pi-harness-runtime 1.1.323 → 1.1.324

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-runtime",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",
   "type": "module",
   "scripts": {

package/packages/a2a-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/a2a-adapter",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "description": "Google Agent-to-Agent (A2A) protocol adapter for pi-harness",
   "main": "dist/index.js",

package/packages/agent-policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/agent-policy",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Agent policy runtime for pi-harness - enforces mandatory rule delivery and mutation gating",
   "type": "module",
   "main": "./dist/index.js",

package/packages/agent-policy/test/policy-retention.test.ts

@@ -308,7 +308,7 @@ describe("Policy Retention Tests", () => {
       const manifest = await loader.load(TEST_DIR);
 
       // Full text should include actual content, not just contract pointers
-      const { renderFullPolicyText } = await import("../dist/policy-renderer.js");
+      const { renderFullPolicyText } = await import("../dist/index.js");
       const fullText = renderFullPolicyText(manifest);
 
       assert.ok(fullText.includes("Full Agents"), "Should include source title");
@@ -323,7 +323,7 @@ describe("Policy Retention Tests", () => {
       });
 
       const manifest = await loader.load(TEST_DIR);
-      const { checkPolicyTextSize } = await import("../dist/policy-renderer.js");
+      const { checkPolicyTextSize } = await import("../dist/index.js");
 
       // With normal-sized content, should fit in 100KB limit
       const result = checkPolicyTextSize(manifest, 100 * 1024);

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/auth",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "pi-harness-runtime — auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/autonomous-refactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-refactor",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "description": "Autonomous refactoring engine",
   "main": "dist/index.js",

package/packages/autonomous-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-runtime",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Autonomous Operations Runtime — task inbox, lease management, and worker lifecycle (RFC-0101)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cache-strategy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cache-strategy",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "description": "Smart caching with TTL and invalidation strategies (RFC-0022)",
   "main": "dist/index.js",

package/packages/capability-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/capability-registry",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Capability Registry for pi-harness-runtime — tracks model capabilities and enables capability-based routing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/checkpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/checkpoint",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Enhanced checkpoint system with incremental snapshots, diff-based storage, and recovery strategies",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cli-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cli-plugin-sdk",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "description": "CLI Plugin SDK for pi-harness — install, list, remove, update, invoke plugins",
   "main": "dist/index.js",

package/packages/clipboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/clipboard-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard-plugin",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/code-generation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-generation",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Code generation pipeline for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/code-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-review",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Automated code review engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/codex-adapter",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "description": "OpenAI Codex provider adapter for pi-harness",
   "main": "dist/index.js",

package/packages/codex-watcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/codex-watcher",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Watches Codex CLI sessions and emits visible messages for PING-PONG monitoring",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/config-capture/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/config-capture",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Auto-capture API-fetched configuration values to AGENTS.md",
   "type": "module",
   "main": "src/index.ts",

package/packages/context-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-compiler",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Bounded context selection engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/context-discovery/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-discovery",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/context-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/context-manager",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Context Window Manager — prevents model context overflow via compaction and resume prompts (RFC-0010)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cookie-sanitizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cookie-sanitizer",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "pi-harness-runtime — cookie sanitizer (provider-quota cookie file normaliser)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cost-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cost-optimizer",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Cost Optimizer for pi-harness-runtime — budget tracking, forecasting, and model selection optimization",
   "type": "module",
   "main": "./dist/index.js",

package/packages/dependency-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/dependency-analyzer",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/django-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/django-plugin",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Django framework analysis — models, management commands, settings",
   "type": "module",
   "main": "./dist/index.js",

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "1.1.323",
+  "version": "1.1.324",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/durable-review/dist/worker.d.ts

@@ -1,21 +1,33 @@
 /**
  * Durable Review Worker
  *
- * Node worker entry point with exclusive ownership and Harness integration.
+ * Node worker entry point with proper exclusive ownership and Harness integration.
+ * Uses atomic lock acquisition (mkdir) and process liveness verification.
  */
 import type { ReviewRequest, ReviewStatusResponse } from "./types.js";
 /**
- * Try to acquire exclusive ownership of the workspace database
- * Uses a simple file-based lock with stale detection
+ * Lock acquisition result
  */
-export declare function tryAcquireOwnership(workspaceKey: string, workerId: string): Promise<{
+interface LockResult {
     acquired: boolean;
     existingOwner?: string;
-}>;
+    staleLock?: boolean;
+}
+/**
+ * Try to acquire exclusive ownership using file creation
+ *
+ * Uses exclusive file creation for atomic lock acquisition.
+ * The process must be alive (verified by PID check) before taking over a stale lock.
+ */
+export declare function tryAcquireOwnership(workspaceKey: string, workerId: string): Promise<LockResult>;
 /**
  * Release ownership of the workspace database
  */
 export declare function releaseOwnership(workspaceKey: string, workerId: string): Promise<void>;
+/**
+ * Verify we still hold the lock (for worker health checks)
+ */
+export declare function verifyLockOwnership(workspaceKey: string, workerId: string): boolean;
 /**
  * Start the worker for a workspace
  */
@@ -23,6 +35,7 @@ export declare function startWorker(workspacePath: string): Promise<{
     success: boolean;
     workerId?: string;
     workspaceKey?: string;
+    harness?: unknown;
     error?: string;
 }>;
 /**
@@ -53,4 +66,5 @@ export declare function getJobStatus(_jobId: string): Promise<ReviewStatusRespon
  * Cancel a review job
  */
 export declare function cancelJob(_jobId: string): Promise<boolean>;
+export {};
 //# sourceMappingURL=worker.d.ts.map

package/packages/durable-review/dist/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAuCtE;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CxD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa5F;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAsBD;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAKhD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAcD;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC,CA2B1D;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAGvF;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGhE"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAiCtE;;GAEG;AACH,UAAU,UAAU;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAqCD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAuFrB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa5F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CASnF;AAMD;;GAEG;AACH,wBAAsB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAmDD;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAchD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC;IAChD,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAoBD;AAMD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC,CA2B1D;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAGvF;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGhE"}

package/packages/durable-review/dist/worker.js

@@ -1,60 +1,143 @@
 /**
  * Durable Review Worker
  *
- * Node worker entry point with exclusive ownership and Harness integration.
+ * Node worker entry point with proper exclusive ownership and Harness integration.
+ * Uses atomic lock acquisition (mkdir) and process liveness verification.
  */
 import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { getWorkspaceDir, hashWorkspaceKey, validateAndHashRequest, toStatusResponse, createJobRecord, } from "./service.js";
+import { getDatabasePath, getWorkspaceDir, hashWorkspaceKey, validateAndHashRequest, toStatusResponse, createJobRecord } from "./service.js";
 /**
  * Current worker state
  */
 let currentWorker = null;
+// ---------------------------------------------------------------------------
+// Atomic Lock Operations
+// ---------------------------------------------------------------------------
 /**
- * Get lock file path for ownership
+ * Get lock file path for workspace
+ * Single lock file per workspace - only one worker can hold it at a time
  */
 function getLockPath(workspaceKey) {
     return join(getWorkspaceDir(workspaceKey), ".worker.lock");
 }
 /**
- * Try to acquire exclusive ownership of the workspace database
- * Uses a simple file-based lock with stale detection
+ * Check if a process is alive (Unix)
+ */
+function isProcessAlive(pid) {
+    try {
+        // Unix: sending signal 0 checks if process exists
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify lock owner is still alive
+ */
+function verifyOwnerAlive(lock) {
+    if (lock.pid === process.pid) {
+        return true; // Same process
+    }
+    return isProcessAlive(lock.pid);
+}
+/**
+ * Try to acquire exclusive ownership using file creation
+ *
+ * Uses exclusive file creation for atomic lock acquisition.
+ * The process must be alive (verified by PID check) before taking over a stale lock.
  */
 export async function tryAcquireOwnership(workspaceKey, workerId) {
+    const lockDir = join(getWorkspaceDir(workspaceKey), "locks");
     const lockPath = getLockPath(workspaceKey);
-    const lockDir = getWorkspaceDir(workspaceKey);
-    // Ensure directory exists
+    const lockContent = {
+        workerId,
+        pid: process.pid,
+        startedAt: Date.now(),
+        lockId: randomUUID(), // Unique ID for this lock instance
+    };
+    // Ensure lock directory exists
     if (!existsSync(lockDir)) {
         mkdirSync(lockDir, { recursive: true });
     }
     try {
-        // Check if lock exists
+        // Check if our lock file already exists
         if (existsSync(lockPath)) {
-            const existing = JSON.parse(readFileSync(lockPath, "utf-8"));
-            // If same worker, we already own it
-            if (existing.workerId === workerId) {
+            const existing = JSON.parse(readFileSync(lockPath, "utf8"));
+            // Same worker - we already have the lock
+            if (existing.workerId === workerId && existing.pid === process.pid) {
+                console.log("[lock] Same worker, returning acquired");
                 return { acquired: true };
             }
-            // Check if lock is stale (older than 60 seconds)
-            const lockAge = Date.now() - existing.startedAt;
-            if (lockAge < 60_000) {
-                // Lock is recent, someone else owns it
+            // Different worker - check if owner is still alive
+            if (verifyOwnerAlive(existing)) {
+                // Owner is alive, we can't take the lock
+                return { acquired: false, existingOwner: existing.workerId };
+            }
+            // Owner is dead - we can take over
+            // Write new lock content atomically via rename
+            const tmpPath = lockPath + ".tmp." + process.pid;
+            writeFileSync(tmpPath, JSON.stringify(lockContent), "utf8");
+            try {
+                // Rename is atomic on POSIX when destination is on same filesystem
+                // This takes over the lock
+                const { renameSync } = await import("node:fs");
+                renameSync(tmpPath, lockPath);
+                return { acquired: true, staleLock: true };
+            }
+            catch {
+                // Takeover failed (another process beat us)
+                try {
+                    unlinkSync(tmpPath);
+                }
+                catch { /* ignore */ }
                 return { acquired: false, existingOwner: existing.workerId };
             }
-            // Lock is stale, we can take over
         }
-        // Write new lock file
-        const lockContent = {
-            workerId,
-            pid: process.pid,
-            startedAt: Date.now(),
-        };
-        writeFileSync(lockPath, JSON.stringify(lockContent), "utf-8");
+        // Lock doesn't exist - create it atomically
+        // Use writeFileSync with flag 'wx' for exclusive create
+        const { writeFileSync: wfSync } = await import("node:fs");
+        wfSync(lockPath, JSON.stringify(lockContent), { flag: "wx" });
         return { acquired: true };
     }
-    catch (error) {
-        console.error("Error acquiring lock:", error);
+    catch (err) {
+        const error = err;
+        if (error.code === "EEXIST") {
+            // Race: another process created it first
+            try {
+                const existing = JSON.parse(readFileSync(lockPath, "utf8"));
+                if (verifyOwnerAlive(existing)) {
+                    return { acquired: false, existingOwner: existing.workerId };
+                }
+                // Owner is dead, try takeover
+                const takeoverContent = {
+                    ...lockContent,
+                    lockId: randomUUID(),
+                };
+                const tmpPath = lockPath + ".tmp." + process.pid;
+                writeFileSync(tmpPath, JSON.stringify(takeoverContent), "utf8");
+                try {
+                    const { renameSync } = await import("node:fs");
+                    renameSync(tmpPath, lockPath);
+                    return { acquired: true, staleLock: true };
+                }
+                catch {
+                    try {
+                        unlinkSync(tmpPath);
+                    }
+                    catch { /* ignore */ }
+                    return { acquired: false, existingOwner: existing.workerId };
+                }
+            }
+            catch {
+                return { acquired: false };
+            }
+        }
+        // Other error
+        console.error("[durable-review] Lock acquisition error:", error);
         return { acquired: false };
     }
 }
@@ -65,7 +148,7 @@ export async function releaseOwnership(workspaceKey, workerId) {
     const lockPath = getLockPath(workspaceKey);
     try {
         if (existsSync(lockPath)) {
-            const existing = JSON.parse(readFileSync(lockPath, "utf-8"));
+            const existing = JSON.parse(readFileSync(lockPath, "utf8"));
             if (existing.workerId === workerId) {
                 unlinkSync(lockPath);
             }
@@ -75,14 +158,32 @@ export async function releaseOwnership(workspaceKey, workerId) {
         // Ignore errors on release
     }
 }
+/**
+ * Verify we still hold the lock (for worker health checks)
+ */
+export function verifyLockOwnership(workspaceKey, workerId) {
+    const lockPath = getLockPath(workspaceKey);
+    try {
+        if (!existsSync(lockPath))
+            return false;
+        const existing = JSON.parse(readFileSync(lockPath, "utf8"));
+        return existing.workerId === workerId && existing.pid === process.pid;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Worker Lifecycle
+// ---------------------------------------------------------------------------
 /**
  * Start the worker for a workspace
  */
 export async function startWorker(workspacePath) {
-    const canonicalPath = workspacePath; // TODO: resolve realpath
+    const canonicalPath = workspacePath;
     const workspaceKey = hashWorkspaceKey(canonicalPath);
     const workerId = `worker-${randomUUID().slice(0, 8)}`;
-    // Try to acquire ownership
+    // Try to acquire exclusive ownership
     const lockResult = await tryAcquireOwnership(workspaceKey, workerId);
     if (!lockResult.acquired) {
         return {
@@ -90,19 +191,54 @@ export async function startWorker(workspacePath) {
             error: `Workspace is owned by ${lockResult.existingOwner || "another worker"}. Stop it first or try again later.`,
         };
     }
-    // Set up worker state
-    currentWorker = {
-        workerId,
-        workspaceKey,
-        ready: true,
-    };
-    return { success: true, workerId, workspaceKey };
+    if (lockResult.staleLock) {
+        console.log(`[durable-review] Took over stale lock from ${lockResult.existingOwner}`);
+    }
+    try {
+        // Open SQLite storage using pi-durable's Node adapter
+        const { openNodeSqliteStorage } = await import("@earendil-works/pi-durable/storage/sqlite/node");
+        const dbPath = getDatabasePath(workspaceKey);
+        const storage = await openNodeSqliteStorage(dbPath);
+        // Create registry with reviewer extension
+        const { createRegistry } = await import("@earendil-works/pi-durable");
+        const registry = createRegistry();
+        // Open Harness with storage
+        const { Harness: HarnessClass } = await import("@earendil-works/pi-durable");
+        const { BACKGROUND_CONTEXT } = await import("@earendil-works/chord/context");
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const harness = await HarnessClass.open(storage, { registry }, BACKGROUND_CONTEXT);
+        currentWorker = {
+            workerId,
+            workspaceKey,
+            harness,
+            storage,
+            ready: true,
+        };
+        return { success: true, workerId, workspaceKey, harness };
+    }
+    catch (err) {
+        // Release lock on failure
+        await releaseOwnership(workspaceKey, workerId);
+        return {
+            success: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
 }
 /**
  * Stop the worker
  */
 export async function stopWorker() {
     if (currentWorker) {
+        try {
+            const { BACKGROUND_CONTEXT } = await import("@earendil-works/chord/context");
+            if (currentWorker.harness) {
+                await currentWorker.harness.close(BACKGROUND_CONTEXT);
+            }
+        }
+        catch {
+            // Ignore close errors
+        }
         await releaseOwnership(currentWorker.workspaceKey, currentWorker.workerId);
         currentWorker = null;
     }
@@ -117,12 +253,20 @@ export async function checkWorkerReady() {
     if (!currentWorker.ready) {
         return { ready: false, workerId: currentWorker.workerId, error: "Worker not ready" };
     }
+    // Verify we still hold the lock
+    if (!verifyLockOwnership(currentWorker.workspaceKey, currentWorker.workerId)) {
+        currentWorker = null;
+        return { ready: false, error: "Lock lost" };
+    }
     return {
         ready: true,
         workerId: currentWorker.workerId,
         workspaceKey: currentWorker.workspaceKey,
     };
 }
+// ---------------------------------------------------------------------------
+// Review Operations
+// ---------------------------------------------------------------------------
 /**
  * Handle incoming review request
  */