harnery 0.35.0 → 0.37.0

package/dist/core/hooks/effects/image-capture.d.ts

@@ -22,7 +22,7 @@ export declare function captureImages(coordRoot: string, eventType: "tool.reques
  * Each observation uses a one-event producer boot, which preserves independent
  * producer sequence continuity while the ledger writer serializes appends.
  */
-export declare function recordImageArtifactsV3(coordRoot: string, sourceEvent: EventV3, artifacts: readonly CapturedImageArtifact[]): void;
+export declare function recordImageArtifactsV3(coordRoot: string, sourceEvent: EventV3, artifacts: readonly CapturedImageArtifact[], expectedGenesisId?: `gex_${string}`): void;
 export declare function buildImageArtifactEventV3(sourceEvent: EventV3, artifact: CapturedImageArtifact): EventV3;
 /** Prune the bounded blob store by age and total size, oldest first. */
 export declare function imageJanitor(coordRoot: string): void;

package/dist/core/hooks/effects/image-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-capture.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/effects/image-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAE3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgBzD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAQD,mFAAmF;AACnF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,EAC9C,OAAO,EAAE,aAAa,GAAG,IAAI,GAC5B,qBAAqB,EAAE,CA0BzB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,SAAS,qBAAqB,EAAE,GAC1C,IAAI,CAKN;AAED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CA4CT;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CA0CpD"}
+{"version":3,"file":"image-capture.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/effects/image-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAE3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgBzD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAQD,mFAAmF;AACnF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,EAC9C,OAAO,EAAE,aAAa,GAAG,IAAI,GAC5B,qBAAqB,EAAE,CA0BzB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,SAAS,qBAAqB,EAAE,EAC3C,iBAAiB,CAAC,EAAE,OAAO,MAAM,EAAE,GAClC,IAAI,CAON;AAED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CA4CT;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CA0CpD"}

package/dist/core/hooks/effects/image-capture.js

@@ -58,11 +58,13 @@ export function captureImages(coordRoot, eventType, payload) {
  * Each observation uses a one-event producer boot, which preserves independent
  * producer sequence continuity while the ledger writer serializes appends.
  */
-export function recordImageArtifactsV3(coordRoot, sourceEvent, artifacts) {
+export function recordImageArtifactsV3(coordRoot, sourceEvent, artifacts, expectedGenesisId) {
     if (!("generation_id" in sourceEvent.scope) || !sourceEvent.attestation_id)
         return;
     for (const artifact of artifacts) {
-        writeEventV3(coordRoot, buildImageArtifactEventV3(sourceEvent, artifact));
+        writeEventV3(coordRoot, buildImageArtifactEventV3(sourceEvent, artifact), {
+            ...(expectedGenesisId ? { expectedGenesisId } : {}),
+        });
     }
 }
 export function buildImageArtifactEventV3(sourceEvent, artifact) {

package/dist/core/hooks/health.d.ts

@@ -0,0 +1,59 @@
+import type { Adapter } from "../adapter.js";
+export declare const HOOK_HEALTH_EVENT: "agent_hook.completed";
+export declare const HOOK_HEALTH_RECEIPT_VERSION: 1;
+export declare const HOOK_HEALTH_ERROR_PHASE_LIMIT = 8;
+export type HookHealthOutcome = "completed" | "skipped" | "degraded" | "faulted";
+export interface HookHealthState {
+    readonly started_at_ms: number;
+    readonly started_rss_bytes: number;
+    readonly event_name: string | null;
+    readonly adapter: Adapter | null;
+    readonly payload_bytes: number;
+    coord_root: string | null;
+    owner_id?: string;
+    skipped_reason?: string;
+    v3_state?: string;
+    error_phases: string[];
+}
+export interface HookHealthReceipt {
+    receipt_version: typeof HOOK_HEALTH_RECEIPT_VERSION;
+    hook_name: string;
+    adapter: Adapter | "unknown";
+    outcome: HookHealthOutcome;
+    exit_contract: "always-zero";
+    exit_code: 0;
+    duration_ms: number;
+    payload_bytes: number;
+    pid: number;
+    rss_start_bytes: number;
+    rss_end_bytes: number;
+    rss_delta_bytes: number;
+    retry_worker: boolean;
+    error_count: number;
+    error_phases: readonly string[];
+    owner_id?: string;
+    skipped_reason?: string;
+    v3_state?: string;
+}
+export declare function beginHookHealth(input: {
+    started_at_ms: number;
+    started_rss_bytes: number;
+    event_name: string | null;
+    adapter: Adapter | null;
+    payload_bytes: number;
+}): HookHealthState;
+export declare function observeHookDebug(state: HookHealthState | undefined, entry: Readonly<Record<string, unknown>>): void;
+export declare function observeHookError(state: HookHealthState | undefined, phase: unknown): void;
+export declare function finalizeHookHealth(state: HookHealthState, input: {
+    finished_at_ms: number;
+    finished_rss_bytes: number;
+    pid: number;
+    faulted?: boolean;
+}): HookHealthReceipt;
+export declare function writeHookHealthCompletion(state: HookHealthState | undefined, input: {
+    finished_at_ms: number;
+    finished_rss_bytes: number;
+    pid: number;
+    faulted?: boolean;
+}): HookHealthReceipt | undefined;
+//# sourceMappingURL=health.d.ts.map

package/dist/core/hooks/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,eAAO,MAAM,iBAAiB,EAAG,sBAA+B,CAAC;AACjE,eAAO,MAAM,2BAA2B,EAAG,CAAU,CAAC;AACtD,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,OAAO,2BAA2B,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,eAAe,CAMlB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,IAAI,CAMN;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAGzF;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,iBAAiB,CA+BnB;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,KAAK,EAAE;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,iBAAiB,GAAG,SAAS,CAS/B"}

package/dist/core/hooks/health.js

@@ -0,0 +1,84 @@
+import { processLogger } from "../storage/logger.js";
+export const HOOK_HEALTH_EVENT = "agent_hook.completed";
+export const HOOK_HEALTH_RECEIPT_VERSION = 1;
+export const HOOK_HEALTH_ERROR_PHASE_LIMIT = 8;
+export function beginHookHealth(input) {
+    return {
+        ...input,
+        coord_root: null,
+        error_phases: [],
+    };
+}
+export function observeHookDebug(state, entry) {
+    if (!state)
+        return;
+    const skipped = safeToken(entry.skipped);
+    if (skipped)
+        state.skipped_reason = skipped;
+    const v3State = safeToken(entry.event_v3_state);
+    if (v3State)
+        state.v3_state = v3State;
+}
+export function observeHookError(state, phase) {
+    if (!state || state.error_phases.length >= HOOK_HEALTH_ERROR_PHASE_LIMIT)
+        return;
+    state.error_phases.push(safeToken(phase) ?? "unknown");
+}
+export function finalizeHookHealth(state, input) {
+    const duration = Math.max(0, Math.floor(input.finished_at_ms - state.started_at_ms));
+    const rssStart = boundedInteger(state.started_rss_bytes);
+    const rssEnd = boundedInteger(input.finished_rss_bytes);
+    const hookName = safeToken(state.event_name) ?? "unknown";
+    return {
+        receipt_version: HOOK_HEALTH_RECEIPT_VERSION,
+        hook_name: hookName,
+        adapter: state.adapter ?? "unknown",
+        outcome: input.faulted
+            ? "faulted"
+            : state.error_phases.length > 0
+                ? "degraded"
+                : state.skipped_reason
+                    ? "skipped"
+                    : "completed",
+        exit_contract: "always-zero",
+        exit_code: 0,
+        duration_ms: duration,
+        payload_bytes: boundedInteger(state.payload_bytes),
+        pid: boundedInteger(input.pid),
+        rss_start_bytes: rssStart,
+        rss_end_bytes: rssEnd,
+        rss_delta_bytes: rssEnd - rssStart,
+        retry_worker: hookName === "runtime-context-retry",
+        error_count: state.error_phases.length,
+        error_phases: [...state.error_phases],
+        ...(state.owner_id ? { owner_id: state.owner_id } : {}),
+        ...(state.skipped_reason ? { skipped_reason: state.skipped_reason } : {}),
+        ...(state.v3_state ? { v3_state: state.v3_state } : {}),
+    };
+}
+export function writeHookHealthCompletion(state, input) {
+    if (!state?.coord_root)
+        return undefined;
+    const receipt = finalizeHookHealth(state, input);
+    try {
+        processLogger(state.coord_root, "agent-hook").info(HOOK_HEALTH_EVENT, { ...receipt });
+    }
+    catch {
+        // Hook health is observer-only. Logging can never change adapter behavior.
+    }
+    return receipt;
+}
+function safeToken(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const normalized = value
+        .trim()
+        .slice(0, 128)
+        .replace(/[^a-zA-Z0-9._:/+-]+/g, "-");
+    return /^[a-zA-Z0-9]/.test(normalized) ? normalized : undefined;
+}
+function boundedInteger(value) {
+    if (!Number.isFinite(value))
+        return 0;
+    return Math.max(0, Math.min(Number.MAX_SAFE_INTEGER, Math.floor(value)));
+}

package/dist/core/hooks/remediation-cap.d.ts

@@ -25,10 +25,15 @@ export declare const DEFAULT_STOP_REMEDIATION_CAP = 5;
  *
  * Call only when the Stop verdict blocked. `continuation` is the adapter's
  * "this stop follows a stop-hook block" flag; false starts a fresh cycle.
- * Returns true when this cycle has already been blocked `cap` times, meaning
- * the caller should allow the stop instead of blocking again.
+ * Returns the retained block count and whether this cycle has already been
+ * blocked `cap` times, meaning the caller should allow the stop instead of
+ * blocking again.
  */
-export declare function remediationCapExceeded(sessionId: string, continuation: boolean, cap?: number): boolean;
+export interface RemediationBlockRecord {
+    count: number;
+    exceeded: boolean;
+}
+export declare function recordRemediationBlock(sessionId: string, continuation: boolean, cap?: number): RemediationBlockRecord;
 /** Clear the cycle counter after an allowed stop. */
 export declare function clearRemediationCount(sessionId: string): void;
 //# sourceMappingURL=remediation-cap.d.ts.map

package/dist/core/hooks/remediation-cap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediation-cap.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/remediation-cap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAO9C;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,OAAO,EACrB,GAAG,SAA+B,GACjC,OAAO,CAsBT;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAM7D"}
+{"version":3,"file":"remediation-cap.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/remediation-cap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAO9C;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,OAAO,EACrB,GAAG,SAA+B,GACjC,sBAAsB,CAsBxB;AAED,qDAAqD;AACrD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAM7D"}

package/dist/core/hooks/remediation-cap.js

@@ -27,15 +27,7 @@ function counterPath(sessionId) {
     const key = (sessionId || "default").replace(/[^A-Za-z0-9_-]/g, "_");
     return join(os.tmpdir(), `harnery-stop-remediation-${key}.count`);
 }
-/**
- * Record one blocked stop and report whether the cap is exhausted.
- *
- * Call only when the Stop verdict blocked. `continuation` is the adapter's
- * "this stop follows a stop-hook block" flag; false starts a fresh cycle.
- * Returns true when this cycle has already been blocked `cap` times, meaning
- * the caller should allow the stop instead of blocking again.
- */
-export function remediationCapExceeded(sessionId, continuation, cap = DEFAULT_STOP_REMEDIATION_CAP) {
+export function recordRemediationBlock(sessionId, continuation, cap = DEFAULT_STOP_REMEDIATION_CAP) {
     const path = counterPath(sessionId);
     let count = 1;
     if (continuation) {
@@ -56,9 +48,9 @@ export function remediationCapExceeded(sessionId, continuation, cap = DEFAULT_ST
     }
     catch {
         // Counter IO must never turn into a block or a crash; fail open (no cap).
-        return false;
+        return { count, exceeded: false };
     }
-    return count > cap;
+    return { count, exceeded: count > cap };
 }
 /** Clear the cycle counter after an allowed stop. */
 export function clearRemediationCount(sessionId) {

package/dist/core/hooks/resolve/coord-root.d.ts

@@ -1,12 +1,12 @@
 /**
- * The hooks-side name for THE coordination-root resolution.
+ * Resolve the coordination root from path evidence only.
  *
- * Delegates to `resolveCoordRoot()` so the hooks and the CLI cannot resolve
- * different roots. They used to: this walked up from `CLAUDE_PROJECT_DIR` or
- * cwd while the CLI's `monorepoRoot()` asked git for the superproject first, so
- * with a shell inside a submodule that carries its own `.harnery/`, the CLI's
- * `coord.status_observed` landed in a stream this side never read and rule 1/3
- * blocked every turn.
+ * This path-only resolver deliberately does not inspect live producer state.
+ * Code that reads or writes coordination authority must use
+ * `resolveCoordRoot()` from `agents/coord-client.ts`, which disambiguates
+ * nested coordination roots through the registered session. Keeping the two
+ * responsibilities separate lets configuration and other path-only consumers
+ * avoid loading the event recorder and its contract graph.
  *
  * Resolution precedence (see `resolveCoordRoot` for the full rationale):
  *   1. HARNERY_COORD_ROOT_OVERRIDE — explicit pin (tests, git hooks).
@@ -15,8 +15,21 @@
  *      submodules that may carry a `.harnery/` of their own (or none at all,
  *      e.g. a journal dir under /tmp). The session's coordination home is the
  *      project the adapter opened, not wherever the shell happens to sit.
- *   3. The root that already holds this session's heartbeat.
- *   4. The nearest enclosing `.harnery/`, then a git-derived root.
+ *   3. The nearest enclosing `.harnery/`.
+ *   4. A git-derived root when no `.harnery/` exists yet.
  */
 export declare function findCoordRoot(start?: string): string | null;
+/** Nearest enclosing directory carrying `.harnery/`, or null. */
+export declare function nearestCoordRoot(start: string): string | null;
+/** Every enclosing directory carrying `.harnery/`, nearest first. */
+export declare function ancestorCoordRoots(start: string): string[];
+/**
+ * Git-derived roots carrying `.harnery/`, in superproject-first order.
+ *
+ * Spawns use `start` as cwd so a call about another checkout cannot inherit
+ * this process's repository. The common-dir fallback recovers a superproject
+ * from a submodule worktree, where Git reports no direct superproject path.
+ */
+export declare function gitCoordRoots(start: string): string[];
+export declare function gitToplevel(start: string): string | null;
 //# sourceMappingURL=coord-root.d.ts.map

package/dist/core/hooks/resolve/coord-root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coord-root.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/coord-root.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAE1E"}
+{"version":3,"file":"coord-root.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/coord-root.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAa1E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAED,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAU1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAcrD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExD"}

package/dist/core/hooks/resolve/coord-root.js

@@ -1,13 +1,15 @@
-import { resolveCoordRoot } from "../../agents/coord-client.js";
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
 /**
- * The hooks-side name for THE coordination-root resolution.
+ * Resolve the coordination root from path evidence only.
  *
- * Delegates to `resolveCoordRoot()` so the hooks and the CLI cannot resolve
- * different roots. They used to: this walked up from `CLAUDE_PROJECT_DIR` or
- * cwd while the CLI's `monorepoRoot()` asked git for the superproject first, so
- * with a shell inside a submodule that carries its own `.harnery/`, the CLI's
- * `coord.status_observed` landed in a stream this side never read and rule 1/3
- * blocked every turn.
+ * This path-only resolver deliberately does not inspect live producer state.
+ * Code that reads or writes coordination authority must use
+ * `resolveCoordRoot()` from `agents/coord-client.ts`, which disambiguates
+ * nested coordination roots through the registered session. Keeping the two
+ * responsibilities separate lets configuration and other path-only consumers
+ * avoid loading the event recorder and its contract graph.
  *
  * Resolution precedence (see `resolveCoordRoot` for the full rationale):
  *   1. HARNERY_COORD_ROOT_OVERRIDE — explicit pin (tests, git hooks).
@@ -16,9 +18,88 @@ import { resolveCoordRoot } from "../../agents/coord-client.js";
  *      submodules that may carry a `.harnery/` of their own (or none at all,
  *      e.g. a journal dir under /tmp). The session's coordination home is the
  *      project the adapter opened, not wherever the shell happens to sit.
- *   3. The root that already holds this session's heartbeat.
- *   4. The nearest enclosing `.harnery/`, then a git-derived root.
+ *   3. The nearest enclosing `.harnery/`.
+ *   4. A git-derived root when no `.harnery/` exists yet.
  */
 export function findCoordRoot(start = process.cwd()) {
-    return resolveCoordRoot(start);
+    const rootOverride = process.env.HARNERY_COORD_ROOT_OVERRIDE;
+    if (rootOverride)
+        return rootOverride;
+    const projectDir = process.env.CLAUDE_PROJECT_DIR;
+    if (projectDir) {
+        const fromProject = nearestCoordRoot(projectDir);
+        if (fromProject)
+            return fromProject;
+    }
+    const nearest = nearestCoordRoot(start);
+    if (nearest)
+        return nearest;
+    return gitCoordRoots(start)[0] ?? gitToplevel(start);
 }
+/** Nearest enclosing directory carrying `.harnery/`, or null. */
+export function nearestCoordRoot(start) {
+    return ancestorCoordRoots(start)[0] ?? null;
+}
+/** Every enclosing directory carrying `.harnery/`, nearest first. */
+export function ancestorCoordRoots(start) {
+    const found = [];
+    let dir = resolve(start);
+    while (true) {
+        if (existsSync(join(dir, ".harnery")))
+            found.push(dir);
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return found;
+}
+/**
+ * Git-derived roots carrying `.harnery/`, in superproject-first order.
+ *
+ * Spawns use `start` as cwd so a call about another checkout cannot inherit
+ * this process's repository. The common-dir fallback recovers a superproject
+ * from a submodule worktree, where Git reports no direct superproject path.
+ */
+export function gitCoordRoots(start) {
+    const roots = [];
+    const push = (value) => {
+        if (value && existsSync(join(value, ".harnery")) && !roots.includes(value))
+            roots.push(value);
+    };
+    push(gitRevParse(start, "--show-superproject-working-tree"));
+    const common = gitRevParse(start, "--git-common-dir");
+    if (common) {
+        const index = common.indexOf("/.git/modules/");
+        if (index !== -1)
+            push(common.substring(0, index));
+    }
+    push(gitToplevel(start));
+    return roots;
+}
+export function gitToplevel(start) {
+    return gitRevParse(start, "--show-toplevel");
+}
+function gitRevParse(start, flag) {
+    const key = `${start}\0${flag}`;
+    const cached = gitRevParseCache.get(key);
+    if (cached !== undefined)
+        return cached;
+    let value = null;
+    try {
+        // A stale adapter project directory may no longer exist. Treat spawn
+        // failure as no path evidence instead of turning discovery into an error.
+        const result = spawnSync("git", ["rev-parse", flag], {
+            cwd: start,
+            encoding: "utf8",
+        });
+        if (result.status === 0)
+            value = result.stdout.trim() || null;
+    }
+    catch {
+        value = null;
+    }
+    gitRevParseCache.set(key, value);
+    return value;
+}
+const gitRevParseCache = new Map();

package/dist/core/hooks/resolve/owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,iBAAiB,CAAC;CAC/E,GAAG,IAAI,CA4EP;AA2BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExF;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}
+{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,iBAAiB,CAAC;CAC/E,GAAG,IAAI,CAgFP;AA2BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExF;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}

package/dist/core/hooks/resolve/owner.js

@@ -38,6 +38,11 @@ export function resolveOwner(opts) {
         };
         const childId = value("subagent_id") ?? value("agent_id");
         const sessionId = value("session_id") ?? value("conversation_id");
+        // A payload with one unambiguous session identity needs no projection
+        // lookup. Live-authority tie-breaking matters only when the adapter also
+        // supplies a child candidate that could be stale or belong to the parent.
+        if (sessionId && !childId)
+            return { instance_id: sessionId, source: "payload" };
         const child = childId ? readLiveCoordinationRow(opts.coordRoot, childId) : null;
         const session = sessionId ? readLiveCoordinationRow(opts.coordRoot, sessionId) : null;
         if (child && sessionId && (child.kind === "subagent" || child.session_id === sessionId)) {

package/dist/core/hooks/resolve/transcript.d.ts

@@ -1,3 +1,4 @@
+export declare const ASSISTANT_STATUS_BOX_PREFIX = "\u250C\u2500 agent-";
 /**
  * Scan a CC-style JSONL transcript for the `┌─ agent-` status-box prefix in
  * the most-recent assistant turn. Used by `turn.completed` events to populate
@@ -25,6 +26,13 @@ export declare function scanStatusBoxPresent(transcriptPath: string | undefined)
  * truncated JSON row, which the per-line parse guard skips.
  */
 export declare function scanAssistantTextIncludes(transcriptPath: string | undefined, needle: string): boolean;
+/**
+ * Strict status-box evidence shared by turn telemetry and the Stop-time
+ * continuation fallback. Both inputs are assistant-only surfaces: the JSONL
+ * scanner rejects tool_result rows, while lastAssistantMessage comes directly
+ * from the adapter's completed assistant response.
+ */
+export declare function scanAssistantStatusBoxPresent(transcriptPath: string | undefined, lastAssistantMessage: string | undefined): boolean;
 /** Most recent user-visible assistant text across Claude Code and Codex JSONL. */
 export declare function scanLatestAssistantText(transcriptPath: string | undefined): string | undefined;
 /**

package/dist/core/hooks/resolve/transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/transcript.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAiCT;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,OAAO,CAIT;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,CAAA;CAAE,CAAC;AAEpF;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,4BAA4B,CA0B9B;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAUrF;AAwDD;4CAC4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,qBAAqB,GAAG,SAAS,CA8BnC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAkDpB"}
+{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/transcript.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,2BAA2B,wBAAc,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAiCT;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GACvC,OAAO,CAKT;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,OAAO,CAIT;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,CAAA;CAAE,CAAC;AAEpF;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,4BAA4B,CA0B9B;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAUrF;AAwDD;4CAC4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,qBAAqB,GAAG,SAAS,CA8BnC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAkDpB"}

package/dist/core/hooks/resolve/transcript.js

@@ -1,6 +1,7 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { toolResponseMintedSessionName } from "../../agents/session-name-display.js";
+export const ASSISTANT_STATUS_BOX_PREFIX = "┌─ agent-";
 /**
  * Scan a CC-style JSONL transcript for the `┌─ agent-` status-box prefix in
  * the most-recent assistant turn. Used by `turn.completed` events to populate
@@ -77,6 +78,16 @@ export function scanAssistantTextIncludes(transcriptPath, needle) {
     }
     return false;
 }
+/**
+ * Strict status-box evidence shared by turn telemetry and the Stop-time
+ * continuation fallback. Both inputs are assistant-only surfaces: the JSONL
+ * scanner rejects tool_result rows, while lastAssistantMessage comes directly
+ * from the adapter's completed assistant response.
+ */
+export function scanAssistantStatusBoxPresent(transcriptPath, lastAssistantMessage) {
+    return (scanAssistantTextIncludes(transcriptPath, ASSISTANT_STATUS_BOX_PREFIX) ||
+        lastAssistantMessage?.includes(ASSISTANT_STATUS_BOX_PREFIX) === true);
+}
 /** Most recent user-visible assistant text across Claude Code and Codex JSONL. */
 export function scanLatestAssistantText(transcriptPath) {
     const readablePath = resolveTranscriptPath(transcriptPath);

package/dist/core/inbox/contract.d.ts

@@ -0,0 +1,64 @@
+export declare const HARNERY_INBOX_RECORD_SCHEMA: "harnery.inbox-record/v1";
+export declare const HARNERY_INBOX_STATUS_SCHEMA: "harnery.inbox-status/v1";
+export interface HarneryInboxLimits {
+    max_message_body_bytes: number;
+    max_pending_count: number;
+    max_pending_bytes: number;
+    max_history_bytes: number;
+    max_history_records: number;
+    warning_pressure_ratio: number;
+    max_surface_count: number;
+    max_surface_bytes: number;
+    max_surface_tokens: number;
+    surfaced_grace_ms: number;
+    terminal_grace_ms: number;
+}
+export interface HarneryInboxMessageRecordV1 {
+    schema: typeof HARNERY_INBOX_RECORD_SCHEMA;
+    kind: "message";
+    message_id: string;
+    sender_instance_id: string;
+    sender_display_name: string;
+    recipient_instance_id: string;
+    recipient_display_name: string;
+    created_at: string;
+    body: string;
+    body_bytes: number;
+}
+export interface HarneryInboxSurfacedRecordV1 {
+    schema: typeof HARNERY_INBOX_RECORD_SCHEMA;
+    kind: "surfaced";
+    message_id: string;
+    surfaced_at: string;
+}
+export type HarneryInboxRecordV1 = HarneryInboxMessageRecordV1 | HarneryInboxSurfacedRecordV1;
+export interface HarneryInboxStatusV1 {
+    schema: typeof HARNERY_INBOX_STATUS_SCHEMA;
+    recipient_instance_id: string;
+    pending_count: number;
+    pending_bytes: number;
+    total_history_bytes: number;
+    oldest_pending_at?: string;
+    pressure: "normal" | "warning" | "exhausted";
+    last_surface_at?: string;
+    last_compaction_at?: string;
+}
+export type HarneryInboxCapacityReason = "message_body_limit" | "pending_count_limit" | "pending_bytes_limit" | "history_bytes_limit";
+export declare class HarneryInboxCapacityError extends Error {
+    readonly reason_code: HarneryInboxCapacityReason;
+    readonly current: number;
+    readonly limit: number;
+    constructor(reason_code: HarneryInboxCapacityReason, current: number, limit: number);
+}
+export interface HarneryInboxSurfaceBudget {
+    max_count: number;
+    max_bytes: number;
+    max_tokens: number;
+}
+export interface HarneryInboxSurfaceResult {
+    emitted: readonly HarneryInboxMessageRecordV1[];
+    remaining_pending_count: number;
+    remaining_pending_bytes: number;
+    repeated_after_crash_possible: true;
+}
+//# sourceMappingURL=contract.d.ts.map

package/dist/core/inbox/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,EAAG,yBAAkC,CAAC;AAC9E,eAAO,MAAM,2BAA2B,EAAG,yBAAkC,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,2BAA2B,CAAC;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,OAAO,2BAA2B,CAAC;IAC3C,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,GAAG,4BAA4B,CAAC;AAE9F,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,2BAA2B,CAAC;IAC3C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,0BAA0B,GAClC,oBAAoB,GACpB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,qBAAa,yBAA0B,SAAQ,KAAK;IAEhD,QAAQ,CAAC,WAAW,EAAE,0BAA0B;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,WAAW,EAAE,0BAA0B,EACvC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;CAMzB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAChD,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,6BAA6B,EAAE,IAAI,CAAC;CACrC"}

package/dist/core/inbox/contract.js

@@ -0,0 +1,13 @@
+export const HARNERY_INBOX_RECORD_SCHEMA = "harnery.inbox-record/v1";
+export const HARNERY_INBOX_STATUS_SCHEMA = "harnery.inbox-status/v1";
+export class HarneryInboxCapacityError extends Error {
+    reason_code;
+    current;
+    limit;
+    constructor(reason_code, current, limit) {
+        super(`inbox capacity ${reason_code}: ${current}/${limit}; use a managed artifact for larger payloads`);
+        this.reason_code = reason_code;
+        this.current = current;
+        this.limit = limit;
+    }
+}

package/dist/core/inbox/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./contract.js";
+export * from "./lifecycle.js";
+export * from "./service.js";
+export * from "./watcher.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/inbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/core/inbox/index.js

@@ -0,0 +1,4 @@
+export * from "./contract.js";
+export * from "./lifecycle.js";
+export * from "./service.js";
+export * from "./watcher.js";

package/dist/core/inbox/lifecycle.d.ts

@@ -0,0 +1,22 @@
+import type { HarneryInboxLimits, HarneryInboxRecordV1 } from "./contract.js";
+export declare const HARNERY_INBOX_COMPACTION_PLAN_SCHEMA: "harnery.inbox-compaction-plan/v1";
+export type HarneryRecipientLifecycle = "active" | "resumable" | "terminal";
+export interface HarneryInboxCompactionPlan {
+    schema: typeof HARNERY_INBOX_COMPACTION_PLAN_SCHEMA;
+    recipient_instance_id: string;
+    action: "none" | "compact-surfaced" | "prune-terminal";
+    reason_code: "pending_protected" | "active_recipient" | "surfaced_grace" | "terminal_grace" | "eligible";
+    remove_record_count: number;
+    retained_record_count: number;
+    protected_pending_count: number;
+    dry_run: true;
+}
+export declare function planInboxCompaction(input: {
+    recipient_instance_id: string;
+    records: readonly HarneryInboxRecordV1[];
+    lifecycle: HarneryRecipientLifecycle;
+    terminal_at?: string;
+    now: Date;
+    limits: HarneryInboxLimits;
+}): HarneryInboxCompactionPlan;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/core/inbox/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAG9E,eAAO,MAAM,oCAAoC,EAAG,kCAA2C,CAAC;AAEhG,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAE5E,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,oCAAoC,CAAC;IACpD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;IACvD,WAAW,EACP,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,UAAU,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,OAAO,EAAE,IAAI,CAAC;CACf;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzC,SAAS,EAAE,yBAAyB,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,IAAI,CAAC;IACV,MAAM,EAAE,kBAAkB,CAAC;CAC5B,GAAG,0BAA0B,CAqD7B"}