harnery 0.40.0 → 0.42.0

package/dist/core/hooks/adapter/behaviors/codex.d.ts

@@ -0,0 +1,15 @@
+import type { ParsedPayload } from "../parse.js";
+import type { AdapterBehavior } from "./types.js";
+/**
+ * Privacy-safe environment and recovery provenance for Codex mid-flight
+ * onboarding. WSLENV values are never recorded, only normalized variable
+ * names, and the native session identifier itself remains fingerprinted.
+ */
+export declare function codexMidFlightDiagnosticContext(payload: ParsedPayload, env?: NodeJS.ProcessEnv): Record<string, string | boolean>;
+/**
+ * Codex: hook payloads omit `transcript_path`, so the rollout is discovered by
+ * session id; effort is probed from the rollout; a Windows-native Codex over a
+ * WSL UNC workspace is the one bridged deployment Harnery knows about.
+ */
+export declare const codexBehavior: AdapterBehavior;
+//# sourceMappingURL=codex.d.ts.map

package/dist/core/hooks/adapter/behaviors/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/codex.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,aAAa,EACtB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CA0BlC;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,eA0C3B,CAAC"}

package/dist/core/hooks/adapter/behaviors/codex.js

@@ -0,0 +1,82 @@
+import { resolveBinName } from "../../../config.js";
+import { codexWslFileLinkTelemetry, inspectCodexWslBridge, isWslUncPath, renderCodexWslFileLinkContext, } from "../../codex-wsl-bridge.js";
+import { unsafeCrossShellReason } from "../../unsafe-cross-shell.js";
+import { discoverCodexSessionTranscript } from "../runtime-telemetry.js";
+/**
+ * Privacy-safe environment and recovery provenance for Codex mid-flight
+ * onboarding. WSLENV values are never recorded, only normalized variable
+ * names, and the native session identifier itself remains fingerprinted.
+ */
+export function codexMidFlightDiagnosticContext(payload, env = process.env) {
+    const wslenv = env.WSLENV?.trim() ?? "";
+    const wslenvNames = [
+        ...new Set(wslenv
+            .split(":")
+            .map((entry) => entry.split("/", 1)[0]?.trim() ?? "")
+            .filter((name) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(name))),
+    ]
+        .sort()
+        .join(":")
+        .slice(0, 512);
+    const identityRecoverySource = payload.session_id
+        ? "native_session_id"
+        : payload.conversation_id
+            ? "native_conversation_id"
+            : payload.agent_id
+                ? "native_agent_id"
+                : "unavailable";
+    return {
+        thread_id_present: Boolean(env.CODEX_THREAD_ID?.trim()),
+        wslenv_present: wslenv.length > 0,
+        wslenv_names: wslenvNames,
+        identity_recovery_source: identityRecoverySource,
+    };
+}
+/**
+ * Codex: hook payloads omit `transcript_path`, so the rollout is discovered by
+ * session id; effort is probed from the rollout; a Windows-native Codex over a
+ * WSL UNC workspace is the one bridged deployment Harnery knows about.
+ */
+export const codexBehavior = {
+    id: "codex",
+    sessionStartPlatformLabel: "Codex",
+    soundEffects: false,
+    journalMaintenance: false,
+    sessionTelemetrySync: false,
+    promptPresenceDetection: false,
+    promptContextNudges: {
+        taskNudge: true,
+        hostPromptReminder: true,
+        statusFooterNudge: true,
+        turnRitualNudge: undefined,
+    },
+    completedResponseEvent: undefined,
+    sessionIdentityOnStartOnly: false,
+    nativeTurnIdOptional: false,
+    tracksExecutionMode: false,
+    shellOperationDedup: false,
+    promptMayPrecedeSessionStart: false,
+    promptContinuesOpenTurn: false,
+    turnRecovery: true,
+    nativeTelemetryOnly: false,
+    runtimeContextTranscriptOptional: false,
+    runtimeContextRetry: true,
+    effortAttestation: "rollout-probe",
+    transcriptTuningRefresh: false,
+    modelProvider: "openai",
+    runtimeContextAvailable: () => true,
+    bridgeFor: (cwd) => (isWslUncPath(cwd) ? "codex-wsl" : undefined),
+    discoverTranscript: (nativeSessionId, candidate, options) => discoverCodexSessionTranscript(nativeSessionId, candidate, options),
+    midFlightDiagnosticContext: (payload) => codexMidFlightDiagnosticContext(payload),
+    fileLinkTelemetry: (coordRoot, cwd, lastAssistantMessage) => codexWslFileLinkTelemetry(coordRoot, cwd, lastAssistantMessage),
+    fileLinkContext: (coordRoot, cwd) => renderCodexWslFileLinkContext(coordRoot, cwd),
+    bridgeWarning: (coordRoot, cwd) => {
+        if (!isWslUncPath(cwd))
+            return undefined;
+        const bridge = inspectCodexWslBridge(process.env, { expected: true });
+        if (!bridge || bridge.ok)
+            return undefined;
+        return `Harnery hybrid warning: ${bridge.detail}. Run \`${resolveBinName(coordRoot)} doctor\` for the repair hint.`;
+    },
+    unsafeCrossShellReason: (input) => unsafeCrossShellReason({ adapter: "codex", ...input }),
+};

package/dist/core/hooks/adapter/behaviors/cursor.d.ts

@@ -0,0 +1,7 @@
+import type { AdapterBehavior } from "./types.js";
+/**
+ * Cursor: no exit-code enforcement, a separate afterAgentResponse hook carries
+ * the completed reply, and cloud mode has no readable runtime context.
+ */
+export declare const cursorBehavior: AdapterBehavior;
+//# sourceMappingURL=cursor.d.ts.map

package/dist/core/hooks/adapter/behaviors/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,eA8B5B,CAAC"}

package/dist/core/hooks/adapter/behaviors/cursor.js

@@ -0,0 +1,35 @@
+/**
+ * Cursor: no exit-code enforcement, a separate afterAgentResponse hook carries
+ * the completed reply, and cloud mode has no readable runtime context.
+ */
+export const cursorBehavior = {
+    id: "cursor",
+    sessionStartPlatformLabel: "Cursor",
+    soundEffects: false,
+    journalMaintenance: false,
+    sessionTelemetrySync: false,
+    promptPresenceDetection: false,
+    promptContextNudges: {
+        taskNudge: true,
+        hostPromptReminder: true,
+        statusFooterNudge: false,
+        turnRitualNudge: undefined,
+    },
+    completedResponseEvent: "after-agent-response",
+    sessionIdentityOnStartOnly: true,
+    nativeTurnIdOptional: true,
+    tracksExecutionMode: true,
+    shellOperationDedup: true,
+    promptMayPrecedeSessionStart: true,
+    promptContinuesOpenTurn: true,
+    turnRecovery: true,
+    nativeTelemetryOnly: false,
+    runtimeContextTranscriptOptional: true,
+    runtimeContextRetry: false,
+    effortAttestation: "payload",
+    transcriptTuningRefresh: false,
+    modelProvider: "cursor",
+    runtimeContextAvailable: (mode) => mode !== "cloud",
+    bridgeFor: () => undefined,
+    inlineAssistantText: (payload) => payload?.agent_message,
+};

package/dist/core/hooks/adapter/behaviors/index.d.ts

@@ -0,0 +1,11 @@
+import type { EventAdapterIdV3 } from "../../../events/v3/adapter-id.js";
+import type { AdapterBehavior } from "./types.js";
+export type { AdapterBehavior, CrossShellInput, EffortAttestationSource, PromptContextNudges, } from "./types.js";
+/**
+ * One behavior per adapter id. The `Record` type makes a new adapter id a
+ * compile error here until its module exists.
+ */
+export declare const ADAPTER_BEHAVIORS: Record<EventAdapterIdV3, AdapterBehavior>;
+/** The single lookup the hook CLI and the V3 producer use instead of branching. */
+export declare function adapterBehavior(adapter: EventAdapterIdV3): AdapterBehavior;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/hooks/adapter/behaviors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAMzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAMvE,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAE1E"}

package/dist/core/hooks/adapter/behaviors/index.js

@@ -0,0 +1,20 @@
+import { claudeCodeBehavior } from "./claude-code.js";
+import { codexBehavior } from "./codex.js";
+import { cursorBehavior } from "./cursor.js";
+import { openclawBehavior } from "./openclaw.js";
+import { opencodeBehavior } from "./opencode.js";
+/**
+ * One behavior per adapter id. The `Record` type makes a new adapter id a
+ * compile error here until its module exists.
+ */
+export const ADAPTER_BEHAVIORS = {
+    "claude-code": claudeCodeBehavior,
+    cursor: cursorBehavior,
+    codex: codexBehavior,
+    opencode: opencodeBehavior,
+    openclaw: openclawBehavior,
+};
+/** The single lookup the hook CLI and the V3 producer use instead of branching. */
+export function adapterBehavior(adapter) {
+    return ADAPTER_BEHAVIORS[adapter];
+}

package/dist/core/hooks/adapter/behaviors/openclaw.d.ts

@@ -0,0 +1,7 @@
+import type { AdapterBehavior } from "./types.js";
+/**
+ * OpenClaw: event-only. Its plugin bundles the V3 producer and never runs the
+ * hook CLI, so every hook-process effect is off and telemetry is native only.
+ */
+export declare const openclawBehavior: AdapterBehavior;
+//# sourceMappingURL=openclaw.d.ts.map

package/dist/core/hooks/adapter/behaviors/openclaw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/openclaw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,eA6B9B,CAAC"}

package/dist/core/hooks/adapter/behaviors/openclaw.js

@@ -0,0 +1,34 @@
+/**
+ * OpenClaw: event-only. Its plugin bundles the V3 producer and never runs the
+ * hook CLI, so every hook-process effect is off and telemetry is native only.
+ */
+export const openclawBehavior = {
+    id: "openclaw",
+    sessionStartPlatformLabel: undefined,
+    soundEffects: false,
+    journalMaintenance: false,
+    sessionTelemetrySync: false,
+    promptPresenceDetection: false,
+    promptContextNudges: {
+        taskNudge: false,
+        hostPromptReminder: false,
+        statusFooterNudge: false,
+        turnRitualNudge: undefined,
+    },
+    completedResponseEvent: undefined,
+    sessionIdentityOnStartOnly: false,
+    nativeTurnIdOptional: false,
+    tracksExecutionMode: false,
+    shellOperationDedup: false,
+    promptMayPrecedeSessionStart: false,
+    promptContinuesOpenTurn: false,
+    turnRecovery: true,
+    nativeTelemetryOnly: true,
+    runtimeContextTranscriptOptional: false,
+    runtimeContextRetry: false,
+    effortAttestation: "none",
+    transcriptTuningRefresh: false,
+    modelProvider: "openclaw",
+    runtimeContextAvailable: () => false,
+    bridgeFor: () => undefined,
+};

package/dist/core/hooks/adapter/behaviors/opencode.d.ts

@@ -0,0 +1,7 @@
+import type { AdapterBehavior } from "./types.js";
+/**
+ * OpenCode: events arrive through the Harnery plugin bridging to agent-hook.
+ * No host-side effects, no exit-code enforcement, no effort dial.
+ */
+export declare const opencodeBehavior: AdapterBehavior;
+//# sourceMappingURL=opencode.d.ts.map

package/dist/core/hooks/adapter/behaviors/opencode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,eA6B9B,CAAC"}

package/dist/core/hooks/adapter/behaviors/opencode.js

@@ -0,0 +1,34 @@
+/**
+ * OpenCode: events arrive through the Harnery plugin bridging to agent-hook.
+ * No host-side effects, no exit-code enforcement, no effort dial.
+ */
+export const opencodeBehavior = {
+    id: "opencode",
+    sessionStartPlatformLabel: "OpenCode",
+    soundEffects: false,
+    journalMaintenance: false,
+    sessionTelemetrySync: false,
+    promptPresenceDetection: false,
+    promptContextNudges: {
+        taskNudge: false,
+        hostPromptReminder: false,
+        statusFooterNudge: false,
+        turnRitualNudge: undefined,
+    },
+    completedResponseEvent: undefined,
+    sessionIdentityOnStartOnly: false,
+    nativeTurnIdOptional: false,
+    tracksExecutionMode: false,
+    shellOperationDedup: false,
+    promptMayPrecedeSessionStart: false,
+    promptContinuesOpenTurn: false,
+    turnRecovery: false,
+    nativeTelemetryOnly: false,
+    runtimeContextTranscriptOptional: false,
+    runtimeContextRetry: false,
+    effortAttestation: "none",
+    transcriptTuningRefresh: false,
+    modelProvider: "opencode",
+    runtimeContextAvailable: () => true,
+    bridgeFor: () => undefined,
+};

package/dist/core/hooks/adapter/behaviors/types.d.ts

@@ -0,0 +1,89 @@
+import type { Adapter } from "../../../adapter.js";
+import type { EventAdapterIdV3 } from "../../../events/v3/adapter-id.js";
+import type { CodexWslFileLinkTelemetry } from "../../codex-wsl-bridge.js";
+import type { ParsedPayload } from "../parse.js";
+import type { RuntimeTelemetryOptions } from "../runtime-telemetry.js";
+/** Flags passed to the prompt-context renderer on every user prompt. */
+export interface PromptContextNudges {
+    taskNudge: boolean;
+    hostPromptReminder: boolean;
+    statusFooterNudge: boolean;
+    turnRitualNudge: Adapter | undefined;
+}
+/** Inputs for the cross-shell safety inspection on a tool request. */
+export interface CrossShellInput {
+    cwd: unknown;
+    toolName: string | undefined;
+    toolInput: unknown;
+}
+/** Where a producer learns the effective effort/speed dial from. */
+export type EffortAttestationSource = "payload" | "rollout-probe" | "none";
+/**
+ * Everything the hook CLI and the V3 producer decide per adapter. Each
+ * adapter owns one module under this directory; `adapterBehavior(id)` is the
+ * only lookup, so the middle of the pipeline never branches on an adapter id.
+ *
+ * Every field is a decision the shared code used to make with an equality
+ * check. Booleans are effect gates, strings are labels, and the optional
+ * methods are adapter-native helpers that only exist for that adapter.
+ */
+export interface AdapterBehavior {
+    readonly id: EventAdapterIdV3;
+    /** Label shown in the session-start context; `undefined` means the host default. */
+    readonly sessionStartPlatformLabel: string | undefined;
+    /** The hook process plays notification sounds (kill-switch independent). */
+    readonly soundEffects: boolean;
+    /** Journal janitor at start, recovery cue in the start context, archive at end. */
+    readonly journalMaintenance: boolean;
+    /** Session telemetry sync extension at session end and on stop. */
+    readonly sessionTelemetrySync: boolean;
+    /** Presence (mobile vs office) is inferred from the submitted prompt text. */
+    readonly promptPresenceDetection: boolean;
+    readonly promptContextNudges: PromptContextNudges;
+    /** Hook event that carries the completed assistant reply, when stop lacks it. */
+    readonly completedResponseEvent: string | undefined;
+    /** Native session identity arrives only on the start signal; later hooks join by instance. */
+    readonly sessionIdentityOnStartOnly: boolean;
+    /** A terminal or telemetry probe may proceed without a native turn id. */
+    readonly nativeTurnIdOptional: boolean;
+    /** The producer tracks a native execution mode (local/cloud) in its state. */
+    readonly tracksExecutionMode: boolean;
+    /** Shell hooks may deliver the same command twice; dedupe by a command fingerprint. */
+    readonly shellOperationDedup: boolean;
+    /** The native prompt signal can arrive before session start and is a trusted boundary. */
+    readonly promptMayPrecedeSessionStart: boolean;
+    /** A prompt signal inside an open turn continues that turn instead of starting a new one. */
+    readonly promptContinuesOpenTurn: boolean;
+    /** Missed hook signals may be recovered into derived turns and spans. */
+    readonly turnRecovery: boolean;
+    /** Turn telemetry comes only from the native payload; no runtime transcript read. */
+    readonly nativeTelemetryOnly: boolean;
+    /** Runtime context telemetry does not require a transcript path. */
+    readonly runtimeContextTranscriptOptional: boolean;
+    /** Late runtime-context samples are retried after stop (rollout flush lag). */
+    readonly runtimeContextRetry: boolean;
+    readonly effortAttestation: EffortAttestationSource;
+    /** After a payload effort change, refresh speed and model from the transcript row. */
+    readonly transcriptTuningRefresh: boolean;
+    /** Provider label attached to attested model identity. */
+    readonly modelProvider: string;
+    /** Whether runtime context can be read at all under the given execution mode. */
+    runtimeContextAvailable(executionMode: string | undefined): boolean;
+    /** Bridge descriptor stamped on events when the payload cwd shows a bridged deployment. */
+    bridgeFor(cwd: unknown): "codex-wsl" | undefined;
+    /** Locate (or verify) the session transcript when hook payloads omit `transcript_path`. */
+    discoverTranscript?(nativeSessionId: string, candidate?: string, options?: RuntimeTelemetryOptions): string | undefined;
+    /** Privacy-safe environment provenance recorded when a session onboards mid-flight. */
+    midFlightDiagnosticContext?(payload: ParsedPayload): Record<string, string | boolean>;
+    /** Completed-reply text supplied inline on tool hooks (no transcript needed). */
+    inlineAssistantText?(payload: ParsedPayload | null): string | undefined;
+    /** Extra turn.completed telemetry about file links under a bridged deployment. */
+    fileLinkTelemetry?(coordRoot: string, cwd: unknown, lastAssistantMessage: string): CodexWslFileLinkTelemetry | null;
+    /** Context block teaching the agent how file links resolve under a bridge. */
+    fileLinkContext?(coordRoot: string, cwd: unknown): string;
+    /** Warning appended to the session-start context when the bridge is misconfigured. */
+    bridgeWarning?(coordRoot: string, cwd: unknown): string | undefined;
+    /** Deny reason for a tool call whose shell shape is unsafe under the bridge. */
+    unsafeCrossShellReason?(input: CrossShellInput): string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/hooks/adapter/behaviors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/hooks/adapter/behaviors/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEvE,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,GAAG,SAAS,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,eAAe,GAAG,MAAM,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,gBAAgB,CAAC;IAG9B,oFAAoF;IACpF,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,8EAA8E;IAC9E,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAGlD,iFAAiF;IACjF,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,8FAA8F;IAC9F,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,0EAA0E;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,8EAA8E;IAC9E,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,0FAA0F;IAC1F,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;IAC/C,6FAA6F;IAC7F,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAG/B,qFAAqF;IACrF,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,CAAC;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,sFAAsF;IACtF,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iFAAiF;IACjF,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAGpE,2FAA2F;IAC3F,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IAGjD,2FAA2F;IAC3F,kBAAkB,CAAC,CACjB,eAAe,EAAE,MAAM,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,uBAAuB,GAChC,MAAM,GAAG,SAAS,CAAC;IACtB,uFAAuF;IACvF,0BAA0B,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACtF,iFAAiF;IACjF,mBAAmB,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;IACxE,kFAAkF;IAClF,iBAAiB,CAAC,CAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,OAAO,EACZ,oBAAoB,EAAE,MAAM,GAC3B,yBAAyB,GAAG,IAAI,CAAC;IACpC,8EAA8E;IAC9E,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1D,sFAAsF;IACtF,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACpE,gFAAgF;IAChF,sBAAsB,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAAC;CAChE"}

package/dist/core/hooks/adapter/behaviors/types.js

@@ -0,0 +1 @@
+export {};

package/dist/core/hooks/adapter/detect.d.ts

@@ -1,4 +1,4 @@
-import type { Adapter } from "../../adapter.js";
+import { type Adapter } from "../../adapter.js";
 /**
  * Resolve the adapter firing the hook. The dispatcher binary is always
  * invoked with `--adapter <name>` per the current wiring in each adapter's

package/dist/core/hooks/adapter/detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/detect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GAAG,IAAI,CAWrE;AAOD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS1F"}
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/detect.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,OAAO,EAAoB,MAAM,kBAAkB,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GAAG,IAAI,CAWrE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS1F"}

package/dist/core/hooks/adapter/detect.js

@@ -1,4 +1,5 @@
 import { coordEnv } from "../../../lib/env.js";
+import { normalizeAdapter } from "../../adapter.js";
 /**
  * Resolve the adapter firing the hook. The dispatcher binary is always
  * invoked with `--adapter <name>` per the current wiring in each adapter's
@@ -18,9 +19,7 @@ export function detectAdapter(argv) {
     return validate(coordEnv("AGENT_COORD_ADAPTER"));
 }
 function validate(v) {
-    if (v === "claude-code" || v === "cursor" || v === "codex")
-        return v;
-    return null;
+    return normalizeAdapter(v);
 }
 /**
  * On a host wired for multiple adapters, Cursor also executes the Claude Code

package/dist/core/hooks/adapter/events.d.ts

@@ -22,13 +22,32 @@ export interface HookEvent {
  * - `cursor`: `[{ command }]` (Cursor: flat entry, no inner `hooks` array)
  */
 export type HookEntryShape = "claude" | "cursor";
+/**
+ * How `harn init` installs this adapter's lifecycle capture:
+ * - `settings-hooks` (default): merge `agent-hook <subcommand>` command hooks
+ *   into a settings file's `hooks` map (Claude Code, Codex, Cursor).
+ * - `opencode-plugin`: OpenCode V2 has no command-hook file; interception is an
+ *   in-process plugin. `init` copies the Harnery plugin into the auto-discovered
+ *   `.opencode/plugins/harnery/` directory (entry `index.ts` + `harnery.json`),
+ *   and wiring inspection checks that owned file rather than a `hooks` map. The
+ *   plugin bridges each lifecycle hook to `agent-hook <subcommand> --adapter
+ *   opencode`, so `events` still names the subcommands it delivers.
+ */
+export type AdapterInstallMode = "settings-hooks" | "opencode-plugin";
 export interface AdapterSpec {
-    /** Settings file to wire, relative to the project root. */
+    /**
+     * Settings file to wire, relative to the project root. For the
+     * `opencode-plugin` install mode this is the installed plugin entry file.
+     */
     settingsFile: string;
     /** Events this adapter fires, mapped to agent-hook subcommands. */
     events: HookEvent[];
     /** Per-entry encoding under the root `hooks` object. */
     entryShape: HookEntryShape;
+    /** Install mechanism; absent means the default settings-file command hooks. */
+    installMode?: AdapterInstallMode;
+    /** For `opencode-plugin`: the plugin id OpenCode reports for the installed plugin. */
+    pluginId?: string;
     /** When set, ensure this top-level `version` key in the file (Cursor requires `1`). */
     rootVersion?: number;
     /** Adapter-owned entries from older specs that `init` should remove during migration. */
@@ -44,6 +63,23 @@ export interface AdapterSpec {
      * wandered (the session shell `cd`ing into a subdirectory or off-repo).
      */
     projectDirEnv?: string;
+    /**
+     * Per-handler `timeout` (seconds) written on every Harnery hook entry. Without
+     * one, an adapter's own default applies (Codex: 600 seconds), so a stalled
+     * hook can hold a tool call for ten minutes. `bySubcommand` overrides
+     * `default` for one event.
+     */
+    hookTimeouts?: {
+        default: number;
+        bySubcommand?: Record<string, number>;
+    };
+    /**
+     * The adapter runs a handler's `commandWindows` instead of `command` on
+     * Windows. A project that opts in (`hooks.codexWindowsBridge`) gets one that
+     * hands the hook to a resident WSL bridge (ADR 0197); otherwise init leaves
+     * the field off.
+     */
+    windowsBridgeHooks?: boolean;
 }
 /** Claude Code: `.claude/settings.json`. */
 export declare const CLAUDE_CODE_EVENTS: HookEvent[];
@@ -59,6 +95,15 @@ export declare const CURSOR_EVENTS: HookEvent[];
 export declare const CODEX_EVENTS: HookEvent[];
 /** Entries written by harnery before Codex adopted a strict native hook schema. */
 export declare const LEGACY_CODEX_EVENTS: HookEvent[];
+/**
+ * OpenCode V2: delivered by the Harnery OpenCode plugin, which registers
+ * in-process hooks and bridges each to `agent-hook <subcommand> --adapter
+ * opencode`. There is no settings-file `hooks` map; `settingsKey` here is the
+ * originating OpenCode plugin hook, kept for documentation. `post-compact` is
+ * omitted because OpenCode post-compaction recovery is not yet certified. The
+ * plugin source (`opencode-plugin/src/index.ts`) carries the same map.
+ */
+export declare const OPENCODE_EVENTS: HookEvent[];
 /** Every hook key accepted by Codex's current native hook schema. */
 export declare const CODEX_ALLOWED_EVENT_KEYS: string[];
 /** Every supported adapter, fully wireable by `harn init`. */

package/dist/core/hooks/adapter/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,OAAO,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAczC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAcpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAYnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAG1C,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,UAYpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAqBxD,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,OAAO,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC1E;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAczC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAcpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAYnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAG1C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,EAatC,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,UAYpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAmCxD,CAAC"}

package/dist/core/hooks/adapter/events.js

@@ -65,6 +65,28 @@ export const LEGACY_CODEX_EVENTS = [
     { settingsKey: "PostToolUseFailure", subcommand: "post-tool-use-failure" },
     { settingsKey: "StopFailure", subcommand: "stop-failure" },
 ];
+/**
+ * OpenCode V2: delivered by the Harnery OpenCode plugin, which registers
+ * in-process hooks and bridges each to `agent-hook <subcommand> --adapter
+ * opencode`. There is no settings-file `hooks` map; `settingsKey` here is the
+ * originating OpenCode plugin hook, kept for documentation. `post-compact` is
+ * omitted because OpenCode post-compaction recovery is not yet certified. The
+ * plugin source (`opencode-plugin/src/index.ts`) carries the same map.
+ */
+export const OPENCODE_EVENTS = [
+    { settingsKey: "event:session.created", subcommand: "session-start" },
+    { settingsKey: "session.hook:prompt", subcommand: "user-prompt-submit" },
+    { settingsKey: "tool.hook:execute.before", subcommand: "pre-tool-use" },
+    { settingsKey: "tool.hook:execute.after", subcommand: "post-tool-use" },
+    { settingsKey: "tool.hook:execute.after:error", subcommand: "post-tool-use-failure" },
+    { settingsKey: "permission.hook:evaluate", subcommand: "permission-request" },
+    { settingsKey: "event:session.created:child", subcommand: "sub-agent-start" },
+    { settingsKey: "event:session.execution.*:child", subcommand: "sub-agent-stop" },
+    { settingsKey: "event:session.execution.succeeded", subcommand: "stop" },
+    { settingsKey: "event:session.execution.failed|interrupted", subcommand: "stop-failure" },
+    { settingsKey: "event:session.deleted", subcommand: "session-end" },
+    { settingsKey: "session.hook:compaction", subcommand: "pre-compact" },
+];
 /** Every hook key accepted by Codex's current native hook schema. */
 export const CODEX_ALLOWED_EVENT_KEYS = [
     "SessionStart",
@@ -100,5 +122,19 @@ export const ADAPTER_SPECS = {
         legacyEvents: LEGACY_CODEX_EVENTS,
         allowedTopLevelKeys: ["description", "hooks"],
         allowedEventKeys: CODEX_ALLOWED_EVENT_KEYS,
+        // A Codex hook that times out fails open: the run is marked failed and
+        // the tool proceeds. Codex clamps SessionEnd to 3 seconds and defaults it
+        // to 1, which is too short for a cold hook start.
+        hookTimeouts: { default: 20, bySubcommand: { "session-end": 3 } },
+        windowsBridgeHooks: true,
+    },
+    opencode: {
+        settingsFile: ".opencode/plugins/harnery/index.ts",
+        events: OPENCODE_EVENTS,
+        // entryShape is unused for the plugin install mode but required by the type;
+        // the plugin, not a hooks-map entry, carries the wiring.
+        entryShape: "claude",
+        installMode: "opencode-plugin",
+        pluginId: "harnery",
     },
 };

package/dist/core/hooks/adapter/opencode-plugin.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Install-side owner of the OpenCode plugin files: what `harn init --adapter
+ * opencode` writes, what `--check`/`doctor` compare against, and what `deinit`
+ * removes. The plugin itself lives in `opencode-plugin/src/index.ts` and is
+ * copied verbatim under a hash-stamped ownership header, the same fully-owned
+ * file contract as the shipped skills (`lib/instructions/splice.ts`).
+ *
+ * Layout under the project root (`ADAPTER_SPECS.opencode.settingsFile` names
+ * the entry file):
+ *
+ *   .opencode/plugins/harnery/index.ts    # the plugin, header + verbatim source
+ *   .opencode/plugins/harnery/harnery.json # { schema, agentHook } written by init
+ *
+ * OpenCode auto-discovers every directory under `.opencode/plugins/`, so no
+ * `opencode.json` edit is needed and a configured-plugin entry is never
+ * written (OpenCode also refuses a configured local *file*; only directories
+ * load that way).
+ */
+export declare const OPENCODE_PLUGIN_ENTRY: string;
+export declare const OPENCODE_PLUGIN_DIR: string;
+export declare const OPENCODE_PLUGIN_CONFIG: string;
+export declare const OPENCODE_PLUGIN_CONFIG_SCHEMA = "harnery-opencode-plugin/v1";
+/** The plugin source as shipped, trimmed so header + body hashing is stable. */
+export declare function openCodePluginSource(): string;
+/** Render the installed entry file: ownership header, then the verbatim source. */
+export declare function renderOpenCodePluginEntry(binName: string, source?: string): string;
+/** Render the sibling config the plugin reads to find the `agent-hook` launcher. */
+export declare function renderOpenCodePluginConfig(agentHook: string): string;
+/** True when the content carries harnery's plugin ownership header. */
+export declare function isOwnedOpenCodePlugin(content: string): boolean;
+export type OpenCodePluginStatus = "missing" | "fresh" | "stale" | "foreign";
+export interface OpenCodePluginCheck {
+    status: OpenCodePluginStatus;
+    /** Human-readable drift reasons, one per problem; empty when fresh or missing. */
+    issues: string[];
+}
+/**
+ * Compare the installed plugin files with what init would write now. Pure
+ * except for reads; never writes. `foreign` means an entry file exists at the
+ * harnery path without harnery's header, which init refuses to overwrite.
+ */
+export declare function checkOpenCodePlugin(projectRoot: string, expected: {
+    binName: string;
+    agentHook: string;
+    source?: string;
+}): OpenCodePluginCheck;
+export interface OpenCodePluginInstall {
+    actions: string[];
+    /** Set when init must stop: a foreign file sits at the harnery path. */
+    error?: string;
+}
+/** Write (or refresh) the plugin directory. Idempotent; a fresh install is a no-op. */
+export declare function installOpenCodePlugin(projectRoot: string, opts: {
+    binName: string;
+    agentHook: string;
+    dryRun: boolean;
+}): OpenCodePluginInstall;
+/** Remove the plugin directory when harnery owns it. Leaves a foreign file alone. */
+export declare function removeOpenCodePlugin(projectRoot: string, dryRun: boolean): string[];
+//# sourceMappingURL=opencode-plugin.d.ts.map

package/dist/core/hooks/adapter/opencode-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-plugin.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/opencode-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,eAAO,MAAM,qBAAqB,QAAsC,CAAC;AACzE,eAAO,MAAM,mBAAmB,QAAiC,CAAC;AAClE,eAAO,MAAM,sBAAsB,QAAwC,CAAC;AAC5E,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAgB1E,gFAAgF;AAChF,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,mFAAmF;AACnF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,SAAyB,GAC9B,MAAM,CAOR;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,kFAAkF;IAClF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,mBAAmB,CAwBrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5D,qBAAqB,CAqCvB;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAYnF"}