harnery 0.41.0 → 0.43.0

package/dist/commands/claude-desktop.js

@@ -1,4 +1,6 @@
 import { applyMirror, findDesktopDataDirs, listAccounts, planMirror, readCliAccount, } from "../lib/claude-desktop.js";
+import { applyShare, defaultShareDir, planShare, shareSummary, } from "../lib/claude-desktop-share.js";
+import { resolveMachineLabel } from "../lib/machine.js";
 /**
  * `claude-desktop`: make Claude desktop-app sessions survive account
  * switches.
@@ -141,6 +143,56 @@ export function registerClaudeDesktopCommand(program, emit, _context) {
             });
         }
     });
+    cmd
+        .command("share")
+        .description("Share sessions with your other computers through a synced folder (iCloud Drive by default): " +
+        "publish this machine's recent sessions and list + resume every other machine's here. " +
+        "Dry-run by default; --yes applies. Restart the desktop app afterward to see new entries.")
+        .option("--dir <path>", "Shared folder (default: iCloud Drive/Harnery/claude-sessions)")
+        .option("--days <n>", "Only sessions active in the last N days", "14")
+        .option("--data-dir <path>", "Explicit desktop-app data directory")
+        .option("--yes", "Apply the plan (default is dry-run)")
+        .action((opts) => {
+        const shareDir = opts.dir ?? process.env.HARNERY_SESSION_SHARE_DIR ?? defaultShareDir();
+        if (!shareDir) {
+            emit.error({
+                code: "no_share_dir",
+                message: "no shared folder: pass --dir <path> or set HARNERY_SESSION_SHARE_DIR",
+            });
+            process.exit(2);
+        }
+        const cli = readCliAccount();
+        if (!cli) {
+            emit.error({
+                code: "no_account",
+                message: "cannot read the signed-in account from ~/.claude.json",
+            });
+            process.exit(2);
+        }
+        const [dataDir] = requireDataDirs(emit, opts.dataDir);
+        const shareOpts = {
+            shareDir,
+            machine: resolveMachineLabel(),
+            days: Number(opts.days) || 14,
+            dataDir: dataDir,
+            targetAccountUuid: cli.accountUuid,
+        };
+        const plan = planShare(shareOpts);
+        const summary = { share_dir: shareDir, machine: shareOpts.machine, ...shareSummary(plan) };
+        if (!opts.yes) {
+            emit.data({ dry_run: true, ...summary, hint: "re-run with --yes to apply" });
+            return;
+        }
+        const result = applyShare(plan, shareOpts);
+        emit.data({
+            dry_run: false,
+            ...summary,
+            ...result,
+            hint: result.imported > 0
+                ? "quit the Claude desktop app fully (Cmd+Q) and reopen it to see the new sessions"
+                : "sidebar already current",
+        });
+    });
 }
 function collect(value, previous) {
     return previous.concat([value]);

package/dist/commands/disk.d.ts

@@ -0,0 +1,6 @@
+import { type Command } from "commander";
+import type { EmitContext } from "../commander.js";
+import { type DiskReport } from "../lib/disk-usage.js";
+export declare function registerDiskCommand(program: Command, emit: EmitContext): void;
+export declare function renderDiskUsage(report: DiskReport): string;
+//# sourceMappingURL=disk.d.ts.map

package/dist/commands/disk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../src/commands/disk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAwB,MAAM,WAAW,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAGL,KAAK,UAAU,EAGhB,MAAM,sBAAsB,CAAC;AAQ9B,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA+C7E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAgD1D"}

package/dist/commands/disk.js

@@ -0,0 +1,80 @@
+import { InvalidArgumentError } from "commander";
+import { diskUsage, parseDiskSize, } from "../lib/disk-usage.js";
+function positive(value) {
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)) || Number(value) < 1)
+        throw new InvalidArgumentError("requires a positive integer");
+    return Number(value);
+}
+export function registerDiskCommand(program, emit) {
+    program
+        .command("disk [path]")
+        .description("Measure checkout disk usage, including nested repositories and ignored files")
+        .option("--git <states>", "Filter: tracked, untracked, ignored, git-metadata, non-repository, unknown (comma-separated)")
+        .option("--type <types>", "File extensions or video, audio, image, media, archive (comma-separated)")
+        .option("--exclude <paths>", "Skip directory names at any depth or root-relative paths; repeatable, comma-separated", (value, previous) => [...previous, value], [])
+        .option("--group <by>", "Group by directory, repository, extension, git, or files", "directory")
+        .option("--depth <n>", "Directory grouping depth; does not limit the scan", positive, 1)
+        .option("--top <n>", "Maximum groups and largest files to display", positive, 20)
+        .option("--min-size <size>", "Include individual files at least this size (e.g. 10MB, 1GiB)", parseDiskSize)
+        .option("--apparent", "Rank and filter by file lengths instead of allocated blocks")
+        .option("--json", "Emit the versioned disk usage report")
+        .action((path, options) => {
+        try {
+            const { json, ...filters } = options;
+            const report = diskUsage(path, filters);
+            if (json) {
+                emit.config({ format: "json" });
+                emit.data(report);
+            }
+            else
+                emit.text(renderDiskUsage(report));
+            if (!report.complete)
+                emit.setExitCode(1);
+        }
+        catch (error) {
+            emit.error({
+                code: "disk_usage_failed",
+                message: error instanceof Error ? error.message : String(error),
+            });
+            emit.setExitCode(1);
+        }
+    });
+}
+export function renderDiskUsage(report) {
+    const bytes = (value) => value >= 1e9
+        ? `${(value / 1e9).toFixed(2)} GB`
+        : value >= 1e6
+            ? `${(value / 1e6).toFixed(2)} MB`
+            : value >= 1e3
+                ? `${(value / 1e3).toFixed(2)} KB`
+                : `${value} B`;
+    const size = (row) => bytes(report.measurement === "allocated"
+        ? (row.allocated_bytes ?? row.apparent_bytes)
+        : row.apparent_bytes);
+    const lines = [
+        `Disk usage: ${report.root}`,
+        `${size(report.totals)} in ${report.totals.files.toLocaleString()} regular files (${report.measurement})`,
+        `File lengths: ${bytes(report.totals.apparent_bytes)}. Directory metadata and symlinks are excluded.`,
+        "",
+        "Git state:",
+    ];
+    for (const [state, totals] of Object.entries(report.git))
+        if (totals.files)
+            lines.push(`${size(totals).padStart(12)}  ${String(totals.files).padStart(8)} files  ${state}`);
+    lines.push("", `Largest ${report.filters.group} groups (${report.groups.length} of ${report.group_count}):`);
+    for (const row of report.groups)
+        lines.push(`${size(row).padStart(12)}  ${String(row.files).padStart(8)} files  ${row.path}`);
+    if (report.filters.group !== "files") {
+        lines.push("", "Largest files:");
+        for (const row of report.largest_files)
+            lines.push(`${size(row).padStart(12)}  ${row.git.padEnd(14)}  ${row.path}`);
+    }
+    if (report.skipped.symlinks || report.skipped.special_files || report.skipped.excluded)
+        lines.push("", `Skipped: ${report.skipped.symlinks} symlinks, ${report.skipped.special_files} special files, ${report.skipped.excluded} excluded entries.`);
+    if (report.issues.length) {
+        lines.push("", "Incomplete scan:");
+        for (const issue of report.issues)
+            lines.push(`${issue.path}: ${issue.message}`);
+    }
+    return `${lines.join("\n")}\n`;
+}

package/dist/commands/doctor.d.ts

@@ -24,6 +24,14 @@ export interface Check {
 export declare function registerDoctorCommand(program: Command, emit: EmitContext): void;
 export declare function runChecks(): Promise<Check[]>;
 export declare function codexWslBridgeCheck(status: CodexWslBridgeStatus | null, recentMidFlightCount?: number): Check | null;
+/**
+ * Hook runs that started but never finished (ADR 0197). Codex kills a hook at
+ * its timeout and the tool proceeds without that hook's checks; the start
+ * marker is the only trace such a run leaves.
+ */
+export declare function codexHookRunsCheck(coordRoot: string | null, nowMs?: number, isAlive?: (pid: number) => boolean): Check | null;
+/** Report the per-project Windows bridge opt-in, or an invalid value init ignored. */
+export declare function codexWindowsBridgeCheck(coordRoot: string | null): Check | null;
 /** Count bounded, privacy-safe recovery diagnostics so a healthy environment
  * now does not hide an intermittent Codex-to-WSL identity drop. */
 export declare function countRecentCodexMidFlightOnboardings(coordRoot: string, nowMs?: number, windowMs?: number): number;

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASnD,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAW3C,KAAK,QAAQ,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvC,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAOD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAmD/E;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CA2BlD;AAgCD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,oBAAoB,GAAG,IAAI,EACnC,oBAAoB,SAAI,GACvB,KAAK,GAAG,IAAI,CAed;AAID;mEACmE;AACnE,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,EAClB,QAAQ,SAAqC,GAC5C,MAAM,CA0CR;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,4BAA4B,GAAG,KAAK,CAoBnF"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASnD,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAY3C,KAAK,QAAQ,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvC,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAOD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAmD/E;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CA+BlD;AAgCD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,oBAAoB,GAAG,IAAI,EACnC,oBAAoB,SAAI,GACvB,KAAK,GAAG,IAAI,CAed;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,SAAa,EAClB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACjC,KAAK,GAAG,IAAI,CAad;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAmB9E;AAID;mEACmE;AACnE,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,EAClB,QAAQ,SAAqC,GAC5C,MAAM,CA0CR;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,4BAA4B,GAAG,KAAK,CAoBnF"}

package/dist/commands/doctor.js

@@ -15,12 +15,13 @@ import { existsSync, readdirSync, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { BUILTIN_ADAPTER_IDS } from "../core/adapters/index.js";
-import { resolveBinName, ripgrepAutoInstall } from "../core/config.js";
+import { codexWindowsBridgeConfig, resolveBinName, ripgrepAutoInstall } from "../core/config.js";
 import { countSummarizedSinceV3, listDiagnosticSummariesV3, } from "../core/events/v3/producers/diagnostic-summaries.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { loadAdapterWiring, summarizeAdapterWiring } from "../core/hooks/adapter/wiring.js";
 import { probeCodexHookAuthorization, } from "../core/hooks/codex-authorization.js";
 import { inspectCodexWslBridge, } from "../core/hooks/codex-wsl-bridge.js";
+import { findUnfinishedHookRuns } from "../core/hooks/run-markers.js";
 import { ADAPTER_BINARIES, ADAPTER_INSTALL_HINTS, ADAPTER_LOGIN_HINTS, } from "../core/workflow/adapters.js";
 import { probeBilling } from "../core/workflow/billing.js";
 import { checkGitHooks, gitHooksInstalled } from "../lib/instructions/git-hooks.js";
@@ -74,6 +75,8 @@ export async function runChecks() {
     const codexWslStatus = inspectCodexWslBridge();
     const recentCodexMidFlightCount = root ? countRecentCodexMidFlightOnboardings(root) : 0;
     const codexWslBridge = codexWslBridgeCheck(codexWslStatus, recentCodexMidFlightCount);
+    const codexHookRuns = codexHookRunsCheck(root);
+    const codexWindowsRoute = codexWindowsBridgeCheck(root);
     // Probe the adapter CLIs before the hook check runs, not in output order:
     // an unwired adapter only matters if its CLI is actually installed, and
     // probing once here keeps that join to one spawn per CLI.
@@ -90,6 +93,8 @@ export async function runChecks() {
         ...(codexAuthorization ? [codexAuthorization] : []),
         checkGitHookRegions(),
         ...(codexWslBridge ? [codexWslBridge] : []),
+        ...(codexWindowsRoute ? [codexWindowsRoute] : []),
+        ...(codexHookRuns ? [codexHookRuns] : []),
         ...workflow.map((w) => w.check),
         checkRestic(),
         checkRclone(),
@@ -141,6 +146,48 @@ export function codexWslBridgeCheck(status, recentMidFlightCount = 0) {
             : "forward CODEX_THREAD_ID through WSLENV in the Codex shell environment policy, then start a fresh task",
     };
 }
+/**
+ * Hook runs that started but never finished (ADR 0197). Codex kills a hook at
+ * its timeout and the tool proceeds without that hook's checks; the start
+ * marker is the only trace such a run leaves.
+ */
+export function codexHookRunsCheck(coordRoot, nowMs = Date.now(), isAlive) {
+    if (!coordRoot)
+        return null;
+    const runs = findUnfinishedHookRuns(coordRoot, nowMs, undefined, isAlive);
+    if (runs.count === 0)
+        return null;
+    const events = runs.events.map((e) => `${e.event} ×${e.count}`).join(", ");
+    return {
+        name: "codex:hook runs",
+        severity: "warn",
+        detail: `${runs.count} hook run${runs.count === 1 ? "" : "s"} started but never finished in the last 24h ` +
+            `(${events}; latest ${runs.latest}); their tools proceeded without those hooks' checks`,
+        hint: "a hook that outlives its timeout is killed; look for a stalled WSL session or a slow hook",
+    };
+}
+/** Report the per-project Windows bridge opt-in, or an invalid value init ignored. */
+export function codexWindowsBridgeCheck(coordRoot) {
+    if (!coordRoot)
+        return null;
+    const bridge = codexWindowsBridgeConfig(coordRoot);
+    if (bridge.error) {
+        return {
+            name: "codex:Windows hook route",
+            severity: "warn",
+            detail: `${bridge.error}; Codex hooks are wired without commandWindows`,
+            hint: "set hooks.codexWindowsBridge.entryPoint to a plain command name in .harnery/config.jsonc, then re-run init",
+        };
+    }
+    if (!bridge.entryPoint)
+        return null;
+    return {
+        name: "codex:Windows hook route",
+        severity: "ok",
+        detail: `opted in: Windows-native Codex hooks hand off to \`${bridge.entryPoint}\` from WSL paths ` +
+            `when it is on PATH, otherwise run the usual command; bridge health is reported by the bridge itself`,
+    };
+}
 const CODEX_MID_FLIGHT_HISTORY_WINDOW_MS = 48 * 60 * 60 * 1000;
 /** Count bounded, privacy-safe recovery diagnostics so a healthy environment
  * now does not hide an intermittent Codex-to-WSL identity drop. */

package/dist/commands/files.d.ts

@@ -1,5 +1,6 @@
 import type { Command } from "commander";
 import type { EmitContext, HarneryProgramContext } from "../commander.js";
+import { type ProcessAliveCheck, type TunnelState } from "../lib/tunnel/state.js";
 export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
 export type LocalFileUrlMode = "auto" | "raw" | "viewer";
 export interface LocalFileUrlOptions {
@@ -30,5 +31,20 @@ export declare function verifyDashboardRoot(coordRoot: string, port: number, fet
  * work. Other files default to the dashboard viewer.
  */
 export declare function mintLocalFileUrl(input: string, options: LocalFileUrlOptions): LocalFileUrl;
+export declare class TunnelLinkError extends Error {
+    readonly hint: string;
+    constructor(message: string, hint: string);
+}
+/**
+ * Turn a minted local URL into the same file's URL on a live tunnel.
+ *
+ * HTML needs a tunnel in front of the isolated files origin (its vhost is
+ * FILES_ORIGIN_HOST), because only that origin renders the page and serves its
+ * relative assets; a dashboard tunnel can only show the viewer, which displays
+ * HTML as source. Other files need a dashboard tunnel that serves the viewer.
+ * In both cases the tunnel's path scope must forward the request, or its gate
+ * would refuse the link, so a tunnel that does not cover the file is skipped.
+ */
+export declare function tunnelFileUrl(local: LocalFileUrl, port: number, states: TunnelState[], processAlive?: ProcessAliveCheck): string;
 export declare function registerFilesCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
 //# sourceMappingURL=files.d.ts.map

package/dist/commands/files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,gCAAgC,GAChC,yBAAyB,CAAC;AAE9B,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAErC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFZ,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAMD,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,kBAA0B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmDf;AAuCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAS1F;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA0EN"}
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAY1E,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,gCAAgC,GAChC,yBAAyB,CAAC;AAE9B,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAErC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFZ,IAAI,EAAE,sBAAsB,EACrC,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAMD,MAAM,MAAM,kBAAkB,GAAG,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,kBAA0B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmDf;AAuCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAS1F;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBADrB,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EAAE,EACrB,YAAY,CAAC,EAAE,iBAAiB,GAC/B,MAAM,CA+BR;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAqFN"}

package/dist/commands/files.js

@@ -3,7 +3,9 @@ import path from "node:path";
 import { resolveCoordRoot } from "../core/agents/coord-client.js";
 import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.js";
 import { coordRootId, localCoordRootIdUrl } from "../lib/coord-root-id.js";
-import { localFilesOriginUrl, localFileViewerUrl } from "../lib/local-file-url.js";
+import { encodedRepoPath, encodeLinkSafeComponent, FILES_ORIGIN_HOST, localFilesOriginUrl, localFileViewerUrl, } from "../lib/local-file-url.js";
+import { isPathAllowed } from "../lib/tunnel/path-scope.js";
+import { isTunnelStateLive, listStates, tunnelTargetPort, } from "../lib/tunnel/state.js";
 export { FILES_ORIGIN_HOST } from "../lib/local-file-url.js";
 export class DashboardRootError extends Error {
     code;
@@ -99,6 +101,49 @@ export function mintLocalFileUrl(input, options) {
         : localFileViewerUrl(relPath, options.port);
     return { url, relPath, mode };
 }
+export class TunnelLinkError extends Error {
+    hint;
+    constructor(message, hint) {
+        super(message);
+        this.hint = hint;
+        this.name = "TunnelLinkError";
+    }
+}
+function vhostName(vhost) {
+    return vhost.replace(/:\d+$/, "").toLowerCase();
+}
+function newestFirst(states) {
+    return [...states].sort((a, b) => b.started_at.localeCompare(a.started_at));
+}
+/**
+ * Turn a minted local URL into the same file's URL on a live tunnel.
+ *
+ * HTML needs a tunnel in front of the isolated files origin (its vhost is
+ * FILES_ORIGIN_HOST), because only that origin renders the page and serves its
+ * relative assets; a dashboard tunnel can only show the viewer, which displays
+ * HTML as source. Other files need a dashboard tunnel that serves the viewer.
+ * In both cases the tunnel's path scope must forward the request, or its gate
+ * would refuse the link, so a tunnel that does not cover the file is skipped.
+ */
+export function tunnelFileUrl(local, port, states, processAlive) {
+    const live = states.filter((state) => tunnelTargetPort(state) === port && isTunnelStateLive(state, processAlive));
+    if (local.mode === "raw") {
+        const path = `/${encodedRepoPath(local.relPath)}`;
+        const tunnel = newestFirst(live).find((state) => vhostName(state.vhost) === FILES_ORIGIN_HOST && isPathAllowed(path, state.allow_paths));
+        if (tunnel)
+            return `${tunnel.url.replace(/\/+$/, "")}${path}`;
+        const folder = local.relPath.includes("/")
+            ? `/${local.relPath.slice(0, local.relPath.lastIndexOf("/"))}`
+            : "/";
+        throw new TunnelLinkError(`no live tunnel serves the files origin for /${local.relPath}`, `Start one scoped to the page's folder, for example: tunnel up --name pages --target 127.0.0.1:${port} --vhost ${FILES_ORIGIN_HOST} --allow-path ${folder}`);
+    }
+    const tunnel = newestFirst(live).find((state) => vhostName(state.vhost) !== FILES_ORIGIN_HOST &&
+        ["/files", "/api/file", "/_next"].every((path) => isPathAllowed(path, state.allow_paths)));
+    if (tunnel) {
+        return `${tunnel.url.replace(/\/+$/, "")}/files?path=${encodeLinkSafeComponent(local.relPath)}`;
+    }
+    throw new TunnelLinkError(`no live tunnel serves the dashboard file viewer on port ${port}`, `Start one, for example: tunnel up --name files --target 127.0.0.1:${port} --allow-path /files --allow-path /api/file --allow-path /_next`);
+}
 export function registerFilesCommand(program, emit, context) {
     const files = program
         .command("files")
@@ -112,6 +157,7 @@ export function registerFilesCommand(program, emit, context) {
         .option("--raw", "Use the isolated files origin, regardless of extension")
         .option("--viewer", "Use the dashboard file viewer, regardless of extension")
         .option("--no-verify", "Mint without checking the running dashboard's repository identity")
+        .option("--tunnel", "Print the file's URL on a live tunnel instead of localhost (HTML uses a files-origin tunnel)")
         .action(async (filePath, opts) => {
         if (opts.raw && opts.viewer) {
             emit.error({
@@ -147,9 +193,15 @@ export function registerFilesCommand(program, emit, context) {
             });
             if (opts.verify !== false)
                 await verifyDashboardRoot(coordRoot, port);
-            emit.text(`${result.url}\n`);
+            const url = opts.tunnel ? tunnelFileUrl(result, port, listStates(coordRoot)) : result.url;
+            emit.text(`${url}\n`);
         }
         catch (error) {
+            if (error instanceof TunnelLinkError) {
+                emit.error({ code: "no_tunnel_for_file", message: error.message, hint: error.hint });
+                emit.setExitCode(1);
+                return;
+            }
             if (error instanceof DashboardRootError) {
                 emit.error({ code: error.code, message: error.message, hint: error.hint });
                 emit.setExitCode(1);

package/dist/commands/init.d.ts

@@ -23,7 +23,7 @@ import type { Command } from "commander";
 import type { EmitContext } from "../commander.js";
 import type { EventV3ControlState } from "../core/events/v3/control.js";
 import { type AdapterId, type AdapterSpec } from "../core/hooks/adapter/events.js";
-import { type SettingsFile } from "../core/hooks/adapter/wiring.js";
+import { type SettingsFile, type WiringOptions } from "../core/hooks/adapter/wiring.js";
 /**
  * Which adapters `init` should wire. An explicit `--adapter` wins. Without one:
  * every adapter whose CLI is installed on this machine, plus every adapter the
@@ -55,7 +55,7 @@ export declare function codexHookReviewAction(adapter: AdapterId): string | null
  *
  * Token-aware matching keeps `stop` from matching `stop-failure`.
  */
-export declare function wireHooks(settings: SettingsFile, spec: AdapterSpec, agentHookPath: string, adapter: AdapterId): {
+export declare function wireHooks(settings: SettingsFile, spec: AdapterSpec, agentHookPath: string, adapter: AdapterId, options?: WiringOptions): {
     wired: number;
     already: number;
     removed: number;

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAInD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAKlG,OAAO,EAWL,KAAK,YAAY,EAElB,MAAM,iCAAiC,CAAC;AA0CzC;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,SAAS,CAAC,EAAE,SAAS,EAAE,GACtB;IAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAM3C;AAyFD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CA8T/F;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAiBjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,GACjB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAsDvE;AAyFD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAOxE,OAAO,EAAiB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAKlG,OAAO,EAcL,KAAK,YAAY,EAEjB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AA0CzC;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,SAAS,CAAC,EAAE,SAAS,EAAE,GACtB;IAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAM3C;AA6FD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAmU/F;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAiBjF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAmEvE;AA2GD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmDhG;AASD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkCxF"}

package/dist/commands/init.js

@@ -24,14 +24,14 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { DEFAULT_BIN_NAME, pinnedBinName, stripJsonComments } from "../core/config.js";
+import { codexWindowsBridgeConfig, DEFAULT_BIN_NAME, pinnedBinName, stripJsonComments, } from "../core/config.js";
 import { canonicalJsonV3 } from "../core/events/v3/canonical.js";
 import { ADAPTER_CAPABILITY_PROFILES_V3 } from "../core/events/v3/capabilities.js";
 import { EVENT_V3_SCHEMA_DIGEST } from "../core/events/v3/generated.js";
 import { initializeEventLedgerV3, readEventV3ControlState, sha256V3, } from "../core/events/v3/index.js";
 import { ADAPTER_SPECS } from "../core/hooks/adapter/events.js";
 import { checkOpenCodePlugin, installOpenCodePlugin, } from "../core/hooks/adapter/opencode-plugin.js";
-import { agentHookPathForProject, applyCursorStopLoopLimit, CURSOR_STOP_FOLLOWUP_LOOP_LIMIT, commandWiresSubcommand, diffWiring, groupCommands, hookCommand, isAgentHookCommand, makeEntry, summarizeAdapterWiring, } from "../core/hooks/adapter/wiring.js";
+import { agentHookPathForProject, applyCursorStopLoopLimit, CURSOR_STOP_FOLLOWUP_LOOP_LIMIT, commandWiresSubcommand, diffWiring, expectedCommandWindows, groupCommands, hookCommand, hookTimeoutFor, isAgentHookCommand, makeEntry, orderHandlerKeys, summarizeAdapterWiring, } from "../core/hooks/adapter/wiring.js";
 import { detectInstalledAdapters } from "../core/workflow/adapters.js";
 import { applyIndexerExclusions } from "../lib/indexer-exclusions.js";
 import { applyInstructions, checkInstructions, } from "../lib/instructions/apply.js";
@@ -102,7 +102,11 @@ function checkAdapterHooks(projectRoot, adapter, bin) {
     let drift = false;
     try {
         const settings = JSON.parse(readFileSync(settingsPath, "utf8"));
-        const hookDiff = diffWiring(settings, spec, { agentHookPath: agentHook, adapter });
+        const hookDiff = diffWiring(settings, spec, {
+            agentHookPath: agentHook,
+            adapter,
+            windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+        });
         drift =
             hookDiff.missing.length > 0 ||
                 hookDiff.stale.length > 0 ||
@@ -379,7 +383,11 @@ export function registerInitCommand(program, emit, binName) {
                 else {
                     settings = {};
                 }
-                const { wired, already, removed, upgraded } = wireHooks(settings, spec, agentHook, adapter);
+                const bridge = codexWindowsBridgeConfig(projectRoot);
+                if (bridge.error && spec.windowsBridgeHooks) {
+                    actions.push(`⚠ ${bridge.error}; writing ${adapter} hooks without commandWindows`);
+                }
+                const { wired, already, removed, upgraded } = wireHooks(settings, spec, agentHook, adapter, { windowsBridgeEntryPoint: bridge.entryPoint });
                 if (wired === 0 && removed === 0 && upgraded === 0) {
                     actions.push(`· all ${spec.events.length} ${adapter} hooks already wired in ${rel(projectRoot, settingsPath)}`);
                 }
@@ -481,7 +489,7 @@ export function codexHookReviewAction(adapter) {
  *
  * Token-aware matching keeps `stop` from matching `stop-failure`.
  */
-export function wireHooks(settings, spec, agentHookPath, adapter) {
+export function wireHooks(settings, spec, agentHookPath, adapter, options) {
     if (spec.rootVersion !== undefined && settings.version === undefined) {
         settings.version = spec.rootVersion;
     }
@@ -498,6 +506,13 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
     }
     for (const { settingsKey, subcommand } of spec.events) {
         const command = hookCommand(spec, agentHookPath, subcommand, adapter);
+        const timeout = hookTimeoutFor(spec, subcommand);
+        const commandWindows = expectedCommandWindows(spec, agentHookPath, subcommand, adapter, options);
+        const handlerFields = {
+            timeout,
+            commandWindows,
+            windowsBridge: spec.windowsBridgeHooks === true,
+        };
         let present = false;
         for (const key of Object.keys(settings.hooks)) {
             if (key === settingsKey)
@@ -507,7 +522,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
         const groups = settings.hooks[settingsKey] ?? [];
         const nextGroups = [];
         for (const group of groups) {
-            const normalized = normalizeEventGroup(group, subcommand, command, present);
+            const normalized = normalizeEventGroup(group, subcommand, command, handlerFields, present);
             if (normalized.found && !present)
                 present = true;
             upgraded += normalized.upgraded;
@@ -526,7 +541,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
         const current = settings.hooks[settingsKey] ?? [];
         current.push(makeEntry(spec.entryShape, command, spec.entryShape === "cursor" && subcommand === "stop"
             ? { loop_limit: CURSOR_STOP_FOLLOWUP_LOOP_LIMIT }
-            : undefined));
+            : { timeout, commandWindows }));
         settings.hooks[settingsKey] = current;
         wired++;
     }
@@ -542,7 +557,7 @@ export function wireHooks(settings, spec, agentHookPath, adapter) {
  * that don't set the var. Only the env expansion is quoted so the
  * `agent-hook <subcommand> ` wiring match stays byte-identical.
  */
-function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
+function normalizeEventGroup(group, subcommand, canonical, fields, alreadyFound) {
     let found = false;
     let upgraded = 0;
     let removed = 0;
@@ -561,7 +576,8 @@ function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
     }
     if ("hooks" in group && Array.isArray(group.hooks)) {
         const kept = [];
-        for (const hook of group.hooks) {
+        for (const original of group.hooks) {
+            let hook = original;
             if (typeof hook.command !== "string" || !commandWiresSubcommand(hook.command, subcommand)) {
                 kept.push(hook);
                 continue;
@@ -571,8 +587,26 @@ function normalizeEventGroup(group, subcommand, canonical, alreadyFound) {
                 continue;
             }
             found = true;
+            let changed = false;
             if (hook.command !== canonical) {
                 hook.command = canonical;
+                changed = true;
+            }
+            if (fields.timeout !== undefined && hook.timeout !== fields.timeout) {
+                hook.timeout = fields.timeout;
+                changed = true;
+            }
+            // Harnery owns commandWindows on its own handlers for adapters that run
+            // it: write the opted-in command, or remove one a project opted out of.
+            if (fields.windowsBridge && hook.commandWindows !== fields.commandWindows) {
+                if (fields.commandWindows === undefined)
+                    delete hook.commandWindows;
+                else
+                    hook.commandWindows = fields.commandWindows;
+                changed = true;
+            }
+            if (changed) {
+                hook = orderHandlerKeys(hook);
                 upgraded++;
             }
             kept.push(hook);

package/dist/commands/rm.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+import type { EmitContext, HarneryProgramContext } from "../commander.js";
+export declare function registerRmCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
+//# sourceMappingURL=rm.d.ts.map

package/dist/commands/rm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rm.d.ts","sourceRoot":"","sources":["../../src/commands/rm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAU1E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAgFN"}

package/dist/commands/rm.js

@@ -0,0 +1,87 @@
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { resolveCoordRoot } from "../core/agents/coord-client.js";
+import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../core/events/v3/coordination-view.js";
+import { liveInstanceIdV3 } from "../core/events/v3/live-route-observer.js";
+import { resolveOwner } from "../core/hooks/resolve/owner.js";
+import { guardedRemove } from "../lib/guarded-remove.js";
+export function registerRmCommand(program, emit, context) {
+    program
+        .command("rm <paths...>")
+        .description("Preview guarded removal of untracked files; --yes applies permanent deletion")
+        .requiredOption("--root <directory>", "Allowed directory; each target must be strictly inside it")
+        .option("-r, --recursive", "Permit directory removal after inspecting its complete contents")
+        .option("--allow-protected <path>", "Remove this one protected path (Git metadata, credentials, Harnery state, keys) inside a target; repeat per path", (value, previous = []) => [...previous, value])
+        .option("--yes", "Permanently remove validated targets")
+        .option("--dry-run", "Preview only, even with --yes")
+        .option("--json", "Emit the versioned removal report")
+        .action((paths, options) => {
+        try {
+            const coordRoot = context?.resolveCoordRoot?.() ?? context?.repoRoot ?? resolveCoordRoot();
+            const checkClaims = (targets) => {
+                if (!coordRoot || !existsSync(resolve(coordRoot, ".harnery")))
+                    return;
+                const view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(coordRoot));
+                const owner = resolveOwner({ payload: null, coordRoot });
+                const ownId = owner ? liveInstanceIdV3(owner.instance_id) : undefined;
+                const ownSession = ownId ? view.instances[ownId]?.session_id : undefined;
+                for (const peer of Object.values(view.instances)) {
+                    if (!peer.authority_eligible ||
+                        peer.instance_id === ownId ||
+                        (ownSession && peer.session_id === ownSession))
+                        continue;
+                    for (const claim of peer.files_touched) {
+                        const claimed = resolve(coordRoot, claim);
+                        for (const target of targets) {
+                            if (overlaps(target, claimed))
+                                throw new Error(`Target overlaps another agent's claim: ${claim} (${peer.instance_id})`);
+                        }
+                    }
+                }
+            };
+            // The workspace this command coordinates, and the checkout it runs in:
+            // their own .git and .harnery can never be allowed.
+            const liveRoots = [coordRoot, gitTopLevel(process.cwd())].filter((dir) => Boolean(dir));
+            const report = guardedRemove(paths, { ...options, liveRoots }, checkClaims);
+            if (options.json) {
+                emit.config({ format: "json" });
+                emit.data(report);
+            }
+            else {
+                const lines = [
+                    `${report.applied ? "Removed" : "Would remove"} ${report.targets.length} target(s), ${report.entries} entries, ${report.bytes} bytes:`,
+                    ...report.targets,
+                ];
+                if (report.protected.length)
+                    lines.push("Protected paths named with --allow-protected:", ...report.protected.map((path) => `  ${path}`));
+                if (report.links.length)
+                    lines.push("Links removed as links (their targets are untouched):", ...report.links.map((link) => `  ${link.path} -> ${link.target}`));
+                if (!report.applied)
+                    lines.push("Preview only. Add --yes to permanently delete these targets.");
+                emit.text(lines.join("\n"));
+            }
+        }
+        catch (error) {
+            emit.error({
+                code: "removal_refused",
+                message: error instanceof Error ? error.message : String(error),
+            });
+            emit.setExitCode(1);
+        }
+    });
+}
+function gitTopLevel(dir) {
+    const result = spawnSync("git", ["-C", dir, "rev-parse", "--show-toplevel"], {
+        encoding: "utf8",
+        timeout: 10_000,
+    });
+    return result.status === 0 ? result.stdout.trim() || undefined : undefined;
+}
+function overlaps(a, b) {
+    const inside = (parent, child) => {
+        const rel = relative(parent, child);
+        return rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+    };
+    return inside(a, b) || inside(b, a);
+}