harnery 0.34.1 → 0.36.0

package/dist/commands/doctor.js

@@ -11,11 +11,12 @@
  * Exits 0 unless a required dep is missing.
  */
 import { spawnSync } from "node:child_process";
-import { existsSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { BUILTIN_ADAPTER_IDS } from "../core/adapters/index.js";
 import { resolveBinName, ripgrepAutoInstall } from "../core/config.js";
+import { countSummarizedSinceV3, listDiagnosticSummariesV3, } from "../core/events/v3/producers/diagnostic-summaries.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { loadAdapterWiring, summarizeAdapterWiring } from "../core/hooks/adapter/wiring.js";
 import { probeCodexHookAuthorization, } from "../core/hooks/codex-authorization.js";
@@ -69,8 +70,10 @@ export function registerDoctorCommand(program, emit) {
     });
 }
 export async function runChecks() {
+    const root = findCoordProjectRoot();
     const codexWslStatus = inspectCodexWslBridge();
-    const codexWslBridge = checkCodexWslBridge(codexWslStatus);
+    const recentCodexMidFlightCount = root ? countRecentCodexMidFlightOnboardings(root) : 0;
+    const codexWslBridge = codexWslBridgeCheck(codexWslStatus, recentCodexMidFlightCount);
     // Probe the adapter CLIs before the hook check runs, not in output order:
     // an unwired adapter only matters if its CLI is actually installed, and
     // probing once here keeps that join to one spawn per CLI.
@@ -123,18 +126,59 @@ function checkGitHookRegions() {
         };
     }
 }
-function checkCodexWslBridge(status) {
-    if (!status)
+export function codexWslBridgeCheck(status, recentMidFlightCount = 0) {
+    if (!status && recentMidFlightCount === 0)
         return null;
+    const historical = recentMidFlightCount === 0
+        ? null
+        : `${recentMidFlightCount} Codex mid-flight onboarding${recentMidFlightCount === 1 ? "" : "s"} recorded in the last 48h`;
     return {
         name: "codex:WSL bridge",
-        severity: status.ok ? "ok" : "warn",
-        detail: status.detail,
-        hint: status.ok
+        severity: status?.ok && !historical ? "ok" : "warn",
+        detail: [status?.detail, historical].filter(Boolean).join("; "),
+        hint: status?.ok && !historical
             ? undefined
             : "forward CODEX_THREAD_ID through WSLENV in the Codex shell environment policy, then start a fresh task",
     };
 }
+const CODEX_MID_FLIGHT_HISTORY_WINDOW_MS = 48 * 60 * 60 * 1000;
+/** Count bounded, privacy-safe recovery diagnostics so a healthy environment
+ * now does not hide an intermittent Codex-to-WSL identity drop. */
+export function countRecentCodexMidFlightOnboardings(coordRoot, nowMs = Date.now(), windowMs = CODEX_MID_FLIGHT_HISTORY_WINDOW_MS) {
+    // Occurrences past the producer's loose-exemplar bound live in summary
+    // files instead of loose diagnostics; count them too so the mitigation
+    // cannot hide an active Codex identity drop from this warning.
+    let count = 0;
+    try {
+        const listing = listDiagnosticSummariesV3(coordRoot);
+        count += countSummarizedSinceV3(listing.summaries, nowMs - windowMs, (summary) => summary.category === "mid_flight_onboarding" && summary.metadata.adapter === "codex", nowMs);
+    }
+    catch {
+        // Summary reads are best-effort; loose diagnostics below still count.
+    }
+    const directory = path.join(coordRoot, ".harnery", "ledgers", "v3", "diagnostics");
+    if (!existsSync(directory))
+        return count;
+    for (const name of readdirSync(directory)) {
+        if (!name.startsWith("mid_flight_onboarding-") || !name.endsWith(".json"))
+            continue;
+        try {
+            const row = JSON.parse(readFileSync(path.join(directory, name), "utf8"));
+            const recordedAt = typeof row.recorded_at === "string" ? Date.parse(row.recorded_at) : NaN;
+            if (row.category === "mid_flight_onboarding" &&
+                row.adapter === "codex" &&
+                Number.isFinite(recordedAt) &&
+                recordedAt <= nowMs &&
+                nowMs - recordedAt <= windowMs) {
+                count += 1;
+            }
+        }
+        catch {
+            // A malformed best-effort diagnostic cannot make doctor fail.
+        }
+    }
+    return count;
+}
 export function codexAuthorizationCheck(result) {
     const reviewHint = "terminal UI: run `/hooks`; Codex Desktop: open Settings > Hooks; after approval, start a fresh task";
     if (result.status === "runnable") {

package/dist/commands/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/commands/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAkC1E,uEAAuE;AACvE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA+CN"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/commands/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAmC1E,uEAAuE;AACvE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA+CN"}

package/dist/commands/events.js

@@ -72,6 +72,7 @@ function summarizeByGeneration(turns) {
         tool_ms: sumMetrics(group.map(({ tool_ms }) => tool_ms)),
         command_ms: sumMetrics(group.map(({ command_exclusive_ms }) => command_exclusive_ms)),
         wait_ms: sumMetrics(group.map(({ wait_ms }) => wait_ms)),
+        agent_action_ms: sumMetrics(group.map(({ response_latency }) => response_latency.agent_action_ms)),
         inference_ms: sumMetrics(group.map(({ inference_ms }) => inference_ms)),
         harness_ms: sumMetrics(group.map(({ harness_ms }) => harness_ms)),
         residual_ms: sumMetrics(group.map(({ residual_ms }) => residual_ms)),
@@ -129,6 +130,8 @@ function renderTurns(turns) {
         "TOOL",
         "COMMAND",
         "WAIT",
+        "ACTION",
+        "POST-TOOL",
         "INFERENCE",
         "HARNESS",
         "RESIDUAL",
@@ -140,6 +143,8 @@ function renderTurns(turns) {
         formatMetric(turn.tool_ms),
         formatMetric(turn.command_exclusive_ms),
         formatMetric(turn.wait_ms),
+        formatMetric(turn.response_latency.agent_action_ms),
+        formatMetric(turn.response_latency.post_tool_response_ms),
         formatMetric(turn.inference_ms),
         formatMetric(turn.harness_ms),
         formatMetric(turn.residual_ms),
@@ -147,13 +152,25 @@ function renderTurns(turns) {
     ]));
 }
 function renderGenerations(rows) {
-    return renderTable(["GENERATION", "TURNS", "WALL", "TOOL", "COMMAND", "WAIT", "INFERENCE", "HARNESS", "RESIDUAL"], rows.map((row) => [
+    return renderTable([
+        "GENERATION",
+        "TURNS",
+        "WALL",
+        "TOOL",
+        "COMMAND",
+        "WAIT",
+        "ACTION",
+        "INFERENCE",
+        "HARNESS",
+        "RESIDUAL",
+    ], rows.map((row) => [
         row.generation_id,
         String(row.turns),
         formatMetric(row.wall_ms),
         formatMetric(row.tool_ms),
         formatMetric(row.command_ms),
         formatMetric(row.wait_ms),
+        formatMetric(row.agent_action_ms),
         formatMetric(row.inference_ms),
         formatMetric(row.harness_ms),
         formatMetric(row.residual_ms),

package/dist/commands/fetch.js

@@ -63,13 +63,14 @@ async function runFetch(url, opts, emit, context) {
             redirect: opts.redirect,
             signal: ac.signal,
             extraHeaders: context?.extraHeaders,
+            responseType: "bytes",
         });
     }
     finally {
         clearTimeout(timer);
     }
     if (opts.json) {
-        emit.data(result);
+        emit.data({ ...result, body: new TextDecoder().decode(result.body) });
         return;
     }
     if (opts.status) {
@@ -83,15 +84,15 @@ async function runFetch(url, opts, emit, context) {
     if (opts.output) {
         writeFileSync(opts.output, result.body);
         emit.file(opts.output, {
-            bytes: result.body.length,
+            bytes: result.body.byteLength,
             status: result.status,
             status_text: result.statusText,
         });
     }
     else {
-        // Body is potentially binary; route as text since most fetch responses
-        // are text/HTML/JSON. Binary callers should use --output.
-        emit.text(result.body);
+        // Text destinations decode at the presentation boundary. File output
+        // above keeps the response bytes intact regardless of MIME type.
+        emit.text(new TextDecoder().decode(result.body));
     }
     if (jar && result.cookiesSaved > 0) {
         emit.log(`saved ${result.cookiesSaved} cookie${result.cookiesSaved === 1 ? "" : "s"} to ${jar.path}`, "info");

package/dist/commands/files.d.ts

@@ -0,0 +1,22 @@
+import type { Command } from "commander";
+import type { EmitContext, HarneryProgramContext } from "../commander.js";
+export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
+export type LocalFileUrlMode = "auto" | "raw" | "viewer";
+export interface LocalFileUrlOptions {
+    coordRoot: string;
+    port: number;
+    mode?: LocalFileUrlMode;
+}
+export interface LocalFileUrl {
+    url: string;
+    relPath: string;
+    mode: Exclude<LocalFileUrlMode, "auto">;
+}
+/**
+ * Mint the local browser URL for a file under the dashboard's coord root.
+ * HTML defaults to the isolated files origin so scripts and relative assets
+ * work. Other files default to the dashboard viewer.
+ */
+export declare function mintLocalFileUrl(input: string, options: LocalFileUrlOptions): LocalFileUrl;
+export declare function registerFilesCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/commands/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAK1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CACzC;AAuCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAS1F;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA6DN"}

package/dist/commands/files.js

@@ -0,0 +1,113 @@
+import { realpathSync, statSync } from "node:fs";
+import path from "node:path";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
+import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
+import { localFilesOriginUrl, localFileViewerUrl } from "../lib/local-file-url.js";
+export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
+function isOutsideRoot(relPath) {
+    return relPath === "" || relPath === ".." || relPath.startsWith(`..${path.sep}`);
+}
+function canonicalRepoPath(input, coordRoot) {
+    if (input.trim() === "")
+        throw new Error("path must not be empty");
+    // biome-ignore lint/suspicious/noControlCharactersInRegex: URL output must stay one clean line
+    if (/[\u0000-\u001f\u007f]/.test(input))
+        throw new Error("path contains control bytes");
+    let root;
+    try {
+        root = realpathSync(coordRoot);
+    }
+    catch {
+        throw new Error(`coord root does not exist: ${coordRoot}`);
+    }
+    const candidate = path.isAbsolute(input) ? input : path.resolve(root, input);
+    let canonical;
+    try {
+        canonical = realpathSync(candidate);
+    }
+    catch {
+        throw new Error(`file does not exist: ${input}`);
+    }
+    const relPath = path.relative(root, canonical);
+    if (isOutsideRoot(relPath) || path.isAbsolute(relPath)) {
+        throw new Error(`file is outside the coord root: ${input}`);
+    }
+    if (!statSync(canonical).isFile())
+        throw new Error(`path is not a file: ${input}`);
+    return relPath.split(path.sep).join("/");
+}
+function isHtmlPath(relPath) {
+    const lower = relPath.toLowerCase();
+    return lower.endsWith(".html") || lower.endsWith(".htm");
+}
+/**
+ * Mint the local browser URL for a file under the dashboard's coord root.
+ * HTML defaults to the isolated files origin so scripts and relative assets
+ * work. Other files default to the dashboard viewer.
+ */
+export function mintLocalFileUrl(input, options) {
+    const relPath = canonicalRepoPath(input, options.coordRoot);
+    const requestedMode = options.mode ?? "auto";
+    const mode = requestedMode === "auto" ? (isHtmlPath(relPath) ? "raw" : "viewer") : requestedMode;
+    const url = mode === "raw"
+        ? localFilesOriginUrl(relPath, options.port)
+        : localFileViewerUrl(relPath, options.port);
+    return { url, relPath, mode };
+}
+export function registerFilesCommand(program, emit, context) {
+    const files = program
+        .command("files")
+        .description("Mint browser links for files served by the local dashboard");
+    files
+        .command("url")
+        .description("Mint the local browser URL for a repo file")
+        .argument("<path>", "Repo-relative path, or an absolute path inside the coord root")
+        .option("-p, --port <port>", `Dashboard port (default ${DEFAULT_WEB_PORT})`)
+        .option("--coord-root <dir>", "Override the coord root")
+        .option("--raw", "Use the isolated files origin, regardless of extension")
+        .option("--viewer", "Use the dashboard file viewer, regardless of extension")
+        .action((filePath, opts) => {
+        if (opts.raw && opts.viewer) {
+            emit.error({
+                code: "conflicting_url_modes",
+                message: "--raw and --viewer cannot be used together",
+            });
+            emit.setExitCode(1);
+            return;
+        }
+        const coordRoot = opts.coordRoot ??
+            context?.resolveCoordRoot?.() ??
+            context?.repoRoot ??
+            resolveCoordRoot(process.cwd()) ??
+            process.cwd();
+        let port;
+        try {
+            port = resolveWebPort(opts.port, coordRoot);
+        }
+        catch (error) {
+            emit.error({
+                code: "invalid_web_port",
+                message: error instanceof Error ? error.message : "invalid web port",
+                hint: `Use an integer from 1024 through 65535; the default is ${DEFAULT_WEB_PORT}.`,
+            });
+            emit.setExitCode(1);
+            return;
+        }
+        try {
+            const result = mintLocalFileUrl(filePath, {
+                coordRoot,
+                port,
+                mode: opts.raw ? "raw" : opts.viewer ? "viewer" : "auto",
+            });
+            emit.text(`${result.url}\n`);
+        }
+        catch (error) {
+            emit.error({
+                code: "invalid_local_file",
+                message: error instanceof Error ? error.message : "invalid local file path",
+                hint: "Pass an existing file inside the dashboard coord root.",
+            });
+            emit.setExitCode(1);
+        }
+    });
+}

package/dist/commands/governor.js

@@ -1,10 +1,11 @@
-import { existsSync, readFileSync } from "node:fs";
+import { readFileSync } from "node:fs";
 import { dirname, isAbsolute, resolve } from "node:path";
 import { adapterProofInputs, createBuiltinAdapterRegistry, probeBinaryVersion, readAttestation, } from "../core/adapters/index.js";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
 import { workflowSubscriptionOnly } from "../core/config.js";
 import { inspectAdapterSpread } from "../core/governor/adapter-spread.js";
-import { approveGovernorPlan, configureGovernorService, createGovernor, governorServiceLogPath, listGovernorsWithWarnings, readGovernor, readGovernorPlan, readGovernorServiceConfig, readGovernorServiceStatus, rejectGovernorPlan, requestGovernorServiceStop, retryGovernorPlan, runGovernor, runGovernorServiceDaemon, spawnGovernorService, } from "../core/governor/index.js";
-import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
+import { approveGovernorPlan, configureGovernorService, createGovernor, listGovernorsWithWarnings, readGovernor, readGovernorPlan, readGovernorServiceConfig, readGovernorServiceStatus, rejectGovernorPlan, requestGovernorServiceStop, retryGovernorPlan, runGovernor, runGovernorServiceDaemon, spawnGovernorService, } from "../core/governor/index.js";
+import { readGovernorServiceLogs } from "../core/governor/service-read.js";
 import { loadPolicyFile } from "../core/policy/index.js";
 export function registerGovernorCommand(program, emit) {
     const registry = createBuiltinAdapterRegistry();
@@ -266,16 +267,17 @@ function registerServiceCommand(governor, registry, emit) {
             const lines = integer(opts.lines) ?? 50;
             if (lines > 10_000)
                 throw new Error("service log lines must not exceed 10000");
-            const path = governorServiceLogPath(coordRoot);
-            if (!existsSync(path)) {
+            const result = readGovernorServiceLogs(coordRoot, {
+                max_bytes: 512 * 1024,
+                max_records: 10_000,
+            });
+            if (result.lines.length === 0) {
                 emit.text("no governor service log\n");
                 return;
             }
-            const selected = readFileSync(path, "utf8")
-                .split("\n")
-                .slice(-(lines + 1))
-                .join("\n");
-            emit.text(selected.endsWith("\n") ? selected : `${selected}\n`);
+            emit.text(`${result.lines.slice(-lines).join("\n")}\n`);
+            if (result.truncated)
+                emit.log("governor service log read stopped at its bounded budget", "warn");
         });
     });
     service
@@ -706,7 +708,7 @@ function delay(ms) {
     return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
 }
 function withGovernorRoot(emit, fn) {
-    const coordRoot = findCoordRoot();
+    const coordRoot = resolveCoordRoot();
     if (!coordRoot) {
         emit.error({
             code: "no_coord_root",
@@ -724,7 +726,7 @@ function withGovernorRoot(emit, fn) {
     }
 }
 async function withGovernorRootAsync(emit, fn) {
-    const coordRoot = findCoordRoot();
+    const coordRoot = resolveCoordRoot();
     if (!coordRoot) {
         emit.error({
             code: "no_coord_root",

package/dist/commands/inbox.d.ts

@@ -0,0 +1,5 @@
+import type { Command } from "commander";
+import type { EmitContext } from "../commander.js";
+import type { HarneryInboxService } from "../core/inbox/service.js";
+export declare function registerInboxCommand(program: Command, emit: EmitContext, service?: HarneryInboxService): void;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/commands/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../src/commands/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,IAAI,CAmCN"}

package/dist/commands/inbox.js

@@ -0,0 +1,57 @@
+export function registerInboxCommand(program, emit, service) {
+    const inbox = program.command("inbox").description("Inspect private coordination inbox state");
+    inbox
+        .command("list <recipient>")
+        .option("--json", "Emit stable JSON")
+        .action((recipient, options) => {
+        run(emit, () => {
+            const rows = requireInboxService(service)
+                .pending(recipient)
+                .map((record) => ({
+                message_id: record.message_id,
+                sender_instance_id: record.sender_instance_id,
+                sender_display_name: record.sender_display_name,
+                created_at: record.created_at,
+                body_bytes: record.body_bytes,
+                body: record.body,
+            }));
+            if (options.json) {
+                emit.config({ format: "json" });
+                emit.data({ schema: "harnery.inbox-list/v1", recipient_instance_id: recipient, rows });
+            }
+            else
+                emit.rows(rows);
+        });
+    });
+    inbox
+        .command("status <recipient>")
+        .option("--json", "Emit stable JSON")
+        .action((recipient, options) => {
+        run(emit, () => {
+            const status = requireInboxService(service).status(recipient);
+            if (options.json) {
+                emit.config({ format: "json" });
+                emit.data(status);
+            }
+            else
+                emit.rows([status]);
+        });
+    });
+}
+function requireInboxService(service) {
+    if (!service)
+        throw new Error("coordination inbox is not configured by this host");
+    return service;
+}
+function run(emit, action) {
+    try {
+        action();
+    }
+    catch (error) {
+        emit.error({
+            code: "inbox_failed",
+            message: error instanceof Error ? error.message : String(error),
+        });
+        emit.setExitCode(1);
+    }
+}

package/dist/commands/init.d.ts

@@ -22,12 +22,11 @@ import { type AdapterId, type AdapterSpec } from "../core/hooks/adapter/events.j
 import { type SettingsFile } from "../core/hooks/adapter/wiring.js";
 export declare function registerInitCommand(program: Command, emit: EmitContext, binName?: string): void;
 /**
- * Runtime gates bound into an immutable V3 epoch. `init` is the explicit
- * upgrade boundary: when code or capability profiles change, it archives the
- * old epoch intact and activates a compatible one instead of letting upgraded
- * hooks fail closed against stale approvals.
+ * Runtime contracts bound into an immutable V3 epoch. `init` replaces the
+ * epoch only when the schema or adapter capability contract changed. A new
+ * Harnery build alone keeps the current epoch and its live session generations.
  */
-export declare function eventLedgerV3RuntimeIssues(control: EventV3ControlState, harneryBuild: string): string[];
+export declare function eventLedgerV3RuntimeIssues(control: EventV3ControlState): string[];
 export declare function codexHookReviewAction(adapter: AdapterId): string | null;
 /**
  * Merge agent-hook entries into a adapter settings object in place, idempotently.

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAInD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,iCAAiC,CAAC;AAmBzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CA+P/F;AAiBD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,CAoBV;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,GACjB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CA8CvE;AAwFD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAInD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,iCAAiC,CAAC;AAqBzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAgT/F;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAiBjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,GACjB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CA8CvE;AAwFD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}

package/dist/commands/init.js

@@ -25,9 +25,9 @@ import { canonicalJsonV3 } from "../core/events/v3/canonical.js";
 import { ADAPTER_CAPABILITY_PROFILES_V3 } from "../core/events/v3/capabilities.js";
 import { EVENT_V3_SCHEMA_DIGEST } from "../core/events/v3/generated.js";
 import { initializeEventLedgerV3, readEventV3ControlState, sha256V3, } from "../core/events/v3/index.js";
-import { liveEventV3BuildId } from "../core/events/v3/live-routing.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { agentHookPathForProject, commandWiresSubcommand, diffWiring, groupCommands, hookCommand, isAgentHookCommand, makeEntry, } from "../core/hooks/adapter/wiring.js";
+import { applyIndexerExclusions } from "../lib/indexer-exclusions.js";
 import { applyInstructions, checkInstructions, } from "../lib/instructions/apply.js";
 import { applyGitHooks, checkGitHooks } from "../lib/instructions/git-hooks.js";
 import { HostAddendumError } from "../lib/instructions/host-addendum.js";
@@ -42,7 +42,8 @@ export function registerInitCommand(program, emit, binName) {
         "report drift without writing (exit 0 fresh / 2 drift / 1 error).")
         .option("--adapter <id>", "claude-code | cursor | codex", "claude-code")
         .option("--dry-run", "Show what would change without writing")
-        .option("--check", "Report instructions/skills drift without writing; exit 0/2/1")
+        .option("--check", "Report managed-surface drift without writing; exit 0/2/1")
+        .option("--instructions-only", "Refresh only AGENTS.md regions and Harnery-owned skills; leave runtime wiring untouched")
         .option("--project-root <path>", "Project root (default: git toplevel, else cwd)")
         .action((opts) => {
         const adapter = opts.adapter;
@@ -59,6 +60,41 @@ export function registerInitCommand(program, emit, binName) {
         // init inside any checkout). Without this, re-running init from a host
         // CLI re-stamps the host's name into committed agent-facing surfaces.
         const bin = pinnedBinName(projectRoot) ?? (binName?.trim() ? binName : DEFAULT_BIN_NAME);
+        // ── --instructions-only: committed guidance, never runtime wiring ────
+        // Some hosts consume Harnery's managed instruction bundle without
+        // enabling local adapter hooks or an event ledger. Keep this branch
+        // before every coord-root, config, ledger, adapter-settings, and Git-hook
+        // operation so its no-runtime-writes contract is structural.
+        if (opts.instructionsOnly === true) {
+            if (opts.check === true) {
+                const { status, issues } = checkInstructions(projectRoot, { binName: bin, adapter });
+                const head = status === "fresh"
+                    ? `${bin} init --instructions-only --check: instructions + skills are current`
+                    : status === "drift"
+                        ? `${bin} init --instructions-only --check: drift found (re-run \`init --instructions-only\` to refresh)`
+                        : `${bin} init --instructions-only --check: error`;
+                const lines = issues.length
+                    ? `\n${issues.map((issue) => `  ✗ ${issue}`).join("\n")}`
+                    : "";
+                emit.text(`${head}${lines}`);
+                emit.setExitCode(status === "fresh" ? 0 : status === "drift" ? 2 : 1);
+                return;
+            }
+            const dryRun = opts.dryRun === true;
+            let applied;
+            try {
+                applied = applyInstructions(projectRoot, { binName: bin, adapter, dryRun });
+            }
+            catch (err) {
+                if (!(err instanceof HostAddendumError))
+                    throw err;
+                emit.text(`${bin} init --instructions-only: ${err.message}`);
+                emit.setExitCode(1);
+                return;
+            }
+            emit.text(renderInstructionsOnly(projectRoot, bin, dryRun, applied.actions, applied.warnings));
+            return;
+        }
         // ── --check: read-only drift report on every init-managed surface ─────
         if (opts.check === true) {
             const { status, issues } = checkInstructions(projectRoot, { binName: bin, adapter });
@@ -115,7 +151,7 @@ export function registerInitCommand(program, emit, binName) {
             const ledger = readEventV3ControlState(projectRoot);
             if (ledger.state !== "active")
                 issues.push(`event ledger V3 is ${ledger.state}`);
-            const ledgerRuntimeIssues = eventLedgerV3RuntimeIssues(ledger, gitBuild(HARNERY_ROOT));
+            const ledgerRuntimeIssues = eventLedgerV3RuntimeIssues(ledger);
             if (ledgerRuntimeIssues.length > 0) {
                 issues.push(`event ledger V3 is runtime-stale (${ledgerRuntimeIssues.join(", ")})`);
             }
@@ -153,6 +189,12 @@ export function registerInitCommand(program, emit, binName) {
             writeFileSync(resolve(coordDir, ".gitignore"), "*\n!.gitignore\n");
             actions.push("+ created .harnery/ (+ .harnery/.gitignore)");
         }
+        // ── 1a′. editor indexer exclusions ─────────────────────────────────────
+        // .harnery/.gitignore keeps git-aware tools out, but Cursor's codebase
+        // indexer and the VS Code/Cursor file watcher do not respect gitignore.
+        // A busy coord root holds enough ledger events and artifacts to become a
+        // boot-time indexing storm, so exclude it from both here.
+        actions.push(...applyIndexerExclusions(projectRoot, dryRun));
         // ── 1b. stamp the host bin name ────────────────────────────────────────
         // The coord binaries (agent-hook/agent-coord) and web UI run as harnery
         // itself, so they can't see a consumer CLI's name; they read it back from
@@ -179,7 +221,7 @@ export function registerInitCommand(program, emit, binName) {
         // ── 1d. universal V3 event ledger ────────────────────────────────────
         if (dryRun) {
             const ledger = readEventV3ControlState(projectRoot);
-            const runtimeIssues = eventLedgerV3RuntimeIssues(ledger, gitBuild(HARNERY_ROOT));
+            const runtimeIssues = eventLedgerV3RuntimeIssues(ledger);
             actions.push(ledger.state === "active" && runtimeIssues.length === 0
                 ? "· event ledger V3 is active"
                 : ledger.state === "active"
@@ -189,7 +231,7 @@ export function registerInitCommand(program, emit, binName) {
         else {
             const harneryBuild = gitBuild(HARNERY_ROOT);
             const ledgerBefore = readEventV3ControlState(projectRoot);
-            const runtimeIssues = eventLedgerV3RuntimeIssues(ledgerBefore, harneryBuild);
+            const runtimeIssues = eventLedgerV3RuntimeIssues(ledgerBefore);
             const initialized = initializeEventLedgerV3({
                 coordRoot: projectRoot,
                 harneryBuild,
@@ -278,12 +320,11 @@ function digestConfig(path) {
     return sha256V3(existsSync(path) ? readFileSync(path) : Buffer.from("{}\n"));
 }
 /**
- * Runtime gates bound into an immutable V3 epoch. `init` is the explicit
- * upgrade boundary: when code or capability profiles change, it archives the
- * old epoch intact and activates a compatible one instead of letting upgraded
- * hooks fail closed against stale approvals.
+ * Runtime contracts bound into an immutable V3 epoch. `init` replaces the
+ * epoch only when the schema or adapter capability contract changed. A new
+ * Harnery build alone keeps the current epoch and its live session generations.
  */
-export function eventLedgerV3RuntimeIssues(control, harneryBuild) {
+export function eventLedgerV3RuntimeIssues(control) {
     if (control.state !== "active")
         return [];
     const issues = [];
@@ -292,9 +333,6 @@ export function eventLedgerV3RuntimeIssues(control, harneryBuild) {
         issues.push("schema digest");
     if (profile.contract_source_digest !== EVENT_V3_SCHEMA_DIGEST)
         issues.push("contract digest");
-    if (!profile.producer_build_ids.includes(liveEventV3BuildId(harneryBuild))) {
-        issues.push("producer build");
-    }
     const expectedCapabilities = Object.values(ADAPTER_CAPABILITY_PROFILES_V3).map((value) => sha256V3(canonicalJsonV3(value)));
     if (expectedCapabilities.some((digest) => !profile.adapter_capability_profile_digests.includes(digest))) {
         issues.push("adapter capabilities");
@@ -623,6 +661,18 @@ function render(projectRoot, dryRun, actions, warnings = []) {
         : "\nDone. Start a session and check `harn agents whoami`.";
     return `${head}\n  root: ${projectRoot}\n${actions.map((a) => `  ${a}`).join("\n")}${warnBlock}${tail}`;
 }
+function renderInstructionsOnly(projectRoot, binName, dryRun, actions, warnings = []) {
+    const head = dryRun
+        ? `${binName} init --instructions-only (dry run): no changes written`
+        : `${binName} init --instructions-only`;
+    const warnBlock = warnings.length
+        ? `\n${warnings.map((warning) => `  ! ${warning}`).join("\n")}`
+        : "";
+    const tail = dryRun
+        ? "\nRe-run without --dry-run to apply."
+        : "\nDone. Adapter hooks, managed Git hooks, configuration, and event ledger state were left unchanged.";
+    return `${head}\n  root: ${projectRoot}\n${actions.map((action) => `  ${action}`).join("\n")}${warnBlock}${tail}`;
+}
 function gitTopLevel() {
     const r = spawnSync("git", ["rev-parse", "--show-toplevel"], { encoding: "utf8" });
     const out = r.status === 0 ? r.stdout.trim() : "";

package/dist/commands/ledger-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-v3.d.ts","sourceRoot":"","sources":["../../src/commands/ledger-v3.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAQ1E,2DAA2D;AAC3D,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA+DN"}
+{"version":3,"file":"ledger-v3.d.ts","sourceRoot":"","sources":["../../src/commands/ledger-v3.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAmC1E,2DAA2D;AAC3D,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAsWN"}