harnery 0.6.0 → 0.7.1

package/dist/lib/instructions/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,sEAAsE;AACtE,eAAO,MAAM,aAAa,WAAW,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,WAA6C,GACpD,MAAM,CA+CR;AAID,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAsKD,eAAO,MAAM,MAAM,EAAE,aAAa,EA4BjC,CAAC"}

package/dist/lib/instructions/templates.js

@@ -0,0 +1,258 @@
+/**
+ * The agent-facing content harnery ships into a consumer: one orientation block
+ * for `AGENTS.md` and the generic skills. Everything here is engine mechanics
+ * only — no triage rubric, no escalation targets, no host doc-layout policy
+ * (those stay host-authored, per ADR 0007's portability split). Every command
+ * string renders through `binName`; a template that only reads for `harn` is a
+ * bug the portability guard exists to catch.
+ *
+ * Content, not paths: templates are TS string builders (not shipped `.md`
+ * files), so they compile into `dist/` and resolve identically under Bun and
+ * Node — no `files`-field copy or package-path guesswork.
+ */
+import { buildOwnedSkill } from "./splice.js";
+/** Managed-region name for the AGENTS.md orientation block. */
+export const INSTRUCTIONS_REGION = "instructions";
+/** Managed-region name for the CLAUDE.md `@AGENTS.md` import shim. */
+export const IMPORT_REGION = "import";
+/**
+ * The always-on orientation spliced into `AGENTS.md`. Target ≤ 80 rendered
+ * lines: it costs every agent context on every turn, so it states that each
+ * surface *exists* and gives one line of *when* — the *how* lives in the skills
+ * and each command's `--help`. Skill names are fixed (`harn-decide`,
+ * `harn-council`) even for a renamed bin; only command strings track `binName`.
+ *
+ * The block only points at a skill that actually exists here: a host that
+ * excludes one via `skills.exclude`, or a harness with no skill primitive
+ * (cursor/codex get the block but no skill files), gets a `--help` pointer
+ * instead of a dangling reference to a skill it doesn't have.
+ */
+export function renderInstructionsBlock(binName, skills = { decide: true, council: true }) {
+    const b = binName;
+    const named = [skills.decide && "`harn-decide`", skills.council && "`harn-council`"].filter(Boolean);
+    const deeper = named.length > 0
+        ? `Procedures for the deeper flows live in the ${named.join(" and ")} skill${named.length > 1 ? "s" : ""}.`
+        : `See \`${b} decision --help\` and \`${b} council --help\` for the deeper procedures.`;
+    const decidePointer = skills.decide
+        ? "The `harn-decide` skill has the file / claim / resolve-with-evidence procedure."
+        : `See \`${b} decision --help\` for the file / claim / resolve-with-evidence procedure.`;
+    const councilPointer = skills.council
+        ? "The `harn-council` skill has the steward and member flow."
+        : `See \`${b} council --help\` for the steward and member flow.`;
+    return `## harnery coordination
+
+This project runs [harnery](https://harnery.com) for multi-agent coordination.
+You share this checkout with other agents; the surfaces below keep you oriented
+and out of each other's way. Run \`${b} <command> --help\` for any command's full
+surface. ${deeper}
+
+**Identity + peers.** You are one of several agents in this repo.
+\`${b} agents whoami\` is you; \`${b} agents status\` shows your session plus the
+active peers and the files they've claimed; \`${b} agents set-task "<focus>"\`
+declares your current focus so peers can see it. Check for peers before editing
+widely-shared files.
+
+**Declare intent on shell commands.** Every command you run is captured to the
+coordination ledger. Lead a shell command with a \`# intent: <why>\` comment (or set
+the tool's description) so the recorded event carries a reason instead of
+\`(no intent)\`.
+
+**Scratch journal.** \`${b} scratch add <category> "<text>"\` (category = note, plan,
+decision, blocker, or handoff) leaves breadcrumbs that survive context compaction;
+\`${b} scratch read\` reads yours, \`${b} scratch read --name <peer>\` reads a peer's.
+Use it for anything future-you or a peer will need to pick up your thread.
+
+**Decision docket.** When you would otherwise stop to ask a human a decision you
+can't resolve from the repo, file it instead. \`${b} decision file "<question>"\`
+records it and lets you proceed on a stated default; \`${b} decision search "<terms>"\`
+surfaces prior decisions, so check for precedent before re-deciding. ${decidePointer}
+
+**Councils.** For a hard or contested decision, convene a council of agents.
+\`${b} council create "<objective>"\` runs structured rounds toward a decision. ${councilPointer}`;
+}
+function decideBody(b) {
+    return `The decision docket is a persistent queue for decisions you would otherwise
+route to a human. It's built on the \`${b} decision\` engine. This skill is the
+mechanics — file, find precedent, claim, and resolve with evidence. *When* a
+decision needs a human at all (versus one you settle yourself) is host policy;
+if this project defines that rubric, follow it.
+
+## Modes
+
+- **A decision you're facing (default)** → capture: record it and proceed.
+- **\`resolve <id>\`** → pick up an open decision, research it, resolve it.
+- **\`review\`** → surface resolved-but-unreviewed decisions for a human to skim.
+
+## Capture (default)
+
+1. **Check precedent first.** \`${b} decision search "<key terms>"\`. If a resolved
+   decision already answers this, cite it — don't re-litigate.
+2. **File it** when the choice has a second consumer (a human will want to see it,
+   or a future agent will face it again) or reversal is expensive. Skip the
+   docket for pure local mechanics (a variable name, one of two equivalent idioms).
+
+   \`\`\`bash
+   ${b} decision file "<the decision as a clear question>" \\
+     --context "why it matters / what's blocked / the options you see" \\
+     --default-taken "<what you're proceeding with>"
+   \`\`\`
+
+   For a decision with real substance, write a brief to a file and pass
+   \`--brief <path>\` so the reviewer sees options + evidence, not a cold prompt.
+3. **Proceed on your default.** Filing does not mean blocking — note the id in your
+   reply and keep working.
+
+## Resolve (\`resolve <id>\`)
+
+\`\`\`bash
+${b} decision show <id>     # read the question + context + any brief
+${b} decision claim <id>    # mark it deliberating (claimed by you)
+\`\`\`
+
+Research it for real — run the queries, read the files, compute the costs. Then
+resolve with **cited evidence** (the engine rejects an evidence-free resolution):
+
+\`\`\`bash
+${b} decision resolve <id> \\
+  --recommendation "<the call>" \\
+  --evidence "<a fact you established: a query run, a file read, a cost computed>" \\
+  --evidence "<another>" \\
+  --reversal-cost "<cost to undo if wrong>" \\
+  --wrong-if "<what would make this wrong>" \\
+  --revisit-when "<trigger to revisit>"
+\`\`\`
+
+If the decision is genuinely hard or contested, escalate to a council
+(\`${b} council create "<objective>"\`) and link it rather than forcing a thin
+single-agent resolution.
+
+## Review (\`review\`)
+
+\`\`\`bash
+${b} decision list --status resolved
+\`\`\`
+
+For each one a human reacts to, record the verdict so triage self-corrects:
+
+\`\`\`bash
+${b} decision review <id> --verdict ratified              # agreed; no action
+${b} decision review <id> --verdict overridden --note "…" # disagreed
+${b} decision review <id> --verdict wrong-tier-low        # "didn't need to see this"
+${b} decision review <id> --verdict wrong-tier-high       # "should have seen it sooner"
+\`\`\``;
+}
+function councilBody(b) {
+    return `A council convenes several agents to deliberate a hard or contested decision
+over structured rounds. This skill wraps the \`${b} council\` surface with the
+guardrails a router needs when passing prompts between agents. It's asymmetric on
+purpose: it does the most for **contributors** (refusing a misrouted prompt) and
+the least for **stewards**.
+
+Every mode starts by running \`${b} agents whoami --json\` and, when an id is given,
+\`${b} council show <id> --json\`, so the logic works against typed data, not text.
+
+## Modes
+
+- **No argument** → list councils you're a member of; surface what waits on you.
+- **\`create <objective>\`** → open the web member-picker with the objective filled.
+- **\`contribute <id>\`** → the guarded contribution flow (below).
+- **\`prompts <id>\`** → steward: draft each pending member's routing prompt.
+- **\`show <id>\`** → render council state verbatim.
+
+## List (no arg)
+
+\`\`\`bash
+${b} agents whoami --json
+${b} council list --mine --json
+\`\`\`
+
+One section per council you're a member of: id + objective, round N (open /
+collected) with N/M contributors, and your status (awaiting prompt / prompt ready
+/ already contributed) with the next command to run. Stop after listing — don't
+auto-route into contribute.
+
+## Create (\`create <objective>\`)
+
+The web UI is the member + steward picker; don't create from the CLI (that skips
+the steward choice). Emit the link with the objective URL-encoded:
+
+\`\`\`
+http://localhost:9000/councils/new?objective=<encoded>
+\`\`\`
+
+If the dev server isn't up, start it with \`${b} web up\`.
+
+## Contribute (\`contribute <id>\`) — the guarded flow
+
+Run these checks in order; refuse with a specific reason if any fails.
+
+1. **Membership.** If your \`whoami\` name isn't in \`manifest.members\`, refuse — the
+   router likely meant a different agent's session.
+2. **Already contributed.** If you're in \`current_round_contributors\`, refuse —
+   wait for the steward to advance the round.
+3. **Prompt routing.** Find your entry in \`current_round_prompts\`. If none is
+   drafted for you, refuse (the steward must write one first). If the routed body
+   carries a \`<!-- council-route … member: <name> -->\` header naming a *different*
+   agent, refuse — the wrong prompt was pasted into your session.
+4. **Compose** per your prompt (read \`manifest.target_doc\` in full if set; strip
+   the route header before treating the body as instructions).
+5. **Submit:**
+
+   \`\`\`bash
+   ${b} council contribute <id> --message "<status-line>" --file <path>
+   \`\`\`
+
+   Use \`--file\` when you edited a target doc (captures the post-edit state);
+   \`--message\` for a prose-only contribution. If the prompt asks for a
+   substantive/trivial classification, end with the literal \`<substantive>\` or
+   \`<trivial>\` angle-bracket tag on the final line (the exit-criterion parser keys
+   on it). When in doubt, lean \`<trivial>\`.
+
+## Prompts (\`prompts <id>\`) — steward
+
+1. **Authority.** If your \`whoami\` name ≠ the council's \`steward\`, stop.
+2. **Plan the round** from the target doc + prior rounds. Round 1 must include a
+   completeness critic — assign one member the explicit charge: "What important
+   thing is NOT in this document at all — a missing dimension, not a flaw in what's
+   written?" Lens-scoped reviewers reliably miss whole absent dimensions.
+3. **Draft + write** one prompt per member missing from \`current_round_prompts\`:
+
+   \`\`\`bash
+   ${b} council prompt <id> agent-<Name> --message "..."   # or --file <path>
+   \`\`\`
+
+   The CLI auto-prepends the \`<!-- council-route … -->\` header — never write it by
+   hand. Every prompt must instruct the member to end with the literal
+   \`<substantive>\` / \`<trivial>\` tag.
+
+## Refusal style
+
+Lead with what you are versus what the council expects, cite the structural fact
+that triggered the refusal (member list, contributors, prompt absence, route
+mismatch), and offer the right next step. Don't propose a workaround that bypasses
+the guard.`;
+}
+export const SKILLS = [
+    {
+        id: "harn-decide",
+        relPath: "harn-decide/SKILL.md",
+        render: (binName) => buildOwnedSkill({
+            name: "harn-decide",
+            description: "File a decision into the docket instead of blocking on a human — search precedent, file it, and proceed on a reversible default; or pick up and resolve an open decision with cited evidence. Use whenever you're about to ask a human a decision-shaped question you could resolve yourself.",
+            argumentHint: "[<the decision / question you're facing> | resolve <id> | review]",
+            binName,
+            body: decideBody(binName),
+        }),
+    },
+    {
+        id: "harn-council",
+        relPath: "harn-council/SKILL.md",
+        render: (binName) => buildOwnedSkill({
+            name: "harn-council",
+            description: "Interact with the multi-agent council system: list / create / show / prompts (steward) / contribute (member). Guards against misrouting — refuses to contribute when you aren't a member, have already contributed, or weren't routed a prompt.",
+            argumentHint: "[<id-or-fragment> | create <objective> | contribute <id> | prompts <id> | show <id>]",
+            binName,
+            body: councilBody(binName),
+        }),
+    },
+];

package/dist/lib/tunnel/gate.d.ts

@@ -3,6 +3,7 @@ declare const ALLOW: Set<string>;
 declare const TARGET: string;
 declare const VHOST: string;
 declare const PORT: number;
+declare const ACCESS: string;
 declare const UPSTREAM_HTTP: string;
 declare const UPSTREAM_WS: string;
 interface WsData {

package/dist/lib/tunnel/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/gate.ts"],"names":[],"mappings":"AAgBA,iBAAS,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlD;AAED,QAAA,MAAM,KAAK,aAKV,CAAC;AACF,QAAA,MAAM,MAAM,QAAwD,CAAC;AACrE,QAAA,MAAM,KAAK,QAAkD,CAAC;AAC9D,QAAA,MAAM,IAAI,QAA0E,CAAC;AAErF,QAAA,MAAM,aAAa,QAAqB,CAAC;AACzC,QAAA,MAAM,WAAW,QAAmB,CAAC;AAErC,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,QAAA,MAAM,MAAM,oBAoEV,CAAC"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/gate.ts"],"names":[],"mappings":"AAiBA,iBAAS,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlD;AAED,QAAA,MAAM,KAAK,aAKV,CAAC;AACF,QAAA,MAAM,MAAM,QAAwD,CAAC;AACrE,QAAA,MAAM,KAAK,QAAkD,CAAC;AAC9D,QAAA,MAAM,IAAI,QAA0E,CAAC;AACrF,QAAA,MAAM,MAAM,QAA8D,CAAC;AAE3E,QAAA,MAAM,aAAa,QAAqB,CAAC;AACzC,QAAA,MAAM,WAAW,QAAmB,CAAC;AAErC,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,QAAA,MAAM,MAAM,oBAsEV,CAAC"}

package/dist/lib/tunnel/gate.js

@@ -1,9 +1,10 @@
 "use strict";
-// Reverse-proxy worker spawned by `tunnel up`. Listens on 127.0.0.1:<port>,
-// checks CF-Connecting-IP against an allowlist passed via env, and forwards
-// HTTP + WebSocket requests to an upstream with a Host header rewrite and
-// Content-Encoding stripped (Bun's fetch auto-decompresses the body but
-// retains the encoding header, which breaks browser decoding downstream).
+// Reverse-proxy worker spawned by `tunnel up`. Listens on 127.0.0.1:<port>
+// and forwards HTTP + WebSocket requests to an upstream with a Host header
+// rewrite and Content-Encoding stripped (Bun's fetch auto-decompresses the
+// body but retains the encoding header, which breaks browser decoding
+// downstream). Cloudflare provider mode checks CF-Connecting-IP against an
+// allowlist; trusted local proxy mode lets the local exposer own access.
 //
 // Runs detached, outside the CLI command framework; no command context is
 // available; stdout/stderr is captured into .cache/tunnel/gate.log by the
@@ -25,6 +26,7 @@ const ALLOW = new Set((process.env.HARNERY_TUNNEL_ALLOW ?? "")
 const TARGET = process.env.HARNERY_TUNNEL_TARGET ?? "127.0.0.1:8001";
 const VHOST = process.env.HARNERY_TUNNEL_VHOST ?? "localhost";
 const PORT = Number(process.env.HARNERY_TUNNEL_PORT ?? argvFlag("--port") ?? "9001");
+const ACCESS = process.env.HARNERY_TUNNEL_ACCESS ?? "cloudflare-allowlist";
 const UPSTREAM_HTTP = `http://${TARGET}`;
 const UPSTREAM_WS = `ws://${TARGET}`;
 const server = Bun.serve({
@@ -36,9 +38,11 @@ const server = Bun.serve({
     // Bun's max, and beyond any realistic single-turn delay.
     idleTimeout: 255,
     async fetch(req, server) {
-        const ip = req.headers.get("cf-connecting-ip") ?? "";
-        if (!ALLOW.has(ip)) {
-            return new Response("403 Forbidden\n", { status: 403 });
+        if (ACCESS === "cloudflare-allowlist") {
+            const ip = req.headers.get("cf-connecting-ip") ?? "";
+            if (!ALLOW.has(ip)) {
+                return new Response("403 Forbidden\n", { status: 403 });
+            }
         }
         const url = new URL(req.url);
         if (req.headers.get("upgrade")?.toLowerCase() === "websocket") {
@@ -98,4 +102,5 @@ const server = Bun.serve({
 // framework, so no AsyncLocalStorage context is available. stdout/stderr is
 // captured into .cache/tunnel/gate.log by the spawning command.
 console.log(`harn-tunnel-gate :${server.port} -> ${UPSTREAM_HTTP} (Host: ${VHOST})`); // lint-ok-emission: detached worker, see file note above
-console.log(`allow: ${[...ALLOW].join(", ") || "(empty, denies all)"}`); // lint-ok-emission: detached worker, see file note above
+console.log(`access: ${ACCESS}`); // lint-ok-emission: detached worker, see file note above
+console.log(`allow: ${[...ALLOW].join(", ") || "(empty, not used outside allowlist mode)"}`); // lint-ok-emission: detached worker, see file note above

package/dist/lib/tunnel/state.d.ts

@@ -2,18 +2,28 @@
 export declare const DEFAULT_INSTANCE = "default";
 export declare function gateLogFile(name: string): string;
 export declare function cfdLogFile(name: string): string;
+export declare function providerLogFile(name: string, provider: TunnelProvider): string;
 export interface TunnelConfig {
     allowed_ips: string[];
 }
+export type TunnelProvider = "cloudflare" | "tailscale";
+export type TailscaleMode = "serve" | "funnel";
 export interface TunnelState {
     name: string;
+    provider: TunnelProvider;
     url: string;
     gate_pid: number;
-    cloudflared_pid: number;
+    /** Present for Cloudflare quick tunnels; absent for Tailscale Serve/Funnel. */
+    cloudflared_pid?: number;
+    /** Optional provider-side process when a provider owns one. */
+    provider_pid?: number;
     started_at: string;
     target: string;
     vhost: string;
     gate_port: number;
+    tailscale_mode?: TailscaleMode;
+    tailscale_path?: string;
+    tailscale_https_port?: number;
 }
 export declare function readConfig(): TunnelConfig;
 export declare function writeConfig(cfg: TunnelConfig): void;

package/dist/lib/tunnel/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAuBA,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAgBD,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAgB,UAAU,IAAI,YAAY,CAWzC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAAyB,GAAG,WAAW,GAAG,IAAI,CAQ7E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAEnD;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,GAAG,IAAI,CAGhE;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,WAAW,EAAE,CAW1C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAuB1C"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAuBA,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAG9E;AAgBD,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAOD,wBAAgB,UAAU,IAAI,YAAY,CAWzC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAAyB,GAAG,WAAW,GAAG,IAAI,CAQ7E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAEnD;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,GAAG,IAAI,CAGhE;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,WAAW,EAAE,CAW1C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAuB1C"}

package/dist/lib/tunnel/state.js

@@ -1,5 +1,5 @@
-// Tunnel config + state persistence + cloudflared-install helper. Lives
-// under <cwd>/.cache/tunnel/; gitignored, so the allowlist is per-machine.
+// Tunnel config + state persistence + provider helpers. Lives under
+// <cwd>/.cache/tunnel/; gitignored, so the allowlist is per-machine.
 import { execSync } from "node:child_process";
 import { existsSync, mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
 import { resolve } from "node:path";
@@ -27,6 +27,11 @@ export function gateLogFile(name) {
 export function cfdLogFile(name) {
     return name === DEFAULT_INSTANCE ? "cloudflared.log" : `cloudflared-${name}.log`;
 }
+export function providerLogFile(name, provider) {
+    if (provider === "cloudflare")
+        return cfdLogFile(name);
+    return name === DEFAULT_INSTANCE ? "tailscale.log" : `tailscale-${name}.log`;
+}
 /** Map a state filename back to its instance name (inverse of stateFile). */
 function nameFromStateFile(file) {
     if (file === "state.json")
@@ -42,7 +47,7 @@ const DEFAULT_CONFIG = {
 };
 /** Normalize a parsed state blob; supply `name` for pre-multi-instance files. */
 function normalizeState(raw, fallbackName) {
-    return { ...raw, name: raw.name ?? fallbackName };
+    return { ...raw, name: raw.name ?? fallbackName, provider: raw.provider ?? "cloudflare" };
 }
 export function readConfig() {
     const p = cachePath("tunnel", CONFIG_FILE);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "harnery",
-  "version": "0.6.0",
-  "description": "Multi-agent coordination + harness adapters + portable CLI utilities for Claude Code / Cursor / Codex.",
+  "version": "0.7.1",
+  "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",
   "homepage": "https://harnery.com",
@@ -87,10 +87,10 @@
       "types": "./dist/lib/readability/index.d.ts",
       "import": "./dist/lib/readability/index.js"
     },
-    "./lib/scratch": {
-      "bun": "./src/lib/scratch/index.ts",
-      "types": "./dist/lib/scratch/index.d.ts",
-      "import": "./dist/lib/scratch/index.js"
+    "./core/scratch": {
+      "bun": "./src/core/scratch/index.ts",
+      "types": "./dist/core/scratch/index.d.ts",
+      "import": "./dist/core/scratch/index.js"
     },
     "./lib/tunnel/state": {
       "bun": "./src/lib/tunnel/state.ts",
@@ -129,6 +129,7 @@
     "typecheck": "bun x tsc --noEmit",
     "lint": "bun x @biomejs/biome check src",
     "check:portability": "bun run scripts/check-portability.ts",
+    "check:layering": "bun run scripts/check-layering.ts",
     "lint:fix": "bun x @biomejs/biome check --write src",
     "format": "bun x @biomejs/biome format --write src",
     "test": "bun test src tests",

package/src/commander.ts

@@ -29,6 +29,7 @@ import { registerContextCommand } from "./commands/context.ts";
 import { registerCookiesCommand } from "./commands/cookies.ts";
 import { registerDecisionCommand } from "./commands/decision.ts";
 import { registerDeinitCommand } from "./commands/deinit.ts";
+import { registerDevtoolsCommand } from "./commands/devtools.ts";
 import { registerDocsCommand } from "./commands/docs.ts";
 import { registerDoctorCommand } from "./commands/doctor.ts";
 import { registerEditBatchCommand } from "./commands/edit-batch.ts";
@@ -81,6 +82,20 @@ export interface HarneryContextOpts {
   skipCommands?: readonly string[];
 }
 
+/** One row in a `harn env` section report. */
+export interface EnvCheck {
+  label: string;
+  value: string;
+  status?: "ok" | "missing" | "warn" | "info";
+}
+
+/**
+ * A `harn env` section: an async probe returning its rows. Hosts register extra
+ * sections (e.g. cloud-provider connectivity) via `context.envSections`; harnery
+ * core ships only the generic sections (runtimes, docker, git).
+ */
+export type EnvSection = () => Promise<EnvCheck[]>;
+
 export interface HarneryProgramContext {
   /** Project name (e.g., "my-monorepo"). Used in user-facing log lines + telemetry tags. */
   projectName?: string;
@@ -98,6 +113,13 @@ export interface HarneryProgramContext {
    * submodule row.
    */
   submodules?: readonly string[];
+  /**
+   * Extra `harn env` sections keyed by name (e.g. `{ gcp, bq }`). Merged into
+   * the built-in generic sections (runtimes, docker, git), so a host can expose
+   * `harn env <name>` for its own environment probes without harnery core
+   * carrying provider-specific checks. harn standalone ships none.
+   */
+  envSections?: Record<string, EnvSection>;
   /**
    * Optional callback that returns extra HTTP headers to attach to outbound
    * `fetch` calls based on the target URL. Useful for consumers that need
@@ -237,6 +259,7 @@ export function createHarneryProgram(opts: HarneryContextOpts = {}): Command {
   registerContextCommand(program, emit, opts.context);
   registerScratchCommand(program, emit);
   registerDecisionCommand(program, emit);
+  registerDevtoolsCommand(program, emit);
   registerTunnelCommand(program, emit, opts.context);
   registerDocsCommand(program, emit, opts.context);
   registerAgentsCommand(program, emit);

package/src/commands/agents.ts

@@ -36,6 +36,7 @@ import {
   normalizeHarness,
   readHeartbeat,
   resolveOwner,
+  resolveOwnerBySessionEnv,
   resolveOwnerWithSource,
 } from "../core/agents/index.ts";
 import { resolveBinName } from "../core/config.ts";
@@ -46,6 +47,7 @@ import { resolveBinName } from "../core/config.ts";
 const STREAM_SCAN_CAP_BYTES = 128 * 1024 * 1024; // 128 MiB
 
 import { parsePsChainLine } from "../core/hooks/resolve/anchor.ts";
+import { appendEntry, resolveOwnerByName } from "../core/scratch/index.ts";
 import {
   buildCouncilId,
   buildInviteMarkdown,
@@ -80,7 +82,6 @@ import {
   lookupById as lookupIdentityById,
   lookupByName as lookupIdentityByName,
 } from "../lib/identities/index.ts";
-import { appendEntry, resolveOwnerByName } from "../lib/scratch/index.ts";
 
 const FRESHNESS_SECS = 600; // 10-minute heartbeat-freshness window.
 
@@ -166,8 +167,7 @@ export function registerAgentsCommand(program: Command, emitParam: EmitContext):
   cmd
     .command("show <name>")
     .description(
-      "Deep-dive on one peer agent: registry state (files held, last tool, task) " +
-        "plus claude-sessions history (latest title, recent prompts, recent tools, tool-usage tallies). " +
+      "Deep-dive on one peer agent: registry state (files held, last tool, task, turn summary). " +
         "Disambiguates name → instance_id via prefix match.",
     )
     .option("--json", "JSON envelope output")
@@ -694,6 +694,7 @@ function runWhoami(opts: { json?: boolean }): void {
     process.exit(1);
   }
 
+  ensureCursorSession(root);
   const resolved = resolveOwnerWithSource();
   const myOwner = resolved.owner;
   if (!myOwner) {
@@ -1172,6 +1173,50 @@ function formatLocalShort(iso: string): string {
   }).format(d);
 }
 
+function cursorEnvSessionId(): string | null {
+  const raw = process.env.CURSOR_SESSION_ID?.trim() || process.env.CURSOR_CONVERSATION_ID?.trim();
+  if (!raw) return null;
+  return raw.startsWith("bc-") && raw.length > 3 ? raw.slice(3) : raw;
+}
+
+function shouldBootstrapCursorSession(): boolean {
+  return process.env.CURSOR_AGENT === "1" && cursorEnvSessionId() !== null;
+}
+
+function ensureCursorSession(root: string): void {
+  if (!shouldBootstrapCursorSession()) return;
+  if (resolveOwnerBySessionEnv(root)) return;
+
+  const sessionId = cursorEnvSessionId();
+  if (!sessionId) return;
+  const agentHook = resolve(root, "harnery", "bin", "agent-hook");
+  if (!existsSync(agentHook)) return;
+
+  const payload = JSON.stringify({
+    conversation_id: sessionId,
+    session_id: sessionId,
+    hook_event_name: "sessionStart",
+    workspace_roots: [root],
+    cwd: root,
+    composer_mode: "agent",
+    is_background_agent: false,
+  });
+
+  spawnSync("bash", [agentHook, "session-start", "--harness", "cursor"], {
+    input: payload,
+    cwd: root,
+    encoding: "utf8",
+    timeout: 3000,
+    env: {
+      ...process.env,
+      HARNERY_AGENT_COORD_PLATFORM: "cursor",
+      HARNERY_COORD_ROOT_OVERRIDE: root,
+      CURSOR_SESSION_ID: sessionId,
+      CURSOR_CONVERSATION_ID: sessionId,
+    },
+  });
+}
+
 function runReleaseClaim(path: string): void {
   const root = monorepoRoot();
   if (!root) {
@@ -1220,6 +1265,7 @@ function runSetTask(task: string, opts?: { sessionId?: string }): void {
   // Identity: prefer explicit --session-id (the ppid-walk-free escape hatch,
   // mirrors `status`), fall back to the ppid walk. Cursor shell tool calls
   // don't descend from a pid-map-registered anchor, so the walk can miss there.
+  if (!opts?.sessionId) ensureCursorSession(root);
   const myOwner = opts?.sessionId ?? resolveOwner();
   if (!myOwner) {
     emit.error({
@@ -1272,6 +1318,7 @@ function runStatus(opts: { json?: boolean; sessionId?: string }): void {
 
   // Identity resolution: prefer explicit --session-id (hook-friendly), fall
   // back to ppid walk for interactive shell usage.
+  if (!opts.sessionId) ensureCursorSession(root);
   const myOwner = opts.sessionId ?? resolveOwner();
   if (!myOwner) {
     emit.error({

package/src/commands/deinit.ts

@@ -34,6 +34,7 @@ import type { Command } from "commander";
 import type { EmitContext } from "../commander.ts";
 import { DEFAULT_BIN_NAME } from "../core/config.ts";
 import { HARNESS_SPECS, type HarnessId } from "../core/hooks/harness/events.ts";
+import { removeInstructions } from "../lib/instructions/apply.ts";
 import { type SettingsFile, unwireHooks } from "./init.ts";
 
 interface DeinitOpts {
@@ -133,6 +134,10 @@ export function registerDeinitCommand(program: Command, emit: EmitContext, binNa
         }
       }
 
+      // ── 1b. agent-facing instructions block + skills ───────────────────────
+      const removed = removeInstructions(projectRoot, { harness, dryRun });
+      actions.push(...removed.actions, ...removed.warnings.map((w) => `! ${w}`));
+
       // ── 2. coord root (opt-in; destructive) ────────────────────────────────
       if (purgeState) {
         if (!coordExists) {