harnery 0.45.2 → 0.46.0

package/dist/core/hooks/resolve/owner.d.ts

@@ -30,17 +30,6 @@ export declare function resolveOwner(opts: {
     instance_id: string;
     source: "env" | "payload" | "session_env" | "pidmap-self" | "pidmap-ancestor";
 } | null;
-/**
- * Find the parent owner for a subagent invocation. The per-shell marker at
- * `.harnery/shells/<pid>` is set by `sub-agent-start` and removed by
- * `sub-agent-stop`.
- *
- * Phase 2 stub: the marker file isn't written yet, so we return null in most
- * cases. Phase 2 callers can pass through.
- */
-export declare function readShellMarker(coordRoot: string, pid: number): string | null;
-/** Read the V3-projected `agent_id` for an owner if it exists. */
-export declare function readAgentIdForOwner(coordRoot: string, instanceId: string): string | null;
 /** Diagnostic: list of pid-map entries (for debugging). */
 export declare function listPidmap(coordRoot: string): Array<{
     pid: number;

package/dist/core/hooks/resolve/owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,iBAAiB,CAAC;CAC/E,GAAG,IAAI,CAgFP;AA2BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ7E;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExF;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}
+{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/owner.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,iBAAiB,CAAC;CAC/E,GAAG,IAAI,CAgFP;AA2BD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBnF"}

package/dist/core/hooks/resolve/owner.js

@@ -140,29 +140,6 @@ function readPpid(pid) {
     }
     return null;
 }
-/**
- * Find the parent owner for a subagent invocation. The per-shell marker at
- * `.harnery/shells/<pid>` is set by `sub-agent-start` and removed by
- * `sub-agent-stop`.
- *
- * Phase 2 stub: the marker file isn't written yet, so we return null in most
- * cases. Phase 2 callers can pass through.
- */
-export function readShellMarker(coordRoot, pid) {
-    const path = join(coordRoot, ".harnery", "shells", String(pid));
-    if (!existsSync(path))
-        return null;
-    try {
-        return readFileSync(path, "utf8").trim() || null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Read the V3-projected `agent_id` for an owner if it exists. */
-export function readAgentIdForOwner(coordRoot, instanceId) {
-    return readLiveCoordinationRow(coordRoot, instanceId)?.agent_id ?? null;
-}
 /** Diagnostic: list of pid-map entries (for debugging). */
 export function listPidmap(coordRoot) {
     const dir = join(coordRoot, ".harnery", "pid-map");

package/dist/core/hooks/shell-admission.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Admission guard for heavy shell checks. A whole-project typecheck, a full
+ * test suite, or a production build can each take gigabytes of memory, and
+ * several agents starting them at once on one machine can exhaust it. Asking
+ * agents in prose to wrap those commands in `admission run` does not work: the
+ * rule has to be read and remembered on every call. This guard rewrites the
+ * agent's shell command at PreToolUse instead, so each heavy check waits for a
+ * slot on a machine-wide admission resource.
+ *
+ * Enabled only when the project config names a resource
+ * (`admission.guard.resource`). It finds each simple command that is a heavy
+ * check and inserts `<bin> admission run --resource <name> --label 'agent:
+ * ...' --` in front of it, after any leading VAR=value assignments. The rest
+ * of the command (cd, pipes, redirects, && chains) is left byte for byte.
+ * Heavy means:
+ *   - tsc, however launched (tsc, npx/bunx/bun x/pnpm exec/yarn tsc,
+ *     node_modules/.bin/tsc, node .../typescript/bin/tsc)
+ *   - next build
+ *   - bun test with no file or directory named (a full suite)
+ *   - the package scripts test / test:* (with no further positional
+ *     argument), build, typecheck, type-check, typecheck:*, check-types, tsc,
+ *     run through bun run, npm, pnpm, or yarn
+ *   - bash/sh -c '<script>' whose script contains one of the above
+ * Watch modes, --help/--version, and named-file test runs are left alone.
+ *
+ * Passes through untouched: non-shell tools; a command that already runs
+ * `admission run` or `heavy-slot`; HARNERY_ADMISSION_SKIP=1 in the command or
+ * the hook's environment; HARNERY_ADMISSION_HELD in the hook's environment
+ * (the session already holds a slot); text inside quotes, heredocs, and
+ * comments. Any parse failure means no rewrite.
+ */
+export declare const ADMISSION_SKIP_PREFIX = "HARNERY_ADMISSION_SKIP=1";
+/** Claude Code's maximum Bash timeout; a queued wait counts against it. */
+export declare const BASH_TIMEOUT_MAX_MS = 600000;
+/** POSIX single-quote a word when it needs quoting (shlex.quote semantics). */
+export declare function shellQuote(value: string): string;
+/**
+ * Return the command with each heavy simple command wrapped in `wrapper`
+ * (a shell-ready prefix such as `harn admission run --resource build`), or
+ * null when nothing changes.
+ */
+export declare function rewriteHeavyCommand(command: string, wrapper: string): string | null;
+/** Normalized shell-tool name, or null for any other tool. */
+export declare function shellToolName(toolName: unknown): string | null;
+export interface AdmissionRewrite {
+    updatedInput: Record<string, unknown>;
+}
+/**
+ * Rewrite a shell tool's input so its heavy checks queue for admission.
+ * Handles `command` or `cmd` as a string, or as an argv such as
+ * ["bash", "-lc", "<script>"]. Returns null when nothing changes.
+ */
+export declare function admissionRewriteForTool(toolName: unknown, toolInput: unknown, wrapper: string): AdmissionRewrite | null;
+export interface AdmissionHookInput {
+    adapter: string;
+    /** Admission resource the project's guard queues on. */
+    resource: string;
+    /** Host bin name used in the wrapper and the agent-facing note. */
+    bin: string;
+    /**
+     * Project whose admission config `admission run` should read. A nested
+     * checkout with its own `.harnery/` would otherwise shadow the host's
+     * resource settings for a shell started inside it.
+     */
+    projectRoot?: string;
+    toolName: unknown;
+    toolInput: unknown;
+    cwd?: unknown;
+    /** True when HARNERY_ADMISSION_SKIP=1 or HARNERY_ADMISSION_HELD is set for the hook. */
+    skip?: boolean;
+    platform?: string;
+}
+/**
+ * The PreToolUse output that queues a shell command's heavy checks, or null
+ * to let the command run as written. Claude Code applies `updatedInput`
+ * under the session's own permission rules, so no decision is sent, and its
+ * Bash timeout is raised to the maximum because a queued wait counts against
+ * it. Codex applies a rewrite only beside `permissionDecision: "allow"`.
+ * Cursor and OpenCode have no rewrite channel. Windows-native shells (a
+ * drive-letter or UNC workspace) are outside the machine whose queue this
+ * guards.
+ */
+export declare function admissionHookOutput(input: AdmissionHookInput): Record<string, unknown> | null;
+//# sourceMappingURL=shell-admission.d.ts.map

package/dist/core/hooks/shell-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-admission.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/shell-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAuGH,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAChE,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAgV3C,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhD;AAWD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsBnF;AAID,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,MAAM,GACd,gBAAgB,GAAG,IAAI,CAmCzB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CA4B7F"}