harnery 0.41.0 → 0.42.0

package/dist/commands/doctor.js

@@ -15,12 +15,13 @@ import { existsSync, readdirSync, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { BUILTIN_ADAPTER_IDS } from "../core/adapters/index.js";
-import { resolveBinName, ripgrepAutoInstall } from "../core/config.js";
+import { codexWindowsBridgeConfig, resolveBinName, ripgrepAutoInstall } from "../core/config.js";
 import { countSummarizedSinceV3, listDiagnosticSummariesV3, } from "../core/events/v3/producers/diagnostic-summaries.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { loadAdapterWiring, summarizeAdapterWiring } from "../core/hooks/adapter/wiring.js";
 import { probeCodexHookAuthorization, } from "../core/hooks/codex-authorization.js";
 import { inspectCodexWslBridge, } from "../core/hooks/codex-wsl-bridge.js";
+import { findUnfinishedHookRuns } from "../core/hooks/run-markers.js";
 import { ADAPTER_BINARIES, ADAPTER_INSTALL_HINTS, ADAPTER_LOGIN_HINTS, } from "../core/workflow/adapters.js";
 import { probeBilling } from "../core/workflow/billing.js";
 import { checkGitHooks, gitHooksInstalled } from "../lib/instructions/git-hooks.js";
@@ -74,6 +75,8 @@ export async function runChecks() {
     const codexWslStatus = inspectCodexWslBridge();
     const recentCodexMidFlightCount = root ? countRecentCodexMidFlightOnboardings(root) : 0;
     const codexWslBridge = codexWslBridgeCheck(codexWslStatus, recentCodexMidFlightCount);
+    const codexHookRuns = codexHookRunsCheck(root);
+    const codexWindowsRoute = codexWindowsBridgeCheck(root);
     // Probe the adapter CLIs before the hook check runs, not in output order:
     // an unwired adapter only matters if its CLI is actually installed, and
     // probing once here keeps that join to one spawn per CLI.
@@ -90,6 +93,8 @@ export async function runChecks() {
         ...(codexAuthorization ? [codexAuthorization] : []),
         checkGitHookRegions(),
         ...(codexWslBridge ? [codexWslBridge] : []),
+        ...(codexWindowsRoute ? [codexWindowsRoute] : []),
+        ...(codexHookRuns ? [codexHookRuns] : []),
         ...workflow.map((w) => w.check),
         checkRestic(),
         checkRclone(),
@@ -141,6 +146,48 @@ export function codexWslBridgeCheck(status, recentMidFlightCount = 0) {
             : "forward CODEX_THREAD_ID through WSLENV in the Codex shell environment policy, then start a fresh task",
     };
 }
+/**
+ * Hook runs that started but never finished (ADR 0197). Codex kills a hook at
+ * its timeout and the tool proceeds without that hook's checks; the start
+ * marker is the only trace such a run leaves.
+ */
+export function codexHookRunsCheck(coordRoot, nowMs = Date.now(), isAlive) {
+    if (!coordRoot)
+        return null;
+    const runs = findUnfinishedHookRuns(coordRoot, nowMs, undefined, isAlive);
+    if (runs.count === 0)
+        return null;
+    const events = runs.events.map((e) => `${e.event} ×${e.count}`).join(", ");
+    return {
+        name: "codex:hook runs",
+        severity: "warn",
+        detail: `${runs.count} hook run${runs.count === 1 ? "" : "s"} started but never finished in the last 24h ` +
+            `(${events}; latest ${runs.latest}); their tools proceeded without those hooks' checks`,
+        hint: "a hook that outlives its timeout is killed; look for a stalled WSL session or a slow hook",
+    };
+}
+/** Report the per-project Windows bridge opt-in, or an invalid value init ignored. */
+export function codexWindowsBridgeCheck(coordRoot) {
+    if (!coordRoot)
+        return null;
+    const bridge = codexWindowsBridgeConfig(coordRoot);
+    if (bridge.error) {
+        return {
+            name: "codex:Windows hook route",
+            severity: "warn",
+            detail: `${bridge.error}; Codex hooks are wired without commandWindows`,
+            hint: "set hooks.codexWindowsBridge.entryPoint to a plain command name in .harnery/config.jsonc, then re-run init",
+        };
+    }
+    if (!bridge.entryPoint)
+        return null;
+    return {
+        name: "codex:Windows hook route",
+        severity: "ok",
+        detail: `opted in: Windows-native Codex hooks hand off to \`${bridge.entryPoint}\` from WSL paths ` +
+            `when it is on PATH, otherwise run the usual command; bridge health is reported by the bridge itself`,
+    };
+}
 const CODEX_MID_FLIGHT_HISTORY_WINDOW_MS = 48 * 60 * 60 * 1000;
 /** Count bounded, privacy-safe recovery diagnostics so a healthy environment
  * now does not hide an intermittent Codex-to-WSL identity drop. */

package/dist/commands/files.d.ts

@@ -1,5 +1,6 @@
 import type { Command } from "commander";
 import type { EmitContext, HarneryProgramContext } from "../commander.js";
+import { type ProcessAliveCheck, type TunnelState } from "../lib/tunnel/state.js";
 export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
 export type LocalFileUrlMode = "auto" | "raw" | "viewer";
 export interface LocalFileUrlOptions {
@@ -30,5 +31,20 @@ export declare function verifyDashboardRoot(coordRoot: string, port: number, fet
  * work. Other files default to the dashboard viewer.
  */
 export declare function mintLocalFileUrl(input: string, options: LocalFileUrlOptions): LocalFileUrl;
+export declare class TunnelLinkError extends Error {
+    readonly hint: string;
+    constructor(message: string, hint: string);
+}
+/**
+ * Turn a minted local URL into the same file's URL on a live tunnel.
+ *
+ * HTML needs a tunnel in front of the isolated files origin (its vhost is
+ * FILES_ORIGIN_HOST), because only that origin renders the page and serves its
+ * relative assets; a dashboard tunnel can only show the viewer, which displays
+ * HTML as source. Other files need a dashboard tunnel that serves the viewer.
+ * In both cases the tunnel's path scope must forward the request, or its gate
+ * would refuse the link, so a tunnel that does not cover the file is skipped.
+ */
+export declare function tunnelFileUrl(local: LocalFileUrl, port: number, states: TunnelState[], processAlive?: ProcessAliveCheck): string;
 export declare function registerFilesCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
 //# sourceMappingURL=files.d.ts.map

package/dist/commands/files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,gCAAgC,GAChC,yBAAyB,CAAC;AAE9B,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAErC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFZ,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAMD,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,kBAA0B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmDf;AAuCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAS1F;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA0EN"}
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAY1E,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,gCAAgC,GAChC,yBAAyB,CAAC;AAE9B,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAErC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFZ,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAMD,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,kBAA0B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmDf;AAuCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAS1F;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBADrB,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EAAE,EACrB,YAAY,CAAC,EAAE,iBAAiB,GAC/B,MAAM,CA+BR;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAqFN"}

package/dist/commands/files.js

@@ -3,7 +3,9 @@ import path from "node:path";
 import { resolveCoordRoot } from "../core/agents/coord-client.js";
 import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
 import { coordRootId, localCoordRootIdUrl } from "../lib/coord-root-id.js";
-import { localFilesOriginUrl, localFileViewerUrl } from "../lib/local-file-url.js";
+import { encodedRepoPath, encodeLinkSafeComponent, FILES_ORIGIN_HOST, localFilesOriginUrl, localFileViewerUrl, } from "../lib/local-file-url.js";
+import { isPathAllowed } from "../lib/tunnel/path-scope.js";
+import { isTunnelStateLive, listStates, tunnelTargetPort, } from "../lib/tunnel/state.js";
 export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
 export class DashboardRootError extends Error {
     code;
@@ -99,6 +101,49 @@ export function mintLocalFileUrl(input, options) {
         : localFileViewerUrl(relPath, options.port);
     return { url, relPath, mode };
 }
+export class TunnelLinkError extends Error {
+    hint;
+    constructor(message, hint) {
+        super(message);
+        this.hint = hint;
+        this.name = "TunnelLinkError";
+    }
+}
+function vhostName(vhost) {
+    return vhost.replace(/:\d+$/, "").toLowerCase();
+}
+function newestFirst(states) {
+    return [...states].sort((a, b) => b.started_at.localeCompare(a.started_at));
+}
+/**
+ * Turn a minted local URL into the same file's URL on a live tunnel.
+ *
+ * HTML needs a tunnel in front of the isolated files origin (its vhost is
+ * FILES_ORIGIN_HOST), because only that origin renders the page and serves its
+ * relative assets; a dashboard tunnel can only show the viewer, which displays
+ * HTML as source. Other files need a dashboard tunnel that serves the viewer.
+ * In both cases the tunnel's path scope must forward the request, or its gate
+ * would refuse the link, so a tunnel that does not cover the file is skipped.
+ */
+export function tunnelFileUrl(local, port, states, processAlive) {
+    const live = states.filter((state) => tunnelTargetPort(state) === port && isTunnelStateLive(state, processAlive));
+    if (local.mode === "raw") {
+        const path = `/${encodedRepoPath(local.relPath)}`;
+        const tunnel = newestFirst(live).find((state) => vhostName(state.vhost) === FILES_ORIGIN_HOST && isPathAllowed(path, state.allow_paths));
+        if (tunnel)
+            return `${tunnel.url.replace(/\/+$/, "")}${path}`;
+        const folder = local.relPath.includes("/")
+            ? `/${local.relPath.slice(0, local.relPath.lastIndexOf("/"))}`
+            : "/";
+        throw new TunnelLinkError(`no live tunnel serves the files origin for /${local.relPath}`, `Start one scoped to the page's folder, for example: tunnel up --name pages --target 127.0.0.1:${port} --vhost ${FILES_ORIGIN_HOST} --allow-path ${folder}`);
+    }
+    const tunnel = newestFirst(live).find((state) => vhostName(state.vhost) !== FILES_ORIGIN_HOST &&
+        ["/files", "/api/file", "/_next"].every((path) => isPathAllowed(path, state.allow_paths)));
+    if (tunnel) {
+        return `${tunnel.url.replace(/\/+$/, "")}/files?path=${encodeLinkSafeComponent(local.relPath)}`;
+    }
+    throw new TunnelLinkError(`no live tunnel serves the dashboard file viewer on port ${port}`, `Start one, for example: tunnel up --name files --target 127.0.0.1:${port} --allow-path /files --allow-path /api/file --allow-path /_next`);
+}
 export function registerFilesCommand(program, emit, context) {
     const files = program
         .command("files")
@@ -112,6 +157,7 @@ export function registerFilesCommand(program, emit, context) {
         .option("--raw", "Use the isolated files origin, regardless of extension")
         .option("--viewer", "Use the dashboard file viewer, regardless of extension")
         .option("--no-verify", "Mint without checking the running dashboard's repository identity")
+        .option("--tunnel", "Print the file's URL on a live tunnel instead of localhost (HTML uses a files-origin tunnel)")
         .action(async (filePath, opts) => {
         if (opts.raw && opts.viewer) {
             emit.error({
@@ -147,9 +193,15 @@ export function registerFilesCommand(program, emit, context) {
             });
             if (opts.verify !== false)
                 await verifyDashboardRoot(coordRoot, port);
-            emit.text(`${result.url}\n`);
+            const url = opts.tunnel ? tunnelFileUrl(result, port, listStates(coordRoot)) : result.url;
+            emit.text(`${url}\n`);
         }
         catch (error) {
+            if (error instanceof TunnelLinkError) {
+                emit.error({ code: "no_tunnel_for_file", message: error.message, hint: error.hint });
+                emit.setExitCode(1);
+                return;
+            }
             if (error instanceof DashboardRootError) {
                 emit.error({ code: error.code, message: error.message, hint: error.hint });
                 emit.setExitCode(1);

package/dist/commands/init.d.ts

@@ -23,7 +23,7 @@ import type { Command } from "commander";
 import type { EmitContext } from "../commander.js";
 import type { EventV3ControlState } from "../core/events/v3/control.js";
 import { type AdapterId, type AdapterSpec } from "../core/hooks/adapter/events.js";
-import { type SettingsFile } from "../core/hooks/adapter/wiring.js";
+import { type SettingsFile, type WiringOptions } from "../core/hooks/adapter/wiring.js";
 /**
  * Which adapters `init` should wire. An explicit `--adapter` wins. Without one:
  * every adapter whose CLI is installed on this machine, plus every adapter the
@@ -55,7 +55,7 @@ export declare function codexHookReviewAction(adapter: AdapterId): string | null
  *
  * Token-aware matching keeps `stop` from matching `stop-failure`.
  */
-export declare function wireHooks(settings: SettingsFile, spec: AdapterSpec, agentHookPath: string, adapter: AdapterId): {
+export declare function wireHooks(settings: SettingsFile, spec: AdapterSpec, agentHookPath: string, adapter: AdapterId, options?: WiringOptions): {
     wired: number;
     already: number;
     removed: number;

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAInD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAKlG,OAAO,EAWL,KAAK,YAAY,EAElB,MAAM,iCAAiC,CAAC;AA0CzC;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,SAAS,CAAC,EAAE,SAAS,EAAE,GACtB;IAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAM3C;AAyFD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CA8T/F;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAiBjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,GACjB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAsDvE;AAyFD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAKlG,OAAO,EAcL,KAAK,YAAY,EAEjB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AA0CzC;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,SAAS,CAAC,EAAE,SAAS,EAAE,GACtB;IAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAM3C;AA6FD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAmU/F;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAiBjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAmEvE;AA2GD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}

package/dist/commands/init.js

@@ -24,14 +24,14 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { DEFAULT_BIN_NAME, pinnedBinName, stripJsonComments } from "../core/config.js";
+import { codexWindowsBridgeConfig, DEFAULT_BIN_NAME, pinnedBinName, stripJsonComments, } from "../core/config.js";
 import { canonicalJsonV3 } from "../core/events/v3/canonical.js";
 import { ADAPTER_CAPABILITY_PROFILES_V3 } from "../core/events/v3/capabilities.js";
 import { EVENT_V3_SCHEMA_DIGEST } from "../core/events/v3/generated.js";
 import { initializeEventLedgerV3, readEventV3ControlState, sha256V3, } from "../core/events/v3/index.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { checkOpenCodePlugin, installOpenCodePlugin, } from "../core/hooks/adapter/opencode-plugin.js";
-import { agentHookPathForProject, applyCursorStopLoopLimit, CURSOR_STOP_FOLLOWUP_LOOP_LIMIT, commandWiresSubcommand, diffWiring, groupCommands, hookCommand, isAgentHookCommand, makeEntry, summarizeAdapterWiring, } from "../core/hooks/adapter/wiring.js";
+import { agentHookPathForProject, applyCursorStopLoopLimit, CURSOR_STOP_FOLLOWUP_LOOP_LIMIT, commandWiresSubcommand, diffWiring, expectedCommandWindows, groupCommands, hookCommand, hookTimeoutFor, isAgentHookCommand, makeEntry, orderHandlerKeys, summarizeAdapterWiring, } from "../core/hooks/adapter/wiring.js";
 import { detectInstalledAdapters } from "../core/workflow/adapters.js";
 import { applyIndexerExclusions } from "../lib/indexer-exclusions.js";
 import { applyInstructions, checkInstructions, } from "../lib/instructions/apply.js";
@@ -102,7 +102,11 @@ function checkAdapterHooks(projectRoot, adapter, bin) {
     let drift = false;
     try {
         const settings = JSON.parse(readFileSync(settingsPath, "utf8"));
-        const hookDiff = diffWiring(settings, spec, { agentHookPath: agentHook, adapter });
+        const hookDiff = diffWiring(settings, spec, {
+            agentHookPath: agentHook,
+            adapter,
+            windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+        });
         drift =
             hookDiff.missing.length > 0 ||
                 hookDiff.stale.length > 0 ||
@@ -379,7 +383,11 @@ export function registerInitCommand(program, emit, binName) {
                 else {
                     settings = {};
                 }
-                const { wired, already, removed, upgraded } = wireHooks(settings, spec, agentHook, adapter);
+                const bridge = codexWindowsBridgeConfig(projectRoot);
+                if (bridge.error && spec.windowsBridgeHooks) {
+                    actions.push(`⚠ ${bridge.error}; writing ${adapter} hooks without commandWindows`);
+                }
+                const { wired, already, removed, upgraded } = wireHooks(settings, spec, agentHook, adapter, { windowsBridgeEntryPoint: bridge.entryPoint });
                 if (wired === 0 && removed === 0 && upgraded === 0) {
                     actions.push(`· all ${spec.events.length} ${adapter} hooks already wired in ${rel(projectRoot, settingsPath)}`);
                 }
@@ -481,7 +489,7 @@ export function codexHookReviewAction(adapter) {
  *
  * Token-aware matching keeps `stop` from matching `stop-failure`.
  */
-export function wireHooks(settings, spec, agentHookPath, adapter) {
+export function wireHooks(settings, spec, agentHookPath, adapter, options) {
     if (spec.rootVersion !== undefined && settings.version === undefined) {
         settings.version = spec.rootVersion;
     }
@@ -498,6 +506,13 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
     }
     for (const { settingsKey, subcommand } of spec.events) {
         const command = hookCommand(spec, agentHookPath, subcommand, adapter);
+        const timeout = hookTimeoutFor(spec, subcommand);
+        const commandWindows = expectedCommandWindows(spec, agentHookPath, subcommand, adapter, options);
+        const handlerFields = {
+            timeout,
+            commandWindows,
+            windowsBridge: spec.windowsBridgeHooks === true,
+        };
         let present = false;
         for (const key of Object.keys(settings.hooks)) {
             if (key === settingsKey)
@@ -507,7 +522,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
         const groups = settings.hooks[settingsKey] ?? [];
         const nextGroups = [];
         for (const group of groups) {
-            const normalized = normalizeEventGroup(group, subcommand, command, present);
+            const normalized = normalizeEventGroup(group, subcommand, command, handlerFields, present);
             if (normalized.found && !present)
                 present = true;
             upgraded += normalized.upgraded;
@@ -526,7 +541,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
         const current = settings.hooks[settingsKey] ?? [];
         current.push(makeEntry(spec.entryShape, command, spec.entryShape === "cursor" && subcommand === "stop"
             ? { loop_limit: CURSOR_STOP_FOLLOWUP_LOOP_LIMIT }
-            : undefined));
+            : { timeout, commandWindows }));
         settings.hooks[settingsKey] = current;
         wired++;
     }
@@ -542,7 +557,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
  * that don't set the var. Only the env expansion is quoted so the
  * `agent-hook <subcommand> ` wiring match stays byte-identical.
  */
-function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
+function normalizeEventGroup(group, subcommand, canonical, fields, alreadyFound) {
     let found = false;
     let upgraded = 0;
     let removed = 0;
@@ -561,7 +576,8 @@ function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
     }
     if ("hooks" in group && Array.isArray(group.hooks)) {
         const kept = [];
-        for (const hook of group.hooks) {
+        for (const original of group.hooks) {
+            let hook = original;
             if (typeof hook.command !== "string" || !commandWiresSubcommand(hook.command, subcommand)) {
                 kept.push(hook);
                 continue;
@@ -571,8 +587,26 @@ function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
                 continue;
             }
             found = true;
+            let changed = false;
             if (hook.command !== canonical) {
                 hook.command = canonical;
+                changed = true;
+            }
+            if (fields.timeout !== undefined && hook.timeout !== fields.timeout) {
+                hook.timeout = fields.timeout;
+                changed = true;
+            }
+            // Harnery owns commandWindows on its own handlers for adapters that run
+            // it: write the opted-in command, or remove one a project opted out of.
+            if (fields.windowsBridge && hook.commandWindows !== fields.commandWindows) {
+                if (fields.commandWindows === undefined)
+                    delete hook.commandWindows;
+                else
+                    hook.commandWindows = fields.commandWindows;
+                changed = true;
+            }
+            if (changed) {
+                hook = orderHandlerKeys(hook);
                 upgraded++;
             }
             kept.push(hook);

package/dist/commands/rm.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { EmitContext, HarneryProgramContext } from "../commander.js";
+export declare function registerRmCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
+//# sourceMappingURL=rm.d.ts.map

package/dist/commands/rm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rm.d.ts","sourceRoot":"","sources":["../../src/commands/rm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAU1E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAgFN"}

package/dist/commands/rm.js

@@ -0,0 +1,87 @@
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
+import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../core/events/v3/coordination-view.js";
+import { liveInstanceIdV3 } from "../core/events/v3/live-route-observer.js";
+import { resolveOwner } from "../core/hooks/resolve/owner.js";
+import { guardedRemove } from "../lib/guarded-remove.js";
+export function registerRmCommand(program, emit, context) {
+    program
+        .command("rm <paths...>")
+        .description("Preview guarded removal of untracked files; --yes applies permanent deletion")
+        .requiredOption("--root <directory>", "Allowed directory; each target must be strictly inside it")
+        .option("-r, --recursive", "Permit directory removal after inspecting its complete contents")
+        .option("--allow-protected <path>", "Remove this one protected path (Git metadata, credentials, Harnery state, keys) inside a target; repeat per path", (value, previous = []) => [...previous, value])
+        .option("--yes", "Permanently remove validated targets")
+        .option("--dry-run", "Preview only, even with --yes")
+        .option("--json", "Emit the versioned removal report")
+        .action((paths, options) => {
+        try {
+            const coordRoot = context?.resolveCoordRoot?.() ?? context?.repoRoot ?? resolveCoordRoot();
+            const checkClaims = (targets) => {
+                if (!coordRoot || !existsSync(resolve(coordRoot, ".harnery")))
+                    return;
+                const view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(coordRoot));
+                const owner = resolveOwner({ payload: null, coordRoot });
+                const ownId = owner ? liveInstanceIdV3(owner.instance_id) : undefined;
+                const ownSession = ownId ? view.instances[ownId]?.session_id : undefined;
+                for (const peer of Object.values(view.instances)) {
+                    if (!peer.authority_eligible ||
+                        peer.instance_id === ownId ||
+                        (ownSession && peer.session_id === ownSession))
+                        continue;
+                    for (const claim of peer.files_touched) {
+                        const claimed = resolve(coordRoot, claim);
+                        for (const target of targets) {
+                            if (overlaps(target, claimed))
+                                throw new Error(`Target overlaps another agent's claim: ${claim} (${peer.instance_id})`);
+                        }
+                    }
+                }
+            };
+            // The workspace this command coordinates, and the checkout it runs in:
+            // their own .git and .harnery can never be allowed.
+            const liveRoots = [coordRoot, gitTopLevel(process.cwd())].filter((dir) => Boolean(dir));
+            const report = guardedRemove(paths, { ...options, liveRoots }, checkClaims);
+            if (options.json) {
+                emit.config({ format: "json" });
+                emit.data(report);
+            }
+            else {
+                const lines = [
+                    `${report.applied ? "Removed" : "Would remove"} ${report.targets.length} target(s), ${report.entries} entries, ${report.bytes} bytes:`,
+                    ...report.targets,
+                ];
+                if (report.protected.length)
+                    lines.push("Protected paths named with --allow-protected:", ...report.protected.map((path) => `  ${path}`));
+                if (report.links.length)
+                    lines.push("Links removed as links (their targets are untouched):", ...report.links.map((link) => `  ${link.path} -> ${link.target}`));
+                if (!report.applied)
+                    lines.push("Preview only. Add --yes to permanently delete these targets.");
+                emit.text(lines.join("\n"));
+            }
+        }
+        catch (error) {
+            emit.error({
+                code: "removal_refused",
+                message: error instanceof Error ? error.message : String(error),
+            });
+            emit.setExitCode(1);
+        }
+    });
+}
+function gitTopLevel(dir) {
+    const result = spawnSync("git", ["-C", dir, "rev-parse", "--show-toplevel"], {
+        encoding: "utf8",
+        timeout: 10_000,
+    });
+    return result.status === 0 ? result.stdout.trim() || undefined : undefined;
+}
+function overlaps(a, b) {
+    const inside = (parent, child) => {
+        const rel = relative(parent, child);
+        return rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+    };
+    return inside(a, b) || inside(b, a);
+}

package/dist/commands/servers.d.ts

@@ -0,0 +1,7 @@
+import type { Command } from "commander";
+import type { EmitContext, HarneryProgramContext } from "../commander.js";
+import { type ServersReport } from "../core/servers/index.js";
+export declare function registerServersCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
+/** Plain-text table grouped by kind; exported for tests. */
+export declare function renderReport(report: ServersReport, bin: string): string;
+//# sourceMappingURL=servers.d.ts.map

package/dist/commands/servers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"servers.d.ts","sourceRoot":"","sources":["../../src/commands/servers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG1E,OAAO,EAWL,KAAK,aAAa,EAMnB,MAAM,0BAA0B,CAAC;AAElC,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA0YN;AA8BD,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAmDvE"}