harnery 0.46.0 → 0.47.0

package/dist/core/config.js

@@ -11,7 +11,8 @@
  * `coord` (heartbeat freshness), `logs` (structured-log storage budgets),
  * `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), `sync` (rclone
- * remote/prefix), and `web` (dashboard port) sections. The `files` deny/override section
+ * remote/prefix), `computer` (opt-in desktop control), `autoUpdate` (activity-fired
+ * project self-update), and `web` (dashboard port) sections. The `files` deny/override section
  * is parsed separately by `web/lib/files.ts`.
  *
  * Env vars and CLI flags override any config value per invocation (each accessor
@@ -23,6 +24,7 @@ import { homedir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { coordEnv } from "../lib/env.js";
 import { DEFAULT_WEB_PORT } from "../lib/local-file-url.js";
+import { AUTOUPDATE_DEFAULTS } from "./autoupdate/types.js";
 import { resolveEventLedgerRotateActiveBytesV3 } from "./events/v3/rotation-config.js";
 import { parsePromptContextConfig, } from "./hooks/prompt-context/contract.js";
 import { findCoordRoot } from "./hooks/resolve/coord-root.js";
@@ -320,6 +322,17 @@ export function codexWindowsBridgeConfig(projectRoot) {
     }
     return { entryPoint, error: null };
 }
+/**
+ * Per-project opt-in that makes `init` write the same adapter hook commands on
+ * every OS: `agent-hook` from PATH, plus a native Codex `commandWindows`. A
+ * project that commits its settings files and is cloned on Windows and POSIX
+ * needs it, because the default form depends on the OS that ran `init`. Read
+ * from the project config only, for the same reason as the Windows bridge.
+ * Anything but `true` keeps the default.
+ */
+export function portableHookCommands(projectRoot) {
+    return readProjectConfig(projectRoot).hooks?.portableCommands === true;
+}
 export function hostPromptReminder(coordRoot) {
     const root = coordRoot ?? findCoordRoot();
     if (!root)
@@ -480,6 +493,106 @@ export function readAdmissionConfig(coordRoot) {
             : {}),
     };
 }
+/**
+ * Desktop-control settings from `.harnery/config.jsonc`:
+ *
+ * ```jsonc
+ * "computer": { "enabled": true, "idle_seconds": 120, "wait_seconds": 30 }
+ * ```
+ *
+ * Project config only: enabling desktop control is a per-project decision, so a
+ * user-global value never turns it on. Malformed values are dropped one by one;
+ * `enabled` is true only when the project sets it to exactly `true`.
+ */
+export function readComputerConfig(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return { enabled: false };
+    const raw = readProjectConfig(root).computer;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return { enabled: false };
+    const record = raw;
+    const idle = positiveNumber(record.idle_seconds, 86_400);
+    const wait = record.wait_seconds;
+    const waitOk = typeof wait === "number" && Number.isFinite(wait) && wait >= 0 && wait <= 3600;
+    return {
+        enabled: record.enabled === true,
+        ...(idle !== undefined ? { idle_seconds: idle } : {}),
+        ...(waitOk ? { wait_seconds: wait } : {}),
+    };
+}
+// Project-only parse cache keyed by the file's stat signature. Hooks call the
+// auto-update reader on every prompt, so an unchanged file costs one stat.
+let projectCache = null;
+function readProjectConfigCached(root) {
+    const p = join(root, ".harnery", "config.jsonc");
+    const signature = statSignature(p);
+    if (signature === null)
+        return {};
+    if (projectCache && projectCache.path === p && projectCache.signature === signature) {
+        return projectCache.cfg;
+    }
+    const cfg = parseConfigFile(p);
+    projectCache = { path: p, signature, cfg };
+    return cfg;
+}
+function clampInteger(value, min, max, fallback) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return fallback;
+    return Math.min(max, Math.max(min, Math.round(value)));
+}
+/** Keep each argv that is a non-empty array of non-empty strings; drop the rest. */
+function argvList(value) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const entry of value) {
+        if (!Array.isArray(entry) || entry.length === 0)
+            continue;
+        if (!entry.every((part) => typeof part === "string" && part.length > 0))
+            continue;
+        out.push([...entry]);
+    }
+    return out;
+}
+/**
+ * Project self-update settings from `.harnery/config.jsonc` (ADR 0229):
+ *
+ * ```jsonc
+ * "autoUpdate": {
+ *   "enabled": true,
+ *   "steps": [["bin/pull-all"]],
+ *   "dailySteps": [["bin/doctor", "--quiet"]],
+ *   "watch": ["~/.local/share/example/hooks.json"],
+ *   "checkMinutes": 15,
+ *   "timeoutMinutes": 20,
+ *   "cleanup": true
+ * }
+ * ```
+ *
+ * Project config only: running commands on activity is a per-project
+ * decision, so a user-global value never turns it on. Null when the project
+ * has no `autoUpdate` section. Malformed values are dropped one by one;
+ * `enabled` is true only when the project sets it to exactly `true`.
+ */
+export function readAutoUpdateConfig(coordRoot) {
+    const raw = readProjectConfigCached(coordRoot).autoUpdate;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return null;
+    const record = raw;
+    const watch = Array.isArray(record.watch)
+        ? record.watch.filter((p) => typeof p === "string" && p.trim().length > 0)
+        : [];
+    return {
+        enabled: record.enabled === true,
+        checkMinutes: clampInteger(record.checkMinutes, 1, 1440, AUTOUPDATE_DEFAULTS.checkMinutes),
+        steps: argvList(record.steps),
+        dailySteps: argvList(record.dailySteps),
+        watch,
+        timeoutMinutes: clampInteger(record.timeoutMinutes, 1, 240, AUTOUPDATE_DEFAULTS.timeoutMinutes),
+        cleanup: record.cleanup !== false,
+    };
+}
 /**
  * Whether this repo pins workflow runs to subscription billing:
  * `.harnery/config.jsonc` `{ "workflow": { "subscriptionOnly": true } }`.

package/dist/core/events/v3/bootstrap.js

@@ -443,6 +443,7 @@ function rootOfHarnery() {
 }
 function repositoryBuild(root) {
     const result = spawnSync("git", ["-C", root, "rev-parse", "HEAD"], {
+        windowsHide: true,
         encoding: "utf8",
         timeout: 5000,
     });

package/dist/core/events/v3/runtime-build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-build.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/runtime-build.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAuBnD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,YAAY,CAkBpD;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CA0BxE"}
+{"version":3,"file":"runtime-build.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/runtime-build.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAwBnD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,YAAY,CAkBpD;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CA0BxE"}

package/dist/core/events/v3/runtime-build.js

@@ -14,6 +14,7 @@ export function currentHarneryRuntimeBuild() {
     const root = harneryPackageRoot();
     if (existsSync(resolve(root, ".git"))) {
         const result = spawnSync("git", ["-C", root, "rev-parse", "HEAD"], {
+            windowsHide: true,
             encoding: "utf8",
             timeout: 5_000,
         });

package/dist/core/hooks/adapter/wiring.d.ts

@@ -65,7 +65,17 @@ export declare function hookCommandWindows(spec: AdapterSpec, agentHookPath: str
 export interface WiringOptions {
     /** Bridge entry point from `hooks.codexWindowsBridge`, or null when not opted in. */
     windowsBridgeEntryPoint?: string | null;
+    /**
+     * `hooks.portableCommands`: write the same `agent-hook` commands from PATH on
+     * every OS, plus a native Codex `commandWindows`, so one committed settings
+     * file is current everywhere.
+     */
+    portableCommands?: boolean;
+    /** The OS to write for. Defaults to the host; tests inject it. */
+    platform?: NodeJS.Platform;
 }
+/** The wiring options a project's committed config selects. */
+export declare function projectWiringOptions(projectRoot: string): WiringOptions;
 /** The `commandWindows` init writes for one event, or undefined for none. */
 export declare function expectedCommandWindows(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, options?: WiringOptions): string | undefined;
 /** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
@@ -83,14 +93,14 @@ export declare function commandWiresSubcommand(command: string, subcommand: stri
 /** Whether a command invokes Harnery's agent-hook binary at all. */
 export declare function isAgentHookCommand(command: string): boolean;
 /** The canonical command installed for one adapter event. */
-export declare function hookCommand(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId): string;
+export declare function hookCommand(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, options?: WiringOptions): string;
 /**
  * Pick a committed hook target that survives cloning the consumer elsewhere.
  * Projects that contain Harnery can use its repo-relative launcher. Standalone
  * consumers use the package's installed `agent-hook` executable from PATH
  * instead of recording a relative path back into one developer's package tree.
  */
-export declare function agentHookPathForProject(projectRoot: string, packageRoot: string): string;
+export declare function agentHookPathForProject(projectRoot: string, packageRoot: string, options?: WiringOptions): string;
 export interface WiringDiff {
     /** Spec events not wired in the settings file. */
     missing: HookEvent[];

package/dist/core/hooks/adapter/wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,2FAA2F;AAC3F,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CACvB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,SAAS,CAgBX;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAMR;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,GACjB,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAOxF;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,GACvE,UAAU,CAwFZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAyD5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA8BhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,2FAA2F;AAC3F,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CACvB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,SAAS,CAgBX;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAMR;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAKvE;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,GAAG,SAAS,CAcpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CASR;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CAaR;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,GACvE,UAAU,CAyFZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAwCD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CA0D5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA8BhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}

package/dist/core/hooks/adapter/wiring.js

@@ -13,7 +13,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { codexWindowsBridgeConfig, resolveBinName } from "../../config.js";
+import { codexWindowsBridgeConfig, portableHookCommands, resolveBinName } from "../../config.js";
 import { ADAPTER_SPECS, } from "./events.js";
 import { checkOpenCodePlugin, isOwnedOpenCodePlugin } from "./opencode-plugin.js";
 /** Bound Cursor Stop `followup_message` retries so a missed ritual cannot loop 5 times. */
@@ -63,10 +63,22 @@ export function hookCommandWindows(spec, agentHookPath, subcommand, adapter, ent
     return (`if ((Get-Command ${entryPoint} -ErrorAction Ignore) -and $PWD.ProviderPath -like '\\\\wsl*') ` +
         `{ ${entryPoint} ${subcommand} --adapter ${adapter} } else { ${direct} }; exit $LASTEXITCODE`);
 }
+/** The wiring options a project's committed config selects. */
+export function projectWiringOptions(projectRoot) {
+    return {
+        windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+        portableCommands: portableHookCommands(projectRoot),
+    };
+}
 /** The `commandWindows` init writes for one event, or undefined for none. */
 export function expectedCommandWindows(spec, agentHookPath, subcommand, adapter, options) {
-    if (!spec.windowsBridgeHooks || !options?.windowsBridgeEntryPoint)
+    if (!spec.windowsBridgeHooks)
         return undefined;
+    if (!options?.windowsBridgeEntryPoint) {
+        return (options?.platform ?? process.platform) === "win32" || options?.portableCommands
+            ? nativeHookCommand(agentHookPath, subcommand, adapter)
+            : undefined;
+    }
     return hookCommandWindows(spec, agentHookPath, subcommand, adapter, options.windowsBridgeEntryPoint);
 }
 /** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
@@ -114,20 +126,35 @@ export function isAgentHookCommand(command) {
     return commandSubcommand(command) !== null;
 }
 /** The canonical command installed for one adapter event. */
-export function hookCommand(spec, agentHookPath, subcommand, adapter) {
+export function hookCommand(spec, agentHookPath, subcommand, adapter, options) {
+    if ((options?.platform ?? process.platform) === "win32") {
+        return nativeHookCommand(agentHookPath, subcommand, adapter);
+    }
     if (agentHookPath === "agent-hook") {
         return `agent-hook ${subcommand} --adapter ${adapter}`;
     }
     const anchor = spec.projectDirEnv ? `"\${${spec.projectDirEnv}:-.}"/` : "";
     return `bash ${anchor}${agentHookPath} ${subcommand} --adapter ${adapter}`;
 }
+function nativeHookCommand(agentHookPath, subcommand, adapter) {
+    if (agentHookPath === "agent-hook")
+        return `agent-hook ${subcommand} --adapter ${adapter}`;
+    const runner = join(dirname(agentHookPath), "run.mjs").replaceAll("\\", "/");
+    return `node "${runner}" agent-hook ${subcommand} --adapter ${adapter}`;
+}
 /**
  * Pick a committed hook target that survives cloning the consumer elsewhere.
  * Projects that contain Harnery can use its repo-relative launcher. Standalone
  * consumers use the package's installed `agent-hook` executable from PATH
  * instead of recording a relative path back into one developer's package tree.
  */
-export function agentHookPathForProject(projectRoot, packageRoot) {
+export function agentHookPathForProject(projectRoot, packageRoot, options) {
+    // Native npm shims run the linked source checkout without Bash, and do not
+    // depend on a hook's working directory after an agent changes directories.
+    // A project that commits one settings file for every OS asks for the same.
+    if ((options?.platform ?? process.platform) === "win32" || options?.portableCommands) {
+        return "agent-hook";
+    }
     const hook = join(packageRoot, "bin", "agent-hook");
     const candidate = relative(projectRoot, hook);
     if (candidate === ".." || candidate.startsWith(`..${sep}`) || isAbsolute(candidate)) {
@@ -155,7 +182,7 @@ export function diffWiring(settings, spec, expected) {
         if (commands.length > 1)
             duplicates.push(event);
         if (expected && commands.length > 0) {
-            const canonical = hookCommand(spec, expected.agentHookPath, event.subcommand, expected.adapter);
+            const canonical = hookCommand(spec, expected.agentHookPath, event.subcommand, expected.adapter, expected);
             const timeout = hookTimeoutFor(spec, event.subcommand);
             const commandWindows = expectedCommandWindows(spec, expected.agentHookPath, event.subcommand, expected.adapter, expected);
             const handlerDrift = groups.some((group) => "hooks" in group &&
@@ -232,7 +259,9 @@ function pluginDrift(projectRoot, id, spec) {
     const packageRoot = harneryPackageRoot();
     const check = checkOpenCodePlugin(projectRoot, {
         binName: resolveBinName(projectRoot),
-        agentHook: packageRoot ? agentHookPathForProject(projectRoot, packageRoot) : "agent-hook",
+        agentHook: packageRoot
+            ? agentHookPathForProject(projectRoot, packageRoot, projectWiringOptions(projectRoot))
+            : "agent-hook",
     });
     if (check.status === "fresh")
         return null;
@@ -275,11 +304,12 @@ export function loadAdapterWiring(projectRoot) {
             continue;
         }
         const packageRoot = harneryPackageRoot();
+        const options = projectWiringOptions(projectRoot);
         const diff = diffWiring(settings, spec, packageRoot
             ? {
-                agentHookPath: agentHookPathForProject(projectRoot, packageRoot),
+                agentHookPath: agentHookPathForProject(projectRoot, packageRoot, options),
                 adapter: id,
-                windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+                ...options,
             }
             : undefined);
         if (diff.present.length === 0)

package/dist/core/hooks/autoupdate-cue.d.ts

@@ -0,0 +1,29 @@
+import type { AutoUpdateNotice, TickResult } from "../autoupdate/types.js";
+/** Prefix on every self-update line injected into an agent's context. */
+export declare const AUTOUPDATE_CUE_PREFIX = "Auto-update: ";
+export interface AutoUpdateCueDeps {
+    tick: (coordRoot: string) => TickResult;
+    pendingNotices: (coordRoot: string, sessionKey: string) => AutoUpdateNotice[];
+}
+export interface AutoUpdateCueOptions {
+    /**
+     * Whether this hook will show context to the agent. When false, the tick
+     * still runs but notices stay queued for a session that can read them.
+     */
+    deliver?: boolean;
+    /** Test seam; production loads the engine lazily. */
+    deps?: AutoUpdateCueDeps;
+    /** Receives tick or delivery failures. The cue itself never throws. */
+    onError?: (err: unknown, phase: "autoupdate-tick" | "autoupdate-notices") => void;
+}
+/**
+ * Fire the activity-driven self-update check (ADR 0229) and collect the
+ * notices this session has not seen yet, one context line each.
+ *
+ * Projects without an `autoUpdate` section pay one config stat and never load
+ * the engine. With the section, the tick's hot path is one stamp stat; any
+ * real work runs in a detached child, so the hook never waits on it. Fails
+ * open: an error is reported through `onError` and the cue is empty.
+ */
+export declare function autoUpdateHookContext(coordRoot: string, sessionKey: string, options?: AutoUpdateCueOptions): Promise<string>;
+//# sourceMappingURL=autoupdate-cue.d.ts.map

package/dist/core/hooks/autoupdate-cue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoupdate-cue.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/autoupdate-cue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAG3E,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC;IACxC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,gBAAgB,EAAE,CAAC;CAC/E;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qDAAqD;IACrD,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,GAAG,oBAAoB,KAAK,IAAI,CAAC;CACnF;AAUD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,CA0BjB"}

package/dist/core/hooks/autoupdate-cue.js

@@ -0,0 +1,53 @@
+import { coordEnv } from "../../lib/env.js";
+import { readAutoUpdateConfig } from "../config.js";
+/** Prefix on every self-update line injected into an agent's context. */
+export const AUTOUPDATE_CUE_PREFIX = "Auto-update: ";
+async function loadDeps() {
+    const engine = await import("../autoupdate/index.js");
+    return {
+        tick: (root) => engine.autoUpdateTick(root),
+        pendingNotices: (root, key) => engine.pendingNotices(root, key),
+    };
+}
+/**
+ * Fire the activity-driven self-update check (ADR 0229) and collect the
+ * notices this session has not seen yet, one context line each.
+ *
+ * Projects without an `autoUpdate` section pay one config stat and never load
+ * the engine. With the section, the tick's hot path is one stamp stat; any
+ * real work runs in a detached child, so the hook never waits on it. Fails
+ * open: an error is reported through `onError` and the cue is empty.
+ */
+export async function autoUpdateHookContext(coordRoot, sessionKey, options = {}) {
+    if (coordEnv("AUTOUPDATE_CHILD") === "1")
+        return "";
+    let deps;
+    try {
+        if (!readAutoUpdateConfig(coordRoot))
+            return "";
+        deps = options.deps ?? (await loadDeps());
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-tick");
+        return "";
+    }
+    try {
+        deps.tick(coordRoot);
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-tick");
+    }
+    if (options.deliver === false || !sessionKey)
+        return "";
+    try {
+        return deps
+            .pendingNotices(coordRoot, sessionKey)
+            .map((notice) => `${AUTOUPDATE_CUE_PREFIX}${notice.text.trim()}`)
+            .filter((line) => line.length > AUTOUPDATE_CUE_PREFIX.length)
+            .join("\n");
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-notices");
+        return "";
+    }
+}

package/dist/core/hooks/cli.js

@@ -46,6 +46,7 @@ import { detectAdapter, shouldSkipHookAdapter } from "./adapter/detect.js";
 import { ADAPTER_SPECS } from "./adapter/events.js";
 import { extractBashCommand, extractToolDescription, normalizeEventName, parsePayload, } from "./adapter/parse.js";
 import { hookTimeoutFor } from "./adapter/wiring.js";
+import { autoUpdateHookContext } from "./autoupdate-cue.js";
 import { scheduleBackupSnapshot } from "./backup-schedule.js";
 import { captureImages, detectPresence, imageJanitor, journalArchive, journalJanitor, journalRecoveryCue, playSound, recordImageArtifactsV3, resetSoundCounters, runSessionSyncExtension, soundForEvent, } from "./effects/index.js";
 import { toolInputHash, toolTargetHash } from "./events/input-hash.js";
@@ -55,7 +56,7 @@ import { beginHookHealth, observeHookDebug, observeHookError, writeHookHealthCom
 import { adapterPidFromEnv, parsePsChainLine, selectAnchorPid } from "./resolve/anchor.js";
 import { extractIntentComment, resolveIntent } from "./resolve/intent.js";
 import { resolveOwner } from "./resolve/owner.js";
-import { inspectSessionNameDisplayImmediately, scanAssistantStatusBoxPresent, scanStatusBoxPresent, scanTranscriptRuntime, } from "./resolve/transcript.js";
+import { inspectSessionNameDisplayImmediately, scanAssistantStatusBoxPresent, scanPendingBackgroundHandoffs, scanStatusBoxPresent, scanTranscriptRuntime, } from "./resolve/transcript.js";
 import { clearHookRunMarker, writeHookRunMarker } from "./run-markers.js";
 import { sessionNamePresence } from "./session-name-presence.js";
 import { shellCommitTreeReason } from "./shell-commit-tree.js";
@@ -1050,6 +1051,13 @@ async function handleSessionStarted(run) {
     catch (err) {
         logError(coordRoot, err, { phase: "backup-schedule" });
     }
+    // Project self-update (ADR 0229) fires on activity. The tick costs one stat
+    // when fresh and otherwise launches a detached child; queued notices for
+    // this session ride the same context as the backup cue.
+    const autoUpdateCue = await autoUpdateHookContext(coordRoot, owner.instance_id, {
+        deliver: coordEnv("WORKFLOW_CHILD") !== "1",
+        onError: (err, phase) => logError(coordRoot, err, { phase }),
+    });
     // Storage maintenance can walk large stores. It runs in a detached worker so
     // session start emits its context without waiting for it; an adapter that
     // stops a slow hook would otherwise drop that context entirely.
@@ -1072,7 +1080,7 @@ async function handleSessionStarted(run) {
         }
     }
     try {
-        const injected = await emitSessionStartSystemMessage(coordRoot, owner.instance_id, sessionId, data, adapter, recovery?.briefing ?? "", backupCue);
+        const injected = await emitSessionStartSystemMessage(coordRoot, owner.instance_id, sessionId, data, adapter, recovery?.briefing ?? "", [backupCue, autoUpdateCue].filter(Boolean).join("\n\n"));
         if (injected && recovery) {
             completeRecoveryInjection(coordRoot, owner.instance_id, sessionId, recovery);
         }
@@ -1196,8 +1204,13 @@ async function handleTurnStarted(run) {
             logError(coordRoot, err, { phase: "prompt-context-user-prompt" });
         }
     }
+    // Project self-update (ADR 0229): see handleSessionStarted.
+    const autoUpdateCue = await autoUpdateHookContext(coordRoot, owner.instance_id, {
+        deliver: coordEnv("WORKFLOW_CHILD") !== "1",
+        onError: (err, phase) => logError(coordRoot, err, { phase }),
+    });
     try {
-        const injected = await emitUserPromptSubmitSystemMessage(coordRoot, owner.instance_id, sessionId, adapter, payload?.cwd, recovery?.briefing ?? "", hostPromptContext);
+        const injected = await emitUserPromptSubmitSystemMessage(coordRoot, owner.instance_id, sessionId, adapter, payload?.cwd, recovery?.briefing ?? "", hostPromptContext, autoUpdateCue);
         if (injected && recovery) {
             completeRecoveryInjection(coordRoot, owner.instance_id, sessionId, recovery);
         }
@@ -1222,6 +1235,14 @@ async function handleStop(run) {
     catch (err) {
         logError(coordRoot, err, { phase: "stop-presence" });
     }
+    // Claude Code may move a running foreground command (often the agent's own
+    // commit and push) into the background to deliver a user message. Until it
+    // reports back, finalization cannot pass, so the verdict defers the status
+    // demands instead of bouncing the agent in a loop.
+    const pendingBackgroundHandoffs = adapter === "claude-code"
+        ? scanPendingBackgroundHandoffs(payload?.transcript_path ??
+            behavior.discoverTranscript?.(payload?.session_id ?? sessionId))
+        : [];
     // Stop verdict (V3 ritual + task/status gate). Direct in-process call: the
     // rule lives in Harnery. agent-hook already emitted this turn.completed
     // with privacy-safe ritual observations, so the evidence is in the stream.
@@ -1235,8 +1256,25 @@ async function handleStop(run) {
         session_name_observation_unavailable: typeof data.session_name_unavailable_reason === "string",
         bypass: coordEnv("AGENT_COORD_BYPASS_STOP") === "1",
         workflow_child: coordEnv("WORKFLOW_CHILD") === "1",
+        pending_background_handoff: pendingBackgroundHandoffs.length > 0,
     });
+    if (verdict.rule === "stop-hook.background_handoff_deferred") {
+        appendDebug(coordRoot, {
+            ...debugBase,
+            effect: "stop-deferred-background-handoff",
+            background_task_ids: pendingBackgroundHandoffs,
+        });
+    }
     if (!verdict.allow) {
+        // Re-arm the prompt-time ritual reminder; it is otherwise shown only on a
+        // session's first prompt so the per-prompt context stays small.
+        try {
+            const { markTurnRitualBounced } = await import("../agents/render/prompt-context.js");
+            markTurnRitualBounced(coordRoot, owner.instance_id);
+        }
+        catch (err) {
+            logError(coordRoot, err, { phase: "stop-ritual-rearm" });
+        }
         // Backstop for sessions whose evidence can never land (e.g. a headless
         // child whose status command resolves to a different owner): after
         // `cap` consecutive blocked stops in one cycle, allow the stop instead
@@ -1270,6 +1308,13 @@ async function handleStop(run) {
     // until the adapter has committed turn.completed above. Reconcile only
     // when such a request exists; any later real work cancels it in the
     // finalizer instead of being terminated underneath the agent.
+    // A deferred stop proves nothing about finalization; an explicit end must
+    // wait for the turn that reports the background task's result.
+    if (verdict.rule === "stop-hook.background_handoff_deferred") {
+        if (behavior.runtimeContextRetry)
+            scheduleRuntimeContextRetry(coordRoot, adapter, sessionId);
+        return undefined;
+    }
     try {
         const { hasPendingExplicitSessionEndV3, reconcileSessionFinalizationV3 } = await import("../agents/session-finalizer-v3.js");
         if (hasPendingExplicitSessionEndV3(coordRoot)) {
@@ -2035,7 +2080,7 @@ function cleanupSessionEnd(coordRoot, instanceId) {
         }
     }
 }
-async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionId, adapter, workspaceCwd, recoveryBriefing = "", hostPromptContext = "") {
+async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionId, adapter, workspaceCwd, recoveryBriefing = "", hostPromptContext = "", autoUpdateCue = "") {
     // Workflow children get no prompt-time coordination context, matching
     // SessionStart. The turn ritual is not enforced for them, the naming nudge
     // would register them as named peers, and rendering drains peer mail.
@@ -2064,6 +2109,9 @@ async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionI
     if (hostPromptContext) {
         additionalContext = [additionalContext, hostPromptContext].filter(Boolean).join("\n\n");
     }
+    if (autoUpdateCue) {
+        additionalContext = [additionalContext, autoUpdateCue].filter(Boolean).join("\n\n");
+    }
     if (!additionalContext)
         return false;
     const { emitContext } = await import("./adapter/output.js");

package/dist/core/hooks/effects/index.js

@@ -16,7 +16,7 @@ import { existsSync, readdirSync, rmSync } from "node:fs";
 import os from "node:os";
 import { join } from "node:path";
 import { applyDetection } from "../../../lib/presence.js";
-import { coordBinPath } from "../../agents/coord-bin.js";
+import { coordBinPath, spawnCoordBinSync } from "../../agents/coord-bin.js";
 export { captureImages, imageJanitor, recordImageArtifactsV3 } from "./image-capture.js";
 /**
  * Play a notification sound via the cross-platform utility
@@ -62,7 +62,7 @@ export function journalJanitor(repoRoot) {
         const bin = harnBin(repoRoot);
         if (!bin)
             return;
-        spawnSync("bash", [bin, "journal", "janitor", "--quiet"], {
+        spawnCoordBinSync(bin, ["journal", "janitor", "--quiet"], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             stdio: "ignore",
@@ -82,7 +82,7 @@ export function journalRecoveryCue(repoRoot) {
         const bin = harnBin(repoRoot);
         if (!bin)
             return "";
-        const r = spawnSync("bash", [bin, "journal", "recovery-cue"], {
+        const r = spawnCoordBinSync(bin, ["journal", "recovery-cue"], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             encoding: "utf8",
@@ -99,7 +99,7 @@ export function journalArchive(repoRoot, owner) {
         const bin = harnBin(repoRoot);
         if (!bin || !owner)
             return;
-        spawnSync("bash", [bin, "journal", "archive", "--owner", owner], {
+        spawnCoordBinSync(bin, ["journal", "archive", "--owner", owner], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             stdio: "ignore",

package/dist/core/hooks/resolve/coord-root.js

@@ -90,6 +90,7 @@ function gitRevParse(start, flag) {
         // A stale adapter project directory may no longer exist. Treat spawn
         // failure as no path evidence instead of turning discovery into an error.
         const result = spawnSync("git", ["rev-parse", flag], {
+            windowsHide: true,
             cwd: start,
             encoding: "utf8",
         });

package/dist/core/hooks/resolve/transcript.d.ts

@@ -33,6 +33,18 @@ export declare function scanAssistantTextIncludes(transcriptPath: string | undef
  * from the adapter's completed assistant response.
  */
 export declare function scanAssistantStatusBoxPresent(transcriptPath: string | undefined, lastAssistantMessage: string | undefined): boolean;
+/** A handoff older than this no longer defers Stop, so a lost notification cannot disable the ritual. */
+export declare const BACKGROUND_HANDOFF_MAX_AGE_MS: number;
+/**
+ * Claude Code background tasks it moved off the foreground on its own (to
+ * deliver a mid-command user message) that have not yet posted a
+ * `<task-notification>`. Only the structured `toolUseResult` fields written by
+ * Claude Code open a handoff; the agent cannot forge them through tool output.
+ * Any later notification text naming the task closes it, so a spoofed
+ * notification can only make Stop stricter. A command the agent chose to
+ * background (`run_in_background`) or a Monitor opens nothing.
+ */
+export declare function scanPendingBackgroundHandoffs(transcriptPath: string | undefined, nowMs?: number): string[];
 /** Most recent user-visible assistant text across Claude Code and Codex JSONL. */
 export declare function scanLatestAssistantText(transcriptPath: string | undefined): string | undefined;
 /**

package/dist/core/hooks/resolve/transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/transcript.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,2BAA2B,wBAAc,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAiCT;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GACvC,OAAO,CAKT;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,OAAO,CAIT;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IACE,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;CAClF,CAAC;AAEN;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,4BAA4B,CAqD9B;AAgBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAUrF;AAwDD;4CAC4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,qBAAqB,GAAG,SAAS,CA8BnC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAiBpB;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAkDpB"}
+{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/transcript.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,2BAA2B,wBAAc,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAiCT;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GACvC,OAAO,CAKT;AAED,yGAAyG;AACzG,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAQ5D;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,KAAK,GAAE,MAAmB,GACzB,MAAM,EAAE,CAsCV;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,OAAO,CAIT;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IACE,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,oBAAoB,GAAG,sBAAsB,GAAG,wBAAwB,CAAC;CAClF,CAAC;AAEN;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,GAC/D,4BAA4B,CAqD9B;AAgBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAUrF;AAwDD;4CAC4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;+EAC2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,qBAAqB,GAAG,SAAS,CA8BnC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAiBpB;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAkDpB"}