harnery 0.34.1 → 0.36.0

package/dist/core/agents/live-authority-v3.js

@@ -1,11 +1,15 @@
 import { randomUUID } from "node:crypto";
-import { canonicalJsonV3, sha256V3 } from "../events/v3/canonical.js";
+import { canonicalJsonV3, normalizeNativeIdV3, sha256V3 } from "../events/v3/canonical.js";
+import { readEventV3ControlState } from "../events/v3/control.js";
 import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../events/v3/coordination-view.js";
+import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { LIVE_HOOK_V3_PRODUCER_ID, liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
 import { recordCoordinationAuthorityV3, } from "../events/v3/producers/coordination-recorder.js";
-import { readTerminalHookProducerStateV3, recordHookSignalV3, } from "../events/v3/producers/recorder.js";
+import { listHookProducerStateRecordsV3, readHookProducerStateV3, readTerminalHookProducerStateV3, recordHookSignalV3, } from "../events/v3/producers/recorder.js";
+import { canonicalClaimPath } from "./claim-path.js";
 import { acquireClaim, readHeartbeat, releaseClaim, setIdentityCache, setLifecycleCache, setTask, } from "./state/heartbeat-writer.js";
-import { ensureLiveCoordinationHeartbeat, liveCoordinationAdapterV3, } from "./state/live-coordination-view.js";
+import { liveCoordinationAdapterV3, readLiveCoordinationRow, } from "./state/live-coordination-view.js";
+import { ensureLiveCoordinationHeartbeat } from "./state/live-coordination-writer.js";
 import { recordNameAssumption } from "./state/names.js";
 export const LIVE_COORDINATION_V3_PRODUCER_ID = "prd_agent-coord";
 export class LiveCoordinationAuthorityV3Error extends Error {
@@ -16,6 +20,237 @@ export class LiveCoordinationAuthorityV3Error extends Error {
         this.name = "LiveCoordinationAuthorityV3Error";
     }
 }
+/**
+ * Establish the missing generation authority for one adapter-native session,
+ * then reconstruct its disposable heartbeat cache.
+ *
+ * This is intentionally narrower than mid-flight hook onboarding. The caller
+ * must supply an already validated native session, adapter, and current
+ * instance identity. Existing authority is reused only when all three bind to
+ * the same non-terminal producer generation. A terminal generation, an
+ * adapter/session collision, or any disagreement between private producer
+ * control and the public projection fails closed. No turn is synthesized.
+ */
+export function bootstrapLiveCoordinationAuthorityV3(input) {
+    if (!/^[a-zA-Z0-9._-]{1,128}$/.test(input.owner)) {
+        throw new LiveCoordinationAuthorityV3Error("invalid_instance_identity");
+    }
+    if (input.nativeSessionId.length === 0 ||
+        input.nativeSessionId.length > 512 ||
+        input.nativeSessionId.includes("\0")) {
+        throw new LiveCoordinationAuthorityV3Error("invalid_native_session_identity");
+    }
+    const route = resolveLiveEventLedgerRouteV3(input.coordRoot);
+    if (route.state === "blocked")
+        throw new LiveCoordinationAuthorityV3Error(route.reason);
+    const control = readEventV3ControlState(input.coordRoot);
+    if (control.state !== route.mode) {
+        throw new LiveCoordinationAuthorityV3Error("control_state_mismatch");
+    }
+    const instanceId = liveInstanceIdV3(input.owner);
+    const rootId = control.genesis.event.scope.root_id;
+    const context = fingerprintContextV3(input.coordRoot, rootId, undefined, control.genesis.profile.privacy_key_epoch);
+    const sessionId = `sid_${normalizeNativeIdV3(context, `${input.adapter}.session`, input.nativeSessionId).slice(4)}`;
+    const view = readAuthoritySafeViewForBootstrap(input.coordRoot);
+    const existing = view.instances[instanceId];
+    const sessionStates = readSessionProducerStatesForBootstrap(input.coordRoot, input.nativeSessionId);
+    const instanceStates = readInstanceProducerStatesForBootstrap(input.coordRoot, instanceId);
+    const crossAdapter = sessionStates.find((state) => state.adapter !== input.adapter);
+    if (crossAdapter) {
+        throw new LiveCoordinationAuthorityV3Error("cross_adapter_identity");
+    }
+    const crossInstance = sessionStates.find((state) => state.instance_id !== instanceId);
+    if (crossInstance) {
+        throw new LiveCoordinationAuthorityV3Error("cross_instance_identity");
+    }
+    const direct = sessionStates.find((state) => state.adapter === input.adapter);
+    if (direct?.terminal ||
+        (!existing && terminalGenerationForSession(view, instanceId, sessionId))) {
+        throw new LiveCoordinationAuthorityV3Error("terminal_generation_forbidden");
+    }
+    const liveInstanceStates = instanceStates.filter((state) => !state.terminal);
+    if (liveInstanceStates.length > 1 || sessionStates.length > 1) {
+        throw new LiveCoordinationAuthorityV3Error("generation_ambiguous");
+    }
+    if (existing) {
+        const observedAdapter = existing.runtime_attestation.adapter;
+        if (observedAdapter.state !== "observed" || observedAdapter.value.id !== input.adapter) {
+            throw new LiveCoordinationAuthorityV3Error("cross_adapter_identity");
+        }
+        if (existing.session_id !== sessionId) {
+            throw new LiveCoordinationAuthorityV3Error("cross_session_identity");
+        }
+        if (!direct ||
+            direct.terminal ||
+            direct.generation_id !== existing.generation_id ||
+            liveInstanceStates.length !== 1 ||
+            liveInstanceStates[0]?.generation_id !== existing.generation_id) {
+            throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+        }
+        return materializeBootstrappedAuthority(input, existing.generation_id, "reused");
+    }
+    if (direct || liveInstanceStates.length > 0) {
+        throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+    }
+    const started = recordHookSignalV3({
+        coordRoot: input.coordRoot,
+        mode: route.mode,
+        signal: "session-start",
+        payload: { raw: {}, session_id: input.nativeSessionId },
+        adapter: input.adapter,
+        instance_id: instanceId,
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: route.build_id,
+        platform: livePlatformV3(),
+        session_start_derivation: "validated_current_session_heal",
+    });
+    if (started.state !== "recorded" && started.state !== "already_started") {
+        const reason = "reason" in started ? `:${started.reason}` : "";
+        throw new LiveCoordinationAuthorityV3Error(`generation_bootstrap_failed:${started.state}${reason}`);
+    }
+    const after = readAuthoritySafeViewForBootstrap(input.coordRoot).instances[instanceId];
+    const producer = readSessionProducerStatesForBootstrap(input.coordRoot, input.nativeSessionId).filter((state) => state.adapter === input.adapter && state.instance_id === instanceId);
+    if (!after ||
+        after.session_id !== sessionId ||
+        producer.length !== 1 ||
+        producer[0]?.terminal ||
+        producer[0]?.generation_id !== after.generation_id) {
+        throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+    }
+    return materializeBootstrappedAuthority(input, after.generation_id, started.state === "recorded" ? "created" : "reused");
+}
+function readAuthoritySafeViewForBootstrap(coordRoot) {
+    try {
+        return requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(coordRoot));
+    }
+    catch (error) {
+        if (error instanceof LiveCoordinationAuthorityV3Error)
+            throw error;
+        throw new LiveCoordinationAuthorityV3Error("coordination_view_unsafe");
+    }
+}
+function readSessionProducerStatesForBootstrap(coordRoot, nativeSessionId) {
+    try {
+        return ["claude-code", "codex", "cursor"]
+            .map((adapter) => readHookProducerStateV3(coordRoot, adapter, nativeSessionId))
+            .filter((state) => state !== undefined);
+    }
+    catch {
+        throw new LiveCoordinationAuthorityV3Error("producer_state_unsafe");
+    }
+}
+function readInstanceProducerStatesForBootstrap(coordRoot, instanceId) {
+    try {
+        return listHookProducerStateRecordsV3(coordRoot, { includeTerminal: true })
+            .map((record) => record.state)
+            .filter((state) => state.instance_id === instanceId);
+    }
+    catch {
+        throw new LiveCoordinationAuthorityV3Error("producer_state_unsafe");
+    }
+}
+function terminalGenerationForSession(view, instanceId, sessionId) {
+    return Object.values(view.terminal_generations).some((generation) => generation.instance_id === instanceId && generation.session_id === sessionId);
+}
+function materializeBootstrappedAuthority(input, generationId, state) {
+    const heartbeat = ensureLiveCoordinationHeartbeat(input.coordRoot, input.owner, input.nativeSessionId, input.adapter);
+    if (!heartbeat || heartbeat.v3_generation_id !== generationId) {
+        throw new LiveCoordinationAuthorityV3Error("generation_materialization_failed");
+    }
+    return {
+        state,
+        adapter: input.adapter,
+        generation_id: generationId,
+        heartbeat,
+    };
+}
+/**
+ * Reapply private, generation-bound coordination state after a runtime epoch
+ * replaces the canonical ledger. The old heartbeat is only accepted for the
+ * same native session and a different V3 generation. Its task prose and
+ * lifecycle reason remain in the disposable cache; canonical events retain
+ * only the privacy-safe authority signals.
+ */
+export function restoreLiveCoordinationStateAfterEpochV3(input) {
+    const unchanged = {
+        state: "unchanged",
+        task: false,
+        claims: 0,
+        lifecycle: false,
+    };
+    const prior = input.prior;
+    if (!prior || prior.instance_id !== input.owner)
+        return unchanged;
+    if (prior.session_id !== input.nativeSessionId &&
+        prior.native_session_id !== input.nativeSessionId) {
+        return unchanged;
+    }
+    // The recorder just committed this hook under the named generation. When
+    // it is the cache's generation, no epoch replacement occurred and the
+    // expensive complete coordination projection cannot change the answer.
+    if (input.currentGenerationId && prior.v3_generation_id === input.currentGenerationId) {
+        return unchanged;
+    }
+    const view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(input.coordRoot));
+    const priorGenerationStillCurrent = [
+        ...Object.values(view.instances),
+        ...Object.values(view.terminal_generations),
+    ].some((generation) => generation.generation_id === prior.v3_generation_id);
+    if (priorGenerationStillCurrent)
+        return unchanged;
+    const current = readLiveCoordinationRow(input.coordRoot, input.owner);
+    if (!current || !prior.v3_generation_id || current.v3_generation_id === prior.v3_generation_id) {
+        return unchanged;
+    }
+    let task = false;
+    let claims = 0;
+    let lifecycle = false;
+    if (typeof prior.task === "string" && prior.task.length > 0 && current.task !== prior.task) {
+        recordLiveTaskChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            task: prior.task,
+        });
+        task = true;
+    }
+    const currentClaims = new Set((current.files_touched ?? []).map((path) => canonicalClaimPath(input.coordRoot, path)));
+    for (const path of [...new Set(prior.files_touched ?? [])].sort()) {
+        const canonical = canonicalClaimPath(input.coordRoot, path);
+        if (currentClaims.has(canonical))
+            continue;
+        recordLiveClaimChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            operation: "acquired",
+            path: canonical,
+        });
+        currentClaims.add(canonical);
+        claims += 1;
+    }
+    const priorLifecycle = prior.task_state ?? "active";
+    if (priorLifecycle !== "active" &&
+        (current.task_state !== priorLifecycle || current.task_state_reason !== prior.task_state_reason)) {
+        recordLiveLifecycleChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            state: priorLifecycle,
+            ...(prior.task_state_reason ? { reason: prior.task_state_reason } : {}),
+            ...(prior.suggested_session_name
+                ? { suggestedSessionName: prior.suggested_session_name }
+                : {}),
+        });
+        lifecycle = true;
+    }
+    return task || claims > 0 || lifecycle
+        ? { state: "restored", task, claims, lifecycle }
+        : unchanged;
+}
 /**
  * Open a fresh derived generation for a human-facing session that is executing
  * again after an authoritative terminal. The terminal generation is never
@@ -101,7 +336,7 @@ export function recordLiveLifecycleChangeV3(input) {
         task_state_reason: input.state === "active" ? undefined : input.reason,
         ...(input.suggestedSessionName ? { suggested_session_name: input.suggestedSessionName } : {}),
     };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "lifecycle-changed", {
         native_observation_id: input.observationId ?? `lifecycle-${randomUUID()}`,
@@ -127,7 +362,7 @@ export function recordLiveClaimChangeV3(input) {
         ].sort()
         : (before.files_touched ?? []).filter((path) => canonicalClaimPath(input.coordRoot, path) !== canonical);
     const desired = { ...before, files_touched: desiredFiles };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "claim-changed", {
         native_observation_id: input.observationId ?? `claim-${randomUUID()}`,
@@ -147,7 +382,7 @@ export function recordLiveIdentityChangeV3(input) {
     const subject = input.subject ?? input.owner;
     const before = requireHeartbeat(input, subject);
     const desired = { ...before, name: input.name, agent_id: input.identityId };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "identity-attested", {
         native_observation_id: input.observationId ?? `identity-${randomUUID()}`,
@@ -180,15 +415,15 @@ function recordLiveAuthority(input, signal, observation, expected, desired, appl
         producer_id: LIVE_COORDINATION_V3_PRODUCER_ID,
         build_id: route.build_id,
         platform: livePlatformV3(),
-        expected_prior_state_digest: authorityStateDigest(expected),
-        desired_state_digest: authorityStateDigest(desired),
+        expected_prior_state_digest: coordinationAuthorityStateDigestV3(expected),
+        desired_state_digest: coordinationAuthorityStateDigestV3(desired),
         reconciler: {
             readStateDigest: () => {
                 const heartbeat = readHeartbeat(input.coordRoot, subject);
                 if (!heartbeat || heartbeat.v3_generation_id !== expected.v3_generation_id) {
                     throw new LiveCoordinationAuthorityV3Error(`heartbeat_generation_mismatch:${subject}`);
                 }
-                return authorityStateDigest(heartbeat);
+                return coordinationAuthorityStateDigestV3(heartbeat);
             },
             apply: (_mutation) => apply(),
         },
@@ -216,7 +451,7 @@ function requireHeartbeat(input, owner) {
         throw new LiveCoordinationAuthorityV3Error(`heartbeat_missing:${owner}`);
     return heartbeat;
 }
-function authorityStateDigest(heartbeat) {
+export function coordinationAuthorityStateDigestV3(heartbeat) {
     return sha256V3(canonicalJsonV3({
         instance_id: heartbeat.v3_instance_id ?? heartbeat.instance_id,
         generation_id: heartbeat.v3_generation_id ?? null,
@@ -228,6 +463,3 @@ function authorityStateDigest(heartbeat) {
         display_name: heartbeat.name ?? null,
     }));
 }
-function canonicalClaimPath(coordRoot, path) {
-    return path.startsWith(`${coordRoot}/`) ? path.slice(coordRoot.length + 1) : path;
-}

package/dist/core/agents/live-lifecycle-v3.js

@@ -4,7 +4,7 @@ import { normalizeNativeIdV3 } from "../events/v3/canonical.js";
 import { readEventV3ControlState } from "../events/v3/control.js";
 import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
-import { readHookProducerStateV3 } from "../events/v3/producers/recorder.js";
+import { readJoinableHookProducerStateV3 } from "../events/v3/producers/recorder.js";
 import { writeEventV3 } from "../events/v3/writer.js";
 import { LiveCoordinationAuthorityV3Error } from "./live-authority-v3.js";
 import { liveCoordinationAdapterV3 } from "./state/live-coordination-view.js";
@@ -73,7 +73,12 @@ function recordObservation(input, eventType, payload) {
         monotonic_ns: process.hrtime.bigint().toString(),
     };
     const event = buildEventV3(eventType, { ...common, payload });
-    writeEventV3(input.coordRoot, event);
+    const durability = writeEventV3(input.coordRoot, event, {
+        expectedGenesisId: control.genesis.event.payload.genesis_id,
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new LiveCoordinationAuthorityV3Error("epoch_replaced");
+    }
     return { state: "recorded", event };
 }
 function withAttestedAdapter(input) {
@@ -83,8 +88,8 @@ function withAttestedAdapter(input) {
     return { ...input, adapter };
 }
 function requireHookState(input) {
-    const hook = readHookProducerStateV3(input.coordRoot, input.adapter, input.nativeSessionId);
-    if (!hook || hook.instance_id !== liveInstanceIdV3(input.owner)) {
+    const hook = readJoinableHookProducerStateV3(input.coordRoot, input.adapter, input.nativeSessionId, liveInstanceIdV3(input.owner));
+    if (!hook) {
         throw new LiveCoordinationAuthorityV3Error("hook_generation_not_joinable");
     }
     return hook;

package/dist/core/agents/live-observation-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CAkJ3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}
+{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CA4J3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}

package/dist/core/agents/live-observation-v3.js

@@ -5,7 +5,7 @@ import { readEventV3ControlState } from "../events/v3/control.js";
 import { readCoordinationViewV3 } from "../events/v3/coordination-view.js";
 import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
-import { readHookProducerStateV3 } from "../events/v3/producers/recorder.js";
+import { readJoinableHookProducerStateV3 } from "../events/v3/producers/recorder.js";
 import { writeEventV3 } from "../events/v3/writer.js";
 import { LiveCoordinationAuthorityV3Error } from "./live-authority-v3.js";
 import { liveCoordinationAdapterV3 } from "./state/live-coordination-view.js";
@@ -23,7 +23,7 @@ export function recordLiveCoordinationObservationV3(input) {
         throw new LiveCoordinationAuthorityV3Error("control_state_changed");
     }
     const adapter = liveCoordinationAdapterV3(input.coordRoot, input.owner) ?? input.adapter;
-    const hook = readHookProducerStateV3(input.coordRoot, adapter, input.nativeSessionId);
+    const hook = readJoinableHookProducerStateV3(input.coordRoot, adapter, input.nativeSessionId, liveInstanceIdV3(input.owner));
     if (!hook ||
         hook.terminal ||
         !hook.last_event_id ||
@@ -138,7 +138,12 @@ export function recordLiveCoordinationObservationV3(input) {
             break;
         }
     }
-    writeEventV3(input.coordRoot, event);
+    const durability = writeEventV3(input.coordRoot, event, {
+        expectedGenesisId: control.genesis.event.payload.genesis_id,
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new LiveCoordinationAuthorityV3Error("epoch_replaced");
+    }
     return { state: "recorded", event };
 }
 function safeToken(value) {

package/dist/core/agents/render/prompt-context.d.ts

@@ -1,8 +1,8 @@
 /**
  * UserPromptSubmit UX renderer. Combines the peer-refresh dedup, the
  * council-pending hash-dedup, the cross-adapter first-session naming nudge,
- * the Cursor/Codex set-task staleness nudge, and the Codex status-footer
- * reminder.
+ * the Cursor/Codex set-task staleness nudge, a host-configured prompt reminder,
+ * and the Codex status-footer reminder.
  * agent-hook's turn.started post-emit handler calls this
  * and forwards the result as the adapter-shaped additionalContext payload.
  *
@@ -18,7 +18,10 @@
  *      Cursor/Codex additionally get the existing unset/stale-task reminder
  *      because their Stop hooks do not enforce task declarations as reliably
  *      as Claude Code's.
- *   4. Codex status footer: a non-deduplicated reminder to put the live status
+ *   4. Host prompt reminder: a project-owned, non-deduplicated line for
+ *      adapters whose prompt hook can inject context and which lack a native
+ *      reminder mechanism. Hook routing decides which adapters enable it.
+ *   5. Codex status footer: a non-deduplicated reminder to put the live status
  *      box after the substantive answer. Stop stays observe-only, so missing the
  *      footer can never trigger a replacement response.
  *
@@ -40,6 +43,9 @@ export interface PromptContextOpts {
     /** When true, run the unset/stale-task check after the first set-task.
      * Cursor/Codex use this; Claude Code has Stop-hook transcript enforcement. */
     taskNudge?: boolean;
+    /** When true, append the project-configured prompt reminder without hash
+     * deduplication. The caller enables this only on supported adapter routes. */
+    hostPromptReminder?: boolean;
     /** When true, append the non-deduplicated Codex status-footer reminder.
      * The caller enables this only for human-facing Codex sessions. */
     statusFooterNudge?: boolean;

package/dist/core/agents/render/prompt-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AA4CH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAqDnE"}
+{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AA4CH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CA8DnE"}

package/dist/core/agents/render/prompt-context.js

@@ -1,8 +1,8 @@
 /**
  * UserPromptSubmit UX renderer. Combines the peer-refresh dedup, the
  * council-pending hash-dedup, the cross-adapter first-session naming nudge,
- * the Cursor/Codex set-task staleness nudge, and the Codex status-footer
- * reminder.
+ * the Cursor/Codex set-task staleness nudge, a host-configured prompt reminder,
+ * and the Codex status-footer reminder.
  * agent-hook's turn.started post-emit handler calls this
  * and forwards the result as the adapter-shaped additionalContext payload.
  *
@@ -18,7 +18,10 @@
  *      Cursor/Codex additionally get the existing unset/stale-task reminder
  *      because their Stop hooks do not enforce task declarations as reliably
  *      as Claude Code's.
- *   4. Codex status footer: a non-deduplicated reminder to put the live status
+ *   4. Host prompt reminder: a project-owned, non-deduplicated line for
+ *      adapters whose prompt hook can inject context and which lack a native
+ *      reminder mechanism. Hook routing decides which adapters enable it.
+ *   5. Codex status footer: a non-deduplicated reminder to put the live status
  *      box after the substantive answer. Stop stays observe-only, so missing the
  *      footer can never trigger a replacement response.
  *
@@ -33,7 +36,7 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
 import { coordEnv } from "../../../lib/env.js";
-import { endOfTurnStatusCommand, resolveBinName } from "../../config.js";
+import { endOfTurnStatusCommand, hostPromptReminder, resolveBinName } from "../../config.js";
 import { readRemoteMachines } from "../../presence/index.js";
 import { sessionNameDisplayBlock, sessionNameDisplayPending } from "../session-name-display.js";
 import { readLiveCoordinationRow, readLiveCoordinationRows, } from "../state/live-coordination-view.js";
@@ -47,7 +50,7 @@ import { formatPendingCouncils } from "./session-context.js";
  * councils are pending, matching the bash behavior).
  */
 export function renderPromptContext(opts) {
-    const { coordRoot, instanceId, sessionId, agentName, sessionNameNudge, taskNudge, statusFooterNudge, turnRitualNudge, } = opts;
+    const { coordRoot, instanceId, sessionId, agentName, sessionNameNudge, taskNudge, hostPromptReminder: promptReminderEnabled, statusFooterNudge, turnRitualNudge, } = opts;
     const sections = [];
     // 1. Peer table with hash dedup.
     const peerTable = computePeerTableIfChanged(coordRoot, instanceId, sessionId);
@@ -70,7 +73,15 @@ export function renderPromptContext(opts) {
         if (nudgeMsg)
             sections.push(nudgeMsg);
     }
-    // 4. Codex gets this on every prompt. It is intentionally not hash-deduped:
+    // 4. A supported adapter gets the host reminder on every prompt. The text is
+    // intentionally not hash-deduped or persisted into runtime state: freshness
+    // is the feature, and the project config remains its only durable copy.
+    if (promptReminderEnabled) {
+        const reminder = renderHostPromptReminder(coordRoot, instanceId);
+        if (reminder)
+            sections.push(reminder);
+    }
+    // 5. Codex gets this on every prompt. It is intentionally not hash-deduped:
     // the reminder must be fresh in the model's context when it writes the reply.
     // Missing it is harmless because Codex Stop enforcement remains observe-only.
     if (statusFooterNudge) {
@@ -78,7 +89,7 @@ export function renderPromptContext(opts) {
         if (statusMsg)
             sections.push(statusMsg);
     }
-    // 5. Adapters whose Stop hook ENFORCES the turn ritual get a fresh reminder
+    // 6. Adapters whose Stop hook ENFORCES the turn ritual get a fresh reminder
     // on every prompt. Reminding before the reply is drafted is far cheaper than
     // the bounce-and-retry the Stop hook otherwise forces: enforcement-only
     // compliance was measured missing on a double-digit share of turns. Not
@@ -90,6 +101,12 @@ export function renderPromptContext(opts) {
     }
     return sections.join("\n\n");
 }
+function renderHostPromptReminder(coordRoot, selfInstanceId) {
+    const hb = readLiveCoordinationRow(coordRoot, selfInstanceId);
+    if (!hb || hb.kind === "subagent" || hb.kind === "transient" || hb.workflow_run_id)
+        return "";
+    return hostPromptReminder(coordRoot) ?? "";
+}
 function renderTurnRitualReminder(coordRoot, selfInstanceId, adapter) {
     const hb = readLiveCoordinationRow(coordRoot, selfInstanceId);
     if (!hb || hb.kind === "subagent" || hb.kind === "transient" || hb.workflow_run_id)
@@ -140,7 +157,7 @@ function computeFocusNudgeIfChanged(coordRoot, selfInstanceId, opts) {
         // Keyed on "a name was ever produced", not task_updated_at: a bare clear
         // as the first declaration must not end the naming window.
         needsNudge = true;
-        nudgeKind = "session-name";
+        nudgeKind = pendingSessionName ? "session-name-pending" : "session-name-unminted";
         message = pendingSessionName
             ? `This session name is still pending display. Before any prose or another tool call, send this exact block as your next assistant text:\n\n${sessionNameDisplayBlock(pendingSessionName)}`
             : `This session has no name yet: run \`${bin} agents set-task "<2-5 word session topic>"\` as your first tool call. ` +
@@ -170,18 +187,20 @@ function computeFocusNudgeIfChanged(coordRoot, selfInstanceId, opts) {
         clearHashFile(hashFile);
         return "";
     }
-    // The session-name reminder is deliberately NOT deduped: it re-emits on
-    // every prompt until a name is produced, because the "still unnamed" state
-    // is the failure state — deduping it erases the only reminder after one
-    // ignored prompt (the miss mode operators reported). Bounded in practice:
-    // Stop rule 3/3 forces a set-task on the first tool-using turn.
-    if (nudgeKind === "session-name") {
+    // An unminted session still gets a fresh reminder on every prompt until its
+    // first focus declaration. Once a name exists, the exact pending-name prompt
+    // is delivered once per minted value. Repeating it on every prompt creates
+    // an unbounded loop on adapters that cannot verify assistant reply text.
+    if (nudgeKind === "session-name-unminted") {
         clearHashFile(hashFile);
         return message;
     }
-    // Dedup the task-unset/stale reminders on kind + task state so a repeat
-    // prompt in the same state stays quiet.
-    const state = `${nudgeKind}|task=${taskValue}|updated=${hb.task_updated_at ?? ""}|threshold=${threshold}`;
+    // A pending reminder is keyed only to the minted name: changing the task
+    // must not reconstruct or re-request that older title. Task reminders retain
+    // their own task-state key.
+    const state = nudgeKind === "session-name-pending"
+        ? `${nudgeKind}|name=${pendingSessionName ?? ""}`
+        : `${nudgeKind}|task=${taskValue}|updated=${hb.task_updated_at ?? ""}|threshold=${threshold}`;
     const newHash = sha256Hex16(state);
     const oldHash = safeRead(hashFile);
     if (oldHash && oldHash === newHash)

package/dist/core/agents/rules/stop-hook.d.ts

@@ -20,6 +20,8 @@ export interface StopHookRequest {
         start_ms: number;
         end_ms: number;
     };
+    stop_hook_active?: boolean;
+    status_box_present_strict?: boolean;
     bypass?: boolean;
     workflow_child?: boolean;
 }

package/dist/core/agents/rules/stop-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAM3D,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAInE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CA6BvF;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,SAAS,OAAO,EAAE,GACzB,aAAa,CA2Gf"}
+{"version":3,"file":"stop-hook.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/rules/stop-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAM3D,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAInE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,aAAa,CA6BvF;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,SAAS,OAAO,EAAE,GACzB,aAAa,CAuIf"}