harnery 0.36.0 → 0.38.0

package/dist/lib/durable-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-job.d.ts","sourceRoot":"","sources":["../../src/lib/durable-job.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C;iDACiD;AACjD,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAEtD,eAAO,MAAM,6BAA6B,aAAa,CAAC;AACxD,eAAO,MAAM,2BAA2B,gBAAgB,CAAC;AACzD,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAIlD,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAE/E,qEAAqE;AACrE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,MAAM,CAAC;AAI/D,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,uBAAuB,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACpC,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgBD,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,uDAAuD;AACvD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhE;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAQD,2CAA2C;AAC3C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAKnF;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAK7E;AAMD,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAyBzE;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAkCrE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,wBAAwB,CAyF/F;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,mBAAmB,EAAE,CAmCvF;AAED;kEACkE;AAClE,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAK5D;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAO/C"}

package/dist/lib/durable-job.js

@@ -0,0 +1,296 @@
+// Durable job records: a small on-disk representation of "a job that outlives
+// the client that launched it". A supervisor process owns the record; a client
+// only reads it. A bridge drop, a closed terminal, or a killed client
+// therefore interrupts the *view* of the job, never the job itself.
+//
+// Layout, under a caller-supplied base directory:
+//
+//   <base>/jobs/<job_id>/job.json      immutable description (argv, cwd, resource)
+//   <base>/jobs/<job_id>/status.json   mutable state, rewritten atomically
+//   <base>/jobs/<job_id>/job.log       merged child stdout + stderr
+//
+// Classification is fail-closed, mirroring qa-status: liveness is proven by the
+// PID, never assumed from the status document. A non-terminal state whose PID
+// is dead classifies as "dead", never as "running".
+//
+// Toolkit tier: this module must not import src/core (layering check).
+import { randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
+import { join, resolve } from "node:path";
+export const DURABLE_JOB_SCHEMA_VERSION = 1;
+/** How often the supervisor rewrites status.json while a job runs. */
+export const DURABLE_JOB_HEARTBEAT_MS = 15_000;
+/** A running job whose heartbeat is older than this earns a staleness warning,
+ * but stays "running" while its PID is alive. */
+export const DURABLE_JOB_HEARTBEAT_STALE_MS = 120_000;
+export const DURABLE_JOB_DOCUMENT_FILENAME = "job.json";
+export const DURABLE_JOB_STATUS_FILENAME = "status.json";
+export const DURABLE_JOB_LOG_FILENAME = "job.log";
+const JOBS_DIRNAME = "jobs";
+const WRITTEN_STATES = new Set(["launching", "queued", "running", "completed"]);
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Default PID liveness probe. EPERM counts as alive; only ESRCH is dead. */
+function defaultPidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code !== "ESRCH";
+    }
+}
+/** Directory holding every job record under a base directory. */
+export function jobsRoot(base) {
+    return join(resolve(base), JOBS_DIRNAME);
+}
+/** Directory of one job record. Does not create it. */
+export function jobDirFor(base, jobId) {
+    return join(jobsRoot(base), jobId);
+}
+/** Create (idempotently) the directory for one job and return its path. */
+export function createJobDir(base, jobId) {
+    const dir = jobDirFor(base, jobId);
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function jobLogPath(jobDir) {
+    return join(resolve(jobDir), DURABLE_JOB_LOG_FILENAME);
+}
+function writeAtomic(path, body) {
+    const tmp = `${path}.${randomUUID().slice(0, 8)}.tmp`;
+    writeFileSync(tmp, body);
+    renameSync(tmp, path);
+}
+/** Write the immutable job description. */
+export function writeJobDocument(jobDir, document) {
+    writeAtomic(join(resolve(jobDir), DURABLE_JOB_DOCUMENT_FILENAME), `${JSON.stringify(document, null, 2)}\n`);
+}
+/** Replace the status document atomically, so a reader never sees a torn file. */
+export function writeJobStatus(jobDir, status) {
+    writeAtomic(join(resolve(jobDir), DURABLE_JOB_STATUS_FILENAME), `${JSON.stringify(status, null, 2)}\n`);
+}
+function readJson(path) {
+    return JSON.parse(readFileSync(path, "utf8"));
+}
+/** Read the job description, or null when it is missing or unusable. */
+export function readJobDocument(jobDir) {
+    const path = join(resolve(jobDir), DURABLE_JOB_DOCUMENT_FILENAME);
+    let parsed;
+    try {
+        parsed = readJson(path);
+    }
+    catch {
+        return null;
+    }
+    if (!isRecord(parsed))
+        return null;
+    if (typeof parsed.job_id !== "string")
+        return null;
+    return {
+        schema_version: typeof parsed.schema_version === "number"
+            ? parsed.schema_version
+            : DURABLE_JOB_SCHEMA_VERSION,
+        job_id: parsed.job_id,
+        resource: typeof parsed.resource === "string" ? parsed.resource : "",
+        capacity: typeof parsed.capacity === "number" ? parsed.capacity : 1,
+        label: typeof parsed.label === "string" ? parsed.label : "",
+        argv: Array.isArray(parsed.argv)
+            ? parsed.argv.filter((a) => typeof a === "string")
+            : [],
+        cwd: typeof parsed.cwd === "string" ? parsed.cwd : "",
+        created_at: typeof parsed.created_at === "string" ? parsed.created_at : "",
+    };
+}
+/** Read the status document, or null when it is missing or unusable. */
+export function readJobStatus(jobDir) {
+    const path = join(resolve(jobDir), DURABLE_JOB_STATUS_FILENAME);
+    let parsed;
+    try {
+        parsed = readJson(path);
+    }
+    catch {
+        return null;
+    }
+    if (!isRecord(parsed))
+        return null;
+    if (typeof parsed.job_id !== "string")
+        return null;
+    if (typeof parsed.state !== "string" || !WRITTEN_STATES.has(parsed.state))
+        return null;
+    const queue = parsed.queue;
+    return {
+        schema_version: typeof parsed.schema_version === "number"
+            ? parsed.schema_version
+            : DURABLE_JOB_SCHEMA_VERSION,
+        job_id: parsed.job_id,
+        pid: typeof parsed.pid === "number" ? parsed.pid : 0,
+        state: parsed.state,
+        started_at: typeof parsed.started_at === "string" ? parsed.started_at : "",
+        updated_at: typeof parsed.updated_at === "string" ? parsed.updated_at : "",
+        ...(isRecord(queue) &&
+            typeof queue.resource === "string" &&
+            typeof queue.waiting_since === "string"
+            ? { queue: { resource: queue.resource, waiting_since: queue.waiting_since } }
+            : {}),
+        ...(typeof parsed.exit_code === "number" || parsed.exit_code === null
+            ? { exit_code: parsed.exit_code }
+            : {}),
+        ...(typeof parsed.signal === "string" || parsed.signal === null
+            ? { signal: parsed.signal }
+            : {}),
+    };
+}
+/**
+ * Classify one job directory, fail-closed. "completed" is terminal and carries
+ * the wrapped command's exit code. Any other written state is trusted only
+ * while the supervisor PID is alive; otherwise the job is "dead" — the record
+ * outlived the process that owned it.
+ */
+export function classifyJob(jobDir, deps = {}) {
+    const isAlive = deps.pidAlive ?? defaultPidAlive;
+    const nowMs = deps.now ? deps.now() : Date.now();
+    const abs = resolve(jobDir);
+    if (!existsSync(abs))
+        return { ok: false, error: `no such job directory: ${abs}` };
+    const statusPath = join(abs, DURABLE_JOB_STATUS_FILENAME);
+    if (!existsSync(statusPath)) {
+        return {
+            ok: false,
+            error: `${abs} carries no ${DURABLE_JOB_STATUS_FILENAME}: not a job directory`,
+        };
+    }
+    const status = readJobStatus(abs);
+    if (!status) {
+        return { ok: false, error: `${statusPath} is not a readable job status document` };
+    }
+    const document = readJobDocument(abs);
+    let heartbeatAgeMs = null;
+    const updatedMs = Date.parse(status.updated_at);
+    if (!Number.isNaN(updatedMs))
+        heartbeatAgeMs = Math.max(0, nowMs - updatedMs);
+    const base = {
+        job_id: status.job_id,
+        pid: status.pid > 0 ? status.pid : null,
+        resource: document?.resource ?? null,
+        label: document?.label ?? null,
+        argv: document?.argv ?? null,
+        created_at: document?.created_at ?? null,
+        started_at: status.started_at || null,
+        updated_at: status.updated_at || null,
+        heartbeat_age_ms: heartbeatAgeMs,
+        job_dir: abs,
+        log_path: jobLogPath(abs),
+    };
+    if (status.state === "completed") {
+        return {
+            ok: true,
+            report: {
+                ...base,
+                state: "completed",
+                terminal: true,
+                exit_code: status.exit_code ?? null,
+                signal: status.signal ?? null,
+                warnings: [],
+            },
+        };
+    }
+    if (!(status.pid > 0 && isAlive(status.pid))) {
+        return {
+            ok: true,
+            report: {
+                ...base,
+                state: "dead",
+                terminal: false,
+                exit_code: null,
+                signal: null,
+                ...(status.queue ? { queue: status.queue } : {}),
+                warnings: [],
+            },
+        };
+    }
+    const warnings = [];
+    if (status.state === "running" &&
+        heartbeatAgeMs !== null &&
+        heartbeatAgeMs > DURABLE_JOB_HEARTBEAT_STALE_MS) {
+        warnings.push(`heartbeat stale: last update ${Math.round(heartbeatAgeMs / 1000)}s ago ` +
+            `(threshold ${DURABLE_JOB_HEARTBEAT_STALE_MS / 1000}s), but pid ${status.pid} is alive`);
+    }
+    return {
+        ok: true,
+        report: {
+            ...base,
+            state: status.state,
+            terminal: false,
+            exit_code: null,
+            signal: null,
+            ...(status.queue ? { queue: status.queue } : {}),
+            warnings,
+        },
+    };
+}
+/**
+ * Every job record under a base directory, newest first. Ordering keys on the
+ * description's created_at, falling back to the status document's started_at,
+ * then to the directory name, so a record missing its description still lists.
+ */
+export function listJobs(base, deps = {}) {
+    const root = jobsRoot(base);
+    let names;
+    try {
+        names = readdirSync(root, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => entry.name);
+    }
+    catch {
+        return [];
+    }
+    const entries = [];
+    for (const name of names) {
+        const dir = join(root, name);
+        const document = readJobDocument(dir);
+        const classified = classifyJob(dir, deps);
+        const createdAt = document?.created_at || (classified.ok ? classified.report.started_at : null) || null;
+        const parsed = createdAt !== null ? Date.parse(createdAt) : Number.NaN;
+        entries.push({
+            entry: {
+                job_id: document?.job_id ?? name,
+                job_dir: dir,
+                created_at: createdAt,
+                document,
+                report: classified.ok ? classified.report : null,
+                ...(classified.ok ? {} : { error: classified.error }),
+            },
+            sortKey: Number.isNaN(parsed) ? 0 : parsed,
+        });
+    }
+    entries.sort((a, b) => {
+        if (b.sortKey !== a.sortKey)
+            return b.sortKey - a.sortKey;
+        return b.entry.job_id.localeCompare(a.entry.job_id);
+    });
+    return entries.map((item) => item.entry);
+}
+/** Describe a job's outcome as a process exit code: the wrapped command's own
+ * code, 1 when it died on a signal, 4 when the record is dead. */
+export function jobExitCode(report) {
+    if (report.state === "dead")
+        return 4;
+    if (!report.terminal)
+        return 5;
+    if (report.signal !== null)
+        return 1;
+    return report.exit_code ?? 1;
+}
+/** Format a duration the way the status commands do. */
+export function formatJobAge(ms) {
+    const totalSeconds = Math.max(0, Math.round(ms / 1000));
+    if (totalSeconds < 60)
+        return `${totalSeconds}s`;
+    const minutes = Math.floor(totalSeconds / 60);
+    if (minutes < 60)
+        return `${minutes}m ${totalSeconds % 60}s`;
+    const hours = Math.floor(minutes / 60);
+    return `${hours}h ${minutes % 60}m`;
+}

package/dist/lib/http/client.d.ts

@@ -1,4 +1,4 @@
-import type { CookieJar } from "../cookies/index.js";
+import { type CookieJar, type ExtraCookies } from "../cookies/index.js";
 /**
  * Simple cookie-aware HTTP client.
  *
@@ -36,6 +36,12 @@ export interface FetchOptions<TResponseType extends FetchResponseType = "text">
      * only land when the key isn't already set.
      */
     extraHeaders?: (url: string) => Record<string, string>;
+    /**
+     * Optional callback that returns extra cookies to persist into `jar`
+     * before the Cookie header is built. Ignored when no jar is passed
+     * (`--no-cookies`). Must stay synchronous.
+     */
+    extraCookies?: ExtraCookies;
     /** Response body representation. Default `text`; use `bytes` for lossless file output. */
     responseType?: TResponseType;
 }

package/dist/lib/http/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/http/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE7D;;;;;;;;;GASG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM;IAC5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,0FAA0F;IAC1F,YAAY,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,KAAK,SAAS,CAAC,aAAa,SAAS,iBAAiB,IAAI,aAAa,SAAS,OAAO,GACnF,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,MAAM;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC;IACZ,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM,EACjF,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAAY,CAAC,aAAa,CAAM,GACrC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CA8EhD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/http/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;GASG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM;IAC5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0FAA0F;IAC1F,YAAY,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,KAAK,SAAS,CAAC,aAAa,SAAS,iBAAiB,IAAI,aAAa,SAAS,OAAO,GACnF,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,MAAM;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC;IACZ,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM,EACjF,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAAY,CAAC,aAAa,CAAM,GACrC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CA+EhD"}

package/dist/lib/http/client.js

@@ -1,3 +1,4 @@
+import { applyExtraCookies, } from "../cookies/index.js";
 /**
  * Fetch a URL with optional cookie-jar attach + persist.
  *
@@ -9,6 +10,7 @@
 export async function fetchWithJar(url, opts = {}) {
     const headers = { ...(opts.headers ?? {}) };
     if (opts.jar) {
+        applyExtraCookies(url, opts.jar, opts.extraCookies);
         const cookieHeader = opts.jar.header(url);
         if (cookieHeader && !headers.Cookie && !headers.cookie) {
             headers.Cookie = cookieHeader;

package/dist/lib/instructions/apply.d.ts

@@ -7,13 +7,15 @@
  * writes, and deletes so init/deinit stay thin and this stays integration-
  * testable against a temp dir.
  *
- * Two files, one dir:
+ * Three files, one dir:
  *   - `AGENTS.md` — the always-on orientation block (a managed region; the
  *     consumer owns the rest of the file).
  *   - `CLAUDE.md` — claude-code only; Claude Code reads CLAUDE.md, not AGENTS.md,
  *     so a fresh consumer gets a CLAUDE.md whose managed region imports
  *     `@AGENTS.md`. A CLAUDE.md that already imports AGENTS.md or already carries
  *     the block (a host that generates CLAUDE.md from AGENTS.md) is left alone.
+ *   - `.cursor/rules/harnery-turn-ritual.mdc` — cursor only; an Always Apply
+ *     rule that makes the Stop-enforced status footer visible in reply text.
  *   - `<adapter-skill-dir>/<skill>/SKILL.md` — fully-owned files, honoring
  *     `skills.exclude` in `.harnery/config.jsonc`. Claude Code uses
  *     `.claude/skills/`; Cursor and Codex use `.agents/skills/`.

package/dist/lib/instructions/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAsDH,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAYlE;AAmBD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CA+GnF;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAkFrF;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC,WAAW,CAkDb"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAyFH,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAYlE;AAmBD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAoInF;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CA8FrF;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC,WAAW,CA2Db"}

package/dist/lib/instructions/apply.js

@@ -7,25 +7,28 @@
  * writes, and deletes so init/deinit stay thin and this stays integration-
  * testable against a temp dir.
  *
- * Two files, one dir:
+ * Three files, one dir:
  *   - `AGENTS.md` — the always-on orientation block (a managed region; the
  *     consumer owns the rest of the file).
  *   - `CLAUDE.md` — claude-code only; Claude Code reads CLAUDE.md, not AGENTS.md,
  *     so a fresh consumer gets a CLAUDE.md whose managed region imports
  *     `@AGENTS.md`. A CLAUDE.md that already imports AGENTS.md or already carries
  *     the block (a host that generates CLAUDE.md from AGENTS.md) is left alone.
+ *   - `.cursor/rules/harnery-turn-ritual.mdc` — cursor only; an Always Apply
+ *     rule that makes the Stop-enforced status footer visible in reply text.
  *   - `<adapter-skill-dir>/<skill>/SKILL.md` — fully-owned files, honoring
  *     `skills.exclude` in `.harnery/config.jsonc`. Claude Code uses
  *     `.claude/skills/`; Cursor and Codex use `.agents/skills/`.
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmdirSync, rmSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
-import { stripJsonComments } from "../../core/config.js";
+import { endOfTurnStatusCommand, stripJsonComments } from "../../core/config.js";
 import { readHostAddendum } from "./host-addendum.js";
-import { checkOwnedSkill, checkRegion, isOwnedFile, removeRegion, spliceRegion, } from "./splice.js";
+import { checkOwnedSkill, checkRegion, isOwnedFile, removeRegion, shortHash, spliceRegion, } from "./splice.js";
 import { HOST_ADDENDUM_REGION, IMPORT_REGION, INSTRUCTIONS_REGION, renderInstructionsBlock, SKILLS, } from "./templates.js";
 const AGENTS_FILE = "AGENTS.md";
 const CLAUDE_FILE = "CLAUDE.md";
+const CURSOR_RULE_FILE = join(".cursor", "rules", "harnery-turn-ritual.mdc");
 const ADAPTER_SKILLS_DIR = {
     "claude-code": join(".claude", "skills"),
     cursor: join(".agents", "skills"),
@@ -43,6 +46,36 @@ function skillBody(render, binName) {
     const content = render(binName);
     return content.slice(content.indexOf("-->") + 3).trim();
 }
+function cursorRuleBody(projectRoot, binName) {
+    const statusCommand = endOfTurnStatusCommand(projectRoot);
+    return [
+        "# Harnery turn ritual",
+        "",
+        "On every turn that uses tools:",
+        "",
+        `1. Run \`${binName} agents set-task "<short focus>"\` during the turn, even when the focus is unchanged.`,
+        `2. Make \`${statusCommand}\` your final tool call.`,
+        "3. Append that command's stdout verbatim in a fenced code block at the bottom of the same substantive reply.",
+        "",
+        "Cursor Stop enforces all three signals. A missing signal produces one follow-up that names every repair needed.",
+    ].join("\n");
+}
+function cursorRuleContent(projectRoot, binName) {
+    const body = cursorRuleBody(projectRoot, binName);
+    const marker = `<!-- harnery:generated cursor-turn-ritual v=${shortHash(body)}; machine-owned; ` +
+        `regenerated by \`${binName} init\`, removed by \`${binName} deinit\`. ` +
+        "Edit the harnery template, not this file. -->";
+    return [
+        "---",
+        "description: Harnery end-of-turn coordination ritual",
+        "alwaysApply: true",
+        "---",
+        marker,
+        "",
+        body,
+        "",
+    ].join("\n");
+}
 /** Read `skills.exclude` from `.harnery/config.jsonc` (absent/unparseable → none). */
 export function readSkillsExclude(projectRoot) {
     const p = join(projectRoot, ".harnery", "config.jsonc");
@@ -157,6 +190,26 @@ export function applyInstructions(projectRoot, opts) {
             }
         }
     }
+    // ── Cursor Always Apply rule ────────────────────────────────────────────
+    if (opts.adapter === "cursor") {
+        const rulePath = join(projectRoot, CURSOR_RULE_FILE);
+        const content = cursorRuleContent(projectRoot, opts.binName);
+        const before = existsSync(rulePath) ? readFileSync(rulePath, "utf8") : null;
+        if (before === content) {
+            actions.push(`· ${CURSOR_RULE_FILE} already current`);
+        }
+        else if (before !== null && !isOwnedFile(before)) {
+            warnings.push(`left ${CURSOR_RULE_FILE} (hand-edited; no harnery ownership marker)`);
+        }
+        else {
+            if (!opts.dryRun) {
+                mkdirSync(dirname(rulePath), { recursive: true });
+                writeFileSync(rulePath, content);
+            }
+            const fresh = before === null;
+            actions.push(`${fresh ? "+" : "~"} ${verbed(fresh ? "write" : "update", fresh ? "wrote" : "updated")} ${CURSOR_RULE_FILE}`);
+        }
+    }
     // ── shipped skills ───────────────────────────────────────────────────────
     if (skillsDir) {
         const exclude = readSkillsExclude(projectRoot);
@@ -239,6 +292,19 @@ export function removeInstructions(projectRoot, opts) {
             }
         }
     }
+    if (opts.adapter === "cursor") {
+        const rulePath = join(projectRoot, CURSOR_RULE_FILE);
+        if (existsSync(rulePath)) {
+            if (!isOwnedFile(readFileSync(rulePath, "utf8"))) {
+                warnings.push(`left ${CURSOR_RULE_FILE} (hand-edited; no harnery ownership marker)`);
+            }
+            else {
+                if (!opts.dryRun)
+                    rmSync(rulePath);
+                actions.push(`+ ${opts.dryRun ? "would delete" : "deleted"} ${CURSOR_RULE_FILE}`);
+            }
+        }
+    }
     // ── shipped skills ───────────────────────────────────────────────────────
     if (skillsDir) {
         for (const skill of SKILLS) {
@@ -305,6 +371,11 @@ export function checkInstructions(projectRoot, opts) {
                 note(`skill ${skill.id}`, checkOwnedSkill(c, skillBody(skill.render, opts.binName)));
             }
         }
+        if (opts.adapter === "cursor") {
+            const rulePath = join(projectRoot, CURSOR_RULE_FILE);
+            const content = existsSync(rulePath) ? readFileSync(rulePath, "utf8") : "";
+            note(`${CURSOR_RULE_FILE} rule`, checkOwnedSkill(content, cursorRuleBody(projectRoot, opts.binName)));
+        }
     }
     catch (err) {
         errored = true;

package/dist/lib/instructions/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,sEAAsE;AACtE,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,OAAO,CAAC;IACb,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,WAAoE,GAC3E,MAAM,CA0GR;AAID,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAmVD,eAAO,MAAM,MAAM,EAAE,aAAa,EAiDjC,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,sEAAsE;AACtE,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,OAAO,CAAC;IACb,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,WAAoE,GAC3E,MAAM,CAgHR;AAID,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAsVD,eAAO,MAAM,MAAM,EAAE,aAAa,EAiDjC,CAAC"}

package/dist/lib/instructions/templates.js

@@ -113,6 +113,12 @@ coordination ledger (\`.harnery/ledgers/v3/\`). Lead a shell command with a
 carries a reason instead of \`(no intent)\`; the [tool-intent
 guide](https://harnery.com/guides/tool-intent/) owns the details.
 
+**Messaging another agent.** \`${b} agents ping <name> "<message>"\` reaches an
+agent by name whether or not they are running: a live agent sees it on their next
+prompt, and a dormant name holds it until a session of that name next starts.
+Send it as your first and only step. Do not check who is live first, and do not
+hunt for somewhere else to leave it. Only a never-used name is refused.
+
 **Journal.** \`${b} journal add <category> "<text>"\` (category = ${journalCats})
 leaves breadcrumbs that survive context compaction;
 \`${b} journal read\` reads yours, \`${b} journal read --name <peer>\` reads a peer's.
@@ -242,10 +248,13 @@ auto-route into contribute.
 ## Create (\`create <objective>\`)
 
 The web UI is the member + steward picker; don't create from the CLI (that skips
-the steward choice). Emit the link with the objective URL-encoded:
+the steward choice). Read the dashboard base URL from the active Harnery web
+status or start output, which resolves the project's configured \`web.port\`.
+Append the URL-encoded objective to this path; never assume a port or reuse a
+dashboard URL from another project:
 
 \`\`\`
-http://localhost:4276/councils/new?objective=<encoded>
+<configured-dashboard-base-url>/councils/new?objective=<encoded>
 \`\`\`
 
 If the dev server isn't up, start it with \`${b} web up\`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnery",
-  "version": "0.36.0",
+  "version": "0.38.0",
   "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",
@@ -132,6 +132,16 @@
       "types": "./dist/core/semantic/index.d.ts",
       "import": "./dist/core/semantic/index.js"
     },
+    "./core/supervisor": {
+      "bun": "./src/core/supervisor/index.ts",
+      "types": "./dist/core/supervisor/index.d.ts",
+      "import": "./dist/core/supervisor/index.js"
+    },
+    "./core/diagnostics": {
+      "bun": "./src/core/diagnostics/index.ts",
+      "types": "./dist/core/diagnostics/index.d.ts",
+      "import": "./dist/core/diagnostics/index.js"
+    },
     "./core/governor/plans": {
       "bun": "./src/core/governor/plan-read.ts",
       "types": "./dist/core/governor/plan-read.d.ts",
@@ -142,6 +152,11 @@
       "types": "./dist/core/policy/index.d.ts",
       "import": "./dist/core/policy/index.js"
     },
+    "./lib/admission": {
+      "bun": "./src/lib/admission.ts",
+      "types": "./dist/lib/admission.d.ts",
+      "import": "./dist/lib/admission.js"
+    },
     "./lib/agent-browser": {
       "bun": "./src/lib/agent-browser/index.ts",
       "types": "./dist/lib/agent-browser/index.d.ts",
@@ -220,7 +235,7 @@
     "access": "public",
     "provenance": true
   },
-  "packageManager": "bun@1.3.3",
+  "packageManager": "bun@1.4.0",
   "scripts": {
     "build": "npm run clean && tsc -p tsconfig.build.json && node scripts/rewrite-dts-extensions.mjs",
     "clean": "rm -rf dist",
@@ -230,9 +245,11 @@
     "check:portability": "bun run scripts/check-portability.ts",
     "check:public-surface": "bun run scripts/check-public-surface.ts",
     "check:layering": "bun run scripts/check-layering.ts",
+    "probe:supervisor-budget": "bun run scripts/probe-supervisor-budget.ts",
     "lint:fix": "bun x @biomejs/biome check --write src",
     "format": "bun x @biomejs/biome format --write src",
     "test": "bun run scripts/test.mjs",
+    "test:list": "bun run scripts/test.mjs --list",
     "test:web": "cd web && bun install && bun test",
     "test:integration": "bash tests/integration/run.sh",
     "smoke": "node scripts/smoke-test.mjs",