@ainova-systems/intelligence 0.18.1 → 0.20.0

package/cli/lib/sync-lock.sh

@@ -31,7 +31,11 @@ sync_lock_pgid() {
     local stat
     local -a fields
     IS_PGID=""
-    if [ -r "/proc/$$/stat" ] && IFS= read -r stat < "/proc/$$/stat"; then
+    # Cygwin and MSYS publish the group on its own; composing their stat file
+    # takes tens of milliseconds.
+    if [ -r "/proc/$$/pgid" ] && IFS= read -r IS_PGID < "/proc/$$/pgid"; then
+        :
+    elif [ -r "/proc/$$/stat" ] && IFS= read -r stat < "/proc/$$/stat"; then
         # pid (comm) state ppid pgrp …: comm may hold spaces, so cut after it.
         read -r -a fields <<< "${stat##*) }"
         IS_PGID="${fields[2]:-}"
@@ -87,7 +91,8 @@ sync_lock_is_stale() {
 # sync_lock_acquire <root> — take <root>/.intelligence/sync.lock or refuse.
 sync_lock_acquire() {
     local root="$1" lock="$1/.intelligence/sync.lock" took=0 age=""
-    mkdir -p "$root/.intelligence" || die "cannot create $root/.intelligence"
+    # A process start costs tens of milliseconds on Git Bash: skip the usual case.
+    [ -d "$root/.intelligence" ] || mkdir -p "$root/.intelligence" || die "cannot create $root/.intelligence"
     if mkdir "$lock" 2>/dev/null; then
         took=1
     elif mkdir "$lock.takeover" 2>/dev/null; then
@@ -146,3 +151,15 @@ sync_lock_release() {
     fi
     SYNC_LOCK_HELD=""
 }
+
+# project_lock_scratch <root> — set IS_LOCK_SCRATCH to a path prefix inside the
+# lock this process holds or joined, for files that live only as long as the
+# run: releasing the lock removes them with it, so a hot path needs no process
+# to create or delete a temporary directory. Names carry the pid, because a
+# joined child shares the directory with its holder.
+# shellcheck disable=SC2034  # IS_LOCK_SCRATCH is the return channel
+project_lock_scratch() {
+    local lock="$1/.intelligence/sync.lock"
+    [ -d "$lock" ] && [ ! -L "$lock" ] || return 1
+    IS_LOCK_SCRATCH="$lock/scratch.$$"
+}

package/engine/ENGINE_SHA

@@ -1 +1 @@
-7dfbb01c2182f3de05bff94f3e5e080cf267f8c6
+c8058f91133b86479a03d7ae950191e2d21b68a6

package/engine/VERSION

@@ -1 +1 @@
-0.18.1
+0.20.0

package/engine/adapters/_template.sh

@@ -27,9 +27,11 @@
 #   has_paths(file)                     — check if file has paths: field
 #   get_model(config, ide, tier)        — resolve model from config or default
 #   get_model_default(ide, tier)        — hardcoded default for ide:tier
+#   map_effort(tool, effort)            — the tool's level for a neutral effort; "" when none
 #   map_access_to_claude_tools(access)  — full->"" (no tools list; inherits all), readonly->restricted
 #   map_access_to_claude_disallowed(access) — readonly->"Write, Edit", full->""
-#   read_yaml_list(manifest, section)   — read a source list from intelligence.yaml
+#   read_yaml_list(manifest, section)   — read a source list from intelligence.yaml,
+#                                         package references as their store paths
 #   get_target_field(config, target, field) — read a target's config field
 
 # Project adapters are sourced by engine/sync.sh after the shared library is
@@ -40,7 +42,9 @@
 # configured target output passed as $1. `owned` paths are exclusively managed;
 # `managed` paths share a directory with another adapter or hand-authored files.
 # Add `legacy` inputs to the initial backup, `preserve` for settings that must
-# never be replaced, and explicit ignore/include records for Git policy.
+# never be replaced, and explicit ignore/include records for Git policy. $2, when
+# given, is the manifest: read it only to choose Git policy (ignore versus
+# unignore), never ownership — callers that read ownership alone omit it.
 adapter_contract_<name>() {
     local output="${1%/}"
     adapter_contract_version 1

package/engine/adapters/agents.sh

@@ -14,7 +14,9 @@
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 # Repo-relative paths to the project's content dir and to the installed sync
 # package, taken from the env contract — never hardcoded. The content dir is
@@ -212,10 +214,14 @@ agents_md_append_rules_list() {
 # Main entry point for AGENTS.md adapter
 adapter_contract_agents() {
     local output
-    output="$(agents_output_path "$1")"
+    agents_output_path_var "$1"
+    output="$IS_AGENTS_OUTPUT_PATH"
     adapter_contract_version 1
     adapter_contract_owned "$output"
     adapter_contract_legacy "AGENTS.md"
+    # No ignore record, deliberately: AGENTS.md is the tool-neutral fallback
+    # every tool reads, and a fresh clone has it only if it is committed —
+    # before anyone has run a sync.
 }
 
 sync_to_agents() {

package/engine/adapters/antigravity.sh

@@ -42,7 +42,9 @@
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_antigravity() {
     local output="${1%/}"

package/engine/adapters/claude.sh

@@ -3,13 +3,16 @@
 # Transforms source prompts to .claude/ format
 #
 # Rules: copy as-is (paths: frontmatter preserved)
-# Skills: copy skill directories in full (SKILL.md + bundled resources)
-# Agents: tier -> model, access -> tools/disallowedTools
+# Skills: copy skill directories in full (SKILL.md + bundled resources),
+#   effort -> Claude's effort level
+# Agents: tier -> model, effort -> effort, access -> tools/disallowedTools
 #
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_claude() {
     local output="${1%/}"
@@ -60,6 +63,9 @@ sync_claude_skills() {
 
     local src d skill_name
     local -a skill_dirs=()
+    # The inventory decides which skills render, symlinked ones included
+    # (decision 0017); the glob keeps this adapter's own listing order.
+    skill_source_inventory "$repo_root" "$config_file"
     load_yaml_list "$config_file" "skills"
     local list="$IS_YAML_LIST"
     while IFS= read -r src; do
@@ -69,11 +75,12 @@ sync_claude_skills() {
         for d in "$dir"/*/; do
             [ -d "$d" ] || continue
             [ -f "$d/SKILL.md" ] || continue
+            skill_source_rendered "$d" || continue
             skill_dirs+=("$d")
         done
     done <<< "$list"
     [ "${#skill_dirs[@]}" -gt 0 ] || return 0
-    copy_skill_bundle_dirs "$output_dir/skills" "${skill_dirs[@]}"
+    copy_skill_bundle_dirs_for claude "$output_dir/skills" "${skill_dirs[@]}"
     for d in "${skill_dirs[@]}"; do
         skill_name="${d%/}"
         echo "  skill: ${skill_name##*/}"
@@ -81,7 +88,7 @@ sync_claude_skills() {
 }
 
 # Sync all agents to Claude format: one frontmatter pass resolves
-# tier/access for every file, one transform pass writes every output.
+# tier/effort/access for every file, one transform pass writes every output.
 sync_claude_agents() {
     local repo_root="$1"
     local config_file="$2"
@@ -104,19 +111,22 @@ sync_claude_agents() {
 
     load_model_tiers "$config_file" "claude"
 
-    local path tier access spec="" report=""
-    while IFS=$'\x1f' read -r path tier access; do
+    local path tier access effort spec="" report=""
+    while IFS=$'\x1f' read -r path tier access effort; do
         [ -n "$path" ] || continue
         resolve_model_var "$tier"
+        map_effort_var claude "$effort"
         map_access_to_claude_tools_var "$access"
         map_access_to_claude_disallowed_var "$access"
-        spec+="$path"$'\x1f'"$IS_MODEL"$'\x1f'"$IS_CLAUDE_TOOLS"$'\x1f'"$IS_CLAUDE_DISALLOWED"$'\n'
+        spec+="$path"$'\x1f'"$IS_MODEL"$'\x1f'"$IS_CLAUDE_TOOLS"$'\x1f'"$IS_CLAUDE_DISALLOWED"$'\x1f'"$IS_EFFORT"$'\n'
         report+="  agent: ${path##*/} (tier=$tier -> model=$IS_MODEL, access=$access)"$'\n'
-    done < <(frontmatter_index "tier,access" "${files[@]}")
+    done < <(frontmatter_index "tier,access,effort" "${files[@]}")
 
     # The transform used to run per file with the values injected via -v;
     # the batched form carries them per file through the environment (awk -v
-    # would reprocess backslash escapes).
+    # would reprocess backslash escapes). The first frontmatter `effort:` line
+    # becomes Claude's level in place, or goes when there is none; a later
+    # one goes too, since frontmatter_index read only the first.
     is_fin_awk_vars
     IS_MAP_SPEC="$spec" awk "${IS_FIN_V[@]}" -v dst="$output_dir/agents" "$IS_AWK_LIB"'
         BEGIN {
@@ -125,18 +135,25 @@ sync_claude_agents() {
             for (i = 1; i <= n; i++) {
                 if (recs[i] == "") continue
                 split(recs[i], f, US)
-                MODEL[f[1]] = f[2]; TOOLS[f[1]] = f[3]; EXTRA[f[1]] = f[4]
+                MODEL[f[1]] = f[2]; TOOLS[f[1]] = f[3]; EXTRA[f[1]] = f[4]; EFFORT[f[1]] = f[5]
             }
         }
         FNR == 1 {
             if (out != "") close(out)
             out = dst "/" base_name(FILENAME)
             count = 0
+            fm = 0
+            effort_seen = 0
         }
         /^tier:/  { next }
         /^access:/ { next }
         { sub(/\r$/, "") }
+        FNR == 1 && $0 == "---" { fm = 1 }
         /^---$/ { count++ }
+        fm && count == 1 && substr($0, 1, 7) == "effort:" {
+            if (!effort_seen++ && EFFORT[FILENAME] != "") print fin_line("effort: " EFFORT[FILENAME]) > out
+            next
+        }
         count == 2 && /^---$/ {
             if (TOOLS[FILENAME] != "") print fin_line("tools: " TOOLS[FILENAME]) > out
             if (EXTRA[FILENAME] != "") print fin_line("disallowedTools: " EXTRA[FILENAME]) > out
@@ -165,7 +182,7 @@ sync_to_claude() {
     # commands/, statusline.sh, etc.).
     rm -rf "$output_dir/rules" "$output_dir/agents"
     if [ -d "$output_dir/skills" ]; then
-        find "$output_dir/skills" -mindepth 1 -maxdepth 1 -type d -exec rm -rf {} +
+        find "$output_dir/skills" -mindepth 1 -maxdepth 1 \( -type d -o -type l \) -exec rm -rf {} +
     fi
     mkdir -p "$output_dir/rules" "$output_dir/skills" "$output_dir/agents"
 

package/engine/adapters/codex.sh

@@ -9,12 +9,16 @@
 # Skills: copy skill directories in full to .agents/skills/{name}/ (Codex
 #   reads from $REPO_ROOT/.agents/skills exclusively per official docs)
 # Agents: -> .codex/agents/{name}.toml (name, description, model,
-#   model_reasoning_effort, sandbox_mode, developer_instructions)
+#   model_reasoning_effort, sandbox_mode, developer_instructions).
+#   model_reasoning_effort comes from `effort:` alone — never from the tier —
+#   and is omitted without one, so Codex's own setting applies.
 #
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_codex() {
     local output="${1%/}"
@@ -97,18 +101,12 @@ sync_codex_agents() {
     if [ "${#files[@]}" -gt 0 ]; then
         load_model_tiers "$config_file" "codex"
 
-        local path tier access description name effort sandbox spec="" report="" LS=$'\x1e'
-        while IFS=$'\x1f' read -r path tier access description; do
+        local path tier access description effort name sandbox spec="" report="" LS=$'\x1e'
+        while IFS=$'\x1f' read -r path tier access description effort; do
             [ -n "$path" ] || continue
             name="${path##*/}"; name="${name%.md}"
             resolve_model_var "$tier"
-            case "$tier" in
-                frontier) effort="xhigh" ;;
-                heavy|"") effort="high" ;;
-                standard) effort="medium" ;;
-                light)    effort="low" ;;
-                *)        effort="medium" ;;
-            esac
+            map_effort_var codex "$effort"
             case "$access" in
                 readonly) sandbox="read-only" ;;
                 *)        sandbox="workspace-write" ;;
@@ -121,7 +119,7 @@ sync_codex_agents() {
             header="${LS}name = \"$name_escaped\""
             header+="${LS}description = \"$description_escaped\""
             header+="${LS}model = \"$IS_MODEL\""
-            header+="${LS}model_reasoning_effort = \"$effort\""
+            [ -z "$IS_EFFORT" ] || header+="${LS}model_reasoning_effort = \"$IS_EFFORT\""
             header+="${LS}sandbox_mode = \"$sandbox\""
             header+="${LS}"
             header+="${LS}developer_instructions = \"\"\""
@@ -129,7 +127,7 @@ sync_codex_agents() {
             spec+="$path"$'\x1f'"$output_dir/$name.toml"$'\x1f'"fence"$'\x1f'"1"$'\x1f'"toml"$'\x1f'"$header"$'\x1f'"${LS}\"\"\""$'\n'
             report+="  agent: $name.toml"$'\n'
             count=$((count + 1))
-        done < <(frontmatter_index "tier,access,description" "${files[@]}")
+        done < <(frontmatter_index "tier,access,description,effort" "${files[@]}")
 
         emit_wrapped_bodies "$spec"
         printf '%s' "$report"

package/engine/adapters/copilot.sh

@@ -12,13 +12,22 @@
 # Skills: copy skill directories in full to .github/skills/{name}/
 # Agents: -> .github/agents/{name}.agent.md (description, tools, model)
 #
+# Git policy (decision 0020): generated output is ignored by default, as it is
+# for Cursor and Claude Code — Copilot in the editor reads it from disk after
+# sync. GitHub's cloud Copilot (code review, the coding agent) reads the
+# repository instead, so `targets.copilot.commit_output: true` keeps the output
+# tracked. Only the generated subdirectories are named, never `.github/`
+# itself: workflows, templates and hand-written files there stay tracked.
+#
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_copilot() {
-    local output="${1%/}"
+    local output="${1%/}" record=adapter_contract_ignore sub
     adapter_contract_version 1
     adapter_contract_requires agents
     adapter_contract_owned "$output/instructions"
@@ -26,6 +35,37 @@ adapter_contract_copilot() {
     adapter_contract_owned "$output/agents"
     adapter_contract_owned "$output/skills"
     adapter_contract_legacy "$output/copilot-instructions.md"
+    # A malformed value declares the default here; sync refuses it with the
+    # reason, so the policy never rests on a guess.
+    if copilot_commit_output_var "${2:-}" && [ "$IS_COPILOT_COMMIT_OUTPUT" = 1 ]; then
+        record=adapter_contract_unignore
+    fi
+    # The same four paths the contract owns: every sync rewrites them, so the
+    # ignore covers generated output only.
+    for sub in instructions prompts agents skills; do
+        "$record" "$output/$sub/"
+    done
+    # The root instructions file onboarding quarantines, like CLAUDE.md and
+    # .cursorrules: its content migrates into project rules, and a copy left
+    # behind makes Copilot ignore AGENTS.md (copilot-cli#489).
+    "$record" "$output/copilot-instructions.md"
+}
+
+# copilot_commit_output_var <manifest> — the one reader of
+# targets.copilot.commit_output. Sets IS_COPILOT_COMMIT_OUTPUT to 1 when the
+# project commits generated output and 0 for the default; returns 1 for any
+# value other than true or false. No manifest — a caller reading ownership
+# only — is the default.
+copilot_commit_output_var() {
+    local manifest="$1" setting
+    IS_COPILOT_COMMIT_OUTPUT=0
+    [ -n "$manifest" ] && [ -f "$manifest" ] || return 0
+    setting="$(get_target_field "$manifest" "copilot" "commit_output")"
+    case "$setting" in
+        ''|false) ;;
+        true) IS_COPILOT_COMMIT_OUTPUT=1 ;;
+        *) return 1 ;;
+    esac
 }
 
 # copilot_paths_rows <file>... — batch form of the old per-file `paths:`
@@ -128,6 +168,9 @@ sync_copilot_skills() {
 
     local src d skill_name
     local -a skill_dirs=()
+    # The inventory decides which skills render, symlinked ones included
+    # (decision 0017); the glob keeps this adapter's own listing order.
+    skill_source_inventory "$repo_root" "$config_file"
     load_yaml_list "$config_file" "skills"
     local list="$IS_YAML_LIST"
     while IFS= read -r src; do
@@ -137,13 +180,15 @@ sync_copilot_skills() {
         for d in "$dir"/*/; do
             [ -d "$d" ] || continue
             [ -f "$d/SKILL.md" ] || continue
+            skill_source_rendered "$d" || continue
             skill_dirs+=("$d")
         done
     done <<< "$list"
 
     local count=0
     if [ "${#skill_dirs[@]}" -gt 0 ]; then
-        copy_skill_bundle_dirs "$output_dir/skills" "${skill_dirs[@]}"
+        # Copilot has no effort field: the copy carries no `effort:`.
+        copy_skill_bundle_dirs_for copilot "$output_dir/skills" "${skill_dirs[@]}"
         for d in "${skill_dirs[@]}"; do
             skill_name="${d%/}"
             count=$((count + 1))
@@ -221,10 +266,15 @@ sync_to_copilot() {
 
     echo "=== GitHub Copilot ==="
 
+    copilot_commit_output_var "$config_file" || {
+        echo "ERROR: targets.copilot.commit_output must be true or false: true keeps generated Copilot output tracked, false or omission ignores it." >&2
+        return 1
+    }
+
     # Clean generated content (preserve workflows, etc.)
     rm -rf "$output_dir/instructions" "$output_dir/prompts"
     if [ -d "$output_dir/skills" ]; then
-        find "$output_dir/skills" -mindepth 1 -maxdepth 1 -type d -exec rm -rf {} +
+        find "$output_dir/skills" -mindepth 1 -maxdepth 1 \( -type d -o -type l \) -exec rm -rf {} +
     fi
     rm -rf "$output_dir/agents"
     mkdir -p "$output_dir" "$output_dir/skills" "$output_dir/agents"

package/engine/adapters/cursor.sh

@@ -10,11 +10,15 @@
 #     same rules would cause double-loading and burn the context window.
 # Skills: copy skill directories in full (SKILL.md + bundled resources)
 # Agents: strip tier/access/tools/disallowedTools, add model + readonly:true
+# Cursor has no per-agent or per-skill effort field (its effort is part of a
+# model ID), so `effort:` is stripped from both.
 #
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_cursor() {
     local output="${1%/}"
@@ -100,6 +104,9 @@ sync_cursor_skills() {
 
     local src d skill_name
     local -a skill_dirs=()
+    # The inventory decides which skills render, symlinked ones included
+    # (decision 0017); the glob keeps this adapter's own listing order.
+    skill_source_inventory "$repo_root" "$config_file"
     load_yaml_list "$config_file" "skills"
     local list="$IS_YAML_LIST"
     while IFS= read -r src; do
@@ -109,11 +116,12 @@ sync_cursor_skills() {
         for d in "$dir"/*/; do
             [ -d "$d" ] || continue
             [ -f "$d/SKILL.md" ] || continue
+            skill_source_rendered "$d" || continue
             skill_dirs+=("$d")
         done
     done <<< "$list"
     [ "${#skill_dirs[@]}" -gt 0 ] || return 0
-    copy_skill_bundle_dirs "$output_dir/skills" "${skill_dirs[@]}"
+    copy_skill_bundle_dirs_for cursor "$output_dir/skills" "${skill_dirs[@]}"
     for d in "${skill_dirs[@]}"; do
         skill_name="${d%/}"
         echo "  skill: ${skill_name##*/}"
@@ -170,13 +178,16 @@ sync_cursor_agents() {
             if (out != "") close(out)
             out = dst "/" base_name(FILENAME)
             count = 0
+            fm = 0
         }
         /^tier:/  { next }
         /^access:/ { next }
         /^tools:/ { next }
         /^disallowedTools:/ { next }
         { sub(/\r$/, "") }
+        FNR == 1 && $0 == "---" { fm = 1 }
         /^---$/ { count++ }
+        fm && count == 1 && substr($0, 1, 7) == "effort:" { next }
         count == 2 && /^---$/ {
             print fin_line("model: " MODEL[FILENAME]) > out
             if (RO[FILENAME] != "") print fin_line(RO[FILENAME]) > out

package/engine/adapters/opencode.sh

@@ -27,7 +27,9 @@
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_opencode() {
     local output="${1%/}"
@@ -88,6 +90,9 @@ sync_opencode_commands() {
 
     local src d skill_name
     local -a skill_mds=()
+    # The inventory decides which skills render, symlinked ones included
+    # (decision 0017); the glob keeps this adapter's own listing order.
+    skill_source_inventory "$repo_root" "$config_file"
     load_yaml_list "$config_file" "skills"
     local list="$IS_YAML_LIST"
     while IFS= read -r src; do
@@ -97,6 +102,7 @@ sync_opencode_commands() {
         for d in "$dir"/*/; do
             [ -d "$d" ] || continue
             [ -f "$d/SKILL.md" ] || continue
+            skill_source_rendered "$d" || continue
             skill_mds+=("${d%/}/SKILL.md")
         done
     done <<< "$list"

package/engine/adapters/pi.sh

@@ -16,7 +16,9 @@
 # Every per-file loop batches its work into one awk process (see the batched
 # helpers in lib/common.sh): process spawns dominate sync time on Windows.
 
-source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
+# The engine and the CLI load the shared library before any adapter. Only a
+# standalone source of this file loads it here: that costs a dirname process.
+declare -F finalize_output_file >/dev/null 2>&1 || source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
 adapter_contract_pi() {
     local output="${1%/}"

package/engine/lib/adapter-contract.sh

@@ -1,10 +1,17 @@
 #!/bin/bash
 # Declarative adapter ownership contract shared by the engine and CLI.
 #
-# Every adapter exposes adapter_contract_<name> <configured-output>. The
-# function emits tab-separated records through the helpers below. Keeping the
+# Every adapter exposes adapter_contract_<name> <configured-output> [manifest].
+# The function emits tab-separated records through the helpers below. Keeping the
 # declaration beside sync_to_<name>() makes backup, rollback, git policy and
 # lifecycle checks consume the same ownership model as the writer itself.
+#
+# The manifest argument exists for Git policy alone: a target field may choose
+# whether generated output is ignored (targets.copilot.commit_output). Ownership
+# never depends on it, so the engine and the sync cache, which read ownership
+# only, pass none and spare every sync the extra read; a contract given none
+# declares its default policy. Every caller that applies or checks Git policy
+# passes the manifest.
 
 adapter_contract_version()  { printf 'version\t%s\n' "$1"; }
 adapter_contract_requires() { printf 'requires\t%s\n' "$1"; }
@@ -14,6 +21,10 @@ adapter_contract_legacy()   { printf 'legacy\t%s\n' "$1"; }
 adapter_contract_preserve() { printf 'preserve\t%s\n' "$1"; }
 adapter_contract_ignore()   { printf 'ignore\t%s\n' "$1"; }
 adapter_contract_include()  { printf 'include\t%s\n' "$1"; }
+# An ignore line the policy must not hold: the writer takes it back out of the
+# region it manages. It is how a configuration that keeps output tracked undoes
+# the default ignore an earlier alignment already wrote.
+adapter_contract_unignore() { printf 'unignore\t%s\n' "$1"; }
 
 # --- cross-adapter ownership -------------------------------------------------
 #
@@ -106,12 +117,12 @@ adapter_contract_safe_concrete_path() {
     esac
 }
 
-# adapter_contract_records <adapter-name> <adapter-file> <configured-output>
+# adapter_contract_records <adapter-name> <adapter-file> <configured-output> [manifest]
 # Source and query in a subshell so a project adapter cannot leak shell state
 # into the caller. Project adapters are trusted executable code during sync;
 # the isolation here is for correctness, not a security boundary.
 adapter_contract_records() (
-    local name="$1" file="$2" output="$3" fn line kind value saw_version=0
+    local name="$1" file="$2" output="$3" manifest="${4:-}" fn
     # shellcheck source=/dev/null
     source "$file"
     printf -v fn 'adapter_contract_%s' "$name"
@@ -119,6 +130,38 @@ adapter_contract_records() (
         echo "ERROR: adapter '$name' has no $fn contract" >&2
         return 1
     }
+    _adapter_contract_emit "$name" '' < <("$fn" "$output" "$manifest")
+)
+
+# adapter_contract_records_batch <scratch-file> <name> <file> <output>... —
+# adapter_contract_records for several built-in adapters in one subshell, each
+# record prefixed with "<name><TAB>". One process instead of two per adapter:
+# on Git Bash every fork costs tens of milliseconds. <scratch-file> receives
+# each contract's raw lines before they are checked.
+adapter_contract_records_batch() (
+    local scratch="$1" name file output fn
+    shift
+    while [ "$#" -ge 3 ]; do
+        name="$1" file="$2" output="$3"
+        shift 3
+        # shellcheck source=/dev/null
+        source "$file"
+        printf -v fn 'adapter_contract_%s' "$name"
+        declare -F "$fn" >/dev/null 2>&1 || {
+            echo "ERROR: adapter '$name' has no $fn contract" >&2
+            return 1
+        }
+        # Like the process substitution above, a contract's own status is not
+        # its verdict: the records it printed are.
+        "$fn" "$output" > "$scratch" || true
+        _adapter_contract_emit "$name" "$name"$'\t' < "$scratch" || return 1
+    done
+)
+
+# _adapter_contract_emit <adapter-name> <prefix> — check the contract records
+# on stdin and print each one after <prefix>; return 1 on the first bad one.
+_adapter_contract_emit() {
+    local name="$1" prefix="$2" line kind value saw_version=0
     while IFS= read -r line; do
         [ -n "$line" ] || continue
         kind="${line%%$'\t'*}"
@@ -149,7 +192,7 @@ adapter_contract_records() (
                     return 1
                 }
                 ;;
-            ignore|include)
+            ignore|include|unignore)
                 adapter_contract_safe_path "$value" || {
                     echo "ERROR: adapter '$name' declares unsafe $kind path '$value'" >&2
                     return 1
@@ -160,10 +203,10 @@ adapter_contract_records() (
                 return 1
                 ;;
         esac
-        printf '%s\n' "$line"
-    done < <("$fn" "$output")
+        printf '%s%s\n' "$prefix" "$line"
+    done
     [ "$saw_version" -eq 1 ] || {
         echo "ERROR: adapter '$name' contract did not declare version 1" >&2
         return 1
     }
-)
+}