harnery 0.46.1 → 0.47.0

package/dist/core/config.js

@@ -11,7 +11,8 @@
  * `coord` (heartbeat freshness), `logs` (structured-log storage budgets),
  * `artifacts` (working-file retention),
  * `backup` (restic repo/password/prune policy), `sync` (rclone
- * remote/prefix), and `web` (dashboard port) sections. The `files` deny/override section
+ * remote/prefix), `computer` (opt-in desktop control), `autoUpdate` (activity-fired
+ * project self-update), and `web` (dashboard port) sections. The `files` deny/override section
  * is parsed separately by `web/lib/files.ts`.
  *
  * Env vars and CLI flags override any config value per invocation (each accessor
@@ -23,6 +24,7 @@ import { homedir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { coordEnv } from "../lib/env.js";
 import { DEFAULT_WEB_PORT } from "../lib/local-file-url.js";
+import { AUTOUPDATE_DEFAULTS } from "./autoupdate/types.js";
 import { resolveEventLedgerRotateActiveBytesV3 } from "./events/v3/rotation-config.js";
 import { parsePromptContextConfig, } from "./hooks/prompt-context/contract.js";
 import { findCoordRoot } from "./hooks/resolve/coord-root.js";
@@ -320,6 +322,17 @@ export function codexWindowsBridgeConfig(projectRoot) {
     }
     return { entryPoint, error: null };
 }
+/**
+ * Per-project opt-in that makes `init` write the same adapter hook commands on
+ * every OS: `agent-hook` from PATH, plus a native Codex `commandWindows`. A
+ * project that commits its settings files and is cloned on Windows and POSIX
+ * needs it, because the default form depends on the OS that ran `init`. Read
+ * from the project config only, for the same reason as the Windows bridge.
+ * Anything but `true` keeps the default.
+ */
+export function portableHookCommands(projectRoot) {
+    return readProjectConfig(projectRoot).hooks?.portableCommands === true;
+}
 export function hostPromptReminder(coordRoot) {
     const root = coordRoot ?? findCoordRoot();
     if (!root)
@@ -480,6 +493,106 @@ export function readAdmissionConfig(coordRoot) {
             : {}),
     };
 }
+/**
+ * Desktop-control settings from `.harnery/config.jsonc`:
+ *
+ * ```jsonc
+ * "computer": { "enabled": true, "idle_seconds": 120, "wait_seconds": 30 }
+ * ```
+ *
+ * Project config only: enabling desktop control is a per-project decision, so a
+ * user-global value never turns it on. Malformed values are dropped one by one;
+ * `enabled` is true only when the project sets it to exactly `true`.
+ */
+export function readComputerConfig(coordRoot) {
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return { enabled: false };
+    const raw = readProjectConfig(root).computer;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return { enabled: false };
+    const record = raw;
+    const idle = positiveNumber(record.idle_seconds, 86_400);
+    const wait = record.wait_seconds;
+    const waitOk = typeof wait === "number" && Number.isFinite(wait) && wait >= 0 && wait <= 3600;
+    return {
+        enabled: record.enabled === true,
+        ...(idle !== undefined ? { idle_seconds: idle } : {}),
+        ...(waitOk ? { wait_seconds: wait } : {}),
+    };
+}
+// Project-only parse cache keyed by the file's stat signature. Hooks call the
+// auto-update reader on every prompt, so an unchanged file costs one stat.
+let projectCache = null;
+function readProjectConfigCached(root) {
+    const p = join(root, ".harnery", "config.jsonc");
+    const signature = statSignature(p);
+    if (signature === null)
+        return {};
+    if (projectCache && projectCache.path === p && projectCache.signature === signature) {
+        return projectCache.cfg;
+    }
+    const cfg = parseConfigFile(p);
+    projectCache = { path: p, signature, cfg };
+    return cfg;
+}
+function clampInteger(value, min, max, fallback) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return fallback;
+    return Math.min(max, Math.max(min, Math.round(value)));
+}
+/** Keep each argv that is a non-empty array of non-empty strings; drop the rest. */
+function argvList(value) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    for (const entry of value) {
+        if (!Array.isArray(entry) || entry.length === 0)
+            continue;
+        if (!entry.every((part) => typeof part === "string" && part.length > 0))
+            continue;
+        out.push([...entry]);
+    }
+    return out;
+}
+/**
+ * Project self-update settings from `.harnery/config.jsonc` (ADR 0229):
+ *
+ * ```jsonc
+ * "autoUpdate": {
+ *   "enabled": true,
+ *   "steps": [["bin/pull-all"]],
+ *   "dailySteps": [["bin/doctor", "--quiet"]],
+ *   "watch": ["~/.local/share/example/hooks.json"],
+ *   "checkMinutes": 15,
+ *   "timeoutMinutes": 20,
+ *   "cleanup": true
+ * }
+ * ```
+ *
+ * Project config only: running commands on activity is a per-project
+ * decision, so a user-global value never turns it on. Null when the project
+ * has no `autoUpdate` section. Malformed values are dropped one by one;
+ * `enabled` is true only when the project sets it to exactly `true`.
+ */
+export function readAutoUpdateConfig(coordRoot) {
+    const raw = readProjectConfigCached(coordRoot).autoUpdate;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return null;
+    const record = raw;
+    const watch = Array.isArray(record.watch)
+        ? record.watch.filter((p) => typeof p === "string" && p.trim().length > 0)
+        : [];
+    return {
+        enabled: record.enabled === true,
+        checkMinutes: clampInteger(record.checkMinutes, 1, 1440, AUTOUPDATE_DEFAULTS.checkMinutes),
+        steps: argvList(record.steps),
+        dailySteps: argvList(record.dailySteps),
+        watch,
+        timeoutMinutes: clampInteger(record.timeoutMinutes, 1, 240, AUTOUPDATE_DEFAULTS.timeoutMinutes),
+        cleanup: record.cleanup !== false,
+    };
+}
 /**
  * Whether this repo pins workflow runs to subscription billing:
  * `.harnery/config.jsonc` `{ "workflow": { "subscriptionOnly": true } }`.

package/dist/core/events/v3/bootstrap.js

@@ -443,6 +443,7 @@ function rootOfHarnery() {
 }
 function repositoryBuild(root) {
     const result = spawnSync("git", ["-C", root, "rev-parse", "HEAD"], {
+        windowsHide: true,
         encoding: "utf8",
         timeout: 5000,
     });

package/dist/core/events/v3/runtime-build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-build.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/runtime-build.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAuBnD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,YAAY,CAkBpD;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CA0BxE"}
+{"version":3,"file":"runtime-build.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/runtime-build.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAwBnD;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,IAAI,YAAY,CAkBpD;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CA0BxE"}

package/dist/core/events/v3/runtime-build.js

@@ -14,6 +14,7 @@ export function currentHarneryRuntimeBuild() {
     const root = harneryPackageRoot();
     if (existsSync(resolve(root, ".git"))) {
         const result = spawnSync("git", ["-C", root, "rev-parse", "HEAD"], {
+            windowsHide: true,
             encoding: "utf8",
             timeout: 5_000,
         });

package/dist/core/hooks/adapter/wiring.d.ts

@@ -65,7 +65,17 @@ export declare function hookCommandWindows(spec: AdapterSpec, agentHookPath: str
 export interface WiringOptions {
     /** Bridge entry point from `hooks.codexWindowsBridge`, or null when not opted in. */
     windowsBridgeEntryPoint?: string | null;
+    /**
+     * `hooks.portableCommands`: write the same `agent-hook` commands from PATH on
+     * every OS, plus a native Codex `commandWindows`, so one committed settings
+     * file is current everywhere.
+     */
+    portableCommands?: boolean;
+    /** The OS to write for. Defaults to the host; tests inject it. */
+    platform?: NodeJS.Platform;
 }
+/** The wiring options a project's committed config selects. */
+export declare function projectWiringOptions(projectRoot: string): WiringOptions;
 /** The `commandWindows` init writes for one event, or undefined for none. */
 export declare function expectedCommandWindows(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, options?: WiringOptions): string | undefined;
 /** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
@@ -83,14 +93,14 @@ export declare function commandWiresSubcommand(command: string, subcommand: stri
 /** Whether a command invokes Harnery's agent-hook binary at all. */
 export declare function isAgentHookCommand(command: string): boolean;
 /** The canonical command installed for one adapter event. */
-export declare function hookCommand(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId): string;
+export declare function hookCommand(spec: AdapterSpec, agentHookPath: string, subcommand: string, adapter: AdapterId, options?: WiringOptions): string;
 /**
  * Pick a committed hook target that survives cloning the consumer elsewhere.
  * Projects that contain Harnery can use its repo-relative launcher. Standalone
  * consumers use the package's installed `agent-hook` executable from PATH
  * instead of recording a relative path back into one developer's package tree.
  */
-export declare function agentHookPathForProject(projectRoot: string, packageRoot: string): string;
+export declare function agentHookPathForProject(projectRoot: string, packageRoot: string, options?: WiringOptions): string;
 export interface WiringDiff {
     /** Spec events not wired in the settings file. */
     missing: HookEvent[];

package/dist/core/hooks/adapter/wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,2FAA2F;AAC3F,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CACvB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,SAAS,CAgBX;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAMR;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,GACjB,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAOxF;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,GACvE,UAAU,CAwFZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAyD5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA8BhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/adapter/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AACD,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1D,2FAA2F;AAC3F,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CACvB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E,SAAS,CAgBX;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CAMR;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAKvE;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,GAAG,SAAS,CAcpB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGnF;AAQD,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CASR;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CAaR;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,GACvE,UAAU,CAyFZ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,SAAS,CAAC;IACnB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAwCD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,EAAE,CA0D5E;AAED,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,CA8BhF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAkBlD"}

package/dist/core/hooks/adapter/wiring.js

@@ -13,7 +13,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { codexWindowsBridgeConfig, resolveBinName } from "../../config.js";
+import { codexWindowsBridgeConfig, portableHookCommands, resolveBinName } from "../../config.js";
 import { ADAPTER_SPECS, } from "./events.js";
 import { checkOpenCodePlugin, isOwnedOpenCodePlugin } from "./opencode-plugin.js";
 /** Bound Cursor Stop `followup_message` retries so a missed ritual cannot loop 5 times. */
@@ -63,10 +63,22 @@ export function hookCommandWindows(spec, agentHookPath, subcommand, adapter, ent
     return (`if ((Get-Command ${entryPoint} -ErrorAction Ignore) -and $PWD.ProviderPath -like '\\\\wsl*') ` +
         `{ ${entryPoint} ${subcommand} --adapter ${adapter} } else { ${direct} }; exit $LASTEXITCODE`);
 }
+/** The wiring options a project's committed config selects. */
+export function projectWiringOptions(projectRoot) {
+    return {
+        windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+        portableCommands: portableHookCommands(projectRoot),
+    };
+}
 /** The `commandWindows` init writes for one event, or undefined for none. */
 export function expectedCommandWindows(spec, agentHookPath, subcommand, adapter, options) {
-    if (!spec.windowsBridgeHooks || !options?.windowsBridgeEntryPoint)
+    if (!spec.windowsBridgeHooks)
         return undefined;
+    if (!options?.windowsBridgeEntryPoint) {
+        return (options?.platform ?? process.platform) === "win32" || options?.portableCommands
+            ? nativeHookCommand(agentHookPath, subcommand, adapter)
+            : undefined;
+    }
     return hookCommandWindows(spec, agentHookPath, subcommand, adapter, options.windowsBridgeEntryPoint);
 }
 /** The `timeout` init writes on one event's Harnery hook, or undefined for none. */
@@ -114,20 +126,35 @@ export function isAgentHookCommand(command) {
     return commandSubcommand(command) !== null;
 }
 /** The canonical command installed for one adapter event. */
-export function hookCommand(spec, agentHookPath, subcommand, adapter) {
+export function hookCommand(spec, agentHookPath, subcommand, adapter, options) {
+    if ((options?.platform ?? process.platform) === "win32") {
+        return nativeHookCommand(agentHookPath, subcommand, adapter);
+    }
     if (agentHookPath === "agent-hook") {
         return `agent-hook ${subcommand} --adapter ${adapter}`;
     }
     const anchor = spec.projectDirEnv ? `"\${${spec.projectDirEnv}:-.}"/` : "";
     return `bash ${anchor}${agentHookPath} ${subcommand} --adapter ${adapter}`;
 }
+function nativeHookCommand(agentHookPath, subcommand, adapter) {
+    if (agentHookPath === "agent-hook")
+        return `agent-hook ${subcommand} --adapter ${adapter}`;
+    const runner = join(dirname(agentHookPath), "run.mjs").replaceAll("\\", "/");
+    return `node "${runner}" agent-hook ${subcommand} --adapter ${adapter}`;
+}
 /**
  * Pick a committed hook target that survives cloning the consumer elsewhere.
  * Projects that contain Harnery can use its repo-relative launcher. Standalone
  * consumers use the package's installed `agent-hook` executable from PATH
  * instead of recording a relative path back into one developer's package tree.
  */
-export function agentHookPathForProject(projectRoot, packageRoot) {
+export function agentHookPathForProject(projectRoot, packageRoot, options) {
+    // Native npm shims run the linked source checkout without Bash, and do not
+    // depend on a hook's working directory after an agent changes directories.
+    // A project that commits one settings file for every OS asks for the same.
+    if ((options?.platform ?? process.platform) === "win32" || options?.portableCommands) {
+        return "agent-hook";
+    }
     const hook = join(packageRoot, "bin", "agent-hook");
     const candidate = relative(projectRoot, hook);
     if (candidate === ".." || candidate.startsWith(`..${sep}`) || isAbsolute(candidate)) {
@@ -155,7 +182,7 @@ export function diffWiring(settings, spec, expected) {
         if (commands.length > 1)
             duplicates.push(event);
         if (expected && commands.length > 0) {
-            const canonical = hookCommand(spec, expected.agentHookPath, event.subcommand, expected.adapter);
+            const canonical = hookCommand(spec, expected.agentHookPath, event.subcommand, expected.adapter, expected);
             const timeout = hookTimeoutFor(spec, event.subcommand);
             const commandWindows = expectedCommandWindows(spec, expected.agentHookPath, event.subcommand, expected.adapter, expected);
             const handlerDrift = groups.some((group) => "hooks" in group &&
@@ -232,7 +259,9 @@ function pluginDrift(projectRoot, id, spec) {
     const packageRoot = harneryPackageRoot();
     const check = checkOpenCodePlugin(projectRoot, {
         binName: resolveBinName(projectRoot),
-        agentHook: packageRoot ? agentHookPathForProject(projectRoot, packageRoot) : "agent-hook",
+        agentHook: packageRoot
+            ? agentHookPathForProject(projectRoot, packageRoot, projectWiringOptions(projectRoot))
+            : "agent-hook",
     });
     if (check.status === "fresh")
         return null;
@@ -275,11 +304,12 @@ export function loadAdapterWiring(projectRoot) {
             continue;
         }
         const packageRoot = harneryPackageRoot();
+        const options = projectWiringOptions(projectRoot);
         const diff = diffWiring(settings, spec, packageRoot
             ? {
-                agentHookPath: agentHookPathForProject(projectRoot, packageRoot),
+                agentHookPath: agentHookPathForProject(projectRoot, packageRoot, options),
                 adapter: id,
-                windowsBridgeEntryPoint: codexWindowsBridgeConfig(projectRoot).entryPoint,
+                ...options,
             }
             : undefined);
         if (diff.present.length === 0)

package/dist/core/hooks/autoupdate-cue.d.ts

@@ -0,0 +1,29 @@
+import type { AutoUpdateNotice, TickResult } from "../autoupdate/types.js";
+/** Prefix on every self-update line injected into an agent's context. */
+export declare const AUTOUPDATE_CUE_PREFIX = "Auto-update: ";
+export interface AutoUpdateCueDeps {
+    tick: (coordRoot: string) => TickResult;
+    pendingNotices: (coordRoot: string, sessionKey: string) => AutoUpdateNotice[];
+}
+export interface AutoUpdateCueOptions {
+    /**
+     * Whether this hook will show context to the agent. When false, the tick
+     * still runs but notices stay queued for a session that can read them.
+     */
+    deliver?: boolean;
+    /** Test seam; production loads the engine lazily. */
+    deps?: AutoUpdateCueDeps;
+    /** Receives tick or delivery failures. The cue itself never throws. */
+    onError?: (err: unknown, phase: "autoupdate-tick" | "autoupdate-notices") => void;
+}
+/**
+ * Fire the activity-driven self-update check (ADR 0229) and collect the
+ * notices this session has not seen yet, one context line each.
+ *
+ * Projects without an `autoUpdate` section pay one config stat and never load
+ * the engine. With the section, the tick's hot path is one stamp stat; any
+ * real work runs in a detached child, so the hook never waits on it. Fails
+ * open: an error is reported through `onError` and the cue is empty.
+ */
+export declare function autoUpdateHookContext(coordRoot: string, sessionKey: string, options?: AutoUpdateCueOptions): Promise<string>;
+//# sourceMappingURL=autoupdate-cue.d.ts.map

package/dist/core/hooks/autoupdate-cue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoupdate-cue.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/autoupdate-cue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAG3E,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC;IACxC,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,gBAAgB,EAAE,CAAC;CAC/E;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qDAAqD;IACrD,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,GAAG,oBAAoB,KAAK,IAAI,CAAC;CACnF;AAUD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,CA0BjB"}

package/dist/core/hooks/autoupdate-cue.js

@@ -0,0 +1,53 @@
+import { coordEnv } from "../../lib/env.js";
+import { readAutoUpdateConfig } from "../config.js";
+/** Prefix on every self-update line injected into an agent's context. */
+export const AUTOUPDATE_CUE_PREFIX = "Auto-update: ";
+async function loadDeps() {
+    const engine = await import("../autoupdate/index.js");
+    return {
+        tick: (root) => engine.autoUpdateTick(root),
+        pendingNotices: (root, key) => engine.pendingNotices(root, key),
+    };
+}
+/**
+ * Fire the activity-driven self-update check (ADR 0229) and collect the
+ * notices this session has not seen yet, one context line each.
+ *
+ * Projects without an `autoUpdate` section pay one config stat and never load
+ * the engine. With the section, the tick's hot path is one stamp stat; any
+ * real work runs in a detached child, so the hook never waits on it. Fails
+ * open: an error is reported through `onError` and the cue is empty.
+ */
+export async function autoUpdateHookContext(coordRoot, sessionKey, options = {}) {
+    if (coordEnv("AUTOUPDATE_CHILD") === "1")
+        return "";
+    let deps;
+    try {
+        if (!readAutoUpdateConfig(coordRoot))
+            return "";
+        deps = options.deps ?? (await loadDeps());
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-tick");
+        return "";
+    }
+    try {
+        deps.tick(coordRoot);
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-tick");
+    }
+    if (options.deliver === false || !sessionKey)
+        return "";
+    try {
+        return deps
+            .pendingNotices(coordRoot, sessionKey)
+            .map((notice) => `${AUTOUPDATE_CUE_PREFIX}${notice.text.trim()}`)
+            .filter((line) => line.length > AUTOUPDATE_CUE_PREFIX.length)
+            .join("\n");
+    }
+    catch (err) {
+        options.onError?.(err, "autoupdate-notices");
+        return "";
+    }
+}

package/dist/core/hooks/cli.js

@@ -46,6 +46,7 @@ import { detectAdapter, shouldSkipHookAdapter } from "./adapter/detect.js";
 import { ADAPTER_SPECS } from "./adapter/events.js";
 import { extractBashCommand, extractToolDescription, normalizeEventName, parsePayload, } from "./adapter/parse.js";
 import { hookTimeoutFor } from "./adapter/wiring.js";
+import { autoUpdateHookContext } from "./autoupdate-cue.js";
 import { scheduleBackupSnapshot } from "./backup-schedule.js";
 import { captureImages, detectPresence, imageJanitor, journalArchive, journalJanitor, journalRecoveryCue, playSound, recordImageArtifactsV3, resetSoundCounters, runSessionSyncExtension, soundForEvent, } from "./effects/index.js";
 import { toolInputHash, toolTargetHash } from "./events/input-hash.js";
@@ -1050,6 +1051,13 @@ async function handleSessionStarted(run) {
     catch (err) {
         logError(coordRoot, err, { phase: "backup-schedule" });
     }
+    // Project self-update (ADR 0229) fires on activity. The tick costs one stat
+    // when fresh and otherwise launches a detached child; queued notices for
+    // this session ride the same context as the backup cue.
+    const autoUpdateCue = await autoUpdateHookContext(coordRoot, owner.instance_id, {
+        deliver: coordEnv("WORKFLOW_CHILD") !== "1",
+        onError: (err, phase) => logError(coordRoot, err, { phase }),
+    });
     // Storage maintenance can walk large stores. It runs in a detached worker so
     // session start emits its context without waiting for it; an adapter that
     // stops a slow hook would otherwise drop that context entirely.
@@ -1072,7 +1080,7 @@ async function handleSessionStarted(run) {
         }
     }
     try {
-        const injected = await emitSessionStartSystemMessage(coordRoot, owner.instance_id, sessionId, data, adapter, recovery?.briefing ?? "", backupCue);
+        const injected = await emitSessionStartSystemMessage(coordRoot, owner.instance_id, sessionId, data, adapter, recovery?.briefing ?? "", [backupCue, autoUpdateCue].filter(Boolean).join("\n\n"));
         if (injected && recovery) {
             completeRecoveryInjection(coordRoot, owner.instance_id, sessionId, recovery);
         }
@@ -1196,8 +1204,13 @@ async function handleTurnStarted(run) {
             logError(coordRoot, err, { phase: "prompt-context-user-prompt" });
         }
     }
+    // Project self-update (ADR 0229): see handleSessionStarted.
+    const autoUpdateCue = await autoUpdateHookContext(coordRoot, owner.instance_id, {
+        deliver: coordEnv("WORKFLOW_CHILD") !== "1",
+        onError: (err, phase) => logError(coordRoot, err, { phase }),
+    });
     try {
-        const injected = await emitUserPromptSubmitSystemMessage(coordRoot, owner.instance_id, sessionId, adapter, payload?.cwd, recovery?.briefing ?? "", hostPromptContext);
+        const injected = await emitUserPromptSubmitSystemMessage(coordRoot, owner.instance_id, sessionId, adapter, payload?.cwd, recovery?.briefing ?? "", hostPromptContext, autoUpdateCue);
         if (injected && recovery) {
             completeRecoveryInjection(coordRoot, owner.instance_id, sessionId, recovery);
         }
@@ -1253,6 +1266,15 @@ async function handleStop(run) {
         });
     }
     if (!verdict.allow) {
+        // Re-arm the prompt-time ritual reminder; it is otherwise shown only on a
+        // session's first prompt so the per-prompt context stays small.
+        try {
+            const { markTurnRitualBounced } = await import("../agents/render/prompt-context.js");
+            markTurnRitualBounced(coordRoot, owner.instance_id);
+        }
+        catch (err) {
+            logError(coordRoot, err, { phase: "stop-ritual-rearm" });
+        }
         // Backstop for sessions whose evidence can never land (e.g. a headless
         // child whose status command resolves to a different owner): after
         // `cap` consecutive blocked stops in one cycle, allow the stop instead
@@ -2058,7 +2080,7 @@ function cleanupSessionEnd(coordRoot, instanceId) {
         }
     }
 }
-async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionId, adapter, workspaceCwd, recoveryBriefing = "", hostPromptContext = "") {
+async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionId, adapter, workspaceCwd, recoveryBriefing = "", hostPromptContext = "", autoUpdateCue = "") {
     // Workflow children get no prompt-time coordination context, matching
     // SessionStart. The turn ritual is not enforced for them, the naming nudge
     // would register them as named peers, and rendering drains peer mail.
@@ -2087,6 +2109,9 @@ async function emitUserPromptSubmitSystemMessage(coordRoot, instanceId, sessionI
     if (hostPromptContext) {
         additionalContext = [additionalContext, hostPromptContext].filter(Boolean).join("\n\n");
     }
+    if (autoUpdateCue) {
+        additionalContext = [additionalContext, autoUpdateCue].filter(Boolean).join("\n\n");
+    }
     if (!additionalContext)
         return false;
     const { emitContext } = await import("./adapter/output.js");

package/dist/core/hooks/effects/index.js

@@ -16,7 +16,7 @@ import { existsSync, readdirSync, rmSync } from "node:fs";
 import os from "node:os";
 import { join } from "node:path";
 import { applyDetection } from "../../../lib/presence.js";
-import { coordBinPath } from "../../agents/coord-bin.js";
+import { coordBinPath, spawnCoordBinSync } from "../../agents/coord-bin.js";
 export { captureImages, imageJanitor, recordImageArtifactsV3 } from "./image-capture.js";
 /**
  * Play a notification sound via the cross-platform utility
@@ -62,7 +62,7 @@ export function journalJanitor(repoRoot) {
         const bin = harnBin(repoRoot);
         if (!bin)
             return;
-        spawnSync("bash", [bin, "journal", "janitor", "--quiet"], {
+        spawnCoordBinSync(bin, ["journal", "janitor", "--quiet"], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             stdio: "ignore",
@@ -82,7 +82,7 @@ export function journalRecoveryCue(repoRoot) {
         const bin = harnBin(repoRoot);
         if (!bin)
             return "";
-        const r = spawnSync("bash", [bin, "journal", "recovery-cue"], {
+        const r = spawnCoordBinSync(bin, ["journal", "recovery-cue"], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             encoding: "utf8",
@@ -99,7 +99,7 @@ export function journalArchive(repoRoot, owner) {
         const bin = harnBin(repoRoot);
         if (!bin || !owner)
             return;
-        spawnSync("bash", [bin, "journal", "archive", "--owner", owner], {
+        spawnCoordBinSync(bin, ["journal", "archive", "--owner", owner], {
             env: { ...process.env, HARNERY_OUTPUT_SESSION_TEE: "0" },
             timeout: 5000,
             stdio: "ignore",

package/dist/core/hooks/resolve/coord-root.js

@@ -90,6 +90,7 @@ function gitRevParse(start, flag) {
         // A stale adapter project directory may no longer exist. Treat spawn
         // failure as no path evidence instead of turning discovery into an error.
         const result = spawnSync("git", ["rev-parse", flag], {
+            windowsHide: true,
             cwd: start,
             encoding: "utf8",
         });

package/dist/core/semantic/contract.d.ts

@@ -152,7 +152,7 @@ export declare const SemanticUsageReceiptV1Schema: import("@sinclair/typebox").T
     scope: import("@sinclair/typebox").TLiteral<"unreported">;
 }>]>;
 export declare const SemanticEvidenceObservationV1Schema: import("@sinclair/typebox").TObject<{
-    kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"recovery" | "artifact" | "error" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
+    kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"error" | "recovery" | "artifact" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
     event_id: import("@sinclair/typebox").TString;
     observed_at: import("@sinclair/typebox").TString;
     label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -193,7 +193,7 @@ export declare const SemanticEvidenceV1Schema: import("@sinclair/typebox").TObje
         started_at: import("@sinclair/typebox").TString;
     }>>;
     recent: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"recovery" | "artifact" | "error" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
+        kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"error" | "recovery" | "artifact" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
         event_id: import("@sinclair/typebox").TString;
         observed_at: import("@sinclair/typebox").TString;
         label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -201,7 +201,7 @@ export declare const SemanticEvidenceV1Schema: import("@sinclair/typebox").TObje
         error_class: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
     attention: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
-        kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"recovery" | "artifact" | "error" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
+        kind: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"error" | "recovery" | "artifact" | "operation" | "action" | "terminal" | "task" | "progress" | "intent" | "wait" | "lifecycle" | "claim-conflict">[]>;
         event_id: import("@sinclair/typebox").TString;
         observed_at: import("@sinclair/typebox").TString;
         label: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;

package/dist/core/semantic/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/semantic/service.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,qBAAqB,CAAC;AAc7B,OAAO,EACL,yBAAyB,EACzB,sCAAsC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AACtD,eAAO,MAAM,qCAAqC,OAAQ,CAAC;AAK3D,eAAO,MAAM,yCAAyC,QAAS,CAAC;AA2BhE,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,OAAO,CAAC;KAC3B,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,0BAA0B,GAClC,SAAS,GACT,SAAS,GACT,QAAQ,GACR,UAAU,GACV,aAAa,CAAC;AAElB,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,0BAA0B,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,qBAAqB,CAAC;IACzD,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7D,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAED,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAgDhC;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,2BAA2B,CAAC,CAsBtC;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,CAgBtF;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,2BAA2B,CAAC,CA8MtC;AAED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,IAAI,CAuC5E;AAmID,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,QAAQ,GAAG,QAAQ,CAerB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/semantic/service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAGL,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,qBAAqB,CAAC;AAc7B,OAAO,EACL,yBAAyB,EACzB,sCAAsC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AACtD,eAAO,MAAM,qCAAqC,OAAQ,CAAC;AAK3D,eAAO,MAAM,yCAAyC,QAAS,CAAC;AA2BhE,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,iBAAiB,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,OAAO,CAAC;KAC3B,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,0BAA0B,GAClC,SAAS,GACT,SAAS,GACT,QAAQ,GACR,UAAU,GACV,aAAa,CAAC;AAElB,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,0BAA0B,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,qBAAqB,CAAC;IACzD,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7D,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C;AAED,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAmDhC;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,OAAO,CAAC,iCAAiC,CAAM,GACzD,OAAO,CAAC,2BAA2B,CAAC,CAsBtC;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,CAgBtF;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,2BAA2B,CAAC,CA8MtC;AAED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,IAAI,CAuC5E;AAmID,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,QAAQ,GAAG,QAAQ,CAerB"}

package/dist/core/semantic/service.js

@@ -3,6 +3,7 @@ import { randomBytes, randomUUID } from "node:crypto";
 import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
 import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { coordEnv } from "../../lib/env.js";
 import { readEventV3ControlState, readLedgerV3Since, } from "../events/v3/index.js";
 import { eventV3ActiveWatchPath } from "../events/v3/reader.js";
@@ -53,7 +54,7 @@ export async function spawnSemanticService(coordRootRaw, options = {}) {
     const logFd = sharedLogs ? undefined : openSync(paths.log, "a", stateFileMode());
     if (logFd !== undefined)
         chmodSync(paths.log, stateFileMode());
-    const harnBin = new URL("../../../bin/harn", import.meta.url).pathname;
+    const harnBin = fileURLToPath(new URL(import.meta.url.endsWith(".ts") ? "../../cli.ts" : "../../cli.js", import.meta.url));
     if (!existsSync(harnBin)) {
         if (logFd !== undefined)
             closeSync(logFd);
@@ -64,7 +65,8 @@ export async function spawnSemanticService(coordRootRaw, options = {}) {
         args.push("--calls-per-hour", String(options.callsPerHour));
     }
     let spawnError;
-    const child = spawn(harnBin, args, {
+    const child = spawn(process.execPath, [harnBin, ...args], {
+        windowsHide: true,
         cwd: coordRoot,
         detached: true,
         stdio: logFd === undefined ? ["ignore", "ignore", "ignore"] : ["ignore", logFd, logFd],

package/dist/core/storage/modes.d.ts

@@ -17,5 +17,5 @@ export declare function stateFileMode(): number;
  * True when a state file or directory is readable or writable by someone it should not be: anyone
  * but the owner in private mode, anyone outside the owner and group in group mode.
  */
-export declare function stateModeTooOpen(mode: number): boolean;
+export declare function stateModeTooOpen(mode: number, platform?: NodeJS.Platform): boolean;
 //# sourceMappingURL=modes.d.ts.map

package/dist/core/storage/modes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modes.d.ts","sourceRoot":"","sources":["../../../src/core/storage/modes.ts"],"names":[],"mappings":"AAgBA,mGAAmG;AACnG,wBAAgB,YAAY,IAAI,SAAS,GAAG,OAAO,CASlD;AAED,iGAAiG;AACjG,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,MAAQ,CAAC;AAExC,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wCAAwC;AACxC,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD"}
+{"version":3,"file":"modes.d.ts","sourceRoot":"","sources":["../../../src/core/storage/modes.ts"],"names":[],"mappings":"AAgBA,mGAAmG;AACnG,wBAAgB,YAAY,IAAI,SAAS,GAAG,OAAO,CASlD;AAED,iGAAiG;AACjG,eAAO,MAAM,iBAAiB,MAAQ,CAAC;AAEvC,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,MAAQ,CAAC;AAExC,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wCAAwC;AACxC,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAKT"}

package/dist/core/storage/modes.js

@@ -46,6 +46,10 @@ export function stateFileMode() {
  * True when a state file or directory is readable or writable by someone it should not be: anyone
  * but the owner in private mode, anyone outside the owner and group in group mode.
  */
-export function stateModeTooOpen(mode) {
+export function stateModeTooOpen(mode, platform = process.platform) {
+    // Windows synthesizes POSIX mode bits; access is controlled by inherited
+    // NTFS ACLs, which chmod and stat.mode cannot inspect or tighten.
+    if (platform === "win32")
+        return false;
     return (mode & (stateSharing() === "group" ? 0o007 : 0o077)) !== 0;
 }