harnery 0.37.0 → 0.38.0

package/dist/core/hooks/session-name-presence.js

@@ -21,6 +21,7 @@
  *
  * Never throws: coordination telemetry must not take down a hook.
  */
+import { sessionNameDisplayAcceptedNames } from "../agents/session-name-display.js";
 import { stampSessionNameSeen } from "../agents/state/heartbeat-writer.js";
 import { readLiveCoordinationRow } from "../agents/state/live-coordination-view.js";
 export function sessionNamePresence(coordRoot, instanceId, scanAssistantText) {
@@ -32,7 +33,9 @@ export function sessionNamePresence(coordRoot, instanceId, scanAssistantText) {
         if (row?.session_name_seen_for === name) {
             return { session_name_present: true, session_name_present_for: name };
         }
-        const present = scanAssistantText(name);
+        // A display of the title Harnery last asked for counts here too, so Stop
+        // and the PreToolUse gate cannot disagree about the same reply.
+        const present = sessionNameDisplayAcceptedNames(row).some((candidate) => scanAssistantText(candidate));
         if (present)
             stampSessionNameSeen(coordRoot, instanceId, name);
         return { session_name_present: present, session_name_present_for: name };

package/dist/core/qa-artifacts.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Managed output workspaces for page-QA commands.
+ *
+ * An implicit qa-run/qa-record output is working evidence, not project source.
+ * Keep it in the bounded artifact store. Callers that pass --out-dir retain
+ * full control of that explicit destination.
+ */
+import type { HarneryProgramContext } from "../commander.js";
+export type QaArtifactKind = "qa-run" | "qa-record" | "review-pack";
+export declare function resolveQaRepoRoot(context?: HarneryProgramContext): string;
+export declare function createManagedQaOutParent(repoRoot: string, kind: QaArtifactKind, opts?: {
+    retentionMinutes?: number;
+}): string;
+/**
+ * Find the newest run in a valid managed QA workspace. This keeps no-path
+ * `qa-status` useful even though every implicit invocation gets an isolated
+ * artifact workspace instead of sharing one root-level `.qa-run` directory.
+ */
+export declare function latestManagedQaRun(repoRoot: string): string | null;
+//# sourceMappingURL=qa-artifacts.d.ts.map

package/dist/core/qa-artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qa-artifacts.d.ts","sourceRoot":"","sources":["../../src/core/qa-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAW7D,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;AAEpE,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAEzE;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,cAAc,EACpB,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,MAAM,CAcR;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuClE"}

package/dist/core/qa-artifacts.js

@@ -0,0 +1,110 @@
+/**
+ * Managed output workspaces for page-QA commands.
+ *
+ * An implicit qa-run/qa-record output is working evidence, not project source.
+ * Keep it in the bounded artifact store. Callers that pass --out-dir retain
+ * full control of that explicit destination.
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { monorepoRoot } from "./agents/index.js";
+import { ARTIFACT_MANIFEST, artifactsRoot, configuredArtifactRetentionDays, createArtifact, parseArtifactManifest, } from "./artifacts/index.js";
+export function resolveQaRepoRoot(context) {
+    return resolve(context?.repoRoot ?? monorepoRoot() ?? process.cwd());
+}
+export function createManagedQaOutParent(repoRoot, kind, opts = {}) {
+    return createArtifact(repoRoot, {
+        slug: kind,
+        purpose: kind === "qa-run"
+            ? "Page QA run evidence"
+            : kind === "review-pack"
+                ? "Page review pack"
+                : "Hand-recorded page QA evidence",
+        retentionDays: configuredArtifactRetentionDays(repoRoot),
+        // A standalone review-pack workspace IS the pack, so the artifact store's
+        // own expiry follows the pack's (90 minutes by default, ruled 2026-09-02).
+        ...(opts.retentionMinutes !== undefined ? { retentionMinutes: opts.retentionMinutes } : {}),
+    }).path;
+}
+/**
+ * Find the newest run in a valid managed QA workspace. This keeps no-path
+ * `qa-status` useful even though every implicit invocation gets an isolated
+ * artifact workspace instead of sharing one root-level `.qa-run` directory.
+ */
+export function latestManagedQaRun(repoRoot) {
+    const root = artifactsRoot(repoRoot);
+    if (!existsSync(root))
+        return null;
+    let workspaceNames;
+    try {
+        workspaceNames = readdirSync(root).sort();
+    }
+    catch {
+        return null;
+    }
+    let latest = null;
+    for (const workspaceName of workspaceNames) {
+        const workspace = join(root, workspaceName);
+        const manifest = readQaManifest(join(workspace, ARTIFACT_MANIFEST));
+        if (!manifest)
+            continue;
+        let runNames;
+        try {
+            runNames = readdirSync(workspace)
+                .filter((name) => name.startsWith("run-"))
+                .sort();
+        }
+        catch {
+            continue;
+        }
+        for (const runName of runNames) {
+            const runDir = join(workspace, runName);
+            const startedAtMs = readStartedAtMs(runDir);
+            if (startedAtMs === null)
+                continue;
+            if (latest === null ||
+                startedAtMs > latest.startedAtMs ||
+                (startedAtMs === latest.startedAtMs && runDir > latest.path)) {
+                latest = { path: runDir, startedAtMs };
+            }
+        }
+    }
+    return latest?.path ?? null;
+}
+function readQaManifest(path) {
+    try {
+        const parsed = parseArtifactManifest(JSON.parse(readFileSync(path, "utf8")));
+        if (!parsed.ok)
+            return null;
+        if (parsed.manifest.slug !== "qa-run" && parsed.manifest.slug !== "qa-record")
+            return null;
+        return parsed.manifest;
+    }
+    catch {
+        return null;
+    }
+}
+function readStartedAtMs(runDir) {
+    for (const file of ["run-status.json", "page-qa-result.json"]) {
+        try {
+            const value = JSON.parse(readFileSync(join(runDir, file), "utf8"));
+            const run = value.run;
+            const startedAt = typeof value.started_at === "string"
+                ? value.started_at
+                : run &&
+                    typeof run === "object" &&
+                    typeof run.started_at === "string"
+                    ? run.started_at
+                    : null;
+            if (!startedAt)
+                continue;
+            const parsed = Date.parse(startedAt);
+            if (!Number.isNaN(parsed))
+                return parsed;
+        }
+        catch {
+            // Try the other authoritative run document.
+        }
+    }
+    return null;
+}

package/dist/core/resources/contract.d.ts

@@ -14,6 +14,7 @@ export interface ResourceProcessSample {
     owner_kind: "agent" | "service" | "unattributed";
     owner_id: string | null;
     owner_root_pid: number | null;
+    owner_source?: "pid-map" | "session-environment" | "service";
 }
 export interface ResourceProcessGroup {
     kind: ResourceProcessSample["owner_kind"];
@@ -82,6 +83,11 @@ export interface ResourceSamplerState {
     cpu_total_ticks: number;
     cpu_idle_ticks: number;
     process_ticks: Map<string, number>;
+    process_owners: Map<string, ResourceProcessOwnerProof>;
+}
+export interface ResourceProcessOwnerProof {
+    session_id: string;
+    instance_id: string;
 }
 export interface ResourceSampleResult {
     snapshot: ResourceSnapshot;

package/dist/core/resources/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/core/resources/contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE;QACP,KAAK,EAAE,oBAAoB,CAAC;QAC5B,OAAO,EAAE,QAAQ,GAAG,aAAa,CAAC;QAClC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/core/resources/contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE;QACP,KAAK,EAAE,oBAAoB,CAAC;QAC5B,OAAO,EAAE,QAAQ,GAAG,aAAa,CAAC;QAClC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B"}

package/dist/core/resources/sampler.d.ts

@@ -8,10 +8,17 @@ interface ResourceSamplerOptions {
         pid: number;
         id: string;
     }[];
+    sessionOwners?: readonly SessionOwner[];
     unattributedCpuFloor?: number;
     unattributedRssFloor?: number;
     maxProcesses?: number;
 }
+interface SessionOwner {
+    nativeSessionId: string;
+    instanceId: string;
+    platform: string;
+    kind: string;
+}
 export declare function sampleResources(coordRoot: string, previous?: ResourceSamplerState, options?: ResourceSamplerOptions): ResourceSampleResult;
 export declare function parseLinuxProcessStat(line: string): {
     pid: number;

package/dist/core/resources/sampler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../../src/core/resources/sampler.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAE1B,MAAM,eAAe,CAAC;AA0BvB,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,oBAAoB,EAC/B,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,CAgItB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CA0BP;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAuB7D"}
+{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../../src/core/resources/sampler.ts"],"names":[],"mappings":"AAQA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAE1B,MAAM,eAAe,CAAC;AA0BvB,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAClD,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,YAAY;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,oBAAoB,EAC/B,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,CAmJtB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CA0BP;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAuB7D"}

package/dist/core/resources/sampler.js

@@ -3,6 +3,7 @@ import { existsSync, readdirSync, readFileSync, readlinkSync } from "node:fs";
 import { cpus, loadavg, platform, release } from "node:os";
 import { basename, join } from "node:path";
 import { performance } from "node:perf_hooks";
+import { readLiveCoordinationRows } from "../agents/state/live-coordination-view.js";
 import { parsePidmapRow } from "../agents/state/pidmap.js";
 import { checkPidToken } from "../agents/state/proc-start.js";
 import { RESOURCE_SNAPSHOT_SCHEMA_VERSION, } from "./contract.js";
@@ -36,7 +37,15 @@ export function sampleResources(coordRoot, previous, options = {}) {
     const cpu = parseLinuxCpu(readFileSync(join(procRoot, "stat"), "utf8"));
     const memory = parseMeminfo(readFileSync(join(procRoot, "meminfo"), "utf8"));
     const readings = readLinuxProcesses(procRoot, clockTicks, pageSize, uptimeSeconds);
-    const anchors = readOwnershipAnchors(coordRoot, readings, options.services ?? []);
+    const liveSessionOwners = uniqueLiveCodexSessionOwners(options.sessionOwners ??
+        readLiveCoordinationRows(coordRoot).map((row) => ({
+            nativeSessionId: row.native_session_id ?? "",
+            instanceId: row.instance_id,
+            platform: row.platform ?? "",
+            kind: row.kind ?? "",
+        })));
+    const ownership = readOwnershipAnchors(coordRoot, procRoot, readings, options.services ?? [], liveSessionOwners, previous?.process_owners);
+    const anchors = ownership.anchors;
     const byPid = new Map(readings.map((reading) => [reading.pid, reading]));
     const processTicks = new Map();
     const intervalMs = previous ? Math.max(0, nowMs - previous.sampled_at_ms) : null;
@@ -64,6 +73,7 @@ export function sampleResources(coordRoot, previous, options = {}) {
             owner_kind: ownership?.kind ?? "unattributed",
             owner_id: ownership?.id ?? null,
             owner_root_pid: ownership?.rootPid ?? null,
+            ...(ownership ? { owner_source: ownership.source } : {}),
         };
     });
     const visible = processes
@@ -121,6 +131,7 @@ export function sampleResources(coordRoot, previous, options = {}) {
             cpu_total_ticks: cpu.total,
             cpu_idle_ticks: cpu.idle,
             process_ticks: processTicks,
+            process_owners: ownership.processOwners,
         },
     };
 }
@@ -212,7 +223,7 @@ function readLinuxProcesses(procRoot, clockTicks, pageSize, uptimeSeconds) {
     }
     return rows;
 }
-function readOwnershipAnchors(coordRoot, readings, services) {
+function readOwnershipAnchors(coordRoot, procRoot, readings, services, liveSessionOwners, previousOwners) {
     const byPid = new Set(readings.map((row) => row.pid));
     const directory = join(coordRoot, ".harnery", "pid-map");
     const anchors = new Map();
@@ -227,19 +238,109 @@ function readOwnershipAnchors(coordRoot, readings, services) {
                 const row = parsePidmapRow(readFileSync(join(directory, entry), "utf8"));
                 if (!row.instanceId || checkPidToken(pid, row.startToken) === "mismatch")
                     continue;
-                anchors.set(pid, { kind: "agent", id: row.instanceId });
+                anchors.set(pid, { kind: "agent", id: row.instanceId, source: "pid-map" });
             }
             catch {
                 // An unreadable or racing row cannot prove ownership.
             }
         }
     }
+    const processOwners = readBridgeProcessOwners(procRoot, readings, liveSessionOwners, previousOwners);
+    const byReadingPid = new Map(readings.map((row) => [row.pid, row]));
+    for (const reading of readings) {
+        const identity = `${reading.pid}:${reading.startTicks}`;
+        const owner = processOwners.get(identity);
+        if (!owner || anchors.has(reading.pid))
+            continue;
+        const parent = byReadingPid.get(reading.ppid);
+        const parentOwner = parent
+            ? processOwners.get(`${parent.pid}:${parent.startTicks}`)
+            : undefined;
+        if (parentOwner?.instance_id === owner.instance_id)
+            continue;
+        anchors.set(reading.pid, {
+            kind: "agent",
+            id: owner.instance_id,
+            source: "session-environment",
+        });
+    }
     for (const service of services) {
         if (byPid.has(service.pid) && service.id.trim()) {
-            anchors.set(service.pid, { kind: "service", id: service.id.trim() });
+            anchors.set(service.pid, { kind: "service", id: service.id.trim(), source: "service" });
+        }
+    }
+    return { anchors, processOwners };
+}
+function uniqueLiveCodexSessionOwners(rows) {
+    const candidates = new Map();
+    for (const row of rows) {
+        const sessionId = row.nativeSessionId.trim();
+        const instanceId = row.instanceId.trim();
+        if (row.platform !== "codex" || row.kind !== "session" || !sessionId || !instanceId)
+            continue;
+        const owners = candidates.get(sessionId) ?? new Set();
+        owners.add(instanceId);
+        candidates.set(sessionId, owners);
+    }
+    const result = new Map();
+    for (const [sessionId, owners] of candidates) {
+        if (owners.size === 1)
+            result.set(sessionId, [...owners][0]);
+    }
+    return result;
+}
+function readBridgeProcessOwners(procRoot, readings, liveSessionOwners, previousOwners) {
+    const result = new Map();
+    if (liveSessionOwners.size === 0)
+        return result;
+    for (const reading of readings) {
+        const identity = `${reading.pid}:${reading.startTicks}`;
+        const previous = previousOwners?.get(identity);
+        if (previous && liveSessionOwners.get(previous.session_id) === previous.instance_id) {
+            result.set(identity, previous);
+            continue;
         }
+        const sessionId = readCodexWslBridgeSessionId(procRoot, reading.pid);
+        if (!sessionId)
+            continue;
+        const instanceId = liveSessionOwners.get(sessionId);
+        if (instanceId)
+            result.set(identity, { session_id: sessionId, instance_id: instanceId });
     }
-    return anchors;
+    return result;
+}
+function readCodexWslBridgeSessionId(procRoot, pid) {
+    try {
+        const entries = readFileSync(join(procRoot, String(pid), "environ"), "utf8").split("\0");
+        let bridge;
+        let platform;
+        let coordinationSessionId;
+        let codexThreadId;
+        for (const entry of entries) {
+            if (entry.startsWith("HARNERY_AGENT_COORD_BRIDGE=")) {
+                bridge = entry.slice("HARNERY_AGENT_COORD_BRIDGE=".length);
+            }
+            else if (entry.startsWith("HARNERY_AGENT_COORD_PLATFORM=")) {
+                platform = entry.slice("HARNERY_AGENT_COORD_PLATFORM=".length);
+            }
+            else if (entry.startsWith("HARNERY_AGENT_COORD_SESSION_ID=")) {
+                coordinationSessionId = entry.slice("HARNERY_AGENT_COORD_SESSION_ID=".length);
+            }
+            else if (entry.startsWith("CODEX_THREAD_ID=")) {
+                codexThreadId = entry.slice("CODEX_THREAD_ID=".length);
+            }
+        }
+        if (bridge === "codex-wsl" &&
+            platform === "codex" &&
+            coordinationSessionId &&
+            coordinationSessionId === codexThreadId) {
+            return coordinationSessionId;
+        }
+    }
+    catch {
+        // An unreadable or racing environment cannot prove ownership.
+    }
+    return undefined;
 }
 function resolveOwnership(pid, byPid, anchors) {
     const seen = new Set();

package/dist/lib/admission.d.ts

@@ -0,0 +1,71 @@
+export interface AdmissionConfig {
+    /** Base directory holding one subdirectory per resource. */
+    dir: string;
+    /** Resource name, e.g. "browser-qa" or "build". */
+    resource: string;
+    /** Maximum concurrent holders. */
+    capacity: number;
+    /** Poll interval while waiting (default 500ms). */
+    pollMs?: number;
+    /** Entries older than this are pruned regardless of PID (default 6h). */
+    ttlMs?: number;
+}
+export interface AdmissionEntry {
+    pid: number;
+    label: string;
+    created_at: string;
+    /** Set on holders once admitted. */
+    acquired_at?: string;
+}
+export interface AdmissionWaitInfo {
+    /** 1-based position in the ticket queue. */
+    position: number;
+    holders: AdmissionEntry[];
+}
+export interface AdmissionAcquireOptions {
+    /** Human-readable holder description shown in status listings. */
+    label: string;
+    /** Maximum wait before AdmissionTimeoutError (default 20 minutes). */
+    timeoutMs?: number;
+    /** Progress callback, invoked at most once per poll while waiting. */
+    onWait?: (info: AdmissionWaitInfo) => void;
+}
+export interface AdmissionHandle {
+    /** The held entry's filename (diagnostics). */
+    entry: string;
+    /** Milliseconds spent waiting in the queue. */
+    waitedMs: number;
+    /** Give the slot back. Safe to call more than once. */
+    release: () => void;
+}
+export declare class AdmissionTimeoutError extends Error {
+    readonly holders: AdmissionEntry[];
+    constructor(resource: string, timeoutMs: number, holders: AdmissionEntry[]);
+}
+/** Is a PID alive on this machine? EPERM counts as alive; only ESRCH counts
+ * as dead (fail toward respecting holders rather than stealing slots). */
+export declare function pidAlive(pid: number): boolean;
+/**
+ * Join the FIFO queue for one resource and resolve once a slot is held.
+ * Throws AdmissionTimeoutError (with the holders snapshot) when no slot
+ * frees within the timeout — the caller decides whether that is fatal.
+ */
+export declare function acquireAdmission(config: AdmissionConfig, options: AdmissionAcquireOptions): Promise<AdmissionHandle>;
+export interface AdmissionStatus {
+    resource: string;
+    capacity?: number;
+    holders: AdmissionEntry[];
+    waiters: AdmissionEntry[];
+}
+/** Snapshot the queue for one resource, pruning dead entries on the way. */
+export declare function admissionStatus(config: Pick<AdmissionConfig, "dir" | "resource" | "ttlMs">): AdmissionStatus;
+/**
+ * Base directory for admission queue state. tmpdir clears on reboot, which
+ * is correct — stale queue state must not outlive the boot. Override with
+ * HARNERY_ADMISSION_DIR. Host CLIs and harn commands must share this helper
+ * so they join the same machine-wide queues.
+ */
+export declare function admissionBaseDir(): string;
+/** Resources present under an admission base directory. */
+export declare function listAdmissionResources(dir: string): string[];
+//# sourceMappingURL=admission.d.ts.map

package/dist/lib/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../../src/lib/admission.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC;gBACvB,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE;CAW3E;AASD;0EAC0E;AAC1E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAY7C;AA2FD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAyF1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC,GAC1D,eAAe,CAQjB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,2DAA2D;AAC3D,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAS5D"}