feat: add agent-first work coordination protocol

[0thernet]

Summary

Adds HRA’s agent-first coordination substrate while keeping Codex app-server as the execution boundary.

• introduces Work, Task, Attempt, Submission, Review, and Signal primitives with capability generations, fencing, explicit release, and durable request replay
• adds seven compact machine interfaces (protocol, apply, snapshot, task, poll, events, and watch) with bounded JSON/JSONL responses, signed fixed-cut cursors, and deterministic protocol shards
• implements exact account/project/preset/Fast routing without quota-driven account rotation
• preserves a SQLite canonical store and defers Turso to a future non-authoritative replication role
• documents the clean-room design lineage from AgentCity and the transaction discipline adapted from Chroma’s distributed-systems analysis
• hardens package history validation with bounded, replacement-resistant, merge-aware scanning

Design and safety

• designed for orchestrating and monitoring agents rather than humans; JSON is the default and response budgets are explicit
• request-before-effect protocol with idempotency, capabilities, generations, and attempt fences
• no lease stealing; expired work requires an explicit release transition
• logical destructive release is explicit, tombstoned, and replay-safe
• AgentCity was used only as public design inspiration because the repository exposes no redistribution license
• read-only Git history inspection is isolated from HRA effect-recovery custody and uses closed, aggregate-bounded native commands
• no canonical-domain, DNS, Convex, Resend, tag, GitHub Release, or package-publication mutation is included

Validation

Validated from a clean single-branch clone at b7989b44070418afcd0058c9726337e9454a3c80:

• bun install --frozen-lockfile --ignore-scripts
• bun run check
• 1,982 tests across 116 files
• 111,478 assertions, 0 failures
• lint and TypeScript
• generated-site parity and production CLI/site builds
• all 10 package-policy tests
• isolated local/global package consumers, restored PTY shell, and daemon lifecycle
• two independent final adversarial reviews: no remaining P0/P1/P2 findings

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hra	Ready	Preview	Aug 29, 2026 10:48am