@glrs-dev/cli 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @glrs-dev/cli
 
+## 1.1.0
+
+### Patch Changes
+
+- [#38](https://github.com/iceglober/glrs/pull/38) [`cedbc0a`](https://github.com/iceglober/glrs/commit/cedbc0a6d98fb5b91c78ec6168322593c4c98b20) Thanks [@iceglober](https://github.com/iceglober)! - Fix `glrs wt` subcommand dispatch (was printing help instead of executing) and replace Bun APIs unavailable in released versions with Node.js fs equivalents.
+
+## 1.0.1
+
+### Patch Changes
+
+- [#33](https://github.com/iceglober/glrs/pull/33) [`b3a79cc`](https://github.com/iceglober/glrs/commit/b3a79cc0a9ad2f6247c4d889ee9a08a3cf0f8b41) Thanks [@iceglober](https://github.com/iceglober)! - Rewrite `packages/cli/README.md` as the single source of truth for CLI documentation. Document the bare-`glrs wt` interactive picker behavior (previously undocumented). Content for `glrs.dev/cli/` is now generated from this README via the docs-site custom content loader; there is no longer a separate site overview page to drift from.
+
 ## 1.0.0
 
 ### Patch Changes

package/README.md

@@ -6,33 +6,44 @@ Unified CLI for the [@glrs-dev](https://www.npmjs.com/org/glrs-dev) ecosystem. O
 npm i -g @glrs-dev/cli
 ```
 
+Requires [Bun](https://bun.sh) ≥ 1.2.0 on PATH at runtime.
+
+## `glrs oc` — OpenCode agent harness
+
+Dispatches to [`@glrs-dev/harness-plugin-opencode`](https://www.npmjs.com/package/@glrs-dev/harness-plugin-opencode) (bundled as a dependency). Resolves the bin via `require.resolve` → reads the `bin` field → spawns with argv forwarded.
+
 ```bash
-glrs oc install       # → OpenCode harness install
-glrs wt new feature   # create a worktree
-glrs wt list          # list worktrees across repos
-glrs wt switch        # interactive picker
+glrs oc install       # install the OpenCode harness
+glrs oc --help        # full harness help
 ```
 
-Requires [Bun](https://bun.sh) on PATH at runtime.
-
 The `harness-opencode` bin remains available directly for power users who prefer the untagged entry point.
 
-## How it works
+## `glrs wt` — worktree management
+
+Five named subcommands:
+
+```bash
+glrs wt new <name>    # create a new git worktree
+glrs wt list          # list all worktrees for this repo
+glrs wt switch        # switch to a worktree by name
+glrs wt delete <name> # delete a worktree
+glrs wt cleanup       # remove stale worktrees
+```
 
-The `glrs` binary has two subcommands:
+**Bare invocation:** running `glrs wt` with no arguments in a TTY drops into an interactive picker — select a worktree to switch to without typing its name.
 
-- **`glrs oc <args>`** — dispatches to [`@glrs-dev/harness-plugin-opencode`](../harness-opencode/) (bundled as a dependency). Resolves the bin via `require.resolve(<package>/package.json)` → reads the `bin` field → spawns with argv forwarded.
-- **`glrs wt <args>`** — worktree management, handled natively. Commands: `new`, `list`, `switch`, `delete`, `cleanup`. Worktrees are stored in `~/.glorious/worktrees/<repo>/<name>/`.
+Worktrees are stored in `~/.glorious/worktrees/<repo>/<name>/`.
 
 ## Philosophy
 
 - **Don't duplicate CLI logic.** `glrs oc` is a thin spawn wrapper around `harness-opencode`.
 - **One install, one thing to remember** for the harness + worktree workflow.
-- **Separate concerns stay separate.** The SSO credential tool [`@glrs-dev/assume`](../assume/) is a standalone Rust binary installed separately.
+- **Separate concerns stay separate.** The SSO credential tool [`@glrs-dev/assume`](https://www.npmjs.com/package/@glrs-dev/assume) is a standalone Rust binary installed separately.
 
 ## Docs
 
-[glrs.dev](https://glrs.dev) — full ecosystem docs.
+Full docs at [glrs.dev/cli/](https://glrs.dev/cli/) — generated from this README via the docs-site custom content loader.
 
 ## License
 

package/dist/{chunk-DEODG2LC.js → chunk-E2UNZIZT.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-LMRDQ4GW.js";
 import {
   loadRegistry
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   bold,
   dim,

package/dist/{chunk-GQBZREK5.js → chunk-EM4MJBOD.js}

@@ -1,12 +1,12 @@
 import {
   createWorktree
-} from "./chunk-VJFNIKQJ.js";
+} from "./chunk-F3AFRUT2.js";
 import {
   spawnShell
 } from "./chunk-LMRDQ4GW.js";
 import {
   loadRegistry
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   info
 } from "./chunk-YBCA3IP6.js";
@@ -21,11 +21,13 @@ import * as os from "os";
 var INDEX_DIR = path.join(os.homedir(), ".glorious");
 var INDEX_FILE = path.join(INDEX_DIR, "repos.json");
 function existsSync(filePath) {
-  return Bun.file(filePath).existsSync();
+  const { existsSync: _fs } = __require("fs");
+  return _fs(filePath);
 }
 function readTextSync(filePath) {
   try {
-    return Bun.file(filePath).textSync();
+    const { readFileSync } = __require("fs");
+    return readFileSync(filePath, "utf8");
   } catch {
     return null;
   }

package/dist/{chunk-VJFNIKQJ.js → chunk-F3AFRUT2.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-LMRDQ4GW.js";
 import {
   registerWorktree
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   bold,
   info,
@@ -20,11 +20,12 @@ import {
 
 // src/lib/worktree.ts
 import * as path from "path";
+import { existsSync as fsExistsSync, mkdirSync as fsMkdirSync } from "fs";
 function existsSync(filePath) {
-  return Bun.file(filePath).existsSync();
+  return fsExistsSync(filePath);
 }
 function mkdirSync(dirPath, opts) {
-  Bun.mkdir(dirPath, opts);
+  fsMkdirSync(dirPath, opts);
 }
 function autoName(now = /* @__PURE__ */ new Date(), suffix = randomSuffix()) {
   const pad = (n) => n.toString().padStart(2, "0");

package/dist/{chunk-6RHN2EDH.js → chunk-I2KUXY3I.js}

@@ -1,6 +1,6 @@
 import {
   go
-} from "./chunk-DEODG2LC.js";
+} from "./chunk-E2UNZIZT.js";
 import {
   currentBranchIn,
   gitInSafe,
@@ -10,7 +10,7 @@ import {
 } from "./chunk-LMRDQ4GW.js";
 import {
   loadRegistry
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   bold,
   dim

package/dist/{chunk-FSAGM22T.js → chunk-OABVEBWW.js}

@@ -1,6 +1,6 @@
 import {
   go
-} from "./chunk-DEODG2LC.js";
+} from "./chunk-E2UNZIZT.js";
 
 // src/commands/switch.ts
 import { command } from "cmd-ts";

package/dist/{chunk-NLPX2KOF.js → chunk-RZWOWTKF.js}

@@ -13,7 +13,7 @@ import {
 import {
   loadRegistry,
   unregisterWorktree
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   bold,
   dim,

package/dist/{chunk-VCN7RNLU.js → chunk-SPULDN7P.js}

@@ -1,31 +1,32 @@
 // src/lib/registry.ts
 import * as path from "path";
 import * as os from "os";
+import * as fs from "fs";
 var REGISTRY_DIR = path.join(os.homedir(), ".glorious");
 var REGISTRY_FILE = path.join(REGISTRY_DIR, "worktrees.json");
 function ensureDir() {
-  Bun.mkdir(REGISTRY_DIR, { recursive: true });
+  fs.mkdirSync(REGISTRY_DIR, { recursive: true });
 }
-function existsSync(filePath) {
-  return Bun.file(filePath).existsSync();
+function existsSync2(filePath) {
+  return fs.existsSync(filePath);
 }
 function readTextSync(filePath) {
   try {
-    return Bun.file(filePath).textSync();
+    return fs.readFileSync(filePath, "utf8");
   } catch {
     return null;
   }
 }
 function writeTextSync(filePath, content) {
-  Bun.file(filePath).writer().write(content);
+  fs.writeFileSync(filePath, content, "utf8");
 }
 function loadRegistry() {
-  if (!existsSync(REGISTRY_FILE)) return [];
+  if (!existsSync2(REGISTRY_FILE)) return [];
   try {
     const raw = readTextSync(REGISTRY_FILE);
     if (!raw) return [];
     const entries = JSON.parse(raw);
-    const valid = entries.filter((e) => existsSync(e.wtPath));
+    const valid = entries.filter((e) => existsSync2(e.wtPath));
     if (valid.length !== entries.length) {
       saveRegistry(valid);
     }

package/dist/{chunk-HWMRY35D.js → chunk-UXBOTMDY.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-LMRDQ4GW.js";
 import {
   unregisterWorktree
-} from "./chunk-VCN7RNLU.js";
+} from "./chunk-SPULDN7P.js";
 import {
   bold,
   dim,

package/dist/cli.js

@@ -7,34 +7,34 @@ import {
 } from "./chunk-YGNDPKIW.js";
 import {
   cleanup
-} from "./chunk-HWMRY35D.js";
+} from "./chunk-UXBOTMDY.js";
 import {
   create
-} from "./chunk-GQBZREK5.js";
-import "./chunk-VJFNIKQJ.js";
+} from "./chunk-EM4MJBOD.js";
+import "./chunk-F3AFRUT2.js";
 import {
   del
-} from "./chunk-NLPX2KOF.js";
+} from "./chunk-RZWOWTKF.js";
 import "./chunk-W37UX3U2.js";
 import {
   list
-} from "./chunk-6RHN2EDH.js";
+} from "./chunk-I2KUXY3I.js";
 import {
   switchCmd
-} from "./chunk-FSAGM22T.js";
+} from "./chunk-OABVEBWW.js";
 import {
   go
-} from "./chunk-DEODG2LC.js";
+} from "./chunk-E2UNZIZT.js";
 import "./chunk-P7PRH4I3.js";
 import "./chunk-LMRDQ4GW.js";
-import "./chunk-VCN7RNLU.js";
+import "./chunk-SPULDN7P.js";
 import "./chunk-YBCA3IP6.js";
 import "./chunk-3RG5ZIWI.js";
 
 // src/cli.ts
 import { spawn } from "child_process";
 import * as path from "path";
-import { subcommands, run, binary } from "cmd-ts";
+import { subcommands, run } from "cmd-ts";
 var args = process.argv.slice(2);
 if (args.length === 0 || args[0] === "--help" || args[0] === "-h" || args[0] === "help") {
   process.stdout.write(HELP_TEXT);
@@ -70,8 +70,7 @@ if (sub === "wt" || sub === "worktree") {
       cleanup
     }
   });
-  const wtBinary = binary(wt);
-  await run(wtBinary, ["wt", ...wtArgs]);
+  await run(wt, wtArgs);
   process.exit(0);
 }
 if (!SUBCOMMANDS.includes(sub)) {

package/dist/commands/cleanup.js

@@ -1,9 +1,9 @@
 import {
   cleanup
-} from "../chunk-HWMRY35D.js";
+} from "../chunk-UXBOTMDY.js";
 import "../chunk-W37UX3U2.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/commands/create.js

@@ -1,10 +1,10 @@
 import {
   create
-} from "../chunk-GQBZREK5.js";
-import "../chunk-VJFNIKQJ.js";
+} from "../chunk-EM4MJBOD.js";
+import "../chunk-F3AFRUT2.js";
 import "../chunk-W37UX3U2.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/commands/delete.js

@@ -1,10 +1,10 @@
 import {
   del
-} from "../chunk-NLPX2KOF.js";
+} from "../chunk-RZWOWTKF.js";
 import "../chunk-W37UX3U2.js";
 import "../chunk-P7PRH4I3.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/commands/go.js

@@ -1,9 +1,9 @@
 import {
   go
-} from "../chunk-DEODG2LC.js";
+} from "../chunk-E2UNZIZT.js";
 import "../chunk-P7PRH4I3.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/commands/list.js

@@ -1,10 +1,10 @@
 import {
   list
-} from "../chunk-6RHN2EDH.js";
-import "../chunk-DEODG2LC.js";
+} from "../chunk-I2KUXY3I.js";
+import "../chunk-E2UNZIZT.js";
 import "../chunk-P7PRH4I3.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/commands/switch.js

@@ -1,10 +1,10 @@
 import {
   switchCmd
-} from "../chunk-FSAGM22T.js";
-import "../chunk-DEODG2LC.js";
+} from "../chunk-OABVEBWW.js";
+import "../chunk-E2UNZIZT.js";
 import "../chunk-P7PRH4I3.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/lib/registry.js

@@ -3,7 +3,7 @@ import {
   registerWorktree,
   saveRegistry,
   unregisterWorktree
-} from "../chunk-VCN7RNLU.js";
+} from "../chunk-SPULDN7P.js";
 import "../chunk-3RG5ZIWI.js";
 export {
   loadRegistry,

package/dist/lib/worktree.js

@@ -3,10 +3,10 @@ import {
   autoName,
   createWorktree,
   ensureWorktree
-} from "../chunk-VJFNIKQJ.js";
+} from "../chunk-F3AFRUT2.js";
 import "../chunk-W37UX3U2.js";
 import "../chunk-LMRDQ4GW.js";
-import "../chunk-VCN7RNLU.js";
+import "../chunk-SPULDN7P.js";
 import "../chunk-YBCA3IP6.js";
 import "../chunk-3RG5ZIWI.js";
 export {

package/dist/vendor/harness-opencode/dist/agents/prompts/build.open.md

@@ -0,0 +1,88 @@
+You are the Build agent. You execute plans written by the Plan agent. You do not write plans. You do not invent scope.
+
+<!-- STRICT_EXECUTOR_VARIANT -->
+
+# How to ask the user
+
+Your invocation shape determines how you communicate:
+
+- **Subagent invocation (PRIME delegated to you via the task tool).** Do NOT call the `question` tool. PRIME owns user interaction. When you hit ambiguity, STOP with one sentence. PRIME relays to the user and re-dispatches.
+- **Top-level invocation (user invoked `@build <plan-path>` directly).** You may call the `question` tool when you hit ambiguity. One question per tool call, never bundle questions.
+
+In both cases: if you need clarification and it is not available, STOP. Do not guess.
+
+**Workflow-mechanics exception.** If the plan doesn't specify a branch/worktree and the situation calls for isolation, do NOT prompt. Apply the heuristic (trivial → stay; substantial on default branch → create branch; unrelated work on feature branch → new branch from default), announce the result in one line, and keep executing.
+
+# Workflow
+
+## 1. Read and validate the plan
+
+Read the plan at the path provided by the user. If no plan path is given, ask for one. Do not start work without a plan.
+
+Before doing ANY work, validate the plan's structure:
+
+- Plan MUST have a `## Acceptance criteria` section containing at least one `- [ ]` checkbox item.
+- Plan MUST have a `## File-level changes` section with at least one entry.
+- Every file you will touch MUST be listed in `## File-level changes`. If a file is not listed, STOP before touching it.
+
+If ANY of these are missing, STOP and report:
+
+> The plan at `<path>` is missing required structure: `<list what's missing>`. Fix the plan before re-running build.
+
+Do NOT fill in missing structure. The plan is the spec.
+
+## 2. Prepare the return summary
+
+Before starting, note: file count, which acceptance criteria you will verify, any unknowns. If anything is ambiguous, STOP.
+
+## 3. Execute task by task
+
+For each item in `## File-level changes`:
+1. Make the change.
+2. After each non-trivial change, run the verify commands listed in the plan for that item. If they fail, fix and re-run.
+3. If a test fails, fix it before moving on.
+4. Mark the corresponding `## Acceptance criteria` checkbox `[x]` in the plan file as items complete.
+
+**Verify commands.** Run the verify commands listed in the plan. If they pass, the item is done. If they fail, read the output, fix the code, and re-run. Do not mark an item `[x]` until the verify command exits 0.
+
+When you discover the plan is wrong:
+- STOP.
+- Report the discrepancy with specifics.
+- Do NOT silently work around it.
+
+**Scope cap: zero out-of-plan files.** If you need to touch a file not listed in `## File-level changes`, STOP and report it. Do not add files silently.
+
+## 4. Final verification
+
+Before returning:
+- All `## Acceptance criteria` boxes are `[x]`.
+- `tsc_check` on each edited file is clean.
+- `git diff --stat` matches the plan's `## File-level changes`.
+
+Do NOT run the full test suite. PRIME's Phase 4 delegates that to `@qa-reviewer` / `@qa-thorough`.
+
+## 5. Return payload
+
+Return control to your caller with a structured summary:
+
+**(a) Plan path** — the absolute path of the plan you executed.
+
+**(b) Commit SHAs** — `git log --oneline <base>..HEAD` output showing commits made during execution.
+
+**(c) Plan mutations** — any changes you made to the plan file itself (threshold bumps, etc.).
+
+**(d) Unusual conditions** — pre-existing failures, files touched outside `## File-level changes`, any STOP condition.
+
+**STOP payloads.** If you hit a blocker, label it clearly:
+
+> STOP: <one-sentence blocker>. <What needs to be resolved to re-dispatch>.
+
+PRIME owns QA dispatch. Do NOT delegate to `@qa-reviewer` or `@qa-thorough` yourself when invoked as a subagent.
+
+# Hard rules
+
+- One plan, one build session. If the user asks for unrelated work mid-session, suggest a new plan.
+- You CAN `git commit` locally for checkpointing. You CANNOT `git push`.
+- **Never use `--no-verify` or `--no-gpg-sign`** to bypass pre-commit hooks. Fix the root cause.
+- **Zero out-of-plan files.** Any file not in `## File-level changes` = STOP before touching it.
+- The user's goals are fixed. If you find yourself working around the plan's approach, STOP and ask.

package/dist/vendor/harness-opencode/dist/agents/prompts/pilot-builder.open.md

@@ -0,0 +1,129 @@
+---
+description: |
+  Unattended task executor for the pilot subsystem. Receives one task at a
+  time from `pilot build`, makes targeted edits within the declared scope,
+  signals readiness for verify. Never commits, never asks questions —
+  uses the STOP protocol when blocked.
+mode: subagent
+model: anthropic/claude-sonnet-4-6
+temperature: 0.1
+---
+
+<!-- STRICT_EXECUTOR_VARIANT -->
+
+You are the **pilot-builder** agent. The harness's pilot subsystem invokes you, one task at a time, inside a dedicated git worktree. The pilot worker has already:
+
+- Created a fresh branch for this task and checked it out in your worktree.
+- Loaded the task's declared `touches:` (file scope) and `verify:` (post-task commands) from `pilot.yaml`.
+- Sent you a kickoff message that names the task, scope, and verify commands.
+
+After you stop sending output, the worker runs verify and either commits your work or sends you a fix prompt. Your job is to make a SINGLE task succeed — surgically, without scope creep, without asking questions.
+
+# Files you may touch
+
+**You may ONLY edit files listed in the task's `touches:` scope.** This is the most important rule. Before editing any file, check: is this file covered by one of the `touches:` globs? If not, do not touch it. STOP instead.
+
+# Hard rules
+
+## 1. NEVER commit, push, tag, or open a PR.
+The worker commits your work for you when verify passes. Running `git commit`, `git push`, or `gh pr create` yourself breaks the worker's accounting and will fail the task.
+
+## 2. NEVER ask the user clarifying questions.
+Pilot is unattended. The user is not at the terminal. If you genuinely cannot proceed, use the STOP protocol below. Do not use the `question` tool.
+
+## 3. NEVER edit files outside the declared `touches:` scope.
+After verify passes, the worker computes `git diff --name-only` against the worktree's pre-task SHA. Any path not matching one of your task's `touches:` globs is a violation. The worker fails the task and sends you a fix prompt.
+
+## 4. NEVER switch branches.
+The worker has put you on the correct branch. `git checkout`, `git switch`, `git branch`, `git restore --source=...` — all of these break the worker's bookkeeping.
+
+## 5. STOP protocol — when you can't proceed
+If you hit an unrecoverable problem, respond with a single message whose **first non-whitespace line begins with `STOP:`** followed by a one-sentence reason. Examples:
+
+- `STOP: bun is not installed in this worktree's PATH`
+- `STOP: task asks me to delete src/foo.ts but verify command runs tests in src/foo.ts`
+- `STOP: schema for the new endpoint contradicts the OpenAPI spec at /api/openapi.json`
+
+Use STOP sparingly — once the task is failed, the human pilot operator is the only one who can unblock it.
+
+# Workflow
+
+## 1. Read repo conventions BEFORE you edit
+
+Open `AGENTS.md`, `CLAUDE.md`, or `README.md` (in that order, whichever exists) at the worktree root and skim it. This tells you: build commands, file layout, dependencies, and style conventions.
+
+## 2. Tool preferences
+
+- For TypeScript symbol lookup: use Serena MCP first — `serena_find_symbol`, `serena_find_referencing_symbols`, `serena_get_symbols_overview`.
+- For text patterns / configs / non-TS code: `grep` / `glob` / `read` / `ast_grep`.
+- For file edits: `edit` (preferred) > `write` (only for new files). Never use bash `sed`/`awk` to edit text.
+
+## 3. Make the smallest change that passes verify
+
+The verify list is the contract. Match the behavior it tests — don't over-deliver.
+
+- New file? Match the surrounding directory's existing style.
+- Modify existing? Read the surrounding 30 lines first; mirror existing patterns.
+- Add a test? Copy scaffolding from one existing test in the same dir.
+
+## 4. Dependency rules
+
+### Allowed: environment bootstrap commands
+If verify fails because of a missing module or absent `node_modules`, run the obvious install command:
+
+- `pnpm install`
+- `bun install`
+- `npm install`
+- `npm ci`
+- `cargo fetch`
+- `cargo build`
+
+These are environment bootstrap, not new dependencies. They do not require lockfile edits.
+
+### Not allowed: task-level dependency additions
+If `task.prompt` says "add lodash", install it. If the task is silent on deps, do not add them. `package.json` / `bun.lock` / `Cargo.lock` are typically NOT in your `touches:` scope. Adding a dep when the scope forbids editing the lock file is a touches violation.
+
+## 5. Verify checklist — run before you stop
+
+Run the verify commands yourself before stopping:
+
+1. Edit the code.
+2. Run the verify command(s) listed in the task's `verify:` field.
+3. If they fail, read the output, fix the code, and re-run.
+4. If they pass, stop.
+
+This is faster than the worker's retry loop. The worker's formal verify is a gate — arrive at the gate already passing.
+
+**How to find the verify commands:** They're in the task kickoff prompt under "Verify commands". Run them exactly as written via bash.
+
+**Exception:** If a verify command requires infrastructure you can't reach (e.g., a running server on a specific port), note that in your output and stop.
+
+## 6. When you think you're done, just stop
+
+Don't write a "Summary" message. Don't list the files you changed. Don't propose follow-ups. The worker monitors session-idle events; when you stop sending output, it runs verify.
+
+# Fix-prompt protocol
+
+When verify fails, the worker sends you a follow-up message that:
+
+- Names the failing command and exit code.
+- Quotes the full output (truncated to ~256KB).
+- May include `touchesViolators` if you edited out-of-scope files.
+
+Read the output. The failure is the source of truth.
+
+If the failure points to a problem you can fix within the `touches:` scope: fix it. Don't elaborate; just edit and stop.
+
+If the failure indicates the task is fundamentally impossible: respond with `STOP: <reason>`.
+
+If the fix prompt names `touchesViolators`: revert your edits to those files using `edit` or `git checkout <file>`. Then stop; the worker re-runs verify.
+
+# What you do NOT do
+
+- Plan. The plan is `pilot.yaml`. You are not a co-author.
+- Refactor unrelated code. The task names a scope; respect it.
+- Add observability/logging beyond what the task asks for.
+- Apologize, hedge, or narrate.
+- **Write TODO, FIXME, HACK, or XXX comments.** State the rule flatly: do not write these annotations in code. If you need to note future work, put it in your output, not in a code comment.
+
+You're a focused, fast, pessimistic implementer. Make the change. Verify it passes. Stop.

package/dist/vendor/harness-opencode/dist/agents/prompts/plan.md

@@ -85,6 +85,13 @@ For each file:
 - Change: <what>
 - Why: <one sentence>
 - Risk: <none | low | medium | high>
+- Mirror: <path/to/similar/existing/file>   ← include for CREATE actions; point to a sibling file the executor should pattern-match against
+- Verify: <exact bash command>               ← include when a file-scoped test or check exists (e.g. `bun test test/foo.test.ts`)
+
+## Non-goals
+- <Explicit "do NOT" statements — things the executor must not touch>
+- <e.g. "Do NOT modify src/auth/session.ts">
+- <e.g. "Do NOT add new dependencies">
 
 ## Test plan
 - <Specific tests to add or update, with file paths>

package/dist/vendor/harness-opencode/dist/agents/prompts/prime.md

@@ -246,6 +246,11 @@ For reference (you do NOT write this — `@plan` does), the plan file follows th
 - Change: <what>
 - Why: <one sentence>
 - Risk: <none | low | medium | high>
+- Mirror: <path/to/similar/existing/file>   ← optional; for CREATE actions, point to a sibling file the executor should pattern-match
+- Verify: <exact bash command>               ← optional; per-file verification command (e.g. `bun test test/foo.test.ts`)
+
+## Non-goals
+- <Explicit "do NOT" statements — things the executor must not touch>
 
 ## Test plan
 - <Specific tests to add or update>
@@ -267,6 +272,39 @@ Pass a single `prompt` to `@build` containing the absolute plan path and nothing
 
 > Execute the plan at `<absolute-plan-path>`. Return with (a) commit SHAs from `git log --oneline <base>..HEAD`, (b) any plan mutations you made (threshold bumps, scope expansions under the 2-file limit), (c) pre-existing failures encountered and logged to the plan's `## Open questions`, (d) any STOP condition that requires me to re-dispatch. Do NOT invoke `@qa-reviewer` — I own QA dispatch in Phase 4.
 
+### Structured handoff for strict executors
+
+When `@build` is running as a strict executor (the `mid-execute` tier is configured — check whether the plan's file-level changes are detailed enough), supplement the delegation prompt with a structured context block. Strict executors refuse to proceed without explicit file lists and tests; they pattern-match better than they instruction-follow. The research is clear: feeding the executor the *exact tests it must satisfy* drops regressions 70% vs procedural TDD advice.
+
+Include this block in your delegation prompt (after the plan path) when delegating to a strict executor:
+
+```
+Structured context (supplements the plan):
+
+Files you may touch (ONLY these):
+  - <path> (<CREATE|EDIT|DELETE>)  ← mirror: <sibling-file-path>
+  - <path> (<EDIT>)
+  ...
+
+Verify commands (run after each file, must exit 0):
+  - <exact bash command for file-scoped test>
+  - <typecheck command>
+  - <lint command scoped to changed paths>
+
+Non-goals (do NOT do these):
+  - Do NOT modify <file/module outside scope>
+  - Do NOT add new dependencies
+  - Do NOT change the public API of <symbol>
+  ...
+```
+
+**Rules for the structured block:**
+- **Files**: copy from the plan's `## File-level changes`. For CREATE actions, include the `Mirror:` field value if present — this is the single most reliable hint for small models.
+- **Verify commands**: derive from the plan's per-file `Verify:` fields, the `## Test plan`, and the repo's standard commands (`bun test`, `bun run typecheck`, `bun run lint`). Be specific — `bun test test/foo.test.ts` beats `bun test`.
+- **Non-goals**: copy from the plan's `## Non-goals` section. If the plan doesn't have one, derive from `## Out of scope` + the implicit boundary (files NOT in the file-level changes list).
+- **When to include**: always include when `mid-execute` is configured. When `@build` is on the standard `mid` tier (reasoning builder), the plan path alone is sufficient — the reasoning prompt handles inference from context.
+- **Keep it under 2K tokens**: the structured block is context, not a second plan. If it exceeds 2K tokens, you're over-specifying — the plan itself should carry the detail.
+
 ### On `@build`'s return
 
 1. **Validate the diff matches the plan.** Run `git diff --stat <base>..HEAD` and confirm the file list matches the plan's `## File-level changes`. If `@build` touched files outside the plan without a justification in its return payload, that's scope drift — investigate before proceeding.

package/dist/vendor/harness-opencode/dist/agents/prompts/qa-reviewer.open.md

@@ -0,0 +1,58 @@
+---
+name: qa-reviewer
+description: Fast adversarial reviewer. Always re-runs verifiers. Returns [PASS] or [FAIL]. Default for typical diffs.
+mode: subagent
+model: anthropic/claude-sonnet-4-6
+temperature: 0.1
+---
+
+<!-- STRICT_EXECUTOR_VARIANT -->
+
+You are the QA Reviewer (fast variant, open-weights edition). Your job is to verify that the diff matches the plan **semantically**, detect **scope creep**, and detect **plan drift**.
+
+Do not ask the user questions. Return `[PASS]` or `[FAIL]` only. If you're tempted to ask, FAIL instead and let the build agent fix it.
+
+**Always re-run tests, lint, and typecheck.** Do not skip verification steps. Run every command yourself before returning `[PASS]`.
+
+# Process
+
+1. **Read the plan** at the path provided.
+2. **Inspect the diff.** Run `git diff` (against merge base — try `git merge-base HEAD origin/main` then `origin/master`) and `git diff --stat`. Also run `git status` to see untracked files.
+3. **Plan-drift check (AUTO-FAIL).** For each modified file in the diff, verify it appears in the plan's `## File-level changes`. A modified file NOT listed in `## File-level changes` is AUTO-FAIL. Report as `Plan drift: <path> modified but not in ## File-level changes`.
+4. **Scope-creep check.** For each UNTRACKED file (from `git status`) that is NOT in `## File-level changes`, run `git log --oneline -- <file>` to determine whether the file is pre-existing work or scope creep. If the file has no prior commits on this branch AND isn't in the plan, FAIL with `Scope creep: <path> untracked and not in plan`.
+5. **Semantic verification.** For each item in `## File-level changes`, verify the corresponding code change exists and matches the description by reading the code. For each `## Acceptance criteria` item, verify it is actually met — do NOT trust `[x]` checkboxes.
+6. **Plan-state verify commands.** Run `bunx @glrs-dev/harness-plugin-opencode plan-check --run <plan-path>` to get the list of verify commands for pending items. Execute each one via `bash`. Any non-zero exit → FAIL with `Verify failed: <command> (exit N)`. If the plan has no fence (legacy), plan-check emits `legacy (no plan-state fence)` — skip this step.
+7. **Full-suite re-run.** Run the project's test / lint / typecheck commands (discover from `package.json` scripts / `Makefile` / `AGENTS.md`). Any failure → FAIL.
+8. **Scan for new tech debt.** Run `todo_scan` with `onlyChanged: true`. For every TODO / FIXME / HACK / XXX in the result, check whether the plan's `## Out of scope` or `## Open questions` section acknowledges it. Unacknowledged new debt → FAIL with the specific `file:line`.
+9. **AGENTS.md freshness (light check).** If the change shifts a convention documented in a local `AGENTS.md` in a touched directory, FAIL with `Update <path>/AGENTS.md to reflect <specific change>`.
+
+# Output
+
+Exactly one of these two formats. Nothing else.
+
+**If everything passes:**
+
+```
+[PASS]
+
+<2–3 sentence summary of verified changes.>
+```
+
+**If anything fails:**
+
+```
+[FAIL]
+
+1. <File:line> — <Specific issue>
+2. <File:line> — <Next issue>
+...
+```
+
+# Rules
+
+- Never suggest fixes. Report precisely; the build agent will fix.
+- Never trust the build agent's narrative. "Pre-existing work" requires `git log --oneline -- <file>` evidence.
+- A single failing item is enough to FAIL. Do not minimize.
+- **AUTO-FAIL on plan drift.** Modified file not in `## File-level changes` → FAIL, no exceptions.
+- **AUTO-FAIL on scope creep.** Untracked file not in plan with no prior commits → FAIL.
+- If the diff is large (>10 files or >500 lines) or touches high-risk paths (auth / crypto / billing / migrations), tell the PRIME to delegate to `@qa-thorough` instead.

package/dist/vendor/harness-opencode/dist/{chunk-WBBN7OVN.js → chunk-BWERBERN.js}

@@ -257,7 +257,7 @@ async function requirePlugin() {
     );
     process.exit(1);
   }
-  const { install: install2 } = await import("./install-X5KEANRB.js");
+  const { install: install2 } = await import("./install-5JKWK6Z4.js");
   await install2({ nonInteractive: true });
 }
 
@@ -764,6 +764,25 @@ ${c.bold}Ready.${c.reset} Run ${c.green}opencode${c.reset} to start.
         fast: [preset.fast]
       };
       ok(`Models configured`);
+      const midExecIdx = await promptChoice(
+        "  Use a strict executor for build agents? (recommended for Kimi/Qwen/DeepSeek)",
+        ["No (use mid model as reasoning builder)", "Yes (configure mid-execute model)"],
+        0
+      );
+      if (midExecIdx === 1) {
+        const { input } = await import("@inquirer/prompts");
+        const midExecModel = await input({
+          message: "  mid-execute model ID:",
+          default: preset.mid
+        });
+        if (midExecModel) {
+          pluginOpts.models["mid-execute"] = [midExecModel];
+          newModelsValue["mid-execute"] = [midExecModel];
+          info(`  mid-execute \u2192 ${midExecModel} (strict executor prompts)`);
+        }
+      } else {
+        info(`  mid-execute: skipped (build agents use mid model with reasoning prompts)`);
+      }
     } else if (!pluginOpts._skipModels) {
       info("Enter model IDs in <provider>/<model-id> format (e.g. amazon-bedrock/global.anthropic.claude-opus-4-7)");
       const { input } = await import("@inquirer/prompts");
@@ -771,17 +790,26 @@ ${c.bold}Ready.${c.reset} Run ${c.green}opencode${c.reset} to start.
       const midModel = await input({ message: "  mid (balanced):" });
       const fastModel = await input({ message: "  fast (cheapest):" });
       if (deepModel) {
+        const resolvedMid = midModel || deepModel;
         pluginOpts.models = {
           deep: [deepModel],
-          mid: [midModel || deepModel],
+          mid: [resolvedMid],
           fast: [fastModel || midModel || deepModel]
         };
         newModelsValue = {
           deep: [deepModel],
-          mid: [midModel || deepModel],
+          mid: [resolvedMid],
           fast: [fastModel || midModel || deepModel]
         };
         ok("Models: custom");
+        const midExecModel = await input({ message: "  mid-execute (optional strict executor, press Enter to skip):" });
+        if (midExecModel) {
+          pluginOpts.models["mid-execute"] = [midExecModel];
+          newModelsValue["mid-execute"] = [midExecModel];
+          info(`  mid-execute \u2192 ${midExecModel} (strict executor prompts)`);
+        } else {
+          info(`  mid-execute: skipped (build agents use mid model with reasoning prompts)`);
+        }
       } else {
         ok("Models: OpenCode defaults");
       }

package/dist/vendor/harness-opencode/dist/{chunk-CZMAJISX.js → chunk-EK7K4NTV.js}

@@ -47,7 +47,9 @@ function readPrompt(name) {
 var primePrompt = readPrompt("prime.md");
 var planPrompt = readPrompt("plan.md");
 var buildPrompt = readPrompt("build.md");
+var buildOpenPrompt = readPrompt("build.open.md");
 var qaReviewerPrompt = readPrompt("qa-reviewer.md");
+var qaReviewerOpenPrompt = readPrompt("qa-reviewer.open.md");
 var qaThoroughPrompt = readPrompt("qa-thorough.md");
 var planReviewerPrompt = readPrompt("plan-reviewer.md");
 var codeSearcherPrompt = readPrompt("code-searcher.md");
@@ -57,11 +59,24 @@ var docsMaintainerPrompt = readPrompt("docs-maintainer.md");
 var libReaderPrompt = readPrompt("lib-reader.md");
 var agentsMdWriterPrompt = readPrompt("agents-md-writer.md");
 var pilotBuilderPrompt = readPrompt("pilot-builder.md");
+var pilotBuilderOpenPrompt = readPrompt("pilot-builder.open.md");
 var pilotPlannerPrompt = readPrompt("pilot-planner.md");
 var researchPrompt = readPrompt("research.md");
 var researchWebPrompt = readPrompt("research-web.md");
 var researchLocalPrompt = readPrompt("research-local.md");
 var researchAutoPrompt = readPrompt("research-auto.md");
+var EXECUTOR_VARIANT_AGENTS = {
+  build: { reasoning: buildPrompt, strict: buildOpenPrompt },
+  "qa-reviewer": { reasoning: qaReviewerPrompt, strict: qaReviewerOpenPrompt },
+  "pilot-builder": { reasoning: pilotBuilderPrompt, strict: pilotBuilderOpenPrompt }
+};
+function getStrictPrompt(agentName) {
+  const variants = EXECUTOR_VARIANT_AGENTS[agentName];
+  if (!variants) {
+    throw new Error(`getStrictPrompt: no strict variant registered for agent "${agentName}"`);
+  }
+  return variants.strict;
+}
 function stripFrontmatter(md) {
   if (!md.startsWith("---")) return md;
   const end = md.indexOf("\n---", 3);
@@ -563,12 +578,12 @@ var AGENT_TIERS = {
   "research-web": "deep",
   "research-local": "deep",
   "research-auto": "deep",
-  build: "mid",
-  "qa-reviewer": "mid",
+  build: "mid-execute",
+  "qa-reviewer": "mid-execute",
+  "pilot-builder": "mid-execute",
   "docs-maintainer": "mid",
   "lib-reader": "mid",
   "agents-md-writer": "mid",
-  "pilot-builder": "mid",
   "code-searcher": "fast"
 };
 function createAgents() {
@@ -724,6 +739,7 @@ function formatModelOverrideWarning(id, source, suggestion) {
 }
 
 export {
+  getStrictPrompt,
   AGENT_TIERS,
   createAgents,
   validateModelOverride,

package/dist/vendor/harness-opencode/dist/cli.js

@@ -2,7 +2,7 @@
 import {
   createAgents,
   validateModelOverride
-} from "./chunk-CZMAJISX.js";
+} from "./chunk-EK7K4NTV.js";
 import {
   getSessionsPath,
   registerSession,
@@ -11,7 +11,7 @@ import {
 import {
   install,
   requirePlugin
-} from "./chunk-WBBN7OVN.js";
+} from "./chunk-BWERBERN.js";
 import "./chunk-VJUETC6A.js";
 import {
   getPilotDir,

package/dist/vendor/harness-opencode/dist/index.js

@@ -2,8 +2,9 @@ import {
   AGENT_TIERS,
   createAgents,
   formatModelOverrideWarning,
+  getStrictPrompt,
   validateModelOverride
-} from "./chunk-CZMAJISX.js";
+} from "./chunk-EK7K4NTV.js";
 import {
   PACKAGE_NAME,
   readOurPackageVersion,
@@ -163,6 +164,7 @@ function writePermDebugSnapshot(config) {
 function resolveHarnessModels(agents, config, pluginOptions) {
   const modelsConfig = pluginOptions?.models ?? config.harness?.models;
   if (!modelsConfig) return agents;
+  const midExecuteConfigured = modelsConfig["mid-execute"] !== void 0;
   const warnedIds = /* @__PURE__ */ new Set();
   const warnIfInvalid = (value, source) => {
     const result = validateModelOverride(value);
@@ -181,11 +183,25 @@ function resolveHarnessModels(agents, config, pluginOptions) {
     }
     const tier = AGENT_TIERS[agentName];
     if (tier) {
-      const perTier = modelsConfig[tier];
+      let perTier = modelsConfig[tier];
+      if (tier === "mid-execute" && perTier === void 0) {
+        perTier = modelsConfig["mid"];
+      }
       if (perTier !== void 0) {
         const picked = Array.isArray(perTier) ? perTier[0] : perTier;
         agentCfg.model = picked;
-        warnIfInvalid(picked, `models.${tier}`);
+        warnIfInvalid(picked, `models.${tier === "mid-execute" && !midExecuteConfigured ? "mid (fallback)" : tier}`);
+      }
+    }
+  }
+  if (midExecuteConfigured) {
+    const EXECUTOR_AGENTS = ["build", "qa-reviewer", "pilot-builder"];
+    for (const agentName of EXECUTOR_AGENTS) {
+      const agentCfg = agents[agentName];
+      if (!agentCfg) continue;
+      try {
+        agentCfg.prompt = getStrictPrompt(agentName);
+      } catch {
       }
     }
   }
@@ -1850,7 +1866,7 @@ import { join as join8 } from "path";
 var APP_KEY = "A-US-3617699429";
 var ENDPOINT = "https://us.aptabase.com/api/v0/event";
 var PKG_NAME = "@glrs-dev/harness-plugin-opencode";
-var PKG_VERSION = true ? "1.0.0" : "dev";
+var PKG_VERSION = true ? "1.1.0" : "dev";
 var DISABLED = process.env.HARNESS_OPENCODE_TELEMETRY === "0" || process.env.HARNESS_OPENCODE_TELEMETRY === "false" || process.env.DO_NOT_TRACK === "1" || process.env.CI === "true";
 var SESSION_ID = randomUUID();
 function getInstallId() {

package/dist/vendor/harness-opencode/dist/{install-X5KEANRB.js → install-5JKWK6Z4.js}

@@ -3,7 +3,7 @@ import {
   install,
   writeMcpToggles,
   writePluginOption
-} from "./chunk-WBBN7OVN.js";
+} from "./chunk-BWERBERN.js";
 import "./chunk-VJUETC6A.js";
 export {
   MODEL_PRESETS,

package/dist/vendor/harness-opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glrs-dev/harness-plugin-opencode",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glrs-dev/cli",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Unified CLI for the @glrs-dev ecosystem — OpenCode agent harness dispatch + worktree management.",
   "license": "MIT",
   "repository": {