harnery 0.40.0 → 0.42.0

package/dist/core/hooks/adapter/opencode-plugin.js

@@ -0,0 +1,129 @@
+/**
+ * Install-side owner of the OpenCode plugin files: what `harn init --adapter
+ * opencode` writes, what `--check`/`doctor` compare against, and what `deinit`
+ * removes. The plugin itself lives in `opencode-plugin/src/index.ts` and is
+ * copied verbatim under a hash-stamped ownership header, the same fully-owned
+ * file contract as the shipped skills (`lib/instructions/splice.ts`).
+ *
+ * Layout under the project root (`ADAPTER_SPECS.opencode.settingsFile` names
+ * the entry file):
+ *
+ *   .opencode/plugins/harnery/index.ts    # the plugin, header + verbatim source
+ *   .opencode/plugins/harnery/harnery.json # { schema, agentHook } written by init
+ *
+ * OpenCode auto-discovers every directory under `.opencode/plugins/`, so no
+ * `opencode.json` edit is needed and a configured-plugin entry is never
+ * written (OpenCode also refuses a configured local *file*; only directories
+ * load that way).
+ */
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { shortHash } from "../../../lib/instructions/splice.js";
+import { ADAPTER_SPECS } from "./events.js";
+export const OPENCODE_PLUGIN_ENTRY = ADAPTER_SPECS.opencode.settingsFile;
+export const OPENCODE_PLUGIN_DIR = dirname(OPENCODE_PLUGIN_ENTRY);
+export const OPENCODE_PLUGIN_CONFIG = `${OPENCODE_PLUGIN_DIR}/harnery.json`;
+export const OPENCODE_PLUGIN_CONFIG_SCHEMA = "harnery-opencode-plugin/v1";
+const HEADER_RE = /^\/\/ harnery:generated opencode-plugin v=([0-9a-f]{8});[^\n]*\n/;
+/** Package-relative path of the shipped plugin source (also listed in `files`). */
+const PLUGIN_SOURCE = resolve(dirname(fileURLToPath(import.meta.url)), "..", "..", "..", "..", "opencode-plugin", "src", "index.ts");
+/** The plugin source as shipped, trimmed so header + body hashing is stable. */
+export function openCodePluginSource() {
+    return readFileSync(PLUGIN_SOURCE, "utf8").trim();
+}
+/** Render the installed entry file: ownership header, then the verbatim source. */
+export function renderOpenCodePluginEntry(binName, source = openCodePluginSource()) {
+    const body = source.trim();
+    const header = `// harnery:generated opencode-plugin v=${shortHash(body)}; machine-owned; ` +
+        `regenerated by \`${binName} init --adapter opencode\`, removed by \`${binName} deinit --adapter opencode\`. ` +
+        "Edit harnery's opencode-plugin/src/index.ts, not this file.";
+    return `${header}\n${body}\n`;
+}
+/** Render the sibling config the plugin reads to find the `agent-hook` launcher. */
+export function renderOpenCodePluginConfig(agentHook) {
+    return `${JSON.stringify({ schema: OPENCODE_PLUGIN_CONFIG_SCHEMA, agentHook }, null, 2)}\n`;
+}
+/** True when the content carries harnery's plugin ownership header. */
+export function isOwnedOpenCodePlugin(content) {
+    return HEADER_RE.test(content);
+}
+/**
+ * Compare the installed plugin files with what init would write now. Pure
+ * except for reads; never writes. `foreign` means an entry file exists at the
+ * harnery path without harnery's header, which init refuses to overwrite.
+ */
+export function checkOpenCodePlugin(projectRoot, expected) {
+    const entryPath = resolve(projectRoot, OPENCODE_PLUGIN_ENTRY);
+    const configPath = resolve(projectRoot, OPENCODE_PLUGIN_CONFIG);
+    if (!existsSync(entryPath))
+        return { status: "missing", issues: [] };
+    const content = readFileSync(entryPath, "utf8");
+    const match = HEADER_RE.exec(content);
+    if (!match) {
+        return {
+            status: "foreign",
+            issues: [`${OPENCODE_PLUGIN_ENTRY}: exists without harnery's ownership header`],
+        };
+    }
+    const issues = [];
+    const body = content.slice(match[0].length).trim();
+    const fresh = (expected.source ?? openCodePluginSource()).trim();
+    if (match[1] !== shortHash(fresh) || body !== fresh) {
+        issues.push(`${OPENCODE_PLUGIN_ENTRY}: plugin source is stale (re-run init)`);
+    }
+    if (!existsSync(configPath)) {
+        issues.push(`${OPENCODE_PLUGIN_CONFIG}: missing`);
+    }
+    else if (readFileSync(configPath, "utf8") !== renderOpenCodePluginConfig(expected.agentHook)) {
+        issues.push(`${OPENCODE_PLUGIN_CONFIG}: stale agent-hook launcher (re-run init)`);
+    }
+    return { status: issues.length === 0 ? "fresh" : "stale", issues };
+}
+/** Write (or refresh) the plugin directory. Idempotent; a fresh install is a no-op. */
+export function installOpenCodePlugin(projectRoot, opts) {
+    const check = checkOpenCodePlugin(projectRoot, opts);
+    if (check.status === "foreign") {
+        return {
+            actions: [],
+            error: `✗ ${OPENCODE_PLUGIN_ENTRY} exists but is not harnery's plugin; refusing to overwrite. ` +
+                "Move it aside and re-run.",
+        };
+    }
+    if (check.status === "fresh") {
+        return { actions: [`· opencode plugin already installed at ${OPENCODE_PLUGIN_DIR}/`] };
+    }
+    const verb = check.status === "missing" ? "install" : "refresh";
+    if (opts.dryRun) {
+        return {
+            actions: [
+                `+ would ${verb} the opencode plugin at ${OPENCODE_PLUGIN_DIR}/ (index.ts + harnery.json)`,
+                ...check.issues.map((issue) => `  · ${issue}`),
+            ],
+        };
+    }
+    const dir = resolve(projectRoot, OPENCODE_PLUGIN_DIR);
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(resolve(projectRoot, OPENCODE_PLUGIN_ENTRY), renderOpenCodePluginEntry(opts.binName));
+    writeFileSync(resolve(projectRoot, OPENCODE_PLUGIN_CONFIG), renderOpenCodePluginConfig(opts.agentHook));
+    return {
+        actions: [
+            `+ ${verb === "install" ? "installed" : "refreshed"} the opencode plugin at ${OPENCODE_PLUGIN_DIR}/ (index.ts + harnery.json)`,
+        ],
+    };
+}
+/** Remove the plugin directory when harnery owns it. Leaves a foreign file alone. */
+export function removeOpenCodePlugin(projectRoot, dryRun) {
+    const dir = resolve(projectRoot, OPENCODE_PLUGIN_DIR);
+    const entryPath = resolve(projectRoot, OPENCODE_PLUGIN_ENTRY);
+    if (!existsSync(entryPath)) {
+        return [`· ${OPENCODE_PLUGIN_DIR}/ doesn't exist; no plugin to remove`];
+    }
+    if (!isOwnedOpenCodePlugin(readFileSync(entryPath, "utf8"))) {
+        return [`· ${OPENCODE_PLUGIN_ENTRY} is not harnery's plugin; left in place`];
+    }
+    if (dryRun)
+        return [`+ would remove ${OPENCODE_PLUGIN_DIR}/ (harnery-owned plugin)`];
+    rmSync(dir, { recursive: true, force: true });
+    return [`+ removed ${OPENCODE_PLUGIN_DIR}/ (harnery-owned plugin)`];
+}

package/dist/core/hooks/adapter/output.d.ts

@@ -14,6 +14,9 @@
  * - **Codex**: structurally identical to Claude Code for context and tool
  *   denials. Stop blocks are deliberately suppressed because their automatic
  *   continuation can replace a completed user-facing answer.
+ * - **OpenCode**: the Harnery OpenCode plugin reads the Claude Code envelope
+ *   (`hookSpecificOutput.additionalContext` / `permissionDecision`) and feeds
+ *   it back through OpenCode's own channels. Stop blocks are suppressed.
  *
  * Every helper writes to process.stdout + newline-terminates so callers can
  * fire-and-forget. Empty text is a no-op.
@@ -46,6 +49,10 @@ export declare function emitDeny(adapter: Adapter, reason: string): void;
  *   answer in clients that retain only the final continuation response. Return
  *   success without output as a defense in depth behind the observe-only
  *   verdict in `agents/rules/stop-hook.ts`.
+ * - **OpenCode** has no blocking Stop channel at all: the plugin observes
+ *   `session.execution.succeeded` after the turn has already completed, so a
+ *   block could only arrive as a new message. Return success without output;
+ *   the verdict is still recorded in the ledger.
  * - **Cursor** ignores stop-hook exit codes (non-zero = fail-open, the turn
  *   proceeds) and re-prompts ONLY via a `followup_message` field in stdout
  *   JSON, which it auto-submits as the next user message: the sanctioned

package/dist/core/hooks/adapter/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIhD,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,aAAa,CAAC;AAElB,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1C,SAAS,CAAC,EAAE,MAAM,GACjB,CAAC,GAAG,CAAC,CAEP;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,CAAC,GAAG,CAAC,CAuBP"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIhD,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,aAAa,CAAC;AAElB,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1C,SAAS,CAAC,EAAE,MAAM,GACjB,CAAC,GAAG,CAAC,CAEP;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,CAAC,GAAG,CAAC,CAuBP"}

package/dist/core/hooks/adapter/output.js

@@ -14,6 +14,9 @@
  * - **Codex**: structurally identical to Claude Code for context and tool
  *   denials. Stop blocks are deliberately suppressed because their automatic
  *   continuation can replace a completed user-facing answer.
+ * - **OpenCode**: the Harnery OpenCode plugin reads the Claude Code envelope
+ *   (`hookSpecificOutput.additionalContext` / `permissionDecision`) and feeds
+ *   it back through OpenCode's own channels. Stop blocks are suppressed.
  *
  * Every helper writes to process.stdout + newline-terminates so callers can
  * fire-and-forget. Empty text is a no-op.
@@ -50,6 +53,10 @@ export function emitDeny(adapter, reason) {
  *   answer in clients that retain only the final continuation response. Return
  *   success without output as a defense in depth behind the observe-only
  *   verdict in `agents/rules/stop-hook.ts`.
+ * - **OpenCode** has no blocking Stop channel at all: the plugin observes
+ *   `session.execution.succeeded` after the turn has already completed, so a
+ *   block could only arrive as a new message. Return success without output;
+ *   the verdict is still recorded in the ledger.
  * - **Cursor** ignores stop-hook exit codes (non-zero = fail-open, the turn
  *   proceeds) and re-prompts ONLY via a `followup_message` field in stdout
  *   JSON, which it auto-submits as the next user message: the sanctioned
@@ -64,7 +71,7 @@ export function emitStopBlock(adapter, verdict, coordRoot) {
  * Emit the adapter-specific response for one Stop outcome.
  */
 export function emitStopOutcome(adapter, options, coordRoot) {
-    if (adapter === "codex")
+    if (adapter === "codex" || adapter === "opencode")
         return 0;
     const verdict = options.verdict;
     if (!verdict)

package/dist/core/hooks/adapter/runtime-telemetry.js

@@ -409,7 +409,9 @@ function claudeModelContextCapability(model) {
     const normalized = model.toLowerCase();
     const oneMillionTokenModels = new Set([
         "claude-fable-5",
+        "claude-opus-5-5",
         "claude-opus-5",
+        "claude-sonnet-5-5",
         "claude-sonnet-5",
         "claude-opus-4-8",
         "claude-opus-4-7",
@@ -417,7 +419,7 @@ function claudeModelContextCapability(model) {
         "claude-sonnet-4-6",
     ]);
     if (oneMillionTokenModels.has(normalized)) {
-        return { limit_tokens: 1_000_000, authority: "anthropic_model_capabilities_2026_08" };
+        return { limit_tokens: 1_000_000, authority: "anthropic_model_capabilities_2026_09" };
     }
     if (normalized === "claude-haiku-4-5" || normalized === "claude-haiku-4-5-20251001") {
         return { limit_tokens: 200_000, authority: "anthropic_model_capabilities_2026_08" };

package/dist/core/hooks/adapter/wiring.d.ts

@@ -11,21 +11,30 @@
  * — there's exactly one definition of the `agent-hook <subcommand>` match.
  */
 import { type AdapterId, type AdapterSpec, type HookEntryShape, type HookEvent } from "./events.js";
-/** Claude Code + Codex entry: `{ hooks: [{ type, command }] }`. */
+/** One Claude Code or Codex command handler. */
+export interface ClaudeHookHandler {
+    type: string;
+    command: string;
+    /** Codex: run instead of `command` on Windows. */
+    commandWindows?: string;
+    timeout?: number;
+}
+/** Claude Code + Codex entry: `{ hooks: [{ type, command, commandWindows?, timeout? }] }`. */
 export interface ClaudeHookGroup {
     matcher?: string;
-    hooks: {
-        type: string;
-        command: string;
-    }[];
+    hooks: ClaudeHookHandler[];
 }
 /** Cursor entry: a flat `{ command }`. */
 export interface CursorHookGroup {
     command: string;
     type?: string;
     matcher?: string;
+    /** Cursor Stop followup cap. Harnery pins 2; Cursor's own default is 5. */
+    loop_limit?: number;
 }
 export type HookGroup = ClaudeHookGroup | CursorHookGroup;
+/** Bound Cursor Stop `followup_message` retries so a missed ritual cannot loop 5 times. */
+export declare const CURSOR_STOP_FOLLOWUP_LOOP_LIMIT = 2;
 export interface SettingsFile {
     version?: number;
     description?: string;
@@ -33,7 +42,36 @@ export interface SettingsFile {
     [k: string]: unknown;
 }
 /** Build a hook entry in the adapter's shape. */
-export declare function makeEntry(shape: HookEntryShape, command: string): HookGroup;
+export declare function makeEntry(shape: HookEntryShape, command: string, extras?: {
+    loop_limit?: number;
+    timeout?: number;
+    commandWindows?: string;
+}): HookGroup;
+/**
+ * Rebuild a handler with Harnery's fields first in a fixed order, dropping
+ * undefined ones and keeping any other fields after them.
+ */
+export declare function orderHandlerKeys(handler: ClaudeHookHandler): ClaudeHookHandler;
+/**
+ * The Windows command for an opted-in project (ADR 0197). It hands the hook to
+ * the bridge entry point when that is on PATH and the working directory is a
+ * WSL UNC path, and otherwise runs the usual command. `ProviderPath` drops the
+ * provider prefix that `Path` carries. The trailing `exit $LASTEXITCODE` is
+ * required: without it PowerShell reports any non-zero exit from inside the
+ * `if` block as 1, which would turn a hook's blocking exit 2 into a failure.
+ */
+export declare function hookCommandWindows(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, entryPoint: string): string;
+/** Project-level choices that change what init writes. */
+export interface WiringOptions {
+    /** Bridge entry point from `hooks.codexWindowsBridge`, or null when not opted in. */
+    windowsBridgeEntryPoint?: string | null;
+}
+/** The `commandWindows` init writes for one event, or undefined for none. */
+export declare function expectedCommandWindows(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, options?: WiringOptions): string | undefined;
+/** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
+export declare function hookTimeoutFor(spec: AdapterSpec, subcommand: string): number | undefined;
+/** Pin Cursor Stop followups to Harnery's loop cap. Returns true when the entry changed. */
+export declare function applyCursorStopLoopLimit(group: HookGroup, subcommand: string): boolean;
 /** Pull every command string out of a hook entry, regardless of shape. */
 export declare function groupCommands(group: HookGroup): string[];
 /**
@@ -68,7 +106,7 @@ export interface WiringDiff {
     duplicates: HookEvent[];
     /** Spec events wired under an event key other than the canonical one. */
     misplaced: HookEvent[];
-    /** Spec events whose correct-key command differs from init's canonical command. */
+    /** Spec events whose correct-key command, `commandWindows`, or `timeout` differs from what init writes. */
     stale: HookEvent[];
     /** Settings fields rejected by a adapter with a strict top-level schema. */
     invalidTopLevelKeys: string[];
@@ -82,7 +120,7 @@ export interface WiringDiff {
 export declare function diffWiring(settings: SettingsFile, spec: AdapterSpec, expected?: {
     agentHookPath: string;
     adapter: AdapterId;
-}): WiringDiff;
+} & WiringOptions): WiringDiff;
 export interface AdapterWiringStatus {
     adapter: AdapterId;
     /** Settings file path, relative to the project root. */
@@ -95,6 +133,12 @@ export interface AdapterWiringStatus {
     invalidTopLevelKeys: string[];
     invalidEventKeys: string[];
     parseError?: string;
+    /**
+     * `opencode-plugin` install mode only: why the installed plugin differs from
+     * what init writes now (stale source, missing/stale `harnery.json`, or a
+     * foreign file at the harnery path). Hook-map fields stay empty for it.
+     */
+    pluginIssues?: string[];
 }
 /**
  * Inspect every adapter whose settings file exists under `projectRoot` and

package/dist/core/hooks/adapter/wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5C;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAE3E;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,GACjB,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAOxF;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,mFAAmF;IACnF,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GACvD,UAAU,CAoEZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CA2D5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAkBhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,2FAA2F;AAC3F,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CACvB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,SAAS,CAgBX;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAMR;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,GACjB,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAOxF;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,GACvE,UAAU,CAwFZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAyD5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA8BhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}

package/dist/core/hooks/adapter/wiring.js

@@ -13,10 +13,78 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
+import { codexWindowsBridgeConfig, resolveBinName } from "../../config.js";
 import { ADAPTER_SPECS, } from "./events.js";
+import { checkOpenCodePlugin, isOwnedOpenCodePlugin } from "./opencode-plugin.js";
+/** Bound Cursor Stop `followup_message` retries so a missed ritual cannot loop 5 times. */
+export const CURSOR_STOP_FOLLOWUP_LOOP_LIMIT = 2;
 /** Build a hook entry in the adapter's shape. */
-export function makeEntry(shape, command) {
-    return shape === "cursor" ? { command } : { hooks: [{ type: "command", command }] };
+export function makeEntry(shape, command, extras) {
+    if (shape !== "cursor") {
+        return {
+            hooks: [
+                orderHandlerKeys({
+                    type: "command",
+                    command,
+                    commandWindows: extras?.commandWindows,
+                    timeout: extras?.timeout,
+                }),
+            ],
+        };
+    }
+    return extras?.loop_limit !== undefined
+        ? { command, loop_limit: extras.loop_limit }
+        : { command };
+}
+/**
+ * Rebuild a handler with Harnery's fields first in a fixed order, dropping
+ * undefined ones and keeping any other fields after them.
+ */
+export function orderHandlerKeys(handler) {
+    const { type, command, commandWindows, timeout, ...rest } = handler;
+    return {
+        type,
+        command,
+        ...(commandWindows !== undefined ? { commandWindows } : {}),
+        ...(timeout !== undefined ? { timeout } : {}),
+        ...rest,
+    };
+}
+/**
+ * The Windows command for an opted-in project (ADR 0197). It hands the hook to
+ * the bridge entry point when that is on PATH and the working directory is a
+ * WSL UNC path, and otherwise runs the usual command. `ProviderPath` drops the
+ * provider prefix that `Path` carries. The trailing `exit $LASTEXITCODE` is
+ * required: without it PowerShell reports any non-zero exit from inside the
+ * `if` block as 1, which would turn a hook's blocking exit 2 into a failure.
+ */
+export function hookCommandWindows(spec, agentHookPath, subcommand, adapter, entryPoint) {
+    const direct = hookCommand(spec, agentHookPath, subcommand, adapter);
+    return (`if ((Get-Command ${entryPoint} -ErrorAction Ignore) -and $PWD.ProviderPath -like '\\\\wsl*') ` +
+        `{ ${entryPoint} ${subcommand} --adapter ${adapter} } else { ${direct} }; exit $LASTEXITCODE`);
+}
+/** The `commandWindows` init writes for one event, or undefined for none. */
+export function expectedCommandWindows(spec, agentHookPath, subcommand, adapter, options) {
+    if (!spec.windowsBridgeHooks || !options?.windowsBridgeEntryPoint)
+        return undefined;
+    return hookCommandWindows(spec, agentHookPath, subcommand, adapter, options.windowsBridgeEntryPoint);
+}
+/** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
+export function hookTimeoutFor(spec, subcommand) {
+    if (!spec.hookTimeouts)
+        return undefined;
+    return spec.hookTimeouts.bySubcommand?.[subcommand] ?? spec.hookTimeouts.default;
+}
+/** Pin Cursor Stop followups to Harnery's loop cap. Returns true when the entry changed. */
+export function applyCursorStopLoopLimit(group, subcommand) {
+    if (subcommand !== "stop")
+        return false;
+    if (!("command" in group) || typeof group.command !== "string")
+        return false;
+    if (group.loop_limit === CURSOR_STOP_FOLLOWUP_LOOP_LIMIT)
+        return false;
+    group.loop_limit = CURSOR_STOP_FOLLOWUP_LOOP_LIMIT;
+    return true;
 }
 /** Pull every command string out of a hook entry, regardless of shape. */
 export function groupCommands(group) {
@@ -88,7 +156,15 @@ export function diffWiring(settings, spec, expected) {
             duplicates.push(event);
         if (expected && commands.length > 0) {
             const canonical = hookCommand(spec, expected.agentHookPath, event.subcommand, expected.adapter);
-            if (commands.some((command) => command !== canonical))
+            const timeout = hookTimeoutFor(spec, event.subcommand);
+            const commandWindows = expectedCommandWindows(spec, expected.agentHookPath, event.subcommand, expected.adapter, expected);
+            const handlerDrift = groups.some((group) => "hooks" in group &&
+                Array.isArray(group.hooks) &&
+                group.hooks.some((hook) => typeof hook.command === "string" &&
+                    commandWiresSubcommand(hook.command, event.subcommand) &&
+                    ((timeout !== undefined && hook.timeout !== timeout) ||
+                        (spec.windowsBridgeHooks === true && hook.commandWindows !== commandWindows))));
+            if (handlerDrift || commands.some((command) => command !== canonical))
                 stale.push(event);
         }
         const wrongKey = Object.entries(hooks).some(([key, otherGroups]) => key !== event.settingsKey &&
@@ -131,6 +207,39 @@ export function diffWiring(settings, spec, expected) {
         invalidEventKeys,
     };
 }
+function emptyWiringStatus(adapter, settingsFile) {
+    return {
+        adapter,
+        settingsFile,
+        missing: [],
+        orphans: [],
+        duplicates: [],
+        misplaced: [],
+        stale: [],
+        invalidTopLevelKeys: [],
+        invalidEventKeys: [],
+    };
+}
+/**
+ * Plugin-mode drift: the installed entry exists but is not what init would
+ * write now. Absent entry → not opted in → null (mirrors the hook-map rule).
+ * Without a resolvable package root the launcher cannot be compared, so only
+ * the source freshness is judged.
+ */
+function pluginDrift(projectRoot, id, spec) {
+    if (!existsSync(resolve(projectRoot, spec.settingsFile)))
+        return null;
+    const packageRoot = harneryPackageRoot();
+    const check = checkOpenCodePlugin(projectRoot, {
+        binName: resolveBinName(projectRoot),
+        agentHook: packageRoot ? agentHookPathForProject(projectRoot, packageRoot) : "agent-hook",
+    });
+    if (check.status === "fresh")
+        return null;
+    if (check.status === "missing")
+        return null;
+    return { ...emptyWiringStatus(id, spec.settingsFile), pluginIssues: check.issues };
+}
 /**
  * Inspect every adapter whose settings file exists under `projectRoot` and
  * return only those with *drift*. Read-only; never writes.
@@ -145,6 +254,12 @@ export function diffWiring(settings, spec, expected) {
 export function loadAdapterWiring(projectRoot) {
     const out = [];
     for (const [id, spec] of Object.entries(ADAPTER_SPECS)) {
+        if (spec.installMode === "opencode-plugin") {
+            const drift = pluginDrift(projectRoot, id, spec);
+            if (drift)
+                out.push(drift);
+            continue;
+        }
         const settingsPath = resolve(projectRoot, spec.settingsFile);
         if (!existsSync(settingsPath))
             continue;
@@ -154,15 +269,7 @@ export function loadAdapterWiring(projectRoot) {
         }
         catch (error) {
             out.push({
-                adapter: id,
-                settingsFile: spec.settingsFile,
-                missing: [],
-                orphans: [],
-                duplicates: [],
-                misplaced: [],
-                stale: [],
-                invalidTopLevelKeys: [],
-                invalidEventKeys: [],
+                ...emptyWiringStatus(id, spec.settingsFile),
                 parseError: error.message,
             });
             continue;
@@ -172,6 +279,7 @@ export function loadAdapterWiring(projectRoot) {
             ? {
                 agentHookPath: agentHookPathForProject(projectRoot, packageRoot),
                 adapter: id,
+                windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
             }
             : undefined);
         if (diff.present.length === 0)
@@ -220,6 +328,19 @@ export function summarizeAdapterWiring(projectRoot) {
             unwired.push(id);
             continue;
         }
+        if (spec.installMode === "opencode-plugin") {
+            // The entry counts as wired only when harnery owns it; a foreign file at
+            // that path is drift (surfaced by loadAdapterWiring), not a wiring.
+            let content;
+            try {
+                content = readFileSync(settingsPath, "utf8");
+            }
+            catch {
+                continue;
+            }
+            (isOwnedOpenCodePlugin(content) ? wired : unwired).push(id);
+            continue;
+        }
         let settings;
         try {
             settings = JSON.parse(readFileSync(settingsPath, "utf8"));