feat: adopt personal provider sessions

[0thernet]

Summary

• Adopt eligible personal-home Codex and Claude conversations as ordinary HRA sessions.
• Include the exact conversation targeted by a present active or paused Codex Desktop heartbeat, even outside the ordinary recency window.
• Give adopted sessions the same public shape and provider-supported queue, HRA session-task, Work, autorespond, and manual or automatic approval authority as native sessions.
• Keep Codex Desktop as the owner and executor of its heartbeat. HRA adopts the target conversation only; it does not import Desktop schedule metadata or convert the heartbeat into an HRA session task.

Adversarial hardening

• Treat scheduled targeting as an age waiver only. Account, project, liveness, quiescence, collision, and exact-thread checks still apply before and immediately after the provider claim.
• Exclude standalone Desktop cron tasks because they have no stable target conversation, and revoke the waiver when a heartbeat is deleted, retargeted, malformed, or no longer present.
• Keep Desktop automation identifiers, names, prompts, CWDs, recurrence rules, source paths, and adoption provenance out of CLI and cloud projections.
• Fence managed and personal controllers by exact account, provider generation, connection, thread, and runtime custody; adopted and native sessions use the same fail-closed approval policy.
• On provider deletion, atomically terminalize the session, pause its active HRA task, release only the exact personal controller, and keep replay idempotent.
• Prevent a late accepted Work receipt from resurrecting an attempt after provider/session authority has gone stale; retain the receipt while exposing recovery-required/unknown state.
• Repair fresh-database creation under SQLite 3.53 trigger revalidation without weakening the current schema guards.

Validation

• Required final gate on exact commit b28e2407bb124c3d3370ea2b89dc779395345c16:
  • /Users/bg/.bun/bin/hra-host-run --mode=heavy --lane=compute --label=session-adoption-final-rerun -- bun run check
• Result: 2,775 tests passed; lint, typecheck, site/app/CLI builds, reviewed package inventory, and isolated local/global installation plus daemon lifecycle checks passed.
• Focused concurrency, controller-custody, scheduled-target, privacy, SQLite migration, provider-deletion, Work-settlement, and restart regressions passed.
• Independent reviews found no remaining concrete defect in the scheduled-target, approval, deletion, detach-lock, or late-Work-settlement paths.

This PR is intentionally left unmerged for the landing coordinator. No release or deployment is part of this change.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hra	Ready	Preview	Sep 6, 2026 9:28am UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
hra-app	Ignored	Preview	Sep 6, 2026 9:28am UTC