harnery 0.8.0 → 0.9.0

package/dist/core/config.d.ts

@@ -52,4 +52,13 @@ export declare function resolveHooksSetupHint(coordRoot?: string | null): string
  * `coordRoot` is resolved via `findCoordRoot()` when not passed.
  */
 export declare function ripgrepAutoInstall(coordRoot?: string | null): boolean;
+/**
+ * Whether this repo pins workflow runs to subscription billing:
+ * `.harnery/config.jsonc` `{ "workflow": { "subscriptionOnly": true } }`.
+ * The `workflow run --subscription-only` flag turns it on per invocation;
+ * `HARNERY_WORKFLOW_SUBSCRIPTION_ONLY=1|0` overrides per process (the `0`
+ * escape hatch exists for a key-only CI job inside a pinned repo).
+ * `coordRoot` is resolved via `findCoordRoot()` when not passed.
+ */
+export declare function workflowSubscriptionOnly(coordRoot?: string | null): boolean;
 //# sourceMappingURL=config.d.ts.map

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAuBvC,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AAyBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AA6BvC,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqCvD;AAyBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAShE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAO3E"}

package/dist/core/config.js

@@ -151,3 +151,22 @@ export function ripgrepAutoInstall(coordRoot) {
         return false;
     return readConfig(root).tools?.ripgrep?.autoInstall === true;
 }
+/**
+ * Whether this repo pins workflow runs to subscription billing:
+ * `.harnery/config.jsonc` `{ "workflow": { "subscriptionOnly": true } }`.
+ * The `workflow run --subscription-only` flag turns it on per invocation;
+ * `HARNERY_WORKFLOW_SUBSCRIPTION_ONLY=1|0` overrides per process (the `0`
+ * escape hatch exists for a key-only CI job inside a pinned repo).
+ * `coordRoot` is resolved via `findCoordRoot()` when not passed.
+ */
+export function workflowSubscriptionOnly(coordRoot) {
+    const env = coordEnv("WORKFLOW_SUBSCRIPTION_ONLY");
+    if (env === "1")
+        return true;
+    if (env === "0")
+        return false;
+    const root = coordRoot ?? findCoordRoot();
+    if (!root)
+        return false;
+    return readConfig(root).workflow?.subscriptionOnly === true;
+}

package/dist/core/hooks/cli.js

@@ -69,6 +69,16 @@ async function readStdin() {
         return "";
     }
 }
+/**
+ * Env for child agent-coord spawns, with the coord root pinned. The hook
+ * process may be running with the session shell's cwd (inside a submodule or
+ * scratch dir), and agent-coord resolves its root from cwd unless overridden —
+ * without the pin a child could write state to a different .harnery than the
+ * one this hook resolved.
+ */
+function childEnv(coordRoot) {
+    return { ...process.env, HARNERY_COORD_ROOT_OVERRIDE: coordRoot };
+}
 function appendDebug(coordRoot, entry) {
     const path = join(coordRoot, ".harnery", "debug", "agent-hook.ndjson");
     try {
@@ -112,6 +122,7 @@ function assignNameViaAgentCoord(coordRoot, instanceId, kind) {
         const result = spawnSync(binary, ["assign-name", instanceId, kind], {
             encoding: "utf8",
             timeout: 2000,
+            env: childEnv(coordRoot),
         });
         if (result.status !== 0 || !result.stdout)
             return null;
@@ -206,6 +217,12 @@ function buildEventData(eventType, ctx) {
                 name: assigned?.name,
                 kind: "session",
                 agent_id: ctx.instanceId,
+                // Workflow-child linkage: `workflow run` children carry the run id in
+                // env (spawn adapters set it via buildChildEnv), so their sessions and
+                // heartbeats join back to the run journal + /workflows web view.
+                ...(coordEnv("WORKFLOW_CHILD") === "1" && coordEnv("WORKFLOW_RUN_ID")
+                    ? { workflow_run_id: coordEnv("WORKFLOW_RUN_ID") }
+                    : {}),
             };
         }
         case "session.end":
@@ -451,13 +468,17 @@ async function main() {
         try {
             const agentCoordBin = join(coordRoot, "harnery", "bin", "agent-coord");
             if (existsSync(agentCoordBin)) {
-                spawnSync(agentCoordBin, ["project"], { encoding: "utf8", timeout: 3000 });
+                spawnSync(agentCoordBin, ["project"], {
+                    encoding: "utf8",
+                    timeout: 3000,
+                    env: childEnv(coordRoot),
+                });
                 spawnSync(agentCoordBin, [
                     "log",
                     `SUBAGENT_START  agent_type=${data.agent_type ?? "unknown"} agent_id=${owner.instance_id.slice(0, 8)} platform=${harnessPlatform(harness)}`,
                     "--instance",
                     owner.instance_id,
-                ], { encoding: "utf8", timeout: 2000 });
+                ], { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) });
             }
             emitSubagentStartContext(coordRoot, owner.instance_id, sessionId, data, harness);
         }
@@ -476,7 +497,7 @@ async function main() {
                     `SUBAGENT_STOP   agent_id=${owner.instance_id.slice(0, 8)} platform=${harnessPlatform(harness)}`,
                     "--instance",
                     owner.instance_id,
-                ], { encoding: "utf8", timeout: 2000 });
+                ], { encoding: "utf8", timeout: 2000, env: childEnv(coordRoot) });
             }
         }
         catch (err) {
@@ -557,6 +578,7 @@ async function main() {
             session_id: sessionId,
             harness,
             bypass: coordEnv("AGENT_COORD_BYPASS_STOP") === "1",
+            workflow_child: coordEnv("WORKFLOW_CHILD") === "1",
         });
         if (!verdict.allow) {
             // Harness-aware enforcement channel: Claude Code / Codex honor exit-2 +
@@ -710,6 +732,7 @@ async function runPreToolUseGuard(coordRoot, instanceId, sessionId, data, harnes
             input: verdictReq,
             encoding: "utf8",
             timeout: 3000,
+            env: childEnv(coordRoot),
         });
         if (result.status !== 0 || !result.stdout)
             continue;
@@ -804,6 +827,7 @@ function healHeartbeatViaCli(coordRoot, instanceId, sessionId, harness) {
     spawnSync(agentCoordBin, ["heal-heartbeat", instanceId, sessionId, `--harness=${harness}`], {
         encoding: "utf8",
         timeout: 2000,
+        env: childEnv(coordRoot),
     });
 }
 /**
@@ -908,6 +932,7 @@ function stampToolActivity(coordRoot, instanceId, data) {
     spawnSync(agentCoordBin, ["stamp-tool-activity", instanceId, toolName, target], {
         encoding: "utf8",
         timeout: 2000,
+        env: childEnv(coordRoot),
     });
 }
 function releaseClaimOnFailure(coordRoot, instanceId, data, rawPayload) {
@@ -955,6 +980,7 @@ function releaseClaimOnFailure(coordRoot, instanceId, data, rawPayload) {
     spawnSync(agentCoordBin, ["release-claim", instanceId, canonical], {
         encoding: "utf8",
         timeout: 2000,
+        env: childEnv(coordRoot),
     });
 }
 function cleanupSessionEnd(coordRoot, instanceId, reason) {

package/dist/core/hooks/events/schema.d.ts

@@ -37,6 +37,10 @@ export type SessionStart = EventEnvelope<"session.start", {
     cwd: string;
     model?: string;
     pid: number;
+    /** Present iff this session is a `workflow run` child: the run id whose
+     * journal owns it (child env HARNERY_WORKFLOW_RUN_ID). Optional-field
+     * addition per the schema evolution rules (minor bump). */
+    workflow_run_id?: string;
 }>;
 export type SessionEnd = EventEnvelope<"session.end", {
     ended_at: string;

package/dist/core/hooks/events/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IACxD,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb;AAKD,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,WAAW,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,aAAa,CAClC,WAAW,EACX;IACE,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,aAAa,CACnC,WAAW,EACX;IACE,OAAO,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,cAAc,EACd;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,eAAe,EACf;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,uBAAuB,EACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,mBAAmB,EACnB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;CAC1D,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAGrF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,sBAAsB,EACtB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAC3C,qBAAqB,EACrB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,UAAU,EAAE,MAAM,CAAC;CACpB,CACF,CAAC;AAGF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,YAAY,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB,CACF,CAAC;AAIF,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,WAAW,GACX,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,YAAY,GACZ,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,cAAc,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/events/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IACxD,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,CAAC;CACb;AAKD,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ;;+DAE2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,WAAW,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,aAAa,CAClC,WAAW,EACX;IACE,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,aAAa,EACb;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,aAAa,CACnC,WAAW,EACX;IACE,OAAO,EAAE,MAAM,CAAC;CACjB,CACF,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,aAAa,CACpC,cAAc,EACd;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,eAAe,EACf;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,uBAAuB,EACvB;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,aAAa,CACzC,mBAAmB,EACnB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;CAC1D,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB,CACF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAC5C,sBAAsB,EACtB;IACE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;CACjC,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAGrF,MAAM,MAAM,WAAW,GAAG,aAAa,CACrC,cAAc,EACd;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,sBAAsB,EACtB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAC3C,qBAAqB,EACrB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,aAAa,CACxC,iBAAiB,EACjB;IACE,UAAU,EAAE,MAAM,CAAC;CACpB,CACF,CAAC;AAGF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,CACtC,eAAe,EACf;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,aAAa,CACvC,gBAAgB,EAChB;IACE,IAAI,EAAE,MAAM,CAAC;CACd,CACF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAC7C,uBAAuB,EACvB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAC1C,oBAAoB,EACpB;IACE,MAAM,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,MAAM,EAAE,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAC9C,wBAAwB,EACxB;IACE,YAAY,EAAE,cAAc,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB,CACF,CAAC;AAIF,MAAM,MAAM,KAAK,GACb,YAAY,GACZ,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,WAAW,GACX,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,WAAW,GACX,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,YAAY,GACZ,cAAc,GACd,aAAa,GACb,YAAY,GACZ,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,cAAc,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/core/hooks/harness/events.d.ts

@@ -36,6 +36,13 @@ export interface HarnessSpec {
     allowedTopLevelKeys?: string[];
     /** Strict hook event keys accepted by this harness, including events harnery does not wire. */
     allowedEventKeys?: string[];
+    /**
+     * Env var the harness exports to hook processes carrying the project root
+     * (e.g. Claude Code's CLAUDE_PROJECT_DIR). When set, `init` anchors the
+     * agent-hook path on it so the hook still spawns when the process cwd has
+     * wandered (the session shell `cd`ing into a subdirectory or off-repo).
+     */
+    projectDirEnv?: string;
 }
 /** Claude Code: `.claude/settings.json`. */
 export declare const CLAUDE_CODE_EVENTS: HookEvent[];

package/dist/core/hooks/harness/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/harness/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAWzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAWpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAQnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAI1C,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAWpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAoBxD,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/harness/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,SAAS;IACxB,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,wDAAwD;IACxD,UAAU,EAAE,cAAc,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAWzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,EAWpC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,EAQnC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,SAAS,EAI1C,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAWpC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAqBxD,CAAC"}

package/dist/core/hooks/harness/events.js

@@ -72,6 +72,7 @@ export const HARNESS_SPECS = {
         settingsFile: ".claude/settings.json",
         events: CLAUDE_CODE_EVENTS,
         entryShape: "claude",
+        projectDirEnv: "CLAUDE_PROJECT_DIR",
     },
     cursor: {
         settingsFile: ".cursor/hooks.json",

package/dist/core/hooks/resolve/coord-root.d.ts

@@ -1,6 +1,17 @@
 /**
  * Walk up from `start` looking for a directory containing `.harnery/`. The
  * single coord-root resolution so every adapter agrees on the same root.
+ *
+ * Resolution precedence:
+ *   1. HARNERY_COORD_ROOT_OVERRIDE — explicit pin (tests, git hooks).
+ *   2. The harness's project dir (CLAUDE_PROJECT_DIR) — hook processes
+ *      inherit the session's *shell* cwd, which follows `cd` into
+ *      subdirectories/submodules that may carry a `.harnery/` of their own
+ *      (or none at all, e.g. a scratch dir under /tmp). The session's
+ *      coordination home is the project the harness opened, not wherever the
+ *      shell happens to sit, so a project dir that resolves to a coord root
+ *      wins over the cwd walk.
+ *   3. Walk up from `start` (default cwd).
  */
 export declare function findCoordRoot(start?: string): string | null;
 //# sourceMappingURL=coord-root.d.ts.map

package/dist/core/hooks/resolve/coord-root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coord-root.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/coord-root.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAgB1E"}
+{"version":3,"file":"coord-root.d.ts","sourceRoot":"","sources":["../../../../src/core/hooks/resolve/coord-root.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAiB1E"}

package/dist/core/hooks/resolve/coord-root.js

@@ -4,17 +4,39 @@ import { coordEnv } from "../../../lib/env.js";
 /**
  * Walk up from `start` looking for a directory containing `.harnery/`. The
  * single coord-root resolution so every adapter agrees on the same root.
+ *
+ * Resolution precedence:
+ *   1. HARNERY_COORD_ROOT_OVERRIDE — explicit pin (tests, git hooks).
+ *   2. The harness's project dir (CLAUDE_PROJECT_DIR) — hook processes
+ *      inherit the session's *shell* cwd, which follows `cd` into
+ *      subdirectories/submodules that may carry a `.harnery/` of their own
+ *      (or none at all, e.g. a scratch dir under /tmp). The session's
+ *      coordination home is the project the harness opened, not wherever the
+ *      shell happens to sit, so a project dir that resolves to a coord root
+ *      wins over the cwd walk.
+ *   3. Walk up from `start` (default cwd).
  */
 export function findCoordRoot(start = process.cwd()) {
-    // HARNERY_COORD_ROOT_OVERRIDE: test-mode escape hatch matched by agent-coord
-    // and the bash side. Lets the sandboxed coord-test suite run against a
-    // temp directory rather than the real monorepo root. agent-hook's
-    // session.start handler may be the FIRST thing to create .harnery/ in a
-    // fresh sandbox, so the override is honored unconditionally (we don't
-    // require .harnery/ to pre-exist).
+    // HARNERY_COORD_ROOT_OVERRIDE: explicit pin matched by agent-coord and the
+    // bash side. Lets the sandboxed coord-test suite run against a temp
+    // directory rather than the real monorepo root. agent-hook's session.start
+    // handler may be the FIRST thing to create .harnery/ in a fresh sandbox,
+    // so the override is honored unconditionally (we don't require .harnery/
+    // to pre-exist).
     const override = coordEnv("COORD_ROOT_OVERRIDE");
     if (override)
         return override;
+    // Claude Code exports CLAUDE_PROJECT_DIR to every hook process; other
+    // harnesses don't set it, so this is inert outside claude-code hooks.
+    const projectDir = process.env.CLAUDE_PROJECT_DIR;
+    if (projectDir) {
+        const fromProject = walkUp(projectDir);
+        if (fromProject)
+            return fromProject;
+    }
+    return walkUp(start);
+}
+function walkUp(start) {
     let dir = resolve(start);
     while (true) {
         if (existsSync(join(dir, ".harnery")))

package/dist/core/workflow/billing.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Billing-mode probe: which auth a headless harness child will actually use.
+ *
+ * The engine never handles credentials — children are plain harness CLIs and
+ * authenticate however that CLI does. But the CLIs prefer an exported API key
+ * over a stored (subscription) login when both are present, and that override
+ * is almost always an accident: a sourced .env or a leftover export silently
+ * moves the run from subsidized subscription billing to per-token API billing.
+ * This probe classifies the state per harness so the engine can refuse the
+ * silent-override case (see decision 0015 addendum) while leaving deliberate
+ * key-only hosts (CI boxes with no login) working.
+ *
+ * Detection is a heuristic over well-known credential locations; when a
+ * location can't prove presence or absence (e.g. Claude Code stores its OAuth
+ * token in the macOS keychain, not a file), the state is "unknown" and the
+ * engine never hard-fails on it — the harness CLI itself is the final
+ * authority and will error loudly if truly unauthenticated.
+ */
+import type { HarnessName } from "./types.js";
+/** The env var each harness CLI reads as an API key (preferred over a stored
+ * login when set). Shared with the child-env builder's subscription-only
+ * scrub. */
+export declare const API_KEY_VARS: Record<HarnessName, string>;
+export type LoginState = "present" | "absent" | "unknown";
+export type BillingMode = 
+/** No API key exported; the child rides the stored (subscription) login. */
+"subscription"
+/** API key present, no stored login detected: a deliberate key-only host. */
+ | "api-key"
+/** API key present AND a stored login exists: the key silently overrides
+ * subsidized auth. The engine refuses this unless explicitly allowed. */
+ | "api-key-override";
+export interface BillingProbe {
+    harness: HarnessName;
+    /** The env var checked (from API_KEY_VARS), or a note when the key was
+     * found in a credential file instead of the environment. */
+    apiKeySource: string | null;
+    apiKeyPresent: boolean;
+    login: LoginState;
+    mode: BillingMode;
+}
+export interface ProbeIo {
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+}
+export type BillingProber = (harness: HarnessName) => BillingProbe;
+export declare function probeBilling(harness: HarnessName, io?: ProbeIo): BillingProbe;
+//# sourceMappingURL=billing.d.ts.map

package/dist/core/workflow/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/billing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;YAEY;AACZ,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAIpD,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D,MAAM,MAAM,WAAW;AACrB,4EAA4E;AAC1E,cAAc;AAChB,6EAA6E;GAC3E,SAAS;AACX;yEACyE;GACvE,kBAAkB,CAAC;AAEvB,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB;gEAC4D;IAC5D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,YAAY,CAAC;AAEnE,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAE,OAAY,GAAG,YAAY,CAyCjF"}

package/dist/core/workflow/billing.js

@@ -0,0 +1,102 @@
+/**
+ * Billing-mode probe: which auth a headless harness child will actually use.
+ *
+ * The engine never handles credentials — children are plain harness CLIs and
+ * authenticate however that CLI does. But the CLIs prefer an exported API key
+ * over a stored (subscription) login when both are present, and that override
+ * is almost always an accident: a sourced .env or a leftover export silently
+ * moves the run from subsidized subscription billing to per-token API billing.
+ * This probe classifies the state per harness so the engine can refuse the
+ * silent-override case (see decision 0015 addendum) while leaving deliberate
+ * key-only hosts (CI boxes with no login) working.
+ *
+ * Detection is a heuristic over well-known credential locations; when a
+ * location can't prove presence or absence (e.g. Claude Code stores its OAuth
+ * token in the macOS keychain, not a file), the state is "unknown" and the
+ * engine never hard-fails on it — the harness CLI itself is the final
+ * authority and will error loudly if truly unauthenticated.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+/** The env var each harness CLI reads as an API key (preferred over a stored
+ * login when set). Shared with the child-env builder's subscription-only
+ * scrub. */
+export const API_KEY_VARS = {
+    "claude-code": "ANTHROPIC_API_KEY",
+    codex: "OPENAI_API_KEY",
+    cursor: "CURSOR_API_KEY",
+};
+export function probeBilling(harness, io = {}) {
+    const env = io.env ?? process.env;
+    const home = io.home ?? homedir();
+    const keyVar = API_KEY_VARS[harness];
+    const envKey = Boolean(env[keyVar]?.trim());
+    let login;
+    let apiKeyPresent = envKey;
+    let apiKeySource = envKey ? keyVar : null;
+    switch (harness) {
+        case "claude-code":
+            login = probeClaudeLogin(home);
+            break;
+        case "codex": {
+            const codex = probeCodexAuth(env, home);
+            login = codex.login;
+            // `codex login --api-key` stores the key in auth.json rather than the
+            // env; that is still API-key billing and should surface as such.
+            if (!envKey && codex.storedApiKey) {
+                apiKeyPresent = true;
+                apiKeySource = codex.storedApiKeyNote;
+            }
+            break;
+        }
+        case "cursor":
+            // cursor-agent's stored-login location is not yet verified against a
+            // live install (adapter itself is pending verification); never claim
+            // presence or absence we can't prove.
+            login = "unknown";
+            break;
+    }
+    const mode = apiKeyPresent && login === "present"
+        ? "api-key-override"
+        : apiKeyPresent
+            ? "api-key"
+            : "subscription";
+    return { harness, apiKeySource, apiKeyPresent, login, mode };
+}
+/** Claude Code: OAuth login lives at ~/.claude/.credentials.json on Linux;
+ * macOS stores it in the keychain (dir exists, file doesn't → unknown). */
+function probeClaudeLogin(home) {
+    const dir = join(home, ".claude");
+    const credFile = join(dir, ".credentials.json");
+    if (existsSync(credFile)) {
+        try {
+            const parsed = JSON.parse(readFileSync(credFile, "utf8"));
+            return parsed.claudeAiOauth?.accessToken ? "present" : "absent";
+        }
+        catch {
+            return "unknown";
+        }
+    }
+    return existsSync(dir) ? "unknown" : "absent";
+}
+/** codex: auth lives at $CODEX_HOME/auth.json (default ~/.codex). A `tokens`
+ * object means a ChatGPT (subscription) login; an OPENAI_API_KEY field means
+ * a stored API key (`codex login --api-key`). */
+function probeCodexAuth(env, home) {
+    const authPath = join(env.CODEX_HOME?.trim() || join(home, ".codex"), "auth.json");
+    const storedApiKeyNote = `${authPath} (stored key)`;
+    if (!existsSync(authPath))
+        return { login: "absent", storedApiKey: false, storedApiKeyNote };
+    try {
+        const parsed = JSON.parse(readFileSync(authPath, "utf8"));
+        return {
+            login: parsed.tokens ? "present" : "absent",
+            storedApiKey: !parsed.tokens && Boolean(parsed.OPENAI_API_KEY),
+            storedApiKeyNote,
+        };
+    }
+    catch {
+        return { login: "unknown", storedApiKey: false, storedApiKeyNote };
+    }
+}

package/dist/core/workflow/child-env.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Child-process environment builder shared by every spawn adapter.
+ *
+ * Rules (the first is a hard-won Phase 1 spike finding):
+ * 1. **Delete inherited harness-session vars, never blank them.** A nested
+ *    harness CLI under a live session inherits vars that make it exit 1 with
+ *    empty output; an empty-string var still reads as set. Scrub all three
+ *    families (CLAUDE*, CODEX*, CURSOR*) regardless of which adapter spawns —
+ *    a codex child launched from inside a Claude Code session must not
+ *    inherit CLAUDE* either.
+ * 2. **The scrub targets SESSION vars, not credentials.** CURSOR_API_KEY
+ *    matches the CURSOR* prefix but is an auth credential, so it is carved
+ *    out and re-added — a key-only cursor host must keep working. (The other
+ *    two key vars, ANTHROPIC_API_KEY and OPENAI_API_KEY, don't collide with
+ *    the scrub prefixes.)
+ * 3. **subscriptionOnly deletes every API-key var** (see billing.ts) so the
+ *    child can only authenticate via its stored subscription login — the
+ *    guarantee behind `workflow run --subscription-only`.
+ * 4. **Mark the child as a workflow child** (HARNERY_WORKFLOW_CHILD=1): the
+ *    stop-hook rule exempts it from the human-facing end-of-turn ritual while
+ *    hooks stay on, keeping heartbeat + event capture.
+ * 5. **Stamp the run id** (HARNERY_WORKFLOW_RUN_ID) so the coord layer and
+ *    web UI can associate child sessions with their workflow run.
+ */
+export interface ChildEnvOpts {
+    /** Delete all API-key vars so children can only use stored logins. */
+    subscriptionOnly?: boolean;
+}
+export declare function buildChildEnv(runId?: string, opts?: ChildEnvOpts): Record<string, string>;
+//# sourceMappingURL=child-env.d.ts.map

package/dist/core/workflow/child-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-env.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/child-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAY7F"}

package/dist/core/workflow/child-env.js

@@ -0,0 +1,43 @@
+/**
+ * Child-process environment builder shared by every spawn adapter.
+ *
+ * Rules (the first is a hard-won Phase 1 spike finding):
+ * 1. **Delete inherited harness-session vars, never blank them.** A nested
+ *    harness CLI under a live session inherits vars that make it exit 1 with
+ *    empty output; an empty-string var still reads as set. Scrub all three
+ *    families (CLAUDE*, CODEX*, CURSOR*) regardless of which adapter spawns —
+ *    a codex child launched from inside a Claude Code session must not
+ *    inherit CLAUDE* either.
+ * 2. **The scrub targets SESSION vars, not credentials.** CURSOR_API_KEY
+ *    matches the CURSOR* prefix but is an auth credential, so it is carved
+ *    out and re-added — a key-only cursor host must keep working. (The other
+ *    two key vars, ANTHROPIC_API_KEY and OPENAI_API_KEY, don't collide with
+ *    the scrub prefixes.)
+ * 3. **subscriptionOnly deletes every API-key var** (see billing.ts) so the
+ *    child can only authenticate via its stored subscription login — the
+ *    guarantee behind `workflow run --subscription-only`.
+ * 4. **Mark the child as a workflow child** (HARNERY_WORKFLOW_CHILD=1): the
+ *    stop-hook rule exempts it from the human-facing end-of-turn ritual while
+ *    hooks stay on, keeping heartbeat + event capture.
+ * 5. **Stamp the run id** (HARNERY_WORKFLOW_RUN_ID) so the coord layer and
+ *    web UI can associate child sessions with their workflow run.
+ */
+import { API_KEY_VARS } from "./billing.js";
+const SCRUB_PREFIXES = ["CLAUDE", "CODEX", "CURSOR"];
+export function buildChildEnv(runId, opts = {}) {
+    const env = {};
+    const keyVars = new Set(Object.values(API_KEY_VARS));
+    for (const [k, v] of Object.entries(process.env)) {
+        if (v === undefined)
+            continue;
+        if (opts.subscriptionOnly && keyVars.has(k))
+            continue;
+        if (SCRUB_PREFIXES.some((p) => k.startsWith(p)) && !keyVars.has(k))
+            continue;
+        env[k] = v;
+    }
+    env.HARNERY_WORKFLOW_CHILD = "1";
+    if (runId)
+        env.HARNERY_WORKFLOW_RUN_ID = runId;
+    return env;
+}

package/dist/core/workflow/engine.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Workflow engine: loads a workflow script (plain JS, `export default
+ * async (ctx) => …`), injects the ctx API, enforces the caps, journals every
+ * step to `.harnery/workflows/<run-id>/journal.jsonl`, and returns a RunReport.
+ *
+ * Guarantees the engine makes (the pitch, in code):
+ *   - **Bounded**: hard total-agent ceiling + bounded parallel() concurrency.
+ *     A runaway loop hits `maxAgents` and the run fails loud, not silently.
+ *   - **Terminating**: the run is over when the script's default export
+ *     returns. There is no recursive self-spawning path: subagents are leaf
+ *     processes; only the top-level script can spawn.
+ *   - **Schema-gated**: with `schema`, an agent's reply must strict-parse and
+ *     validate; failures re-prompt with the validation errors appended, up to
+ *     `maxAttempts`, then throw. Routing decisions read validated fields, so
+ *     the deterministic script — not a model — decides what runs next.
+ *   - **Journaled**: every stage/agent start+end lands in the run journal with
+ *     cost, duration, and child session id (the resume + web-UI substrate).
+ */
+import type { EngineOpts, RunReport } from "./types.js";
+export declare function runWorkflow(scriptPath: string, opts: EngineOpts): Promise<RunReport>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/workflow/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAIV,MAAM,YAAY,CAAC;AASpB,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAwR1F"}