harnery 0.42.0 → 0.44.0

package/dist/core/agents/render/session-context.d.ts

@@ -7,7 +7,6 @@
  * string.
  */
 import { statSync } from "node:fs";
-import { type MailboxMessageV1 } from "../mailbox.js";
 export interface RenderOpts {
     coordRoot: string;
     instanceId: string;
@@ -16,19 +15,14 @@ export interface RenderOpts {
     /** Adapter label rendered in parens after the self-name (e.g. "Cursor", "Codex").
      * Claude Code omits it. */
     platformLabel?: string;
+    /** The emitter acknowledges exactly these IDs only after output succeeds. */
+    onInboxPrepared?: (messageIds: readonly string[]) => void;
 }
 /**
  * Build the combined SessionStart systemMessage. Returns the additionalContext
  * string (or "" if there's nothing to say).
  */
 export declare function renderSessionContext(opts: RenderOpts): string;
-/**
- * Write delivered peer messages into the recipient's own journal, so they
- * survive context compaction the way any other coordination breadcrumb does.
- * A message the sender already journaled (the recipient was live when it was
- * sent) is skipped to avoid a duplicate entry.
- */
-export declare function recordDeliveredMessages(instanceId: string, messages: readonly MailboxMessageV1[]): void;
 /**
  * Returns a list of commit-guard wiring issues (empty when wired). Portable
  * across host projects: it asserts the FUNCTIONAL property ("does this repo's

package/dist/core/agents/render/session-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM1E,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAoB3F,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAyF7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,IAAI,CAUN;AAkID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}
+{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAyB1E,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CA8F7D;AA6LD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}

package/dist/core/agents/render/session-context.js

@@ -11,11 +11,10 @@ import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { resolveBinName, resolveHooksSetupHint } from "../../config.js";
 import { harneryVersion, loadAdapterWiring } from "../../hooks/adapter/wiring.js";
-import { appendEntry } from "../../journal/index.js";
+import { formatPeerInbox, peerInbox } from "../../inbox/peer-messages.js";
 import { readRemoteMachines } from "../../presence/index.js";
-import { drainMailbox, formatMailboxDelivery } from "../mailbox.js";
 import { readLiveCoordinationRows } from "../state/live-coordination-view.js";
-import { readForkParent } from "../state/names.js";
+import { forkRelationLabels, readForkState } from "../state/names.js";
 /**
  * Build the combined SessionStart systemMessage. Returns the additionalContext
  * string (or "" if there's nothing to say).
@@ -25,7 +24,13 @@ export function renderSessionContext(opts) {
     const messages = [];
     // 1. Self-name line + peer table (folded if peers present)
     const peers = readActivePeers(coordRoot, instanceId);
-    const localTable = formatPeerTable(peers, sessionId);
+    const forkState = readForkState(coordRoot, instanceId);
+    const forkParent = forkState?.parent ?? null;
+    const parentRow = forkParent
+        ? peers.find((peer) => peer.instance_id === forkParent.instance_id)
+        : undefined;
+    const relations = forkRelationLabels(coordRoot, instanceId, new Set(peers.map((peer) => peer.instance_id ?? "")));
+    const localTable = formatPeerTable(peers, sessionId, relations);
     // Cross-machine presence (ADR 0016): sessions on other machines (advisory).
     const peerTable = [localTable, formatRemoteMachines(coordRoot)].filter(Boolean).join("\n\n");
     if (agentName) {
@@ -35,13 +40,11 @@ export function renderSessionContext(opts) {
         // asserts the parent's name, claims, and task. When recorded fork lineage
         // (.name-history forked_from) names the parent, say so specifically — the
         // fork is about to read a transcript full of that exact name. Otherwise
-        // fall back to the generic clause, which needs no fork detection.
-        const forkParent = readForkParent(coordRoot, instanceId);
-        const authority = forkParent?.name
-            ? `This conversation was branched from agent-${forkParent.name}'s session: earlier context showing agent-${forkParent.name}'s name, task, or file claims belongs to the pre-fork session, not to you.`
-            : forkParent
-                ? `This conversation was branched from another session (${forkParent.instance_id}); any agent name in earlier context belongs to that session, not to you.`
-                : "Any different agent name in earlier context was inherited from another session; this one is authoritative.";
+        // fall back to the generic clause, which needs no fork detection. A live
+        // parent is the dangerous case (2026-10-07: a fork read its running
+        // parent as its own earlier self and offered to close it), so the notice
+        // names what the parent is doing and forbids ending it.
+        const authority = forkAuthorityClause(forkParent, forkState?.fork === true, parentRow);
         const selfLine = `You are agent-${agentName}${suffix}. ${authority}`;
         messages.push(peerTable ? `${selfLine}\n\n${peerTable}` : selfLine);
     }
@@ -52,15 +55,12 @@ export function renderSessionContext(opts) {
     if (isLinkedWorktree(coordRoot)) {
         messages.push(`Running inside worktree ${process.cwd()}. The coord layer is scoped to this worktree only; use \`${resolveBinName(coordRoot)} worktree diff\` to check for conflicts against sibling worktrees.`);
     }
-    // 3. Peer messages queued for this name while no session held it. Draining
-    // here is what makes `agents ping` safe to use on a dormant agent: the sender
-    // never has to know whether the recipient is running.
-    if (agentName) {
-        const delivered = drainMailbox(coordRoot, agentName);
-        if (delivered.length > 0) {
-            recordDeliveredMessages(instanceId, delivered);
-            messages.push(formatMailboxDelivery(coordRoot, delivered));
-        }
+    // 3. Rendering never consumes a message. The native emitter acknowledges the
+    // prepared instance-bound batch only after it has flushed the output.
+    const delivered = peerInbox(coordRoot).prepareSurface(instanceId);
+    if (delivered.length > 0) {
+        opts.onInboxPrepared?.(delivered.map(({ message_id }) => message_id));
+        messages.push(formatPeerInbox(coordRoot, delivered));
     }
     // 4. Council invites
     if (agentName) {
@@ -103,25 +103,6 @@ export function renderSessionContext(opts) {
     }
     return messages.join("\n\n");
 }
-/**
- * Write delivered peer messages into the recipient's own journal, so they
- * survive context compaction the way any other coordination breadcrumb does.
- * A message the sender already journaled (the recipient was live when it was
- * sent) is skipped to avoid a duplicate entry.
- */
-export function recordDeliveredMessages(instanceId, messages) {
-    for (const m of messages) {
-        if (m.journaled)
-            continue;
-        try {
-            appendEntry(instanceId, "handoff", `from agent-${m.from_name}: ${m.body}`);
-        }
-        catch {
-            // A journal write failure must never cost the delivery itself; the
-            // message is already in the rendered context the model reads.
-        }
-    }
-}
 /** One-line-per-agent view of sessions on other machines (presence refs). */
 function formatRemoteMachines(coordRoot) {
     try {
@@ -151,13 +132,48 @@ function formatRemoteMachines(coordRoot) {
 function readActivePeers(coordRoot, selfInstanceId) {
     return readLiveCoordinationRows(coordRoot).filter((heartbeat) => heartbeat.instance_id && heartbeat.instance_id !== selfInstanceId);
 }
+const DO_NOT_END = "Do not end, release, or finalize that session unless the operator explicitly tells you to.";
+function forkAuthorityClause(parent, fork, parentRow) {
+    if (parent?.name && parentRow) {
+        const files = parentRow.files_touched ?? [];
+        const task = parentRow.task ? ` on "${parentRow.task.slice(0, 80)}"` : "";
+        const holds = files.length > 0
+            ? ` and holds ${files.length} file${files.length === 1 ? "" : "s"} (${fmtFileList(files)})`
+            : "";
+        const owned = files.length > 0
+            ? parentRow.task
+                ? "That name, task, and those files"
+                : "That name and those files"
+            : parentRow.task
+                ? "That name and task"
+                : "That name";
+        return (`This conversation was forked from agent-${parent.name}, which is still running as a separate session${task}${holds}. ` +
+            `${owned} belong${owned === "That name" ? "s" : ""} to agent-${parent.name}, not to you. ${DO_NOT_END}`);
+    }
+    if (parent?.name) {
+        return `This conversation was branched from agent-${parent.name}'s session: earlier context showing agent-${parent.name}'s name, task, or file claims belongs to the pre-fork session, not to you.`;
+    }
+    if (parent) {
+        return `This conversation was branched from another session (${parent.instance_id}); any agent name in earlier context belongs to that session, not to you.`;
+    }
+    if (fork) {
+        return `This conversation was forked from another session, which may still be running. Any agent name, task, or file claim in earlier context belongs to that session, not to you. ${DO_NOT_END}`;
+    }
+    return "Any different agent name in earlier context was inherited from another session; this one is authoritative.";
+}
+function fmtFileList(files) {
+    const sorted = [...files].sort();
+    return sorted.length <= 3
+        ? sorted.join(", ")
+        : `${sorted.slice(0, 3).join(", ")}, +${sorted.length - 3} more`;
+}
 /**
  * Renders the peer table as
  * two subsections: "Other agent groups active" (blocking) and "Your group"
  * (subagents/siblings, no mutual block). Folds transient subagents' files
  * into their parent session.
  */
-function formatPeerTable(peers, mySessionId) {
+function formatPeerTable(peers, mySessionId, relations = new Map()) {
     if (peers.length === 0)
         return "";
     const nowSec = Math.floor(Date.now() / 1000);
@@ -174,9 +190,13 @@ function formatPeerTable(peers, mySessionId) {
         .map((p) => {
         const folded = fold[p.instance_id ?? ""] ?? [];
         const display = Array.from(new Set([...(p.files_touched ?? []), ...folded])).sort();
-        return { ...p, display_files: display };
+        const relation = relations.get(p.instance_id ?? "");
+        return { ...p, display_files: display, ...(relation ? { relation } : {}) };
     });
-    const blocking = rows.filter((p) => p.session_id !== mySessionId).sort(byStartedAt);
+    // Related sessions sort first so the parent never hides in "+N more".
+    const blocking = rows
+        .filter((p) => p.session_id !== mySessionId)
+        .sort((a, b) => Number(!!b.relation) - Number(!!a.relation) || byStartedAt(a, b));
     const group = rows.filter((p) => p.session_id === mySessionId).sort(byStartedAt);
     const sections = [];
     const blockingSection = renderSubtable(blocking, "Other agent groups active (their files block you):", nowSec);
@@ -204,7 +224,8 @@ function formatRow(r, nowSec) {
     const reason = lifecycle === "blocked" && r.task_state_reason ? `: ${r.task_state_reason.slice(0, 80)}` : "";
     const ageFrom = fmtAge(nowSec - parseIsoSec(r.started_at));
     const filesPart = fmtFiles(r.display_files);
-    return `  - agent-${r.name ?? "unknown"}${taskPart}   (activity=${activity}, lifecycle=${lifecycle}${reason}, ${ageFrom}, ${filesPart})`;
+    const relation = r.relation ? ` [${r.relation}]` : "";
+    return `  - agent-${r.name ?? "unknown"}${relation}${taskPart}   (activity=${activity}, lifecycle=${lifecycle}${reason}, ${ageFrom}, ${filesPart})`;
 }
 function fmtFiles(files) {
     if (files.length === 0)

package/dist/core/agents/rules/stop-hook.js

@@ -331,9 +331,9 @@ function sessionNameBlock(coordRoot, instanceId) {
     catch {
         // The ledger evidence still authorizes the block; the cache is UX only.
     }
-    const instruction = name
-        ? `Reproduce it by itself in a fenced code block: ${name}`
-        : `Run \`${resolveBinName(coordRoot)} agents suggest-name\`, then reproduce its output by itself in a fenced code block.`;
+    // The first post-mint reply was already rejected. Repeating its title later
+    // cannot change that evidence; the JSON retry result opens a new window.
+    const instruction = `Run \`${resolveBinName(coordRoot)} agents suggest-name --json\` as your only tool call to create a fresh verification boundary, then display its suggested_session_name verbatim by itself in a fenced code block${name ? `: ${name}` : "."}`;
     return {
         allow: false,
         exit_code: 2,

package/dist/core/agents/state/heartbeat-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH,OAAO,EAAE,KAAK,SAAS,EAAgC,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAatE,kFAAkF;AAClF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,SAAS,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,oBAAoB,CAAC,EAAE,MAAM,GAC5B,SAAS,GAAG,IAAI,CAQlB;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAoB7F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAOlB;AAED;;;;6BAI6B;AAC7B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,SAAS,GAAG,UAAU,GAAG,WAAuB,GACrD,SAAS,GAAG,IAAI,CAelB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,KAAK,EAAE,SAAS,GACf,MAAM,GAAG,IAAI,CAOf;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAQlB;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAWlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,eAAe,EAAE,CA6BnB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASrF;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAiBnF"}
+{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH,OAAO,EAAE,KAAK,SAAS,EAAgC,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAatE,kFAAkF;AAClF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,SAAS,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,oBAAoB,CAAC,EAAE,MAAM,GAC5B,SAAS,GAAG,IAAI,CAQlB;AAkBD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAoB7F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAUlB;AAED;;;;6BAI6B;AAC7B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,SAAS,GAAG,UAAU,GAAG,WAAuB,GACrD,SAAS,GAAG,IAAI,CAelB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,KAAK,EAAE,SAAS,GACf,MAAM,GAAG,IAAI,CAOf;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAQlB;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAWlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,eAAe,EAAE,CA6BnB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASrF;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAInF"}

package/dist/core/agents/state/heartbeat-writer.js

@@ -15,6 +15,8 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
+import { assertCurrentGenerationV3, withGenerationCustodyV3, } from "../../events/v3/generation-custody.js";
+import { liveInstanceIdV3 } from "../../events/v3/live-routing.js";
 import { canonicalClaimPath } from "../claim-path.js";
 import { heartbeatPath, readHeartbeat } from "./heartbeat-reader.js";
 export { readHeartbeat } from "./heartbeat-reader.js";
@@ -38,13 +40,16 @@ export function setLifecycleCache(coordRoot, instanceId, state, reason, suggeste
     }));
 }
 function mutate(coordRoot, instanceId, fn) {
-    const hb = readHeartbeat(coordRoot, instanceId);
-    if (!hb)
-        return null;
-    const next = fn(hb);
-    next.last_heartbeat = nowIsoSeconds();
-    atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(next, null, 2));
-    return next;
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => {
+        const hb = readHeartbeat(coordRoot, instanceId);
+        if (!hb)
+            return null;
+        const next = fn(hb);
+        next.last_heartbeat = nowIsoSeconds();
+        assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(instanceId), hb.v3_generation_id);
+        atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(next, null, 2));
+        return next;
+    });
 }
 export function setTask(coordRoot, instanceId, task) {
     return mutate(coordRoot, instanceId, (hb) => {
@@ -68,13 +73,16 @@ export function setTask(coordRoot, instanceId, task) {
 }
 /** Update the disposable identity cache after a canonical V3 attestation. */
 export function setIdentityCache(coordRoot, instanceId, name, agentId) {
-    const heartbeat = readHeartbeat(coordRoot, instanceId);
-    if (!heartbeat)
-        return null;
-    heartbeat.name = name;
-    heartbeat.agent_id = agentId;
-    atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(heartbeat, null, 2));
-    return heartbeat;
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => {
+        const heartbeat = readHeartbeat(coordRoot, instanceId);
+        if (!heartbeat)
+            return null;
+        heartbeat.name = name;
+        heartbeat.agent_id = agentId;
+        assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(instanceId), heartbeat.v3_generation_id);
+        atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(heartbeat, null, 2));
+        return heartbeat;
+    });
 }
 /** Restore the pool-assigned display name on a generation that was
  * materialized before the adapter's normal SessionStart naming path ran.
@@ -248,6 +256,9 @@ export function clearCoordinationCache(coordRoot, instanceId) {
     }
 }
 export function healPidmap(coordRoot, instanceId, pid) {
+    withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => healPidmapUnderCustody(coordRoot, instanceId, pid));
+}
+function healPidmapUnderCustody(coordRoot, instanceId, pid) {
     const dir = join(coordRoot, ".harnery", "pid-map");
     mkdirSync(dir, { recursive: true });
     const hb = readHeartbeat(coordRoot, instanceId);

package/dist/core/agents/state/live-coordination-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-coordination-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAMhD,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAUtE;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,OAAO,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB;AAED,wFAAwF;AACxF,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB"}
+{"version":3,"file":"live-coordination-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAUhD,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAUtE;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,OAAO,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB;AAED,wFAAwF;AACxF,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB"}

package/dist/core/agents/state/live-coordination-writer.js

@@ -1,6 +1,7 @@
 import { mkdirSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../../events/v3/coordination-view.js";
+import { assertCurrentGenerationV3, withGenerationCustodyV3, } from "../../events/v3/generation-custody.js";
 import { liveInstanceIdV3, resolveLiveEventLedgerRouteV3 } from "../../events/v3/live-routing.js";
 import { readHeartbeat } from "./heartbeat-reader.js";
 import { isAdapterV3, isCurrentV3HeartbeatCache, observedAdapterV3, projectHeartbeatV3, } from "./live-coordination-view.js";
@@ -19,6 +20,9 @@ export function repairLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nat
     return materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativeSessionId, adapter, model, true);
 }
 function materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force) {
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(nativeInstanceId)], () => materializeHeartbeatUnderCustody(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force));
+}
+function materializeHeartbeatUnderCustody(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force) {
     const route = resolveLiveEventLedgerRouteV3(coordRoot);
     if (route.state === "blocked")
         throw new Error(`event_v3_coordination_view:${route.reason}`);
@@ -85,6 +89,7 @@ function materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativ
         v3_projection_event_id: generation.last_event_id,
         v3_task_state: generation.task_state === "set" ? "set" : "cleared",
     };
+    assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(nativeInstanceId), generation.generation_id);
     writeHeartbeatCache(coordRoot, nativeInstanceId, materialized);
     return materialized;
 }

package/dist/core/agents/state/names.d.ts

@@ -43,13 +43,20 @@ export interface NameHistoryRow {
     ts: string;
     /** Durable persona UUID. Present after `agents identity assume`. */
     agent_id?: string;
-    /** Audit marker distinguishing an explicit role adoption from pool assignment. */
-    source?: "pool" | "identity.assume";
+    /** Audit marker distinguishing an explicit role adoption from pool assignment,
+     * and a lineage row appended after the name was already assigned. */
+    source?: "pool" | "identity.assume" | "fork.detected";
     previous_name?: string;
     /** Instance this session was forked/branched from (recorded fork lineage).
      * Stamped only on the row that first assigns this instance, when the adapter
      * layer detected or supplied a parent conversation. */
     forked_from?: string;
+    /** The adapter declared or inherited-history proved this instance is a fork,
+     * even when its parent could not be resolved yet. */
+    fork?: true;
+    /** Fork detection has run against this instance's transcript; the tool-path
+     * heal skips instances carrying it so the scan runs once per instance. */
+    fork_checked?: true;
 }
 /**
  * Resolve (name, kind) for an existing owner without consuming a counter
@@ -112,10 +119,43 @@ export declare function readLiveNames(coordRoot: string, opts: {
 export declare function assignName(coordRoot: string, instanceId: string, kind: NameKind, opts: {
     freshnessSecs: number;
     forkedFrom?: string;
+    fork?: boolean;
+    forkChecked?: boolean;
     nowMs?: number;
 }): string;
+export interface ForkState {
+    /** True when the instance is a recorded fork, parent known or not. */
+    fork: boolean;
+    /** Detection already ran for this instance. */
+    checked: boolean;
+    parent: {
+        instance_id: string;
+        name: string | null;
+    } | null;
+}
+/** Recorded fork state for <instanceId>, or null when it has no history row. */
+export declare function readForkState(coordRoot: string, instanceId: string): ForkState | null;
+/**
+ * Record fork detection that ran after the instance was already named (the
+ * tool-path heal). Appends a copy of the latest identity row, so the name,
+ * kind, and persona are unchanged, plus `fork_checked` and any lineage found.
+ * A no-op for an instance with no history row or one already checked.
+ */
+export declare function recordForkDetection(coordRoot: string, instanceId: string, detection: {
+    fork: boolean;
+    forkedFrom?: string;
+}): boolean;
+/**
+ * Peer labels for recorded fork relations, keyed by instance id: this
+ * session's fork parent and its direct forks. `liveIds` marks which of them
+ * are running, so a fork can tell its live parent from its own earlier self.
+ */
+export declare function forkRelationLabels(coordRoot: string, instanceId: string, liveIds: Set<string>): Map<string, string>;
+/** Instance ids recorded as direct forks of <instanceId>. */
+export declare function readForkChildren(coordRoot: string, instanceId: string): Set<string>;
 /** One step of recorded fork lineage: the latest row for <instanceId> that
- * carries `forked_from` (latest-row-wins, matching resolveName). */
+ * carries `forked_from`. Later rows without lineage (an identity assumption)
+ * do not erase it: a session never stops being a fork. */
 export declare function readForkParent(coordRoot: string, instanceId: string): {
     instance_id: string;
     name: string | null;

package/dist/core/agents/state/names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAYH,qBAAqB;AACrB,eAAO,MAAM,WAAW,85EA+Qd,CAAC;AAMX,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE/E,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAsCD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4B5D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,QAAoB,GACzB,oBAAoB,CAoBtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,GAAG,CAAC,MAAM,CAAC,CA4Bb;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,MAAM,CA4CR;AAED;oEACoE;AACpE,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAUrD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAYrD"}
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAYH,qBAAqB;AACrB,eAAO,MAAM,WAAW,85EA+Qd,CAAC;AAMX,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE/E,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,eAAe,CAAC;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;yDACqD;IACrD,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ;8EAC0E;IAC1E,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAsCD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4B5D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,QAAoB,GACzB,oBAAoB,CAoBtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,GAAG,CAAC,MAAM,CAAC,CA4Bb;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE;IACJ,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,MAAM,CA8CR;AAED,MAAM,WAAW,SAAS;IACxB,sEAAsE;IACtE,IAAI,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7D;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAkBrF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAuBT;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GACnB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAWrB;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAMnF;AAED;;0DAE0D;AAC1D,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAUrD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAYrD"}

package/dist/core/agents/state/names.js

@@ -496,19 +496,103 @@ export function assignName(coordRoot, instanceId, kind, opts) {
         kind,
         source: "pool",
         ...(forkedFrom && forkedFrom !== instanceId ? { forked_from: forkedFrom } : {}),
+        ...(opts.fork || (forkedFrom && forkedFrom !== instanceId) ? { fork: true } : {}),
+        ...(opts.forkChecked ? { fork_checked: true } : {}),
         ts: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
     });
     return name;
 }
+/** Recorded fork state for <instanceId>, or null when it has no history row. */
+export function readForkState(coordRoot, instanceId) {
+    const history = readHistory(coordRoot);
+    let seen = false;
+    let fork = false;
+    let checked = false;
+    let parentId;
+    for (const row of history) {
+        if (row.instance_id !== instanceId)
+            continue;
+        seen = true;
+        if (row.fork || row.forked_from)
+            fork = true;
+        if (row.fork_checked)
+            checked = true;
+        if (row.forked_from && row.forked_from !== instanceId)
+            parentId = row.forked_from;
+    }
+    if (!seen)
+        return null;
+    const parent = parentId
+        ? { instance_id: parentId, name: resolveName(coordRoot, parentId)?.name ?? null }
+        : null;
+    return { fork, checked, parent };
+}
+/**
+ * Record fork detection that ran after the instance was already named (the
+ * tool-path heal). Appends a copy of the latest identity row, so the name,
+ * kind, and persona are unchanged, plus `fork_checked` and any lineage found.
+ * A no-op for an instance with no history row or one already checked.
+ */
+export function recordForkDetection(coordRoot, instanceId, detection) {
+    const history = readHistory(coordRoot);
+    let latest;
+    for (const row of history) {
+        if (row.instance_id !== instanceId)
+            continue;
+        if (row.fork_checked)
+            return false;
+        latest = row;
+    }
+    if (!latest)
+        return false;
+    const forkedFrom = detection.forkedFrom && detection.forkedFrom !== instanceId ? detection.forkedFrom : undefined;
+    appendHistory(coordRoot, {
+        instance_id: instanceId,
+        name: latest.name,
+        kind: latest.kind,
+        ...(latest.agent_id ? { agent_id: latest.agent_id } : {}),
+        source: "fork.detected",
+        ...(forkedFrom ? { forked_from: forkedFrom } : {}),
+        ...(detection.fork || forkedFrom || latest.fork ? { fork: true } : {}),
+        fork_checked: true,
+        ts: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
+    });
+    return true;
+}
+/**
+ * Peer labels for recorded fork relations, keyed by instance id: this
+ * session's fork parent and its direct forks. `liveIds` marks which of them
+ * are running, so a fork can tell its live parent from its own earlier self.
+ */
+export function forkRelationLabels(coordRoot, instanceId, liveIds) {
+    const out = new Map();
+    const parent = readForkParent(coordRoot, instanceId);
+    if (parent) {
+        out.set(parent.instance_id, liveIds.has(parent.instance_id) ? "your fork parent, live" : "your fork parent");
+    }
+    for (const child of readForkChildren(coordRoot, instanceId))
+        out.set(child, "your fork");
+    return out;
+}
+/** Instance ids recorded as direct forks of <instanceId>. */
+export function readForkChildren(coordRoot, instanceId) {
+    const out = new Set();
+    for (const row of readHistory(coordRoot)) {
+        if (row.forked_from === instanceId && row.instance_id !== instanceId)
+            out.add(row.instance_id);
+    }
+    return out;
+}
 /** One step of recorded fork lineage: the latest row for <instanceId> that
- * carries `forked_from` (latest-row-wins, matching resolveName). */
+ * carries `forked_from`. Later rows without lineage (an identity assumption)
+ * do not erase it: a session never stops being a fork. */
 export function readForkParent(coordRoot, instanceId) {
     const history = readHistory(coordRoot);
     for (let i = history.length - 1; i >= 0; i--) {
         const row = history[i];
-        if (row.instance_id !== instanceId)
+        if (row.instance_id !== instanceId || !row.forked_from)
             continue;
-        if (!row.forked_from)
+        if (row.forked_from === instanceId)
             return null;
         const parent = resolveName(coordRoot, row.forked_from);
         return { instance_id: row.forked_from, name: parent?.name ?? null };

package/dist/core/agents/state/pidmap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pidmap.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/pidmap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyBH,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAGA;AAwCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA8B7D;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CA6BN;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAmBjF;AAED,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoBzF"}
+{"version":3,"file":"pidmap.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/pidmap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2BH,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAGA;AAwCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA8B7D;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAsCD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAmBjF;AAED,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoBzF"}

package/dist/core/agents/state/pidmap.js

@@ -15,6 +15,8 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
+import { withGenerationCustodyV3 } from "../../events/v3/generation-custody.js";
+import { liveInstanceIdV3 } from "../../events/v3/live-routing.js";
 import { checkPidToken, processStartToken } from "./proc-start.js";
 /**
  * Row count that triggers a dead-row sweep on the next write.
@@ -110,6 +112,9 @@ export function prunePidmapDeadRows(coordRoot) {
     return removed;
 }
 export function writePidmapRow(coordRoot, pid, instanceId, platform) {
+    withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => writePidmapRowUnderCustody(coordRoot, pid, instanceId, platform));
+}
+function writePidmapRowUnderCustody(coordRoot, pid, instanceId, platform) {
     const dir = join(coordRoot, ".harnery", "pid-map");
     const path = join(dir, String(pid));
     // Stamped at write time, when the pid provably belongs to the process we

package/dist/core/agents/state/proc-start.d.ts

@@ -68,6 +68,24 @@ export declare function psStartToken(pid: number, run?: (pid: number) => {
  * will not say.
  */
 export declare function processStartToken(pid: number): string | null;
+export type ProcessGenerationVerdict = "same" | "different" | "unknown";
+type ReadProcessStartToken = (pid: number) => string | null;
+/** A missing or unreadable token never establishes process identity. */
+export declare function verifyProcessGeneration(pid: number, recordedToken: string | null | undefined, readToken?: ReadProcessStartToken): ProcessGenerationVerdict;
+export interface ProcessGenerationSignalDependencies {
+    readToken?: ReadProcessStartToken;
+    kill?: (pid: number, signal: NodeJS.Signals | number) => unknown;
+}
+/**
+ * Recheck the process generation immediately before sending the signal.
+ *
+ * The process can still exit and its PID can be reused between the token read
+ * and the signal. Eliminating that race requires a generation-bound OS handle.
+ */
+export declare function signalIfSameGeneration(pid: number, recordedToken: string | null | undefined, signal: NodeJS.Signals | number, dependencies?: ProcessGenerationSignalDependencies): {
+    sent: boolean;
+    verdict: ProcessGenerationVerdict;
+};
 /**
  * Do two tokens describe the same run?
  *
@@ -92,4 +110,5 @@ export declare function tokensAgree(recorded: string, current: string): boolean;
  *   treated every row previously: trust it if the pid is alive.
  */
 export declare function checkPidToken(pid: number, recorded: string | undefined): "match" | "mismatch" | "unverified";
+export {};
 //# sourceMappingURL=proc-start.d.ts.map

package/dist/core/agents/state/proc-start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proc-start.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/proc-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,IAAI,CAAC;AAc9C;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAOjD;AAyBD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc3D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAiB,GAC7E,MAAM,GAAG,IAAI,CAUf;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQtE;AAOD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,GAAG,UAAU,GAAG,YAAY,CAKrC"}
+{"version":3,"file":"proc-start.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/proc-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,IAAI,CAAC;AAc9C;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAOjD;AAyBD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc3D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAiB,GAC7E,MAAM,GAAG,IAAI,CAUf;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5D;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAExE,KAAK,qBAAqB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAE5D,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,SAAS,GAAE,qBAAyC,GACnD,wBAAwB,CAkB1B;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,KAAK,OAAO,CAAC;CAClE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,EAC/B,YAAY,GAAE,mCAAwC,GACrD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAUtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQtE;AAOD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,GAAG,UAAU,GAAG,YAAY,CAKrC"}