harnery 0.35.0 → 0.37.0

package/dist/commands/supervisor.js

@@ -0,0 +1,101 @@
+import { resolve } from "node:path";
+import { readSupervisorHookHealth } from "../core/supervisor/hook-health-storage.js";
+import { requestSupervisorStop, runSupervisor, spawnSupervisor, } from "../core/supervisor/service.js";
+import { readSupervisorStatus } from "../core/supervisor/status.js";
+import { readSupervisorFindings, readSupervisorHistory, readSupervisorLogFeed, readSupervisorSnapshot, } from "../core/supervisor/storage.js";
+export function registerSupervisorCommand(program, emit, context) {
+    const supervisor = program
+        .command("supervisor")
+        .description("Run Harnery's optional local diagnostic supervisor");
+    supervisor
+        .command("start")
+        .description("Start the detached local supervisor")
+        .option("--root <path>", "Explicit coordination root")
+        .option("--interval-ms <milliseconds>", "Collection interval from 500 to 60000 ms", integer)
+        .option("--idle-exit-ms <milliseconds>", "Exit after this long without a live dashboard consumer or attributed agent", integer)
+        .option("--keep-alive", "Remain resident until explicitly stopped")
+        .action(async (options) => {
+        try {
+            emit.data(await spawnSupervisor(resolve(options.root ?? coordRoot(context)), {
+                intervalMs: options.intervalMs,
+                idleExitMs: options.idleExitMs,
+                keepAlive: options.keepAlive,
+            }));
+        }
+        catch (error) {
+            fail(emit, "supervisor_start_failed", error);
+        }
+    });
+    supervisor
+        .command("status")
+        .description("Show supervisor liveness and its latest bounded projections")
+        .option("--root <path>", "Explicit coordination root")
+        .action((options) => {
+        try {
+            const root = resolve(options.root ?? coordRoot(context));
+            emit.data({
+                service: readSupervisorStatus(root),
+                snapshot: readSupervisorSnapshot(root),
+                history: readSupervisorHistory(root),
+                findings: readSupervisorFindings(root),
+                hook_health: readSupervisorHookHealth(root),
+                log_feed: readSupervisorLogFeed(root),
+            });
+        }
+        catch (error) {
+            fail(emit, "supervisor_status_failed", error);
+        }
+    });
+    supervisor
+        .command("stop")
+        .description("Request a graceful supervisor stop")
+        .option("--root <path>", "Explicit coordination root")
+        .action(async (options) => {
+        try {
+            const root = resolve(options.root ?? coordRoot(context));
+            let status = requestSupervisorStop(root);
+            const deadline = Date.now() + 5_000;
+            while (status.running && Date.now() < deadline) {
+                await new Promise((done) => setTimeout(done, 50));
+                status = readSupervisorStatus(root);
+            }
+            emit.data(status);
+        }
+        catch (error) {
+            fail(emit, "supervisor_stop_failed", error);
+        }
+    });
+    supervisor
+        .command("daemon", { hidden: true })
+        .description("Internal detached local supervisor entrypoint")
+        .option("--root <path>", "Explicit coordination root")
+        .option("--interval-ms <milliseconds>", "Collection interval", integer)
+        .option("--idle-exit-ms <milliseconds>", "Idle exit interval", integer)
+        .option("--keep-alive", "Remain resident until explicitly stopped")
+        .action(async (options) => {
+        try {
+            emit.data(await runSupervisor({
+                coordRoot: resolve(options.root ?? coordRoot(context)),
+                intervalMs: options.intervalMs,
+                idleExitMs: options.idleExitMs,
+                keepAlive: options.keepAlive,
+            }));
+        }
+        catch (error) {
+            fail(emit, "supervisor_daemon_failed", error);
+        }
+    });
+}
+function coordRoot(context) {
+    return context?.resolveCoordRoot?.() ?? context?.repoRoot ?? process.cwd();
+}
+function integer(value) {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed))
+        throw new Error(`expected an integer, got ${value}`);
+    return parsed;
+}
+function fail(emit, code, error) {
+    emit.error({ code, message: error instanceof Error ? error.message : String(error) });
+    emit.setExitCode(1);
+}

package/dist/commands/tunnel.d.ts

@@ -1,6 +1,10 @@
 import type { Command } from "commander";
 import type { EmitContext, HarneryProgramContext } from "../commander.js";
-import { type TunnelState } from "../lib/tunnel/state.js";
+import { type TunnelProvider, type TunnelState } from "../lib/tunnel/state.js";
+export declare function tunnelLogDestinations(name: string, provider: TunnelProvider, env?: NodeJS.ProcessEnv, root?: string): {
+    gate: string;
+    provider: string;
+};
 /**
  * Restart ONE instance's gate in place, deliberately leaving the provider
  * process running.

package/dist/commands/tunnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/commands/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAa1E,OAAO,EAYL,KAAK,WAAW,EAGjB,MAAM,wBAAwB,CAAC;AA8rBhC;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAsE7F;AA+MD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,WAAW,EACtB,YAAY,CAAC,EAAE,qBAAqB,GACnC,IAAI,CA2EN"}
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/commands/tunnel.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAQ1E,OAAO,EAWL,KAAK,cAAc,EACnB,KAAK,WAAW,EAGjB,MAAM,wBAAwB,CAAC;AAoDhC,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,cAAc,EACxB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAgB,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAcpC;AAuoBD;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAsE7F;AA+MD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,WAAW,EACtB,YAAY,CAAC,EAAE,qBAAqB,GACnC,IAAI,CA2EN"}

package/dist/commands/tunnel.js

@@ -1,12 +1,8 @@
-// Inline cachePath; see lib/tunnel/state.ts for rationale.
-function cachePath(tool, filename) {
-    const dir = resolve(process.cwd(), ".cache", tool);
-    return resolve(dir, filename);
-}
-import { spawn, spawnSync } from "node:child_process";
-import { existsSync, openSync, readFileSync, writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { resolveBinName } from "../core/config.js";
+import { processLogDestination, runRotatingProcessSync, spawnRotatingProcess, } from "../core/storage/process-log.js";
 import { clearState, DEFAULT_INSTANCE, ensureCloudflared, gateLogFile, isProcessAlive, listStates, providerLogFile, readConfig, readState, writeConfig, writeState, } from "../lib/tunnel/state.js";
 /**
  * `tunnel`: provider-backed tunnel in front of a local upstream.
@@ -24,6 +20,20 @@ const DEFAULT_TARGET = "127.0.0.1:8001";
 const DEFAULT_VHOST = "localhost";
 const DEFAULT_GATE_PORT = 9001;
 const MAX_GATE_PORT = DEFAULT_GATE_PORT + 99; // auto-allocation scan ceiling
+export function tunnelLogDestinations(name, provider, env = process.env, root = process.cwd()) {
+    const destination = (filename) => processLogDestination({
+        coord_root: root,
+        project_root: root,
+        family_id: "tunnel-process-log",
+        filename,
+        legacy_path: resolve(root, ".cache", "tunnel", filename),
+        env,
+    });
+    return {
+        gate: destination(gateLogFile(name)),
+        provider: destination(providerLogFile(name, provider)),
+    };
+}
 /**
  * Validate + normalize an instance name. Names become filename fragments
  * (state-<name>.json) and pgrep patterns, so they're restricted to a safe
@@ -270,7 +280,6 @@ function tailscaleCommand(mode) {
     return mode === "funnel" ? "funnel" : "serve";
 }
 function runTailscaleShare(mode, targetUrl, path, httpsPort, logPath) {
-    const fd = openSync(logPath, "a");
     const args = [
         tailscaleCommand(mode),
         "--bg",
@@ -279,31 +288,36 @@ function runTailscaleShare(mode, targetUrl, path, httpsPort, logPath) {
         `--set-path=${path}`,
         targetUrl,
     ];
-    const r = spawnSync("tailscale", args, {
-        stdio: ["ignore", fd, fd],
+    const status = runRotatingProcessSync({
+        path: logPath,
+        command: "tailscale",
+        arguments: args,
     });
-    if (r.status !== 0) {
+    if (status !== 0) {
         emit.error({
             code: "tunnel_tailscale_failed",
             message: `tailscale ${tailscaleCommand(mode)} failed. Check log: ${logPath}`,
         });
-        process.exit(r.status ?? 1);
+        process.exit(status ?? 1);
     }
 }
 function stopTailscaleShare(state) {
     if (state.provider !== "tailscale" || !state.tailscale_mode)
         return true;
     const cmd = tailscaleCommand(state.tailscale_mode);
-    const logPath = cachePath("tunnel", providerLogFile(state.name, "tailscale"));
-    const fd = openSync(logPath, "a");
+    const logPath = tunnelLogDestinations(state.name, "tailscale").provider;
     const args = [
         cmd,
         `--https=${state.tailscale_https_port ?? 443}`,
         `--set-path=${state.tailscale_path ?? "/"}`,
         "off",
     ];
-    const r = spawnSync("tailscale", args, { stdio: ["ignore", fd, fd] });
-    if (r.status !== 0) {
+    const status = runRotatingProcessSync({
+        path: logPath,
+        command: "tailscale",
+        arguments: args,
+    });
+    if (status !== 0) {
         // The gate is torn down and its port is freed for reuse regardless, so a
         // surviving serve/funnel mapping could later re-expose whatever next binds
         // that port. Surface it loudly so the operator can clear it by hand.
@@ -339,12 +353,12 @@ function tunnelIsAlive(state) {
  * re-reads — that snapshot is precisely why `reload` has to exist.
  */
 function spawnGate(o) {
-    const gateFd = openSync(o.gateLogPath, "a");
     // `--name`/`--port` on argv mirror the env vars; they're what makes the gate
     // process distinguishable per-instance in `pgrep -f` (see sweepStrays).
-    const gateProc = spawn("bun", ["run", gateScriptPath(), "--name", o.name, "--port", String(o.gatePort)], {
-        detached: true,
-        stdio: ["ignore", gateFd, gateFd],
+    const gateProc = spawnRotatingProcess({
+        path: o.gateLogPath,
+        command: "bun",
+        arguments: ["run", gateScriptPath(), "--name", o.name, "--port", String(o.gatePort)],
         env: {
             ...process.env,
             HARNERY_TUNNEL_ALLOW: o.allowedIps.join(","),
@@ -414,10 +428,9 @@ async function up(opts) {
         });
         process.exit(1);
     }
-    const gateLogPath = cachePath("tunnel", gateLogFile(name));
-    const providerLogPath = cachePath("tunnel", providerLogFile(name, provider));
-    writeFileSync(gateLogPath, "");
-    writeFileSync(providerLogPath, "");
+    const logPaths = tunnelLogDestinations(name, provider);
+    const gateLogPath = logPaths.gate;
+    const providerLogPath = logPaths.provider;
     const gateProc = spawnGate({
         name,
         gatePort,
@@ -439,15 +452,15 @@ async function up(opts) {
     let registered = true;
     let cloudflaredPid;
     if (provider === "cloudflare") {
-        const cfdFd = openSync(providerLogPath, "a");
         // Force HTTP/2 transport. The default QUIC transport wedges at precheck on
         // constrained hosts (e.g. WSL, where UDP receive buffers can't grow and ICMP
         // is restricted): the URL prints but the edge never registers. HTTP/2 is
         // marginally higher-latency but registers reliably, which is what a dev
         // tunnel needs.
-        const cfdProc = spawn(cloudflaredBin, ["tunnel", "--protocol", "http2", "--url", `http://localhost:${gatePort}`], {
-            detached: true,
-            stdio: ["ignore", cfdFd, cfdFd],
+        const cfdProc = spawnRotatingProcess({
+            path: providerLogPath,
+            command: cloudflaredBin,
+            arguments: ["tunnel", "--protocol", "http2", "--url", `http://localhost:${gatePort}`],
         });
         cfdProc.unref();
         cloudflaredPid = cfdProc.pid;
@@ -649,7 +662,7 @@ export async function reloadOne(state) {
         vhost: state.vhost,
         provider: state.provider,
         allowedIps: cfg.allowed_ips,
-        gateLogPath: cachePath("tunnel", gateLogFile(name)),
+        gateLogPath: tunnelLogDestinations(name, state.provider).gate,
     });
     await sleep(800);
     const pid = gateProc.pid;
@@ -794,8 +807,8 @@ function logs(opts) {
     const name = resolveName(opts.name);
     const state = readState(name);
     const provider = state?.provider ?? "cloudflare";
-    const which = opts.provider ? providerLogFile(name, provider) : gateLogFile(name);
-    const path = cachePath("tunnel", which);
+    const destinations = tunnelLogDestinations(name, provider);
+    const path = opts.provider ? destinations.provider : destinations.gate;
     if (!existsSync(path)) {
         emit.error({ code: "tunnel_no_log", message: `No log file at ${path}` });
         process.exit(1);

package/dist/commands/web.d.ts

@@ -19,6 +19,9 @@ export declare function resolveMaxOldSpaceMb(flag?: string): number;
  * wins without clobbering flags the caller set (source maps, inspector, …).
  */
 export declare function nodeOptionsWithHeapCap(mb: number): string | undefined;
+/** Preload the request diagnostics hook without replacing Next's HTTP server. */
+export declare function nodeOptionsWithWebDiagnostics(webDir: string, mb: number): string;
+export declare function webPerformanceLogDestination(coordRoot: string, env?: Readonly<Record<string, string | undefined>>): string;
 /**
  * Probe the exact localhost socket Next will claim. This is deliberately a
  * check-and-report step, not an alternate-port allocator: Harnery keeps one

package/dist/commands/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAkCnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AAyCD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA6K5E"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA8CnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AAED,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CAQR;AAmDD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA2N5E"}

package/dist/commands/web.js

@@ -2,9 +2,13 @@ import { spawn, spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { createServer } from "node:net";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
 import { ensureSemanticServiceRunning } from "../core/semantic/service.js";
+import { processLogDestination } from "../core/storage/process-log.js";
+import { ensureSupervisorRunning } from "../core/supervisor/service.js";
+import { registerSupervisorConsumer, unregisterSupervisorConsumer, } from "../core/supervisor/services.js";
+import { parsePerformanceWindow, readWebPerformanceReport, WEB_PERFORMANCE_LOG, } from "../lib/web-performance.js";
 import { lazyFetchWebRoot, webRunner } from "./web-fetch.js";
 /**
  * `harn web`: Next.js dashboard for harnery's coord state.
@@ -13,6 +17,7 @@ import { lazyFetchWebRoot, webRunner } from "./web-fetch.js";
  *   up [--prod]:   start the server (dev mode default; --prod runs next start)
  *   build:         next build (production bundle)
  *   start:         next start (must `harn web build` first)
+ *   performance:   summarize request latency and event-loop delays
  *
  * Launches the Next.js app under `harnery/web/` against the user's current
  * working directory. The web app reads `.harnery/` via `HARNERY_COORD_ROOT`;
@@ -66,6 +71,23 @@ export function nodeOptionsWithHeapCap(mb) {
         return inherited;
     return `${inherited} --max-old-space-size=${mb}`.trim();
 }
+/** Preload the request diagnostics hook without replacing Next's HTTP server. */
+export function nodeOptionsWithWebDiagnostics(webDir, mb) {
+    const inherited = nodeOptionsWithHeapCap(mb) ?? "";
+    if (inherited.includes("server-performance.mjs"))
+        return inherited;
+    const preload = pathToFileURL(path.join(webDir, "server-performance.mjs")).href;
+    return `${inherited} --import=${preload}`.trim();
+}
+export function webPerformanceLogDestination(coordRoot, env = process.env) {
+    return processLogDestination({
+        coord_root: coordRoot,
+        family_id: "web-performance-log",
+        filename: "active.jsonl",
+        legacy_path: path.join(coordRoot, ".harnery", "logs", WEB_PERFORMANCE_LOG),
+        env,
+    });
+}
 async function startSemanticServiceWithWeb(coordRoot, emit) {
     const result = await ensureSemanticServiceRunning(coordRoot);
     if (result.state === "started")
@@ -80,6 +102,17 @@ async function startSemanticServiceWithWeb(coordRoot, emit) {
         emit.log(`semantic reader · unavailable (${result.error ?? "startup failed"})`, "warn");
     }
 }
+async function startSupervisorWithWeb(coordRoot, emit) {
+    registerSupervisorConsumer(coordRoot, { id: "dashboard" });
+    const result = await ensureSupervisorRunning(coordRoot);
+    if (result.state === "started")
+        emit.log("local supervisor · started automatically", "info");
+    if (result.state === "running")
+        emit.log("local supervisor · already running", "info");
+    if (result.state === "unavailable") {
+        emit.log(`local supervisor · unavailable (${result.error})`, "warn");
+    }
+}
 /**
  * Resolve the web app root. A local `web/` (source checkout / submodule) wins.
  * Otherwise, on an npm install, lazy-fetch it (clone + install) unless the
@@ -183,11 +216,15 @@ export function registerWebCommand(program, emit) {
         }
         if (!(await requireAvailablePort(emit, port)))
             return;
+        await startSupervisorWithWeb(coordRoot, emit);
         await startSemanticServiceWithWeb(coordRoot, emit);
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
+        const nodeOptions = nodeOptionsWithWebDiagnostics(root, heapMb);
+        const performanceLogPath = webPerformanceLogDestination(coordRoot);
         emit.log(`harn web · http://localhost:${port} (${mode})`, "info");
         emit.log(`files origin · http://harnery-files.localhost:${port}`, "info");
         emit.log(`reading .harnery/ from: ${coordRoot}`, "info");
+        emit.log(`performance log · ${performanceLogPath}`, "info");
         if (heapMb > 0)
             emit.log(`heap ceiling · ${heapMb} MB`, "info");
         const child = spawn(webRunner(), ["run", mode], {
@@ -196,9 +233,9 @@ export function registerWebCommand(program, emit) {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
                 HARNERY_WEB_PORT: String(port),
-                ...(nodeOptionsWithHeapCap(heapMb)
-                    ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
-                    : {}),
+                HARNERY_WEB_MODE: mode,
+                HARNERY_WEB_PERFORMANCE_LOG_PATH: performanceLogPath,
+                NODE_OPTIONS: nodeOptions,
             },
             stdio: "inherit",
         });
@@ -209,6 +246,7 @@ export function registerWebCommand(program, emit) {
         process.on("SIGINT", () => cleanup("SIGINT"));
         process.on("SIGTERM", () => cleanup("SIGTERM"));
         child.on("exit", (code, sig) => {
+            unregisterSupervisorConsumer(coordRoot, "dashboard");
             if (sig) {
                 emit.log(`web exited on ${sig}`, "info");
             }
@@ -269,10 +307,14 @@ export function registerWebCommand(program, emit) {
         }
         if (!(await requireAvailablePort(emit, port)))
             return;
+        await startSupervisorWithWeb(coordRoot, emit);
         await startSemanticServiceWithWeb(coordRoot, emit);
         const heapMb = resolveMaxOldSpaceMb(opts.maxOldSpace);
+        const nodeOptions = nodeOptionsWithWebDiagnostics(root, heapMb);
+        const performanceLogPath = webPerformanceLogDestination(coordRoot);
         emit.log(`harn web · http://localhost:${port} (start)`, "info");
         emit.log(`reading .harnery/ from: ${coordRoot}`, "info");
+        emit.log(`performance log · ${performanceLogPath}`, "info");
         if (heapMb > 0)
             emit.log(`heap ceiling · ${heapMb} MB`, "info");
         const child = spawn(webRunner(), ["run", "start"], {
@@ -281,9 +323,9 @@ export function registerWebCommand(program, emit) {
                 ...process.env,
                 HARNERY_COORD_ROOT: coordRoot,
                 HARNERY_WEB_PORT: String(port),
-                ...(nodeOptionsWithHeapCap(heapMb)
-                    ? { NODE_OPTIONS: nodeOptionsWithHeapCap(heapMb) }
-                    : {}),
+                HARNERY_WEB_MODE: "start",
+                HARNERY_WEB_PERFORMANCE_LOG_PATH: performanceLogPath,
+                NODE_OPTIONS: nodeOptions,
             },
             stdio: "inherit",
         });
@@ -294,7 +336,42 @@ export function registerWebCommand(program, emit) {
         process.on("SIGINT", () => cleanup("SIGINT"));
         process.on("SIGTERM", () => cleanup("SIGTERM"));
         child.on("exit", (code) => {
+            unregisterSupervisorConsumer(coordRoot, "dashboard");
             process.exitCode = code ?? 0;
         });
     });
+    web
+        .command("performance")
+        .description("Summarize dashboard request, event-loop, memory, and GC diagnostics")
+        .option("--coord-root <dir>", "Override the coordination root", process.cwd())
+        .option("--since <window>", "Include the last Nm, Nh, or Nd", "1h")
+        .option("--limit <n>", "Keep the N slowest requests and delays", "20")
+        .option("--json", "Emit structured JSON")
+        .action((opts) => {
+        const windowMs = parsePerformanceWindow(opts.since);
+        if (windowMs === null) {
+            emit.error({
+                code: "invalid_web_performance_window",
+                message: `invalid --since value '${opts.since}'`,
+                hint: "Use Nm, Nh, or Nd, for example 30m, 1h, or 7d.",
+            });
+            return;
+        }
+        const limit = Number(opts.limit);
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > 500) {
+            emit.error({
+                code: "invalid_web_performance_limit",
+                message: `invalid --limit value '${opts.limit}'`,
+                hint: "Use an integer from 1 through 500.",
+            });
+            return;
+        }
+        if (opts.json)
+            emit.config({ format: "json" });
+        emit.data(readWebPerformanceReport({
+            root: opts.coordRoot,
+            since: opts.since,
+            limit,
+        }));
+    });
 }

package/dist/commands/work.js

@@ -1,8 +1,8 @@
 import { resolve } from "node:path";
 import { adapterProofInputs, createBuiltinAdapterRegistry, probeBinaryVersion, } from "../core/adapters/index.js";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
 import { workflowSubscriptionOnly } from "../core/config.js";
 import { findCompletedMissionGoverning, reopenGovernorMission } from "../core/governor/index.js";
-import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
 import { loadPolicyFile } from "../core/policy/index.js";
 import { acceptWorkItem, cancelWorkItem, createWorkItem, listWorkItemsWithWarnings, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, runWorkItem, } from "../core/work/index.js";
 import { WorkflowParkedError } from "../core/workflow/index.js";
@@ -344,7 +344,7 @@ export function renderAttemptBudget(record) {
     return uncharged > 0 ? `${base} (+${uncharged} uncharged)` : base;
 }
 function withWorkRoot(emit, fn) {
-    const coordRoot = findCoordRoot();
+    const coordRoot = resolveCoordRoot();
     if (!coordRoot) {
         emit.error({
             code: "no_coord_root",
@@ -362,7 +362,7 @@ function withWorkRoot(emit, fn) {
     }
 }
 async function withWorkRootAsync(emit, fn) {
-    const coordRoot = findCoordRoot();
+    const coordRoot = resolveCoordRoot();
     if (!coordRoot) {
         emit.error({
             code: "no_coord_root",

package/dist/commands/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAyEnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA4uBjF"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0EnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAmvBjF"}

package/dist/commands/workflow.js

@@ -1,8 +1,8 @@
 import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { adapterProofInputs, createBuiltinAdapterRegistry, probeBinaryVersion, } from "../core/adapters/index.js";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
 import { resolveBinName, workflowSubscriptionOnly } from "../core/config.js";
-import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
 import { loadPolicyFile } from "../core/policy/index.js";
 import { WorkflowParkedError } from "../core/workflow/engine.js";
 export function registerWorkflowCommand(program, emit) {
@@ -24,6 +24,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Workflow script (plain JS: `export default async ({agent, parallel, stage, log, evidence, authorize}) => …`)")
         .option("--max-agents <n>", "Total-agent ceiling for the run (default 50)")
         .option("--concurrency <n>", "Concurrent-subagent cap (default 4)")
+        .option("--observe-pressure", "Record observer-only local pressure before the first real child dispatch")
         .option("--cwd <dir>", "Working directory children spawn in (default: coord root)")
         .option("--adapter <name>", `Default adapter for agent() calls: ${adapters.join(" | ")} (default claude-code); scripts can override per agent via opts.adapter`)
         .option("--resume-from <run-id>", "Reuse completed agent results from a prior run's transcript; only changed/failed calls re-run")
@@ -37,7 +38,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--approval-to <address>", "Address durable ASK requests (default: operator)")
         .option("--json", "Emit the full RunReport as JSON")
         .action(async (script, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -94,6 +95,9 @@ export function registerWorkflowCommand(program, emit) {
                 allowApiBilling: opts.allowApiBilling,
                 maxAgents: opts.maxAgents ? Number.parseInt(opts.maxAgents, 10) : undefined,
                 concurrency: opts.concurrency ? Number.parseInt(opts.concurrency, 10) : undefined,
+                diagnosticAdmission: opts.observePressure
+                    ? { schema_version: 1, mode: "shadow" }
+                    : undefined,
                 cwd: opts.cwd,
                 ...adapterProofInputs(registry.list().map((adapter) => adapter.profile), { versionProbe: probeBinaryVersion }),
                 policy: opts.policy ? loadPolicyFile(opts.policy) : undefined,
@@ -156,7 +160,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Resume a parked workflow after its durable approval has been resolved.")
         .option("--json", "Emit the full RunReport or parked result as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -228,7 +232,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Show validated allocation, verification, integration, and cleanup state.")
         .option("--json", "Emit the validated workspace status as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -254,7 +258,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("List validated isolated and shared-compatibility workspace decisions.")
         .option("--json", "Emit workspace inspections as JSON")
         .action(async (opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -300,7 +304,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--approval-to <address>", "Address a durable policy ASK request")
         .option("--json", "Emit the durable integration plan as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -384,7 +388,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--yes", "Confirm the target-branch mutation")
         .option("--json", "Emit the durable integration receipt as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -426,7 +430,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--yes", "Confirm the worktree and provider-branch removal attempt")
         .option("--json", "Emit the cleanup attempt or receipt as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -473,7 +477,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--discard", "Throw the uncommitted work away instead of salvaging it")
         .option("--json", "Emit the reclaim preparation and cleanup result as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",
@@ -539,7 +543,7 @@ export function registerWorkflowCommand(program, emit) {
         .option("--status <status>", "Filter: pending | approved | denied")
         .option("--json", "Emit approval records as JSON")
         .action(async (opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({ code: "no_coord_root", message: "no .harnery/ coordination root found" });
             process.exit(1);
@@ -571,7 +575,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Show one durable workflow approval.")
         .option("--json", "Emit the approval record as JSON")
         .action(async (approvalId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({ code: "no_coord_root", message: "no .harnery/ coordination root found" });
             process.exit(1);
@@ -600,7 +604,7 @@ export function registerWorkflowCommand(program, emit) {
             .option("--reason <text>", "Bounded decision reason")
             .option("--json", "Emit the resolved approval as JSON")
             .action(async (approvalId, opts) => {
-            const coordRoot = findCoordRoot();
+            const coordRoot = resolveCoordRoot();
             if (!coordRoot) {
                 emit.error({ code: "no_coord_root", message: "no .harnery/ coordination root found" });
                 process.exit(1);
@@ -640,7 +644,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Show the bounded proof packet for a completed workflow run.")
         .option("--json", "Emit the stored proof packet as JSON")
         .action(async (runId, opts) => {
-        const coordRoot = findCoordRoot();
+        const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
             emit.error({
                 code: "no_coord_root",

package/dist/core/adapters/profiles.d.ts

@@ -62,7 +62,7 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
     };
 };
 export type BuiltinAdapterId = keyof typeof BUILTIN_ADAPTER_PROFILES;
-export declare const BUILTIN_ADAPTER_IDS: readonly ("claude-code" | "cursor" | "codex")[];
+export declare const BUILTIN_ADAPTER_IDS: readonly ("cursor" | "claude-code" | "codex")[];
 export declare function isBuiltinAdapter(id: string): id is BuiltinAdapterId;
 export declare function builtinAdapterProfile(id: string): AdapterProfile | undefined;
 export declare function validateAdapterEffort(id: string, effort: string | undefined): void;