harnery 0.36.0 → 0.38.0

package/src/core/hooks/cli.ts

@@ -23,7 +23,6 @@ import { dirname, join } from "node:path";
 import { coordEnv } from "../../lib/env.ts";
 import { buildInstructionBundle } from "../../lib/instructions/bundle.ts";
 import type { Adapter } from "../adapter.ts";
-import { coordBinPath } from "../agents/coord-bin.ts";
 import { resolveCoordRoot } from "../agents/coord-client.ts";
 import {
   type ClaimFinalizationDecision,
@@ -31,20 +30,31 @@ import {
   classifyWriteClaimFinalization,
   formatWriteClaimFinalizationDenial,
 } from "../agents/finalization.ts";
-import { restoreLiveCoordinationStateAfterEpochV3 } from "../agents/live-authority-v3.ts";
+import {
+  recordLiveClaimChangeV3,
+  restoreLiveCoordinationStateAfterEpochV3,
+} from "../agents/live-authority-v3.ts";
 import { evaluateStopHook, STOP_REMEDIATION_MARKER } from "../agents/rules/stop-hook.ts";
 import {
   assistantTextStartsWithSessionNameBlock,
   isSessionNameRemediationCommand,
+  matchSessionNameDisplay,
+  sessionNameDisplayAcceptedNames,
   sessionNameDisplayInstruction,
   sessionNameDisplayPending,
   sessionNameDisplayRecoveryInstruction,
   toolResponseMintedSessionName,
 } from "../agents/session-name-display.ts";
 import type { Heartbeat } from "../agents/state/heartbeat-reader.ts";
-import { readHeartbeat, stampSessionNameSeen } from "../agents/state/heartbeat-writer.ts";
+import {
+  readHeartbeat,
+  setAssignedNameCache,
+  stampSessionNameRequested,
+  stampSessionNameSeen,
+} from "../agents/state/heartbeat-writer.ts";
 import { readLiveCoordinationRow } from "../agents/state/live-coordination-view.ts";
 import { ensureLiveCoordinationHeartbeat } from "../agents/state/live-coordination-writer.ts";
+import { assignName } from "../agents/state/names.ts";
 import { writePidmapRow } from "../agents/state/pidmap.ts";
 import { agentsRequireGitFinalization, resolveBinName } from "../config.ts";
 import {
@@ -100,9 +110,17 @@ import {
 } from "./effects/index.ts";
 import { toolInputHash, toolTargetHash } from "./events/input-hash.ts";
 import { canonicalize } from "./guard-path.ts";
+import {
+  beginHookHealth,
+  type HookHealthState,
+  observeHookDebug,
+  observeHookError,
+  writeHookHealthCompletion,
+} from "./health.ts";
 import { adapterPidFromEnv, parsePsChainLine, selectAnchorPid } from "./resolve/anchor.ts";
 import { extractIntentComment, resolveIntent } from "./resolve/intent.ts";
 import { resolveOwner } from "./resolve/owner.ts";
+import type { SessionNameDisplayInspection } from "./resolve/transcript.ts";
 import {
   inspectSessionNameDisplayImmediately,
   scanAssistantStatusBoxPresent,
@@ -118,6 +136,8 @@ interface Argv {
   extra: string[];
 }
 
+let hookHealthState: HookHealthState | undefined;
+
 function parseArgv(argv: string[]): Argv {
   const out: Argv = { eventName: null, extra: [] };
   for (let i = 0; i < argv.length; i++) {
@@ -155,17 +175,16 @@ async function readStdin(): Promise<string> {
 }
 
 /**
- * Env for child agent-coord spawns, with the coord root pinned. The hook
- * process may be running with the session shell's cwd (inside a submodule or
- * journal dir), and agent-coord resolves its root from cwd unless overridden —
- * without the pin a child could write state to a different .harnery than the
- * one this hook resolved.
+ * Env for a detached hook retry worker, with the coord root pinned. The hook
+ * may run with the session shell's cwd (inside a submodule or journal dir), so
+ * the worker must retain the root this process already resolved.
  */
 function childEnv(coordRoot: string): NodeJS.ProcessEnv {
   return { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: coordRoot };
 }
 
 function appendDebug(coordRoot: string, entry: Record<string, unknown>): void {
+  observeHookDebug(hookHealthState, entry);
   if (coordEnv("SHARED_LOGS") !== "0") {
     try {
       processLogger(coordRoot, "agent-hook").debug("agent_hook.diagnostic", legacyLogFields(entry));
@@ -184,6 +203,7 @@ function appendDebug(coordRoot: string, entry: Record<string, unknown>): void {
 }
 
 function logError(coordRoot: string | null, err: unknown, context: Record<string, unknown>): void {
+  observeHookError(hookHealthState, context.phase);
   if (!coordRoot) return;
   if (coordEnv("SHARED_LOGS") !== "0") {
     try {
@@ -216,43 +236,48 @@ function logError(coordRoot: string | null, err: unknown, context: Record<string
 }
 
 /**
- * Spawn `agent-coord assign-name <owner> <kind>` to mint or recover the
- * hurricane-style name for this owner. Returns null on any failure so
- * session.started emission never breaks the adapter flow.
- *
- * Lives at agent-hooks side (not agent-coord) to keep emitter/consumer
- * separation: we spawn rather than import.
+ * Mint or recover the hurricane-style name for this owner in-process. Returns
+ * null on any failure so session.started emission never breaks adapter flow.
  */
-function assignNameViaAgentCoord(
+function assignNameInProcess(
   coordRoot: string,
   instanceId: string,
   kind: "session" | "subagent" | "transient",
   forkedFrom?: string,
 ): { name: string; kind: string } | null {
-  const binary = coordBinPath("agent-coord", coordRoot) ?? "";
-  if (!existsSync(binary)) return null;
   try {
-    const args = ["assign-name", instanceId, kind];
-    if (forkedFrom) args.push("--forked-from", forkedFrom);
-    const result = spawnSync(binary, args, {
-      encoding: "utf8",
-      timeout: 2000,
-      env: childEnv(coordRoot),
-    });
-    if (result.status !== 0 || !result.stdout) return null;
-    const parsed = JSON.parse(result.stdout.trim()) as {
-      name?: string;
-      kind?: string;
-    };
-    if (parsed.name && parsed.kind) {
-      return { name: parsed.name, kind: parsed.kind };
-    }
-    return null;
+    const name = assignName(coordRoot, instanceId, kind, forkedFrom ? { forkedFrom } : undefined);
+    return { name, kind };
   } catch {
     return null;
   }
 }
 
+/** Mid-flight sessions can emit tools before SessionStart assigns a pool name.
+ * Stamp the disposable cache so Codec does not render the 8-character id. */
+function ensureSessionDisplayName(
+  coordRoot: string,
+  instanceId: string,
+  sessionId: string,
+  adapter: Adapter,
+): void {
+  if (coordEnv("WORKFLOW_CHILD") === "1") return;
+  const row =
+    readLiveCoordinationRow(coordRoot, instanceId) ?? readHeartbeat(coordRoot, instanceId);
+  if (row?.kind === "subagent" || row?.kind === "transient" || row?.workflow_run_id) return;
+  if (row?.name?.trim()) return;
+  const assigned = assignNameInProcess(coordRoot, instanceId, "session");
+  if (!assigned?.name) return;
+  if (!readHeartbeat(coordRoot, instanceId)) {
+    try {
+      ensureLiveCoordinationHeartbeat(coordRoot, instanceId, sessionId, adapter);
+    } catch {
+      /* cache materialization is best-effort; history still holds the name */
+    }
+  }
+  setAssignedNameCache(coordRoot, instanceId, assigned.name, "session");
+}
+
 /**
  * Direct (in-process) pidmap write, avoiding the spawn overhead of going via
  * the agent-coord CLI for every session.started signal. Pid-map rows
@@ -321,14 +346,9 @@ function buildEventData(
       // tool.requested heal path instead. The forkedFrom plumbing below stays
       // for adapters that DO report a parent at session start.
       const forkedFrom: string | undefined = undefined;
-      // Assign (or recover) name + kind via agent-coord. Idempotent: resume
+      // Assign (or recover) name + kind in-process. Idempotent: resume
       // returns the original name; new owner consumes a counter slot.
-      const assigned = assignNameViaAgentCoord(
-        ctx.coordRoot,
-        ctx.instanceId,
-        "session",
-        forkedFrom,
-      );
+      const assigned = assignNameInProcess(ctx.coordRoot, ctx.instanceId, "session", forkedFrom);
       // Write the adapter pid-map row so `harn agents whoami` ppid-walks find
       // this owner. Prefer the payload pid (the actual claude binary), then the
       // anchor walk (the `node` ancestor for Cursor, which has no payload pid),
@@ -389,14 +409,12 @@ function buildEventData(
       };
 
     case "turn.started": {
-      // Cursor can deliver beforeSubmitPrompt before sessionStart. Ensure that
-      // high-confidence prompt bootstrap also mints durable display identity;
-      // a later SessionStart remains idempotent.
-      if (
-        ctx.adapter === "cursor" &&
-        !readLiveCoordinationRow(ctx.coordRoot, ctx.instanceId)?.name
-      ) {
-        assignNameViaAgentCoord(ctx.coordRoot, ctx.instanceId, "session");
+      // Mid-flight onboarding (any adapter) can observe a turn before
+      // SessionStart. Mint durable display identity here so a later
+      // SessionStart remains idempotent and Codec is not stuck on the
+      // 8-character native id.
+      if (!readLiveCoordinationRow(ctx.coordRoot, ctx.instanceId)?.name) {
+        assignNameInProcess(ctx.coordRoot, ctx.instanceId, "session");
       }
       const prompt = p?.prompt ?? "";
       const { value, truncated } = clampString(prompt, 4000);
@@ -467,7 +485,7 @@ function buildEventData(
       // (agent-coord/state/names.ts → kind=transient). Use the call ID as the
       // instance_id input; assignName falls through to transient.
       const childInstanceId = subagentCallId ?? ctx.instanceId;
-      const assigned = assignNameViaAgentCoord(ctx.coordRoot, childInstanceId, "subagent");
+      const assigned = assignNameInProcess(ctx.coordRoot, childInstanceId, "subagent");
       return {
         agent_type:
           (p?.raw.agent_type as string | undefined) ??
@@ -597,10 +615,18 @@ function numberField(value: unknown): number | undefined {
 
 async function main(): Promise<number> {
   const hookStartedAt = performance.now();
+  const hookStartedRss = process.memoryUsage().rss;
   const hookClock = captureSpanClockV3();
   const { eventName, extra } = parseArgv(process.argv.slice(2));
   const adapter = detectAdapter(process.argv.slice(2));
   const raw = await readStdin();
+  hookHealthState = beginHookHealth({
+    started_at_ms: hookStartedAt,
+    started_rss_bytes: hookStartedRss,
+    event_name: eventName,
+    adapter,
+    payload_bytes: raw.length,
+  });
 
   // Cursor executes the Claude Code project hooks too on hosts wired for both
   // adapters, piping them its own payload (identifiable by the top-level
@@ -612,6 +638,7 @@ async function main(): Promise<number> {
     if (coordEnv("AGENT_COORD_OFF") !== "1") {
       const coordRoot = resolveCoordRoot(process.cwd());
       if (coordRoot) {
+        hookHealthState.coord_root = coordRoot;
         appendDebug(coordRoot, {
           ts: new Date().toISOString(),
           event_name: eventName,
@@ -668,6 +695,7 @@ async function main(): Promise<number> {
 
   const coordRoot = resolveCoordRoot(process.cwd());
   if (!coordRoot) return 0;
+  hookHealthState.coord_root = coordRoot;
   if (eventName === "runtime-context-retry") {
     return runRuntimeContextRetryWorker(coordRoot, adapter, extra);
   }
@@ -696,8 +724,9 @@ async function main(): Promise<number> {
   // that tool. It is not a transcript and therefore cannot prove that an
   // earlier assistant response omitted the required session-name block.
   // afterAgentResponse is the one native boundary that carries the completed
-  // assistant text, so stamp a positive sighting here without retaining or
-  // emitting the response body into V3.
+  // assistant text. Preserve only privacy-safe ritual booleans in the V3
+  // producer's open-turn state; Stop consumes them into the authoritative
+  // turn.completed event. The response body never enters V3 or heartbeat.
   if (adapter === "cursor" && eventName === "after-agent-response") {
     const payload = parsePayload(raw, adapter);
     const owner = resolveOwner({ payload: payload?.raw ?? null, coordRoot });
@@ -705,14 +734,80 @@ async function main(): Promise<number> {
       appendDebug(coordRoot, { ...debugBase, skipped: "no-owner-resolved" });
       return 0;
     }
-    const name = sessionNameDisplayPending(readLiveCoordinationRow(coordRoot, owner.instance_id));
+    const row = readLiveCoordinationRow(coordRoot, owner.instance_id);
+    const name = sessionNameDisplayPending(row);
     const text = typeof payload?.raw.text === "string" ? payload.raw.text : "";
-    if (name && assistantTextStartsWithSessionNameBlock(text, name)) {
-      stampSessionNameSeen(coordRoot, owner.instance_id, name);
-      appendDebug(coordRoot, { ...debugBase, effect: "session-name-display-stamped" });
+    const sighting = matchSessionNameDisplay(row, text);
+    if (sighting) {
+      stampSessionNameSeen(coordRoot, owner.instance_id, sighting.pending);
+      appendDebug(coordRoot, {
+        ...debugBase,
+        effect: "session-name-display-stamped",
+        session_name_pending: sighting.pending,
+        ...(sighting.displayed === sighting.pending
+          ? {}
+          : { session_name_displayed: sighting.displayed, session_name_drift: true }),
+      });
+    } else if (!name) {
+      // Nothing was owed. Distinct from a miss: conflating the two is what made
+      // a latched Cursor session undiagnosable from this log.
+      appendDebug(coordRoot, { ...debugBase, skipped: "no-pending-session-name" });
     } else {
-      appendDebug(coordRoot, { ...debugBase, skipped: "no-session-name-sighting" });
+      appendDebug(coordRoot, {
+        ...debugBase,
+        skipped: "session-name-block-absent",
+        session_name_pending: name,
+        reply_bytes: text.length,
+        reply_leads_with_fence: /^\s*`{3,}/.test(text),
+      });
+    }
+    if (ledgerRoute.state === "blocked") {
+      appendDebug(coordRoot, {
+        ...debugBase,
+        skipped: "v3-control-blocked",
+        reason: ledgerRoute.reason,
+        owner_source: owner.source,
+      });
+      return 0;
     }
+    const statusBoxPresentStrict = scanAssistantStatusBoxPresent(undefined, text);
+    // The hook parser needs the completed reply long enough to scan it, but
+    // durable hook intake must never retain that body. Keep every other native
+    // field so turn correlation remains available to the producer.
+    const { text: _completedReply, ...privacySafeRaw } = payload?.raw ?? {};
+    const privacySafePayload = payload ? { ...payload, raw: privacySafeRaw } : null;
+    const v3Result = recordLiveHookSignalV3({
+      coordRoot,
+      route: ledgerRoute,
+      eventName,
+      payload: privacySafePayload,
+      adapter,
+      instanceId: owner.instance_id,
+      hook_name: eventName,
+      hook_duration_ms: Math.max(0, Math.floor(performance.now() - hookStartedAt)),
+      monotonic_ns: hookClock.monotonic_ns,
+      turn_ritual: {
+        status_box_present: statusBoxPresentStrict,
+        status_box_present_strict: statusBoxPresentStrict,
+        session_name_required: name !== undefined,
+        session_name_present: name ? assistantTextStartsWithSessionNameBlock(text, name) : false,
+      },
+    });
+    observeHookDebug(hookHealthState, { event_v3_state: v3Result.state });
+    appendDebug(coordRoot, {
+      ...debugBase,
+      effect: "cursor-response-ritual-observed",
+      owner_source: owner.source,
+      event_v3_state: v3Result.state,
+      ...(v3Result.state === "observed"
+        ? {
+            generation_id: v3Result.generation_id,
+            turn_id: v3Result.turn_id,
+            response_observed_at: v3Result.observed_at,
+            status_box_present_strict: statusBoxPresentStrict,
+          }
+        : {}),
+    });
     return 0;
   }
 
@@ -735,9 +830,20 @@ async function main(): Promise<number> {
     });
     return 0;
   }
+  hookHealthState.owner_id = owner.instance_id;
 
   const sessionId = payload?.session_id ?? payload?.conversation_id ?? owner.instance_id;
   const priorCoordination = readHeartbeat(coordRoot, owner.instance_id);
+  if (
+    norm.event_type !== "session.ended" &&
+    coordEnv("WORKFLOW_CHILD") !== "1" &&
+    priorCoordination?.kind !== "subagent" &&
+    priorCoordination?.kind !== "transient" &&
+    !priorCoordination?.workflow_run_id &&
+    !priorCoordination?.name?.trim()
+  ) {
+    assignNameInProcess(coordRoot, owner.instance_id, "session");
+  }
 
   const data = buildEventData(norm.event_type, {
     coordRoot,
@@ -812,6 +918,9 @@ async function main(): Promise<number> {
     ...(turnRitual ? { turn_ritual: turnRitual } : {}),
     ...(deferV3Drain ? { defer_drain: true } : {}),
   });
+  observeHookDebug(hookHealthState, {
+    ...(v3Result ? { event_v3_state: v3Result.state } : {}),
+  });
   const recordedGenerationId =
     v3Result && "event" in v3Result && "generation_id" in v3Result.event.scope
       ? (v3Result.event.scope.generation_id as `gen_${string}`)
@@ -830,6 +939,13 @@ async function main(): Promise<number> {
       logError(coordRoot, error, { phase: "epoch-coordination-restore" });
     }
   }
+  if (norm.event_type !== "session.ended") {
+    try {
+      ensureSessionDisplayName(coordRoot, owner.instance_id, sessionId, adapter);
+    } catch (error) {
+      logError(coordRoot, error, { phase: "session-display-name" });
+    }
+  }
   const v3EventId =
     v3Result && "event" in v3Result
       ? v3Result.event.event_id
@@ -966,6 +1082,7 @@ async function main(): Promise<number> {
     // Session start is the only caller of the artifact janitor and the storage
     // maintenance pass, so both load here instead of on every tool call.
     const { autoCleanArtifacts } = await import("../artifacts/index.ts");
+    const { autoCleanEventV3Archives } = await import("../events/v3/archive-retention.ts");
     const { createAutomaticMaintenanceComposition, runAutomaticMaintenancePass } = await import(
       "../storage/maintenance-providers.ts"
     );
@@ -977,6 +1094,13 @@ async function main(): Promise<number> {
     } catch (err) {
       logError(coordRoot, err, { phase: "artifact-auto-clean" });
     }
+    // Effect: apply the same daily throttle to closed V3 epochs. The newest
+    // recovery epochs remain protected by the archive retention policy.
+    try {
+      autoCleanEventV3Archives(coordRoot);
+    } catch (err) {
+      logError(coordRoot, err, { phase: "event-v3-archive-auto-clean" });
+    }
     // Plan one bounded, claim-first global slice from cached pressure only.
     // Existing owner janitors above remain the only active executors until
     // each provider receives a separate production activation.
@@ -1040,7 +1164,7 @@ async function main(): Promise<number> {
   // agnostic since v0.5.0.
   if (norm.event_type === "session.ended") {
     try {
-      cleanupSessionEnd(coordRoot, owner.instance_id, (data.reason as string) ?? "unknown");
+      cleanupSessionEnd(coordRoot, owner.instance_id);
     } catch (err) {
       logError(coordRoot, err, { phase: "session-end-cleanup" });
     }
@@ -1065,27 +1189,9 @@ async function main(): Promise<number> {
   if (norm.event_type === "agent.started") {
     try {
       const childInstanceId = (data.agent_id as string | undefined) ?? owner.instance_id;
-      const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-      if (existsSync(agentCoordBin)) {
-        spawnSync(agentCoordBin, ["project"], {
-          encoding: "utf8",
-          timeout: 3000,
-          env: childEnv(coordRoot),
-        });
-        spawnSync(
-          agentCoordBin,
-          [
-            "log",
-            `SUBAGENT_START  agent_type=${(data.agent_type as string) ?? "unknown"} agent_id=${childInstanceId.slice(0, 8)} platform=${adapterPlatform(adapter)}`,
-            "--instance",
-            childInstanceId,
-          ],
-          { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) },
-        );
-      }
-      emitSubagentStartContext(coordRoot, childInstanceId, sessionId, data, adapter);
+      await emitSubagentStartContext(coordRoot, childInstanceId, sessionId, data, adapter);
     } catch (err) {
-      logError(coordRoot, err, { phase: "subagent-start-project" });
+      logError(coordRoot, err, { phase: "subagent-start-context" });
     }
   }
 
@@ -1093,20 +1199,7 @@ async function main(): Promise<number> {
   if (norm.event_type === "agent.completed") {
     try {
       const childInstanceId = payload?.subagent_id ?? payload?.agent_id ?? owner.instance_id;
-      cleanupSessionEnd(coordRoot, childInstanceId, (data.reason as string) ?? "unknown");
-      const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-      if (existsSync(agentCoordBin)) {
-        spawnSync(
-          agentCoordBin,
-          [
-            "log",
-            `SUBAGENT_STOP   agent_id=${childInstanceId.slice(0, 8)} platform=${adapterPlatform(adapter)}`,
-            "--instance",
-            childInstanceId,
-          ],
-          { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) },
-        );
-      }
+      cleanupSessionEnd(coordRoot, childInstanceId);
       const { reconcileSessionFinalizationV3 } = await import("../agents/session-finalizer-v3.ts");
       reconcileSessionFinalizationV3(coordRoot, { archive_observations: [] });
     } catch (err) {
@@ -1338,6 +1431,11 @@ async function main(): Promise<number> {
     try {
       const name = sessionNameDisplayPending(readLiveCoordinationRow(coordRoot, owner.instance_id));
       if (name && toolResponseMintedSessionName(payload?.tool_response, name)) {
+        // Record the title before asking for it. The suggestion can still
+        // change afterwards (an assigned-name rewrite, a lifecycle re-mint, a
+        // rebuilt cache), and the agent must not be stranded for displaying
+        // exactly what it was handed.
+        stampSessionNameRequested(coordRoot, owner.instance_id, name);
         const { emitContext } = await import("./adapter/output.ts");
         emitContext(adapter, "PostToolUse", sessionNameDisplayInstruction(name));
       }
@@ -1414,25 +1512,7 @@ async function enforcePendingSessionNameDisplay(
   const command = extractBashCommand(payload?.tool_name, payload?.tool_input);
   if (isSessionNameRemediationCommand(command, resolveBinName(coordRoot))) return true;
 
-  const inspection =
-    adapter === "cursor" && payload?.agent_message !== undefined
-      ? {
-          state: assistantTextStartsWithSessionNameBlock(payload.agent_message, name)
-            ? ("present" as const)
-            : ("unavailable" as const),
-        }
-      : inspectSessionNameDisplayImmediately(
-          // Codex hook payloads omit transcript_path on every event, which
-          // left this inspection permanently unavailable and the latch never
-          // stamped. Discover the rollout by session id; the scan only runs
-          // while a name is pending, so the latch closes after one success.
-          payload?.transcript_path ??
-            (adapter === "codex"
-              ? discoverCodexSessionTranscript(payload?.session_id ?? instanceId)
-              : undefined),
-          name,
-          assistantTextStartsWithSessionNameBlock,
-        );
+  const inspection = inspectDisplayEvidence(instanceId, adapter, payload, coordination);
   if (inspection.state === "present") {
     stampSessionNameSeen(coordRoot, instanceId, name);
     return true;
@@ -1447,11 +1527,65 @@ async function enforcePendingSessionNameDisplay(
     return true;
   }
 
+  // Record the refusal. Without this the gate was the one enforcement path
+  // that left no trace, so a session reporting "the gate keeps denying me"
+  // could not be confirmed or refuted from the hook log.
+  appendDebug(coordRoot, {
+    ts: new Date().toISOString(),
+    event_name: "pre-tool-use",
+    adapter,
+    effect: "session-name-display-denied",
+    session_name_pending: name,
+    tool_name: payload?.tool_name,
+  });
   const { emitDeny } = await import("./adapter/output.ts");
   emitDeny(adapter, sessionNameDisplayRecoveryInstruction(name, resolveBinName(coordRoot)));
   return false;
 }
 
+/**
+ * Evidence for the pending display, over every title whose display counts.
+ *
+ * Cursor supplies the current narration directly; Claude Code and Codex are
+ * resolved from their JSONL transcripts. Absent is the only state that denies,
+ * so a title is refused only when a readable surface positively shows some
+ * other opening text for every accepted title.
+ */
+function inspectDisplayEvidence(
+  instanceId: string,
+  adapter: Adapter,
+  payload: ParsedPayload | null,
+  coordination: Heartbeat | null,
+): SessionNameDisplayInspection {
+  if (adapter === "cursor" && payload?.agent_message !== undefined) {
+    return matchSessionNameDisplay(coordination, payload.agent_message)
+      ? { state: "present" }
+      : { state: "unavailable", reason: "transcript_not_ready" };
+  }
+
+  // Codex hook payloads omit transcript_path on every event, which left this
+  // inspection permanently unavailable and the latch never stamped. Discover
+  // the rollout by session id; the scan only runs while a name is pending, so
+  // the latch closes after one success.
+  const transcriptPath =
+    payload?.transcript_path ??
+    (adapter === "codex"
+      ? discoverCodexSessionTranscript(payload?.session_id ?? instanceId)
+      : undefined);
+
+  let verdict: SessionNameDisplayInspection = { state: "absent" };
+  for (const candidate of sessionNameDisplayAcceptedNames(coordination)) {
+    const inspection = inspectSessionNameDisplayImmediately(
+      transcriptPath,
+      candidate,
+      assistantTextStartsWithSessionNameBlock,
+    );
+    if (inspection.state === "present") return inspection;
+    if (inspection.state === "unavailable") verdict = inspection;
+  }
+  return verdict;
+}
+
 function generationBoundHeartbeat(
   heartbeat: Heartbeat | null,
   generationId: `gen_${string}` | undefined,
@@ -1494,42 +1628,19 @@ async function runPreToolUseGuard(
   }
   if (targets.length === 0) return true;
 
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-  if (!existsSync(agentCoordBin)) {
-    if (agentsRequireGitFinalization(coordRoot)) {
-      const { emitDeny } = await import("./adapter/output.ts");
-      emitDeny(
-        adapter,
-        "Harnery denied the write before mutation because the claim coordinator is unavailable; repair the project's Harnery installation and retry.",
-      );
-      return false;
-    }
-    return true;
-  }
+  const { evaluateClaim } = await import("../agents/rules/claim-conflict.ts");
 
   // For apply_patch (multi-file), collect siblings so the deny reason names
   // them. For single-file tools the array has one entry.
   for (const target of targets) {
-    const verdictReq = JSON.stringify({
-      rule: "claim",
-      instance_id: instanceId,
-      session_id: sessionId,
-      path: target.path,
-    });
-    const result = spawnSync(agentCoordBin, ["verdict"], {
-      input: verdictReq,
-      encoding: "utf8",
-      timeout: 3000,
-      env: childEnv(coordRoot),
-    });
-    if (result.status !== 0 || !result.stdout) continue;
-    let parsed: { allow?: boolean; reason?: string } = {};
     try {
-      parsed = JSON.parse(result.stdout.trim());
-    } catch {
-      continue;
-    }
-    if (parsed.allow === false) {
+      const parsed = evaluateClaim(coordRoot, {
+        rule: "claim",
+        instance_id: instanceId,
+        session_id: sessionId,
+        path: target.path,
+      });
+      if (parsed.allow !== false) continue;
       let reason =
         parsed.reason ?? `Path ${target.path} is currently being edited by another agent.`;
       if (targets.length > 1) {
@@ -1545,7 +1656,7 @@ async function runPreToolUseGuard(
       const { emitDeny } = await import("./adapter/output.ts");
       emitDeny(adapter, reason);
       return false;
-    }
+    } catch {}
   }
   return true;
 }
@@ -1748,16 +1859,23 @@ function releaseClaimOnFailure(
   const row = readLiveCoordinationRow(coordRoot, instanceId);
   if (!row?.files_touched?.includes(canonical)) return;
 
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-  if (!existsSync(agentCoordBin)) return;
-  spawnSync(agentCoordBin, ["release-claim", instanceId, canonical], {
-    encoding: "utf8",
-    timeout: 2000,
-    env: childEnv(coordRoot),
-  });
+  const before = readHeartbeat(coordRoot, instanceId);
+  try {
+    recordLiveClaimChangeV3({
+      coordRoot,
+      owner: instanceId,
+      nativeSessionId: before?.session_id ?? instanceId,
+      adapter: adapterFromPlatform(before?.platform),
+      operation: "released",
+      path: canonical,
+      access: "write",
+    });
+  } catch {
+    /* best-effort release must not break adapter flow */
+  }
 }
 
-function cleanupSessionEnd(coordRoot: string, instanceId: string, reason: string): void {
+function cleanupSessionEnd(coordRoot: string, instanceId: string): void {
   // Sweep pid-map entries pointing to this instance
   const pidmapDir = join(coordRoot, ".harnery", "pid-map");
   if (existsSync(pidmapDir)) {
@@ -1779,15 +1897,6 @@ function cleanupSessionEnd(coordRoot: string, instanceId: string, reason: string
       /* swallow */
     }
   }
-  // Activity log
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-  if (existsSync(agentCoordBin)) {
-    spawnSync(
-      agentCoordBin,
-      ["log", `SESSION_END     reason=${reason}`, "--instance", instanceId],
-      { encoding: "utf8", timeout: 2000 },
-    );
-  }
 }
 
 async function emitUserPromptSubmitSystemMessage(
@@ -1798,33 +1907,18 @@ async function emitUserPromptSubmitSystemMessage(
   workspaceCwd?: string,
   recoveryBriefing = "",
 ): Promise<boolean> {
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
-  let additionalContext = "";
-
-  if (existsSync(agentCoordBin)) {
-    const args = ["prompt-context", "--instance", instanceId, "--session", sessionId];
-    // Every human-facing adapter gets the first-session naming reminder from
-    // the shared hook path. Cursor + Codex additionally get ongoing set-task
-    // staleness nudges; Claude Code enforces those via its Stop transcript.
-    // Codex also gets the optional project-owned prompt reminder. Claude Code
-    // already has native output-style reminders, so duplicating it would add
-    // noise. Cursor's current beforeSubmitPrompt output can allow or block but
-    // cannot inject model context; an Always Apply rule is its durable carrier.
-    // Only the boolean route travels through argv, never the host's text.
-    if (adapter === "codex") args.push("--host-prompt-reminder");
-    // Codex gets a fresh status-footer reminder on every prompt. Its Stop hook
-    // stays observe-only, so missing the footer never replaces the answer.
-    // Claude Code gets a fresh per-turn ritual reminder: satisfying the
-    // contract up front is far cheaper than the bounce-and-retry the Stop hook
-    // otherwise forces. Cursor's beforeSubmitPrompt cannot inject context, so
-    // its Stop follow-up remains the supported enforcement channel.
-    args.push("--session-name-nudge");
-    if (adapter === "cursor" || adapter === "codex") args.push("--task-nudge");
-    if (adapter === "codex") args.push("--status-footer-nudge");
-    if (adapter === "claude-code") args.push("--turn-ritual-nudge", adapter);
-    const result = spawnSync(agentCoordBin, args, { encoding: "utf8", timeout: 3000 });
-    if (result.status === 0 && result.stdout) additionalContext = result.stdout.trim();
-  }
+  const { renderPromptContext } = await import("../agents/render/prompt-context.ts");
+  let additionalContext = renderPromptContext({
+    coordRoot,
+    instanceId,
+    sessionId,
+    adapter,
+    sessionNameNudge: true,
+    taskNudge: adapter === "cursor" || adapter === "codex",
+    hostPromptReminder: adapter === "codex",
+    statusFooterNudge: adapter === "codex",
+    turnRitualNudge: adapter === "claude-code" ? adapter : undefined,
+  }).trim();
   if (adapter === "codex") {
     const fileLinkContext = renderCodexWslFileLinkContext(coordRoot, workspaceCwd);
     if (fileLinkContext) {
@@ -1841,14 +1935,14 @@ async function emitUserPromptSubmitSystemMessage(
   return true;
 }
 
-function emitSubagentStartContext(
+async function emitSubagentStartContext(
   coordRoot: string,
   instanceId: string,
   sessionId: string,
   data: Record<string, unknown>,
   adapter: Adapter,
-): void {
-  // Look up the subagent's assigned name (just-written by agent-coord assignName
+): Promise<void> {
+  // Look up the subagent's assigned name (just-written by the in-process name
   // in session.started data) + the parent's short id for the "you are a subagent
   // of X" framing.
   const subagentName = (data.name as string | undefined) ?? "";
@@ -1861,23 +1955,20 @@ function emitSubagentStartContext(
   // Render peer table inline since the subagent might want to know who else
   // is around. Reuse prompt-context (which dedups against the per-owner hash);
   // first call will always emit.
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
   let combined = message;
-  if (existsSync(agentCoordBin)) {
-    const result = spawnSync(
-      agentCoordBin,
-      ["prompt-context", "--instance", instanceId, "--session", sessionId, "--name", subagentName],
-      { encoding: "utf8", timeout: 3000 },
-    );
-    const ctx = (result.stdout ?? "").trim();
-    if (ctx) combined = `${message}\n\n${ctx}`;
-  }
+  const { renderPromptContext } = await import("../agents/render/prompt-context.ts");
+  const context = renderPromptContext({
+    coordRoot,
+    instanceId,
+    sessionId,
+    agentName: subagentName,
+  }).trim();
+  if (context) combined = `${message}\n\n${context}`;
 
   // Use SubagentStart event-name in CC's hookSpecificOutput shape; cursor's
   // flat `additional_context` works the same way.
-  void import("./adapter/output.ts").then(({ emitContext }) => {
-    emitContext(adapter, "SubagentStart", combined);
-  });
+  const { emitContext } = await import("./adapter/output.ts");
+  emitContext(adapter, "SubagentStart", combined);
 }
 
 function adapterPlatform(adapter: Adapter): string {
@@ -1885,6 +1976,12 @@ function adapterPlatform(adapter: Adapter): string {
   return adapter;
 }
 
+function adapterFromPlatform(platform: unknown): Adapter {
+  if (platform === "cursor") return "cursor";
+  if (platform === "codex") return "codex";
+  return "claude-code";
+}
+
 async function emitSessionStartSystemMessage(
   coordRoot: string,
   instanceId: string,
@@ -1893,53 +1990,29 @@ async function emitSessionStartSystemMessage(
   adapter: Adapter,
   recoveryBriefing = "",
 ): Promise<boolean> {
-  const agentCoordBin = coordBinPath("agent-coord", coordRoot) ?? "";
   const workflowChild = coordEnv("WORKFLOW_CHILD") === "1";
   let additionalContext = "";
-  if (existsSync(agentCoordBin)) {
-    // Sync-project so the heartbeat exists for downstream readers (peer table,
-    // wiring check, council invites).
-    spawnSync(agentCoordBin, ["project"], { encoding: "utf8", timeout: 3000 });
-    // Opportunistic reconciliation makes normal session starts a failsafe for
-    // archive, idle, cascade, and host lifecycle observations.
-    spawnSync(agentCoordBin, ["reconcile-finalization"], {
-      encoding: "utf8",
-      timeout: 5000,
-      env: { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: coordRoot },
-    });
-
-    // SESSION_START activity log line, fired across all adapters.
-    const model = (emittedData.model as string | undefined) ?? "unknown";
-    const source = (emittedData.source as string | undefined) ?? "startup";
-    const platform = adapterPlatform(adapter);
-    spawnSync(
-      agentCoordBin,
-      [
-        "log",
-        `SESSION_START   model=${model} source=${source} platform=${platform}`,
-        "--instance",
-        instanceId,
-      ],
-      { encoding: "utf8", timeout: 2000 },
-    );
-
-    // Workflow children retain lifecycle/event capture but do not receive
-    // operator-facing peer, council, or init-remediation context. Injecting
-    // that context can make a bounded child follow housekeeping instructions
-    // instead of its assigned prompt.
-    if (!workflowChild) {
-      const agentName = (emittedData.name as string | undefined) ?? "";
-      const args = ["session-context", "--instance", instanceId, "--session", sessionId];
-      if (agentName) args.push("--name", agentName);
-      // The "You are agent-X." prefix in session-context renders unqualified by
-      // default (claude-code-style). For cursor/codex the bash dispatchers add
-      // a "(Cursor)" / "(Codex)" suffix; pass it through as --platform-label.
-      if (adapter !== "claude-code") {
-        args.push("--platform-label", platform === "cursor" ? "Cursor" : "Codex");
-      }
-      const result = spawnSync(agentCoordBin, args, { encoding: "utf8", timeout: 3000 });
-      if (result.status === 0 && result.stdout) additionalContext = result.stdout.trim();
-    }
+  // Opportunistic reconciliation makes normal session starts a failsafe for
+  // archive, idle, cascade, and host lifecycle observations. It also runs the
+  // stale cache sweep through the shared ADR 0077 composition.
+  const { reconcileCoordinationV3 } = await import("../agents/reconcile-coordination-v3.ts");
+  reconcileCoordinationV3(coordRoot);
+
+  // Workflow children retain lifecycle/event capture but do not receive
+  // operator-facing peer, council, or init-remediation context. Injecting
+  // that context can make a bounded child follow housekeeping instructions
+  // instead of its assigned prompt.
+  if (!workflowChild) {
+    const agentName = (emittedData.name as string | undefined) ?? "";
+    const { renderSessionContext } = await import("../agents/render/session-context.ts");
+    additionalContext = renderSessionContext({
+      coordRoot,
+      instanceId,
+      sessionId,
+      agentName: agentName || undefined,
+      platformLabel:
+        adapter === "claude-code" ? undefined : adapter === "cursor" ? "Cursor" : "Codex",
+    }).trim();
   }
 
   // Effect (claude-code): merge the journal recovery cue into the session-start
@@ -1987,6 +2060,11 @@ function completeRecoveryInjection(
 
 main()
   .then(async (code) => {
+    writeHookHealthCompletion(hookHealthState, {
+      finished_at_ms: performance.now(),
+      finished_rss_bytes: process.memoryUsage().rss,
+      pid: process.pid,
+    });
     await closeProcessLoggers();
     process.exit(code);
   })
@@ -1994,6 +2072,13 @@ main()
     logError(resolveCoordRoot(process.cwd()), err, {
       argv: process.argv.slice(2),
       pid: process.pid,
+      phase: "top-level",
+    });
+    writeHookHealthCompletion(hookHealthState, {
+      finished_at_ms: performance.now(),
+      finished_rss_bytes: process.memoryUsage().rss,
+      pid: process.pid,
+      faulted: true,
     });
     await closeProcessLoggers();
     process.exit(0);