@autopilot-harness/cli 0.2.2 → 0.2.4

package/dist/assets/templates/.autopilotignore

@@ -0,0 +1,92 @@
+# Autopilot — paths that do NOT trigger self-review (gitignore syntax).
+#
+# What this file is:
+#   - Controls whether an afterFileEdit counts as "product code" (opens fix/confirm).
+#   - Does NOT change `git diff` / `git status` output (that is `.gitignore`).
+#   - Review followups ask the agent to skip these paths when reading diffs (soft).
+#
+# Semantics:
+#   - Same glob rules as gitignore; last matching pattern wins.
+#   - Use `!` to force-include an exception (e.g. `!docs/feed/**/*.yml`).
+#   - Markdown (*.md / *.mdx) is NOT ignored by default — design docs can be reviewed.
+#   - `docs/**` is NOT ignored by default.
+#   - Also skip untracked paths ignored by `.gitignore` (tracked files still count).
+#
+# Later (not implemented): hard-filtered review-diff / path ledger — see
+# docs/autopilot/workflows/autopilot-executing.md (B2 strong).
+
+# Runtime / editor (prefer also listing these in .gitignore)
+.autopilot/**
+.cursor/**
+.claude/**
+
+# Planning artifacts
+plans/**
+
+# Common build / vendor trees
+node_modules/**
+dist/**
+build/**
+out/**
+target/**
+.target/**
+coverage/**
+.venv/**
+venv/**
+__pycache__/**
+
+# Lockfiles / package manager noise
+package-lock.json
+pnpm-lock.yaml
+yarn.lock
+bun.lock
+bun.lockb
+Cargo.lock
+poetry.lock
+composer.lock
+
+# Media / binary (do not trigger self-review)
+*.png
+*.jpg
+*.jpeg
+*.gif
+*.webp
+*.ico
+*.svg
+*.bmp
+*.mp3
+*.mp4
+*.wav
+*.webm
+*.mov
+*.woff
+*.woff2
+*.ttf
+*.otf
+*.eot
+*.pdf
+*.zip
+*.gz
+*.tgz
+*.7z
+*.rar
+*.jar
+*.class
+*.o
+*.a
+*.so
+*.dylib
+*.dll
+*.exe
+*.wasm
+
+# Prose / data noise
+*.txt
+*.html
+*.htm
+*.csv
+*.tsv
+*.log
+*.map
+*.min.js
+*.min.css

package/dist/assets/templates/skills/autopilot-off/SKILL.md.tpl

@@ -0,0 +1,8 @@
+---
+name: autopilot-off
+description: "{{description}}"
+---
+
+The submit hook has already disarmed Autopilot for this conversation (paused; phase unchanged unless done→idle).
+
+Acknowledge pause. Do not auto-advance. Suggest Autopilot RESUME or Autopilot RUN · <slug> when ready.

package/dist/assets/templates/skills/autopilot-on/SKILL.md.tpl

@@ -0,0 +1,14 @@
+---
+name: autopilot-on
+description: "{{description}}"
+---
+
+The submit hook has already set phase=planning for this conversation.
+
+Follow **autopilot-planning** workflow (docs/autopilot/workflows/autopilot-planning.md).
+
+- initial_brief from text after /autopilot-on → seed Round 1
+- Optional slug: alone after the command, or after `·`, matching `[a-z0-9]+([.-][a-z0-9]+)*` and ≤128 chars (same as RUN); other text is initial_brief. Unsafe explicit slugs (e.g. from API) are rejected by the hook.
+- Look up repo facts with platform tools; do not ask the user for what you can inspect
+- Write plans/<slug>/ artifacts (slug rule above); no product code until /autopilot-run
+- User-visible replies must match the user's language

package/dist/assets/templates/skills/autopilot-replan/SKILL.md.tpl

@@ -0,0 +1,9 @@
+---
+name: autopilot-replan
+description: "{{description}}"
+---
+
+The submit hook has set phase=planning and reset the review chain for this track.
+
+Revise plan.md and unchecked checklist items only. Do not silently delete completed `[x]` items.
+When ready, prompt `/autopilot-run`.

package/dist/assets/templates/skills/autopilot-resume/SKILL.md.tpl

@@ -0,0 +1,10 @@
+---
+name: autopilot-resume
+description: "{{description}}"
+---
+
+The submit hook has resumed Autopilot for **this** conversation (cleared pause if any; review chain preserved).
+
+If this chat had no session, the hook may have **claimed** an executing track from another conversation (same project) onto this one — including when the old Cursor chat is dead/unreadable. Optional: `/autopilot-resume <slug>` to pick the track when several are executing.
+
+Continue from checklist progress and current phase. Do not reset review confirm rounds unless asked.

package/dist/assets/templates/skills/autopilot-run/SKILL.md.tpl

@@ -0,0 +1,12 @@
+---
+name: autopilot-run
+description: "{{description}}"
+---
+
+The submit hook has already set phase=executing (or will after track pick) for this conversation.
+
+Follow **autopilot-executing** workflow (docs/autopilot/workflows/autopilot-executing.md).
+
+- Read plans/<slug>/checklist.md; implement the first unchecked item
+- Obey fix/confirm/advance followups from the stop hook
+- User-visible replies must match the user's language

package/dist/assets/templates/workflows/autopilot-executing.md

@@ -0,0 +1,59 @@
+# Autopilot Executing
+
+Implement the current unchecked checklist item, then obey stop-hook followups.
+
+## Per-item flow
+
+1. Read `plans/<slug>/checklist.md` — work only on `firstUnchecked()` (`- [ ] <id> — <title>`).
+2. Implement within that item's scope (align with `plan.md`).
+3. Machine verify / completion evidence: write `.autopilot/verify-last.json` with matching `itemId` (and `ok: true` when using a hand-written report). Run configured verify commands when present.
+   - **Required for every item before you stop** — especially no-code / ops / verify-only items. A stale `itemId` from a prior item blocks advance.
+   - After writing the report, **end the turn** so the stop hook can inject advance/done. Do not ask the user to continue; do not invent your own Advance/Done.
+4. Stop hook injects **fix** / **confirm** / **need_evidence** / **advance** / **done** — follow the injected message; do **not** invent your own review lens.
+
+### Product code vs no-code items
+
+| Situation | Stop behavior |
+|-----------|----------------|
+| You edited product code this item | **fix → confirm →** then verify / advance |
+| No product-code diff (env, ops, paths listed in `.autopilotignore`, or untracked + `.gitignore`) | Skip fix/confirm when `verify-last.json` `itemId` matches the current item (or required verify **pass**); then **advance** / **done**. If the report is missing, stale, or `ok: false`, stop hook injects **need_evidence** — write the matching report and end the turn; do not wait for the user. |
+| Required verify **fail** | `verify_fix` — fix env/report or code; if you edit product code next, fix chain runs first |
+
+**What counts as product code (trigger):** any edited path that is **not** matched by `.autopilotignore`, and is **not** an untracked path ignored by `.gitignore`. There is no hardcoded extension allowlist — configure exclusions in `.autopilotignore` (comments in that file explain defaults). Markdown is reviewable by default; `docs/**` is not blocked by default.
+
+**Agent review scope (B2 weak):** fix/confirm followups ask the agent to skip `.autopilotignore` hits and untracked `.gitignore` paths when reading `git diff` / `git status`. This is prompt guidance only (soft).
+
+**B2 strong (not implemented — future):** harness could emit a filtered diff command or a per-chain product-path ledger so review scope is hard-enforced without relying on the agent. Revisit if soft guidance is insufficient.
+
+## Fix vs confirm
+
+| Mode | Behavior |
+|------|----------|
+| Fix round | Defect-first on the in-scope diff; fix CRITICAL/HIGH; run relevant tests; **no commit** |
+| Confirm rounds | Only the **injected lens**; CRITICAL/HIGH may fix (returns to fix); final lens is **read-only** |
+| Confirm 1–N | **Never commit** |
+
+## Advance / done turn (mandatory order)
+
+When followup is advance or done:
+
+1. Mark **only** the completed current item named in the followup `[x]` in `checklist.md`. Do **not** mark the next item.
+2. Scoped conventional commit if the working tree has this item's changes — **include `checklist.md`** when `plans/` is committed (no `git add -A`, no secrets / `.autopilot/state.db`).
+3. **Then** start the next unchecked item named in the followup (next turn is OK for large code).
+
+### Checklist `[x]` timing (hard)
+
+- **Do not** mark the item you are still implementing `[x]` mid-work or mid-review.
+- Only Advance/Done followups check off the **completed** current item.
+- Premature `[x]` used to make the stop-hook name the wrong "next" item; the harness now sticks `reviewing_item_id`, but agents must still obey this rule.
+
+If you write next-item code before checking off, `itemId` / verify binding will be wrong.
+
+Advance leaves `chain_pending=0` so a docs-only / ignore-only next item does not open a phantom confirm chain; product edits still arm review via `afterFileEdit`.
+
+## Hard rules
+
+- Do not advance while verify required commands FAIL (hook blocks; rewrite `verify-last.json` after fixing).
+- Configure verify under `.autopilot/config.yml` → `review.verify.commands` (`id` / `run` / `required`).
+- User-visible replies match the user's language.
+- No push / `--no-verify` / amend unless the user explicitly asks in this conversation.

package/dist/assets/templates/workflows/autopilot-planning.md

@@ -0,0 +1,42 @@
+# Autopilot Planning
+
+Built-in grill / design-tree workflow. Do **not** write product code until `/autopilot-run`.
+
+## Frontier format (every round)
+
+List every decision you can ask **now** (premises already settled):
+
+```markdown
+❓ **Q1** - **<title>**: <body; options if useful>
+
+➡️ <recommended answer>
+```
+
+Wait for the user to answer the round, then open the next frontier. Round 1 usually covers goal / scope / acceptance. Later rounds go block → detail.
+
+## Brownfield (existing repo)
+
+1. Read README and manifests (`package.json`, `Cargo.toml`, `go.mod`, `pyproject.toml`, …).
+2. Search / skim modules related to the request.
+3. Put constraints under **Existing context** in `brief.md`.
+4. Cite **real repo paths** in questions — do not ask the user for facts you can inspect.
+
+## Greenfield
+
+Skip repo survey; start from goals and constraints.
+
+## Artifact timing
+
+| When | Write |
+|------|--------|
+| Title is clear | Create `plans/<slug>/` (`brief.md`, `plan.md`, `checklist.md`); update `plans/README.md`. **Slug** = `[a-z0-9]+([.-][a-z0-9]+)*`, length 1–128 (kebab; single dots OK, e.g. `v0.1-npm-release`; no `..`, `/`, `\`, `_`) — same rule as `/autopilot-on|run <slug>` |
+| Frontier nearly empty | Checklist **draft** (`- [ ]`) |
+| User confirms the plan | Finalize checklist: `- [ ] <id> — <title>` (**item id** kebab-case letters/digits/hyphens only — **no dots**) |
+| Ready to build | Prompt **`/autopilot-run`** (or `/autopilot-run <slug>`) |
+
+## Hard rules
+
+- Planning may only edit `plans/**` and docs — **no product code**.
+- Directory `<slug>` must match `[a-z0-9]+([.-][a-z0-9]+)*` and ≤128 chars (same gate as `/autopilot-on|run <slug>`); checklist **item** ids stay `[a-z0-9]+(-[a-z0-9]+)*` (no dots).
+- User shortcuts: “直接定稿 / skip grill / use your recommendations” may shorten rounds; still produce the three artifacts.
+- User-visible replies match the user's language. Workflow procedure stays English.

package/dist/assets/vendor/runtime.mjs

@@ -43,6 +43,7 @@ var en_default = {
     review_complete: "Review complete. All {total} confirm rounds passed; the review chain has ended. If the working tree still has uncommitted changes from this session, local commit only per the safe checklist (never stage .env/secrets/.autopilot runtime; no push unless the user asks); if clean, briefly confirm only.",
     stuck: "Stuck: no progress for several stops. Change strategy or send Autopilot RESUME after fixing.",
     verify_fix: "Verify failed ({reason}). Fix verify commands and rewrite verify-last.json; do not advance.",
+    need_evidence: `Need evidence: no-code item {currentId}{currentTitleSuffix} cannot advance without matching soft completion evidence. Write .autopilot/verify-last.json with itemId "{currentId}" and ok: true (only after this item's work is done). Then end the turn so the stop hook can advance/done. Do not ask the user to continue; do not invent Advance/Done.`,
     track_pick: "Select a plan by number or slug."
   },
   error: {
@@ -118,6 +119,7 @@ var zh_CN_default = {
     review_complete: "\u81EA\u5BA1\u5B8C\u6210\u3002\u8FDE\u7EED {total} \u8F6E\u786E\u8BA4\u5DF2\u901A\u8FC7\uFF0C\u81EA\u5BA1\u94FE\u5DF2\u7ED3\u675F\u3002\u82E5\u5DE5\u4F5C\u533A\u4ECD\u6709\u672C\u4F1A\u8BDD\u672A\u63D0\u4EA4\u6539\u52A8\uFF0C\u6309\u5B89\u5168\u6E05\u5355\u672C\u5730 commit\uFF08\u52FF stage .env/\u5BC6\u94A5/.autopilot \u8FD0\u884C\u65F6\uFF1B\u52FF push\uFF0C\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\uFF09\uFF1B\u5DF2\u5E72\u51C0\u5219\u53EA\u7B80\u77ED\u786E\u8BA4\u5373\u53EF\u3002",
     stuck: "\u5361\u4F4F\uFF1A\u8FDE\u7EED\u591A\u8F6E\u65E0\u8FDB\u5C55\u3002\u8BF7\u6362\u7B56\u7565\uFF0C\u6216\u4FEE\u597D\u540E\u53D1\u9001 Autopilot RESUME\u3002",
     verify_fix: "\u6821\u9A8C\u5931\u8D25\uFF08{reason}\uFF09\u3002\u8BF7\u4FEE\u590D verify \u547D\u4EE4\u5E76\u91CD\u5199 verify-last.json\uFF1B\u4E0D\u8981\u63A8\u8FDB\u3002",
+    need_evidence: '\u9700\u8981\u5B8C\u6210\u8BC1\u636E\uFF1A\u65E0\u4EE3\u7801\u6539\u52A8\u9879 {currentId}{currentTitleSuffix} \u7F3A\u5C11\u5339\u914D\u7684 soft \u5B8C\u6210\u8BC1\u636E\uFF0C\u65E0\u6CD5\u63A8\u8FDB\u3002\u8BF7\u5199\u5165 .autopilot/verify-last.json\uFF08itemId \u4E3A "{currentId}"\uFF0Cok: true\uFF1B\u987B\u5728\u8BE5\u9879\u5DE5\u4F5C\u5B8C\u6210\u540E\uFF09\u3002\u7136\u540E\u7ED3\u675F\u672C\u56DE\u5408\uFF0C\u7531 stop hook \u63A8\u8FDB/\u5B8C\u6210\u3002\u4E0D\u8981\u8BA9\u7528\u6237\u8BF4\u300C\u7EE7\u7EED\u300D\uFF1B\u4E0D\u8981\u81EA\u884C\u53D1\u660E\u63A8\u8FDB/\u5B8C\u6210\u6307\u4EE4\u3002',
     track_pick: "\u8BF7\u7528\u6570\u5B57\u6216 slug \u9009\u62E9\u8981\u6267\u884C\u7684 plan\u3002"
   },
   error: {
@@ -1236,6 +1238,8 @@ var StateStore = class _StateStore {
     OR trim(pending_followup) GLOB '\u81EA\u5BA1\u5B8C\u6210*'
     OR trim(pending_followup) GLOB 'Advance*'
     OR trim(pending_followup) GLOB '\u63A8\u8FDB*'
+    OR trim(pending_followup) GLOB 'Need evidence*'
+    OR trim(pending_followup) GLOB '\u9700\u8981\u5B8C\u6210\u8BC1\u636E*'
   )`;
   /**
    * SQL predicate: pending is absent or not a recover automation prompt.
@@ -1877,12 +1881,15 @@ var HARNESS_FOLLOWUP_PREFIXES = [
   "Recover:",
   "Review complete",
   "Verify failed",
+  "Need evidence:",
   "\u81EA\u5BA1\u4FEE\u590D",
   "\u81EA\u5BA1\u786E\u8BA4",
   "\u81EA\u5BA1\u5B8C\u6210",
   "\u63A8\u8FDB\u4E0B\u4E00\u9879",
   "\u5168\u90E8\u5B8C\u6210",
   "\u6821\u9A8C\u5931\u8D25",
+  "\u9700\u8981\u5B8C\u6210\u8BC1\u636E\uFF1A",
+  "\u9700\u8981\u5B8C\u6210\u8BC1\u636E:",
   // Match zh recover/stuck templates (fullwidth colon) — bare「恢复」is too broad.
   "\u6062\u590D\uFF1A",
   "\u5361\u4F4F\uFF1A",
@@ -2284,6 +2291,8 @@ function defaultRender(kind, vars) {
       return `Stuck: no progress for several stops. Change strategy or send Autopilot RESUME after fixing.`;
     case "verify_fix":
       return `Verify failed (${vars.reason ?? "unknown"}). Fix verify commands and rewrite verify-last.json; do not advance.`;
+    case "need_evidence":
+      return `Need evidence: no-code item ${vars.currentId ?? ""}${vars.currentTitle ? ` \u2014 ${vars.currentTitle}` : ""} cannot advance without matching soft completion evidence. Write .autopilot/verify-last.json with itemId "${vars.currentId ?? ""}" and ok: true (only after this item's work is done). Then end the turn so the stop hook can advance/done. Do not ask the user to continue; do not invent Advance/Done.`;
     default:
       return "";
   }
@@ -2575,6 +2584,9 @@ var ReviewEngine = class {
     if (m.startsWith("Recover") || m.startsWith("\u6062\u590D")) return "recover";
     if (m.startsWith("Stuck") || m.startsWith("\u5361\u4F4F")) return "stuck";
     if (m.startsWith("Verify failed") || m.startsWith("\u6821\u9A8C\u5931\u8D25")) return "verify_fix";
+    if (m.startsWith("Need evidence") || m.startsWith("\u9700\u8981\u5B8C\u6210\u8BC1\u636E")) {
+      return "need_evidence";
+    }
     return "review.confirm";
   }
   emit(conversationId, action) {
@@ -2952,6 +2964,9 @@ var ReviewEngine = class {
     if (line.startsWith("Verify failed") || line.startsWith("\u6821\u9A8C\u5931\u8D25")) {
       return "verify";
     }
+    if (line.startsWith("Need evidence") || line.startsWith("\u9700\u8981\u5B8C\u6210\u8BC1\u636E")) {
+      return "need_evidence";
+    }
     if (line.startsWith("All checklist") || line.startsWith("\u5168\u90E8\u5B8C\u6210") || line.startsWith("Review complete") || line.startsWith("\u81EA\u5BA1\u5B8C\u6210")) {
       return "terminal";
     }
@@ -3292,9 +3307,26 @@ var ReviewEngine = class {
       projectRoot: trustRoot ?? void 0
     });
     if (evalResult.outcome === "skip") {
-      return this.e0DirectAdvance(session, reportPath, currentItem.id, {
-        kind: "soft"
-      });
+      const trySoftAdvance = (itemId) => this.e0DirectAdvance(session, reportPath, itemId, { kind: "soft" });
+      const advanced = trySoftAdvance(currentItem.id);
+      if (advanced) return advanced;
+      const nudged = this.e0EmitNeedEvidence(session, currentItem);
+      if (nudged) return nudged;
+      const liveChain = this.store.getReviewChain(session.conversation_id);
+      const liveParsed = this.parseSessionChecklist(session);
+      const liveId = liveParsed?.checklist && this.resolveReviewingItemId(
+        liveChain,
+        liveParsed.checklist,
+        currentItem.id
+      ) || currentItem.id;
+      if (!hasNoCodeCompletionEvidence({
+        reportPath,
+        currentItemId: liveId,
+        projectRoot: trustRoot ?? void 0
+      })) {
+        return null;
+      }
+      return trySoftAdvance(liveId);
     }
     if (evalResult.outcome === "pass") {
       return this.e0DirectAdvance(session, reportPath, currentItem.id, {
@@ -3435,6 +3467,96 @@ var ReviewEngine = class {
     }
     return action;
   }
+  /**
+   * E0 soft path without completion evidence: inject an actionable nudge instead
+   * of returning null (silent stall). Keeps chain_pending=0 so the next stop
+   * can soft-advance once verify-last.json matches — arming would force phantom E3.
+   * Shared by all platforms (Cursor / Claude Code) via ReviewEngine.
+   *
+   * Do **not** call afterFollowupCommitted here: that resets idle_stop_count and
+   * would undo the stuck progression (same pattern as E5c verify_fix).
+   */
+  e0EmitNeedEvidence(session, expectedItem) {
+    const cid2 = session.conversation_id;
+    const trustRoot = this.trustedProjectRoot();
+    const reportPath = this.config.verifyReportPath ?? defaultVerifyReportPath(trustRoot ?? "");
+    return this.store.exclusiveWrite(() => {
+      if (!this.sessionRunnable(cid2)) {
+        return { commit: false, value: null };
+      }
+      const sess = this.store.getSession(cid2);
+      if (!sess || !isChecklistExecuting(sess)) {
+        return { commit: false, value: null };
+      }
+      const fresh = this.store.getReviewChain(cid2);
+      if (!fresh || fresh.code_edited === 1 || fresh.confirm_left !== null || fresh.item_confirm_complete === 1 || fresh.chain_pending === 1) {
+        return { commit: false, value: null };
+      }
+      const refreshed = this.parseSessionChecklist(sess);
+      if (!refreshed?.checklist) {
+        return { commit: false, value: null };
+      }
+      const reviewingId = this.resolveReviewingItemId(
+        fresh,
+        refreshed.checklist,
+        expectedItem.id
+      );
+      const lockedItem = reviewingId && refreshed.checklist.items.find((i) => i.id === reviewingId) || refreshed.currentItem;
+      if (!lockedItem) {
+        return { commit: false, value: null };
+      }
+      if (hasNoCodeCompletionEvidence({
+        reportPath,
+        currentItemId: lockedItem.id,
+        projectRoot: trustRoot ?? void 0
+      })) {
+        return { commit: false, value: null };
+      }
+      const nextIdle = sess.idle_stop_count + 1;
+      const nowStuck = nextIdle >= this.config.maxIdleStops;
+      if (nowStuck) {
+        this.store.upsertSession({
+          conversation_id: cid2,
+          project_root: sess.project_root,
+          code_root: sess.code_root,
+          idle_stop_count: nextIdle,
+          paused: 1,
+          paused_reason: "stuck",
+          armed: 0
+        });
+      } else {
+        this.store.upsertSession({
+          conversation_id: cid2,
+          project_root: sess.project_root,
+          code_root: sess.code_root,
+          idle_stop_count: nextIdle
+        });
+      }
+      const kind = nowStuck ? "stuck" : "need_evidence";
+      const title = (lockedItem.title ?? "").trim();
+      const message = this.render(
+        kind,
+        nowStuck ? {} : {
+          currentId: lockedItem.id,
+          currentTitle: title,
+          currentTitleSuffix: title ? ` \u2014 ${title}` : ""
+        }
+      );
+      this.store.updateReviewChain(cid2, {
+        chain_pending: 0,
+        pending_followup: message,
+        pending_followup_at: (/* @__PURE__ */ new Date()).toISOString(),
+        pending_redeliver_at: null
+      });
+      const out = {
+        kind,
+        message,
+        loop: true,
+        meta: nowStuck ? void 0 : { currentId: lockedItem.id }
+      };
+      return { commit: true, value: out };
+    });
+  }
   /** Arm confirm_left=0 + ICC=1 only when still idle on the no-code path. */
   armAtE5ForNoCode(conversationId) {
     return this.store.exclusiveWrite(() => {
@@ -4413,6 +4535,11 @@ function createRenderFollowup(bundle) {
           f.verify_fix ?? "Verify failed ({reason}). Fix verify commands and rewrite verify-last.json; do not advance.",
           vars
         );
+      case "need_evidence":
+        return renderTemplate(
+          f.need_evidence ?? `Need evidence: no-code item {currentId}{currentTitleSuffix} cannot advance without matching soft completion evidence. Write .autopilot/verify-last.json with itemId "{currentId}" and ok: true (only after this item's work is done). Then end the turn so the stop hook can advance/done. Do not ask the user to continue; do not invent Advance/Done.`,
+          vars
+        );
       default:
         return "";
     }

package/dist/init/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/init/install.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,UAAU,EACV,cAAc,EACf,MAAM,YAAY,CAAC;AAyCpB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIxE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,qGAMxB,CAAC;AAEX,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,8DAG3B,CAAC;AAgVX;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,IAAI,CA6Df;AAwMD,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,CA8C1E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CAuhB/D"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/init/install.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,UAAU,EACV,cAAc,EACf,MAAM,YAAY,CAAC;AA0CpB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIxE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,qGAMxB,CAAC;AAEX,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,8DAG3B,CAAC;AAyUX;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,IAAI,CA6Df;AAwMD,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,CA8C1E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CAuhB/D"}

package/dist/init/install.js

@@ -12,6 +12,7 @@ import { DEFAULT_AUTOPILOT_IGNORE_TEXT } from "@autopilot-harness/core";
 import { readConfigInstallHints, readConfigPlatformsOrThrow } from "./config-merge.js";
 import { applyPlatformsToConfigYaml, assertInstallablePlatforms, isInstallableBinding, MAX_PLATFORM_BINDINGS, mergePlatformBindings, mergedIncludesAllRequested, normalizeBinding, primaryBinding, sanitizePlatformId, } from "./platforms.js";
 import { MAX_UNTRUSTED_TEXT_BYTES, readUntrustedUtf8File, copyFileReplaceSync, copyFileNoFollowExclSync, writeFileReplaceSync, renameReplaceSync, } from "../read-untrusted-file.js";
+import { resolveTemplatesRoot } from "../template-paths.js";
 export { mergeHooksJson, stripAutopilotHooks, isAutopilotCommand, countAutopilotDuplicates, validateHooksShape, hasCompleteAutopilotHooks, summarizeAutopilotHooks, autopilotStopHasUnlimitedLoop, autopilotHookCommand, } from "./hooks-merge.js";
 export { mergeClaudeSettings, validateClaudeSettingsShape, hasClaudeBlockCapZero, hasCompleteClaudeAutopilotHooks, summarizeClaudeAutopilotHooks, stripAutopilotClaudeSettings, claudeSettingsContainAutopilot, CLAUDE_AUTOPILOT_EVENTS, CLAUDE_BLOCK_CAP_ENV, } from "./claude-settings-merge.js";
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -33,13 +34,7 @@ const WORKFLOW_FILES = AUTOPILOT_WORKFLOW_FILES;
 function resolvePackageRoots() {
     // src/init → ../../ = packages/cli; dist/init → ../../ = packages/cli
     const cliRoot = path.resolve(__dirname, "../..");
-    const candidates = [
-        path.resolve(cliRoot, "../templates"),
-        path.resolve(cliRoot, "node_modules/@autopilot-harness/templates"),
-    ];
-    const templatesRoot = candidates.find((p) => isRealDirectory(path.join(p, "skills"))) ??
-        candidates[0];
-    return { cliRoot, templatesRoot };
+    return { cliRoot, templatesRoot: resolveTemplatesRoot(cliRoot) };
 }
 function resolveHookAsset(cliRoot) {
     const candidates = [
@@ -78,7 +73,7 @@ function resolveVendorRoot(cliRoot) {
 function copyVendorDir(cliRoot, destBin, projectRoot) {
     const vendorRoot = resolveVendorRoot(cliRoot);
     if (!vendorRoot) {
-        throw new Error("Missing assets/vendor/runtime.mjs or migrations — run pnpm bundle-vendor (or pnpm build)");
+        throw new Error("Missing assets/vendor (or dist/assets/vendor) runtime.mjs/migrations — run pnpm bundle-vendor (or pnpm build)");
     }
     const runtimeSrc = path.join(vendorRoot, "runtime.mjs");
     const migSrcDir = path.join(vendorRoot, "migrations");
@@ -537,7 +532,7 @@ export function preflightForceRefresh(projectRoot) {
     if (!resolveVendorRoot(cliRoot)) {
         return {
             ok: false,
-            error: "Missing assets/vendor/runtime.mjs or migrations — run pnpm bundle-vendor (or pnpm build)",
+            error: "Missing assets/vendor (or dist/assets/vendor) runtime.mjs/migrations — run pnpm bundle-vendor (or pnpm build)",
         };
     }
     // Host settings (`.cursor/hooks.json` / `.claude/settings.json`) are validated