance(root, state.instance_id);
+                const set = matches.get(owner) ?? new Set();
+                set.add(adapter);
+                matches.set(owner, set);
+            }
         }
     }
-    return matches.size === 1 ? [...matches][0] : null;
+    if (matches.size !== 1)
+        return null;
+    const [owner, adapterSet] = [...matches.entries()][0];
+    return { owner, adapters: [...adapterSet] };
 }
 /**
  * Return the native instance label of the sole live V3 generation in this

package/dist/core/agents/live-authority-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-authority-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-authority-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAehE,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,iDAAiD,CAAC;AAoBzD,eAAO,MAAM,gCAAgC,EAAG,iBAA0B,CAAC;AAE3E,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAI3C;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,mCAAmC,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,OAAO,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;CAChC;AAED,UAAU,mBAAmB;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,oCAAoC,CAkDvC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C,iCAAiC,CAiCnC;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,iCAAiC,CAmCnC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B,GACA,iCAAiC,CAuCnC;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChE,iCAAiC,CAuBnC;AAuDD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAI/E"}
+{"version":3,"file":"live-authority-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-authority-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAehE,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,iDAAiD,CAAC;AAqBzD,eAAO,MAAM,gCAAgC,EAAG,iBAA0B,CAAC;AAE3E,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAI3C;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,mCAAmC,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,OAAO,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;CAChC;AAED,UAAU,mBAAmB;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,oCAAoC,CAkDvC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C,iCAAiC,CAiCnC;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,iCAAiC,CAmCnC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B,GACA,iCAAiC,CAuCnC;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChE,iCAAiC,CAuBnC;AAuDD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAI/E"}

package/dist/core/agents/live-authority-v3.js

@@ -4,6 +4,7 @@ import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from
 import { LIVE_HOOK_V3_PRODUCER_ID, liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
 import { recordCoordinationAuthorityV3, } from "../events/v3/producers/coordination-recorder.js";
 import { readTerminalHookProducerStateV3, recordHookSignalV3, } from "../events/v3/producers/recorder.js";
+import { canonicalClaimPath } from "./claim-path.js";
 import { acquireClaim, readHeartbeat, releaseClaim, setIdentityCache, setLifecycleCache, setTask, } from "./state/heartbeat-writer.js";
 import { ensureLiveCoordinationHeartbeat, liveCoordinationAdapterV3, } from "./state/live-coordination-view.js";
 import { recordNameAssumption } from "./state/names.js";
@@ -228,6 +229,3 @@ function authorityStateDigest(heartbeat) {
         display_name: heartbeat.name ?? null,
     }));
 }
-function canonicalClaimPath(coordRoot, path) {
-    return path.startsWith(`${coordRoot}/`) ? path.slice(coordRoot.length + 1) : path;
-}

package/dist/core/agents/live-lifecycle-v3.js

@@ -4,7 +4,7 @@ import { normalizeNativeIdV3 } from "../events/v3/canonical.js";
 import { readEventV3ControlState } from "../events/v3/control.js";
 import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
-import { readHookProducerStateV3 } from "../events/v3/producers/recorder.js";
+import { readJoinableHookProducerStateV3 } from "../events/v3/producers/recorder.js";
 import { writeEventV3 } from "../events/v3/writer.js";
 import { LiveCoordinationAuthorityV3Error } from "./live-authority-v3.js";
 import { liveCoordinationAdapterV3 } from "./state/live-coordination-view.js";
@@ -83,8 +83,8 @@ function withAttestedAdapter(input) {
     return { ...input, adapter };
 }
 function requireHookState(input) {
-    const hook = readHookProducerStateV3(input.coordRoot, input.adapter, input.nativeSessionId);
-    if (!hook || hook.instance_id !== liveInstanceIdV3(input.owner)) {
+    const hook = readJoinableHookProducerStateV3(input.coordRoot, input.adapter, input.nativeSessionId, liveInstanceIdV3(input.owner));
+    if (!hook) {
         throw new LiveCoordinationAuthorityV3Error("hook_generation_not_joinable");
     }
     return hook;

package/dist/core/agents/live-observation-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CAkJ3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}
+{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CAuJ3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}

package/dist/core/agents/live-observation-v3.js

@@ -5,7 +5,7 @@ import { readEventV3ControlState } from "../events/v3/control.js";
 import { readCoordinationViewV3 } from "../events/v3/coordination-view.js";
 import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
-import { readHookProducerStateV3 } from "../events/v3/producers/recorder.js";
+import { readJoinableHookProducerStateV3 } from "../events/v3/producers/recorder.js";
 import { writeEventV3 } from "../events/v3/writer.js";
 import { LiveCoordinationAuthorityV3Error } from "./live-authority-v3.js";
 import { liveCoordinationAdapterV3 } from "./state/live-coordination-view.js";
@@ -23,7 +23,7 @@ export function recordLiveCoordinationObservationV3(input) {
         throw new LiveCoordinationAuthorityV3Error("control_state_changed");
     }
     const adapter = liveCoordinationAdapterV3(input.coordRoot, input.owner) ?? input.adapter;
-    const hook = readHookProducerStateV3(input.coordRoot, adapter, input.nativeSessionId);
+    const hook = readJoinableHookProducerStateV3(input.coordRoot, adapter, input.nativeSessionId, liveInstanceIdV3(input.owner));
     if (!hook ||
         hook.terminal ||
         !hook.last_event_id ||

package/dist/core/agents/render/prompt-context.js

@@ -140,7 +140,7 @@ function computeFocusNudgeIfChanged(coordRoot, selfInstanceId, opts) {
         // Keyed on "a name was ever produced", not task_updated_at: a bare clear
         // as the first declaration must not end the naming window.
         needsNudge = true;
-        nudgeKind = "session-name";
+        nudgeKind = pendingSessionName ? "session-name-pending" : "session-name-unminted";
         message = pendingSessionName
             ? `This session name is still pending display. Before any prose or another tool call, send this exact block as your next assistant text:\n\n${sessionNameDisplayBlock(pendingSessionName)}`
             : `This session has no name yet: run \`${bin} agents set-task "<2-5 word session topic>"\` as your first tool call. ` +
@@ -170,18 +170,20 @@ function computeFocusNudgeIfChanged(coordRoot, selfInstanceId, opts) {
         clearHashFile(hashFile);
         return "";
     }
-    // The session-name reminder is deliberately NOT deduped: it re-emits on
-    // every prompt until a name is produced, because the "still unnamed" state
-    // is the failure state — deduping it erases the only reminder after one
-    // ignored prompt (the miss mode operators reported). Bounded in practice:
-    // Stop rule 3/3 forces a set-task on the first tool-using turn.
-    if (nudgeKind === "session-name") {
+    // An unminted session still gets a fresh reminder on every prompt until its
+    // first focus declaration. Once a name exists, the exact pending-name prompt
+    // is delivered once per minted value. Repeating it on every prompt creates
+    // an unbounded loop on adapters that cannot verify assistant reply text.
+    if (nudgeKind === "session-name-unminted") {
         clearHashFile(hashFile);
         return message;
     }
-    // Dedup the task-unset/stale reminders on kind + task state so a repeat
-    // prompt in the same state stays quiet.
-    const state = `${nudgeKind}|task=${taskValue}|updated=${hb.task_updated_at ?? ""}|threshold=${threshold}`;
+    // A pending reminder is keyed only to the minted name: changing the task
+    // must not reconstruct or re-request that older title. Task reminders retain
+    // their own task-state key.
+    const state = nudgeKind === "session-name-pending"
+        ? `${nudgeKind}|name=${pendingSessionName ?? ""}`
+        : `${nudgeKind}|task=${taskValue}|updated=${hb.task_updated_at ?? ""}|threshold=${threshold}`;
     const newHash = sha256Hex16(state);
     const oldHash = safeRead(hashFile);
     if (oldHash && oldHash === newHash)

package/dist/core/agents/rules/stop-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAM3D,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAInE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CA6BvF;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,SAAS,OAAO,EAAE,GACzB,aAAa,CA2Gf"}
+{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAM3D,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAInE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CA6BvF;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,SAAS,OAAO,EAAE,GACzB,aAAa,CA6Gf"}