@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/apply/generate-codex-config.js

@@ -46,15 +46,14 @@ const HEADER = [
     "# Operator-owned settings (model, auth, sandbox profile, MCP servers)",
     "# stay in your own config; harness owns hook wiring only.",
     "#",
-    "# Wire format the tool-event adapter scripts expect on stdin (per",
-    '# docs/policy-packs/understanding-before-execution.md "Adapter notes /',
-    '# Codex"):',
+    "# Wire format a hook command reads on stdin: the tool-event JSON Codex sends,",
+    "# for example:",
     "#",
-    "#   { session_id?: string, tool_name?: string, raw_input?: any, event?: string }",
+    "#   { hook_event_name?: string, session_id?: string, tool_name?: string,",
+    "#     tool_input?: any, cwd?: string }",
     "#",
     "# PreToolUse blocker exit-code contract: 0 = allow, 2 = block (with reason",
-    "# on stderr). UserPromptSubmit emits developer-context instructions on stdout",
-    "# whenever Codex invokes that event; it does not inspect stdin to suppress turns.",
+    "# on stderr).",
     "",
 ].join("\n");
 // Control-character regex covering U+0000..U+001F + U+007F. Constructed
@@ -91,48 +90,13 @@ function escapeTomlString(s) {
 function tomlString(s) {
     return `"${escapeTomlString(s)}"`;
 }
-function eventKey(event) {
-    // Codex 0.131.0's TOML schema uses protocol event names as table
-    // keys (for example [[hooks.PreToolUse]]), not the legacy lower-snake
-    // names harness emitted in the first Codex adapter. Unknown events
-    // pass through unchanged so future schema additions are not dropped.
-    switch (event) {
-        case "UserPromptSubmit":
-            return "UserPromptSubmit";
-        case "PreToolUse":
-            return "PreToolUse";
-        case "Stop":
-            return "Stop";
-        case "PostToolUse":
-            return "PostToolUse";
-        case "SessionStart":
-            return "SessionStart";
-        default:
-            return event;
-    }
-}
-// Hook names safe to splice into the emitted command literal as
-// `--hook <name>`. Restricted to a quote/space/metachar-free charset so
-// the projection never produces a shell-broken command, even though the
-// underlying `Hook.name` schema (z.string().min(1)) accepts anything.
-// All policy-pack hook names ship within this charset; an exotic name
-// silently skips the flag and falls back to the un-tagged emission, with
-// the preceding `# harness hook: <name>` TOML comment still naming it.
-const SAFE_HOOK_NAME_RE = /^[A-Za-z0-9._:-]+$/;
-function commandWithHookTag(h) {
-    if (h.command.trim() !== "harness policy intercept")
-        return h.command;
-    if (!SAFE_HOOK_NAME_RE.test(h.name))
-        return h.command;
-    return `${h.command} --hook ${h.name}`;
-}
 function emitCommandHook(h) {
     const fields = [
         `type = "command"`,
-        `command = ${tomlString(commandWithHookTag(h))}`,
+        `command = ${tomlString(h.command)}`,
         // Shared with generate-settings.ts's Claude Code projection
         // (`hookTimeoutSeconds`) so the two runtime projections cannot diverge
-        // on the ms->seconds conversion or the policy-intercept floor again.
+        // on the ms->seconds conversion again.
         `timeout = ${hookTimeoutSeconds(h)}`,
     ];
     return `{ ${fields.join(", ")} }`;
@@ -143,7 +107,9 @@ function tomlCommentText(s) {
 function emitHook(h) {
     const lines = [];
     lines.push(`# harness hook: ${tomlCommentText(h.name)} (budget_ms=${h.budget_ms})`);
-    lines.push(`[[hooks.${eventKey(h.event)}]]`);
+    // Codex 0.131.0's TOML schema uses the protocol event names as table
+    // keys (e.g. [[hooks.PreToolUse]]), so the manifest event is emitted as is.
+    lines.push(`[[hooks.${h.event}]]`);
     if (h.match !== undefined) {
         lines.push(`matcher = ${tomlString(expandCodexHookMatchPattern(h.match))}`);
     }
@@ -164,20 +130,6 @@ export function generateCodexConfig(manifest) {
             return a.event < b.event ? -1 : 1;
         return a.command < b.command ? -1 : a.command > b.command ? 1 : 0;
     });
-    // Surface a warning for hook entries that carry path_match / bash_match
-    // filters; we do not project those into the emitted TOML (the harness
-    // schema treats them as documentation that the underlying script
-    // enforces internally, identical to the Claude Code projection in
-    // generate-settings.ts). The warning makes the silent-drop visible
-    // to operators who might expect TOML-level filtering.
-    for (const h of hooks) {
-        if (h.path_match !== undefined) {
-            warnings.push(`hook ${JSON.stringify(h.name)}: path_match is not projected into Codex config (script-side filter only)`);
-        }
-        if (h.bash_match !== undefined) {
-            warnings.push(`hook ${JSON.stringify(h.name)}: bash_match is not projected into Codex config (script-side filter only)`);
-        }
-    }
     if (hooks.length === 0) {
         warnings.push("manifest contributes no hooks; the emitted Codex config has no [[hooks.*]] entries");
     }

package/dist/cli/apply/generate-codex-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-codex-config.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-codex-config.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,yEAAyE;AACzE,sCAAsC;AACtC,mEAAmE;AACnE,qEAAqE;AACrE,uEAAuE;AACvE,EAAE;AACF,gDAAgD;AAChD,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,wEAAwE;AACxE,kBAAkB;AAClB,oDAAoD;AACpD,4DAA4D;AAC5D,EAAE;AACF,kCAAkC;AAClC,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,uDAAuD;AACvD,qEAAqE;AACrE,qEAAqE;AACrE,2CAA2C;AAG3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAOnF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,+CAA+C,CAAC;AAElD,MAAM,MAAM,GAAG;IACb,2BAA2B;IAC3B,sEAAsE;IACtE,GAAG;IACH,2CAA2C;IAC3C,6CAA6C;IAC7C,GAAG;IACH,sEAAsE;IACtE,uEAAuE;IACvE,2DAA2D;IAC3D,GAAG;IACH,mEAAmE;IACnE,wEAAwE;IACxE,YAAY;IACZ,GAAG;IACH,kFAAkF;IAClF,GAAG;IACH,4EAA4E;IAC5E,+EAA+E;IAC/E,mFAAmF;IACnF,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,wEAAwE;AACxE,oEAAoE;AACpE,uDAAuD;AACvD,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;AAEpE,SAAS,gBAAgB,CAAC,CAAS;IACjC,iEAAiE;IACjE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,4BAA4B;IAC5B,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE;QACxC,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf;gBACE,OAAO,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,iEAAiE;IACjE,sEAAsE;IACtE,mEAAmE;IACnE,qEAAqE;IACrE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,kBAAkB;YACrB,OAAO,kBAAkB,CAAC;QAC5B,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAE/C,SAAS,kBAAkB,CAAC,CAAO;IACjC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,0BAA0B;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACtE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,CAAO;IAC9B,MAAM,MAAM,GAAG;QACb,kBAAkB;QAClB,aAAa,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE;QAChD,4DAA4D;QAC5D,uEAAuE;QACvE,qEAAqE;QACrE,aAAa,kBAAkB,CAAC,CAAC,CAAC,EAAE;KACrC,CAAC;IACF,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAO;IACvB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,wEAAwE;IACxE,sEAAsE;IACtE,iEAAiE;IACjE,kEAAkE;IAClE,mEAAmE;IACnE,sDAAsD;IACtD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,2EAA2E,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CACX,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,2EAA2E,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CACX,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"generate-codex-config.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-codex-config.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,yEAAyE;AACzE,sCAAsC;AACtC,mEAAmE;AACnE,qEAAqE;AACrE,uEAAuE;AACvE,EAAE;AACF,gDAAgD;AAChD,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,wEAAwE;AACxE,kBAAkB;AAClB,oDAAoD;AACpD,4DAA4D;AAC5D,EAAE;AACF,kCAAkC;AAClC,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,uDAAuD;AACvD,qEAAqE;AACrE,qEAAqE;AACrE,2CAA2C;AAG3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAOnF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,+CAA+C,CAAC;AAElD,MAAM,MAAM,GAAG;IACb,2BAA2B;IAC3B,sEAAsE;IACtE,GAAG;IACH,2CAA2C;IAC3C,6CAA6C;IAC7C,GAAG;IACH,sEAAsE;IACtE,uEAAuE;IACvE,2DAA2D;IAC3D,GAAG;IACH,+EAA+E;IAC/E,gBAAgB;IAChB,GAAG;IACH,0EAA0E;IAC1E,wCAAwC;IACxC,GAAG;IACH,4EAA4E;IAC5E,eAAe;IACf,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,wEAAwE;AACxE,oEAAoE;AACpE,uDAAuD;AACvD,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;AAEpE,SAAS,gBAAgB,CAAC,CAAS;IACjC,iEAAiE;IACjE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,4BAA4B;IAC5B,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE;QACxC,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf;gBACE,OAAO,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,CAAO;IAC9B,MAAM,MAAM,GAAG;QACb,kBAAkB;QAClB,aAAa,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACpC,4DAA4D;QAC5D,uEAAuE;QACvE,uCAAuC;QACvC,aAAa,kBAAkB,CAAC,CAAC,CAAC,EAAE;KACrC,CAAC;IACF,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAO;IACvB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;IACpF,qEAAqE;IACrE,4EAA4E;IAC5E,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CACX,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/cli/apply/generate-memory-index.js

@@ -1,7 +1,6 @@
 // Generate `harness.generated/MEMORY.md`: the index that lists every memory
 // file the router would surface, derived from `memory.directories[]`. Memory
-// markdown files themselves stay user-owned (per ROADMAP non-goals); only
-// the index is generated.
+// markdown files themselves stay user-owned; only the index is generated.
 //
 // Output format mirrors the canonical hand-curated MEMORY.md convention:
 //

package/dist/cli/apply/generate-memory-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-memory-index.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-memory-index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,0BAA0B;AAC1B,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,wCAAwC;AACxC,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,oBAAoB;AACpB,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,aAAa;AACb,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,aAAa;AAEb,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAqB1C,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,SAAS,UAAU,CAAC,CAAS,EAAE,OAAgB;IAC7C,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,IAAgC;IAEhC,IAAI,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAcD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3E,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAQ,QAA+B,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAChB,SAAiB,EACjB,QAAgB,EAChB,QAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,oCAAoC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,+CAA+C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChE,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;QACD,yEAAyE;QACzE,mEAAmE;QACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,+CAA+C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GACf,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,gEAAgE,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,QAAkB;IAC9D,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,mCAAmC,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,EAAE;QACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,oEAAoE;QACpE,sEAAsE;QACtE,mEAAmE;QACnE,2CAA2C;QAC3C,CAAC,CAAC,IAAI,KAAK,WAAW,CACzB;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,OAAmC,EAAE;IAErC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS,CAAC,oDAAoD;QACrF,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CACX,mDAAmD,IAAI,cAAc,KAAK,wCAAwC,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,gEAAgE;QAChE,qEAAqE;QACrE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}
+{"version":3,"file":"generate-memory-index.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-memory-index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,wCAAwC;AACxC,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,oBAAoB;AACpB,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,aAAa;AACb,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,aAAa;AAEb,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAqB1C,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,SAAS,UAAU,CAAC,CAAS,EAAE,OAAgB;IAC7C,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,IAAgC;IAEhC,IAAI,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAcD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3E,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAQ,QAA+B,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAChB,SAAiB,EACjB,QAAgB,EAChB,QAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,oCAAoC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,+CAA+C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChE,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;QACD,yEAAyE;QACzE,mEAAmE;QACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,+CAA+C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GACf,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,gEAAgE,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,QAAkB;IAC9D,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,mCAAmC,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,EAAE;QACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,oEAAoE;QACpE,sEAAsE;QACtE,mEAAmE;QACnE,2CAA2C;QAC3C,CAAC,CAAC,IAAI,KAAK,WAAW,CACzB;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,OAAmC,EAAE;IAErC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS,CAAC,oDAAoD;QACrF,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CACX,mDAAmD,IAAI,cAAc,KAAK,wCAAwC,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,gEAAgE;QAChE,qEAAqE;QACrE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/cli/apply/generate-opencode-config.d.ts

@@ -8,8 +8,8 @@ export interface OpencodeLocalMcpServer {
 /**
  * LOW-F4 (batch18 fix-round, task f34eb233 review): the marker projected
  * for a manifest `tools.mcp[]` entry declared `enabled: false`. See this
- * module's "enabled:false" header note for why a bare object -- no
- * `type`/`command` -- is emitted instead of omitting the key.
+ * module's "enabled:false" header note for why the key is not omitted
+ * and why a bare object (no `type`/`command`) is accepted.
  */
 export interface OpencodeDisabledMcpServer {
     enabled: false;
@@ -46,13 +46,5 @@ export interface GenerateOpencodeConfigExtras {
      * convention as `GenerateSettingsExtras.homeDir` in generate-settings.ts.
      */
     homeDir?: string;
-    /**
-     * Absolute `harness.generated/` directory for the manifest in use (task
-     * 03a917fd/H1b), threaded through to `projectSigningKeyEnv` exactly like
-     * `GenerateSettingsExtras.generatedDir` in generate-settings.ts. Same
-     * no-safe-default rule: omitting this yields NO
-     * `SOLUTION_VERDICT_SIGNING_KEY` projection rather than a guessed path.
-     */
-    generatedDir?: string;
 }
 export declare function generateOpencodeConfig(manifest: Manifest, extras?: GenerateOpencodeConfigExtras): OpencodeConfigResult;

package/dist/cli/apply/generate-opencode-config.js

@@ -1,111 +1,70 @@
-// Batch 18 / task f34eb233 -- opencode runtime adapter config generator.
+// Opencode runtime adapter config generator: `harness apply --runtime
+// opencode` (adapter shipped in task f34eb233). Writes
+// `harness.generated/opencode/opencode.json` instead of settings.json.
+// opencode MERGES multiple config sources by precedence (global
+// `~/.config/opencode/opencode.json`, `$OPENCODE_CONFIG`, a project
+// `opencode.json`, ...), and every one of those slots is operator-owned
+// or environment-selected, so this generator deliberately writes no
+// operator config: wiring the artefact in is an operator action (point
+// `$OPENCODE_CONFIG` at the generated file, or copy its `mcp` block
+// out). Those merge semantics drive the projection rules below.
 //
-// ADR-style adapter-mapping notes (verified 2026-08-18 against the
-// published opencode JSON Schema at https://opencode.ai/config.json, the
-// docs at https://opencode.ai/docs/config/ and https://opencode.ai/docs/plugins/,
-// and the real ~/.config/opencode/opencode.json + opencode.jsonc this
-// exploration ran against as a read-only reference; not modified by this
-// generator or by `harness apply`):
+// Projected: `$schema` (the published opencode config schema URL) and
+// `mcp`, built from `manifest.tools.mcp[]` via generate-settings.ts's
+// `buildDesiredMcpServers` (the single choke point the Claude Code and
+// Codex projections share, covering the grounding-mcp env projection
+// and the literal-tilde warning) and reshaped into opencode's native
+// `{type: "local", command, environment}` entries.
 //
-// Config location: opencode reads config from, in merge/precedence order
-// (later sources win, but every source is MERGED, not replaced):
-//   1. remote config from a `.well-known/opencode` endpoint
-//   2. global config: `~/.config/opencode/opencode.json`
-//   3. custom config: `$OPENCODE_CONFIG` (a path)
-//   4. project config: `opencode.json` in the project root
-//   5. `.opencode/` directories (agents, commands, plugins)
-//   6. inline config: `$OPENCODE_CONFIG_CONTENT`
-//   7. OS-managed config (macOS `/Library/Application Support/opencode/`,
-//      Linux `/etc/opencode/`, Windows `%ProgramData%\opencode`)
-// Every one of those slots is either operator-owned or environment/OS
-// selected; opencode does not auto-discover an extra "drop a file here"
-// directory the way a plugin/pack system might. That is exactly why this
-// generator does not attempt to install itself into any of them -- see
-// "What we deliberately do NOT do" below.
+// enabled:false -> a `tools.mcp[]` entry declared `enabled: false` is
+// emitted as a bare `{"enabled": false}` marker, NOT omitted: because
+// opencode merges config sources, an omitted key would not override an
+// active declaration for the same server name in another merged source
+// (e.g. the operator's own `~/.config/opencode/opencode.json`), while
+// the explicit marker makes the disablement actually win once merged.
+// opencode accepts the bare marker without `type` or `command`.
 //
-// mcp -> PROJECTED. opencode's config.json has a native `mcp` block
-// ($defs.McpLocalConfig in the published schema: `{ type: "local",
-// command: string[], cwd?, environment?: Record<string,string>,
-// enabled?, timeout? }`). We reuse generate-settings.ts's
-// `buildDesiredMcpServers` (Claude Code's `{command, args, env}` shape,
-// already covering the grounding-mcp EVIDENCE_LEDGER_DB and
-// SOLUTION_VERDICT_SIGNING_KEY projections and the literal-tilde
-// env-value warning) and reshape the
-// result into opencode's `{type: "local", command: [...], environment}`
-// instead of hand-rolling a third copy of that logic that could drift
-// from the other two runtimes.
-//
-// enabled:false -> projected as a bare `{"enabled": false}` marker, NOT
-// omitted (LOW-F4, batch18 fix-round, task f34eb233 review; the
-// reviewer verified live against opencode 1.18.18 that a bare
-// `{"enabled": false}` entry -- no `type`/`command` -- is accepted).
-// `buildMcpServers` drops disabled entries entirely, which is fine for
-// Claude Code's settings.json (the only mcpServers source Claude Code
-// reads, so a dropped entry is equivalent to a disabled one) but wrong
-// for opencode: per the "Config location" list above, opencode MERGES
-// multiple config sources, so a server name this generator's output
-// simply omits does NOT override an `enabled: true` (or default-
-// enabled) declaration for the SAME name in another merged source
-// (e.g. the operator's own ~/.config/opencode/opencode.json) -- the
-// operator's intent to disable that server would silently not take
-// effect. Emitting the explicit marker instead makes the disablement
-// actually win once merged.
-//
-// hooks -> NOT PROJECTED (documented no-op, not a bug). opencode.json's
-// schema has NO declarative hook/event field of any kind (confirmed:
-// absent from https://opencode.ai/config.json). opencode's only
-// extensibility surface for tool-call interception is the JS/TS
-// `plugin` array (`@opencode-ai/plugin`; its event set includes
-// `tool.execute.before` / `tool.execute.after`, `session.*`,
-// `permission.asked`, ...) -- a code-authoring surface, not a
-// config-declared shell-command list like Claude Code's settings.json
-// `hooks` or Codex's `[[hooks.*]]` TOML. Building a harness -> opencode
-// plugin bridge that would let manifest hooks actually intercept tool
-// calls is explicitly out of this task's scope (opencode policy
-// enforcement / hook interception). So `manifest.hooks[]` and the
-// `memory.router` UserPromptSubmit-equivalent projection
-// (`generate-settings.ts#buildMemoryRouterHook`) are both left
-// unprojected here; a warning says so instead of silently dropping them.
-//
-// permission -> NOT PROJECTED (v1; documented follow-up). opencode does
-// have a native `permission` block (per-tool `ask`/`allow`/`deny`, with
-// a pattern-keyed object as an escape hatch) that is a genuine
-// PreToolUse-blocking equivalent -- but its shape (tool key -> pattern
-// -> action) is structurally inverted from the
-// `permissions.{allow,ask,deny}: string[]` pattern-DSL that
-// `policy_packs`' `packPermissions` already produce for Claude Code, and
-// mapping one into the other is real, untested-by-this-task translation
-// work. `generate-codex-config.ts`'s header deferred the analogous
-// Codex sandbox-profile mapping for the same "keep v1 small" reason;
-// this adapter follows that precedent instead of inventing a rushed
-// pattern translator. `apply.ts` surfaces a warning (mirroring the
-// Codex branch) when a manifest actually contributes permissions here,
-// so the gap stays visible instead of silent.
+// NOT projected (hooks print a warning when present; `memory.router` is
+// projected nowhere and prints no warning; permission has no manifest
+// source, so nothing is warned or dropped):
+//   - hooks: `manifest.hooks[]` and the `memory.router`
+//     UserPromptSubmit-equivalent projection
+//     (`generate-settings.ts#buildMemoryRouterHook`). opencode.json has
+//     no declarative hook/event field; its only tool-call interception
+//     surface is the JS/TS `plugin` array (a code-authoring surface),
+//     and a harness -> opencode plugin bridge is out of scope.
+//   - permission: opencode's native `permission` block (per-tool
+//     `ask`/`allow`/`deny`) is a genuine PreToolUse-blocking
+//     equivalent, but its tool -> pattern -> action shape is
+//     structurally inverted from the `permissions.{allow,ask,deny}`
+//     pattern DSL of Claude Code's settings.json, and mapping one into
+//     the other is real, untested work. `generate-codex-config.ts`'s
+//     header deferred the analogous Codex sandbox-profile mapping for
+//     the same "keep v1 small" reason; this adapter follows that
+//     precedent. No builtin pack contributes permissions, so nothing is
+//     dropped silently.
 //
 // Stable-output rules (load-bearing for byte-equivalent regeneration on
-// a no-op apply):
-//   - `mcp` server keys are in the order `buildMcpServers` already
-//     guarantees: ascending lexical by name.
-//   - No timestamps, hostnames, or other run-specific data.
+// a no-op apply): `mcp` server keys are ascending lexical by name, and
+// no timestamps, hostnames, or other run-specific data are emitted.
 //
-// What we deliberately do NOT do:
-//   - Merge into, or otherwise write, any operator-owned opencode config
-//     file (`~/.config/opencode/opencode.json`, a project `opencode.json`,
-//     or anything `$OPENCODE_CONFIG` points at). Unlike Codex's
-//     `--install` (a marked-block splice into `~/.codex/config.toml`),
-//     opencode already merges multiple config sources by precedence (see
-//     the location list above), and its config format is JSONC --
-//     comments and trailing commas are both allowed (the published
-//     schema sets `allowComments` / `allowTrailingCommas`), confirmed
-//     against the real machine-local `opencode.jsonc`. So wiring this
-//     artefact in is left as an operator action: point `$OPENCODE_CONFIG`
-//     at `harness.generated/opencode/opencode.json` directly, or copy the
-//     `mcp` block into an existing config. harness never touches
-//     `~/.config/opencode/` or a project `opencode.json` itself.
-//   - Map policy-pack hook commands into opencode plugin code (see
-//     "hooks" above) or opencode's `permission` block (see "permission"
-//     above).
+// What this generator deliberately does NOT do: merge into, or
+// otherwise write, any operator-owned opencode config (harness never
+// touches `~/.config/opencode/` or a project `opencode.json`; opencode
+// reads JSONC, which is why the emitted `//` banner is valid config),
+// and map hook commands into plugin code or
+// `permission` entries (see "NOT projected" above).
+//
+// Header contract: the generated file's first line is
+// `OPENCODE_GENERATED_HEADER_LINE`, the banner `harness doctor --target
+// opencode` recognises a harness-generated artefact by. The emitted
+// `HEADER` block and that constant are pinned bytes: change them only
+// together with doctor's banner check and the tests that pin them.
 import { buildDesiredMcpServers, } from "./generate-settings.js";
+/** Hooks named in the not-projected warning before it collapses to a count. */
+const MAX_NAMED_HOOKS = 3;
+/** Hook the branch-protection policy pack contributes. */
+const BRANCH_PROTECTION_HOOK_NAME = "policy-pack:branch-protection:pre-tool-use";
 /**
  * First line of the generated opencode config. Exported so callers that
  * need to detect a harness-generated artefact (doctor's banner check)
@@ -125,7 +84,7 @@ const HEADER = [
     "//     opencode.jsonc (opencode merges config sources by precedence;",
     "//     see https://opencode.ai/docs/config/).",
     "//",
-    "// Adapter mapping (full ADR in this generator's module header,",
+    "// Adapter mapping (rationale in this generator's module header,",
     "// src/cli/apply/generate-opencode-config.ts):",
     "//   mcp        -> projected below (opencode's native `mcp` block).",
     "//                 A manifest entry with `enabled: false` is emitted",
@@ -150,11 +109,10 @@ function toOpencodeMcpServer(server) {
 }
 export function generateOpencodeConfig(manifest, extras = {}) {
     // Claude Code's {command, args, env} shape already carries the
-    // grounding-mcp EVIDENCE_LEDGER_DB and SOLUTION_VERDICT_SIGNING_KEY
-    // projections plus the literal-tilde warning, via `buildDesiredMcpServers`
-    // (review round H1, Finding 2 -- the single choke point every producer of
-    // this shape now shares, instead of hand-rolling a third copy of the
-    // buildMcpServers/projectGroundingEnv/projectSigningKeyEnv sequence).
+    // grounding-mcp EVIDENCE_LEDGER_DB projection plus the literal-tilde
+    // warning, via `buildDesiredMcpServers` (the single choke point every
+    // producer of this shape shares, instead of hand-rolling a third copy of
+    // the buildMcpServers/projectGroundingEnv sequence).
     // `buildMcpServers` (inside the helper) returns keys pre-sorted ascending
     // by name (see its own header) AND drops `enabled: false` entries
     // entirely. That drop is correct for the Claude-Code-shaped intermediate
@@ -164,7 +122,6 @@ export function generateOpencodeConfig(manifest, extras = {}) {
     // review — see this module's "enabled:false" header note for why).
     const { mcp: claudeShapeMcp, warnings } = buildDesiredMcpServers(manifest, {
         homeDir: extras.homeDir,
-        generatedDir: extras.generatedDir,
     });
     // Built by iterating manifest.tools.mcp SORTED ascending by name (not
     // by re-using claudeShapeMcp's own key order, which only covers the
@@ -192,11 +149,15 @@ export function generateOpencodeConfig(manifest, extras = {}) {
         warnings.push("tools.mcp[] has entries but none produced a projectable opencode `mcp` entry (see the per-entry warnings above)");
     }
     if (manifest.hooks.length > 0) {
-        warnings.push(`manifest contributes ${manifest.hooks.length} hook(s); opencode has no declarative hook wiring (see this generator's header) and none were projected`);
-    }
-    const router = manifest.memory.router;
-    if (router && router.enabled !== false) {
-        warnings.push("memory.router is configured but not projected; opencode has no declarative UserPromptSubmit-equivalent (see this generator's header)");
+        const names = manifest.hooks.map((h) => h.name);
+        const shown = names.slice(0, MAX_NAMED_HOOKS).join(", ");
+        const more = names.length > MAX_NAMED_HOOKS
+            ? ` and ${names.length - MAX_NAMED_HOOKS} more`
+            : "";
+        const protectedBranchNote = names.includes(BRANCH_PROTECTION_HOOK_NAME)
+            ? "; edits on protected branches are NOT blocked under opencode"
+            : "";
+        warnings.push(`${names.length} hook(s) not projected (${shown}${more}): opencode has no declarative hook wiring, so they do not run under opencode${protectedBranchNote}`);
     }
     const config = {
         "$schema": "https://opencode.ai/config.json",

package/dist/cli/apply/generate-opencode-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-opencode-config.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-opencode-config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,mEAAmE;AACnE,yEAAyE;AACzE,kFAAkF;AAClF,sEAAsE;AACtE,yEAAyE;AACzE,oCAAoC;AACpC,EAAE;AACF,yEAAyE;AACzE,iEAAiE;AACjE,4DAA4D;AAC5D,yDAAyD;AACzD,kDAAkD;AAClD,2DAA2D;AAC3D,4DAA4D;AAC5D,iDAAiD;AACjD,0EAA0E;AAC1E,iEAAiE;AACjE,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,0CAA0C;AAC1C,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,gEAAgE;AAChE,0DAA0D;AAC1D,wEAAwE;AACxE,4DAA4D;AAC5D,iEAAiE;AACjE,qCAAqC;AACrC,wEAAwE;AACxE,sEAAsE;AACtE,+BAA+B;AAC/B,EAAE;AACF,wEAAwE;AACxE,gEAAgE;AAChE,8DAA8D;AAC9D,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,iEAAiE;AACjE,kEAAkE;AAClE,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,4BAA4B;AAC5B,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,6DAA6D;AAC7D,8DAA8D;AAC9D,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,gEAAgE;AAChE,kEAAkE;AAClE,yDAAyD;AACzD,+DAA+D;AAC/D,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,+DAA+D;AAC/D,uEAAuE;AACvE,+CAA+C;AAC/C,4DAA4D;AAC5D,yEAAyE;AACzE,wEAAwE;AACxE,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,uEAAuE;AACvE,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,kBAAkB;AAClB,mEAAmE;AACnE,6CAA6C;AAC7C,4DAA4D;AAC5D,EAAE;AACF,kCAAkC;AAClC,yEAAyE;AACzE,2EAA2E;AAC3E,gEAAgE;AAChE,uEAAuE;AACvE,yEAAyE;AACzE,kEAAkE;AAClE,mEAAmE;AACnE,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,iEAAiE;AACjE,iEAAiE;AACjE,mEAAmE;AACnE,wEAAwE;AACxE,cAAc;AAGd,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAsChC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,mDAAmD,CAAC;AAEtD,MAAM,MAAM,GAAG;IACb,8BAA8B;IAC9B,0EAA0E;IAC1E,IAAI;IACJ,wEAAwE;IACxE,oEAAoE;IACpE,sBAAsB;IACtB,uDAAuD;IACvD,mEAAmE;IACnE,sEAAsE;IACtE,+CAA+C;IAC/C,IAAI;IACJ,iEAAiE;IACjE,gDAAgD;IAChD,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,+DAA+D;IAC/D,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAoBb,SAAS,mBAAmB,CAAC,MAAyB;IACpD,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAC3E,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAkB,EAClB,SAAuC,EAAE;IAEzC,+DAA+D;IAC/D,oEAAoE;IACpE,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,sEAAsE;IACtE,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,QAAQ,EAAE;QACzE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IAEH,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,iEAAiE;QACjE,WAAW;QACX,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,6DAA6D;QAC7D,gEAAgE;QAChE,mEAAmE;QACnE,iDAAiD;QACjD,QAAQ,CAAC,IAAI,CACX,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACX,wBAAwB,QAAQ,CAAC,KAAK,CAAC,MAAM,yGAAyG,CACvJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CACX,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,SAAS,EAAE,iCAAiC;KAC7C,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IAErD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"generate-opencode-config.js","sourceRoot":"","sources":["../../../src/cli/apply/generate-opencode-config.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,uDAAuD;AACvD,uEAAuE;AACvE,gEAAgE;AAChE,oEAAoE;AACpE,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,gEAAgE;AAChE,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,mDAAmD;AACnD,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,4CAA4C;AAC5C,wDAAwD;AACxD,6CAA6C;AAC7C,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,+DAA+D;AAC/D,iEAAiE;AACjE,6DAA6D;AAC7D,6DAA6D;AAC7D,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,iEAAiE;AACjE,wEAAwE;AACxE,wBAAwB;AACxB,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,+DAA+D;AAC/D,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,4CAA4C;AAC5C,oDAAoD;AACpD,EAAE;AACF,sDAAsD;AACtD,wEAAwE;AACxE,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AAGnE,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,0DAA0D;AAC1D,MAAM,2BAA2B,GAAG,4CAA4C,CAAC;AAsCjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,mDAAmD,CAAC;AAEtD,MAAM,MAAM,GAAG;IACb,8BAA8B;IAC9B,0EAA0E;IAC1E,IAAI;IACJ,wEAAwE;IACxE,oEAAoE;IACpE,sBAAsB;IACtB,uDAAuD;IACvD,mEAAmE;IACnE,sEAAsE;IACtE,+CAA+C;IAC/C,IAAI;IACJ,kEAAkE;IAClE,gDAAgD;IAChD,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,uEAAuE;IACvE,+DAA+D;IAC/D,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAYb,SAAS,mBAAmB,CAAC,MAAyB;IACpD,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAC3E,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAkB,EAClB,SAAuC,EAAE;IAEzC,+DAA+D;IAC/D,qEAAqE;IACrE,sEAAsE;IACtE,yEAAyE;IACzE,qDAAqD;IACrD,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,QAAQ,EAAE;QACzE,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,iEAAiE;QACjE,WAAW;QACX,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,6DAA6D;QAC7D,gEAAgE;QAChE,mEAAmE;QACnE,iDAAiD;QACjD,QAAQ,CAAC,IAAI,CACX,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,GAAG,eAAe;YAC5B,CAAC,CAAC,QAAQ,KAAK,CAAC,MAAM,GAAG,eAAe,OAAO;YAC/C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,mBAAmB,GAAG,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACrE,CAAC,CAAC,8DAA8D;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,CAAC,IAAI,CACX,GAAG,KAAK,CAAC,MAAM,2BAA2B,KAAK,GAAG,IAAI,gFAAgF,mBAAmB,EAAE,CAC5J,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,SAAS,EAAE,iCAAiC;KAC7C,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IAErD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist/cli/apply/generate-settings.d.ts

@@ -4,8 +4,6 @@ export declare const DEFAULT_BUDGET_MS = 30000;
 export declare const GROUNDING_MCP_SERVER_NAME = "grounding-mcp";
 /** The env var grounding-mcp's ledger-bridge reads for the evidence-ledger DB path. */
 export declare const EVIDENCE_LEDGER_DB_ENV = "EVIDENCE_LEDGER_DB";
-/** The env var grounding-mcp (>= 0.8.0) reads for the harness's own approval-marker signing-key path. */
-export declare const SOLUTION_VERDICT_SIGNING_KEY_ENV = "SOLUTION_VERDICT_SIGNING_KEY";
 export interface SettingsHookCommand {
     type: "command";
     command: string;
@@ -20,14 +18,8 @@ export interface SettingsMcpServer {
     args?: string[];
     env?: Record<string, string>;
 }
-export interface SettingsPermissions {
-    allow?: string[];
-    ask?: string[];
-    deny?: string[];
-}
 export interface SettingsRoot {
     hooks: Record<string, SettingsHookGroup[]>;
-    permissions?: SettingsPermissions;
 }
 export interface GenerateSettingsResult {
     root: SettingsRoot;
@@ -35,9 +27,8 @@ export interface GenerateSettingsResult {
     /**
      * The manifest's `tools.mcp[]` entries translated into Claude Code's
      * server-spec shape (command/args/env) via `buildDesiredMcpServers` —
-     * INCLUDING both the grounding-mcp `EVIDENCE_LEDGER_DB`
-     * (`projectGroundingEnv`) and `SOLUTION_VERDICT_SIGNING_KEY`
-     * (`projectSigningKeyEnv`) projections. Deliberately NOT part of `root`
+     * INCLUDING the grounding-mcp `EVIDENCE_LEDGER_DB`
+     * (`projectGroundingEnv`) projection. Deliberately NOT part of `root`
      * and never serialized into settings.json (task
      * init-mcp-wiring-claude-code/T-002): Claude Code does not read the
      * settings.json `mcpServers` block at runtime — see
@@ -54,31 +45,12 @@ export interface GenerateSettingsResult {
     mcpServers: Record<string, SettingsMcpServer>;
 }
 export interface GenerateSettingsExtras {
-    /**
-     * Phase 6 #5 — pack-contributed permissions emitted into the
-     * settings.json `permissions` block. Empty buckets are dropped from
-     * the output so a no-op contribution doesn't pollute the JSON.
-     */
-    packPermissions?: SettingsPermissions;
     /**
      * Home directory used to expand `~/` in projected values (the
      * grounding evidence-ledger path). Defaults to `os.homedir()`;
      * injected by tests for determinism.
      */
     homeDir?: string;
-    /**
-     * The `harness.generated/` directory for the manifest in use (task
-     * 03a917fd/H1). Used only to project `SOLUTION_VERDICT_SIGNING_KEY` (see
-     * `projectSigningKeyEnv`) onto the grounding-mcp entry — the path to the
-     * harness's own `.approval-signing.key` (`signingKeyPathFor`). Unlike
-     * `homeDir` above there is no safe universal default: the generated dir
-     * depends on manifest-path resolution (a `--config` override changes
-     * it), so a caller that omits this gets NO projection rather than a
-     * guessed-wrong path. A relative value, or one carrying a literal `~`,
-     * is normalized to an absolute path at the projection boundary (review
-     * round H1, Finding 1) rather than rejected — see `projectSigningKeyEnv`.
-     */
-    generatedDir?: string;
 }
 export declare function generateSettings(manifest: Manifest): SettingsRoot;
 export declare function generateSettingsWithWarnings(manifest: Manifest, extras?: GenerateSettingsExtras): GenerateSettingsResult;
@@ -90,21 +62,9 @@ export declare function buildMcpServers(entries: McpServer[], warnings: string[]
  * round-trip stays drift-free by construction.
  */
 export declare function groundingLedgerEnvValue(manifest: Manifest, homeDir?: string): string;
-/**
- * The single source of the projected `SOLUTION_VERDICT_SIGNING_KEY` VALUE
- * (mirrors how `EVIDENCE_LEDGER_DB` shares its value): `expandHome` +
- * `path.resolve` on `generatedDir`, then `signingKeyPathFor`. Both the
- * apply-side projection above and the adopt-side mirror
- * (adopt/derive.ts) MUST call this, never `signingKeyPathFor` on a raw
- * `generatedDir` — otherwise apply and adopt disagree for relative or
- * literal-tilde `generatedDir` values and adopt reports phantom drift.
- */
-export declare function signingKeyEnvValue(generatedDir: string, homeDir?: string): string;
 export interface BuildDesiredMcpServersOptions {
-    /** Threaded to `projectGroundingEnv` and `projectSigningKeyEnv`'s tilde-expansion; defaults to `os.homedir()` (see `expandHome`). */
+    /** Threaded to `projectGroundingEnv`'s tilde-expansion; defaults to `os.homedir()` (see `expandHome`). */
     homeDir?: string;
-    /** Threaded to `projectSigningKeyEnv`; no safe default (see that function's doc). */
-    generatedDir?: string;
 }
 export interface DesiredMcpServersResult {
     mcp: Record<string, SettingsMcpServer>;
@@ -114,22 +74,13 @@ export interface DesiredMcpServersResult {
  * Single choke point for the manifest -> Claude-Code-shaped MCP
  * server-spec projection (review round H1, Finding 2 — STRUCTURAL fix).
  * Encapsulates the fixed sequence `buildMcpServers` -> `projectGroundingEnv`
- * -> `projectSigningKeyEnv` so every producer of this shape — `harness
- * apply`'s settings.json generation (this module), the init wizard's
- * `claude mcp` CLI wiring (`src/cli/init/interactive.ts`), the doctor
- * registration-health check (`src/cli/doctor/claude-mcp.ts`), and the
- * opencode config generator (`generate-opencode-config.ts`) — calls this
- * ONE function instead of hand-rolling the same three-call sequence.
- *
- * Before this helper existed, that sequence had to be wired into each
- * call site by hand: three of the four remembered to call
- * `projectSigningKeyEnv` when it was added (task 03a917fd/H1b), and
- * doctor's registration check did not, so its "not registered, run this
- * `claude mcp add-json ...`" hint silently omitted
- * `SOLUTION_VERDICT_SIGNING_KEY` (review round H1, Finding 2). Routing
- * every producer through this function means the NEXT projected env only
- * needs to be added here once, and cannot again reach only some of the
- * call sites.
+ * so every producer of this shape, `harness apply`'s settings.json
+ * generation (this module), the init wizard's `claude mcp` CLI wiring
+ * (`src/cli/init/interactive.ts`), the doctor registration-health check
+ * (`src/cli/doctor/claude-mcp.ts`), and the opencode config generator
+ * (`generate-opencode-config.ts`), calls this ONE function instead of
+ * hand-rolling the same sequence. A NEW projected env only needs to be
+ * added here once, and cannot reach only some of the call sites.
  */
 export declare function buildDesiredMcpServers(manifest: Manifest, opts?: BuildDesiredMcpServersOptions): DesiredMcpServersResult;
 export declare function buildMemoryRouterHook(manifest: Manifest): Hook | null;
@@ -154,10 +105,6 @@ export declare function computeHookFingerprint(command: string, timeout: Setting
  * helper is the single source of truth both projections now share so they
  * cannot diverge again.
  *
- * `Math.ceil` never rounds a budget down to 0s. The floor (2s for `harness
- * policy intercept`, 1s otherwise) matches Codex's existing floor rationale
- * (generate-codex-config.ts): the policy-intercept engine's own ledger
- * round-trip regularly needs slightly longer than a bare 1s floor would
- * allow.
+ * `Math.ceil` never rounds a budget down to 0s: every hook gets a 1s floor.
  */
 export declare function hookTimeoutSeconds(h: Hook): number;