tryharness 0.7.0 → 0.7.1

package/README.md

@@ -39,8 +39,9 @@ npx tryharness disconnect
 daemon, the bridge, the database, and agent discovery. `sync` requests a background
 rescan; it is diagnostic, not part of normal setup.
 
-Delegated coding tasks start only after the user presses Start on Harness's proposal
-card, which posts the task on the machine's board under the run id. They then run non-interactively with each agent's full-authority/auto-approve mode
+Delegated coding tasks start when the user presses Start on Harness's proposal card, or
+at once when standing permission covers the folder (see Task board); either way the task is
+posted on the machine's board under the run id. They then run non-interactively with each agent's full-authority/auto-approve mode
 inside the exact absolute working directory shown on that card; Harness never falls
 back to the user's home directory. The card immediately shows a
 `npx tryharness task <run-id> --follow` command for watching the machine-local raw output
@@ -64,8 +65,11 @@ answers from full-text search and says so.
 The daemon keeps a task board in its local SQLite database. Any connected agent can post
 work for another agent on the machine through the `post_task` tool, and every agent sees
 the board through `list_tasks`, `get_task`, `claim_task` and `report_task`, which the
-stdio MCP exposes. The board is pull-only: a task waits until
-its target agent reads the board and claims it, and nothing starts by itself. A claimer
+stdio MCP exposes. A task with no folder waits until its target agent reads the board and
+claims it. A task from Claude Code or Codex for a coding agent, posted without `run_workspace`,
+takes the folder the poster is working in (its session's folder; never home or above it), so it
+can run; `in_session: true` leaves it for an open session instead. Whether it starts without a
+Start is decided as below. A claimer
 reports done, failed or needs_input; the poster answers a question with `report_task`
 and status `answered`, which returns the task to the claimer with the answer in its
 brief. The daemon is also the board's worker. A task posted for a coding agent installed on the
@@ -77,8 +81,11 @@ One run per agent at a time; a daemon restart marks a running task unknown.
 A coding agent also starts, without `board run`, the tasks you or Harness post for it with a workspace in a
 folder it has already worked in (its indexed sessions; your home folder counts only as itself, links are
 followed), up to 10 a day. That is on by default, and the daemon says so once when it first starts with it. A
-task another agent wrote, or one Harness posts from a turn you did not start or while working another agent's
-task, always waits for you. `tryharness board standing` shows it; `tryharness board standing <agent> <folder>...
+task Claude Code or Codex posts from a session you typed in counts as yours: the prompt hook tells the daemon
+which agent process you typed in, and a post through that process's board MCP is yours. A run the daemon
+started is never your session, and an agent holding a task another agent wrote posts as an agent until it
+reports. Any other task another agent wrote, anything continuing one, or one Harness posts from a turn you did
+not start or while working another agent's task, always waits for you. `tryharness board standing` shows it; `tryharness board standing <agent> <folder>...
 [--cap <n>]` names the folders instead; `tryharness board standing <agent> off` and `on` turn it off or back to
 the default. An interactive
 claim carries a lease (default 60 minutes); a lapsed lease shows the claim as stale and only

package/lib/daemon.mjs

@@ -2,7 +2,8 @@ import fs from "node:fs";
 import net from "node:net";
 import os from "node:os";
 import path from "node:path";
-import { spawn } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
+import { PS } from "./nudge.mjs";
 import { fileURLToPath } from "node:url";
 import WebSocket from "ws";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -351,6 +352,18 @@ export async function startDaemon() {
   // as themselves, never as a root. Anything another agent wrote never starts. Links are followed, so no path inside a
   // covered folder leads out of it.
   const RUNNERS = new Set(["claude-code", "codex", "pi", "opencode"]);
+  const POSTERS_WITH_FOLDER = new Set(["claude-code", "codex"]);
+  // A session the person typed in: its prompt hook names the agent process, the parent of the board MCP it posts through.
+  // A run this daemon started is never one (the daemon is its parent), and an agent holding another agent's task writes
+  // as an agent until it reports.
+  const promptedBy = new Map();
+  // Unknown parent: not the person's.
+  const parentOf = (pid) => Number(spawnSync(PS, ["-o", "ppid=", "-p", String(pid)], { encoding: "utf8" }).stdout?.trim()) || null;
+  const personSession = (agent, pid) => {
+    if (!POSTERS_WITH_FOLDER.has(agent) || !Number.isInteger(pid) || promptedBy.get(pid) !== agent) return false;
+    const parent = parentOf(pid);
+    return parent !== null && parent !== process.pid && !store.holdsAgentTask(agent);
+  };
   const runners = () => installedAgents.filter((agent) => RUNNERS.has(agent));
   const startOfToday = () => { const day = new Date(); day.setHours(0, 0, 0, 0); return day.toISOString(); };
   const realDir = (dir) => { try { return fs.realpathSync(dir); } catch { return path.resolve(dir); } };
@@ -571,6 +584,10 @@ export async function startDaemon() {
     const expected = Number.isInteger(request.expectedVersion) ? request.expectedVersion : null;
     let outcome;
     if (String(request.command).startsWith("board.goal.") || String(request.command).startsWith("board.room.")) return goalCommand(request, agent);
+    if (request.command === "board.prompted") {
+      for (const pid of Array.isArray(request.pids) ? request.pids.slice(0, 2) : []) if (Number.isInteger(pid) && pid > 1) promptedBy.set(pid, agent);
+      return { ok: true };
+    }
     if (request.command === "board.post") {
       const objective = String(request.objective || "").trim();
       if (!objective) return { ok: false, error: "a task needs an objective" };
@@ -579,7 +596,7 @@ export async function startDaemon() {
       const parentTask = request.parentId ? store.getTask(String(request.parentId)) : null;
       const claimed = request.provenance && typeof request.provenance === "object" && request.provenance.trust === "agent" ? request.provenance : null;
       const upstream = parentTask ? { trust: claimed ? "agent" : parentTask.trust, chain: parentTask.origin_chain } : claimed;
-      const provenance = provenanceFor(agent, upstream);
+      const provenance = provenanceFor(agent, upstream, null, { personSession: personSession(agent, request.posterPid) });
       const goalParent = parentTask?.kind === "goal" ? parentTask : null;
       if (goalParent) {
         if (!inRoom(goalParent, agent)) return { ok: false, error: `${agent} is not on this goal's team` };
@@ -595,7 +612,11 @@ export async function startDaemon() {
         if (!state.connected) return { ok: false, error: `${request.targetAgent} lives in Harness, and the daemon is not connected to it right now` };
         return forwardToHarness({ ...request, provenance: upstream });
       }
-      const runWorkspace = request.runWorkspace ? String(request.runWorkspace) : goalParent?.goal.workspace && RUNNERS.has(String(request.targetAgent || "")) ? goalParent.goal.workspace : null;
+      // Left out, a task from a coding agent for a coding agent runs in the folder the poster works in (its stdio MCP's,
+      // which Claude Code and Codex start in the session's folder); never home or above it.
+      const posterFolder = !request.thread && !goalParent && request.inSession !== true && POSTERS_WITH_FOLDER.has(agent) && RUNNERS.has(String(request.targetAgent || ""))
+        && typeof request.posterCwd === "string" && path.isAbsolute(request.posterCwd) && !aboveHome(request.posterCwd) ? request.posterCwd : null;
+      const runWorkspace = request.runWorkspace ? String(request.runWorkspace) : goalParent?.goal.workspace && RUNNERS.has(String(request.targetAgent || "")) ? goalParent.goal.workspace : posterFolder;
       if (runWorkspace && !path.isAbsolute(runWorkspace)) return { ok: false, error: "a run needs an absolute workspace directory" };
       if (runWorkspace && !request.targetAgent && !(Array.isArray(request.targetAgents) && request.targetAgents.length)) return { ok: false, error: "a run needs a target agent" };
       const refs = Array.isArray(request.contextRefs) ? request.contextRefs.slice(0, 50) : [];

package/lib/mcp-stdio.mjs

@@ -13,7 +13,7 @@ let chain = Promise.resolve();
 const LOCAL_TOOLS = [
   {
     name: "list_tasks",
-    description: "List open work on this machine's Harness task board: tasks posted by the user or by other agents (Harness, Claude Code, Codex, Pi, OpenCode, Grok Bot) for this agent or for anyone. Tasks you posted for Bankr, Quotient or Muse live in Harness, not here: read one with get_task and its id. Nothing here runs by itself; claim a task before working on it.",
+    description: "List open work on this machine's Harness task board: tasks posted by the user or by other agents (Harness, Claude Code, Codex, Pi, OpenCode, Grok Bot) for this agent or for anyone. Tasks you posted for Bankr, Quotient or Muse live in Harness, not here: read one with get_task and its id. A task for a coding agent with a folder may run on its own (the user's standing permission or a goal); otherwise claim a task before working on it.",
     inputSchema: {
       type: "object",
       properties: { status: { type: "string", enum: ["open", "claimed", "needs_input", "done", "failed"] }, all: { type: "boolean", description: "include every task on the board, finished ones too" } },
@@ -36,7 +36,8 @@ const LOCAL_TOOLS = [
         target_agent: { type: "string", description: "claude-code, codex, pi, opencode, grok-bot or harness on this machine; bankr, quotient or muse in Harness; omit for any agent" },
         target_agents: { type: "array", items: { type: "string" }, description: "several agents at once: one task with a part for each, closed with every result when the last part finishes" },
         parent_id: { type: "string", description: "the board task this one continues" },
-        run_workspace: { type: "string", description: "ask Harness to run this task non-interactively in this absolute directory once the user authorizes it; the run's result and session come back on the task" },
+        run_workspace: { type: "string", description: "the absolute directory a coding agent runs this task in, non-interactively, once the user authorizes it; the run's result and session come back on the task. Left out, a task for a coding agent runs in the folder you are working in" },
+        in_session: { type: "boolean", description: "leave the task for the target to pick up in an open session instead of a run" },
         context_refs: { type: "array", items: { type: "object", properties: { kind: { type: "string" }, ref: { type: "string" }, note: { type: "string" } }, required: ["kind", "ref"], additionalProperties: false } },
       },
       required: ["objective"],
@@ -110,7 +111,7 @@ const BOARD_CALLS = {
   reply_in_thread: (args) => ({ command: "board.thread.post", id: String(args.id || ""), text: args.text, refs: args.refs }),
   list_tasks: (args) => ({ command: "board.list", status: args.status, all: args.all === true }),
   get_task: (args) => ({ command: "board.get", id: String(args.id || "") }),
-  post_task: (args) => ({ command: "board.post", objective: args.objective, brief: args.brief, targetAgent: args.target_agent, targetAgents: args.target_agents, parentId: args.parent_id, contextRefs: args.context_refs, runWorkspace: args.run_workspace }),
+  post_task: (args) => ({ command: "board.post", objective: args.objective, brief: args.brief, targetAgent: args.target_agent, targetAgents: args.target_agents, parentId: args.parent_id, contextRefs: args.context_refs, runWorkspace: args.run_workspace, inSession: args.in_session === true, posterCwd: process.cwd(), posterPid: process.ppid }),
   claim_task: (args) => ({ command: "board.claim", id: String(args.id || ""), expectedVersion: args.expected_version, leaseMinutes: args.lease_minutes }),
   report_task: (args) => args.status === "answered"
     ? { command: "board.answer", id: String(args.id || ""), answer: args.result, expectedVersion: args.expected_version }

package/lib/nudge.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import fs from "node:fs";
 import path from "node:path";
+import { spawnSync } from "node:child_process";
 import { daemonRequest } from "./control-client.mjs";
 import { paths } from "./paths.mjs";
 
@@ -63,9 +64,20 @@ export async function boardNudgeIfChanged(agent, homeDir = paths.home) {
   return digest ? nudgeText(agent, tasks, unread, goals) : (last ? "Harness task board: nothing waits for you now." : "");
 }
 
+// The prompt hook also tells the daemon the person typed in this session: the agent process is the hook's parent, or
+// its grandparent when the hook runs through a shell.
+export const PS = ["/bin/ps", "/usr/bin/ps"].find((file) => fs.existsSync(file)) || "ps";
+
+export async function notePrompt(agent) {
+  const pids = [process.ppid];
+  try { const up = Number(spawnSync(PS, ["-o", "ppid=", "-p", String(process.ppid)], { encoding: "utf8" }).stdout.trim()); if (up > 1) pids.push(up); } catch {}
+  try { await daemonRequest({ command: "board.prompted", agent, pids }, 1_500); } catch {}
+}
+
 if (import.meta.url === `file://${process.argv[1]}`) {
   const index = process.argv.indexOf("--agent");
   const agent = index >= 0 ? process.argv[index + 1] : "claude-code";
+  if (process.argv.includes("--if-changed")) await notePrompt(agent);
   const text = process.argv.includes("--if-changed") ? await boardNudgeIfChanged(agent) : await boardNudge(agent);
   if (text) process.stdout.write(text + "\n");
 }

package/lib/provenance.mjs

@@ -1,15 +1,16 @@
 // Who a task's words came from, decided by code at post time and never by the poster's text.
-// The person and Harness write as the user; every other agent writes as an agent, and an
+// The person and Harness write as the user, and so does a coding agent posting from a session the person typed in;
+// every other agent writes as an agent, and an
 // agent-written task taints everything posted under it. A label only ever tightens: a parent's
 // or Harness's 'agent' cannot be lifted by anything below it. The server applies the same rule.
 
 const USER_WRITERS = new Set(["user", "harness"]);
 
-export function provenanceFor(originAgent, parent = null, claimed = null) {
+export function provenanceFor(originAgent, parent = null, claimed = null, { personSession = false } = {}) {
   // A claim counts only when it tightens: an 'agent' label and its chain. A claim of 'user' adds nothing.
   const taint = claimed?.trust === "agent" ? claimed : null;
   const chain = [...(parent?.chain ?? (Array.isArray(taint?.chain) ? taint.chain.map(String) : [])), originAgent].slice(-16);
-  const tainted = parent?.trust === "agent" || Boolean(taint) || !USER_WRITERS.has(originAgent);
+  const tainted = parent?.trust === "agent" || Boolean(taint) || (!USER_WRITERS.has(originAgent) && !personSession);
   return { trust: originAgent === "user" || !tainted ? "user" : "agent", chain };
 }
 

package/lib/store.mjs

@@ -693,6 +693,9 @@ export function openStore(file) {
     },
     // An interactive claim carries a lease; when it lapses the claim shows stale and the origin
     // or the user may release it. It is never released on its own. Daemon runs carry none.
+    holdsAgentTask(agent) {
+      return Boolean(execute("get", "select 1 from board_tasks where claimed_by = ? and status in ('claimed', 'needs_input') and trust = 'agent' limit 1", agent));
+    },
     claimTask(id, agent, expectedVersion = null, leaseMinutes = 60) {
       if (this.getTask(id)?.kind === "group") return { ok: false, error: "a task for several agents is worked through its parts; claim the part posted for you" };
       const now = new Date().toISOString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tryharness",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Harness Relay: the daemon that turns the agents on this machine into your personal swarm. Memory, history, and work handed between any of them.",
   "bin": {
     "tryharness": "cli.mjs"