harnery 0.35.0 → 0.36.0

package/dist/core/artifacts/index.d.ts

@@ -82,5 +82,26 @@ export declare function cleanArtifacts(repoRoot: string, opts?: {
     now?: Date;
     freshnessSeconds?: number;
 }): ArtifactInventoryEntry[];
+export interface ArtifactAutoCleanResult {
+    ran: boolean;
+    reason: "swept" | "disabled" | "fresh" | "no-root";
+    deleted: number;
+    bytes: number;
+}
+/**
+ * Throttled expired-artifact sweep, fired as a SessionStart effect.
+ *
+ * Retention was previously enforced only when someone remembered to run
+ * `artifacts clean --yes`, so expired workspaces accumulated indefinitely on
+ * busy hosts. This runs the exact same guarded deletion (only
+ * `managed-expired` entries, each re-classified immediately before removal;
+ * unmanaged and legacy directories are never touched) at most once per
+ * interval (default 24h), claim-first via a stamp file so concurrent session
+ * starts do not double-sweep. Disable with `artifacts.auto_clean: false` or
+ * `HARNERY_ARTIFACT_AUTO_CLEAN=0`.
+ */
+export declare function autoCleanArtifacts(repoRoot: string, opts?: {
+    now?: Date;
+}): ArtifactAutoCleanResult;
 export declare function resolveArtifactRef(repoRoot: string, ref: string): string;
 //# sourceMappingURL=index.d.ts.map

package/dist/core/artifacts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,OAAO,EAAqB,uBAAuB,EAAiB,MAAM,gBAAgB,CAAC;AAE3F,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,sBAAsB,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAYD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,kFAAkF;AAClF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAgChD;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,sBAAsB,EAAE,CAyB1B;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD;IAAE,KAAK,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAWjE;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CAmBpB;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CAapB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GAClE,sBAAsB,EAAE,CAiC1B;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAoBxE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsBH,OAAO,EAAqB,uBAAuB,EAAiB,MAAM,gBAAgB,CAAC;AAE3F,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,sBAAsB,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAYD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,kFAAkF;AAClF,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAgChD;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,sBAAsB,EAAE,CAyB1B;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD;IAAE,KAAK,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAWjE;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CAmBpB;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CAapB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GAClE,sBAAsB,EAAE,CAiC1B;AAKD,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAO,GACxB,uBAAuB,CAgCzB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAoBxE"}

package/dist/core/artifacts/index.js

@@ -12,7 +12,7 @@ import { randomUUID } from "node:crypto";
 import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { readLiveCoordinationRow } from "../agents/state/live-coordination-view.js";
-import { artifactDefaultRetentionDays } from "../config.js";
+import { artifactAutoCleanEnabled, artifactAutoCleanIntervalHours, artifactDefaultRetentionDays, } from "../config.js";
 import { ARTIFACT_MANIFEST, ARTIFACT_SCHEMA_VERSION, ARTIFACTS_DIR } from "./constants.js";
 export { ARTIFACT_MANIFEST, ARTIFACT_SCHEMA_VERSION, ARTIFACTS_DIR } from "./constants.js";
 export function artifactsRoot(repoRoot) {
@@ -159,6 +159,51 @@ export function cleanArtifacts(repoRoot, opts = {}) {
         }
     });
 }
+/** Sibling of the artifacts root so the stamp never appears in the inventory scan. */
+const AUTO_CLEAN_STAMP = ".harnery/artifacts-auto-clean.json";
+/**
+ * Throttled expired-artifact sweep, fired as a SessionStart effect.
+ *
+ * Retention was previously enforced only when someone remembered to run
+ * `artifacts clean --yes`, so expired workspaces accumulated indefinitely on
+ * busy hosts. This runs the exact same guarded deletion (only
+ * `managed-expired` entries, each re-classified immediately before removal;
+ * unmanaged and legacy directories are never touched) at most once per
+ * interval (default 24h), claim-first via a stamp file so concurrent session
+ * starts do not double-sweep. Disable with `artifacts.auto_clean: false` or
+ * `HARNERY_ARTIFACT_AUTO_CLEAN=0`.
+ */
+export function autoCleanArtifacts(repoRoot, opts = {}) {
+    const now = opts.now ?? new Date();
+    assertValidDate(now, "now");
+    if (!existsSync(artifactsRoot(repoRoot))) {
+        return { ran: false, reason: "no-root", deleted: 0, bytes: 0 };
+    }
+    if (!artifactAutoCleanEnabled(repoRoot)) {
+        return { ran: false, reason: "disabled", deleted: 0, bytes: 0 };
+    }
+    const stampPath = join(resolve(repoRoot), AUTO_CLEAN_STAMP);
+    const intervalMs = artifactAutoCleanIntervalHours() * 60 * 60 * 1000;
+    try {
+        const stamp = JSON.parse(readFileSync(stampPath, "utf8"));
+        const last = Date.parse(stamp.last_run_at ?? "");
+        if (Number.isFinite(last) && now.getTime() - last < intervalMs) {
+            return { ran: false, reason: "fresh", deleted: 0, bytes: 0 };
+        }
+    }
+    catch {
+        // Missing or unreadable stamp: sweep now and write a fresh one.
+    }
+    // Claim first: a crash mid-sweep costs one skipped interval, while claiming
+    // after would let two concurrent session starts both walk the store.
+    writeFileSync(stampPath, `${JSON.stringify({ last_run_at: now.toISOString() }, null, 2)}\n`);
+    const rows = cleanArtifacts(repoRoot, { yes: true, now });
+    const deletedRows = rows.filter((row) => row.action === "deleted");
+    const deleted = deletedRows.length;
+    const bytes = deletedRows.reduce((sum, row) => sum + (row.bytes ?? 0), 0);
+    writeFileSync(stampPath, `${JSON.stringify({ last_run_at: now.toISOString(), deleted, bytes }, null, 2)}\n`);
+    return { ran: true, reason: "swept", deleted, bytes };
+}
 export function resolveArtifactRef(repoRoot, ref) {
     const root = artifactsRoot(repoRoot);
     const candidate = isAbsolute(ref) ? resolve(ref) : resolve(root, ref);

package/dist/core/config.d.ts

@@ -7,8 +7,9 @@
  *   2. `<project-root>/.harnery/config.jsonc` — project override (authoritative)
  *
  * Fields owned here: `binName` (host CLI name for agent-facing strings),
- * `hooksSetupHint`, `agents`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
- * `coord` (heartbeat freshness), `artifacts` (working-file retention),
+ * `hooksSetupHint`, `agents`, `instructions`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
+ * `coord` (heartbeat freshness), `logs` (structured-log storage budgets),
+ * `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), `sync` (rclone
  * remote/prefix), and `web` (dashboard port) sections. The `files` deny/override section
  * is parsed separately by `web/lib/files.ts`.
@@ -17,12 +18,14 @@
  * documents its own precedence). Dependency-free (no jsonc npm dep) so it runs on
  * both Bun and Node, and so the ADR-009 vendored copies stay portable.
  */
+export { DEFAULT_WEB_PORT } from "../lib/local-file-url.js";
+export { DEFAULT_EVENT_LEDGER_ROTATE_ACTIVE_BYTES } from "./events/v3/rotation-config.js";
 /** The standalone CLI's bin name: the resolution floor when nothing else is set. */
 export declare const DEFAULT_BIN_NAME = "harn";
 /** Heartbeat-freshness default (seconds): the sweep window when nothing overrides it. */
 export declare const DEFAULT_FRESHNESS_SECS = 600;
-/** Mnemonic dashboard port: 4276 spells HARN on a phone keypad. */
-export declare const DEFAULT_WEB_PORT = 4276;
+/** Keep a fresh host reminder bounded to one short prompt-context line. */
+export declare const MAX_HOST_PROMPT_REMINDER_CHARS = 500;
 export interface SessionFinalizationConfig {
     archiveGraceSeconds: number;
     idleObserveSeconds: number;
@@ -44,6 +47,24 @@ export interface CoordRunQualityConfigSource {
     /** Stable digest seed that contains no config values when parsing failed. */
     digest_seed: unknown;
 }
+export interface LogStorageConfigLayerSource {
+    layer: "user" | "project";
+    value: unknown;
+    invalid: boolean;
+    /** Stable file signature for bounded diagnostics without retaining values. */
+    signature: string | null;
+}
+export interface LogStorageConfigSource {
+    layers: readonly [LogStorageConfigLayerSource, LogStorageConfigLayerSource];
+}
+/**
+ * Raw user and project `logs.storage` layers with their origin intact.
+ *
+ * Storage retention validates these as one fail-closed unit. It cannot use the
+ * ordinary merged reader because commands must explain whether each effective
+ * scalar came from a user class, user family, project class, or project family.
+ */
+export declare function logStorageConfigSource(root: string): LogStorageConfigSource;
 /**
  * Effective user-plus-project `coord.run_quality` value with parse diagnostics.
  * The ordinary config reader stays fail-soft; this one lets the guard visibly
@@ -76,6 +97,17 @@ export declare function pinnedBinName(projectRoot: string): string | null;
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.
  */
 export declare function resolveHooksSetupHint(coordRoot?: string | null): string | null;
+/**
+ * One project-owned reminder that a supported prompt hook can place immediately
+ * before a model response. The value is deliberately project-only: host policy
+ * must not follow the user-global config into unrelated repositories. It is
+ * emitted directly from config and never copied into coordination state.
+ *
+ * The reminder must be one non-empty line of at most 500 characters. Invalid
+ * values fail closed to no reminder so a malformed optional setting cannot
+ * break the prompt hook.
+ */
+export declare function hostPromptReminder(coordRoot?: string | null): string | null;
 /**
  * Whether the host requires the guarded Git check at the end of tool-using
  * turns. Default false: Harnery exposes `agents status --end-turn` as a capability
@@ -142,6 +174,17 @@ export declare function presenceRelayUrl(coordRoot?: string | null): string | nu
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.
  */
 export declare function coordFreshnessSeconds(coordRoot?: string | null): number;
+/**
+ * Active-segment byte size at which the V3 event ledger rotates to a fresh
+ * epoch. Every reader validates the complete epoch, so an unbounded active
+ * segment makes each cold read (one per hook process) scale with all history.
+ * Precedence:
+ *   1. `HARNERY_EVENT_V3_ROTATE_ACTIVE_BYTES` env
+ *   2. `.harnery/config.jsonc` `events.rotate_active_bytes`
+ *   3. 33554432 (32 MiB)
+ * `0` (or a negative value) disables automatic rotation.
+ */
+export declare function eventLedgerRotateActiveBytes(coordRoot?: string | null): number;
 /**
  * Resolve the standalone dashboard port.
  *
@@ -157,6 +200,21 @@ export declare function sessionFinalizationConfig(coordRoot?: string | null): Se
  * `artifacts.default_retention_days` -> 3 days.
  */
 export declare function artifactDefaultRetentionDays(coordRoot?: string | null): number;
+/**
+ * Whether the daily SessionStart sweep of expired artifact workspaces runs.
+ * Precedence: `HARNERY_ARTIFACT_AUTO_CLEAN` (0/false disables) ->
+ * `artifacts.auto_clean` -> enabled. The sweep only ever deletes
+ * `managed-expired` entries via the same guarded classifier as
+ * `artifacts clean --yes`.
+ */
+export declare function artifactAutoCleanEnabled(coordRoot?: string | null): boolean;
+/**
+ * Sweep cadence in hours. Env-only (`HARNERY_ARTIFACT_AUTO_CLEAN_INTERVAL_HOURS`,
+ * mainly for tests): the cadence is an implementation detail, not policy, and
+ * retention itself is quantized in whole days, so the 24h default is not a
+ * config surface.
+ */
+export declare function artifactAutoCleanIntervalHours(): number;
 /** Resolved `harn backup` defaults (restic repo/password + prune policy). */
 export interface BackupConfig {
     repo: string;

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,eAAO,MAAM,mCAAmC,EAAE,yBAMjD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,4BAA4B,CAAC;CAC3C;AA2FD,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AA0CD,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAqBrF;AAmFD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,EAAE,CAY1F;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAIxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAWzE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASvE;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAcvF;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,yBAAyB,CA0B9F;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe9E;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAmBpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS3C"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,wCAAwC,EAAE,MAAM,gCAAgC,CAAC;AAE1F,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,eAAO,MAAM,mCAAmC,EAAE,yBAMjD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,4BAA4B,CAAC;CAC3C;AAyGD,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AA0CD,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,SAAS,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;CAC7E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAa3E;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAqBrF;AAmFD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAU3E;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,EAAE,CAY1F;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAIxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAWzE;AAQD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG9E;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAcvF;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,yBAAyB,CA0B9F;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe9E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,CAOvD;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAmBpE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS3C"}

package/dist/core/config.js

@@ -7,8 +7,9 @@
  *   2. `<project-root>/.harnery/config.jsonc` — project override (authoritative)
  *
  * Fields owned here: `binName` (host CLI name for agent-facing strings),
- * `hooksSetupHint`, `agents`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
- * `coord` (heartbeat freshness), `artifacts` (working-file retention),
+ * `hooksSetupHint`, `agents`, `instructions`, `tools`, `workflow`, `skills`, `presence`, plus the tunable
+ * `coord` (heartbeat freshness), `logs` (structured-log storage budgets),
+ * `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), `sync` (rclone
  * remote/prefix), and `web` (dashboard port) sections. The `files` deny/override section
  * is parsed separately by `web/lib/files.ts`.
@@ -21,13 +22,17 @@ import { readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { coordEnv } from "../lib/env.js";
+import { DEFAULT_WEB_PORT } from "../lib/local-file-url.js";
+import { resolveEventLedgerRotateActiveBytesV3 } from "./events/v3/rotation-config.js";
 import { findCoordRoot } from "./hooks/resolve/coord-root.js";
+export { DEFAULT_WEB_PORT } from "../lib/local-file-url.js";
+export { DEFAULT_EVENT_LEDGER_ROTATE_ACTIVE_BYTES } from "./events/v3/rotation-config.js";
 /** The standalone CLI's bin name: the resolution floor when nothing else is set. */
 export const DEFAULT_BIN_NAME = "harn";
 /** Heartbeat-freshness default (seconds): the sweep window when nothing overrides it. */
 export const DEFAULT_FRESHNESS_SECS = 600;
-/** Mnemonic dashboard port: 4276 spells HARN on a phone keypad. */
-export const DEFAULT_WEB_PORT = 4276;
+/** Keep a fresh host reminder bounded to one short prompt-context line. */
+export const MAX_HOST_PROMPT_REMINDER_CHARS = 500;
 export const DEFAULT_SESSION_FINALIZATION_CONFIG = {
     archiveGraceSeconds: 600,
     idleObserveSeconds: 3 * 24 * 60 * 60,
@@ -117,6 +122,27 @@ function parseConfigFile(p) {
     }
     return {};
 }
+/**
+ * Raw user and project `logs.storage` layers with their origin intact.
+ *
+ * Storage retention validates these as one fail-closed unit. It cannot use the
+ * ordinary merged reader because commands must explain whether each effective
+ * scalar came from a user class, user family, project class, or project family.
+ */
+export function logStorageConfigSource(root) {
+    const projectPath = join(root, ".harnery", "config.jsonc");
+    const user = parseConfigLayer(userConfigPath());
+    const project = parseConfigLayer(projectPath);
+    const layer = (source) => ({
+        layer: source.path_kind,
+        value: source.config.logs?.storage,
+        invalid: source.invalid,
+        signature: source.signature,
+    });
+    return {
+        layers: [layer(user), layer(project)],
+    };
+}
 /**
  * Effective user-plus-project `coord.run_quality` value with parse diagnostics.
  * The ordinary config reader stays fail-soft; this one lets the guard visibly
@@ -255,6 +281,29 @@ export function resolveHooksSetupHint(coordRoot) {
     const hint = readConfig(root).hooksSetupHint;
     return typeof hint === "string" && hint.trim() ? hint.trim() : null;
 }
+/**
+ * One project-owned reminder that a supported prompt hook can place immediately
+ * before a model response. The value is deliberately project-only: host policy
+ * must not follow the user-global config into unrelated repositories. It is
+ * emitted directly from config and never copied into coordination state.
+ *
+ * The reminder must be one non-empty line of at most 500 characters. Invalid
+ * values fail closed to no reminder so a malformed optional setting cannot
+ * break the prompt hook.
+ */
+export function hostPromptReminder(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return null;
+    const value = readProjectConfig(root).instructions?.promptReminder;
+    if (typeof value !== "string")
+        return null;
+    const reminder = value.trim();
+    if (!reminder || reminder.length > MAX_HOST_PROMPT_REMINDER_CHARS || /[\r\n]/.test(reminder)) {
+        return null;
+    }
+    return reminder;
+}
 /**
  * Whether the host requires the guarded Git check at the end of tool-using
  * turns. Default false: Harnery exposes `agents status --end-turn` as a capability
@@ -410,6 +459,20 @@ export function coordFreshnessSeconds(coordRoot) {
         return posIntOr(readConfig(root).coord?.freshness_seconds, DEFAULT_FRESHNESS_SECS);
     return DEFAULT_FRESHNESS_SECS;
 }
+/**
+ * Active-segment byte size at which the V3 event ledger rotates to a fresh
+ * epoch. Every reader validates the complete epoch, so an unbounded active
+ * segment makes each cold read (one per hook process) scale with all history.
+ * Precedence:
+ *   1. `HARNERY_EVENT_V3_ROTATE_ACTIVE_BYTES` env
+ *   2. `.harnery/config.jsonc` `events.rotate_active_bytes`
+ *   3. 33554432 (32 MiB)
+ * `0` (or a negative value) disables automatic rotation.
+ */
+export function eventLedgerRotateActiveBytes(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    return resolveEventLedgerRotateActiveBytesV3(root);
+}
 function parseWebPort(value, source) {
     const port = typeof value === "number" ? value : Number(value);
     if (!Number.isInteger(port) || port < 1024 || port > 65535) {
@@ -477,6 +540,37 @@ export function artifactDefaultRetentionDays(coordRoot) {
         ? configured
         : 3;
 }
+/**
+ * Whether the daily SessionStart sweep of expired artifact workspaces runs.
+ * Precedence: `HARNERY_ARTIFACT_AUTO_CLEAN` (0/false disables) ->
+ * `artifacts.auto_clean` -> enabled. The sweep only ever deletes
+ * `managed-expired` entries via the same guarded classifier as
+ * `artifacts clean --yes`.
+ */
+export function artifactAutoCleanEnabled(coordRoot) {
+    const env = coordEnv("ARTIFACT_AUTO_CLEAN");
+    if (env !== undefined)
+        return !(env === "0" || env.toLowerCase() === "false");
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return true;
+    return readConfig(root).artifacts?.auto_clean !== false;
+}
+/**
+ * Sweep cadence in hours. Env-only (`HARNERY_ARTIFACT_AUTO_CLEAN_INTERVAL_HOURS`,
+ * mainly for tests): the cadence is an implementation detail, not policy, and
+ * retention itself is quantized in whole days, so the 24h default is not a
+ * config surface.
+ */
+export function artifactAutoCleanIntervalHours() {
+    const env = coordEnv("ARTIFACT_AUTO_CLEAN_INTERVAL_HOURS");
+    if (env !== undefined) {
+        const n = Number(env);
+        if (Number.isFinite(n) && n > 0 && n <= 24 * 365)
+            return n;
+    }
+    return 24;
+}
 /**
  * `harn backup` (restic) defaults. Per field, precedence is env → config → built-in:
  *   repo:          `HARNERY_RESTIC_REPO` → `backup.repo` → `~/.cache/harnery/restic-repo`

package/dist/core/conversations/archive.d.ts

@@ -0,0 +1,49 @@
+import { type DurableHistoryFaultBoundary } from "../storage/durable-history.js";
+import type { HarneryConversationAccessMode, HarneryConversationArchiveAuthorityMode, HarneryConversationProvider, HarneryConversationRecordV1, HarneryConversationSourceSnapshot } from "./contract.js";
+export declare const HARNERY_CONVERSATION_MANIFEST_SCHEMA: "harnery.conversation-manifest/v1";
+export interface HarneryConversationArchiveManifest {
+    schema: typeof HARNERY_CONVERSATION_MANIFEST_SCHEMA;
+    policy_version: "conversation-archive-v1";
+    provider_id: string;
+    project_scope_id: string;
+    conversation_id: string;
+    source_snapshot_id: string;
+    completeness: HarneryConversationSourceSnapshot["completeness"];
+    omissions: readonly string[];
+    record_count: number;
+    logical_bytes: number;
+    first_occurred_at?: string;
+    last_occurred_at?: string;
+    record_set_digest: `sha256:${string}`;
+    authority_mode: HarneryConversationArchiveAuthorityMode;
+    updated_at: string;
+}
+export interface CaptureConversationOptions {
+    coord_root: string;
+    project_scope_id: string;
+    conversation_id: string;
+    access_mode: HarneryConversationAccessMode;
+    authority_mode: HarneryConversationArchiveAuthorityMode;
+    now?: () => Date;
+    fault?: (boundary: DurableHistoryFaultBoundary | "after_record_append" | "before_manifest_publish" | "after_manifest_publish") => void;
+}
+export interface CaptureConversationResult {
+    state: "disabled" | "source-only" | "captured";
+    accepted: number;
+    duplicates: number;
+    omissions: readonly string[];
+    manifest?: HarneryConversationArchiveManifest;
+}
+export declare function captureProviderConversation(provider: HarneryConversationProvider, options: CaptureConversationOptions): Promise<CaptureConversationResult>;
+export declare function readConversationArchive(objectDirOrCoordRoot: string, providerId?: string, conversationId?: string): HarneryConversationRecordV1[];
+export declare function reconcileConversationArchive(input: {
+    coord_root: string;
+    provider_id: string;
+    conversation_id: string;
+    snapshot: HarneryConversationSourceSnapshot;
+    authority_mode: HarneryConversationArchiveAuthorityMode;
+    now: Date;
+}): HarneryConversationArchiveManifest;
+export declare function loadConversationManifest(coordRoot: string, providerId: string, conversationId: string): HarneryConversationArchiveManifest | undefined;
+export declare function conversationArchiveDir(coordRoot: string, providerId: string, conversationId: string): string;
+//# sourceMappingURL=archive.d.ts.map

package/dist/core/conversations/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../../src/core/conversations/archive.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,2BAA2B,EAEjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,6BAA6B,EAC7B,uCAAuC,EACvC,2BAA2B,EAC3B,2BAA2B,EAC3B,iCAAiC,EAClC,MAAM,eAAe,CAAC;AAGvB,eAAO,MAAM,oCAAoC,EAAG,kCAA2C,CAAC;AAEhG,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,OAAO,oCAAoC,CAAC;IACpD,cAAc,EAAE,yBAAyB,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,iCAAiC,CAAC,cAAc,CAAC,CAAC;IAChE,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,UAAU,MAAM,EAAE,CAAC;IACtC,cAAc,EAAE,uCAAuC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,cAAc,EAAE,uCAAuC,CAAC;IACxD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CACN,QAAQ,EACJ,2BAA2B,GAC3B,qBAAqB,GACrB,yBAAyB,GACzB,wBAAwB,KACzB,IAAI,CAAC;CACX;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,kCAAkC,CAAC;CAC/C;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,2BAA2B,EACrC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAoEpC;AAED,wBAAgB,uBAAuB,CACrC,oBAAoB,EAAE,MAAM,EAC5B,UAAU,CAAC,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,GACtB,2BAA2B,EAAE,CAS/B;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,iCAAiC,CAAC;IAC5C,cAAc,EAAE,uCAAuC,CAAC;IACxD,GAAG,EAAE,IAAI,CAAC;CACX,GAAG,kCAAkC,CAcrC;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,kCAAkC,GAAG,SAAS,CAUhD;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,MAAM,CAIR"}

package/dist/core/conversations/archive.js

@@ -0,0 +1,136 @@
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { appendDurableHistoryRecord, readDurableHistorySync, } from "../storage/durable-history.js";
+import { digest, normalizeConversationRecord } from "./normalize.js";
+export const HARNERY_CONVERSATION_MANIFEST_SCHEMA = "harnery.conversation-manifest/v1";
+export async function captureProviderConversation(provider, options) {
+    if (options.access_mode === "off")
+        return result("disabled");
+    if (options.access_mode === "source")
+        return result("source-only");
+    const objectDir = conversationArchiveDir(options.coord_root, provider.capabilities.provider_id, options.conversation_id);
+    mkdirSync(objectDir, { recursive: true, mode: 0o700 });
+    const lease = join(objectDir, ".capture.lease");
+    try {
+        mkdirSync(lease, { mode: 0o700 });
+    }
+    catch {
+        throw new Error(`conversation capture lease busy: ${options.conversation_id}`);
+    }
+    try {
+        const snapshot = await provider.snapshot(options.project_scope_id, options.conversation_id);
+        const existing = readConversationArchive(objectDir);
+        const seen = new Map(existing.map((record) => [record.record_id, record.content_digest]));
+        let accepted = 0;
+        let duplicates = 0;
+        const omissions = new Set(snapshot.omissions);
+        let sequence = existing.at(-1)?.sequence ?? 0;
+        for await (const native of provider.stream(options.project_scope_id, options.conversation_id)) {
+            const normalized = normalizeConversationRecord({
+                capabilities: provider.capabilities,
+                snapshot,
+                native,
+                captured_at: (options.now?.() ?? new Date()).toISOString(),
+                sequence: sequence + 1,
+            });
+            if (!normalized.record) {
+                omissions.add(normalized.omission ?? "record_excluded");
+                continue;
+            }
+            const prior = seen.get(normalized.record.record_id);
+            if (prior) {
+                if (prior !== normalized.record.content_digest) {
+                    throw new Error(`conversation record collision: ${normalized.record.record_id}`);
+                }
+                duplicates += 1;
+                continue;
+            }
+            sequence += 1;
+            normalized.record.sequence = sequence;
+            appendDurableHistoryRecord(objectDir, normalized.record, {
+                max_record_bytes: 1_048_576,
+                max_segment_bytes: 8_388_608,
+                fault: options.fault,
+            });
+            options.fault?.("after_record_append");
+            seen.set(normalized.record.record_id, normalized.record.content_digest);
+            accepted += 1;
+        }
+        const records = readConversationArchive(objectDir);
+        const manifest = manifestFor(records, { ...snapshot, omissions: [...omissions].sort() }, options.authority_mode, options.now?.() ?? new Date());
+        options.fault?.("before_manifest_publish");
+        publishManifest(objectDir, manifest);
+        options.fault?.("after_manifest_publish");
+        return { state: "captured", accepted, duplicates, omissions: [...omissions].sort(), manifest };
+    }
+    finally {
+        rmSync(lease, { recursive: true, force: true });
+    }
+}
+export function readConversationArchive(objectDirOrCoordRoot, providerId, conversationId) {
+    const objectDir = providerId && conversationId
+        ? conversationArchiveDir(objectDirOrCoordRoot, providerId, conversationId)
+        : objectDirOrCoordRoot;
+    return readDurableHistorySync(objectDir, {
+        max_record_bytes: 1_048_576,
+        max_records: 1_000_000,
+    });
+}
+export function reconcileConversationArchive(input) {
+    const objectDir = conversationArchiveDir(input.coord_root, input.provider_id, input.conversation_id);
+    const manifest = manifestFor(readConversationArchive(objectDir), input.snapshot, input.authority_mode, input.now);
+    publishManifest(objectDir, manifest);
+    return manifest;
+}
+export function loadConversationManifest(coordRoot, providerId, conversationId) {
+    const path = join(conversationArchiveDir(coordRoot, providerId, conversationId), "manifest.json");
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (parsed.schema !== HARNERY_CONVERSATION_MANIFEST_SCHEMA)
+            throw new Error("unknown schema");
+        return parsed;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw new Error(`conversation manifest invalid: ${error.message}`);
+    }
+}
+export function conversationArchiveDir(coordRoot, providerId, conversationId) {
+    const provider = opaque(providerId);
+    const conversation = digest(`${providerId}\0${conversationId}`).slice("sha256:".length, 38);
+    return join(resolve(coordRoot), ".harnery", "conversations", provider, conversation);
+}
+function manifestFor(records, snapshot, authorityMode, now) {
+    return {
+        schema: HARNERY_CONVERSATION_MANIFEST_SCHEMA,
+        policy_version: "conversation-archive-v1",
+        provider_id: snapshot.provider_id,
+        project_scope_id: snapshot.project_scope_id,
+        conversation_id: snapshot.conversation_id,
+        source_snapshot_id: snapshot.snapshot_id,
+        completeness: snapshot.completeness,
+        omissions: [...snapshot.omissions],
+        record_count: records.length,
+        logical_bytes: records.reduce((sum, record) => sum + record.content_bytes, 0),
+        ...(records[0] ? { first_occurred_at: records[0].occurred_at } : {}),
+        ...(records.at(-1) ? { last_occurred_at: records.at(-1).occurred_at } : {}),
+        record_set_digest: digest(records.map((record) => record.record_id).join("\n")),
+        authority_mode: authorityMode,
+        updated_at: now.toISOString(),
+    };
+}
+function publishManifest(objectDir, manifest) {
+    const path = join(objectDir, "manifest.json");
+    const temp = `${path}.tmp-${process.pid}`;
+    writeFileSync(temp, `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o600 });
+    renameSync(temp, path);
+}
+function opaque(value) {
+    if (!/^[a-z][a-z0-9-]{1,63}$/.test(value))
+        throw new Error(`invalid provider id: ${value}`);
+    return value;
+}
+function result(state) {
+    return { state, accepted: 0, duplicates: 0, omissions: [] };
+}

package/dist/core/conversations/catalog.d.ts

@@ -0,0 +1,10 @@
+import type { HarneryConversationProvider } from "./contract.js";
+export declare class HarneryConversationCatalog {
+    #private;
+    constructor(providers: readonly HarneryConversationProvider[]);
+    get(id: string): HarneryConversationProvider | undefined;
+    require(id: string): HarneryConversationProvider;
+    list(): readonly HarneryConversationProvider[];
+}
+export declare function unavailableAdapterProviders(): readonly HarneryConversationProvider[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/core/conversations/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/core/conversations/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAEjE,qBAAa,0BAA0B;;gBAGzB,SAAS,EAAE,SAAS,2BAA2B,EAAE;IAe7D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS;IAIxD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,2BAA2B;IAMhD,IAAI,IAAI,SAAS,2BAA2B,EAAE;CAK/C;AAED,wBAAgB,2BAA2B,IAAI,SAAS,2BAA2B,EAAE,CAyCpF"}

package/dist/core/conversations/catalog.js

@@ -0,0 +1,72 @@
+export class HarneryConversationCatalog {
+    #providers;
+    constructor(providers) {
+        const entries = new Map();
+        for (const provider of providers) {
+            const id = provider.capabilities.provider_id;
+            if (!/^[a-z][a-z0-9-]{1,63}$/.test(id))
+                throw new Error(`invalid conversation provider id: ${id}`);
+            if (entries.has(id))
+                throw new Error(`duplicate conversation provider: ${id}`);
+            if (provider.capabilities.roles.some((role) => role !== "user" && role !== "assistant")) {
+                throw new Error(`provider ${id} exposes an excluded role`);
+            }
+            entries.set(id, Object.freeze(provider));
+        }
+        this.#providers = entries;
+    }
+    get(id) {
+        return this.#providers.get(id);
+    }
+    require(id) {
+        const provider = this.get(id);
+        if (!provider)
+            throw new Error(`unknown conversation provider: ${id}`);
+        return provider;
+    }
+    list() {
+        return [...this.#providers.values()].sort((left, right) => left.capabilities.provider_id.localeCompare(right.capabilities.provider_id));
+    }
+}
+export function unavailableAdapterProviders() {
+    return ["claude-code", "codex", "cursor"].map((providerId) => ({
+        capabilities: {
+            provider_id: providerId,
+            roles: ["user", "assistant"],
+            can_list: false,
+            can_stream_source: false,
+            can_replay_archive: false,
+            default_completeness: "unavailable",
+            default_omissions: [
+                "adapter-native source reader is not registered by this host",
+                "system, developer, tool, reasoning, command, and attachment bodies are excluded",
+            ],
+            retention_behavior: "adapter-owned and unavailable to portable core",
+        },
+        async list() {
+            return [];
+        },
+        async snapshot(projectScopeId, conversationId) {
+            return {
+                snapshot_id: `${providerId}:unavailable:${conversationId}`,
+                provider_id: providerId,
+                project_scope_id: projectScopeId,
+                conversation_id: conversationId,
+                observed_at: new Date().toISOString(),
+                completeness: "unavailable",
+                omissions: ["adapter-native source unavailable"],
+            };
+        },
+        stream() {
+            return {
+                [Symbol.asyncIterator]() {
+                    return {
+                        async next() {
+                            throw new Error(`conversation provider unavailable: ${providerId}`);
+                        },
+                    };
+                },
+            };
+        },
+    }));
+}