harnery 0.40.0 → 0.42.0

package/src/core/events/v3/live-feed.ts

@@ -12,6 +12,7 @@ import {
   writeSync,
 } from "node:fs";
 import { basename, join, resolve } from "node:path";
+import { stateDirMode, stateFileMode } from "../../storage/modes.ts";
 
 const DEFAULT_TTL_MS = 15 * 60 * 1_000;
 const HARD_MAX_TTL_MS = 60 * 60 * 1_000;
@@ -92,16 +93,16 @@ export function writeLiveDisplayV3(
     throw new Error("V3 live-display row exceeds its bounded size");
   }
   const root = liveRoot(coordRoot);
-  mkdirSync(root, { recursive: true, mode: 0o700 });
-  chmodSync(root, 0o700);
+  mkdirSync(root, { recursive: true, mode: stateDirMode() });
+  chmodSync(root, stateDirMode());
   const path = join(root, `${input.generation_id}.ndjson`);
-  const fd = openSync(path, "a", 0o600);
+  const fd = openSync(path, "a", stateFileMode());
   try {
     writeSync(fd, serialized, undefined, "utf8");
   } finally {
     closeSync(fd);
   }
-  chmodSync(path, 0o600);
+  chmodSync(path, stateFileMode());
   return row;
 }
 

package/src/core/events/v3/producers/command-recorder.ts

@@ -15,6 +15,7 @@ import {
 } from "node:fs";
 import { hostname } from "node:os";
 import { join, resolve } from "node:path";
+import { stateDirMode, stateFileMode, stateModeTooOpen } from "../../../storage/modes.ts";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.ts";
 import { acquireNoClobberLease } from "../../../workflow/workspaces/leases.ts";
 import { selectCommandParentSpan } from "../../span-parent.ts";
@@ -502,9 +503,9 @@ function commandStatePath(coordRoot: string, commandSource: `hid_${string}`): st
 function acquireCommandLease(coordRoot: string, statePath: string) {
   const directory = join(statePath, "..");
   const producerRoot = join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT, "private-producers");
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  chmodSync(producerRoot, 0o700);
-  chmodSync(directory, 0o700);
+  mkdirSync(directory, { recursive: true, mode: stateDirMode() });
+  chmodSync(producerRoot, stateDirMode());
+  chmodSync(directory, stateDirMode());
   return acquireNoClobberLease({
     path: `${statePath}.lease`,
     scope: "event-v3-command-producer",
@@ -522,13 +523,13 @@ function publishCommandState(path: string, state: CommandRecorderStateV3): void
   const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
   let fd: number | undefined;
   try {
-    fd = openSync(temporary, "wx", 0o600);
+    fd = openSync(temporary, "wx", stateFileMode());
     writeFileSync(fd, `${JSON.stringify(state)}\n`, "utf8");
     fsyncSync(fd);
     closeSync(fd);
     fd = undefined;
     renameSync(temporary, path);
-    chmodSync(path, 0o600);
+    chmodSync(path, stateFileMode());
     fsyncParentDirectory(path);
   } finally {
     if (fd !== undefined) closeSync(fd);
@@ -537,7 +538,8 @@ function publishCommandState(path: string, state: CommandRecorderStateV3): void
 }
 
 function readCommandState(path: string): CommandRecorderStateV3 {
-  if ((statSync(path).mode & 0o077) !== 0) throw new Error("V3 command state is not owner-only");
+  if (stateModeTooOpen(statSync(path).mode))
+    throw new Error("V3 command state is open to other users");
   let parsed: unknown;
   try {
     parsed = JSON.parse(readFileSync(path, "utf8"));

package/src/core/events/v3/producers/coordination-recorder.ts

@@ -15,6 +15,7 @@ import {
 } from "node:fs";
 import { hostname } from "node:os";
 import { basename, join, resolve } from "node:path";
+import { stateDirMode, stateFileMode, stateModeTooOpen } from "../../../storage/modes.ts";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.ts";
 import { acquireNoClobberLease } from "../../../workflow/workspaces/leases.ts";
 import { EVENT_ADAPTER_IDS_V3, type EventAdapterIdV3 } from "../adapter-id.ts";
@@ -488,9 +489,9 @@ function coordinationProducerDirectory(coordRoot: string): string {
 function acquireCoordinationLease(coordRoot: string, statePath: string) {
   const directory = join(statePath, "..");
   const producerRoot = join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT, "private-producers");
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
-  chmodSync(producerRoot, 0o700);
-  chmodSync(directory, 0o700);
+  mkdirSync(directory, { recursive: true, mode: stateDirMode() });
+  chmodSync(producerRoot, stateDirMode());
+  chmodSync(directory, stateDirMode());
   return acquireNoClobberLease({
     path: `${statePath}.lease`,
     scope: "event-v3-coordination-producer",
@@ -508,13 +509,13 @@ function publishCoordinationState(path: string, state: CoordinationRecorderState
   const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
   let fd: number | undefined;
   try {
-    fd = openSync(temporary, "wx", 0o600);
+    fd = openSync(temporary, "wx", stateFileMode());
     writeFileSync(fd, `${JSON.stringify(state)}\n`, "utf8");
     fsyncSync(fd);
     closeSync(fd);
     fd = undefined;
     renameSync(temporary, path);
-    chmodSync(path, 0o600);
+    chmodSync(path, stateFileMode());
     fsyncParentDirectory(path);
   } finally {
     if (fd !== undefined) closeSync(fd);
@@ -523,8 +524,8 @@ function publishCoordinationState(path: string, state: CoordinationRecorderState
 }
 
 function readCoordinationState(path: string): CoordinationRecorderStateV3 {
-  if ((statSync(path).mode & 0o077) !== 0) {
-    throw new Error("V3 coordination state is not owner-only");
+  if (stateModeTooOpen(statSync(path).mode)) {
+    throw new Error("V3 coordination state is open to other users");
   }
   let parsed: unknown;
   try {

package/src/core/events/v3/producers/diagnostic-summaries.ts

@@ -19,6 +19,7 @@ import {
 import { hostname } from "node:os";
 import { join, resolve } from "node:path";
 import { coordEnv } from "../../../../lib/env.ts";
+import { stateDirMode, stateFileMode } from "../../../storage/modes.ts";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.ts";
 import { acquireNoClobberLease } from "../../../workflow/workspaces/leases.ts";
 import { EVENT_V3_LEDGER_RELATIVE_ROOT } from "../writer.ts";
@@ -189,8 +190,8 @@ function summaryPath(root: string, category: string, window: string, digest: str
 }
 
 function ensureOwnerOnlyDirectory(path: string): void {
-  mkdirSync(path, { recursive: true, mode: 0o700 });
-  chmodSync(path, 0o700);
+  mkdirSync(path, { recursive: true, mode: stateDirMode() });
+  chmodSync(path, stateDirMode());
 }
 
 function publishOwnerOnlyJson(path: string, value: unknown, durable: boolean): void {
@@ -201,7 +202,7 @@ function publishOwnerOnlyJson(path: string, value: unknown, durable: boolean): v
   const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
   let fd: number | undefined;
   try {
-    fd = openSync(temporary, "wx", 0o600);
+    fd = openSync(temporary, "wx", stateFileMode());
     writeFileSync(fd, contents, "utf8");
     if (durable) fsyncSync(fd);
     closeSync(fd);
@@ -401,7 +402,7 @@ function recordFailOpen(root: string, stage: string, nowMs: number): void {
       // Missing log starts fresh.
     }
     const line = JSON.stringify({ at: new Date(nowMs).toISOString(), stage, pid: process.pid });
-    appendFileSync(path, `${line}\n`, { mode: 0o600 });
+    appendFileSync(path, `${line}\n`, { mode: stateFileMode() });
   } catch {
     // The emergency log may undercount when storage is unavailable; it is a
     // signal, not accounting, and must never throw into the producer path.

package/src/core/events/v3/producers/hook-base.ts

@@ -85,6 +85,7 @@ export interface TurnRitualEvidenceV3 {
   status_box_present_strict: boolean;
   session_name_required: boolean;
   session_name_present: boolean;
+  session_name_unavailable_reason?: string;
 }
 
 type TurnRitualObservationV3 = NonNullable<
@@ -478,10 +479,16 @@ function turnRitualObservation(
   return {
     status_box_present: observed(evidence.status_box_present),
     status_box_present_strict: observed(evidence.status_box_present_strict),
-    session_name: observed({
-      required: evidence.session_name_required,
-      present: evidence.session_name_present,
-    }),
+    session_name: evidence.session_name_unavailable_reason
+      ? {
+          state: "expected_but_missing",
+          capability: "assistant_reply_text",
+          reason: evidence.session_name_unavailable_reason,
+        }
+      : observed({
+          required: evidence.session_name_required,
+          present: evidence.session_name_present,
+        }),
   };
 }
 

package/src/core/events/v3/producers/hook.ts

@@ -4,6 +4,7 @@ import { adapterDurationSupportV3, adapterSignalSupportV3 } from "../capabilitie
 import type { EventOfTypeV3, EventTypeV3, SpanSummaryV3 } from "../contract.ts";
 import { EVENT_V3_CONTRACT_MAJOR, EVENT_V3_CONTRACT_NAME } from "../contract.ts";
 import { EVENT_V3_SCHEMA_DIGEST } from "../generated.ts";
+import type { LineChanges } from "../tool-line-changes.ts";
 import {
   emptyHarnessTimingV3,
   extractTurnTelemetryV3,
@@ -19,6 +20,7 @@ import {
 } from "./hook-base.ts";
 
 export interface HookProducerContextV3 extends HookProducerContextV3Base {
+  tool_line_changes?: LineChanges;
   /** Required for terminal events; captured when the corresponding span opens. */
   terminal_span?: SpanSummaryV3;
   /** Required by V3 delegation starts so the child span is anchored in its parent tree. */
@@ -111,7 +113,23 @@ function terminalPayload(
   const span =
     duration === sourceSpan.duration_ms ? sourceSpan : { ...sourceSpan, duration_ms: duration };
   if (eventType === "tool.completed") {
-    return { ...basePayload, duration_ms: duration, span };
+    const counts = context.tool_line_changes;
+    const response = source.tool_response as { isError?: boolean } | undefined;
+    return {
+      ...basePayload,
+      duration_ms: duration,
+      span,
+      line_changes:
+        counts &&
+        (basePayload as { outcome?: string }).outcome === "succeeded" &&
+        response?.isError !== true
+          ? { state: "observed", value: counts, attestation: "derived", confidence: "high" }
+          : {
+              state: "expected_but_missing",
+              reason: "tool_line_changes_unmeasured",
+              capability: "tool_line_changes",
+            },
+    };
   }
   if (eventType !== "turn.completed") return { ...basePayload, span };
 

package/src/core/events/v3/producers/intake.ts

@@ -14,6 +14,7 @@ import {
 } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import type { ParsedPayload } from "../../../hooks/adapter/parse.ts";
+import { stateDirMode, stateFileMode, stateModeTooOpen } from "../../../storage/modes.ts";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.ts";
 import { EVENT_ADAPTER_IDS_V3, type EventAdapterIdV3 } from "../adapter-id.ts";
 import type { EventV3WriteMode } from "../control.ts";
@@ -152,14 +153,14 @@ function intakeOrderKey(): string {
 }
 
 function ensureOwnerOnlyDirectory(path: string): void {
-  mkdirSync(path, { recursive: true, mode: 0o700 });
-  chmodSync(path, 0o700);
+  mkdirSync(path, { recursive: true, mode: stateDirMode() });
+  chmodSync(path, stateDirMode());
 }
 
 function writeOwnerOnlyFileDurably(path: string, contents: string): void {
   let fd: number | undefined;
   try {
-    fd = openSync(path, "wx", 0o600);
+    fd = openSync(path, "wx", stateFileMode());
     writeFileSync(fd, contents, "utf8");
     fsyncSync(fd);
     closeSync(fd);
@@ -240,7 +241,7 @@ function readIntakeRecord(path: string): HookIntakeRecordV3 | undefined {
   try {
     const metadata = lstatSync(path);
     if (!metadata.isFile() || metadata.isSymbolicLink()) return undefined;
-    if ((metadata.mode & 0o077) !== 0) return undefined;
+    if (stateModeTooOpen(metadata.mode)) return undefined;
     parsed = JSON.parse(readFileSync(path, "utf8"));
   } catch {
     return undefined;
@@ -289,14 +290,25 @@ function validDelegatedChild(value: HookIntakeRecordV3["delegated_child"]): bool
 function validTurnRitual(value: TurnRitualEvidenceV3 | undefined): boolean {
   if (value === undefined) return true;
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const keys = Object.keys(value).sort();
+  const keys = Object.keys(value)
+    .filter((key) => key !== "session_name_unavailable_reason")
+    .sort();
   if (
     keys.join(",") !==
     "session_name_present,session_name_required,status_box_present,status_box_present_strict"
   ) {
     return false;
   }
-  return keys.every((key) => typeof value[key as keyof TurnRitualEvidenceV3] === "boolean");
+  return (
+    keys.every((key) => typeof value[key as keyof TurnRitualEvidenceV3] === "boolean") &&
+    (value.session_name_unavailable_reason === undefined ||
+      [
+        "missing_transcript",
+        "transcript_not_ready",
+        "transcript_parse_error",
+        "observation_error",
+      ].includes(value.session_name_unavailable_reason))
+  );
 }
 
 /**