harnery 0.43.0 → 0.45.0

package/dist/core/agents/render/session-context.d.ts

@@ -7,7 +7,6 @@
  * string.
  */
 import { statSync } from "node:fs";
-import { type MailboxMessageV1 } from "../mailbox.js";
 export interface RenderOpts {
     coordRoot: string;
     instanceId: string;
@@ -16,19 +15,14 @@ export interface RenderOpts {
     /** Adapter label rendered in parens after the self-name (e.g. "Cursor", "Codex").
      * Claude Code omits it. */
     platformLabel?: string;
+    /** The emitter acknowledges exactly these IDs only after output succeeds. */
+    onInboxPrepared?: (messageIds: readonly string[]) => void;
 }
 /**
  * Build the combined SessionStart systemMessage. Returns the additionalContext
  * string (or "" if there's nothing to say).
  */
 export declare function renderSessionContext(opts: RenderOpts): string;
-/**
- * Write delivered peer messages into the recipient's own journal, so they
- * survive context compaction the way any other coordination breadcrumb does.
- * A message the sender already journaled (the recipient was live when it was
- * sent) is skipped to avoid a duplicate entry.
- */
-export declare function recordDeliveredMessages(instanceId: string, messages: readonly MailboxMessageV1[]): void;
 /**
  * Returns a list of commit-guard wiring issues (empty when wired). Portable
  * across host projects: it asserts the FUNCTIONAL property ("does this repo's

package/dist/core/agents/render/session-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM1E,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAoB3F,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAiG7D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,IAAI,CAUN;AA6LD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}
+{"version":3,"file":"session-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/session-context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyC,QAAQ,EAAE,MAAM,SAAS,CAAC;AAyB1E,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;+BAC2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CA8F7D;AA6LD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAwBvD;AA0DD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiDlF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iBAAW,CAAC"}

package/dist/core/agents/render/session-context.js

@@ -11,9 +11,8 @@ import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { resolveBinName, resolveHooksSetupHint } from "../../config.js";
 import { harneryVersion, loadAdapterWiring } from "../../hooks/adapter/wiring.js";
-import { appendEntry } from "../../journal/index.js";
+import { formatPeerInbox, peerInbox } from "../../inbox/peer-messages.js";
 import { readRemoteMachines } from "../../presence/index.js";
-import { drainMailbox, formatMailboxDelivery } from "../mailbox.js";
 import { readLiveCoordinationRows } from "../state/live-coordination-view.js";
 import { forkRelationLabels, readForkState } from "../state/names.js";
 /**
@@ -56,15 +55,12 @@ export function renderSessionContext(opts) {
     if (isLinkedWorktree(coordRoot)) {
         messages.push(`Running inside worktree ${process.cwd()}. The coord layer is scoped to this worktree only; use \`${resolveBinName(coordRoot)} worktree diff\` to check for conflicts against sibling worktrees.`);
     }
-    // 3. Peer messages queued for this name while no session held it. Draining
-    // here is what makes `agents ping` safe to use on a dormant agent: the sender
-    // never has to know whether the recipient is running.
-    if (agentName) {
-        const delivered = drainMailbox(coordRoot, agentName);
-        if (delivered.length > 0) {
-            recordDeliveredMessages(instanceId, delivered);
-            messages.push(formatMailboxDelivery(coordRoot, delivered));
-        }
+    // 3. Rendering never consumes a message. The native emitter acknowledges the
+    // prepared instance-bound batch only after it has flushed the output.
+    const delivered = peerInbox(coordRoot).prepareSurface(instanceId);
+    if (delivered.length > 0) {
+        opts.onInboxPrepared?.(delivered.map(({ message_id }) => message_id));
+        messages.push(formatPeerInbox(coordRoot, delivered));
     }
     // 4. Council invites
     if (agentName) {
@@ -107,25 +103,6 @@ export function renderSessionContext(opts) {
     }
     return messages.join("\n\n");
 }
-/**
- * Write delivered peer messages into the recipient's own journal, so they
- * survive context compaction the way any other coordination breadcrumb does.
- * A message the sender already journaled (the recipient was live when it was
- * sent) is skipped to avoid a duplicate entry.
- */
-export function recordDeliveredMessages(instanceId, messages) {
-    for (const m of messages) {
-        if (m.journaled)
-            continue;
-        try {
-            appendEntry(instanceId, "handoff", `from agent-${m.from_name}: ${m.body}`);
-        }
-        catch {
-            // A journal write failure must never cost the delivery itself; the
-            // message is already in the rendered context the model reads.
-        }
-    }
-}
 /** One-line-per-agent view of sessions on other machines (presence refs). */
 function formatRemoteMachines(coordRoot) {
     try {

package/dist/core/agents/rules/stop-hook.js

@@ -331,9 +331,9 @@ function sessionNameBlock(coordRoot, instanceId) {
     catch {
         // The ledger evidence still authorizes the block; the cache is UX only.
     }
-    const instruction = name
-        ? `Reproduce it by itself in a fenced code block: ${name}`
-        : `Run \`${resolveBinName(coordRoot)} agents suggest-name\`, then reproduce its output by itself in a fenced code block.`;
+    // The first post-mint reply was already rejected. Repeating its title later
+    // cannot change that evidence; the JSON retry result opens a new window.
+    const instruction = `Run \`${resolveBinName(coordRoot)} agents suggest-name --json\` as your only tool call to create a fresh verification boundary, then display its suggested_session_name verbatim by itself in a fenced code block${name ? `: ${name}` : "."}`;
     return {
         allow: false,
         exit_code: 2,

package/dist/core/agents/state/heartbeat-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH,OAAO,EAAE,KAAK,SAAS,EAAgC,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAatE,kFAAkF;AAClF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,SAAS,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,oBAAoB,CAAC,EAAE,MAAM,GAC5B,SAAS,GAAG,IAAI,CAQlB;AAeD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAoB7F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAOlB;AAED;;;;6BAI6B;AAC7B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,SAAS,GAAG,UAAU,GAAG,WAAuB,GACrD,SAAS,GAAG,IAAI,CAelB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,KAAK,EAAE,SAAS,GACf,MAAM,GAAG,IAAI,CAOf;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAQlB;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAWlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,eAAe,EAAE,CA6BnB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASrF;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAiBnF"}
+{"version":3,"file":"heartbeat-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/heartbeat-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH,OAAO,EAAE,KAAK,SAAS,EAAgC,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAatE,kFAAkF;AAClF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,SAAS,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,oBAAoB,CAAC,EAAE,MAAM,GAC5B,SAAS,GAAG,IAAI,CAQlB;AAkBD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAoB7F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,SAAS,GAAG,IAAI,CAUlB;AAED;;;;6BAI6B;AAC7B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,SAAS,GAAG,UAAU,GAAG,WAAuB,GACrD,SAAS,GAAG,IAAI,CAelB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvD;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,KAAK,EAAE,SAAS,GACf,MAAM,GAAG,IAAI,CAOf;AAED;;;;4EAI4E;AAC5E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,GAAG,IAAI,CAMlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAOlB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAQlB;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAWlB;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,eAAe,EAAE,CA6BnB;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASrF;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAInF"}

package/dist/core/agents/state/heartbeat-writer.js

@@ -15,6 +15,8 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
+import { assertCurrentGenerationV3, withGenerationCustodyV3, } from "../../events/v3/generation-custody.js";
+import { liveInstanceIdV3 } from "../../events/v3/live-routing.js";
 import { canonicalClaimPath } from "../claim-path.js";
 import { heartbeatPath, readHeartbeat } from "./heartbeat-reader.js";
 export { readHeartbeat } from "./heartbeat-reader.js";
@@ -38,13 +40,16 @@ export function setLifecycleCache(coordRoot, instanceId, state, reason, suggeste
     }));
 }
 function mutate(coordRoot, instanceId, fn) {
-    const hb = readHeartbeat(coordRoot, instanceId);
-    if (!hb)
-        return null;
-    const next = fn(hb);
-    next.last_heartbeat = nowIsoSeconds();
-    atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(next, null, 2));
-    return next;
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => {
+        const hb = readHeartbeat(coordRoot, instanceId);
+        if (!hb)
+            return null;
+        const next = fn(hb);
+        next.last_heartbeat = nowIsoSeconds();
+        assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(instanceId), hb.v3_generation_id);
+        atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(next, null, 2));
+        return next;
+    });
 }
 export function setTask(coordRoot, instanceId, task) {
     return mutate(coordRoot, instanceId, (hb) => {
@@ -68,13 +73,16 @@ export function setTask(coordRoot, instanceId, task) {
 }
 /** Update the disposable identity cache after a canonical V3 attestation. */
 export function setIdentityCache(coordRoot, instanceId, name, agentId) {
-    const heartbeat = readHeartbeat(coordRoot, instanceId);
-    if (!heartbeat)
-        return null;
-    heartbeat.name = name;
-    heartbeat.agent_id = agentId;
-    atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(heartbeat, null, 2));
-    return heartbeat;
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => {
+        const heartbeat = readHeartbeat(coordRoot, instanceId);
+        if (!heartbeat)
+            return null;
+        heartbeat.name = name;
+        heartbeat.agent_id = agentId;
+        assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(instanceId), heartbeat.v3_generation_id);
+        atomicWrite(heartbeatPath(coordRoot, instanceId), JSON.stringify(heartbeat, null, 2));
+        return heartbeat;
+    });
 }
 /** Restore the pool-assigned display name on a generation that was
  * materialized before the adapter's normal SessionStart naming path ran.
@@ -248,6 +256,9 @@ export function clearCoordinationCache(coordRoot, instanceId) {
     }
 }
 export function healPidmap(coordRoot, instanceId, pid) {
+    withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => healPidmapUnderCustody(coordRoot, instanceId, pid));
+}
+function healPidmapUnderCustody(coordRoot, instanceId, pid) {
     const dir = join(coordRoot, ".harnery", "pid-map");
     mkdirSync(dir, { recursive: true });
     const hb = readHeartbeat(coordRoot, instanceId);

package/dist/core/agents/state/live-coordination-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-coordination-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAMhD,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAUtE;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,OAAO,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB;AAED,wFAAwF;AACxF,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB"}
+{"version":3,"file":"live-coordination-writer.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/live-coordination-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAUhD,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,uBAAuB,CAAC;AAUtE;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,OAAO,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB;AAED,wFAAwF;AACxF,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,GAAG,IAAI,CASlB"}

package/dist/core/agents/state/live-coordination-writer.js

@@ -1,6 +1,7 @@
 import { mkdirSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../../events/v3/coordination-view.js";
+import { assertCurrentGenerationV3, withGenerationCustodyV3, } from "../../events/v3/generation-custody.js";
 import { liveInstanceIdV3, resolveLiveEventLedgerRouteV3 } from "../../events/v3/live-routing.js";
 import { readHeartbeat } from "./heartbeat-reader.js";
 import { isAdapterV3, isCurrentV3HeartbeatCache, observedAdapterV3, projectHeartbeatV3, } from "./live-coordination-view.js";
@@ -19,6 +20,9 @@ export function repairLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nat
     return materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativeSessionId, adapter, model, true);
 }
 function materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force) {
+    return withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(nativeInstanceId)], () => materializeHeartbeatUnderCustody(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force));
+}
+function materializeHeartbeatUnderCustody(coordRoot, nativeInstanceId, nativeSessionId, _adapter, model, force) {
     const route = resolveLiveEventLedgerRouteV3(coordRoot);
     if (route.state === "blocked")
         throw new Error(`event_v3_coordination_view:${route.reason}`);
@@ -85,6 +89,7 @@ function materializeLiveCoordinationHeartbeat(coordRoot, nativeInstanceId, nativ
         v3_projection_event_id: generation.last_event_id,
         v3_task_state: generation.task_state === "set" ? "set" : "cleared",
     };
+    assertCurrentGenerationV3(coordRoot, liveInstanceIdV3(nativeInstanceId), generation.generation_id);
     writeHeartbeatCache(coordRoot, nativeInstanceId, materialized);
     return materialized;
 }

package/dist/core/agents/state/pidmap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pidmap.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/pidmap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyBH,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAGA;AAwCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA8B7D;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CA6BN;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAmBjF;AAED,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoBzF"}
+{"version":3,"file":"pidmap.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/pidmap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2BH,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAGA;AAwCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA8B7D;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAsCD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAmBjF;AAED,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoBzF"}

package/dist/core/agents/state/pidmap.js

@@ -15,6 +15,8 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
+import { withGenerationCustodyV3 } from "../../events/v3/generation-custody.js";
+import { liveInstanceIdV3 } from "../../events/v3/live-routing.js";
 import { checkPidToken, processStartToken } from "./proc-start.js";
 /**
  * Row count that triggers a dead-row sweep on the next write.
@@ -110,6 +112,9 @@ export function prunePidmapDeadRows(coordRoot) {
     return removed;
 }
 export function writePidmapRow(coordRoot, pid, instanceId, platform) {
+    withGenerationCustodyV3(coordRoot, [liveInstanceIdV3(instanceId)], () => writePidmapRowUnderCustody(coordRoot, pid, instanceId, platform));
+}
+function writePidmapRowUnderCustody(coordRoot, pid, instanceId, platform) {
     const dir = join(coordRoot, ".harnery", "pid-map");
     const path = join(dir, String(pid));
     // Stamped at write time, when the pid provably belongs to the process we

package/dist/core/agents/state/proc-start.d.ts

@@ -30,8 +30,9 @@
  *    through the caller's locale and timezone, so both are pinned; without that,
  *    two callers reading the same live process disagree.
  */
+import { signalProcessWithHandle } from "./process-handle.js";
 /** Which probe answers "when did this process start?" on this machine. */
-export type StartTokenProbe = "procfs" | "ps";
+export type StartTokenProbe = "procfs" | "ps" | "windows";
 /**
  * Which probe this machine uses, decided once.
  *
@@ -68,6 +69,22 @@ export declare function psStartToken(pid: number, run?: (pid: number) => {
  * will not say.
  */
 export declare function processStartToken(pid: number): string | null;
+export type ProcessGenerationVerdict = "same" | "different" | "unknown";
+type ReadProcessStartToken = (pid: number) => string | null;
+/** A missing or unreadable token never establishes process identity. */
+export declare function verifyProcessGeneration(pid: number, recordedToken: string | null | undefined, readToken?: ReadProcessStartToken): ProcessGenerationVerdict;
+export interface ProcessGenerationSignalDependencies {
+    readToken?: ReadProcessStartToken;
+    signalProcess?: typeof signalProcessWithHandle;
+}
+/**
+ * Observations may refuse a signal, but only the retained native process handle
+ * can authorize it. No numeric-PID effect follows the preliminary token read.
+ */
+export declare function signalIfSameGeneration(pid: number, recordedToken: string | null | undefined, signal: NodeJS.Signals | number, dependencies?: ProcessGenerationSignalDependencies): {
+    sent: boolean;
+    verdict: ProcessGenerationVerdict;
+};
 /**
  * Do two tokens describe the same run?
  *
@@ -92,4 +109,5 @@ export declare function tokensAgree(recorded: string, current: string): boolean;
  *   treated every row previously: trust it if the pid is alive.
  */
 export declare function checkPidToken(pid: number, recorded: string | undefined): "match" | "mismatch" | "unverified";
+export {};
 //# sourceMappingURL=proc-start.d.ts.map

package/dist/core/agents/state/proc-start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proc-start.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/proc-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,IAAI,CAAC;AAc9C;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAOjD;AAyBD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc3D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAiB,GAC7E,MAAM,GAAG,IAAI,CAUf;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQtE;AAOD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,GAAG,UAAU,GAAG,YAAY,CAKrC"}
+{"version":3,"file":"proc-start.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/proc-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,EAAE,uBAAuB,EAA4B,MAAM,qBAAqB,CAAC;AAExF,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,IAAI,GAAG,SAAS,CAAC;AAc1D;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAQjD;AAyBD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc3D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAiB,GAC7E,MAAM,GAAG,IAAI,CAUf;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ5D;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAExE,KAAK,qBAAqB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAE5D,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,SAAS,GAAE,qBAAyC,GACnD,wBAAwB,CAkB1B;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,EAC/B,YAAY,GAAE,mCAAwC,GACrD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAQtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQtE;AAOD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,GAAG,UAAU,GAAG,YAAY,CAKrC"}

package/dist/core/agents/state/proc-start.js

@@ -33,6 +33,7 @@
 import { spawnSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { coordEnv } from "../../../lib/env.js";
+import { signalProcessWithHandle, windowsProcessStartToken } from "./process-handle.js";
 /**
  * The `ps` probe is text formatted by `strftime("%c", localtime(...))`, so its
  * output moves with `TZ` and `LC_TIME`. A hook running under `LC_ALL=C` (git
@@ -54,6 +55,8 @@ export function startTokenProbe() {
     const override = coordEnv("PID_PROBE");
     if (override === "procfs" || override === "ps")
         return override;
+    if (process.platform === "win32")
+        return "windows";
     if (cachedProbe === undefined) {
         cachedProbe = existsSync("/proc/self/stat") ? "procfs" : "ps";
     }
@@ -149,7 +152,49 @@ function defaultPsRun(pid) {
 export function processStartToken(pid) {
     if (!Number.isFinite(pid) || pid <= 0)
         return null;
-    return startTokenProbe() === "procfs" ? procfsStartToken(pid) : psStartToken(pid);
+    const probe = startTokenProbe();
+    return probe === "windows"
+        ? windowsProcessStartToken(pid)
+        : probe === "procfs"
+            ? procfsStartToken(pid)
+            : psStartToken(pid);
+}
+/** A missing or unreadable token never establishes process identity. */
+export function verifyProcessGeneration(pid, recordedToken, readToken = processStartToken) {
+    if (!Number.isInteger(pid) ||
+        pid <= 0 ||
+        typeof recordedToken !== "string" ||
+        !recordedToken.trim())
+        return "unknown";
+    // A bootless Linux token cannot identify a process across machine boots.
+    if (/^l\d+$/.test(recordedToken))
+        return "unknown";
+    try {
+        const currentToken = readToken(pid);
+        if (typeof currentToken !== "string" || !currentToken.trim())
+            return "unknown";
+        if (/^l\d+$/.test(currentToken))
+            return "unknown";
+        return currentToken === recordedToken ? "same" : "different";
+    }
+    catch {
+        return "unknown";
+    }
+}
+/**
+ * Observations may refuse a signal, but only the retained native process handle
+ * can authorize it. No numeric-PID effect follows the preliminary token read.
+ */
+export function signalIfSameGeneration(pid, recordedToken, signal, dependencies = {}) {
+    const verdict = verifyProcessGeneration(pid, recordedToken, dependencies.readToken);
+    if (verdict !== "same")
+        return { sent: false, verdict };
+    try {
+        return (dependencies.signalProcess ?? signalProcessWithHandle)(pid, recordedToken, signal);
+    }
+    catch {
+        return { sent: false, verdict: "unknown" };
+    }
 }
 /**
  * Do two tokens describe the same run?

package/dist/core/agents/state/process-handle.d.ts

@@ -0,0 +1,26 @@
+import type { ProcessGenerationVerdict } from "./proc-start.js";
+export interface ProcessHandleSignalResult {
+    sent: boolean;
+    verdict: ProcessGenerationVerdict;
+}
+export type NativeProcessHelperRunner = (command: string, args: string[], options: {
+    input: string;
+    encoding: "utf8";
+    timeout: number;
+    maxBuffer: number;
+    windowsHide: boolean;
+}) => {
+    status: number | null;
+    stdout: string | Buffer | null;
+    error?: Error;
+};
+export declare const LINUX_PROCESS_HANDLE_SCRIPT = "\nimport json, os, pathlib, signal, sys\nresult = {\"sent\": False, \"verdict\": \"unknown\"}\nfd = None\ntry:\n    request = json.loads(sys.stdin.readline())\n    if not hasattr(os, \"pidfd_open\") or not hasattr(signal, \"pidfd_send_signal\"):\n        raise RuntimeError(\"pidfd support unavailable\")\n    fd = os.pidfd_open(request[\"pid\"])\n    stat = pathlib.Path(\"/proc/%d/stat\" % request[\"pid\"]).read_text()\n    ticks = stat[stat.rfind(\") \") + 2:].split()[19]\n    boot = pathlib.Path(\"/proc/sys/kernel/random/boot_id\").read_text().strip().replace(\"-\", \"\")[:8]\n    token = \"l%s.%s\" % (boot, ticks)\n    result[\"token\"] = token\n    recorded = request.get(\"token\")\n    result[\"verdict\"] = \"same\" if token == recorded else \"different\"\n    if request[\"mode\"] == \"signal\" and result[\"verdict\"] == \"same\":\n        print(json.dumps({\"phase\": \"verified\"}), flush=True)\n        if sys.stdin.readline().strip() == \"signal\":\n            signal.pidfd_send_signal(fd, request[\"signal\"])\n            result[\"sent\"] = True\nexcept Exception:\n    pass\nfinally:\n    if fd is not None:\n        os.close(fd)\nprint(json.dumps(result), flush=True)\n";
+export declare const WINDOWS_PROCESS_HANDLE_SCRIPT = "\n$ErrorActionPreference = 'Stop'\n$result = @{ sent = $false; verdict = 'unknown' }\n$handle = [IntPtr]::Zero\ntry {\n  Add-Type -TypeDefinition @'\nusing System;\nusing System.Runtime.InteropServices;\npublic static class HarneryProcessHandle {\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern IntPtr OpenProcess(uint access, bool inherit, uint processId);\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern bool GetProcessTimes(IntPtr handle, out long creation, out long exit, out long kernel, out long user);\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern bool TerminateProcess(IntPtr handle, uint exitCode);\n  [DllImport(\"kernel32.dll\")] public static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);\n  [DllImport(\"kernel32.dll\")] public static extern bool CloseHandle(IntPtr handle);\n}\n'@\n  $request = [Console]::In.ReadLine() | ConvertFrom-Json\n  $access = [uint32]0x101000\n  if ($request.mode -eq 'signal') { $access = $access -bor 1 }\n  $handle = [HarneryProcessHandle]::OpenProcess($access, $false, [uint32]$request.pid)\n  if ($handle -eq [IntPtr]::Zero) { throw 'process handle unavailable' }\n  [long]$creation = 0; [long]$exitTime = 0; [long]$kernel = 0; [long]$userTime = 0\n  if (-not [HarneryProcessHandle]::GetProcessTimes($handle, [ref]$creation, [ref]$exitTime, [ref]$kernel, [ref]$userTime)) { throw 'process time unavailable' }\n  $token = 'w' + $creation.ToString([Globalization.CultureInfo]::InvariantCulture)\n  $result.token = $token\n  $result.verdict = if ($token -ceq $request.token) { 'same' } else { 'different' }\n  if ($request.mode -eq 'signal' -and $result.verdict -eq 'same') {\n    [Console]::Out.WriteLine('{\"phase\":\"verified\"}')\n    [Console]::Out.Flush()\n    if ([Console]::In.ReadLine() -eq 'signal' -and [HarneryProcessHandle]::WaitForSingleObject($handle, 0) -eq 258) {\n      $result.sent = [HarneryProcessHandle]::TerminateProcess($handle, 1)\n    }\n  }\n} catch {} finally {\n  if ($handle -ne [IntPtr]::Zero) { [void][HarneryProcessHandle]::CloseHandle($handle) }\n}\n$result | ConvertTo-Json -Compress\n";
+/** Windows creation FILETIME, read from an OpenProcess handle. */
+export declare function windowsProcessStartToken(pid: number, run?: NativeProcessHelperRunner): string | null;
+/** No numeric-PID signaling fallback is permitted when an exact handle fails. */
+export declare function signalProcessWithHandle(pid: number, recordedToken: string, signal: NodeJS.Signals | number, options?: {
+    platform?: NodeJS.Platform;
+    run?: NativeProcessHelperRunner;
+}): ProcessHandleSignalResult;
+//# sourceMappingURL=process-handle.d.ts.map

package/dist/core/agents/state/process-handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-handle.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/process-handle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,wBAAwB,CAAC;CACnC;AAMD,MAAM,MAAM,yBAAyB,GAAG,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,KACE;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAI9E,eAAO,MAAM,2BAA2B,+qCA2BvC,CAAC;AAEF,eAAO,MAAM,6BAA6B,qnEAqCzC,CAAC;AAwCF,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,yBAAqC,GACzC,MAAM,GAAG,IAAI,CAGf;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,EAC/B,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,yBAAyB,CAAA;CAAO,GAC5E,yBAAyB,CAgB3B"}

package/dist/core/agents/state/process-handle.js

@@ -0,0 +1,121 @@
+import { spawnSync } from "node:child_process";
+import { constants } from "node:os";
+// The helper owns the descriptor throughout observation and effect. The second
+// input line authorizes the effect; EOF releases the handle without signaling.
+export const LINUX_PROCESS_HANDLE_SCRIPT = `
+import json, os, pathlib, signal, sys
+result = {"sent": False, "verdict": "unknown"}
+fd = None
+try:
+    request = json.loads(sys.stdin.readline())
+    if not hasattr(os, "pidfd_open") or not hasattr(signal, "pidfd_send_signal"):
+        raise RuntimeError("pidfd support unavailable")
+    fd = os.pidfd_open(request["pid"])
+    stat = pathlib.Path("/proc/%d/stat" % request["pid"]).read_text()
+    ticks = stat[stat.rfind(") ") + 2:].split()[19]
+    boot = pathlib.Path("/proc/sys/kernel/random/boot_id").read_text().strip().replace("-", "")[:8]
+    token = "l%s.%s" % (boot, ticks)
+    result["token"] = token
+    recorded = request.get("token")
+    result["verdict"] = "same" if token == recorded else "different"
+    if request["mode"] == "signal" and result["verdict"] == "same":
+        print(json.dumps({"phase": "verified"}), flush=True)
+        if sys.stdin.readline().strip() == "signal":
+            signal.pidfd_send_signal(fd, request["signal"])
+            result["sent"] = True
+except Exception:
+    pass
+finally:
+    if fd is not None:
+        os.close(fd)
+print(json.dumps(result), flush=True)
+`;
+export const WINDOWS_PROCESS_HANDLE_SCRIPT = `
+$ErrorActionPreference = 'Stop'
+$result = @{ sent = $false; verdict = 'unknown' }
+$handle = [IntPtr]::Zero
+try {
+  Add-Type -TypeDefinition @'
+using System;
+using System.Runtime.InteropServices;
+public static class HarneryProcessHandle {
+  [DllImport("kernel32.dll", SetLastError=true)] public static extern IntPtr OpenProcess(uint access, bool inherit, uint processId);
+  [DllImport("kernel32.dll", SetLastError=true)] public static extern bool GetProcessTimes(IntPtr handle, out long creation, out long exit, out long kernel, out long user);
+  [DllImport("kernel32.dll", SetLastError=true)] public static extern bool TerminateProcess(IntPtr handle, uint exitCode);
+  [DllImport("kernel32.dll")] public static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);
+  [DllImport("kernel32.dll")] public static extern bool CloseHandle(IntPtr handle);
+}
+'@
+  $request = [Console]::In.ReadLine() | ConvertFrom-Json
+  $access = [uint32]0x101000
+  if ($request.mode -eq 'signal') { $access = $access -bor 1 }
+  $handle = [HarneryProcessHandle]::OpenProcess($access, $false, [uint32]$request.pid)
+  if ($handle -eq [IntPtr]::Zero) { throw 'process handle unavailable' }
+  [long]$creation = 0; [long]$exitTime = 0; [long]$kernel = 0; [long]$userTime = 0
+  if (-not [HarneryProcessHandle]::GetProcessTimes($handle, [ref]$creation, [ref]$exitTime, [ref]$kernel, [ref]$userTime)) { throw 'process time unavailable' }
+  $token = 'w' + $creation.ToString([Globalization.CultureInfo]::InvariantCulture)
+  $result.token = $token
+  $result.verdict = if ($token -ceq $request.token) { 'same' } else { 'different' }
+  if ($request.mode -eq 'signal' -and $result.verdict -eq 'same') {
+    [Console]::Out.WriteLine('{"phase":"verified"}')
+    [Console]::Out.Flush()
+    if ([Console]::In.ReadLine() -eq 'signal' -and [HarneryProcessHandle]::WaitForSingleObject($handle, 0) -eq 258) {
+      $result.sent = [HarneryProcessHandle]::TerminateProcess($handle, 1)
+    }
+  }
+} catch {} finally {
+  if ($handle -ne [IntPtr]::Zero) { [void][HarneryProcessHandle]::CloseHandle($handle) }
+}
+$result | ConvertTo-Json -Compress
+`;
+function runHelper(request, platform, run) {
+    const unknown = { sent: false, verdict: "unknown" };
+    if (!Number.isInteger(request.pid) || request.pid <= 0)
+        return unknown;
+    if (platform !== "linux" && platform !== "win32")
+        return unknown;
+    try {
+        const command = platform === "linux" ? "python3" : "powershell.exe";
+        const args = platform === "linux"
+            ? ["-I", "-c", LINUX_PROCESS_HANDLE_SCRIPT]
+            : ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", WINDOWS_PROCESS_HANDLE_SCRIPT];
+        const output = run(command, args, {
+            input: `${JSON.stringify(request)}\nsignal\n`,
+            encoding: "utf8",
+            timeout: 10_000,
+            maxBuffer: 64 * 1024,
+            windowsHide: true,
+        });
+        if (output.error || output.status !== 0)
+            return unknown;
+        const lines = String(output.stdout ?? "")
+            .trim()
+            .split(/\r?\n/);
+        const parsed = JSON.parse(lines.at(-1) ?? "");
+        if (typeof parsed.sent !== "boolean" ||
+            !["same", "different", "unknown"].includes(parsed.verdict) ||
+            (parsed.sent && parsed.verdict !== "same"))
+            return unknown;
+        return parsed;
+    }
+    catch {
+        return unknown;
+    }
+}
+/** Windows creation FILETIME, read from an OpenProcess handle. */
+export function windowsProcessStartToken(pid, run = spawnSync) {
+    const result = runHelper({ mode: "probe", pid }, "win32", run);
+    return typeof result.token === "string" && /^w\d+$/.test(result.token) ? result.token : null;
+}
+/** No numeric-PID signaling fallback is permitted when an exact handle fails. */
+export function signalProcessWithHandle(pid, recordedToken, signal, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const number = typeof signal === "number" ? signal : constants.signals[signal];
+    if (!Number.isInteger(number) ||
+        number <= 0 ||
+        (platform === "linux" && !/^l[0-9a-f]{8}\.\d+$/.test(recordedToken)) ||
+        (platform === "win32" && (!/^w\d+$/.test(recordedToken) || ![9, 15].includes(number))))
+        return { sent: false, verdict: "unknown" };
+    const result = runHelper({ mode: "signal", pid, token: recordedToken, signal: number }, platform, options.run ?? spawnSync);
+    return { sent: result.sent, verdict: result.verdict };
+}

package/dist/core/agents/state/stale-sweep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stale-sweep.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/stale-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAkEH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG;IAC7C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAyJA"}
+{"version":3,"file":"stale-sweep.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/stale-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAyIH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG;IAC7C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAuPA"}