harnery 0.41.0 → 0.43.0

package/dist/commands/web-fetch.d.ts

@@ -1,10 +1,11 @@
+import { spawnSync } from "node:child_process";
 import type { EmitContext } from "../commander.js";
 /** bun if available (preferred), else npm. Both support `<runner> install` and `<runner> run <script>`. */
-export declare function webRunner(): "bun" | "npm";
+export declare function webRunner(spawn?: typeof spawnSync): "bun" | "npm";
 /**
  * Ensure a cached harnery checkout's `web/` exists for this version and return
  * its path, fetching (clone + install) on first use. Returns null on failure
  * (after emitting an actionable error).
  */
-export declare function lazyFetchWebRoot(emit: EmitContext): string | null;
+export declare function lazyFetchWebRoot(emit: EmitContext, spawn?: typeof spawnSync): string | null;
 //# sourceMappingURL=web-fetch.d.ts.map

package/dist/commands/web-fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-fetch.d.ts","sourceRoot":"","sources":["../../src/commands/web-fetch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAiDnD,2GAA2G;AAC3G,wBAAgB,SAAS,IAAI,KAAK,GAAG,KAAK,CAGzC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAmDjE"}
+{"version":3,"file":"web-fetch.d.ts","sourceRoot":"","sources":["../../src/commands/web-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAK/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAmDnD,2GAA2G;AAC3G,wBAAgB,SAAS,CAAC,KAAK,GAAE,OAAO,SAAqB,GAAG,KAAK,GAAG,KAAK,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,WAAW,EACjB,KAAK,GAAE,OAAO,SAAqB,GAClC,MAAM,GAAG,IAAI,CAyDf"}

package/dist/commands/web-fetch.js

@@ -14,9 +14,11 @@ import { fileURLToPath } from "node:url";
  * harnery repo at the *matching version tag* into a cache dir and install the
  * web app's deps. Subsequent runs reuse the cache.
  *
- * The only thing `web/` pulls from `src/` is `harnery/core/journal` (a single,
- * dependency-free module), so the install is `web/` deps only: no root install,
- * no Playwright browser download.
+ * `web/` imports readers from `src/`, and `web/next.config.ts` resolves the
+ * root `playwright` package, so the install covers the repository root and
+ * then `web/`. Installing the `playwright` package downloads no browsers.
+ * Installing `web/` alone left `harn web up` failing with
+ * `Cannot find module 'playwright/package.json'`.
  */
 const DEFAULT_REPO_URL = "https://github.com/ryanjkelly/harnery.git";
 /** harnery's own package root: src/commands/ -> ../.. ; valid in both src/ and dist/. */
@@ -46,8 +48,8 @@ function webCacheRoot(ref) {
     return path.join(base, "harnery", "web", safeRef);
 }
 /** bun if available (preferred), else npm. Both support `<runner> install` and `<runner> run <script>`. */
-export function webRunner() {
-    const r = spawnSync("bun", ["--version"], { stdio: "ignore" });
+export function webRunner(spawn = spawnSync) {
+    const r = spawn("bun", ["--version"], { stdio: "ignore" });
     return r.status === 0 ? "bun" : "npm";
 }
 /**
@@ -55,13 +57,14 @@ export function webRunner() {
  * its path, fetching (clone + install) on first use. Returns null on failure
  * (after emitting an actionable error).
  */
-export function lazyFetchWebRoot(emit) {
+export function lazyFetchWebRoot(emit, spawn = spawnSync) {
     const { version, repoUrl } = readPkg();
     const ref = resolveRef(version);
     const cacheRoot = webCacheRoot(ref);
     const webDir = path.join(cacheRoot, "web");
-    // node_modules in the cached web/ is the "fetched + installed" marker.
-    if (existsSync(path.join(webDir, "node_modules"))) {
+    // node_modules in both the cached root and web/ is the "fetched + installed" marker.
+    if (existsSync(path.join(cacheRoot, "node_modules")) &&
+        existsSync(path.join(webDir, "node_modules"))) {
         emit.log(`harn web · using cached dashboard (${ref})`, "info");
         return webDir;
     }
@@ -71,7 +74,7 @@ export function lazyFetchWebRoot(emit) {
     if (existsSync(cacheRoot))
         rmSync(cacheRoot, { recursive: true, force: true });
     mkdirSync(path.dirname(cacheRoot), { recursive: true });
-    const clone = spawnSync("git", ["clone", "--depth", "1", "--branch", ref, repoUrl, cacheRoot], {
+    const clone = spawn("git", ["clone", "--depth", "1", "--branch", ref, repoUrl, cacheRoot], {
         stdio: "inherit",
     });
     if (clone.status !== 0) {
@@ -84,16 +87,19 @@ export function lazyFetchWebRoot(emit) {
         });
         return null;
     }
-    const runner = webRunner();
-    emit.log(`harn web · installing dashboard deps (${runner} install in web/)`, "info");
-    const install = spawnSync(runner, ["install"], { cwd: webDir, stdio: "inherit" });
-    if (install.status !== 0) {
-        emit.error({
-            code: "web_fetch_failed",
-            message: `${runner} install in ${webDir} failed (status ${install.status})`,
-            hint: `Try manually: cd ${webDir} && ${runner} install`,
-        });
-        return null;
+    const runner = webRunner(spawn);
+    for (const dir of [cacheRoot, webDir]) {
+        const where = dir === webDir ? "web/" : "the harnery root";
+        emit.log(`harn web · installing dashboard deps (${runner} install in ${where})`, "info");
+        const install = spawn(runner, ["install"], { cwd: dir, stdio: "inherit" });
+        if (install.status !== 0) {
+            emit.error({
+                code: "web_fetch_failed",
+                message: `${runner} install in ${dir} failed (status ${install.status})`,
+                hint: `Try manually: cd ${dir} && ${runner} install`,
+            });
+            return null;
+        }
     }
     emit.log(`harn web · dashboard ready (cached at ${webDir})`, "info");
     return webDir;

package/dist/commands/web.d.ts

@@ -19,7 +19,13 @@ export declare function resolveMaxOldSpaceMb(flag?: string): number;
  * wins without clobbering flags the caller set (source maps, inspector, …).
  */
 export declare function nodeOptionsWithHeapCap(mb: number): string | undefined;
-/** Preload the request diagnostics hook without replacing Next's HTTP server. */
+/**
+ * Preload the dashboard's server hooks (keep-alive and request diagnostics)
+ * without replacing Next's HTTP server. NODE_OPTIONS reaches the child that
+ * `next dev` forks, but Next re-parses every `--import` into one value, so
+ * this names the single combined preload; a second, different `--import`
+ * would collapse into an unloadable path (web/server-preload.mjs).
+ */
 export declare function nodeOptionsWithWebDiagnostics(webDir: string, mb: number): string;
 export declare function webPerformanceLogDestination(coordRoot: string, env?: Readonly<Record<string, string | undefined>>): string;
 /**

package/dist/commands/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA8CnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AAED,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CAQR;AAmDD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA2N5E"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/commands/web.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA8CnD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CAQR;AAmDD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA2N5E"}

package/dist/commands/web.js

@@ -71,12 +71,18 @@ export function nodeOptionsWithHeapCap(mb) {
         return inherited;
     return `${inherited} --max-old-space-size=${mb}`.trim();
 }
-/** Preload the request diagnostics hook without replacing Next's HTTP server. */
+/**
+ * Preload the dashboard's server hooks (keep-alive and request diagnostics)
+ * without replacing Next's HTTP server. NODE_OPTIONS reaches the child that
+ * `next dev` forks, but Next re-parses every `--import` into one value, so
+ * this names the single combined preload; a second, different `--import`
+ * would collapse into an unloadable path (web/server-preload.mjs).
+ */
 export function nodeOptionsWithWebDiagnostics(webDir, mb) {
     const inherited = nodeOptionsWithHeapCap(mb) ?? "";
-    if (inherited.includes("server-performance.mjs"))
+    if (inherited.includes("server-preload.mjs"))
         return inherited;
-    const preload = pathToFileURL(path.join(webDir, "server-performance.mjs")).href;
+    const preload = pathToFileURL(path.join(webDir, "server-preload.mjs")).href;
     return `${inherited} --import=${preload}`.trim();
 }
 export function webPerformanceLogDestination(coordRoot, env = process.env) {

package/dist/core/adapters/profiles.d.ts

@@ -17,6 +17,9 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
             readonly date: "2026-08-18";
             readonly version: "2.1.233 (Claude Code)";
         };
+        readonly fullAccess: {
+            readonly argv: readonly ["--permission-mode", "bypassPermissions", "--settings", "{\"sandbox\":{\"enabled\":false}}"];
+        };
         readonly capabilities: AdapterCapabilities;
     };
     readonly codex: {
@@ -41,6 +44,9 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
             };
             readonly writableRoots: true;
         };
+        readonly fullAccess: {
+            readonly argv: readonly ["--sandbox", "danger-full-access"];
+        };
         readonly capabilities: AdapterCapabilities;
     };
     readonly cursor: {
@@ -58,6 +64,9 @@ export declare const BUILTIN_ADAPTER_PROFILES: {
             readonly date: "2026-09-20";
             readonly version: "2026.09.18-9a7762b";
         };
+        readonly fullAccess: {
+            readonly argv: readonly ["--sandbox", "disabled"];
+        };
         readonly capabilities: AdapterCapabilities;
     };
     readonly opencode: {

package/dist/core/adapters/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkIc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,8DAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAgCvF;gFACgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuJc,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAErE,eAAO,MAAM,mBAAmB,8DAE/B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,gBAAgB,CAEnE;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUlF"}

package/dist/core/adapters/profiles.js

@@ -41,6 +41,18 @@ export const BUILTIN_ADAPTER_PROFILES = {
         modelFamily: "claude",
         effortValues: ["low", "medium", "high", "xhigh", "max"],
         verified: { date: "2026-08-18", version: "2.1.233 (Claude Code)" },
+        // Checked against 2.1.283 (ADR 0192). Claude Code has no sandbox mode flag;
+        // its permission mode and its optional Bash sandbox are separate, so full
+        // access needs both: bypass permissions, and a settings layer that turns
+        // the Bash sandbox off in case a user or project settings file enabled it.
+        fullAccess: {
+            argv: [
+                "--permission-mode",
+                "bypassPermissions",
+                "--settings",
+                '{"sandbox":{"enabled":false}}',
+            ],
+        },
         capabilities: capabilities({
             effortSelection: supported("Mapped to `--effort <level>`."),
             maxTurns: supported("Mapped to `--max-turns <n>`."),
@@ -70,6 +82,9 @@ export const BUILTIN_ADAPTER_PROFILES = {
             modes: { "read-only": "read-only", "workspace-write": "workspace-write" },
             writableRoots: true,
         },
+        // Checked against codex-cli 0.155.1 (ADR 0192): `--sandbox` accepts
+        // danger-full-access, and `codex exec` never prompts for approval.
+        fullAccess: { argv: ["--sandbox", "danger-full-access"] },
         capabilities: capabilities({
             effortSelection: supported('Mapped to `-c model_reasoning_effort="<level>"`.'),
             filesystemPolicyProjection: supported("Mode renders to --sandbox; writable roots to sandbox_workspace_write.writable_roots."),
@@ -93,6 +108,10 @@ export const BUILTIN_ADAPTER_PROFILES = {
         modelFamily: "multi",
         effortValues: [],
         verified: { date: "2026-09-20", version: "2026.09.18-9a7762b" },
+        // Checked against 2026.09.26-dd393fe (ADR 0192): `--sandbox disabled`
+        // overrides the configured sandbox. Cursor carries effort inside the model
+        // id, so a full-access floor for it names exact model ids.
+        fullAccess: { argv: ["--sandbox", "disabled"] },
         capabilities: capabilities({
             effortSelection: unsupported("Cursor embeds effort in some parameterized model ids; Harnery does not rewrite model ids."),
             maxTurns: unsupported("cursor-agent exposes no turn-ceiling flag."),
@@ -118,7 +137,9 @@ export const BUILTIN_ADAPTER_PROFILES = {
         authModel: "own-auth",
         modelFamily: "multi",
         // Model reasoning is selected through the `provider/model#variant` id;
-        // OpenCode exposes no separate effort dial for Harnery to map.
+        // OpenCode exposes no separate effort dial for Harnery to map. It also has
+        // no vendor sandbox to remove, so it declares no full-access rendering and
+        // a worker on it is never granted one (ADR 0192).
         effortValues: [],
         verified: { date: "2026-09-20", version: "opencode v2.0.11" },
         capabilities: capabilities({

package/dist/core/adapters/types.d.ts

@@ -42,6 +42,15 @@ export interface AdapterProfile {
     /** How this adapter projects host filesystem policy into the vendor's own
      * sandbox (ADR 0039). Absent means it cannot project any of it. */
     sandboxProjection?: AdapterSandboxProjection;
+    /** Vendor-native arguments that launch a worker with no vendor sandbox
+     * (ADR 0192). Absent means the adapter has no distinguishable full-access
+     * mode, so a worker on it never qualifies for one. */
+    fullAccess?: AdapterFullAccessRendering;
+}
+/** How an adapter renders an unsandboxed launch (ADR 0192). The spawner emits
+ * exactly these arguments, so the declaration and the argv cannot drift. */
+export interface AdapterFullAccessRendering {
+    argv: readonly string[];
 }
 /** Fully planned child invocation. `resultFile` is used by adapters such as
  * Codex that deliver the authoritative final answer out-of-band. */

package/dist/core/adapters/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE/E;uDACuD;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpF,eAAO,MAAM,6BAA6B,2TAoBhC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAExF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B;iFAC6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;AAEtF;;;0DAG0D;AAC1D,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,iEAAiE;IACjE,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,gBAAgB,CAAC;IAClC,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACxC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,YAAY,EAAE,mBAAmB,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C;uEACmE;IACnE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CAC9C;AAED;oEACoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;0BAGsB;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;kFAG8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG;QAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;wDAEwD;AACxD,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACnF,eAAe,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,WAAW,CAAC;IACxD,OAAO,EAAE,mBAAmB,CAAC;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE/E;uDACuD;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpF,eAAO,MAAM,6BAA6B,2TAoBhC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAExF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B;iFAC6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;AAEtF;;;0DAG0D;AAC1D,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,iEAAiE;IACjE,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,gBAAgB,CAAC;IAClC,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACxC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,YAAY,EAAE,mBAAmB,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C;uEACmE;IACnE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C;;0DAEsD;IACtD,UAAU,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAED;4EAC4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED;oEACoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;0BAGsB;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;kFAG8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG;QAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;wDAEwD;AACxD,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACnF,eAAe,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,WAAW,CAAC;IACxD,OAAO,EAAE,mBAAmB,CAAC;CAC9B"}

package/dist/core/agents/cli.js

@@ -279,12 +279,19 @@ async function handleStateAction(root, action, rest) {
                 }
                 catch (error) {
                     const detail = error instanceof Error ? error.message : String(error);
-                    // A missing heartbeat here means the session's generation ended
-                    // while its process lived on. Name the reopen command (ADR 0088);
-                    // set-task is usually the first thing such a session runs.
-                    const hint = detail.includes("heartbeat_missing:")
-                        ? `; run \`${resolveBinName(root)} agents lifecycle active\` to open a fresh generation for this continuing session`
-                        : "";
+                    // A missing heartbeat usually means the session's generation ended
+                    // while its process lived on, so name the reopen command (ADR 0088).
+                    // A still-live generation whose authority the ledger withholds looks
+                    // the same here; name its diagnostics instead, since reopen cannot apply.
+                    const { describeLiveAuthorityBlockV3, liveAuthorityBlockHintV3, liveAuthorityBlockV3 } = await import("./state/live-coordination-view.js");
+                    const block = detail.includes("heartbeat_missing:")
+                        ? liveAuthorityBlockV3(root, owner)
+                        : null;
+                    const hint = block
+                        ? `; ${describeLiveAuthorityBlockV3(block)}; ${liveAuthorityBlockHintV3(resolveBinName(root))}`
+                        : detail.includes("heartbeat_missing:")
+                            ? `; run \`${resolveBinName(root)} agents lifecycle active\` to open a fresh generation for this continuing session`
+                            : "";
                     process.stderr.write(`agent-coord set-task: V3 authority refused (${detail})${hint}\n`);
                     return 1;
                 }

package/dist/core/agents/render/prompt-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAgDH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAkFnE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CA6CtF"}
+{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAiDH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAkFnE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CA6CtF"}

package/dist/core/agents/render/prompt-context.js

@@ -43,6 +43,7 @@ import { drainMailbox, formatMailboxDelivery } from "../mailbox.js";
 import { sessionNameDisplayBlock, sessionNameDisplayPending } from "../session-name-display.js";
 import { heartbeatPath } from "../state/heartbeat-reader.js";
 import { readLiveCoordinationRow, readLiveCoordinationRows, } from "../state/live-coordination-view.js";
+import { forkRelationLabels } from "../state/names.js";
 import { formatPendingCouncils, recordDeliveredMessages } from "./session-context.js";
 /**
  * Build the combined UserPromptSubmit additionalContext string. Returns "" when
@@ -337,7 +338,7 @@ function computePeerTableIfChanged(coordRoot, selfInstanceId, selfSessionIdFallb
     if (oldHash && oldHash === newHash)
         return "";
     // Render peer table via the same formatter used at SessionStart.
-    const local = formatPeerTable(peers, mySessionId);
+    const local = formatPeerTable(peers, mySessionId, forkRelationLabels(coordRoot, selfInstanceId, new Set(peers.map((p) => p.instance_id ?? ""))));
     const remoteTable = formatRemoteTable(remote);
     const table = [local, remoteTable].filter(Boolean).join("\n\n");
     if (!table)
@@ -458,7 +459,7 @@ function writeHashFile(path, value) {
  * intentionally co-located here so the prompt-context renderer is self-contained
  * (no cross-file imports of formatting internals). If both renderers diverge,
  * pull the shared bits into a small util module. */
-function formatPeerTable(peers, mySessionId) {
+function formatPeerTable(peers, mySessionId, relations = new Map()) {
     if (peers.length === 0)
         return "";
     const nowSec = Math.floor(Date.now() / 1000);
@@ -474,9 +475,13 @@ function formatPeerTable(peers, mySessionId) {
         .map((p) => {
         const folded = fold[p.instance_id ?? ""] ?? [];
         const display = Array.from(new Set([...(p.files_touched ?? []), ...folded])).sort();
-        return { ...p, display_files: display };
+        const relation = relations.get(p.instance_id ?? "");
+        return { ...p, display_files: display, ...(relation ? { relation } : {}) };
     });
-    const blocking = rows.filter((p) => p.session_id !== mySessionId).sort(byStartedAt);
+    // Related sessions sort first so a fork parent never hides in "+N more".
+    const blocking = rows
+        .filter((p) => p.session_id !== mySessionId)
+        .sort((a, b) => Number(!!b.relation) - Number(!!a.relation) || byStartedAt(a, b));
     const group = rows.filter((p) => p.session_id === mySessionId).sort(byStartedAt);
     const out = [];
     const blk = renderSubtable(blocking, "Other agent groups active (their files block you):", nowSec);
@@ -508,7 +513,8 @@ function formatRow(r, nowSec) {
     // Prefer a short instance_id over a bare "unknown" so an incomplete row is
     // still identifiable.
     const label = r.name ?? (r.instance_id ? r.instance_id.slice(0, 8) : "unknown");
-    return `  - agent-${label}${taskPart}   (${statePart}, ${ageFrom}, ${filesPart})`;
+    const relation = r.relation ? ` [${r.relation}]` : "";
+    return `  - agent-${label}${relation}${taskPart}   (${statePart}, ${ageFrom}, ${filesPart})`;
 }
 function formatState(r) {
     const activity = r.activity ?? "unknown";

package/dist/core/agents/render/session-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM1E,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAoB3F,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAwF7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,IAAI,CAUN;AAkID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}
+{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM1E,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAoB3F,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAiG7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,IAAI,CAUN;AA6LD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}

package/dist/core/agents/render/session-context.js

@@ -15,7 +15,7 @@ import { appendEntry } from "../../journal/index.js";
 import { readRemoteMachines } from "../../presence/index.js";
 import { drainMailbox, formatMailboxDelivery } from "../mailbox.js";
 import { readLiveCoordinationRows } from "../state/live-coordination-view.js";
-import { readForkParent } from "../state/names.js";
+import { forkRelationLabels, readForkState } from "../state/names.js";
 /**
  * Build the combined SessionStart systemMessage. Returns the additionalContext
  * string (or "" if there's nothing to say).
@@ -25,7 +25,13 @@ export function renderSessionContext(opts) {
     const messages = [];
     // 1. Self-name line + peer table (folded if peers present)
     const peers = readActivePeers(coordRoot, instanceId);
-    const localTable = formatPeerTable(peers, sessionId);
+    const forkState = readForkState(coordRoot, instanceId);
+    const forkParent = forkState?.parent ?? null;
+    const parentRow = forkParent
+        ? peers.find((peer) => peer.instance_id === forkParent.instance_id)
+        : undefined;
+    const relations = forkRelationLabels(coordRoot, instanceId, new Set(peers.map((peer) => peer.instance_id ?? "")));
+    const localTable = formatPeerTable(peers, sessionId, relations);
     // Cross-machine presence (ADR 0016): sessions on other machines (advisory).
     const peerTable = [localTable, formatRemoteMachines(coordRoot)].filter(Boolean).join("\n\n");
     if (agentName) {
@@ -35,13 +41,11 @@ export function renderSessionContext(opts) {
         // asserts the parent's name, claims, and task. When recorded fork lineage
         // (.name-history forked_from) names the parent, say so specifically — the
         // fork is about to read a transcript full of that exact name. Otherwise
-        // fall back to the generic clause, which needs no fork detection.
-        const forkParent = readForkParent(coordRoot, instanceId);
-        const authority = forkParent?.name
-            ? `This conversation was branched from agent-${forkParent.name}'s session: earlier context showing agent-${forkParent.name}'s name, task, or file claims belongs to the pre-fork session, not to you.`
-            : forkParent
-                ? `This conversation was branched from another session (${forkParent.instance_id}); any agent name in earlier context belongs to that session, not to you.`
-                : "Any different agent name in earlier context was inherited from another session; this one is authoritative.";
+        // fall back to the generic clause, which needs no fork detection. A live
+        // parent is the dangerous case (2026-10-07: a fork read its running
+        // parent as its own earlier self and offered to close it), so the notice
+        // names what the parent is doing and forbids ending it.
+        const authority = forkAuthorityClause(forkParent, forkState?.fork === true, parentRow);
         const selfLine = `You are agent-${agentName}${suffix}. ${authority}`;
         messages.push(peerTable ? `${selfLine}\n\n${peerTable}` : selfLine);
     }
@@ -93,6 +97,8 @@ export function renderSessionContext(opts) {
                 bits.push(`missing: ${d.missing.map((m) => m.subcommand).join(", ")}`);
             if (d.orphans.length > 0)
                 bits.push(`orphaned: ${d.orphans.join(", ")}`);
+            if (d.stale.length > 0)
+                bits.push(`outdated: ${d.stale.map((m) => m.subcommand).join(", ")}`);
             return `  - ${d.settingsFile} — ${bits.join("; ")}`;
         });
         messages.push(`Harnery hook wiring is out of date${verPart}: an upgrade changed the hook set but the adapter ` +
@@ -149,13 +155,48 @@ function formatRemoteMachines(coordRoot) {
 function readActivePeers(coordRoot, selfInstanceId) {
     return readLiveCoordinationRows(coordRoot).filter((heartbeat) => heartbeat.instance_id && heartbeat.instance_id !== selfInstanceId);
 }
+const DO_NOT_END = "Do not end, release, or finalize that session unless the operator explicitly tells you to.";
+function forkAuthorityClause(parent, fork, parentRow) {
+    if (parent?.name && parentRow) {
+        const files = parentRow.files_touched ?? [];
+        const task = parentRow.task ? ` on "${parentRow.task.slice(0, 80)}"` : "";
+        const holds = files.length > 0
+            ? ` and holds ${files.length} file${files.length === 1 ? "" : "s"} (${fmtFileList(files)})`
+            : "";
+        const owned = files.length > 0
+            ? parentRow.task
+                ? "That name, task, and those files"
+                : "That name and those files"
+            : parentRow.task
+                ? "That name and task"
+                : "That name";
+        return (`This conversation was forked from agent-${parent.name}, which is still running as a separate session${task}${holds}. ` +
+            `${owned} belong${owned === "That name" ? "s" : ""} to agent-${parent.name}, not to you. ${DO_NOT_END}`);
+    }
+    if (parent?.name) {
+        return `This conversation was branched from agent-${parent.name}'s session: earlier context showing agent-${parent.name}'s name, task, or file claims belongs to the pre-fork session, not to you.`;
+    }
+    if (parent) {
+        return `This conversation was branched from another session (${parent.instance_id}); any agent name in earlier context belongs to that session, not to you.`;
+    }
+    if (fork) {
+        return `This conversation was forked from another session, which may still be running. Any agent name, task, or file claim in earlier context belongs to that session, not to you. ${DO_NOT_END}`;
+    }
+    return "Any different agent name in earlier context was inherited from another session; this one is authoritative.";
+}
+function fmtFileList(files) {
+    const sorted = [...files].sort();
+    return sorted.length <= 3
+        ? sorted.join(", ")
+        : `${sorted.slice(0, 3).join(", ")}, +${sorted.length - 3} more`;
+}
 /**
  * Renders the peer table as
  * two subsections: "Other agent groups active" (blocking) and "Your group"
  * (subagents/siblings, no mutual block). Folds transient subagents' files
  * into their parent session.
  */
-function formatPeerTable(peers, mySessionId) {
+function formatPeerTable(peers, mySessionId, relations = new Map()) {
     if (peers.length === 0)
         return "";
     const nowSec = Math.floor(Date.now() / 1000);
@@ -172,9 +213,13 @@ function formatPeerTable(peers, mySessionId) {
         .map((p) => {
         const folded = fold[p.instance_id ?? ""] ?? [];
         const display = Array.from(new Set([...(p.files_touched ?? []), ...folded])).sort();
-        return { ...p, display_files: display };
+        const relation = relations.get(p.instance_id ?? "");
+        return { ...p, display_files: display, ...(relation ? { relation } : {}) };
     });
-    const blocking = rows.filter((p) => p.session_id !== mySessionId).sort(byStartedAt);
+    // Related sessions sort first so the parent never hides in "+N more".
+    const blocking = rows
+        .filter((p) => p.session_id !== mySessionId)
+        .sort((a, b) => Number(!!b.relation) - Number(!!a.relation) || byStartedAt(a, b));
     const group = rows.filter((p) => p.session_id === mySessionId).sort(byStartedAt);
     const sections = [];
     const blockingSection = renderSubtable(blocking, "Other agent groups active (their files block you):", nowSec);
@@ -202,7 +247,8 @@ function formatRow(r, nowSec) {
     const reason = lifecycle === "blocked" && r.task_state_reason ? `: ${r.task_state_reason.slice(0, 80)}` : "";
     const ageFrom = fmtAge(nowSec - parseIsoSec(r.started_at));
     const filesPart = fmtFiles(r.display_files);
-    return `  - agent-${r.name ?? "unknown"}${taskPart}   (activity=${activity}, lifecycle=${lifecycle}${reason}, ${ageFrom}, ${filesPart})`;
+    const relation = r.relation ? ` [${r.relation}]` : "";
+    return `  - agent-${r.name ?? "unknown"}${relation}${taskPart}   (activity=${activity}, lifecycle=${lifecycle}${reason}, ${ageFrom}, ${filesPart})`;
 }
 function fmtFiles(files) {
     if (files.length === 0)

package/dist/core/agents/state/live-coordination-view.d.ts

@@ -26,4 +26,24 @@ export declare function isCurrentV3HeartbeatCache(cache: Heartbeat | null | unde
 export declare function projectHeartbeatV3(coordRoot: string, generation: CoordinationGenerationViewV3, cache: Heartbeat | undefined, nativeInstanceId: string | undefined, parent?: CoordinationGenerationViewV3): V3HeartbeatMaterialization;
 export declare function observedAdapterV3(generation: CoordinationGenerationViewV3): string | undefined;
 export declare function isAdapterV3(value: string | undefined): value is EventAdapterIdV3;
+/** Why a still-live V3 generation has lost coordination authority. */
+export interface LiveAuthorityBlockV3 {
+    generation_id: string;
+    scope: "generation" | "ledger";
+    diagnostics: {
+        code: string;
+        event_id?: string;
+    }[];
+}
+/**
+ * Explain an authority refusal for a generation that is still live. Callers
+ * reach this after a lookup came back empty; without it the caller sees only
+ * "missing", which reads like an ended session and points at a reopen that
+ * cannot apply. Returns null when no live generation exists or nothing blocks.
+ */
+export declare function liveAuthorityBlockV3(coordRoot: string, nativeInstanceId: string): LiveAuthorityBlockV3 | null;
+/** One-line description of a live authority block, naming codes and events. */
+export declare function describeLiveAuthorityBlockV3(block: LiveAuthorityBlockV3): string;
+/** Recovery pointer for a live authority block, in place of the reopen hint. */
+export declare function liveAuthorityBlockHintV3(binName: string): string;
 //# sourceMappingURL=live-coordination-view.d.ts.map

package/dist/core/agents/state/live-coordination-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-coordination-view.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-view.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EACL,KAAK,4BAA4B,EAIlC,MAAM,sCAAsC,CAAC;AAM9C,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAGtE;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,SAAS;IAC3D,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,QAAQ,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,OAAO,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,KAAK,GAAG,SAAS,CAAC;CAClC;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CA2BxF;AAED,kEAAkE;AAClE,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,0BAA0B,GAAG,IAAI,CAuBnC;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,gBAAgB,GAAG,IAAI,CAWzB;AA8BD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,EAAE,4BAA4B,GACvC,KAAK,IAAI,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,4BAA4B,EACxC,KAAK,EAAE,SAAS,GAAG,SAAS,EAC5B,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,MAAM,CAAC,EAAE,4BAA4B,GACpC,0BAA0B,CAuD5B;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS,CAG9F;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,IAAI,gBAAgB,CAEhF"}
+{"version":3,"file":"live-coordination-view.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-view.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EACL,KAAK,4BAA4B,EAIlC,MAAM,sCAAsC,CAAC;AAM9C,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAGtE;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,SAAS;IAC3D,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,QAAQ,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,OAAO,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,KAAK,GAAG,SAAS,CAAC;CAClC;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CA2BxF;AAED,kEAAkE;AAClE,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,0BAA0B,GAAG,IAAI,CAuBnC;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,gBAAgB,GAAG,IAAI,CAWzB;AA8BD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,EAAE,4BAA4B,GACvC,KAAK,IAAI,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,4BAA4B,EACxC,KAAK,EAAE,SAAS,GAAG,SAAS,EAC5B,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,MAAM,CAAC,EAAE,4BAA4B,GACpC,0BAA0B,CAuD5B;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,4BAA4B,GAAG,MAAM,GAAG,SAAS,CAG9F;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,IAAI,gBAAgB,CAEhF;AAWD,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC/B,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,oBAAoB,GAAG,IAAI,CA2B7B;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAiBhF;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKhE"}

package/dist/core/agents/state/live-coordination-view.js

@@ -159,3 +159,63 @@ function observedModel(generation) {
 function isLifecycleState(value) {
     return value === "active" || value === "blocked" || value === "done";
 }
+/**
+ * Explain an authority refusal for a generation that is still live. Callers
+ * reach this after a lookup came back empty; without it the caller sees only
+ * "missing", which reads like an ended session and points at a reopen that
+ * cannot apply. Returns null when no live generation exists or nothing blocks.
+ */
+export function liveAuthorityBlockV3(coordRoot, nativeInstanceId) {
+    let view;
+    try {
+        if (observeLiveEventLedgerRouteV3(coordRoot).state === "blocked")
+            return null;
+        view = readCoordinationViewV3(coordRoot);
+    }
+    catch {
+        return null;
+    }
+    const generation = view.instances[liveInstanceIdV3(nativeInstanceId)];
+    if (generation?.phase !== "live" || generation.authority_eligible)
+        return null;
+    const own = (view.diagnostics_by_generation[generation.generation_id] ?? []).filter((diagnostic) => diagnostic.authority_blocking);
+    const blocking = own.length
+        ? own
+        : view.global_diagnostics.filter((diagnostic) => diagnostic.authority_blocking);
+    if (!blocking.length)
+        return null;
+    return {
+        generation_id: generation.generation_id,
+        scope: own.length ? "generation" : "ledger",
+        diagnostics: blocking.map((diagnostic) => ({
+            code: diagnostic.source_code
+                ? `${diagnostic.code}:${diagnostic.source_code}`
+                : diagnostic.code,
+            ...(diagnostic.event_id ? { event_id: diagnostic.event_id } : {}),
+        })),
+    };
+}
+/** One-line description of a live authority block, naming codes and events. */
+export function describeLiveAuthorityBlockV3(block) {
+    const byCode = new Map();
+    for (const { code, event_id } of block.diagnostics) {
+        const events = byCode.get(code) ?? [];
+        if (event_id)
+            events.push(event_id);
+        byCode.set(code, events);
+    }
+    const parts = [...byCode].map(([code, events]) => {
+        const shown = events.slice(0, 2).join(", ");
+        const more = events.length > 2 ? `, +${events.length - 2} more` : "";
+        return events.length ? `${code} ×${events.length} (${shown}${more})` : code;
+    });
+    const where = block.scope === "generation"
+        ? `the event ledger holds ${block.diagnostics.length} authority-blocking diagnostic(s) for it`
+        : "the event ledger holds authority-blocking diagnostics that block every generation";
+    return `generation ${block.generation_id} is still live, but ${where}: ${parts.join("; ")}`;
+}
+/** Recovery pointer for a live authority block, in place of the reopen hint. */
+export function liveAuthorityBlockHintV3(binName) {
+    return (`\`${binName} agents lifecycle active\` cannot help because it only reopens an ended ` +
+        `generation; \`${binName} agents health\` lists the diagnostics`);
+}