harnery 0.36.0 → 0.38.0

package/dist/core/hooks/cli.js

@@ -21,15 +21,15 @@ import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { coordEnv } from "../../lib/env.js";
 import { buildInstructionBundle } from "../../lib/instructions/bundle.js";
-import { coordBinPath } from "../agents/coord-bin.js";
 import { resolveCoordRoot } from "../agents/coord-client.js";
 import { classifyWriteClaimFinalization, formatWriteClaimFinalizationDenial, } from "../agents/finalization.js";
-import { restoreLiveCoordinationStateAfterEpochV3 } from "../agents/live-authority-v3.js";
+import { recordLiveClaimChangeV3, restoreLiveCoordinationStateAfterEpochV3, } from "../agents/live-authority-v3.js";
 import { evaluateStopHook, STOP_REMEDIATION_MARKER } from "../agents/rules/stop-hook.js";
-import { assistantTextStartsWithSessionNameBlock, isSessionNameRemediationCommand, sessionNameDisplayInstruction, sessionNameDisplayPending, sessionNameDisplayRecoveryInstruction, toolResponseMintedSessionName, } from "../agents/session-name-display.js";
-import { readHeartbeat, stampSessionNameSeen } from "../agents/state/heartbeat-writer.js";
+import { assistantTextStartsWithSessionNameBlock, isSessionNameRemediationCommand, matchSessionNameDisplay, sessionNameDisplayAcceptedNames, sessionNameDisplayInstruction, sessionNameDisplayPending, sessionNameDisplayRecoveryInstruction, toolResponseMintedSessionName, } from "../agents/session-name-display.js";
+import { readHeartbeat, setAssignedNameCache, stampSessionNameRequested, stampSessionNameSeen, } from "../agents/state/heartbeat-writer.js";
 import { readLiveCoordinationRow } from "../agents/state/live-coordination-view.js";
 import { ensureLiveCoordinationHeartbeat } from "../agents/state/live-coordination-writer.js";
+import { assignName } from "../agents/state/names.js";
 import { writePidmapRow } from "../agents/state/pidmap.js";
 import { agentsRequireGitFinalization, resolveBinName } from "../config.js";
 import { checkpointContext, completeContextRecovery, extractContextSample, markContextCompactionCompleted, prepareContextRecovery, readContextState, recordContextSample, } from "../context/index.js";
@@ -46,12 +46,14 @@ import { codexWslFileLinkTelemetry, inspectCodexWslBridge, isWslUncPath, renderC
 import { captureImages, detectPresence, imageJanitor, journalArchive, journalJanitor, journalRecoveryCue, playSound, recordImageArtifactsV3, resetSoundCounters, runSessionSyncExtension, soundForEvent, } from "./effects/index.js";
 import { toolInputHash, toolTargetHash } from "./events/input-hash.js";
 import { canonicalize } from "./guard-path.js";
+import { beginHookHealth, observeHookDebug, observeHookError, writeHookHealthCompletion, } from "./health.js";
 import { adapterPidFromEnv, parsePsChainLine, selectAnchorPid } from "./resolve/anchor.js";
 import { extractIntentComment, resolveIntent } from "./resolve/intent.js";
 import { resolveOwner } from "./resolve/owner.js";
 import { inspectSessionNameDisplayImmediately, scanAssistantStatusBoxPresent, scanSessionNameDisplayedImmediately, scanStatusBoxPresent, scanTranscriptRuntime, } from "./resolve/transcript.js";
 import { sessionNamePresence } from "./session-name-presence.js";
 import { unsafeCrossShellReason } from "./unsafe-cross-shell.js";
+let hookHealthState;
 function parseArgv(argv) {
     const out = { eventName: null, extra: [] };
     for (let i = 0; i < argv.length; i++) {
@@ -90,16 +92,15 @@ async function readStdin() {
     }
 }
 /**
- * Env for child agent-coord spawns, with the coord root pinned. The hook
- * process may be running with the session shell's cwd (inside a submodule or
- * journal dir), and agent-coord resolves its root from cwd unless overridden —
- * without the pin a child could write state to a different .harnery than the
- * one this hook resolved.
+ * Env for a detached hook retry worker, with the coord root pinned. The hook
+ * may run with the session shell's cwd (inside a submodule or journal dir), so
+ * the worker must retain the root this process already resolved.
  */
 function childEnv(coordRoot) {
     return { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: coordRoot };
 }
 function appendDebug(coordRoot, entry) {
+    observeHookDebug(hookHealthState, entry);
     if (coordEnv("SHARED_LOGS") !== "0") {
         try {
             processLogger(coordRoot, "agent-hook").debug("agent_hook.diagnostic", legacyLogFields(entry));
@@ -119,6 +120,7 @@ function appendDebug(coordRoot, entry) {
     }
 }
 function logError(coordRoot, err, context) {
+    observeHookError(hookHealthState, context.phase);
     if (!coordRoot)
         return;
     if (coordEnv("SHARED_LOGS") !== "0") {
@@ -145,38 +147,41 @@ function logError(coordRoot, err, context) {
     }
 }
 /**
- * Spawn `agent-coord assign-name <owner> <kind>` to mint or recover the
- * hurricane-style name for this owner. Returns null on any failure so
- * session.started emission never breaks the adapter flow.
- *
- * Lives at agent-hooks side (not agent-coord) to keep emitter/consumer
- * separation: we spawn rather than import.
+ * Mint or recover the hurricane-style name for this owner in-process. Returns
+ * null on any failure so session.started emission never breaks adapter flow.
  */
-function assignNameViaAgentCoord(coordRoot, instanceId, kind, forkedFrom) {
-    const binary = coordBinPath("agent-coord", coordRoot) ?? "";
-    if (!existsSync(binary))
-        return null;
+function assignNameInProcess(coordRoot, instanceId, kind, forkedFrom) {
     try {
-        const args = ["assign-name", instanceId, kind];
-        if (forkedFrom)
-            args.push("--forked-from", forkedFrom);
-        const result = spawnSync(binary, args, {
-            encoding: "utf8",
-            timeout: 2000,
-            env: childEnv(coordRoot),
-        });
-        if (result.status !== 0 || !result.stdout)
-            return null;
-        const parsed = JSON.parse(result.stdout.trim());
-        if (parsed.name && parsed.kind) {
-            return { name: parsed.name, kind: parsed.kind };
-        }
-        return null;
+        const name = assignName(coordRoot, instanceId, kind, forkedFrom ? { forkedFrom } : undefined);
+        return { name, kind };
     }
     catch {
         return null;
     }
 }
+/** Mid-flight sessions can emit tools before SessionStart assigns a pool name.
+ * Stamp the disposable cache so Codec does not render the 8-character id. */
+function ensureSessionDisplayName(coordRoot, instanceId, sessionId, adapter) {
+    if (coordEnv("WORKFLOW_CHILD") === "1")
+        return;
+    const row = readLiveCoordinationRow(coordRoot, instanceId) ?? readHeartbeat(coordRoot, instanceId);
+    if (row?.kind === "subagent" || row?.kind === "transient" || row?.workflow_run_id)
+        return;
+    if (row?.name?.trim())
+        return;
+    const assigned = assignNameInProcess(coordRoot, instanceId, "session");
+    if (!assigned?.name)
+        return;
+    if (!readHeartbeat(coordRoot, instanceId)) {
+        try {
+            ensureLiveCoordinationHeartbeat(coordRoot, instanceId, sessionId, adapter);
+        }
+        catch {
+            /* cache materialization is best-effort; history still holds the name */
+        }
+    }
+    setAssignedNameCache(coordRoot, instanceId, assigned.name, "session");
+}
 /**
  * Direct (in-process) pidmap write, avoiding the spawn overhead of going via
  * the agent-coord CLI for every session.started signal. Pid-map rows
@@ -227,9 +232,9 @@ function buildEventData(eventType, ctx) {
             // tool.requested heal path instead. The forkedFrom plumbing below stays
             // for adapters that DO report a parent at session start.
             const forkedFrom = undefined;
-            // Assign (or recover) name + kind via agent-coord. Idempotent: resume
+            // Assign (or recover) name + kind in-process. Idempotent: resume
             // returns the original name; new owner consumes a counter slot.
-            const assigned = assignNameViaAgentCoord(ctx.coordRoot, ctx.instanceId, "session", forkedFrom);
+            const assigned = assignNameInProcess(ctx.coordRoot, ctx.instanceId, "session", forkedFrom);
             // Write the adapter pid-map row so `harn agents whoami` ppid-walks find
             // this owner. Prefer the payload pid (the actual claude binary), then the
             // anchor walk (the `node` ancestor for Cursor, which has no payload pid),
@@ -288,12 +293,12 @@ function buildEventData(eventType, ctx) {
                 clean_exit: p?.clean_exit ?? true,
             };
         case "turn.started": {
-            // Cursor can deliver beforeSubmitPrompt before sessionStart. Ensure that
-            // high-confidence prompt bootstrap also mints durable display identity;
-            // a later SessionStart remains idempotent.
-            if (ctx.adapter === "cursor" &&
-                !readLiveCoordinationRow(ctx.coordRoot, ctx.instanceId)?.name) {
-                assignNameViaAgentCoord(ctx.coordRoot, ctx.instanceId, "session");
+            // Mid-flight onboarding (any adapter) can observe a turn before
+            // SessionStart. Mint durable display identity here so a later
+            // SessionStart remains idempotent and Codec is not stuck on the
+            // 8-character native id.
+            if (!readLiveCoordinationRow(ctx.coordRoot, ctx.instanceId)?.name) {
+                assignNameInProcess(ctx.coordRoot, ctx.instanceId, "session");
             }
             const prompt = p?.prompt ?? "";
             const { value, truncated } = clampString(prompt, 4000);
@@ -351,7 +356,7 @@ function buildEventData(eventType, ctx) {
             // (agent-coord/state/names.ts → kind=transient). Use the call ID as the
             // instance_id input; assignName falls through to transient.
             const childInstanceId = subagentCallId ?? ctx.instanceId;
-            const assigned = assignNameViaAgentCoord(ctx.coordRoot, childInstanceId, "subagent");
+            const assigned = assignNameInProcess(ctx.coordRoot, childInstanceId, "subagent");
             return {
                 agent_type: p?.raw.agent_type ??
                     p?.raw.subagent_type ??
@@ -466,10 +471,18 @@ function numberField(value) {
 }
 async function main() {
     const hookStartedAt = performance.now();
+    const hookStartedRss = process.memoryUsage().rss;
     const hookClock = captureSpanClockV3();
     const { eventName, extra } = parseArgv(process.argv.slice(2));
     const adapter = detectAdapter(process.argv.slice(2));
     const raw = await readStdin();
+    hookHealthState = beginHookHealth({
+        started_at_ms: hookStartedAt,
+        started_rss_bytes: hookStartedRss,
+        event_name: eventName,
+        adapter,
+        payload_bytes: raw.length,
+    });
     // Cursor executes the Claude Code project hooks too on hosts wired for both
     // adapters, piping them its own payload (identifiable by the top-level
     // cursor_version envelope field). That stray `--adapter claude-code`
@@ -480,6 +493,7 @@ async function main() {
         if (coordEnv("AGENT_COORD_OFF") !== "1") {
             const coordRoot = resolveCoordRoot(process.cwd());
             if (coordRoot) {
+                hookHealthState.coord_root = coordRoot;
                 appendDebug(coordRoot, {
                     ts: new Date().toISOString(),
                     event_name: eventName,
@@ -532,6 +546,7 @@ async function main() {
     const coordRoot = resolveCoordRoot(process.cwd());
     if (!coordRoot)
         return 0;
+    hookHealthState.coord_root = coordRoot;
     if (eventName === "runtime-context-retry") {
         return runRuntimeContextRetryWorker(coordRoot, adapter, extra);
     }
@@ -557,8 +572,9 @@ async function main() {
     // that tool. It is not a transcript and therefore cannot prove that an
     // earlier assistant response omitted the required session-name block.
     // afterAgentResponse is the one native boundary that carries the completed
-    // assistant text, so stamp a positive sighting here without retaining or
-    // emitting the response body into V3.
+    // assistant text. Preserve only privacy-safe ritual booleans in the V3
+    // producer's open-turn state; Stop consumes them into the authoritative
+    // turn.completed event. The response body never enters V3 or heartbeat.
     if (adapter === "cursor" && eventName === "after-agent-response") {
         const payload = parsePayload(raw, adapter);
         const owner = resolveOwner({ payload: payload?.raw ?? null, coordRoot });
@@ -566,15 +582,82 @@ async function main() {
             appendDebug(coordRoot, { ...debugBase, skipped: "no-owner-resolved" });
             return 0;
         }
-        const name = sessionNameDisplayPending(readLiveCoordinationRow(coordRoot, owner.instance_id));
+        const row = readLiveCoordinationRow(coordRoot, owner.instance_id);
+        const name = sessionNameDisplayPending(row);
         const text = typeof payload?.raw.text === "string" ? payload.raw.text : "";
-        if (name && assistantTextStartsWithSessionNameBlock(text, name)) {
-            stampSessionNameSeen(coordRoot, owner.instance_id, name);
-            appendDebug(coordRoot, { ...debugBase, effect: "session-name-display-stamped" });
+        const sighting = matchSessionNameDisplay(row, text);
+        if (sighting) {
+            stampSessionNameSeen(coordRoot, owner.instance_id, sighting.pending);
+            appendDebug(coordRoot, {
+                ...debugBase,
+                effect: "session-name-display-stamped",
+                session_name_pending: sighting.pending,
+                ...(sighting.displayed === sighting.pending
+                    ? {}
+                    : { session_name_displayed: sighting.displayed, session_name_drift: true }),
+            });
+        }
+        else if (!name) {
+            // Nothing was owed. Distinct from a miss: conflating the two is what made
+            // a latched Cursor session undiagnosable from this log.
+            appendDebug(coordRoot, { ...debugBase, skipped: "no-pending-session-name" });
         }
         else {
-            appendDebug(coordRoot, { ...debugBase, skipped: "no-session-name-sighting" });
+            appendDebug(coordRoot, {
+                ...debugBase,
+                skipped: "session-name-block-absent",
+                session_name_pending: name,
+                reply_bytes: text.length,
+                reply_leads_with_fence: /^\s*`{3,}/.test(text),
+            });
+        }
+        if (ledgerRoute.state === "blocked") {
+            appendDebug(coordRoot, {
+                ...debugBase,
+                skipped: "v3-control-blocked",
+                reason: ledgerRoute.reason,
+                owner_source: owner.source,
+            });
+            return 0;
         }
+        const statusBoxPresentStrict = scanAssistantStatusBoxPresent(undefined, text);
+        // The hook parser needs the completed reply long enough to scan it, but
+        // durable hook intake must never retain that body. Keep every other native
+        // field so turn correlation remains available to the producer.
+        const { text: _completedReply, ...privacySafeRaw } = payload?.raw ?? {};
+        const privacySafePayload = payload ? { ...payload, raw: privacySafeRaw } : null;
+        const v3Result = recordLiveHookSignalV3({
+            coordRoot,
+            route: ledgerRoute,
+            eventName,
+            payload: privacySafePayload,
+            adapter,
+            instanceId: owner.instance_id,
+            hook_name: eventName,
+            hook_duration_ms: Math.max(0, Math.floor(performance.now() - hookStartedAt)),
+            monotonic_ns: hookClock.monotonic_ns,
+            turn_ritual: {
+                status_box_present: statusBoxPresentStrict,
+                status_box_present_strict: statusBoxPresentStrict,
+                session_name_required: name !== undefined,
+                session_name_present: name ? assistantTextStartsWithSessionNameBlock(text, name) : false,
+            },
+        });
+        observeHookDebug(hookHealthState, { event_v3_state: v3Result.state });
+        appendDebug(coordRoot, {
+            ...debugBase,
+            effect: "cursor-response-ritual-observed",
+            owner_source: owner.source,
+            event_v3_state: v3Result.state,
+            ...(v3Result.state === "observed"
+                ? {
+                    generation_id: v3Result.generation_id,
+                    turn_id: v3Result.turn_id,
+                    response_observed_at: v3Result.observed_at,
+                    status_box_present_strict: statusBoxPresentStrict,
+                }
+                : {}),
+        });
         return 0;
     }
     const norm = normalizeEventName(eventName);
@@ -595,8 +678,17 @@ async function main() {
         });
         return 0;
     }
+    hookHealthState.owner_id = owner.instance_id;
     const sessionId = payload?.session_id ?? payload?.conversation_id ?? owner.instance_id;
     const priorCoordination = readHeartbeat(coordRoot, owner.instance_id);
+    if (norm.event_type !== "session.ended" &&
+        coordEnv("WORKFLOW_CHILD") !== "1" &&
+        priorCoordination?.kind !== "subagent" &&
+        priorCoordination?.kind !== "transient" &&
+        !priorCoordination?.workflow_run_id &&
+        !priorCoordination?.name?.trim()) {
+        assignNameInProcess(coordRoot, owner.instance_id, "session");
+    }
     const data = buildEventData(norm.event_type, {
         coordRoot,
         payload,
@@ -661,6 +753,9 @@ async function main() {
         ...(turnRitual ? { turn_ritual: turnRitual } : {}),
         ...(deferV3Drain ? { defer_drain: true } : {}),
     });
+    observeHookDebug(hookHealthState, {
+        ...(v3Result ? { event_v3_state: v3Result.state } : {}),
+    });
     const recordedGenerationId = v3Result && "event" in v3Result && "generation_id" in v3Result.event.scope
         ? v3Result.event.scope.generation_id
         : undefined;
@@ -679,6 +774,14 @@ async function main() {
             logError(coordRoot, error, { phase: "epoch-coordination-restore" });
         }
     }
+    if (norm.event_type !== "session.ended") {
+        try {
+            ensureSessionDisplayName(coordRoot, owner.instance_id, sessionId, adapter);
+        }
+        catch (error) {
+            logError(coordRoot, error, { phase: "session-display-name" });
+        }
+    }
     const v3EventId = v3Result && "event" in v3Result
         ? v3Result.event.event_id
         : v3Result && "event_id" in v3Result
@@ -806,6 +909,7 @@ async function main() {
         // Session start is the only caller of the artifact janitor and the storage
         // maintenance pass, so both load here instead of on every tool call.
         const { autoCleanArtifacts } = await import("../artifacts/index.js");
+        const { autoCleanEventV3Archives } = await import("../events/v3/archive-retention.js");
         const { createAutomaticMaintenanceComposition, runAutomaticMaintenancePass } = await import("../storage/maintenance-providers.js");
         // Effect: throttled daily sweep of expired artifact workspaces (guarded,
         // managed-expired only; see autoCleanArtifacts). Best-effort like every
@@ -816,6 +920,14 @@ async function main() {
         catch (err) {
             logError(coordRoot, err, { phase: "artifact-auto-clean" });
         }
+        // Effect: apply the same daily throttle to closed V3 epochs. The newest
+        // recovery epochs remain protected by the archive retention policy.
+        try {
+            autoCleanEventV3Archives(coordRoot);
+        }
+        catch (err) {
+            logError(coordRoot, err, { phase: "event-v3-archive-auto-clean" });
+        }
         // Plan one bounded, claim-first global slice from cached pressure only.
         // Existing owner janitors above remain the only active executors until
         // each provider receives a separate production activation.
@@ -874,7 +986,7 @@ async function main() {
     // agnostic since v0.5.0.
     if (norm.event_type === "session.ended") {
         try {
-            cleanupSessionEnd(coordRoot, owner.instance_id, data.reason ?? "unknown");
+            cleanupSessionEnd(coordRoot, owner.instance_id);
         }
         catch (err) {
             logError(coordRoot, err, { phase: "session-end-cleanup" });
@@ -900,40 +1012,17 @@ async function main() {
     if (norm.event_type === "agent.started") {
         try {
             const childInstanceId = data.agent_id ?? owner.instance_id;
-            const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-            if (existsSync(agentCoordBin)) {
-                spawnSync(agentCoordBin, ["project"], {
-                    encoding: "utf8",
-                    timeout: 3000,
-                    env: childEnv(coordRoot),
-                });
-                spawnSync(agentCoordBin, [
-                    "log",
-                    `SUBAGENT_START  agent_type=${data.agent_type ?? "unknown"} agent_id=${childInstanceId.slice(0, 8)} platform=${adapterPlatform(adapter)}`,
-                    "--instance",
-                    childInstanceId,
-                ], { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) });
-            }
-            emitSubagentStartContext(coordRoot, childInstanceId, sessionId, data, adapter);
+            await emitSubagentStartContext(coordRoot, childInstanceId, sessionId, data, adapter);
         }
         catch (err) {
-            logError(coordRoot, err, { phase: "subagent-start-project" });
+            logError(coordRoot, err, { phase: "subagent-start-context" });
         }
     }
     // Phase 8: SubagentStop: delete subagent heartbeat + log.
     if (norm.event_type === "agent.completed") {
         try {
             const childInstanceId = payload?.subagent_id ?? payload?.agent_id ?? owner.instance_id;
-            cleanupSessionEnd(coordRoot, childInstanceId, data.reason ?? "unknown");
-            const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-            if (existsSync(agentCoordBin)) {
-                spawnSync(agentCoordBin, [
-                    "log",
-                    `SUBAGENT_STOP   agent_id=${childInstanceId.slice(0, 8)} platform=${adapterPlatform(adapter)}`,
-                    "--instance",
-                    childInstanceId,
-                ], { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) });
-            }
+            cleanupSessionEnd(coordRoot, childInstanceId);
             const { reconcileSessionFinalizationV3 } = await import("../agents/session-finalizer-v3.js");
             reconcileSessionFinalizationV3(coordRoot, { archive_observations: [] });
         }
@@ -1147,6 +1236,11 @@ async function main() {
         try {
             const name = sessionNameDisplayPending(readLiveCoordinationRow(coordRoot, owner.instance_id));
             if (name && toolResponseMintedSessionName(payload?.tool_response, name)) {
+                // Record the title before asking for it. The suggestion can still
+                // change afterwards (an assigned-name rewrite, a lifecycle re-mint, a
+                // rebuilt cache), and the agent must not be stranded for displaying
+                // exactly what it was handed.
+                stampSessionNameRequested(coordRoot, owner.instance_id, name);
                 const { emitContext } = await import("./adapter/output.js");
                 emitContext(adapter, "PostToolUse", sessionNameDisplayInstruction(name));
             }
@@ -1211,21 +1305,7 @@ async function enforcePendingSessionNameDisplay(coordRoot, instanceId, adapter,
     const command = extractBashCommand(payload?.tool_name, payload?.tool_input);
     if (isSessionNameRemediationCommand(command, resolveBinName(coordRoot)))
         return true;
-    const inspection = adapter === "cursor" && payload?.agent_message !== undefined
-        ? {
-            state: assistantTextStartsWithSessionNameBlock(payload.agent_message, name)
-                ? "present"
-                : "unavailable",
-        }
-        : inspectSessionNameDisplayImmediately(
-        // Codex hook payloads omit transcript_path on every event, which
-        // left this inspection permanently unavailable and the latch never
-        // stamped. Discover the rollout by session id; the scan only runs
-        // while a name is pending, so the latch closes after one success.
-        payload?.transcript_path ??
-            (adapter === "codex"
-                ? discoverCodexSessionTranscript(payload?.session_id ?? instanceId)
-                : undefined), name, assistantTextStartsWithSessionNameBlock);
+    const inspection = inspectDisplayEvidence(instanceId, adapter, payload, coordination);
     if (inspection.state === "present") {
         stampSessionNameSeen(coordRoot, instanceId, name);
         return true;
@@ -1238,10 +1318,53 @@ async function enforcePendingSessionNameDisplay(coordRoot, instanceId, adapter,
         // readable transcript can still verify it.
         return true;
     }
+    // Record the refusal. Without this the gate was the one enforcement path
+    // that left no trace, so a session reporting "the gate keeps denying me"
+    // could not be confirmed or refuted from the hook log.
+    appendDebug(coordRoot, {
+        ts: new Date().toISOString(),
+        event_name: "pre-tool-use",
+        adapter,
+        effect: "session-name-display-denied",
+        session_name_pending: name,
+        tool_name: payload?.tool_name,
+    });
     const { emitDeny } = await import("./adapter/output.js");
     emitDeny(adapter, sessionNameDisplayRecoveryInstruction(name, resolveBinName(coordRoot)));
     return false;
 }
+/**
+ * Evidence for the pending display, over every title whose display counts.
+ *
+ * Cursor supplies the current narration directly; Claude Code and Codex are
+ * resolved from their JSONL transcripts. Absent is the only state that denies,
+ * so a title is refused only when a readable surface positively shows some
+ * other opening text for every accepted title.
+ */
+function inspectDisplayEvidence(instanceId, adapter, payload, coordination) {
+    if (adapter === "cursor" && payload?.agent_message !== undefined) {
+        return matchSessionNameDisplay(coordination, payload.agent_message)
+            ? { state: "present" }
+            : { state: "unavailable", reason: "transcript_not_ready" };
+    }
+    // Codex hook payloads omit transcript_path on every event, which left this
+    // inspection permanently unavailable and the latch never stamped. Discover
+    // the rollout by session id; the scan only runs while a name is pending, so
+    // the latch closes after one success.
+    const transcriptPath = payload?.transcript_path ??
+        (adapter === "codex"
+            ? discoverCodexSessionTranscript(payload?.session_id ?? instanceId)
+            : undefined);
+    let verdict = { state: "absent" };
+    for (const candidate of sessionNameDisplayAcceptedNames(coordination)) {
+        const inspection = inspectSessionNameDisplayImmediately(transcriptPath, candidate, assistantTextStartsWithSessionNameBlock);
+        if (inspection.state === "present")
+            return inspection;
+        if (inspection.state === "unavailable")
+            verdict = inspection;
+    }
+    return verdict;
+}
 function generationBoundHeartbeat(heartbeat, generationId) {
     return generationId && heartbeat?.v3_generation_id === generationId ? heartbeat : null;
 }
@@ -1273,40 +1396,19 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
     }
     if (targets.length === 0)
         return true;
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-    if (!existsSync(agentCoordBin)) {
-        if (agentsRequireGitFinalization(coordRoot)) {
-            const { emitDeny } = await import("./adapter/output.js");
-            emitDeny(adapter, "Harnery denied the write before mutation because the claim coordinator is unavailable; repair the project's Harnery installation and retry.");
-            return false;
-        }
-        return true;
-    }
+    const { evaluateClaim } = await import("../agents/rules/claim-conflict.js");
     // For apply_patch (multi-file), collect siblings so the deny reason names
     // them. For single-file tools the array has one entry.
     for (const target of targets) {
-        const verdictReq = JSON.stringify({
-            rule: "claim",
-            instance_id: instanceId,
-            session_id: sessionId,
-            path: target.path,
-        });
-        const result = spawnSync(agentCoordBin, ["verdict"], {
-            input: verdictReq,
-            encoding: "utf8",
-            timeout: 3000,
-            env: childEnv(coordRoot),
-        });
-        if (result.status !== 0 || !result.stdout)
-            continue;
-        let parsed = {};
         try {
-            parsed = JSON.parse(result.stdout.trim());
-        }
-        catch {
-            continue;
-        }
-        if (parsed.allow === false) {
+            const parsed = evaluateClaim(coordRoot, {
+                rule: "claim",
+                instance_id: instanceId,
+                session_id: sessionId,
+                path: target.path,
+            });
+            if (parsed.allow !== false)
+                continue;
             let reason = parsed.reason ?? `Path ${target.path} is currently being edited by another agent.`;
             if (targets.length > 1) {
                 const siblings = targets
@@ -1322,6 +1424,7 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, adapte
             emitDeny(adapter, reason);
             return false;
         }
+        catch { }
     }
     return true;
 }
@@ -1520,16 +1623,23 @@ function releaseClaimOnFailure(coordRoot, instanceId, data, rawPayload) {
     const row = readLiveCoordinationRow(coordRoot, instanceId);
     if (!row?.files_touched?.includes(canonical))
         return;
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-    if (!existsSync(agentCoordBin))
-        return;
-    spawnSync(agentCoordBin, ["release-claim", instanceId, canonical], {
-        encoding: "utf8",
-        timeout: 2000,
-        env: childEnv(coordRoot),
-    });
+    const before = readHeartbeat(coordRoot, instanceId);
+    try {
+        recordLiveClaimChangeV3({
+            coordRoot,
+            owner: instanceId,
+            nativeSessionId: before?.session_id ?? instanceId,
+            adapter: adapterFromPlatform(before?.platform),
+            operation: "released",
+            path: canonical,
+            access: "write",
+        });
+    }
+    catch {
+        /* best-effort release must not break adapter flow */
+    }
 }
-function cleanupSessionEnd(coordRoot, instanceId, reason) {
+function cleanupSessionEnd(coordRoot, instanceId) {
     // Sweep pid-map entries pointing to this instance
     const pidmapDir = join(coordRoot, ".harnery", "pid-map");
     if (existsSync(pidmapDir)) {
@@ -1553,44 +1663,20 @@ function cleanupSessionEnd(coordRoot, instanceId, reason) {
             /* swallow */
         }
     }
-    // Activity log
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-    if (existsSync(agentCoordBin)) {
-        spawnSync(agentCoordBin, ["log", `SESSION_END     reason=${reason}`, "--instance", instanceId], { encoding: "utf8", timeout: 2000 });
-    }
 }
 async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionId, adapter, workspaceCwd, recoveryBriefing = "") {
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-    let additionalContext = "";
-    if (existsSync(agentCoordBin)) {
-        const args = ["prompt-context", "--instance", instanceId, "--session", sessionId];
-        // Every human-facing adapter gets the first-session naming reminder from
-        // the shared hook path. Cursor + Codex additionally get ongoing set-task
-        // staleness nudges; Claude Code enforces those via its Stop transcript.
-        // Codex also gets the optional project-owned prompt reminder. Claude Code
-        // already has native output-style reminders, so duplicating it would add
-        // noise. Cursor's current beforeSubmitPrompt output can allow or block but
-        // cannot inject model context; an Always Apply rule is its durable carrier.
-        // Only the boolean route travels through argv, never the host's text.
-        if (adapter === "codex")
-            args.push("--host-prompt-reminder");
-        // Codex gets a fresh status-footer reminder on every prompt. Its Stop hook
-        // stays observe-only, so missing the footer never replaces the answer.
-        // Claude Code gets a fresh per-turn ritual reminder: satisfying the
-        // contract up front is far cheaper than the bounce-and-retry the Stop hook
-        // otherwise forces. Cursor's beforeSubmitPrompt cannot inject context, so
-        // its Stop follow-up remains the supported enforcement channel.
-        args.push("--session-name-nudge");
-        if (adapter === "cursor" || adapter === "codex")
-            args.push("--task-nudge");
-        if (adapter === "codex")
-            args.push("--status-footer-nudge");
-        if (adapter === "claude-code")
-            args.push("--turn-ritual-nudge", adapter);
-        const result = spawnSync(agentCoordBin, args, { encoding: "utf8", timeout: 3000 });
-        if (result.status === 0 && result.stdout)
-            additionalContext = result.stdout.trim();
-    }
+    const { renderPromptContext } = await import("../agents/render/prompt-context.js");
+    let additionalContext = renderPromptContext({
+        coordRoot,
+        instanceId,
+        sessionId,
+        adapter,
+        sessionNameNudge: true,
+        taskNudge: adapter === "cursor" || adapter === "codex",
+        hostPromptReminder: adapter === "codex",
+        statusFooterNudge: adapter === "codex",
+        turnRitualNudge: adapter === "claude-code" ? adapter : undefined,
+    }).trim();
     if (adapter === "codex") {
         const fileLinkContext = renderCodexWslFileLinkContext(coordRoot, workspaceCwd);
         if (fileLinkContext) {
@@ -1606,8 +1692,8 @@ async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionI
     emitContext(adapter, "UserPromptSubmit", additionalContext);
     return true;
 }
-function emitSubagentStartContext(coordRoot, instanceId, sessionId, data, adapter) {
-    // Look up the subagent's assigned name (just-written by agent-coord assignName
+async function emitSubagentStartContext(coordRoot, instanceId, sessionId, data, adapter) {
+    // Look up the subagent's assigned name (just-written by the in-process name
     // in session.started data) + the parent's short id for the "you are a subagent
     // of X" framing.
     const subagentName = data.name ?? "";
@@ -1619,69 +1705,55 @@ function emitSubagentStartContext(coordRoot, instanceId, sessionId, data, adapte
     // Render peer table inline since the subagent might want to know who else
     // is around. Reuse prompt-context (which dedups against the per-owner hash);
     // first call will always emit.
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
     let combined = message;
-    if (existsSync(agentCoordBin)) {
-        const result = spawnSync(agentCoordBin, ["prompt-context", "--instance", instanceId, "--session", sessionId, "--name", subagentName], { encoding: "utf8", timeout: 3000 });
-        const ctx = (result.stdout ?? "").trim();
-        if (ctx)
-            combined = `${message}\n\n${ctx}`;
-    }
+    const { renderPromptContext } = await import("../agents/render/prompt-context.js");
+    const context = renderPromptContext({
+        coordRoot,
+        instanceId,
+        sessionId,
+        agentName: subagentName,
+    }).trim();
+    if (context)
+        combined = `${message}\n\n${context}`;
     // Use SubagentStart event-name in CC's hookSpecificOutput shape; cursor's
     // flat `additional_context` works the same way.
-    void import("./adapter/output.js").then(({ emitContext }) => {
-        emitContext(adapter, "SubagentStart", combined);
-    });
+    const { emitContext } = await import("./adapter/output.js");
+    emitContext(adapter, "SubagentStart", combined);
 }
 function adapterPlatform(adapter) {
     if (adapter === "claude-code")
         return "claude-code";
     return adapter;
 }
+function adapterFromPlatform(platform) {
+    if (platform === "cursor")
+        return "cursor";
+    if (platform === "codex")
+        return "codex";
+    return "claude-code";
+}
 async function emitSessionStartSystemMessage(coordRoot, instanceId, sessionId, emittedData, adapter, recoveryBriefing = "") {
-    const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
     const workflowChild = coordEnv("WORKFLOW_CHILD") === "1";
     let additionalContext = "";
-    if (existsSync(agentCoordBin)) {
-        // Sync-project so the heartbeat exists for downstream readers (peer table,
-        // wiring check, council invites).
-        spawnSync(agentCoordBin, ["project"], { encoding: "utf8", timeout: 3000 });
-        // Opportunistic reconciliation makes normal session starts a failsafe for
-        // archive, idle, cascade, and host lifecycle observations.
-        spawnSync(agentCoordBin, ["reconcile-finalization"], {
-            encoding: "utf8",
-            timeout: 5000,
-            env: { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: coordRoot },
-        });
-        // SESSION_START activity log line, fired across all adapters.
-        const model = emittedData.model ?? "unknown";
-        const source = emittedData.source ?? "startup";
-        const platform = adapterPlatform(adapter);
-        spawnSync(agentCoordBin, [
-            "log",
-            `SESSION_START   model=${model} source=${source} platform=${platform}`,
-            "--instance",
+    // Opportunistic reconciliation makes normal session starts a failsafe for
+    // archive, idle, cascade, and host lifecycle observations. It also runs the
+    // stale cache sweep through the shared ADR 0077 composition.
+    const { reconcileCoordinationV3 } = await import("../agents/reconcile-coordination-v3.js");
+    reconcileCoordinationV3(coordRoot);
+    // Workflow children retain lifecycle/event capture but do not receive
+    // operator-facing peer, council, or init-remediation context. Injecting
+    // that context can make a bounded child follow housekeeping instructions
+    // instead of its assigned prompt.
+    if (!workflowChild) {
+        const agentName = emittedData.name ?? "";
+        const { renderSessionContext } = await import("../agents/render/session-context.js");
+        additionalContext = renderSessionContext({
+            coordRoot,
             instanceId,
-        ], { encoding: "utf8", timeout: 2000 });
-        // Workflow children retain lifecycle/event capture but do not receive
-        // operator-facing peer, council, or init-remediation context. Injecting
-        // that context can make a bounded child follow housekeeping instructions
-        // instead of its assigned prompt.
-        if (!workflowChild) {
-            const agentName = emittedData.name ?? "";
-            const args = ["session-context", "--instance", instanceId, "--session", sessionId];
-            if (agentName)
-                args.push("--name", agentName);
-            // The "You are agent-X." prefix in session-context renders unqualified by
-            // default (claude-code-style). For cursor/codex the bash dispatchers add
-            // a "(Cursor)" / "(Codex)" suffix; pass it through as --platform-label.
-            if (adapter !== "claude-code") {
-                args.push("--platform-label", platform === "cursor" ? "Cursor" : "Codex");
-            }
-            const result = spawnSync(agentCoordBin, args, { encoding: "utf8", timeout: 3000 });
-            if (result.status === 0 && result.stdout)
-                additionalContext = result.stdout.trim();
-        }
+            sessionId,
+            agentName: agentName || undefined,
+            platformLabel: adapter === "claude-code" ? undefined : adapter === "cursor" ? "Cursor" : "Codex",
+        }).trim();
     }
     // Effect (claude-code): merge the journal recovery cue into the session-start
     // context. Was a standalone additionalContext emission from the previous
@@ -1722,6 +1794,11 @@ function completeRecoveryInjection(coordRoot, instanceId, sessionId, recovery) {
 }
 main()
     .then(async (code) => {
+    writeHookHealthCompletion(hookHealthState, {
+        finished_at_ms: performance.now(),
+        finished_rss_bytes: process.memoryUsage().rss,
+        pid: process.pid,
+    });
     await closeProcessLoggers();
     process.exit(code);
 })
@@ -1729,6 +1806,13 @@ main()
     logError(resolveCoordRoot(process.cwd()), err, {
         argv: process.argv.slice(2),
         pid: process.pid,
+        phase: "top-level",
+    });
+    writeHookHealthCompletion(hookHealthState, {
+        finished_at_ms: performance.now(),
+        finished_rss_bytes: process.memoryUsage().rss,
+        pid: process.pid,
+        faulted: true,
     });
     await closeProcessLoggers();
     process.exit(0);